therms-device-tracker 1.0.0-rc.2 → 1.0.0-rc.4

package/CHANGELOG.md

@@ -7,6 +7,24 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.0.0-rc.4] - 2026-06-19
+
+### Fixed
+- **Critical crash on Android 14+ (API 34+)**: `SecurityException: One of the RECEIVER_EXPORTED or RECEIVER_NOT_EXPORTED should be specified...`
+  - All dynamic `context.registerReceiver(...)` calls (5 sites in `ThermsDeviceTrackerModule.kt`) updated to use `ContextCompat.registerReceiver(..., ContextCompat.RECEIVER_NOT_EXPORTED)`.
+  - These are internal app-private receivers for custom actions (bg location, provider changes, geofence, sync, activity).
+  - Added `setPackage(...)` to the corresponding `sendBroadcast` calls for explicit delivery (ThermsLocationService, SyncProvider, GeofenceTransitionReceiver).
+  - Declared `GeofenceTransitionReceiver` statically in AndroidManifest.xml with `android:exported="false"` for modern compatibility.
+- ContextCompat was already a dependency/import; change is backward compatible.
+
+## [1.0.0-rc.3] - 2026-06-19
+
+### Fixed
+- **Critical Android build failure**: Compilation errors in `compileDebugKotlin`.
+  - `ThermsDeviceTrackerModule.kt:464`: Removed stray Swift `nil` literal in `sendEvent` for `onMotionChange` (was `location to nil`, now `null`). Other call sites already used `null` or `toLocationDict(...)`.
+  - `LocationProvider.kt`: Removed `fun getClient()` which caused JVM signature clash with the Kotlin-generated getter for the private `val client` property (`getClient(): FusedLocationProviderClient`). The constructor injection seam (`fusedClient` param) and internal `client` usage remain; no external callers depended on `getClient()`.
+- Updated deprecated `lintOptions` to modern `lint { abortOnError = false }` in `android/build.gradle`.
+
 ## [1.0.0-rc.2] - 2026-06-18
 
 ### Fixed

package/android/build.gradle

@@ -4,16 +4,16 @@ plugins {
 }
 
 group = 'expo.modules.thermsdevicetracker'
-version = '1.0.0-rc.2'
+version = '1.0.0-rc.4'
 
 android {
   namespace "expo.modules.thermsdevicetracker"
   defaultConfig {
     versionCode 1
-    versionName "1.0.0-rc.2"
+    versionName "1.0.0-rc.4"
   }
-  lintOptions {
-    abortOnError false
+  lint {
+    abortOnError = false
   }
 }
 

package/android/src/main/AndroidManifest.xml

@@ -19,5 +19,13 @@
       android:name="expo.modules.thermsdevicetracker.ThermsLocationService"
       android:foregroundServiceType="location"
       android:exported="false" />
+
+    <!--
+      Geofence transition receiver. Used via explicit PendingIntent from GeofencingClient.
+      Declared explicitly with exported=false for API 34+ compatibility (even though intent targets class).
+    -->
+    <receiver
+      android:name="expo.modules.thermsdevicetracker.GeofenceTransitionReceiver"
+      android:exported="false" />
   </application>
 </manifest>

package/android/src/main/java/expo/modules/thermsdevicetracker/GeofenceTransitionReceiver.kt

@@ -29,6 +29,7 @@ class GeofenceTransitionReceiver : BroadcastReceiver() {
       putExtra(EXTRA_TRANSITION, transition)
       putStringArrayListExtra(EXTRA_IDS, ids)
     }
+    outIntent.setPackage(context.packageName)
     context.sendBroadcast(outIntent)
   }
 }

package/android/src/main/java/expo/modules/thermsdevicetracker/LocationProvider.kt

@@ -21,7 +21,7 @@ import com.google.android.gms.location.*
  * Seam: module wires `onNewLocation` callback (or consumes via start).
  * No direct sendEvent here; module owns event + state + sync trigger (keeps provider thin).
  *
- * Test seam precedent: callers can inject a mock FusedLocationProviderClient.
+ * Test seam precedent: callers can inject a mock FusedLocationProviderClient via the constructor parameter.
  */
 class LocationProvider(
   private val context: Context,
@@ -79,6 +79,4 @@ class LocationProvider(
     }
     currentCallback = null
   }
-
-  fun getClient(): FusedLocationProviderClient = client
 }

package/android/src/main/java/expo/modules/thermsdevicetracker/SyncProvider.kt

@@ -286,6 +286,7 @@ class SyncProvider(
         putExtra(EXTRA_COUNT, count)
         message?.let { putExtra(EXTRA_MESSAGE, it) }
       }
+      intent.setPackage(applicationContext.packageName)
       applicationContext.sendBroadcast(intent)
     }
   }

package/android/src/main/java/expo/modules/thermsdevicetracker/ThermsDeviceTrackerModule.kt

@@ -461,7 +461,7 @@ class ThermsDeviceTrackerModule : Module() {
 
     syncProvider.stop()
     lastSyncConfig = null
-    sendEvent("onMotionChange", mapOf("isMoving" to false, "location" to nil))
+    sendEvent("onMotionChange", mapOf("isMoving" to false, "location" to null))
     // Note: schedule lifecycle independent (no auto stopSchedule on stopTracking; call explicitly if needed)
   }
 
@@ -496,7 +496,7 @@ class ThermsDeviceTrackerModule : Module() {
       }
     }
     val filter = IntentFilter(ThermsLocationService.BROADCAST_ACTION)
-    context.registerReceiver(bgReceiver, filter)
+    ContextCompat.registerReceiver(context, bgReceiver, filter, ContextCompat.RECEIVER_NOT_EXPORTED)
   }
 
   private fun unregisterBgReceiver() {
@@ -516,7 +516,7 @@ class ThermsDeviceTrackerModule : Module() {
       }
     }
     val filter = IntentFilter(android.location.LocationManager.PROVIDERS_CHANGED_ACTION)
-    context.registerReceiver(providerReceiver, filter)
+    ContextCompat.registerReceiver(context, providerReceiver, filter, ContextCompat.RECEIVER_NOT_EXPORTED)
   }
 
   private fun unregisterProviderReceiver() {
@@ -654,7 +654,7 @@ class ThermsDeviceTrackerModule : Module() {
         geofenceProvider.handleTransition(transition, ids)
       }
     }
-    context.registerReceiver(geofenceReceiver, IntentFilter(GeofenceTransitionReceiver.ACTION))
+    ContextCompat.registerReceiver(context, geofenceReceiver, IntentFilter(GeofenceTransitionReceiver.ACTION), ContextCompat.RECEIVER_NOT_EXPORTED)
   }
 
   private fun unregisterGeofenceReceiver() {
@@ -674,7 +674,7 @@ class ThermsDeviceTrackerModule : Module() {
         syncProvider.handleSyncResult(intent)
       }
     }
-    context.registerReceiver(syncReceiver, IntentFilter(SyncProvider.SYNC_RESULT_ACTION))
+    ContextCompat.registerReceiver(context, syncReceiver, IntentFilter(SyncProvider.SYNC_RESULT_ACTION), ContextCompat.RECEIVER_NOT_EXPORTED)
   }
 
   private fun unregisterSyncReceiver() {
@@ -697,7 +697,7 @@ class ThermsDeviceTrackerModule : Module() {
       }
     }
     val filter = IntentFilter(ActivityRecognitionProvider.ACTION_ACTIVITY_UPDATE)
-    context.registerReceiver(activityReceiver, filter)
+    ContextCompat.registerReceiver(context, activityReceiver, filter, ContextCompat.RECEIVER_NOT_EXPORTED)
   }
 
   private fun unregisterActivityReceiver() {

package/android/src/main/java/expo/modules/thermsdevicetracker/ThermsLocationService.kt

@@ -71,6 +71,7 @@ class ThermsLocationService : Service() {
             putExtra(EXTRA_SPEED, if (loc.hasSpeed()) loc.speed else -1f)
             putExtra(EXTRA_TIMESTAMP, loc.time)
           }
+          i.setPackage(packageName)
           sendBroadcast(i)
         }
       }

package/ios/ThermsDeviceTracker.podspec

@@ -1,6 +1,6 @@
 Pod::Spec.new do |s|
   s.name           = 'ThermsDeviceTracker'
-  s.version        = '1.0.0-rc.2'
+  s.version        = '1.0.0-rc.4'
   s.summary        = 'Device physical activity and geolocation tracking for THERMS'
   s.description    = 'Expo native module providing unified access to location updates, physical activity recognition (walking/running/etc), and pedometer data with foreground and background support.'
   s.author         = 'Cory Robinson <cory@therms.io>'

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "therms-device-tracker",
-  "version": "1.0.0-rc.2",
+  "version": "1.0.0-rc.4",
   "description": "THERMS software expo app device physical activity and geo location tracking",
   "main": "build/index.js",
   "types": "build/index.d.ts",