Understory Manager

Understory Manager — the OPTIONAL suite control center. It gives you one place to see which Understory apps are installed, open them, confirm each is genuine (signed with the suite key), run a quick rootless security sweep, grant Shizuku once for a couple of suite-wide conveniences, and remember to export each vault app's recovery file. It is complement-not-replace: every suite app works fully standalone, and the Manager degrades honestly to exactly what is installed.

What it does:

Suite dashboard — detects the seven suite apps via PackageManager, shows each installed app's name, one-line purpose, versionName, a "verified" chip (cert-pinned against the suite key), and a "provides…" capability chip when the live SuiteCapabilityRegistry confirms it. Not-installed apps show subtly as "not installed"; a tampered sibling (installed but cert-mismatched) is flagged in red. One-tap Open launches any installed app. Security sweep — a one-tap, rootless device-posture read the Manager can do itself: which apps hold accessibility / device-admin / notification-listener access, the Private DNS state, and the installed-app count. It summarizes with a per-item verdict and deep-links to a specialist app (APK Check for a full audit, Net Audit for network posture). It does not duplicate the deep scanners. Elevation center — hosts the shared ElevationCard so you can grant Shizuku to the Manager in one place. When granted, it offers a suite-wide convenience it can perform itself (Apply Private DNS via Elevation.setPrivateDns); ungranted, it degrades to a rootless Settings deep-link. Each app still manages its own Shizuku grant separately. Recovery center — lists the installed vault apps (PassGen, Aegis, Vault Folder, Backups) with a reminder to export each app's recovery file and an Open deep-link. The Manager cannot read a vault cross-UID — it orchestrates and reminds. It never renders or asks for any recovery secret. Honest by design: no fabricated cross-app data, no dead controls, no secret on screen. Rootless by default; Shizuku is strictly optional.

Status: alpha (functional; part of the suite release-blockers list in understory-common).