Phone pairing #31021

Connect the phone to its Alpha agent and restore missed messages.

Detailed Description

Estimate: 2 working days. After: #31018

• Reuse the existing account and native pairing flow with the Alpha endpoint from Nitro deployment.
• Keep account credentials separate from agent credentials. Bind stored credentials and history to the correct agent.
• Restore missed messages on resume and reconnect. Deduplicate by message ID and ignore stale responses after an account switch.
• Handle expired tokens, unavailable hosts and rejected ownership explicitly.
• Own the Android/APK client work: cloud-only app build profile, pairing, lifecycle and the identity/auth contract used by Blooio and native calls.
• Hand Shaw a versioned APK/build command, package ID, required roles/permissions and signing requirements for the AOSP image. Test the APK before OS integration.

The thin Android client assumes managed Cloud routing; an arbitrary Alpha URL needs an approved routing adapter. Do not build a new identity provider.

Done when: a real phone pairs, restarts and recovers background results once. Wrong-owner, wrong-origin, expired and reused tokens fail.

Reuse applicable work in #29765 and #30844. Source: packages/ui/src/android-cloud and packages/cloud/api/auth/pair.

Run the affected package checks and required repository gates; attach real model/device/AWS evidence where applicable.

Project and schedule