envified 3.2.2

Runtime environment switching for Flutter. Load .env files, switch dev/staging/prod at runtime — no rebuild required.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

3.2.2 - 2026-05-14

Added

• Per-environment URL overrides: Custom URLs are now tracked and persisted independently for each environment, ensuring they are remembered when switching back and forth.
• Robust BASE_URL extraction: Improved the .env parser to handle whitespace, surrounding quotes, and comments more reliably.

Fixed

• Fallback priority: Fixed a bug where an empty BASE_URL in a specific environment file would incorrectly block the fallback to the global .env value.
• Persistence reliability: Enhanced EnvStorage to persist a dedicated map of overrides, preventing custom settings from being lost during app restarts or migrations.

3.2.1 - 2026-05-13

Fixed

• Custom URL override priority: Manually configured base URLs now persist across environment switches and correctly take precedence over environment-specific defaults.

3.2.0 - 2026-05-12

Added

• showEnvKeys param on EnvifiedOverlay — toggle env key-value visibility.
• isShowEnvLabel param on EnvifiedOverlay — toggle env status badge visibility.
• Collapsible Configuration section in debug panel (default: collapsed).

Fixed

• Sensitive key labels (keys) now auto-hidden in env key list (not just values).
• allowProdSwitch: false now correctly blocks switching INTO prod; prod button shows as disabled.
• Gated overlay PIN dialog UI overflow and z-order issues resolved.
• Restart button relocated to absolute top of debug panel for better visibility.
• History timestamps now consistently formatted as MM-dd-YYYY HH:mm:ss.
• Fixed duplicated parameter definitions in EnvifiedOverlay.
• Fixed missing service reference in _EnvFab.

Improved

• Sponsorship and contribution links added/updated across README, pubspec, CONTRIBUTING.

3.1.1 - 2026-05-12

Refactor & Maintenance

• Consolidated CI/CD workflows into a unified pipeline for better reliability and faster feedback loops.
• Implemented automated release publishing pipelines to streamline the pub.dev deployment process.
• Updated project dependencies and internal plugin registries in the example project.

3.0.0 - 2026-05-09

Breaking Changes

• Migration from Enum to Class: Env is now an immutable class. Replaces Env.dev enum with Env.dev class instance.
• Removed sensors_plus: Shake detector now requires a user-provided implementation of EnvShakeDetector to avoid mandatory accelerometer linking.
• Platform Restriction: Removed support for Web, macOS, Windows, and Linux to focus on native mobile (Android/iOS) stability.
• Strict Public API: Reduced public exports to improve maintenance and stability.
• Singleton Service: EnvConfigService is now a singleton accessed via .instance.

Added

• Dynamic Environment Discovery: Support for .env.* files without pre-defining enums.
• SHA-256 Integrity Hashing: Optional verification of .env file contents at startup.
• Salted PIN Hashing: EnvGate now hashes PINs with SHA-256 and a static salt.
• Value Equality: All models (Env, EnvConfig, AuditEntry) now implement operator == and hashCode.
• Typed Getters: Added getBool, getInt, getDouble, getUri, and getList to EnvConfigService.
• Audit Ring Buffer: Secure storage now limits audit logs to the 50 most recent entries.
• URL History: Persists the last 5 manual base URL overrides.
• Flexible Production Definition: Added productionEnvs to EnvConfigService.init to support locking multiple staging or production-grade environments.

Changed

• Premium UI Overhaul: New card-based debug panel with better hierarchy, blurring, and live updates.
• Reactive State: Switched to ValueNotifier for real-time reactivity without complex dependencies.
• Graceful Lock UX: Added informative Snackbar feedback when attempting to switch or override URLs while locked.
• Android Build Stability: Upgraded example project to AGP 8.7.2, Kotlin 2.1.0, and Java 17 for modern compatibility.

2.2.1 - 2026-05-08

Added

• Comprehensive documentation for core features and guides
• Robust GitHub Actions workflows for CI/CD and PR validation
• Community standards (CONTRIBUTING, CODE_OF_CONDUCT, Issue Templates)

2.2.0 - 2026-05-08

Added

• Smart restart detection when environment changes
• Sensitive data blur/unblur for API keys, tokens, secrets
• Copy/paste functionality for config values and URLs
• Card-based UI layout with improved hierarchy
• Status indicators (✅ available, ⚠️ partial, 🔒 locked)
• Info tooltips on all controls
• URL validation with live feedback
• Config search/filter for large .env files
• Enhanced audit log with timeline display
• Dark mode full support
• restartNeeded ValueNotifier on EnvConfigService

Changed

• EnvDebugPanel completely redesigned (card-based)
• Status badge now pulsing with better colors
• Audit log display changed from table to timeline
• Error messages more descriptive

Fixed

• AuthenticationOptions API compatibility with local_auth >= 2.2.0
• Platform support declarations
• Dartdoc cross-references

2.1.0 - 2026-05-07

Implemented

• Dynamic Auto-Discovery System: envified now automatically scans assets/env/ for any .env.* files. No manual environment-to-URL mapping is required.
• Dynamic Env Class: Replaced the static Env enum with a flexible Env class. Environment names and labels are now derived dynamically from file extensions (e.g., .env.future -> Env(name: 'future', label: 'Future')).
• Naked .env Support: Standardized logic where a standalone .env file is automatically treated as the "Production" environment (fallback for .env.prod).
• Production-Only Integrity: Restricted security/integrity checks (SHA-256) exclusively to production environments to simplify development workflows.
• Premium PIN UI: Upgraded the EnvGate PIN entry with a modern, glassmorphic design featuring segmented input boxes, smooth animations, and haptic feedback.
• Navigator-Resilient Debug Panel: Fixed "Navigator missing" errors by implementing inline confirmation fallbacks when the panel is used in root-level overlays.

Changed

• Class-based Env: Env is now a class instead of an enum. This enables dynamic runtime discovery while maintaining static constants for common environments (Env.dev, Env.staging, Env.prod).
• Refactored Service: Merged EnvX and EnvName functionality into the core Env class for a cleaner API.

Removed

• Removed legacy Env.custom slot in favor of purely dynamic environment discovery.
• Removed manual urls mapping requirement in EnvConfigService.init.

2.0.8 - 2026-05-07

Improved

• Showcase Cleanup: Renamed internal assets for a more professional repository structure (envified-demo.gif).
• Security Documentation: Added critical disclaimers about .env asset security vs. encrypted runtime persistence.
• Developer UX: Added PIN code best practice comments to documentation snippets.
• Documentation Polish: De-duplicated support links and synced all feature tables with recent API changes.

2.0.7 - 2026-05-07

Removed

• Removed local_auth Dependency: Removed biometric authentication completely to prevent upstream dependency conflicts, reducing package size and simplifying platform setup. The debug panel is still securely protected via the PIN code gate.

2.0.6 - 2026-05-07

Fixed

• Fixed critical bug where EnvGate PIN dialog would crash when EnvifiedOverlay was placed in MaterialApp.builder due to missing Navigator context. The PIN dialog is now rendered directly via OverlayEntry.
• Fixed compilation error in env_gate.dart: updated local_auth API usage
  • Replaced deprecated AuthenticationOptions with AndroidAuthMessages via authMessages
  • Now fully compatible with local_auth >= 2.2.0 < 4.0.0
• Fixed platform declarations in pubspec.yaml (android, ios) for full pub.dev platform support scoring

Improved

• Platform support score: now 20/20 points (up from 0/20)
• Code compiles cleanly (zero errors, zero warnings)

2.0.5 - 2026-05-07

Improved

• Added explicit platform declaration (platforms: flutter) for full pub.dev platform support scoring
• Tightened all dependency version constraints for better stability signaling
  • Changed ^x.y.z to >=x.y.z <(x+1).0.0 across all dependencies
• Expanded documentation: added FAQ section, platform setup instructions, and API reference
• Enhanced example app to showcase all 8 major features
• Added showcase GIF to README to visualize the debug panel in action
• Complete README overhaul with a premium presentation and feature highlights

Fixed

• Dependency resolution confidence (platform support +10 pts, dependency stability +20 pts)

2.0.4 - 2026-05-07

• Added PayWithChai support page (direct UPI — paywithchai.in/appamania)
• Updated README support section with real payment tiers
• Added funding field to pubspec.yaml for pub.dev Support button

2.0.3 - 2026-05-07

• Fix: README images now load correctly on pub.dev (raw.githubusercontent.com URLs)

2.0.2 - 2026-05-07

• Fix: widened constraints for flutter_secure_storage (v10), local_auth (v3), and sensors_plus (v7) to support the latest major versions without breaking backward compatibility.

2.0.1 - 2026-05-07

• Fix: resolved dartdoc cross-reference warnings for internal symbols
• Fix: replaced unresolvable [FlutterSecureStorage] references with prose
• Fix: replaced unresolvable [EnvFileParser.verifyIntegrity] reference
• Fix: replaced unresolvable [MediaQuery.disableAnimations] reference

2.0.0 - 2026-05-07

Major Release 🚀 — Eight Improvements

1. Tamper Detection (verifyIntegrity)

• EnvFileParser.verifyIntegrity() computes a SHA-256 hash of each .env* file on first load and stores it in flutter_secure_storage.
• Subsequent loads recompute and compare — a hash mismatch throws the new EnvifiedTamperException.
• Opt-in via EnvConfigService.init(verifyIntegrity: true).

2. Access Token Gate (EnvGate)

• New EnvGate class exported from the public API.
• Supports secure PIN-code authentication before allowing access to the debug panel.
• (Note: Biometric support was temporarily included in early v2 betas but removed in v2.0.7 to ensure upstream dependency stability).
• Pass gate: EnvGate(pin: '1234') to EnvifiedOverlay to require auth before revealing the debug panel.
• PIN dialog implemented inline (no third-party packages) with 4 obscured digit fields.
• Auto-clears authentication state when the app is backgrounded.

3. Typed Get Helpers

• getBool(key) — accepts 'true', '1', 'yes' (case-insensitive).
• getInt(key) — wraps int.tryParse.
• getDouble(key) — wraps double.tryParse.
• getUri(key) — wraps Uri.tryParse, returns null on failure.
• getList(key, {separator}) — splits and trims CSV values.

4. Lifecycle Hooks

• onBeforeSwitch: Future<void> Function(Env from, Env to)? — awaited before switchTo() changes the active env.
• onAfterSwitch: void Function(EnvConfig config)? — called after switchTo() and setBaseUrl().
• Both hooks are supplied to EnvConfigService.init().
• New EnvName extension on Env with longLabel (e.g. "Development", "Production").

5. URL History Picker

• EnvStorage.saveUrlToHistory() / loadUrlHistory() — persists up to 5 recent URLs (deduped, newest-first) in secure storage.
• EnvConfigService.urlHistory exposes the list.
• EnvDebugPanel shows a "Recent" row of tappable ActionChip widgets below the URL override field.
• Tapping a chip applies the URL and updates the text field.

6. Env Status Badge (EnvStatusBadge)

• New standalone EnvStatusBadge widget.
• Colour-coded per environment (blue / orange / red / purple).
• Pulsing opacity animation (1.0 ↔ 0.7, 1.5 s) when isBaseUrlOverridden is true.
• Respects MediaQuery.disableAnimations (system reduced-motion preference).
• Configurable alignment and margin.

7. Gesture Trigger Config (EnvTrigger)

• New sealed class EnvTrigger replacing the hard-coded FAB tap.
• EnvTrigger.tap(count: 7) — N rapid taps within 800 ms (default).
• EnvTrigger.shake(threshold: 15.0) — accelerometer shake via sensors_plus, 2 s debounce.
• EnvTrigger.edgeSwipe(edgeWidth: 20) — right-edge inward swipe via Listener.
• Pass trigger: to EnvifiedOverlay.
• Added showFab: false option to EnvifiedOverlay to enable a true "stealth mode" where the floating 🌿 button is hidden and the trigger is the exclusive way to access the panel.
• Fixed a bug where taps on the panel or FAB incorrectly advanced the hidden tap count, ensuring triggers accurately reflect gesture counts.

8. Audit Log

• AuditEntry model (exported) with timestamp, action, fromEnv, toEnv, url.
• Every mutation (switchTo, setBaseUrl, clearBaseUrlOverride, reset) appends an entry to flutter_secure_storage.
• Log is capped at 50 entries; oldest are dropped.
• EnvConfigService.auditLog returns the full list.
• EnvDebugPanel shows an expandable "Activity log (N entries)" tile with the last 10 entries.

Auto-lock on Background

• EnvifiedOverlay registers an AppLifecycleListener on onHide / onPause.
• The panel closes and authentication is cleared whenever the app moves to background.

New Dependencies

• sensors_plus: ^5.0.0
• crypto: ^3.0.0
• flutter_secure_storage: ^9.0.0 (Encrypted persistence)

Breaking Changes

• Env.label now returns short form ('Dev', 'Staging', 'Prod', 'Custom'). Use the new Env.longLabel (via EnvName extension) for full names.
• EnvStorage.clear() now also deletes URL history and audit log keys.

Migration Guide from 1.0.0

// Before
await EnvConfigService.instance.init(defaultEnv: Env.dev);

// After (all new params are optional with safe defaults)
await EnvConfigService.instance.init(
  defaultEnv: Env.dev,
  verifyIntegrity: false, // opt-in
  onBeforeSwitch: null,   // optional
  onAfterSwitch: null,    // optional
  allowedUrls: null,      // optional
);

// EnvifiedOverlay — new optional params
EnvifiedOverlay(
  service: EnvConfigService.instance,
  enabled: kDebugMode,
  gate: null,                              // optional
  trigger: const EnvTrigger.tap(count: 7), // default unchanged
  showFab: true,                           // optional (set to false for stealth mode)
  child: child!,
)

---

1.0.0 - 2026-05-06

Initial Stable Release 🚀

• Runtime Environment Switching — Seamlessly swap between dev, staging, prod, and custom without rebuilding your app.
• Enterprise-Grade Security — Fully encrypted persistence layer using flutter_secure_storage. Choices and overrides are stored in Keychain/Keystore.
• Production Lock — Prevent accidental environment switches or URL overrides in production builds.
• API URL Overrides — Dynamically point your app to any backend URL at runtime (perfect for local testing or PR reviews).
• Premium Debug UI — Built-in, horizontally scrollable action chip panel and floating action button that only appears in debug mode.
• Zero-Overhead — Debug components are completely optimized out in release builds.
• Bulletproof Reliability — Comprehensive unit test suite covering parsing, models, storage, and service logic.

0.1.2 - 2026-05-06

• Security upgrade to encrypted storage.
• Storage injection for unit testing.

0.1.0 - 2026-05-06

• Initial beta release.