T-Bone XDC

Releases

• Nov 3, 2026 0.1.0
  # T-Bone XDC v0.1.0 — Release Notes First release. A webxdc-first partial fork of [T-Bone](https://github.com/toddsmith456/T-Bone-) v0.5.3 (MIT): full sign-in (Amber NIP-55, nsecBunker NIP-46, local keystore key, BIP-39 word fingerprints), the complete webxdc mini-app tool (import, webxdc.org store, Nostr discovery, sandboxed offline player), theme & UI settings (Youniversal + T-Bone classic), and profile & accounts settings (profile picture & banner, account management, hidden accounts). Bottom bar: Settings + Webxdc. The privacy gate and release/version gates are enforced in CI.

  More…

  - Package id: `social.tbone.xdc` (installs alongside T-Bone and the T-Bone fork) - Version: 0.1.0 (versionCode 1), minSdk 26, targetSdk 34 - License: MIT (unchanged from upstream) - Source of this build: commit `7b8975e` (= `T-Bone-XDC-v0.1.0-sources.zip`) ## Files | File | Purpose | | --- | --- | | `T-Bone-XDC-v0.1.0-release.apk` | Signed release APK (v1+v2+v3 signatures) | | `T-Bone-XDC-v0.1.0-sources.zip` | Exact source tree the APK was built from (`git archive` of commit `7b8975e`) | | `SHA256SUMS.txt` | SHA-256 checksums of the above | | `tbone-xdc-release-cert.pem` | The signing certificate (public; safe to share) | ## Verify the download ```sh sha256sum -c SHA256SUMS.txt ``` Expected: ``` 23f60ed26357e7ad2b4387c600268bdd93a264b8e554f9c2ea380dd9bd657022 T-Bone-XDC-v0.1.0-release.apk 5a356273c387edd33b8271fc560894736a2da58296d40a5121ba6495dffaf4ee T-Bone-XDC-v0.1.0-sources.zip a40039466c883c0a1a434d08c43946dcf8ac3ef79183651e8585864831c353cc tbone-xdc-release-cert.pem ``` ## Verify the APK signature ```sh apksigner verify --print-certs T-Bone-XDC-v0.1.0-release.apk ``` The signer certificate SHA-256 digest must be: ``` 5a38c88c8d881861ebd5135aa0c5bed70e49463af05ecbfa0c230756899362ca ``` That digest must also match `tbone-xdc-release-cert.pem`: ```sh openssl x509 -in tbone-xdc-release-cert.pem -outform der | sha256sum ``` All future T-Bone XDC releases will be signed with this same certificate; if a build ever presents a different digest, treat it as untrusted. ## Build provenance - Built from commit `7b8975e` (see `T-Bone-XDC-v0.1.0-sources.zip`). - Toolchain: Eclipse Temurin JDK 17.0.21, Android SDK Platform 34, build-tools 34.0.0, Gradle 8.11.1 (wrapper), AGP 8.7.2. - Build command (after `sdkmanager "platforms;android-34" "build-tools;34.0.0"`): ```sh KEYSTORE_PATH=… KEYSTORE_PASSWORD=… KEY_ALIAS=… KEY_PASSWORD=… \ ./gradlew :app:assembleRelease :app:testDebugUnitTest ``` - 0.1.0 ships **unminified** (R8 disabled in `app/build.gradle.kts`) so the published APK is easy to audit against the source and can be reproduced on small build hosts. `app/proguard-rules.pro` is kept in the repo for anyone re-enabling minification. - On small (2 GiB) build hosts, use the memory profile from `docs/RELEASE.md` (`org.gradle.jvmargs=-Xmx1280m -XX:MaxMetaspaceSize=384m -XX:+UseSerialGC …`, `kotlin.compiler.execution.strategy=in-process`) and build/test in separate Gradle invocations. ## Tests `./gradlew :app:testDebugUnitTest` — 84 tests across 16 suites, 0 failures, 0 errors (youniversal palette, account + signer, lists, CrashRecorder, webxdc). ## Known limitations - The fork keeps upstream's `BETA` flavor and CI matrix; store listing and signing secrets are maintained by the repo owner (see `docs/RELEASE.md`).