This app is the home screen of a car. That single fact drives everything below.
- The launcher is read-only on the vehicle. Vehicle telemetry comes only from
EVHardware's typed read-only API. No
sharedUserId, no IPC to EVProfile, no directCarPropertyManager/vendor service access, and no setter belong here. Vehicle writes belong in EVProfile, and automation in EVTasker. - Never leave the driver without a home screen. A crash on the home path is not a
normal bug: it strands the head unit. Guard every
PackageManagerresult, every stored package name that may have been uninstalled, and every intent that may resolve to nothing. - Updates stay manual. Neither flavor contains a self-updater or privileged installer. EVSuite network access starts only from an explicit user action, and verified APKs are exported through Android's document picker for later manual installation.
- Say what you did not verify. Most of this can only be confirmed on a head unit. "Builds, unit tests pass, tried on the emulator, not on the car" is a good PR note. Silence implying it ran in a vehicle is not.
mise run check # permission gate + lint + unit testsor, without mise:
bash .github/security/check-permissions.sh
./gradlew testStableDebugUnitTest testUnstableDebugUnitTest lintStableDebugNew behaviour needs a unit test. Logic that can be tested without Android — update-gate decisions, version comparison, host allowlisting — belongs in a plain class, not in an activity or a fragment.
Any new uses-permission fails CI until it is added to
.github/security/permission-allowlist.txt with a justification comment. A launcher
sees every installed package and starts on every boot; it should not gain capabilities
quietly. The unstable suite manager may pass a GitHub-downloaded, fixed-package,
suite-signed APK only after explicit confirmation and never invokes an installer.
| stable | unstable | |
|---|---|---|
| Published by | v* tag |
every push to master |
| Application id | com.evsuite.launcher |
com.evsuite.launcher.unstable |
INTERNET |
absent | declared in src/unstable/ |
| Updater code | not in the APK | https + host allowlist + signature check |
Both install side by side; only one can be the default home at a time. A change that blurs
that separation — an updater class reachable from src/main/, a permission moved up out of
src/unstable/ — will be rejected.
Dark Material 3 on the shared ev_* colour and spacing tokens, 64 dp touch targets. Dark
is imposed rather than following the system: the screen faces the driver at night, and a
light background filling the windscreen is glare, not a preference. Keep new surfaces on
the tokens instead of hard-coded colours or dimensions.
Not every useful contribution is code:
- Bug reports — firmware generation, app version, what you did, what happened.
- Feature requests — describe the problem before the solution.
- Documentation — README, this guide, translations.
- Pull requests — see below.
- Testing pre-releases — install an
unstablebuild and report what broke. - Sponsorship — see below.
Maintainer time and AI quota are the scarce resources here, ideas are not. If you have access to Claude Opus or another capable coding model, a finished pull request is worth much more than a feature request: someone still has to design, write, test and verify the request, and that someone has a limited quota too.
A pull request that lands quickly usually carries:
- The problem, in one or two sentences.
- The proposed solution, and what you rejected.
- The implementation, scoped to one concern.
- Tests —
mise run checkpasses. - Documentation updated: README, CHANGELOG, this guide where relevant.
Generate the change locally with whatever model you have, then read every line yourself before opening the PR. You are the author, not the model. Unreviewed generated code on a vehicle-telemetry path will be sent back. That path must also prove that it is read-only and uses EVHardware rather than a second hardware layer.
Maintaining EVSuite costs development time, test hardware and AI usage. If it is useful in your daily driving, consider sponsoring through GitHub Sponsors. Sponsorship covers those costs and gets fixes and features out faster.
English by default — code, comments, commit messages, docs. Read
LICENSE.md before contributing: this is a fork of an unlicensed upstream
project, and the licence situation is genuinely unusual.
Explain why, not what — the diff already says what. If you fixed something subtle, say what the failure looked like on the head unit, so the next person recognises it.