release: 1.14.0

.claude/hooks/dart_formatter.sh

@@ -0,0 +1,12 @@
+#!/usr/bin/env bash
+# PostToolUse hook: auto-format .dart files after Write/Edit/MultiEdit.
+# Generated files (*.g.dart, *.freezed.dart, *.gr.dart) are skipped.
+INPUT=$(cat)
+FILE=$(jq -r '(.tool_input.file_path // .tool_input.path // "")' <<< "$INPUT")
+
+[[ -z "$FILE" || ! -f "$FILE" ]] && exit 0
+[[ "$FILE" != *.dart ]] && exit 0
+[[ "$FILE" == *.g.dart || "$FILE" == *.freezed.dart || "$FILE" == *.gr.dart ]] && exit 0
+
+ROOT=$(git rev-parse --show-toplevel 2>/dev/null) && cd "$ROOT"
+dart format "$FILE"

.claude/hooks/env_file_guard.sh

@@ -0,0 +1,33 @@
+#!/usr/bin/env bash
+# PreToolUse hook: block any access to .env files.
+INPUT=$(cat)
+TOOL=$(jq -r '.tool // ""' <<< "$INPUT")
+COMMAND=$(jq -r '.tool_input.command // ""' <<< "$INPUT")
+FILE=$(jq -r '(.tool_input.file_path // .tool_input.path // "")' <<< "$INPUT")
+
+if [[ "$TOOL" == "Bash" || "$TOOL" == "Run" ]]; then
+  if echo "$COMMAND" | grep -qE '\b(cat|less|more|head|tail|bat|view|nano|vi|vim|code|open|type|strings|xxd|hexdump|od|base64)\b' \
+  && echo "$COMMAND" | grep -qE '\.env($|\.)'; then
+    echo "🚫 BLOCKED: reads a .env file — secrets must not be read by the agent." >&2
+    exit 2
+  fi
+  if echo "$COMMAND" | grep -qE '\b(cp|mv|scp|rsync|tar|zip)\b' \
+  && echo "$COMMAND" | grep -qE '\.env($|\.)'; then
+    echo "🚫 BLOCKED: copies/moves a .env file — secrets must not be transferred." >&2
+    exit 2
+  fi
+  if echo "$COMMAND" | grep -qE '\b(find|grep|rg|ag|fd)\b' \
+  && echo "$COMMAND" | grep -qE '\.env($|\.)'; then
+    echo "🚫 BLOCKED: searches for .env files — secret files must not be scanned." >&2
+    exit 2
+  fi
+fi
+
+if [[ "$TOOL" =~ ^(Read|View|Edit|Write|MultiEdit)$ ]]; then
+  if echo "$FILE" | grep -qE '\.env($|\.)'; then
+    echo "🚫 BLOCKED: Cannot access '$FILE' — .env files contain secrets." >&2
+    exit 2
+  fi
+fi
+
+exit 0

.claude/hooks/md_formatter.sh

@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+# PostToolUse hook: runs markdownlint-cli2 --fix on .md files after Write/Edit/MultiEdit.
+INPUT=$(cat)
+FILE=$(jq -r '(.tool_input.file_path // .tool_input.path // "")' <<< "$INPUT")
+
+[[ -z "$FILE" || "$FILE" != *.md ]] && exit 0
+
+ROOT=$(git rev-parse --show-toplevel 2>/dev/null) && cd "$ROOT"
+npx --yes markdownlint-cli2 --fix "$FILE" >/dev/null 2>&1
+exit 0

.claude/hooks/newline_enforcer.sh

@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+# PostToolUse hook: ensure text files end with a newline after Write/Edit/MultiEdit.
+INPUT=$(cat)
+FILE=$(jq -r '(.tool_input.file_path // .tool_input.path // "")' <<< "$INPUT")
+
+[[ -z "$FILE" || ! -f "$FILE" ]] && exit 0
+[[ "$FILE" == *.g.dart || "$FILE" == *.freezed.dart || "$FILE" == *.gr.dart ]] && exit 0
+
+case "$FILE" in
+  *.dart|*.yaml|*.yml|*.json|*.md|*.py|*.sh|*.kt|*.kts|*.swift|*.gradle|*.xml|*.html|*.txt) ;;
+  *) exit 0 ;;
+esac
+
+[[ -n "$(tail -c 1 "$FILE")" ]] && printf '\n' >> "$FILE"
+exit 0

.claude/settings.json

@@ -0,0 +1,95 @@
+{
+  "permissions": {
+    "allow": [
+      "Bash(flutter test:*)",
+      "Bash(flutter analyze:*)",
+      "Bash(dart format:*)",
+      "Bash(dart fix:*)",
+      "Bash(flutter pub get:*)",
+      "Bash(flutter gen-l10n:*)",
+      "Bash(melos *)",
+      "Bash(git status:*)",
+      "Bash(git diff:*)",
+      "Bash(git log:*)",
+      "Bash(git add:*)",
+      "Bash(git commit:*)",
+      "Bash(git checkout:*)",
+      "Bash(git branch:*)",
+      "Bash(git fetch:*)",
+      "Bash(git pull:*)",
+      "Bash(git push:*)",
+      "Bash(git stash:*)",
+      "Bash(git merge:*)",
+      "Bash(git rebase:*)"
+    ],
+    "deny": [
+      "Bash(**/.env*)",
+      "Read(**/.env*)",
+      "Write(**/.env*)",
+      "Read(**/*.jks)",
+      "Read(**/*.keystore)",
+      "Read(**/*.p12)",
+      "Read(**/*.pem)",
+      "Read(**/*.key)",
+      "Read(**/*.p8)",
+      "Write(**/*.jks)",
+      "Write(**/*.keystore)",
+      "Write(**/*.p12)",
+      "Write(**/*.pem)",
+      "Write(**/*.key)",
+      "Write(**/*.p8)"
+    ]
+  },
+  "hooks": {
+    "PostToolUse": [
+      {
+        "matcher": "Write|Edit|MultiEdit",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "ROOT=$(git rev-parse --show-toplevel 2>/dev/null) || exit 0; bash \"$ROOT/.claude/hooks/md_formatter.sh\""
+          }
+        ]
+      },
+      {
+        "matcher": "Write|Edit|MultiEdit",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "ROOT=$(git rev-parse --show-toplevel 2>/dev/null) || exit 0; bash \"$ROOT/.claude/hooks/dart_formatter.sh\"",
+            "timeout": 30
+          }
+        ]
+      },
+      {
+        "matcher": "Write|Edit|MultiEdit",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "ROOT=$(git rev-parse --show-toplevel 2>/dev/null) || exit 0; bash \"$ROOT/.claude/hooks/newline_enforcer.sh\""
+          }
+        ]
+      }
+    ],
+    "PreToolUse": [
+      {
+        "matcher": "Bash|Run",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "ROOT=$(git rev-parse --show-toplevel 2>/dev/null) || exit 0; bash \"$ROOT/.claude/hooks/env_file_guard.sh\""
+          }
+        ]
+      },
+      {
+        "matcher": "Read|View|Edit|Write|MultiEdit",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "ROOT=$(git rev-parse --show-toplevel 2>/dev/null) || exit 0; bash \"$ROOT/.claude/hooks/env_file_guard.sh\""
+          }
+        ]
+      }
+    ]
+  }
+}

.github/copilot-instructions.md

@@ -0,0 +1,39 @@
+# GitHub Copilot Workspace Instructions
+
+You are a Senior Full-Stack Engineer specializing in **Flutter**. Your goal is to
+deliver clean, production-ready code while strictly adhering to the project's modular standards.
+
+## Rule Discovery & Context
+
+Before planning or writing any code, you **MUST**:
+
+1. Read [CONTRIBUTING.md](../CONTRIBUTING.md) for branch naming, commit message, and hook conventions.
+2. Read [AGENTS.md](../AGENTS.md) for code standards, architecture, and testing conventions.
+3. Prioritize project-specific rules over your default coding style.
+
+## Hard Constraints
+
+* **NO CYRILLIC:** Strictly prohibited in code, strings, logs, comments, and git metadata. English
+  only.
+* **CALLBACKS:** Must be single-expression. If logic exceeds one line, you MUST extract it into a
+  private method.
+* **CLEAN CODE:** No conversational filler. Output only commit-ready code.
+
+## Git Standards & Workflow
+
+You must validate all Git metadata against these requirements. Non-compliant PRs will be rejected.
+
+See [CONTRIBUTING.md](../CONTRIBUTING.md) for branch naming and commit message conventions.
+
+**Branch pattern:** `^(feature|feat|refactor|fix|chore|build|style|docs|release)/.+$`
+
+**Commit pattern:** `^(feat|fix|chore|refactor|test|docs|style|ci|perf|build|revert)(\(.+\))?:\ .+`
+
+## Pre-Submission Checklist
+
+Before finalizing a task and creating a Pull Request:
+
+1. **Validate:** Ensure branch and all commits match the regex patterns above.
+2. **Verify Logic:** Ensure all multi-line logic in widgets/services is extracted to private
+   methods.
+3. **Check Imports:** Ensure imports are grouped and sorted as defined in `.rules/global.rules.md`.

.github/flutter_version.yaml

@@ -1,3 +1,3 @@
 flutter:
-  version: "3.35.7"
+  version: "3.41.2"
   channel: "stable"

.github/workflows/git-lint.yml

@@ -0,0 +1,45 @@
+name: Git Lint
+
+on:
+  pull_request:
+    branches: [ main, dev, develop ]
+
+jobs:
+  validate:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Validate Branch Name
+        run: |
+          BRANCH="${{ github.head_ref }}"
+          REGEX="^(feat|feature|refactor|fix|chore|build|style|docs|release)/.+$"
+
+          if [[ ! "$BRANCH" =~ $REGEX ]]; then
+            echo "Invalid branch name: '$BRANCH'"
+            exit 1
+          fi
+
+      - name: Validate Commit Messages
+        run: |
+          COMMITS_FULL=$(git log --no-merges --format=%B origin/${{ github.base_ref }}..HEAD)
+          COMMITS_SUBJECTS=$(git log --no-merges --format=%s origin/${{ github.base_ref }}..HEAD)
+
+          if echo "$COMMITS_FULL" | grep -qP '\p{Cyrillic}'; then
+            echo "Cyrillic characters detected in commits."
+            exit 1
+          fi
+
+          REGEX="^(feat|fix|chore|refactor|test|docs|style|ci|perf|build|revert)(\([^)]+\))?: [^A-Z].+$"
+
+          while IFS= read -r SUBJECT; do
+            if [ -z "$SUBJECT" ]; then continue; fi
+
+            if [[ ! "$SUBJECT" =~ $REGEX ]]; then
+              echo "Invalid format or capitalized description: '$SUBJECT'"
+              exit 1
+            fi
+          done <<< "$COMMITS_SUBJECTS"

.gitignore

@@ -30,6 +30,7 @@
 .pub-cache/
 .pub/
 /build/
+**/build/
 
 # Web related
 
@@ -48,3 +49,13 @@ app.*.map.json
 /tool/configs/localizely_token.txt
 makefile.shared
 .env
+
+# Melos
+.melos_tool/
+**/pubspec_overrides.yaml
+
+# Agents
+.aider*
+.claude/settings.local.json
+CLAUDE.local.md
+**/.claude/

AGENTS.md

@@ -0,0 +1,51 @@
+# AGENTS.md
+
+WebTrit Phone — Flutter VoIP app, Melos monorepo.
+Flutter 3.32.4 (stable), Android SDK 35.0.1.
+
+## Build & Test
+
+```bash
+melos bootstrap                                               # install all deps
+melos run analyze                                             # lint all packages
+melos run test                                                # test all packages
+flutter test                                                  # unit/widget (app root)
+dart run build_runner build --delete-conflicting-outputs      # codegen
+dart run bin/create_new_schema_dump_and_test_migration.dart   # after Drift table changes
+```
+
+## Code Standards
+
+- No Cyrillic anywhere (source, comments, strings, logs, keys).
+- No inline comments — DartDoc only for public APIs.
+- No DI frameworks (`get_it`, `injectable`, Service Locator — forbidden).
+- Single quotes; 120-char line width.
+- Never edit `*.g.dart` / `*.freezed.dart` / `*.gr.dart` — regenerate via `build_runner`.
+- Required named params before optional named params.
+- Callbacks: single-expression only; extract multi-statement logic to a private method.
+- Imports: 6 groups, one blank line between, alphabetical within:
+  1. Dart SDK
+  2. Flutter SDK
+  3. External
+  4. Internal packages
+  5. `package:webtrit_phone/...`
+  6. Relative
+
+## Architecture
+
+```
+lib/        → app (features/, theme/, repositories/, models/, blocs/, l10n/)
+packages/   → shared libs (must NOT import from lib/)
+  webtrit_appearance_theme/  pure Dart theme DTOs
+  data/app_database/         Drift DB + DAOs
+  webtrit_api/               REST client
+  webtrit_signaling/         WebSocket signaling
+  webtrit_callkeep/          native call UI (external repo)
+```
+
+- State: `@freezed` for state; `sealed class + Equatable` for events (never `freezed` on events).
+- BLoC deps via `Provider`/`RepositoryProvider`; never pass `BuildContext` into BLoC/Service.
+- DB: DAOs only — never `AppDatabase` directly; Drift-generated classes stay in repo layer.
+- Theme: never raw `Colors.xxx` or `TextStyle` in widgets; `Theme.of(context).extension<T>()`.
+- Widgets: `StatelessWidget` always (not helper methods); dumb widgets in `features/*/view/widgets/`.
+- Tests: `MockClient`/`mocktail` — no real network calls; DB migrations via `SchemaVerifier`.

CLAUDE.md

@@ -0,0 +1,27 @@
+# WebTrit Phone — Claude Code
+
+@AGENTS.md
+@docs/call_architecture.md
+
+## Package Docs
+
+@packages/webtrit_api/AGENTS.md
+@packages/webtrit_signaling/AGENTS.md
+@packages/data/CLAUDE.md
+@packages/webtrit_appearance_theme/AGENTS.md
+@packages/_http_client/AGENTS.md
+@packages/_web_socket_channel/AGENTS.md
+@packages/ssl_certificates/CLAUDE.md
+@packages/store_info_extractor/AGENTS.md
+@packages/device_auto_rotate/AGENTS.md
+@packages/webtrit_phone_number/AGENTS.md
+
+## Gotchas
+
+- **l10n keys**: `<Bloc>_<Widget><Fields>[_<variant>]` — e.g. `lobby_AppBarTitle`, `login_Button_getPasswordBySMS`.
+- **initState / dispose**: `super.initState()` first; `super.dispose()` last; dispose in reverse creation order.
+- **withValues**: `withValues(alpha: 0.x)` — not deprecated `withOpacity()`.
+- **Card not Container**: elevation/shadow → `Card`, not `Container + BoxShadow`.
+- **Schema migration**: `dart run bin/create_new_schema_dump_and_test_migration.dart` after any Drift table change.
+- **Theming steps**: DTO → codegen → JSON assets → bridge → extension (all 5 steps when adding a theme property).
+- **Flavor combinator**: `--flavor deeplinkssmsReceiver` = deeplinks + sms receiver (see AGENTS.md for full matrix).