SAM v3.5.0 — The Cut
SAM v3.5.0 — The Cut
Two weeks of work that had shipped to main but never reached an installed app until now.
New this release
- Android is real. A native Android build now exists alongside iOS — signed keystore, a real signed AAB, cleartext-traffic fix. Same app, same features, one shared codebase with iOS.
- SAM can fix itself again. The self-repair bots (label an issue, SAM attempts its own fix on a free model) had been silently dead for about a month on an expired credential — they degrade and tell you what broke instead of dying silently now, and both are verified working end to end.
Faster
- The build/automation system runs jobs at the same time now instead of one at a time. A job for an untouched project no longer waits behind everything else in the queue.
- Live previews of your own builds no longer show a blank page — this was breaking for any project with a real build step (the exact kind of project the system itself recommends building).
More reliable
- Fixed a case where jobs sent through the real background daemon could silently never start.
- Continuous integration had been red on the main branch for three pushes without anyone noticing — a lint issue and a Windows-only test bug. Both fixed, and the daily health check itself was quietly skipping half its checks on the mobile app — fixed too.
- A security-relevant networking library was bumped to patch a real, disclosed vulnerability, and the code that guards against server-side request forgery was hardened against the change.
- An image-fetching path inside the Studio feature now goes through the same request-forgery guard everything else does.
Mobile
- Native tactile feedback (haptics) across iOS and Android.
- The standalone AI mode (works without pairing to a desktop) now has over 30 fallback providers instead of a handful, with an honest failure message instead of a made-up answer when everything's exhausted.
- iOS build submitted for review with a fix for a narrowed network-security setting that was breaking the app for Tailscale/VPN users.
- One-tap code copy, haptic feedback, and a status pill showing exactly what's connected.
Health & hygiene
- All 9 previously open dependency-security alerts closed — 6 upgraded, 3 dismissed with a written reason (build-tool-only dependencies that never ship in the actual app).
- Two flaky tests that intermittently failed in CI (real DNS lookups against invalid hostnames) now run instantly and deterministically.
🔒 Verify your download (SHA-256)
The one-paste installers verify this automatically. To check by hand, compute the hash and match:
- macOS/Linux:
shasum -a 256 <file> - Windows (PowerShell):
Get-FileHash <file> -Algorithm SHA256
bd5e3d02336d67a093c15939c262467ffb726d8ecde6dd95af628c5f4af0fb30 SAM-3.5.0-arm64.dmg
1c0456437a29f7bec19d30da643e80e0bacafebf2ed63fb4250a3790afc035b9 SAM-3.5.0.AppImage
59aaff8233f3670b55fe29b99c3b8ab2e49180382d4c8448f746c2587fff8626 SAM-3.5.0.dmg
28dbd21a977252bcf5d462ef072f18569c6af7007842f43863097e41135465e2 SAM-Setup-3.5.0.exe
4ec9946b735a0be70ccf1dc7b9217c5dfe05e371048a2c65b741ee08b0a55f70 sam_3.5.0_amd64.deb