jala_http 0.4.0

package:http adapter for Jala, the in-app Flutter network inspector. Wraps any http Client to capture requests, responses, and errors, with one-tap replay.

jala_http

package:http integration for Jala, the in-app Flutter network inspector: captures every request, response, and error made through a http.Client, and supports one-tap in-app replay.

See the repo README for what Jala is and why (replay, filter grammar, redaction-by-default) and the jala package for the facade that wires this up in an app.

Install

dependencies:
  jala_http: ^0.3.0

Wrap

import 'package:http/http.dart' as http;
import 'package:jala_http/jala_http.dart';

final client = JalaHttp.wrap(http.Client());
await client.get(Uri.parse('https://example.com'));

JalaHttp.wrap reads JalaBinding.instance (wired up by Jala.initialize() from the jala facade package), wraps the given http.Client (a fresh one when omitted) in a [JalaHttpClient], and registers a JalaHttpReplayer for it so the inspector UI's Replay action can re-issue calls made through the returned client.

Plain JalaHttpClient(inner: http.Client()) also works and captures calls identically — it just skips replay registration, so the Replay button stays disabled for calls made through that client.

The stream tee

http.Client.send() returns a StreamedResponse whose body is a stream — JalaHttpClient must capture a preview of it without ever preventing the caller from receiving the complete, original body. It does this with a tee: every chunk from the real response stream is forwarded to the caller unmodified, while a separate buffer (capped at maxBodyBytes) and byte counter track a preview and the true total size for the inspector. A download larger than the cap is delivered to your app in full; only the inspector's preview is truncated.

Replay

Replaying a captured call rebuilds a http.Request and re-issues it through the same wrapped client, so it's captured as a fresh entry with replayOf set to the original call's id. Headers that were redacted at capture time (e.g. Authorization) are never resent — Jala never retains the real secret to resend in the first place.

Production safety

• send() checks JalaBinding.instance.isEnabled first and forwards immediately when Jala is disabled — zero capture work on the hot networking path, and safe to leave JalaHttpClient wrapped in release builds.
• A bug in Jala's own capture logic can never break your networking: capture is wrapped in try/catch throughout, and the request/response is always forwarded exactly once regardless of whether capture succeeded.
• Sensitive header values (e.g. Authorization, Cookie) are redacted at capture time, before anything enters the in-memory store, and response bodies are captured through a bounded stream tee (see above) so Jala stays safe against large-body production traffic.