Flowlight 0.3.5

What's new in 0.3.5

Rules: block anything, anywhere, for as long as you say.

0.3.0 taught one agent's allowlist to refuse. This makes refusing a first-class idea, with one rule model behind every screen.

• A rule names a subject and says block or allow. An app, an agent, a destination, a URL, or a pairing of two of those — "Cursor may not reach raw.githubusercontent.com". Right-click any row in Live, Reports, AI Agents or Inspect to write one about what you're looking at. All of them land in the same editor on the new Rules screen, because a rule that took effect out of sight would be a rule you could never find again.
• The most specific match decides, and where two are equally narrow the block stands. An exception written underneath a broad block works; one broader than what it excepts can't widen it by accident.
• For how long. Forever; until a time; until Flowlight quits; or between chosen hours on chosen days. Hours are local and judged when a connection is made, so a Mac that slept through the end of a window finds it closed on waking. A window closing stops new connections — it doesn't tear down ones already open. Plus one global Pause Blocking, because the escape hatch is what makes strict rules liveable.
• Unblocking is part of blocking. Every refusal carries its way out: allow it once, for an hour, or until Flowlight quits. Each of those is itself a rule with an expiry, so the list still answers why is this getting through? next week.
• Rules say where they bite. The Network Extension refuses whole connections and knows nothing about paths. HTTPS inspection refuses one request, so it can match a URL and answer with a status the agent can read instead of a socket that died without explanation. The nettop sampler refuses nothing. A rule the current setup can't carry out says so in the list rather than sitting there looking enforced.
• A violations feed beside the list: every connection a rule decided, with the app, the destination, the rule and whether it was refused or let through by an exception.

Install

Signed with Developer ID and notarized by Apple.

• brew install --cask xinbetween/tap/flowlight
• Flowlight.dmg — drag to Applications.
• Flowlight-0.3.5.pkg — installs to /Applications; offers to quit a running copy first.

macOS 15 or later, Apple silicon and Intel.

Checksums

2ecf485776b2ccb2d04938e847f1f5bab1a9bf4a98cf036dc84062e3b7f53232  Flowlight.dmg
e01920ccce007bbc59f69f95d81110ae683d78f46d76eeffe3ceac62251f419a  Flowlight-0.3.5.pkg