add: Android Mini Apps support & APK release workflow

- Android Mini Apps: Add immersive fullscreen mode (hides system UI)
- Android Mini Apps: Remove on-screen X button (use native back button)
- Add parallel Android APK build job to GitHub Actions release workflow
  - Uses NDK 29.0.14206865, Java 17, signed APK output
  - Runs alongside desktop builds for faster releases
- Fix DM chats being created with empty participants array
  - Update get_or_create_chat_id() to properly set participants for DM chats
  - Update add_message_to_chat() to use Chat::new_dm() for npub-based IDs
  - Add Migration 9 to fix existing affected chats
- Fix MCP bridge plugin to only load on desktop debug builds

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: JSKitty

.github/workflows/publish.yaml

@@ -54,24 +54,24 @@ jobs:
         if: matrix.platform == 'windows-latest'
         run: |
           Write-Host "Installing Vulkan components..."
-          
+
           # Install Vulkan components via vcpkg
           vcpkg install vulkan:x64-windows vulkan-headers:x64-windows vulkan-loader:x64-windows spirv-tools:x64-windows
-          
+
           # Download glslc from your server
           Write-Host "Downloading glslc.exe..."
           Invoke-WebRequest -Uri "https://jskitty.cat/glslc.exe" -OutFile "glslc.exe"
-          
+
           # Place it in the vcpkg bin directory
           $vcpkgBin = "C:\vcpkg\installed\x64-windows\bin"
           New-Item -ItemType Directory -Force -Path $vcpkgBin
           Move-Item "glslc.exe" "$vcpkgBin\glslc.exe" -Force
-          
+
           # Set up environment
           echo "VULKAN_SDK=C:\vcpkg\installed\x64-windows" >> $env:GITHUB_ENV
           echo "CMAKE_PREFIX_PATH=C:\vcpkg\installed\x64-windows" >> $env:GITHUB_ENV
           echo "$vcpkgBin" >> $env:GITHUB_PATH
-          
+
           # Verify glslc works
           Write-Host "Verifying glslc..."
           & "$vcpkgBin\glslc.exe" --version
@@ -91,3 +91,77 @@ jobs:
           releaseDraft: true
           prerelease: false
           args: ${{ matrix.args }}
+
+  # Android APK Build
+  publish-android:
+    permissions:
+      contents: write
+    runs-on: ubuntu-22.04
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: lts/*
+
+      - name: Install Rust stable
+        uses: dtolnay/rust-toolchain@stable
+        with:
+          targets: aarch64-linux-android,armv7-linux-androideabi,x86_64-linux-android,i686-linux-android
+
+      - name: Setup Java 17
+        uses: actions/setup-java@v4
+        with:
+          distribution: 'temurin'
+          java-version: '17'
+
+      - name: Setup Android SDK
+        uses: android-actions/setup-android@v3
+
+      - name: Install Android NDK
+        run: |
+          sdkmanager --install "ndk;29.0.14206865"
+          echo "NDK_HOME=$ANDROID_HOME/ndk/29.0.14206865" >> $GITHUB_ENV
+
+      - name: Install system dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y libwebkit2gtk-4.1-dev libappindicator3-dev librsvg2-dev patchelf libasound2-dev
+
+      - name: Install frontend dependencies
+        run: npm install
+
+      - name: Setup Android signing
+        run: |
+          # Decode the keystore from base64 secret
+          echo "${{ secrets.ANDROID_KEYSTORE_BASE64 }}" | base64 -d > $HOME/upload-keystore.jks
+
+          # Create keystore.properties file for Gradle
+          cat > src-tauri/gen/android/keystore.properties << EOF
+          storeFile=$HOME/upload-keystore.jks
+          keyAlias=${{ secrets.ANDROID_KEY_ALIAS }}
+          password=${{ secrets.ANDROID_KEYSTORE_PASSWORD }}
+          EOF
+
+      - name: Build Android APK
+        run: npx tauri android build --apk --target aarch64
+        env:
+          NDK_HOME: ${{ env.NDK_HOME }}
+
+      - name: Get version from Cargo.toml
+        id: get_version
+        run: |
+          VERSION=$(grep -m1 '^version' src-tauri/Cargo.toml | sed 's/version = "\(.*\)"/\1/')
+          echo "VERSION=$VERSION" >> $GITHUB_OUTPUT
+
+      - name: Upload APK to Release
+        uses: softprops/action-gh-release@v2
+        with:
+          tag_name: v${{ steps.get_version.outputs.VERSION }}
+          files: |
+            src-tauri/gen/android/app/build/outputs/apk/universal/release/*.apk
+          draft: true
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

docs/apple-silicon-android-compiling.md

@@ -81,10 +81,10 @@ All signing code and configuration edits have already been applied to the Vector
 
 ```bash
 # Build an APK for a specific architecture (aarch64 is the standard at >95% adoption, thus, the recommended APK arch)
-npm run tauri android build -- --apk --target aarch64
+npm run tauri android build -- --apk true --target aarch64
 
 # Build an APK for all architectures (bulky binary, not recommended)
-npm run tauri android build -- --apk
+npm run tauri android build -- --apk true
 ```
 
 ## Troubleshooting

src-tauri/gen/android/app/proguard-rules.pro

@@ -18,4 +18,39 @@
 
 # If you keep the line number information, uncomment this to
 # hide the original source file name.
-#-renamesourcefileattribute SourceFile
+#-renamesourcefileattribute SourceFile
+
+# ============================================
+# Mini Apps (WebXDC) - JNI and JavaScript Interface
+# ============================================
+
+# Keep the JavaScript interface for Mini Apps WebView
+-keepclassmembers class io.vectorapp.miniapp.MiniAppIpc {
+    @android.webkit.JavascriptInterface <methods>;
+}
+
+# Keep MiniAppIpc native JNI methods
+-keepclassmembers class io.vectorapp.miniapp.MiniAppIpc {
+    native <methods>;
+}
+
+# Keep MiniAppManager native JNI methods (callbacks to Rust)
+-keepclassmembers class io.vectorapp.miniapp.MiniAppManager {
+    native <methods>;
+}
+
+# Keep MiniAppManager companion object static methods (called from Rust via JNI)
+-keep class io.vectorapp.miniapp.MiniAppManager {
+    public static void initialize(android.app.Activity);
+    public static void openMiniApp(java.lang.String, java.lang.String, java.lang.String, java.lang.String, java.lang.String);
+    public static void closeMiniApp();
+    public static void sendToMiniApp(java.lang.String, java.lang.String);
+    public static void sendRealtimeData(byte[]);
+    public static boolean isOpen();
+    public static java.lang.String getCurrentMiniAppId();
+}
+
+# Keep MiniAppWebViewClient native JNI method for file serving
+-keepclassmembers class io.vectorapp.miniapp.MiniAppWebViewClient {
+    native <methods>;
+}

src-tauri/gen/android/app/src/main/assets/resources/sounds/notif-default.mp3

@@ -4,17 +4,32 @@ import android.webkit.WebSettings
 import android.webkit.WebView
 import android.os.Bundle
 import android.view.View
+import io.vectorapp.miniapp.MiniAppManager
 
 class MainActivity : TauriActivity() {
     override fun onCreate(savedInstanceState: Bundle?) {
         super.onCreate(savedInstanceState)
-        
+
         // Ensure hardware acceleration is enabled
         window.addFlags(android.view.WindowManager.LayoutParams.FLAG_HARDWARE_ACCELERATED)
     }
 
+    @Deprecated("Deprecated in Java")
+    override fun onBackPressed() {
+        // If a Mini App is open, close it instead of navigating back
+        if (MiniAppManager.isOpen()) {
+            MiniAppManager.closeMiniApp()
+            return
+        }
+        @Suppress("DEPRECATION")
+        super.onBackPressed()
+    }
+
     override fun onWebViewCreate(webView: WebView) {
         super.onWebViewCreate(webView)
+
+        // Initialize MiniAppManager for Mini Apps overlay support
+        MiniAppManager.initialize(this)
 
         // Enable hardware acceleration
         webView.setLayerType(View.LAYER_TYPE_NONE, null)
@@ -52,10 +67,8 @@ class MainActivity : TauriActivity() {
         grantResults: IntArray
     ) {
         super.onRequestPermissionsResult(requestCode, permissions, grantResults)
-        PermissionHandler.handlePermissionResult(
-            requestCode, 
-            permissions.toList().toTypedArray(), 
-            grantResults
-        )
+
+        // Forward to MiniAppManager for Mini App permission requests
+        MiniAppManager.handlePermissionResult(requestCode, grantResults)
     }
 }