v1.5.0

Kite v1.5.0

🚀 What's New

• Run on System Startup: Option to automatically start Kite on system boot/login (Linux, Windows, macOS).
• Autoconnect on Launch: Automatically establish VPN connection to your preferred profile when Kite starts up.
• Stability: Background subscription refreshes no longer interrupt or reconnect active sessions when server configuration is unchanged.

v1.4.2

Kite v1.4.2

🛠 Fixes & Improvements

• macOS Bridge Mode Direct Bypass: Fixed an issue on macOS where non-bridged applications were blocked from reaching the internet in Bridge mode. Added Darwin interface-scoped routes (-ifscope) and physical interface socket binding (IP_BOUND_IF) ensuring non-bridged traffic routes directly through the physical gateway without colliding with TUN routes.
• macOS Connection & Disconnection Latency: Optimized proxy state management and concurrent networksetup execution on macOS, eliminating the 20–30s delay on connect/disconnect and restoring immediate network responsiveness.
• macOS Privilege Elevation: Added NSAppleEventsUsageDescription and resolved helper binary symlinks to resolve "Operation not permitted" authorization errors on modern macOS, with automatic terminal fallback for administrative elevation.
• Tunnel Startup Robustness: Fixed route parsing, nil gateway pointer safety, and startup race conditions in kite-tunnel to prevent premature exits during initialization.

v1.4.1

Kite v1.4.1

🛠 Fixes & Improvements

• Bridge Mode in Standalone Helper: Resolved an issue where Bridge mode behaved identically to standard Tunnel mode when using kite-tunnel. Added BridgeDialer integration with physical interface bypass binding and dynamic configuration monitoring.
• WireGuard / AmneziaWG Bridge Compatibility: Routed WireGuard and AmneziaWG profiles through local netstack SOCKS5 proxy in Bridge mode to enable granular per-process routing rules.
• Linux Socket Process Resolution: Improved process resolution for incoming connections by resolving /proc/[pid]/exe to prevent 15-character truncation on Linux.
• Streamlined Privileges Dialog: Simplified the network privileges modal with concise messaging and removed extraneous error boxes.

v1.4.0

Kite v1.4.0

🚀 AmneziaWG 2.0 & WireGuard Features

• AmneziaWG 2.0 Protocol Support: Added full support for AmneziaWG 2.0 parameters, including H1–H4 packet header ranges, S3/S4 handshake padding bounds, and I1–I5 junk packet obfuscation sequence chains.
• WireGuard & AmneziaWG Profile Editor: Added manual profile creation and editing in the application modal (AddEditModal). Configurable parameters now include AllowedIPs, DNS, PersistentKeepalive, Address, MTU, Reserved, plus all AmneziaWG obfuscation fields (Jc, Jmin, Jmax, S1–S4, H1–H4, I1–I5).
• Config & URI Serialization: Added bidirectional conversion and parsing for AWG 2.0 parameters in standard configuration files (.conf) and awg:// share links.

🛠 Fixes & Stability

• Native TUN Gateway Routing: Fixed point-to-point peer routing gateway assignment for native WireGuard/AWG tunnel interfaces (kite-tunnel), resolving unreachable gateway errors on custom interface subnets.
• Profile Switching & Reconnection Guards: Prevented background watchdog reconnection loops from hijacking connection state or holding SOCKS ports when switching profiles or disconnecting.

v1.3.2

Kite v1.3.2

🚀 Improvements & Fixes

• Accurate Active Latency Probing: Replaced immediate local SOCKS handshake dial with warm HTTP HEAD probes to generate_204, resolving incorrect ping=1ms on active VLESS and normalizing active WireGuard/AmneziaWG latency measurements.
• Physical ISP Pre-Bypass for Profile Pings: Added --bypass-ips support to kite-tunnel. When a VPN session starts, all saved profile endpoints are pre-routed through the physical ISP gateway. Pinging any profile while connected now reflects real direct latency without traffic chaining through the active tunnel.
• Eliminated Routing Loops & Flaps: Eliminated socket contention and route flapping during latency tests by isolating all profile endpoints at tunnel startup.

v1.3.1

Kite v1.3.1

🚀 Improvements & Fixes

• Native Direct TUN for WireGuard & AmneziaWG: Replaced double TCP/IP stack (tun2socks + loopback SOCKS5) with direct amneziawg-go device bound straight to the OS TUN interface (kite0). Eliminates packet aliasing, latency, and CPU overhead in tunnel mode.
• Fixed Endless Ping & CPU Spikes on Active Connections: Replaced redundant in-memory WireGuard device creation during active session pings with direct warm latency probing through the active tunnel, stopping session hijacking and handshake loops.
• Fixed wireguard:// Link Parsing: Enabled native WireGuard URI query parameter extraction (address, publickey, keepalive, mtu, etc.) and safe JSON type decoding.
• Fixed UDP Relay Packet Dropping: Cloned socket address and packet slices in SOCKS5 UDP associate relay to avoid symmetric NAT packet drops.
• Upgraded Connectivity Probes: Updated tunnel verification targets to standard global HTTPS and DNS endpoints (cp.cloudflare.com:80, 1.1.1.1:443).

v1.3.0

v1.3.0 - WireGuard and AmneziaWG Support

v1.2.1

Kite v1.2.1

🛠️ Fixes & UI Enhancements

• Clean Profile Cards: Removed redundant connecting/disconnecting badge in the profile card header.
• macOS Settings Persistence: Ensured profile and application settings persist reliably on macOS across launches.
• Standalone TUN Helper: Isolated TUN interface routing into standalone helper for Linux and macOS.

v1.2.0

Kite v1.2.0

🌐 Routing & Bridge Enhancements

1. Collapsible Bridge Rule Groups & Batch Controls

• Rule Grouping: Organize split tunneling rules into collapsible groups with status badges and rule counters.
• Group Master Toggle: Quickly enable or disable entire groups of rules with a single click.
• Auto-Assignment: Automatic categorization of applications and domains into rule groups for cleaner management.
• State Persistence: Group assignments and toggle states are saved and restored seamlessly across app restarts.

2. System Tray Routing Mode Switcher

• Tray Mode Sub-Menu: Switch between Tunnel (TUN), Proxy, and Bridge (Split Tunneling) modes directly from the system tray menu.
• Live State Indicators: Visual checkmarks and indicators in the tray menu display the currently active routing mode in real time.

⚡ Connection & Settings Improvements

1. Automatic Ping on Connect

• Instant Latency Metrics: Profile ping is now automatically triggered upon connection, showing real-time latency right away without requiring manual refresh.

2. Tunnel DNS & Settings Persistence

• Reliable DNS Serialization: Adopted structured TunnelSettingsDTO across Go backend and frontend Wails bindings to eliminate issues where custom DNS settings were dropped.
• Settings Synchronization: Validated and synced custom tunnel IP and DNS configurations in the Mode Settings modal, ensuring accurate persistence in configuration files.

v1.1.2

Kite v1.1.2

🎮 Bridge Mode & SOCKS5 Fixes

1. SOCKS5 UDP Relay in Bridge Mode

• Loopback Interface Separation: Resolved an issue where UDP sockets in Bridge mode were bound to the physical network interface, causing the OS to drop UDP packets destined for the local SOCKS5 proxy (127.0.0.1:10808). Fixes match connection timeouts in games like The Finals (Discovery.exe).
• Anti-Cheat Process Identification: Added fallback to CreateToolhelp32Snapshot on Windows to reliably resolve process names even when anti-cheat drivers (e.g., Easy Anti-Cheat) restrict process handle creation.
• Ephemeral Port Lookup Backoff: Added retry backoff for socket table lookups to ensure newly bound UDP ephemeral ports are detected reliably.

Kite v1.1.1

🚀 Self-Update Architecture & Stability Fixes

1. In-App Updater Enhancements

• Linux Distribution Compatibility: Fixed asset selection scoring so non-Debian distributions (Arch, Fedora, openSUSE, Alpine, Void) properly select .tar.gz packages rather than attempting Debian .deb installation.
• Automated macOS Update: Full automated self-update on macOS. .zip archives are now extracted and /Applications/Kite.app is updated directly (with admin escalation via AppleScript when needed) followed by automatic app relaunch.
• Linux Capability Preservation: Re-applies network capabilities (cap_net_raw,cap_net_admin,cap_net_bind_service+eip) upon executable replacement to ensure TUN device setup remains uninterrupted.
• Security & Integrity:
  • SHA256 checksum verification against published release checksums before executing update payloads.
  • Archive extraction hardened against directory traversal (anti-Tar/Zip-Slip) and decompression bombs.
  • Temporary files and extraction directories are now created with strict permissions and cleaned up automatically.
• SemVer 2.0 Engine: Upgraded version comparison to standard SemVer 2.0 with pre-release tag support, ensuring beta testers correctly receive stable release updates.
• GitHub API Rate-Limit Resilience: Added If-None-Match (ETag) caching to avoid 60 req/hr unauthenticated rate-limit errors.
• Compile-Time Version Injection: Release workflow now dynamically injects version tags into the binary via -ldflags.

2. User Experience & Controls

• Download Cancellation: Added a "Cancel Download" button in the update modal so in-progress downloads can be safely aborted.
• Snooze & Skip Controls: Added "Remind Tomorrow" (24-hour snooze) and "Skip Version" options to prevent intrusive modal alerts on every startup.