tracelet_android

• FIX: Persist geofence ENTER/EXIT events in offline queue and auto-sync to server — events were previously dispatched to the app but never stored in the local SQLite database (Issue #128).
• FIX: Structured event envelope (event_type, event_payload) for geofence events round-trips correctly through getLocations() and insertLocation().
• FIX(sync): Stop POSTing malformed error payloads on failed HTTP sync requests; fix iOS custom-body deadlock in setSyncBodyBuilder (Issue #125).
• FIX(android): Throw NOT_READY error before ready() is called to match iOS parity; previously Android silently ignored SDK calls before initialization (Issue #129).
• FIX(ios): Resolve flutter_rust_bridge has not been initialized on release builds — TraceletCore is now a dynamic framework, preventing dead-code stripping of FRB symbols (Issues #116, #123, #124).
• FIX(android): Resolve Failed to lookup symbol 'frb_get_rust_content_hash' — Rust symbols are now loaded directly from libtracelet_core.so bypassing RTLD_LOCAL isolation (Issues #116, #123).
• PERF(ios): Reduce background motion sensor CPU/battery usage — accelerometer polling is now paused when stationary (Issue #130).
• FIX: Persist historical is_moving state per location record so getLocations() returns accurate values instead of always returning the current live state (Issue #126).

• FIX(ios): prevent dead code stripping of flutter_rust_bridge symbols in release builds.
• FIX(android): implement OEM hardening mitigations and introduce showPowerManager to handle aggressive battery restrictions on specific OEM devices.

• PERF: Optimize database timestamp queries for O(log N) fast filtering and resolve precision bugs (Issue #119).
• FEAT: Implement sslPinningFingerprints natively across iOS and Android with Rust configs.
• FIX: Include pinned fingerprints in SSL verification error logs and messages.
• FIX: Rate limit Android MotionDetector logcat flooding during stillness (Issue #121).
• FIX: Resolve race conditions in tests for Issue 118.
• REFACTOR: Update integration test to use Config.fromMap for comprehensive Tracelet configuration testing.

• FIX: Resolved iOS accelerometer sensitivity mismatch (stationary lock) by normalizing incoming m/s² thresholds to g-force expected by CMMotionManager.
• FIX: Unify motion detection initial state and resume behavior across Android and iOS, preventing incorrect forced states on app launch and correctly resuming saved states.
• FIX: Resolved flutter_rust_bridge dynamic library load failures on release builds for users without use_frameworks! by preserving global symbols during Xcode stripping.

• FIX(ios): safely resolve dynamic symbols when use_frameworks! :linkage => :dynamic is used.

• FIX: Force speed motion manager to evaluate initial speed on Android to prevent the state machine from being permanently stuck in MOVING when indoors (#115).
• FIX: Resolve flutter_rust_bridge has not been initialized crash by ensuring the Rust core is instantiated and initialized before accessing methods (#116).
• CHORE: Sync release versions across all packages.

• CHORE: Sync release versions across all federated packages and update Swift Package Manager configuration.

• CHORE: Align federated package versions and include additional patch updates.

• FEAT: Implement short-lived WakeLocks for transient background tasks (startBackgroundTask / stopBackgroundTask), improving background execution reliability on Android (matches iOS beginBackgroundTask).
• FEAT: The SQLCipher dependency is no longer required for database encryption (Tracelet Core now natively uses AES-GCM in Rust, reducing APK size by ~16MB).
• FEAT: HTTP sync logic has been moved to the tracelet_sync module, which must now be included if you require network synchronization.
• FEAT: Add reverse geocoding functionality. (0fe7b89a)

• FIX(android): bump Android SDK and tracelet_android build.gradle versions to 3.1.14

• Bump "tracelet_android" to 3.1.10.

• FIX(android): conditionally apply kotlin-android plugin to support older flutter SDKs while preventing warnings in modern Flutter environments.
• CHORE(ci): add strict pre-publish flutter build verification step to release.yml.

• Fix iOS SPM publishing

• FIX(android): apply kotlin-android plugin to fix gradle build errors on newer AGP versions.
• FIX(ios): fix SPM source folder paths in release bundling to ensure SDK compiles properly via CocoaPods.
• FIX(ios): fix duplicate module import errors by adding conditional import checks for TraceletSDK.

• CHORE: Sync release versions across workspace.

• FIX(ios): Add missing FlutterFramework dependency to SPM plugin configuration to resolve compilation failures and PlatformExceptions.

• FEAT: Massive Architecture Rewrite — Core algorithms are now powered by a high-performance Rust Core using flutter_rust_bridge.
• FEAT: Smart Motion Mode — Introduced MotionDetectionMode.smart powered by the Rust battery budget engine.
• FEAT: Migrated all platform event channels to use strongly-typed Pigeon bridges.

🎉 Major Features & Improvements

• FEAT: Smart Foreground Notification Visibility (Android) — Added dynamic foreground service notification management. The notification now intelligently hides itself when the app is in the foreground, and reappears seamlessly when the app enters the background. This significantly reduces notification clutter while maintaining OS-level compliance.
• FEAT: Speed-Based Motion Detection Mode — Introduced a new motion detection mode (tl.MotionDetectionMode.speed). In this mode, motion state transitions are driven directly by GPS speed calculations rather than raw accelerometer hardware. This provides enhanced compatibility and reliability on devices with aggressive sensor sleep policies, particularly in vehicular tracking scenarios.
• FEAT: Strongly-Typed Enums Across Bridge — Fully refactored string-based config comparisons to typed enum indices across the Flutter, Pigeon, Android, and iOS layers. This eliminates magic strings and ensures type-safety across the entire plugin bridge.

🐛 Bug Fixes

• FIX (Core): Fixed Accelerometer "Deaf Period" During Stop Countdown — Fixed a critical flaw in both Android and iOS native SDKs where the accelerometer was completely shut down during the stopTimeout countdown. Previously, if the device was still for 5 seconds on a smooth road, it would begin the 60-second stop countdown and ignore any subsequent bumps or shakes. Now, the accelerometer remains active during the countdown and will correctly abort the stationary transition if motion resumes (#85).
• FIX (iOS): Resolved Native Permission Prompt Loop — Fixed an issue where reinstalling the app on iOS would bypass the native "Change to Always Allow" permission dialog and incorrectly redirect users to the iOS Settings app. TraceletHasRequestedAlways is now properly reset upon notDetermined OS state.
• FIX (Core): Corrected Exponential Retry Backoff Scaling — Fixed a critical unit discrepancy between Dart and Swift for retryBackoffCap and retryBackoffBase. Time values are now properly cast as milliseconds instead of seconds, resolving a severe bug where HTTP retries fired every 60ms during network failure, causing excessive CPU/network thrashing and a massive 58KB+ log flood.
• FIX (Core): Resolved Location Stream Dropping Events — Refactored the core Tracelet.locationStream pipeline. Replaced the faulty asyncMap batch processing with a highly robust .expand() implementation. The Tracelet.locationStream now correctly parses, type-casts, and guarantees delivery of every individual Location object without throwing type '_Map<Object?, Object?>' is not a subtype of type 'Map<String, dynamic>' or silently discarding valid coordinates.
• FIX (Android): Prevent LocationEngine.stop from unintentionally overriding the global stateManager.enabled flag during speed-based motion transitions.
• FIX (Example): Updated the example app's initialization config to enforce MotionDetectionMode.accelerometer as the default to ensure immediate indoor responsiveness upon installation.

• Bump "tracelet_ios" to 2.0.8.

2026-05-22

Changes

---

Packages with breaking changes:

• There are no breaking changes in this release.

Packages with other changes:

• tracelet_android - v2.0.7
• tracelet_ios - v2.0.7
• tracelet - v2.0.7
• tracelet_doctor - v1.0.2

Packages with dependency updates only:

Packages listed below depend on other packages in this workspace that have had changes. Their versions have been incremented to bump the minimum dependency versions of the packages they depend upon in this project.

• tracelet - v2.0.7
• tracelet_doctor - v1.0.2

---

• FIX(interface): correct intToAuthStatus permission index mappings ([#80](https://github.com/Ikolvi/Tracelet/issues/80)). (8cfd7f51)

• CHORE: Update tracelet_platform_interface constraint to ^2.0.6.
• CHORE: Bump native plugin implementation version to 2.0.6.

• CHORE: Version bump for monorepo consistency and package lockstep alignment.
• CHORE: Update tracelet_platform_interface constraint to ^2.0.5.
• CHORE: Bump native plugin implementation version to 2.0.5.

• CHORE: Version bump for monorepo consistency and native SDK alignment.
• CHORE: Update tracelet_platform_interface constraint to ^2.0.4.

• FIX: Removed unreliable timestamp drift heuristic from location spoofing detection.

• CHORE: Version bump for iOS status bar fix consistency.
• CHORE: Update tracelet_platform_interface constraint to ^2.0.1.

• BREAKING: Adopts an "on-demand" dependency model. Core SDK no longer bundles GMS Location, SQLCipher, or Play Integrity by default, reducing APK size by ~16 MB. Developers must now explicitly add these to their android/app/build.gradle if required.
• BREAKING: Migrated to Pigeon for all platform-to-native communication, replacing MethodChannel with type-safe generated interfaces.
• FEAT: Full support for AOSP-only environments via standard LocationManager fallback when GMS is unavailable.
• CHORE: Bump native tracelet-sdk constraint to 2.0.0.

2: 3: - CHORE: Bump native tracelet-sdk constraint to 1.1.4. 4: 5: ## 1.9.2

• FIX: Tracelet.locationStream no longer goes silent when flutter_overlay_window (or any FlutterEngineGroup plugin) creates a secondary in-process FlutterEngine. The primary-instance guard (#51) unconditionally skipped EventDispatcher re-binding for all secondary engines, including in-process overlay engines that attach on the main thread. A Looper-based discriminator now selectively re-binds the dispatcher for main-thread overlay engines while preserving the full skip for off-thread headless/Firebase engines (#51 fix intact).
• FIX: destroyAll() now guards all background-critical subsystems when stopOnTerminate: false (#65). httpSyncManager.stop(), scheduleManager.stop(), and stopHeartbeat() were still called unconditionally on every swipe-to-dismiss, killing HTTP sync and heartbeat even when background tracking should survive. Fixed in native tracelet-sdk 1.1.2.
• TEST: Added secondaryMainThreadEngine_rebindsDispatcherOnly and secondaryBackgroundThreadEngine_fullySkipped to PluginSecondaryEngineGuardTest covering both discriminator branches. Existing headless tests updated to stub isMainThread=false.
• CHORE: Bump native tracelet-sdk constraint to 1.1.2.

• FIX: destroyAll() now respects stopOnTerminate: false for continuous (mode 0) and geofence (mode 1) tracking modes (#63). locationEngine.destroy() was unconditionally called, racing with LocationService.onTaskRemoved() native bootstrap. PeriodicLocationWorker static refs (eventSender, httpSyncManager) are also now preserved when keepPeriodicAlive is true.
• CHORE: Bump native tracelet-sdk constraint to 1.1.1.

• FIX: LocationService no longer crashes the host app with RemoteServiceException: Context.startForegroundService() did not then call Service.startForeground() (#59). Reproducible on real devices when using periodicUseForegroundService: true. Root cause: onStartCommand only promoted to foreground for ACTION_START, but the system can deliver intents for other actions (and null-intent sticky restarts after a system kill) under the same foreground-service contract. Fixed in native tracelet-sdk 1.1.0 by always promoting at the top of onStartCommand.
• FIX: Picks up the tracelet_platform_interface 1.9.0 fix that restores extras and vertices propagation for addGeofence (#58). No native-side changes for this part.
• CHORE: Bump native tracelet-sdk constraint to 1.1.0.
• TEST: Added Robolectric LocationServiceForegroundContractTest covering all 5 entry paths (ACTION_START, ACTION_STOP, ACTION_UPDATE_NOTIFICATION, ACTION_BUTTON, null-intent sticky restart).
• TEST: Added Robolectric regression test for EventDispatcher headless-fallback geofence extras forwarding.

• PERF: Reduce first-fix latency on stationary → moving transitions. LocationEngine.changePace(true) now fires an additional one-shot getCurrentLocation() so a fresh GPS fix arrives as soon as the hardware is warm, instead of waiting for locationUpdateInterval on the continuous stream. The one-shot is guarded by a CancellationTokenSource that is cancelled on stop() (#54).
• FIX: After a manual Tracelet.changePace(false), MotionDetector’s accelerometer + significant-motion listeners are now re-engaged so real motion can resume tracking. Previously the SDK could get stuck in a permanent stationary state with no sensors listening.
• FIX: Bump Android native SDK to 1.0.12.

• FIX: Geofence extras are now delivered correctly to onGeofence callbacks. Previously, extras were persisted via Map.toString() and could not be parsed back into a Map, causing GeofenceEvent.extras to always arrive empty (#51 follow-up).
• FIX: Location extras are now included in read-back location maps (previously silently dropped in cursorToLocation).
• FIX: Bump Android native SDK to 1.0.11.

• FIX: Guard against secondary FlutterEngine (e.g. Firebase background messaging) overwriting SDK singleton's event sender and callbacks (#51).

• FIX: Killed-state tracking now works reliably — stopBootTracking() deferred from sdk.initialize() to sdk.ready() so boot-mode native tracking (LocationEngine + HttpSyncManager) survives until the Dart side explicitly takes over (#50).
• FIX: Bump Android SDK to 1.0.10.

• FEAT: Add syncInterval support — timer-based HTTP sync via ScheduledExecutorService (#50).
• FEAT: Bump native SDK dependency to exact version 1.0.9.

• FIX: HTTP sync payload now uses canonical is_moving (snake_case) and ISO 8601 timestamps, matching iOS format (#48).
• FIX: Bump native SDK dependency to exact version 1.0.8.

• CHORE: Align federated package versions and include additional patch updates.
• FIX: Bump native SDK dependency to exact version 1.0.7.

• FIX: getCurrentPosition(samples: 1) now uses requestLocationUpdates instead of FusedLocationProviderClient.getCurrentLocation() — forces a fresh GPS fix with proper timeout instead of returning stale cached locations (#46).
• FIX: Guard onAttachedToEngine callback wiring with primaryInstance — prevents headless FlutterEngine from overwriting foreground httpSyncManager callbacks, which caused requestFreshHeaders to timeout (10s) or return notImplemented.
• PERF: Remove per-batch onRequestFreshHeaders invocation — eliminates MethodChannel round-trip before every sync request. Token refresh handled by onAuthorizationRequired on 401.
• FIX: Bump native SDK dependency to exact version 1.0.6.
• FIX: Privacy zones, audit trail, and encryption APIs now work before ready() — guards relaxed from isReady to ::manager.isInitialized.

• FIX: getCurrentPosition() falls back to last known location when FusedLocationProviderClient.getCurrentLocation() returns null (e.g. emulator, GPS-off) — fixes LOCATION_UNAVAILABLE errors (#46).
• FIX: Add public clearPendingPermissionCallback() to TraceletSdk — resolves cross-module internal visibility error.
• FIX: Bump native SDK dependency to exact version 1.0.5.

• FIX: Add isReady guards to all Android SDK methods — prevents UninitializedPropertyAccessException when called before ready() (re-fixes #46).
• FIX: Pin native SDK dependency to exact version 1.0.4 — prevents auto-resolving to incompatible newer releases.

• FIX: Add isReady guards to all Android SDK methods — prevents UninitializedPropertyAccessException when called before ready() (re-fixes #46).
• CHORE: Bump native SDK dependency com.ikolvi:tracelet-sdk 1.0.2 → 1.0.3.

• FIX: Guard soundManager access in handleMotionStateChange() and destroyAll() — prevents UninitializedPropertyAccessException if motion detector fires before full initialization.
• FIX: Use LocationManagerCompat.isLocationEnabled() instead of LocationManager.isLocationEnabled() — fixes crash on Android API 26/27.
• FIX: Enterprise dependencies (SQLCipher, Play Integrity, security-crypto) now degrade gracefully when absent — runtime Class.forName checks prevent NoClassDefFoundError.
• FIX: DeviceAttestor uses lazy IntegrityManagerFactory initialization — prevents crash when Play Integrity is not on the classpath.
• REFACTOR: Refined ProGuard/R8 consumer rules — narrower keep rules, -dontwarn for optional deps.
• TEST: Add destroyAll_doesNotCrash_withoutSoundManager unit test.

• CHORE: Version bump for iOS periodic mode location indicator fix.

• FIX: ConfigManager null-merge — partial setConfig() no longer overwrites existing non-null values (e.g. HTTP URL) with null defaults.
• FIX: PeriodicLocationWorker catch block now re-schedules the next exact alarm before returning Result.retry(), preventing permanent chain breaks on exceptions.
• FIX: GeofenceBroadcastReceiver bootstraps SDK when app is killed and geofenceManager is null, instead of silently dropping events.
• FIX: Align location map format — isCharging → is_charging, flat coords → nested coords map, add activity map, isMock → mock.
• FIX: DB cursorToLocation outputs is_charging in battery map.
• FEAT: Add destroySyncedLocations() — deletes only synced locations from the database.
• FEAT: Auto-purge synced locations after successful HTTP sync in HttpSyncManager.
• TEST: Add 28 location map format tests, 5 unit tests for ConfigManager null-merge and destroySyncedLocations.

• FIX: Wire headlessFallback in eventSenderFactory — fixes geofence events silently dropped on task removal (#43).
• FIX: Add missing sendTrip/sendBudgetAdjustment to NoOpEventSender.
• FEAT: Rewrite EventDispatcher to use Pigeon TraceletEventApi FlutterApi.
• FEAT: Add TraceletHostApiImpl for type-safe Pigeon HostApi dispatch.
• REFACTOR: Extract native SDK to standalone sdk/android/ module (Maven Central: com.ikolvi:tracelet-sdk).
• REFACTOR: Remove misleading headless wiring dead code in LocationService.startBootTracking().
• CHORE: Enable returnDefaultValues for Android unit tests.

• FEAT: Rewrite EventDispatcher to use Pigeon TraceletEventApi FlutterApi instead of EventChannels.
• FEAT: Add TraceletHostApiImpl for type-safe Pigeon HostApi dispatch.
• REFACTOR: Extract native SDK code to sdk/android/ module.
• CHORE: Update cross-package dependency constraints to ^1.6.3-alpha.1.

• FEAT: Add 401-aware retry — on HTTP 401 Unauthorized, invoke headless headers callback to refresh token, then retry once with updated dynamic headers.

• FEAT: Add SSL certificate pinning — support for PEM certificates (CertificatePinner) and SHA-256 fingerprints (HandshakeCertificates) via OkHttp TLS.
• FEAT: Add dynamic HTTP headers with runtime callback support and headless background execution.
• FEAT: Add route context — attach arbitrary metadata to synced locations.
• FEAT: Add custom sync body builder with headless callback support.
• TEST: Add ConfigManagerSyncFeaturesTest — 12 Robolectric unit tests for sync features.
• CHORE: Add okhttp-tls:5.3.2 dependency.
• CHORE: Update tracelet_platform_interface dependency constraint to ^1.6.0.

• FEAT: Add boot-mode HttpSyncManager — locations are auto-synced to the server even when the app is killed or the device reboots.
• FEAT: Periodic-mode (WorkManager/ExactAlarm) now creates a dedicated boot-mode HttpSyncManager so periodic locations sync without the Flutter engine.
• TEST: Add Robolectric unit tests for boot-mode HTTP sync lifecycle.
• DOCS: Add "Background / Killed-State Sync" section to HTTP-SYNC.md.
• CHORE: Update tracelet_platform_interface dependency constraint to ^1.5.0.