v1.2.5

Added

• Warn before collecting a debug log or logcat recording while the VPN is off or VPN Hide is not routed through the tunnel — such captures are incomplete and hard to diagnose. Offers to re-check or proceed anyway.

Changed

• The VPN-tunnel check is now shared across the whole app — re-checking in one place updates every screen, and Diagnostics now reacts automatically when you turn the VPN on or off.

Fixed

• Fixed the kernel module failing to load on some OEM kernels with a trimmed module symbol table (e.g. Xiaomi HyperOS android12-5.10), where dev_get_by_index_rcu was reported as an unknown symbol; it is now resolved at runtime via kallsyms like path_put, so the module links without a hard reference.
• Settings switches no longer flicker off/on while a debug log is being collected, and the debug-export sheet no longer keeps a stale collected file when reopened.
• The app list now loads reliably on devices with many installed apps and/or multiple profiles (common on MIUI/HyperOS). It no longer fails on huge app counts or blocks the whole list demanding you unlock a profile — it shows what it can read and flags any profile it couldn't; settings for un-scanned profiles are preserved.

What's Changed

• Refresh stale diagnostics/detection-vector docs by @okhsunrog in #300
• feat(diagnostics): unify the VPN routing gate; warn before incomplete captures by @okhsunrog in #301
• fix(picker): load the app list on devices with very many installed apps (ARG_MAX) by @okhsunrog in #302
• fix(kmod): resolve dev_get_by_index_rcu via kallsyms for trimmed-KMI kernels by @okhsunrog in #303
• fix(picker): fail-soft app enumeration instead of a hard unlock-a-profile wall by @okhsunrog in #304

Full Changelog: v1.2.4...v1.2.5