BULLET v0.0.3

🚀 BULLET Release v0.0.3

Load. Aim. API.

📋 Changelog

Recent Commits & Fixes

• fix(desktop): bind Kestrel to 0.0.0.0:5000 in Bullet.Desktop to accept inbound LAN connections from Mac and other peers
• fix(mesh): complete end-to-end bidirectional sync for mutations, collections, firing, and host integration
• fix(mesh): resolve cross-machine LAN discovery, join proxying, and add subnet scan fallback (/api/mesh/status)
• feat(mac): self-contained native macOS Apple Silicon (arm64) and Intel (x64) packages with zero external .NET dependencies
• fix(execution): resolve SSL bypass with Postman parity (RemoteCertificateValidationCallback = true and X509RevocationMode.NoCheck), shot state reversion, and real-time autosave
• fix(installer): embed PE metadata, configure Authenticode signing, and bundle 1-click certificate trust helper

View the full curated release history in the repository CHANGELOG.md.

---

📦 Release Packages & Checksums

Package	OS / Platform	Description
Bullet-Setup.exe	Windows x64 (Setup)	Single-file Windows setup installer with desktop shortcuts and auto-launch
Bullet-Desktop-Windows-x64.zip	Windows x64 (Portable)	Portable zero-install package containing standalone executable and bundled assets
Bullet-macOS-AppleSilicon-arm64.zip	macOS (Apple Silicon)	Native Apple Silicon bundle with double-clickable Bullet.command launcher
Bullet-macOS-Intel-x64.zip	macOS (Intel x64)	Native Intel Mac bundle with double-clickable Bullet.command launcher
Bullet-Release.cer	All	Authenticode public certificate for publisher identity verification
Install-Certificate.bat	Windows	1-Click script to trust the publisher certificate and eliminate SmartScreen blocks

🛡️ Windows SmartScreen Guidance

If Windows Defender SmartScreen shows 'Windows protected your PC', this is normal for newly released open-source installers. You can either:

1. Click More info -> Run anyway.
2. Or download Install-Certificate.bat into the same folder as Bullet-Release.cer and run it once to install the publisher certificate into your Windows CurrentUser store.

🔐 SHA256 Verification Hashes

E561AFA8FF74BB5DD9381E87FD4090CBC67586D18C91C7E1927687641B289936  Bullet-Setup.exe
8EDA8ECDFD9AAE85C2C367002752EBEC08AA206A07BF17AD4354A85D43597C94  Bullet-Desktop-Windows-x64.zip
9B0AEF2A9796AC5BD2BF20B9DC1FFC728C447C9E0DE42205819E78E4B0D1CF30  Bullet-macOS-AppleSilicon-arm64.zip
9089AA4E759076494BECC259604DB1F30E77A48F9EA13ED764678A55202058D5  Bullet-macOS-Intel-x64.zip

Full Changelog: v0.0.2...v0.0.3

BULLET v0.0.2

🚀 BULLET Release v0.0.2

Load. Aim. API.

📋 Changelog

Commits since v0.0.1

• docs: add CONTRIBUTING guidelines, PR template, and GitHub issue templates (92f9f42) by @VishalViswanathan03
• fix: remove hardcoded absolute local paths in wwwroot candidate resolution (6a4f664) by @VishalViswanathan03
• docs: remove SSRF row from comparison table to keep focus on core user advantages (6a1ee0c) by @VishalViswanathan03
• docs: emphasize BULLET core advantages: zero-login workspaces, no runner paywalls, and privacy (fdf62ac) by @VishalViswanathan03
• docs: correct comparison table with verified facts across Postman, Insomnia, and Bruno (8a08996) by @VishalViswanathan03
• ci: make workflow_dispatch release trigger resilient for manual releases (a84cd79) by @VishalViswanathan03
• release: v0.0.2 - Postman scripting bridge, Field Manual export, mock status codes, and security hardening (530c686) by @VishalViswanathan03
• fix(cors): permit mDNS .local and intranet machine hostnames for seamless WiFi mesh collaboration (734754a) by @VishalViswanathan03
• fix(security): remediate OAuth XSS, SSRF bypass vectors, gRPC SSL enforcement, cookie cross-domain leakage, and add pm scripting bridge (f3a8dc7) by @VishalViswanathan03
• feat: resolve quality bottlenecks across cookie jar, mock server status codes, path variables, CLI runner, and field manual export (50cb6a5) by @VishalViswanathan03
• docs(agents): update AGENTS.md with 34-phase E2E suite, gRPC Studio, WiFi Mesh, and automation gotchas (6b2d0db) by @VishalViswanathan03

View the full curated release history in the repository CHANGELOG.md.

---

📦 Release Packages & Checksums

Package	OS / Platform	Description
Bullet-Setup.exe	Windows x64 (Setup)	Single-file Windows setup installer with desktop shortcuts and auto-launch
Bullet-Desktop-Windows-x64.zip	Windows x64 (Portable)	Portable zero-install package containing standalone executable and bundled assets
Bullet-macOS-AppleSilicon-arm64.zip	macOS (Apple Silicon M1/M2/M3/M4)	Native Apple Silicon bundle with double-clickable Bullet.command launcher
Bullet-macOS-Intel-x64.zip	macOS (Intel x64)	Native Intel Mac bundle with double-clickable Bullet.command launcher
Bullet-Release.cer	All	Authenticode public certificate for publisher identity verification

🔐 SHA256 Verification Hashes

95A83E96B04E3632D1DCE2CEBD110472F80DC1DE949137B885897FEC71EC6334  Bullet-Setup.exe
89D85690D961743F7F705D8E3289C73E35ACBDDB273B95321AA8F0D6167098FE  Bullet-Desktop-Windows-x64.zip
8D392097D819C1750DEE11DE5598007ED9E5C13F9E56D2E93E1FCDE328A2E8A8  Bullet-macOS-AppleSilicon-arm64.zip
926CE6330B72DB20A3B174BE0AB2B1F66C1C47D209A1259AD62DE0DD624782F9  Bullet-macOS-Intel-x64.zip

Full Changelog: v0.0.1...v0.0.2

BULLET v0.0.1

🚀 BULLET Release v0.0.1

Load. Aim. API.

📋 Changelog

Commits Included in this Release

• fix(web): synchronize EnvironmentQuickLook with optimistic state and keep selectedLoadout refreshed in App (4c62447) by @VishalViswanathan03
• test(e2e): enable SSRF bypass in test 18 and increase modal close timeouts to 15s for CI runner stability (21ceffa) by @VishalViswanathan03
• fix(e2e): route test 18-19 to local test-api to prevent external 502 gateway errors and resolve ShotsController warnings (28f4813) by @VishalViswanathan03
• fix(e2e): ensure React input event dispatching and search filter clearance in Test 32 (020faf0) by @VishalViswanathan03
• test(e2e): increase timeouts in tests 32-34 to 15s for CI stability (66ddbaf) by @VishalViswanathan03
• fix(web): refresh TLS profiles and loadouts when switching back to Arsenals tab (1136a34) by @VishalViswanathan03
• chore: prepare consolidated v0.0.1 initial release with curated changelog and updated workflow (df8f921) by @VishalViswanathan03
• feat: standardize header button heights, improve light mode contrast, and optimize SEO for Postman alternative discoverability (06e2ec7) by @VishalViswanathan03
• feat(ux): add multi-tab request workbench, environment quick-look popover, json syntax highlighting, and path variables auto-detection (2f199bd) by @VishalViswanathan03
• test(grpc): add mock gRPC service endpoints and end-to-end wire connection test (136b1ba) by @VishalViswanathan03
• feat(grpc): add proto file import with drag-and-drop dropzone, active schema chip, and Postman-style TLS lock toggle (2b47e6f) by @VishalViswanathan03
• test(e2e): expand browser verification suite to 30 phases covering SSRF guard/bypass, TLS profile selection, gRPC cockpit, OAuth2 PKCE, and Mesh modal (3f4aa88) by @VishalViswanathan03
• feat(tls): add Client Certificate (TLS Profile) selector to Shot Settings (648d879) by @VishalViswanathan03
• fix(web): resolve TypeScript type errors in App.tsx and bullet.ts for CI build (7187faf) by @VishalViswanathan03
• docs: Add UI test broadcasting and radar screenshots (0bb694f) by @VishalViswanathan03
• test(ui): Add automated Puppeteer browser UI tests for WiFi Mesh collaboration (6840c90) by @VishalViswanathan03
• test: Add explicit 403 Forbidden mutation rejection and DB immutability checks for ReadOnly mode in two-instance E2E tests (a702d9c) by @VishalViswanathan03
• feat: Enable two-way collaborative editing for second person in WiFi Mesh (e92658c) by @VishalViswanathan03
• test: Add two-instance BULLET Mesh WiFi collaboration E2E tests (a31c8ed) by @VishalViswanathan03
• docs: Add BULLET Mesh WiFi collaboration screenshots (5207702) by @VishalViswanathan03
• feat: Add BULLET Mesh WiFi Collaboration + OAuth2/gRPC E2E tests (d62be49) by @VishalViswanathan03
• feat: add Postman-equivalent OAuth 2.0 engine and gRPC studio (91ce52f) by @VishalViswanathan03
• ci(pages): add enablement: true to actions/configure-pages to auto-provision GitHub Pages (81d2abb) by @VishalViswanathan03
• feat(pages): launch world-class GitHub Pages website and automated deployment workflow (4c910c2) by @VishalViswanathan03
• docs(readme): add prominent downloads matrix and complete installation guides for Windows, macOS, and Docker (112d6c9) by @VishalViswanathan03
• ci: include Info.plist in native macOS application bundles during release packaging (a7bfb67) by @VishalViswanathan03
• feat(pwa): add installable macOS standalone web app support with PWA manifest, dock icons, and header prompt (9d4532b) by @VishalViswanathan03
• docs(agents): add AGENTS.md guide and .agents/skills/bullet-developer for agent onboarding (e934d27) by @VishalViswanathan03
• feat(mac): add native macOS support, cross-platform launcher, and CI release packaging for Apple Silicon and Intel (cbcac57) by @VishalViswanathan03
• fix(brand): unify bullet logo across web app, intro splash, and favicons to match desktop shortcut (c2eda98) by @VishalViswanathan03
• feat(ci): add automated Authenticode code signing with DigiCert timestamping and public certificate export (c53b2e3) by @VishalViswanathan03
• fix(ci): accurately attribute changelog commits to @VishalViswanathan03 instead of wrong github username (0692310) by @VishalViswanathan03
• ci: add automated changelog generation to release workflow and add CHANGELOG.md (a72365d) by @VishalViswanathan03
• fix(ui): replace logo with authentic rifle bullet cartridge, remove intro replay button, eliminate redundant SSL prompt and circular JSON error (4d119ae) by @VishalViswanathan03
• test: achieve 100% automated browser E2E coverage across 25 client features with visual verification (f3a5a56) by @VishalViswanathan03
• feat: supercharge UI with supersonic bullet intro, Web Audio sound FX, cURL auto-detection, and telemetry visualizers (f4e0936) by @VishalViswanathan03
• feat: add drag-and-drop file import, sidebar reorganization, and E2E test verification (1797eda) by @VishalViswanathan03
• feat: complete Postman Collection v2.1 & Environment import with 100% fidelity (6fbf716) by @VishalViswanathan03
• feat(ui): replace confusing shield metaphors with standard Auth, Body, and SSL lock controls (f995a5e) by @VishalViswanathan03
• fix(settings): support bypassSsrfGuard and bypassSsrfProtection aliases in ShotSettings (c577abe) by @VishalViswanathan03
• feat(workspace): clean slate initialization without dummy user management endpoints (ce67ae0) by @VishalViswanathan03
• fix(ssl): Postman-parity SSL verification bypass and rich error screen (869d7c6) by @VishalViswanathan03
• ci: add tag push trigger for automated desktop release publishing (cd9b241) by @VishalViswanathan03
• feat(installer): add single-file Windows setup installer and CI release pipeline ([44de641](44de641a309893dcb856bcc...