@mpgd/cli 0.36.0 → 0.36.1

package/dist/capacitor-shell-starter.d.ts

@@ -31,6 +31,27 @@ export interface CapacitorShellCommandRunner {
 }
 /** Materialize only missing native projects after the non-destructive plan is applied. */
 export declare function materializeCapacitorShellStarter(plan: CapacitorShellStarterPlan, runner?: CapacitorShellCommandRunner): void;
+/**
+* Backup rules for API < 31 (android:fullBackupContent). Every data domain is
+* excluded so nothing from the app's private storage reaches a backup even
+* if a game later turns android:allowBackup back on.
+*/
+export declare const androidBackupRulesXml: string;
+/**
+* Data extraction rules for API 31+ (android:dataExtractionRules). Android 12
+* ignores android:allowBackup="false" for device-to-device transfer on some
+* devices, so cloud backup and device transfer each exclude every domain.
+*/
+export declare const androidDataExtractionRulesXml: string;
+/** Manifest application attributes that opt the shell out of backups. */
+export declare const androidManifestBackupAttributes: readonly (readonly [string, string])[];
+/**
+* Set the backup opt-out attributes on the manifest application node and bind
+* the tools namespace on the manifest root. Existing values are replaced in
+* place; the attribute group keeps the indentation of the first attribute so
+* the result is stable across repeated runs.
+*/
+export declare function applyAndroidManifestBackupPolicy(manifest: string): string;
 /** Fail closed when a Release plist hardcodes values independently of Xcode build settings. */
 export declare function assertIosReleasePlistIdentity(source: string): void;
 export declare function assertAndroidReleaseDisplayName(shellApp: string, expectedDisplayName: string): void;

package/dist/capacitor-shell-starter.js

@@ -450,10 +450,14 @@ export function materializeCapacitorShellStarter(plan, runner = { run: runComman
     runner.run('pnpm', ['install', '--no-frozen-lockfile'], plan.gameRoot);
     runner.run('pnpm', ['--dir', shellPath, 'install', '--ignore-workspace', '--no-frozen-lockfile'], plan.gameRoot);
     for (const platform of plan.nativePlatformsToAdd) {
-        if (!existsSync(path.join(plan.gameRoot, shellPath, platform))) {
+        const generatedNow = !existsSync(path.join(plan.gameRoot, shellPath, platform));
+        if (generatedNow) {
             runner.run('pnpm', ['--dir', shellPath, 'cap', 'add', platform], plan.gameRoot);
         }
         const manifest = readJsonObject(path.join(plan.gameRoot, shellPath, 'mpgd.native-shell.json'));
+        if (platform === 'android' && generatedNow) {
+            materializeAndroidBackupPolicy(plan.gameRoot);
+        }
         if (platform === 'ios') {
             materializeIosArchiveScheme(plan.gameRoot);
             const relative = `${shellPath}/ios/App/App/Info-Smoke.plist`;
@@ -473,6 +477,122 @@ export function materializeCapacitorShellStarter(plan, runner = { run: runComman
         throw new Error('Capacitor shell changed during installation; rerun the initializer.');
     }
 }
+const androidToolsNamespace = 'http://schemas.android.com/tools';
+const androidBackupDomains = ['root', 'file', 'database', 'sharedpref', 'external'];
+const androidBackupExcludes = androidBackupDomains
+    .map((domain) => `<exclude domain="${domain}" path="." />`);
+/**
+ * Backup rules for API < 31 (android:fullBackupContent). Every data domain is
+ * excluded so nothing from the app's private storage reaches a backup even
+ * if a game later turns android:allowBackup back on.
+ */
+export const androidBackupRulesXml = [
+    '<?xml version="1.0" encoding="utf-8"?>',
+    '<!--',
+    '  Generated by mpgd target init capacitor. WebView storage and the',
+    '  game-services SharedPreferences save store hold player data, so the whole',
+    '  private data tree stays out of Android backups.',
+    '-->',
+    '<full-backup-content>',
+    ...androidBackupExcludes.map((line) => `    ${line}`),
+    '</full-backup-content>',
+    '',
+].join('\n');
+/**
+ * Data extraction rules for API 31+ (android:dataExtractionRules). Android 12
+ * ignores android:allowBackup="false" for device-to-device transfer on some
+ * devices, so cloud backup and device transfer each exclude every domain.
+ */
+export const androidDataExtractionRulesXml = [
+    '<?xml version="1.0" encoding="utf-8"?>',
+    '<!--',
+    '  Generated by mpgd target init capacitor. WebView storage and the',
+    '  game-services SharedPreferences save store hold player data, so neither',
+    '  cloud backup nor Android 12+ device-to-device transfer may copy them.',
+    '-->',
+    '<data-extraction-rules>',
+    '    <cloud-backup>',
+    ...androidBackupExcludes.map((line) => `        ${line}`),
+    '    </cloud-backup>',
+    '    <device-transfer>',
+    ...androidBackupExcludes.map((line) => `        ${line}`),
+    '    </device-transfer>',
+    '</data-extraction-rules>',
+    '',
+].join('\n');
+/** Manifest application attributes that opt the shell out of backups. */
+export const androidManifestBackupAttributes = [
+    ['android:allowBackup', 'false'],
+    ['android:fullBackupContent', '@xml/backup_rules'],
+    ['android:dataExtractionRules', '@xml/data_extraction_rules'],
+    ['tools:targetApi', 's'],
+];
+/**
+ * Opt a freshly generated Android project out of cloud backups and Android
+ * 12+ device-to-device transfers. The Capacitor template enables
+ * android:allowBackup, which would copy WebView storage and the game-services
+ * SharedPreferences save store into Google backups; only a project created by
+ * this run is touched, never an existing game-owned shell.
+ */
+function materializeAndroidBackupPolicy(gameRoot) {
+    const manifestFile = safeDestination(gameRoot, `${shellPath}/android/app/src/main/AndroidManifest.xml`);
+    if (!existsSync(manifestFile) || !lstatSync(manifestFile).isFile()) {
+        return;
+    }
+    const resources = [
+        ['backup_rules.xml', androidBackupRulesXml],
+        ['data_extraction_rules.xml', androidDataExtractionRulesXml],
+    ];
+    for (const [name, content] of resources) {
+        const resource = safeDestination(gameRoot, `${shellPath}/android/app/src/main/res/xml/${name}`);
+        if (!existsSync(resource)) {
+            mkdirSync(path.dirname(resource), { recursive: true });
+            writeFileSync(resource, content);
+        }
+    }
+    const source = readFileSync(manifestFile, 'utf8');
+    const hardened = applyAndroidManifestBackupPolicy(source);
+    if (hardened !== source) {
+        writeFileSync(manifestFile, hardened);
+    }
+}
+function xmlAttributePattern(name) {
+    return new RegExp(`(\\s*)${name.replaceAll('.', '\\.')}\\s*=\\s*(?:"[^"]*"|'[^']*')`, 'u');
+}
+/**
+ * Set the backup opt-out attributes on the manifest application node and bind
+ * the tools namespace on the manifest root. Existing values are replaced in
+ * place; the attribute group keeps the indentation of the first attribute so
+ * the result is stable across repeated runs.
+ */
+export function applyAndroidManifestBackupPolicy(manifest) {
+    const root = /<manifest\b[^>]*?>/u.exec(manifest);
+    const application = /<application\b[^>]*?\/?>/u.exec(manifest);
+    if (root === null || application === null || application.index < root.index) {
+        return manifest;
+    }
+    let rootTag = root[0];
+    if (!/\sxmlns:tools\s*=/u.test(rootTag)) {
+        const androidNamespace = /\sxmlns:android\s*=\s*(?:"[^"]*"|'[^']*')/u.exec(rootTag);
+        const toolsNamespace = ` xmlns:tools="${androidToolsNamespace}"`;
+        rootTag = androidNamespace === null
+            ? rootTag.replace(/^<manifest\b/u, `<manifest${toolsNamespace}`)
+            : `${rootTag.slice(0, androidNamespace.index + androidNamespace[0].length)}${toolsNamespace}${rootTag.slice(androidNamespace.index + androidNamespace[0].length)}`;
+    }
+    let applicationTag = application[0];
+    const existing = xmlAttributePattern('android:allowBackup').exec(applicationTag);
+    const separator = existing?.[1] !== undefined && existing[1] !== ''
+        ? existing[1]
+        : (/^<application(\s+)\S/u.exec(applicationTag)?.[1] ?? ' ');
+    for (const [name] of androidManifestBackupAttributes) {
+        applicationTag = applicationTag.replace(xmlAttributePattern(name), '');
+    }
+    const attributes = androidManifestBackupAttributes
+        .map(([name, value]) => `${separator}${name}="${value}"`)
+        .join('');
+    applicationTag = applicationTag.replace(/^<application\b/u, `<application${attributes}`);
+    return `${manifest.slice(0, root.index)}${rootTag}${manifest.slice(root.index + root[0].length, application.index)}${applicationTag}${manifest.slice(application.index + application[0].length)}`;
+}
 function materializeIosArchiveScheme(gameRoot) {
     const schemeRelative = `${shellPath}/ios/App/App.xcodeproj/xcshareddata/xcschemes/App.xcscheme`;
     const schemeFile = safeDestination(gameRoot, schemeRelative);

package/dist/native-build-info.json

@@ -1,5 +1,5 @@
 {
-  "kitGitSha": "e78c277284a382f7007e5278d6e026fe030c18af",
+  "kitGitSha": "646745bcd2b326e05dfb7030e8c15d8a102e054b",
   "kitDirty": false,
-  "packageVersion": "0.36.0"
+  "packageVersion": "0.36.1"
 }