Swap lazysodium/JNA for a pure-Java Bouncy Castle crypto envelope so the
APK ships no native .so files (resolves the Android 15 16 KB alignment
crash) while staying byte-compatible with the desktop libsodium sync.
Bring the Android app up to the desktop feature set: full item CRUD with
an add/edit screen and FAB, inline editing on the detail view (status,
rating, favorite, per-unit/segment watched toggles, delete), online
metadata search (TMDB/OpenLibrary/AniList/RAWG) that pre-fills the editor,
library filtering and sorting, a statistics view, and settings polish for
dark mode and provider API keys/language.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Introduce the Kotlin/Compose Android companion app and extend the TMDB
proxy into a combo server that synchronizes the whole library as an
encrypted snapshot, with all three components (Go server, Android,
desktop) sharing one zero-knowledge crypto envelope and JSON schema.
- server: add PostgreSQL-backed /sync/library (GET/PUT) with optimistic
concurrency (revision + 409 on conflict); sync stays disabled unless
DATABASE_URL is set. Add docker-compose with Postgres.
- desktop: add libsodium CryptoEnvelope, LibrarySerializer and SyncClient;
storage-mode and passphrase settings; a "Sync now" toolbar action with
conflict resolution.
- android: Room-backed library with local/cloud storage modes, encrypted
sync client, and settings UI. The proxy server (URL + token) can be
configured as a TMDB proxy even in local-only mode.
Crypto is identical across platforms: Argon2id (libsodium crypto_pwhash,
INTERACTIVE) + XChaCha20-Poly1305 in a versioned "UMTS" envelope, so a
snapshot encrypted on one client decrypts on the other.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
