Per-app settings never worked: a hooked app reads Veil's config through
XSharedPreferences, which for a legacy module points at Veil's private
data dir (/data/data/space.bdeshi.veil/shared_prefs). Hooked apps can't
read it, so every app silently fell back to "hide everything" and every
toggle, hidden-package edit and picker entry was ignored. Confirmed on
device with Veil Probe: unticking a feature changed nothing.
The framework's fix for this (xposedsharedprefs, redirecting the module's
prefs dir to one hooked apps can read) needs the framework to hook Veil's
own process. On Vector v2.2 here it never does, even with Veil in its own
scope and after a reboot, so there's no reliable channel from Veil's app
to a hooked app.
So stop pretending there is one:
- VeilHook applies all six features with the fixed Features.HIDDEN_PACKAGES
(KernelSU, Magisk, Veil) to every app in scope, with no prefs read.
- Remove discovery: the Application#attach hook, the exported provider
(one less way for an app to spot Veil) and the launcher <queries>.
- The settings screen becomes a read-only summary plus the help panel;
help tips cover leaving an app out of scope, changing the list by
rebuilding, and turning verbose logging off afterwards, since it
names Veil in each hooked app's own logcat.
Verified on device: all 24 testable hooked paths in Veil Probe stay
hidden, Veil's provider no longer resolves, a scoped app still loads Veil.
Co-Authored-By: agent <agent@bdeshi.space>
An installed hooking module is as much a tell as a root manager, but
Veil's own package wasn't in the hidden list, so any scoped app could
find it with getPackageInfo or the installed-package lists. It's now a
default alongside KernelSU and Magisk.
DEFAULT_HIDDEN_PACKAGES only applies while no list has been saved, so a
one-time migration adds Veil to an existing list the first time the
settings screen opens; a flag stops it from re-adding Veil after a
manual removal.
Discovery is unaffected: the hooked process resolves Veil's provider
through ActivityManager, not the hooked ApplicationPackageManager.
Verified on device (Android 16, Vector) with Veil Probe: getPackageInfo
for Veil now throws NameNotFoundException, the probe still registers,
and every other hooked path stays hidden.
Co-Authored-By: agent <agent@bdeshi.space>
- Real release build type: R8 shrinking + shrunk resources, with a keep
rule for VeilHook specifically — LSPosed finds it by exact class name via
the plaintext xposed_init asset, which R8 can't see, so obfuscating it
would silently break module loading with no build error to point at why.
- Signing config that reads keystore.properties if present (gitignored,
generated via scripts/generate-keystore.sh), falling back to debug
signing otherwise so assembleRelease always produces something
installable.
- scripts/release.sh builds and copies a version-stamped APK into dist/.
- GitHub Actions workflow building and publishing a release on any tag
matching *.*.* (bare semver, e.g. 1.2.0 — no v prefix required), optionally
using repo secrets for real release signing in CI.
- README covering setup, the feature table, and the DenyList gotcha.
No native code in this module, so a single APK already covers every
architecture — no per-ABI splitting needed.
Co-Authored-By: agent <agent@bdeshi.space>
bdeshiandagent