build(deps): bump hiltAndroid from 2.51.1 to 2.52

Bumps `hiltAndroid` from 2.51.1 to 2.52.

Updates `com.google.dagger:hilt-android` from 2.51.1 to 2.52
- [Release notes](https://github.com/google/dagger/releases)
- [Changelog](https://github.com/google/dagger/blob/master/CHANGELOG.md)
- [Commits](https://github.com/google/dagger/compare/dagger-2.51.1...dagger-2.52)

Updates `com.google.dagger:hilt-android-compiler` from 2.51.1 to 2.52
- [Release notes](https://github.com/google/dagger/releases)
- [Changelog](https://github.com/google/dagger/blob/master/CHANGELOG.md)
- [Commits](https://github.com/google/dagger/compare/dagger-2.51.1...dagger-2.52)

Updates `com.google.dagger.hilt.android` from 2.51.1 to 2.52
- [Release notes](https://github.com/google/dagger/releases)
- [Changelog](https://github.com/google/dagger/blob/master/CHANGELOG.md)
- [Commits](https://github.com/google/dagger/compare/dagger-2.51.1...dagger-2.52)

---
updated-dependencies:
- dependency-name: com.google.dagger:hilt-android
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: com.google.dagger:hilt-android-compiler
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: com.google.dagger.hilt.android
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

.editorconfig

@@ -0,0 +1,97 @@
+root = true
+
+[*]
+charset = utf-8
+indent_size = 4
+indent_style = tab
+max_line_length = 150
+trim_trailing_whitespace = true
+insert_final_newline = true
+
+[{*.kt,*.kts}]
+ij_continuation_indent_size = 4
+ij_java_names_count_to_use_import_on_demand = 9999
+ij_kotlin_align_in_columns_case_branch = false
+ij_kotlin_align_multiline_binary_operation = false
+ij_kotlin_align_multiline_extends_list = false
+ij_kotlin_align_multiline_method_parentheses = false
+ij_kotlin_align_multiline_parameters = true
+ij_kotlin_align_multiline_parameters_in_calls = false
+ij_kotlin_assignment_wrap = normal
+ij_kotlin_blank_lines_after_class_header = 0
+ij_kotlin_blank_lines_around_block_when_branches = 0
+ij_kotlin_blank_lines_before_declaration_with_comment_or_annotation_on_separate_line = 1
+ij_kotlin_block_comment_at_first_column = true
+ij_kotlin_call_parameters_new_line_after_left_paren = true
+ij_kotlin_call_parameters_right_paren_on_new_line = false
+ij_kotlin_catch_on_new_line = false
+ij_kotlin_continuation_indent_for_chained_calls = true
+ij_kotlin_continuation_indent_for_expression_bodies = true
+ij_kotlin_continuation_indent_in_argument_lists = true
+ij_kotlin_continuation_indent_in_elvis = false
+ij_kotlin_continuation_indent_in_if_conditions = false
+ij_kotlin_continuation_indent_in_parameter_lists = false
+ij_kotlin_continuation_indent_in_supertype_lists = false
+ij_kotlin_else_on_new_line = false
+ij_kotlin_enum_constants_wrap = off
+ij_kotlin_extends_list_wrap = normal
+ij_kotlin_field_annotation_wrap = split_into_lines
+ij_kotlin_finally_on_new_line = false
+ij_kotlin_if_rparen_on_new_line = false
+ij_kotlin_import_nested_classes = false
+ij_kotlin_insert_whitespaces_in_simple_one_line_method = true
+ij_kotlin_keep_blank_lines_before_right_brace = 2
+ij_kotlin_keep_blank_lines_in_code = 2
+ij_kotlin_keep_blank_lines_in_declarations = 2
+ij_kotlin_keep_first_column_comment = true
+ij_kotlin_keep_indents_on_empty_lines = false
+ij_kotlin_keep_line_breaks = true
+ij_kotlin_lbrace_on_next_line = false
+ij_kotlin_line_comment_add_space = false
+ij_kotlin_line_comment_at_first_column = true
+ij_kotlin_method_annotation_wrap = split_into_lines
+ij_kotlin_method_call_chain_wrap = normal
+ij_kotlin_method_parameters_new_line_after_left_paren = true
+ij_kotlin_method_parameters_right_paren_on_new_line = true
+ij_kotlin_name_count_to_use_star_import = 9999
+ij_kotlin_name_count_to_use_star_import_for_members = 9999
+ij_kotlin_parameter_annotation_wrap = off
+ij_kotlin_space_after_comma = true
+ij_kotlin_space_after_extend_colon = true
+ij_kotlin_space_after_type_colon = true
+ij_kotlin_space_before_catch_parentheses = true
+ij_kotlin_space_before_comma = false
+ij_kotlin_space_before_extend_colon = true
+ij_kotlin_space_before_for_parentheses = true
+ij_kotlin_space_before_if_parentheses = true
+ij_kotlin_space_before_lambda_arrow = true
+ij_kotlin_space_before_type_colon = false
+ij_kotlin_space_before_when_parentheses = true
+ij_kotlin_space_before_while_parentheses = true
+ij_kotlin_spaces_around_additive_operators = true
+ij_kotlin_spaces_around_assignment_operators = true
+ij_kotlin_spaces_around_equality_operators = true
+ij_kotlin_spaces_around_function_type_arrow = true
+ij_kotlin_spaces_around_logical_operators = true
+ij_kotlin_spaces_around_multiplicative_operators = true
+ij_kotlin_spaces_around_range = false
+ij_kotlin_spaces_around_relational_operators = true
+ij_kotlin_spaces_around_unary_operator = false
+ij_kotlin_spaces_around_when_arrow = true
+ij_kotlin_variable_annotation_wrap = off
+ij_kotlin_while_on_new_line = false
+ij_kotlin_wrap_elvis_expressions = 1
+ij_kotlin_wrap_expression_body_functions = 1
+ij_kotlin_wrap_first_method_in_call_chain = false
+#compose
+ktlint_standard_filename = disabled
+ktlint_standard_no-wildcard-imports = disabled
+ktlint_standard_function-naming = disabled
+ktlint_standard_property-naming = disabled
+ktlint_standard_package-naming = disabled
+ktlint_function_naming_ignore_when_annotated_with = Composable
+ktlint_code_style = android_studio
+ktlint_standard_import-ordering = disabled
+ktlint_standard_package-naming = disabled
+ij_kotlin_allow_trailing_comma = true
+ij_kotlin_allow_trailing_comma_on_call_site = true

.github/CODE_OF_CONDUCT.md

@@ -0,0 +1,22 @@
+# Contributor Code of Conduct
+
+## Pledge
+
+We as individuals involved in this project, pledge to participate in this
+community in a respectful, constructive, and civil manner as we work towards a common goal
+of delivering free, open source, and value adding software for all.
+
+## Standard
+
+The standard for this community is the Golden Rule.
+
+> “Do unto others as you would have them do unto you.”
+
+## Scope
+
+This Code of Conduct applies to all spaces related to WG Tunnel.
+
+## Incidents or Concerns
+
+For any incidents or concerns, reach out to Zane at
+<support@zaneschepke.com>.

.github/FUNDING.yml

@@ -0,0 +1,2 @@
+ko_fi: zaneschepke
+liberapay: zaneschepke

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,33 @@
+---
+name: Bug report
+about: Create a report to help us improve
+title: "[BUG] - Problem with app"
+labels: bug
+assignees: zaneschepke
+
+---
+
+**Describe the bug**
+A clear and concise description of what the bug is.
+
+**Smartphone (please complete the following information):**
+
+- Device: [e.g. Pixel 4a]
+- Android Version: [e.g. Android 13]
+- App Version [e.g. 3.3.3]
+
+**To Reproduce**
+Steps to reproduce the behavior:
+
+1. Go to '...'
+2. Click on '....'
+3. Scroll down to '....'
+4. See error
+
+**Expected behavior**
+A clear and concise description of what you expected to happen.
+
+**Screenshots (Only if necessary)**
+
+**Additional context**
+Add any other context about the problem here.

.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,20 @@
+---
+name: Feature request
+about: Suggest an idea for this project
+title: "[FEATURE] - New feature request"
+labels: enhancement
+assignees: zaneschepke
+
+---
+
+**Is your feature request related to a problem? Please describe.**
+A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
+
+**Describe the solution you'd like**
+A clear and concise description of what you want to happen.
+
+**Describe alternatives you've considered**
+A clear and concise description of any alternative solutions or features you've considered.
+
+**Additional context**
+Add any other context or screenshots about the feature request here.

.github/SUPPORT.md

@@ -0,0 +1,17 @@
+# Support
+
+If you are experiencing issues with the app, the following resources are available to help you.
+
+<ol>
+  <li>
+    See the app docs site <a href="https://zaneschepke.com/wgtunnel-docs/overview.html">here</a> (work in progress).
+  </li>
+  <li>
+    Chat with me and our community on Discord <a href="https://discord.gg/rbRRNh6H7V">here</a>, or open an issue on GitHub <a href="https://github.com/zaneschepke/wgtunnel/issues/new/choose">here</a>.
+  </li>
+  <li>
+    Send me an email <a href="mailto:zanecschepke@gmail.com">here</a>.
+  </li>
+</ol>
+
+Thank you for using WG Tunnel.

.github/dependabot.yml

@@ -0,0 +1,10 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: daily
+  - package-ecosystem: gradle
+    directory: /
+    schedule:
+      interval: daily

.github/workflows/ci.yml

@@ -0,0 +1,23 @@
+name: ci-android
+
+on:
+    workflow_dispatch:
+    pull_request:
+
+jobs:
+  format:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          distribution: 'temurin'
+          java-version: '17'
+          cache: gradle
+
+      - name: Grant execute permission for gradlew
+        run: chmod +x gradlew
+
+      - name: Run ktlint
+        run: ./gradlew ktlintCheck

.github/workflows/issue-workflow.yml

@@ -0,0 +1,20 @@
+name: Issue Updates Workflow
+
+on:
+  issues:
+    types: [ opened, closed, reopened ]
+
+
+jobs:
+
+  build:
+    name: Build
+    runs-on: ubuntu-latest
+    steps:
+      - name: Send Telegram Message
+        run: |
+          msg_text='${{ github.actor }} updated an issue:
+            status: ${{ github.event.issue.state }} - #${{ github.event.issue.number }} ${{ github.event.issue.title }}
+            https://github.com/zaneschepke/wgtunnel/issues/${{ github.event.issue.number }}'
+          curl -s -X POST 'https://api.telegram.org/bot${{ secrets.TELEGRAM_TOKEN }}/sendMessage' \
+          -d "chat_id=${{ secrets.TELEGRAM_TO }}&text=${msg_text}&message_thread_id=${{ secrets.TELEGRAM_TOPIC }}"

.github/workflows/publish-workflow.yml

@@ -0,0 +1,21 @@
+name: Release Updates Workflow
+
+on:
+  release:
+    types: [ published ]
+
+
+jobs:
+
+  build:
+    name: Build
+    runs-on: ubuntu-latest
+    steps:
+      - name: Send Telegram Message
+        run: |
+          msg_text='${{ github.actor }} published a new release:
+            Release: ${{ github.event.release.tag_name }}
+            ${{ github.event.release.body }}
+            https://github.com/zaneschepke/wgtunnel/releases/tag/${{ github.event.release.tag_name }}'
+          curl -s -X POST 'https://api.telegram.org/bot${{ secrets.TELEGRAM_TOKEN }}/sendMessage' \
+          -d "chat_id=${{ secrets.TELEGRAM_TO }}&text=${msg_text}&message_thread_id=${{ secrets.TELEGRAM_TOPIC }}"

.github/workflows/release.yml

@@ -0,0 +1,236 @@
+name: release-android
+
+on:
+  schedule:
+    - cron: "4 3 * * *"
+  workflow_dispatch:
+    inputs:
+      track:
+        type: choice
+        description: "Google play release track"
+        options:
+          - none
+          - internal
+          - alpha
+          - beta
+          - production
+        default: alpha
+        required: true
+      release_type:
+        type: choice
+        description: "GitHub release type"
+        options:
+          - none
+          - prerelease
+          - nightly
+          - release
+        default: release
+        required: true
+      tag_name:
+        description: "Tag name for release"
+        required: false
+        default: nightly
+
+jobs:
+  build:
+    name: Build Signed APK
+    if: ${{ inputs.release_type != 'none' }}
+    runs-on: ubuntu-latest
+
+    env:
+      SIGNING_KEY_ALIAS: ${{ secrets.SIGNING_KEY_ALIAS }}
+      SIGNING_KEY_PASSWORD: ${{ secrets.SIGNING_KEY_PASSWORD }}
+      SIGNING_STORE_PASSWORD: ${{ secrets.SIGNING_STORE_PASSWORD }}
+      KEY_STORE_FILE: 'android_keystore.jks'
+      KEY_STORE_LOCATION: ${{ github.workspace }}/app/keystore/
+      GH_USER: ${{ secrets.GH_USER }}
+      # GH needed for gh cli
+      GH_TOKEN: ${{ secrets.GH_TOKEN }}
+      GH_REPO: ${{ github.repository }}
+
+    steps:
+      - uses: actions/checkout@v4
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          distribution: 'temurin'
+          java-version: '17'
+          cache: gradle
+      - name: Grant execute permission for gradlew
+        run: chmod +x gradlew
+
+      - name: Install system dependencies
+        run: |
+          sudo apt update && sudo apt install -y gh apksigner
+
+      # Here we need to decode keystore.jks from base64 string and place it
+      # in the folder specified in the release signing configuration
+      - name: Decode Keystore
+        id: decode_keystore
+        uses: timheuer/base64-to-file@v1.2
+        with:
+          fileName: ${{ env.KEY_STORE_FILE }}
+          fileDir: ${{ env.KEY_STORE_LOCATION }}
+          encodedString: ${{ secrets.KEYSTORE }}
+
+      # create keystore path for gradle to read
+      - name: Create keystore path env var
+        run: |
+          store_path=${{ env.KEY_STORE_LOCATION }}${{ env.KEY_STORE_FILE }}
+          echo "KEY_STORE_PATH=$store_path" >> $GITHUB_ENV
+
+      - name: Create service_account.json
+        id: createServiceAccount
+        run: echo '${{ secrets.SERVICE_ACCOUNT_JSON }}' > service_account.json
+
+      # Build and sign APK ("-x test" argument is used to skip tests)
+      # add fdroid flavor for apk upload
+      - name: Build Fdroid Release APK
+        if: ${{ inputs.release_type != '' && inputs.release_type == 'release' }}
+        run: ./gradlew :app:assembleFdroidRelease -x test
+
+      - name: Build Fdroid Prerelease APK
+        if: ${{ inputs.release_type != '' && inputs.release_type == 'prerelease' }}
+        run: ./gradlew :app:assembleFdroidPrerelease -x test
+
+      - name: Build Fdroid Nightly APK
+        if: ${{ inputs.release_type == '' || inputs.release_type == 'nightly' }}
+        run: ./gradlew :app:assembleFdroidNightly -x test
+
+      - if: ${{ inputs.release_type == '' || inputs.release_type == 'nightly' }}
+        run: echo "APK_PATH=$(find . -regex '^.*/build/outputs/apk/fdroid/nightly/.*\.apk$' -type f | head -1)" >> $GITHUB_ENV
+      - if: ${{ inputs.release_type != '' && inputs.release_type == 'release' }}
+        run: echo "APK_PATH=$(find . -regex '^.*/build/outputs/apk/fdroid/release/.*\.apk$' -type f | head -1)" >> $GITHUB_ENV
+      - if: ${{ inputs.release_type != '' && inputs.release_type == 'prerelease' }}
+        run: echo "APK_PATH=$(find . -regex '^.*/build/outputs/apk/fdroid/prerelease/.*\.apk$' -type f | head -1)" >> $GITHUB_ENV
+
+      - name: Get version code
+        if: ${{ inputs.release_type == 'release' }}
+        run: |
+          version_code=$(grep "VERSION_CODE" buildSrc/src/main/kotlin/Constants.kt | awk '{print $5}' | tr -d '\n')
+          echo "VERSION_CODE=$version_code" >> $GITHUB_ENV
+
+      # Save the APK after the Build job is complete to publish it as a Github release in the next job
+      - name: Upload APK
+        uses: actions/upload-artifact@v4.3.5
+        with:
+          name: wgtunnel
+          path: ${{ env.APK_PATH }}
+
+      - name: Download APK from build
+        uses: actions/download-artifact@v4
+        with:
+          name: wgtunnel
+
+      - name: Repository Dispatch for my F-Droid repo
+        uses: peter-evans/repository-dispatch@v3
+        if: ${{ inputs.release_type == 'release' }}
+        with:
+          token: ${{ secrets.PAT }}
+          repository: zaneschepke/fdroid
+          event-type: fdroid-update
+
+      # Setup TAG_NAME, which is used as a general "name"
+      - if: github.event_name == 'workflow_dispatch'
+        run: echo "TAG_NAME=${{ github.event.inputs.tag_name }}" >> $GITHUB_ENV
+      - if: github.event_name == 'schedule'
+        run: echo "TAG_NAME=nightly" >> $GITHUB_ENV
+
+      - name: Set version release notes
+        if: ${{ inputs.release_type == 'release' }}
+        run: |
+          RELEASE_NOTES="$(cat ${{ github.workspace }}/fastlane/metadata/android/en-US/changelogs/${{ env.VERSION_CODE }}.txt)"
+          echo "RELEASE_NOTES<<EOF" >> $GITHUB_ENV
+          echo "$RELEASE_NOTES" >> $GITHUB_ENV
+          echo "EOF" >> $GITHUB_ENV
+
+      - name: On nightly release notes
+        if: ${{ contains(env.TAG_NAME, 'nightly') }}
+        run: |
+          echo "RELEASE_NOTES=Nightly build for the latest development version of the app." >> $GITHUB_ENV
+          gh release delete nightly --yes || true
+
+      - name: On prerelease release notes
+        if: ${{ inputs.release_type == 'prerelease' }}
+        run: |
+          echo "RELEASE_NOTES=Testing version of app for specific feature." >> $GITHUB_ENV
+          gh release delete ${{ github.event.inputs.tag_name }} --yes || true
+
+      - name: Get checksum
+        id: checksum
+        run: echo "checksum=$(apksigner verify -print-certs ${{ env.APK_PATH }} | grep -Po "(?<=SHA-256 digest:) .*" | tr -d "[:blank:]")" >> $GITHUB_OUTPUT
+
+
+      - name: Create Release with Fastlane changelog notes
+        id: create_release
+        uses: softprops/action-gh-release@v2
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          body: |
+            ${{ env.RELEASE_NOTES }}
+
+            SHA256 fingerprint:
+            ```${{ steps.checksum.outputs.checksum }}```
+          tag_name: ${{ env.TAG_NAME }}
+          name: ${{ env.TAG_NAME }}
+          draft: false
+          prerelease: ${{ inputs.release_type == 'prerelease' || inputs.release_type == '' || inputs.release_type == 'nightly' }}
+          make_latest: ${{ inputs.release_type == 'release' }}
+          files: ${{ github.workspace }}/${{ env.APK_PATH }}
+
+  publish-play:
+    if: ${{ inputs.track != 'none' && inputs.track != '' }}
+    name: Publish to Google Play
+    runs-on: ubuntu-latest
+
+    env:
+      SIGNING_KEY_ALIAS: ${{ secrets.SIGNING_KEY_ALIAS }}
+      SIGNING_KEY_PASSWORD: ${{ secrets.SIGNING_KEY_PASSWORD }}
+      SIGNING_STORE_PASSWORD: ${{ secrets.SIGNING_STORE_PASSWORD }}
+      KEY_STORE_FILE: 'android_keystore.jks'
+      KEY_STORE_LOCATION: ${{ github.workspace }}/app/keystore/
+      GH_USER: ${{ secrets.GH_USER }}
+      GH_TOKEN: ${{ secrets.GH_TOKEN }}
+
+    steps:
+      - uses: actions/checkout@v4
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          distribution: 'temurin'
+          java-version: '17'
+          cache: gradle
+
+      - name: Grant execute permission for gradlew
+        run: chmod +x gradlew
+
+      # Here we need to decode keystore.jks from base64 string and place it
+      # in the folder specified in the release signing configuration
+      - name: Decode Keystore
+        id: decode_keystore
+        uses: timheuer/base64-to-file@v1.2
+        with:
+          fileName: ${{ env.KEY_STORE_FILE }}
+          fileDir: ${{ env.KEY_STORE_LOCATION }}
+          encodedString: ${{ secrets.KEYSTORE }}
+
+      # create keystore path for gradle to read
+      - name: Create keystore path env var
+        run: |
+          store_path=${{ env.KEY_STORE_LOCATION }}${{ env.KEY_STORE_FILE }}
+          echo "KEY_STORE_PATH=$store_path" >> $GITHUB_ENV
+
+      - name: Create service_account.json
+        id: createServiceAccount
+        run: echo '${{ secrets.SERVICE_ACCOUNT_JSON }}' > service_account.json
+
+      - name: Deploy with fastlane
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: '3.2' # Not needed with a .ruby-version file
+          bundler-cache: true
+
+      - name: Distribute app to Prod track 🚀
+        run: (cd ${{ github.workspace }} && bundle install && bundle exec fastlane ${{ inputs.track }})
+

.gitignore

@@ -69,3 +69,5 @@ lint/tmp/
 # App Specific cases
 app/release/output.json
 .idea/codeStyles/
+# where we keep our signing secrets locally
+app/signing.properties

Gemfile

@@ -0,0 +1,3 @@
+source "https://rubygems.org"
+
+gem "fastlane"

README.md

@@ -4,8 +4,9 @@ WG Tunnel
 
 <div align="center">
 
-[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+[![Discord](https://img.shields.io/badge/Discord-%235865F2.svg?style=for-the-badge&logo=discord&logoColor=white)](https://discord.gg/rbRRNh6H7V)
-[![Discord Chat](https://img.shields.io/discord/1108285024631001111.svg)](https://discord.gg/rbRRNh6H7V)
+[![X Community](https://img.shields.io/badge/X-000000?style=for-the-badge&logo=x&logoColor=white)](https://twitter.com/i/communities/1780655267685736818)
+[![Telegram](https://img.shields.io/badge/Telegram-2CA5E0?style=for-the-badge&logo=telegram&logoColor=white)](https://t.me/wgtunnel)
 
 </div>
 
@@ -13,22 +14,19 @@ WG Tunnel
 
 
 [![Google Play](https://img.shields.io/badge/Google_Play-414141?style=for-the-badge&logo=google-play&logoColor=white)](https://play.google.com/store/apps/details?id=com.zaneschepke.wireguardautotunnel)
-[![Fire TV](https://img.shields.io/badge/fire%20tv-fc3b2d?style=for-the-badge&logo=amazon%20fire%20tv&logoColor=white)](https://www.amazon.com/gp/product/B0CFGGL7WK)
 [![F-Droid](https://img.shields.io/static/v1?style=for-the-badge&message=F-Droid&color=1976D2&logo=F-Droid&logoColor=FFFFFF&label=)](https://f-droid.org/packages/com.zaneschepke.wireguardautotunnel/)
 
 
-</div>
-
-<div align="center">
-
-[![ko-fi](https://ko-fi.com/img/githubbutton_sm.svg)](https://ko-fi.com/N4N8NMJN2)
-
 </div>
 
 
 <div align="left">
 
-This is an alternative Android Application for [WireGuard](https://www.wireguard.com/) with added features. Built using the [wireguard-android](https://github.com/WireGuard/wireguard-android) library and [Jetpack Compose](https://developer.android.com/jetpack/compose), this application was inspired by the official [WireGuard Android](https://github.com/WireGuard/wireguard-android) app.
+This is an alternative Android Application for [WireGuard](https://www.wireguard.com/)
+and [AmneziaWG](https://docs.amnezia.org/documentation/amnezia-wg/) with added
+features. Built using the [wireguard-android](https://github.com/WireGuard/wireguard-android)
+library and [Jetpack Compose](https://developer.android.com/jetpack/compose), this application was
+inspired by the official [WireGuard Android](https://github.com/WireGuard/wireguard-android) app.
 
 </div>
 
@@ -37,38 +35,76 @@ This is an alternative Android Application for [WireGuard](https://www.wireguard
 ## Screenshots
 
 <p float="center">
-  <img label="Main" style="padding-right:25px" src="asset/main_screen.png" width="200" />
+  <img label="Main" style="padding-right:25px" src="fastlane/metadata/android/en-US/images/phoneScreenshots/main_screen.png" width="200" />
-  <img label="Config" style="padding-left:25px" src="asset/config_screen.png" width="200" />
+  <img label="Config" style="padding-left:25px" src="fastlane/metadata/android/en-US/images/phoneScreenshots/config_screen.png" width="200" />
-  <img label="Settings" style="padding-left:25px" src="asset/settings_screen.png" width="200" />
+  <img label="Settings" style="padding-left:25px" src="fastlane/metadata/android/en-US/images/phoneScreenshots/settings_screen.png" width="200" />
-  <img label="Support" style="padding-left:25px" src="asset/support_screen.png" width="200" />
+  <img label="Support" style="padding-left:25px" src="fastlane/metadata/android/en-US/images/phoneScreenshots/support_screen.png" width="200" />
 </p>
 
 <div align="left">
 
 ## Inspiration
 
-The inspiration for this app came from the inconvenience of constantly having to turn VPN off and on while on different networks. With there being no free solution to this problem, this app was created to meet that need.
+The original inspiration for this app came from the inconvenience of having to manually turn VPN off
+and on while on different networks. This app was created to offer a free solution to this problem.
 
 ## Features
 
-* Add tunnels via .conf file
+* Add tunnels via .conf file, zip, manual entry, or QR code
-* Auto connect to VPN based on Wi-Fi SSID
+* Auto connect to tunnels based on Wi-Fi SSID, ethernet, or mobile data
 * Split tunneling by application with search
-* Always-on VPN for Android support
+* WireGuard support for kernel and userspace modes
-* Quick tile support for vpn toggling
+* Amnezia support for userspace mode for DPI/censorship protection
-* Dynamic shortcuts support for automation integration
+* Always-On VPN support
-* Configurable Trusted Network list 
+* Export Amnezia and WireGuard tunnels to zip
-* Optional auto connect on mobile data
+* Quick tile support for tunnel toggling, auto-tunneling
-* Automatic service restart after reboot
+* Static shortcuts support for tunnel toggling, auto-tunneling
-* Service will stay running in background after app has been closed
+* Intent automation support for all tunnels
+* Automatic auto-tunneling service restart after reboot
+* Automatic tunnel restart after reboot
+* Battery preservation measures
+* Restart tunnel on ping failure (beta)
 
+## Fdroid
+
+Want updates faster?
+
+Check out my personal [fdroid repository](https://github.com/zaneschepke/fdroid) to get updates the
+moment they are released.
+
+## Docs
+
+Information about features, behaviors, and answers to common questions can be found in the
+app [documentation](https://zaneschepke.com/wgtunnel-docs/overview.html).
+
+The repository for these docs can be found [here](https://github.com/zaneschepke/wgtunnel-docs).
+
+## Translation
+
+This app is using [Weblate](https://weblate.org) to assist with translations.
+
+Help translate WG Tunnel into your language
+at [Hosted Weblate](https://hosted.weblate.org/engage/wg-tunnel/).\
+[![Translation status](https://hosted.weblate.org/widgets/wg-tunnel/-/multi-auto.svg)](https://hosted.weblate.org/engage/wg-tunnel/)
 
 ## Building
 
 ```
 $ git clone https://github.com/zaneschepke/wgtunnel
 $ cd wgtunnel
-$ ./gradlew assembleRelease
 ```
 
-</span>
+And then build the app:
+
+```
+$ ./gradlew assembleDebug
+```
+
+## Contributing
+
+Any contributions in the form of feedback, issues, code, or translations are welcome and much
+appreciated!
+
+Please read
+the [code of conduct](https://github.com/zaneschepke/wgtunnel?tab=coc-ov-file#contributor-code-of-conduct)
+before contributing.

SECURITY.md

@@ -0,0 +1,5 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+Please report security issues to `support@zaneschepke.com`

app/build.gradle.kts

@@ -1,158 +1,209 @@
 plugins {
-    alias(libs.plugins.android.application)
+	alias(libs.plugins.android.application)
-    alias(libs.plugins.kotlin.android)
+	alias(libs.plugins.kotlin.android)
-    alias(libs.plugins.hilt.android)
+	alias(libs.plugins.hilt.android)
-    id("org.jetbrains.kotlin.plugin.serialization")
+	alias(libs.plugins.kotlinxSerialization)
-    alias(libs.plugins.ksp)
+	alias(libs.plugins.ksp)
+	alias(libs.plugins.compose.compiler)
+	alias(libs.plugins.grgit)
 }
 
 android {
-    namespace = "com.zaneschepke.wireguardautotunnel"
+	namespace = Constants.APP_ID
-    compileSdk = 34
+	compileSdk = Constants.TARGET_SDK
 
-    defaultConfig {
+	androidResources {
-        applicationId = "com.zaneschepke.wireguardautotunnel"
+		generateLocaleConfig = true
-        minSdk = 26
+	}
-        targetSdk = 34
-        versionCode = 31900
-        versionName = "3.1.9"
 
-        ksp {
+	defaultConfig {
-            arg("room.schemaLocation", "$projectDir/schemas")
+		applicationId = Constants.APP_ID
-        }
+		minSdk = Constants.MIN_SDK
+		targetSdk = Constants.TARGET_SDK
+		versionCode = determineVersionCode()
+		versionName = determineVersionName()
 
-        resourceConfigurations.addAll(listOf("en"))
+		ksp { arg("room.schemaLocation", "$projectDir/schemas") }
 
-        testInstrumentationRunner = "androidx.test.runner.AndroidJUnitRunner"
+		sourceSets {
-        vectorDrawables {
+			getByName("debug").assets.srcDirs(files("$projectDir/schemas")) // Room
-            useSupportLibrary = true
+		}
-        }
-    }
 
-    buildTypes {
+		testInstrumentationRunner = "androidx.test.runner.AndroidJUnitRunner"
-        release {
+		vectorDrawables { useSupportLibrary = true }
-            isDebuggable = false
+	}
-            isMinifyEnabled = true
-            isShrinkResources = true
-            proguardFiles(
-                getDefaultProguardFile("proguard-android-optimize.txt"),
-                "proguard-rules.pro"
-            )
-        }
-        debug {
-            isDebuggable = true
-        }
-    }
-    flavorDimensions.add("type")
-    productFlavors {
-        create("fdroid") {
-            dimension = "type"
-            proguardFile("fdroid-rules.pro")
-        }
-        create("general") {
-            dimension = "type"
-            if (BuildHelper.isReleaseBuild(gradle) && BuildHelper.isGeneralFlavor(gradle))
-            {
-                apply(plugin = "com.google.gms.google-services")
-                apply(plugin = "com.google.firebase.crashlytics")
-            }
-        }
-    }
-    compileOptions {
-        sourceCompatibility = JavaVersion.VERSION_17
-        targetCompatibility = JavaVersion.VERSION_17
-    }
-    kotlinOptions {
-        jvmTarget = "17"
-    }
-    buildFeatures {
-        compose = true
-        buildConfig = true
 
-    }
+	signingConfigs {
-    composeOptions {
+		create(Constants.RELEASE) {
-        kotlinCompilerExtensionVersion = libs.versions.composeCompiler.get()
+			storeFile = getStoreFile()
-    }
+			storePassword = getSigningProperty(Constants.STORE_PASS_VAR)
-    packaging {
+			keyAlias = getSigningProperty(Constants.KEY_ALIAS_VAR)
-        resources {
+			keyPassword = getSigningProperty(Constants.KEY_PASS_VAR)
-            excludes += "/META-INF/{AL2.0,LGPL2.1}"
+		}
-        }
+	}
-    }
+
+	buildTypes {
+		// don't strip
+		packaging.jniLibs.keepDebugSymbols.addAll(
+			listOf("libwg-go.so", "libwg-quick.so", "libwg.so"),
+		)
+
+		release {
+			isDebuggable = false
+			isMinifyEnabled = true
+			isShrinkResources = true
+			proguardFiles(
+				getDefaultProguardFile("proguard-android-optimize.txt"),
+				"proguard-rules.pro",
+			)
+			signingConfig = signingConfigs.getByName(Constants.RELEASE)
+		}
+		debug { isDebuggable = true }
+
+		create(Constants.PRERELEASE) {
+			initWith(buildTypes.getByName(Constants.RELEASE))
+		}
+
+		create(Constants.NIGHTLY) {
+			initWith(buildTypes.getByName(Constants.RELEASE))
+		}
+
+		applicationVariants.all {
+			val variant = this
+			variant.outputs
+				.map { it as com.android.build.gradle.internal.api.BaseVariantOutputImpl }
+				.forEach { output ->
+					val outputFileName =
+						"${Constants.APP_NAME}-${variant.flavorName}-" +
+							"${variant.buildType.name}-${variant.versionName}.apk"
+					output.outputFileName = outputFileName
+				}
+		}
+	}
+	flavorDimensions.add(Constants.TYPE)
+	productFlavors {
+		create("fdroid") {
+			dimension = Constants.TYPE
+			proguardFile("fdroid-rules.pro")
+		}
+		create("general") {
+			dimension = Constants.TYPE
+		}
+	}
+	compileOptions {
+		sourceCompatibility = JavaVersion.VERSION_17
+		targetCompatibility = JavaVersion.VERSION_17
+		isCoreLibraryDesugaringEnabled = true
+	}
+	kotlinOptions { jvmTarget = Constants.JVM_TARGET }
+	buildFeatures {
+		compose = true
+		buildConfig = true
+	}
+	packaging { resources { excludes += "/META-INF/{AL2.0,LGPL2.1}" } }
 }
 
 val generalImplementation by configurations
+
 dependencies {
-    implementation(libs.androidx.core.ktx)
-    implementation(libs.androidx.lifecycle.runtime.ktx)
-    // optional - helpers for implementing LifecycleOwner in a Service
-    implementation(libs.androidx.lifecycle.service)
-    implementation(libs.androidx.activity.compose)
-    implementation(platform(libs.androidx.compose.bom))
-    implementation(libs.androidx.compose.ui)
-    implementation(libs.androidx.compose.ui.graphics)
-    implementation(libs.androidx.compose.ui.tooling.preview)
-    implementation(libs.androidx.material3)
-    implementation(libs.androidx.appcompat)
 
-    //test
+	implementation(project(":logcatter"))
-    testImplementation(libs.junit)
-    androidTestImplementation(libs.androidx.junit)
-    androidTestImplementation(libs.androidx.espresso.core)
-    androidTestImplementation(platform(libs.androidx.compose.bom))
-    androidTestImplementation(libs.androidx.compose.ui.test)
-    debugImplementation(libs.androidx.compose.ui.tooling)
-    debugImplementation(libs.androidx.compose.manifest)
 
-    //wg
+	implementation(libs.androidx.core.ktx)
-    implementation(libs.tunnel)
+	implementation(libs.androidx.lifecycle.runtime.ktx)
 
-    //logging
+	// helpers for implementing LifecycleOwner in a Service
-    implementation(libs.timber)
+	implementation(libs.androidx.lifecycle.service)
+	implementation(libs.androidx.activity.compose)
+	implementation(platform(libs.androidx.compose.bom))
+	implementation(libs.androidx.compose.ui)
+	implementation(libs.androidx.compose.ui.graphics)
+	implementation(libs.androidx.compose.ui.tooling.preview)
+	implementation(libs.androidx.material3)
+	implementation(libs.androidx.appcompat)
 
-    // compose navigation
+	// test
-    implementation(libs.androidx.navigation.compose)
+	testImplementation(libs.junit)
-    implementation(libs.androidx.hilt.navigation.compose)
+	testImplementation(libs.androidx.junit)
+	androidTestImplementation(libs.androidx.junit)
+	androidTestImplementation(libs.androidx.espresso.core)
+	androidTestImplementation(platform(libs.androidx.compose.bom))
+	androidTestImplementation(libs.androidx.compose.ui.test)
+	androidTestImplementation(libs.androidx.room.testing)
+	debugImplementation(libs.androidx.compose.ui.tooling)
+	debugImplementation(libs.androidx.compose.manifest)
 
-    // hilt
+	// get tunnel lib from github packages or mavenLocal
-    implementation(libs.hilt.android)
+	implementation(libs.tunnel)
-    ksp(libs.hilt.android.compiler)
+	implementation(libs.amneziawg.android)
+	coreLibraryDesugaring(libs.desugar.jdk.libs)
 
-    //accompanist
+	// logging
-    implementation(libs.accompanist.systemuicontroller)
+	implementation(libs.timber)
-    implementation(libs.accompanist.permissions)
-    implementation(libs.accompanist.flowlayout)
-    implementation(libs.accompanist.navigation.animation)
-    implementation(libs.accompanist.drawablepainter)
 
-    //room
+	// compose navigation
-    implementation(libs.androidx.room.runtime)
+	implementation(libs.androidx.navigation.compose)
-    ksp(libs.androidx.room.compiler)
+	implementation(libs.androidx.hilt.navigation.compose)
-    implementation(libs.androidx.room.ktx)
 
-    //lifecycle
+	implementation(libs.zaneschepke.multifab)
-    implementation(libs.lifecycle.runtime.compose)
-    implementation(libs.androidx.lifecycle.runtime.ktx)
-    implementation(libs.androidx.lifecycle.process)
 
+	// hilt
+	implementation(libs.hilt.android)
+	ksp(libs.hilt.android.compiler)
 
-    //icons
+	// accompanist
-    implementation(libs.material.icons.extended)
+	implementation(libs.accompanist.permissions)
-    //serialization
+	implementation(libs.accompanist.flowlayout)
-    implementation(libs.kotlinx.serialization.json)
+	implementation(libs.accompanist.drawablepainter)
 
-    //firebase crashlytics
+	// storage
-    generalImplementation(platform(libs.firebase.bom))
+	implementation(libs.androidx.room.runtime)
-    generalImplementation(libs.google.firebase.crashlytics.ktx)
+	ksp(libs.androidx.room.compiler)
-    generalImplementation(libs.google.firebase.analytics.ktx)
+	implementation(libs.androidx.room.ktx)
+	implementation(libs.androidx.datastore.preferences)
 
-    //barcode scanning
+	// lifecycle
-    implementation(libs.zxing.android.embedded)
+	implementation(libs.lifecycle.runtime.compose)
-    implementation(libs.zxing.core)
+	implementation(libs.androidx.lifecycle.runtime.ktx)
+	implementation(libs.androidx.lifecycle.process)
 
-    //bio
+	// icons
-    implementation(libs.androidx.biometric.ktx)
+	implementation(libs.material.icons.extended)
+	// serialization
+	implementation(libs.kotlinx.serialization.json)
 
-    //shortcuts
+	// barcode scanning
-    implementation(libs.androidx.core)
+	implementation(libs.zxing.android.embedded)
-    implementation(libs.androidx.core.google.shortcuts)
+
+	// bio
+	implementation(libs.androidx.biometric.ktx)
+	implementation(libs.pin.lock.compose)
+
+	// shortcuts
+	implementation(libs.androidx.core)
+	implementation(libs.androidx.core.google.shortcuts)
+
+	// splash
+	implementation(libs.androidx.core.splashscreen)
+}
+
+fun determineVersionCode(): Int {
+	return with(getBuildTaskName().lowercase()) {
+		when {
+			contains(Constants.NIGHTLY) -> Constants.VERSION_CODE + Constants.NIGHTLY_CODE
+			contains(Constants.PRERELEASE) -> Constants.VERSION_CODE + Constants.PRERELEASE_CODE
+			else -> Constants.VERSION_CODE
+		}
+	}
+}
+
+fun determineVersionName(): String {
+	return with(getBuildTaskName().lowercase()) {
+		when {
+			contains(Constants.NIGHTLY) || contains(Constants.PRERELEASE) ->
+				Constants.VERSION_NAME +
+					"-${grgitService.service.get().grgit.head().abbreviatedId}"
+			else -> Constants.VERSION_NAME
+		}
+	}
 }

app/fdroid-rules.pro

@@ -1 +1,5 @@
 -dontwarn com.google.errorprone.annotations.**
+
+-keepclassmembers class * extends androidx.datastore.preferences.protobuf.GeneratedMessageLite {
+    <fields>;
+}

app/google-services.json

@@ -1,39 +0,0 @@
-{
-  "project_info": {
-    "project_number": "328300975830",
-    "project_id": "wireguard-auto-tunnel",
-    "storage_bucket": "wireguard-auto-tunnel.appspot.com"
-  },
-  "client": [
-    {
-      "client_info": {
-        "mobilesdk_app_id": "1:328300975830:android:82cd774598ccb7234b1b77",
-        "android_client_info": {
-          "package_name": "com.zaneschepke.wireguardautotunnel"
-        }
-      },
-      "oauth_client": [
-        {
-          "client_id": "328300975830-m72lc3hr69ddhdqh9ngr27rvc8o0jb2d.apps.googleusercontent.com",
-          "client_type": 3
-        }
-      ],
-      "api_key": [
-        {
-          "current_key": "AIzaSyBsSMY0LlckizXDnuYBy7nXWGSdl8zZedI"
-        }
-      ],
-      "services": {
-        "appinvite_service": {
-          "other_platform_oauth_client": [
-            {
-              "client_id": "328300975830-m72lc3hr69ddhdqh9ngr27rvc8o0jb2d.apps.googleusercontent.com",
-              "client_type": 3
-            }
-          ]
-        }
-      }
-    }
-  ],
-  "configuration_version": "1"
-}

app/proguard-rules.pro

@@ -19,3 +19,6 @@
 # If you keep the line number information, uncomment this to
 # hide the original source file name.
 #-renamesourcefileattribute SourceFile
+-keepclassmembers class * extends androidx.datastore.preferences.protobuf.GeneratedMessageLite {
+    <fields>;
+}

app/schemas/com.zaneschepke.wireguardautotunnel.data.AppDatabase/3.json

@@ -0,0 +1,133 @@
+{
+  "formatVersion": 1,
+  "database": {
+    "version": 3,
+    "identityHash": "6b30daba29bb95f8ddc4d26206329d4f",
+    "entities": [
+      {
+        "tableName": "Settings",
+        "createSql": "CREATE TABLE IF NOT EXISTS `${TABLE_NAME}` (`id` INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL, `is_tunnel_enabled` INTEGER NOT NULL, `is_tunnel_on_mobile_data_enabled` INTEGER NOT NULL, `trusted_network_ssids` TEXT NOT NULL, `default_tunnel` TEXT, `is_always_on_vpn_enabled` INTEGER NOT NULL, `is_tunnel_on_ethernet_enabled` INTEGER NOT NULL, `is_shortcuts_enabled` INTEGER NOT NULL DEFAULT false, `is_battery_saver_enabled` INTEGER NOT NULL DEFAULT false, `is_tunnel_on_wifi_enabled` INTEGER NOT NULL DEFAULT false)",
+        "fields": [
+          {
+            "fieldPath": "id",
+            "columnName": "id",
+            "affinity": "INTEGER",
+            "notNull": true
+          },
+          {
+            "fieldPath": "isAutoTunnelEnabled",
+            "columnName": "is_tunnel_enabled",
+            "affinity": "INTEGER",
+            "notNull": true
+          },
+          {
+            "fieldPath": "isTunnelOnMobileDataEnabled",
+            "columnName": "is_tunnel_on_mobile_data_enabled",
+            "affinity": "INTEGER",
+            "notNull": true
+          },
+          {
+            "fieldPath": "trustedNetworkSSIDs",
+            "columnName": "trusted_network_ssids",
+            "affinity": "TEXT",
+            "notNull": true
+          },
+          {
+            "fieldPath": "defaultTunnel",
+            "columnName": "default_tunnel",
+            "affinity": "TEXT",
+            "notNull": false
+          },
+          {
+            "fieldPath": "isAlwaysOnVpnEnabled",
+            "columnName": "is_always_on_vpn_enabled",
+            "affinity": "INTEGER",
+            "notNull": true
+          },
+          {
+            "fieldPath": "isTunnelOnEthernetEnabled",
+            "columnName": "is_tunnel_on_ethernet_enabled",
+            "affinity": "INTEGER",
+            "notNull": true
+          },
+          {
+            "fieldPath": "isShortcutsEnabled",
+            "columnName": "is_shortcuts_enabled",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          },
+          {
+            "fieldPath": "isBatterySaverEnabled",
+            "columnName": "is_battery_saver_enabled",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          },
+          {
+            "fieldPath": "isTunnelOnWifiEnabled",
+            "columnName": "is_tunnel_on_wifi_enabled",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          }
+        ],
+        "primaryKey": {
+          "autoGenerate": true,
+          "columnNames": [
+            "id"
+          ]
+        },
+        "indices": [],
+        "foreignKeys": []
+      },
+      {
+        "tableName": "TunnelConfig",
+        "createSql": "CREATE TABLE IF NOT EXISTS `${TABLE_NAME}` (`id` INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL, `name` TEXT NOT NULL, `wg_quick` TEXT NOT NULL)",
+        "fields": [
+          {
+            "fieldPath": "id",
+            "columnName": "id",
+            "affinity": "INTEGER",
+            "notNull": true
+          },
+          {
+            "fieldPath": "name",
+            "columnName": "name",
+            "affinity": "TEXT",
+            "notNull": true
+          },
+          {
+            "fieldPath": "wgQuick",
+            "columnName": "wg_quick",
+            "affinity": "TEXT",
+            "notNull": true
+          }
+        ],
+        "primaryKey": {
+          "autoGenerate": true,
+          "columnNames": [
+            "id"
+          ]
+        },
+        "indices": [
+          {
+            "name": "index_TunnelConfig_name",
+            "unique": true,
+            "columnNames": [
+              "name"
+            ],
+            "orders": [],
+            "createSql": "CREATE UNIQUE INDEX IF NOT EXISTS `index_TunnelConfig_name` ON `${TABLE_NAME}` (`name`)"
+          }
+        ],
+        "foreignKeys": []
+      }
+    ],
+    "views": [],
+    "setupQueries": [
+      "CREATE TABLE IF NOT EXISTS room_master_table (id INTEGER PRIMARY KEY,identity_hash TEXT)",
+      "INSERT OR REPLACE INTO room_master_table (id,identity_hash) VALUES(42, '6b30daba29bb95f8ddc4d26206329d4f')"
+    ]
+  }
+}

app/schemas/com.zaneschepke.wireguardautotunnel.data.AppDatabase/4.json

@@ -0,0 +1,154 @@
+{
+  "formatVersion": 1,
+  "database": {
+    "version": 4,
+    "identityHash": "aee55639422df8dadfe74c3bad204477",
+    "entities": [
+      {
+        "tableName": "Settings",
+        "createSql": "CREATE TABLE IF NOT EXISTS `${TABLE_NAME}` (`id` INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL, `is_tunnel_enabled` INTEGER NOT NULL, `is_tunnel_on_mobile_data_enabled` INTEGER NOT NULL, `trusted_network_ssids` TEXT NOT NULL, `default_tunnel` TEXT, `is_always_on_vpn_enabled` INTEGER NOT NULL, `is_tunnel_on_ethernet_enabled` INTEGER NOT NULL, `is_shortcuts_enabled` INTEGER NOT NULL DEFAULT false, `is_battery_saver_enabled` INTEGER NOT NULL DEFAULT false, `is_tunnel_on_wifi_enabled` INTEGER NOT NULL DEFAULT false, `is_kernel_enabled` INTEGER NOT NULL DEFAULT false, `is_restore_on_boot_enabled` INTEGER NOT NULL DEFAULT false, `is_multi_tunnel_enabled` INTEGER NOT NULL DEFAULT false)",
+        "fields": [
+          {
+            "fieldPath": "id",
+            "columnName": "id",
+            "affinity": "INTEGER",
+            "notNull": true
+          },
+          {
+            "fieldPath": "isAutoTunnelEnabled",
+            "columnName": "is_tunnel_enabled",
+            "affinity": "INTEGER",
+            "notNull": true
+          },
+          {
+            "fieldPath": "isTunnelOnMobileDataEnabled",
+            "columnName": "is_tunnel_on_mobile_data_enabled",
+            "affinity": "INTEGER",
+            "notNull": true
+          },
+          {
+            "fieldPath": "trustedNetworkSSIDs",
+            "columnName": "trusted_network_ssids",
+            "affinity": "TEXT",
+            "notNull": true
+          },
+          {
+            "fieldPath": "defaultTunnel",
+            "columnName": "default_tunnel",
+            "affinity": "TEXT",
+            "notNull": false
+          },
+          {
+            "fieldPath": "isAlwaysOnVpnEnabled",
+            "columnName": "is_always_on_vpn_enabled",
+            "affinity": "INTEGER",
+            "notNull": true
+          },
+          {
+            "fieldPath": "isTunnelOnEthernetEnabled",
+            "columnName": "is_tunnel_on_ethernet_enabled",
+            "affinity": "INTEGER",
+            "notNull": true
+          },
+          {
+            "fieldPath": "isShortcutsEnabled",
+            "columnName": "is_shortcuts_enabled",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          },
+          {
+            "fieldPath": "isBatterySaverEnabled",
+            "columnName": "is_battery_saver_enabled",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          },
+          {
+            "fieldPath": "isTunnelOnWifiEnabled",
+            "columnName": "is_tunnel_on_wifi_enabled",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          },
+          {
+            "fieldPath": "isKernelEnabled",
+            "columnName": "is_kernel_enabled",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          },
+          {
+            "fieldPath": "isRestoreOnBootEnabled",
+            "columnName": "is_restore_on_boot_enabled",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          },
+          {
+            "fieldPath": "isMultiTunnelEnabled",
+            "columnName": "is_multi_tunnel_enabled",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          }
+        ],
+        "primaryKey": {
+          "autoGenerate": true,
+          "columnNames": [
+            "id"
+          ]
+        },
+        "indices": [],
+        "foreignKeys": []
+      },
+      {
+        "tableName": "TunnelConfig",
+        "createSql": "CREATE TABLE IF NOT EXISTS `${TABLE_NAME}` (`id` INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL, `name` TEXT NOT NULL, `wg_quick` TEXT NOT NULL)",
+        "fields": [
+          {
+            "fieldPath": "id",
+            "columnName": "id",
+            "affinity": "INTEGER",
+            "notNull": true
+          },
+          {
+            "fieldPath": "name",
+            "columnName": "name",
+            "affinity": "TEXT",
+            "notNull": true
+          },
+          {
+            "fieldPath": "wgQuick",
+            "columnName": "wg_quick",
+            "affinity": "TEXT",
+            "notNull": true
+          }
+        ],
+        "primaryKey": {
+          "autoGenerate": true,
+          "columnNames": [
+            "id"
+          ]
+        },
+        "indices": [
+          {
+            "name": "index_TunnelConfig_name",
+            "unique": true,
+            "columnNames": [
+              "name"
+            ],
+            "orders": [],
+            "createSql": "CREATE UNIQUE INDEX IF NOT EXISTS `index_TunnelConfig_name` ON `${TABLE_NAME}` (`name`)"
+          }
+        ],
+        "foreignKeys": []
+      }
+    ],
+    "views": [],
+    "setupQueries": [
+      "CREATE TABLE IF NOT EXISTS room_master_table (id INTEGER PRIMARY KEY,identity_hash TEXT)",
+      "INSERT OR REPLACE INTO room_master_table (id,identity_hash) VALUES(42, 'aee55639422df8dadfe74c3bad204477')"
+    ]
+  }
+}

app/schemas/com.zaneschepke.wireguardautotunnel.data.AppDatabase/5.json

@@ -0,0 +1,161 @@
+{
+  "formatVersion": 1,
+  "database": {
+    "version": 5,
+    "identityHash": "bc15003a44746e18b9c260ec49737089",
+    "entities": [
+      {
+        "tableName": "Settings",
+        "createSql": "CREATE TABLE IF NOT EXISTS `${TABLE_NAME}` (`id` INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL, `is_tunnel_enabled` INTEGER NOT NULL, `is_tunnel_on_mobile_data_enabled` INTEGER NOT NULL, `trusted_network_ssids` TEXT NOT NULL, `default_tunnel` TEXT, `is_always_on_vpn_enabled` INTEGER NOT NULL, `is_tunnel_on_ethernet_enabled` INTEGER NOT NULL, `is_shortcuts_enabled` INTEGER NOT NULL DEFAULT false, `is_battery_saver_enabled` INTEGER NOT NULL DEFAULT false, `is_tunnel_on_wifi_enabled` INTEGER NOT NULL DEFAULT false, `is_kernel_enabled` INTEGER NOT NULL DEFAULT false, `is_restore_on_boot_enabled` INTEGER NOT NULL DEFAULT false, `is_multi_tunnel_enabled` INTEGER NOT NULL DEFAULT false, `is_auto_tunnel_paused` INTEGER NOT NULL DEFAULT false)",
+        "fields": [
+          {
+            "fieldPath": "id",
+            "columnName": "id",
+            "affinity": "INTEGER",
+            "notNull": true
+          },
+          {
+            "fieldPath": "isAutoTunnelEnabled",
+            "columnName": "is_tunnel_enabled",
+            "affinity": "INTEGER",
+            "notNull": true
+          },
+          {
+            "fieldPath": "isTunnelOnMobileDataEnabled",
+            "columnName": "is_tunnel_on_mobile_data_enabled",
+            "affinity": "INTEGER",
+            "notNull": true
+          },
+          {
+            "fieldPath": "trustedNetworkSSIDs",
+            "columnName": "trusted_network_ssids",
+            "affinity": "TEXT",
+            "notNull": true
+          },
+          {
+            "fieldPath": "defaultTunnel",
+            "columnName": "default_tunnel",
+            "affinity": "TEXT",
+            "notNull": false
+          },
+          {
+            "fieldPath": "isAlwaysOnVpnEnabled",
+            "columnName": "is_always_on_vpn_enabled",
+            "affinity": "INTEGER",
+            "notNull": true
+          },
+          {
+            "fieldPath": "isTunnelOnEthernetEnabled",
+            "columnName": "is_tunnel_on_ethernet_enabled",
+            "affinity": "INTEGER",
+            "notNull": true
+          },
+          {
+            "fieldPath": "isShortcutsEnabled",
+            "columnName": "is_shortcuts_enabled",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          },
+          {
+            "fieldPath": "isBatterySaverEnabled",
+            "columnName": "is_battery_saver_enabled",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          },
+          {
+            "fieldPath": "isTunnelOnWifiEnabled",
+            "columnName": "is_tunnel_on_wifi_enabled",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          },
+          {
+            "fieldPath": "isKernelEnabled",
+            "columnName": "is_kernel_enabled",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          },
+          {
+            "fieldPath": "isRestoreOnBootEnabled",
+            "columnName": "is_restore_on_boot_enabled",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          },
+          {
+            "fieldPath": "isMultiTunnelEnabled",
+            "columnName": "is_multi_tunnel_enabled",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          },
+          {
+            "fieldPath": "isAutoTunnelPaused",
+            "columnName": "is_auto_tunnel_paused",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          }
+        ],
+        "primaryKey": {
+          "autoGenerate": true,
+          "columnNames": [
+            "id"
+          ]
+        },
+        "indices": [],
+        "foreignKeys": []
+      },
+      {
+        "tableName": "TunnelConfig",
+        "createSql": "CREATE TABLE IF NOT EXISTS `${TABLE_NAME}` (`id` INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL, `name` TEXT NOT NULL, `wg_quick` TEXT NOT NULL)",
+        "fields": [
+          {
+            "fieldPath": "id",
+            "columnName": "id",
+            "affinity": "INTEGER",
+            "notNull": true
+          },
+          {
+            "fieldPath": "name",
+            "columnName": "name",
+            "affinity": "TEXT",
+            "notNull": true
+          },
+          {
+            "fieldPath": "wgQuick",
+            "columnName": "wg_quick",
+            "affinity": "TEXT",
+            "notNull": true
+          }
+        ],
+        "primaryKey": {
+          "autoGenerate": true,
+          "columnNames": [
+            "id"
+          ]
+        },
+        "indices": [
+          {
+            "name": "index_TunnelConfig_name",
+            "unique": true,
+            "columnNames": [
+              "name"
+            ],
+            "orders": [],
+            "createSql": "CREATE UNIQUE INDEX IF NOT EXISTS `index_TunnelConfig_name` ON `${TABLE_NAME}` (`name`)"
+          }
+        ],
+        "foreignKeys": []
+      }
+    ],
+    "views": [],
+    "setupQueries": [
+      "CREATE TABLE IF NOT EXISTS room_master_table (id INTEGER PRIMARY KEY,identity_hash TEXT)",
+      "INSERT OR REPLACE INTO room_master_table (id,identity_hash) VALUES(42, 'bc15003a44746e18b9c260ec49737089')"
+    ]
+  }
+}

app/schemas/com.zaneschepke.wireguardautotunnel.data.AppDatabase/6.json

@@ -0,0 +1,168 @@
+{
+  "formatVersion": 1,
+  "database": {
+    "version": 6,
+    "identityHash": "625820076477aca948536f7bccccc7ca",
+    "entities": [
+      {
+        "tableName": "Settings",
+        "createSql": "CREATE TABLE IF NOT EXISTS `${TABLE_NAME}` (`id` INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL, `is_tunnel_enabled` INTEGER NOT NULL, `is_tunnel_on_mobile_data_enabled` INTEGER NOT NULL, `trusted_network_ssids` TEXT NOT NULL, `default_tunnel` TEXT, `is_always_on_vpn_enabled` INTEGER NOT NULL, `is_tunnel_on_ethernet_enabled` INTEGER NOT NULL, `is_shortcuts_enabled` INTEGER NOT NULL DEFAULT false, `is_battery_saver_enabled` INTEGER NOT NULL DEFAULT false, `is_tunnel_on_wifi_enabled` INTEGER NOT NULL DEFAULT false, `is_kernel_enabled` INTEGER NOT NULL DEFAULT false, `is_restore_on_boot_enabled` INTEGER NOT NULL DEFAULT false, `is_multi_tunnel_enabled` INTEGER NOT NULL DEFAULT false, `is_auto_tunnel_paused` INTEGER NOT NULL DEFAULT false, `is_ping_enabled` INTEGER NOT NULL DEFAULT false)",
+        "fields": [
+          {
+            "fieldPath": "id",
+            "columnName": "id",
+            "affinity": "INTEGER",
+            "notNull": true
+          },
+          {
+            "fieldPath": "isAutoTunnelEnabled",
+            "columnName": "is_tunnel_enabled",
+            "affinity": "INTEGER",
+            "notNull": true
+          },
+          {
+            "fieldPath": "isTunnelOnMobileDataEnabled",
+            "columnName": "is_tunnel_on_mobile_data_enabled",
+            "affinity": "INTEGER",
+            "notNull": true
+          },
+          {
+            "fieldPath": "trustedNetworkSSIDs",
+            "columnName": "trusted_network_ssids",
+            "affinity": "TEXT",
+            "notNull": true
+          },
+          {
+            "fieldPath": "defaultTunnel",
+            "columnName": "default_tunnel",
+            "affinity": "TEXT",
+            "notNull": false
+          },
+          {
+            "fieldPath": "isAlwaysOnVpnEnabled",
+            "columnName": "is_always_on_vpn_enabled",
+            "affinity": "INTEGER",
+            "notNull": true
+          },
+          {
+            "fieldPath": "isTunnelOnEthernetEnabled",
+            "columnName": "is_tunnel_on_ethernet_enabled",
+            "affinity": "INTEGER",
+            "notNull": true
+          },
+          {
+            "fieldPath": "isShortcutsEnabled",
+            "columnName": "is_shortcuts_enabled",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          },
+          {
+            "fieldPath": "isBatterySaverEnabled",
+            "columnName": "is_battery_saver_enabled",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          },
+          {
+            "fieldPath": "isTunnelOnWifiEnabled",
+            "columnName": "is_tunnel_on_wifi_enabled",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          },
+          {
+            "fieldPath": "isKernelEnabled",
+            "columnName": "is_kernel_enabled",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          },
+          {
+            "fieldPath": "isRestoreOnBootEnabled",
+            "columnName": "is_restore_on_boot_enabled",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          },
+          {
+            "fieldPath": "isMultiTunnelEnabled",
+            "columnName": "is_multi_tunnel_enabled",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          },
+          {
+            "fieldPath": "isAutoTunnelPaused",
+            "columnName": "is_auto_tunnel_paused",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          },
+          {
+            "fieldPath": "isPingEnabled",
+            "columnName": "is_ping_enabled",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          }
+        ],
+        "primaryKey": {
+          "autoGenerate": true,
+          "columnNames": [
+            "id"
+          ]
+        },
+        "indices": [],
+        "foreignKeys": []
+      },
+      {
+        "tableName": "TunnelConfig",
+        "createSql": "CREATE TABLE IF NOT EXISTS `${TABLE_NAME}` (`id` INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL, `name` TEXT NOT NULL, `wg_quick` TEXT NOT NULL)",
+        "fields": [
+          {
+            "fieldPath": "id",
+            "columnName": "id",
+            "affinity": "INTEGER",
+            "notNull": true
+          },
+          {
+            "fieldPath": "name",
+            "columnName": "name",
+            "affinity": "TEXT",
+            "notNull": true
+          },
+          {
+            "fieldPath": "wgQuick",
+            "columnName": "wg_quick",
+            "affinity": "TEXT",
+            "notNull": true
+          }
+        ],
+        "primaryKey": {
+          "autoGenerate": true,
+          "columnNames": [
+            "id"
+          ]
+        },
+        "indices": [
+          {
+            "name": "index_TunnelConfig_name",
+            "unique": true,
+            "columnNames": [
+              "name"
+            ],
+            "orders": [],
+            "createSql": "CREATE UNIQUE INDEX IF NOT EXISTS `index_TunnelConfig_name` ON `${TABLE_NAME}` (`name`)"
+          }
+        ],
+        "foreignKeys": []
+      }
+    ],
+    "views": [],
+    "setupQueries": [
+      "CREATE TABLE IF NOT EXISTS room_master_table (id INTEGER PRIMARY KEY,identity_hash TEXT)",
+      "INSERT OR REPLACE INTO room_master_table (id,identity_hash) VALUES(42, '625820076477aca948536f7bccccc7ca')"
+    ]
+  }
+}

app/schemas/com.zaneschepke.wireguardautotunnel.data.AppDatabase/7.json

@@ -0,0 +1,176 @@
+{
+  "formatVersion": 1,
+  "database": {
+    "version": 7,
+    "identityHash": "e65e4e7cf01f50fb03196d47b54288b1",
+    "entities": [
+      {
+        "tableName": "Settings",
+        "createSql": "CREATE TABLE IF NOT EXISTS `${TABLE_NAME}` (`id` INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL, `is_tunnel_enabled` INTEGER NOT NULL, `is_tunnel_on_mobile_data_enabled` INTEGER NOT NULL, `trusted_network_ssids` TEXT NOT NULL, `is_always_on_vpn_enabled` INTEGER NOT NULL, `is_tunnel_on_ethernet_enabled` INTEGER NOT NULL, `is_shortcuts_enabled` INTEGER NOT NULL DEFAULT false, `is_tunnel_on_wifi_enabled` INTEGER NOT NULL DEFAULT false, `is_kernel_enabled` INTEGER NOT NULL DEFAULT false, `is_restore_on_boot_enabled` INTEGER NOT NULL DEFAULT false, `is_multi_tunnel_enabled` INTEGER NOT NULL DEFAULT false, `is_auto_tunnel_paused` INTEGER NOT NULL DEFAULT false, `is_ping_enabled` INTEGER NOT NULL DEFAULT false)",
+        "fields": [
+          {
+            "fieldPath": "id",
+            "columnName": "id",
+            "affinity": "INTEGER",
+            "notNull": true
+          },
+          {
+            "fieldPath": "isAutoTunnelEnabled",
+            "columnName": "is_tunnel_enabled",
+            "affinity": "INTEGER",
+            "notNull": true
+          },
+          {
+            "fieldPath": "isTunnelOnMobileDataEnabled",
+            "columnName": "is_tunnel_on_mobile_data_enabled",
+            "affinity": "INTEGER",
+            "notNull": true
+          },
+          {
+            "fieldPath": "trustedNetworkSSIDs",
+            "columnName": "trusted_network_ssids",
+            "affinity": "TEXT",
+            "notNull": true
+          },
+          {
+            "fieldPath": "isAlwaysOnVpnEnabled",
+            "columnName": "is_always_on_vpn_enabled",
+            "affinity": "INTEGER",
+            "notNull": true
+          },
+          {
+            "fieldPath": "isTunnelOnEthernetEnabled",
+            "columnName": "is_tunnel_on_ethernet_enabled",
+            "affinity": "INTEGER",
+            "notNull": true
+          },
+          {
+            "fieldPath": "isShortcutsEnabled",
+            "columnName": "is_shortcuts_enabled",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          },
+          {
+            "fieldPath": "isTunnelOnWifiEnabled",
+            "columnName": "is_tunnel_on_wifi_enabled",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          },
+          {
+            "fieldPath": "isKernelEnabled",
+            "columnName": "is_kernel_enabled",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          },
+          {
+            "fieldPath": "isRestoreOnBootEnabled",
+            "columnName": "is_restore_on_boot_enabled",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          },
+          {
+            "fieldPath": "isMultiTunnelEnabled",
+            "columnName": "is_multi_tunnel_enabled",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          },
+          {
+            "fieldPath": "isAutoTunnelPaused",
+            "columnName": "is_auto_tunnel_paused",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          },
+          {
+            "fieldPath": "isPingEnabled",
+            "columnName": "is_ping_enabled",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          }
+        ],
+        "primaryKey": {
+          "autoGenerate": true,
+          "columnNames": [
+            "id"
+          ]
+        },
+        "indices": [],
+        "foreignKeys": []
+      },
+      {
+        "tableName": "TunnelConfig",
+        "createSql": "CREATE TABLE IF NOT EXISTS `${TABLE_NAME}` (`id` INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL, `name` TEXT NOT NULL, `wg_quick` TEXT NOT NULL, `tunnel_networks` TEXT NOT NULL DEFAULT '', `is_mobile_data_tunnel` INTEGER NOT NULL DEFAULT false, `is_primary_tunnel` INTEGER NOT NULL DEFAULT false)",
+        "fields": [
+          {
+            "fieldPath": "id",
+            "columnName": "id",
+            "affinity": "INTEGER",
+            "notNull": true
+          },
+          {
+            "fieldPath": "name",
+            "columnName": "name",
+            "affinity": "TEXT",
+            "notNull": true
+          },
+          {
+            "fieldPath": "wgQuick",
+            "columnName": "wg_quick",
+            "affinity": "TEXT",
+            "notNull": true
+          },
+          {
+            "fieldPath": "tunnelNetworks",
+            "columnName": "tunnel_networks",
+            "affinity": "TEXT",
+            "notNull": true,
+            "defaultValue": "''"
+          },
+          {
+            "fieldPath": "isMobileDataTunnel",
+            "columnName": "is_mobile_data_tunnel",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          },
+          {
+            "fieldPath": "isPrimaryTunnel",
+            "columnName": "is_primary_tunnel",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          }
+        ],
+        "primaryKey": {
+          "autoGenerate": true,
+          "columnNames": [
+            "id"
+          ]
+        },
+        "indices": [
+          {
+            "name": "index_TunnelConfig_name",
+            "unique": true,
+            "columnNames": [
+              "name"
+            ],
+            "orders": [],
+            "createSql": "CREATE UNIQUE INDEX IF NOT EXISTS `index_TunnelConfig_name` ON `${TABLE_NAME}` (`name`)"
+          }
+        ],
+        "foreignKeys": []
+      }
+    ],
+    "views": [],
+    "setupQueries": [
+      "CREATE TABLE IF NOT EXISTS room_master_table (id INTEGER PRIMARY KEY,identity_hash TEXT)",
+      "INSERT OR REPLACE INTO room_master_table (id,identity_hash) VALUES(42, 'e65e4e7cf01f50fb03196d47b54288b1')"
+    ]
+  }
+}

app/schemas/com.zaneschepke.wireguardautotunnel.data.AppDatabase/8.json

@@ -0,0 +1,190 @@
+{
+  "formatVersion": 1,
+  "database": {
+    "version": 8,
+    "identityHash": "b4d4a7c489f6b2f0d3aa4fa6f37b4935",
+    "entities": [
+      {
+        "tableName": "Settings",
+        "createSql": "CREATE TABLE IF NOT EXISTS `${TABLE_NAME}` (`id` INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL, `is_tunnel_enabled` INTEGER NOT NULL, `is_tunnel_on_mobile_data_enabled` INTEGER NOT NULL, `trusted_network_ssids` TEXT NOT NULL, `is_always_on_vpn_enabled` INTEGER NOT NULL, `is_tunnel_on_ethernet_enabled` INTEGER NOT NULL, `is_shortcuts_enabled` INTEGER NOT NULL DEFAULT false, `is_tunnel_on_wifi_enabled` INTEGER NOT NULL DEFAULT false, `is_kernel_enabled` INTEGER NOT NULL DEFAULT false, `is_restore_on_boot_enabled` INTEGER NOT NULL DEFAULT false, `is_multi_tunnel_enabled` INTEGER NOT NULL DEFAULT false, `is_auto_tunnel_paused` INTEGER NOT NULL DEFAULT false, `is_ping_enabled` INTEGER NOT NULL DEFAULT false, `is_amnezia_enabled` INTEGER NOT NULL DEFAULT false)",
+        "fields": [
+          {
+            "fieldPath": "id",
+            "columnName": "id",
+            "affinity": "INTEGER",
+            "notNull": true
+          },
+          {
+            "fieldPath": "isAutoTunnelEnabled",
+            "columnName": "is_tunnel_enabled",
+            "affinity": "INTEGER",
+            "notNull": true
+          },
+          {
+            "fieldPath": "isTunnelOnMobileDataEnabled",
+            "columnName": "is_tunnel_on_mobile_data_enabled",
+            "affinity": "INTEGER",
+            "notNull": true
+          },
+          {
+            "fieldPath": "trustedNetworkSSIDs",
+            "columnName": "trusted_network_ssids",
+            "affinity": "TEXT",
+            "notNull": true
+          },
+          {
+            "fieldPath": "isAlwaysOnVpnEnabled",
+            "columnName": "is_always_on_vpn_enabled",
+            "affinity": "INTEGER",
+            "notNull": true
+          },
+          {
+            "fieldPath": "isTunnelOnEthernetEnabled",
+            "columnName": "is_tunnel_on_ethernet_enabled",
+            "affinity": "INTEGER",
+            "notNull": true
+          },
+          {
+            "fieldPath": "isShortcutsEnabled",
+            "columnName": "is_shortcuts_enabled",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          },
+          {
+            "fieldPath": "isTunnelOnWifiEnabled",
+            "columnName": "is_tunnel_on_wifi_enabled",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          },
+          {
+            "fieldPath": "isKernelEnabled",
+            "columnName": "is_kernel_enabled",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          },
+          {
+            "fieldPath": "isRestoreOnBootEnabled",
+            "columnName": "is_restore_on_boot_enabled",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          },
+          {
+            "fieldPath": "isMultiTunnelEnabled",
+            "columnName": "is_multi_tunnel_enabled",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          },
+          {
+            "fieldPath": "isAutoTunnelPaused",
+            "columnName": "is_auto_tunnel_paused",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          },
+          {
+            "fieldPath": "isPingEnabled",
+            "columnName": "is_ping_enabled",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          },
+          {
+            "fieldPath": "isAmneziaEnabled",
+            "columnName": "is_amnezia_enabled",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          }
+        ],
+        "primaryKey": {
+          "autoGenerate": true,
+          "columnNames": [
+            "id"
+          ]
+        },
+        "indices": [],
+        "foreignKeys": []
+      },
+      {
+        "tableName": "TunnelConfig",
+        "createSql": "CREATE TABLE IF NOT EXISTS `${TABLE_NAME}` (`id` INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL, `name` TEXT NOT NULL, `wg_quick` TEXT NOT NULL, `tunnel_networks` TEXT NOT NULL DEFAULT '', `is_mobile_data_tunnel` INTEGER NOT NULL DEFAULT false, `is_primary_tunnel` INTEGER NOT NULL DEFAULT false, `am_quick` TEXT NOT NULL DEFAULT '')",
+        "fields": [
+          {
+            "fieldPath": "id",
+            "columnName": "id",
+            "affinity": "INTEGER",
+            "notNull": true
+          },
+          {
+            "fieldPath": "name",
+            "columnName": "name",
+            "affinity": "TEXT",
+            "notNull": true
+          },
+          {
+            "fieldPath": "wgQuick",
+            "columnName": "wg_quick",
+            "affinity": "TEXT",
+            "notNull": true
+          },
+          {
+            "fieldPath": "tunnelNetworks",
+            "columnName": "tunnel_networks",
+            "affinity": "TEXT",
+            "notNull": true,
+            "defaultValue": "''"
+          },
+          {
+            "fieldPath": "isMobileDataTunnel",
+            "columnName": "is_mobile_data_tunnel",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          },
+          {
+            "fieldPath": "isPrimaryTunnel",
+            "columnName": "is_primary_tunnel",
+            "affinity": "INTEGER",
+            "notNull": true,
+            "defaultValue": "false"
+          },
+          {
+            "fieldPath": "amQuick",
+            "columnName": "am_quick",
+            "affinity": "TEXT",
+            "notNull": true,
+            "defaultValue": "''"
+          }
+        ],
+        "primaryKey": {
+          "autoGenerate": true,
+          "columnNames": [
+            "id"
+          ]
+        },
+        "indices": [
+          {
+            "name": "index_TunnelConfig_name",
+            "unique": true,
+            "columnNames": [
+              "name"
+            ],
+            "orders": [],
+            "createSql": "CREATE UNIQUE INDEX IF NOT EXISTS `index_TunnelConfig_name` ON `${TABLE_NAME}` (`name`)"
+          }
+        ],
+        "foreignKeys": []
+      }
+    ],
+    "views": [],
+    "setupQueries": [
+      "CREATE TABLE IF NOT EXISTS room_master_table (id INTEGER PRIMARY KEY,identity_hash TEXT)",
+      "INSERT OR REPLACE INTO room_master_table (id,identity_hash) VALUES(42, 'b4d4a7c489f6b2f0d3aa4fa6f37b4935')"
+    ]
+  }
+}

app/signing_template.properties

@@ -0,0 +1,4 @@
+SIGNING_STORE_PASSWORD=
+SIGNING_KEY_ALIAS=
+SIGNING_KEY_PASSWORD=
+KEY_STORE_PATH=/

app/src/androidTest/java/com/zaneschepke/wireguardautotunnel/ExampleInstrumentedTest.kt

@@ -13,10 +13,10 @@ import org.junit.runner.RunWith
  */
 @RunWith(AndroidJUnit4::class)
 class ExampleInstrumentedTest {
-    @Test
+	@Test
-    fun useAppContext() {
+	fun useAppContext() {
-        // Context of the app under test.
+		// Context of the app under test.
-        val appContext = InstrumentationRegistry.getInstrumentation().targetContext
+		val appContext = InstrumentationRegistry.getInstrumentation().targetContext
-        assertEquals("com.zaneschepke.wireguardautotunnel", appContext.packageName)
+		assertEquals("com.zaneschepke.wireguardautotunnel", appContext.packageName)
-    }
+	}
 }

app/src/androidTest/java/com/zaneschepke/wireguardautotunnel/MigrationTest.kt

@@ -0,0 +1,44 @@
+package com.zaneschepke.wireguardautotunnel
+
+import androidx.room.testing.MigrationTestHelper
+import androidx.test.ext.junit.runners.AndroidJUnit4
+import androidx.test.platform.app.InstrumentationRegistry
+import com.zaneschepke.wireguardautotunnel.data.AppDatabase
+import com.zaneschepke.wireguardautotunnel.data.Queries
+import org.junit.Rule
+import org.junit.Test
+import org.junit.runner.RunWith
+import java.io.IOException
+
+@RunWith(AndroidJUnit4::class)
+class MigrationTest {
+	private val dbName = "migration-test"
+
+	@get:Rule
+	val helper: MigrationTestHelper =
+		MigrationTestHelper(
+			InstrumentationRegistry.getInstrumentation(),
+			AppDatabase::class.java,
+		)
+
+	@Test
+	@Throws(IOException::class)
+	fun migrate6To7() {
+		helper.createDatabase(dbName, 6).apply {
+			// Database has schema version 1. Insert some data using SQL queries.
+			// You can't use DAO classes because they expect the latest schema.
+			execSQL(Queries.createDefaultSettings())
+			execSQL(
+				Queries.createTunnelConfig(),
+			)
+			// Prepare for the next version.
+			close()
+		}
+
+		// Re-open the database with version 2 and provide
+		// MIGRATION_1_2 as the migration process.
+		helper.runMigrationsAndValidate(dbName, 7, true)
+		// MigrationTestHelper automatically verifies the schema changes,
+		// but you need to validate that the data was migrated properly.
+	}
+}

app/src/main/AndroidManifest.xml

@@ -1,130 +1,181 @@
 <?xml version="1.0" encoding="utf-8"?>
 <manifest xmlns:android="http://schemas.android.com/apk/res/android"
     xmlns:tools="http://schemas.android.com/tools">
+
     <uses-permission android:name="android.permission.INTERNET" />
-    <uses-permission android:name="android.permission.READ_EXTERNAL_STORAGE"
+    <uses-permission
+        android:name="android.permission.READ_EXTERNAL_STORAGE"
         android:maxSdkVersion="32" />
     <uses-permission
         android:name="android.permission.WRITE_EXTERNAL_STORAGE"
         android:maxSdkVersion="32"
         tools:ignore="ScopedStorage" />
-    <uses-permission android:name="android.permission.ACCESS_WIFI_STATE"
+    <uses-permission
+        android:name="android.permission.ACCESS_WIFI_STATE"
         android:maxSdkVersion="30"
         tools:ignore="LeanbackUsesWifi" />
     <uses-permission android:name="android.permission.POST_NOTIFICATIONS" />
-    <uses-permission android:name="android.permission.ACCESS_COARSE_LOCATION"/>
+    <uses-permission android:name="android.permission.ACCESS_COARSE_LOCATION" />
-    <uses-permission android:name="android.permission.ACCESS_FINE_LOCATION"/>
+    <uses-permission android:name="android.permission.ACCESS_FINE_LOCATION" />
-    <uses-permission android:name="android.permission.ACCESS_NETWORK_STATE"/>
+    <uses-permission android:name="android.permission.ACCESS_NETWORK_STATE" />
-    <uses-permission android:name="android.permission.CHANGE_NETWORK_STATE"/>
+    <uses-permission android:name="android.permission.CHANGE_NETWORK_STATE" />
-    <uses-permission android:name="android.permission.ACCESS_BACKGROUND_LOCATION"/>
+    <uses-permission android:name="android.permission.ACCESS_BACKGROUND_LOCATION" />
-    <uses-permission android:name="android.permission.FOREGROUND_SERVICE_LOCATION"/>
+    <!--foreground service exempt android 14-->
-    <uses-permission android:name="android.permission.FOREGROUND_SERVICE_REMOTE_MESSAGING"/>
+    <uses-permission android:name="android.permission.FOREGROUND_SERVICE_SYSTEM_EXEMPTED" />
+    <uses-permission android:name="android.permission.SCHEDULE_EXACT_ALARM" />
+
     <!--foreground service permissions-->
     <uses-permission android:name="android.permission.FOREGROUND_SERVICE" />
     <uses-permission android:name="android.permission.WAKE_LOCK" />
+    <uses-permission android:name="android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS" />
     <!--start service on boot permission-->
-    <uses-permission android:name="android.permission.RECEIVE_BOOT_COMPLETED"/>
+    <uses-permission android:name="android.permission.RECEIVE_BOOT_COMPLETED" />
     <!--android tv support-->
-    <uses-feature android:name="android.software.leanback"
+    <uses-feature
+        android:name="android.software.leanback"
         android:required="false" />
-    <uses-feature android:name="android.hardware.touchscreen"
+    <uses-feature
+        android:name="android.hardware.touchscreen"
         android:required="false" />
     <uses-feature
         android:name="android.hardware.location.gps"
         android:required="false" />
     <uses-feature
-    android:name="android.hardware.screen.portrait"
+        android:name="android.hardware.screen.portrait"
-    android:required="false" />
+        android:required="false" />
+
     <queries>
         <intent>
             <action android:name="android.intent.action.MAIN" />
         </intent>
     </queries>
     <application
-        android:allowBackup="true"
         android:name=".WireGuardAutoTunnel"
+        android:allowBackup="false"
+        android:banner="@drawable/ic_banner"
         android:dataExtractionRules="@xml/data_extraction_rules"
+        android:enableOnBackInvokedCallback="true"
         android:fullBackupContent="@xml/backup_rules"
         android:icon="@mipmap/ic_launcher"
-        android:banner="@mipmap/ic_banner"
         android:label="@string/app_name"
         android:roundIcon="@mipmap/ic_launcher_round"
         android:supportsRtl="true"
-        android:theme="@style/Theme.WireguardAutoTunnel"
+        android:theme="@style/Theme.AppSplashScreen"
-        tools:targetApi="31">
+        tools:targetApi="tiramisu">
+        <activity
+            android:name=".ui.SplashActivity"
+            android:exported="true"
+            android:theme="@style/Theme.AppSplashScreen">
+            <intent-filter>
+                <action android:name="android.intent.action.MAIN" />
+
+                <category android:name="android.intent.category.LAUNCHER" />
+                <category android:name="android.intent.category.LEANBACK_LAUNCHER" />
+                <action android:name="android.service.quicksettings.action.QS_TILE_PREFERENCES" />
+            </intent-filter>
+            <meta-data
+                android:name="android.app.shortcuts"
+                android:resource="@xml/shortcuts" />
+        </activity>
         <activity
             android:name=".ui.MainActivity"
             android:exported="true"
             android:theme="@style/Theme.WireguardAutoTunnel">
-            <intent-filter>
-                <action android:name="android.intent.action.MAIN" />
-                <category android:name="android.intent.category.LAUNCHER" />
-                <category android:name="android.intent.category.LEANBACK_LAUNCHER" />
-                <action android:name="android.service.quicksettings.action.QS_TILE_PREFERENCES"/>
-            </intent-filter>
-            <meta-data android:name="android.app.shortcuts"
-                android:resource="@xml/shortcuts" />
         </activity>
         <activity
-            android:name=".ui.CaptureActivityPortrait"
+            android:name="com.journeyapps.barcodescanner.CaptureActivity"
-            android:screenOrientation="fullSensor"
+            android:screenOrientation="portrait"
-            android:stateNotNeeded="true"
+            tools:replace="screenOrientation" />
-            android:theme="@style/zxing_CaptureTheme"
+
-            android:windowSoftInputMode="stateAlwaysHidden" />
         <activity
-            android:finishOnTaskLaunch="true"
+            android:name=".service.shortcut.ShortcutsActivity"
             android:enabled="true"
             android:exported="true"
-            android:theme="@android:style/Theme.NoDisplay"
+			android:noHistory="true"
-            android:name=".service.shortcut.ShortcutsActivity"/>
+			android:excludeFromRecents="true"
+			android:finishOnTaskLaunch="true"
+			android:launchMode="singleInstance"
+            android:theme="@android:style/Theme.NoDisplay" />
+
         <service
             android:name=".service.foreground.ForegroundService"
             android:enabled="true"
-            android:foregroundServiceType="remoteMessaging"
+            android:exported="false"
-            android:exported="false">
+            android:foregroundServiceType="systemExempted"
+            tools:node="merge" />
+        <service
+            android:name=".service.tile.TunnelControlTile"
+            android:exported="true"
+            android:icon="@drawable/ic_launcher"
+            android:label="Tunnel control"
+            android:permission="android.permission.BIND_QUICK_SETTINGS_TILE">
+            <meta-data
+                android:name="android.service.quicksettings.ACTIVE_TILE"
+                android:value="true" />
+            <meta-data
+                android:name="android.service.quicksettings.TOGGLEABLE_TILE"
+                android:value="true" />
+
+            <intent-filter>
+                <action android:name="android.service.quicksettings.action.QS_TILE" />
+            </intent-filter>
         </service>
         <service
+            android:name=".service.tile.AutoTunnelControlTile"
             android:exported="true"
-            android:name=".service.tile.TunnelControlTile"
+            android:icon="@drawable/ic_launcher"
-            android:icon="@drawable/shield"
+            android:label="Auto-tunnel"
-            android:label="WG Tunnel"
             android:permission="android.permission.BIND_QUICK_SETTINGS_TILE">
-            <meta-data android:name="android.service.quicksettings.ACTIVE_TILE"
+            <meta-data
+                android:name="android.service.quicksettings.ACTIVE_TILE"
                 android:value="true" />
-            <meta-data android:name="android.service.quicksettings.TOGGLEABLE_TILE"
+            <meta-data
+                android:name="android.service.quicksettings.TOGGLEABLE_TILE"
                 android:value="true" />
+
             <intent-filter>
                 <action android:name="android.service.quicksettings.action.QS_TILE" />
             </intent-filter>
         </service>
         <service
             android:name=".service.foreground.WireGuardTunnelService"
-            android:permission="android.permission.BIND_VPN_SERVICE"
             android:enabled="true"
+            android:exported="false"
+            android:foregroundServiceType="systemExempted"
+            android:permission="android.permission.BIND_VPN_SERVICE"
             android:persistent="true"
-            android:foregroundServiceType="remoteMessaging"
+            tools:node="merge">
-            android:exported="false">
             <intent-filter>
-                <action android:name="android.net.VpnService"/>
+                <action android:name="android.net.VpnService" />
             </intent-filter>
-            <meta-data android:name="android.net.VpnService.SUPPORTS_ALWAYS_ON"
+            <meta-data
+                android:name="android.net.VpnService.SUPPORTS_ALWAYS_ON"
                 android:value="true" />
         </service>
         <service
             android:name=".service.foreground.WireGuardConnectivityWatcherService"
             android:enabled="true"
-            android:stopWithTask="false"
+            android:exported="false"
+            android:foregroundServiceType="systemExempted"
             android:persistent="true"
-            android:foregroundServiceType="location"
+            android:stopWithTask="false"
-            android:permission=""
+            tools:node="merge" />
+
+        <receiver
+            android:name=".receiver.BootReceiver"
+            android:enabled="true"
             android:exported="false">
-        </service>
-        <receiver android:enabled="true" android:name=".receiver.BootReceiver"
-            android:exported="true">
             <intent-filter>
-                <action android:name="android.intent.action.BOOT_COMPLETED"/>
+                <category android:name="android.intent.category.DEFAULT" />
+
+                <action android:name="android.intent.action.BOOT_COMPLETED" />
+                <action android:name="android.intent.action.ACTION_BOOT_COMPLETED" />
+                <action android:name="android.intent.action.QUICKBOOT_POWERON" />
+                <action android:name="com.htc.intent.action.QUICKBOOT_POWERON" />
             </intent-filter>
         </receiver>
-        <receiver android:exported="false" android:name=".receiver.NotificationActionReceiver"/>
+        <receiver
+            android:name=".receiver.NotificationActionReceiver"
+            android:exported="false" />
     </application>
 </manifest>

app/src/main/java/com/zaneschepke/wireguardautotunnel/Constants.kt

@@ -1,19 +0,0 @@
-package com.zaneschepke.wireguardautotunnel
-
-object Constants {
-    const val MANUAL_TUNNEL_CONFIG_ID = "0"
-    const val WATCHER_SERVICE_WAKE_LOCK_TIMEOUT = 10*60*1000L /*10 minute*/
-    const val VPN_CONNECTIVITY_CHECK_INTERVAL = 3000L
-    const val VPN_STATISTIC_CHECK_INTERVAL = 10000L
-    const val TOGGLE_TUNNEL_DELAY = 500L
-    const val FADE_IN_ANIMATION_DURATION = 1000
-    const val SLIDE_IN_ANIMATION_DURATION = 500
-    const val SLIDE_IN_TRANSITION_OFFSET = 1000
-    const val CONF_FILE_EXTENSION = ".conf"
-    const val ZIP_FILE_EXTENSION = ".zip"
-    const val URI_CONTENT_SCHEME = "content"
-    const val URI_PACKAGE_SCHEME = "package"
-    const val ALLOWED_FILE_TYPES = "*/*"
-    const val GOOGLE_TV_EXPLORER_STUB = "com.google.android.tv.frameworkpackagestubs"
-    const val ANDROID_TV_EXPLORER_STUB = "com.android.tv.frameworkpackagestubs"
-}

app/src/main/java/com/zaneschepke/wireguardautotunnel/Extensions.kt

@@ -1,24 +0,0 @@
-package com.zaneschepke.wireguardautotunnel
-
-import android.content.BroadcastReceiver
-import kotlinx.coroutines.CoroutineScope
-import kotlinx.coroutines.DelicateCoroutinesApi
-import kotlinx.coroutines.GlobalScope
-import kotlinx.coroutines.launch
-import kotlin.coroutines.CoroutineContext
-import kotlin.coroutines.EmptyCoroutineContext
-
-fun BroadcastReceiver.goAsync(
-    context: CoroutineContext = EmptyCoroutineContext,
-    block: suspend CoroutineScope.() -> Unit
-) {
-    val pendingResult = goAsync()
-    @OptIn(DelicateCoroutinesApi::class) // Must run globally; there's no teardown callback.
-    GlobalScope.launch(context) {
-        try {
-            block()
-        } finally {
-            pendingResult.finish()
-        }
-    }
-}

app/src/main/java/com/zaneschepke/wireguardautotunnel/WireGuardAutoTunnel.kt

@@ -1,46 +1,57 @@
 package com.zaneschepke.wireguardautotunnel
 
 import android.app.Application
-import android.content.Context
+import android.content.ComponentName
 import android.content.pm.PackageManager
-import androidx.lifecycle.ProcessLifecycleOwner
+import android.os.StrictMode
-import androidx.lifecycle.lifecycleScope
+import android.os.StrictMode.ThreadPolicy
-import com.zaneschepke.wireguardautotunnel.repository.SettingsDoa
+import android.service.quicksettings.TileService
-import com.zaneschepke.wireguardautotunnel.repository.model.Settings
+import com.zaneschepke.wireguardautotunnel.service.tile.AutoTunnelControlTile
+import com.zaneschepke.wireguardautotunnel.service.tile.TunnelControlTile
+import com.zaneschepke.wireguardautotunnel.util.ReleaseTree
 import dagger.hilt.android.HiltAndroidApp
-import kotlinx.coroutines.launch
 import timber.log.Timber
-import javax.inject.Inject
 
 @HiltAndroidApp
 class WireGuardAutoTunnel : Application() {
+	override fun onCreate() {
+		super.onCreate()
+		instance = this
+		if (BuildConfig.DEBUG) {
+			Timber.plant(Timber.DebugTree())
+			StrictMode.setThreadPolicy(
+				ThreadPolicy.Builder()
+					.detectDiskReads()
+					.detectDiskWrites()
+					.detectNetwork()
+					.penaltyLog()
+					.build(),
+			)
+		} else {
+			Timber.plant(ReleaseTree())
+		}
+	}
 
-    @Inject
+	companion object {
-    lateinit var settingsRepo : SettingsDoa
+		lateinit var instance: WireGuardAutoTunnel
+			private set
 
-    override fun onCreate() {
+		fun isRunningOnAndroidTv(): Boolean {
-        super.onCreate()
+			return instance.packageManager.hasSystemFeature(PackageManager.FEATURE_LEANBACK)
-        if(BuildConfig.DEBUG) {
+		}
-            Timber.plant(Timber.DebugTree())
-        }
-        initSettings()
-    }
 
-    private fun initSettings() {
+		fun requestTunnelTileServiceStateUpdate() {
-        with(ProcessLifecycleOwner.get()) {
+			TileService.requestListeningState(
-            lifecycleScope.launch {
+				instance,
-                if(settingsRepo.getAll().isEmpty()) {
+				ComponentName(instance, TunnelControlTile::class.java),
-                    settingsRepo.save(Settings())
+			)
-                }
+		}
-            }
-        }
-    }
 
-
+		fun requestAutoTunnelTileServiceUpdate() {
-
+			TileService.requestListeningState(
-    companion object {
+				instance,
-        fun isRunningOnAndroidTv(context : Context) : Boolean {
+				ComponentName(instance, AutoTunnelControlTile::class.java),
-            return context.packageManager.hasSystemFeature(PackageManager.FEATURE_LEANBACK)
+			)
-        }
+		}
-    }
+	}
 }

app/src/main/java/com/zaneschepke/wireguardautotunnel/data/AppDatabase.kt

@@ -0,0 +1,55 @@
+package com.zaneschepke.wireguardautotunnel.data
+
+import androidx.room.AutoMigration
+import androidx.room.Database
+import androidx.room.DeleteColumn
+import androidx.room.RoomDatabase
+import androidx.room.TypeConverters
+import androidx.room.migration.AutoMigrationSpec
+import com.zaneschepke.wireguardautotunnel.data.domain.Settings
+import com.zaneschepke.wireguardautotunnel.data.domain.TunnelConfig
+
+@Database(
+	entities = [Settings::class, TunnelConfig::class],
+	version = 8,
+	autoMigrations =
+	[
+		AutoMigration(from = 1, to = 2),
+		AutoMigration(from = 2, to = 3),
+		AutoMigration(
+			from = 3,
+			to = 4,
+		),
+		AutoMigration(
+			from = 4,
+			to = 5,
+		),
+		AutoMigration(
+			from = 5,
+			to = 6,
+		),
+		AutoMigration(
+			from = 6,
+			to = 7,
+			spec = RemoveLegacySettingColumnsMigration::class,
+		),
+		AutoMigration(7, 8),
+	],
+	exportSchema = true,
+)
+@TypeConverters(DatabaseListConverters::class)
+abstract class AppDatabase : RoomDatabase() {
+	abstract fun settingDao(): SettingsDao
+
+	abstract fun tunnelConfigDoa(): TunnelConfigDao
+}
+
+@DeleteColumn(
+	tableName = "Settings",
+	columnName = "default_tunnel",
+)
+@DeleteColumn(
+	tableName = "Settings",
+	columnName = "is_battery_saver_enabled",
+)
+class RemoveLegacySettingColumnsMigration : AutoMigrationSpec

app/src/main/java/com/zaneschepke/wireguardautotunnel/data/DatabaseCallback.kt

@@ -0,0 +1,21 @@
+package com.zaneschepke.wireguardautotunnel.data
+
+import androidx.room.RoomDatabase
+import androidx.sqlite.db.SupportSQLiteDatabase
+import timber.log.Timber
+
+class DatabaseCallback : RoomDatabase.Callback() {
+	override fun onCreate(db: SupportSQLiteDatabase) = db.run {
+		// Notice non-ui thread is here
+		beginTransaction()
+		try {
+			execSQL(Queries.createDefaultSettings())
+			Timber.i("Bootstrapping settings data")
+			setTransactionSuccessful()
+		} catch (e: Exception) {
+			Timber.e(e)
+		} finally {
+			endTransaction()
+		}
+	}
+}

app/src/main/java/com/zaneschepke/wireguardautotunnel/data/DatabaseListConverters.kt

@@ -0,0 +1,24 @@
+package com.zaneschepke.wireguardautotunnel.data
+
+import androidx.room.TypeConverter
+import kotlinx.serialization.encodeToString
+import kotlinx.serialization.json.Json
+
+class DatabaseListConverters {
+	@TypeConverter
+	fun listToString(value: MutableList<String>): String {
+		return Json.encodeToString(value)
+	}
+
+	@TypeConverter
+	fun stringToList(value: String): MutableList<String> {
+		if (value.isBlank() || value.isEmpty()) return mutableListOf()
+		return try {
+			Json.decodeFromString<MutableList<String>>(value)
+		} catch (e: Exception) {
+			val list = value.split(",").toMutableList()
+			val json = listToString(list)
+			Json.decodeFromString<MutableList<String>>(json)
+		}
+	}
+}

app/src/main/java/com/zaneschepke/wireguardautotunnel/data/Queries.kt

@@ -0,0 +1,35 @@
+package com.zaneschepke.wireguardautotunnel.data
+
+object Queries {
+	fun createDefaultSettings(): String {
+		return """
+		INSERT INTO Settings (is_tunnel_enabled,
+		        is_tunnel_on_mobile_data_enabled,
+		        trusted_network_ssids,
+		        is_always_on_vpn_enabled,
+		        is_tunnel_on_ethernet_enabled,
+		        is_shortcuts_enabled,
+		        is_tunnel_on_wifi_enabled,
+		        is_kernel_enabled,
+		        is_restore_on_boot_enabled,
+		        is_multi_tunnel_enabled)
+		        VALUES
+		        ('false',
+		        'false',
+		        'sampleSSID1,sampleSSID2',
+		        'false',
+		        'false',
+		        'false',
+		        'false',
+		        'false',
+		        'false',
+		        'false')
+		""".trimIndent()
+	}
+
+	fun createTunnelConfig(): String {
+		return """
+		INSERT INTO TunnelConfig (name, wg_quick) VALUES ('test', 'test')
+		""".trimIndent()
+	}
+}

app/src/main/java/com/zaneschepke/wireguardautotunnel/data/SettingsDao.kt

@@ -0,0 +1,36 @@
+package com.zaneschepke.wireguardautotunnel.data
+
+import androidx.room.Dao
+import androidx.room.Delete
+import androidx.room.Insert
+import androidx.room.OnConflictStrategy
+import androidx.room.Query
+import com.zaneschepke.wireguardautotunnel.data.domain.Settings
+import kotlinx.coroutines.flow.Flow
+
+@Dao
+interface SettingsDao {
+	@Insert(onConflict = OnConflictStrategy.REPLACE)
+	suspend fun save(t: Settings)
+
+	@Insert(onConflict = OnConflictStrategy.REPLACE)
+	suspend fun saveAll(t: List<Settings>)
+
+	@Query("SELECT * FROM settings WHERE id=:id")
+	suspend fun getById(id: Long): Settings?
+
+	@Query("SELECT * FROM settings")
+	suspend fun getAll(): List<Settings>
+
+	@Query("SELECT * FROM settings LIMIT 1")
+	fun getSettingsFlow(): Flow<Settings>
+
+	@Query("SELECT * FROM settings")
+	fun getAllFlow(): Flow<MutableList<Settings>>
+
+	@Delete
+	suspend fun delete(t: Settings)
+
+	@Query("SELECT COUNT('id') FROM settings")
+	suspend fun count(): Long
+}

app/src/main/java/com/zaneschepke/wireguardautotunnel/data/TunnelConfigDao.kt

@@ -0,0 +1,52 @@
+package com.zaneschepke.wireguardautotunnel.data
+
+import androidx.room.Dao
+import androidx.room.Delete
+import androidx.room.Insert
+import androidx.room.OnConflictStrategy
+import androidx.room.Query
+import com.zaneschepke.wireguardautotunnel.data.domain.TunnelConfig
+import com.zaneschepke.wireguardautotunnel.util.TunnelConfigs
+import kotlinx.coroutines.flow.Flow
+
+@Dao
+interface TunnelConfigDao {
+	@Insert(onConflict = OnConflictStrategy.REPLACE)
+	suspend fun save(t: TunnelConfig)
+
+	@Insert(onConflict = OnConflictStrategy.REPLACE)
+	suspend fun saveAll(t: TunnelConfigs)
+
+	@Query("SELECT * FROM TunnelConfig WHERE id=:id")
+	suspend fun getById(id: Long): TunnelConfig?
+
+	@Query("SELECT * FROM TunnelConfig WHERE name=:name")
+	suspend fun getByName(name: String): TunnelConfig?
+
+	@Query("SELECT * FROM TunnelConfig")
+	suspend fun getAll(): TunnelConfigs
+
+	@Delete
+	suspend fun delete(t: TunnelConfig)
+
+	@Query("SELECT COUNT('id') FROM TunnelConfig")
+	suspend fun count(): Long
+
+	@Query("SELECT * FROM TunnelConfig WHERE tunnel_networks LIKE '%' || :name || '%'")
+	suspend fun findByTunnelNetworkName(name: String): TunnelConfigs
+
+	@Query("UPDATE TunnelConfig SET is_primary_tunnel = 0 WHERE is_primary_tunnel =1")
+	suspend fun resetPrimaryTunnel()
+
+	@Query("UPDATE TunnelConfig SET is_mobile_data_tunnel = 0 WHERE is_mobile_data_tunnel =1")
+	suspend fun resetMobileDataTunnel()
+
+	@Query("SELECT * FROM TUNNELCONFIG WHERE is_primary_tunnel=1")
+	suspend fun findByPrimary(): TunnelConfigs
+
+	@Query("SELECT * FROM TUNNELCONFIG WHERE is_mobile_data_tunnel=1")
+	suspend fun findByMobileDataTunnel(): TunnelConfigs
+
+	@Query("SELECT * FROM tunnelconfig")
+	fun getAllFlow(): Flow<MutableList<TunnelConfig>>
+}

app/src/main/java/com/zaneschepke/wireguardautotunnel/data/datastore/DataStoreManager.kt

@@ -0,0 +1,81 @@
+package com.zaneschepke.wireguardautotunnel.data.datastore
+
+import android.content.Context
+import androidx.datastore.preferences.core.Preferences
+import androidx.datastore.preferences.core.booleanPreferencesKey
+import androidx.datastore.preferences.core.edit
+import androidx.datastore.preferences.core.intPreferencesKey
+import androidx.datastore.preferences.core.stringPreferencesKey
+import androidx.datastore.preferences.preferencesDataStore
+import com.zaneschepke.wireguardautotunnel.module.IoDispatcher
+import kotlinx.coroutines.CoroutineDispatcher
+import kotlinx.coroutines.flow.Flow
+import kotlinx.coroutines.flow.first
+import kotlinx.coroutines.flow.map
+import kotlinx.coroutines.runBlocking
+import kotlinx.coroutines.withContext
+import timber.log.Timber
+import java.io.IOException
+
+class DataStoreManager(
+	private val context: Context,
+	@IoDispatcher private val ioDispatcher: CoroutineDispatcher,
+) {
+	companion object {
+		val LOCATION_DISCLOSURE_SHOWN = booleanPreferencesKey("LOCATION_DISCLOSURE_SHOWN")
+		val BATTERY_OPTIMIZE_DISABLE_SHOWN = booleanPreferencesKey("BATTERY_OPTIMIZE_DISABLE_SHOWN")
+		val TUNNEL_RUNNING_FROM_MANUAL_START =
+			booleanPreferencesKey("TUNNEL_RUNNING_FROM_MANUAL_START")
+		val ACTIVE_TUNNEL = intPreferencesKey("ACTIVE_TUNNEL")
+		val CURRENT_SSID = stringPreferencesKey("CURRENT_SSID")
+		val IS_PIN_LOCK_ENABLED = booleanPreferencesKey("PIN_LOCK_ENABLED")
+	}
+
+	// preferences
+	private val preferencesKey = "preferences"
+	private val Context.dataStore by
+		preferencesDataStore(
+			name = preferencesKey,
+		)
+
+	suspend fun init() {
+		withContext(ioDispatcher) {
+			try {
+				context.dataStore.data.first()
+			} catch (e: IOException) {
+				Timber.e(e)
+			}
+		}
+	}
+
+	suspend fun <T> saveToDataStore(key: Preferences.Key<T>, value: T) {
+		withContext(ioDispatcher) {
+			try {
+				context.dataStore.edit { it[key] = value }
+			} catch (e: IOException) {
+				Timber.e(e)
+			} catch (e: Exception) {
+				Timber.e(e)
+			}
+		}
+	}
+
+	fun <T> getFromStoreFlow(key: Preferences.Key<T>) = context.dataStore.data.map { it[key] }
+
+	suspend fun <T> getFromStore(key: Preferences.Key<T>): T? {
+		return withContext(ioDispatcher) {
+			try {
+				context.dataStore.data.map { it[key] }.first()
+			} catch (e: IOException) {
+				Timber.e(e)
+				null
+			}
+		}
+	}
+
+	fun <T> getFromStoreBlocking(key: Preferences.Key<T>) = runBlocking {
+		context.dataStore.data.map { it[key] }.first()
+	}
+
+	val preferencesFlow: Flow<Preferences?> = context.dataStore.data
+}

app/src/main/java/com/zaneschepke/wireguardautotunnel/data/domain/GeneralState.kt

@@ -0,0 +1,16 @@
+package com.zaneschepke.wireguardautotunnel.data.domain
+
+data class GeneralState(
+	val isLocationDisclosureShown: Boolean = LOCATION_DISCLOSURE_SHOWN_DEFAULT,
+	val isBatteryOptimizationDisableShown: Boolean = BATTERY_OPTIMIZATION_DISABLE_SHOWN_DEFAULT,
+	val isTunnelRunningFromManualStart: Boolean = TUNNELING_RUNNING_FROM_MANUAL_START_DEFAULT,
+	val isPinLockEnabled: Boolean = PIN_LOCK_ENABLED_DEFAULT,
+	val activeTunnelId: Int? = null,
+) {
+	companion object {
+		const val LOCATION_DISCLOSURE_SHOWN_DEFAULT = false
+		const val BATTERY_OPTIMIZATION_DISABLE_SHOWN_DEFAULT = false
+		const val TUNNELING_RUNNING_FROM_MANUAL_START_DEFAULT = false
+		const val PIN_LOCK_ENABLED_DEFAULT = false
+	}
+}

app/src/main/java/com/zaneschepke/wireguardautotunnel/data/domain/Settings.kt

@@ -0,0 +1,58 @@
+package com.zaneschepke.wireguardautotunnel.data.domain
+
+import androidx.room.ColumnInfo
+import androidx.room.Entity
+import androidx.room.PrimaryKey
+
+@Entity
+data class Settings(
+	@PrimaryKey(autoGenerate = true) val id: Int = 0,
+	@ColumnInfo(name = "is_tunnel_enabled") val isAutoTunnelEnabled: Boolean = false,
+	@ColumnInfo(name = "is_tunnel_on_mobile_data_enabled")
+	val isTunnelOnMobileDataEnabled: Boolean = false,
+	@ColumnInfo(name = "trusted_network_ssids")
+	val trustedNetworkSSIDs: MutableList<String> = mutableListOf(),
+	@ColumnInfo(name = "is_always_on_vpn_enabled") val isAlwaysOnVpnEnabled: Boolean = false,
+	@ColumnInfo(name = "is_tunnel_on_ethernet_enabled")
+	val isTunnelOnEthernetEnabled: Boolean = false,
+	@ColumnInfo(
+		name = "is_shortcuts_enabled",
+		defaultValue = "false",
+	)
+	val isShortcutsEnabled: Boolean = false,
+	@ColumnInfo(
+		name = "is_tunnel_on_wifi_enabled",
+		defaultValue = "false",
+	)
+	val isTunnelOnWifiEnabled: Boolean = false,
+	@ColumnInfo(
+		name = "is_kernel_enabled",
+		defaultValue = "false",
+	)
+	val isKernelEnabled: Boolean = false,
+	@ColumnInfo(
+		name = "is_restore_on_boot_enabled",
+		defaultValue = "false",
+	)
+	val isRestoreOnBootEnabled: Boolean = false,
+	@ColumnInfo(
+		name = "is_multi_tunnel_enabled",
+		defaultValue = "false",
+	)
+	val isMultiTunnelEnabled: Boolean = false,
+	@ColumnInfo(
+		name = "is_auto_tunnel_paused",
+		defaultValue = "false",
+	)
+	val isAutoTunnelPaused: Boolean = false,
+	@ColumnInfo(
+		name = "is_ping_enabled",
+		defaultValue = "false",
+	)
+	val isPingEnabled: Boolean = false,
+	@ColumnInfo(
+		name = "is_amnezia_enabled",
+		defaultValue = "false",
+	)
+	val isAmneziaEnabled: Boolean = false,
+)

app/src/main/java/com/zaneschepke/wireguardautotunnel/data/domain/TunnelConfig.kt

@@ -0,0 +1,53 @@
+package com.zaneschepke.wireguardautotunnel.data.domain
+
+import androidx.room.ColumnInfo
+import androidx.room.Entity
+import androidx.room.Index
+import androidx.room.PrimaryKey
+import com.wireguard.config.Config
+import java.io.InputStream
+
+@Entity(indices = [Index(value = ["name"], unique = true)])
+data class TunnelConfig(
+	@PrimaryKey(autoGenerate = true) val id: Int = 0,
+	@ColumnInfo(name = "name") val name: String,
+	@ColumnInfo(name = "wg_quick") val wgQuick: String,
+	@ColumnInfo(
+		name = "tunnel_networks",
+		defaultValue = "",
+	)
+	val tunnelNetworks: MutableList<String> = mutableListOf(),
+	@ColumnInfo(
+		name = "is_mobile_data_tunnel",
+		defaultValue = "false",
+	)
+	val isMobileDataTunnel: Boolean = false,
+	@ColumnInfo(
+		name = "is_primary_tunnel",
+		defaultValue = "false",
+	)
+	val isPrimaryTunnel: Boolean = false,
+	@ColumnInfo(
+		name = "am_quick",
+		defaultValue = "",
+	)
+	val amQuick: String = AM_QUICK_DEFAULT,
+) {
+	companion object {
+		fun configFromWgQuick(wgQuick: String): Config {
+			val inputStream: InputStream = wgQuick.byteInputStream()
+			return inputStream.bufferedReader(Charsets.UTF_8).use {
+				Config.parse(it)
+			}
+		}
+
+		fun configFromAmQuick(amQuick: String): org.amnezia.awg.config.Config {
+			val inputStream: InputStream = amQuick.byteInputStream()
+			return inputStream.bufferedReader(Charsets.UTF_8).use {
+				org.amnezia.awg.config.Config.parse(it)
+			}
+		}
+
+		const val AM_QUICK_DEFAULT = ""
+	}
+}

app/src/main/java/com/zaneschepke/wireguardautotunnel/data/repository/AppDataRepository.kt

@@ -0,0 +1,15 @@
+package com.zaneschepke.wireguardautotunnel.data.repository
+
+import com.zaneschepke.wireguardautotunnel.data.domain.TunnelConfig
+
+interface AppDataRepository {
+	suspend fun getPrimaryOrFirstTunnel(): TunnelConfig?
+
+	suspend fun getStartTunnelConfig(): TunnelConfig?
+
+	suspend fun toggleWatcherServicePause()
+
+	val settings: SettingsRepository
+	val tunnels: TunnelConfigRepository
+	val appState: AppStateRepository
+}

app/src/main/java/com/zaneschepke/wireguardautotunnel/data/repository/AppDataRoomRepository.kt

@@ -0,0 +1,38 @@
+package com.zaneschepke.wireguardautotunnel.data.repository
+
+import com.zaneschepke.wireguardautotunnel.data.domain.TunnelConfig
+import javax.inject.Inject
+
+class AppDataRoomRepository
+@Inject
+constructor(
+	override val settings: SettingsRepository,
+	override val tunnels: TunnelConfigRepository,
+	override val appState: AppStateRepository,
+) : AppDataRepository {
+	override suspend fun getPrimaryOrFirstTunnel(): TunnelConfig? {
+		return tunnels.findPrimary().firstOrNull() ?: tunnels.getAll().firstOrNull()
+	}
+
+	override suspend fun getStartTunnelConfig(): TunnelConfig? {
+		return if (appState.isTunnelRunningFromManualStart()) {
+			appState.getActiveTunnelId()?.let {
+				tunnels.getById(it)
+			}
+		} else {
+			null
+		}
+	}
+
+	override suspend fun toggleWatcherServicePause() {
+		val settings = settings.getSettings()
+		if (settings.isAutoTunnelEnabled) {
+			val pauseAutoTunnel = !settings.isAutoTunnelPaused
+			this.settings.save(
+				settings.copy(
+					isAutoTunnelPaused = pauseAutoTunnel,
+				),
+			)
+		}
+	}
+}

app/src/main/java/com/zaneschepke/wireguardautotunnel/data/repository/AppStateRepository.kt

@@ -0,0 +1,32 @@
+package com.zaneschepke.wireguardautotunnel.data.repository
+
+import com.zaneschepke.wireguardautotunnel.data.domain.GeneralState
+import kotlinx.coroutines.flow.Flow
+
+interface AppStateRepository {
+	suspend fun isLocationDisclosureShown(): Boolean
+
+	suspend fun setLocationDisclosureShown(shown: Boolean)
+
+	suspend fun isPinLockEnabled(): Boolean
+
+	suspend fun setPinLockEnabled(enabled: Boolean)
+
+	suspend fun isBatteryOptimizationDisableShown(): Boolean
+
+	suspend fun setBatteryOptimizationDisableShown(shown: Boolean)
+
+	suspend fun isTunnelRunningFromManualStart(): Boolean
+
+	suspend fun setTunnelRunningFromManualStart(id: Int)
+
+	suspend fun setManualStop()
+
+	suspend fun getActiveTunnelId(): Int?
+
+	suspend fun getCurrentSsid(): String?
+
+	suspend fun setCurrentSsid(ssid: String)
+
+	val generalStateFlow: Flow<GeneralState>
+}

app/src/main/java/com/zaneschepke/wireguardautotunnel/data/repository/DataStoreAppStateRepository.kt

@@ -0,0 +1,96 @@
+package com.zaneschepke.wireguardautotunnel.data.repository
+
+import com.zaneschepke.wireguardautotunnel.data.datastore.DataStoreManager
+import com.zaneschepke.wireguardautotunnel.data.domain.GeneralState
+import kotlinx.coroutines.flow.Flow
+import kotlinx.coroutines.flow.map
+import timber.log.Timber
+
+class DataStoreAppStateRepository(private val dataStoreManager: DataStoreManager) :
+	AppStateRepository {
+	override suspend fun isLocationDisclosureShown(): Boolean {
+		return dataStoreManager.getFromStore(DataStoreManager.LOCATION_DISCLOSURE_SHOWN)
+			?: GeneralState.LOCATION_DISCLOSURE_SHOWN_DEFAULT
+	}
+
+	override suspend fun setLocationDisclosureShown(shown: Boolean) {
+		dataStoreManager.saveToDataStore(DataStoreManager.LOCATION_DISCLOSURE_SHOWN, shown)
+	}
+
+	override suspend fun isPinLockEnabled(): Boolean {
+		return dataStoreManager.getFromStore(DataStoreManager.IS_PIN_LOCK_ENABLED)
+			?: GeneralState.PIN_LOCK_ENABLED_DEFAULT
+	}
+
+	override suspend fun setPinLockEnabled(enabled: Boolean) {
+		dataStoreManager.saveToDataStore(DataStoreManager.IS_PIN_LOCK_ENABLED, enabled)
+	}
+
+	override suspend fun isBatteryOptimizationDisableShown(): Boolean {
+		return dataStoreManager.getFromStore(DataStoreManager.BATTERY_OPTIMIZE_DISABLE_SHOWN)
+			?: GeneralState.BATTERY_OPTIMIZATION_DISABLE_SHOWN_DEFAULT
+	}
+
+	override suspend fun setBatteryOptimizationDisableShown(shown: Boolean) {
+		dataStoreManager.saveToDataStore(DataStoreManager.BATTERY_OPTIMIZE_DISABLE_SHOWN, shown)
+	}
+
+	override suspend fun isTunnelRunningFromManualStart(): Boolean {
+		return dataStoreManager.getFromStore(DataStoreManager.TUNNEL_RUNNING_FROM_MANUAL_START)
+			?: GeneralState.TUNNELING_RUNNING_FROM_MANUAL_START_DEFAULT
+	}
+
+	override suspend fun setTunnelRunningFromManualStart(id: Int) {
+		setTunnelRunningFromManualStart(true)
+		setActiveTunnelId(id)
+	}
+
+	override suspend fun setManualStop() {
+		setTunnelRunningFromManualStart(false)
+	}
+
+	private suspend fun setTunnelRunningFromManualStart(running: Boolean) {
+		dataStoreManager.saveToDataStore(DataStoreManager.TUNNEL_RUNNING_FROM_MANUAL_START, running)
+	}
+
+	override suspend fun getActiveTunnelId(): Int? {
+		return dataStoreManager.getFromStore(DataStoreManager.ACTIVE_TUNNEL)
+	}
+
+	private suspend fun setActiveTunnelId(id: Int) {
+		dataStoreManager.saveToDataStore(DataStoreManager.ACTIVE_TUNNEL, id)
+	}
+
+	override suspend fun getCurrentSsid(): String? {
+		return dataStoreManager.getFromStore(DataStoreManager.CURRENT_SSID)
+	}
+
+	override suspend fun setCurrentSsid(ssid: String) {
+		dataStoreManager.saveToDataStore(DataStoreManager.CURRENT_SSID, ssid)
+	}
+
+	override val generalStateFlow: Flow<GeneralState> =
+		dataStoreManager.preferencesFlow.map { prefs ->
+			prefs?.let { pref ->
+				try {
+					GeneralState(
+						isLocationDisclosureShown =
+						pref[DataStoreManager.LOCATION_DISCLOSURE_SHOWN]
+							?: GeneralState.LOCATION_DISCLOSURE_SHOWN_DEFAULT,
+						isBatteryOptimizationDisableShown =
+						pref[DataStoreManager.BATTERY_OPTIMIZE_DISABLE_SHOWN]
+							?: GeneralState.BATTERY_OPTIMIZATION_DISABLE_SHOWN_DEFAULT,
+						isTunnelRunningFromManualStart =
+						pref[DataStoreManager.TUNNEL_RUNNING_FROM_MANUAL_START]
+							?: GeneralState.TUNNELING_RUNNING_FROM_MANUAL_START_DEFAULT,
+						isPinLockEnabled =
+						pref[DataStoreManager.IS_PIN_LOCK_ENABLED]
+							?: GeneralState.TUNNELING_RUNNING_FROM_MANUAL_START_DEFAULT,
+					)
+				} catch (e: IllegalArgumentException) {
+					Timber.e(e)
+					GeneralState()
+				}
+			} ?: GeneralState()
+		}
+}

app/src/main/java/com/zaneschepke/wireguardautotunnel/data/repository/RoomSettingsRepository.kt

@@ -0,0 +1,23 @@
+package com.zaneschepke.wireguardautotunnel.data.repository
+
+import com.zaneschepke.wireguardautotunnel.data.SettingsDao
+import com.zaneschepke.wireguardautotunnel.data.domain.Settings
+import kotlinx.coroutines.flow.Flow
+
+class RoomSettingsRepository(private val settingsDoa: SettingsDao) : SettingsRepository {
+	override suspend fun save(settings: Settings) {
+		settingsDoa.save(settings)
+	}
+
+	override fun getSettingsFlow(): Flow<Settings> {
+		return settingsDoa.getSettingsFlow()
+	}
+
+	override suspend fun getSettings(): Settings {
+		return settingsDoa.getAll().firstOrNull() ?: Settings()
+	}
+
+	override suspend fun getAll(): List<Settings> {
+		return settingsDoa.getAll()
+	}
+}

app/src/main/java/com/zaneschepke/wireguardautotunnel/data/repository/RoomTunnelConfigRepository.kt

@@ -0,0 +1,71 @@
+package com.zaneschepke.wireguardautotunnel.data.repository
+
+import com.zaneschepke.wireguardautotunnel.data.TunnelConfigDao
+import com.zaneschepke.wireguardautotunnel.data.domain.TunnelConfig
+import com.zaneschepke.wireguardautotunnel.util.TunnelConfigs
+import kotlinx.coroutines.flow.Flow
+
+class RoomTunnelConfigRepository(private val tunnelConfigDao: TunnelConfigDao) :
+	TunnelConfigRepository {
+	override fun getTunnelConfigsFlow(): Flow<TunnelConfigs> {
+		return tunnelConfigDao.getAllFlow()
+	}
+
+	override suspend fun getAll(): TunnelConfigs {
+		return tunnelConfigDao.getAll()
+	}
+
+	override suspend fun save(tunnelConfig: TunnelConfig) {
+		tunnelConfigDao.save(tunnelConfig)
+	}
+
+	override suspend fun updatePrimaryTunnel(tunnelConfig: TunnelConfig?) {
+		tunnelConfigDao.resetPrimaryTunnel()
+		tunnelConfig?.let {
+			save(
+				it.copy(
+					isPrimaryTunnel = true,
+				),
+			)
+		}
+	}
+
+	override suspend fun updateMobileDataTunnel(tunnelConfig: TunnelConfig?) {
+		tunnelConfigDao.resetMobileDataTunnel()
+		tunnelConfig?.let {
+			save(
+				it.copy(
+					isMobileDataTunnel = true,
+				),
+			)
+		}
+	}
+
+	override suspend fun delete(tunnelConfig: TunnelConfig) {
+		tunnelConfigDao.delete(tunnelConfig)
+	}
+
+	override suspend fun getById(id: Int): TunnelConfig? {
+		return tunnelConfigDao.getById(id.toLong())
+	}
+
+	override suspend fun count(): Int {
+		return tunnelConfigDao.count().toInt()
+	}
+
+	override suspend fun findByTunnelName(name: String): TunnelConfig? {
+		return tunnelConfigDao.getByName(name)
+	}
+
+	override suspend fun findByTunnelNetworksName(name: String): TunnelConfigs {
+		return tunnelConfigDao.findByTunnelNetworkName(name)
+	}
+
+	override suspend fun findByMobileDataTunnel(): TunnelConfigs {
+		return tunnelConfigDao.findByMobileDataTunnel()
+	}
+
+	override suspend fun findPrimary(): TunnelConfigs {
+		return tunnelConfigDao.findByPrimary()
+	}
+}

app/src/main/java/com/zaneschepke/wireguardautotunnel/data/repository/SettingsRepository.kt

@@ -0,0 +1,14 @@
+package com.zaneschepke.wireguardautotunnel.data.repository
+
+import com.zaneschepke.wireguardautotunnel.data.domain.Settings
+import kotlinx.coroutines.flow.Flow
+
+interface SettingsRepository {
+	suspend fun save(settings: Settings)
+
+	fun getSettingsFlow(): Flow<Settings>
+
+	suspend fun getSettings(): Settings
+
+	suspend fun getAll(): List<Settings>
+}

app/src/main/java/com/zaneschepke/wireguardautotunnel/data/repository/TunnelConfigRepository.kt

@@ -0,0 +1,31 @@
+package com.zaneschepke.wireguardautotunnel.data.repository
+
+import com.zaneschepke.wireguardautotunnel.data.domain.TunnelConfig
+import com.zaneschepke.wireguardautotunnel.util.TunnelConfigs
+import kotlinx.coroutines.flow.Flow
+
+interface TunnelConfigRepository {
+	fun getTunnelConfigsFlow(): Flow<TunnelConfigs>
+
+	suspend fun getAll(): TunnelConfigs
+
+	suspend fun save(tunnelConfig: TunnelConfig)
+
+	suspend fun updatePrimaryTunnel(tunnelConfig: TunnelConfig?)
+
+	suspend fun updateMobileDataTunnel(tunnelConfig: TunnelConfig?)
+
+	suspend fun delete(tunnelConfig: TunnelConfig)
+
+	suspend fun getById(id: Int): TunnelConfig?
+
+	suspend fun count(): Int
+
+	suspend fun findByTunnelName(name: String): TunnelConfig?
+
+	suspend fun findByTunnelNetworksName(name: String): TunnelConfigs
+
+	suspend fun findByMobileDataTunnel(): TunnelConfigs
+
+	suspend fun findPrimary(): TunnelConfigs
+}

app/src/main/java/com/zaneschepke/wireguardautotunnel/module/AppModule.kt

@@ -0,0 +1,30 @@
+package com.zaneschepke.wireguardautotunnel.module
+
+import android.content.Context
+import com.zaneschepke.logcatter.LocalLogCollector
+import com.zaneschepke.logcatter.LogcatUtil
+import dagger.Module
+import dagger.Provides
+import dagger.hilt.InstallIn
+import dagger.hilt.android.qualifiers.ApplicationContext
+import dagger.hilt.components.SingletonComponent
+import kotlinx.coroutines.CoroutineDispatcher
+import kotlinx.coroutines.CoroutineScope
+import kotlinx.coroutines.SupervisorJob
+import javax.inject.Singleton
+
+@Module
+@InstallIn(SingletonComponent::class)
+class AppModule {
+	@Singleton
+	@ApplicationScope
+	@Provides
+	fun providesApplicationScope(@DefaultDispatcher defaultDispatcher: CoroutineDispatcher): CoroutineScope =
+		CoroutineScope(SupervisorJob() + defaultDispatcher)
+
+	@Singleton
+	@Provides
+	fun provideLogCollect(@ApplicationContext context: Context): LocalLogCollector {
+		return LogcatUtil.init(context = context)
+	}
+}

app/src/main/java/com/zaneschepke/wireguardautotunnel/module/BackendQualifiers.kt

@@ -0,0 +1,11 @@
+package com.zaneschepke.wireguardautotunnel.module
+
+import javax.inject.Qualifier
+
+@Qualifier
+@Retention(AnnotationRetention.BINARY)
+annotation class Kernel
+
+@Qualifier
+@Retention(AnnotationRetention.BINARY)
+annotation class Userspace

app/src/main/java/com/zaneschepke/wireguardautotunnel/module/CoroutineQualifiers.kt

@@ -0,0 +1,27 @@
+package com.zaneschepke.wireguardautotunnel.module
+
+import javax.inject.Qualifier
+
+@Retention(AnnotationRetention.RUNTIME)
+@Qualifier
+annotation class DefaultDispatcher
+
+@Retention(AnnotationRetention.RUNTIME)
+@Qualifier
+annotation class IoDispatcher
+
+@Retention(AnnotationRetention.RUNTIME)
+@Qualifier
+annotation class MainDispatcher
+
+@Retention(AnnotationRetention.BINARY)
+@Qualifier
+annotation class MainImmediateDispatcher
+
+@Retention(AnnotationRetention.RUNTIME)
+@Qualifier
+annotation class ApplicationScope
+
+@Retention(AnnotationRetention.RUNTIME)
+@Qualifier
+annotation class ServiceScope

app/src/main/java/com/zaneschepke/wireguardautotunnel/module/CoroutinesDispatchersModule.kt

@@ -0,0 +1,28 @@
+package com.zaneschepke.wireguardautotunnel.module
+
+import dagger.Module
+import dagger.Provides
+import dagger.hilt.InstallIn
+import dagger.hilt.components.SingletonComponent
+import kotlinx.coroutines.CoroutineDispatcher
+import kotlinx.coroutines.Dispatchers
+
+@Module
+@InstallIn(SingletonComponent::class)
+object CoroutinesDispatchersModule {
+	@DefaultDispatcher
+	@Provides
+	fun providesDefaultDispatcher(): CoroutineDispatcher = Dispatchers.Default
+
+	@IoDispatcher
+	@Provides
+	fun providesIoDispatcher(): CoroutineDispatcher = Dispatchers.IO
+
+	@MainDispatcher
+	@Provides
+	fun providesMainDispatcher(): CoroutineDispatcher = Dispatchers.Main
+
+	@MainImmediateDispatcher
+	@Provides
+	fun providesMainImmediateDispatcher(): CoroutineDispatcher = Dispatchers.Main.immediate
+}

app/src/main/java/com/zaneschepke/wireguardautotunnel/module/DatabaseModule.kt

@@ -1,26 +0,0 @@
-package com.zaneschepke.wireguardautotunnel.module
-
-import android.content.Context
-import androidx.room.Room
-import com.zaneschepke.wireguardautotunnel.R
-import com.zaneschepke.wireguardautotunnel.repository.AppDatabase
-import dagger.Module
-import dagger.Provides
-import dagger.hilt.InstallIn
-import dagger.hilt.android.qualifiers.ApplicationContext
-import dagger.hilt.components.SingletonComponent
-import javax.inject.Singleton
-
-@Module
-@InstallIn(SingletonComponent::class)
-class DatabaseModule {
-    @Provides
-    @Singleton
-    fun provideDatabase(@ApplicationContext context : Context) : AppDatabase {
-        return Room.databaseBuilder(
-            context,
-            AppDatabase::class.java, context.getString(R.string.db_name))
-            .fallbackToDestructiveMigration()
-            .build()
-    }
-}

app/src/main/java/com/zaneschepke/wireguardautotunnel/module/RepositoryModule.kt

@@ -1,27 +1,88 @@
 package com.zaneschepke.wireguardautotunnel.module
 
-import com.zaneschepke.wireguardautotunnel.repository.AppDatabase
+import android.content.Context
-import com.zaneschepke.wireguardautotunnel.repository.SettingsDoa
+import androidx.room.Room
-import com.zaneschepke.wireguardautotunnel.repository.TunnelConfigDao
+import com.zaneschepke.wireguardautotunnel.R
+import com.zaneschepke.wireguardautotunnel.data.AppDatabase
+import com.zaneschepke.wireguardautotunnel.data.DatabaseCallback
+import com.zaneschepke.wireguardautotunnel.data.SettingsDao
+import com.zaneschepke.wireguardautotunnel.data.TunnelConfigDao
+import com.zaneschepke.wireguardautotunnel.data.datastore.DataStoreManager
+import com.zaneschepke.wireguardautotunnel.data.repository.AppDataRepository
+import com.zaneschepke.wireguardautotunnel.data.repository.AppDataRoomRepository
+import com.zaneschepke.wireguardautotunnel.data.repository.AppStateRepository
+import com.zaneschepke.wireguardautotunnel.data.repository.DataStoreAppStateRepository
+import com.zaneschepke.wireguardautotunnel.data.repository.RoomSettingsRepository
+import com.zaneschepke.wireguardautotunnel.data.repository.RoomTunnelConfigRepository
+import com.zaneschepke.wireguardautotunnel.data.repository.SettingsRepository
+import com.zaneschepke.wireguardautotunnel.data.repository.TunnelConfigRepository
 import dagger.Module
 import dagger.Provides
 import dagger.hilt.InstallIn
+import dagger.hilt.android.qualifiers.ApplicationContext
 import dagger.hilt.components.SingletonComponent
+import kotlinx.coroutines.CoroutineDispatcher
 import javax.inject.Singleton
 
 @Module
 @InstallIn(SingletonComponent::class)
 class RepositoryModule {
+	@Provides
+	@Singleton
+	fun provideDatabase(@ApplicationContext context: Context): AppDatabase {
+		return Room.databaseBuilder(
+			context,
+			AppDatabase::class.java,
+			context.getString(R.string.db_name),
+		)
+			.fallbackToDestructiveMigration()
+			.addCallback(DatabaseCallback())
+			.build()
+	}
 
-    @Singleton
+	@Singleton
-    @Provides
+	@Provides
-    fun provideSettingsRepository(appDatabase: AppDatabase) : SettingsDoa {
+	fun provideSettingsDoa(appDatabase: AppDatabase): SettingsDao {
-        return appDatabase.settingDao()
+		return appDatabase.settingDao()
-    }
+	}
 
-    @Singleton
+	@Singleton
-    @Provides
+	@Provides
-    fun provideTunnelConfigRepository(appDatabase: AppDatabase) : TunnelConfigDao {
+	fun provideTunnelConfigDoa(appDatabase: AppDatabase): TunnelConfigDao {
-        return appDatabase.tunnelConfigDoa()
+		return appDatabase.tunnelConfigDoa()
-    }
+	}
+
+	@Singleton
+	@Provides
+	fun provideTunnelConfigRepository(tunnelConfigDao: TunnelConfigDao): TunnelConfigRepository {
+		return RoomTunnelConfigRepository(tunnelConfigDao)
+	}
+
+	@Singleton
+	@Provides
+	fun provideSettingsRepository(settingsDao: SettingsDao): SettingsRepository {
+		return RoomSettingsRepository(settingsDao)
+	}
+
+	@Singleton
+	@Provides
+	fun providePreferencesDataStore(@ApplicationContext context: Context, @IoDispatcher ioDispatcher: CoroutineDispatcher): DataStoreManager {
+		return DataStoreManager(context, ioDispatcher)
+	}
+
+	@Provides
+	@Singleton
+	fun provideGeneralStateRepository(dataStoreManager: DataStoreManager): AppStateRepository {
+		return DataStoreAppStateRepository(dataStoreManager)
+	}
+
+	@Provides
+	@Singleton
+	fun provideAppDataRepository(
+		settingsRepository: SettingsRepository,
+		tunnelConfigRepository: TunnelConfigRepository,
+		appStateRepository: AppStateRepository,
+	): AppDataRepository {
+		return AppDataRoomRepository(settingsRepository, tunnelConfigRepository, appStateRepository)
+	}
 }

app/src/main/java/com/zaneschepke/wireguardautotunnel/module/ServiceModule.kt

@@ -15,20 +15,19 @@ import dagger.hilt.android.scopes.ServiceScoped
 @Module
 @InstallIn(ServiceComponent::class)
 abstract class ServiceModule {
+	@Binds
+	@ServiceScoped
+	abstract fun provideNotificationService(wireGuardNotification: WireGuardNotification): NotificationService
 
-    @Binds
+	@Binds
-    @ServiceScoped
+	@ServiceScoped
-    abstract fun provideNotificationService(wireGuardNotification: WireGuardNotification) : NotificationService
+	abstract fun provideWifiService(wifiService: WifiService): NetworkService<WifiService>
 
-    @Binds
+	@Binds
-    @ServiceScoped
+	@ServiceScoped
-    abstract fun provideWifiService(wifiService: WifiService) : NetworkService<WifiService>
+	abstract fun provideMobileDataService(mobileDataService: MobileDataService): NetworkService<MobileDataService>
 
-    @Binds
+	@Binds
-    @ServiceScoped
+	@ServiceScoped
-    abstract fun provideMobileDataService(mobileDataService : MobileDataService) : NetworkService<MobileDataService>
+	abstract fun provideEthernetService(ethernetService: EthernetService): NetworkService<EthernetService>
-
-    @Binds
-    @ServiceScoped
-    abstract fun provideEthernetService(ethernetService: EthernetService) : NetworkService<EthernetService>
 }

app/src/main/java/com/zaneschepke/wireguardautotunnel/module/TunnelModule.kt

@@ -3,6 +3,11 @@ package com.zaneschepke.wireguardautotunnel.module
 import android.content.Context
 import com.wireguard.android.backend.Backend
 import com.wireguard.android.backend.GoBackend
+import com.wireguard.android.backend.WgQuickBackend
+import com.wireguard.android.util.RootShell
+import com.wireguard.android.util.ToolsInstaller
+import com.zaneschepke.wireguardautotunnel.data.repository.AppDataRepository
+import com.zaneschepke.wireguardautotunnel.service.foreground.ServiceManager
 import com.zaneschepke.wireguardautotunnel.service.tunnel.VpnService
 import com.zaneschepke.wireguardautotunnel.service.tunnel.WireGuardTunnel
 import dagger.Module
@@ -10,21 +15,63 @@ import dagger.Provides
 import dagger.hilt.InstallIn
 import dagger.hilt.android.qualifiers.ApplicationContext
 import dagger.hilt.components.SingletonComponent
+import kotlinx.coroutines.CoroutineDispatcher
+import kotlinx.coroutines.CoroutineScope
+import javax.inject.Provider
 import javax.inject.Singleton
 
 @Module
 @InstallIn(SingletonComponent::class)
 class TunnelModule {
+	@Provides
+	@Singleton
+	fun provideRootShell(@ApplicationContext context: Context): RootShell {
+		return RootShell(context)
+	}
 
-    @Provides
+	@Provides
-    @Singleton
+	@Singleton
-    fun provideBackend(@ApplicationContext context : Context) : Backend {
+	@Userspace
-        return GoBackend(context)
+	fun provideUserspaceBackend(@ApplicationContext context: Context): Backend {
-    }
+		return GoBackend(context)
+	}
 
-    @Provides
+	@Provides
-    @Singleton
+	@Singleton
-    fun provideVpnService(backend: Backend) : VpnService {
+	@Kernel
-        return WireGuardTunnel(backend)
+	fun provideKernelBackend(@ApplicationContext context: Context, rootShell: RootShell): Backend {
-    }
+		return WgQuickBackend(context, rootShell, ToolsInstaller(context, rootShell))
+	}
+
+	@Provides
+	@Singleton
+	fun provideAmneziaBackend(@ApplicationContext context: Context): org.amnezia.awg.backend.Backend {
+		return org.amnezia.awg.backend.GoBackend(context)
+	}
+
+	@Provides
+	@Singleton
+	fun provideVpnService(
+		amneziaBackend: Provider<org.amnezia.awg.backend.Backend>,
+		@Userspace userspaceBackend: Provider<Backend>,
+		@Kernel kernelBackend: Provider<Backend>,
+		appDataRepository: AppDataRepository,
+		@ApplicationScope applicationScope: CoroutineScope,
+		@IoDispatcher ioDispatcher: CoroutineDispatcher,
+	): VpnService {
+		return WireGuardTunnel(
+			amneziaBackend,
+			userspaceBackend,
+			kernelBackend,
+			appDataRepository,
+			applicationScope,
+			ioDispatcher,
+		)
+	}
+
+	@Provides
+	@Singleton
+	fun provideServiceManager(appDataRepository: AppDataRepository, @IoDispatcher ioDispatcher: CoroutineDispatcher): ServiceManager {
+		return ServiceManager(appDataRepository, ioDispatcher)
+	}
 }

app/src/main/java/com/zaneschepke/wireguardautotunnel/module/ViewModelModule.kt

@@ -0,0 +1,21 @@
+package com.zaneschepke.wireguardautotunnel.module
+
+import android.content.Context
+import com.zaneschepke.wireguardautotunnel.util.FileUtils
+import dagger.Module
+import dagger.Provides
+import dagger.hilt.InstallIn
+import dagger.hilt.android.components.ViewModelComponent
+import dagger.hilt.android.qualifiers.ApplicationContext
+import dagger.hilt.android.scopes.ViewModelScoped
+import kotlinx.coroutines.CoroutineDispatcher
+
+@Module
+@InstallIn(ViewModelComponent::class)
+class ViewModelModule {
+	@ViewModelScoped
+	@Provides
+	fun provideFileUtils(@ApplicationContext context: Context, @IoDispatcher ioDispatcher: CoroutineDispatcher): FileUtils {
+		return FileUtils(context, ioDispatcher)
+	}
+}

app/src/main/java/com/zaneschepke/wireguardautotunnel/receiver/BootReceiver.kt

@@ -3,32 +3,53 @@ package com.zaneschepke.wireguardautotunnel.receiver
 import android.content.BroadcastReceiver
 import android.content.Context
 import android.content.Intent
-import com.zaneschepke.wireguardautotunnel.goAsync
+import com.zaneschepke.wireguardautotunnel.data.repository.AppDataRepository
-import com.zaneschepke.wireguardautotunnel.repository.SettingsDoa
+import com.zaneschepke.wireguardautotunnel.module.ApplicationScope
 import com.zaneschepke.wireguardautotunnel.service.foreground.ServiceManager
 import dagger.hilt.android.AndroidEntryPoint
-import kotlinx.coroutines.cancel
+import kotlinx.coroutines.CoroutineScope
+import kotlinx.coroutines.launch
+import timber.log.Timber
 import javax.inject.Inject
 
 @AndroidEntryPoint
 class BootReceiver : BroadcastReceiver() {
+	@Inject
+	lateinit var appDataRepository: AppDataRepository
 
-    @Inject
+	@Inject
-    lateinit var settingsRepo : SettingsDoa
+	lateinit var serviceManager: ServiceManager
 
-    override fun onReceive(context: Context, intent: Intent) = goAsync {
+	@Inject
-        if (intent.action == Intent.ACTION_BOOT_COMPLETED) {
+	@ApplicationScope
-            try {
+	lateinit var applicationScope: CoroutineScope
-                val settings = settingsRepo.getAll()
+
-                if (settings.isNotEmpty()) {
+	override fun onReceive(context: Context?, intent: Intent?) {
-                    val setting = settings.first()
+		if (Intent.ACTION_BOOT_COMPLETED != intent?.action) return
-                    if (setting.isAutoTunnelEnabled && setting.defaultTunnel != null) {
+		context?.run {
-                        ServiceManager.startWatcherService(context, setting.defaultTunnel!!)
+			applicationScope.launch {
-                    }
+				val settings = appDataRepository.settings.getSettings()
-                }
+				if (settings.isRestoreOnBootEnabled) {
-            } finally {
+					if (settings.isAutoTunnelEnabled) {
-                cancel()
+						Timber.i("Starting watcher service from boot")
-            }
+						serviceManager.startWatcherServiceForeground(context)
-        }
+					}
-    }
+					if (appDataRepository.appState.isTunnelRunningFromManualStart()) {
+						appDataRepository.appState.getActiveTunnelId()?.let {
+							Timber.i("Starting tunnel that was active before reboot")
+							serviceManager.startVpnServiceForeground(
+								context,
+								appDataRepository.tunnels.getById(it)?.id,
+							)
+							return@launch
+						}
+					}
+					if (settings.isAlwaysOnVpnEnabled) {
+						Timber.i("Starting vpn service from boot AOVPN")
+						serviceManager.startVpnServiceForeground(context)
+					}
+				}
+			}
+		}
+	}
 }

app/src/main/java/com/zaneschepke/wireguardautotunnel/receiver/NotificationActionReceiver.kt

@@ -3,33 +3,42 @@ package com.zaneschepke.wireguardautotunnel.receiver
 import android.content.BroadcastReceiver
 import android.content.Context
 import android.content.Intent
-import com.zaneschepke.wireguardautotunnel.Constants
+import com.zaneschepke.wireguardautotunnel.data.repository.SettingsRepository
-import com.zaneschepke.wireguardautotunnel.goAsync
+import com.zaneschepke.wireguardautotunnel.module.ApplicationScope
-import com.zaneschepke.wireguardautotunnel.repository.SettingsDoa
 import com.zaneschepke.wireguardautotunnel.service.foreground.ServiceManager
+import com.zaneschepke.wireguardautotunnel.util.Constants
 import dagger.hilt.android.AndroidEntryPoint
+import kotlinx.coroutines.CoroutineScope
 import kotlinx.coroutines.cancel
 import kotlinx.coroutines.delay
+import kotlinx.coroutines.launch
+import timber.log.Timber
 import javax.inject.Inject
 
 @AndroidEntryPoint
 class NotificationActionReceiver : BroadcastReceiver() {
+	@Inject
+	lateinit var settingsRepository: SettingsRepository
 
-    @Inject
+	@Inject
-    lateinit var settingsRepo : SettingsDoa
+	lateinit var serviceManager: ServiceManager
-    override fun onReceive(context: Context, intent: Intent?) = goAsync {
+
-        try {
+	@Inject
-            val settings = settingsRepo.getAll()
+	@ApplicationScope
-            if (settings.isNotEmpty()) {
+	lateinit var applicationScope: CoroutineScope
-                val setting = settings.first()
+
-                if (setting.defaultTunnel != null) {
+	override fun onReceive(context: Context, intent: Intent?) {
-                    ServiceManager.stopVpnService(context)
+		applicationScope.launch {
-                    delay(Constants.TOGGLE_TUNNEL_DELAY)
+			try {
-                    ServiceManager.startVpnService(context, setting.defaultTunnel.toString())
+				// TODO fix for manual start changes when enabled
-                }
+				serviceManager.stopVpnServiceForeground(context)
-            }
+				delay(Constants.TOGGLE_TUNNEL_DELAY)
-        } finally {
+				serviceManager.startVpnServiceForeground(context)
-            cancel()
+			} catch (e: Exception) {
-        }
+				Timber.e(e)
-    }
+			} finally {
+				cancel()
+			}
+		}
+	}
 }

app/src/main/java/com/zaneschepke/wireguardautotunnel/repository/AppDatabase.kt

@@ -1,17 +0,0 @@
-package com.zaneschepke.wireguardautotunnel.repository
-
-import androidx.room.AutoMigration
-import androidx.room.Database
-import androidx.room.RoomDatabase
-import androidx.room.TypeConverters
-import com.zaneschepke.wireguardautotunnel.repository.model.Settings
-import com.zaneschepke.wireguardautotunnel.repository.model.TunnelConfig
-
-@Database(entities = [Settings::class, TunnelConfig::class], version = 2, autoMigrations = [
-    AutoMigration(from = 1, to = 2)
-], exportSchema = true)
-@TypeConverters(DatabaseListConverters::class)
-abstract class AppDatabase : RoomDatabase() {
-    abstract fun settingDao(): SettingsDoa
-    abstract fun tunnelConfigDoa() : TunnelConfigDao
-}

app/src/main/java/com/zaneschepke/wireguardautotunnel/repository/DatabaseListConverters.kt

@@ -1,17 +0,0 @@
-package com.zaneschepke.wireguardautotunnel.repository
-
-import androidx.room.TypeConverter
-import kotlinx.serialization.encodeToString
-import kotlinx.serialization.json.Json
-
-class DatabaseListConverters {
-    @TypeConverter
-    fun listToString(value: MutableList<String>): String {
-        return Json.encodeToString(value)
-    }
-    @TypeConverter
-    fun stringToList(value: String): MutableList<String> {
-        if(value.isEmpty()) return mutableListOf()
-        return Json.decodeFromString<MutableList<String>>(value)
-    }
-}

app/src/main/java/com/zaneschepke/wireguardautotunnel/repository/SettingsDoa.kt

@@ -1,34 +0,0 @@
-package com.zaneschepke.wireguardautotunnel.repository
-
-import androidx.room.Dao
-import androidx.room.Delete
-import androidx.room.Insert
-import androidx.room.OnConflictStrategy
-import androidx.room.Query
-import com.zaneschepke.wireguardautotunnel.repository.model.Settings
-import kotlinx.coroutines.flow.Flow
-
-@Dao
-interface SettingsDoa {
-
-    @Insert(onConflict = OnConflictStrategy.REPLACE)
-    suspend fun save(t: Settings)
-
-    @Insert(onConflict = OnConflictStrategy.REPLACE)
-    suspend fun saveAll(t: List<Settings>)
-
-    @Query("SELECT * FROM settings WHERE id=:id")
-    suspend fun getById(id: Long): Settings?
-
-    @Query("SELECT * FROM settings")
-    suspend fun getAll(): List<Settings>
-
-    @Query("SELECT * FROM settings")
-    fun getAllFlow(): Flow<MutableList<Settings>>
-
-    @Delete
-    suspend fun delete(t: Settings)
-
-    @Query("SELECT COUNT('id') FROM settings")
-    suspend fun count(): Long
-}

app/src/main/java/com/zaneschepke/wireguardautotunnel/repository/TunnelConfigDao.kt

@@ -1,34 +0,0 @@
-package com.zaneschepke.wireguardautotunnel.repository
-
-import androidx.room.Dao
-import androidx.room.Delete
-import androidx.room.Insert
-import androidx.room.OnConflictStrategy
-import androidx.room.Query
-import com.zaneschepke.wireguardautotunnel.repository.model.TunnelConfig
-import kotlinx.coroutines.flow.Flow
-
-@Dao
-interface TunnelConfigDao{
-
-    @Insert(onConflict = OnConflictStrategy.REPLACE)
-    suspend fun save(t: TunnelConfig)
-
-    @Insert(onConflict = OnConflictStrategy.REPLACE)
-    suspend fun saveAll(t: List<TunnelConfig>)
-
-    @Query("SELECT * FROM TunnelConfig WHERE id=:id")
-    suspend fun getById(id: Long): TunnelConfig?
-
-    @Query("SELECT * FROM TunnelConfig")
-    suspend fun getAll(): List<TunnelConfig>
-
-    @Delete
-    suspend fun delete(t: TunnelConfig)
-
-    @Query("SELECT COUNT('id') FROM TunnelConfig")
-    suspend fun count(): Long
-
-    @Query("SELECT * FROM tunnelconfig")
-    fun getAllFlow(): Flow<MutableList<TunnelConfig>>
-}

app/src/main/java/com/zaneschepke/wireguardautotunnel/repository/model/Settings.kt

@@ -1,27 +0,0 @@
-package com.zaneschepke.wireguardautotunnel.repository.model
-
-import androidx.room.ColumnInfo
-import androidx.room.Entity
-import androidx.room.PrimaryKey
-
-@Entity
-data class Settings(
-    @PrimaryKey(autoGenerate = true) val id : Int = 0,
-    @ColumnInfo(name = "is_tunnel_enabled") var isAutoTunnelEnabled : Boolean = false,
-    @ColumnInfo(name = "is_tunnel_on_mobile_data_enabled") var isTunnelOnMobileDataEnabled : Boolean = false,
-    @ColumnInfo(name = "trusted_network_ssids") var trustedNetworkSSIDs : MutableList<String> = mutableListOf(),
-    @ColumnInfo(name = "default_tunnel") var defaultTunnel : String? = null,
-    @ColumnInfo(name = "is_always_on_vpn_enabled") var isAlwaysOnVpnEnabled : Boolean = false,
-    @ColumnInfo(name = "is_tunnel_on_ethernet_enabled") var isTunnelOnEthernetEnabled : Boolean = false,
-    @ColumnInfo(name = "is_shortcuts_enabled", defaultValue = "false") var isShortcutsEnabled : Boolean = false,
-    @ColumnInfo(name = "is_battery_saver_enabled", defaultValue = "false") var isBatterySaverEnabled : Boolean = false,
-) {
-    fun isTunnelConfigDefault(tunnelConfig: TunnelConfig) : Boolean {
-        return if (defaultTunnel != null) {
-            val defaultConfig = TunnelConfig.from(defaultTunnel!!)
-            (tunnelConfig.id == defaultConfig.id)
-        } else {
-            false
-        }
-    }
-}

app/src/main/java/com/zaneschepke/wireguardautotunnel/repository/model/TunnelConfig.kt

@@ -1,35 +0,0 @@
-package com.zaneschepke.wireguardautotunnel.repository.model
-
-import androidx.room.ColumnInfo
-import androidx.room.Entity
-import androidx.room.Index
-import androidx.room.PrimaryKey
-import com.wireguard.config.Config
-import kotlinx.serialization.Serializable
-import kotlinx.serialization.json.Json
-import java.io.InputStream
-
-@Entity(indices = [Index(value = ["name"], unique = true)])
-@Serializable
-data class TunnelConfig(
-    @PrimaryKey(autoGenerate = true) val id : Int = 0,
-    @ColumnInfo(name = "name") var name : String,
-    @ColumnInfo(name = "wg_quick") var wgQuick : String,
-){
-
-    override fun toString(): String {
-        return Json.encodeToString(serializer(), this)
-    }
-
-    companion object {
-
-        fun from(string : String) : TunnelConfig {
-            return Json.decodeFromString<TunnelConfig>(string)
-        }
-        fun configFromQuick(wgQuick: String): Config {
-            val inputStream: InputStream = wgQuick.byteInputStream()
-            val reader = inputStream.bufferedReader(Charsets.UTF_8)
-            return Config.parse(reader)
-        }
-    }
-}

app/src/main/java/com/zaneschepke/wireguardautotunnel/service/foreground/Action.kt

@@ -1,7 +1,8 @@
 package com.zaneschepke.wireguardautotunnel.service.foreground
 
 enum class Action {
-    START,
+	START,
-    START_FOREGROUND,
+	START_FOREGROUND,
-    STOP
+	STOP,
+	STOP_FOREGROUND,
 }

app/src/main/java/com/zaneschepke/wireguardautotunnel/service/foreground/ForegroundService.kt

@@ -4,63 +4,54 @@ import android.content.Intent
 import android.os.Bundle
 import android.os.IBinder
 import androidx.lifecycle.LifecycleService
+import com.zaneschepke.wireguardautotunnel.util.Constants
 import timber.log.Timber
 
-
 open class ForegroundService : LifecycleService() {
+	private var isServiceStarted = false
 
-    private var isServiceStarted = false
+	override fun onBind(intent: Intent): IBinder? {
+		super.onBind(intent)
+		// We don't provide binding, so return null
+		return null
+	}
 
-    override fun onBind(intent: Intent): IBinder? {
+	override fun onStartCommand(intent: Intent?, flags: Int, startId: Int): Int {
-        super.onBind(intent)
+		super.onStartCommand(intent, flags, startId)
-        // We don't provide binding, so return null
+		Timber.d("onStartCommand executed with startId: $startId")
-        return null
+		if (intent != null) {
-    }
+			val action = intent.action
+			when (action) {
+				Action.START.name,
+				Action.START_FOREGROUND.name,
+				-> startService(intent.extras)
 
-    override fun onStartCommand(intent: Intent?, flags: Int, startId: Int): Int {
+				Action.STOP.name, Action.STOP_FOREGROUND.name -> stopService()
-        super.onStartCommand(intent, flags, startId)
+				Constants.ALWAYS_ON_VPN_ACTION -> {
-        Timber.d("onStartCommand executed with startId: $startId")
+					Timber.i("Always-on VPN starting service")
-        if (intent != null) {
+					startService(intent.extras)
-            val action = intent.action
+				}
-            Timber.d("using an intent with action $action")
-            when (action) {
-                Action.START.name, Action.START_FOREGROUND.name -> startService(intent.extras)
-                Action.STOP.name -> stopService(intent.extras)
-                "android.net.VpnService" -> {
-                    Timber.d("Always-on VPN starting service")
-                    startService(intent.extras)
-                }
-                else -> Timber.d("This should never happen. No action in the received intent")
-            }
-        } else {
-            Timber.d(
-                "with a null intent. It has been probably restarted by the system."
-            )
-        }
-        // by returning this we make sure the service is restarted if the system kills the service
-        return START_STICKY
-    }
 
+				else -> Timber.d("This should never happen. No action in the received intent")
+			}
+		} else {
+			Timber.d(
+				"with a null intent. It has been probably restarted by the system.",
+			)
+		}
+		return START_STICKY
+	}
 
-    override fun onDestroy() {
+	protected open fun startService(extras: Bundle?) {
-        super.onDestroy()
+		if (isServiceStarted) return
-        Timber.d("The service has been destroyed")
+		Timber.d("Starting ${this.javaClass.simpleName}")
-    }
+		isServiceStarted = true
+	}
 
-    protected open fun startService(extras : Bundle?) {
+	protected open fun stopService() {
-        if (isServiceStarted) return
+		Timber.d("Stopping ${this.javaClass.simpleName}")
-        Timber.d("Starting ${this.javaClass.simpleName}")
+		stopForeground(STOP_FOREGROUND_REMOVE)
-        isServiceStarted = true
+		stopSelf()
-    }
+		isServiceStarted = false
-
+	}
-    protected open fun stopService(extras : Bundle?) {
-        Timber.d("Stopping ${this.javaClass.simpleName}")
-        try {
-            stopForeground(STOP_FOREGROUND_REMOVE)
-            stopSelf()
-        } catch (e: Exception) {
-            Timber.d("Service stopped without being started: ${e.message}")
-        }
-        isServiceStarted = false
-    }
 }

app/src/main/java/com/zaneschepke/wireguardautotunnel/service/foreground/ServiceManager.kt

@@ -1,101 +1,117 @@
 package com.zaneschepke.wireguardautotunnel.service.foreground
 
-import android.app.ActivityManager
 import android.app.Service
 import android.content.Context
-import android.content.Context.ACTIVITY_SERVICE
 import android.content.Intent
-import com.zaneschepke.wireguardautotunnel.R
+import com.zaneschepke.wireguardautotunnel.data.repository.AppDataRepository
+import com.zaneschepke.wireguardautotunnel.module.IoDispatcher
+import com.zaneschepke.wireguardautotunnel.util.Constants
+import kotlinx.coroutines.CoroutineDispatcher
+import kotlinx.coroutines.withContext
 import timber.log.Timber
 
-object ServiceManager {
+class ServiceManager(
-    @Suppress("DEPRECATION")
+	private val appDataRepository: AppDataRepository,
-    private // Deprecated for third party Services.
+	@IoDispatcher private val ioDispatcher: CoroutineDispatcher,
-    fun <T> Context.isServiceRunning(service: Class<T>) =
+) {
-        (getSystemService(ACTIVITY_SERVICE) as ActivityManager)
+	private fun <T : Service> actionOnService(action: Action, context: Context, cls: Class<T>, extras: Map<String, Int>? = null) {
-            .getRunningServices(Integer.MAX_VALUE)
+		val intent =
-            .any { it.service.className == service.name }
+			Intent(context, cls).also {
+				it.action = action.name
+				extras?.forEach { (k, v) -> it.putExtra(k, v) }
+			}
+		intent.component?.javaClass
+		try {
+			when (action) {
+				Action.START_FOREGROUND, Action.STOP_FOREGROUND ->
+					context.startForegroundService(
+						intent,
+					)
 
-    fun <T : Service> getServiceState(context: Context, cls : Class<T>): ServiceState {
+				Action.START, Action.STOP -> context.startService(intent)
-        val isServiceRunning = context.isServiceRunning(cls)
+			}
-        return if(isServiceRunning) ServiceState.STARTED else ServiceState.STOPPED
+		} catch (e: Exception) {
-    }
+			Timber.e(e.message)
+		}
+	}
 
-    private fun <T : Service> actionOnService(action: Action, context: Context, cls : Class<T>, extras : Map<String,String>? = null) {
+	suspend fun startVpnService(context: Context, tunnelId: Int? = null, isManualStart: Boolean = false) {
-        if (getServiceState(context, cls) == ServiceState.STOPPED && action == Action.STOP) return
+		if (isManualStart) onManualStart(tunnelId)
-        if (getServiceState(context, cls) == ServiceState.STARTED && action == Action.START) return
+		actionOnService(
-        val intent = Intent(context, cls).also {
+			Action.START,
-            it.action = action.name
+			context,
-            extras?.forEach {(k, v) ->
+			WireGuardTunnelService::class.java,
-                it.putExtra(k, v)
+			tunnelId?.let { mapOf(Constants.TUNNEL_EXTRA_KEY to it) },
-            }
+		)
-        }
+	}
-        intent.component?.javaClass
-        try {
-            when(action) {
-                Action.START_FOREGROUND -> {
-                    context.startForegroundService(intent)
-                }
-                Action.START -> {
-                    context.startService(intent)
-                }
-                Action.STOP -> context.startService(intent)
-            }
-        } catch (e : Exception) {
-            Timber.e(e.message)
-        }
-    }
 
-    fun startVpnService(context : Context, tunnelConfig : String) {
+	suspend fun stopVpnServiceForeground(context: Context, isManualStop: Boolean = false) {
-        actionOnService(
+		withContext(ioDispatcher) {
-            Action.START,
+			if (isManualStop) onManualStop()
-            context,
+			Timber.i("Stopping vpn service")
-            WireGuardTunnelService::class.java,
+			actionOnService(
-            mapOf(context.getString(R.string.tunnel_extras_key) to tunnelConfig))
+				Action.STOP_FOREGROUND,
-    }
+				context,
-    fun stopVpnService(context : Context) {
+				WireGuardTunnelService::class.java,
-        actionOnService(
+			)
-            Action.STOP,
+		}
-            context,
+	}
-            WireGuardTunnelService::class.java
-        )
-    }
 
-    fun startVpnServiceForeground(context : Context, tunnelConfig : String) {
+	suspend fun stopVpnService(context: Context, isManualStop: Boolean = false) {
-        actionOnService(
+		withContext(ioDispatcher) {
-            Action.START_FOREGROUND,
+			if (isManualStop) onManualStop()
-            context,
+			Timber.i("Stopping vpn service")
-            WireGuardTunnelService::class.java,
+			actionOnService(
-            mapOf(context.getString(R.string.tunnel_extras_key) to tunnelConfig))
+				Action.STOP,
-    }
+				context,
+				WireGuardTunnelService::class.java,
+			)
+		}
+	}
 
-    private fun startWatcherServiceForeground(context : Context, tunnelConfig : String) {
+	private suspend fun onManualStop() {
-        actionOnService(
+		appDataRepository.appState.setManualStop()
-            Action.START, context,
+	}
-            WireGuardConnectivityWatcherService::class.java, mapOf(context.
-            getString(R.string.tunnel_extras_key) to
-                    tunnelConfig))
-    }
 
-    fun startWatcherService(context : Context, tunnelConfig : String) {
+	private suspend fun onManualStart(tunnelId: Int?) {
-        actionOnService(
+		tunnelId?.let {
-            Action.START, context,
+			appDataRepository.appState.setTunnelRunningFromManualStart(it)
-            WireGuardConnectivityWatcherService::class.java, mapOf(context.
+		}
-            getString(R.string.tunnel_extras_key) to
+	}
-                    tunnelConfig))
-    }
 
-    fun stopWatcherService(context : Context) {
+	suspend fun startVpnServiceForeground(context: Context, tunnelId: Int? = null, isManualStart: Boolean = false) {
-        actionOnService(
+		withContext(ioDispatcher) {
-            Action.STOP, context,
+			if (isManualStart) onManualStart(tunnelId)
-            WireGuardConnectivityWatcherService::class.java)
+			actionOnService(
-    }
+				Action.START_FOREGROUND,
+				context,
+				WireGuardTunnelService::class.java,
+				tunnelId?.let { mapOf(Constants.TUNNEL_EXTRA_KEY to it) },
+			)
+		}
+	}
 
-    fun toggleWatcherServiceForeground(context: Context, tunnelConfig : String) {
+	fun startWatcherServiceForeground(context: Context) {
-        when(getServiceState( context,
+		actionOnService(
-            WireGuardConnectivityWatcherService::class.java,)) {
+			Action.START_FOREGROUND,
-            ServiceState.STARTED -> stopWatcherService(context)
+			context,
-            ServiceState.STOPPED -> startWatcherServiceForeground(context, tunnelConfig)
+			WireGuardConnectivityWatcherService::class.java,
-        }
+		)
-    }
+	}
+
+	fun startWatcherService(context: Context) {
+		actionOnService(
+			Action.START,
+			context,
+			WireGuardConnectivityWatcherService::class.java,
+		)
+	}
+
+	fun stopWatcherService(context: Context) {
+		actionOnService(
+			Action.STOP,
+			context,
+			WireGuardConnectivityWatcherService::class.java,
+		)
+	}
 }

app/src/main/java/com/zaneschepke/wireguardautotunnel/service/foreground/ServiceState.kt

@@ -1,6 +0,0 @@
-package com.zaneschepke.wireguardautotunnel.service.foreground
-
-enum class ServiceState {
-    STARTED,
-    STOPPED,
-}

app/src/main/java/com/zaneschepke/wireguardautotunnel/service/foreground/WatcherState.kt

@@ -0,0 +1,73 @@
+package com.zaneschepke.wireguardautotunnel.service.foreground
+
+import com.zaneschepke.wireguardautotunnel.data.domain.Settings
+
+data class WatcherState(
+	val isWifiConnected: Boolean = false,
+	val isEthernetConnected: Boolean = false,
+	val isMobileDataConnected: Boolean = false,
+	val currentNetworkSSID: String = "",
+	val settings: Settings = Settings(),
+) {
+	fun isEthernetConditionMet(): Boolean {
+		return (
+			isEthernetConnected &&
+				settings.isTunnelOnEthernetEnabled
+			)
+	}
+
+	fun isMobileDataConditionMet(): Boolean {
+		return (
+			!isEthernetConnected &&
+				settings.isTunnelOnMobileDataEnabled &&
+				!isWifiConnected &&
+				isMobileDataConnected
+			)
+	}
+
+	fun isTunnelOffOnMobileDataConditionMet(): Boolean {
+		return (
+			!isEthernetConnected &&
+				!settings.isTunnelOnMobileDataEnabled &&
+				isMobileDataConnected &&
+				!isWifiConnected
+			)
+	}
+
+	fun isUntrustedWifiConditionMet(): Boolean {
+		return (
+			!isEthernetConnected &&
+				isWifiConnected &&
+				!settings.trustedNetworkSSIDs.contains(currentNetworkSSID) &&
+				settings.isTunnelOnWifiEnabled
+			)
+	}
+
+	fun isTrustedWifiConditionMet(): Boolean {
+		return (
+			!isEthernetConnected &&
+				(
+					isWifiConnected &&
+						settings.trustedNetworkSSIDs.contains(currentNetworkSSID)
+					)
+			)
+	}
+
+	fun isTunnelOffOnWifiConditionMet(): Boolean {
+		return (
+			!isEthernetConnected &&
+				(
+					isWifiConnected &&
+						!settings.isTunnelOnWifiEnabled
+					)
+			)
+	}
+
+	fun isTunnelOffOnNoConnectivityMet(): Boolean {
+		return (
+			!isEthernetConnected &&
+				!isWifiConnected &&
+				!isMobileDataConnected
+			)
+	}
+}

app/src/main/java/com/zaneschepke/wireguardautotunnel/service/foreground/WireGuardConnectivityWatcherService.kt

@@ -1,275 +1,474 @@
 package com.zaneschepke.wireguardautotunnel.service.foreground
 
-import android.app.AlarmManager
-import android.app.PendingIntent
 import android.content.Context
-import android.content.Intent
 import android.os.Bundle
 import android.os.PowerManager
-import android.os.SystemClock
+import androidx.core.app.ServiceCompat
 import androidx.lifecycle.lifecycleScope
-import com.wireguard.android.backend.Tunnel
-import com.zaneschepke.wireguardautotunnel.Constants
 import com.zaneschepke.wireguardautotunnel.R
-import com.zaneschepke.wireguardautotunnel.repository.SettingsDoa
+import com.zaneschepke.wireguardautotunnel.data.domain.TunnelConfig
-import com.zaneschepke.wireguardautotunnel.repository.model.Settings
+import com.zaneschepke.wireguardautotunnel.data.repository.AppDataRepository
+import com.zaneschepke.wireguardautotunnel.module.IoDispatcher
+import com.zaneschepke.wireguardautotunnel.module.MainImmediateDispatcher
 import com.zaneschepke.wireguardautotunnel.service.network.EthernetService
 import com.zaneschepke.wireguardautotunnel.service.network.MobileDataService
 import com.zaneschepke.wireguardautotunnel.service.network.NetworkService
 import com.zaneschepke.wireguardautotunnel.service.network.NetworkStatus
 import com.zaneschepke.wireguardautotunnel.service.network.WifiService
 import com.zaneschepke.wireguardautotunnel.service.notification.NotificationService
+import com.zaneschepke.wireguardautotunnel.service.tunnel.TunnelState
 import com.zaneschepke.wireguardautotunnel.service.tunnel.VpnService
+import com.zaneschepke.wireguardautotunnel.util.Constants
 import dagger.hilt.android.AndroidEntryPoint
-import kotlinx.coroutines.Dispatchers
+import kotlinx.coroutines.CancellationException
+import kotlinx.coroutines.CoroutineDispatcher
 import kotlinx.coroutines.Job
 import kotlinx.coroutines.delay
+import kotlinx.coroutines.flow.MutableStateFlow
+import kotlinx.coroutines.flow.collectLatest
+import kotlinx.coroutines.flow.update
 import kotlinx.coroutines.launch
 import kotlinx.coroutines.withContext
 import timber.log.Timber
+import java.net.InetAddress
 import javax.inject.Inject
 
 @AndroidEntryPoint
 class WireGuardConnectivityWatcherService : ForegroundService() {
+	private val foregroundId = 122
 
-    private val foregroundId = 122
+	@Inject
+	lateinit var wifiService: NetworkService<WifiService>
 
-    @Inject
+	@Inject
-    lateinit var wifiService: NetworkService<WifiService>
+	lateinit var mobileDataService: NetworkService<MobileDataService>
 
-    @Inject
+	@Inject
-    lateinit var mobileDataService: NetworkService<MobileDataService>
+	lateinit var ethernetService: NetworkService<EthernetService>
 
-    @Inject
+	@Inject
-    lateinit var ethernetService: NetworkService<EthernetService>
+	lateinit var appDataRepository: AppDataRepository
 
-    @Inject
+	@Inject
-    lateinit var settingsRepo: SettingsDoa
+	lateinit var notificationService: NotificationService
 
-    @Inject
+	@Inject
-    lateinit var notificationService: NotificationService
+	lateinit var vpnService: VpnService
 
-    @Inject
+	@Inject
-    lateinit var vpnService: VpnService
+	lateinit var serviceManager: ServiceManager
 
-    private var isWifiConnected = false
+	@Inject
-    private var isEthernetConnected = false
+	@IoDispatcher
-    private var isMobileDataConnected = false
+	lateinit var ioDispatcher: CoroutineDispatcher
-    private var currentNetworkSSID = ""
 
-    private lateinit var watcherJob: Job
+	@Inject
-    private lateinit var setting: Settings
+	@MainImmediateDispatcher
-    private lateinit var tunnelConfig: String
+	lateinit var mainImmediateDispatcher: CoroutineDispatcher
 
-    private var wakeLock: PowerManager.WakeLock? = null
+	private val networkEventsFlow = MutableStateFlow(WatcherState())
-    private val tag = this.javaClass.name
 
+	private var watcherJob: Job? = null
 
-    override fun onCreate() {
+	private var wakeLock: PowerManager.WakeLock? = null
-        super.onCreate()
+	private val tag = this.javaClass.name
-        lifecycleScope.launch(Dispatchers.Main) {
-            launchWatcherNotification()
-        }
-    }
 
-    override fun startService(extras: Bundle?) {
+	override fun onCreate() {
-        super.startService(extras)
+		super.onCreate()
-        launchWatcherNotification()
+		lifecycleScope.launch(mainImmediateDispatcher) {
-        val tunnelId = extras?.getString(getString(R.string.tunnel_extras_key))
+			try {
-        if (tunnelId != null) {
+				if (appDataRepository.settings.getSettings().isAutoTunnelPaused) {
-            this.tunnelConfig = tunnelId
+					launchWatcherPausedNotification()
-        }
+				} else {
-        // we need this lock so our service gets not affected by Doze Mode
+					launchWatcherNotification()
-        lifecycleScope.launch {
+				}
-            initWakeLock()
+			} catch (e: Exception) {
-        }
+				Timber.e("Failed to start watcher service, not enough permissions")
-        cancelWatcherJob()
+			}
-        if (this::tunnelConfig.isInitialized) {
+		}
-            startWatcherJob()
+	}
-        } else {
-            stopService(extras)
-        }
-    }
 
-    override fun stopService(extras: Bundle?) {
+	override fun startService(extras: Bundle?) {
-        super.stopService(extras)
+		super.startService(extras)
-        wakeLock?.let {
+		try {
-            if (it.isHeld) {
+			// we need this lock so our service gets not affected by Doze Mode
-                it.release()
+			lifecycleScope.launch { initWakeLock() }
-            }
+			cancelWatcherJob()
-        }
+			startWatcherJob()
-        cancelWatcherJob()
+		} catch (e: Exception) {
-        stopSelf()
+			Timber.e("Failed to launch watcher service, no permissions")
-    }
+		}
+	}
 
-    private fun launchWatcherNotification() {
+	override fun stopService() {
-        val notification = notificationService.createNotification(
+		super.stopService()
-            channelId = getString(R.string.watcher_channel_id),
+		wakeLock?.let {
-            channelName = getString(R.string.watcher_channel_name),
+			if (it.isHeld) {
-            description = getString(R.string.watcher_notification_text)
+				it.release()
-        )
+			}
-        super.startForeground(foregroundId, notification)
+		}
-    }
+		cancelWatcherJob()
+		stopSelf()
+	}
 
-    //try to start task again if killed
+	private fun launchWatcherNotification(description: String = getString(R.string.watcher_notification_text_active)) {
-    override fun onTaskRemoved(rootIntent: Intent) {
+		val notification =
-        Timber.d("Task Removed called")
+			notificationService.createNotification(
-        val restartServiceIntent = Intent(rootIntent)
+				channelId = getString(R.string.watcher_channel_id),
-        val restartServicePendingIntent: PendingIntent = PendingIntent.getService(
+				channelName = getString(R.string.watcher_channel_name),
-            this, 1, restartServiceIntent,
+				title = getString(R.string.auto_tunnel_title),
-            PendingIntent.FLAG_ONE_SHOT or PendingIntent.FLAG_IMMUTABLE
+				description = description,
-        )
+			)
-        applicationContext.getSystemService(Context.ALARM_SERVICE)
+		ServiceCompat.startForeground(
-        val alarmService: AlarmManager =
+			this,
-            applicationContext.getSystemService(Context.ALARM_SERVICE) as AlarmManager
+			foregroundId,
-        alarmService.set(
+			notification,
-            AlarmManager.ELAPSED_REALTIME,
+			Constants.SYSTEM_EXEMPT_SERVICE_TYPE_ID,
-            SystemClock.elapsedRealtime() + 1000,
+		)
-            restartServicePendingIntent
+	}
-        )
-    }
 
-    private suspend fun initWakeLock() {
+	private fun launchWatcherPausedNotification() {
-        val isBatterySaverOn = withContext(lifecycleScope.coroutineContext) {
+		launchWatcherNotification(getString(R.string.watcher_notification_text_paused))
-            settingsRepo.getAll().firstOrNull()?.isBatterySaverEnabled ?: false
+	}
-        }
-        wakeLock =
-            (getSystemService(Context.POWER_SERVICE) as PowerManager).run {
-                newWakeLock(PowerManager.PARTIAL_WAKE_LOCK, "$tag::lock").apply {
-                    if (isBatterySaverOn) {
-                        Timber.d("Initiating wakelock with timeout")
-                        acquire(Constants.WATCHER_SERVICE_WAKE_LOCK_TIMEOUT)
-                    } else {
-                        Timber.d("Initiating wakelock with zero timeout")
-                        acquire()
-                    }
-                }
-            }
-    }
 
-    private fun cancelWatcherJob() {
+	private fun initWakeLock() {
-        if (this::watcherJob.isInitialized) {
+		wakeLock =
-            watcherJob.cancel()
+			(getSystemService(Context.POWER_SERVICE) as PowerManager).run {
-        }
+				newWakeLock(PowerManager.PARTIAL_WAKE_LOCK, "$tag::lock").apply {
-    }
+					try {
+						Timber.i("Initiating wakelock with 10 min timeout")
+						acquire(Constants.BATTERY_SAVER_WATCHER_WAKE_LOCK_TIMEOUT)
+					} finally {
+						release()
+					}
+				}
+			}
+	}
 
-    private fun startWatcherJob() {
+	private fun cancelWatcherJob() {
-        watcherJob = lifecycleScope.launch(Dispatchers.IO) {
+		try {
-            val settings = settingsRepo.getAll()
+			watcherJob?.cancel()
-            if (settings.isNotEmpty()) {
+		} catch (e: CancellationException) {
-                setting = settings[0]
+			Timber.i("Watcher job cancelled")
-            }
+		}
-            launch {
+	}
-                watchForWifiConnectivityChanges()
-            }
-            if (setting.isTunnelOnMobileDataEnabled) {
-                launch {
-                    watchForMobileDataConnectivityChanges()
-                }
-            }
-            if (setting.isTunnelOnEthernetEnabled) {
-                launch {
-                    watchForEthernetConnectivityChanges()
-                }
-            }
-            launch {
-                manageVpn()
-            }
-        }
-    }
 
-    private suspend fun watchForMobileDataConnectivityChanges() {
+	private fun startWatcherJob() {
-        mobileDataService.networkStatus.collect {
+		watcherJob =
-            when (it) {
+			lifecycleScope.launch {
-                is NetworkStatus.Available -> {
+				val setting = appDataRepository.settings.getSettings()
-                    Timber.d("Gained Mobile data connection")
+				launch {
-                    isMobileDataConnected = true
+					Timber.i("Starting wifi watcher")
-                }
+					watchForWifiConnectivityChanges()
+				}
+				if (setting.isTunnelOnMobileDataEnabled) {
+					launch {
+						Timber.i("Starting mobile data watcher")
+						watchForMobileDataConnectivityChanges()
+					}
+				}
+				if (setting.isTunnelOnEthernetEnabled) {
+					launch {
+						Timber.i("Starting ethernet data watcher")
+						watchForEthernetConnectivityChanges()
+					}
+				}
+				launch {
+					Timber.i("Starting settings watcher")
+					watchForSettingsChanges()
+				}
+				if (setting.isPingEnabled) {
+					launch {
+						Timber.i("Starting ping watcher")
+						watchForPingFailure()
+					}
+				}
+				launch {
+					Timber.i("Starting management watcher")
+					manageVpn()
+				}
+			}
+	}
 
-                is NetworkStatus.CapabilitiesChanged -> {
+	private suspend fun watchForMobileDataConnectivityChanges() {
-                    isMobileDataConnected = true
+		withContext(ioDispatcher) {
-                    Timber.d("Mobile data capabilities changed")
+			mobileDataService.networkStatus.collect { status ->
-                }
+				when (status) {
+					is NetworkStatus.Available -> {
+						Timber.i("Gained Mobile data connection")
+						networkEventsFlow.update {
+							it.copy(
+								isMobileDataConnected = true,
+							)
+						}
+					}
 
-                is NetworkStatus.Unavailable -> {
+					is NetworkStatus.CapabilitiesChanged -> {
-                    isMobileDataConnected = false
+						networkEventsFlow.update {
-                    Timber.d("Lost mobile data connection")
+							it.copy(
-                }
+								isMobileDataConnected = true,
-            }
+							)
-        }
+						}
-    }
+						Timber.i("Mobile data capabilities changed")
+					}
 
-    private suspend fun watchForEthernetConnectivityChanges() {
+					is NetworkStatus.Unavailable -> {
-        ethernetService.networkStatus.collect {
+						networkEventsFlow.update {
-            when (it) {
+							it.copy(
-                is NetworkStatus.Available -> {
+								isMobileDataConnected = false,
-                    Timber.d("Gained Ethernet connection")
+							)
-                    isEthernetConnected = true
+						}
-                }
+						Timber.i("Lost mobile data connection")
+					}
+				}
+			}
+		}
+	}
 
-                is NetworkStatus.CapabilitiesChanged -> {
+	private suspend fun watchForPingFailure() {
-                    Timber.d("Ethernet capabilities changed")
+		val context = this
-                    isEthernetConnected = true
+		withContext(ioDispatcher) {
-                }
+			try {
+				do {
+					if (vpnService.vpnState.value.status == TunnelState.UP) {
+						val tunnelConfig = vpnService.vpnState.value.tunnelConfig
+						tunnelConfig?.let {
+							val config = TunnelConfig.configFromWgQuick(it.wgQuick)
+							val results =
+								config.peers.map { peer ->
+									val host =
+										if (peer.endpoint.isPresent &&
+											peer.endpoint.get().resolved.isPresent
+										) {
+											peer.endpoint.get().resolved.get().host
+										} else {
+											Constants.DEFAULT_PING_IP
+										}
+									Timber.i("Checking reachability of: $host")
+									val reachable =
+										InetAddress.getByName(host)
+											.isReachable(Constants.PING_TIMEOUT.toInt())
+									Timber.i("Result: reachable - $reachable")
+									reachable
+								}
+							if (results.contains(false)) {
+								Timber.i("Restarting VPN for ping failure")
+								serviceManager.stopVpnServiceForeground(context)
+								delay(Constants.VPN_RESTART_DELAY)
+								serviceManager.startVpnServiceForeground(context, it.id)
+								delay(Constants.PING_COOLDOWN)
+							}
+						}
+					}
+					delay(Constants.PING_INTERVAL)
+				} while (true)
+			} catch (e: Exception) {
+				Timber.e(e)
+			}
+		}
+	}
 
-                is NetworkStatus.Unavailable -> {
+	private suspend fun watchForSettingsChanges() {
-                    isEthernetConnected = false
+		appDataRepository.settings.getSettingsFlow().collect { settings ->
-                    Timber.d("Lost Ethernet connection")
+			if (networkEventsFlow.value.settings.isAutoTunnelPaused
-                }
+				!= settings.isAutoTunnelPaused
-            }
+			) {
-        }
+				when (settings.isAutoTunnelPaused) {
-    }
+					true -> launchWatcherPausedNotification()
+					false -> launchWatcherNotification()
+				}
+			}
+			networkEventsFlow.update {
+				it.copy(
+					settings = settings,
+				)
+			}
+		}
+	}
 
-    private suspend fun watchForWifiConnectivityChanges() {
+	private suspend fun watchForEthernetConnectivityChanges() {
-        wifiService.networkStatus.collect {
+		withContext(ioDispatcher) {
-            when (it) {
+			ethernetService.networkStatus.collect { status ->
-                is NetworkStatus.Available -> {
+				when (status) {
-                    Timber.d("Gained Wi-Fi connection")
+					is NetworkStatus.Available -> {
-                    isWifiConnected = true
+						Timber.i("Gained Ethernet connection")
-                }
+						networkEventsFlow.update {
+							it.copy(
+								isEthernetConnected = true,
+							)
+						}
+					}
 
-                is NetworkStatus.CapabilitiesChanged -> {
+					is NetworkStatus.CapabilitiesChanged -> {
-                    Timber.d("Wifi capabilities changed")
+						Timber.i("Ethernet capabilities changed")
-                    isWifiConnected = true
+						networkEventsFlow.update {
-                    currentNetworkSSID = wifiService.getNetworkName(it.networkCapabilities) ?: ""
+							it.copy(
-                }
+								isEthernetConnected = true,
+							)
+						}
+					}
 
-                is NetworkStatus.Unavailable -> {
+					is NetworkStatus.Unavailable -> {
-                    isWifiConnected = false
+						networkEventsFlow.update {
-                    Timber.d("Lost Wi-Fi connection")
+							it.copy(
-                }
+								isEthernetConnected = false,
-            }
+							)
-        }
+						}
-    }
+						Timber.i("Lost Ethernet connection")
+					}
+				}
+			}
+		}
+	}
 
-    private suspend fun manageVpn() {
+	private suspend fun watchForWifiConnectivityChanges() {
-        while (true) {
+		withContext(ioDispatcher) {
-            if (isEthernetConnected && setting.isTunnelOnEthernetEnabled && vpnService.getState() == Tunnel.State.DOWN) {
+			wifiService.networkStatus.collect { status ->
-                ServiceManager.startVpnService(this, tunnelConfig)
+				when (status) {
-            }
+					is NetworkStatus.Available -> {
-            if (!isEthernetConnected && setting.isTunnelOnMobileDataEnabled &&
+						Timber.i("Gained Wi-Fi connection")
-                !isWifiConnected &&
+						networkEventsFlow.update {
-                isMobileDataConnected
+							it.copy(
-                && vpnService.getState() == Tunnel.State.DOWN
+								isWifiConnected = true,
-            ) {
+							)
-                ServiceManager.startVpnService(this, tunnelConfig)
+						}
-            } else if (!isEthernetConnected && !setting.isTunnelOnMobileDataEnabled &&
+					}
-                !isWifiConnected &&
+
-                vpnService.getState() == Tunnel.State.UP
+					is NetworkStatus.CapabilitiesChanged -> {
-            ) {
+						Timber.i("Wifi capabilities changed")
-                ServiceManager.stopVpnService(this)
+						networkEventsFlow.update {
-            } else if (!isEthernetConnected && isWifiConnected &&
+							it.copy(
-                !setting.trustedNetworkSSIDs.contains(currentNetworkSSID) &&
+								isWifiConnected = true,
-                (vpnService.getState() != Tunnel.State.UP)
+							)
-            ) {
+						}
-                ServiceManager.startVpnService(this, tunnelConfig)
+						val ssid = wifiService.getNetworkName(status.networkCapabilities)
-            } else if (!isEthernetConnected && (isWifiConnected &&
+						ssid?.let { name ->
-                        setting.trustedNetworkSSIDs.contains(currentNetworkSSID)) &&
+							if (name.contains(Constants.UNREADABLE_SSID)) {
-                (vpnService.getState() == Tunnel.State.UP)
+								Timber.w("SSID unreadable: missing permissions")
-            ) {
+							} else {
-                ServiceManager.stopVpnService(this)
+								Timber.i("Detected valid SSID")
-            }
+							}
-            delay(Constants.VPN_CONNECTIVITY_CHECK_INTERVAL)
+							appDataRepository.appState.setCurrentSsid(name)
-        }
+							networkEventsFlow.update {
-    }
+								it.copy(
+									currentNetworkSSID = name,
+								)
+							}
+						} ?: Timber.w("Failed to read ssid")
+					}
+
+					is NetworkStatus.Unavailable -> {
+						networkEventsFlow.update {
+							it.copy(
+								isWifiConnected = false,
+							)
+						}
+						Timber.i("Lost Wi-Fi connection")
+					}
+				}
+			}
+		}
+	}
+
+	private suspend fun getMobileDataTunnel(): TunnelConfig? {
+		return appDataRepository.tunnels.findByMobileDataTunnel().firstOrNull()
+	}
+
+	private suspend fun getSsidTunnel(ssid: String): TunnelConfig? {
+		return appDataRepository.tunnels.findByTunnelNetworksName(ssid).firstOrNull()
+	}
+
+	private fun isTunnelDown(): Boolean {
+		return vpnService.vpnState.value.status == TunnelState.DOWN
+	}
+
+	private suspend fun manageVpn() {
+		val context = this
+		withContext(ioDispatcher) {
+			networkEventsFlow.collectLatest { watcherState ->
+				val autoTunnel = "Auto-tunnel watcher"
+				if (!watcherState.settings.isAutoTunnelPaused) {
+					// delay for rapid network state changes and then collect latest
+					delay(Constants.WATCHER_COLLECTION_DELAY)
+					val tunnelConfig = vpnService.vpnState.value.tunnelConfig
+					when {
+						watcherState.isEthernetConditionMet() -> {
+							Timber.i("$autoTunnel - tunnel on on ethernet condition met")
+							if (isTunnelDown()) serviceManager.startVpnServiceForeground(context)
+						}
+
+						watcherState.isMobileDataConditionMet() -> {
+							Timber.i("$autoTunnel - tunnel on mobile data condition met")
+							val mobileDataTunnel = getMobileDataTunnel()
+							val tunnel =
+								mobileDataTunnel ?: appDataRepository.getPrimaryOrFirstTunnel()
+							if (isTunnelDown() || tunnelConfig?.isMobileDataTunnel == false) {
+								serviceManager.startVpnServiceForeground(
+									context,
+									tunnel?.id,
+								)
+							}
+						}
+
+						watcherState.isTunnelOffOnMobileDataConditionMet() -> {
+							Timber.i("$autoTunnel - tunnel off on mobile data met, turning vpn off")
+							if (!isTunnelDown()) serviceManager.stopVpnServiceForeground(context)
+						}
+
+						watcherState.isUntrustedWifiConditionMet() -> {
+							if (tunnelConfig?.tunnelNetworks?.contains(watcherState.currentNetworkSSID) == false ||
+								tunnelConfig == null
+							) {
+								Timber.i(
+									"$autoTunnel - tunnel on ssid not associated with current tunnel condition met",
+								)
+								getSsidTunnel(watcherState.currentNetworkSSID)?.let {
+									Timber.i("Found tunnel associated with this SSID, bringing tunnel up: ${it.name}")
+									if (isTunnelDown() || tunnelConfig?.id != it.id) {
+										serviceManager.startVpnServiceForeground(
+											context,
+											it.id,
+										)
+									}
+								} ?: suspend {
+									Timber.i("No tunnel associated with this SSID, using defaults")
+									val default = appDataRepository.getPrimaryOrFirstTunnel()
+									if (default?.name != vpnService.name) {
+										default?.let {
+											serviceManager.startVpnServiceForeground(context, it.id)
+										}
+									}
+								}.invoke()
+							}
+						}
+
+						watcherState.isTrustedWifiConditionMet() -> {
+							Timber.i(
+								"$autoTunnel - tunnel off on trusted wifi condition met, turning vpn off",
+							)
+							if (!isTunnelDown()) serviceManager.stopVpnServiceForeground(context)
+						}
+
+						watcherState.isTunnelOffOnWifiConditionMet() -> {
+							Timber.i(
+								"$autoTunnel - tunnel off on wifi condition met, turning vpn off",
+							)
+							if (!isTunnelDown()) serviceManager.stopVpnServiceForeground(context)
+						}
+
+						watcherState.isTunnelOffOnNoConnectivityMet() -> {
+							Timber.i(
+								"$autoTunnel - tunnel off on no connectivity met, turning vpn off",
+							)
+							if (!isTunnelDown()) serviceManager.stopVpnServiceForeground(context)
+						}
+
+						else -> {
+							Timber.i("$autoTunnel - no condition met")
+						}
+					}
+				}
+			}
+		}
+	}
 }

app/src/main/java/com/zaneschepke/wireguardautotunnel/service/foreground/WireGuardTunnelService.kt

@@ -3,160 +3,196 @@ package com.zaneschepke.wireguardautotunnel.service.foreground
 import android.app.PendingIntent
 import android.content.Intent
 import android.os.Bundle
+import androidx.core.app.ServiceCompat
 import androidx.lifecycle.lifecycleScope
 import com.zaneschepke.wireguardautotunnel.R
+import com.zaneschepke.wireguardautotunnel.data.repository.AppDataRepository
+import com.zaneschepke.wireguardautotunnel.module.IoDispatcher
+import com.zaneschepke.wireguardautotunnel.module.MainImmediateDispatcher
 import com.zaneschepke.wireguardautotunnel.receiver.NotificationActionReceiver
-import com.zaneschepke.wireguardautotunnel.repository.SettingsDoa
-import com.zaneschepke.wireguardautotunnel.repository.model.TunnelConfig
 import com.zaneschepke.wireguardautotunnel.service.notification.NotificationService
 import com.zaneschepke.wireguardautotunnel.service.tunnel.HandshakeStatus
+import com.zaneschepke.wireguardautotunnel.service.tunnel.TunnelState
 import com.zaneschepke.wireguardautotunnel.service.tunnel.VpnService
+import com.zaneschepke.wireguardautotunnel.util.Constants
+import com.zaneschepke.wireguardautotunnel.util.handshakeStatus
+import com.zaneschepke.wireguardautotunnel.util.mapPeerStats
 import dagger.hilt.android.AndroidEntryPoint
-import kotlinx.coroutines.Dispatchers
+import kotlinx.coroutines.CancellationException
+import kotlinx.coroutines.CoroutineDispatcher
 import kotlinx.coroutines.Job
+import kotlinx.coroutines.delay
 import kotlinx.coroutines.launch
+import kotlinx.coroutines.withContext
 import timber.log.Timber
 import javax.inject.Inject
 
 @AndroidEntryPoint
 class WireGuardTunnelService : ForegroundService() {
+	private val foregroundId = 123
 
-    private val foregroundId = 123
+	@Inject
+	lateinit var vpnService: VpnService
 
-    @Inject
+	@Inject
-    lateinit var vpnService : VpnService
+	lateinit var appDataRepository: AppDataRepository
 
-    @Inject
+	@Inject
-    lateinit var settingsRepo: SettingsDoa
+	lateinit var notificationService: NotificationService
 
-    @Inject
+	@Inject
-    lateinit var notificationService : NotificationService
+	@MainImmediateDispatcher
+	lateinit var mainImmediateDispatcher: CoroutineDispatcher
 
-    private lateinit var job : Job
+	@Inject
+	@IoDispatcher
+	lateinit var ioDispatcher: CoroutineDispatcher
 
-    private var tunnelName : String = ""
+	private var job: Job? = null
 
-    override fun onCreate() {
+	private var didShowConnected = false
-        super.onCreate()
-        lifecycleScope.launch(Dispatchers.Main) {
-            launchVpnStartingNotification()
-        }
-    }
 
-    override fun startService(extras : Bundle?) {
+	override fun onCreate() {
-        super.startService(extras)
+		super.onCreate()
-        launchVpnStartingNotification()
+		lifecycleScope.launch(mainImmediateDispatcher) {
-        val tunnelConfigString = extras?.getString(getString(R.string.tunnel_extras_key))
+			// TODO fix this to not launch if AOVPN
-        cancelJob()
+			if (appDataRepository.tunnels.count() != 0) {
-        job = lifecycleScope.launch(Dispatchers.IO) {
+				launchVpnNotification()
-            launch {
+			}
-                if(tunnelConfigString != null) {
+		}
-                    try {
+	}
-                        val tunnelConfig = TunnelConfig.from(tunnelConfigString)
-                        tunnelName = tunnelConfig.name
-                        vpnService.startTunnel(tunnelConfig)
-                    } catch (e : Exception) {
-                        Timber.e("Problem starting tunnel: ${e.message}")
-                        stopService(extras)
-                    }
-                } else {
-                    Timber.d("Tunnel config null, starting default tunnel")
-                    val settings = settingsRepo.getAll()
-                    if(settings.isNotEmpty()) {
-                        val setting = settings[0]
-                        if(setting.defaultTunnel != null && setting.isAlwaysOnVpnEnabled) {
-                            val tunnelConfig = TunnelConfig.from(setting.defaultTunnel!!)
-                            tunnelName = tunnelConfig.name
-                            vpnService.startTunnel(tunnelConfig)
-                        }
-                    }
-                }
-            }
-            launch {
-                var didShowConnected = false
-                var didShowFailedHandshakeNotification = false
-                vpnService.handshakeStatus.collect {
-                    when(it) {
-                        HandshakeStatus.NOT_STARTED -> {
-                        }
-                        HandshakeStatus.NEVER_CONNECTED -> {
-                            if(!didShowFailedHandshakeNotification) {
-                                launchVpnConnectionFailedNotification(getString(R.string.initial_connection_failure_message))
-                                didShowFailedHandshakeNotification = true
-                                didShowConnected = false
-                            }
-                        }
-                        HandshakeStatus.HEALTHY -> {
-                            if(!didShowConnected) {
-                                launchVpnConnectedNotification()
-                                didShowConnected = true
-                            }
-                        }
-                        HandshakeStatus.UNHEALTHY -> {
-                            if(!didShowFailedHandshakeNotification) {
-                                launchVpnConnectionFailedNotification(getString(R.string.lost_connection_failure_message))
-                                didShowFailedHandshakeNotification = true
-                                didShowConnected = false
-                            }
-                        }
-                    }
-                }
-            }
-        }
-    }
 
-    override fun stopService(extras : Bundle?) {
+	override fun startService(extras: Bundle?) {
-        super.stopService(extras)
+		super.startService(extras)
-        lifecycleScope.launch(Dispatchers.IO) {
+		cancelJob()
-            vpnService.stopTunnel()
+		job =
-        }
+			lifecycleScope.launch {
-        cancelJob()
+				launch {
-        stopSelf()
+					val tunnelId = extras?.getInt(Constants.TUNNEL_EXTRA_KEY)
-    }
+					if (vpnService.getState() == TunnelState.UP) {
+						vpnService.stopTunnel()
+					}
+					vpnService.startTunnel(
+						tunnelId?.let {
+							appDataRepository.tunnels.getById(it)
+						},
+					)
+				}
+				launch {
+					handshakeNotifications()
+				}
+			}
+	}
 
-    private fun launchVpnConnectedNotification() {
+	// TODO improve tunnel notifications
-        val notification = notificationService.createNotification(
+	private suspend fun handshakeNotifications() {
-            channelId = getString(R.string.vpn_channel_id),
+		withContext(ioDispatcher) {
-            channelName = getString(R.string.vpn_channel_name),
+			var tunnelName: String? = null
-            title = getString(R.string.tunnel_start_title),
+			vpnService.vpnState.collect { state ->
-            onGoing = false,
+				state.statistics
-            showTimestamp = true,
+					?.mapPeerStats()
-            description = "${getString(R.string.tunnel_start_text)} $tunnelName"
+					?.map { it.value?.handshakeStatus() }
-        )
+					.let { statuses ->
-        super.startForeground(foregroundId, notification)
+						when {
-    }
+							statuses?.all { it == HandshakeStatus.HEALTHY } == true -> {
+								if (!didShowConnected) {
+									delay(Constants.VPN_CONNECTED_NOTIFICATION_DELAY)
+									tunnelName = state.tunnelConfig?.name
+									launchVpnNotification(
+										getString(R.string.tunnel_start_title),
+										"${getString(R.string.tunnel_start_text)} - $tunnelName",
+									)
+									didShowConnected = true
+								}
+							}
 
-    private fun launchVpnStartingNotification() {
+							statuses?.any { it == HandshakeStatus.STALE } == true -> {}
-        val notification = notificationService.createNotification(
+							statuses?.all { it == HandshakeStatus.NOT_STARTED } ==
-            channelId = getString(R.string.vpn_channel_id),
+								true -> {
-            channelName = getString(R.string.vpn_channel_name),
+							}
-            title = getString(R.string.vpn_starting),
-            onGoing = false,
-            showTimestamp = true,
-            description = getString(R.string.attempt_connection)
-        )
-        super.startForeground(foregroundId, notification)
-    }
 
-    private fun launchVpnConnectionFailedNotification(message : String) {
+							else -> {}
-        val notification = notificationService.createNotification(
+						}
-            channelId = getString(R.string.vpn_channel_id),
+					}
-            channelName = getString(R.string.vpn_channel_name),
+				if (state.status == TunnelState.UP && state.tunnelConfig?.name != tunnelName) {
-            action = PendingIntent.getBroadcast(this,0,
+					tunnelName = state.tunnelConfig?.name
-                Intent(this, NotificationActionReceiver::class.java),PendingIntent.FLAG_IMMUTABLE),
+					launchVpnNotification(
-            actionText = getString(R.string.restart),
+						getString(R.string.tunnel_start_title),
-            title = getString(R.string.vpn_connection_failed),
+						"${getString(R.string.tunnel_start_text)} - $tunnelName",
-            onGoing = false,
+					)
-            showTimestamp = true,
+				}
-            description = message
+			}
-        )
+		}
-        super.startForeground(foregroundId, notification)
+	}
-    }
 
+	private fun launchAlwaysOnDisabledNotification() {
+		launchVpnNotification(
+			title = this.getString(R.string.vpn_connection_failed),
+			description = this.getString(R.string.always_on_disabled),
+		)
+	}
 
-    private fun cancelJob() {
+	override fun stopService() {
-        if(this::job.isInitialized) {
+		super.stopService()
-            job.cancel()
+		lifecycleScope.launch {
-        }
+			vpnService.stopTunnel()
-    }
+			didShowConnected = false
+		}
+		cancelJob()
+		stopSelf()
+	}
+
+	private fun launchVpnNotification(title: String = getString(R.string.vpn_starting), description: String = getString(R.string.attempt_connection)) {
+		val notification =
+			notificationService.createNotification(
+				channelId = getString(R.string.vpn_channel_id),
+				channelName = getString(R.string.vpn_channel_name),
+				title = title,
+				onGoing = false,
+				vibration = false,
+				showTimestamp = true,
+				description = description,
+			)
+		ServiceCompat.startForeground(
+			this,
+			foregroundId,
+			notification,
+			Constants.SYSTEM_EXEMPT_SERVICE_TYPE_ID,
+		)
+	}
+
+	private fun launchVpnConnectionFailedNotification(message: String) {
+		val notification =
+			notificationService.createNotification(
+				channelId = getString(R.string.vpn_channel_id),
+				channelName = getString(R.string.vpn_channel_name),
+				action =
+				PendingIntent.getBroadcast(
+					this,
+					0,
+					Intent(this, NotificationActionReceiver::class.java),
+					PendingIntent.FLAG_IMMUTABLE,
+				),
+				actionText = getString(R.string.restart),
+				title = getString(R.string.vpn_connection_failed),
+				onGoing = false,
+				vibration = true,
+				showTimestamp = true,
+				description = message,
+			)
+		ServiceCompat.startForeground(
+			this,
+			foregroundId,
+			notification,
+			Constants.SYSTEM_EXEMPT_SERVICE_TYPE_ID,
+		)
+	}
+
+	private fun cancelJob() {
+		try {
+			job?.cancel()
+		} catch (e: CancellationException) {
+			Timber.i("Tunnel job cancelled")
+		}
+	}
 }

app/src/main/java/com/zaneschepke/wireguardautotunnel/service/network/BaseNetworkService.kt

@@ -14,104 +14,114 @@ import kotlinx.coroutines.flow.Flow
 import kotlinx.coroutines.flow.callbackFlow
 import kotlinx.coroutines.flow.map
 
+abstract class BaseNetworkService<T : BaseNetworkService<T>>(
+	val context: Context,
+	networkCapability: Int,
+) : NetworkService<T> {
+	private val connectivityManager =
+		context.getSystemService(Context.CONNECTIVITY_SERVICE) as ConnectivityManager
 
-abstract class BaseNetworkService<T : BaseNetworkService<T>>(val context: Context, networkCapability : Int) : NetworkService<T> {
+	private val wifiManager =
-    private val connectivityManager =
+		context.applicationContext.getSystemService(Context.WIFI_SERVICE) as WifiManager
-        context.getSystemService(Context.CONNECTIVITY_SERVICE) as ConnectivityManager
 
-    private val wifiManager =
+	override val networkStatus =
-        context.applicationContext.getSystemService(Context.WIFI_SERVICE) as WifiManager
+		callbackFlow {
+			val networkStatusCallback =
+				when (Build.VERSION.SDK_INT) {
+					in Build.VERSION_CODES.S..Int.MAX_VALUE -> {
+						object :
+							ConnectivityManager.NetworkCallback(
+								FLAG_INCLUDE_LOCATION_INFO,
+							) {
+							override fun onAvailable(network: Network) {
+								trySend(NetworkStatus.Available(network))
+							}
 
-    override val networkStatus = callbackFlow {
+							override fun onLost(network: Network) {
-        val networkStatusCallback = when (Build.VERSION.SDK_INT) {
+								trySend(NetworkStatus.Unavailable(network))
-            in Build.VERSION_CODES.S..Int.MAX_VALUE -> {
+							}
-                object : ConnectivityManager.NetworkCallback(
-                    FLAG_INCLUDE_LOCATION_INFO
-                ) {
-                    override fun onAvailable(network: Network) {
-                        trySend(NetworkStatus.Available(network))
-                    }
 
-                    override fun onLost(network: Network) {
+							override fun onCapabilitiesChanged(network: Network, networkCapabilities: NetworkCapabilities) {
-                        trySend(NetworkStatus.Unavailable(network))
+								trySend(
-                    }
+									NetworkStatus.CapabilitiesChanged(
+										network,
+										networkCapabilities,
+									),
+								)
+							}
+						}
+					}
 
-                    override fun onCapabilitiesChanged(
+					else -> {
-                        network: Network,
+						object : ConnectivityManager.NetworkCallback() {
-                        networkCapabilities: NetworkCapabilities
+							override fun onAvailable(network: Network) {
-                    ) {
+								trySend(NetworkStatus.Available(network))
-                        trySend(NetworkStatus.CapabilitiesChanged(network, networkCapabilities))
+							}
-                    }
-                }
-            }
 
-            else -> {
+							override fun onLost(network: Network) {
-                object : ConnectivityManager.NetworkCallback() {
+								trySend(NetworkStatus.Unavailable(network))
+							}
 
-                    override fun onAvailable(network: Network) {
+							override fun onCapabilitiesChanged(network: Network, networkCapabilities: NetworkCapabilities) {
-                        trySend(NetworkStatus.Available(network))
+								trySend(
-                    }
+									NetworkStatus.CapabilitiesChanged(
+										network,
+										networkCapabilities,
+									),
+								)
+							}
+						}
+					}
+				}
+			val request =
+				NetworkRequest.Builder()
+					.addTransportType(networkCapability)
+					.addCapability(NetworkCapabilities.NET_CAPABILITY_INTERNET)
+					.addCapability(NetworkCapabilities.NET_CAPABILITY_VALIDATED)
+					.build()
+			connectivityManager.registerNetworkCallback(request, networkStatusCallback)
 
-                    override fun onLost(network: Network) {
+			awaitClose { connectivityManager.unregisterNetworkCallback(networkStatusCallback) }
-                        trySend(NetworkStatus.Unavailable(network))
+		}
-                    }
 
-                    override fun onCapabilitiesChanged(
+	override fun getNetworkName(networkCapabilities: NetworkCapabilities): String? {
-                        network: Network,
+		var ssid: String? = getWifiNameFromCapabilities(networkCapabilities)
-                        networkCapabilities: NetworkCapabilities
+		if (Build.VERSION.SDK_INT <= Build.VERSION_CODES.R) {
-                    ) {
+			val info = wifiManager.connectionInfo
-                        trySend(NetworkStatus.CapabilitiesChanged(network, networkCapabilities))
+			if (info.supplicantState === SupplicantState.COMPLETED) {
-                    }
+				ssid = info.ssid
-                }
+			}
-            }
+		}
-        }
+		return ssid?.trim('"')
-        val request = NetworkRequest.Builder()
+	}
-            .addTransportType(networkCapability)
-            .addCapability(NetworkCapabilities.NET_CAPABILITY_INTERNET)
-            .addCapability(NetworkCapabilities.NET_CAPABILITY_VALIDATED)
-            .build()
-        connectivityManager.registerNetworkCallback(request, networkStatusCallback)
 
-        awaitClose {
+	companion object {
-            connectivityManager.unregisterNetworkCallback(networkStatusCallback)
+		private fun getWifiNameFromCapabilities(networkCapabilities: NetworkCapabilities): String? {
-        }
+			if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.Q) {
-    }
+				val info: WifiInfo
-
+				if (networkCapabilities.transportInfo is WifiInfo) {
-
+					info = networkCapabilities.transportInfo as WifiInfo
-    override fun getNetworkName(networkCapabilities: NetworkCapabilities): String? {
+					return info.ssid
-        var ssid: String? = getWifiNameFromCapabilities(networkCapabilities)
+				}
-        if (Build.VERSION.SDK_INT <= Build.VERSION_CODES.R) {
+			}
-            val info = wifiManager.connectionInfo
+			return null
-            if (info.supplicantState === SupplicantState.COMPLETED) {
+		}
-                ssid = info.ssid
+	}
-            }
-        }
-        return ssid?.trim('"')
-    }
-
-
-    companion object {
-        private fun getWifiNameFromCapabilities(networkCapabilities: NetworkCapabilities): String? {
-            if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.Q) {
-                val info: WifiInfo
-                if (networkCapabilities.transportInfo is WifiInfo) {
-                    info = networkCapabilities.transportInfo as WifiInfo
-                    return info.ssid
-                }
-            }
-            return null
-        }
-    }
 }
 
 inline fun <Result> Flow<NetworkStatus>.map(
-    crossinline onUnavailable: suspend (network : Network) -> Result,
+	crossinline onUnavailable: suspend (network: Network) -> Result,
-    crossinline onAvailable: suspend (network : Network) -> Result,
+	crossinline onAvailable: suspend (network: Network) -> Result,
-    crossinline onCapabilitiesChanged: suspend (network : Network, networkCapabilities : NetworkCapabilities) -> Result,
+	crossinline onCapabilitiesChanged:
+	suspend (network: Network, networkCapabilities: NetworkCapabilities) -> Result,
 ): Flow<Result> = map { status ->
-    when (status) {
+	when (status) {
-        is NetworkStatus.Unavailable -> onUnavailable(status.network)
+		is NetworkStatus.Unavailable -> onUnavailable(status.network)
-        is NetworkStatus.Available -> onAvailable(status.network)
+		is NetworkStatus.Available -> onAvailable(status.network)
-        is NetworkStatus.CapabilitiesChanged -> onCapabilitiesChanged(status.network, status.networkCapabilities)
+		is NetworkStatus.CapabilitiesChanged ->
-    }
+			onCapabilitiesChanged(
+				status.network,
+				status.networkCapabilities,
+			)
+	}
 }

app/src/main/java/com/zaneschepke/wireguardautotunnel/service/network/EthernetService.kt

@@ -5,6 +5,9 @@ import android.net.NetworkCapabilities
 import dagger.hilt.android.qualifiers.ApplicationContext
 import javax.inject.Inject
 
-class EthernetService @Inject constructor(@ApplicationContext context: Context) :
+class EthernetService
-    BaseNetworkService<EthernetService>(context, NetworkCapabilities.TRANSPORT_ETHERNET) {
+@Inject
-}
+constructor(
+	@ApplicationContext context: Context,
+) :
+	BaseNetworkService<EthernetService>(context, NetworkCapabilities.TRANSPORT_ETHERNET)

app/src/main/java/com/zaneschepke/wireguardautotunnel/service/network/MobileDataService.kt

@@ -5,6 +5,9 @@ import android.net.NetworkCapabilities
 import dagger.hilt.android.qualifiers.ApplicationContext
 import javax.inject.Inject
 
-class MobileDataService @Inject constructor(@ApplicationContext context: Context) :
+class MobileDataService
-    BaseNetworkService<MobileDataService>(context, NetworkCapabilities.TRANSPORT_CELLULAR) {
+@Inject
-}
+constructor(
+	@ApplicationContext context: Context,
+) :
+	BaseNetworkService<MobileDataService>(context, NetworkCapabilities.TRANSPORT_CELLULAR)

app/src/main/java/com/zaneschepke/wireguardautotunnel/service/network/NetworkService.kt

@@ -4,7 +4,7 @@ import android.net.NetworkCapabilities
 import kotlinx.coroutines.flow.Flow
 
 interface NetworkService<T> {
-    fun getNetworkName(networkCapabilities: NetworkCapabilities) : String?
+	fun getNetworkName(networkCapabilities: NetworkCapabilities): String?
-    val networkStatus : Flow<NetworkStatus>
 
+	val networkStatus: Flow<NetworkStatus>
 }

app/src/main/java/com/zaneschepke/wireguardautotunnel/service/network/NetworkStatus.kt

@@ -4,7 +4,10 @@ import android.net.Network
 import android.net.NetworkCapabilities
 
 sealed class NetworkStatus {
-    class Available(val network : Network) : NetworkStatus()
+	class Available(val network: Network) : NetworkStatus()
-    class Unavailable(val network : Network) : NetworkStatus()
+
-    class CapabilitiesChanged(val network : Network, val networkCapabilities : NetworkCapabilities) : NetworkStatus()
+	class Unavailable(val network: Network) : NetworkStatus()
+
+	class CapabilitiesChanged(val network: Network, val networkCapabilities: NetworkCapabilities) :
+		NetworkStatus()
 }

app/src/main/java/com/zaneschepke/wireguardautotunnel/service/network/WifiService.kt

@@ -5,6 +5,9 @@ import android.net.NetworkCapabilities
 import dagger.hilt.android.qualifiers.ApplicationContext
 import javax.inject.Inject
 
-class WifiService @Inject constructor(@ApplicationContext context: Context) :
+class WifiService
-    BaseNetworkService<WifiService>(context, NetworkCapabilities.TRANSPORT_WIFI) {
+@Inject
-}
+constructor(
+	@ApplicationContext context: Context,
+) :
+	BaseNetworkService<WifiService>(context, NetworkCapabilities.TRANSPORT_WIFI)

app/src/main/java/com/zaneschepke/wireguardautotunnel/service/notification/NotificationService.kt

@@ -5,17 +5,18 @@ import android.app.NotificationManager
 import android.app.PendingIntent
 
 interface NotificationService {
-    fun createNotification(
+	fun createNotification(
-        channelId: String,
+		channelId: String,
-        channelName: String,
+		channelName: String,
-        title: String = "",
+		title: String = "",
-        action: PendingIntent? = null,
+		action: PendingIntent? = null,
-        actionText: String? = null,
+		actionText: String? = null,
-        description: String,
+		description: String,
-        showTimestamp : Boolean = false,
+		showTimestamp: Boolean = false,
-        importance: Int = NotificationManager.IMPORTANCE_HIGH,
+		importance: Int = NotificationManager.IMPORTANCE_HIGH,
-        vibration: Boolean = true,
+		vibration: Boolean = false,
-        onGoing: Boolean = true,
+		onGoing: Boolean = true,
-        lights: Boolean = true
+		lights: Boolean = true,
-    ): Notification
+		onlyAlertOnce: Boolean = true,
+	): Notification
 }

app/src/main/java/com/zaneschepke/wireguardautotunnel/service/notification/WireGuardNotification.kt

@@ -7,71 +7,99 @@ import android.app.PendingIntent
 import android.content.Context
 import android.content.Intent
 import android.graphics.Color
+import androidx.core.app.NotificationCompat
 import com.zaneschepke.wireguardautotunnel.R
-import com.zaneschepke.wireguardautotunnel.ui.MainActivity
+import com.zaneschepke.wireguardautotunnel.ui.SplashActivity
 import dagger.hilt.android.qualifiers.ApplicationContext
 import javax.inject.Inject
 
-class WireGuardNotification @Inject constructor(@ApplicationContext private val context: Context) : NotificationService {
+class WireGuardNotification
+@Inject
+constructor(
+	@ApplicationContext private val context: Context,
+) :
+	NotificationService {
+	private val notificationManager =
+		context.getSystemService(Context.NOTIFICATION_SERVICE) as NotificationManager
 
-    private val notificationManager = context.getSystemService(Context.NOTIFICATION_SERVICE) as NotificationManager
+	private val watcherBuilder: NotificationCompat.Builder =
+		NotificationCompat.Builder(
+			context,
+			context.getString(R.string.watcher_channel_id),
+		)
+	private val tunnelBuilder: NotificationCompat.Builder =
+		NotificationCompat.Builder(
+			context,
+			context.getString(R.string.vpn_channel_id),
+		)
 
-    override fun createNotification(
+	override fun createNotification(
-        channelId: String,
+		channelId: String,
-        channelName: String,
+		channelName: String,
-        title: String,
+		title: String,
-        action: PendingIntent?,
+		action: PendingIntent?,
-        actionText: String?,
+		actionText: String?,
-        description: String,
+		description: String,
-        showTimestamp: Boolean,
+		showTimestamp: Boolean,
-        importance: Int,
+		importance: Int,
-        vibration: Boolean,
+		vibration: Boolean,
-        onGoing: Boolean,
+		onGoing: Boolean,
-        lights: Boolean
+		lights: Boolean,
-    ): Notification {
+		onlyAlertOnce: Boolean,
-        val channel = NotificationChannel(
+	): Notification {
-            channelId,
+		val channel =
-            channelName,
+			NotificationChannel(
-            importance
+				channelId,
-        ).let {
+				channelName,
-            it.description = title
+				importance,
-            it.enableLights(lights)
+			)
-            it.lightColor = Color.RED
+				.let {
-            it.enableVibration(vibration)
+					it.description = title
-            it.vibrationPattern = longArrayOf(100, 200, 300, 400, 500, 400, 300, 200, 400)
+					it.enableLights(lights)
-            it
+					it.lightColor = Color.RED
-        }
+					it.enableVibration(vibration)
-        notificationManager.createNotificationChannel(channel)
+					it.vibrationPattern = longArrayOf(100, 200, 300)
-        val pendingIntent: PendingIntent =
+					it
-            Intent(context, MainActivity::class.java).let { notificationIntent ->
+				}
-                PendingIntent.getActivity(
+		notificationManager.createNotificationChannel(channel)
-                    context,
+		val pendingIntent: PendingIntent =
-                    0,
+			Intent(context, SplashActivity::class.java).let { notificationIntent ->
-                    notificationIntent,
+				PendingIntent.getActivity(
-                    PendingIntent.FLAG_IMMUTABLE
+					context,
-                )
+					0,
-            }
+					notificationIntent,
+					PendingIntent.FLAG_IMMUTABLE,
+				)
+			}
 
-        val builder: Notification.Builder =
+		val builder =
-            Notification.Builder(
+			when (channelId) {
-                context,
+				context.getString(R.string.watcher_channel_id) -> watcherBuilder
-                channelId
+				context.getString(R.string.vpn_channel_id) -> tunnelBuilder
-            )
+				else -> {
-        return builder.let {
+					NotificationCompat.Builder(
-            if(action != null && actionText != null) {
+						context,
-                //TODO find a not deprecated way to do this
+						channelId,
-                it.addAction(
+					)
-                    Notification.Action.Builder(0, actionText, action)
+				}
-                        .build())
+			}
-                    it.setAutoCancel(true)
+
-            }
+		return builder.let {
-                it.setContentTitle(title)
+			if (action != null && actionText != null) {
-                .setContentText(description)
+				it.addAction(
-                .setContentIntent(pendingIntent)
+					NotificationCompat.Action.Builder(0, actionText, action).build(),
-                .setOngoing(onGoing)
+				)
-                .setShowWhen(showTimestamp)
+				it.setAutoCancel(true)
-                .setSmallIcon(R.mipmap.ic_launcher_foreground)
+			}
-                .build()
+			it.setContentTitle(title)
-        }
+				.setContentText(description)
-    }
+				.setOnlyAlertOnce(onlyAlertOnce)
+				.setContentIntent(pendingIntent)
+				.setOngoing(onGoing)
+				.setPriority(NotificationCompat.PRIORITY_HIGH)
+				.setShowWhen(showTimestamp)
+				.setSmallIcon(R.drawable.ic_launcher)
+				.build()
+		}
+	}
 }

app/src/main/java/com/zaneschepke/wireguardautotunnel/service/shortcut/ShortcutsActivity.kt

@@ -2,82 +2,84 @@ package com.zaneschepke.wireguardautotunnel.service.shortcut
 
 import android.os.Bundle
 import androidx.activity.ComponentActivity
-import androidx.lifecycle.lifecycleScope
+import com.zaneschepke.wireguardautotunnel.data.repository.AppDataRepository
-import com.zaneschepke.wireguardautotunnel.repository.SettingsDoa
+import com.zaneschepke.wireguardautotunnel.module.ApplicationScope
-import com.zaneschepke.wireguardautotunnel.repository.TunnelConfigDao
-import com.zaneschepke.wireguardautotunnel.repository.model.Settings
-import com.zaneschepke.wireguardautotunnel.repository.model.TunnelConfig
 import com.zaneschepke.wireguardautotunnel.service.foreground.Action
 import com.zaneschepke.wireguardautotunnel.service.foreground.ServiceManager
+import com.zaneschepke.wireguardautotunnel.service.foreground.WireGuardConnectivityWatcherService
 import com.zaneschepke.wireguardautotunnel.service.foreground.WireGuardTunnelService
-import com.zaneschepke.wireguardautotunnel.util.WgTunnelException
 import dagger.hilt.android.AndroidEntryPoint
-import kotlinx.coroutines.Dispatchers
+import kotlinx.coroutines.CoroutineScope
 import kotlinx.coroutines.launch
-import timber.log.Timber
 import javax.inject.Inject
 
 @AndroidEntryPoint
 class ShortcutsActivity : ComponentActivity() {
+	@Inject
+	lateinit var appDataRepository: AppDataRepository
 
-    @Inject
+	@Inject
-    lateinit var settingsRepo : SettingsDoa
+	lateinit var serviceManager: ServiceManager
 
-    @Inject
+	@Inject
-    lateinit var tunnelConfigRepo : TunnelConfigDao
+	@ApplicationScope
+	lateinit var applicationScope: CoroutineScope
 
-    private fun attemptWatcherServiceToggle(tunnelConfig : String) {
+	override fun onCreate(savedInstanceState: Bundle?) {
-        lifecycleScope.launch(Dispatchers.Main) {
+		super.onCreate(savedInstanceState)
-            val settings = getSettings()
+		applicationScope.launch {
-            if(settings.isAutoTunnelEnabled) {
+			val settings = appDataRepository.settings.getSettings()
-                ServiceManager.toggleWatcherServiceForeground(this@ShortcutsActivity, tunnelConfig)
+			if (settings.isShortcutsEnabled) {
-            }
+				when (intent.getStringExtra(CLASS_NAME_EXTRA_KEY)) {
-        }
+					WireGuardTunnelService::class.java.simpleName -> {
-    }
+						val tunnelName = intent.getStringExtra(TUNNEL_NAME_EXTRA_KEY)
+						val tunnelConfig =
+							tunnelName?.let {
+								appDataRepository.tunnels.getAll().firstOrNull {
+									it.name == tunnelName
+								}
+							}
+						when (intent.action) {
+							Action.START.name ->
+								serviceManager.startVpnServiceForeground(
+									this@ShortcutsActivity,
+									tunnelConfig?.id,
+									isManualStart = true,
+								)
 
-    override fun onCreate(savedInstanceState: Bundle?) {
+							Action.STOP.name ->
-        super.onCreate(savedInstanceState)
+								serviceManager.stopVpnServiceForeground(
-        if(intent.getStringExtra(CLASS_NAME_EXTRA_KEY)
+									this@ShortcutsActivity,
-            .equals(WireGuardTunnelService::class.java.simpleName)) {
+									isManualStop = true,
-            lifecycleScope.launch(Dispatchers.Main) {
+								)
-                val settings = getSettings()
+						}
-                if(settings.isShortcutsEnabled) {
+					}
-                    try {
-                        val tunnelName = intent.getStringExtra(TUNNEL_NAME_EXTRA_KEY)
-                        val tunnelConfig = if(tunnelName != null) {
-                            tunnelConfigRepo.getAll().firstOrNull { it.name == tunnelName }
-                        } else {
-                            if(settings.defaultTunnel == null) {
-                                tunnelConfigRepo.getAll().first()
-                            } else {
-                                TunnelConfig.from(settings.defaultTunnel!!)
-                            }
-                        }
-                        tunnelConfig ?: return@launch
-                        attemptWatcherServiceToggle(tunnelConfig.toString())
-                        when(intent.action){
-                            Action.STOP.name -> ServiceManager.stopVpnService(this@ShortcutsActivity)
-                            Action.START.name -> ServiceManager.startVpnService(this@ShortcutsActivity, tunnelConfig.toString())
-                        }
-                    } catch (e : Exception) {
-                        Timber.e(e.message)
-                    }
-                }
-            }
-        }
-        finish()
-    }
 
-    private suspend fun getSettings() : Settings {
+					WireGuardConnectivityWatcherService::class.java.simpleName -> {
-        val settings = settingsRepo.getAll()
+						when (intent.action) {
-        return if (settings.isNotEmpty()) {
+							Action.START.name ->
-            settings.first()
+								appDataRepository.settings.save(
-        } else {
+									settings.copy(
-            throw WgTunnelException("Settings empty")
+										isAutoTunnelPaused = false,
-        }
+									),
-    }
+								)
-    companion object {
+
-        const val TUNNEL_NAME_EXTRA_KEY = "tunnelName"
+							Action.STOP.name ->
-        const val CLASS_NAME_EXTRA_KEY = "className"
+								appDataRepository.settings.save(
-    }
+									settings.copy(
+										isAutoTunnelPaused = true,
+									),
+								)
+						}
+					}
+				}
+			}
+		}
+		finish()
+	}
+
+	companion object {
+		const val TUNNEL_NAME_EXTRA_KEY = "tunnelName"
+		const val CLASS_NAME_EXTRA_KEY = "className"
+	}
 }

app/src/main/java/com/zaneschepke/wireguardautotunnel/service/tile/AutoTunnelControlTile.kt

@@ -0,0 +1,104 @@
+package com.zaneschepke.wireguardautotunnel.service.tile
+
+import android.os.Build
+import android.service.quicksettings.Tile
+import android.service.quicksettings.TileService
+import androidx.lifecycle.Lifecycle
+import androidx.lifecycle.LifecycleOwner
+import androidx.lifecycle.ServiceLifecycleDispatcher
+import androidx.lifecycle.lifecycleScope
+import com.zaneschepke.wireguardautotunnel.R
+import com.zaneschepke.wireguardautotunnel.data.domain.TunnelConfig
+import com.zaneschepke.wireguardautotunnel.data.repository.AppDataRepository
+import com.zaneschepke.wireguardautotunnel.service.foreground.ServiceManager
+import dagger.hilt.android.AndroidEntryPoint
+import kotlinx.coroutines.cancel
+import kotlinx.coroutines.launch
+import timber.log.Timber
+import javax.inject.Inject
+
+@AndroidEntryPoint
+class AutoTunnelControlTile : TileService(), LifecycleOwner {
+	@Inject
+	lateinit var appDataRepository: AppDataRepository
+
+	@Inject
+	lateinit var serviceManager: ServiceManager
+
+	private val dispatcher = ServiceLifecycleDispatcher(this)
+
+	private var manualStartConfig: TunnelConfig? = null
+
+	override fun onStartListening() {
+		super.onStartListening()
+		lifecycleScope.launch {
+			val settings = appDataRepository.settings.getSettings()
+			when (settings.isAutoTunnelEnabled) {
+				true -> {
+					if (settings.isAutoTunnelPaused) {
+						setInactive()
+						setTileDescription(this@AutoTunnelControlTile.getString(R.string.paused))
+					} else {
+						setActive()
+						setTileDescription(this@AutoTunnelControlTile.getString(R.string.active))
+					}
+				}
+
+				false -> {
+					setTileDescription(this@AutoTunnelControlTile.getString(R.string.disabled))
+					setUnavailable()
+				}
+			}
+		}
+	}
+
+	override fun onTileAdded() {
+		super.onTileAdded()
+		onStartListening()
+	}
+
+	override fun onClick() {
+		super.onClick()
+		unlockAndRun {
+			lifecycleScope.launch {
+				try {
+					appDataRepository.toggleWatcherServicePause()
+					onStartListening()
+				} catch (e: Exception) {
+					Timber.e(e.message)
+				} finally {
+					cancel()
+				}
+			}
+		}
+	}
+
+	private fun setActive() {
+		qsTile.state = Tile.STATE_ACTIVE
+		qsTile.updateTile()
+	}
+
+	private fun setInactive() {
+		qsTile.state = Tile.STATE_INACTIVE
+		qsTile.updateTile()
+	}
+
+	private fun setUnavailable() {
+		manualStartConfig = null
+		qsTile.state = Tile.STATE_UNAVAILABLE
+		qsTile.updateTile()
+	}
+
+	private fun setTileDescription(description: String) {
+		if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.Q) {
+			qsTile.subtitle = description
+		}
+		if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.R) {
+			qsTile.stateDescription = description
+		}
+		qsTile.updateTile()
+	}
+
+	override val lifecycle: Lifecycle
+		get() = dispatcher.lifecycle
+}

app/src/main/java/com/zaneschepke/wireguardautotunnel/service/tile/TunnelControlTile.kt

@@ -3,142 +3,119 @@ package com.zaneschepke.wireguardautotunnel.service.tile
 import android.os.Build
 import android.service.quicksettings.Tile
 import android.service.quicksettings.TileService
-import com.wireguard.android.backend.Tunnel
+import androidx.lifecycle.Lifecycle
-import com.zaneschepke.wireguardautotunnel.R
+import androidx.lifecycle.LifecycleOwner
-import com.zaneschepke.wireguardautotunnel.repository.SettingsDoa
+import androidx.lifecycle.ServiceLifecycleDispatcher
-import com.zaneschepke.wireguardautotunnel.repository.TunnelConfigDao
+import androidx.lifecycle.lifecycleScope
-import com.zaneschepke.wireguardautotunnel.repository.model.TunnelConfig
+import com.zaneschepke.wireguardautotunnel.data.domain.TunnelConfig
+import com.zaneschepke.wireguardautotunnel.data.repository.AppDataRepository
 import com.zaneschepke.wireguardautotunnel.service.foreground.ServiceManager
+import com.zaneschepke.wireguardautotunnel.service.tunnel.TunnelState
 import com.zaneschepke.wireguardautotunnel.service.tunnel.VpnService
 import dagger.hilt.android.AndroidEntryPoint
-import kotlinx.coroutines.CoroutineScope
-import kotlinx.coroutines.Dispatchers
-import kotlinx.coroutines.Job
 import kotlinx.coroutines.cancel
 import kotlinx.coroutines.launch
 import timber.log.Timber
 import javax.inject.Inject
 
 @AndroidEntryPoint
-class TunnelControlTile : TileService() {
+class TunnelControlTile : TileService(), LifecycleOwner {
+	@Inject
+	lateinit var appDataRepository: AppDataRepository
 
-    @Inject
+	@Inject
-    lateinit var settingsRepo : SettingsDoa
+	lateinit var vpnService: VpnService
 
-    @Inject
+	@Inject
-    lateinit var configRepo : TunnelConfigDao
+	lateinit var serviceManager: ServiceManager
 
-    @Inject
+	private val dispatcher = ServiceLifecycleDispatcher(this)
-    lateinit var vpnService : VpnService
 
-    private val scope = CoroutineScope(Dispatchers.Main)
+	private var manualStartConfig: TunnelConfig? = null
 
-    private lateinit var job : Job
+	override fun onStartListening() {
+		super.onStartListening()
+		Timber.d("On start listening called")
+		lifecycleScope.launch {
+			when (vpnService.getState()) {
+				TunnelState.UP -> {
+					setActive()
+					setTileDescription(vpnService.name)
+				}
 
-    override fun onStartListening() {
+				TunnelState.DOWN -> {
-        job = scope.launch {
+					setInactive()
-            updateTileState()
+					val config =
-        }
+						appDataRepository.getStartTunnelConfig()?.also { config ->
-        super.onStartListening()
+							manualStartConfig = config
-    }
+						} ?: appDataRepository.getPrimaryOrFirstTunnel()
+					config?.let {
+						setTileDescription(it.name)
+					} ?: setUnavailable()
+				}
 
-    override fun onTileRemoved() {
+				else -> setInactive()
-        super.onTileRemoved()
+			}
-        cancelJob()
+		}
-    }
+	}
 
-    override fun onDestroy() {
+	override fun onTileAdded() {
-        super.onDestroy()
+		super.onTileAdded()
-        scope.cancel()
+		onStartListening()
-    }
+	}
 
-    override fun onClick() {
+	override fun onClick() {
-        super.onClick()
+		super.onClick()
-        unlockAndRun {
+		unlockAndRun {
-            scope.launch {
+			lifecycleScope.launch {
-                try {
+				try {
-                    val tunnel = determineTileTunnel()
+					if (vpnService.getState() == TunnelState.UP) {
-                    if(tunnel != null) {
+						serviceManager.stopVpnServiceForeground(
-                        attemptWatcherServiceToggle(tunnel.toString())
+							this@TunnelControlTile,
-                        if(vpnService.getState() == Tunnel.State.UP) {
+							isManualStop = true,
-                            ServiceManager.stopVpnService(this@TunnelControlTile)
+						)
-                        } else {
+					} else {
-                            ServiceManager.startVpnServiceForeground(this@TunnelControlTile, tunnel.toString())
+						serviceManager.startVpnServiceForeground(
-                        }
+							this@TunnelControlTile,
-                    }
+							manualStartConfig?.id,
-                } catch (e : Exception) {
+							isManualStart = true,
-                    Timber.e(e.message)
+						)
-                } finally {
+					}
-                    cancel()
+				} catch (e: Exception) {
-                }
+					Timber.e(e.message)
-            }
+				} finally {
-        }
+					cancel()
-    }
+				}
+			}
+		}
+	}
 
-    private suspend fun determineTileTunnel() : TunnelConfig? {
+	private fun setActive() {
-        var tunnelConfig : TunnelConfig? = null
+		qsTile.state = Tile.STATE_ACTIVE
-        val settings = settingsRepo.getAll()
+		qsTile.updateTile()
-        if (settings.isNotEmpty()) {
+	}
-            val setting = settings.first()
-            tunnelConfig = if (setting.defaultTunnel != null) {
-                TunnelConfig.from(setting.defaultTunnel!!)
-            } else {
-                val configs = configRepo.getAll()
-                val config  = if(configs.isNotEmpty()) {
-                    configs.first()
-                } else {
-                    null
-                }
-                config
-            }
-        }
-        return tunnelConfig
-    }
 
+	private fun setInactive() {
+		qsTile.state = Tile.STATE_INACTIVE
+		qsTile.updateTile()
+	}
 
-    private fun attemptWatcherServiceToggle(tunnelConfig : String) {
+	private fun setUnavailable() {
-        scope.launch {
+		manualStartConfig = null
-            val settings = settingsRepo.getAll()
+		qsTile.state = Tile.STATE_UNAVAILABLE
-            if (settings.isNotEmpty()) {
+		qsTile.updateTile()
-                val setting = settings.first()
+	}
-                if(setting.isAutoTunnelEnabled) {
-                    ServiceManager.toggleWatcherServiceForeground(this@TunnelControlTile, tunnelConfig)
-                }
-            }
-        }
-    }
 
-    private suspend fun updateTileState() {
+	private fun setTileDescription(description: String) {
-        vpnService.state.collect {
+		if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.Q) {
-            when(it) {
+			qsTile.subtitle = description
-                Tunnel.State.UP -> {
+		}
-                    qsTile.state = Tile.STATE_ACTIVE
+		if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.R) {
-                }
+			qsTile.stateDescription = description
-                Tunnel.State.DOWN -> {
+		}
-                    qsTile.state = Tile.STATE_INACTIVE
+		qsTile.updateTile()
-                }
+	}
-                else -> {
-                    qsTile.state = Tile.STATE_UNAVAILABLE
-                }
-            }
-            val config = determineTileTunnel()
-            setTileDescription(config?.name ?: this.resources.getString(R.string.no_tunnel_available))
-            qsTile.updateTile()
-        }
-    }
 
-    private fun setTileDescription(description : String) {
+	override val lifecycle: Lifecycle
-        if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.Q) {
+		get() = dispatcher.lifecycle
-            qsTile.subtitle = description
-        }
-        if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.R) {
-            qsTile.stateDescription = description
-        }
-    }
-
-    private fun cancelJob() {
-        if(this::job.isInitialized) {
-            job.cancel()
-        }
-    }
 }

app/src/main/java/com/zaneschepke/wireguardautotunnel/service/tunnel/HandshakeStatus.kt

@@ -1,14 +1,17 @@
 package com.zaneschepke.wireguardautotunnel.service.tunnel
 
 enum class HandshakeStatus {
-    HEALTHY,
+	HEALTHY,
-    UNHEALTHY,
+	STALE,
-    NEVER_CONNECTED,
+	UNKNOWN,
-    NOT_STARTED;
+	NOT_STARTED,
+	;
 
-    companion object {
+	companion object {
-        private const val WG_TYPICAL_HANDSHAKE_INTERVAL_WHEN_HEALTHY_SEC = 120
+		private const val WG_TYPICAL_HANDSHAKE_INTERVAL_WHEN_HEALTHY_SEC = 180
-        const val UNHEALTHY_TIME_LIMIT_SEC = WG_TYPICAL_HANDSHAKE_INTERVAL_WHEN_HEALTHY_SEC + 60
+		const val STATUS_CHANGE_TIME_BUFFER = 30
-        const val NEVER_CONNECTED_TO_UNHEALTHY_TIME_LIMIT_SEC = 30
+		const val STALE_TIME_LIMIT_SEC =
-    }
+			WG_TYPICAL_HANDSHAKE_INTERVAL_WHEN_HEALTHY_SEC + STATUS_CHANGE_TIME_BUFFER
+		const val NEVER_CONNECTED_TO_UNHEALTHY_TIME_LIMIT_SEC = 30
+	}
 }

app/src/main/java/com/zaneschepke/wireguardautotunnel/service/tunnel/TunnelState.kt

@@ -0,0 +1,44 @@
+package com.zaneschepke.wireguardautotunnel.service.tunnel
+
+import com.wireguard.android.backend.Tunnel
+
+enum class TunnelState {
+	UP,
+	DOWN,
+	TOGGLE,
+	;
+
+	fun toWgState(): Tunnel.State {
+		return when (this) {
+			UP -> Tunnel.State.UP
+			DOWN -> Tunnel.State.DOWN
+			TOGGLE -> Tunnel.State.TOGGLE
+		}
+	}
+
+	fun toAmState(): org.amnezia.awg.backend.Tunnel.State {
+		return when (this) {
+			UP -> org.amnezia.awg.backend.Tunnel.State.UP
+			DOWN -> org.amnezia.awg.backend.Tunnel.State.DOWN
+			TOGGLE -> org.amnezia.awg.backend.Tunnel.State.TOGGLE
+		}
+	}
+
+	companion object {
+		fun from(state: Tunnel.State): TunnelState {
+			return when (state) {
+				Tunnel.State.DOWN -> DOWN
+				Tunnel.State.TOGGLE -> TOGGLE
+				Tunnel.State.UP -> UP
+			}
+		}
+
+		fun from(state: org.amnezia.awg.backend.Tunnel.State): TunnelState {
+			return when (state) {
+				org.amnezia.awg.backend.Tunnel.State.DOWN -> DOWN
+				org.amnezia.awg.backend.Tunnel.State.TOGGLE -> TOGGLE
+				org.amnezia.awg.backend.Tunnel.State.UP -> UP
+			}
+		}
+	}
+}

app/src/main/java/com/zaneschepke/wireguardautotunnel/service/tunnel/VpnService.kt

@@ -1,18 +1,15 @@
 package com.zaneschepke.wireguardautotunnel.service.tunnel
 
-import com.wireguard.android.backend.Statistics
 import com.wireguard.android.backend.Tunnel
-import com.wireguard.crypto.Key
+import com.zaneschepke.wireguardautotunnel.data.domain.TunnelConfig
-import com.zaneschepke.wireguardautotunnel.repository.model.TunnelConfig
+import kotlinx.coroutines.flow.StateFlow
-import kotlinx.coroutines.flow.SharedFlow
 
-interface VpnService : Tunnel {
+interface VpnService : Tunnel, org.amnezia.awg.backend.Tunnel {
-    suspend fun startTunnel(tunnelConfig : TunnelConfig) : Tunnel.State
+	suspend fun startTunnel(tunnelConfig: TunnelConfig? = null): TunnelState
-    suspend fun stopTunnel()
+
-    val state : SharedFlow<Tunnel.State>
+	suspend fun stopTunnel()
-    val tunnelName : SharedFlow<String>
+
-    val statistics : SharedFlow<Statistics>
+	val vpnState: StateFlow<VpnState>
-    val lastHandshake : SharedFlow<Map<Key,Long>>
+
-    val handshakeStatus : SharedFlow<HandshakeStatus>
+	fun getState(): TunnelState
-    fun getState() : Tunnel.State
 }

app/src/main/java/com/zaneschepke/wireguardautotunnel/service/tunnel/VpnState.kt

@@ -0,0 +1,10 @@
+package com.zaneschepke.wireguardautotunnel.service.tunnel
+
+import com.zaneschepke.wireguardautotunnel.data.domain.TunnelConfig
+import com.zaneschepke.wireguardautotunnel.service.tunnel.statistics.TunnelStatistics
+
+data class VpnState(
+	val status: TunnelState = TunnelState.DOWN,
+	val tunnelConfig: TunnelConfig? = null,
+	val statistics: TunnelStatistics? = null,
+)

app/src/main/java/com/zaneschepke/wireguardautotunnel/service/tunnel/WireGuardTunnel.kt

@@ -2,142 +2,232 @@ package com.zaneschepke.wireguardautotunnel.service.tunnel
 
 import com.wireguard.android.backend.Backend
 import com.wireguard.android.backend.BackendException
-import com.wireguard.android.backend.Statistics
+import com.wireguard.android.backend.Tunnel.State
-import com.wireguard.android.backend.Tunnel
+import com.zaneschepke.wireguardautotunnel.WireGuardAutoTunnel
-import com.wireguard.crypto.Key
+import com.zaneschepke.wireguardautotunnel.data.domain.TunnelConfig
-import com.zaneschepke.wireguardautotunnel.Constants
+import com.zaneschepke.wireguardautotunnel.data.repository.AppDataRepository
-import com.zaneschepke.wireguardautotunnel.repository.model.TunnelConfig
+import com.zaneschepke.wireguardautotunnel.module.ApplicationScope
-import com.zaneschepke.wireguardautotunnel.util.NumberUtils
+import com.zaneschepke.wireguardautotunnel.module.IoDispatcher
+import com.zaneschepke.wireguardautotunnel.module.Kernel
+import com.zaneschepke.wireguardautotunnel.module.Userspace
+import com.zaneschepke.wireguardautotunnel.service.tunnel.statistics.AmneziaStatistics
+import com.zaneschepke.wireguardautotunnel.service.tunnel.statistics.TunnelStatistics
+import com.zaneschepke.wireguardautotunnel.service.tunnel.statistics.WireGuardStatistics
+import com.zaneschepke.wireguardautotunnel.util.Constants
+import kotlinx.coroutines.CancellationException
+import kotlinx.coroutines.CoroutineDispatcher
 import kotlinx.coroutines.CoroutineScope
-import kotlinx.coroutines.Dispatchers
 import kotlinx.coroutines.Job
-import kotlinx.coroutines.channels.BufferOverflow
 import kotlinx.coroutines.delay
-import kotlinx.coroutines.flow.MutableSharedFlow
 import kotlinx.coroutines.flow.MutableStateFlow
-import kotlinx.coroutines.flow.SharedFlow
+import kotlinx.coroutines.flow.StateFlow
-import kotlinx.coroutines.flow.asSharedFlow
 import kotlinx.coroutines.flow.asStateFlow
 import kotlinx.coroutines.launch
+import kotlinx.coroutines.withContext
+import org.amnezia.awg.backend.Tunnel
 import timber.log.Timber
 import javax.inject.Inject
+import javax.inject.Provider
 
-
+class WireGuardTunnel
-class WireGuardTunnel @Inject constructor(private val backend : Backend,
+@Inject
+constructor(
+	private val userspaceAmneziaBackend: Provider<org.amnezia.awg.backend.Backend>,
+	@Userspace private val userspaceBackend: Provider<Backend>,
+	@Kernel private val kernelBackend: Provider<Backend>,
+	private val appDataRepository: AppDataRepository,
+	@ApplicationScope private val applicationScope: CoroutineScope,
+	@IoDispatcher private val ioDispatcher: CoroutineDispatcher,
 ) : VpnService {
+	private val _vpnState = MutableStateFlow(VpnState())
+	override val vpnState: StateFlow<VpnState> = _vpnState.asStateFlow()
 
-    private val _tunnelName = MutableStateFlow("")
+	private var statsJob: Job? = null
-    override val tunnelName get() = _tunnelName.asStateFlow()
 
-    private val _state = MutableSharedFlow<Tunnel.State>(
+	private var backendIsWgUserspace = true
-        onBufferOverflow = BufferOverflow.DROP_OLDEST,
-        replay = 1)
 
-    private val _handshakeStatus = MutableSharedFlow<HandshakeStatus>(replay = 1,
+	private var backendIsAmneziaUserspace = false
-        onBufferOverflow = BufferOverflow.DROP_OLDEST)
-    override val state get() = _state.asSharedFlow()
 
-    private val _statistics = MutableSharedFlow<Statistics>(replay = 1)
+	init {
-    override val statistics get() = _statistics.asSharedFlow()
+		applicationScope.launch(ioDispatcher) {
+			appDataRepository.settings.getSettingsFlow().collect {
+				if (it.isKernelEnabled && (backendIsWgUserspace || backendIsAmneziaUserspace)) {
+					Timber.i("Setting kernel backend")
+					backendIsWgUserspace = false
+					backendIsAmneziaUserspace = false
+				} else if (!it.isKernelEnabled && !it.isAmneziaEnabled && !backendIsWgUserspace) {
+					Timber.i("Setting WireGuard userspace backend")
+					backendIsWgUserspace = true
+					backendIsAmneziaUserspace = false
+				} else if (it.isAmneziaEnabled && !backendIsAmneziaUserspace) {
+					Timber.i("Setting Amnezia userspace backend")
+					backendIsAmneziaUserspace = true
+					backendIsWgUserspace = false
+				}
+			}
+		}
+	}
 
-    private val _lastHandshake = MutableSharedFlow<Map<Key, Long>>(replay = 1)
+	private fun setState(tunnelConfig: TunnelConfig?, tunnelState: TunnelState): TunnelState {
-    override val lastHandshake get() = _lastHandshake.asSharedFlow()
+		return if (backendIsAmneziaUserspace) {
+			Timber.i("Using Amnezia backend")
+			val config =
+				tunnelConfig?.let {
+					if (it.amQuick != "") {
+						TunnelConfig.configFromAmQuick(it.amQuick)
+					} else {
+						Timber.w(
+							"Using backwards compatible wg config, amnezia specific config not found.",
+						)
+						TunnelConfig.configFromAmQuick(it.wgQuick)
+					}
+				}
+			val state =
+				userspaceAmneziaBackend.get().setState(this, tunnelState.toAmState(), config)
+			TunnelState.from(state)
+		} else {
+			Timber.i("Using Wg backend")
+			val wgConfig = tunnelConfig?.let { TunnelConfig.configFromWgQuick(it.wgQuick) }
+			val state =
+				backend().setState(
+					this,
+					tunnelState.toWgState(),
+					wgConfig,
+				)
+			TunnelState.from(state)
+		}
+	}
 
-    override val handshakeStatus: SharedFlow<HandshakeStatus>
+	override suspend fun startTunnel(tunnelConfig: TunnelConfig?): TunnelState {
-        get() = _handshakeStatus.asSharedFlow()
+		return withContext(ioDispatcher) {
+			try {
+				// TODO we need better error handling here
+				// need to bubble up these errors to the UI
+				val config = tunnelConfig ?: appDataRepository.getPrimaryOrFirstTunnel()
+				if (config != null) {
+					emitTunnelConfig(config)
+					setState(config, TunnelState.UP)
+				} else {
+					throw Exception("No tunnels")
+				}
+			} catch (e: BackendException) {
+				Timber.e("Failed to start tunnel with error: ${e.message}")
+				TunnelState.from(State.DOWN)
+			}
+		}
+	}
 
-    private val scope = CoroutineScope(Dispatchers.IO)
+	private fun backend(): Backend {
+		return when {
+			backendIsWgUserspace -> {
+				userspaceBackend.get()
+			}
 
-    private lateinit var statsJob : Job
+			!backendIsWgUserspace && !backendIsAmneziaUserspace -> {
+				kernelBackend.get()
+			}
 
+			else -> {
+				userspaceBackend.get()
+			}
+		}
+	}
 
-    override suspend fun startTunnel(tunnelConfig: TunnelConfig) : Tunnel.State{
+	private fun emitTunnelState(state: TunnelState) {
-        return try {
+		_vpnState.tryEmit(
-            stopTunnelOnConfigChange(tunnelConfig)
+			_vpnState.value.copy(
-            emitTunnelName(tunnelConfig.name)
+				status = state,
-            val config = TunnelConfig.configFromQuick(tunnelConfig.wgQuick)
+			),
-            val state = backend.setState(
+		)
-                this, Tunnel.State.UP, config)
+	}
-            _state.emit(state)
-            state
-        } catch (e : Exception) {
-            Timber.e("Failed to start tunnel with error: ${e.message}")
-            Tunnel.State.DOWN
-        }
-    }
 
-    private suspend fun emitTunnelName(name : String) {
+	private fun emitBackendStatistics(statistics: TunnelStatistics) {
-        _tunnelName.emit(name)
+		_vpnState.tryEmit(
-    }
+			_vpnState.value.copy(
+				statistics = statistics,
+			),
+		)
+	}
 
-    private suspend fun stopTunnelOnConfigChange(tunnelConfig: TunnelConfig) {
+	private suspend fun emitTunnelConfig(tunnelConfig: TunnelConfig?) {
-        if(getState() == Tunnel.State.UP && _tunnelName.value != tunnelConfig.name) {
+		_vpnState.emit(
-            stopTunnel()
+			_vpnState.value.copy(
-        }
+				tunnelConfig = tunnelConfig,
-    }
+			),
+		)
+	}
 
-    override fun getName(): String {
+	private fun resetVpnState() {
-        return _tunnelName.value
+		_vpnState.tryEmit(VpnState())
-    }
+	}
 
-    override suspend fun stopTunnel() {
+	override suspend fun stopTunnel() {
-        try {
+		withContext(ioDispatcher) {
-            if(getState() == Tunnel.State.UP) {
+			try {
-                val state = backend.setState(this, Tunnel.State.DOWN, null)
+				if (getState() == TunnelState.UP) {
-                _state.emit(state)
+					val state = setState(null, TunnelState.DOWN)
-            }
+					resetVpnState()
-        } catch (e : BackendException) {
+					emitTunnelState(state)
-            Timber.e("Failed to stop tunnel with error: ${e.message}")
+				}
-        }
+			} catch (e: BackendException) {
-    }
+				Timber.e("Failed to stop wireguard tunnel with error: ${e.message}")
+			} catch (e: org.amnezia.awg.backend.BackendException) {
+				Timber.e("Failed to stop amnezia tunnel with error: ${e.message}")
+			}
+		}
+	}
 
-    override fun getState(): Tunnel.State {
+	override fun getState(): TunnelState {
-        return backend.getState(this)
+		return if (backendIsAmneziaUserspace) {
-    }
+			TunnelState.from(
+				userspaceAmneziaBackend.get().getState(this),
+			)
+		} else {
+			TunnelState.from(backend().getState(this))
+		}
+	}
 
-    override fun onStateChange(state : Tunnel.State) {
+	override fun getName(): String {
-        val tunnel = this
+		return _vpnState.value.tunnelConfig?.name ?: ""
-        _state.tryEmit(state)
+	}
-        if(state == Tunnel.State.UP) {
-            statsJob = scope.launch {
-                val handshakeMap = HashMap<Key, Long>()
-                var neverHadHandshakeCounter = 0
-                while (true) {
-                    val statistics = backend.getStatistics(tunnel)
-                    _statistics.emit(statistics)
-                    statistics.peers().forEach {
-                        val handshakeEpoch = statistics.peer(it)?.latestHandshakeEpochMillis ?: 0L
-                        handshakeMap[it] = handshakeEpoch
-                        if(handshakeEpoch == 0L) {
-                            if(neverHadHandshakeCounter >= HandshakeStatus.NEVER_CONNECTED_TO_UNHEALTHY_TIME_LIMIT_SEC) {
-                                _handshakeStatus.emit(HandshakeStatus.NEVER_CONNECTED)
-                            } else {
-                                _handshakeStatus.emit(HandshakeStatus.NOT_STARTED)
-                            }
-                            if(neverHadHandshakeCounter <= HandshakeStatus.NEVER_CONNECTED_TO_UNHEALTHY_TIME_LIMIT_SEC) {
-                                neverHadHandshakeCounter += 10
-                            }
-                            return@forEach
-                        }
-                        if(NumberUtils.getSecondsBetweenTimestampAndNow(handshakeEpoch) >= HandshakeStatus.UNHEALTHY_TIME_LIMIT_SEC) {
-                            _handshakeStatus.emit(HandshakeStatus.UNHEALTHY)
-                        } else {
-                            _handshakeStatus.emit(HandshakeStatus.HEALTHY)
-                        }
-                    }
-                    _lastHandshake.emit(handshakeMap)
-                    delay(Constants.VPN_STATISTIC_CHECK_INTERVAL)
-                }
-            }
-        }
-        if(state == Tunnel.State.DOWN) {
-            if(this::statsJob.isInitialized) {
-                statsJob.cancel()
-            }
-            _handshakeStatus.tryEmit(HandshakeStatus.NOT_STARTED)
-            _lastHandshake.tryEmit(emptyMap())
-        }
-    }
 
+	override fun onStateChange(newState: Tunnel.State) {
+		handleStateChange(TunnelState.from(newState))
+	}
 
+	private fun handleStateChange(state: TunnelState) {
+		emitTunnelState(state)
+		WireGuardAutoTunnel.requestTunnelTileServiceStateUpdate()
+		if (state == TunnelState.UP) {
+			statsJob = startTunnelStatisticsJob()
+		}
+		if (state == TunnelState.DOWN) {
+			try {
+				statsJob?.cancel()
+			} catch (e: CancellationException) {
+				Timber.i("Stats job cancelled")
+			}
+		}
+	}
+
+	private fun startTunnelStatisticsJob() = applicationScope.launch(ioDispatcher) {
+		while (true) {
+			if (backendIsAmneziaUserspace) {
+				emitBackendStatistics(
+					AmneziaStatistics(
+						userspaceAmneziaBackend.get().getStatistics(this@WireGuardTunnel),
+					),
+				)
+			} else {
+				emitBackendStatistics(
+					WireGuardStatistics(backend().getStatistics(this@WireGuardTunnel)),
+				)
+			}
+			delay(Constants.VPN_STATISTIC_CHECK_INTERVAL)
+		}
+	}
+
+	override fun onStateChange(state: State) {
+		handleStateChange(TunnelState.from(state))
+	}
 }

app/src/main/java/com/zaneschepke/wireguardautotunnel/service/tunnel/statistics/AmneziaStatistics.kt

@@ -0,0 +1,34 @@
+package com.zaneschepke.wireguardautotunnel.service.tunnel.statistics
+
+import org.amnezia.awg.backend.Statistics
+import org.amnezia.awg.crypto.Key
+
+class AmneziaStatistics(private val statistics: Statistics) : TunnelStatistics() {
+	override fun peerStats(peer: Key): PeerStats? {
+		val key = Key.fromBase64(peer.toBase64())
+		val stats = statistics.peer(key)
+		return stats?.let {
+			PeerStats(
+				rxBytes = stats.rxBytes,
+				txBytes = stats.txBytes,
+				latestHandshakeEpochMillis = stats.latestHandshakeEpochMillis,
+			)
+		}
+	}
+
+	override fun isTunnelStale(): Boolean {
+		return statistics.isStale
+	}
+
+	override fun getPeers(): Array<Key> {
+		return statistics.peers()
+	}
+
+	override fun rx(): Long {
+		return statistics.totalRx()
+	}
+
+	override fun tx(): Long {
+		return statistics.totalTx()
+	}
+}

app/src/main/java/com/zaneschepke/wireguardautotunnel/service/tunnel/statistics/TunnelStatistics.kt

@@ -0,0 +1,18 @@
+package com.zaneschepke.wireguardautotunnel.service.tunnel.statistics
+
+import org.amnezia.awg.crypto.Key
+
+abstract class TunnelStatistics {
+	@JvmRecord
+	data class PeerStats(val rxBytes: Long, val txBytes: Long, val latestHandshakeEpochMillis: Long)
+
+	abstract fun peerStats(peer: Key): PeerStats?
+
+	abstract fun isTunnelStale(): Boolean
+
+	abstract fun getPeers(): Array<Key>
+
+	abstract fun rx(): Long
+
+	abstract fun tx(): Long
+}

app/src/main/java/com/zaneschepke/wireguardautotunnel/service/tunnel/statistics/WireGuardStatistics.kt

@@ -0,0 +1,36 @@
+package com.zaneschepke.wireguardautotunnel.service.tunnel.statistics
+
+import com.wireguard.android.backend.Statistics
+import org.amnezia.awg.crypto.Key
+
+class WireGuardStatistics(private val statistics: Statistics) : TunnelStatistics() {
+	override fun peerStats(peer: Key): PeerStats? {
+		val key = com.wireguard.crypto.Key.fromBase64(peer.toBase64())
+		val peerStats = statistics.peer(key)
+		return peerStats?.let {
+			PeerStats(
+				txBytes = peerStats.txBytes,
+				rxBytes = peerStats.rxBytes,
+				latestHandshakeEpochMillis = peerStats.latestHandshakeEpochMillis,
+			)
+		}
+	}
+
+	override fun isTunnelStale(): Boolean {
+		return statistics.isStale
+	}
+
+	override fun getPeers(): Array<Key> {
+		return statistics.peers().map {
+			Key.fromBase64(it.toBase64())
+		}.toTypedArray()
+	}
+
+	override fun rx(): Long {
+		return statistics.totalRx()
+	}
+
+	override fun tx(): Long {
+		return statistics.totalTx()
+	}
+}

app/src/main/java/com/zaneschepke/wireguardautotunnel/ui/AppUiState.kt

@@ -0,0 +1,9 @@
+package com.zaneschepke.wireguardautotunnel.ui
+
+data class AppUiState(
+	val snackbarMessage: String = "",
+	val snackbarMessageConsumed: Boolean = true,
+	val vpnPermissionAccepted: Boolean = false,
+	val notificationPermissionAccepted: Boolean = false,
+	val requestPermissions: Boolean = false,
+)

app/src/main/java/com/zaneschepke/wireguardautotunnel/ui/AppViewModel.kt

@@ -0,0 +1,123 @@
+package com.zaneschepke.wireguardautotunnel.ui
+
+import android.content.ActivityNotFoundException
+import android.content.Context
+import android.content.Intent
+import android.net.Uri
+import androidx.lifecycle.ViewModel
+import com.wireguard.android.backend.GoBackend
+import com.zaneschepke.wireguardautotunnel.R
+import com.zaneschepke.wireguardautotunnel.WireGuardAutoTunnel
+import com.zaneschepke.wireguardautotunnel.util.Constants
+import dagger.hilt.android.lifecycle.HiltViewModel
+import kotlinx.coroutines.flow.MutableStateFlow
+import kotlinx.coroutines.flow.asStateFlow
+import kotlinx.coroutines.flow.update
+import timber.log.Timber
+import javax.inject.Inject
+
+@HiltViewModel
+class AppViewModel
+@Inject
+constructor() : ViewModel() {
+	val vpnIntent: Intent? = GoBackend.VpnService.prepare(WireGuardAutoTunnel.instance)
+
+	private val _appUiState =
+		MutableStateFlow(
+			AppUiState(
+				vpnPermissionAccepted = vpnIntent == null,
+			),
+		)
+	val appUiState = _appUiState.asStateFlow()
+
+	fun isRequiredPermissionGranted(): Boolean {
+		val allAccepted =
+			(_appUiState.value.vpnPermissionAccepted && _appUiState.value.vpnPermissionAccepted)
+		if (!allAccepted) requestPermissions()
+		return allAccepted
+	}
+
+	private fun requestPermissions() {
+		_appUiState.update {
+			it.copy(
+				requestPermissions = true,
+			)
+		}
+	}
+
+	fun permissionsRequested() {
+		_appUiState.update {
+			it.copy(
+				requestPermissions = false,
+			)
+		}
+	}
+
+	fun openWebPage(url: String, context: Context) {
+		try {
+			val webpage: Uri = Uri.parse(url)
+			val intent =
+				Intent(Intent.ACTION_VIEW, webpage).apply {
+					addFlags(Intent.FLAG_ACTIVITY_NEW_TASK)
+				}
+			context.startActivity(intent)
+		} catch (e: ActivityNotFoundException) {
+			Timber.e(e)
+			showSnackbarMessage(context.getString(R.string.no_browser_detected))
+		}
+	}
+
+	fun onVpnPermissionAccepted() {
+		_appUiState.update {
+			it.copy(
+				vpnPermissionAccepted = true,
+			)
+		}
+	}
+
+	fun launchEmail(context: Context) {
+		try {
+			val intent =
+				Intent(Intent.ACTION_SENDTO).apply {
+					type = Constants.EMAIL_MIME_TYPE
+					putExtra(Intent.EXTRA_EMAIL, arrayOf(context.getString(R.string.my_email)))
+					putExtra(Intent.EXTRA_SUBJECT, context.getString(R.string.email_subject))
+					addFlags(Intent.FLAG_ACTIVITY_NEW_TASK)
+				}
+			context.startActivity(
+				Intent.createChooser(intent, context.getString(R.string.email_chooser)).apply {
+					addFlags(Intent.FLAG_ACTIVITY_NEW_TASK)
+				},
+			)
+		} catch (e: ActivityNotFoundException) {
+			Timber.e(e)
+			showSnackbarMessage(context.getString(R.string.no_email_detected))
+		}
+	}
+
+	fun showSnackbarMessage(message: String) {
+		_appUiState.update {
+			it.copy(
+				snackbarMessage = message,
+				snackbarMessageConsumed = false,
+			)
+		}
+	}
+
+	fun snackbarMessageConsumed() {
+		_appUiState.update {
+			it.copy(
+				snackbarMessage = "",
+				snackbarMessageConsumed = true,
+			)
+		}
+	}
+
+	fun setNotificationPermissionAccepted(accepted: Boolean) {
+		_appUiState.update {
+			it.copy(
+				notificationPermissionAccepted = accepted,
+			)
+		}
+	}
+}

app/src/main/java/com/zaneschepke/wireguardautotunnel/ui/CaptureActivityPortrait.kt

@@ -1,5 +0,0 @@
-package com.zaneschepke.wireguardautotunnel.ui
-
-import com.journeyapps.barcodescanner.CaptureActivity
-
-class CaptureActivityPortrait : CaptureActivity()

app/src/main/java/com/zaneschepke/wireguardautotunnel/ui/MainActivity.kt

@@ -1,21 +1,19 @@
 package com.zaneschepke.wireguardautotunnel.ui
 
 import android.Manifest
-import android.content.Intent
-import android.net.Uri
 import android.os.Build
 import android.os.Bundle
-import android.provider.Settings
+import androidx.activity.SystemBarStyle
-import android.view.KeyEvent
 import androidx.activity.compose.rememberLauncherForActivityResult
 import androidx.activity.compose.setContent
+import androidx.activity.enableEdgeToEdge
 import androidx.activity.result.contract.ActivityResultContracts
 import androidx.appcompat.app.AppCompatActivity
-import androidx.compose.animation.ExitTransition
+import androidx.compose.foundation.focusable
-import androidx.compose.animation.ExperimentalAnimationApi
+import androidx.compose.foundation.layout.Arrangement
-import androidx.compose.animation.core.tween
+import androidx.compose.foundation.layout.Column
-import androidx.compose.animation.fadeIn
+import androidx.compose.foundation.layout.fillMaxSize
-import androidx.compose.animation.slideInHorizontally
+import androidx.compose.foundation.layout.padding
 import androidx.compose.material3.MaterialTheme
 import androidx.compose.material3.Scaffold
 import androidx.compose.material3.SnackbarData
@@ -23,6 +21,7 @@ import androidx.compose.material3.SnackbarDuration
 import androidx.compose.material3.SnackbarHost
 import androidx.compose.material3.SnackbarHostState
 import androidx.compose.material3.SnackbarResult
+import androidx.compose.material3.Text
 import androidx.compose.material3.surfaceColorAtElevation
 import androidx.compose.runtime.LaunchedEffect
 import androidx.compose.runtime.getValue
@@ -31,217 +30,298 @@ import androidx.compose.runtime.remember
 import androidx.compose.runtime.setValue
 import androidx.compose.ui.Modifier
 import androidx.compose.ui.focus.FocusRequester
-import androidx.compose.ui.input.key.onKeyEvent
+import androidx.compose.ui.focus.focusProperties
+import androidx.compose.ui.graphics.Color
+import androidx.compose.ui.graphics.toArgb
+import androidx.compose.ui.res.stringResource
 import androidx.compose.ui.unit.dp
+import androidx.hilt.navigation.compose.hiltViewModel
+import androidx.lifecycle.compose.collectAsStateWithLifecycle
 import androidx.lifecycle.lifecycleScope
-import com.google.accompanist.navigation.animation.AnimatedNavHost
+import androidx.navigation.NavType
-import com.google.accompanist.navigation.animation.composable
+import androidx.navigation.compose.NavHost
-import com.google.accompanist.navigation.animation.rememberAnimatedNavController
+import androidx.navigation.compose.composable
+import androidx.navigation.compose.currentBackStackEntryAsState
+import androidx.navigation.compose.rememberNavController
+import androidx.navigation.navArgument
 import com.google.accompanist.permissions.ExperimentalPermissionsApi
 import com.google.accompanist.permissions.isGranted
 import com.google.accompanist.permissions.rememberPermissionState
-import com.wireguard.android.backend.GoBackend
+import com.google.accompanist.permissions.shouldShowRationale
-import com.zaneschepke.wireguardautotunnel.Constants
 import com.zaneschepke.wireguardautotunnel.R
-import com.zaneschepke.wireguardautotunnel.ui.common.PermissionRequestFailedScreen
+import com.zaneschepke.wireguardautotunnel.WireGuardAutoTunnel
+import com.zaneschepke.wireguardautotunnel.data.repository.AppStateRepository
+import com.zaneschepke.wireguardautotunnel.data.repository.SettingsRepository
+import com.zaneschepke.wireguardautotunnel.service.foreground.ServiceManager
+import com.zaneschepke.wireguardautotunnel.ui.common.dialog.InfoDialog
 import com.zaneschepke.wireguardautotunnel.ui.common.navigation.BottomNavBar
 import com.zaneschepke.wireguardautotunnel.ui.common.prompt.CustomSnackBar
 import com.zaneschepke.wireguardautotunnel.ui.screens.config.ConfigScreen
-import com.zaneschepke.wireguardautotunnel.ui.screens.detail.DetailScreen
+import com.zaneschepke.wireguardautotunnel.ui.screens.main.ConfigType
 import com.zaneschepke.wireguardautotunnel.ui.screens.main.MainScreen
+import com.zaneschepke.wireguardautotunnel.ui.screens.options.OptionsScreen
+import com.zaneschepke.wireguardautotunnel.ui.screens.pinlock.PinLockScreen
 import com.zaneschepke.wireguardautotunnel.ui.screens.settings.SettingsScreen
 import com.zaneschepke.wireguardautotunnel.ui.screens.support.SupportScreen
-import com.zaneschepke.wireguardautotunnel.ui.theme.TransparentSystemBars
+import com.zaneschepke.wireguardautotunnel.ui.screens.support.logs.LogsScreen
 import com.zaneschepke.wireguardautotunnel.ui.theme.WireguardAutoTunnelTheme
+import com.zaneschepke.wireguardautotunnel.util.StringValue
 import dagger.hilt.android.AndroidEntryPoint
 import kotlinx.coroutines.Dispatchers
 import kotlinx.coroutines.launch
-import timber.log.Timber
+import javax.inject.Inject
 
 @AndroidEntryPoint
 class MainActivity : AppCompatActivity() {
+	@Inject
+	lateinit var appStateRepository: AppStateRepository
 
-    @OptIn(ExperimentalAnimationApi::class,
+	@Inject
-        ExperimentalPermissionsApi::class
+	lateinit var settingsRepository: SettingsRepository
-    )
-    override fun onCreate(savedInstanceState: Bundle?) {
-        super.onCreate(savedInstanceState)
-        setContent {
-            val navController = rememberAnimatedNavController()
-            val focusRequester = remember { FocusRequester() }
 
-            WireguardAutoTunnelTheme {
+	@Inject
-                TransparentSystemBars()
+	lateinit var serviceManager: ServiceManager
 
-                val snackbarHostState = remember { SnackbarHostState() }
+	@OptIn(
+		ExperimentalPermissionsApi::class,
+	)
+	override fun onCreate(savedInstanceState: Bundle?) {
+		super.onCreate(savedInstanceState)
 
-                val notificationPermissionState =
+		val isPinLockEnabled = intent.extras?.getBoolean(SplashActivity.IS_PIN_LOCK_ENABLED_KEY)
-                    rememberPermissionState(Manifest.permission.POST_NOTIFICATIONS)
 
-                fun requestNotificationPermission() {
+		enableEdgeToEdge(navigationBarStyle = SystemBarStyle.dark(Color.Transparent.toArgb()))
-                    if (!notificationPermissionState.status.isGranted && Build.VERSION.SDK_INT >= Build.VERSION_CODES.TIRAMISU) {
-                        notificationPermissionState.launchPermissionRequest()
-                    }
-                }
 
-                var vpnIntent by remember { mutableStateOf(GoBackend.VpnService.prepare(this)) }
+		lifecycleScope.launch {
-                val vpnActivityResultState = rememberLauncherForActivityResult(
+			WireGuardAutoTunnel.requestTunnelTileServiceStateUpdate()
-                    ActivityResultContracts.StartActivityForResult(),
+			val settings = settingsRepository.getSettings()
-                    onResult = {
+			if (settings.isAutoTunnelEnabled) {
-                        val accepted = (it.resultCode == RESULT_OK)
+				serviceManager.startWatcherService(application.applicationContext)
-                        if (accepted) {
+			}
-                            vpnIntent = null
+		}
-                        }
-                    })
-                LaunchedEffect(vpnIntent) {
-                    if (vpnIntent != null) {
-                        vpnActivityResultState.launch(vpnIntent)
-                    } else requestNotificationPermission()
-                }
 
-                fun showSnackBarMessage(message : String) {
+		setContent {
-                    lifecycleScope.launch(Dispatchers.Main) {
+			val appViewModel = hiltViewModel<AppViewModel>()
-                        val result = snackbarHostState.showSnackbar(
+			val appUiState by appViewModel.appUiState.collectAsStateWithLifecycle()
-                            message = message,
+			val navController = rememberNavController()
-                            actionLabel = applicationContext.getString(R.string.okay),
+			val navBackStackEntry by navController.currentBackStackEntryAsState()
-                            duration = SnackbarDuration.Short,
+			var showVpnPermissionDialog by remember { mutableStateOf(false) }
-                        )
-                        when (result) {
-                            SnackbarResult.ActionPerformed -> { snackbarHostState.currentSnackbarData?.dismiss() }
-                            SnackbarResult.Dismissed -> { snackbarHostState.currentSnackbarData?.dismiss() }
-                        }
-                    }
-                }
 
-                Scaffold(snackbarHost = {
+			val notificationPermissionState =
-                        SnackbarHost(snackbarHostState) { snackbarData: SnackbarData ->
+				if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.TIRAMISU) {
-                            CustomSnackBar(
+					rememberPermissionState(Manifest.permission.POST_NOTIFICATIONS)
-                                snackbarData.visuals.message,
+				} else {
-                                isRtl = false,
+					null
-                                containerColor = MaterialTheme.colorScheme.surfaceColorAtElevation(2.dp)
+				}
-                            )
-                        }
-                    },
-                    modifier = Modifier.onKeyEvent {
-                        if (it.nativeKeyEvent.action == KeyEvent.ACTION_UP) {
-                            when (it.nativeKeyEvent.keyCode) {
-                                KeyEvent.KEYCODE_DPAD_UP -> {
-                                    try {
-                                        focusRequester.requestFocus()
-                                    } catch(e : IllegalStateException) {
-                                        Timber.e("No D-Pad focus request modifier added to element on screen")
-                                    }
-                                    false
-                                } else -> {
-                                   false
-                                }
-                            }
-                        } else {
-                            false
-                        }
-                    },
-                    bottomBar = if (vpnIntent == null && notificationPermissionState.status.isGranted) {
-                        { BottomNavBar(navController, Routes.navItems) }
-                    } else {
-                        {}
-                    },
-                )
-                { padding ->
-                    if (vpnIntent != null) {
-                        PermissionRequestFailedScreen(
-                            padding = padding,
-                            onRequestAgain = { vpnActivityResultState.launch(vpnIntent) },
-                            message = getString(R.string.vpn_permission_required),
-                            getString(R.string.retry)
-                        )
-                        return@Scaffold
-                    }
-                    if (!notificationPermissionState.status.isGranted) {
-                        PermissionRequestFailedScreen(
-                            padding = padding,
-                            onRequestAgain = {
-                                val intentSettings =
-                                    Intent(Settings.ACTION_APPLICATION_DETAILS_SETTINGS)
-                                intentSettings.data =
-                                    Uri.fromParts(Constants.URI_PACKAGE_SCHEME, this.packageName, null)
-                                startActivity(intentSettings)
-                            },
-                            message = getString(R.string.notification_permission_required),
-                            getString(R.string.open_settings)
-                        )
-                        return@Scaffold
-                    }
 
-                    AnimatedNavHost(navController, startDestination = Routes.Main.name) {
+			val snackbarHostState = remember { SnackbarHostState() }
-                        composable(Routes.Main.name, enterTransition = {
-                            when (initialState.destination.route) {
-                                Routes.Settings.name, Routes.Support.name ->
-                                    slideInHorizontally(
-                                        initialOffsetX = { -Constants.SLIDE_IN_TRANSITION_OFFSET },
-                                        animationSpec = tween(Constants.SLIDE_IN_ANIMATION_DURATION)
-                                    )
 
-                                else -> {
+			val vpnActivityResultState =
-                                    fadeIn(animationSpec = tween(Constants.FADE_IN_ANIMATION_DURATION))
+				rememberLauncherForActivityResult(
-                                }
+					ActivityResultContracts.StartActivityForResult(),
-                            }
+					onResult = {
-                        }, exitTransition = {
+						val accepted = (it.resultCode == RESULT_OK)
-                            ExitTransition.None
+						if (accepted) {
-                        }
+							appViewModel.onVpnPermissionAccepted()
-                            ) {
+						} else {
-                            MainScreen(padding = padding, showSnackbarMessage = { message -> showSnackBarMessage(message) }, navController = navController)
+							showVpnPermissionDialog = true
-                        }
+						}
-                        composable(Routes.Settings.name, enterTransition = {
+					},
-                            when (initialState.destination.route) {
+				)
-                                Routes.Main.name ->
-                                    slideInHorizontally(
-                                        initialOffsetX = { Constants.SLIDE_IN_TRANSITION_OFFSET },
-                                        animationSpec = tween(Constants.SLIDE_IN_ANIMATION_DURATION)
-                                    )
 
-                                Routes.Support.name -> {
+			fun showSnackBarMessage(message: StringValue) {
-                                    slideInHorizontally(
+				lifecycleScope.launch(Dispatchers.Main) {
-                                        initialOffsetX = { -Constants.SLIDE_IN_TRANSITION_OFFSET },
+					val result =
-                                        animationSpec = tween(Constants.SLIDE_IN_ANIMATION_DURATION)
+						snackbarHostState.showSnackbar(
-                                    )
+							message = message.asString(this@MainActivity),
-                                }
+							duration = SnackbarDuration.Short,
+						)
+					when (result) {
+						SnackbarResult.ActionPerformed,
+						SnackbarResult.Dismissed,
+						-> {
+							snackbarHostState.currentSnackbarData?.dismiss()
+						}
+					}
+				}
+			}
 
-                                else -> {
+			LaunchedEffect(appUiState.requestPermissions) {
-                                    fadeIn(animationSpec = tween(Constants.FADE_IN_ANIMATION_DURATION))
+				if (appUiState.requestPermissions) {
-                                }
+					appViewModel.permissionsRequested()
-                            }
+					if (notificationPermissionState != null && !notificationPermissionState.status.isGranted
-                        }) { SettingsScreen(padding = padding, showSnackbarMessage = { message -> showSnackBarMessage(message) }, focusRequester = focusRequester) }
+					) {
-                        composable(Routes.Support.name, enterTransition = {
+						notificationPermissionState.launchPermissionRequest()
-                            when (initialState.destination.route) {
+						return@LaunchedEffect if (notificationPermissionState.status.shouldShowRationale || !notificationPermissionState.status.isGranted) {
-                                Routes.Settings.name, Routes.Main.name ->
+							showSnackBarMessage(
-                                    slideInHorizontally(
+								StringValue.StringResource(R.string.notification_permission_required),
-                                        initialOffsetX = { Constants.SLIDE_IN_ANIMATION_DURATION },
+							)
-                                        animationSpec = tween(Constants.SLIDE_IN_ANIMATION_DURATION)
+						} else {
-                                    )
+							Unit
+						}
+					}
+					if (!appUiState.vpnPermissionAccepted) {
+						return@LaunchedEffect appViewModel.vpnIntent?.let {
+							vpnActivityResultState.launch(
+								it,
+							)
+						} ?: Unit
+					}
+				}
+			}
 
-                                else -> {
+			WireguardAutoTunnelTheme {
-                                    fadeIn(animationSpec = tween(Constants.FADE_IN_ANIMATION_DURATION))
+				LaunchedEffect(Unit) {
-                                }
+					appViewModel.setNotificationPermissionAccepted(
-                            }
+						notificationPermissionState?.status?.isGranted ?: true,
-                        }) { SupportScreen(padding = padding, focusRequester) }
+					)
-                        composable("${Routes.Config.name}/{id}", enterTransition = {
+				}
-                            fadeIn(animationSpec = tween(Constants.FADE_IN_ANIMATION_DURATION))
+
-                        }) { it ->
+				LaunchedEffect(appUiState.snackbarMessageConsumed) {
-                            val id = it.arguments?.getString("id")
+					if (!appUiState.snackbarMessageConsumed) {
-                            if(!id.isNullOrBlank()) {
+						showSnackBarMessage(StringValue.DynamicString(appUiState.snackbarMessage))
-                                ConfigScreen(navController = navController, id = id, showSnackbarMessage = { message -> showSnackBarMessage(message) }, focusRequester = focusRequester)}
+						appViewModel.snackbarMessageConsumed()
-                            }
+					}
-                        composable("${Routes.Detail.name}/{id}", enterTransition = {
+				}
-                            fadeIn(animationSpec = tween(Constants.FADE_IN_ANIMATION_DURATION))
+
-                        }) {
+				val focusRequester = remember { FocusRequester() }
-                            val id = it.arguments?.getString("id")
+
-                            if(!id.isNullOrBlank()) {
+				if (showVpnPermissionDialog) {
-                                DetailScreen(padding = padding, focusRequester = focusRequester, id = id)
+					InfoDialog(
-                            }
+						onDismiss = { showVpnPermissionDialog = false },
-                        }
+						onAttest = { showVpnPermissionDialog = false },
-                    }
+						title = { Text(text = stringResource(R.string.vpn_denied_dialog_title)) },
-                }
+						body = {
-            }
+							Column(verticalArrangement = Arrangement.spacedBy(15.dp)) {
-        }
+								Text(text = stringResource(R.string.vpn_denied_dialog_message))
-    }
+								Text(text = stringResource(R.string.vpn_denied_dialog_message2))
+							}
+						},
+						confirmText = { Text(text = stringResource(R.string.okay)) },
+					)
+				}
+
+				Scaffold(
+					snackbarHost = {
+						SnackbarHost(snackbarHostState) { snackbarData: SnackbarData ->
+							CustomSnackBar(
+								snackbarData.visuals.message,
+								isRtl = false,
+								containerColor =
+								MaterialTheme.colorScheme.surfaceColorAtElevation(
+									2.dp,
+								),
+							)
+						}
+					},
+					// TODO refactor
+					modifier =
+					Modifier
+						.focusable()
+						.focusProperties {
+							when (navBackStackEntry?.destination?.route) {
+								Screen.Lock.route -> Unit
+								else -> up = focusRequester
+							}
+						},
+					bottomBar = {
+						BottomNavBar(
+							navController,
+							listOf(
+								Screen.Main.navItem,
+								Screen.Settings.navItem,
+								Screen.Support.navItem,
+							),
+						)
+					},
+				) { padding ->
+					NavHost(
+						navController,
+						startDestination = (if (isPinLockEnabled == true) Screen.Lock.route else Screen.Main.route),
+						modifier =
+						Modifier
+							.padding(padding)
+							.fillMaxSize(),
+					) {
+						composable(
+							Screen.Main.route,
+						) {
+							MainScreen(
+								focusRequester = focusRequester,
+								appViewModel = appViewModel,
+								navController = navController,
+							)
+						}
+						composable(
+							Screen.Settings.route,
+						) {
+							SettingsScreen(
+								appViewModel = appViewModel,
+								navController = navController,
+								focusRequester = focusRequester,
+							)
+						}
+						composable(
+							Screen.Support.route,
+						) {
+							SupportScreen(
+								focusRequester = focusRequester,
+								appViewModel = appViewModel,
+								navController = navController,
+							)
+						}
+						composable(Screen.Support.Logs.route) {
+							LogsScreen()
+						}
+						composable(
+							"${Screen.Config.route}/{id}?configType={configType}",
+							arguments =
+							listOf(
+								navArgument("id") {
+									type = NavType.StringType
+									defaultValue = "0"
+								},
+								navArgument("configType") {
+									type = NavType.StringType
+									defaultValue = ConfigType.WIREGUARD.name
+								},
+							),
+						) {
+							val id = it.arguments?.getString("id")
+							val configType =
+								ConfigType.valueOf(
+									it.arguments?.getString("configType") ?: ConfigType.WIREGUARD.name,
+								)
+							if (!id.isNullOrBlank()) {
+								ConfigScreen(
+									navController = navController,
+									tunnelId = id,
+									appViewModel = appViewModel,
+									focusRequester = focusRequester,
+									configType = configType,
+								)
+							}
+						}
+						composable("${Screen.Option.route}/{id}") {
+							val id = it.arguments?.getString("id")
+							if (!id.isNullOrBlank()) {
+								OptionsScreen(
+									navController = navController,
+									tunnelId = id,
+									appViewModel = appViewModel,
+									focusRequester = focusRequester,
+								)
+							}
+						}
+						composable(Screen.Lock.route) {
+							PinLockScreen(
+								navController = navController,
+								appViewModel = appViewModel,
+							)
+						}
+					}
+				}
+			}
+		}
+	}
 }