SHA256

0 Fork 0

T

Yuvomi Mobile Contributors 69c48169e2 fix(ios): restrict authentication capabilities and validate bootstrap types

Require iOS 18.4 for explicit upload denial in the isolated authentication window. Add origin-bound generated download policy, app-switcher privacy, typed metadata regressions and original community icon assets. Seven portable tests and Swift formatting checks pass; Apple SDK validation remains external.

2026-10-20 23:45:01 +02:00

android

feat(android): implement secure self-hosted companion and release builds

2026-10-20 23:24:45 +02:00

docs

chore(repo): establish isolated mobile repository and upstream audit

2026-10-20 23:17:09 +02:00

ios

fix(ios): restrict authentication capabilities and validate bootstrap types

2026-10-20 23:45:01 +02:00

scripts

fix(ios): restrict authentication capabilities and validate bootstrap types

2026-10-20 23:45:01 +02:00

.gitattributes

chore(repo): establish isolated mobile repository and upstream audit

2026-10-20 23:17:09 +02:00

.gitignore

fix(ios): restrict authentication capabilities and validate bootstrap types

2026-10-20 23:45:01 +02:00

.swift-format

fix(ios): restrict authentication capabilities and validate bootstrap types

2026-10-20 23:45:01 +02:00

LICENSE

chore(repo): establish isolated mobile repository and upstream audit

2026-10-20 23:17:09 +02:00

README.md

chore(repo): establish isolated mobile repository and upstream audit

2026-10-20 23:17:09 +02:00

THIRD_PARTY_NOTICES.md

chore(repo): establish isolated mobile repository and upstream audit

2026-10-20 23:17:09 +02:00

README.md

Yuvomi Mobile

Independent, community-maintained Android (Kotlin/WebView) and iOS (SwiftUI/WKWebView) companions for user-owned Yuvomi servers. Not affiliated with or endorsed by upstream.

Development build - not production-ready. See validation status. No mobile backend, advertisements, telemetry, tracking, subscriptions, or mandatory cloud. The configured server supplies the application and retains responsibility for its own integrations, version checks, security and privacy.

Use a root-hosted HTTPS instance with a valid certificate, including private servers accessible through your VPN. Custom ports are supported. HTTP and subpath deployments are intentionally rejected. Enter the server on first launch; use Server settings to reconnect or erase local browsing data and switch installations.

MIT licensed. Upstream notices are preserved in THIRD_PARTY_NOTICES.md. This implementation is AI-assisted (OpenAI via OpenCode) and requires human security review before release. No upstream modification or public submission is authorized.