@mpgd/cli 0.56.0 → 0.58.0

package/dist/notifications-starter.js

@@ -64,6 +64,15 @@ const commonEdits = {
     'src/platform/buildGateways/capacitorAndroid.ts': [gatewayImport, gatewayProviders('android')],
     'src/platform/buildGateways/capacitorIos.ts': [gatewayImport, gatewayProviders('ios')],
     'src/platform/buildGateways/reddit.ts': [
+        {
+            anchor: '  createDevvitCommerceProducts,\n  createDevvitPlatformGateway,\n',
+            replacement: [
+                '  createDevvitCommerceProducts,',
+                '  createDevvitNotificationsBackend,',
+                '  createDevvitPlatformGateway,',
+                '',
+            ].join('\n'),
+        },
         {
             anchor: "import { createDevvitWebPaymentsClient } from '@mpgd/adapter-devvit/web';\n",
             replacement: [
@@ -77,6 +86,7 @@ const commonEdits = {
         {
             anchor: "import type { RuntimeConfig } from '../runtimeDetector';\n",
             replacement: [
+                "import { setStarterHostedNotificationBackend } from '../notificationBackend';",
                 "import { starterNotificationTopics } from '../notifications';",
                 "import type { RuntimeConfig } from '../runtimeDetector';",
                 '',
@@ -102,7 +112,14 @@ const commonEdits = {
                 '  runtime: RuntimeConfig,',
                 "): Pick<Parameters<typeof createDevvitPlatformGateway>[0], 'notifications'> {",
                 '  const topics = starterNotificationTopics(runtime.configTarget).map((topic) => topic.id);',
-                '  return topics.length === 0 ? {} : { notifications: { topics } };',
+                '  if (topics.length === 0) {',
+                '    return {};',
+                '  }',
+                "  // The runtime's backend is the Devvit server (consent records, reminders, notices for the",
+                '  // logged-in Reddit user), over the same server bridge as the gateway; created on first use.',
+                '  setStarterHostedNotificationBackend(runtime.configTarget, () =>',
+                '    createDevvitNotificationsBackend({ appVersion: runtime.appVersion, buildId: runtime.buildId }));',
+                '  return { notifications: { topics } };',
                 '}',
                 '',
                 'function createCommerceOptions(): DevvitGatewayCommerceOptions | undefined {',
@@ -139,6 +156,7 @@ const commonEdits = {
                 '  createDevvitCommerceBridgeProducts,',
                 '  createDevvitCommerceV2BridgeHandler,',
                 '  createDevvitNotificationService,',
+                '  createDevvitNotificationsBackendBridgeHandler,',
                 '  createDevvitNotificationsV2BridgeHandler,',
                 "} from '@mpgd/adapter-devvit/server';",
                 '',
@@ -182,7 +200,7 @@ const commonEdits = {
                 ' */',
                 'const notificationTopicCatalog = notificationTopicsJson as NotificationTopicCatalog;',
                 'const redditNotificationTopics = readRedditNotificationTopics();',
-                "const notificationService: Parameters<typeof handleNotificationTask>[0]['notifications'] =",
+                "const notificationService: ReturnType<typeof createDevvitNotificationService>['service'] | undefined =",
                 '  redditNotificationTopics.length === 0 ? undefined : createNotificationService();',
                 '// The opt-in is served only with the service that sends; a refused catalog turns both off.',
                 'const notificationsBridge = notificationService === undefined',
@@ -192,6 +210,10 @@ const commonEdits = {
                 '      currentUserId: currentPlayerId,',
                 '      topics: redditNotificationTopics,',
                 '    });',
+                "// The webview runtime's backend: consent records, reminders, and notices for the request's user.",
+                'const notificationsBackend = notificationService === undefined',
+                '  ? undefined',
+                '  : createDevvitNotificationsBackendBridgeHandler({ service: notificationService, context: () => context });',
                 'const handleBridgeRequest = createDevvitBridgeHandler({',
                 '  redis,',
                 '  currentPlayerId,',
@@ -199,6 +221,7 @@ const commonEdits = {
                 '  storageKeyNamespace: gameName,',
                 '  ...(commerce === undefined ? {} : { commerce }),',
                 '  ...(notificationsBridge === undefined ? {} : { notifications: notificationsBridge }),',
+                '  ...(notificationsBackend === undefined ? {} : { notificationsBackend }),',
                 '});',
                 '',
             ].join('\n'),
@@ -230,7 +253,7 @@ const commonEdits = {
                 ' * deployment the service refuses turns notifications off, never the game',
                 ' * server.',
                 ' */',
-                "function createNotificationService(): Parameters<typeof handleNotificationTask>[0]['notifications'] {",
+                "function createNotificationService(): ReturnType<typeof createDevvitNotificationService>['service'] | undefined {",
                 '  try {',
                 '    return createDevvitNotificationService({',
                 '      redis,',

package/dist/release-state.d.ts

@@ -136,5 +136,7 @@ export declare function releaseNativeSubmissionLease(input: {
   readonly environment?: NodeJS.ProcessEnv;
   readonly signal?: AbortSignal;
 }): Promise<NativeSubmissionCheckpoint>;
+/** Exported for tests: the checkpoint status moves a store submission may make. */
+export declare function allowedSubmissionTransition(from: NativeSubmissionStatus, to: NativeSubmissionStatus): boolean;
 /** Validate persisted checkpoint shape before any remote mutation or recovery. */
 export declare function assertNativeSubmissionCheckpoint(value: unknown): asserts value is NativeSubmissionCheckpoint;

package/dist/release-state.js

@@ -524,7 +524,8 @@ export async function releaseNativeSubmissionLease(input) {
         return checkpoint;
     });
 }
-function allowedSubmissionTransition(from, to) {
+/** Exported for tests: the checkpoint status moves a store submission may make. */
+export function allowedSubmissionTransition(from, to) {
     if (from === to) {
         return true;
     }
@@ -550,7 +551,8 @@ function allowedSubmissionTransition(from, to) {
             'failed',
             'action-required',
         ],
-        'action-required': ['processing', 'testflight-ready', 'unknown'],
+        // A build waiting on an operator answer can still expire or fail processing.
+        'action-required': ['processing', 'testflight-ready', 'unknown', 'failed'],
     };
     return allowed[from]?.includes(to) ?? false;
 }

package/dist/testflight-submission.d.ts

@@ -44,6 +44,15 @@ export type AscJsonRunner = (args: readonly string[], timeoutMs: number) => Prom
 export declare function submitVerifiedIosBuild(input: IosTestFlightSubmissionInput): Promise<IosTestFlightSubmissionResult>;
 /** Internal mock boundary used by credential-free submission tests. */
 export declare function submitVerifiedIosBuildWithRunner(input: IosTestFlightSubmissionInput, run: AscJsonRunner): Promise<IosTestFlightSubmissionResult>;
+/**
+* App Store Connect `BuildBetaDetail.internalBuildState`: only
+* READY_FOR_BETA_TESTING and IN_BETA_TESTING let the build reach internal
+* testers. Returns undefined for those, else the status to report.
+*/
+export declare function classifyInternalBuildState(state: string): {
+  readonly status: Extract<IosTestFlightStatus, 'processing' | 'action-required' | 'failed' | 'unknown'>;
+  readonly detail?: string;
+} | undefined;
 export declare function isolatedAscEnvironment(input: IosTestFlightSubmissionInput, directory: string, source?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
 /** The package consumes one reviewed asc pin; it does not trust PATH or version text. */
 export declare function verifyPinnedAscBinary(binary: string, pinFile?: string): Promise<void>;

package/dist/testflight-submission.js

@@ -228,6 +228,32 @@ async function submitVerifiedIosBuildResolved(input, run, { marketingVersion, bu
             detail: 'App Store Connect returned an unknown processing state.',
         };
     }
+    // processingState VALID does not mean testers can install the build: its
+    // TestFlight internal state can still be processing or waiting for the
+    // export-compliance answer (asc `builds build-beta-detail view`).
+    let internalState;
+    try {
+        internalState = readInternalBuildState(await run(['builds', 'build-beta-detail', 'view', '--build-id', build.id], lookupTimeoutMs));
+    }
+    catch (error) {
+        return {
+            ...base,
+            status: 'unknown',
+            ...uploadReference,
+            buildId: build.id,
+            detail: `Build is processed, but its TestFlight state could not be read${failureReason(error)}.`,
+        };
+    }
+    const blocked = classifyInternalBuildState(internalState);
+    if (blocked !== undefined) {
+        return {
+            ...base,
+            status: blocked.status,
+            ...uploadReference,
+            buildId: build.id,
+            ...(blocked.detail === undefined ? {} : { detail: blocked.detail }),
+        };
+    }
     try {
         const added = await run(['builds', 'add-groups', '--build-id', build.id, '--group', input.internalGroupId], lookupTimeoutMs);
         assertGroupAssignment(added, build.id, input.internalGroupId);
@@ -331,6 +357,49 @@ async function lookupBuild(input, marketingVersion, buildNumber, run) {
     }
     return { id: item.id, processingState: item.attributes.processingState };
 }
+function readInternalBuildState(response) {
+    if (!isRecord(response) || !isRecord(response.data)
+        || response.data.type !== 'buildBetaDetails'
+        || !isRecord(response.data.attributes)
+        || typeof response.data.attributes.internalBuildState !== 'string'
+        || response.data.attributes.internalBuildState === '') {
+        throw new Error('asc builds build-beta-detail view returned an invalid JSON schema.');
+    }
+    return response.data.attributes.internalBuildState;
+}
+/**
+ * App Store Connect `BuildBetaDetail.internalBuildState`: only
+ * READY_FOR_BETA_TESTING and IN_BETA_TESTING let the build reach internal
+ * testers. Returns undefined for those, else the status to report.
+ */
+export function classifyInternalBuildState(state) {
+    switch (state) {
+        case 'READY_FOR_BETA_TESTING':
+        case 'IN_BETA_TESTING':
+            return undefined;
+        case 'PROCESSING':
+            return { status: 'processing' };
+        case 'MISSING_EXPORT_COMPLIANCE':
+            return {
+                status: 'action-required',
+                detail: 'TestFlight is waiting for the export-compliance answer: answer it in App Store '
+                    + 'Connect, or ship ITSAppUsesNonExemptEncryption in Info.plist for later builds.',
+            };
+        case 'IN_EXPORT_COMPLIANCE_REVIEW':
+            return {
+                status: 'action-required',
+                detail: 'Apple is reviewing the export-compliance documentation.',
+            };
+        case 'PROCESSING_EXCEPTION':
+        case 'EXPIRED':
+            return { status: 'failed', detail: `TestFlight reported ${state}.` };
+        default:
+            return {
+                status: 'unknown',
+                detail: `TestFlight reported an unknown internal state ${state}.`,
+            };
+    }
+}
 function findInternalGroup(response, groupId) {
     return readDataArray(response, 'TestFlight groups list').some((value) => isRecord(value)
         && value.type === 'betaGroups' && value.id === groupId

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mpgd/cli",
-  "version": "0.56.0",
+  "version": "0.58.0",
   "description": "Gunshi CLI for mpgd-kit starter generation and target workflow orchestration.",
   "license": "MIT",
   "repository": {
@@ -70,10 +70,10 @@
     "parse5": "7.3.0",
     "postcss": "8.5.28",
     "postcss-value-parser": "4.2.0",
-    "@mpgd/catalog": "0.10.7",
     "@mpgd/phaser-assets": "0.9.1",
-    "@mpgd/target-config": "0.23.7",
-    "@mpgd/platform": "0.27.2"
+    "@mpgd/catalog": "0.11.0",
+    "@mpgd/platform": "0.29.0",
+    "@mpgd/target-config": "0.23.9"
   },
   "devDependencies": {
     "@types/node": "^24.0.0",
@@ -81,18 +81,18 @@
     "@types/yauzl": "3.4.0",
     "ttsc": "0.32.1",
     "typescript": "7.0.2",
-    "@mpgd/adapter-ait": "0.20.4",
-    "@mpgd/adapter-browser": "0.11.7",
-    "@mpgd/adapter-capacitor": "0.12.4",
-    "@mpgd/adapter-devvit": "0.13.6",
-    "@mpgd/adapter-verse8": "0.7.8",
-    "@mpgd/analytics": "0.5.0",
-    "@mpgd/bridge": "0.15.0",
-    "@mpgd/capacitor-play-billing": "0.3.8",
-    "@mpgd/capacitor-storekit": "0.3.8",
-    "@mpgd/game-runtime": "0.8.1",
-    "@mpgd/i18n": "0.6.21",
-    "@mpgd/game-services": "0.28.0",
+    "@mpgd/adapter-ait": "0.20.6",
+    "@mpgd/adapter-devvit": "0.14.1",
+    "@mpgd/adapter-browser": "0.11.9",
+    "@mpgd/adapter-verse8": "0.7.10",
+    "@mpgd/adapter-capacitor": "0.13.0",
+    "@mpgd/analytics": "0.5.2",
+    "@mpgd/bridge": "0.16.1",
+    "@mpgd/capacitor-play-billing": "0.3.10",
+    "@mpgd/capacitor-storekit": "0.3.10",
+    "@mpgd/game-runtime": "0.8.3",
+    "@mpgd/game-services": "0.29.0",
+    "@mpgd/i18n": "0.6.23",
     "@mpgd/lite-shell": "0.1.0"
   },
   "main": "./dist/index.js",

package/templates/lite-overlay/agent/acceptance.md

@@ -11,7 +11,7 @@ Preserve the generated JSON and Markdown in `artifacts/acceptance` or the target
 - Verify renderer teardown removes its own listeners and never updates a replacement view from an old promise.
 - Purchases and rewarded-ad callbacks never grant locally; verify authoritative ledger grants and durable reconciliation before release.
 - Keep unknown native outcomes and late recovery observers; closing one lease must not release another owner's presentation or audio.
-- Verify the game sets its real server session with `setStarterServerSession` and does not rely on the development fallback (read only with `--providers notifications`): `VITE_MPGD_DEV_NOTIFICATION_SESSION` is local-only (its `mpgd-dev` header needs the Vite dev server, so a `pnpm build` never signs in with it), and deployed acceptance uses the identity service's sessions.
+- Verify the game sets its real server session with `setStarterServerSession` (the starter's `guestIdentity.ts` with `VITE_MPGD_IDENTITY_URL`), that store purchases bind to the server player rather than the native shell's local one, and that it does not rely on the development fallback (read only with `--providers notifications`): `VITE_MPGD_DEV_NOTIFICATION_SESSION` is local-only (its `mpgd-dev` header needs the Vite dev server, so a `pnpm build` never signs in with it), and deployed acceptance uses the identity service's sessions.
 
 ## Reddit Devvit
 

package/templates/lite-overlay/agent/brief.md

@@ -11,7 +11,7 @@ Read `AGENTS.md`, the agent manifest, and the `use-mpgd-kit` router before editi
 - Keep recovery above renderer lifetimes; reconcile existing operations on startup and resume without opening SDK UI.
 - Rewarded v2 needs an application-owned durable encrypted journal. An in-memory store is not recovery evidence.
 - Reserve safe-area geometry once and preserve feed scrolling and browser touch gestures.
-- Set the server session with `setStarterServerSession` in `src/main.ts` before `bootstrap()` (a guest backend through `createGuestServerSession`). In a game created with `--providers notifications`, `VITE_MPGD_DEV_NOTIFICATION_SESSION` on the Vite dev server in the `development` mode is a local-only development session for notifications (`src/platform/developmentServerSession.ts`); it never reaches a build, commerce, or a deployed Worker.
+- Set `VITE_MPGD_IDENTITY_URL` to the guest identity Worker: the shared bootstrap (`src/main.ts` and `src/platform/guestIdentity.ts`, the same files as the Phaser template) signs in a server-issued guest during bootstrap and calls `setStarterServerSession` with `createGuestServerSession`, and store purchases bind to that server player. A game with its own identity service calls `setStarterServerSession` before the game services are created instead. In a game created with `--providers notifications`, `VITE_MPGD_DEV_NOTIFICATION_SESSION` on the Vite dev server in the `development` mode is a local-only development session for notifications (`src/platform/developmentServerSession.ts`); it never reaches a build, commerce, or a deployed Worker.
 
 Run `pnpm dev`, `pnpm check`, `pnpm build`, and `pnpm accept`.
 Devvit inline and expanded entries both use the lite renderer. Keep optional engines behind explicit dynamic import boundaries and verify the inline budget.

package/templates/lite-overlay/src/lite/deleteAccountButton.ts

@@ -0,0 +1,173 @@
+import { t } from '../i18n/messages';
+import {
+  createStarterAccountDeletion,
+  deleteAccountConfirmText,
+  deleteAccountOutcomeText,
+  starterAccountDeletionConfirmation,
+  type StarterDeleteAccountOutcome,
+} from '../platform/deleteAccount';
+import { resolveStarterServerSession } from '../platform/serverSession';
+import type { StarterContext } from '../runtime/gameContext';
+
+/**
+ * Delete account for the lite template: a button over the game, shown where
+ * the game has a game-services backend (App Store guideline 5.1.1(v) and
+ * Google Play require deletion in the app). The first tap opens a panel that
+ * says what is deleted and kept; only "Delete permanently" deletes
+ * (`deleteAccount.ts`). Returns the disposer.
+ */
+export function mountDeleteAccountButton(mount: HTMLElement, context: StarterContext): () => void {
+  // No backend yet: read no session, which `once` would pin. A run whose guest sign-in
+  // failed at boot gets the backend after a later sign-in (`onReady`); mount then.
+  if (context.gameServices.accountDeletion === undefined) {
+    const onReady = (context.gameServices as { readonly onReady?: (listener: () => void) => () => void })
+      .onReady;
+    if (onReady === undefined) {
+      return () => undefined;
+    }
+    let dispose = (): void => undefined;
+    const stop = onReady(() => {
+      stop();
+      dispose = mountDeleteAccountButton(mount, context);
+    });
+    return () => {
+      stop();
+      dispose();
+    };
+  }
+  // The commerce client's session (`once`), so the button and the request agree.
+  const session = resolveStarterServerSession({ once: true });
+  const confirmation = starterAccountDeletionConfirmation(session);
+  const deletion = createStarterAccountDeletion({
+    ...(context.gameServices.accountDeletion === undefined
+      ? {}
+      : { client: context.gameServices.accountDeletion }),
+    storage: context.platform.storage,
+    ...(context.platform.secureCredentials === undefined
+      ? {}
+      : { secureCredentials: context.platform.secureCredentials }),
+    signedIn: () => session?.current() !== undefined,
+    // The identity service's confirmation, so an access token alone cannot delete the account.
+    ...(confirmation === undefined ? {} : { requestConfirmation: confirmation }),
+  });
+  if (!deletion.available) {
+    if (context.gameServices.accountDeletion === undefined || session === undefined) {
+      return () => undefined;
+    }
+    // Signed in later (a guest session starts in the background): mount then.
+    let dispose = (): void => undefined;
+    const stop = session.onAuthenticated(() => {
+      stop();
+      dispose = mountDeleteAccountButton(mount, context);
+    });
+    return () => {
+      stop();
+      dispose();
+    };
+  }
+  const locale = context.locale;
+  const previousPosition = mount.style.position;
+  if (getComputedStyle(mount).position === 'static') {
+    mount.style.position = 'relative';
+  }
+  const open = document.createElement('button');
+  open.type = 'button';
+  open.textContent = t(locale, 'deleteAccount');
+  open.style.cssText = 'position:absolute;top:8px;right:8px;padding:6px 10px;';
+  const panel = document.createElement('div');
+  panel.setAttribute('role', 'dialog');
+  panel.setAttribute('aria-modal', 'true');
+  panel.setAttribute('aria-labelledby', 'mpgd-delete-account-message');
+  // Shown by display, not `hidden`: an inline display would override it.
+  panel.style.cssText = 'position:absolute;inset:0;display:none;flex-direction:column;'
+    + 'align-items:center;justify-content:center;gap:16px;padding:24px;box-sizing:border-box;'
+    + 'background:#020617eb;color:#fff;font:15px system-ui,sans-serif;text-align:center;';
+  const message = document.createElement('p');
+  message.id = 'mpgd-delete-account-message';
+  message.style.cssText = 'margin:0;max-width:640px;white-space:pre-line;';
+  const status = document.createElement('p');
+  status.setAttribute('role', 'status');
+  status.setAttribute('aria-live', 'polite');
+  status.style.cssText = 'margin:0;min-height:1.4em;';
+  const confirm = document.createElement('button');
+  confirm.type = 'button';
+  confirm.textContent = t(locale, 'deleteAccountConfirmButton');
+  confirm.style.cssText = 'padding:8px 14px;background:#b91c1c;color:#fff;border:0;';
+  const cancel = document.createElement('button');
+  cancel.type = 'button';
+  cancel.textContent = t(locale, 'deleteAccountCancel');
+  cancel.style.cssText = 'padding:8px 14px;';
+  const actions = document.createElement('div');
+  actions.style.cssText = 'display:flex;gap:12px;';
+  actions.append(confirm, cancel);
+  panel.append(message, actions, status);
+  // Taps on the controls stay out of the game's own tap handling.
+  for (const element of [open, panel]) {
+    element.addEventListener('pointerdown', (event) => event.stopPropagation());
+  }
+  let deleting = false;
+  let signedOut = false;
+  const close = (): void => {
+    if (deleting) {
+      return;
+    }
+    if (signedOut) {
+      // A fresh start drops every in-memory trace of the deleted player.
+      globalThis.location.reload();
+      return;
+    }
+    panel.style.display = 'none';
+    open.focus();
+  };
+  panel.addEventListener('keydown', (event) => {
+    if (event.key === 'Escape') {
+      close();
+    }
+  });
+  open.addEventListener('click', () => {
+    if (deleting) {
+      return;
+    }
+    status.textContent = '';
+    confirm.hidden = false;
+    cancel.textContent = t(locale, 'deleteAccountCancel');
+    message.textContent = deleteAccountConfirmText(locale, false);
+    panel.style.display = 'flex';
+    cancel.focus();
+    void deletion.hasPendingPurchase().then((pending) => {
+      if (pending) {
+        message.textContent = deleteAccountConfirmText(locale, true);
+      }
+    });
+  });
+  cancel.addEventListener('click', close);
+  confirm.addEventListener('click', () => {
+    if (deleting) {
+      return;
+    }
+    deleting = true;
+    confirm.setAttribute('aria-disabled', 'true');
+    status.textContent = t(locale, 'deleteAccountWorking');
+    void deletion.deleteAccount()
+      .catch((): StarterDeleteAccountOutcome => ({ outcome: 'failed', retryable: true }))
+      .then((result) => {
+        deleting = false;
+        confirm.removeAttribute('aria-disabled');
+        status.textContent = deleteAccountOutcomeText(locale, result);
+        if (result.outcome === 'deleted' || result.outcome === 'session-ended') {
+          // Signed out: Close restarts the game.
+          signedOut = true;
+          confirm.hidden = true;
+          open.hidden = true;
+          cancel.textContent = t(locale, 'deleteAccountClose');
+          cancel.focus();
+        }
+      });
+  });
+  mount.append(open, panel);
+  return () => {
+    open.remove();
+    panel.remove();
+    mount.style.position = previousPosition;
+  };
+}

package/templates/lite-overlay/src/lite/restorePurchasesButton.ts

@@ -0,0 +1,63 @@
+import { t } from '../i18n/messages';
+import {
+  createStarterRestorePurchases,
+  restoreOutcomeText,
+  type StarterRestoreOutcome,
+} from '../platform/restorePurchases';
+import type { StarterContext } from '../runtime/gameContext';
+
+/**
+ * Restore Purchases for the lite template: a button over the game, shown
+ * where the target sells through a store (App Review expects it while the
+ * catalog sells a non-consumable such as REMOVE_ADS). The grant still comes
+ * only from the backend ledger (`restorePurchases.ts`). Returns the disposer.
+ */
+export function mountRestorePurchasesButton(mount: HTMLElement, context: StarterContext): () => void {
+  const services = context.gameServices;
+  const restore = createStarterRestorePurchases({
+    gateway: context.platform,
+    // Read at tap time: a run that signs in late gets its recovery client then.
+    monetizationRecovery: () => services.monetizationRecovery,
+    ...(services.ensureSession === undefined ? {} : { ensureSession: services.ensureSession }),
+  });
+  if (!restore.available) {
+    return () => undefined;
+  }
+  const previousPosition = mount.style.position;
+  if (getComputedStyle(mount).position === 'static') {
+    mount.style.position = 'relative';
+  }
+  const button = document.createElement('button');
+  button.type = 'button';
+  button.textContent = t(context.locale, 'restorePurchases');
+  button.style.cssText = 'position:absolute;bottom:8px;left:8px;padding:8px 12px;';
+  const status = document.createElement('p');
+  status.setAttribute('role', 'status');
+  status.style.cssText = 'position:absolute;bottom:44px;left:8px;margin:0;padding:4px 8px;'
+    + 'color:#d6dee8;font:13px system-ui,sans-serif;border-radius:6px;pointer-events:none;';
+  status.setAttribute('aria-live', 'polite');
+  // In the accessibility tree from the start (empty), so its updates are announced.
+  const show = (text: string): void => {
+    status.textContent = text;
+    status.style.background = '#0b1726cc';
+  };
+  // Taps on the button stay out of the game's own tap handling.
+  button.addEventListener('pointerdown', (event) => event.stopPropagation());
+  button.addEventListener('click', () => {
+    // aria-disabled keeps keyboard focus; a second tap joins the running restore.
+    button.setAttribute('aria-disabled', 'true');
+    show(t(context.locale, 'restoreWorking'));
+    void restore.restore()
+      .catch((): StarterRestoreOutcome => ({ outcome: 'failed' }))
+      .then((result) => {
+        button.removeAttribute('aria-disabled');
+        show(restoreOutcomeText(context.locale, result));
+      });
+  });
+  mount.append(button, status);
+  return () => {
+    button.remove();
+    status.remove();
+    mount.style.position = previousPosition;
+  };
+}

package/templates/lite-overlay/src/runtime/createGame.ts

@@ -1,6 +1,8 @@
 import { bindGameAudio } from '@mpgd/game-runtime/audio';
 import type { CanvasSurface, LiteShell } from '@mpgd/lite-shell';
 
+import { mountDeleteAccountButton } from '../lite/deleteAccountButton';
+import { mountRestorePurchasesButton } from '../lite/restorePurchasesButton';
 import { createTapGame } from '../lite/tapGame';
 import type { StarterContext } from './gameContext';
 
@@ -29,6 +31,9 @@ export function createStarterGame(input: {
       console.error('[game-audio]', error);
     },
   });
+  // Mounted before the game so later overlays (such as a settings dialog) stack above it.
+  const disposeRestorePurchases = mountRestorePurchasesButton(mount, input.context);
+  const disposeDeleteAccount = mountDeleteAccountButton(mount, input.context);
   const shell = createTapGame({ mount, title: '__GAME_TITLE__' });
   let disposed = false;
   const dispose = (): void => {
@@ -39,6 +44,9 @@ export function createStarterGame(input: {
     globalThis.removeEventListener('pagehide', onPageHide);
     audio.dispose();
     input.context.gameRuntime.dispose();
+    // In reverse order of mounting: each restores the mount's position it saw.
+    disposeDeleteAccount();
+    disposeRestorePurchases();
     shell.dispose();
   };
   const onPageHide = (event: PageTransitionEvent): void => {

package/templates/notifications-overlay/common/docs/NOTIFICATIONS.md

@@ -40,12 +40,18 @@ left for you.
    `mpgd target init capacitor --providers notifications` to install the two
    plugins into the game-owned shell. Never install
    `@capacitor/push-notifications` next to them.
-6. Advertising on Android: the sample `events` topic is mapped to iOS only.
-   An Android FCM notification cannot carry the opt-out action that the
-   Korean rules require on every advertising push (a settings path in the
-   text does not replace it), and the kit does not render Android
-   advertising natively yet. Do not add an `android` mapping to an
-   advertising topic until it does.
+6. Advertising on Android: an Android FCM notification cannot carry the
+   opt-out action that the Korean rules require on every advertising push
+   (a settings path in the text does not replace it), so the shell renders
+   advertising pushes itself. `mpgd target init capacitor --providers
+   notifications` declares the kit's renderer
+   (`dev.mpgd.capacitor.AdvertisingMessagingService`) in a newly generated
+   Android project; for an existing one it prints the manifest lines to add.
+   `notifications/deployment.json` sets `shellRendersAdvertising: true`,
+   which lets the sample `events` topic map to `android`. The backend sends
+   advertising only to an Android installation whose shell registered the
+   renderer, so an older build of your app receives none. Remove the
+   `android` mapping (and the setting) if you ship a shell without it.
 7. Apps in Toss: register each functional-message template in the console and
    add its code to the topic's `targets.ait` mapping
    (`{ "templateSetCode": "...", "agreement": "required" }`). Apps in Toss
@@ -104,6 +110,22 @@ game's notifications backend is its Devvit server, which keeps the opt-in,
 the records, and the sends, and the Worker serves no `reddit` target. The
 Worker serves the Android, iOS, and Apps in Toss providers.
 
+On Reddit the runtime runs over the Devvit server instead:
+`src/platform/buildGateways/reddit.ts` sets
+`createDevvitNotificationsBackend` as the hosted backend
+(`setStarterHostedNotificationBackend`), and the generated Devvit server
+serves it with `createDevvitNotificationsBackendBridgeHandler`. No session
+is needed: the server answers for the logged-in Reddit user, and a
+logged-out player is asked to log in first. Once Reddit approves the app
+and `integrations.notifications` is `available`, the settings screen shows
+the reminder switches there; advertising and night consent stay off,
+because Devvit delivers `service` and `requested` topics only. A reminder
+the game schedules on Reddit (`runtime.reminders.set`) needs a post or
+comment to open: pass `link` (the post id, `context.postId` from
+`@devvit/web/client`), or give the topic's `reddit` mapping a default
+`link`; the `mpgd-notifications-dispatch` task sends it through Devvit when
+it is due.
+
 The settings screen shows each
 switch from the latest record, read every time it opens and after every
 change, so a choice made on another device shows. A tap reads the records

package/templates/notifications-overlay/common/notifications/deployment.json

@@ -4,5 +4,6 @@
     "name": "__GAME_TITLE__",
     "contact": "REPLACE-WITH-SENDER-PHONE-OR-ADDRESS"
   },
-  "timeZone": "Asia/Seoul"
+  "timeZone": "Asia/Seoul",
+  "shellRendersAdvertising": true
 }

package/templates/notifications-overlay/common/notifications/topics.json

@@ -201,6 +201,9 @@
         "maxPerDay": 1
       },
       "targets": {
+        "android": {
+          "channelId": "mpgd-advertising"
+        },
         "ios": {}
       }
     },