ctrlapp 0.1.1

Remote kill-switch, feature flags, forced update, forms and inbox for Flutter, plus diagnostics, device-integrity checks, push permission and hosted login.

CtrlApp Flutter — Changelog

0.1.1 — 2026-10-17

No functional changes. First release published through the automated pipeline (production branch to pub.dev); it also confirms the package is owned by the ctrlapp.dev publisher.

0.1.0 — 2026-10-17

First public release.

Features

• Remote kill-switch — block the app, or any single feature, from the CtrlApp dashboard; enforced from the local cache when offline.
• Feature flags and remote config with typed accessors, plus forced update / minimum-version checks.
• Screen Capture Protection (opt-in, default off).
  • Android — FLAG_SECURE applied on the main thread with latest-policy-wins ordering; ownership-aware so a host-set FLAG_SECURE is never cleared.
  • iOS — per-plugin instance mask controller (no global singleton). Overlays installed while UIScreen.isCaptured reports active capture/mirroring and before app-switcher snapshots (willResignActive). Multi-window / multi-scene aware.
• Diagnostics and error capture (opt-in): breadcrumbs, redaction, bounded queue, global FlutterError / platform handler chaining, debug overlay.
• Device integrity signals (jailbreak, root, emulator/simulator, debugger, developer mode), device info and installation telemetry.
• Push permission bridge (CtrlAppPush) for iOS and Android 13+.
• Live block watch (CtrlAppBlockWatch) to apply a kill-switch to an app that is already open.
• Hosted social login and app session (package:ctrlapp/auth.dart) with a pluggable secure session store.
• Low-level CtrlAppClient with HTTP and mock transports.
• Zero Firebase dependencies in your Dart code.

Behavior

• init() throws StateError on mismatched apiKey / baseUrl re-initialization; same-identity re-init is idempotent.
• dispose() is idempotent and releases native enforcement before closing stream controllers.
• Strict argument contract on the ctrlapp MethodChannel: int / string / null / non-boolean arguments are rejected with a BAD_ARG FlutterError.
• Defaults to https://ctrlapp.dev; pass baseUrl to use another host.

Truthful limitations

• iOS: Apple provides no supported API to prevent still screenshots. The plugin does not use SecureTextField hacks, DRM, canvas tricks, or private APIs. userDidTakeScreenshotNotification is a post-event signal only.