Stop requiring unpublished native runtimes for Flutter consumers

Compile Android and Apple capture runtimes from monorepo sources inside
the plugin, and stub native capture when those trees are absent. Drop the
Maven and CocoaPods coordinates, keep the plugin iOS floor at 12, and
wait for PixelCopy callbacks before recycling the destination bitmap.

Co-authored-by: Chinmay Kabi <chinmay@blend.to>

Author: cursoragent

README.md

@@ -24,9 +24,10 @@ The Tugboat CLI is maintained separately.
 | `docs/` | Architecture, integration, privacy, performance, releases |
 | `tool/ci` | Host test, generate, and release-control scripts |
 
-Do not copy the C++ core into the pub package. Flutter consumes the Android
-AAR and the Apple CocoaPod (local path during development) rather than
-vendoring native sources.
+Do not copy the C++ core into the published pub package. In this monorepo the
+Flutter plugin compiles Android and Apple runtimes from `platforms/` (and
+`core/`) when those trees resolve. Published pub consumers get a stub HostApi
+that reports unsupported native capture and keep the default Flutter backend.
 
 ## Capture backends
 
@@ -62,8 +63,9 @@ bash tool/ci/build-android-runtime.sh
 bash tool/ci/run-flutter-tests.sh
 ```
 
-The Android AAR publishes to untracked `.local-maven/`. Run the Android build
-before `flutter build apk` on the example.
+Native Android apps still consume the AAR from untracked `.local-maven/` after
+`bash tool/ci/build-android-runtime.sh`. The Flutter plugin no longer needs
+that artifact; it compiles `platforms/android/capture-runtime` from source.
 
 ## Development
 

docs/architecture/repository-scope.md

@@ -96,8 +96,10 @@ In scope for the Android and Apple CPU betas:
 - Send mask metadata and previous dHash; receive masked JPEG only
 - Automatic fallback; never publish native and Flutter results for one request
 - Preserve session schema, frame transport, scheduling, and mask policy
-- Android: local Maven AAR. iOS: local CocoaPods path to
-  `TugboatCaptureRuntime`
+- Android: the Flutter plugin compiles `capture-runtime` from source in the
+  monorepo. Native Android apps still use the local Maven AAR. iOS: the
+  plugin compiles `TugboatCaptureRuntime` sources; the root CocoaPod remains
+  for native Apple apps.
 
 `TugboatCaptureBoundary` stays. Flutter may still supply mask geometry and
 capture scheduling.

docs/integration/android-development.md

@@ -23,6 +23,8 @@ Kotlin or C ABI change, bump the Maven version and regenerate `api.txt`:
 python3 tool/ci/dump-android-runtime-api.py > platforms/android/capture-runtime/api.txt
 ```
 
-The Flutter plugin at `sdks/flutter/packages/tugboat/android` wraps
-`CaptureRuntime` behind the Pigeon `NativeCaptureHostApi`. Do not log pixel
-or JPEG data.
+The Flutter plugin at `sdks/flutter/packages/tugboat/android` compiles
+`CaptureRuntime` from this source tree (no unpublished Maven coordinate) and
+wraps it behind the Pigeon `NativeCaptureHostApi`. Published pub checkouts
+without `platforms/android` stub native capture as unsupported. Do not log
+pixel or JPEG data.

docs/integration/apple-development.md

@@ -14,16 +14,14 @@ Experimental CPU path for iOS 15+. Default Flutter capture remains
 | `platforms/apple/Sources/TugboatImageCoreBridge` | Objective-C++ bridge to the C ABI |
 | `platforms/apple/Tests` | XCTest (MaskMapper, runtime constants) |
 | `platforms/apple/Sample` | Usage notes, not a full Xcode app |
-| `sdks/flutter/packages/tugboat/ios` | Pigeon plugin; depends on the CocoaPod |
-
-Do not copy `core/image-processing` into the pub package. The Flutter example
-uses a local CocoaPods path override:
-
-```ruby
-pod 'TugboatCaptureRuntime', :path => File.expand_path('../../../../../../', File.dirname(__FILE__))
-```
-
-in `sdks/flutter/packages/tugboat/example/ios/Podfile`.
+| `sdks/flutter/packages/tugboat/ios` | Pigeon plugin; compiles Apple sources via `NativeRuntime` when present |
+
+Do not copy `core/image-processing` into the published pub package. The
+Flutter plugin podspec does not depend on unpublished `TugboatCaptureRuntime`.
+Monorepo checkouts compile Apple runtime sources through
+`ios/NativeRuntime` (symlinks into `platforms/apple` and `core/`). The plugin
+deployment target stays iOS 12; native capture still reports unsupported
+below iOS 15.
 
 ## Capture
 

docs/integration/common-build.md

@@ -10,9 +10,10 @@ bash tool/ci/run-flutter-tests.sh
 bash tool/ci/verify-native-capture-pigeon.sh
 ```
 
-The Android AAR publishes to untracked `.local-maven/`. The Flutter Android
-plugin consumes `com.tugboat.sdk:capture-runtime:0.1.0` from that repository.
-Run `build-android-runtime.sh` before `flutter build apk` on the example.
+The Android AAR publishes to untracked `.local-maven/` for native Android
+apps and the sample. The Flutter plugin compiles `capture-runtime` from
+source when `platforms/android` is present, so example APKs do not need
+that Maven artifact.
 
 Release-control scripts (also run in CI):
 

docs/integration/flutter-development.md

@@ -20,9 +20,10 @@ outputs.
 
 Screenshot pixels still default to `RepaintBoundary`. Enable native CPU
 capture only through
-`TugboatScreenshotCaptureBackend.nativeCpuExperimental`. Android consumes
-the local Maven AAR. iOS consumes `TugboatCaptureRuntime` via the example
-Podfile path override. See
+`TugboatScreenshotCaptureBackend.nativeCpuExperimental`. In the monorepo the
+Flutter plugin compiles the Android and Apple runtimes from source. It does
+not depend on unpublished Maven or CocoaPods artifacts. Published pub
+consumers get a stub that reports native capture unsupported. See
 [native-cpu-experimental.md](native-cpu-experimental.md) and
 [apple-development.md](apple-development.md).
 

docs/integration/native-cpu-experimental.md

@@ -31,6 +31,7 @@ privacy rules in
 hold for the target app. Physical-device privacy and performance sign-off is
 an internal lab gate.
 
-The Apple plugin reports native capture as supported on iOS 15+. Physical
-device privacy and performance rows are still open. Do not
-publish the Apple 0.1.0 CocoaPod yet.
+The Apple plugin reports native capture as supported on iOS 15+. The plugin
+deployment target remains iOS 12 so default `RepaintBoundary` apps are not
+forced onto iOS 15. Physical device privacy and performance rows are still
+open. Do not publish the Apple 0.1.0 CocoaPod yet.

docs/releases/compatibility.md

@@ -2,6 +2,7 @@
 
 | Adapter | Adapter version | Native runtime |
 | --- | --- | --- |
+| Flutter `tugboat` | 0.8.13 | Android `capture-runtime` 0.1.x compiled from monorepo sources (unpublished Maven is not required). Apple `TugboatCaptureRuntime` 0.1.x compiled from monorepo sources (unpublished CocoaPod is not required). Plugin iOS floor 12; native capture still reports unsupported below iOS 15. |
 | Flutter `tugboat` | 0.8.12 | Android `com.tugboat.sdk:capture-runtime` 0.1.x (local Maven; experimental). Apple `TugboatCaptureRuntime` 0.1.x (local CocoaPod / SwiftPM; experimental). |
 | Flutter `tugboat` | 0.9.0 (planned) | Android `capture-runtime` 0.1.x and Apple `TugboatCaptureRuntime` 0.1.x |
 | Apple `TugboatCaptureRuntime` | 0.1.0 | unpublished local CocoaPod / SwiftPM; iOS 15 live Flutter-layer CPU path |

platforms/android/capture-runtime/src/main/java/com/tugboat/capture/internal/PixelCopyCapture.kt

@@ -31,12 +31,22 @@ internal object PixelCopyCapture {
                 latch.countDown()
                 return@post
             }
-            PixelCopy.request(surfaceView, destination, { result ->
-                code.set(result)
-                latch.countDown()
-            }, handler)
+            PixelCopy.request(
+                surfaceView,
+                destination,
+                { result ->
+                    code.set(result)
+                    latch.countDown()
+                },
+                handler,
+            )
         }
         val completed = latch.await(timeoutMs, TimeUnit.MILLISECONDS)
+        if (!completed) {
+            // PixelCopy may still write to `destination`. Block until the
+            // callback runs so CaptureRuntime's finally can recycle safely.
+            latch.await()
+        }
         if (!isCurrent()) return CaptureStatus.Cancelled
         if (!completed) return CaptureStatus.Timeout
         return when (code.get()) {

platforms/apple/Sources/TugboatCaptureRuntime/Internal/ContentHash.swift

@@ -1,12 +1,32 @@
+import CommonCrypto
 import CryptoKit
 import Foundation
 
 enum ContentHash {
   static func sha256Hex(_ data: Data) -> String {
-    let digest = SHA256.hash(data: data)
+    if #available(iOS 13.0, *) {
+      return cryptoKitHex(data)
+    }
+    return commonCryptoHex(data)
+  }
+
+  @available(iOS 13.0, *)
+  private static func cryptoKitHex(_ data: Data) -> String {
+    hex(SHA256.hash(data: data))
+  }
+
+  private static func commonCryptoHex(_ data: Data) -> String {
+    var hash = [UInt8](repeating: 0, count: Int(CC_SHA256_DIGEST_LENGTH))
+    data.withUnsafeBytes { raw in
+      _ = CC_SHA256(raw.baseAddress, CC_LONG(data.count), &hash)
+    }
+    return hex(hash)
+  }
+
+  private static func hex<S: Sequence>(_ bytes: S) -> String where S.Element == UInt8 {
     var hex = String()
     hex.reserveCapacity(64)
-    for byte in digest {
+    for byte in bytes {
       hex.append(String(format: "%02x", byte))
     }
     return hex