# :android — status: source-complete, NOT compiled here

This module is the phone UI: a Compose chat screen (agent) and a server-admin
screen (SSH quick actions + custom commands), both driven by `:core` through
`CommandCenterViewModel`.

## Why it is not in the build

The build box has **no Android SDK** (no `ANDROID_HOME`, no platform
tooling), so `settings.gradle.kts` deliberately excludes `:android`.
Claiming it compiles here would be dishonest — it does not, and cannot,
until it runs under a real SDK.

## How to build it for real

1. Open `app/` in Android Studio (or set `ANDROID_HOME` on a machine with
   the SDK + `platforms;android-34`).
2. Add `include(":android")` to `settings.gradle.kts`.
3. Add to `gradle.properties` (or `local.properties`):
   `android.useAndroidX=true`
4. Sync and run — the module applies `com.android.application` and depends
   on `:core` like `:desktop` does.

## Before shipping to a phone

- **Secrets**: `MainActivity` currently calls `CommandCenterConfig.fromEnv()`
  as a placeholder. On device, store `APP_SECRET`, the Cloudflare service
  token, and the SSH key in **EncryptedSharedPreferences** (or the
  Keystore-backed equivalent) behind a settings screen — never in
  `BuildConfig`, never in plain prefs.
- **SSH key**: generate on-device or import via the system file picker;
  keep it out of app backups (`android:allowBackup="false"` for the key).
- **known_hosts**: ship a pinned entry for `ssh.yourdomain.com` (see the
  `SshClient` docs) and refuse to connect without it.