Lantern-2.0

Lantern 2.0 - (Rebranded from Vigil-1.0)

In-App GitHub Updater & What's New

• In-App GitHub Updater: Built-in release check and APK downloader utilizing GitHub Releases API with streaming progress, SHA/integrity checks, and native Android PackageInstaller integration via FileProvider.
• Material 3 Expressive Squiggly Loader: Integrated CircularWavyProgressIndicator with indeterminate wave animations during update checks and determinate progress during downloads.
• What's New Release Showcase: Material 3 Expressive bottom sheet detailing major features and release highlights with adaptive chip tags that never wrap or overflow across form factors.

Rebranding & Architecture Overhaul

• Project Renaming: Rebranded from Vigil to Lantern, migrating the core Android application ID and package namespaces from com.masum.vigil to com.masum.lantern.
• Dual Build Variant Isolation: Configured independent debug and release builds:
  • Debug: com.masum.lantern.debug ("Lantern (Debug)"), allowing continuous development and live device testing alongside production builds without overwrite.
  • Release: com.masum.lantern ("Lantern").
  • Dynamically scoped broadcast intents (${applicationId}.action.STOP_VPN, ${applicationId}.action.TOGGLE_SHIELD) and FileProvider authorities to ensure strict component and IPC isolation.
• Licensing & Privacy: Formally adopted the GNU General Public License v3.0 (GPLv3) and published a zero-telemetry, 100% on-device Privacy Policy.

Networking, VPN & DNS Engine

• Active Sinkhole & Passive Audit: Dual firewall operation modes:
  • Block Trackers: Proactively synthesizes immediate 0.0.0.0 or NXDOMAIN responses for known tracking, ad, and malware domains.
  • Audit Only: Passively inspects and logs network telemetry without dropping queries.
• Encrypted DNS Transports:
  • DNS-over-HTTPS (DoH - RFC 8484): HTTP/2 wire-format payload framing over TLS 443 with custom Lantern-Android-DoH User-Agent.
  • DNS-over-TLS (DoT - RFC 7858): 2-byte length-prefixed raw wire format over TLS 853.
  • Supported upstream resolvers: Cloudflare, Quad9, Google DNS, with hardcoded bootstrap IPs to prevent recursive DNS deadlock.
• TTL Response Cache & Protected Sockets:
  • Thread-safe 2,048-entry in-memory DNS cache honoring original record TTLs to eliminate redundant upstream round-trips.
  • Protected socket pool isolating upstream queries from entering the local VPN loop.
• App-Level Socket Attribution: Real-time /proc/net/udp socket mapping linking every DNS packet to its originating application UID, package name, and app icon.
• OTA Blocklist Synchronizer: Built-in background rule updater fetching over 80,000+ curated hosts from StevenBlack/hosts with HTTP ETag caching and atomic Room database persistence.
• Reverse-Label Suffix Trie: In-memory radix trie providing sub-millisecond ($O(k)$) domain classification without regex performance overhead.

UI & Expressive Design

• Material 3 Expressive Design System:
  • Custom floating capsule dock navigation with fluid indicator expansion and tactile feedback.
  • Calibrated typography powered by Google Sans Flex variable font.
  • AMOLED Pure Black mode and calibrated dark/light palette tokens.
  • Radar-inspired hero telemetry visualizer with dynamic status waves.
  • Connected button switchers and split-button controls.
• Animated Gate Splash Screen:
  • Custom hardware-accelerated Animated Vector Drawable (avd_lantern_splash.xml) featuring an animated gate opening glyph, settling dot, and smooth brand reveal.
  • System splash integration via androidx.core:core-splashscreen with post-reveal hold condition.
  • Density-specific launcher mipmaps, adaptive vector icons, and themed monochrome icon support.
• Interactive Telemetry Dashboard:
  • Contextual navigation clicking on blocked trackers, clean queries, and total inquiries navigating directly to pre-filtered traffic stream views.
  • Radial gauges and statistics breakdown pager.
• Predictive Back Gestures & Motion:
  • Predictive back animation container tracking 1:1 finger swipe gestures with dynamic corner rounding, scale transforms, and depth elevation.
  • Coordinated container scale-in and slide transitions between tabs and sub-screens.
• Edge-to-Edge System Bar Synchronization:
  • Seamless edge-to-edge layout across Android 10 to 16.
  • Disabled navigation bar contrast scrim (isNavigationBarContrastEnforced = false) for completely transparent navigation bars in light and dark modes.

Forensics, Rules & Management

• Forensic Data Export: RFC 4180 compliant CSV export of query logs with automated escaping and secure system share sheet integration via Android FileProvider.
• Custom Domain Rules: Per-domain custom user allowlist and blocklist rules manageable directly from traffic feed inspection sheets or the dedicated rules dashboard.
• Kernel-Level App Whitelist: Granular per-application bypass (VpnService.Builder.addDisallowedApplication) routing trusted applications (e.g., banking, VoIP) directly through the physical network interface.
• Persistent Notification with Quick Actions: Low-overhead notification with live query and block counters, real-time percentage indicators, and quick Stop / Toggle Mode remote actions using goAsync().
• Editorial Onboarding & Spotlight Tour: First-run walkthrough highlighting key firewall controls and onboarding introduction for new users.

Performance & Testing

• Compilation & Shrinking: Full R8 code shrinking and resource optimization rules configured for Android Gradle Plugin 8.9+.
• Comprehensive Test Suite:
  • Robolectric and JUnit unit test suites covering ViewModels, repositories, Room DAOs, and domain use cases.
  • On-device instrumentation test harness verifying Compose navigation and backstack flows.

Vigil-1.0

Better image organisation