chore: reconcile classic app changes from upstream

.github/upstream-sync-baseline

@@ -0,0 +1 @@
+48ce3af5b4cd9b818d44edca4249a15d48e2170f

.github/workflows/upstream-audit.yml

@@ -0,0 +1,48 @@
+name: Audit upstream changes
+
+on:
+  schedule:
+    - cron: "17 6 * * 1"
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  issues: write
+
+jobs:
+  audit:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          fetch-depth: 0
+
+      - name: Generate upstream reconciliation report
+        id: audit
+        shell: bash
+        run: scripts/upstream-audit.sh "$RUNNER_TEMP/upstream-audit.md"
+
+      - name: Create or update reconciliation issue
+        if: steps.audit.outputs.has_changes == 'true'
+        env:
+          GH_TOKEN: ${{ github.token }}
+          REPORT: ${{ runner.temp }}/upstream-audit.md
+        shell: bash
+        run: |
+          set -euo pipefail
+          issue_number="$(
+            gh issue list \
+              --state open \
+              --search '"Upstream reconciliation pending" in:title' \
+              --json number,title \
+              --jq '.[] | select(.title == "Upstream reconciliation pending") | .number' \
+              | head -n 1
+          )"
+
+          if [[ -n "$issue_number" ]]; then
+            gh issue edit "$issue_number" --body-file "$REPORT"
+          else
+            gh issue create \
+              --title "Upstream reconciliation pending" \
+              --body-file "$REPORT"
+          fi

app/src/main/AndroidManifest.xml

@@ -8,6 +8,7 @@
   android:installLocation="auto">
 
   <uses-permission android:name="android.permission.INTERNET" />
+  <uses-permission android:name="android.permission.ACCESS_LOCAL_NETWORK" />
   <uses-permission android:name="android.permission.FOREGROUND_SERVICE" />
   <!-- Required by Autofill to verify the certificate hashes of packages -->
   <uses-permission

app/src/main/java/app/passwordstore/Application.kt

@@ -19,6 +19,7 @@ import android.view.View
 import android.view.WindowInsetsController
 import androidx.appcompat.app.AppCompatDelegate
 import app.passwordstore.injection.context.FilesDirPath
+import app.passwordstore.injection.prefs.PGPPassphrases
 import app.passwordstore.injection.prefs.SettingsPreferences
 import app.passwordstore.ui.crypto.BasePGPActivity.Companion.cachedPassphrases
 import app.passwordstore.util.coroutines.DispatcherProvider
@@ -46,6 +47,7 @@ class Application : android.app.Application(), SharedPreferences.OnSharedPrefere
 
   @Inject @SettingsPreferences lateinit var prefs: SharedPreferences
   @Inject @FilesDirPath lateinit var filesDirPath: String
+  @Inject @PGPPassphrases lateinit var persistentPassphrases: SharedPreferences
   @Inject lateinit var dispatcherProvider: DispatcherProvider
   @Inject lateinit var gitSettings: GitSettings
   @Inject lateinit var proxyUtils: ProxyUtils
@@ -68,7 +70,7 @@ class Application : android.app.Application(), SharedPreferences.OnSharedPrefere
     logcat { "Debug logging enabled." }
     prefs.registerOnSharedPreferenceChangeListener(this)
     setNightMode()
-    runMigrations(filesDirPath, prefs, gitSettings)
+    runMigrations(filesDirPath, prefs, gitSettings, persistentPassphrases)
     proxyUtils.setDefaultProxy()
     DynamicColors.applyToActivitiesIfAvailable(this)
     setupScreenOffHandler()

app/src/main/java/app/passwordstore/injection/prefs/PreferenceModule.kt

@@ -6,7 +6,6 @@
 package app.passwordstore.injection.prefs
 
 import android.content.Context
-import android.content.Context.MODE_PRIVATE
 import android.content.SharedPreferences
 import app.passwordstore.BuildConfig
 import dagger.Module
@@ -34,16 +33,21 @@ class PreferenceModule {
 
   @[Provides SettingsPreferences Reusable]
   fun provideSettingsPreferences(@ApplicationContext context: Context): SharedPreferences {
-    return context.getSharedPreferences("${BuildConfig.APPLICATION_ID}_preferences", MODE_PRIVATE)
+    return context.getSharedPreferences("${BuildConfig.APPLICATION_ID}_preferences", 0)
   }
 
   @[Provides PGPPassphrases Reusable]
   fun providePGPPassphrases(@ApplicationContext context: Context): SharedPreferences {
-    return context.getSharedPreferences("${BuildConfig.APPLICATION_ID}_passphrases", MODE_PRIVATE)
+    return context.getSharedPreferences("${BuildConfig.APPLICATION_ID}_passphrases", 0)
+  }
+
+  @[Provides UnlockPins Reusable]
+  fun provideUnlockPins(@ApplicationContext context: Context): SharedPreferences {
+    return context.getSharedPreferences("${BuildConfig.APPLICATION_ID}_unlock_pins", 0)
   }
 
   @[Provides GitSecrets Reusable]
   fun provideGitSecrets(@ApplicationContext context: Context): SharedPreferences {
-    return context.getSharedPreferences("${BuildConfig.APPLICATION_ID}_git_secrets", MODE_PRIVATE)
+    return context.getSharedPreferences("${BuildConfig.APPLICATION_ID}_git_secrets", 0)
   }
 }

app/src/main/java/app/passwordstore/injection/prefs/UnlockPins.kt

@@ -0,0 +1,10 @@
+/*
+ * Copyright © 2014-2026 The Android Password Store Authors. All Rights Reserved.
+ * SPDX-License-Identifier: GPL-3.0-only
+ */
+
+package app.passwordstore.injection.prefs
+
+import javax.inject.Qualifier
+
+@Qualifier @Retention(AnnotationRetention.RUNTIME) annotation class UnlockPins

app/src/main/java/app/passwordstore/ui/autofill/AutofillDecryptActivity.kt

@@ -74,7 +74,7 @@ class AutofillDecryptActivity : BasePGPActivity() {
     requireKeysExist {
       requireDecryptionKeysExist(PasswordRepository.getParentPath(filePath, repositoryPath)) { ids
         ->
-        getPersistentAndDecrypt(ids)
+        getPersistentAndDecrypt(ids, action = "autofill")
       }
     }
   }