API 37.1 JAR missing various APIs

[zacharee]

Library version: 35.0
OS version: Android 17 (37.1)
Device model: Arm64 Emulator

Describe the bug
Building a jar with ./cli/hiddenjar build --api 37.1 --install while a 37.1 emulator is booted successfully builds and installs android.jar to the SDK folder. However, hidden APIs aren't actually present/accessible, and even normal APIs show errors like:

Cannot access 'android.graphics.drawable.Drawable$Callback' which is a supertype of 'AbstractComposeView'. Check your module classpath for missing or conflicting dependencies.

Trying to compile anyway throws errors about not being able to find or override hidden APIs.

To Reproduce

1. Build and install android.jar on API 37.1.
2. Sync Gradle/Invalidate caches.
3. Try to compile a project that uses hidden APIs (e.g., https://github.com/zacharee/LockscreenWidgets).
4. Compilation will fail on hidden APIs and access errors will show on normal APIs in the editor.

[anggrayudi]

Thanks for the detailed report @zacharee — this was a real bug in how hiddenjar built the jar, now fixed on master (8f7c0f7 + 98ceeb4).

Root cause. hiddenjar was merging every $BOOTCLASSPATH jar into android.jar. On Android 14+ that drags the entire ART runtime (java/*, sun/*, jdk/*, libcore/*) and repackaged libraries (okhttp, bouncycastle, apache-xml, …) onto the compile classpath, where they shadow the JDK and your own dependencies. That's what makes Kotlin/Gradle reject the jar with "Cannot access '…' which is a supertype of '…'. Check your module classpath for missing or conflicting dependencies." — even for normal APIs like Drawable.Callback.

What changed:

• The overlay is now filtered to just the hidden-API namespaces (android.*, com.android.internal.*, dalvik.*) on top of the SDK's own android.jar. Hidden android.* APIs that ship from APEX/mainline modules (wifi, bluetooth, telephony, …) are kept; the JDK-shadowing runtime is dropped.
• The jar's supertype graph is now pruned closed like the stock android.jar, so no class is left with a dangling supertype.
• Fixed a case-collision bug that silently dropped android.media.AudioAttributes on macOS/Windows (case-insensitive filesystems) — the jar is now assembled entirely in memory.
• The build's verification was hardened to actually catch this class of breakage before it installs.

To pick it up:

git pull
./cli/hiddenjar build --api 37.1 --install   # with your Android 17 emulator booted

then Sync / Invalidate Caches in Android Studio.

I validated the whole pipeline against an Android 17 (API 37) emulator. If anything still misbehaves on 37.1 specifically, please drop the hiddenjar build output here and I'll take another look.

[zacharee]

For me, the build fails verification:

[hiddenjar] Built: /Users/zachary/android-hidden-api/android-37.1-custom.jar (69206901 bytes, 64292 classes, 10630 com.android.internal)
[hiddenjar] verify(1/4) compile probe OK — View/ViewGroup/Drawable.Callback/Activity + @hide resolve
[hiddenjar] WARN: verify(2/4) conflict guard FAILED — jar ships JDK/dependency-shadowing namespaces: com/android/okhttp/ com/android/org/ com/google/ gov/nist/ jdk/ libcore/ org/apache/xalan/ org/apache/xml/ org/apache/xpath/ sun/
[hiddenjar] verify(3/4) public-API floor OK — 64292 classes (>= 64187 in base SDK jar)
[closure] scanned 64292 classes: 0 hard, 0 soft (intentionally-dropped internals)
[closure] OK — public supertype graph is closed
[hiddenjar] verify(4/4) supertype closure OK
[hiddenjar] WARN: Verification FAILED (see checks above)
[hiddenjar] ERROR: verification failed (see checks above)