Android
@shrug/androidv2026.10.13.1
01README
Swamp-managed Android device over ADB. One model type (@shrug/android/device) drives the local adb CLI (via Deno.Command, behind an injectable exec seam) to pull device state into typed, versioned snapshots and to manage apps through gated, auditable mutations. Reads (all non-root): device identity + capability ceiling + owners (syncDevice), full app inventory joined from pm list + dumpsys package (syncPackages), per-app usage + standby buckets (syncUsage), on-disk code sizes (syncStorage), user-facing runtime permissions with a privacy-category rollup (syncPermissions), estimated per-app power use in mAh (syncBattery), special-access appops holders (syncAppControls), and per-app notification posture (syncNotifications); a fan-out sync captures the whole surface in one model-lock run. Management (dry-run by default, confirm=true to apply, protected-app guard, every run audited to a mutation/reconcile log): disable/enable/uninstall/restore (single + fan-out), force-stop, clear-data, set an appop, and a declarative desired-state reconcile (applyDesired). syncLabels resolves human-readable app names from Play / F-Droid. Privacy-conscious: notification posture is derived from the POST_NOTIFICATIONS grant, never from notification content, and nothing leaves the device except the opt-in store-label lookups. Ships an app-classification report that flags unused junk, enriched by the Universal Debloater Alliance (UAD-NG) community list. Pure parsers over captured adb stdout make the whole surface unit-testable with no device.
02Behaviors
@shrug/android/devicev2026.10.13.1android.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| serial? | string | adb device serial (-s). Pin it when a stale emulator or a second device |
| adbBinary? | string | Path to the adb binary |
fn syncDevice()
Capture device identity, capability ceiling (root), users, and owners
fn syncPackages()
Capture the full installed-package inventory joined with metadata
fn syncUsage()
Capture per-app usage stats (last-used, launch count, standby bucket)
fn syncStorage()
Capture per-app code size on disk and totals
fn sync()
Fan-out: capture the full read surface (device, packages, usage,
fn syncPermissions(user?: number, scope?: enum)
Capture per-app runtime permission grants (the user-facing,
| Argument | Type | Description |
|---|---|---|
| user? | number | Android user id (0 = owner) |
| scope? | enum | Limit to third-party apps (default) or include system apps |
fn syncBattery()
Capture estimated per-app power use (mAh) from batterystats,
fn syncAppControls(ops?: array)
Capture holders of special-access appops (display-over-other-apps,
| Argument | Type | Description |
|---|---|---|
| ops? | array | appops op names to query (default: the special-access set) |
fn syncNotifications(user?: number, scope?: enum)
Capture per-app notification posture from the POST_NOTIFICATIONS
| Argument | Type | Description |
|---|---|---|
| user? | number | Android user id (0 = owner) |
| scope? | enum | Limit to third-party apps (default) or include system apps |
fn disableApp(pkg: string, user?: number, confirm?: boolean, force?: boolean)
Disable an app for a user (pm disable-user). Reversible. Dry-run unless confirm=true.
| Argument | Type | Description |
|---|---|---|
| pkg | string | Package name to act on |
| user? | number | Android user id (0 = owner) |
| confirm? | boolean | Actually run. Default false = dry-run preview, device untouched. |
| force? | boolean | Override the protected-app guard (management tooling). |
fn enableApp(pkg: string, user?: number, confirm?: boolean, force?: boolean)
Re-enable a disabled app (pm enable). Dry-run unless confirm=true.
| Argument | Type | Description |
|---|---|---|
| pkg | string | Package name to act on |
| user? | number | Android user id (0 = owner) |
| confirm? | boolean | Actually run. Default false = dry-run preview, device untouched. |
| force? | boolean | Override the protected-app guard (management tooling). |
fn uninstallApp(pkg: string, user?: number, confirm?: boolean, force?: boolean)
Uninstall an app for a user (pm uninstall --user). Restorable. Dry-run unless confirm=true.
| Argument | Type | Description |
|---|---|---|
| pkg | string | Package name to act on |
| user? | number | Android user id (0 = owner) |
| confirm? | boolean | Actually run. Default false = dry-run preview, device untouched. |
| force? | boolean | Override the protected-app guard (management tooling). |
fn restoreApp(pkg: string, user?: number, confirm?: boolean, force?: boolean)
Restore an uninstalled-for-user app (cmd package install-existing). Dry-run unless confirm=true.
| Argument | Type | Description |
|---|---|---|
| pkg | string | Package name to act on |
| user? | number | Android user id (0 = owner) |
| confirm? | boolean | Actually run. Default false = dry-run preview, device untouched. |
| force? | boolean | Override the protected-app guard (management tooling). |
fn disableApps(packages: array, user?: number, confirm?: boolean, force?: boolean)
Fan-out disable: act on many packages in one lock (repo rule 6). Dry-run unless confirm=true.
| Argument | Type | Description |
|---|---|---|
| packages | array | Packages to act on |
| user? | number | |
| confirm? | boolean | Actually run. Default false = dry-run preview, device untouched. |
| force? | boolean |
fn uninstallApps(packages: array, user?: number, confirm?: boolean, force?: boolean)
Fan-out uninstall for a user. Dry-run unless confirm=true. Restorable.
| Argument | Type | Description |
|---|---|---|
| packages | array | Packages to act on |
| user? | number | |
| confirm? | boolean | Actually run. Default false = dry-run preview, device untouched. |
| force? | boolean |
fn applyDesired(desired?: array, user?: number, confirm?: boolean, force?: boolean)
Reconcile the device to a declarative desired-state list
| Argument | Type | Description |
|---|---|---|
| desired? | array | Desired per-package states. If omitted, read from globalArguments.desired. |
| user? | number | |
| confirm? | boolean | Actually converge. Default false = dry-run reconcile plan, device untouched. |
| force? | boolean | Override the protected-app guard for destructive steps. |
fn forceStop(pkg: string, user?: number, confirm?: boolean, force?: boolean)
Force-stop a running app (am force-stop). Reversible. Dry-run unless confirm=true.
| Argument | Type | Description |
|---|---|---|
| pkg | string | Package name to act on |
| user? | number | Android user id (0 = owner) |
| confirm? | boolean | Actually run. Default false = dry-run preview, device untouched. |
| force? | boolean | Override the protected-app guard (management tooling). |
fn clearAppData(pkg: string, user?: number, confirm?: boolean, force?: boolean)
Clear an app's data/caches for a user (pm clear). DESTRUCTIVE + protected-guarded. Dry-run unless confirm=true.
| Argument | Type | Description |
|---|---|---|
| pkg | string | Package name to act on |
| user? | number | Android user id (0 = owner) |
| confirm? | boolean | Actually run. Default false = dry-run preview, device untouched. |
| force? | boolean | Override the protected-app guard (management tooling). |
fn syncLabels(scope?: enum, refresh?: boolean, limit?: number, delayMs?: number)
Resolve human-readable app names from Play / F-Droid (og:title) and
| Argument | Type | Description |
|---|---|---|
| scope? | enum | |
| refresh? | boolean | Re-fetch even if already cached |
| limit? | number | Cap new lookups this run (0 = no cap) |
| delayMs? | number | Throttle between HTTP lookups (ms) |
fn getAppOps(pkg: string, user?: number)
Read per-app operation modes (cmd appops get). Read-only.
| Argument | Type | Description |
|---|---|---|
| pkg | string | |
| user? | number |
fn setAppOp(pkg: string, op: string, mode: enum, confirm?: boolean)
Set one appops op mode for an app (cmd appops set). Dry-run unless confirm=true.
| Argument | Type | Description |
|---|---|---|
| pkg | string | |
| op | string | appops op name, e.g. RUN_IN_BACKGROUND, FINE_LOCATION |
| mode | enum | allow | deny | ignore | default | foreground |
| confirm? | boolean | Actually set. Default false = dry-run preview, device untouched. |
Resources
device-info(infinite)— Device identity, capability ceiling, users, and owners
packages(infinite)— Full installed-package inventory (pm list + dumpsys join)
usage(infinite)— Per-app last-used, launch count, and standby bucket
storage(infinite)— Per-app code size on disk and app/data/cache totals
mutation-log(infinite)— Audit of the last app-disposition run (dry-run plan or applied result)
reconcile-log(infinite)— Audit of the last desired-state reconcile (plan + applied steps)
appops(infinite)— Per-app operation modes (appops get) for one package
labels(infinite)— Human-readable app names resolved from Play / F-Droid (cached)
permissions(infinite)— Per-app runtime permission grants plus a privacy-category rollup
battery(infinite)— Estimated power use (mAh): global components + per-app totals
app-controls(infinite)— Holders of special-access appops (overlay, all-files, install, ...)
notifications(infinite)— Per-app POST_NOTIFICATIONS posture (can the app notify?)
03Reports
@shrug/android/app-classificationmodel
app-classification.ts
Per third-party app: category + keep/review/remove verdict from usage,
androidappscleanupinventory
04Stats
A
93 / 100
Downloads
1
Archive size
144.9 KB
- Has README or module doc2/2earned
- README has a code example1/1earned
- README is substantive1/1earned
- Most symbols documented1/1earned
- No slow types (deprecated)1/1earned
- Dependencies pass trust audit2/2earned
- Has description1/1earned
- Platform support declared (or universal)2/2earned
- License1/2partial
no SPDX license declared
- Verified public repository2/2earned
Repository
https://github.com/shrugpw/swamp-androiddeno-command1 accepted
Spawns a subprocess with Deno.Command().
- models/lib/adb.ts:35 — core mechanism -- this extension IS an adb CLI wrapper; args are fixed argv, never shell-interpolated (see README)
long-line1 accepted
A source line over 500 characters, which can hide embedded data.
- reports/_lib/uad-data.ts:7 — generated single-line data map (see header; regenerated, not hand-edited)
credentials-sensitive-field2 accepted
A field that looks like a secret but is not marked sensitive, so its value is not vaulted.
- models/android.ts:316 — not a secret -- batterystats UID label such as u0a201
- models/lib/parse.ts:416 — not a secret -- batterystats UID label such as u0a201
06Platforms
07Labels