neoagent 2.3.1-beta.7 → 2.3.1-beta.71

package/.env.example

@@ -4,7 +4,8 @@
 
 PORT=3333
 NODE_ENV=production
-SESSION_SECRET=change-this-to-a-random-secret-in-production
+# Auto-generated on first start or setup if left blank.
+SESSION_SECRET=
 
 # Optional: dedicated key for encrypting local at-rest secrets (for example API_KEYS.json).
 # If unset, encryption falls back to SESSION_SECRET.
@@ -23,7 +24,7 @@ NEOAGENT_DEPLOYMENT_MODE=self_hosted
 # Deployment profile:
 #   private -> single-user / trusted host runtime
 #   prod    -> multi-user / isolated per-user VM runtime
-NEOAGENT_PROFILE=private
+NEOAGENT_PROFILE=prod
 
 # VM runtime settings used by `prod`.
 # Set these before switching NEOAGENT_PROFILE=prod.
@@ -38,9 +39,8 @@ NEOAGENT_VM_BASE_IMAGE=
 
 # The guest image must boot a Linux guest that runs `npm run start:guest-agent`
 # and exposes the guest agent on port 8421.
-# Replace this placeholder before using NEOAGENT_PROFILE=prod.
-# Example: openssl rand -hex 32
-NEOAGENT_VM_GUEST_TOKEN=change-this-guest-token-before-prod
+# Auto-generated on first start or setup if left blank.
+NEOAGENT_VM_GUEST_TOKEN=
 NEOAGENT_VM_MEMORY_MB=4096
 NEOAGENT_VM_CPUS=2
 
@@ -51,6 +51,15 @@ NEOAGENT_RELEASE_CHANNEL=stable
 # Example: http://localhost:3333,https://yourdomain.com
 ALLOWED_ORIGINS=
 
+########################################
+# Analytics
+########################################
+
+# Mixpanel project token used by the Flutter app.
+# Leave this blank to disable analytics, or set your own public project token.
+# Keep the token below if you want to support the development of NeoAgent with anonymous usage analytics.
+NEOAGENT_MIXPANEL_TOKEN=4a47ae6a05cf39a8faf0438a1200dde6
+
 ########################################
 # Service email
 ########################################
@@ -98,6 +107,18 @@ GOOGLE_AI_KEY=your-google-ai-key-here
 #   • MiniMax-M2.7 via the Anthropic-compatible MiniMax endpoint
 MINIMAX_API_KEY=your-minimax-api-key-here
 
+# GitHub Copilot OAuth token — used for:
+#   • Copilot-backed chat/coding models (gpt-5.3, gpt-4.1)
+# Set via: neoagent login github-copilot
+GITHUB_COPILOT_ACCESS_TOKEN=
+
+# OpenAI Codex OAuth token — used for:
+#   • Codex-backed chat/coding models (gpt-5.3-codex, gpt-4.1-codex)
+# Set via: neoagent login openai-codex
+OPENAI_CODEX_ACCESS_TOKEN=
+# Optional refresh token if your login flow returns it.
+OPENAI_CODEX_REFRESH_TOKEN=
+
 ########################################
 # Provider endpoint overrides
 ########################################
@@ -105,6 +126,10 @@ MINIMAX_API_KEY=your-minimax-api-key-here
 # OPENAI_BASE_URL=https://your-openai-compatible-endpoint/v1
 # ANTHROPIC_BASE_URL=https://your-anthropic-compatible-endpoint
 # XAI_BASE_URL=https://api.x.ai/v1
+# OPENAI_CODEX_BASE_URL=https://chatgpt.com/backend-api/codex
+# OPENAI_CODEX_EDITOR_VERSION=vscode/1.99.0
+# OPENAI_CODEX_EDITOR_PLUGIN_VERSION=neoagent/1.0.0
+# OPENAI_CODEX_USER_AGENT=NeoAgent/1.0.0
 
 ########################################
 # Official integrations
@@ -152,6 +177,17 @@ GITHUB_OAUTH_CLIENT_ID=your-github-oauth-client-id
 GITHUB_OAUTH_CLIENT_SECRET=your-github-oauth-client-secret
 GITHUB_OAUTH_REDIRECT_URI=
 
+# Spotify official integration OAuth client.
+# Redirect URI should match <PUBLIC_URL>/api/integrations/oauth/callback.
+SPOTIFY_OAUTH_CLIENT_ID=your-spotify-oauth-client-id
+SPOTIFY_OAUTH_CLIENT_SECRET=your-spotify-oauth-client-secret
+SPOTIFY_OAUTH_REDIRECT_URI=
+
+# Trello official integration API key.
+# This is used for Trello account connections in Official Integrations.
+# Users still connect their own Trello account token per agent in the UI.
+TRELLO_API_KEY=your-trello-api-key
+
 ########################################
 # Tools and media services
 ########################################
@@ -176,8 +212,13 @@ DEEPGRAM_LANGUAGE=multi
 
 OLLAMA_URL=http://localhost:11434
 
+# Local screen OCR capture (macOS desktop context recorder).
+# Set to false to disable background screen capture/OCR polling.
+NEOAGENT_SCREEN_RECORDER_ENABLED=true
+
 ########################################
 # Messaging and voice integrations
 ########################################
 
+MESHTASTIC_ENABLED=true
 TELNYX_WEBHOOK_TOKEN=

package/docs/capabilities.md

@@ -75,10 +75,10 @@ The agent tool `read_health_data` returns summaries and recent samples. It is de
 
 NeoAgent has two separate integration layers:
 
-- Official integrations expose structured tools for Google Workspace, Microsoft 365, Notion, Slack, Figma, Home Assistant, Weather, Spotify, and a separate personal WhatsApp connection.
+- Official integrations expose structured tools for Google Workspace, Microsoft 365, Notion, Slack, Figma, Home Assistant, Trello, Weather, Spotify, and a separate personal WhatsApp connection.
 - Messaging platforms let the agent talk through WhatsApp, Telegram, Discord, Slack, Google Chat, Teams, Matrix, Signal, iMessage/BlueBubbles, IRC, Twitch, LINE, Mattermost, configurable webhook bridges, and Telnyx Voice.
 
-Official integration examples include Gmail thread search and send mail, Google Calendar events, Drive upload/download/export/share links, Docs create/append/replace, Sheets read/update/append/create, Microsoft Outlook/Calendar/OneDrive/Teams tools, Notion search/page/block/database tools, Slack conversation/message tools, Figma file/node/comment/image tools, Home Assistant entity/config reads and service calls, Weather current/forecast tools plus weather-event task triggers, Spotify playback/search/control tools, and a personal WhatsApp integration with isolated chat read/send tools and per-account read-only versus read/write access.
+Official integration examples include Gmail thread search and send mail, Google Calendar events, Drive upload/download/export/share links, Docs create/append/replace, Sheets read/update/append/create, Microsoft Outlook/Calendar/OneDrive/Teams tools, Notion search/page/block/database tools, Slack conversation/message tools, Figma file/node/comment/image tools, Home Assistant entity/config reads and service calls, Trello board/list/card/comment/search tools, Weather current/forecast tools plus weather-event task triggers, Spotify playback/search/control tools, and a personal WhatsApp integration with isolated chat read/send tools and per-account read-only versus read/write access.
 
 Messaging examples include Telegram and Discord messages, Slack channel replies, Matrix room messages, Google Chat and Teams webhook delivery, Signal bridge delivery, iMessage/BlueBubbles sends, WhatsApp text and media sends, Telnyx inbound voice, Telnyx outbound calls, and scheduled-task call delivery.
 
@@ -112,7 +112,7 @@ Runtime settings let operators choose where higher-risk work runs:
 
 | Profile | Runtime shape |
 |---|---|
-| `trusted-host` | CLI, browser, and Android tools run on the host |
+| `trusted-host` | CLI and Android tools run on the host; browser runs in the VM or paired extension |
 | `secure-vm` | CLI, browser, and Android tools run through the local VM backend |
 
 Production policy can require the secure VM profile and a strong VM guest token.

package/docs/configuration.md

@@ -18,6 +18,17 @@ AI provider credentials, OAuth client secrets, and deployment controls are not c
 | `NEOAGENT_DEPLOYMENT_MODE` | `self_hosted` | `self_hosted` enables in-app update controls; `managed` hides operator-only controls for SaaS deployments. |
 | `NEOAGENT_RELEASE_CHANNEL` | `stable` | Release track used by the self-hosted updater. |
 
+## Analytics
+
+NeoAgent can send anonymous Mixpanel usage events from the Flutter client. The events cover app startup, section navigation, auth success, backend setup, onboarding dismissal, chat sends, recording start/stop, task runs, update checks, and update triggers. They do not include message content, credentials, or other app data.
+
+Set `NEOAGENT_MIXPANEL_TOKEN` to your own public Mixpanel project token to enable analytics. Leave it blank to disable analytics entirely.
+When analytics is enabled, the web client shows a dismissible cookie-consent banner until the user accepts or declines.
+
+| Variable | Default | Description |
+|---|---:|---|
+| `NEOAGENT_MIXPANEL_TOKEN` | optional | Public Mixpanel project token used by the Flutter client. |
+
 ## Service Email
 
 Service email is optional. When `NEOAGENT_EMAIL_FROM` and `NEOAGENT_EMAIL_SMTP_HOST` are set, NeoAgent uses SMTP for account security flows: signup confirmation, password reset, unusual login notifications, password change notifications, and email change notifications. Confirmation and reset links use the same `PUBLIC_URL` base as the other server-generated links.
@@ -68,7 +79,7 @@ Recording insight generation is controlled in app AI settings with `auto_recordi
 
 ## Official Integrations
 
-Official integrations use OAuth or provider-native account linking and expose structured tools to the agent. The built-in registry currently covers Google Workspace, Notion, Microsoft 365, Slack, Figma, Home Assistant, Weather, Spotify, and personal WhatsApp.
+Official integrations use OAuth or provider-native account linking and expose structured tools to the agent. The built-in registry currently covers Google Workspace, Notion, Microsoft 365, Slack, Figma, Home Assistant, Trello, Weather, Spotify, and personal WhatsApp.
 
 All OAuth callbacks default to `PUBLIC_URL + /api/integrations/oauth/callback` unless you set a provider-specific redirect URI.
 
@@ -90,17 +101,14 @@ All OAuth callbacks default to `PUBLIC_URL + /api/integrations/oauth/callback` u
 | `FIGMA_OAUTH_CLIENT_ID` | Figma OAuth client ID |
 | `FIGMA_OAUTH_CLIENT_SECRET` | Figma OAuth client secret |
 | `FIGMA_OAUTH_REDIRECT_URI` | Optional Figma OAuth callback URL |
-| `HOME_ASSISTANT_BASE_URL` | Optional fallback Home Assistant base URL. Users can configure this per account in Official Integrations. |
-| `HOME_ASSISTANT_OAUTH_CLIENT_ID` | Optional fallback Home Assistant OAuth client ID. |
-| `HOME_ASSISTANT_OAUTH_CLIENT_SECRET` | Optional fallback Home Assistant OAuth client secret. |
-| `HOME_ASSISTANT_OAUTH_REDIRECT_URI` | Optional fallback Home Assistant OAuth callback URL. |
-| `HOME_ASSISTANT_ALLOW_PRIVATE_BASE_URL` | Optional safety override. Set to `1` only if you intentionally allow Home Assistant base URLs on localhost/private networks. |
+| `TRELLO_API_KEY` | Optional Trello Power-Up API key. If set, users only need to provide their personal token in Official Integrations. |
 | `SPOTIFY_OAUTH_CLIENT_ID` | Spotify OAuth client ID |
 | `SPOTIFY_OAUTH_CLIENT_SECRET` | Spotify OAuth client secret |
 | `SPOTIFY_OAUTH_REDIRECT_URI` | Optional Spotify OAuth callback URL |
 
-Home Assistant no longer requires server-side setup. Each user can open Official Integrations, select Home Assistant, and enter their own base URL and OAuth app credentials.
-For safety, local/private Home Assistant targets are blocked by default unless `HOME_ASSISTANT_ALLOW_PRIVATE_BASE_URL=1` is set on the server.
+Home Assistant and Trello no longer require server-side setup. Each user can open Official Integrations and enter their own provider-specific credentials in the Flutter UI.
+
+Trello integration is flexible: users can provide both API key and token in the UI, or if `TRELLO_API_KEY` is set as a server environment variable, users only need to authenticate with their personal token. Tokens are stored securely per user and are never added to server environment variables.
 
 Weather integration uses Open-Meteo public endpoints and does not require OAuth environment variables.
 
@@ -122,11 +130,11 @@ Telnyx webhook verification is configured through the environment.
 
 ## Runtime Isolation
 
-Runtime profile and backend selection are stored in user settings, not normally in `.env`. The main profiles are `trusted-host` and `secure-vm`. They control whether CLI, browser, and Android tools run on the host or through the local VM backend.
+Runtime profile and backend selection are stored in user settings, not normally in `.env`. The main profiles are `trusted-host` and `secure-vm`. CLI and Android tools may still follow the selected runtime profile, but browser control is always isolated: the non-extension browser backend runs in the VM, not on the host device.
 
 Production policy can require the VM backend. In that case, set a strong `NEOAGENT_VM_GUEST_TOKEN` of at least 32 characters and avoid placeholder values.
 
-The app exposes two browser backend choices: Cloud and Chrome extension. Cloud uses the current deployment policy, which means host browser control for trusted private installs and VM browser control for isolated production installs. Chrome extension uses the paired extension connection instead of the server-local Puppeteer browser. To install only the extension on a remote machine, open NeoAgent, download `/api/browser-extension/download`, unzip it, load the folder through `chrome://extensions` with Developer mode enabled, then pair after logging in to NeoAgent. Unpacked Chrome extensions cannot replace themselves automatically; use the extension popup's update check to compare against the server bundle, then download and reload the latest ZIP when needed.
+The app exposes two browser backend choices: VM and Chrome extension. VM uses the local isolated runtime. Chrome extension uses the paired extension connection on the remote machine instead of the server-local browser. To install only the extension on a remote machine, open NeoAgent, download `/api/browser-extension/download`, unzip it, load the folder through `chrome://extensions` with Developer mode enabled, then pair after logging in to NeoAgent. Unpacked Chrome extensions cannot replace themselves automatically; use the extension popup's update check to compare against the server bundle, then download and reload the latest ZIP when needed.
 
 ## Secrets Guidance
 

package/docs/hardware.md

@@ -5,4 +5,4 @@ sidebar_label: Hardware
 
 # Hardware
 
-There is no dedicated hardware or wearable firmware bundled with NeoAgent.
+NeoAgent includes a dedicated ESP-IDF wearable firmware target under `firmware/neoagent_wearable_esp32s3_amoled` for the Waveshare ESP32-S3 Touch AMOLED 1.8 board.

package/docs/integrations.md

@@ -14,12 +14,11 @@ The built-in registry includes:
 | Slack | Conversations, history, posting, search, user info, and Slack Web API requests |
 | Figma | Current user, files, nodes, rendered images, comments, and Figma REST requests |
 | Home Assistant | Entity/config reads, service calls, and Home Assistant REST API requests |
+| Trello | Boards, lists, cards, comments, search, and Trello REST API requests |
 | Weather | Keyless Open-Meteo current weather and forecast tools |
 | Spotify | Playback state, recently played, search, and playback controls |
 
-OAuth app credentials are configured through server environment variables for most providers. Home Assistant can also be configured per-user in the Flutter **Integrations** UI without any server-side setup. Account connections are created in the Flutter UI under **Integrations**. Connected tools are exposed to the agent as structured tools, so prefer them over browser automation when they can do the job.
-
-Weather note: the Weather integration uses Open-Meteo public APIs and does not require OAuth client credentials.
+OAuth app credentials are configured through server environment variables for most providers. Home Assistant and Trello can also be configured per-user in the Flutter **Integrations** UI without any server-side setup. Account connections are created in the Flutter UI under **Integrations**. Connected tools are exposed to the agent as structured tools, so prefer them over browser automation when they can do the job.
 
 ### Per-Account Access Mode
 

package/flutter_app/.metadata

@@ -0,0 +1,42 @@
+# This file tracks properties of this Flutter project.
+# Used by Flutter tool to assess capabilities and perform upgrades etc.
+#
+# This file should be version controlled and should not be manually edited.
+
+version:
+  revision: "ac4e799d237041cf905519190471f657b657155a"
+  channel: "stable"
+
+project_type: app
+
+# Tracks metadata for the flutter migrate command
+migration:
+  platforms:
+    - platform: root
+      create_revision: ac4e799d237041cf905519190471f657b657155a
+      base_revision: ac4e799d237041cf905519190471f657b657155a
+    - platform: android
+      create_revision: ac4e799d237041cf905519190471f657b657155a
+      base_revision: ac4e799d237041cf905519190471f657b657155a
+    - platform: linux
+      create_revision: ac4e799d237041cf905519190471f657b657155a
+      base_revision: ac4e799d237041cf905519190471f657b657155a
+    - platform: macos
+      create_revision: ac4e799d237041cf905519190471f657b657155a
+      base_revision: ac4e799d237041cf905519190471f657b657155a
+    - platform: web
+      create_revision: ac4e799d237041cf905519190471f657b657155a
+      base_revision: ac4e799d237041cf905519190471f657b657155a
+    - platform: windows
+      create_revision: ac4e799d237041cf905519190471f657b657155a
+      base_revision: ac4e799d237041cf905519190471f657b657155a
+
+  # User provided section
+
+  # List of Local paths (relative to this file) that should be
+  # ignored by the migrate tool.
+  #
+  # Files that are not part of the templates will be ignored by default.
+  unmanaged_files:
+    - 'lib/main.dart'
+    - 'ios/Runner.xcodeproj/project.pbxproj'

package/flutter_app/README.md

@@ -0,0 +1,21 @@
+# neoagent_flutter
+
+A new Flutter project.
+
+## Getting Started
+
+This project is a starting point for a Flutter application.
+
+A few resources to get you started if this is your first Flutter project:
+
+- [Lab: Write your first Flutter app](https://docs.flutter.dev/get-started/codelab)
+- [Cookbook: Useful Flutter samples](https://docs.flutter.dev/cookbook)
+
+For help getting started with Flutter development, view the
+[online documentation](https://docs.flutter.dev/), which offers tutorials,
+samples, guidance on mobile development, and a full API reference.
+
+## Desktop audio capture note
+
+Desktop recording currently depends on `desktop_audio_capture` and is pinned to
+`0.0.2` to avoid unexpected API shifts from automatic minor updates.

package/flutter_app/analysis_options.yaml

@@ -0,0 +1,32 @@
+# This file configures the analyzer, which statically analyzes Dart code to
+# check for errors, warnings, and lints.
+#
+# The issues identified by the analyzer are surfaced in the UI of Dart-enabled
+# IDEs (https://dart.dev/tools#ides-and-editors). The analyzer can also be
+# invoked from the command line by running `flutter analyze`.
+
+# The following line activates a set of recommended lints for Flutter apps,
+# packages, and plugins designed to encourage good coding practices.
+include: package:flutter_lints/flutter.yaml
+
+analyzer:
+  exclude:
+    - third_party/**
+
+linter:
+  # The lint rules applied to this project can be customized in the
+  # section below to disable rules from the `package:flutter_lints/flutter.yaml`
+  # included above or to enable additional rules. A list of all available lints
+  # and their documentation is published at https://dart.dev/lints.
+  #
+  # Instead of disabling a lint rule for the entire project in the
+  # section below, it can also be suppressed for a single line of code
+  # or a specific dart file by using the `// ignore: name_of_lint` and
+  # `// ignore_for_file: name_of_lint` syntax on the line or in the file
+  # producing the lint.
+  rules:
+    # avoid_print: false  # Uncomment to disable the `avoid_print` rule
+    # prefer_single_quotes: true  # Uncomment to enable the `prefer_single_quotes` rule
+
+# Additional information about this file can be found at
+# https://dart.dev/guides/language/analysis-options

package/flutter_app/android/app/build.gradle.kts

@@ -0,0 +1,111 @@
+import java.util.Properties
+
+plugins {
+    id("com.android.application")
+    id("kotlin-android")
+    // The Flutter Gradle Plugin must be applied after the Android and Kotlin Gradle plugins.
+    id("dev.flutter.flutter-gradle-plugin")
+}
+
+val envReleaseKeystorePath = System.getenv("ANDROID_KEYSTORE_PATH")?.trim().orEmpty()
+val envReleaseKeystorePassword = System.getenv("ANDROID_KEYSTORE_PASSWORD")?.trim().orEmpty()
+val envReleaseKeyAlias = System.getenv("ANDROID_KEY_ALIAS")?.trim().orEmpty()
+val envReleaseKeyPassword = System.getenv("ANDROID_KEY_PASSWORD")?.trim().orEmpty()
+val keyPropertiesFile = rootProject.file("key.properties")
+val keyProperties = Properties()
+if (keyPropertiesFile.exists()) {
+    keyPropertiesFile.inputStream().use(keyProperties::load)
+}
+val repoReleaseKeystorePath = keyProperties.getProperty("storeFile", "").trim()
+val repoReleaseKeystorePassword = keyProperties.getProperty("storePassword", "").trim()
+val repoReleaseKeyAlias = keyProperties.getProperty("keyAlias", "").trim()
+val repoReleaseKeyPassword = keyProperties.getProperty("keyPassword", "").trim()
+val hasEnvReleaseSigning =
+    envReleaseKeystorePath.isNotEmpty() &&
+        envReleaseKeystorePassword.isNotEmpty() &&
+        envReleaseKeyAlias.isNotEmpty() &&
+        envReleaseKeyPassword.isNotEmpty()
+val hasRepoReleaseSigning =
+    repoReleaseKeystorePath.isNotEmpty() &&
+        repoReleaseKeystorePassword.isNotEmpty() &&
+        repoReleaseKeyAlias.isNotEmpty() &&
+        repoReleaseKeyPassword.isNotEmpty()
+val launcherBuild =
+    System.getenv("NEOAGENT_ANDROID_LAUNCHER_MODE")
+        ?.trim()
+        ?.lowercase() in setOf("1", "true", "yes", "on")
+val applicationIdValue =
+    if (launcherBuild) "com.neoagent.flutter_app.launcher" else "com.neoagent.flutter_app"
+val applicationLabelValue = if (launcherBuild) "NeoAgent Launcher" else "NeoAgent"
+val androidAppModeValue = if (launcherBuild) "launcher" else "standard"
+val launcherHomeEnabledValue = launcherBuild.toString()
+
+android {
+    namespace = "com.neoagent.flutter_app"
+    compileSdk = flutter.compileSdkVersion
+    ndkVersion = flutter.ndkVersion
+
+    compileOptions {
+        sourceCompatibility = JavaVersion.VERSION_11
+        targetCompatibility = JavaVersion.VERSION_11
+    }
+
+    kotlinOptions {
+        jvmTarget = JavaVersion.VERSION_11.toString()
+    }
+
+    defaultConfig {
+        applicationId = applicationIdValue
+        minSdk = 26
+        targetSdk = flutter.targetSdkVersion
+        versionCode = flutter.versionCode
+        versionName = flutter.versionName
+        manifestPlaceholders["neoagentAppLabel"] = applicationLabelValue
+        manifestPlaceholders["neoagentAppMode"] = androidAppModeValue
+        manifestPlaceholders["neoagentLauncherHomeEnabled"] =
+            launcherHomeEnabledValue
+    }
+
+    signingConfigs {
+        if (hasEnvReleaseSigning) {
+            create("release") {
+                storeFile = file(envReleaseKeystorePath)
+                storePassword = envReleaseKeystorePassword
+                keyAlias = envReleaseKeyAlias
+                keyPassword = envReleaseKeyPassword
+            }
+        } else if (hasRepoReleaseSigning) {
+            create("release") {
+                storeFile = rootProject.file(repoReleaseKeystorePath)
+                storePassword = repoReleaseKeystorePassword
+                keyAlias = repoReleaseKeyAlias
+                keyPassword = repoReleaseKeyPassword
+            }
+        }
+    }
+
+    buildTypes {
+        release {
+            signingConfig =
+                if (hasEnvReleaseSigning || hasRepoReleaseSigning) {
+                    signingConfigs.getByName("release")
+                } else {
+                    signingConfigs.getByName("debug")
+                }
+        }
+    }
+}
+
+dependencies {
+    implementation("androidx.activity:activity-ktx:1.10.1")
+    implementation("androidx.car.app:app:1.7.0")
+    implementation("androidx.car.app:app-projected:1.7.0")
+    implementation("androidx.health.connect:connect-client:1.1.0")
+    implementation("androidx.security:security-crypto:1.1.0")
+    implementation("androidx.work:work-runtime-ktx:2.10.1")
+    implementation("org.jetbrains.kotlinx:kotlinx-coroutines-android:1.9.0")
+}
+
+flutter {
+    source = "../.."
+}

package/flutter_app/android/app/src/debug/AndroidManifest.xml

@@ -0,0 +1,7 @@
+<manifest xmlns:android="http://schemas.android.com/apk/res/android">
+    <!-- The INTERNET permission is required for development. Specifically,
+         the Flutter tool needs it to communicate with the running application
+         to allow setting breakpoints, to provide hot reload, etc.
+    -->
+    <uses-permission android:name="android.permission.INTERNET"/>
+</manifest>

package/flutter_app/android/app/src/main/AndroidManifest.xml

@@ -0,0 +1,171 @@
+<manifest xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:tools="http://schemas.android.com/tools">
+    <uses-permission android:name="android.permission.INTERNET" />
+    <uses-permission android:name="android.permission.MANAGE_OWN_CALLS" />
+    <uses-permission android:name="android.permission.CAMERA" />
+    <uses-permission android:name="android.permission.RECORD_AUDIO" />
+    <uses-permission android:name="android.permission.RECEIVE_BOOT_COMPLETED" />
+    <uses-permission android:name="android.permission.FOREGROUND_SERVICE" />
+    <uses-permission android:name="android.permission.FOREGROUND_SERVICE_DATA_SYNC" />
+    <uses-permission android:name="android.permission.FOREGROUND_SERVICE_MICROPHONE" />
+    <uses-permission android:name="android.permission.health.READ_STEPS" />
+    <uses-permission android:name="android.permission.health.READ_HEART_RATE" />
+    <uses-permission android:name="android.permission.health.READ_SLEEP" />
+    <uses-permission android:name="android.permission.health.READ_EXERCISE" />
+    <uses-permission android:name="android.permission.health.READ_WEIGHT" />
+    <uses-permission android:name="android.permission.health.READ_HEALTH_DATA_IN_BACKGROUND" />
+    <uses-permission android:name="android.permission.REQUEST_INSTALL_PACKAGES" />
+    <uses-permission android:name="android.permission.ACCESS_FINE_LOCATION" />
+    <uses-permission android:name="android.permission.ACCESS_COARSE_LOCATION" />
+    <uses-permission android:name="android.permission.ACCESS_BACKGROUND_LOCATION" />
+
+    <queries>
+        <package android:name="com.google.android.apps.healthdata" />
+        <intent>
+            <action android:name="android.intent.action.PROCESS_TEXT"/>
+            <data android:mimeType="text/plain"/>
+        </intent>
+    </queries>
+
+    <application
+        android:label="${neoagentAppLabel}"
+        android:name="${applicationName}"
+        android:icon="@mipmap/ic_launcher"
+        android:usesCleartextTraffic="true">
+        <meta-data
+            android:name="com.google.android.gms.car.application"
+            android:resource="@xml/automotive_app_desc" />
+        <activity
+            android:name=".MainActivity"
+            android:exported="true"
+            android:launchMode="singleTop"
+            android:taskAffinity=""
+            android:theme="@style/LaunchTheme"
+            android:configChanges="orientation|keyboardHidden|keyboard|screenSize|smallestScreenSize|locale|layoutDirection|fontScale|screenLayout|density|uiMode"
+            android:hardwareAccelerated="true"
+            android:windowSoftInputMode="adjustResize">
+            <!-- Specifies an Android theme to apply to this Activity as soon as
+                 the Android process has started. This theme is visible to the user
+                 while the Flutter UI initializes. After that, this theme continues
+                 to determine the Window background behind the Flutter UI. -->
+            <meta-data
+              android:name="io.flutter.embedding.android.NormalTheme"
+              android:resource="@style/NormalTheme"
+              />
+            <intent-filter>
+                <action android:name="android.intent.action.MAIN"/>
+                <category android:name="android.intent.category.LAUNCHER"/>
+            </intent-filter>
+        </activity>
+        <provider
+            android:name="androidx.core.content.FileProvider"
+            android:authorities="${applicationId}.fileprovider"
+            android:exported="false"
+            android:grantUriPermissions="true">
+            <meta-data
+                android:name="android.support.FILE_PROVIDER_PATHS"
+                android:resource="@xml/file_paths" />
+        </provider>
+        <activity-alias
+            android:name=".LauncherHomeAlias"
+            android:enabled="${neoagentLauncherHomeEnabled}"
+            android:exported="true"
+            android:label="${neoagentAppLabel}"
+            android:targetActivity=".MainActivity">
+            <intent-filter>
+                <action android:name="android.intent.action.MAIN" />
+                <category android:name="android.intent.category.HOME" />
+                <category android:name="android.intent.category.DEFAULT" />
+            </intent-filter>
+        </activity-alias>
+        <activity
+            android:name=".health.PermissionsRationaleActivity"
+            android:exported="false" />
+        <activity
+            android:name=".widgets.WidgetConfigActivity"
+            android:exported="true"
+            android:theme="@style/LaunchTheme" />
+        <activity-alias
+            android:name=".ViewPermissionUsageActivity"
+            android:exported="true"
+            android:permission="android.permission.START_VIEW_PERMISSION_USAGE"
+            android:targetActivity=".health.PermissionsRationaleActivity">
+            <intent-filter>
+                <action android:name="android.intent.action.VIEW_PERMISSION_USAGE" />
+                <category android:name="android.intent.category.HEALTH_PERMISSIONS" />
+            </intent-filter>
+        </activity-alias>
+        <service
+            android:name="androidx.work.impl.foreground.SystemForegroundService"
+            android:foregroundServiceType="dataSync"
+            tools:node="merge" />
+        <service
+            android:name=".telecom.NeoAgentConnectionService"
+            android:exported="true"
+            android:permission="android.permission.BIND_TELECOM_CONNECTION_SERVICE">
+            <intent-filter>
+                <action android:name="android.telecom.ConnectionService" />
+            </intent-filter>
+        </service>
+        
+        <service
+            android:name=".auto.NeoAgentCarAppService"
+            android:exported="true">
+            <intent-filter>
+                <action android:name="androidx.car.app.CarAppService" />
+                <category android:name="androidx.car.app.category.IOT" />
+            </intent-filter>
+            <meta-data
+                android:name="androidx.car.app.minCarApiLevel"
+                android:value="1" />
+        </service>
+        <service
+            android:name=".recording.RecordingForegroundService"
+            android:exported="false"
+            android:foregroundServiceType="microphone|connectedDevice" />
+        <receiver
+            android:name=".recording.RecordingBootReceiver"
+            android:enabled="true"
+            android:exported="false">
+            <intent-filter>
+                <action android:name="android.intent.action.BOOT_COMPLETED" />
+            </intent-filter>
+        </receiver>
+        <receiver
+            android:name=".widgets.AiHomeWidgetProvider"
+            android:exported="true">
+            <intent-filter>
+                <action android:name="android.appwidget.action.APPWIDGET_UPDATE" />
+            </intent-filter>
+            <meta-data
+                android:name="android.appwidget.provider"
+                android:resource="@xml/neoagent_ai_widget_info" />
+        </receiver>
+        <receiver
+            android:name=".widgets.VoiceLaunchWidgetProvider"
+            android:exported="true">
+            <intent-filter>
+                <action android:name="android.appwidget.action.APPWIDGET_UPDATE" />
+            </intent-filter>
+            <meta-data
+                android:name="android.appwidget.provider"
+                android:resource="@xml/neoagent_voice_widget_info" />
+        </receiver>
+        <meta-data
+            android:name="com.neoagent.APP_MODE"
+            android:value="${neoagentAppMode}" />
+        <meta-data
+            android:name="flutterEmbedding"
+            android:value="2" />
+            
+        <!-- Notification Listener Service for Interception -->
+        <service android:name="notification.listener.service.NotificationListener"
+                 android:label="NeoAgent Notifications"
+                 android:permission="android.permission.BIND_NOTIFICATION_LISTENER_SERVICE"
+                 android:exported="true">
+            <intent-filter>
+                <action android:name="android.service.notification.NotificationListenerService" />
+            </intent-filter>
+        </service>
+    </application>
+</manifest>