refactor(android): split sensitive features by flavor

apps/android/.editorconfig

@@ -11,9 +11,6 @@ indent_style = space
 indent_size = 2
 max_line_length = off
 ktlint_standard_filename = disabled
-ktlint_standard_function-expression-body = disabled
 ktlint_standard_function-naming = disabled
-ktlint_standard_if-else-bracing = disabled
 ktlint_standard_max-line-length = disabled
-ktlint_standard_no-wildcard-imports = disabled
 ktlint_standard_property-naming = disabled

apps/android/app/build.gradle.kts

@@ -33,10 +33,10 @@ if (wantsAndroidReleaseBuild && !hasAndroidReleaseSigning) {
 }
 
 plugins {
-  id("com.android.application")
-  id("org.jlleitschuh.gradle.ktlint")
-  id("org.jetbrains.kotlin.plugin.compose")
-  id("org.jetbrains.kotlin.plugin.serialization")
+  alias(libs.plugins.android.application)
+  alias(libs.plugins.ktlint)
+  alias(libs.plugins.kotlin.compose)
+  alias(libs.plugins.kotlin.serialization)
 }
 
 android {
@@ -78,13 +78,9 @@ android {
   productFlavors {
     create("play") {
       dimension = "store"
-      buildConfigField("boolean", "OPENCLAW_ENABLE_SMS", "false")
-      buildConfigField("boolean", "OPENCLAW_ENABLE_CALL_LOG", "false")
     }
     create("thirdParty") {
       dimension = "store"
-      buildConfigField("boolean", "OPENCLAW_ENABLE_SMS", "true")
-      buildConfigField("boolean", "OPENCLAW_ENABLE_CALL_LOG", "true")
     }
   }
 
@@ -133,15 +129,7 @@ android {
   }
 
   lint {
-    disable +=
-      setOf(
-        "AndroidGradlePluginVersion",
-        "GradleDependency",
-        "HighAppVersionCode",
-        "IconLauncherShape",
-        "NewerVersionAvailable",
-        "OldTargetApi",
-      )
+    lintConfig = file("lint.xml")
     warningsAsErrors = true
   }
 
@@ -184,57 +172,57 @@ ktlint {
 }
 
 dependencies {
-  val composeBom = platform("androidx.compose:compose-bom:2026.04.01")
+  val composeBom = platform(libs.androidx.compose.bom)
   implementation(composeBom)
   androidTestImplementation(composeBom)
 
-  implementation("androidx.core:core-ktx:1.18.0")
-  implementation("androidx.lifecycle:lifecycle-runtime-ktx:2.10.0")
-  implementation("androidx.activity:activity-compose:1.13.0")
-  implementation("androidx.webkit:webkit:1.15.0")
+  implementation(libs.androidx.core.ktx)
+  implementation(libs.androidx.lifecycle.runtime.ktx)
+  implementation(libs.androidx.activity.compose)
+  implementation(libs.androidx.webkit)
 
-  implementation("androidx.compose.ui:ui")
-  implementation("androidx.compose.ui:ui-tooling-preview")
-  implementation("androidx.compose.material3:material3")
+  implementation(libs.androidx.compose.ui)
+  implementation(libs.androidx.compose.ui.tooling.preview)
+  implementation(libs.androidx.compose.material3)
   // material-icons-extended pulled in full icon set (~20 MB DEX). Only ~18 icons used.
   // R8 will tree-shake unused icons when minify is enabled on release builds.
-  implementation("androidx.compose.material:material-icons-extended")
+  implementation(libs.androidx.compose.material.icons.extended)
 
-  debugImplementation("androidx.compose.ui:ui-tooling")
+  debugImplementation(libs.androidx.compose.ui.tooling)
 
   // Material Components (XML theme + resources)
-  implementation("com.google.android.material:material:1.13.0")
+  implementation(libs.material)
 
-  implementation("org.jetbrains.kotlinx:kotlinx-coroutines-android:1.10.2")
-  implementation("org.jetbrains.kotlinx:kotlinx-serialization-json:1.11.0")
+  implementation(libs.kotlinx.coroutines.android)
+  implementation(libs.kotlinx.serialization.json)
 
-  implementation("androidx.security:security-crypto:1.1.0")
-  implementation("androidx.exifinterface:exifinterface:1.4.2")
-  implementation("com.squareup.okhttp3:okhttp:5.3.2")
-  implementation("org.bouncycastle:bcprov-jdk18on:1.84")
-  implementation("org.commonmark:commonmark:0.28.0")
-  implementation("org.commonmark:commonmark-ext-autolink:0.28.0")
-  implementation("org.commonmark:commonmark-ext-gfm-strikethrough:0.28.0")
-  implementation("org.commonmark:commonmark-ext-gfm-tables:0.28.0")
-  implementation("org.commonmark:commonmark-ext-task-list-items:0.28.0")
+  implementation(libs.androidx.security.crypto)
+  implementation(libs.androidx.exifinterface)
+  implementation(libs.okhttp)
+  implementation(libs.bcprov)
+  implementation(libs.commonmark)
+  implementation(libs.commonmark.ext.autolink)
+  implementation(libs.commonmark.ext.gfm.strikethrough)
+  implementation(libs.commonmark.ext.gfm.tables)
+  implementation(libs.commonmark.ext.task.list.items)
 
   // CameraX (for node.invoke camera.* parity)
-  implementation("androidx.camera:camera-core:1.6.0")
-  implementation("androidx.camera:camera-camera2:1.6.0")
-  implementation("androidx.camera:camera-lifecycle:1.6.0")
-  implementation("androidx.camera:camera-video:1.6.0")
-  implementation("com.google.android.gms:play-services-code-scanner:16.1.0")
+  implementation(libs.androidx.camera.core)
+  implementation(libs.androidx.camera.camera2)
+  implementation(libs.androidx.camera.lifecycle)
+  implementation(libs.androidx.camera.video)
+  implementation(libs.play.services.code.scanner)
 
   // Unicast DNS-SD (Wide-Area Bonjour) for tailnet discovery domains.
-  implementation("dnsjava:dnsjava:3.6.4")
+  implementation(libs.dnsjava)
 
-  testImplementation("junit:junit:4.13.2")
-  testImplementation("org.jetbrains.kotlinx:kotlinx-coroutines-test:1.10.2")
-  testImplementation("io.kotest:kotest-runner-junit5-jvm:6.1.11")
-  testImplementation("io.kotest:kotest-assertions-core-jvm:6.1.11")
-  testImplementation("com.squareup.okhttp3:mockwebserver:5.3.2")
-  testImplementation("org.robolectric:robolectric:4.16.1")
-  testRuntimeOnly("org.junit.vintage:junit-vintage-engine:6.0.3")
+  testImplementation(libs.junit)
+  testImplementation(libs.kotlinx.coroutines.test)
+  testImplementation(libs.kotest.runner.junit5)
+  testImplementation(libs.kotest.assertions.core)
+  testImplementation(libs.mockwebserver)
+  testImplementation(libs.robolectric)
+  testRuntimeOnly(libs.junit.vintage.engine)
 }
 
 tasks.withType<Test>().configureEach {

apps/android/app/lint.xml

@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="utf-8"?>
+<lint>
+    <issue id="AndroidGradlePluginVersion" severity="ignore" />
+    <issue id="GradleDependency" severity="ignore" />
+    <issue id="IconLauncherShape" severity="ignore" />
+    <issue id="NewerVersionAvailable" severity="ignore" />
+
+    <!-- OpenClaw uses date-based version codes (yyyyMMddNN), which are high but still below the Android max. -->
+    <issue id="HighAppVersionCode" severity="ignore" />
+
+    <!-- Target SDK follows the current release train; bump only after platform compatibility testing. -->
+    <issue id="OldTargetApi" severity="ignore" />
+</lint>

apps/android/app/src/main/java/ai/openclaw/app/NodeRuntime.kt

@@ -13,7 +13,33 @@ import ai.openclaw.app.gateway.GatewaySession
 import ai.openclaw.app.gateway.GatewayTlsProbeFailure
 import ai.openclaw.app.gateway.GatewayTlsProbeResult
 import ai.openclaw.app.gateway.probeGatewayTlsFingerprint
-import ai.openclaw.app.node.*
+import ai.openclaw.app.node.A2UIHandler
+import ai.openclaw.app.node.CalendarHandler
+import ai.openclaw.app.node.CallLogHandler
+import ai.openclaw.app.node.CameraCaptureManager
+import ai.openclaw.app.node.CameraHandler
+import ai.openclaw.app.node.CanvasController
+import ai.openclaw.app.node.ConnectionManager
+import ai.openclaw.app.node.ContactsHandler
+import ai.openclaw.app.node.DEFAULT_SEAM_COLOR_ARGB
+import ai.openclaw.app.node.DebugHandler
+import ai.openclaw.app.node.DeviceHandler
+import ai.openclaw.app.node.DeviceNotificationListenerService
+import ai.openclaw.app.node.InvokeDispatcher
+import ai.openclaw.app.node.LocationCaptureManager
+import ai.openclaw.app.node.LocationHandler
+import ai.openclaw.app.node.MotionHandler
+import ai.openclaw.app.node.NodePresenceAliveBeacon
+import ai.openclaw.app.node.NotificationsHandler
+import ai.openclaw.app.node.PhotosHandler
+import ai.openclaw.app.node.Quad
+import ai.openclaw.app.node.SmsHandler
+import ai.openclaw.app.node.SmsManager
+import ai.openclaw.app.node.SystemHandler
+import ai.openclaw.app.node.asObjectOrNull
+import ai.openclaw.app.node.asStringOrNull
+import ai.openclaw.app.node.invokeErrorFromThrowable
+import ai.openclaw.app.node.parseHexColorArgb
 import ai.openclaw.app.protocol.OpenClawCanvasA2UIAction
 import ai.openclaw.app.voice.MicCaptureManager
 import ai.openclaw.app.voice.TalkModeManager
@@ -103,8 +129,8 @@ class NodeRuntime(
   private val deviceHandler: DeviceHandler =
     DeviceHandler(
       appContext = appContext,
-      smsEnabled = BuildConfig.OPENCLAW_ENABLE_SMS,
-      callLogEnabled = BuildConfig.OPENCLAW_ENABLE_CALL_LOG,
+      smsEnabled = SensitiveFeatureConfig.smsEnabled,
+      callLogEnabled = SensitiveFeatureConfig.callLogEnabled,
     )
 
   private val notificationsHandler: NotificationsHandler =
@@ -163,10 +189,10 @@ class NodeRuntime(
       voiceWakeMode = { VoiceWakeMode.Off },
       motionActivityAvailable = { motionHandler.isActivityAvailable() },
       motionPedometerAvailable = { motionHandler.isPedometerAvailable() },
-      sendSmsAvailable = { BuildConfig.OPENCLAW_ENABLE_SMS && sms.canSendSms() },
-      readSmsAvailable = { BuildConfig.OPENCLAW_ENABLE_SMS && sms.canReadSms() },
-      smsSearchPossible = { BuildConfig.OPENCLAW_ENABLE_SMS && sms.hasTelephonyFeature() },
-      callLogAvailable = { BuildConfig.OPENCLAW_ENABLE_CALL_LOG },
+      sendSmsAvailable = { SensitiveFeatureConfig.smsEnabled && sms.canSendSms() },
+      readSmsAvailable = { SensitiveFeatureConfig.smsEnabled && sms.canReadSms() },
+      smsSearchPossible = { SensitiveFeatureConfig.smsEnabled && sms.hasTelephonyFeature() },
+      callLogAvailable = { SensitiveFeatureConfig.callLogEnabled },
       hasRecordAudioPermission = { hasRecordAudioPermission() },
       manualTls = { manualTls.value },
     )
@@ -190,11 +216,11 @@ class NodeRuntime(
       isForeground = { _isForeground.value },
       cameraEnabled = { cameraEnabled.value },
       locationEnabled = { locationMode.value != LocationMode.Off },
-      sendSmsAvailable = { BuildConfig.OPENCLAW_ENABLE_SMS && sms.canSendSms() },
-      readSmsAvailable = { BuildConfig.OPENCLAW_ENABLE_SMS && sms.canReadSms() },
-      smsFeatureEnabled = { BuildConfig.OPENCLAW_ENABLE_SMS },
+      sendSmsAvailable = { SensitiveFeatureConfig.smsEnabled && sms.canSendSms() },
+      readSmsAvailable = { SensitiveFeatureConfig.smsEnabled && sms.canReadSms() },
+      smsFeatureEnabled = { SensitiveFeatureConfig.smsEnabled },
       smsTelephonyAvailable = { sms.hasTelephonyFeature() },
-      callLogAvailable = { BuildConfig.OPENCLAW_ENABLE_CALL_LOG },
+      callLogAvailable = { SensitiveFeatureConfig.callLogEnabled },
       debugBuild = { BuildConfig.DEBUG },
       refreshNodeCanvasCapability = { nodeSession.refreshNodeCanvasCapability() },
       onCanvasA2uiPush = {

apps/android/app/src/main/java/ai/openclaw/app/node/CallLogHandler.kt

@@ -1,257 +0,0 @@
-package ai.openclaw.app.node
-
-import ai.openclaw.app.gateway.GatewaySession
-import android.Manifest
-import android.content.Context
-import android.provider.CallLog
-import androidx.core.content.ContextCompat
-import kotlinx.serialization.json.Json
-import kotlinx.serialization.json.JsonObject
-import kotlinx.serialization.json.JsonPrimitive
-import kotlinx.serialization.json.buildJsonArray
-import kotlinx.serialization.json.buildJsonObject
-import kotlinx.serialization.json.put
-
-private const val DEFAULT_CALL_LOG_LIMIT = 25
-
-internal data class CallLogRecord(
-  val number: String?,
-  val cachedName: String?,
-  val date: Long,
-  val duration: Long,
-  val type: Int,
-)
-
-internal data class CallLogSearchRequest(
-  val limit: Int, // Number of records to return
-  val offset: Int, // Offset value
-  val cachedName: String?, // Search by contact name
-  val number: String?, // Search by phone number
-  val date: Long?, // Search by time (timestamp, deprecated, use dateStart/dateEnd)
-  val dateStart: Long?, // Query start time (timestamp)
-  val dateEnd: Long?, // Query end time (timestamp)
-  val duration: Long?, // Search by duration (seconds)
-  val type: Int?, // Search by call log type
-)
-
-internal interface CallLogDataSource {
-  fun hasReadPermission(context: Context): Boolean
-
-  fun search(
-    context: Context,
-    request: CallLogSearchRequest,
-  ): List<CallLogRecord>
-}
-
-private object SystemCallLogDataSource : CallLogDataSource {
-  override fun hasReadPermission(context: Context): Boolean =
-    ContextCompat.checkSelfPermission(
-      context,
-      Manifest.permission.READ_CALL_LOG,
-    ) == android.content.pm.PackageManager.PERMISSION_GRANTED
-
-  override fun search(
-    context: Context,
-    request: CallLogSearchRequest,
-  ): List<CallLogRecord> {
-    val resolver = context.contentResolver
-    val projection =
-      arrayOf(
-        CallLog.Calls.NUMBER,
-        CallLog.Calls.CACHED_NAME,
-        CallLog.Calls.DATE,
-        CallLog.Calls.DURATION,
-        CallLog.Calls.TYPE,
-      )
-
-    // Build selection and selectionArgs for filtering
-    val selections = mutableListOf<String>()
-    val selectionArgs = mutableListOf<String>()
-
-    request.cachedName?.let {
-      selections.add("${CallLog.Calls.CACHED_NAME} LIKE ?")
-      selectionArgs.add("%$it%")
-    }
-
-    request.number?.let {
-      selections.add("${CallLog.Calls.NUMBER} LIKE ?")
-      selectionArgs.add("%$it%")
-    }
-
-    // Support time range query
-    if (request.dateStart != null && request.dateEnd != null) {
-      selections.add("${CallLog.Calls.DATE} >= ? AND ${CallLog.Calls.DATE} <= ?")
-      selectionArgs.add(request.dateStart.toString())
-      selectionArgs.add(request.dateEnd.toString())
-    } else if (request.dateStart != null) {
-      selections.add("${CallLog.Calls.DATE} >= ?")
-      selectionArgs.add(request.dateStart.toString())
-    } else if (request.dateEnd != null) {
-      selections.add("${CallLog.Calls.DATE} <= ?")
-      selectionArgs.add(request.dateEnd.toString())
-    } else if (request.date != null) {
-      // Compatible with the old date parameter (exact match)
-      selections.add("${CallLog.Calls.DATE} = ?")
-      selectionArgs.add(request.date.toString())
-    }
-
-    request.duration?.let {
-      selections.add("${CallLog.Calls.DURATION} = ?")
-      selectionArgs.add(it.toString())
-    }
-
-    request.type?.let {
-      selections.add("${CallLog.Calls.TYPE} = ?")
-      selectionArgs.add(it.toString())
-    }
-
-    val selection = if (selections.isNotEmpty()) selections.joinToString(" AND ") else null
-    val selectionArgsArray = if (selectionArgs.isNotEmpty()) selectionArgs.toTypedArray() else null
-
-    val sortOrder = "${CallLog.Calls.DATE} DESC"
-
-    resolver
-      .query(
-        CallLog.Calls.CONTENT_URI,
-        projection,
-        selection,
-        selectionArgsArray,
-        sortOrder,
-      ).use { cursor ->
-        if (cursor == null) return emptyList()
-
-        val numberIndex = cursor.getColumnIndex(CallLog.Calls.NUMBER)
-        val cachedNameIndex = cursor.getColumnIndex(CallLog.Calls.CACHED_NAME)
-        val dateIndex = cursor.getColumnIndex(CallLog.Calls.DATE)
-        val durationIndex = cursor.getColumnIndex(CallLog.Calls.DURATION)
-        val typeIndex = cursor.getColumnIndex(CallLog.Calls.TYPE)
-
-        // Skip offset rows
-        if (request.offset > 0 && cursor.moveToPosition(request.offset - 1)) {
-          // Successfully moved to offset position
-        }
-
-        val out = mutableListOf<CallLogRecord>()
-        var count = 0
-        while (cursor.moveToNext() && count < request.limit) {
-          out +=
-            CallLogRecord(
-              number = cursor.getString(numberIndex),
-              cachedName = cursor.getString(cachedNameIndex),
-              date = cursor.getLong(dateIndex),
-              duration = cursor.getLong(durationIndex),
-              type = cursor.getInt(typeIndex),
-            )
-          count++
-        }
-        return out
-      }
-  }
-}
-
-class CallLogHandler private constructor(
-  private val appContext: Context,
-  private val dataSource: CallLogDataSource,
-) {
-  constructor(appContext: Context) : this(appContext = appContext, dataSource = SystemCallLogDataSource)
-
-  fun handleCallLogSearch(paramsJson: String?): GatewaySession.InvokeResult {
-    if (!dataSource.hasReadPermission(appContext)) {
-      return GatewaySession.InvokeResult.error(
-        code = "CALL_LOG_PERMISSION_REQUIRED",
-        message = "CALL_LOG_PERMISSION_REQUIRED: grant Call Log permission",
-      )
-    }
-
-    val request =
-      parseSearchRequest(paramsJson)
-        ?: return GatewaySession.InvokeResult.error(
-          code = "INVALID_REQUEST",
-          message = "INVALID_REQUEST: expected JSON object",
-        )
-
-    return try {
-      val callLogs = dataSource.search(appContext, request)
-      GatewaySession.InvokeResult.ok(
-        buildJsonObject {
-          put(
-            "callLogs",
-            buildJsonArray {
-              callLogs.forEach { add(callLogJson(it)) }
-            },
-          )
-        }.toString(),
-      )
-    } catch (err: Throwable) {
-      GatewaySession.InvokeResult.error(
-        code = "CALL_LOG_UNAVAILABLE",
-        message = "CALL_LOG_UNAVAILABLE: ${err.message ?: "call log query failed"}",
-      )
-    }
-  }
-
-  private fun parseSearchRequest(paramsJson: String?): CallLogSearchRequest? {
-    if (paramsJson.isNullOrBlank()) {
-      return CallLogSearchRequest(
-        limit = DEFAULT_CALL_LOG_LIMIT,
-        offset = 0,
-        cachedName = null,
-        number = null,
-        date = null,
-        dateStart = null,
-        dateEnd = null,
-        duration = null,
-        type = null,
-      )
-    }
-
-    val params =
-      try {
-        Json.parseToJsonElement(paramsJson).asObjectOrNull()
-      } catch (_: Throwable) {
-        null
-      } ?: return null
-
-    val limit =
-      ((params["limit"] as? JsonPrimitive)?.content?.toIntOrNull() ?: DEFAULT_CALL_LOG_LIMIT)
-        .coerceIn(1, 200)
-    val offset =
-      ((params["offset"] as? JsonPrimitive)?.content?.toIntOrNull() ?: 0)
-        .coerceAtLeast(0)
-    val cachedName = (params["cachedName"] as? JsonPrimitive)?.content?.takeIf { it.isNotBlank() }
-    val number = (params["number"] as? JsonPrimitive)?.content?.takeIf { it.isNotBlank() }
-    val date = (params["date"] as? JsonPrimitive)?.content?.toLongOrNull()
-    val dateStart = (params["dateStart"] as? JsonPrimitive)?.content?.toLongOrNull()
-    val dateEnd = (params["dateEnd"] as? JsonPrimitive)?.content?.toLongOrNull()
-    val duration = (params["duration"] as? JsonPrimitive)?.content?.toLongOrNull()
-    val type = (params["type"] as? JsonPrimitive)?.content?.toIntOrNull()
-
-    return CallLogSearchRequest(
-      limit = limit,
-      offset = offset,
-      cachedName = cachedName,
-      number = number,
-      date = date,
-      dateStart = dateStart,
-      dateEnd = dateEnd,
-      duration = duration,
-      type = type,
-    )
-  }
-
-  private fun callLogJson(callLog: CallLogRecord): JsonObject =
-    buildJsonObject {
-      put("number", JsonPrimitive(callLog.number))
-      put("cachedName", JsonPrimitive(callLog.cachedName))
-      put("date", JsonPrimitive(callLog.date))
-      put("duration", JsonPrimitive(callLog.duration))
-      put("type", JsonPrimitive(callLog.type))
-    }
-
-  companion object {
-    internal fun forTesting(
-      appContext: Context,
-      dataSource: CallLogDataSource,
-    ): CallLogHandler = CallLogHandler(appContext = appContext, dataSource = dataSource)
-  }
-}

apps/android/app/src/main/java/ai/openclaw/app/node/DeviceHandler.kt

@@ -1,6 +1,7 @@
 package ai.openclaw.app.node
 
 import ai.openclaw.app.BuildConfig
+import ai.openclaw.app.SensitiveFeatureConfig
 import ai.openclaw.app.gateway.GatewaySession
 import android.Manifest
 import android.app.ActivityManager
@@ -25,8 +26,8 @@ import java.util.Locale
 
 class DeviceHandler(
   private val appContext: Context,
-  private val smsEnabled: Boolean = BuildConfig.OPENCLAW_ENABLE_SMS,
-  private val callLogEnabled: Boolean = BuildConfig.OPENCLAW_ENABLE_CALL_LOG,
+  private val smsEnabled: Boolean = SensitiveFeatureConfig.smsEnabled,
+  private val callLogEnabled: Boolean = SensitiveFeatureConfig.callLogEnabled,
 ) {
   companion object {
     internal fun hasAnySmsCapability(

apps/android/app/src/main/java/ai/openclaw/app/ui/OnboardingFlow.kt

@@ -1,8 +1,8 @@
 package ai.openclaw.app.ui
 
-import ai.openclaw.app.BuildConfig
 import ai.openclaw.app.LocationMode
 import ai.openclaw.app.MainViewModel
+import ai.openclaw.app.SensitiveFeatureConfig
 import ai.openclaw.app.gateway.GatewayEndpoint
 import ai.openclaw.app.node.DeviceNotificationListenerService
 import android.Manifest
@@ -248,10 +248,10 @@ fun OnboardingFlow(
 
   val smsAvailable =
     remember(context) {
-      BuildConfig.OPENCLAW_ENABLE_SMS &&
+      SensitiveFeatureConfig.smsEnabled &&
         context.packageManager?.hasSystemFeature(PackageManager.FEATURE_TELEPHONY) == true
     }
-  val callLogAvailable = remember { BuildConfig.OPENCLAW_ENABLE_CALL_LOG }
+  val callLogAvailable = remember { SensitiveFeatureConfig.callLogEnabled }
   val motionAvailable =
     remember(context) {
       hasMotionCapabilities(context)

apps/android/app/src/main/java/ai/openclaw/app/ui/SettingsSheet.kt

@@ -4,6 +4,7 @@ import ai.openclaw.app.BuildConfig
 import ai.openclaw.app.LocationMode
 import ai.openclaw.app.MainViewModel
 import ai.openclaw.app.NotificationPackageFilterMode
+import ai.openclaw.app.SensitiveFeatureConfig
 import ai.openclaw.app.node.DeviceNotificationListenerService
 import ai.openclaw.app.normalizeLocalHourMinute
 import android.Manifest
@@ -204,10 +205,10 @@ fun SettingsSheet(viewModel: MainViewModel) {
 
   val smsPermissionAvailable =
     remember {
-      BuildConfig.OPENCLAW_ENABLE_SMS &&
+      SensitiveFeatureConfig.smsEnabled &&
         context.packageManager?.hasSystemFeature(PackageManager.FEATURE_TELEPHONY) == true
     }
-  val callLogPermissionAvailable = remember { BuildConfig.OPENCLAW_ENABLE_CALL_LOG }
+  val callLogPermissionAvailable = remember { SensitiveFeatureConfig.callLogEnabled }
   val photosPermission =
     if (Build.VERSION.SDK_INT >= 33) {
       Manifest.permission.READ_MEDIA_IMAGES

apps/android/app/src/play/java/ai/openclaw/app/SensitiveFeatureConfig.kt

@@ -0,0 +1,6 @@
+package ai.openclaw.app
+
+object SensitiveFeatureConfig {
+  const val smsEnabled: Boolean = false
+  const val callLogEnabled: Boolean = false
+}

apps/android/app/src/play/java/ai/openclaw/app/node/CallLogHandler.kt

@@ -0,0 +1,54 @@
+package ai.openclaw.app.node
+
+import ai.openclaw.app.gateway.GatewaySession
+import android.content.Context
+
+internal data class CallLogRecord(
+  val number: String?,
+  val cachedName: String?,
+  val date: Long,
+  val duration: Long,
+  val type: Int,
+)
+
+internal data class CallLogSearchRequest(
+  val limit: Int,
+  val offset: Int,
+  val cachedName: String?,
+  val number: String?,
+  val date: Long?,
+  val dateStart: Long?,
+  val dateEnd: Long?,
+  val duration: Long?,
+  val type: Int?,
+)
+
+internal interface CallLogDataSource {
+  fun hasReadPermission(context: Context): Boolean
+
+  fun search(
+    context: Context,
+    request: CallLogSearchRequest,
+  ): List<CallLogRecord>
+}
+
+class CallLogHandler private constructor() {
+  constructor(
+    @Suppress("unused") appContext: Context,
+  ) : this()
+
+  fun handleCallLogSearch(
+    @Suppress("unused") paramsJson: String?,
+  ): GatewaySession.InvokeResult =
+    GatewaySession.InvokeResult.error(
+      code = "CALL_LOG_UNAVAILABLE",
+      message = "CALL_LOG_UNAVAILABLE: call log not available on this build",
+    )
+
+  companion object {
+    internal fun forTesting(
+      @Suppress("unused") appContext: Context,
+      @Suppress("unused") dataSource: CallLogDataSource,
+    ): CallLogHandler = CallLogHandler()
+  }
+}

apps/android/app/src/play/java/ai/openclaw/app/node/SmsManager.kt

@@ -0,0 +1,69 @@
+package ai.openclaw.app.node
+
+import ai.openclaw.app.PermissionRequester
+import android.content.Context
+
+class SmsManager(
+  @Suppress("unused") private val context: Context,
+) {
+  data class SendResult(
+    val ok: Boolean,
+    val to: String,
+    val message: String?,
+    val error: String? = null,
+    val payloadJson: String,
+  )
+
+  data class SmsMessage(
+    val id: Long,
+    val threadId: Long,
+    val address: String?,
+    val person: String?,
+    val date: Long,
+    val dateSent: Long,
+    val read: Boolean,
+    val type: Int,
+    val body: String?,
+    val status: Int,
+    val transportType: String? = null,
+  )
+
+  data class SearchResult(
+    val ok: Boolean,
+    val messages: List<SmsMessage>,
+    val error: String? = null,
+    val payloadJson: String,
+  )
+
+  fun attachPermissionRequester(
+    @Suppress("unused") requester: PermissionRequester,
+  ) {
+  }
+
+  fun canSendSms(): Boolean = false
+
+  fun canSearchSms(): Boolean = false
+
+  fun canReadSms(): Boolean = false
+
+  fun hasTelephonyFeature(): Boolean = false
+
+  suspend fun send(paramsJson: String?): SendResult =
+    SendResult(
+      ok = false,
+      to = "",
+      message = null,
+      error = "SMS_PERMISSION_REQUIRED: grant SMS permission",
+      payloadJson = unavailablePayload(paramsJson),
+    )
+
+  suspend fun search(paramsJson: String?): SearchResult =
+    SearchResult(
+      ok = false,
+      messages = emptyList(),
+      error = "SMS_PERMISSION_REQUIRED: grant READ_SMS permission",
+      payloadJson = unavailablePayload(paramsJson),
+    )
+
+  private fun unavailablePayload(paramsJson: String?): String = """{"ok":false,"error":"SMS_UNAVAILABLE","paramsProvided":${!paramsJson.isNullOrBlank()}}"""
+}

apps/android/app/src/test/java/ai/openclaw/app/node/CallLogHandlerTest.kt

@@ -1,291 +0,0 @@
-package ai.openclaw.app.node
-
-import android.content.Context
-import kotlinx.serialization.json.Json
-import kotlinx.serialization.json.jsonArray
-import kotlinx.serialization.json.jsonObject
-import kotlinx.serialization.json.jsonPrimitive
-import org.junit.Assert.assertEquals
-import org.junit.Assert.assertFalse
-import org.junit.Assert.assertTrue
-import org.junit.Test
-
-class CallLogHandlerTest : NodeHandlerRobolectricTest() {
-  @Test
-  fun handleCallLogSearch_requiresPermission() {
-    val handler = CallLogHandler.forTesting(appContext(), FakeCallLogDataSource(canRead = false))
-
-    val result = handler.handleCallLogSearch(null)
-
-    assertFalse(result.ok)
-    assertEquals("CALL_LOG_PERMISSION_REQUIRED", result.error?.code)
-  }
-
-  @Test
-  fun handleCallLogSearch_rejectsInvalidJson() {
-    val handler = CallLogHandler.forTesting(appContext(), FakeCallLogDataSource(canRead = true))
-
-    val result = handler.handleCallLogSearch("invalid json")
-
-    assertFalse(result.ok)
-    assertEquals("INVALID_REQUEST", result.error?.code)
-  }
-
-  @Test
-  fun handleCallLogSearch_returnsCallLogs() {
-    val callLog =
-      CallLogRecord(
-        number = "+123456",
-        cachedName = "lixuankai",
-        date = 1709280000000L,
-        duration = 60L,
-        type = 1,
-      )
-    val handler =
-      CallLogHandler.forTesting(
-        appContext(),
-        FakeCallLogDataSource(canRead = true, searchResults = listOf(callLog)),
-      )
-
-    val result = handler.handleCallLogSearch("""{"limit":1}""")
-
-    assertTrue(result.ok)
-    val payload = Json.parseToJsonElement(result.payloadJson ?: error("missing payload")).jsonObject
-    val callLogs = payload.getValue("callLogs").jsonArray
-    assertEquals(1, callLogs.size)
-    assertEquals(
-      "+123456",
-      callLogs
-        .first()
-        .jsonObject
-        .getValue("number")
-        .jsonPrimitive.content,
-    )
-    assertEquals(
-      "lixuankai",
-      callLogs
-        .first()
-        .jsonObject
-        .getValue("cachedName")
-        .jsonPrimitive.content,
-    )
-    assertEquals(
-      1709280000000L,
-      callLogs
-        .first()
-        .jsonObject
-        .getValue("date")
-        .jsonPrimitive.content
-        .toLong(),
-    )
-    assertEquals(
-      60L,
-      callLogs
-        .first()
-        .jsonObject
-        .getValue("duration")
-        .jsonPrimitive.content
-        .toLong(),
-    )
-    assertEquals(
-      1,
-      callLogs
-        .first()
-        .jsonObject
-        .getValue("type")
-        .jsonPrimitive.content
-        .toInt(),
-    )
-  }
-
-  @Test
-  fun handleCallLogSearch_withFilters() {
-    val callLog =
-      CallLogRecord(
-        number = "+123456",
-        cachedName = "lixuankai",
-        date = 1709280000000L,
-        duration = 120L,
-        type = 2,
-      )
-    val handler =
-      CallLogHandler.forTesting(
-        appContext(),
-        FakeCallLogDataSource(canRead = true, searchResults = listOf(callLog)),
-      )
-
-    val result =
-      handler.handleCallLogSearch(
-        """{"number":"123456","cachedName":"lixuankai","dateStart":1709270000000,"dateEnd":1709290000000,"duration":120,"type":2}""",
-      )
-
-    assertTrue(result.ok)
-    val payload = Json.parseToJsonElement(result.payloadJson ?: error("missing payload")).jsonObject
-    val callLogs = payload.getValue("callLogs").jsonArray
-    assertEquals(1, callLogs.size)
-    assertEquals(
-      "lixuankai",
-      callLogs
-        .first()
-        .jsonObject
-        .getValue("cachedName")
-        .jsonPrimitive.content,
-    )
-  }
-
-  @Test
-  fun handleCallLogSearch_withPagination() {
-    val callLogs =
-      listOf(
-        CallLogRecord(
-          number = "+123456",
-          cachedName = "lixuankai",
-          date = 1709280000000L,
-          duration = 60L,
-          type = 1,
-        ),
-        CallLogRecord(
-          number = "+654321",
-          cachedName = "lixuankai2",
-          date = 1709280001000L,
-          duration = 120L,
-          type = 2,
-        ),
-      )
-    val handler =
-      CallLogHandler.forTesting(
-        appContext(),
-        FakeCallLogDataSource(canRead = true, searchResults = callLogs),
-      )
-
-    val result = handler.handleCallLogSearch("""{"limit":1,"offset":1}""")
-
-    assertTrue(result.ok)
-    val payload = Json.parseToJsonElement(result.payloadJson ?: error("missing payload")).jsonObject
-    val callLogsResult = payload.getValue("callLogs").jsonArray
-    assertEquals(1, callLogsResult.size)
-    assertEquals(
-      "lixuankai2",
-      callLogsResult
-        .first()
-        .jsonObject
-        .getValue("cachedName")
-        .jsonPrimitive.content,
-    )
-  }
-
-  @Test
-  fun handleCallLogSearch_withDefaultParams() {
-    val callLog =
-      CallLogRecord(
-        number = "+123456",
-        cachedName = "lixuankai",
-        date = 1709280000000L,
-        duration = 60L,
-        type = 1,
-      )
-    val handler =
-      CallLogHandler.forTesting(
-        appContext(),
-        FakeCallLogDataSource(canRead = true, searchResults = listOf(callLog)),
-      )
-
-    val result = handler.handleCallLogSearch(null)
-
-    assertTrue(result.ok)
-    val payload = Json.parseToJsonElement(result.payloadJson ?: error("missing payload")).jsonObject
-    val callLogs = payload.getValue("callLogs").jsonArray
-    assertEquals(1, callLogs.size)
-    assertEquals(
-      "+123456",
-      callLogs
-        .first()
-        .jsonObject
-        .getValue("number")
-        .jsonPrimitive.content,
-    )
-  }
-
-  @Test
-  fun handleCallLogSearch_withNullFields() {
-    val callLog =
-      CallLogRecord(
-        number = null,
-        cachedName = null,
-        date = 1709280000000L,
-        duration = 60L,
-        type = 1,
-      )
-    val handler =
-      CallLogHandler.forTesting(
-        appContext(),
-        FakeCallLogDataSource(canRead = true, searchResults = listOf(callLog)),
-      )
-
-    val result = handler.handleCallLogSearch("""{"limit":1}""")
-
-    assertTrue(result.ok)
-    val payload = Json.parseToJsonElement(result.payloadJson ?: error("missing payload")).jsonObject
-    val callLogs = payload.getValue("callLogs").jsonArray
-    assertEquals(1, callLogs.size)
-    // Verify null values are properly serialized
-    val callLogObj = callLogs.first().jsonObject
-    assertTrue(callLogObj.containsKey("number"))
-    assertTrue(callLogObj.containsKey("cachedName"))
-  }
-
-  @Test
-  fun handleCallLogSearch_clampsLimitAndOffsetBeforeSearch() {
-    val source = FakeCallLogDataSource(canRead = true)
-    val handler = CallLogHandler.forTesting(appContext(), source)
-
-    val result = handler.handleCallLogSearch("""{"limit":999,"offset":-5}""")
-
-    assertTrue(result.ok)
-    assertEquals(200, source.lastRequest?.limit)
-    assertEquals(0, source.lastRequest?.offset)
-  }
-
-  @Test
-  fun handleCallLogSearch_mapsSearchFailuresToUnavailable() {
-    val handler =
-      CallLogHandler.forTesting(
-        appContext(),
-        FakeCallLogDataSource(
-          canRead = true,
-          failure = IllegalStateException("provider down"),
-        ),
-      )
-
-    val result = handler.handleCallLogSearch(null)
-
-    assertFalse(result.ok)
-    assertEquals("CALL_LOG_UNAVAILABLE", result.error?.code)
-    assertEquals("CALL_LOG_UNAVAILABLE: provider down", result.error?.message)
-  }
-}
-
-private class FakeCallLogDataSource(
-  private val canRead: Boolean,
-  private val searchResults: List<CallLogRecord> = emptyList(),
-  private val failure: Throwable? = null,
-) : CallLogDataSource {
-  var lastRequest: CallLogSearchRequest? = null
-
-  override fun hasReadPermission(context: Context): Boolean = canRead
-
-  override fun search(
-    context: Context,
-    request: CallLogSearchRequest,
-  ): List<CallLogRecord> {
-    lastRequest = request
-    failure?.let { throw it }
-    val startIndex = request.offset.coerceAtLeast(0)
-    val endIndex = (startIndex + request.limit).coerceAtMost(searchResults.size)
-    return if (startIndex < searchResults.size) {
-      searchResults.subList(startIndex, endIndex)
-    } else {
-      emptyList()
-    }
-  }
-}

apps/android/app/src/thirdParty/java/ai/openclaw/app/SensitiveFeatureConfig.kt

@@ -0,0 +1,6 @@
+package ai.openclaw.app
+
+object SensitiveFeatureConfig {
+  const val smsEnabled: Boolean = true
+  const val callLogEnabled: Boolean = true
+}

apps/android/benchmark/build.gradle.kts

@@ -1,6 +1,6 @@
 plugins {
-  id("com.android.test")
-  id("org.jlleitschuh.gradle.ktlint")
+  alias(libs.plugins.android.test)
+  alias(libs.plugins.ktlint)
 }
 
 android {
@@ -39,7 +39,7 @@ ktlint {
 }
 
 dependencies {
-  implementation("androidx.benchmark:benchmark-macro-junit4:1.4.1")
-  implementation("androidx.test.ext:junit:1.3.0")
-  implementation("androidx.test.uiautomator:uiautomator:2.4.0-beta02")
+  implementation(libs.androidx.benchmark.macro.junit4)
+  implementation(libs.androidx.test.ext.junit)
+  implementation(libs.androidx.uiautomator)
 }

apps/android/build.gradle.kts

@@ -1,7 +1,7 @@
 plugins {
-  id("com.android.application") version "9.2.0" apply false
-  id("com.android.test") version "9.2.0" apply false
-  id("org.jlleitschuh.gradle.ktlint") version "14.2.0" apply false
-  id("org.jetbrains.kotlin.plugin.compose") version "2.3.21" apply false
-  id("org.jetbrains.kotlin.plugin.serialization") version "2.3.21" apply false
+  alias(libs.plugins.android.application) apply false
+  alias(libs.plugins.android.test) apply false
+  alias(libs.plugins.ktlint) apply false
+  alias(libs.plugins.kotlin.compose) apply false
+  alias(libs.plugins.kotlin.serialization) apply false
 }

apps/android/gradle/libs.versions.toml

@@ -0,0 +1,74 @@
+[versions]
+agp = "9.2.0"
+androidx-activity = "1.13.0"
+androidx-benchmark = "1.4.1"
+androidx-camera = "1.6.0"
+androidx-compose-bom = "2026.04.01"
+androidx-core = "1.18.0"
+androidx-exifinterface = "1.4.2"
+androidx-lifecycle = "2.10.0"
+androidx-security = "1.1.0"
+androidx-test-ext = "1.3.0"
+androidx-uiautomator = "2.4.0-beta02"
+androidx-webkit = "1.15.0"
+bcprov = "1.84"
+commonmark = "0.28.0"
+coroutines = "1.10.2"
+dnsjava = "3.6.4"
+junit = "4.13.2"
+junit-vintage = "6.0.3"
+kotest = "6.1.11"
+ktlint-gradle = "14.2.0"
+kotlin = "2.3.21"
+material = "1.13.0"
+okhttp = "5.3.2"
+play-services-code-scanner = "16.1.0"
+robolectric = "4.16.1"
+serialization-json = "1.11.0"
+
+[libraries]
+androidx-activity-compose = { module = "androidx.activity:activity-compose", version.ref = "androidx-activity" }
+androidx-benchmark-macro-junit4 = { module = "androidx.benchmark:benchmark-macro-junit4", version.ref = "androidx-benchmark" }
+androidx-camera-camera2 = { module = "androidx.camera:camera-camera2", version.ref = "androidx-camera" }
+androidx-camera-core = { module = "androidx.camera:camera-core", version.ref = "androidx-camera" }
+androidx-camera-lifecycle = { module = "androidx.camera:camera-lifecycle", version.ref = "androidx-camera" }
+androidx-camera-video = { module = "androidx.camera:camera-video", version.ref = "androidx-camera" }
+androidx-compose-bom = { module = "androidx.compose:compose-bom", version.ref = "androidx-compose-bom" }
+androidx-compose-material-icons-extended = { module = "androidx.compose.material:material-icons-extended" }
+androidx-compose-material3 = { module = "androidx.compose.material3:material3" }
+androidx-compose-ui = { module = "androidx.compose.ui:ui" }
+androidx-compose-ui-tooling = { module = "androidx.compose.ui:ui-tooling" }
+androidx-compose-ui-tooling-preview = { module = "androidx.compose.ui:ui-tooling-preview" }
+androidx-core-ktx = { module = "androidx.core:core-ktx", version.ref = "androidx-core" }
+androidx-exifinterface = { module = "androidx.exifinterface:exifinterface", version.ref = "androidx-exifinterface" }
+androidx-lifecycle-runtime-ktx = { module = "androidx.lifecycle:lifecycle-runtime-ktx", version.ref = "androidx-lifecycle" }
+androidx-security-crypto = { module = "androidx.security:security-crypto", version.ref = "androidx-security" }
+androidx-test-ext-junit = { module = "androidx.test.ext:junit", version.ref = "androidx-test-ext" }
+androidx-uiautomator = { module = "androidx.test.uiautomator:uiautomator", version.ref = "androidx-uiautomator" }
+androidx-webkit = { module = "androidx.webkit:webkit", version.ref = "androidx-webkit" }
+bcprov = { module = "org.bouncycastle:bcprov-jdk18on", version.ref = "bcprov" }
+commonmark = { module = "org.commonmark:commonmark", version.ref = "commonmark" }
+commonmark-ext-autolink = { module = "org.commonmark:commonmark-ext-autolink", version.ref = "commonmark" }
+commonmark-ext-gfm-strikethrough = { module = "org.commonmark:commonmark-ext-gfm-strikethrough", version.ref = "commonmark" }
+commonmark-ext-gfm-tables = { module = "org.commonmark:commonmark-ext-gfm-tables", version.ref = "commonmark" }
+commonmark-ext-task-list-items = { module = "org.commonmark:commonmark-ext-task-list-items", version.ref = "commonmark" }
+dnsjava = { module = "dnsjava:dnsjava", version.ref = "dnsjava" }
+junit = { module = "junit:junit", version.ref = "junit" }
+junit-vintage-engine = { module = "org.junit.vintage:junit-vintage-engine", version.ref = "junit-vintage" }
+kotest-assertions-core = { module = "io.kotest:kotest-assertions-core-jvm", version.ref = "kotest" }
+kotest-runner-junit5 = { module = "io.kotest:kotest-runner-junit5-jvm", version.ref = "kotest" }
+kotlinx-coroutines-android = { module = "org.jetbrains.kotlinx:kotlinx-coroutines-android", version.ref = "coroutines" }
+kotlinx-coroutines-test = { module = "org.jetbrains.kotlinx:kotlinx-coroutines-test", version.ref = "coroutines" }
+kotlinx-serialization-json = { module = "org.jetbrains.kotlinx:kotlinx-serialization-json", version.ref = "serialization-json" }
+material = { module = "com.google.android.material:material", version.ref = "material" }
+mockwebserver = { module = "com.squareup.okhttp3:mockwebserver", version.ref = "okhttp" }
+okhttp = { module = "com.squareup.okhttp3:okhttp", version.ref = "okhttp" }
+play-services-code-scanner = { module = "com.google.android.gms:play-services-code-scanner", version.ref = "play-services-code-scanner" }
+robolectric = { module = "org.robolectric:robolectric", version.ref = "robolectric" }
+
+[plugins]
+android-application = { id = "com.android.application", version.ref = "agp" }
+android-test = { id = "com.android.test", version.ref = "agp" }
+kotlin-compose = { id = "org.jetbrains.kotlin.plugin.compose", version.ref = "kotlin" }
+kotlin-serialization = { id = "org.jetbrains.kotlin.plugin.serialization", version.ref = "kotlin" }
+ktlint = { id = "org.jlleitschuh.gradle.ktlint", version.ref = "ktlint-gradle" }