NEW • Proxy chaining: any policy except Tailscale can dial through another — set an upstream per policy, one for a whole group, or a Front Proxy in Advanced covering every node that has no upstream of its own; the connection detail names every hop • New Relay and Random group types • VMess and VLESS carry UDP; Shadowsocks gains UDP over TCP (UoT), so it keeps working through an upstream without UDP • The editor gained rows for DoT / DoQ / DoH3, dedicated DNS, tun-included-routes, MitM HTTP/2 and QUIC blocking, the REJECT policies, inline rule sets and more — and no longer drops or rewrites what it cannot display • QUIC can be routed by domain, so DOMAIN rules cover HTTP/3 connections made to a bare address; icmp-auto-reply answers pings inside the tunnel • Rule sets use far less memory: providers download one after another instead of failing after the 35th FIXES • Configurations no longer disappear after an app update: each is also kept in storage the system does not clear, and missing files are written back at launch and on returning to the foreground • Fixed SSID Suspend errors, the Wi-Fi page's upload and download, downloads overwriting one another, hidden groups appearing in the tunnel's lists, and saving over a configuration without asking • Fixed several crashes, an XHTTP stall, PROTOCOL rules not matching, and RULE-SET / DOMAIN-SET inside AND / OR / NOT always evaluating false

Chute TV 1.4 is about getting the console onto a device that has a keyboard — and getting a diagnostic off a television. WEB CONSOLE • The Control Panel shows a Web UI Address row and turns it into a QR code: scan it and you are signed in, with no address or token typed on the remote • The console gained Current and History connection views, an inspect view, a Rules page that shows which rewrites actually fired, and a Diagnostics page with live probes — complete in nine languages • Runtime Diagnostic Bundle and HAR export download from the console, generated by the engine with real status codes and timings plus the policy and rule behind every request DIAGNOSTICS ON THE TV • Offline Diagnostic Bundle in Settings works even when the tunnel will not start — redacted, and handed over as a QR code from a one-shot local server that closes with the screen • Filter the session log by severity instead of typing a search with the remote • Session detail names the rewrite or mock rule that changed a request • The engine records whether the previous run ended cleanly or was killed ENGINE • Rule matching on large RULE-SET / DOMAIN-SET lists is far faster (a 50k-line list drops from about 94 ms to under 2 ms per lookup) and uses less memory; UDP flows are matched once • Smarter recovery after a network change: dead tunnels are closed instead of hanging apps, and black-holed paths are reported • The HTTP API now generates an access token when the configuration sets none, instead of serving open • New API endpoints for rule dry-runs, live log-level changes, and configuration validation APP • French is now a built-in language • Allow WiFi Access is editable in the configuration editor • HTTP API, Web UI, Protocol Sniffing, Optimus DNS and Purge DNS Cache no longer need the paid unlock — only Multiple Configurations, Local Proxy Server Control and Traffic Recorder do FIXES • HTTPS decryption, rewrites and mock responses now work for app traffic in Chute VIF mode — previously they only worked through the local HTTP/SOCKS5 proxy • allow-wifi-access now actually exposes the local proxy to your Wi-Fi • Fixed the Control Panel crashing when a switch was toggled, and the session log showing only part of a run once the engine began rotating it • no-resolve IP rules, RULE-SET lines with trailing options, and HOSTNAME-TYPE now match as documented • Starting the tunnel no longer posts a false "policy group switched" notification • Fixed an occasional XHTTP crash, the license screen's certificate label, and the About page's App Store links

New Features: Added XHTTP transport to the policy editor — enable toggle, mode (auto, packet-up, stream-up, stream-one), path, and host — for Trojan, VMess, and VLESS Added AEGIS-128L and AEGIS-256 Shadowsocks encryption methods Added the previously missing Shadowsocks 2022 (SS2022) encryption methods: 2022-blake3-aes-128-gcm, 2022-blake3-aes-256-gcm, and 2022-blake3-chacha20-poly1305 Added ECH (Encrypted Client Hello) settings for TLS policies — enable toggle, pinned ECH config (ech-config), and cover-name override (ech-public-name) Added client fingerprint (uTLS) per policy, plus a profile-wide default Added AmneziaWG protocol support, a WireGuard variant with traffic obfuscation Added a configuration error report screen with tvOS focus navigation to replace the alert that blocks interaction Added X25519MLKEM768 post-quantum hybrid key exchange for TLS 1.3 Improves: When saving, the policy editor now preserves existing options that are not available for editing (ECH, ALPN, certificate pinning, test-url, underlying-proxy, udp-relay) Bug Fixes: Fixed a tunnel crash caused by malformed IP-CIDR rules Fixed the SSH idle-timeout and REALITY spiderx settings being written under the wrong keys and discarded on save Fixed a crash when switching languages Fixed display issues affecting on-screen controls Various stability and performance improvements

New Features: - Added Tailscale as a built-in proxy type: configure a Tailscale account, join a tailnet, and route Apple TV traffic through Tails cale nodes — no separate client required - Added a Tailscale control panel that shows real-time node status (online/offline, IP, last seen) and lets you switch exit nodes f rom the remote - Added a full-screen Dashboard and Sessions view with a dark, per-level session log - Added a tunnel detail panel for inspecting active tunnels - Added the MASQUE proxy type to the policy editor Improves: - Improved TUN throughput on Apple TV - Improved Tailscale and WireGuard connection stability and throughput - Refined the home-screen focus navigation across lists, the power button, and the About row to feel more predictable - Aligned Settings with the iOS layout (removed the Always On entry, Twitter → X, and polished APNs, Rate, and Language rows) - Showed the device IP on the home right-side list only when the VPN is off Bug Fixes: - Fixed false "VPN not running" status and stale "Running" labels on the dashboard - Fixed focus loss and jumps when opening Dashboard/Sessions and when returning from the Tailscale node list - Fixed the Menu button behavior so it dismisses lists and returns focus reliably - Fixed session-list footer text to say "long press to delete" instead of "swipe" - Various stability and performance improvements

Fix some bug