Cut 0.2 for the F-Droid submission: it carries the opus playback fix, transactional session bring-up and teardown, the activity hardening, and the release-input verification. versionCode 2 corresponds to the already-written changelog for the store listing.
Pin and verify what goes into a release: JitPack confined to the SPAKE2 module via exclusiveContent, the vendored subtree pulled by commit SHA instead of a mutable tag, a pinned Docker base digest with a checksummed cmdline-tools download, and a verifyScrcpyServer task wired into every assets merge. The expected server checksum can be overridden with -PscrcpyServerSha256 when the jar is built from source. build-apk now requires apksigner and fails unless independent signature verification succeeds. Split the test image into unit and e2e targets so JVM-only test runs do not download an emulator. Ship THIRD_PARTY_NOTICES and the LGPL text for SPAKE2 in the APK. Add scripts/check as the host quality gate.
Opus playback never worked: feed() called dequeueInputBuffer() on a codec in async-callback mode, which always throws, so every packet was silently dropped. Feed input through the async callback with a bounded pending queue instead. Make bring-up transactional: roll back partially opened streams and the server shell on failure, join reader threads on stop, and close the owning ADB streams before releasing sinks. Replace the openAbstract watchdog thread with a real timeout in the vendored AdbConnection.open(), which also removes the half-open stream from the lookup table on failure. Harden the activity: release owned Surfaces, gate callbacks on a destroyed flag and a session generation, serialize reconnect, and handle target replacement via singleTask + onNewIntent. Propagate device-list write failures instead of swallowing them, bound the clipboard payload and the video pending queue against hostile peers, and discard incomplete recordings instead of keeping corrupt files. Use the mediaPlayback foreground-service type; Android 15 stops dataSync services after six hours. Drop the unused ACCESS_NETWORK_STATE permission.
The layout section did not mention the scrcpy submodule (used by the F-Droid build to compile scrcpy-server from source) or the fastlane store metadata. The build steps told everyone to run fetch-vendor, but the vendored tree is committed; the script is only for bumping the pin, and running it mutates local history via git subtree.
The launcher icon is adaptive-XML-only (vector drawables, no raster mipmaps), which fdroidserver cannot extract from the APK, so the F-Droid listing would ship without an icon. Provide the 512x512 PNG via fastlane metadata: rendered 1:1 from the adaptive-icon vector drawables, cropped to the inner 72dp of the 108dp viewport.
AGP 8.7 downloads build-tools;34.0.0 into the SDK at build time when it is missing, which made the first test run in a fresh image reach for the network. Bake it into the image.
The sed line range broke silently whenever the header grew or shrank. Print from line 2 down to the first non-comment line instead, so the usage text tracks the header.
Group names resolved on the host do not exist inside the container, so the "kvm" fallback broke --group-add on hosts where getent found no kvm group. stat the device instead; the numeric gid is all that matters and /dev/kvm is already known to exist at this point.
The tag suffix had to be bumped by hand whenever the Dockerfile or sdk-packages.txt changed; forgetting meant silently testing against a stale image. Hash the two files into the tag so any edit invalidates the cache automatically.