[lauridskern]

The Storage tool now works for native iOS and Android apps, not only React Native ones. Two native test apps cover it, and every store type below was checked on a real simulator or emulator.

What changed

Native storage	Before	Now
SwiftData (default.store)	Not found	Opens as a SQLite database. When an app has an App Group, SwiftData keeps this store in the group container.
App Group containers (iOS)	Not read	Read under AppGroup/<id>/, including their shared UserDefaults. Reset empties them too.
Core Data / custom-named SQLite	Only common file extensions	Any file with a -wal/-shm companion counts as SQLite. Core Data and SwiftData dates show as dates in the table grid.
Files (Codable JSON, plists, NSKeyedArchiver, text)	Listed only	Clicking a file opens a preview: JSON and plists as a tree, NSKeyedArchiver object graphs resolved, text as is. The new mobile_app_storage_file tool does the same for the model. Binary content is withheld.
EncryptedSharedPreferences	Ciphertext shown as values	Marked encrypted
Proto DataStore	Listed only	Decoded without a schema: numbered fields, repeats indexed, nested messages flattened

Also fixed:

• Database row counts: some showed "?" because one sqlite3 process per table ran in parallel, and the processes failed on the write-ahead log lock. Every table is now described and counted in single queries.
• Table paging: if you paged quickly, a slower response for an earlier page could replace a newer one. The panel now keeps one open table or file at a time and drops any response for one that's been replaced.

Privacy (after merging #29)

File previews follow the storage redaction from #29, with no panel-only bypass:

• Structured files: JSON, plist and archive contents are filtered as one value, using the file name as context. A file named like session.json is withheld entirely.
• Text files: withheld when they contain credential-like text.
• Binary files: return no content.
• Paths: sensitive paths are rejected.
• Order: filtering happens before anything is cut short.

Proto DataStore entries go through the same entry filter as every other store. readTable keeps #29's column projection and redaction on top of this branch's single describe-tables query. docs/storage-privacy.md now covers the file tool.

The panel now names a cleared store from its own snapshot, since the server no longer echoes the name. Before this, it read "Cleared store."

Test apps

• examples/native-storage-ios: a SwiftUI app writing UserDefaults (every value type), App Group defaults, Core Data, SwiftData, a Codable JSON file, a binary plist, an NSKeyedArchiver archive and text. run.sh <UDID> signs it ad hoc, because the simulator only creates the App Group container when the entitlement is signed.
• examples/native-storage-android: a Kotlin app (no Compose or code generation) writing SharedPreferences, EncryptedSharedPreferences, SQLite, DataStore Preferences and Proto, MMKV and files. The release build is debuggable so run-as can read it.

Verification

• Automated: npm test passes (783 tests). New tests use real files taken from the test apps:
  • native store detection
  • Proto DataStore decoding
  • EncryptedSharedPreferences
  • App Group path mapping, including rejection of unknown groups and ..
  • file previews in every format, including NSKeyedArchiver cycles
  • SQLite table description
  • the paging race, with a test that fails under the old check
• Packaging: test:package, test:codex-plugin and check:mcp-budget pass.
• Manual:
  • iOS: checked on an iOS 27 simulator with the native app, in the panel too.
  • Android: checked on an Android 36 emulator. Every store reads correctly through the plugin's server code.

Notes

• Reset and App Groups: Reset now also empties App Group containers, since SwiftData data would otherwise survive a reset. Group containers can be shared with other apps from the same developer.
• Keychain: not read. It isn't in the app's data directory, and its items are encrypted.
• MMKV values: an MMKV integer 1 still reads as true, because MMKV stores no types and the bytes are identical.
• Telemetry: new file operation (app_storage.operation.*) and ui.storage.file timing. File contents are never sent.
• Version: 0.1.165, one above main.