Added #

Sentinel — Silent HTTP Interception

• Sentinel — HttpOverrides-based HTTP interception that captures all dart:io HTTP traffic (works with package:http, Dio, Envoy, raw HttpClient). Like Charles Proxy, built into the app. Install with Colossus.init(enableSentinel: true).
• SentinelRecord — Immutable HTTP transaction record with method, URL, headers, request/response bodies, timing, status code, and outcome. Supports toMetricJson() (compact) and toDetailJson() (full) serialization.
• SentinelConfig — Configuration for URL filtering (excludePatterns, includePatterns), body capture limits (maxBodyCapture, captureRequestBody, captureResponseBody), header capture, and record retention (maxRecords).
• Sentinel.install() / uninstall() — One-call install/teardown. Chains previous HttpOverrides by default for compatibility.
• Sentinel.createClient() — Factory for creating intercepted HttpClient instances directly, bypassing zone-scoped overrides (useful in Flutter test environments).
• chainPreviousOverrides — Parameter to skip chaining previous HttpOverrides in test environments where mock overrides block network access.
• Colossus integration — Sentinel records auto-feed into trackApiMetric(), Tremor evaluation, Relay endpoints, and Lens overlay.
• Relay endpoints — GET /sentinel/records and DELETE /sentinel/records for querying/clearing HTTP records from MCP servers.

DevToolsBridge — Flutter DevTools Integration

• DevToolsBridge — Connects Colossus to Flutter DevTools via three integration layers. Installed automatically by Colossus.init(enableDevTools: true) (default in debug mode).
• Service extensions — 8 queryable ext.colossus.* endpoints: getPerformance, getApiMetrics, getSentinelRecords, getTerrain, getMemorySnapshot, getAlerts, getFrameworkErrors, getEvents (with optional source filter).
• Timeline annotations — timelinePageLoad(), timelineTremor(), timelineApiCall() feed named spans into the DevTools Performance timeline for correlation with frame timing.
• Event streaming — postTremorAlert(), postApiMetric(), postRouteChange(), postFrameworkError() push real-time events via dart:developer postEvent for live dashboards without polling.
• Structured logging — DevToolsBridge.log() writes to the standard DevTools Logging tab (visible without custom extensions).

Performance #

• Sentinel overhead — SentinelRecord creation: 0.34 µs/record. URL filtering: 0.08 µs/url. Body buffering (30B): 0.18 µs. Install/uninstall: 0.01 µs/cycle. All sub-microsecond on hot path.
• DevToolsBridge overhead — Timeline annotation: 0.86 µs/call. Event posting: 0.64 µs/call. Logging: 0.19 µs/call.

Added #

• WidgetTester text injection — StratagemRunner now accepts an optional WidgetTester parameter. When provided, enterText and clearText actions use tester.enterText() from flutter_test instead of manual controller lookup. Falls back to 3-strategy injection if no EditableText found at target position.
• Colossus tester passthrough — executeStratagem(), executeStratagemFile(), executeCampaign(), and executeCampaignJson() accept optional WidgetTester? tester for widget test contexts.
• StrikeAt text input — New strikeText(), strikeTextByKey(), and strikeClearText() methods on the StrikeAt extension for text input in widget tests.

Fixed #

• Keypad Detection — validLabel in Scry now allows single-character labels for interactive widgets (digits, operators). _extractLabel falls back to Semantics label for icon-only interactive widgets. _extractGlyph nulls out icon-text labels on interactive widgets to prevent duplicate labeling.
• Tremor Log Flooding — Added 30-second cooldown to Tremor.evaluate(). Recurring tremors (e.g. jankRate, fps) now fire once per cooldown window instead of on every frame batch (~60/sec). Cooldown is configurable via the cooldown parameter on all factory constructors and MCP addTremor.

Changed #

• maxGlyphs — Increased from 200 to 300 to accommodate denser screens (e.g. keypads with 16+ buttons).

Fixed #

• Stale Tableau — getAiContext() now passes the current route to TableauCapture.capture(), fixing stale screen data when navigated away from root.
• StrikeAt FakeAsync — Replaced Future.delayed with pump(duration) to avoid test hangs in FakeAsync zones. Added monotonic timeStamp on swipe/drag PointerEvents for VelocityTracker. Added pumpAndSettle() for double-tap.
• StratagemRunner timestamps — Added _elapsed Duration field for monotonically increasing timestamps during stratagem execution.
• flutter_test dependency — Moved flutter_test from dev_dependencies to dependencies since strike_at.dart is in lib/.

Added #

• StrikeAt export — strike_at.dart is now exported from the package barrel file.

Performance #

• Scry observation pipeline — Merged overlay scan + maxDepth into Pass 1 (−2 glyph iterations). Merged 5 scoring sub-passes into 1 combined _applyAllScoring pass (−4 element iterations). Added _Glyph pre-extraction class to eliminate repeated map lookups/casts across 7+ passes. Converted _overlayTypes from List to Set for O(1) lookup. Eliminated ancestors.join(' ') in _groupElements and _detectAlerts. Result: Scry Small −25%, Form −21%, Medium/Large/DataRich −11%.

Fixed #

• Fresco Screenshot on Inner Pages — Screenshots captured via Relay on navigated (non-root) pages returned blank white images (375 bytes). Root cause: RenderRepaintBoundary.toImage() produced stale composited layers after route changes. Fixed by capturing directly from RenderView.layer (the fully composited screen output) and pumping a frame via endOfFrame before capture. Screenshots now work on all pages regardless of RepaintBoundary presence.

Fixed #

• GestureDetector Visibility — GestureDetector and InkWell wrapping non-text children (Container, Image, custom widgets) were invisible to Scry because label-less Glyphs were filtered out in the observation pipeline. TableauCapture now synthesizes labels from the widget Key (preferred) or screen coordinates (fallback), ensuring all interactive widgets are discoverable.
• GestureDetector Enabled State — _getEnabledState now checks onTap, onLongPress, and onDoubleTap for GestureDetector, and onTap for InkWell. Previously both always reported isEnabled: true regardless of whether callbacks were set.

Recommendation #

Add a Key to GestureDetector and InkWell widgets that wrap non-text children for stable Scry targeting:

GestureDetector(
  key: const ValueKey('profile-avatar'),
  onTap: () => navigateToProfile(),
  child: CircleAvatar(backgroundImage: userImage),
)

Fixed #

• DI Inspection — Compute lazy types from public API (registeredTypes.difference(instances)) instead of unpublished Titan.lazyTypes getter. Fixes static analysis error that caused 0/50 pana score.
• Relay WASM Compatibility — Changed conditional import from dart.library.html to dart.library.js_interop for web platform selection.

Changed #

• Updated titan_envoy constraint to ^1.1.0 (transport abstraction layer)

Added #

Scry — Real-Time AI Agent Interface (18 Intelligence Capabilities)

• Scry — AI agent loop: observe screen → decide → act → observe result. Returns structured ScryGaze with all visible elements, screen type classification, form status, and spatial analysis.
• ScryGaze — Observation result with ScryElement list, ScryScreenType, alerts, and landmarks.
• ScryElement — Screen element with kind, label, value, semantics, position, and reachability metadata.
• ScryDiff — Compare screen states: appeared/disappeared/changed elements, route changes, overlay changes.
• 18 intelligence capabilities: spatial layout, reachability, scroll inventory, overlay detection, toggle states, tab order, target stability scoring, multiplicity, ancestor context, form validation, element grouping, landmarks, visual prominence, value type inference, action impact prediction, layout pattern detection.
• 16 action types: tap, enterText, clearText, scroll, back, longPress, doubleTap, swipe, navigate, waitForElement, waitForElementGone, pressKey, submitField, toggleSwitch, toggleCheckbox, selectDropdown.
• Multi-action support — scry_act accepts an actions array for batched execution.
• Drag action — scry_act supports drag with value="x,y" coordinate format.
• Screen type classification — ScryScreenType enum: login, form, list, detail, settings, empty, error, dashboard, unknown.
• Alert detection — ScryAlert with ScryAlertSeverity for framework error and performance issue highlighting.

Relay — Cross-Platform HTTP Bridge

• Relay — Platform-agnostic HTTP bridge connecting MCP server to running Flutter app.
  • Native (Android, iOS, macOS, Windows, Linux): HTTP server on port 8642
  • Web (Chrome, Firefox, Edge): WebSocket client connecting to MCP server's /relay endpoint (reversed connection)
• RelayConfig — Configuration with host, port, authToken, targetUrl.
• RelayHandler — 36 route handlers for all MCP tools.
• RelayStatus — Health reporting with uptime and platform info.
• Graceful port-in-use handling — WebSocket relay silently falls back on busy ports.

MCP Server — 48 Tools, 5 Transports

• Blueprint MCP Server — Full Model Context Protocol server with 48 tools across 11 categories.
• 5 Transport protocols: stdio, HTTP+SSE, WebSocket, Streamable HTTP (MCP 2025-03-26), auto-detect (all-in-one).
• TLS/SSL support — --tls-cert and --tls-key for encrypted connections across all HTTP transports.
• Bearer token authentication — --auth-token (repeatable) for secure access. Health endpoint remains public.
• API key rotation — --auth-tokens-file with hot-reload: file changes detected automatically, zero-downtime key rotation without server restart.
• McpWebSocketClient — Dart client with auto-reconnect, exponential backoff (±25% jitter), heartbeat/pong, message queuing, and McpConnectionStatus stream.
• Screenshot vision — capture_screenshot saves PNG to .titan/screenshots/ and returns MCP image content for AI visual analysis.
• toggle_lens — Show/hide Lens FAB during MCP sessions.

New MCP Tools (17 tools added since 1.3.0)

• get_api_metrics — API metrics with latency percentiles (p50/p95/p99), success rate, endpoint grouping
• get_api_errors — Failed API requests for quick error triage
• get_tremors — Current Tremor alert thresholds
• add_tremor — Add Tremor alerts at runtime (8 types: fps, jankRate, pageLoad, memory, rebuilds, leaks, apiLatency, apiErrorRate)
• remove_tremor — Remove Tremor by name
• reset_tremors — Reset all Tremor fired states
• get_widget_tree — Widget tree statistics (element count, max depth, top 20 types)
• get_events — Integration events from Colossus bridges (atlas, basalt, argus, bastion)
• get_route_history — Navigation route history in chronological order
• replay_session — Replay saved Shade sessions via Phantom
• capture_screenshot — Screenshot with disk save + inline image content
• audit_accessibility — Accessibility audit (labels, touch targets, semantic roles)
• inspect_di — Titan DI container (Vault) inspection
• inspect_envoy — Envoy HTTP client configuration and courier chain
• configure_envoy — Runtime Envoy configuration (base URL, timeouts, headers, couriers)
• reload_page — Re-navigate current route or full widget tree rebuild
• toggle_lens — Show/hide Lens debug FAB

Cross-Package Integration Bridges

• ColossusEnvoy — Auto-wires Envoy MetricsCourier metrics to Colossus for API tracking.
• ColossusBasalt — Bridge for Basalt infrastructure events (circuit trips, saga steps, etc.).
• ColossusBastion — Bridge for Bastion widget lifecycle events.
• ColossusAtlasObserver — Bridge for Atlas navigation events and page load timing.
• ColossusArgus — Bridge for Argus authentication state changes.
• Colossus.trackEvent() — Unified event ingestion from all bridges.

Lens Integration Tabs

• BridgeLensTab — Cross-package event visualization with source filtering.
• EnvoyLensTab — HTTP traffic visualization (requests, latency, errors, courier chain).
• ArgusLensTab — Auth session tracking (sign-in/sign-out events, token refreshes).

Error Detection

• FrameworkError — Captures FlutterError.onError and ErrorWidget instances for overflow, build, layout, paint, and gesture errors.
• get_framework_errors MCP tool for error reporting.

Performance Monitoring Enhancements

• API Tremors — apiLatency and apiErrorRate Tremor types for HTTP monitoring.
• MarkCategory.api — New metric category for API-related marks.
• Richer API reporting — Latency percentiles, endpoint auto-grouping (numeric IDs and UUIDs normalized).

Changed #

• FAB hidden during recording — Lens FAB auto-hides when Shade recording is active.
• Tooltip → Semantics — Lens FAB uses Semantics widget instead of Tooltip to avoid "No Overlay" crash (Lens wraps above MaterialApp).
• Lens.relayConnected — ValueNotifier<bool> for reactive FAB visibility control via MCP.
• Updated dependencies — titan_atlas: ^1.1.1, titan_argus: ^1.0.4.

Fixed #

• Web relay query params — WebSocket relay now parses path with Uri.tryParse() to strip query params before route matching.
• Scry proximity pairs — Reject distant horizontal proximity pairs.
• Interactive multiplicity — Suppress duplicate interactive element detection.
• NavigationBar targeting — Classify NavigationDestination as interactive for correct tap targeting.
• Semantics label discovery — widget.properties.label for Lens FAB detection in Scry glyph scanner.

Added #

AI Blueprint Generation — Six-Phase Discovery & Testing Engine

• Scout — Passive session analyzer that builds a flow graph (Terrain) from recorded Shade sessions. Discovers screens, transitions, and interactive elements automatically.
• Terrain — Flow graph model storing discovered routes (Outposts), transitions (Marches), and structural metadata (dead ends, unreliable transitions, auth-protected screens). Exports to Mermaid diagrams and AI-ready maps.
• Outpost — Discovered screen node with route pattern, interactive elements, display elements, and dimensional info.
• March — Discovered transition edge with source/destination routes, trigger type, trigger element, timing, and reliability score.
• Lineage — Prerequisite chain resolver that computes the navigation steps required to reach any screen from the app's entry point. Outputs AI-consumable setup instructions.
• Gauntlet — Edge-case test generator that produces targeted Stratagems for specific screens based on their interactive elements (taps, long-presses, text inputs, scrolls, boundary values).
• Stratagem — Executable test step specification with route, action, expected outcomes, and metadata. Serializable to/from JSON for AI consumption. Includes StratagemRunner for headless execution.
• Campaign — Multi-route test orchestrator that sequences Stratagems across flows, managing setup, execution, and teardown. Supports JSON campaign definitions.
• Verdict — Per-Stratagem execution result with pass/fail, timing, error details, and captured Tableau snapshots. Rich equality and serialization.
• Debrief — Verdict analyzer that produces structured reports with pass/fail ratios, failure categorization, fix suggestions, and AI-ready summaries.
• RouteParameterizer — Normalizes dynamic route segments (e.g., /user/42 → /user/:id) for consistent terrain mapping.
• Signet — Screen identity fingerprint using interactive element hashing for change detection across sessions.

AI-Bridge Export — Bringing Blueprint Data to IDE-Time AI Assistants

• BlueprintExport — Structured container for exporting Terrain, Stratagems, Verdicts, and Debrief results to disk. Factory constructors fromScout() (live app) and fromSessions() (offline analysis). Serializes to JSON via toJson()/toJsonString() and generates AI-ready Markdown prompts via toAiPrompt().
• BlueprintExportIO — File I/O utilities: save() writes blueprint.json, savePrompt() writes blueprint-prompt.md, saveAll() writes both. loadTerrain() and loadSessions() for offline consumption. Auto-creates directories.
• Export CLI (bin/export_blueprint.dart) — Command-line tool for offline Blueprint export from saved Shade sessions. Flags: --sessions-dir, --output-dir, --patterns (comma-separated route patterns), --intensity (quick/standard/thorough), --prompt-only, --help.
• Blueprint MCP Server (bin/blueprint_mcp_server.dart) — Model Context Protocol server exposing Blueprint data to AI assistants (Copilot, Claude) over stdio. Tools: get_terrain (json/mermaid/ai_map), get_stratagems, get_ai_prompt, get_dead_ends, get_unreliable_routes, get_route_patterns. File-level caching with automatic invalidation.
• blueprintExportDirectory on ColossusPlugin — Set a directory path (e.g., '.titan') and the plugin auto-exports blueprint.json + blueprint-prompt.md on app shutdown via onDetach(). Fire-and-forget for zero-friction developer experience.

Blueprint Lens Tab — Interactive Debug Overlay

• BlueprintLensTab — Lens plugin with five interactive sub-tabs:
  • Terrain — Live flow graph metrics (screens, transitions, sessions, dead ends, unreliable transitions) with reactive auto-refresh
  • Lineage — Route selector and prerequisite chain viewer with copy-to-clipboard actions
  • Gauntlet — Edge-case generator with intensity selector, stratagem cards, and pattern count display
  • Campaign — JSON campaign builder with execute/copy actions and result display
  • Debrief — Verdict analysis with insights, fix suggestions, and AI summary export

Zero-Code Auto-Integration

• autoLearnSessions — When true (default), completed Shade recordings are automatically fed to Scout. No manual learnFromSession() wiring needed.
• terrainNotifier — ChangeNotifier that fires after every learnFromSession() call. Blueprint Lens Tab subscribes automatically for live-updating metrics.
• autoAtlasIntegration — When true (default), ColossusPlugin automatically:
  • Registers ColossusAtlasObserver for page-load timing via Atlas.addObserver()
  • Pre-seeds RouteParameterizer with declared Atlas route patterns via Atlas.registeredPatterns
  • Auto-wires Shade.getCurrentRoute via Atlas.current.path (only if not user-provided)
  • Gracefully degrades if Atlas is not present or not initialized
• enableTableauCapture — Defaults to true in ColossusPlugin (vs false in Colossus.init() for backward compatibility). Required for Scout discovery.

Changed #

• ColossusPlugin — Three new configuration parameters: enableTableauCapture, autoLearnSessions, autoAtlasIntegration. All default to true for zero-configuration setup.
• Colossus.init() — New autoLearnSessions parameter (default: true). Colossus now owns the Shade → Scout → Terrain pipeline internally.

Fixed #

• Shade session persistence — Recorded sessions now survive Lens hide/show cycles. Session is stored on Colossus instance instead of disposed Pillar.

Added #

• Auto-show Lens after FAB stop — Lens overlay automatically opens when stopping a recording via the floating action button.
• Draggable FAB — Lens floating button can be dragged to any position. Position persists across hide/show. Added Lens.resetFabPosition() to restore defaults.

Changed #

• Plugin tabs first — Plugin tabs (Shade) now appear before built-in tabs (Pillars, Herald, Vigil, Chronicle) in the Lens panel.

Added #

• ColossusPlugin — One-line TitanPlugin adapter for full Colossus integration. Add or remove performance monitoring with a single line in Beacon(plugins: [...])
  • Manages Colossus.init(), Lens overlay, ShadeListener, export/route callbacks, auto-replay, and Colossus.shutdown() automatically

Changed #

• Assert → Runtime Errors: Phantom speedMultiplier validation and Colossus.instance guard changed from debug-only assert to runtime errors (ArgumentError / StateError)

Changed #

• Updated titan dependency to ^1.1.0

Added #

• Example file for pub.dev documentation score

Changed #

• Updated titan dependency to ^1.0.1
• Updated titan_bastion dependency to ^1.0.1
• Updated titan_atlas dependency to ^1.0.1

• Lens — Lens, LensPlugin, and LensLogSink moved here from titan_bastion. Import from package:titan_colossus/titan_colossus.dart.

• Initial release
• Colossus — Enterprise performance monitoring Pillar
• Pulse — Frame metrics (FPS, jank detection, build/raster timing)
• Stride — Page load timing with Atlas integration
• Vessel — Memory monitoring and leak detection
• Echo — Widget rebuild tracking
• Tremor — Configurable performance alerts via Herald
• Decree — Performance report generation
• Lens integration — Plugin tab for the Lens debug overlay
• ColossusAtlasObserver — Automatic route timing via Atlas