Skip to content

Add Aurora Store support for Android - #1292

Merged
abrignoni merged 2 commits into
mainfrom
feat/aurora-store-android
Sep 1, 2026
Merged

Add Aurora Store support for Android#1292
abrignoni merged 2 commits into
mainfrom
feat/aurora-store-android

Conversation

@abrignoni

Copy link
Copy Markdown
Owner

Adds Aurora Store (com.aurora.store) support for Android, an open source Google Play client. Four artifacts from databases/aurora_database:

  • Accounts: the session the app holds, with email, display name, type and when it was added. The type is what decides whether the email identifies anyone: ANONYMOUS is the project's shared account, GOOGLE is the person's own. The stored auth and AAS tokens are credentials and are deliberately not reported.
  • Downloads: apps the store was asked to download, with package, version code, size, status, file counts and the downloaded-at time.
  • Favourites: apps marked in the app's own list. That is a deliberate action, so it can show an app someone singled out without installing it.
  • Updates and Reviews: the updates Aurora offered, and reviews a person wrote, which are user-authored text tied to an account.

Timestamps are Unix milliseconds reported as UTC. The download, update and review tables were present and empty on the tested device, where an anonymous session was started and one app favourited but nothing downloaded, and are recorded as checked absences with their columns described from the schema. The exodus_tracker table held 432 rows of the Exodus Privacy tracker catalogue the app downloads for its privacy reports, so it is reference data rather than device activity and is not parsed.

Verified on a multi-container tree: the storage spellings collapse, a second Android user contributes its own rows, and a decoy package adds none. sample_data follows with the next corpus capture.

abrignoni and others added 2 commits September 1, 2026 09:52
Four artifacts from databases/aurora_database:

- Accounts: the session the app holds, with its email, display name, type and
  the time it was added. The type decides whether the email identifies anyone:
  ANONYMOUS is the project's shared account, GOOGLE is the person's own. The
  stored auth and AAS tokens are credentials and are not reported.
- Downloads: apps the store was asked to download, with package, version, size,
  status and the downloaded-at time.
- Favourites: apps marked in the app's own list, which is a deliberate action
  and can show an app someone singled out without installing it.
- Updates and Reviews: updates the app offered, and reviews a person wrote,
  which are user-authored text tied to an account.

Timestamps are Unix milliseconds reported as UTC. The download, update and
review tables were present and empty on the tested device and are recorded as
checked absences. The exodus_tracker table is the Exodus Privacy catalogue the
app downloads for its privacy reports, so it is reference data rather than
device activity and is not parsed.

Verified on a multi-container tree: the storage spellings collapse, a second
Android user contributes its own rows, and a decoy package adds none.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Row counts from a real aleapp.py run against the emu_a15_oss_v6 corpus. The
zero-row values are checked absences: the tables are present and empty in that
image, confirmed against the source stores.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
@abrignoni
abrignoni merged commit 2c636aa into main Sep 1, 2026
10 checks passed
@abrignoni
abrignoni deleted the feat/aurora-store-android branch September 1, 2026 14:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant