ser

android/app/build.gradle.kts

@@ -47,6 +47,12 @@ android {
     buildTypes {
         release {
             signingConfig = signingConfigs.getByName("release")
+            isMinifyEnabled = true
+            isShrinkResources = true
+            proguardFiles(
+                getDefaultProguardFile("proguard-android-optimize.txt"),
+                "proguard-rules.pro"
+            )
         }
     }
 }
@@ -63,4 +69,5 @@ flutter {
 
 dependencies {
     coreLibraryDesugaring("com.android.tools:desugar_jdk_libs:2.1.4")
+    implementation("androidx.core:core-ktx:1.13.1")
 }

android/app/proguard-rules.pro

@@ -0,0 +1,42 @@
+# PaladinVPN ProGuard / R8 Rules
+# ==============================================================================
+# These rules prevent R8 from stripping classes and methods that are accessed
+# via JNI (Java Native Interface) or reflection, which would cause
+# UnsatisfiedLinkError / ClassNotFoundException at runtime.
+
+# ── AmneziaWG Native Backend (JNI) ────────────────────────────────────────────
+# The wireguard_flutter plugin uses org.amnezia.awg for all tunnel operations.
+# These classes are loaded via JNI — stripping them will crash the VPN.
+-keep class org.amnezia.awg.backend.** { *; }
+-keep class org.amnezia.awg.crypto.** { *; }
+-keep class org.amnezia.awg.config.** { *; }
+-keep class com.wireguard.** { *; }
+
+# ── Kotlin Coroutines (used by wireguard_flutter plugin) ──────────────────────
+-keepnames class kotlinx.coroutines.internal.MainDispatcherFactory {}
+-keepnames class kotlinx.coroutines.CoroutineExceptionHandler {}
+
+# ── Flutter / Platform Channels ───────────────────────────────────────────────
+-keep class io.flutter.** { *; }
+-keep class io.flutter.embedding.** { *; }
+-keep class io.flutter.plugin.** { *; }
+
+# ── Google Mobile Ads (AdMob) ─────────────────────────────────────────────────
+-keep class com.google.android.gms.ads.** { *; }
+-dontwarn com.google.android.gms.ads.**
+
+# ── Klaxon JSON parser (used by wireguard_flutter plugin) ─────────────────────
+-keep class com.beust.klaxon.** { *; }
+
+# ── General Android / Kotlin ──────────────────────────────────────────────────
+-keepattributes *Annotation*
+-keepattributes SourceFile,LineNumberTable
+-keep class kotlin.Metadata { *; }
+
+# Strip debug logging in release builds
+-assumenosideeffects class android.util.Log {
+    public static boolean isLoggable(java.lang.String, int);
+    public static int v(...);
+    public static int d(...);
+    public static int i(...);
+}

android/app/src/main/AndroidManifest.xml

@@ -4,7 +4,7 @@
    <uses-permission android:name="android.permission.ACCESS_NETWORK_STATE"/>
    <uses-permission android:name="android.permission.POST_NOTIFICATIONS"/>
    <uses-permission android:name="android.permission.FOREGROUND_SERVICE"/>
-   <uses-permission android:name="android.permission.FOREGROUND_SERVICE_SPECIAL_USE"/>
+   <!-- VpnService provides its own system notification; SPECIAL_USE is not needed -->
    <!-- Required by url_launcher on Android 11+ to open external browser -->
    <queries>
        <intent>