mobile_proof_plugin 0.2.0

Flutter plugin for TLSN-based mobile proofs with proxy/MPC auto-fallback, WebView capture, and custom provider flows.

Changelog

0.2.0

• [Security] Server-name binding at verify time. verifyProof now cross-checks the authenticated server name from the upstream Presentation::verify output against the artifact's transcriptSummary.targetHost. Prevents a prover from substituting a proof for a different host. Identical for MPC and proxy modes.
• [Security] Empty trustedNotaryKeys is now a hard error. Previously verification logged a warning and proceeded; misconfigured deployments would have accepted any notary signature. Now refuses to verify with an empty trust list.
• Added ProofArtifact.targetHost getter so relying parties can assert the bound host matches the provider they requested.
• Added proxy mode (TLSNotary PR #1122 integration): the verifier acts as a transparent byte pump and the prover runs a real rustls handshake while proving the TLS key material in zero knowledge. Roughly 4–9× faster than MPC for compatible origins.
• Added ProofMode.auto (new default): attempt proxy first, fall back to MPC on fallback-eligible failures. Fallback is suppressed once the HTTP request has reached the origin so the request is never re-sent.
• Added ProofRequest.disableFallback flag and the disableFallback: parameter on attestProvider for debugging / cost-sensitive callers.
• Added VerifierInfoClient that fetches /v1/info for preflight so auto mode skips the proxy attempt when the verifier or target host rules it out.
• Added DataProviderConfig.proxyCompatible parsed from providers.json. When false, auto mode skips the proxy attempt.
• Added ProofArtifact.proofMode getter and the payload.modeAttempts telemetry array for inspecting fallback timelines.
• Added 6 proxy-mode ProofErrorCode values: proxyDestinationNotAllowed, proxyDialFailed, proxyByteCapExceeded, proxyTlsCiphersuiteMismatch, proxyEmsRequired, proxyKillSwitchActive.
• Removed TransportConfig.proxyUrl (was unused; mode selection now lives on ProofRequest).

0.1.1

• Fix native artifact distribution for pub.dev consumers by moving large binaries out of the package tarball.
• Add automatic iOS native framework download in podspec from GitHub Releases (MobileProofRustCore.xcframework.zip).
• Add automatic Android native library download in Gradle from GitHub Releases (mobile_proof_plugin_android_jniLibs.zip).
• Add release tooling and docs for uploading native assets before flutter pub publish.

0.1.0

• Initial public release of mobile_proof_plugin.
• Added one-call provider attestation API with plugin-managed WebView flow.
• Added provider registry-based custom MPC configuration support.
• Added proof export models, runtime validation, and platform-channel bridges.