Spotufi

• [!WARNING] Important Signing Key Change: The signing key for this release has been updated. If you try to update directly from previous versions, you may encounter an App not installed or signature mismatch error.
• Performance — player hot path: SongPlayer.applyState no longer rebuilds the current song or re-runs track-bound side effects on every engine state push; songOf() results are cached per track; songIndexInQueue is O(1) instead of O(n); SpeakerKeepAlive drops repeat sets; position persists are throttled to every 10 s; last position is saved on a background dispatcher. - Performance — Compose: 14 collectAsState() calls replaced with lifecycle-aware collection; ~24 lazy lists gained stable keys; LibraryScreen, DownloadsScreen and the Local Files filter moved into derivedStateOf; the playlist header/cover fade is painted in the draw phase instead of recomposing per scrolled pixel; pressable/pressScale converted from Modifier.composed to composable factories (press animation now redraws instead of recomposing); gesture detectors are keyed on Unit with rememberUpdatedState so they survive recomposition; the setup permission screen no longer polls every 800 ms. - Performance — startup/scroll: mixed-type search results gained a contentType; the scrollbar thumb reads scroll state in the layout phase; SongsModel, LocalTrack and ContextPageModel marked @Immutable so equal-but-new rows skip instead of recompose; the accent picker reads Compose state instead of SharedPreferences per swatch. - Security: SpotiFLAC session_id/session_secret are now encrypted at rest with an Android Keystore-backed AES-GCM key (no deprecated security-crypto); undecryptable values are dropped instead of leaked; encryption failure never writes plaintext. - Security — WebView: WebPlayerHost explicitly sets allowFileAccess=false, allowContentAccess=false, no file-URL cross-origin, MIXED_CONTENT_NEVER_ALLOW, safe browsing on; debugging stays gated on the debuggable flag. Security — FileProvider: file_paths.xml narrowed from path="." to path="diagnostics/". Correctness: nullable platform/IO results in AacTranscoder, AudioAlign, Fingerprint, CdpHost, Gql, MainBottomNavigation, PodcastPlayerScreen, ContextScreen, Api, etc. no longer crash with !!; pressable no longer drops modifiers chained before it (fixes tiny login/play buttons and oversized share icon); release builds refuse to sign with the debug key when a version is passed. Build / size: R8 keep rules trimmed (stale Firebase/Room/WorkManager/Glance/metrolist/protobuf/BouncyCastle removed); unused dependency catalog entries and the duplicate app_sans.ttf font removed; debug builds signed with the standard Android debug key; added a benchmark build type with a profileable manifest overlay; APK size down ~1.47 MB universal (18.40 MB → 16.93 MB). - CI: concurrency + timeouts, separate JVM/Android test jobs, compression-level: 9, SHA-256 checksums on releases, Dependabot config, separate debug APK uploads. Docs: AGENTS.md version line now points at the real version sources; perf reports added under docs/.

Write a review