<?xml version="1.0" encoding="utf-8"?>
<!--
    Network Security Configuration for Daily Notification Test App
    
    Allows cleartext HTTP traffic to localhost (10.0.2.2) for Android emulator testing.
    This is required for connecting to http://10.0.2.2:3000 from the Android emulator
    (which maps to host machine's localhost:3000).
    
    Author: Matthew Raymer
    Date: 2025-10-31
-->
<network-security-config>
    <!-- 
        Allow cleartext traffic to Android emulator's localhost alias (10.0.2.2).
        This is safe because:
        1. Only accessible from Android emulator
        2. Only used for development/testing
        3. Does not affect production builds (production should use HTTPS)
    -->
    <domain-config cleartextTrafficPermitted="true">
        <!-- Android emulator's special IP for host machine's localhost -->
        <domain includeSubdomains="false">10.0.2.2</domain>
        <!-- Also allow direct localhost access (for some emulator configurations) -->
        <domain includeSubdomains="false">localhost</domain>
        <domain includeSubdomains="false">127.0.0.1</domain>
    </domain-config>
    
    <!-- 
        Production domains should use HTTPS only (default behavior).
        This configuration only adds exceptions for localhost development.
    -->
</network-security-config>

