Skip to content

CONTRIBUTING.md

Latest commit

 

History

History
76 lines (57 loc) · 3.26 KB

CONTRIBUTING.md

File metadata and controls

76 lines (57 loc) · 3.26 KB
Raw

Contributing

This app is the home screen of a car. That single fact drives everything below.

Ground rules

  1. The launcher holds no vehicle privileges. No android.car.* permission, no sharedUserId, no IPC to EVProfile. A patch that reaches the vehicle from here will be rejected regardless of how useful it is — vehicle work belongs in EVProfile, and automation in EVTasker.
  2. Never leave the driver without a home screen. A crash on the home path is not a normal bug: it strands the head unit. Guard every PackageManager result, every stored package name that may have been uninstalled, and every intent that may resolve to nothing.
  3. Updates stay manual. Neither flavor contains a self-updater or privileged installer. EVSuite network access starts only from an explicit user action, and verified APKs are exported through Android's document picker for later manual installation.
  4. Say what you did not verify. Most of this can only be confirmed on a head unit. "Builds, unit tests pass, tried on the emulator, not on the car" is a good PR note. Silence implying it ran in a vehicle is not.

Before opening a PR

mise run check      # permission gate + lint + unit tests

or, without mise:

bash .github/security/check-permissions.sh
./gradlew testStableDebugUnitTest testUnstableDebugUnitTest lintStableDebug

New behaviour needs a unit test. Logic that can be tested without Android — update-gate decisions, version comparison, host allowlisting — belongs in a plain class, not in an activity or a fragment.

Permissions

Any new uses-permission fails CI until it is added to .github/security/permission-allowlist.txt with a justification comment. A launcher sees every installed package and starts on every boot; it should not gain capabilities quietly. The unstable suite manager may pass a GitHub-downloaded, fixed-package, suite-signed APK only after explicit confirmation and never invokes an installer.

The two channels

stable unstable
Published by v* tag every push to master
Application id com.evsuite.launcher com.evsuite.launcher.unstable
INTERNET absent declared in src/unstable/
Updater code not in the APK https + host allowlist + signature check

Both install side by side; only one can be the default home at a time. A change that blurs that separation — an updater class reachable from src/main/, a permission moved up out of src/unstable/ — will be rejected.

UI

Dark Material 3 on the shared ev_* colour and spacing tokens, 64 dp touch targets. Dark is imposed rather than following the system: the screen faces the driver at night, and a light background filling the windscreen is glare, not a preference. Keep new surfaces on the tokens instead of hard-coded colours or dimensions.

Language and licence

English by default — code, comments, commit messages, docs. Read LICENSE.md before contributing: this is a fork of an unlicensed upstream project, and the licence situation is genuinely unusual.

Commit messages

Explain why, not what — the diff already says what. If you fixed something subtle, say what the failure looked like on the head unit, so the next person recognises it.