tracelet_ios

• FIX: Persist geofence ENTER/EXIT events in offline queue and auto-sync to server — events were previously dispatched to the app but never stored in the local SQLite database (Issue #128).
• FIX: Structured event envelope (event_type, event_payload) for geofence events round-trips correctly through getLocations() and insertLocation().
• FIX(sync): Stop POSTing malformed error payloads on failed HTTP sync requests; fix iOS custom-body deadlock in setSyncBodyBuilder (Issue #125).
• FIX(android): Throw NOT_READY error before ready() is called to match iOS parity; previously Android silently ignored SDK calls before initialization (Issue #129).
• FIX(ios): Resolve flutter_rust_bridge has not been initialized on release builds — TraceletCore is now a dynamic framework, preventing dead-code stripping of FRB symbols (Issues #116, #123, #124).
• FIX(android): Resolve Failed to lookup symbol 'frb_get_rust_content_hash' — Rust symbols are now loaded directly from libtracelet_core.so bypassing RTLD_LOCAL isolation (Issues #116, #123).
• PERF(ios): Reduce background motion sensor CPU/battery usage — accelerometer polling is now paused when stationary (Issue #130).
• FIX: Persist historical is_moving state per location record so getLocations() returns accurate values instead of always returning the current live state (Issue #126).

• FIX(ios): prevent dead code stripping of flutter_rust_bridge symbols in release builds.
• FIX(android): implement OEM hardening mitigations and introduce showPowerManager to handle aggressive battery restrictions on specific OEM devices.

• PERF: Optimize database timestamp queries for O(log N) fast filtering and resolve precision bugs (Issue #119).
• FEAT: Implement sslPinningFingerprints natively across iOS and Android with Rust configs.
• FIX: Include pinned fingerprints in SSL verification error logs and messages.
• FIX: Rate limit Android MotionDetector logcat flooding during stillness (Issue #121).
• FIX: Resolve race conditions in tests for Issue 118.
• REFACTOR: Update integration test to use Config.fromMap for comprehensive Tracelet configuration testing.

• FIX: Resolved iOS accelerometer sensitivity mismatch (stationary lock) by normalizing incoming m/s² thresholds to g-force expected by CMMotionManager.
• FIX: Unify motion detection initial state and resume behavior across Android and iOS, preventing incorrect forced states on app launch and correctly resuming saved states.
• FIX: Resolved flutter_rust_bridge dynamic library load failures on release builds for users without use_frameworks! by preserving global symbols during Xcode stripping.

• FIX(ios): safely resolve dynamic symbols when use_frameworks! :linkage => :dynamic is used.

• FIX: Force speed motion manager to evaluate initial speed on Android to prevent the state machine from being permanently stuck in MOVING when indoors (#115).
• FIX: Resolve flutter_rust_bridge has not been initialized crash by ensuring the Rust core is instantiated and initialized before accessing methods (#116).
• CHORE: Sync release versions across all packages.

• CHORE: Sync release versions across all federated packages and update Swift Package Manager configuration.

• CHORE: Align federated package versions and include additional patch updates.

• FEAT: Implement short-lived WakeLocks for transient background tasks (startBackgroundTask / stopBackgroundTask), improving background execution reliability on Android (matches iOS beginBackgroundTask).
• FEAT: The SQLCipher dependency is no longer required for database encryption (Tracelet Core now natively uses AES-GCM in Rust, reducing APK size by ~16MB).
• FEAT: HTTP sync logic has been moved to the tracelet_sync module, which must now be included if you require network synchronization.
• FEAT: Add reverse geocoding functionality. (0fe7b89a)

• FIX(ios): prevent dead code stripping of flutter_rust_bridge symbols in SPM apps by referencing them explicitly in TraceletIosPlugin

• FIX(ios): prevent dead code stripping of flutter_rust_bridge symbols in iOS release builds by setting DEAD_CODE_STRIPPING=NO in CocoaPods xcconfig.

• FIX(android): conditionally apply kotlin-android plugin to support older flutter SDKs while preventing warnings in modern Flutter environments.
• CHORE(ci): add strict pre-publish flutter build verification step to release.yml.

• Fix iOS SPM publishing

• FIX(android): apply kotlin-android plugin to fix gradle build errors on newer AGP versions.
• FIX(ios): fix SPM source folder paths in release bundling to ensure SDK compiles properly via CocoaPods.
• FIX(ios): fix duplicate module import errors by adding conditional import checks for TraceletSDK.

• CHORE: Sync release versions across workspace.

• FIX(ios): Add missing FlutterFramework dependency to SPM plugin configuration to resolve compilation failures and PlatformExceptions.

• FEAT: Massive Architecture Rewrite — Core algorithms are now powered by a high-performance Rust Core using flutter_rust_bridge.
• FEAT: Smart Motion Mode — Introduced MotionDetectionMode.smart powered by the Rust battery budget engine.
• FEAT: Migrated all platform event channels to use strongly-typed Pigeon bridges.

🎉 Major Features & Improvements

• FEAT: Smart Foreground Notification Visibility (Android) — Added dynamic foreground service notification management. The notification now intelligently hides itself when the app is in the foreground, and reappears seamlessly when the app enters the background. This significantly reduces notification clutter while maintaining OS-level compliance.
• FEAT: Speed-Based Motion Detection Mode — Introduced a new motion detection mode (tl.MotionDetectionMode.speed). In this mode, motion state transitions are driven directly by GPS speed calculations rather than raw accelerometer hardware. This provides enhanced compatibility and reliability on devices with aggressive sensor sleep policies, particularly in vehicular tracking scenarios.
• FEAT: Strongly-Typed Enums Across Bridge — Fully refactored string-based config comparisons to typed enum indices across the Flutter, Pigeon, Android, and iOS layers. This eliminates magic strings and ensures type-safety across the entire plugin bridge.

🐛 Bug Fixes

• FIX (Core): Fixed Accelerometer "Deaf Period" During Stop Countdown — Fixed a critical flaw in both Android and iOS native SDKs where the accelerometer was completely shut down during the stopTimeout countdown. Previously, if the device was still for 5 seconds on a smooth road, it would begin the 60-second stop countdown and ignore any subsequent bumps or shakes. Now, the accelerometer remains active during the countdown and will correctly abort the stationary transition if motion resumes (#85).
• FIX (iOS): Resolved Native Permission Prompt Loop — Fixed an issue where reinstalling the app on iOS would bypass the native "Change to Always Allow" permission dialog and incorrectly redirect users to the iOS Settings app. TraceletHasRequestedAlways is now properly reset upon notDetermined OS state.
• FIX (Core): Corrected Exponential Retry Backoff Scaling — Fixed a critical unit discrepancy between Dart and Swift for retryBackoffCap and retryBackoffBase. Time values are now properly cast as milliseconds instead of seconds, resolving a severe bug where HTTP retries fired every 60ms during network failure, causing excessive CPU/network thrashing and a massive 58KB+ log flood.
• FIX (Core): Resolved Location Stream Dropping Events — Refactored the core Tracelet.locationStream pipeline. Replaced the faulty asyncMap batch processing with a highly robust .expand() implementation. The Tracelet.locationStream now correctly parses, type-casts, and guarantees delivery of every individual Location object without throwing type '_Map<Object?, Object?>' is not a subtype of type 'Map<String, dynamic>' or silently discarding valid coordinates.
• FIX (Android): Prevent LocationEngine.stop from unintentionally overriding the global stateManager.enabled flag during speed-based motion transitions.
• FIX (Example): Updated the example app's initialization config to enforce MotionDetectionMode.accelerometer as the default to ensure immediate indoor responsiveness upon installation.

• Bump "tracelet_ios" to 2.0.8.

2026-05-22

Changes

---

Packages with breaking changes:

• There are no breaking changes in this release.

Packages with other changes:

• tracelet_android - v2.0.7
• tracelet_ios - v2.0.7
• tracelet - v2.0.7
• tracelet_doctor - v1.0.2

Packages with dependency updates only:

Packages listed below depend on other packages in this workspace that have had changes. Their versions have been incremented to bump the minimum dependency versions of the packages they depend upon in this project.

• tracelet - v2.0.7
• tracelet_doctor - v1.0.2

---

• FIX(interface): correct intToAuthStatus permission index mappings ([#80](https://github.com/Ikolvi/Tracelet/issues/80)). (8cfd7f51)

• CHORE: Update tracelet_platform_interface constraint to ^2.0.6.
• CHORE: Bump native TraceletSDK dependency to 2.0.6.

• CHORE: Version bump for monorepo consistency and package lockstep alignment.
• CHORE: Update tracelet_platform_interface constraint to ^2.0.5.
• CHORE: Bump native podspec version to 2.0.5.

• CHORE: Version bump for monorepo consistency and native SDK alignment.
• CHORE: Update tracelet_platform_interface constraint to ^2.0.4.

• FIX: Removed unreliable timestamp drift heuristic from location spoofing detection.

• FIX: Fixed persistent blue location indicator by properly conditionally disabling CLBackgroundActivitySession and startUpdatingLocation() in low-accuracy geofence-only mode.
• CHORE: Bump native TraceletSDK dependency to 2.0.1.

• BREAKING: Migrated to Pigeon for all platform-to-native communication, providing a type-safe interface for host and flutter API calls.
• FIX: Resolved silent failures of native permission dialogs by ensuring all CoreLocation and CoreMotion requests are dispatched on the main thread.
• FIX: Corrected CLAuthorizationStatus mapping in the native bridge to ensure accurate permission status reporting to Flutter.
• CHORE: Bump native TraceletSDK dependency to 2.0.0.

2: 3: - CHORE: Bump native TraceletSDK dependency to 1.1.4. 4: 5: ## 1.9.2

• CHORE: Constraint bump to tracelet_platform_interface 1.9.2. No iOS-side changes.

• CHORE: Constraint bump to tracelet_platform_interface 1.9.1. No iOS-side changes.

• FIX: Picks up the tracelet_platform_interface 1.9.0 fix that restores extras and vertices propagation for addGeofence (#58). No native-side changes.

• PERF: Reduce first-fix latency on stationary → moving transitions. LocationEngine.changePace(true) now fires an additional one-shot requestLocation() so a fresh GPS fix arrives as soon as the hardware is warm, instead of waiting for distanceFilter on the continuous stream (#54).
• FIX: Bump iOS native SDK to 1.0.11.

• CHORE: Version bump for geofence/location extras round-trip fix in tracelet_android (#51 follow-up). iOS already handled extras correctly; regression tests added to lock in parity.

• FIX: Guard against secondary FlutterEngine (e.g. Firebase background messaging) overwriting SDK singleton's event sender and callbacks (#51).

• FIX: Version bump for killed-state tracking fix in tracelet_android (#50).
• FIX: Bump iOS SDK to 1.0.10.

• FEAT: Add syncInterval support — timer-based HTTP sync via DispatchSourceTimer (#50).
• FEAT: Bump native SDK dependency to exact version 1.0.9.

• FIX: Fix SubsystemTests static property access for HttpSyncManager callbacks.
• FIX: Bump native SDK dependency to exact version 1.0.8.

• CHORE: Align federated package versions and include additional patch updates.
• FIX: Bump native SDK dependency to exact version 1.0.7.

• FIX: getCurrentPosition(samples: 1) now uses startUpdatingLocation instead of CLLocationManager.requestLocation() — forces a fresh GPS fix with proper timeout instead of returning stale cached locations (#46).
• PERF: Remove per-batch onRequestFreshHeaders invocation — eliminates latency before every sync request. Token refresh handled by onAuthorizationRequired on 401.
• FIX: Bump native SDK dependency to exact version 1.0.6.
• FIX: Privacy zones, audit trail, and encryption APIs now work before ready() — guards relaxed from isReady to manager != nil.

• FIX: getCurrentPosition() falls back to last known location when CLLocationManager returns no fix (e.g. simulator, GPS-off) — fixes LOCATION_UNAVAILABLE errors (#46).
• FIX: Bump native SDK dependency to exact version 1.0.5.

• FIX: Pin native SDK dependency to exact version 1.0.4 — prevents CocoaPods from auto-resolving to incompatible newer releases.

• FIX: Add isReady guards to getState(), setConfig(), reset(), getCurrentPosition(), changePace(), startSchedule(), stopSchedule() in Flutter bridge — returns safe defaults or NOT_READY error instead of crashing (re-fixes #46).

• FIX: TraceletSdk.stop() now checks isReady before accessing managers — prevents crash when stop() is called before ready().
• FIX: TraceletHostApiImpl.stop() returns NOT_READY PigeonError when called before initialization.

• FIX: Periodic mode no longer shows persistent location indicator — removed CLBackgroundActivitySession from periodic tracking (it caused the blue arrow to stay on permanently instead of briefly during each fix).
• TEST: Add BackgroundActivitySessionManager, ServiceSessionManager, and PeriodicModeBackgroundSession unit tests.

• FIX: ConfigManager null-merge — filter NSNull values during merge so partial setConfig() does not overwrite existing non-null config.
• FIX: Add missing import UIKit in LocationEngine.swift for UIBackgroundTaskIdentifier.
• FIX: Align location map format — snake_case accuracy keys → camelCase (altitudeAccuracy, speedAccuracy, headingAccuracy), dead reckoning isCharging → is_charging.
• FIX: DB insertLocation reads camelCase accuracy keys with snake_case fallback; locationRowToMap outputs camelCase.
• FEAT: Add destroySyncedLocations() — deletes only synced locations from the database.
• FEAT: Auto-purge synced locations after successful HTTP sync in HttpSyncManager.
• TEST: Add 28 location map format tests, 4 unit tests for ConfigManager null-merge and deleteSyncedLocations.

• FIX: Wire headlessFallback in eventSenderFactory (preventive — ensures future factory consumers can route to HeadlessRunner).
• FIX: Move podspec to repo root for CocoaPods trunk push compatibility.
• FEAT: Rewrite EventDispatcher to use Pigeon TraceletEventApi FlutterApi.
• FEAT: Add TraceletHostApiImpl for type-safe Pigeon HostApi dispatch.
• REFACTOR: Extract native SDK to standalone sdk/ios/ module (CocoaPods: TraceletSDK, SPM package).
• REFACTOR: Wire Flutter plugin to published TraceletSDK pod.

• FEAT: Rewrite EventDispatcher to use Pigeon TraceletEventApi FlutterApi instead of FlutterEventChannels.
• FEAT: Add TraceletHostApiImpl for type-safe Pigeon HostApi dispatch.
• REFACTOR: Extract native SDK code to sdk/ios/ module.
• CHORE: Update cross-package dependency constraints to ^1.6.3-alpha.1.

• FEAT: Add 401-aware retry — on HTTP 401 Unauthorized, invoke headless headers callback to refresh token, then retry once with updated dynamic headers.

• FEAT: Add SSL certificate pinning — URLSessionDelegate-based validation with SHA-256 fingerprint matching via CommonCrypto.
• FEAT: Add dynamic HTTP headers with runtime callback support and headless background execution.
• FEAT: Add route context — attach arbitrary metadata to synced locations.
• FEAT: Add custom sync body builder with headless callback support.
• CHORE: Update tracelet_platform_interface dependency constraint to ^1.6.0.

• CHORE: Update tracelet_platform_interface dependency constraint to ^1.5.0.

• FIX: Rename PermissionManager to TraceletPermissionManager to avoid class name collision with permission_handler_apple (#32).
• CHORE: Update tracelet_platform_interface dependency constraint to ^1.4.6.