chore: sync 88 commits from Silo-Server/silo-android main - #25

Merged

JonahMMay merged 93 commits into

mainfrom

cursor/sync-silo-android-4f35

Jul 27, 2026

Commits on Jul 27, 2026

build(android): enforce verified dependency state
RXWatcher
committed
74308e4
build(android): pin native playback provenance
RXWatcher
committed
3937926
docs(android): map PR 108 supply-chain split
RXWatcher
committed
c8a08e1
build(android): verify release tool dependencies
RXWatcher
committed
e4ec588
docs(android): correct slice A traceability
RXWatcher
committed
19bf0dd
build(android): verify CI-injected dependencies
RXWatcher
committed
f90abc8
build(android): verify Android Guava CI metadata
RXWatcher
committed
801dcba
build(android): verify shared-test CI metadata
RXWatcher
committed
00affac
build(android): verify coroutines BOM metadata
RXWatcher
committed
0dea616
build(android): verify KSP Guava parent metadata
RXWatcher
committed
5a34a95
fix(network): centralize authenticated origin policy
RXWatcher
committed
4248364
fix(network): keep credentials on the silo origin
RXWatcher
committed
e8c030f
fix(auth): require consent before cleartext login
RXWatcher
committed
ccb8462
fix(reader): sanitize epub with parsed allowlist
RXWatcher
committed
07eb795
fix(reader): validate svg paint references
RXWatcher
committed
cb1d8a8
fix(reader): bound remote and archive content
RXWatcher
committed
003a7c7
fix(reader): isolate epub resources in webview
RXWatcher
committed
7acfebb
fix(reader): remount webview when source changes
RXWatcher
committed
8887716
fix(android): keep hardened epub paths compatible with API 24
RXWatcher
committed
aa7b837
build(android): resolve slice B dependency state
RXWatcher
committed
4e1c6be
docs(android): map PR 108 security split
RXWatcher
committed
25a0acb
fix(android): close auth and EPUB review gaps
RXWatcher
committed
aee8aa8
docs(android): record security review corrections
RXWatcher
committed
51d6276
fix(android): gate final cleartext credential destinations
RXWatcher
committed
e097ddd
fix(android): gate cleartext media redirects
RXWatcher
committed
90971b4
docs(android): restack slice B traceability
RXWatcher
committed
24b20aa
docs(android): advance slice B base trace
RXWatcher
committed
06a775a
docs(android): plan PR 108 Room and sync slice
RXWatcher
committed
ace3386
feat(android): migrate Room downloads to schema v8
RXWatcher
committed
4fb21b8
fix(android): scope and purge identity storage safely
RXWatcher
committed
e5991a5
fix(android): preserve scoped outbox ordering
RXWatcher
committed
51d90f9
docs(android): map PR 108 Room and sync slice
RXWatcher
committed
0767ca8
fix(android): close Room and identity cleanup races
RXWatcher
committed
de32548
fix(android): await worker and serialize identity purge
RXWatcher
committed
c75c86d
fix(android): keep JSON purge on lexical server entries
RXWatcher
committed
387f3ce
docs(android): plan PR 108 player foundation slice
RXWatcher
committed
93c0de3
perf(tv): isolate playback clock recomposition
RXWatcher
committed
072c61a
perf(tv): make playback exit non-blocking
RXWatcher
committed
676c6b8
fix(tv): keep remote seeks on live clock
RXWatcher
committed
d44a4f3
perf(android): isolate mobile playback clock
RXWatcher
committed
ec0f0dd
perf(android): make player teardown lifecycle safe
RXWatcher
committed
63c5db6
fix(android): preserve playback across recreation
RXWatcher
committed
8ae2a4b
fix(android): keep playback mounted across recreation
RXWatcher
committed
5ca6a48
fix(android): bind final playback writes to identity
RXWatcher
committed
cec1f7e
fix(tv): preserve duration outside presentation state
RXWatcher
committed
7d401ac
fix(tv): close player performance review gaps
RXWatcher
committed
7b481d3
fix(player): stop a session whose start finished after the user left

RXWatcher
and
claude
committed
a1d9e49
fix(player): count time spent inside failed loads against the retry window

RXWatcher
and
claude
committed
c888efe
fix(player): keep failed final-position writes, and stop Up Next at exit

RXWatcher
and
claude
committed
c2a63d5
fix(player): authenticate custom pip actions
RXWatcher
committed
78015de
fix(player): keep lifecycle foundation independent of subtitle publication
RXWatcher
committed
e3e3b04
docs(android): map slice D to PR 108 sources
RXWatcher
committed
530100c
fix(player): reject starts that finish after exit
RXWatcher
committed
5c4c861
fix(player): serialize external start ownership
RXWatcher
committed
2e9ad5f
docs(android): record slice D review and verification
RXWatcher
committed
55ba027
docs(android): plan PR 108 transactional subtitle slice
RXWatcher
committed
dfa9957
feat(subtitles): add typed transition identities
RXWatcher
committed
e1f7730
feat(player): stage subtitle replans transactionally
RXWatcher
committed
fbb001f
feat(subtitles): resolve mounted tracks by typed identity
RXWatcher
committed
5096cb7
feat(player): integrate transactional subtitle adapters
RXWatcher
committed
74907f1
feat(subtitles): mount PGS and recycle libass state
RXWatcher
committed
23df27e
feat(subtitles): scope sync and clamp safe areas
RXWatcher
committed
f7f9964
fix(subtitles): bind durable selection writes
RXWatcher
committed
2cb70a4
fix(subtitles): acknowledge durable selection writes
RXWatcher
committed
789e582
fix(subtitles): retain write state through abandonment
RXWatcher
committed
0fdfcc2
docs(android): record slice E review and verification
RXWatcher
committed
5bda350
test(android): stabilize subtitle publication CI
RXWatcher
committed
6a5557d
test(android): prove publication timeout idempotency
RXWatcher
committed
8b0131b
test(android): own publication cleanup in integration scopes
RXWatcher
committed
9ceb317
docs(android): design PR 108 Watch Together slice
RXWatcher
committed
4b947bd
docs(android): plan PR 108 Watch Together slice
RXWatcher
committed
877a3e4
docs(android): harden Watch Together lifecycle plan
RXWatcher
committed
651cd26
feat(watch-together): harden realtime transport boundary
RXWatcher
committed
1134402
fix(watch-together): pin websocket auth scope
RXWatcher
committed
e44650d
fix(watch-together): abort websocket without scoped auth
RXWatcher
committed
a78253c
fix(watch-together): bind room state to immutable leases
RXWatcher
committed
e14ba8e
fix(watch-together): isolate connection owners and pinned scopes
RXWatcher
committed
0c90e4d
fix(watch-together): close remaining reconnect owner races
RXWatcher
committed
9275f7f
fix(watch-together): own room leases at application scope
RXWatcher
committed
e08e0c0
fix(watch-together): make player delivery reconnect-safe
RXWatcher
committed
e3e5fa0
feat(watch-together): complete reachable room surfaces
RXWatcher
committed
0c63407
fix(watch-together): validate real two-party playback
RXWatcher
committed
e62c694
Merge pull request #112 from Silo-Server/split/108-a-supply-chain
RXWatcher
authored
4458e9d
Merge pull request #113 from Silo-Server/split/108-b-auth-epub
RXWatcher
authored
8152189
Merge pull request #114 from Silo-Server/split/108-c-room-sync
RXWatcher
authored
6b1d4f8
Merge pull request #115 from Silo-Server/split/108-d-player-foundation
RXWatcher
authored
f41bda9
Merge pull request #116 from Silo-Server/split/108-e-subtitles
RXWatcher
authored
14dab30
Merge pull request #117 from Silo-Server/split/108-f-watch-together
RXWatcher
authored
57d6126
Merge Silo-Server/silo-android main (88 commits)

cursoragent
and
JonahMMay
committed
cf41e62
fix(ci): pin GitHub Actions SHAs for supply-chain policy

cursoragent
and
JonahMMay
committed
b3e3ece
fix(ci): add Kover checksums to dependency verification

cursoragent
and
JonahMMay
committed
c4e8330
fix(test): rebrand leftover SILO host fixtures in origin policy tests

cursoragent
and
JonahMMay
committed
b3da545
fix(ci): restore Kover gate after Watch Together sync

cursoragent
and
JonahMMay
committed
ffad9f1