docs(android): spec Android App Links (assetlinks.json + build-time host) #25

wtclaude · 2026-07-20T23:39:40Z

wtclaude commented

2026-07-20 23:39:40 +00:00

Promotes docs/android/APP_LINKS.md from a deferred design note into an implementation spec matching the code branches:

website feat/mobile-app-links → PR #81
android feat/app-links (PR in Android-app)

Follows on from M9 Part 2 (docs #24 / Android-app #16), both now merged to main.

What

APP_LINKS.md rewritten: the server /.well-known/assetlinks.json route + mobile_app_links_enabled toggle + additive self-origin allowlist entry, and the app-side autoVerify intent-filter driven by a build-time appLinkHost. Records the core constraint — a single multi-tenant APK cannot autoVerify open-ended shard domains (Android needs a literal build-time host), so App Links are a white-label/first-party build opt-in layered on the always-present custom scheme (the permanent fallback).
PLAN.md §9 (App Links as an M9 follow-up) + §14 open item resolved.
BACKEND_DESIGN.md redirect-URI allowlist section updated.

Docs-only; no code.

🤖 AI-assisted: authored with Claude Code (Opus 4.8); commits carry a Co-Authored-By: Claude trailer.

🤖 Generated with Claude Code

Promotes `docs/android/APP_LINKS.md` from a **deferred design note** into an **implementation spec** matching the code branches: - website [`feat/mobile-app-links` → PR #81](https://gitea.whitlocktech.com/RunicGateway/website/pulls/81) - android `feat/app-links` (PR in Android-app) Follows on from M9 Part 2 (docs #24 / Android-app #16), both now merged to `main`. ## What - **`APP_LINKS.md`** rewritten: the server `/.well-known/assetlinks.json` route + `mobile_app_links_enabled` toggle + additive self-origin allowlist entry, and the app-side `autoVerify` intent-filter driven by a **build-time `appLinkHost`**. Records the core constraint — a single multi-tenant APK **cannot** `autoVerify` open-ended shard domains (Android needs a literal build-time host), so App Links are a **white-label/first-party build opt-in** layered on the always-present custom scheme (the permanent fallback). - **`PLAN.md`** §9 (App Links as an M9 follow-up) + §14 open item resolved. - **`BACKEND_DESIGN.md`** redirect-URI allowlist section updated. Docs-only; no code. --- 🤖 AI-assisted: authored with **Claude Code** (Opus 4.8); commits carry a `Co-Authored-By: Claude` trailer. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

wtclaude added 1 commit 2026-07-20 23:39:41 +00:00

docs(android): spec Android App Links (assetlinks.json + build-time host) 752793f6c3

Promote APP_LINKS.md from a deferred design note into an implementation spec
matching the website `feat/mobile-app-links` and android `feat/app-links`
branches: the server-side `/.well-known/assetlinks.json` route + `mobile_app_links_enabled`
toggle + additive redirect-allowlist entry, and the app-side `autoVerify`
intent-filter driven by a build-time `appLinkHost` (a single multi-tenant APK
cannot autoVerify open-ended shard domains, so App Links are a white-label /
first-party build opt-in; the custom scheme stays the permanent fallback).

Update PLAN.md §9 (M9 follow-up) and the §14 open item, and the redirect-URI
allowlist section of website/BACKEND_DESIGN.md.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01NgyHnrNa8WwG3doxvxjuCr

wtclaude referenced this pull request from RunicGateway/Android-app

2026-07-20 23:40:00 +00:00

feat(sso): App Links autoVerify callback + paired-host trust check #17

whitlocktech approved these changes 2026-07-20 23:42:08 +00:00

whitlocktech added 1 commit 2026-07-20 23:42:18 +00:00

Merge branch 'main' into docs/app-links 0109df6963

whitlocktech merged commit 6e0ff2a821 into main

2026-07-20 23:42:26 +00:00

whitlocktech referenced this issue from a commit

2026-07-20 23:42:27 +00:00

Merge pull request 'docs(android): spec Android App Links (assetlinks.json + build-time host)' (#25) from docs/app-links into main

whitlocktech deleted branch docs/app-links