refactor: rename MG4SwipeLauncher to EVSwipe

Rename the app and its package (com.mg4.launcher.swipe ->
com.evsuite.swipe) as part of the suite-wide move away from the
vehicle-specific MG4 prefix.

Note for release notes: the application ID changes, so an existing install
is not upgraded in place. The new build installs alongside the old one,
does not inherit its configuration, and has to be picked again as the home
app.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Author: malys

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -61,7 +61,7 @@ body:
       label: "Steps to Reproduce"
       description: "Exact steps to reproduce the bug"
       placeholder: |
-        1. Enable MG4SwipeLauncher overlay
+        1. Enable EVSwipe overlay
         2. Configure right-edge strip
         3. Swipe from very edge of screen (last 5–10 pixels)
         4. Observe: gesture not recognized

.github/ISSUE_TEMPLATE/config.yml

@@ -3,9 +3,9 @@ contact_links:
   - name: Security vulnerability
     url: ../../security/advisories/new
     about: Report privately, never in a public issue. This app holds an accessibility service and an overlay.
-  - name: Upstream project (Tommasov/MG4_Swipe_Launcher)
-    url: https://github.com/Tommasov/MG4_Swipe_Launcher
+  - name: Upstream project (Tommasov/EV_Swipe_Launcher)
+    url: https://github.com/Tommasov/EV_Swipe_Launcher
     about: This repo is a fork. Anything that also happens on the original belongs there.
-  - name: MG4Control (the bridge / vehicle layer)
-    url: ../../../MG4Control
+  - name: EVProfile (the bridge / vehicle layer)
+    url: ../../../EVProfile
     about: This app holds no vehicle privileges. Anything about reading or writing the car belongs there.

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -12,7 +12,7 @@ body:
 
         Have an idea to improve the swipe launcher? We'd love to hear it!
 
-        **Before requesting:** Please check if a similar feature has been requested in [Discussions](https://github.com/malys/MG4SwipeLauncher/discussions).
+        **Before requesting:** Please check if a similar feature has been requested in [Discussions](https://github.com/malys/EVSwipe/discussions).
 
   - type: checkboxes
     id: checks
@@ -22,7 +22,7 @@ body:
       options:
         - label: I've checked existing issues/discussions and found no duplicate
           required: true
-        - label: This feature is for swipe overlay (not vehicle control — that's MG4Control/MG4Tasker)
+        - label: This feature is for swipe overlay (not vehicle control — that's EVProfile/EVTasker)
           required: true
         - label: This does not require accessibility service to read window content
           required: true

.github/ISSUE_TEMPLATE/security.yml

@@ -80,7 +80,7 @@ body:
     attributes:
       label: "Affected Versions"
       description: "Which versions are affected?"
-      placeholder: "MG4SwipeLauncher < 1.1.0 (all builds)"
+      placeholder: "EVSwipe < 1.1.0 (all builds)"
     validations:
       required: true
 

.github/PULL_REQUEST_TEMPLATE.md

@@ -1,4 +1,4 @@
-# Pull Request: MG4SwipeLauncher
+# Pull Request: EVSwipe
 
 ## 📝 What and Why
 
@@ -45,7 +45,7 @@
 
 **Permissions & Privileges:**
 - [ ] No new `uses-permission` added (or added to `.github/security/permission-allowlist.txt` with justification)
-- [ ] No vehicle privileges (no `android.car.*`, no `sharedUserId`, no MG4Control IPC)
+- [ ] No vehicle privileges (no `android.car.*`, no `sharedUserId`, no EVProfile IPC)
 - [ ] App does NOT attempt to self-grant overlay or accessibility at runtime
 - [ ] No network code in `src/main/` (OTA stays in `src/unstable/` behind `BuildConfig.OTA_ENABLED`)
 

.github/security/permission-allowlist.txt

@@ -1,4 +1,4 @@
-# Allowed permissions for MG4 Swipe Launcher.
+# Allowed permissions for EVSwipe.
 # Any uses-permission in a manifest NOT listed here FAILS the CI.
 # Why: this app holds an accessibility service and draws over other apps — the classic
 # Android malware pairing. Every new permission widens that surface and must be reviewed

.github/workflows/release.yml

@@ -2,7 +2,7 @@ name: Release
 
 # Tag push only — publishing the APK that becomes the car's home screen is a human decision.
 #
-# Signed with the SAME platform key as the rest of the MG4 suite. The launcher needs no
+# Signed with the SAME platform key as the rest of the EVSuite. The launcher needs no
 # privileged permission of its own; the shared key is what makes the suite one installable
 # set, and it is what an unstable build's OTA signature check compares against.
 on:
@@ -19,7 +19,7 @@ jobs:
     name: Build and publish APK
     runs-on: ubuntu-latest
     env:
-      MG4_KEYSTORE_BASE64: ${{ secrets.MG4_KEYSTORE_BASE64 }}
+      EV_KEYSTORE_BASE64: ${{ secrets.EV_KEYSTORE_BASE64 }}
     steps:
       - uses: actions/checkout@v4
 
@@ -32,16 +32,16 @@ jobs:
         uses: gradle/actions/setup-gradle@v4
 
       - name: Decode platform keystore
-        if: ${{ env.MG4_KEYSTORE_BASE64 != '' }}
+        if: ${{ env.EV_KEYSTORE_BASE64 != '' }}
         run: |
           # Tolerate newlines/spaces in the secret; printf avoids a stray trailing newline.
-          printf '%s' "$MG4_KEYSTORE_BASE64" | tr -d '[:space:]' | base64 -d > "$RUNNER_TEMP/platform.keystore"
+          printf '%s' "$EV_KEYSTORE_BASE64" | tr -d '[:space:]' | base64 -d > "$RUNNER_TEMP/platform.keystore"
           # A PKCS12/JKS keystore starts with 0x30 (DER SEQUENCE); anything else is corrupt.
           if [ "$(head -c1 "$RUNNER_TEMP/platform.keystore" | od -An -tx1 | tr -d ' ')" != "30" ]; then
-            echo "::error::MG4_KEYSTORE_BASE64 is invalid. Recreate the secret with: base64 -w0 platform.keystore"
+            echo "::error::EV_KEYSTORE_BASE64 is invalid. Recreate the secret with: base64 -w0 platform.keystore"
             exit 1
           fi
-          echo "MG4_KEYSTORE=$RUNNER_TEMP/platform.keystore" >> "$GITHUB_ENV"
+          echo "EV_KEYSTORE=$RUNNER_TEMP/platform.keystore" >> "$GITHUB_ENV"
 
       - name: Run checks before publishing
         run: |
@@ -51,21 +51,21 @@ jobs:
 
       - name: Build release APK
         env:
-          MG4_KEYSTORE_PASSWORD: ${{ secrets.MG4_KEYSTORE_PASSWORD }}
-          MG4_KEY_ALIAS: ${{ secrets.MG4_KEY_ALIAS }}
-          MG4_KEY_PASSWORD: ${{ secrets.MG4_KEY_PASSWORD }}
+          EV_KEYSTORE_PASSWORD: ${{ secrets.EV_KEYSTORE_PASSWORD }}
+          EV_KEY_ALIAS: ${{ secrets.EV_KEY_ALIAS }}
+          EV_KEY_PASSWORD: ${{ secrets.EV_KEY_PASSWORD }}
         run: ./gradlew assembleStableRelease --no-daemon
 
       - name: Collect APK
         run: |
           mkdir -p dist
           ver=$(grep -oE 'versionName = "[^"]+"' app/build.gradle.kts | head -1 | sed -E 's/.*"([^"]+)"/\1/')
-          find app/build/outputs/apk -name "app-stable-release.apk" -exec cp {} "dist/MG4SwipeLauncher-stable-${ver}.apk" \;
+          find app/build/outputs/apk -name "app-stable-release.apk" -exec cp {} "dist/EVSwipe-stable-${ver}.apk" \;
           ls -la dist/
 
       - uses: actions/upload-artifact@v4
         with:
-          name: mg4swipelauncher-apk
+          name: evswipe-apk
           path: dist/*.apk
 
       - name: Publish GitHub Release
@@ -76,7 +76,7 @@ jobs:
           prerelease: false
           files: dist/*.apk
           body: |
-            ## MG4 Swipe Launcher ${{ github.ref_name }}
+            ## EVSwipe ${{ github.ref_name }}
 
             Manual, offline installation. This build embeds **no auto-updater** and
             contacts no server: the stable flavor has neither the updater code nor the
@@ -87,6 +87,6 @@ jobs:
             as the default home from Android settings.
 
             ### Note
-            Signed with the MG4 suite platform key. If you are coming from a build signed
+            Signed with the EVSuite platform key. If you are coming from a build signed
             with the old author key, uninstall the previous version first — Android refuses
             an in-place update across a key change.

.github/workflows/security.yml

@@ -69,7 +69,7 @@ jobs:
         if: always()
         run: |
           {
-            echo "# MG4 Swipe Launcher security report"
+            echo "# EVSwipe security report"
             echo "_$(date -u)_"
             echo
             echo "## mobsfscan"
@@ -100,7 +100,7 @@ jobs:
         if: ${{ env.NVD_API_KEY != '' }}
         uses: dependency-check/Dependency-Check_Action@main
         with:
-          project: MG4_Swipe_Launcher
+          project: EV_Swipe_Launcher
           path: "."
           format: "SARIF"
           args: --nvdApiKey ${{ env.NVD_API_KEY }}

.github/workflows/unstable.yml

@@ -15,7 +15,7 @@ jobs:
     name: Build and publish unstable APK
     runs-on: ubuntu-latest
     env:
-      MG4_KEYSTORE_BASE64: ${{ secrets.MG4_KEYSTORE_BASE64 }}
+      EV_KEYSTORE_BASE64: ${{ secrets.EV_KEYSTORE_BASE64 }}
     steps:
       - uses: actions/checkout@v4
         with: { fetch-depth: 1 }
@@ -29,14 +29,14 @@ jobs:
         uses: gradle/actions/setup-gradle@v4
 
       - name: Decode platform keystore
-        if: ${{ env.MG4_KEYSTORE_BASE64 != '' }}
+        if: ${{ env.EV_KEYSTORE_BASE64 != '' }}
         run: |
-          printf '%s' "$MG4_KEYSTORE_BASE64" | tr -d '[:space:]' | base64 -d > "$RUNNER_TEMP/platform.keystore"
+          printf '%s' "$EV_KEYSTORE_BASE64" | tr -d '[:space:]' | base64 -d > "$RUNNER_TEMP/platform.keystore"
           if [ "$(head -c1 "$RUNNER_TEMP/platform.keystore" | od -An -tx1 | tr -d ' ')" != "30" ]; then
-            echo "::error::MG4_KEYSTORE_BASE64 is invalid. Recreate the secret with: base64 -w0 platform.keystore"
+            echo "::error::EV_KEYSTORE_BASE64 is invalid. Recreate the secret with: base64 -w0 platform.keystore"
             exit 1
           fi
-          echo "MG4_KEYSTORE=$RUNNER_TEMP/platform.keystore" >> "$GITHUB_ENV"
+          echo "EV_KEYSTORE=$RUNNER_TEMP/platform.keystore" >> "$GITHUB_ENV"
 
       - name: Run checks
         run: |
@@ -52,9 +52,9 @@ jobs:
 
       - name: Build unstable release APK
         env:
-          MG4_KEYSTORE_PASSWORD: ${{ secrets.MG4_KEYSTORE_PASSWORD }}
-          MG4_KEY_ALIAS: ${{ secrets.MG4_KEY_ALIAS }}
-          MG4_KEY_PASSWORD: ${{ secrets.MG4_KEY_PASSWORD }}
+          EV_KEYSTORE_PASSWORD: ${{ secrets.EV_KEYSTORE_PASSWORD }}
+          EV_KEY_ALIAS: ${{ secrets.EV_KEY_ALIAS }}
+          EV_KEY_PASSWORD: ${{ secrets.EV_KEY_PASSWORD }}
         run: ./gradlew assembleUnstableRelease -PunstableBuild=${{ github.run_number }} --no-daemon
 
       - name: Collect APK
@@ -63,7 +63,7 @@ jobs:
           # The release tag is the fixed string "unstable", so the version lives in the asset
           # name: the updater matches ".apk" + "unstable" and reads the version from it.
           find app/build/outputs/apk -name "app-unstable-release.apk" \
-            -exec cp {} "dist/MG4SwipeLauncher-unstable-${{ steps.version.outputs.value }}.apk" \;
+            -exec cp {} "dist/EVSwipe-unstable-${{ steps.version.outputs.value }}.apk" \;
           ls -la dist/
 
       - name: Build timestamp
@@ -98,7 +98,7 @@ jobs:
             the same certificate as the running app — otherwise it deletes the file. Install
             is still a manual tap.
 
-            The unstable id is `com.mg4.launcher.swipe.unstable`, so it installs beside a
+            The unstable id is `com.evsuite.swipe.unstable`, so it installs beside a
             stable build. Both cannot be the default home at once — pick one in Android
             settings.
 

AGENTS.md

@@ -1,13 +1,13 @@
-# AGENTS.md — MG4 Swipe Launcher
+# AGENTS.md — EVSwipe
 
-Swipe-up-from-the-bottom app launcher for the SAIC MG4 head unit. Part of **MG4Suite**
-alongside [MG4Control](../MG4Control), [MG4Tasker](../MG4Tasker),
-[MG4ABRPUploader](../MG4ABRPUploader) and [MG4 Simple Launcher](../MG4SimpleLauncher).
+Swipe-up-from-the-bottom app launcher for the SAIC MG4 head unit. Part of **EVSuite**
+alongside [EVProfile](../EVProfile), [EVTasker](../EVTasker),
+[EVABRPUploader](../EVABRPUploader) and [EVLauncher](../EVLauncher).
 
 The workspace `AGENTS.md` and normative workspace `DESIGN.md` apply; this file contains
 only launcher-specific additions.
 
-Fork of [Tommasov/MG4_Swipe_Launcher](https://github.com/Tommasov/MG4_Swipe_Launcher) —
+Fork of [Tommasov/EV_Swipe_Launcher](https://github.com/Tommasov/EV_Swipe_Launcher) —
 see [`LICENSE.md`](LICENSE.md), the licence situation is not the usual one.
 
 Commit author: malys.training@gmail.com
@@ -29,24 +29,25 @@ Widening either declaration is a security change: justify it in the PR and updat
 [`SECURITY.md`](SECURITY.md).
 
 **It never touches the vehicle.** No `android.car.*` permission, no `sharedUserId`, no IPC
-to MG4Control. Vehicle reads and writes belong in MG4Control; automation in MG4Tasker.
+to EVProfile. Vehicle reads and writes belong in EVProfile; automation in EVTasker.
 
 ## Two channels, separated by source set
 
 | | stable | unstable |
 |---|---|---|
-| Application id | `com.mg4.launcher.swipe` | `com.mg4.launcher.swipe.unstable` |
+| Application id | `com.evsuite.swipe` | `com.evsuite.swipe.unstable` |
 | Published by | `v*` tag → `release.yml` | push to `master` → `unstable.yml`, rolling `unstable` tag |
 | `INTERNET` | absent from the manifest | declared in `src/unstable/AndroidManifest.xml` |
-| `BuildConfig.OTA_ENABLED` | `false` | `true` |
-| Updater | `src/stable/.../UpdateHook.kt` — a no-op | `src/unstable/.../{UpdateHook,OtaUpdater,ApkSignature}.kt` |
+| `BuildConfig.OTA_ENABLED` | `false` | `true` (hook audit-suspended) |
+| Updater | `src/stable/.../UpdateHook.kt` — a no-op | policy code retained; `UpdateHook` inert during audit |
 
 `UpdateHook` is the flavour-aware seam: `MainActivity` calls it without knowing which
 channel it was built into, and the stable variant does nothing. The stable APK is fully
 offline — the updater code is not in it. Keep it that way: nothing network-shaped in
 `src/main/`.
 
-The unstable OTA path is automatic: it downloads into app-private `cacheDir`, validates
+The unstable OTA trigger is suspended while the suite safety and legal audit is open. Its
+retained policy downloads into app-private `cacheDir`, validates
 `https` plus the GitHub allowlist at every redirect, verifies the APK against the running
 app certificate, then runs `/system/bin/pm install -r`. Success requires both exit code 0
 and `Success` in the command output; the APK is always deleted afterwards. The unstable
@@ -77,12 +78,12 @@ picker.
 
 ## Reference patterns (shared with the suite)
 
-- **Signing**: the MG4 suite platform key, path + passwords from env vars (CI) or
+- **Signing**: the EVSuite platform key, path + passwords from env vars (CI) or
   `gradle.properties` (local); the `signingConfig` is created only if the keystore file
   exists. Never a literal secret in a build file.
 - **Security CI**: `.github/workflows/security.yml` — blocking permission-drift gate +
   gitleaks, plus informational SARIF from mobsfscan / semgrep / dependency-check.
-- **Theme**: dark Material 3 on the shared `mg4_*` colour and spacing tokens, 64 dp touch
+- **Theme**: dark Material 3 on the shared `ev_*` colour and spacing tokens, 64 dp touch
   targets. Dark is imposed, not system-following — glare on a windscreen at night.
 - **Language**: English by default (code, comments, commits, docs).
 
@@ -91,7 +92,7 @@ picker.
 `mise run build | build-unstable | test | check | permissions | run`. JDK 17, AGP 8.6,
 Gradle 8.7, `minSdk 28` / `targetSdk 34`. Emulator: `mise run emulator-setup` then
 `emulator-screen` (API 28 at panel geometry) or `emulator-car` (API 33 Automotive); AVDs
-are named `mg4swipe-*`, per-repo like the sibling projects. Overlay and accessibility are
+are named `evswipe-*`, per-repo like the sibling projects. Overlay and accessibility are
 special permissions that `adb install -g` does not grant — `mise run grant-permissions`
 sets them on a throwaway emulator, and nothing in the app should ever attempt the same at
 runtime.