Stable releases, beta releases and archived previews are listed separately, with dates, requirements and SHA-256 checksums.
Fixes first-run network setup getting stuck on 'Waiting for approval...' after an uninstall without rebooting, adding cross-version pending-reboot detection, concurrent per-engine initialization, and immediate continuation once at least one engine is ready.
Fixes the in-app uninstaller hanging on the completion sheet due to .terminateLater modal deadlock and App Sandbox ~/.Trash restrictions, ensuring immediate clean exit and complete app bundle removal.
Eliminates false-positive transparent proxy post-EOF write error logs, removes double window re-layouts during passive proxy selection refreshes, caches ICU formatters and live connection snapshots, propagates native node renames to dialer-proxy references, and adds live iCloud sync reload for standalone custom rule providers.
End-to-end code review & performance optimization: zero-allocation connection classifier, O(1) 500-node indexing with duplicate guard, bounded concurrent Transparent Proxy DNS resolution, and live HTTP diagnostic probes.
Add one-click 6-point Network Diagnostic Doctor (NetworkDiagnosticDoctor) and zero-secret Markdown diagnostic report export.
Add multi-shell terminal proxy environment generator (Zsh/Bash, Fish, Nushell, PowerShell) and standard FindProxyForURL PAC script generation.
Add multi-dimensional traffic leaderboard (by App, Host, and Outbound with one-click filter linkage) and optimize hedged retryable outbound connect timeouts.
Implement 5-layer loopback (127.0.0.0/8, ::1) and RFC 6761 localhost / *.localhost direct bypass protection across Global and Rule modes.
Add visual Rule Providers management & instant refresh, 6-step Connection Route Decision Trace with quick rule actions, interactive DNS/Fake-IP lookup inspector, and multi-token proxy filtering.
Add Network Environment Automation (gateway/Ethernet/Wi-Fi rules), single-connection handshake timing breakdown, and custom local DNS Host mappings.
Fix Chained Proxy default group selection for >64-node subscriptions and standalone Chained Proxies group visibility, with improved iCloud sync diagnostics.
Introduce first-class Chained Proxy support (dialer-proxy & relay groups) and immediate stale connection / QUIC session pool eviction on node or routing mode switches.
Introduce real-time Core and App physical memory telemetry across the Overview golden-ratio split card, Connections session bar, and Menu Bar popover footer.
Eliminate the main app CGFontCache numeric transition memory leak, harden secondary Fake-IP reverse mappings and HTTP/MMTLS Host recovery, and silence startup notification storms and layout recursion.
Harden Fake-IP and concurrent TUN DNS handling, add outbound interface bind self-healing and wake recovery deduplication, and isolate failover probes.
Keep menu latency measurements consistent, probe DIRECT and active strategy routes, and refresh stale readings.
Preserve ongoing connections when automatically returning to a recovered preferred node.
Fix repeated network resets after wake and improve transparent-proxy diagnostics and menu-bar traffic refresh.
Fix uploads interrupted after remote half-close, transparent-proxy diagnostic metering, and menu-bar traffic rendering.
2.0.1 optimization release: overhauled menu bar traffic layout with pixel-aligned 3-column typography and anti-jitter, completely resolving unit clipping on high bandwidth rates
2.0.0 major milestone: full coverage across 16 modern protocols, Chrome 152 uTLS with post-quantum ALPS, all 37 Mihomo rules, DoQ/DoH3 DNS & sniffer, bi-directional share-links, and compatibility pre-flight reports
Fixes VMess and Trojan nodes that state network: tcp failing to load
Adds the httpupgrade transport; all 28 protocol variants now match Mihomo node by node
AnyTLS nodes with a browser fingerprint option, SS2022 ChaCha and WireGuard nodes from airport subscriptions now load
Subscriptions with a few unsupported nodes now skip just those nodes instead of failing; adds node-by-node differential testing against Mihomo
Fixes transparent proxy probes of dead nodes stalling the control plane and restarting the extension, which dropped direct connections too
Fixes the app staying on Recovering without reconnecting, domestic apps losing connectivity after switching subscriptions, and intermittent Trojan UDP packet loss
Route tester overhaul (no-resolve, GEOSITE, DST-PORT, private IP), proxy node search and timeout filter, custom rule filtering with move to top/bottom, and recently closed connections buffer
Streaming per-node verified latency probes while connected, LAN proxy loopback coordination, and uninstaller cleanup hardening
Complete uninstall with zero host residuals, one-click close and auto-removal of app bundle, sandbox entitlement refinements, and full release acceptance
Fixes rule imports dropping rules, dialer proxies and GEOSITE typos blocking connections, iCloud deletions returning, and a startup reconnect loop
Added one-click destination routing rules from the Connections table, single-node share URI clipboard import/export, and custom rule priority reordering with batch import
Added GEOSITE and DST-PORT custom rules, chained dialer-proxy support for manual nodes, and end-to-end encrypted iCloud sync for custom rules and bypass policies
LAN sharing proxy fixes: fragmented handshakes, complete responses after uploads, and standards-compliant HTTP forwarding
Real-time menu bar network traffic monitor, TDD release gate, telemetry isolation, and parallel acceptance pipeline
Allow LAN proxy sharing completely decoupled as a standalone feature across Settings and Menu Bar
Menu bar icons standardized 18x18 Retina vector rendering, industrial Allow LAN hardening with IPv6 support
Allow LAN proxy sharing (HTTP/SOCKS5), physical IP resolver, and multi-platform guides
Customizable menu bar icons, reinforced transparent proxy gates, and parallel acceptance pipeline
Outbound DNS multi-hop hosts alias chain resolution, transparent proxy upstream hosts-alias exclusion, and automated Clash Verge subscription compatibility verification gate.
Full compatibility for Shadowsocks built-in obfuscation plugins (obfs / v2ray-plugin / shadow-tls) with security whitelist gate, and complete closure of 7 soak test resilience issues.
Control-plane watchdog and self-healing for stalled provider communication, UDP peerReset log noise reduction, and host diagnostic log persistence.
Traffic comes back on its own after switching network interfaces in transparent proxy mode, and the Rules page no longer crashes.
Customize profiles without editing them: groups by region or keyword, hidden notice entries, settings that survive subscription updates, and TUN alongside Tailscale MagicDNS.
Node failover: when a node stops answering, traffic moves to a working one and returns once it recovers, and stuck connections are closed right away.
Redesigned page headers and actions, a tidier Connections page, a new Add Rule sheet, page fade-ins, and faster page switching with less memory.
Page switching no longer stalls, memory stays around 70 MB, per-app traffic statistics stay complete in long sessions, and page content follows the Liquid Glass guidelines.
A redesigned three-page first-run guide makes every permission's status clear at a glance. Fully verified in the VM matrix and on Apple Silicon, and notarized by Apple.
Fixes layouts that overflowed the narrowest window in Connections and Overview; all UI tests pass. Fully verified in the VM matrix and on Apple Silicon, and notarized by Apple.
Fixes new connections stalling during latency tests in transparent proxy mode, makes reconnecting after a restart more reliable, and keeps traffic statistics history safe. Fully verified in the VM matrix and on Apple Silicon, and notarized by Apple.
Close connections without disconnecting; adds a log viewer, node link and QR code import, and encrypted local traffic statistics; fixes reconnecting after a restart. Fully verified in the VM matrix and on Apple Silicon, and notarized by Apple.
Refined and standardized the macOS native design system and HIG interactions; unified row heights, card padding, sheet footers, inline controls, and status alerts. Fully verified on Apple Silicon and notarized by Apple.
Fixed proxy connection restoration across Mac reboots and login item startups; introduced progressive startup backoff retries; hardened tray-only lifecycle. Fully verified on Apple Silicon and notarized by Apple.
Added Rule Provider management with dynamic compilation; strict 15MB Jetsam rule budgets; automatic iCloud multi-device roaming sync. Fully verified across the six-way matrix on physical Apple Silicon.
See which app opened every connection and route each app through a proxy, directly or not at all; Mihomo process rules now work. Verified by the protocol interoperability gate and a six-way matrix on physical Apple Silicon.
See your subscription's remaining traffic and expiry at a glance, with warnings before either runs out, optional notifications and provider-suggested update schedules. Verified by the protocol interoperability gate and a six-way matrix on physical Apple Silicon.
Self-signed nodes no longer need skip-cert-verify: every TLS protocol honours a pinned certificate fingerprint and Hysteria2 / TUIC accept a custom CA, as in Mihomo; a bad certificate setting only affects its own node. Verified by the protocol interoperability gate and a six-way matrix on physical Apple Silicon.
Fixes duplicated Shadowsocks UDP packets and SSH-node connections dropping after 5 idle seconds; interoperability tests for all twelve protocols now cover bulk transfers, idle reuse, UDP bursts and certificate checks. Verified across the Tart VM 6-dimension matrix and physical Apple Silicon hardware.
Rule resources now check for updates weekly while connected, comparing the upstream checksum first so unchanged data is never downloaded again; Download & Verify works while connected and applies on the next connection. Verified across the Tart VM 6-dimension matrix and physical Apple Silicon hardware.
Fixes fatal crash in iCloud sync under empty/first-launch state; eliminates concurrency race in Packet Tunnel network recovery; adds export compliance exemption. Verified across Tart VM 6-dimension matrix and physical Apple Silicon hardware.
Fixes proxy groups that ignored clicks, so often only the first group could be opened; the menu bar panel's traffic graph now matches Overview, with download and upload on one scale. The engine and extensions are unchanged from 1.1.3; verified across the Tart VM matrix, the full UI suite and physical Apple Silicon hardware.
A maintenance release: clean builds of the network engine work again on macOS 27, the network extensions can no longer crash on an unexpected control message, and plain HTTP proxy nodes gain an automated test. The engine and routing are unchanged from 1.1.2; verified across the Tart VM matrix and physical Apple Silicon hardware.
Fixes quitting from the menu bar panel while connected, which hung and then ignored every later quit; the main menu's Copy Terminal Export Command now uses your local proxy ports and is available only when the local proxy is on. The network engine and extensions are unchanged from 1.1.1; verified across the Tart VM matrix and physical Apple Silicon hardware.
Settings and every form sheet now share the main window's Liquid Glass design, the privacy page is rewritten as a short “Private by default”, and the menu bar panel gains an equal-width “Test all”; fixes the English engine control overflow, the Connections table at narrow widths and several accessibility issues. The network engine and extensions are unchanged from 1.1.0; verified across the Tart VM matrix and physical Apple Silicon hardware.
A full redesign in macOS 26 Liquid Glass that follows the system's Liquid Glass and Reduce Transparency settings; Overview, Proxies, DNS, Profiles, Rules and the menu bar panel are rebuilt to be simpler, and large lists render up to twice as fast. The network engine and extensions are unchanged from 1.0.38; verified across the Tart VM matrix and physical Apple Silicon hardware.
Adds in-app help for the network engines and DNS settings so choosing between Transparent Proxy and TUN is easy, a current-node latency test on Overview, and menu bar guidance when there is no profile or a connection fails. The network engine and extensions are unchanged from 1.0.37; verified across the Tart VM matrix and physical Apple Silicon hardware.
Adds a first-run network setup that grants both the transparent proxy and TUN system permissions at once, unifies Settings, durations, latency colours and other interface details, and stops labelling official releases as beta. The network engine and extensions are unchanged from 1.0.36; verified across the Tart VM matrix and physical Apple Silicon hardware.
A redesigned interface: a Control Center–style menu bar panel with version and update alerts, a ⇧⌘P command palette, Settings consolidated into four tabs, and automatic groups showing the node in use. The network engine and extensions are unchanged from 1.0.35; verified across the Tart VM matrix and physical Apple Silicon hardware.
Fixed orphan socket accumulation caused by untimed half-closed flows when proxy nodes fail to acknowledge client FIN with their own FIN; verified across Tart VM matrix and physical Apple Silicon hardware.
Fixed large uploads breaking the connection through VLESS Vision nodes, which made long Claude Desktop / Claude Code sessions fail with ECONNRESET; added a large-upload release gate; verified across the Tart VM matrix and physical Apple Silicon hardware.
Fixed transparent-proxy mode sending apps with their own DNS resolver, such as Chrome, to poisoned addresses so sites like Google would not load; added a transparent-proxy SNI recovery release gate; verified across the Tart VM matrix and physical Apple Silicon hardware.
Resolved root cause of idle 60s disconnect affecting clients like Claude; optimized persistent connection keep-alive reuse; eliminated tracked stream destruction race panic; fixed Fake-IP cache loss on TUN reload; added packet tunnel 30s data-plane telemetry sampling; verified 100% across Tart VM matrix and physical Apple Silicon hardware.
Completed 6-hour continuous production telemetry profiling; eliminated SwiftUI runtime view update faults and MenuBarExtra Quit 0x7d XPC assertion; introduced smooth tunnel reconnection recovery state and 3.5s high-sensitivity route probe failover; fully verified across Tart VM matrix and physical Apple Silicon hardware.
Modernized UI visual system and robust layout constraints preventing text wrapping under minimum window widths and Expanded Text; introduced 5-stage automated connectivity diagnostic engine with actionable recommendations; verified across 44 UI visual review scenarios and 6-dimensional physical network penetration matrix with 100% pass.
Persistent TUN Fake-IP mappings across provider and VM restarts with authenticated encrypted cache and TLS ClientHello SNI fallback recovery; established zero-test-note release packaging standard; verified across Tart VM 6-dimensional matrix and physical Apple Silicon Mac mini at 10.0+ Gbps throughput.
Resolved Darwin TUN kernel packet buffer overflow (ENOSPC / ENOBUFS) with 32-packet batching and 2ms async lossless backoff; dynamic self-healing probe session prevents false rollbacks; verified 10.4 Gbps wire speed on physical Apple silicon.
Permanently eliminated Darwin kernel routing conflicts between Tailscale (100.64.0.0/10) overlay networks and NetworkExtension excludedRoutes; incremented build version for seamless system extension in-place upgrade; verified on physical Mac mini & VM matrix.
Bypassed physical interface binding for Tailscale (100.64.0.0/10) and overlay network direct connections in Core Engine, fully restoring native Tailscale P2P and SSH connectivity; added automated bypass for Tailscale/DERP infrastructure; guarded custom rule /0 prefix; verified on physical Mac mini & VM matrix.
Decoupled 100.64.0.0/10 from TUN excludedRoutes, permanently resolving Darwin kernel static route hijacking of Tailscale utun interfaces; upgraded core engine monotonic clock-skew resilience, verified on physical Mac mini & VM matrix.
Native custom routing rules engine with multi-target actions, Clash/Form dual-mode parsing, real-time syntax validation and route match simulation; resolved Tailscale CGNAT (100.64.0.0/10) and private DERP timeouts; sub-second graceful application exit teardown, verified on physical Mac mini & VM matrix.
Network path change debouncing and SCDynamicStore session reuse resolving CoreFoundation event storm, zero-copy MMDB memory mapping fulfilling iOS Jetsam budget, bounded Tokio worker threads, verified on physical Mac mini & VM matrix.
Live profile reload without connection drops, direct in-memory IPC payload transmission (5~35KB) resolving sandbox isolation, cross-platform iCloud profile catalog sync, verified on physical Mac mini & VM matrix.
Proactive background memory pressure relief (123MB -> 60-90MB), packet tunnel queue capacity pre-allocation, 10-hour soak zero-error verification, verified on physical Mac mini & VM matrix.
Menu bar popover instant node search, profile auto-update refresh intervals, rule simulator domain presets, auto-fitting outlet columns, whole-row profile activation, AppKit clean exit recovery, verified on physical Mac mini & VM matrix.
User-facing toggle for domestic routing optimization, symmetrical dual-engine network switch recovery, TunnelManager & UI architectural decoupling, verified on physical Mac mini & VM matrix.
Zero-config transparent domestic and Apple acceleration engine, Apple CDN line-rate bypass (34.9 MB/s verified), anti-oscillation recovery, verified on physical Mac mini & VM matrix.
Fixed startup auto-reconnect gate locking issue; added menu bar low-power on-demand telemetry polling, TCP half-close watchdog, and outbound packet batching optimization.
Support launch at login management, safe termination protection, and smart startup detection with previous connection state auto-recovery.
Unified singleton window lifecycle, added menu bar only mode with Dock icon hidden, streamlined DNS page into compact dual-column view with merged runtime card.
Redesign strategy group switcher into Apple HIG segmented capsule bar with active status card, overhaul Sparkle update dialog with Apple HIG styling, decouple speedtest scopes, rebrand node diagnostic registry.
Fix hotplug network recovery deadlock and virtual interface misidentification, add host-level recovery watchdog, overhaul profiles into native grouped list, stabilize node ordering.
Implement seamless engine handover, fix long-sleep wake network stalls, add route simulation tester and action filters on Rules page, overhaul overview animations.
Refactor latency measurement into explicit layers, cascade aggregation to parent strategy groups, dynamic menu-bar proxy shell commands, verified with full VM matrix.
Enhance network recovery and probe fallback, protect transparent proxy and long connections, refine recovery state UX, verified with full VM test matrix.
Fix tunnel disconnect and reconnect on screen lock and display sleep, maintain continuous network during lock screen, add RuntimeEnvironment test suite, verified in VM.
Support editing/removing inactive profiles while connected, fix latency test crashes and high latency, add 16-worker concurrency pool and per-node testing, refactor smooth 3s traffic waveform.
Fix TUN mode lifecycle deadlock on network recovery exhaustion, add automatic zombie engine eviction and self-healing, verified with VM network recovery and adapter switch.
Glass menu panel, latency-sorted nodes, timestamped traffic history, and improvements to network stability and shutdown.
Fix TUN recovery after Ethernet/Wi-Fi changes, lost proxy selections and IPv6 hosts resolution. See release notes for validation coverage and waived gates.
The new Silver Flight icon unifies Dock, Finder, in-app branding and website icons. Settings now include System, Light and Dark themes.
Bounded network resets and automatic recovery after unexpected provider exits. Signed, notarized, and upgrade-tested in Tart; see release notes for known limitations.
Stable release with Developer ID signing and Apple notarization. Includes immediate system network and DNS restoration on disconnect, process-wide engine concurrency guard, non-blocking latency probing, and active DNS resolver telemetry.
Smart 1-second telemetry, standardized motion design, full dynamic localization, and sleep-wake recovery.
First production release with Swift 6 and dual engines.
The first cross-machine candidate signed with Developer ID, notarized by Apple, and stapled. Superseded by 1.0.0 stable.