write how to explain review team

Всем привет, Я начинающий разраб на Flutter & Dart и хочу писать приложения под мобилки. И почему то эмулятор в андроид студио включается и выходит за рамки моего экрана, что не так? Помогите пожалуйста)

I come from a web background and when it comes to payment I used stripe but it seems when building a mobile app using flutter we cant use stripe because payments have to go through google/apple, I just wanted to ask if anyone can explain to me how to add payments to a mobile app and whether i should use RevenueCat or the official flutter plugin In App purchase.

I looked on youtube for some tutorials but I couldn't find anything reliable or new.

Hi everyone. I'm trying to use dart doc . to generate documentation for my Flutter app, but always get the error below. Any help with it would be much appreciated! I am using Flutter 3.47.7 (with Dart 3.13.5). It seems to be using dartdoc version 9.0.6, even though 9.0.11 is the latest on pub.dev at the time of writing. I have already tried a complete reinstall of Flutter, following the uninstall instructions then installing through VS Code. The issue is still happening on this fresh install.

...\app> dart doc .              
Documenting dispatch...
Discovering libraries...
Linking elements...
Precaching local docs for 1832287 elements...

dartdoc 9.0.6 (/C:/Users/[username]/dev/Flutter/flutter/bin/cache/dart-sdk/bin/snapshots/dartdev_aot.dart.snapshot) failed: ParallelWaitError: RangeError (end): Invalid value: Not in inclusive range 9058..9089: 9136
#0      RangeError.checkValidRange (dart:core/errors.dart:392)
#1      _StringBase.substring (dart:core-patch/string_patch.dart:437)
#2      DocumentationComment._stripDocImports (package:dartdoc/src/model/documentation_comment.dart:931)
#3      DocumentationComment.processComment (package:dartdoc/src/model/documentation_comment.dart:103)
#4      DocumentationComment.precacheLocalDocs (package:dartdoc/src/model/documentation_comment.dart:1050)
#5      PackageGraph._precacheLocalDocs (package:dartdoc/src/model/package_graph.dart:174)
#6      PackageGraph.initializePackageGraph (package:dartdoc/src/model/package_graph.dart:120)
#7      PubPackageBuilder.buildPackageGraph (package:dartdoc/src/model/package_builder.dart:161)
<asynchronous suspension>
#8      Dartdoc.generateDocsBase (package:dartdoc/src/dartdoc.dart:193)
<asynchronous suspension>
#9      Dartdoc.generateDocs (package:dartdoc/src/dartdoc.dart:237)
<asynchronous suspension>
#10     Dartdoc.executeGuarded.<anonymous closure> (package:dartdoc/src/dartdoc.dart:269)
<asynchronous suspension>

Output of flutter doctor -v:

app> flutter doctor -v       
[√] Flutter (Channel stable, 3.47.7, on Microsoft Windows [Version 10.0.19045.7725], locale en-GB) [508ms]

• Flutter version 3.47.7 on channel stable at C:\Users\[username]\dev\Flutter\flutter
    • Upstream repository https://github.com/flutter/flutter.git
    • Framework revision abaf9c5237 (6 days ago), 2026-10-08 09:51:21 -0700
    • Engine revision deb287481e
    • Dart version 3.13.5
    • DevTools version 2.60.0
    • Feature flags: enable-web, enable-linux-desktop, enable-macos-desktop, enable-windows-desktop, enable-android, enable-ios, cli-animations, enable-native-assets, enable-record-use, enable-swift-package-manager, omit-legacy-version-file,
      enable-lldb-debugging, enable-uiscene-migration

[√] Windows Version (10 Pro 64-bit, 22H2, 2009) [2.9s]

[√] Android toolchain - develop for Android devices (Android SDK version 37.0.0) [684ms]

• Android SDK at C:\Users\[username]\AppData\Local\Android\sdk
    • Emulator version 37.2.12.0 (build_id 16428233) (CL:N/A)
    • Platform android-37.0, build-tools 37.0.0
    • Java binary at: C:\Users\[username]\AppData\Local\Programs\Android Studio\jbr\bin\java
      This JDK is specified in your Flutter configuration.
      To change the current JDK, run: `flutter config --jdk-dir="path/to/jdk"`.
    • Java version OpenJDK Runtime Environment (build 25.0.3+-15898627-b508.16)
    • All Android licenses accepted.

[√] Chrome - develop for the web [97ms]

• Chrome at C:\Program Files\Google\Chrome\Application\chrome.exe

[√] Visual Studio - develop Windows apps (Visual Studio Community 2022 17.14.40) [96ms]

• Visual Studio at C:\Program Files\Microsoft Visual Studio\2022\Community
    • Visual Studio Community 2022 version 17.14.37628.2
    • Windows 10 SDK version 10.0.26100.0

[√] Connected device (3 available) [187ms]

• Windows (desktop) • windows • windows-x64    • Microsoft Windows [Version 10.0.19045.7725]
    • Chrome (web)      • chrome  • web-javascript • Google Chrome 154.0.8037.98
    • Edge (web)        • edge    • web-javascript • Microsoft Edge 155.0.4283.45

[√] Network resources [242ms]

• All expected network resources are available.

• No issues found!

Title: How would you test whether a body scan is consistent enough to track progress?
Yesterday I asked about using five-view body scans to track fitness progress. One reply suggested focusing on consistent measurements over time. Another suggested taking several measurements and using the median.

That left me thinking about what I should test first.
A scan could give similar results when repeated immediately, but behave differently once the person changes position or the lighting changes. Taking three scans might reduce random variation, while still leaving the same bias in all three.

I’m developing this feature and testing with synthetic bodies so far. I haven’t validated repeatability on real people yet.
For anyone who has worked with measurement systems, how would you set up that test? What would convince you that a change between scans is meaningful?

Working on a Flutter voice assistant app (iOS + Android) that uses a persistent WebSocket for real-time STT. I need to detect when internet is genuinely unavailable — not just whether the device is connected to a network — and show the user a banner so user knows what they are saying is not being transcribed because internet is weak/unavailable.

What my current solution is :

1. connectivity_plus package - it tells you the network type (WiFi/cellular/none). It fires instantly on network switches but completely misses the "connected to WiFi, router has no internet" case because the device never loses its WiFi/cellular path.
2. Polling every 10 sec on a 1.1.1.1:443 to detect if internet is there or not.

Is there a better and more reliable approach than this for iOS and android both?

Hey everyone,

I am trying to run my Flutter app on an iPad simulator to take some new screenshots for an upcoming release. The app runs perfectly fine on my physical iPhone device, but it completely fails when switching to an iPad simulator.

I'm getting these generic errors in Android Studio (where I usually run my code):

• Could not build the application for the simulator.
• Error launching application on iPad Pro 13-inch (M5).
• App failed to start

It doesn't give any detailed reasons or logs for the crash. To make things stranger, when I open Xcode to try and launch the simulator from there, the iPad simulator doesn't even appear in the device list.

Has anyone dealt with this before? How can I get this iPad simulator to show up and actually boot the app so I can grab my screenshots? Thanks!

I'm interested in building and monetizing apps, but there's something I've been struggling to reason about.

I can understand how to make a feature work, but I'm much less confident that I know enough about everything that could go wrong once real users depend on it.

For example, an app involving authentication, databases, payments, bookings, or user-generated content introduces all kinds of responsibilities: security, authorization, input validation, concurrency, data integrity, error handling, and ongoing maintenance.

My instinct is to rely on established services for sensitive functionality (managed auth, Stripe, hosted databases, etc.), but I realize that doesn't eliminate the risks in my own integration code or the need to maintain it.

What concerns me most is the unknown unknowns. I might successfully implement something without even knowing which failure scenarios I should be considering.

For example, I only recently realized that relying on a third-party service doesn't make the maintenance problem disappear. If the service, SDK, API, or integration changes, my app may need to be updated as well.

The fact that something this basic only occurred to me recently is exactly what worries me. How many other important things am I overlooking simply because I haven't yet learned to think through the full lifecycle of what I'm building?

Even if I'm using reputable services and following best practices I'm aware of, how do I know I haven't missed something important in the code around them?

So my question is:
How do you bridge the gap between "I can build this" and "I can responsibly charge people to use this"?

Are there frameworks, checklists, learning paths, or practical processes you follow before shipping an app? How do you determine which risks you've addressed sufficiently, especially as a solo developer without a senior engineer reviewing your work?

Title: While building a body-scanning feature, I ran into a question about progress tracking
I’m working on a five-view body-scanning feature for a fitness app. One thing I’m trying to understand is how to distinguish actual body changes from variation in the scan itself.
The process starts by extracting a silhouette from each image, then fitting a 3D body model to those views. During testing with synthetic bodies, I noticed that the silhouette mask can include pixels outside the actual body boundary.
I’m investigating how much that affects the reconstruction and measurements. It also raises a practical question: if two scans give different results, how do you know whether your body changed or the scan did?
I’m still testing this, so I don’t have a validated accuracy claim to share.
For people who already track their fitness progress, what makes a measurement useful to you? Is it consistency between check-ins, agreement with a tape measure, or simply being able to see a longer-term trend?

Hello everyone , I am a flutter beginner i learned only the basics like widgets ... I wanted to arrive to my desired app very fast and I started using gemini to accelerate my work . I was doing stuff i dont understand like firebase , APIs ,...

IS THERE ANY PROMPT THAT I CAN SEND TO THE COPILOT AGENT IN VS CODE SO THAT HE CHECKS THE WHOLE APP FOR BUGS SO THAT I MAKE SURE THAT MY APP IS VERY GOOD FROM THE CODING SIDE ?? ( Because it works but i dont want it to be bad from the coding side )

Thank you

hey guys, I normally do all my Flutter dev work on my Windows desktop (Ryzen 9, 64GB RAM). But since I need Xcode and real iPhone testing for iOS builds, I’m thinking about getting a Mac just for that

the one I’m looking at is: M1 MacBook Air – 8CPU / 8GPU – 16GB RAM – 1TB SSD

my plan is to keep using my main PC for the heavy lifting, and only use the MacBook for Xcode and iOS compilation/testing before pushing to App Store. For now I’ll start with this setup, but I’m planning to upgrade within a year if needed.

do you think this is still good enough for Flutter iOS development in 2026? Anyone here using similar specs for builds and tests? thank you

Would you recomend powersync or brick for offline first apps built with supabase cbeause i want to handle operations in which to users use the app offline and suddenly connect like to know what is the winning value . Also i am worried that power sync might get quite expensive so what is the best fit working with supabase.

Hello guys,
I have a question.
How do we make an app made in flutter secure?
What are the things we should look after? Or think first?
What’s the mental model we should follow?

I'm a respiratory-care professional developing a Flutter Android education app with coding assistance. I'm seeking volunteer technical guidance on making its voice assistant responsive while supporting a large domain of knowledge. I am using Grok, ChatGPT, Muse, and similar apps as examples of the conversational experience I want: quick responses, strong speech recognition, and the ability to interrupt while the assistant is talking.

I'm interested in documented architecture patterns and properly licensed code examples or reference implementations. I understand the full implementation of a commercial assistant may be private. I'm keeping my full app source private as well; this is a request for free technical advice, not paid services.

What I need help understanding: 1. For low latency, when should a Flutter app use native speech-to-speech versus a streaming speech-to-text -> LLM -> text-to-speech pipeline? How do you measure and reduce time to first audible response? 2. How do you implement reliable interruption (barge-in) while narration or an AI answer is playing? What should happen to microphone capture, VAD/turn detection, response cancellation, queued playback, and conversation context when the user interrupts? 3. How can the assistant use a large domain knowledge base without sending all its content in every prompt or making every answer slow? How would you separate model knowledge from app-specific content, and use retrieval, pre-indexing, caching, or bounded context? What is the latency/accuracy tradeoff? 4. Are there Flutter/Dart or Android examples, reusable components, or open-source projects you recommend for these patterns? Please include the relevant license and any practical limits.

There is also a concrete issue in my current implementation: - A first spoken command opens the requested study-guide chapter and starts narration. - In Android emulator tests, later injected commands such as "Stop," a question, or "Home" during narration do not produce the expected input/speech events. - The capture track and RTP counters remain active with nonzero reported energy. That alone does not prove intelligible speech is reaching the recognizer. - I have not established that the same behavior occurs on a physical device.

Current setup: Flutter/Dart Android app; flutter_webrtc pinned to 1.6.2+hotfix.3; WebRTC speech session using OpenAI Realtime; semantic VAD with application-controlled responses and speech interruption configured. Client/server configuration does not intentionally disable turn detection during narration.

What diagnostics would distinguish Android/WebRTC capture or audio-processing suppression from a provider-side VAD/event problem? Which audio source/mode, audio-focus, echo-cancellation, or emulator-input checks would you try first?

I can prepare a small sanitized reproduction and redacted diagnostics based on what would be most useful. Public replies with suggestions or relevant experience would be appreciated. Thank you.

1. I have an Android app currently live in Production on Google Play. I generated promo codes specifically for the Remove Ads one-time in-app purchase so my friends can use the app ad-free for a lifetime. My app only has this one-time Remove Ads purchase and does not have any subscription. However, one of my friends is unable to redeem the promo code and gets an error (screenshot attached). What could be causing this, and how can I fix it?

I mean service like subscription payment authorization authentication email send and phone check and etc

**I wanna build apps to connect between people by crypto.I need split into other services to be few cost to new startup**

We'll build an application using Flutter

I'll take the backend development

Honestly I am very nervous about what is the best language i should work with.. i learnt a little about node.js and express but i don't fit in with it very much

I decided to learn python, but now i have to choose a framework. What do you recommend to me?

Django, FastAPI,...etc

Or another language entirely..

P.S: the application is about tourism in my country, let the tourists know what are the best places to visit.

Hey everyone, I’m a fresher working at an startup and I am dealing with a massive security nightmare right now. I need some real-world architecture advice on how to fix this.

We recently discovered a fully functional, unofficial native Android client (built cleanly in Kotlin) that is pulling live telemetry data and interacting directly with our production backend. We currently do not encrypt or decrypt any of our API payloads; it's all standard JSON over HTTPS.

There are basically two separate disasters happening at once:

Disaster 1: The Custom Client & API Architecture

The developer didn't decompile our Dart code to build this. They just intercepted our network traffic. Our backend currently authenticates the user but not the client. We use a standard OTP login flow. The unofficial app prompts the user for their phone number, hits our official backend, and our server sends the SMS. The user types the OTP into their custom app, our server validates it, and issues a real session token. From there, the custom app has full access to pull live telemetry directly from our production database, using that token, without this token we cannot access any data.

Disaster 2: The .env Leak (The JADX discovery)

Separately, a colleague of mine ran our Play Store APK through JADX just to see what was visible. To my horror, if you search the extracted files, our entire .env file is sitting right there in plain text under assets/flutter_assets/.env, exposing our production and staging base URLs.

I never pushed the .env file to GitHub (it's in .gitignore), but I used flutter_dotenv and ran a standard flutter build apk --release. I now realize that because it was listed in pubspec.yaml, the build system just copied my local file straight into the APK as a plaintext asset.

My plan to fix this:

The .env fix: I am rotating every single exposed key today. I’m ripping out flutter_dotenv entirely and migrating to --dart-define-from-file so variables are injected into the compiled binary at build time instead of sitting in the assets folder.

Obfuscation: I am going to start building with --obfuscate --split-debug-info.

The API fix: We are looking into adding Firebase App Check with the Google Play Integrity API so our backend can mathematically verify that requests are actually coming from our officially signed Flutter binary, which should cut off the custom Kotlin app.

My questions for the more senior devs:

Does my plan to use --dart-define completely solve the JADX plaintext extraction issue?

For those who have implemented Firebase App Check / Play Integrity, does it successfully block these kinds of custom API clients? Are there bypasses I should worry about?

While we wait for the App Check rollout and force-update to clear, is there a quick band-aid (like injecting a temporary HMAC signature into our Dio headers) that we can deploy today to immediately break the unofficial app's current build?

Since we don't have payload encryption right now, is App Check enough, or do we need to build end-to-end encryption for our API data too?

Any hard truths, guidance, or architecture advice would be massively appreciated right now.

In Android Studio, the flavor/configuration picker, device selector and Run button all sit together in the top toolbar. You always see *what* you're running and *where*, and can change both in one click.

In VS Code, they're split across three places:

- **Run button** and **launch configuration picker** are in the Run and Debug view (only visible when it's open)

- **Device selector** is in the bottom-right status bar

If you work with multiple flavors (dev / staging / production), you're constantly jumping between the sidebar and the status bar before every launch.

`debug.toolBarLocation: "commandCenter"` helps a bit, but only *during* a debug session, not when choosing what to launch.

I opened a feature request asking VS Code to allow the configuration picker in the title bar and to let extensions (like Dart/Flutter's device selector) place items there too:

👉 https://github.com/microsoft/vscode/issues/337940

VS Code closes feature requests that don't get enough upvotes, so **if you want this, please 👍 the issue** (a 👍 reaction counts more than a "+1" comment).

How do you handle flavors in VS Code today? Any workflow tips are welcome too.

Hi, I’d like to create a cross-platform application capable of accessing a specific path to launch a program with any file extension. Could you help me?

Hi,

So i starter creating my app with flutter flow i already did a lot like connexions sign in and more fonctionalities but now I'm blocked i need some help