* feat(mobile): add privacy mode to mask money values Adds an app-wide "privacy mode" so users can hide monetary amounts from over-the-shoulder view. - PrivacyProvider (ChangeNotifier) backed by PreferencesService, so the choice persists across launches and every money widget rebuilds on toggle. - MoneyMasker.mask() collapses an amount's numeric portion into a short fixed run of bullets while keeping the currency symbol and sign (e.g. CA$1,234.56 -> CA$••••). A fixed run avoids leaking the value's magnitude and reads cleanly without stray separators. Currency- and locale-agnostic — it operates on already-formatted strings. - Masking applied at every money render site: net worth + per-currency totals + breakdown sheet (NetWorthCard), account balances (AccountCard, AccountDetailHeader, transaction form account selector), and transaction amounts (transactions list, recent transactions, calendar). - Two entry points: a "Hide amounts" switch in Settings -> Security, and a quick eye toggle in the top bar (visible on every tab). Tests: MoneyMasker unit tests (fixed-run mask, magnitude hidden, symbol/ sign kept, passthrough, idempotent) + a widget test asserting the net worth masks/unmasks as the provider flips; account_card_test updated to provide the new provider. flutter analyze: no new issues; full suite (123) green. * fix(mobile): address privacy-mode review feedback - Startup masking (Codex P1): read the privacy preference in main() before runApp and seed PrivacyProvider with it, so the first frame already has the correct value — money is never briefly rendered unmasked for a user who enabled "Hide amounts". Provider stays fail-closed otherwise: starts masked, SureApp's no-arg default is masked, and a failed read keeps it masked. A late-completing initial load no longer clobbers an explicit user toggle. - setHidden() reverts the in-memory state (and logs) if persistence fails, keeping the UI consistent with what's actually stored. - Mask the cash-balance detail chip in AccountDetailHeader (was leaking the cash position in privacy mode). - Privacy top-bar toggle gets a "Toggle privacy" tooltip + icon semantic label for accessibility (kept as an InkWell to match the adjacent settings control). - Tests: assert fail-closed initial state; assert the exact masked count; test the persistence round-trip (set -> reload); add PreferencesService.resetForTest() and reset between tests so the cached singleton can't leak state. 125 tests pass; flutter analyze: no new issues. * refactor(mobile): thread hideAmounts through calendar tiles Per review: the calendar tile builders read PrivacyProvider via context.read, relying implicitly on the parent build()'s context.watch to rebuild them — fragile if a tile is later extracted or wrapped in a RepaintBoundary. Pass hideAmounts down explicitly instead, matching the recent_transactions_screen pattern: - build() (context.watch) -> _buildCalendar -> _buildDayCell - _showTransactionsDialog reads once when the modal opens -> _buildTransactionTile No more context.read inside tile methods. 125 tests pass; analyze clean. * fix(mobile): watch PrivacyProvider inside calendar dialog builder Moving the hideAmounts read inside the showDialog builder and switching from context.read to context.watch ensures the dialog re-masks transaction amounts if the user toggles privacy mode while the dialog is open.
Sure Mobile
A Flutter mobile application for Sure personal finance management system. This is the mobile client that connects to the Sure backend server.
About
This app is a mobile companion to the Sure personal finance management system. It provides basic functionality to:
- Login - Authenticate with your Sure Finances server
- View Balance - See all your accounts and their balances
For more detailed technical documentation, see docs/TECHNICAL_GUIDE.md.
Features
- 🔐 Secure authentication with OAuth 2.0
- 📱 Cross-platform support (Android & iOS)
- 💰 View all linked accounts
- 🎨 Material Design 3 with light/dark theme support
- 🔄 Token refresh for persistent sessions
- 🔒 Two-factor authentication (MFA) support
Requirements
- Flutter SDK >= 3.0.0
- Dart SDK >= 3.0.0
- Android SDK (for Android builds)
- Xcode (for iOS builds)
Getting Started
1. Install Flutter
Follow the official Flutter installation guide: https://docs.flutter.dev/get-started/install
2. Install Dependencies
flutter pub get
# For iOS development, also install CocoaPods dependencies
cd ios
pod install
cd ..
3. Generate App Icons
flutter pub run flutter_launcher_icons
This step generates the app icons for all platforms based on the source icon in assets/icon/app_icon.png. This is required before building the app locally.
4. Configure API Endpoint
Edit lib/services/api_config.dart to point to your Sure Finances server:
// For local development with Android emulator
static String _baseUrl = 'http://10.0.2.2:3000';
// For local development with iOS simulator
static String _baseUrl = 'http://localhost:3000';
// For production
static String _baseUrl = 'https://your-sure-server.com';
5. Run the App
# For Android
flutter run -d android
# For iOS
flutter run -d <simulator-device-UDID>
# or
flutter run -d "iPhone 17 Pro"
# For web (development only)
flutter run -d chrome
Project Structure
.
├── lib/
│ ├── main.dart # App entry point
│ ├── models/ # Data models
│ │ ├── account.dart
│ │ ├── auth_tokens.dart
│ │ └── user.dart
│ ├── providers/ # State management
│ │ ├── auth_provider.dart
│ │ └── accounts_provider.dart
│ ├── screens/ # UI screens
│ │ ├── login_screen.dart
│ │ └── dashboard_screen.dart
│ ├── services/ # API services
│ │ ├── api_config.dart
│ │ ├── auth_service.dart
│ │ ├── accounts_service.dart
│ │ └── device_service.dart
│ └── widgets/ # Reusable widgets
│ └── account_card.dart
├── android/ # Android configuration
├── ios/ # iOS configuration
├── pubspec.yaml # Dependencies
└── README.md
API Integration
This app integrates with the Sure Finances Rails API:
Authentication
POST /api/v1/auth/login- User authenticationPOST /api/v1/auth/signup- User registrationPOST /api/v1/auth/refresh- Token refresh
Accounts
GET /api/v1/accounts- Fetch user accounts
Transactions
GET /api/v1/transactions- Get all transactions (optionally filter byaccount_idquery parameter)POST /api/v1/transactions- Create a new transactionPUT /api/v1/transactions/:id- Update an existing transactionDELETE /api/v1/transactions/:id- Delete a transaction
Transaction POST Request Format
{
"transaction": {
"account_id": "2980ffb0-f595-4572-be0e-7b9b9c53949b", // required
"name": "test", // required
"date": "2025-07-15", // required
"amount": 100, // optional, defaults to 0
"currency": "AUD", // optional, defaults to your profile currency
"nature": "expense" // optional, defaults to "expense", other option is "income"
}
}
CI/CD
The app includes automated CI/CD via GitHub Actions (.github/workflows/flutter-build.yml):
- Triggers: On push/PR to
mainbranch when Flutter files change - Android Build: Generates release APK and AAB artifacts
- iOS Build: Generates iOS release build (unsigned)
- Quality Checks: Code analysis and tests run before building
- TestFlight:
mobile-release(mobile tags) triggers.github/workflows/ios-testflight.ymlfor signed App Store Connect uploads as part of one release flow
See mobile/docs/iOS_TESTFLIGHT.md for required secrets and setup.
Downloading Build Artifacts
After a successful CI run, download artifacts from the GitHub Actions workflow:
app-release-apk- Android APK fileapp-release-aab- Android App Bundle (for Play Store)ios-build-unsigned- iOS app bundle (unsigned, see iOS build guide for signing)
Building for Release
Android
flutter build apk --release
# or for App Bundle
flutter build appbundle --release
Android release metadata comes from pubspec.yaml (version: <name>+<code>). Keep the numeric build code increasing for every release so Android can install upgrades over older APKs.
iOS
# Ensure CocoaPods dependencies are installed first
cd ios && pod install && cd ..
# Build iOS release
flutter build ios --release
For detailed iOS build instructions, troubleshooting, and CI/CD setup, see docs/iOS_BUILD.md.
Future Expansion
This app provides a foundation for additional features:
- Transaction history
- Account sync
- Budget management
- Investment tracking
- AI chat assistant
- Push notifications
- Biometric authentication
License
This project is distributed under the AGPLv3 license.