Orbit v0.3.0-beta

Version: v0.3.0-beta
Commit: c291268
Built: 2026-07-24

Note: This is not a stable release — latest development version with experimental features.

Image Cropper (Desktop + Mobile)

• Shared Image Cropper — New shared/ui/image-cropper.js module with drag, zoom (slider + pinch + wheel), rotate 90° CW/CCW, mirror, and reset. Integrated into desktop avatar/banner inputs and mobile profile sheet.
• Avatar Circular Crop Guide — Three-level SVG mask (dimmed corners, transparent circle) with dashed circle border for precise avatar framing.
• Zoom & Centering Fixes — Drag proportional to zoom level; image sized-to-fit (Math.min); base centering offset separated from user drag offset.

Mobile Improvements

• Gallery A/V Playback Fixed — data:→blob: URL conversion in openLightbox() enables native Android WebView playback of base64-encoded media.
• Real-Time Profile Overlay Refresh — Beacon handlers call refreshProfileOverlay() so profile cards update immediately on friend changes.
• Immersive Mode — MainActivity.java enableImmersiveMode() hides system bars on full-screen content (Android 7+).
• Input Box Draft Saving — Chat draft auto-saved to localStorage (debounced 300ms), restored on chat switch, cleared on send.

Desktop Improvements

• Real-Time Profile Card Updates — profile-card.js watches friends array — open cards re-render when friend avatar/name/bio updates via beacon.
• Receiving Audio/Video Progress — File transfers show "Receiving Audio..." or "Receiving Video..." with appropriate Lucide icons based on extension detection.
• Input Box Draft Saving — Same localStorage draft save/restore/clear pattern, cross-session.

Release Signing & Security

• GitHub Actions Release Workflow — 5 parallel build jobs (Linux, Windows, macOS, Android) + sign step that generates SHA256SUMS.txt, GPG-signs it, and uploads everything to a GitHub Release on tag push.
• GPG Signing — Release artifacts verified with Orbit Release Key. Key setup docs in security/README.md.
• Security Policy — SECURITY.md with supported versions and vulnerability reporting.
• Verification Docs — README.md "Release Verification" section with copy-paste commands.

Downloads

Installation Notes

Desktop builds are currently unsigned.

• Windows: Microsoft SmartScreen may appear. Select More info → Run anyway if you trust the source.
• macOS: You may need to right-click the application and choose Open on first launch.
• Android: Because Orbit is distributed outside the Google Play Store, Android or Google Play Protect may display a warning before installation. Continue only if you trust the release source.

Verify Your Download

A SHA256SUMS.txt file is included with this release.
Since v0.3.0-beta, the checksum file is also GPG-signed (SHA256SUMS.txt.sig).

Use the Orbit Release public key to verify:

# 1. Import the public key
curl -O https://raw.githubusercontent.com/D4niel-dev/Orbit-beta/main/security/public-key.asc
gpg --import public-key.asc

# 2. Verify the signature
gpg --verify SHA256SUMS.txt.sig SHA256SUMS.txt

# 3. Verify your downloaded file
sha256sum --check SHA256SUMS.txt --ignore-missing

For Windows PowerShell:

Get-FileHash Orbit-Setup.exe -Algorithm SHA256
Compare-Object (Get-Content SHA256SUMS.txt) (Get-FileHash Orbit-Setup.exe -Algorithm SHA256) -Property Hash

Security

Orbit is designed for trusted private networks and local-first communication.
Official releases are published exclusively through this GitHub repository.

Links

• Repository Orbit-beta
• View the changelog for the latest changes!
• Having issues with the app ? Click here to report it!