adb-toolkit/RELEASE_NOTES_v1.2.0.md

ATK v1.2.0

Six new tools, a big theming pass, and a security cleanup.

✨ What's new

• 💿 GSI Loader — boot a Generic System Image two ways: DSU (temporary guest OS, no unlock/wipe, reboot to reclean) or a permanent fastboot flash (danger-gated, requires unlocked bootloader). Built-in compatibility pre-check (Treble, ABI, VNDK isolation) before either path.
• 🚀 Intent Lab — list an app's launchable (exported) activities straight from dumpsys and start them with one click, plus a free-form implicit-intent launcher. Reach hidden settings menus and internal screens that never show up on the launcher.
• 📥 Firmware — download and SHA-verify firmware images for a device codename, right from the app.
• 📱 Screen Mirror — scrcpy integration: start/stop mirroring and grab screenshots without leaving ATK.
• 🧙 Magisk integration — install Magisk, extract/patch boot images, and manage installed modules (list, toggle, remove) in one panel.
• 🕵️ Privacy & Tracker Scanner — scans an app's DEX bytecode for known tracker/analytics/ad SDK signatures, cross-references dangerous permissions, and derives a 0–100 privacy score with an A–F grade. Fully offline, no network calls.
• 🔒 App Lock — password-protect the app and gate destructive actions (flashing, permanent GSI install, etc.) behind a separate danger-unlock.
• 🔓 Privileged uninstall, no root — removes protected system apps via a bundled Android helper, with one-click restore.
• 🎨 ~14 new theme palettes (Dracula, Catppuccin Mocha/Macchiato, Gruvbox Material, C64, Adventure Time, and more), on top of the existing Dark/Frappé/Latte.
• 🧹 Debloater: device packages with no UAD database match now show as Unknown/Uncategorized instead of silently disappearing from the list.
• 🔎 APK Audit: entry viewer now has syntax-highlighted code display instead of a plain text dump.

🔐 Security

• Fixed a path-injection issue in the local file viewer (CodeQL go/path-injection) — the resolved path is now validated as a real, regular file before being served.
• Dependency bumps: golang.org/x/image and golang.org/x/net (DoS fixes), vite, postcss, and esbuild (dev-tooling only, not shipped in the built app).

📦 Install (Linux)

Debian / Ubuntu:

sudo dpkg -i atk_1.2.0_amd64.deb

Requirements: adb, fastboot, libgtk-3-0, libwebkit2gtk-4.1-0 (scrcpy only needed for the Screen Mirror module).

Other distros: build from source — see the README.

⚠️ Linux only. No bundled binaries — ATK uses your system adb/fastboot/scrcpy.

🙏 Credits

Built on the open-source community — scrcpy, Magisk, Universal Android Debloater, Wails, Lucide, and more. Full attributions and licenses are in the README. GPL-3.0.