3e0bc7bd84
build-apk.ps1 -Release builds the Release configuration and signs with the user's keystore. Not through Delphi's Provisioning page, for three reasons: the .dproj is versioned, paclient --apksign puts the password ON THE COMMAND LINE where any process on the machine reads it, and tooling belongs in the repository rather than hidden in an IDE setting. apksigner called directly accepts --ks-pass env:. The password is asked for with Read-Host -AsSecureString - nothing echoed, nothing left in console history - handed over through an environment variable, and removed in a finally even when the script fails. It prints the certificate it signed with. A release signed by accident with the debug key installs and runs: nothing tells it apart in use, and one finds out only when the first update is refused. It does not install the release. Android refuses a different signature on an existing package, and uninstalling would wipe the local cache and the device's settings - a deliberate act, not a script's side effect. Keystores are gitignored. The debug path is unchanged and still builds.
98 lines
2.3 KiB
Plaintext
98 lines
2.3 KiB
Plaintext
|
|
vault-error.log
|
|
|
|
# Vault database — contains user secrets (encrypted but still secret).
|
|
# Auto-created on first run by the Delphi/PHP backend via InitDatabase().
|
|
# Never track this file. Use vault.db.example for schema reference if needed.
|
|
vault.db
|
|
vault.db-journal
|
|
vault.db-wal
|
|
vault.db-shm
|
|
|
|
# Delphi build artifacts
|
|
*.dcu
|
|
*.dcp
|
|
*.dpu
|
|
*.local
|
|
*.identcache
|
|
*.dsk
|
|
*.~dsk
|
|
*.~*
|
|
*.~bpl
|
|
*.~dll
|
|
*.~exe
|
|
*.exe
|
|
*.dll
|
|
*.bpl
|
|
*.so
|
|
*.dylib
|
|
__history/
|
|
__recovery/
|
|
Win32/
|
|
Win64/
|
|
OSX64/
|
|
Android/
|
|
iOSDevice64/
|
|
|
|
# Debug logs (created at runtime next to the exe)
|
|
pm-debug.log
|
|
|
|
# Asset build log (regenerated by BuildAssets.cmd/ps1)
|
|
delphi-backend/assets/build.log
|
|
|
|
# Embedded-assets output (regenerated by BuildAssets before every Delphi build,
|
|
# then linked into the exe — the files themselves are throwaway intermediates).
|
|
delphi-backend/assets/assets.res
|
|
delphi-backend/assets/assets.rc
|
|
delphi-backend/assets/assets.inc
|
|
|
|
# Local-only debug / packaging artefacts next to the exe.
|
|
delphi-backend/build.log
|
|
delphi-backend/config.txt
|
|
delphi-backend/PMServer.rar
|
|
|
|
# Quick-unlock DPAPI blob — device-bound, MUST NOT be committed.
|
|
delphi-backend/quickunlock.bin
|
|
|
|
# Vault backup copies users keep next to the exe while testing.
|
|
delphi-backend/vault*.db
|
|
delphi-backend/vault - Copie*.db
|
|
|
|
# Screenshots / scratch images dropped in the repo root during dev.
|
|
*.png
|
|
*.jpg
|
|
*.jpeg
|
|
# Les icones du lanceur sont du contenu, pas des captures d'ecran de passage.
|
|
# Elles se regenerent par make-icons.ps1, mais les suivre evite d'avoir a le
|
|
# savoir - et de dependre de System.Drawing pour fabriquer un APK.
|
|
!android-client/android-res/**/*.png
|
|
|
|
# Delphi build artifacts
|
|
delphi-backend/*.vrc
|
|
delphi-backend/*.$manifest
|
|
|
|
# PHP sync endpoint — holds the bearer token / the snapshot itself
|
|
server-php/config.php
|
|
vault-data/
|
|
|
|
# Sorties de compilation Android (regenerees a chaque build)
|
|
Android/
|
|
Android64/
|
|
*.o
|
|
*.apk
|
|
*.apk.idsig
|
|
pmserverApk.res
|
|
|
|
# Mot de passe de sync du banc d'essai - jamais versionne
|
|
android-client/PMA.LocalConfig.inc
|
|
# Genere depuis theme.rc + pm-dark.style, tous deux suivis (voir README).
|
|
android-client/theme/theme.RES
|
|
android-client/theme/theme.res
|
|
android-client/web/*.res
|
|
|
|
# Magasins de cles de signature. Le perdre interdit toute mise a jour de
|
|
# l'application deja installee, Android refusant une signature differente :
|
|
# il se sauvegarde ailleurs, il ne se versionne pas.
|
|
*.jks
|
|
*.keystore
|