App Manager Tech

A local-only Android app manager / cleaner inspired by SD Maid, for non-root devices. Inspect, batch-act on, and audit every installed app — without sending a single byte off the device.

No Google Mobile Services, no Firebase, no Internet permission. Distributed as signed APKs on GitHub Releases.

---

Highlights

• Inspect every installed app: label, version, install / data / cache sizes, install source (Play / F-Droid / sideload), last-used timestamp, signing certificate SHA-256, requested + granted permissions.
• Batch act: select multiple apps and uninstall / clear cache / force stop in a guided sequence (the OS shows its own per-app confirmation; we never bypass it).
• Background scan: a periodic WorkManager job refreshes the catalogue daily or weekly and posts a single local notification when the total cache size crosses a user-configured threshold.
• Storage analyser: per-category breakdown, top-N largest apps, top-N cache hogs.
• Export: storage report to JSON or CSV via Storage Access Framework — no MANAGE_EXTERNAL_STORAGE needed.
• Ignore list: opt-out specific packages from batch actions and notifications (capped at 500 entries).
• Security audit: surfaces apps with Device Administrator privileges or enabled Accessibility services — common abuse vectors.

---

Stack

Layer	Tooling
Language	Kotlin 2.4.10
Build	Android Gradle Plugin 9.4.1 (built-in Kotlin), Gradle 9.8.2, KSP 2, JDK 17
UI	Jetpack Compose 1.12 + Material 3 1.4 (BOM 2026.09.00), Navigation 2.10, edge-to-edge
DI	Hilt 2.60.1 (KSP, no kapt) + Hilt-Work 1.4 for @HiltWorker
Storage	Room 2.8.5 (schema v8, additive migrations only) + DataStore Preferences
Background	WorkManager 2.12.0 (on-demand init, no androidx.startup)
Coroutines	kotlinx-coroutines 1.11.0
Logging	Timber 5 (DebugTree in debug, NoOpReleaseTree in release)
Splash	androidx.core:core-splashscreen 1.2 (compat for API 26–30, native API on 31+): the launcher foreground on white
Tests	JUnit 6 (Jupiter) + Truth + MockK + Turbine + Robolectric; Room DAO and migration tests on device
Quality	Android lint, detekt 1.23.8 (blocking, no baseline), CodeQL; CI checks that the release APK declares no INTERNET permission

All dependencies are Apache 2.0 / MIT / BSD. Zero proprietary SDK.

---

Architecture

ui/
├── screens/<feature>/         one folder per screen (app list, app detail, tools: trackers,
│                              storage, zombies, quarantine, trash, permission changes, …)
│   ├── XxxScreen.kt           Compose UI (TopAppBar + Scaffold + sections)
│   └── XxxViewModel.kt        @HiltViewModel, StateFlow<UiState>, Events Channel
├── components/{dialogs, settings, state}/  Reusable composables
└── theme/                     Material 3 + BrandBlue (#2460AB) + BrandDanger (#C62828)

domain/
├── model/         AppInfo, AppDetail, PrivacyScore, TrashItem, QuarantineEntry, …
├── repository/    repository interfaces only (apps, ignore list, trash, quarantine,
│                  lifecycle history, permission snapshots, action journal)
└── usecase/       one operation per file, returns Outcome<T>

data/
├── local/
│   ├── db/{entity, dao, dto}/   Room entities and DAOs (schema v8)
│   ├── datastore/               SettingsRepository (DataStore Preferences)
│   └── db/Migrations.kt         Strictly additive Room migrations
├── repository/    the implementations of domain/repository
└── system/        IntentFactory, notifications, PackageMonitor, WorkScheduler,
                   workers/ (@HiltWorker: background scan, permission snapshots,
                   quarantine reminders, history purges)

core/
├── ext/           StringExt (anti-ReDoS regex), FlowExt (oneShotEvents),
│                  TimeConstants (MS_PER_DAY, STATEFLOW_STOP_TIMEOUT_MS, MAX_IGNORED_PACKAGES)
└── result/        Outcome<T> sealed (Success/Failure/Loading) + extensions

di/                Hilt modules: CoroutineModule, DatabaseModule, RepositoryModule

Rules (enforced by code review):

1. UI layer never imports android.content.pm.* / android.app.usage.* / anything from data/. Everything goes through use cases.
2. Use cases return Outcome<T> — no exception ever crosses the repository boundary.
3. Repository implementations stay in data/repository/; their interfaces live in domain/repository/. Exception: SettingsRepository is in data/local/datastore/ (documented in code).
4. Room migrations are always additive (ALTER ADD, CREATE INDEX IF NOT EXISTS). fallbackToDestructiveMigration is never used.
5. BrandBlue (#2460AB) for confirmation dialogs and primary CTAs. BrandDanger (#C62828) for destructive intent (uninstall, force stop, disable, delete). Cross-theme constant — never colorScheme.error.

---

Build

# Prerequisites: JDK 17, Android SDK 37
./gradlew :app:assembleDebug         # debug APKs (3 ABI splits + universal, ~20 MB each)
./gradlew :app:assembleRelease       # release APKs (R8 minify+shrink, 3 splits + universal, ~2.3 MB each)
./gradlew :app:testDebugUnitTest     # JUnit 6 unit tests
./gradlew detekt                     # static analysis (blocking, no baseline)
./gradlew :app:connectedDebugAndroidTest  # Room DAO + migration tests on an emulator
                                          # (it installs, then uninstalls, the app on EVERY connected device)

The release build runs lintVitalRelease, R8 minify with shrink resources, ART profile compilation. APK reduction is ~10× (debug → release) thanks to dead-code elimination and tree-shaking.

---

F-Droid compliance

See FDROID.md for the full distribution policy. Summary:

以上为 README 的开头部分。其余内容请阅读原文。 查看完整 README ↗