From e5608851415ec04a8450678e6399441467194ddd Mon Sep 17 00:00:00 2001 From: Claude Date: Fri, 25 Sep 2026 07:23:58 +0000 Subject: Sign debug builds with a shared, checked-in keystore "App not installed" when updating. Android generates a debug keystore per machine, so tungsten's build and the laptop's build are signed differently and each refuses to install over the other. Reproduced exactly: INSTALL_FAILED_UPDATE_INCOMPATIBLE, "signatures do not match newer version". The published APKs show the collision plainly -- 0930d0 on the 21st, 106ecafe in between, 0930d0 again after my last publish -- so an update had roughly a coin-flip chance of being installable depending on which machine built it. The checked-in key is tungsten's existing debug keystore, stock alias and password, not a freshly generated one. That matters: a new key would have been just as unusable as the mismatch, forcing a second uninstall and a second loss of every playback position, right after Peter had already done one. Verified by installing the currently-published APK and updating in place over it. Safe to commit -- it signs debug builds of a personal sideloaded app. It must never sign a release, where the key is the app's identity. Co-Authored-By: Claude Opus 5 Claude-Session: https://claude.ai/code/session_018AwnALZL6bD4VBtATDVv3B --- CLAUDE.md | 8 ++++++++ 1 file changed, 8 insertions(+) (limited to 'CLAUDE.md') diff --git a/CLAUDE.md b/CLAUDE.md index f97e524..8308bb8 100644 --- a/CLAUDE.md +++ b/CLAUDE.md @@ -155,6 +155,14 @@ skipping. `skipIntroMs`/`skipOutroMs` exist on `SubscriptionEntity` and nothing Twice the better answer was restructuring instead: `Screens.kt` was split per screen and `ListenViewModel` was split into library and player halves rather than raising a limit again. +- **Debug builds are signed with the checked-in `keystore/listen-debug.keystore`**, not the + per-machine one Android generates. Two machines build this app, and differently-signed APKs + refuse to install over each other: "App not installed", or + `INSTALL_FAILED_UPDATE_INCOMPATIBLE`, with the only remedy an uninstall that destroys every + playback position. The checked-in file is tungsten's original debug keystore, with the stock + alias and password, because that is the key already on the phone. Never swap it for a fresh + one — that costs another uninstall. Never use it for a release. + - **Feeds are big.** A real subscription in testing produced 2753 episodes in one refresh. Any per-episode work — a query in a loop, an O(n²) match — needs to be considered at that scale. -- cgit v1.2.3