flutter-dev 0.1.13__tar.gz → 0.1.14__tar.gz

{flutter_dev-0.1.13 → flutter_dev-0.1.14}/CHANGELOG.md

@@ -2,6 +2,27 @@
 
 All notable changes to this project are documented in this file.
 
+## 0.1.14 - 2026-09-01
+
+### Added
+
+- Added five Firebase App Check commands: `status`, `token`, `register`, `list`, and `revoke`.
+- Added dynamic Android device discovery, device-specific token extraction, multi-device registration with `register --all`, and Firebase CLI/REST backend selection.
+- Added Firebase Android configuration discovery from Gradle, `google-services.json`, `firebase.json`, and `.firebaserc`, with explicit overrides for ambiguous projects and variants.
+- Added Python regression coverage for command routing, device/config discovery, backend version parsing, validation, and secret redaction.
+
+### Changed
+
+- Expanded the main command list and README with the App Check command count, all five subcommands, and the `register --device`, `register --all`, and `--backend` forms.
+- Bumped the package version from `0.1.13` to `0.1.14` for the PyPI release.
+
+### Fixed
+
+- Added strict UUID4, Firebase app/project ownership, and debug-token resource validation before remote mutations.
+- Kept collected debug-token secrets out of normal registration output, error messages, and project files.
+- Improved emulator/ADB transport detection and made malformed project configuration or unavailable CLI checks fail safely.
+- Ensured `register --all` processes every ready device even when `ANDROID_SERIAL` is set.
+
 ## 0.1.13 - 2026-07-22
 
 ### Added

{flutter_dev-0.1.13 → flutter_dev-0.1.14}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: flutter-dev
-Version: 0.1.13
+Version: 0.1.14
 Summary: A cross-platform CLI toolkit for Flutter development workflows.
 Author: Royal Court BD
 License-Expression: MIT
@@ -42,7 +42,7 @@ The package is published on PyPI as `flutter-dev` and installs console commands
 python -m pip install flutter-dev
 ```
 
-Current package metadata declares version `0.1.13`, Python `>=3.8`, MIT license, and support for macOS, Linux, and Windows.
+Current package metadata declares version `0.1.14`, Python `>=3.8`, MIT license, and support for macOS, Linux, and Windows.
 
 ## Key Features
 
@@ -50,6 +50,7 @@ Current package metadata declares version `0.1.13`, Python `>=3.8`, MIT license,
 - Project maintenance helpers for `flutter clean`, dependency refresh, `build_runner`, localization generation, analysis, formatting, cache repair, and CocoaPods.
 - Localization CSV helpers for exporting ARB files to translator-friendly CSV files and generating ARB files back from CSV.
 - Android device helpers for APK install, app uninstall, project/foreground app data clearing, screen mirroring with `scrcpy`, wireless ADB setup, and Date & Time settings.
+- Dynamic Firebase App Check debug-token discovery, registration, listing, and revocation for connected Android devices.
 - AI-assisted Git commits using Groq, Mistral, SambaNova, or OpenRouter-compatible chat completion APIs.
 - Git workflow helpers for version tags, branch sync, deployment branch merge, discard, and GitHub account management through `gh`.
 - Feature/page generator that creates a `lib/features/<name>` structure using the project's presenter/base-state pattern.
@@ -110,12 +111,13 @@ Feature-specific external tools:
 
 | Tool | Used by |
 | --- | --- |
-| Android SDK Platform Tools / `adb` | `install`, `uninstall`, `clear-data`, `mirror`, `datetime`, `release-run` |
+| Android SDK Platform Tools / `adb` | `install`, `uninstall`, `clear-data`, `mirror`, `datetime`, `release-run`, `app-check token/register` |
 | Java/JDK | Android builds |
 | CocoaPods | `pod`, `ipa` |
 | Xcode / `xcrun` | iOS simulator and IPA workflows on macOS |
 | `scrcpy` | `mirror` |
-| Firebase CLI | `web-deploy` |
+| Firebase CLI | `web-deploy`; App Check management when version `15.25.1` or newer |
+| Google Cloud CLI / `gcloud` | App Check REST fallback when a compatible Firebase CLI is unavailable |
 | GitHub CLI / `gh` | `fdev git ...` |
 | VS Code CLI / `code` | Conflict helper in branch sync |
 | Homebrew | `brew`, macOS `install-scrcpy` flow |
@@ -202,6 +204,11 @@ Android APK/AAB build commands rename output files using the Android app label a
 | `fdev install` | Installs a built APK from `build/app/outputs/flutter-apk`, prefers `arm64-v8a`, retries after uninstall on failure, then launches the app. |
 | `fdev uninstall` | In a Flutter project root, uninstalls by package/bundle id. Outside a project, detects the foreground app and asks for confirmation. |
 | `fdev clear-data` | In a Flutter project root, clears the installed project's Android package data without confirmation; if it is missing or the clear fails, falls back to the foreground app with a default-Yes safety prompt. Outside a project, always detects and confirms the foreground app. iOS prints manual options. |
+| `fdev app-check status [--device SERIAL] [--backend auto\|cli\|rest]` | Shows all ADB device states, dynamically resolved Firebase Android metadata, provider detection, and Firebase management backend readiness. |
+| `fdev app-check token [--device SERIAL]` | Reads one debug build's UUID4 App Check token from its discovered preference store, with official logcat fallback, and explicitly prints the secret. |
+| `fdev app-check register [--device SERIAL \| --all] [--backend auto\|cli\|rest]` | Collects token(s) without printing or persisting them and registers one selected device or every authorized connected device. |
+| `fdev app-check list [--backend auto\|cli\|rest]` | Lists registered debug-token names, resource IDs, and update times; Firebase never returns the secrets. |
+| `fdev app-check revoke <id> [--backend auto\|cli\|rest] [--force]` | Revokes a registered debug token after confirmation. Use `--force` for non-interactive operation. |
 | `fdev install-scrcpy` | Installs `scrcpy` using the best supported package manager for the current platform. |
 | `fdev mirror` | Launches `scrcpy` for a selected Android device. |
 | `fdev mirror --wireless` | Guides wireless ADB setup using a USB-connected Android device. |
@@ -211,6 +218,69 @@ Android APK/AAB build commands rename output files using the Android app label a
 
 When multiple Android devices are connected, device-aware commands prompt you to choose a device.
 
+#### Firebase App Check Debug Tokens
+
+There are five App Check subcommands: `status`, `token`, `register`, `list`, and
+`revoke`.
+
+Run App Check commands from a Flutter project root, or pass `--project-root`.
+The resolver matches the Android `applicationId` with the appropriate client in
+`android/app/google-services.json`. It also reads `firebase.json` and
+`.firebaserc` when needed. Flavor-specific `google-services.json` files are
+discovered under `android/app`; ambiguous configurations require an explicit
+override instead of silently choosing the first client.
+
+```bash
+# Inspect device states, Firebase metadata, providers, and backend readiness
+fdev app-check status --backend auto
+
+# Print one device's token (the output is a secret)
+fdev app-check token --device DEVICE_SERIAL
+
+# Collect and register without printing the token
+fdev app-check register --device DEVICE_SERIAL --backend cli
+
+# Register every authorized connected device
+fdev app-check register --all --backend cli
+
+# Inspect and revoke registered token metadata
+fdev app-check list --backend cli
+fdev app-check revoke DEBUG_TOKEN_ID --backend cli
+```
+
+The default `--backend auto` uses Firebase CLI `15.25.1+` when available,
+otherwise it uses the Firebase App Check REST API with the active `gcloud`
+account. Force either route with `--backend cli` or `--backend rest`. Authenticate
+the selected tool before registration:
+
+```bash
+firebase login
+# or
+gcloud auth login
+```
+
+Configuration precedence is command-line option, environment override, then
+project discovery. Supported overrides are:
+
+```text
+--package                 FDEV_APP_CHECK_PACKAGE / PACKAGE_NAME
+--project                 FDEV_FIREBASE_PROJECT_ID / FIREBASE_PROJECT_ID
+--project-number          FDEV_FIREBASE_PROJECT_NUMBER / FIREBASE_PROJECT_NUMBER
+--app-id                  FDEV_FIREBASE_APP_ID / FIREBASE_ANDROID_APP_ID
+--quota-project           FDEV_GOOGLE_CLOUD_QUOTA_PROJECT / GOOGLE_CLOUD_QUOTA_PROJECT
+--device                  ANDROID_SERIAL
+```
+
+`register` keeps the debug token in memory and never writes it to a project
+file. The `token` subcommand is the only normal workflow that prints the secret.
+If a stable display name already exists, pass `--force` only when replacing the
+old token is intended.
+
+The REST backend charges API quota to `--quota-project`, the configured gcloud
+`billing/quota_project`, or the active gcloud project, in that order. That
+project must have the Firebase App Check API enabled, and the active account
+must be allowed to consume its service quota.
+
 ### Git Commands
 
 | Command | Description |

{flutter_dev-0.1.13 → flutter_dev-0.1.14}/README.md

@@ -8,7 +8,7 @@ The package is published on PyPI as `flutter-dev` and installs console commands
 python -m pip install flutter-dev
 ```
 
-Current package metadata declares version `0.1.13`, Python `>=3.8`, MIT license, and support for macOS, Linux, and Windows.
+Current package metadata declares version `0.1.14`, Python `>=3.8`, MIT license, and support for macOS, Linux, and Windows.
 
 ## Key Features
 
@@ -16,6 +16,7 @@ Current package metadata declares version `0.1.13`, Python `>=3.8`, MIT license,
 - Project maintenance helpers for `flutter clean`, dependency refresh, `build_runner`, localization generation, analysis, formatting, cache repair, and CocoaPods.
 - Localization CSV helpers for exporting ARB files to translator-friendly CSV files and generating ARB files back from CSV.
 - Android device helpers for APK install, app uninstall, project/foreground app data clearing, screen mirroring with `scrcpy`, wireless ADB setup, and Date & Time settings.
+- Dynamic Firebase App Check debug-token discovery, registration, listing, and revocation for connected Android devices.
 - AI-assisted Git commits using Groq, Mistral, SambaNova, or OpenRouter-compatible chat completion APIs.
 - Git workflow helpers for version tags, branch sync, deployment branch merge, discard, and GitHub account management through `gh`.
 - Feature/page generator that creates a `lib/features/<name>` structure using the project's presenter/base-state pattern.
@@ -76,12 +77,13 @@ Feature-specific external tools:
 
 | Tool | Used by |
 | --- | --- |
-| Android SDK Platform Tools / `adb` | `install`, `uninstall`, `clear-data`, `mirror`, `datetime`, `release-run` |
+| Android SDK Platform Tools / `adb` | `install`, `uninstall`, `clear-data`, `mirror`, `datetime`, `release-run`, `app-check token/register` |
 | Java/JDK | Android builds |
 | CocoaPods | `pod`, `ipa` |
 | Xcode / `xcrun` | iOS simulator and IPA workflows on macOS |
 | `scrcpy` | `mirror` |
-| Firebase CLI | `web-deploy` |
+| Firebase CLI | `web-deploy`; App Check management when version `15.25.1` or newer |
+| Google Cloud CLI / `gcloud` | App Check REST fallback when a compatible Firebase CLI is unavailable |
 | GitHub CLI / `gh` | `fdev git ...` |
 | VS Code CLI / `code` | Conflict helper in branch sync |
 | Homebrew | `brew`, macOS `install-scrcpy` flow |
@@ -168,6 +170,11 @@ Android APK/AAB build commands rename output files using the Android app label a
 | `fdev install` | Installs a built APK from `build/app/outputs/flutter-apk`, prefers `arm64-v8a`, retries after uninstall on failure, then launches the app. |
 | `fdev uninstall` | In a Flutter project root, uninstalls by package/bundle id. Outside a project, detects the foreground app and asks for confirmation. |
 | `fdev clear-data` | In a Flutter project root, clears the installed project's Android package data without confirmation; if it is missing or the clear fails, falls back to the foreground app with a default-Yes safety prompt. Outside a project, always detects and confirms the foreground app. iOS prints manual options. |
+| `fdev app-check status [--device SERIAL] [--backend auto\|cli\|rest]` | Shows all ADB device states, dynamically resolved Firebase Android metadata, provider detection, and Firebase management backend readiness. |
+| `fdev app-check token [--device SERIAL]` | Reads one debug build's UUID4 App Check token from its discovered preference store, with official logcat fallback, and explicitly prints the secret. |
+| `fdev app-check register [--device SERIAL \| --all] [--backend auto\|cli\|rest]` | Collects token(s) without printing or persisting them and registers one selected device or every authorized connected device. |
+| `fdev app-check list [--backend auto\|cli\|rest]` | Lists registered debug-token names, resource IDs, and update times; Firebase never returns the secrets. |
+| `fdev app-check revoke <id> [--backend auto\|cli\|rest] [--force]` | Revokes a registered debug token after confirmation. Use `--force` for non-interactive operation. |
 | `fdev install-scrcpy` | Installs `scrcpy` using the best supported package manager for the current platform. |
 | `fdev mirror` | Launches `scrcpy` for a selected Android device. |
 | `fdev mirror --wireless` | Guides wireless ADB setup using a USB-connected Android device. |
@@ -177,6 +184,69 @@ Android APK/AAB build commands rename output files using the Android app label a
 
 When multiple Android devices are connected, device-aware commands prompt you to choose a device.
 
+#### Firebase App Check Debug Tokens
+
+There are five App Check subcommands: `status`, `token`, `register`, `list`, and
+`revoke`.
+
+Run App Check commands from a Flutter project root, or pass `--project-root`.
+The resolver matches the Android `applicationId` with the appropriate client in
+`android/app/google-services.json`. It also reads `firebase.json` and
+`.firebaserc` when needed. Flavor-specific `google-services.json` files are
+discovered under `android/app`; ambiguous configurations require an explicit
+override instead of silently choosing the first client.
+
+```bash
+# Inspect device states, Firebase metadata, providers, and backend readiness
+fdev app-check status --backend auto
+
+# Print one device's token (the output is a secret)
+fdev app-check token --device DEVICE_SERIAL
+
+# Collect and register without printing the token
+fdev app-check register --device DEVICE_SERIAL --backend cli
+
+# Register every authorized connected device
+fdev app-check register --all --backend cli
+
+# Inspect and revoke registered token metadata
+fdev app-check list --backend cli
+fdev app-check revoke DEBUG_TOKEN_ID --backend cli
+```
+
+The default `--backend auto` uses Firebase CLI `15.25.1+` when available,
+otherwise it uses the Firebase App Check REST API with the active `gcloud`
+account. Force either route with `--backend cli` or `--backend rest`. Authenticate
+the selected tool before registration:
+
+```bash
+firebase login
+# or
+gcloud auth login
+```
+
+Configuration precedence is command-line option, environment override, then
+project discovery. Supported overrides are:
+
+```text
+--package                 FDEV_APP_CHECK_PACKAGE / PACKAGE_NAME
+--project                 FDEV_FIREBASE_PROJECT_ID / FIREBASE_PROJECT_ID
+--project-number          FDEV_FIREBASE_PROJECT_NUMBER / FIREBASE_PROJECT_NUMBER
+--app-id                  FDEV_FIREBASE_APP_ID / FIREBASE_ANDROID_APP_ID
+--quota-project           FDEV_GOOGLE_CLOUD_QUOTA_PROJECT / GOOGLE_CLOUD_QUOTA_PROJECT
+--device                  ANDROID_SERIAL
+```
+
+`register` keeps the debug token in memory and never writes it to a project
+file. The `token` subcommand is the only normal workflow that prints the secret.
+If a stable display name already exists, pass `--force` only when replacing the
+old token is intended.
+
+The REST backend charges API quota to `--quota-project`, the configured gcloud
+`billing/quota_project`, or the active gcloud project, in that order. That
+project must have the Firebase App Check API enabled, and the active account
+must be allowed to consume its service quota.
+
 ### Git Commands
 
 | Command | Description |

{flutter_dev-0.1.13 → flutter_dev-0.1.14}/fdev.py

@@ -76,6 +76,9 @@ from managers.package import (
     show_fdev_version,
     upgrade_fdev_command,
 )
+from managers.app_check import (
+    app_check_command,
+)
 
 
 def show_usage(exit_code=1):
@@ -104,6 +107,12 @@ def show_usage(exit_code=1):
     print("  install      Install built APK on connected device")
     print("  uninstall    Uninstall app from connected device")
     print("  clear-data   Clear project app data with confirmed foreground fallback")
+    print("  App Check Commands (5):")
+    print("    app-check status [--device SERIAL] [--backend auto|cli|rest]")
+    print("    app-check token [--device SERIAL]")
+    print("    app-check register [--device SERIAL | --all] [--backend auto|cli|rest]")
+    print("    app-check list [--backend auto|cli|rest]")
+    print("    app-check revoke <id> [--backend auto|cli|rest] [--force]")
     print("  install-scrcpy Install scrcpy for Android screen mirroring")
     print("  mirror       Launch scrcpy screen mirror (auto-detect device)")
     print("    --wireless Setup wireless ADB connection")
@@ -141,6 +150,12 @@ def show_usage(exit_code=1):
     print(f"  {GREEN}fdev mirror --turn-screen-off{NC}   # Mirror with device display turned off")
     print(f"  {GREEN}fdev datetime{NC}                  # Open device Date & Time settings")
     print(f"  {GREEN}fdev uninstall{NC}                 # Uninstall app (auto-selects device)")
+    print(f"  {GREEN}fdev app-check status{NC}           # Inspect App Check device/project readiness")
+    print(f"  {GREEN}fdev app-check token --device SERIAL{NC} # Print one device token")
+    print(f"  {GREEN}fdev app-check register --device SERIAL{NC} # Register one device token")
+    print(f"  {GREEN}fdev app-check register --all --backend cli{NC} # Register all ready devices")
+    print(f"  {GREEN}fdev app-check list --backend cli{NC} # List registered token metadata")
+    print(f"  {GREEN}fdev app-check revoke ID --force{NC} # Revoke one registered token")
     print(f"  {GREEN}fdev discard{NC}                   # Discard all uncommitted changes")
     print(f"  {GREEN}fdev sync dev-farhan dev-sufi{NC}  # Sync with multiple branches")
     print(f"  {GREEN}fdev deploy{NC}                    # Deploy to deployment branch")
@@ -217,6 +232,8 @@ def main():
         uninstall_app()
     elif command == "clear-data":
         clear_app_data()
+    elif command == "app-check":
+        sys.exit(app_check_command(sys.argv[2:]))
     elif command == "install-scrcpy":
         install_scrcpy()
 

{flutter_dev-0.1.13 → flutter_dev-0.1.14}/flutter_dev.egg-info/SOURCES.txt

@@ -20,6 +20,7 @@ core/state.py
 managers/__init__.py
 managers/ai.py
 managers/app.py
+managers/app_check.py
 managers/brew.py
 managers/build.py
 managers/datetime.py
@@ -34,6 +35,7 @@ managers/package.py
 managers/project.py
 managers/web_deploy.py
 tests/test_ai_config.py
+tests/test_app_check.py
 tests/test_app_commands.py
 tests/test_fdev_cli.py
 tests/test_localization.py

{flutter_dev-0.1.13 → flutter_dev-0.1.14}/managers/__init__.py

@@ -65,6 +65,10 @@ from .doctor import (
     run_doctor,
 )
 
+from .app_check import (
+    app_check_command,
+)
+
 from .brew import (
     brew_manager,
 )