The wrapper is what users sideload, so its source belongs next to the APK - they can read what they install, or build it themselves. Behaviour fixes on the way in (APK rebuild pending): - The saved server address survives. Back on the first page and connection errors used to delete it, so a stray tap or a moment without signal meant typing the address again; the form now opens pre-filled and only a save replaces what is stored. Back at the top level asks: exit, change server, or cancel - QR scanning works: the page's camera request is mirrored to an Android permission request (CAMERA, on an https instance - getUserMedia needs a secure context, as in any browser) - Downloads work: a DownloadListener hands database backups and other files to DownloadManager, which puts them in the phone's Downloads folder - Links to other hosts and non-http schemes open in the system browser, so a URL in a message no longer navigates the app away from the instance - Rotating the screen no longer reloads the page Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Android companion app — source
The app users install is a thin WebView wrapper around their own mc-webui instance: one screen for the server address, one full-screen WebView for the interface itself. It contains no mesh logic and talks to nothing except the server the user typed in.
The sources are here so that anyone installing the .apk can see what they are
installing, and build it themselves if they prefer. For install instructions,
see Android App.
| Published build | mc-webui-wrapper.apk |
| Package | it.wojtaszek.mc.wrapper |
| Min / target SDK | 21 (Android 5.0) / 34 |
| Permissions | INTERNET; CAMERA for QR scanning; WRITE_EXTERNAL_STORAGE (Android 9 and older) for saving downloads |
Layout
src/
├── settings.gradle.kts, build.gradle.kts, gradle.properties
├── gradle/wrapper/gradle-wrapper.properties
└── app/
├── build.gradle.kts
└── src/main/
├── AndroidManifest.xml
├── java/it/wojtaszek/mc/wrapper/MainActivity.kt ← the whole app
└── res/ layout, strings, icons
MainActivity.kt is the entire application. Worth knowing about it:
- The server address is stored in
SharedPreferencesand only ever replaced by the user. A failed connection or a Back press shows the address form pre-filled — it never wipes what was saved - Back on the first mc-webui page asks: exit, change server, or cancel
- Links to other hosts (URLs in messages, the packet analyzer) and non-
httpschemes are handed to the system, so the app stays on the user's instance - The page's camera request (QR scanning) is mirrored to an Android permission
request; downloads go to the phone's Downloads folder via
DownloadManager
Building
Open src/ in Android Studio (the Gradle wrapper JAR is not checked in —
Android Studio supplies it) and let it sync. Then:
- Debug build: Build → Build Bundle(s) / APK(s) → Build APK(s) →
app/build/outputs/apk/debug/app-debug.apk. Fine for trying things out on your own phone, not for publishing — it is signed with the throwaway debug key and is marked debuggable - Release build: Build → Generate Signed App Bundle or APK → APK, pick
the project keystore, choose the
releasevariant, and let it build. The result is what ships
Signing
Android identifies an app by its package name and its signing key. An update only installs over an existing app when both match, so a release signed with a different key forces every user to uninstall first — losing their saved server address. In practice this means:
- Use the same keystore for every release, from the first published one
- Back it up (and its passwords) somewhere that survives a reinstalled laptop. There is no way to recover or reissue it
- Never commit the keystore or its passwords to this repository
Publishing a new build
- Bump
versionCode(and usuallyversionName) insrc/app/build.gradle.kts - Build the signed release APK
- Copy it here as
mc-webui-wrapper.apk - Update the version, size and SHA-256 in
docs/android-app.md—sha256sumon Linux,Get-FileHashin PowerShell - Mention the change in
docs/whatsnew.md