feat(mobile): improve android edgeless & ci (#15118)

#### PR Dependency Tree


* **PR #15118** 👈

This tree was auto-generated by
[Charcoal](https://github.com/danerwilliams/charcoal)

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **Chores**
* Improved mobile CI workflow with change-aware Android/iOS build jobs
and updated completion dependencies so tests wait for the relevant
mobile builds.
* **Performance / App Behavior**
* Enhanced Android WebView behavior: improved viewport/WebView tuning,
disabled zoom and scrollbars, and made mixed-content allowance
environment-aware (debug vs non-debug).
* Adjusted Android cleartext traffic handling based on build/debug
settings and Capacitor server URL configuration.
* **Tests**
* Strengthened Electron BYOK storage tests with per-test temporary
directories, mock control, and added coverage for when secure storage is
unavailable.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

packages/frontend/apps/android/App/app/build.gradle

@@ -27,6 +27,7 @@ android {
         versionCode 1
         versionName System.getenv('VERSION_NAME') ?: 'v1.0.0-local'
         testInstrumentationRunner "androidx.test.runner.AndroidJUnitRunner"
+        manifestPlaceholders = [usesCleartextTraffic: "false"]
         aaptOptions {
             // Files and dirs to omit from the packaged assets dir, modified to accommodate modern web apps.
             // Default: https://android.googlesource.com/platform/frameworks/base/+/282e181b58cf72b6ca770dc7ca5f91f135444502/tools/aapt/AaptAssets.cpp#61
@@ -49,6 +50,7 @@ android {
         debug {
             minifyEnabled false
             debuggable true
+            manifestPlaceholders = [usesCleartextTraffic: "true"]
         }
     }
     flavorDimensions = ['chanel']

packages/frontend/apps/android/App/app/src/main/AndroidManifest.xml

@@ -13,14 +13,16 @@
         android:icon="@mipmap/ic_launcher"
         android:label="@string/app_name"
         android:roundIcon="@mipmap/ic_launcher_round"
+        android:hardwareAccelerated="true"
         android:supportsRtl="true"
-        android:usesCleartextTraffic="true"
+        android:usesCleartextTraffic="${usesCleartextTraffic}"
         android:theme="@style/AppTheme">
 
         <activity
             android:name=".MainActivity"
             android:configChanges="orientation|keyboardHidden|keyboard|screenSize|locale|smallestScreenSize|screenLayout|uiMode"
             android:exported="true"
+            android:hardwareAccelerated="true"
             android:label="@string/title_activity_main"
             android:launchMode="singleTask"
             android:theme="@style/AppTheme.NoActionBarLaunch">

packages/frontend/apps/android/App/app/src/main/java/app/affine/pro/MainActivity.kt

@@ -93,7 +93,27 @@ class MainActivity : BridgeActivity(), AIButtonPlugin.Callback, AFFiNEThemePlugi
     override fun load() {
         super.load()
         AuthInitializer.initialize(bridge)
-        bridge.webView.settings.mixedContentMode = WebSettings.MIXED_CONTENT_ALWAYS_ALLOW
+        configureEditorWebView()
+    }
+
+    private fun configureEditorWebView() {
+        bridge.webView.apply {
+            overScrollMode = View.OVER_SCROLL_NEVER
+            isHorizontalScrollBarEnabled = false
+            isVerticalScrollBarEnabled = false
+            settings.apply {
+                // Debug builds may point CAP_SERVER_URL at an HTTP dev server; release builds
+                // should keep mixed content blocked.
+                mixedContentMode = if (BuildConfig.DEBUG) {
+                    WebSettings.MIXED_CONTENT_COMPATIBILITY_MODE
+                } else {
+                    WebSettings.MIXED_CONTENT_NEVER_ALLOW
+                }
+                setSupportZoom(false)
+                builtInZoomControls = false
+                displayZoomControls = false
+            }
+        }
     }
 
     override fun present() {

packages/frontend/apps/android/capacitor.config.ts

@@ -7,6 +7,9 @@ const packageJson = JSON.parse(
   readFileSync(resolve(__dirname, './package.json'), 'utf-8')
 );
 
+const capServerUrl = process.env.CAP_SERVER_URL;
+const allowsCleartextServer = capServerUrl?.startsWith('http://') ?? false;
+
 interface AppConfig {
   affineVersion: string;
 }
@@ -27,9 +30,6 @@ const config: CapacitorConfig & AppConfig = {
     },
     adjustMarginsForEdgeToEdge: 'force',
   },
-  server: {
-    cleartext: true,
-  },
   plugins: {
     CapacitorHttp: {
       enabled: false,
@@ -40,10 +40,11 @@ const config: CapacitorConfig & AppConfig = {
   },
 };
 
-if (process.env.CAP_SERVER_URL) {
+if (capServerUrl) {
   Object.assign(config, {
     server: {
-      url: process.env.CAP_SERVER_URL,
+      url: capServerUrl,
+      cleartext: allowsCleartextServer,
     },
   });
 }

packages/frontend/apps/android/src/setup.ts

@@ -2,3 +2,21 @@ import '@affine/core/bootstrap/browser';
 import '@affine/component/theme';
 import '@affine/core/mobile/styles/mobile.css';
 import './proxy';
+
+import { viewportRuntimeConfig } from '@blocksuite/affine/std/gfx';
+
+// Android WebView is less prone to the iOS WKWebView process kill, so keep the
+// user-facing zoom range unchanged. These knobs only reduce gesture-time work
+// and low-zoom canvas memory while preserving the normal-zoom render quality.
+viewportRuntimeConfig.VIEWPORT_REFRESH_PIXEL_THRESHOLD = 60;
+viewportRuntimeConfig.VIEWPORT_REFRESH_MAX_INTERVAL = 300;
+viewportRuntimeConfig.SKIP_REFRESH_DURING_GESTURE = true;
+viewportRuntimeConfig.OVERSCAN_RATIO = 0.2;
+viewportRuntimeConfig.OVERSCAN_RATIO_BLOCK = 0;
+// Keep this aligned with iOS: the ~200ms gesture debounce plus this delay gives
+// elements/connectors enough time to settle while still reappearing within ~500ms.
+viewportRuntimeConfig.POST_GESTURE_REFRESH_DELAY = 220;
+viewportRuntimeConfig.CANVAS_DPR_CAP_BY_ZOOM = [
+  [0.5, 1],
+  [0.8, 2],
+];