v1.5.0

Attack Shark Linux v1.5.0: Keyboard and Timed Macros

What’s New

v1.5.0 expands the X6 macro workflow with focused keyboard/mouse recording, local storage of timed takes, guarded upload of supported sequences, and assignment controls. These changes have source-CI and release-candidate pipeline evidence, but do not establish universal compatibility or exhaustive physical-device behavior. Keep a known-good installation available, and do not run the application as root.

Changes Since v1.4.0

Record and manage local keyboard takes

• Record keyboard and mouse inputs while the capture area is focused. Delay policies preserve timing locally, and the library can retain or import/export keyboard identities beyond those currently eligible for assignment. Recording and saving do not themselves send reports to the mouse. (PR #159, #160; issue #158)
• Review grouped key down/up events, press counts, and delay slots without rewriting the saved sequence. Local retention does not mean an identity is supported for upload. (PR #162)

Choose playback modes and apply eligible takes explicitly

• Assignments offer fixed-repeat, continuous-toggle, and while-held modes. Choosing and confirming an assignment stages it locally; Apply is the explicit device-write step. (PR #155, #156; issue #154)
• Upload validation checks supported keys and events, balance, delay and capacity bounds, destination, and assignment state. Unsupported takes are rejected rather than silently truncated or rewritten. A transport acknowledgement confirms a host-side transaction, not physical playback. (PR #159, #161; issue #158)

Device settings and packaging

• Corrected X6 key-response/debounce encoding to use the selected milliseconds directly, including documented odd-millisecond values. (PR #148; issue #147)
• Integrated captured factory-reset settings and reset-state handling. The linked report documents a user-confirmed physical reset, not complete memory erase or power-cycle persistence. (PR #150; issue #149)
• Aligned the Wails beta.28 build and packaging chain and updated frontend dependencies. (PR #146; PRs #141–#144)

Limitations and Follow-up

Physical keyboard/macro playback, timing, firmware capacity, and device persistence have not been exhaustively verified. In particular, continuous stop-on-second-press and release-to-stop behavior are not established on hardware. Official-key exceptions, browser/OS-reserved inputs, and an explicitly inferential key alias are documented; local retention does not imply upload support.

A separate input-stack diagnostic observed rapid clicks reduced between evdev and libinput. It does not establish a Firefox-only defect or justify a global input-filter change or duplicate-upload workaround; that experiment is not included. See the input-stack notes.

The basic macro library was delivered in v1.4.0 and is not new in this release. Broader UI/text redesign is outside this release’s scope. No open linked follow-up issue was identified for the included macro work; the hardware and input-stack limitations above remain unverified, not claimed as fixed.

Installation and Distribution

Find the release and its attached assets on the GitHub Releases page. Verify the checksums provided with the release before installing. Do not run the application as root.

Community Testing

Useful areas to report include focused recording and focus-loss behavior, delay policies, local save/import/export, rejection of unsupported or oversized takes, assignment staging/cancellation and explicit Apply, and playback modes or persistence where physically tested.

Include your OS/distribution, application version, device and connection, exact steps, and observed results. Distinguish software/transport results from physical playback.

Validation

• Source: 5e3776cbceb432291004fdaf1226e7ec771facac; 36 commits after v1.4.0.
• Source Tests and Source CodeQL succeeded for this source SHA.
• The published v1.5.0-rc.1 pipeline 38639037573 succeeded across its six jobs. These RC results do not verify a future stable-tag rebuild or publication.
• The RC manifest identifies version 1.5.0-rc.1; its artifact URL and SHA match the downloaded artifact. OpenSSL reported “Signature Verified Successfully” against the installer key.
• The RC executable was extracted successfully using the AppImage runtime’s reported offset (944632). go version -m could not read its build metadata, so the embedded executable version remains unverified. This does not establish artifact corruption; the maintainer explicitly accepted this verification limitation for stable publication.
• Physical macro playback and hardware timing/persistence are not established by these checks. Stable-release artifact checks remain pending.

Distribution

The release workflow is configured to publish five assets. That configuration and the successful RC pipeline do not establish completion of a stable release. No Homebrew, Docker, or npm distribution claim is made.

What’s Next

Further device- and layout-specific testing can clarify behavior; no publication schedule or compatibility guarantee is implied.
-----BEGIN SSH SIGNATURE-----
U1NIU0lHAAAAAQAAADMAAAALc3NoLWVkMjU1MTkAAAAgX2NaHGC5hCQmt33pGwJ9Qol/uM
b0mMXMNf+hgmeaGq4AAAADZ2l0AAAAAAAAAAZzaGE1MTIAAABTAAAAC3NzaC1lZDI1NTE5
AAAAQIBEcZCEif7qR9GxDn41gFVwKIICUHD98saGHXuBFQlkL9pEnjK5jlG0vQeiQCHatX
+3YFrTJPkmzkEgKXejNAs=
-----END SSH SIGNATURE-----

v1.5.0-rc.1

Attack Shark Linux v1.5.0-rc.1: Keyboard and Timed Macros

What’s New

This release candidate expands the X6 macro workflow from the basic library introduced in v1.4.0 to focused keyboard/mouse recording, local storage of timed takes, guarded upload of supported sequences, and assignment controls. This is testing-only prerelease software, not a stable release or a guarantee of compatibility across devices, layouts, or applications. Keep a known-good installation available before testing.

Changes Since v1.4.0

Record and manage local keyboard takes

• The editor can record keyboard and mouse inputs only while its capture area is focused. Delay policies preserve event timing locally, and the library can retain/import/export opaque keyboard identities beyond the subset currently eligible for assignment. Recording and saving do not themselves send reports to the mouse. PR #159 · PR #160 · issue #158
• The editor groups adjacent key down/up events for readability and presents press counts and delay slots without rewriting the saved event sequence. Unsupported identities can remain in local storage but are not thereby proven usable by the device. PR #162

Select playback modes and apply eligible takes explicitly

• Assignments expose fixed-repeat, continuous-toggle, and while-held modes. Selecting and confirming an assignment stages it locally; Apply is the explicit device-write step. PR #155 · PR #156 · issue #154
• Upload admission checks supported keys/events, balance, delay and capacity bounds, destination and assignment state before writing. Unsupported takes are rejected rather than silently truncated or rewritten. A transport acknowledgement confirms a host-side transaction, not physical playback. PR #159 · PR #161 · issue #158

Other changes in this comparison range

• Corrected X6 key-response/debounce encoding to use the selected milliseconds directly and expose the documented odd-millisecond values. PR #148 · issue #147
• Integrated captured factory-reset settings and reset-state handling. The linked report documents a user-confirmed physical reset, but does not establish complete memory erase or power-cycle persistence. PR #150 · issue #149
• Aligned the Wails beta.28 build and packaging chain and updated frontend dependencies. PR #146 · PRs #141–144

Limitations and Follow-up

The macro changes have software and source-CI evidence, but physical keyboard/macro playback, timing, firmware capacity and device persistence are not exhaustively verified. In particular, continuous stop-on-second-press and release-to-stop behavior are not established on hardware. Official-key exceptions, browser/OS-reserved inputs, and an explicitly inferential key alias are documented; local retention does not imply upload support.

A separate input-stack diagnostic observed rapid clicks reduced between evdev and libinput. It does not establish a Firefox-only defect or justify a global input-filter change or duplicate-upload workaround; the experiment is not shipped. See the input-stack notes.

The basic macro library itself was delivered in v1.4.0 and is not new in this release. Broader UI/text redesign is outside this release’s scope. No open linked follow-up issue was identified for the included macro work; the hardware and input-stack limitations above remain explicit rather than being presented as verified fixes.

Installation and Distribution

Publication is pending. No v1.5.0-rc.1 release or candidate artifacts were observed, so this draft intentionally provides no download URL, artifact name, or installation command. If approved and published, use only the artifacts attached to that release and follow its verified checksum and signing instructions. Do not run the application as root.

Community Testing

Please focus testing on:

• Focused recording, stop/focus-loss behavior, delay policies, and local save/import/export.
• Rejection and preservation of unsupported or oversized takes.
• Assignment staging, cancellation, explicit Apply, and supported device/layout combinations.
• Playback modes and persistence only where physically tested.

Include your OS/distribution, application version, device and connection, exact steps, and observed results. Distinguish software/transport results from physical playback.

Validation

• Source: 5e3776cbceb432291004fdaf1226e7ec771facac; 36 commits after v1.4.0.
• Source Tests: SUCCESS for this source SHA (Go build/vet/tests, Vitest, Playwright).
• Source CodeQL: SUCCESS for this source SHA.
• The release workflow’s packaging, browser and three-distribution smoke tests have not been observed for the proposed tag.
• Candidate artifact count, checksums, signing, and embedded-version verification are pending. No physical macro playback claim is made.

Distribution

The inspected tag-triggered workflow is configured to publish five release assets. RC tags are marked prerelease and do not become the stable latest release. These are workflow settings, not proof of publication for this candidate. No Homebrew, Docker, or npm distribution claim is made.

What’s Next

Community testing can help identify device- and layout-specific behavior before any stable-release decision; no publication schedule is promised.
-----BEGIN SSH SIGNATURE-----
U1NIU0lHAAAAAQAAADMAAAALc3NoLWVkMjU1MTkAAAAgX2NaHGC5hCQmt33pGwJ9Qol/uM
b0mMXMNf+hgmeaGq4AAAADZ2l0AAAAAAAAAAZzaGE1MTIAAABTAAAAC3NzaC1lZDI1NTE5
AAAAQJRk3r/HMJpT0j239ab+6aB2PhSk4ABDBdd4ect0Ri/tE3fT2qtDL7J3t6XnlXHzJs
7+8LtDSQWRDKUdCRRk+QE=
-----END SSH SIGNATURE-----

v1.4.0

Attack Shark Linux v1.4.0: Basic X6 Macros

What's New

This release introduces a basic macro library and assignment workflow for the Attack Shark X6.

Changes Since v1.3.0

Local library and editing

• A shared local library lets users create, edit, and delete macros, inspect supported events, and import or export validated JSON. Recording is confined to the editor; it does not capture globally or write to the device automatically. PR #137, issue #136.

Per-device, per-button assignment

• Users can select saved macros and set fixed repeat counts from 1 to 255 in the action dialog. Confirm stages the selection; Cancel/Escape discards unconfirmed changes without altering existing assignments. Apply explicitly writes to the device and remains a separate operation. PR #137, commit c5d889a.

Hardware Validation

Tested on a physical Attack Shark X6 on CachyOS: a macro with a left click followed by a right click, assigned to button 6 and written with Apply, plays back both clicks on a single press.

Installation

Assets: the AppImage, its .sha256 file, update-manifest.json, install.sh, and the udev rule. Download only assets published for this release, verify the checksum before running them, and do not run the application as root.

Validation

Source: e2aea9dd1777fd38aacecb06a2de113af92cbffc; 48 commits since v1.3.0.

• Tests for the final commit: SUCCESS (Go build/vet/tests, Vitest, and Playwright).
• CodeQL for the final commit: SUCCESS (Go and JavaScript/TypeScript).
• RC2 publication verification: packaging, browser tests, Ubuntu/Arch/Fedora smoke tests, and publication all passed. No production-code changes since RC2.

Community Testing

Please test creation, editing, import/export, button isolation, and Confirm/Cancel/Escape/Apply. When reporting, include your distribution, device, firmware, exact steps, and results.

v1.4.0-rc.2

Attack Shark Linux v1.4.0-rc.2: Basic X6 Macros

What’s New

This release candidate introduces a basic macro library and assignment workflow for the Attack Shark X6. It is for testing only—not a stable release or a guarantee of universal compatibility. Keep a known-good installation available before trying it.

Changes Since v1.3.0

Local library and editing

• A shared local library lets users create, edit, and delete macros, inspect supported events, and import or export validated JSON. Recording is confined to the editor; it does not capture globally or write to the device automatically. PR #137, issue #136.

Per-device, per-button assignment

• Users can select saved macros and set fixed repeat counts from 1 to 255 in the action dialog. Confirm stages the selection; Cancel/Escape discards unconfirmed changes without altering existing assignments. Apply explicitly writes to the device and remains a separate operation. PR #137, commit c5d889a.

Limitations and Follow-up

Device upload supports only one or two complete mouse clicks with no delay. The library can retain broader sequences, but not all are supported for upload. Loops, hold, continuous playback, and profiles are outside this release’s scope. Detailed evidence of physical playback and hardware persistence is not available; local and browser tests do not replace that evidence. Native review of the exact candidate is still pending.

Installation and Distribution

Planned assets are the AppImage, its .sha256 file, update-manifest.json, install.sh, and the udev rule. Download only assets published for this RC, and verify the checksum and authenticity through the signed distribution mechanism before running them. Do not run the application as root. Installation commands are omitted until the specific artifacts are verified.

The pipeline publishes this RC as a prerelease without making it the stable latest release. No Homebrew, Docker, or npm distribution was found.

Validation

Source: e2aea9dd1777fd38aacecb06a2de113af92cbffc; 48 commits since v1.3.0.

• Tests for the final commit: SUCCESS (Go build/vet/tests, Vitest, and Playwright).
• CodeQL for the final commit: SUCCESS (Go and JavaScript/TypeScript).
• Prior local validation: 107 focused and 222 total Vitest tests; 15 macro and 20 total Chromium tests; isolated offline packaging with 922 assertions. The locally accepted build came from c5d889a and uses version 0.0.0-dev; it is not this RC’s final artifact.
• Standalone typecheck was skipped because no script is configured. Canonical Wails packaging was skipped in offline validation; a manual-equivalent path was verified.
• RC1 completed the publication pipeline and Ubuntu/Arch/Fedora smoke tests; its five assets, checksum, signed manifest, embedded version, and source identity were independently verified. RC2 publication and its own artifacts remain pending execution and verification.
• RC2 preserves the approved Markdown headings that Git's default annotated-tag cleanup removed from RC1. There is no production-code change from RC1; its existing tag and assets remain intact.

Community Testing

Test creation, editing, import/export, device and button isolation, Confirm/Cancel/Escape/Apply, and rejection of unsupported sequences. Report your distribution, version, device, exact steps, and results. Report physical playback and persistence only if you tested them.

What’s Next

Loops and profiles are separate work, with no committed schedule.

v1.4.0-rc.1

This release candidate introduces a basic macro library and assignment workflow for the Attack Shark X6. It is for testing only—not a stable release or a guarantee of universal compatibility. Keep a known-good installation available before trying it.

• A shared local library lets users create, edit, and delete macros, inspect supported events, and import or export validated JSON. Recording is confined to the editor; it does not capture globally or write to the device automatically. PR #137, issue #136.

• Users can select saved macros and set fixed repeat counts from 1 to 255 in the action dialog. Confirm stages the selection; Cancel/Escape discards unconfirmed changes without altering existing assignments. Apply explicitly writes to the device and remains a separate operation. PR #137, commit c5d889a.

Device upload supports only one or two complete mouse clicks with no delay. The library can retain broader sequences, but not all are supported for upload. Loops, hold, continuous playback, and profiles are outside this release’s scope. Detailed evidence of physical playback and hardware persistence is not available; local and browser tests do not replace that evidence. Native review of the exact candidate is still pending.

Planned assets are the AppImage, its .sha256 file, update-manifest.json, install.sh, and the udev rule. Download only assets published for this RC, and verify the checksum and authenticity through the signed distribution mechanism before running them. Do not run the application as root. Installation commands are omitted until the specific artifacts are verified.

The pipeline publishes this RC as a prerelease without making it the stable latest release. No Homebrew, Docker, or npm distribution was found.

Source: e2aea9dd1777fd38aacecb06a2de113af92cbffc; 48 commits since v1.3.0.

• Tests for the final commit: SUCCESS (Go build/vet/tests, Vitest, and Playwright).
• CodeQL for the final commit: SUCCESS (Go and JavaScript/TypeScript).
• Prior local validation: 107 focused and 222 total Vitest tests; 15 macro and 20 total Chromium tests; isolated offline packaging with 922 assertions. The locally accepted build came from c5d889a and uses version 0.0.0-dev; it is not this RC’s final artifact.
• Standalone typecheck was skipped because no script is configured. Canonical Wails packaging was skipped in offline validation; a manual-equivalent path was verified.
• The publication pipeline, Ubuntu/Arch/Fedora smoke tests, signed artifacts, checksums, and final version remain pending execution and verification.

Test creation, editing, import/export, device and button isolation, Confirm/Cancel/Escape/Apply, and rejection of unsupported sequences. Report your distribution, version, device, exact steps, and results. Report physical playback and persistence only if you tested them.

Loops and profiles are separate work, with no committed schedule.

v1.3.0

This release expands button remapping for the Attack Shark X6 with nine browser and system actions. It also adds an illustrated user guide and updates the application’s internals without changing the existing configuration workflow.

• Assign nine additional browser and system actions to your mouse buttons, including browser navigation, Home, Search, Calculator, and Email. Assignments remain staged until you click Apply. (#115)

• Explore the app’s settings with a new illustrated guide covering performance, lighting, controls, button remapping, and device maintenance. (#107)

• Updated the desktop runtime and reorganized internal device-setting handling, while retaining the existing configuration controls. (#126, #131)

For Linux x86_64, use the installer attached to this release. It verifies signed release metadata and the AppImage checksum before installation.

curl --fail --location --output install.sh \
  https://github.com/blak0p/attack-shark-linux/releases/download/v1.3.0/install.sh
sh ./install.sh --install-udev

The installer requests permission to configure mouse access. Do not run the application as root.

Already using a stable installation? Approve the update when the app offers it. RC installations stay on the RC update channel; use the stable installer to switch.

The release candidate passed automated verification, browser tests, signed packaging, and AppImage smoke tests on Ubuntu 24.04, Arch Linux, and Fedora. These checks do not establish universal hardware compatibility.

The RC’s publication step failed because its GitHub release already existed, leaving that release without downloadable assets. This stable release uses a new tag and rebuilds its own artifacts.

If you encounter a problem, include your distribution, application version, connection mode, and steps to reproduce it. For remapping, describe the selected button and action.

Attack Shark Linux v1.3.0-rc.1

Pre-release de validacion para v1.3.0 sobre origin/main 2fc31ea (merge PR #131).

Incluye: refactor ownership desktop (PR #131, closes #130) con catalogo Browser 30 acciones retenido; Browser remapping (#115); Wails beta.26 (#126); Go 1.27.1; jsdom 30.1.1 (#120, closes #128); upload-artifact v7 (#122); download-artifact v8 (#116); CI least-privilege (#112).

Verificacion: PR #131 con 8/8 checks SUCCESS (Go build/vet/tests, vitest, playwright, CodeQL x2, check, GitGuardian).

Este RC valida que el pipeline tag-only (.github/workflows/release.yml) construya el AppImage. Sin validacion HID real del AppImage empaquetado en este ciclo.

Attack Shark Linux v1.2.1 — Multi-Distribution Portability & Desktop Integration

Attack Shark Linux v1.2.1: Multi-Distribution Portability & Desktop Integration

What's New

Attack Shark Linux v1.2.1 is a patch release focused on cross-distribution Linux portability and complete desktop environment integration. It resolves an immediate startup crash on non-Debian distributions (such as Arch Linux, CachyOS, and Fedora), ensures the official SVG icon is installed to system icon themes, and integrates automated multi-distribution container verification into the release pipeline.

Changes Since v1.2.0

Portability & Packaging

• WebKitGTK Helper Process Relocation: Injected an LD_PRELOAD relocation shim (libwebkit-relocate.so) that intercepts execve, execv, execvp, execvpe, posix_spawn, and posix_spawnp calls. This redirects hardcoded Debian-style WebKit process helper paths (/usr/lib/x86_64-linux-gnu/webkitgtk-6.0/WebKitNetworkProcess and WebKitWebProcess) to the bundled binaries in $APPDIR. Fixes crashes and SIGTRAP aborts when launching on non-Debian distributions (#104, #105).
• Desktop SVG Icon Deployment: Updated install.sh to extract the official SVG application icon from the AppImage and install it with atomic permissions to ~/.local/share/icons/hicolor/scalable/apps/attack-shark-x6.svg and ~/.local/share/attack-shark-x6/attack-shark-x6.svg. Added Icon=attack-shark-x6 to the generated .desktop entry to restore application menu and dock icons (#104).
• Packaging Pipeline Alignment: Resolved an AppImage staging naming mismatch between wails3 and linuxdeploy so that patched, portable AppImages are consistently staged for release (#104).

CI / CD & Quality Assurance

• Multi-Distribution Smoke-Test Matrix: Added automated, parallel containerized smoke tests across Ubuntu 24.04, Arch Linux, and Fedora to the release workflow. Every release candidate is now verified under headless Xvfb across distros prior to publishing (#104).
• Automated Contract Tests: Added Go test coverage in cmd/release/appdir_portable_test.go and cmd/release/workflow_test.go enforcing the WebKit wrapper hook, packaging tasks, and multi-distribution matrix requirements (#104).

Installing It

To install or update to v1.2.1 stable on Linux x86_64:

(
  installer=$(mktemp) || exit 1
  trap 'rm -f "$installer"' 0
  curl --fail --location --output "$installer" \
    https://github.com/blak0p/attack-shark-linux/releases/latest/download/install.sh &&
    sh "$installer" --install-udev
)

The installer verifies the Ed25519 cryptographic signature and SHA-256 digest of the release assets.

Validation

• Source Commit: 43f7165 (PR #104 merged into main).
• Target Tag: v1.2.1.
• Pre-release Rehearsal: Validated end-to-end under v1.2.1-rc.1 across GitHub Actions matrix runners and verified live on a bare-metal CachyOS (Arch Linux) host.
• CI Release Run: Run 36175176572 passed with 100% green status across build, smoke-test (Ubuntu 24.04), smoke-test (Arch Linux), and smoke-test (Fedora).
• Cryptographic Verification: Manifest signed with official Ed25519 release key.

v1.2.1-rc.1

Release v1.2.1-rc.1

v1.2.0

Attack Shark Linux v1.2.0 — First Stable Release

Attack Shark Linux is a desktop configurator for the Attack Shark X6 mouse on Linux. This is its first stable-version release: a single application for monitoring the mouse, adjusting its settings, and installing future updates with your approval. It is not affiliated with or endorsed by Attack Shark.

Configure your X6

• Performance: configure up to eight DPI stages, select a polling rate from 125 to 1000 Hz, and adjust response time, sleep timing, and other supported mouse settings.
• Lighting: choose lighting effects and colors from the dedicated configuration view.
• Buttons: assign basic, multimedia, scrolling, and DPI actions to supported buttons. Changes can be reviewed before they are applied.
• Live status: see battery and physical DPI changes reported by the dongle. The Device view also shows connection information and the installed application version.
• Recovery: keep settings locally per device, across app restarts where the device identity permits it, and restore factory defaults when needed. Local settings are not profiles stored in the mouse.

The interface includes dedicated views for these controls, as well as minimize and close buttons. It does not require a tray application or a background service.

Install and update

Download install.sh from this release’s assets to install the user-local x86_64 AppImage. On the first installation, --install-udev offers to set up the X6 access rule; the installer asks for confirmation before using sudo. Do not run the application as root.

The installer and updater verify an Ed25519-signed release manifest and the AppImage’s SHA-256 digest. Updates require explicit approval in the app, shown in a persistent card at the upper right. An update replaces only the installed user-local AppImage: it does not change udev rules or request elevated privileges. Stable installations stay on the stable update channel; RC installations do not automatically switch to stable and should use the stable installer explicitly.

Release validation

The signed RC.4→RC.5 rehearsal replaced the installed AppImage with bytes matching the published RC.5 digest. The maintainer observed the persistent in-app card and the application relaunch. The changes subsequently added for this stable candidate passed the PR’s Go, frontend, and security checks. The stable tag’s release workflow runs its own checks before publishing its assets.

Current limits

Macros and profiles stored on the mouse are not included. DEB, RPM, and AUR packages are not provided; the supported release artifact is the Linux x86_64 AppImage.