Skip to content

v1.2.0

Choose a tag to compare

View all tags
@yehsuf yehsuf released this 17 Jul 04:27
v1.2.0
This tag was signed with the committer’s verified signature.
yehsuf
SSH Key Fingerprint: NxzUTVwNymBySbbpkmfx9OQi5v9xWzDeLNO+idzTHwY
Verified
Learn about vigilant mode.
163ef45
This commit was signed with the committer’s verified signature.
yehsuf
SSH Key Fingerprint: NxzUTVwNymBySbbpkmfx9OQi5v9xWzDeLNO+idzTHwY
Verified
Learn about vigilant mode.

Stable release with three live-machine reliability fixes (PR #50).

Fixes

  • fix(install): mitmproxy CA no longer re-appended on every install/update. The presence check used a decoded X.509 subject (CN=mitmproxy) that never appears in a base64 PEM; now a single-source marker + exact-cert-body detection.
  • fix(service): stops the recurring "install tears down the live proxy, only update fixes it" (Copilot ECONNREFUSED / os error 61) and the service-test clobber:
    • bootReplaceLaunchdService retries the bootstrap so a bootout/bootstrap EIO race never leaves a service DOWN.
    • isPortResponding retries so a busy-but-healthy proxy isn't needlessly restarted.
    • Allowlist guard (isManagedLaunchAgentPath) + injectable exec so tests can never hijack the real com.myelin.* launchd label.
    • Watchdog bash hardened: retries the probe, never revives a service launchd still reports running with a live PID, and retries the bootstrap.
  • fix(mitm): the tool filter now skips filtering when the client uses deferred tool loading, fixing the provider 400 "At least one tool must have defer_loading=false".

Testing

Mac (1435 node + 309 py), Linux (1433 node), Windows (1389 node) — 0 failures; proven no live-proxy clobber. 3-model + final code review.

Assets 2
Loading