Barry Deen
28cb2dad42
Add an embedded Tor daemon (kmp-tor) with an onion toggle in the sidebar drawer and on the pre-login Splash/Auth screens. When enabled, every connection — relay WebSockets, Coil images, ExoPlayer media, NIP-05/NIP-11, LNURL/zaps, Blossom uploads, link previews, exchange rates, DM media, live metrics — routes through Tor's SOCKS proxy. Routing is fail-closed: from the moment the toggle flips, new clients point at a dead loopback port until bootstrap completes, and existing clients have their in-flight requests cancelled and keep-alive pools evicted so no pre-toggle socket survives. OkHttp passes unresolved hostnames to SOCKS proxies, so DNS also resolves inside Tor. - TorManager: kmp-tor runtime in a foreground service; state machine (Off/Starting %/On/Stopping/Error) observed by all toggles; start retries around kmp-tor's fixed 1s service-bind timeout, which a busy main thread misses during cold start - TorPreferences: device-level pref so the toggle works pre-login and survives logout - HttpClientFactory: single proxy choke point; client registry + setTorSocks() invalidation; new getRelayClient/getLoopbackClient/ getDmMediaClient - Relay/RelayPool: clients resolved through providers on every (re)connect; suspendForTorSwitch/resumeAfterTorSwitch tear down sockets and suppress reconnects during bootstrap so the 5-min relay cooldown can't trip; local relay stays direct (Tor refuses loopback/LAN targets) - Captured-client fixes so a mid-session toggle can't leak: Coil delegating Call.Factory (it caches its lambda forever), ZapSender, DmBubble, NwcRepository, SplashViewModel raw client, ExchangeRateRepository refetch - Cold start with Tor on: relay init gated on bootstrap - kmp-tor pinned to 2.4.x: 2.5+ needs Kotlin 2.2 metadata, unreadable by this project's Kotlin 2.0.21 Verified on-device by socket-inode audit: app process held 43 sockets, all to 127.0.0.1:<socks>; only the tor child process held external connections. Known gaps: Breez/Spark SDK (own Rust networking) and ML Kit model downloads bypass OkHttp and are not routed.
86 lines
5.8 KiB
TOML
86 lines
5.8 KiB
TOML
[versions]
|
|
kotlin = "2.0.21"
|
|
agp = "8.13.2"
|
|
compose-bom = "2024.12.01"
|
|
okhttp = "4.12.0"
|
|
kotlinx-serialization = "1.7.3"
|
|
# Pinned to 0.16.0: the 0.19.0 bump (libsecp256k1 0.7.0, NDK-28/16KB rebuild) shipped in
|
|
# 1.0.2 alongside the GrapheneOS perf regression. See docs/grapheneos-perf-investigation.md
|
|
# before re-bumping.
|
|
secp256k1-kmp = "0.16.0"
|
|
coil = "3.0.4"
|
|
security-crypto = "1.1.0-alpha06"
|
|
bouncycastle = "1.78.1"
|
|
media3 = "1.5.1"
|
|
biometric = "1.1.0"
|
|
coroutines = "1.9.0"
|
|
profileinstaller = "1.4.1"
|
|
splashscreen = "1.0.1"
|
|
zxing = "3.5.3"
|
|
mlkit-translate = "17.0.3"
|
|
mlkit-language-id = "17.0.6"
|
|
mlkit-barcode = "17.3.0"
|
|
camerax = "1.4.1"
|
|
objectbox = "5.2.0"
|
|
breez-sdk-spark = "0.11.0"
|
|
# 2.4.x is the newest kmp-tor line compiled with Kotlin 2.1 — 2.5.0+ requires
|
|
# Kotlin 2.2 metadata, unreadable by this project's Kotlin 2.0.21.
|
|
kmp-tor-runtime = "2.4.0"
|
|
kmp-tor-resource = "408.16.4"
|
|
activity-compose = "1.9.3"
|
|
navigation-compose = "2.8.5"
|
|
lifecycle = "2.8.7"
|
|
|
|
[libraries]
|
|
compose-bom = { group = "androidx.compose", name = "compose-bom", version.ref = "compose-bom" }
|
|
compose-ui = { group = "androidx.compose.ui", name = "ui" }
|
|
compose-ui-graphics = { group = "androidx.compose.ui", name = "ui-graphics" }
|
|
compose-material3 = { group = "androidx.compose.material3", name = "material3" }
|
|
compose-icons-extended = { group = "androidx.compose.material", name = "material-icons-extended" }
|
|
activity-compose = { group = "androidx.activity", name = "activity-compose", version.ref = "activity-compose" }
|
|
navigation-compose = { group = "androidx.navigation", name = "navigation-compose", version.ref = "navigation-compose" }
|
|
lifecycle-viewmodel-compose = { group = "androidx.lifecycle", name = "lifecycle-viewmodel-compose", version.ref = "lifecycle" }
|
|
lifecycle-runtime-compose = { group = "androidx.lifecycle", name = "lifecycle-runtime-compose", version.ref = "lifecycle" }
|
|
okhttp = { group = "com.squareup.okhttp3", name = "okhttp", version.ref = "okhttp" }
|
|
kotlinx-serialization-json = { group = "org.jetbrains.kotlinx", name = "kotlinx-serialization-json", version.ref = "kotlinx-serialization" }
|
|
kotlinx-coroutines-android = { group = "org.jetbrains.kotlinx", name = "kotlinx-coroutines-android", version.ref = "coroutines" }
|
|
secp256k1-kmp = { group = "fr.acinq.secp256k1", name = "secp256k1-kmp", version.ref = "secp256k1-kmp" }
|
|
secp256k1-kmp-jni-android = { group = "fr.acinq.secp256k1", name = "secp256k1-kmp-jni-android", version.ref = "secp256k1-kmp" }
|
|
coil-compose = { group = "io.coil-kt.coil3", name = "coil-compose", version.ref = "coil" }
|
|
coil-gif = { group = "io.coil-kt.coil3", name = "coil-gif", version.ref = "coil" }
|
|
coil-network-okhttp = { group = "io.coil-kt.coil3", name = "coil-network-okhttp", version.ref = "coil" }
|
|
coil-video = { group = "io.coil-kt.coil3", name = "coil-video", version.ref = "coil" }
|
|
security-crypto = { group = "androidx.security", name = "security-crypto", version.ref = "security-crypto" }
|
|
bouncycastle = { group = "org.bouncycastle", name = "bcprov-jdk18on", version.ref = "bouncycastle" }
|
|
media3-exoplayer = { group = "androidx.media3", name = "media3-exoplayer", version.ref = "media3" }
|
|
media3-exoplayer-hls = { group = "androidx.media3", name = "media3-exoplayer-hls", version.ref = "media3" }
|
|
media3-datasource-okhttp = { group = "androidx.media3", name = "media3-datasource-okhttp", version.ref = "media3" }
|
|
media3-ui = { group = "androidx.media3", name = "media3-ui", version.ref = "media3" }
|
|
media3-session = { group = "androidx.media3", name = "media3-session", version.ref = "media3" }
|
|
biometric = { group = "androidx.biometric", name = "biometric", version.ref = "biometric" }
|
|
profileinstaller = { group = "androidx.profileinstaller", name = "profileinstaller", version.ref = "profileinstaller" }
|
|
splashscreen = { group = "androidx.core", name = "core-splashscreen", version.ref = "splashscreen" }
|
|
zxing-core = { group = "com.google.zxing", name = "core", version.ref = "zxing" }
|
|
mlkit-translate = { group = "com.google.mlkit", name = "translate", version.ref = "mlkit-translate" }
|
|
mlkit-language-id = { group = "com.google.mlkit", name = "language-id", version.ref = "mlkit-language-id" }
|
|
mlkit-barcode = { group = "com.google.mlkit", name = "barcode-scanning", version.ref = "mlkit-barcode" }
|
|
camerax-core = { group = "androidx.camera", name = "camera-core", version.ref = "camerax" }
|
|
camerax-camera2 = { group = "androidx.camera", name = "camera-camera2", version.ref = "camerax" }
|
|
camerax-lifecycle = { group = "androidx.camera", name = "camera-lifecycle", version.ref = "camerax" }
|
|
camerax-view = { group = "androidx.camera", name = "camera-view", version.ref = "camerax" }
|
|
camerax-mlkit = { group = "androidx.camera", name = "camera-mlkit-vision", version.ref = "camerax" }
|
|
kotlinx-coroutines-play-services = { group = "org.jetbrains.kotlinx", name = "kotlinx-coroutines-play-services", version.ref = "coroutines" }
|
|
objectbox-android = { group = "io.objectbox", name = "objectbox-android", version.ref = "objectbox" }
|
|
objectbox-kotlin = { group = "io.objectbox", name = "objectbox-kotlin", version.ref = "objectbox" }
|
|
breez-sdk-spark = { group = "breez_sdk_spark", name = "bindings-android", version.ref = "breez-sdk-spark" }
|
|
kmp-tor-runtime = { group = "io.matthewnelson.kmp-tor", name = "runtime", version.ref = "kmp-tor-runtime" }
|
|
kmp-tor-runtime-service-ui = { group = "io.matthewnelson.kmp-tor", name = "runtime-service-ui", version.ref = "kmp-tor-runtime" }
|
|
kmp-tor-resource-exec = { group = "io.matthewnelson.kmp-tor", name = "resource-exec-tor", version.ref = "kmp-tor-resource" }
|
|
|
|
[plugins]
|
|
android-application = { id = "com.android.application", version.ref = "agp" }
|
|
kotlin-android = { id = "org.jetbrains.kotlin.android", version.ref = "kotlin" }
|
|
kotlin-compose = { id = "org.jetbrains.kotlin.plugin.compose", version.ref = "kotlin" }
|
|
kotlin-serialization = { id = "org.jetbrains.kotlin.plugin.serialization", version.ref = "kotlin" }
|
|
objectbox = { id = "io.objectbox", version.ref = "objectbox" }
|