Skip to content

AstraLM v1.0.6

Choose a tag to compare

@Prasun01 Prasun01 released this 25 Aug 06:21
· 59 commits to main since this release

🚀 AstraLM Release v1.0.6 — Changelog & Security Audit

Release Tag: v1.0.6
Build: 1.0.6+6
Target Platform: Android (arm64-v8a)
Binary Location: build/app/outputs/flutter-apk/app-release.apk (76.4 MB)
Package Name: com.orailnoor.privatelm


🔒 Security Audit & Penetration Review Summary

Security Domain Status Details
Android Manifest Hardening ✅ PASS All background services explicitly marked android:exported="false". Watchdog/Boot receivers cleanly stripped to prevent unauthorized component invocation.
Cleartext Traffic & Transport Security ✅ PASS Strict HTTPS across all cloud endpoints (Anthropic, OpenAI, Google Gemini, OpenRouter, DeepSeek, Stability AI). Zero unencrypted HTTP endpoints.
API Key Storage & Memory Hygiene ✅ PASS Cloud API keys stored locally in private application sandbox (Hive Encrypted/Local Box). No hardcoded credentials or key leakage in logs/crash reports.
WebView Sandboxing ✅ PASS Canvas Web preview scoped with isolated DOM context, sanitized script injection, and eager gesture separation.
Native Certificate & Package Signing ✅ PASS Signed with official release RSA-2048 keystore (astralm-release.jks) using APK Signature Scheme v3.
Static Code Analysis ✅ PASS All critical linter errors, unhandled async context warnings, and dead imports resolved across the codebase.

🌟 What's New in v1.0.6

🎨 Visual & UX Refinements

  • Claude & ChatGPT-Style Instant Launch:
    • Zero artificial splash delay screens.
    • Native launch window displays centered brand icon and transitions immediately into the chat workspace.
  • Dynamic & Witty Thinking Indicators:
    • Progressive status indicator during model reasoning (Thinking… ➔ Cooking… ➔ Let him cook… ➔ Thinking harder… ➔ bro, your cpu is slow 💀).
    • Rock-steady, jitter-free cross-fade animations replacing layout-shifting slide transforms.
  • Full-Screen Borderless Canvas:
    • Removed top header bars, document titles, and bottom background bars.
    • Floating borderless action buttons with subtle elevation shadows.
    • Smooth top and bottom vertical gradient fading masks.
  • Zero Touch-Latency Web Preview:
    • Hardware-accelerated EagerGestureRecognizer integration for 0ms touch and scroll latency on live HTML/JS previews.

🌐 Cloud & Image Generation

  • Stability AI v2beta API Fix:
    • Auto-upgraded model resolution to sd3.5-large-turbo, resolving 400 Bad Request: invalid value for 'model' errors.
    • Integrated endpoint routing for sd3, core, and ultra.
  • OpenAI DALL-E 3 Support:
    • Direct routing for dall-e-3 / dall-e-2 image generation with native base64 in-chat preview rendering.
  • Expanded Token & Context Windows:
    • Bumped default max tokens for online cloud models to 8,192 tokens.
    • Expanded document attachment capacity to 500,000 characters (~125k tokens).

☕ Developer Support

  • Discreet Sidebar Support Tile:
    • Integrated a clean, non-intrusive Buy Me a Coffee support button in the drawer footer linking directly to the creator's page.

📦 APK Signing & Certificate Details

Signer #1 Certificate DN: CN=AstraLM, OU=Mobile, O=AstraLM, L=SanFrancisco, ST=CA, C=US
Signature Scheme: APK Signature Scheme v3
SHA-256 Digest:   aac94d12645b5ec7b5234d82c7755bab5a41236eb3a6ec0f76dc3ed37385a0aa
SHA-1 Digest:     f683d0e20c6c95623450084712b8cec470f34ce6
Key Algorithm:    RSA 2048-bit