Split-Tunneling fails when configured per App with Include

Hi there!

Just found out about the VPN yesterday and got to install and play with the config today.
Readlly nice overall, except this one bug I've found…

When using split-tunneling for a specific app with include set, traffic generated by all apps is routed through the VPN.

Raspberry Pi OS 64bit, Debian 13.7, windscribe-cli 2.24.12

config:

[General]
Language=en
LaunchOnStartup=true
UpdateChannel=Release

[Advanced]
DNSManager=Auto
DNSPolicy=Cloudflare

[Connection]
AllowLANTraffic=true
AmneziawgPreset=
Autoconnect=false
AutosecureNetworks=true
CircumventCensorship=false
ConnectedDNSMode=Auto
ConnectedDNSUpstream1=
ConnectedDNSUpstream2=
ConnectionMode=Auto
CustomSniDomain=
DecoyTrafficEnabled=false
DecoyTrafficVolume=Low
FirewallMode=Manual
FirewallWhen=Before Connection
IpStackEgress=Auto
MACAddressSpoofingAddress=
MACAddressSpoofingAutoRotate=false
MACAddressSpoofingEnabled=false
MACAddressSpoofingInterface=No Interface
ManualConnectionPort=443
ManualConnectionProtocol=WireGuard
PacketSizeMTU=-1
PacketSizeMode=Auto
ProtocolTweaksMethod=0
ProxyAddress=
ProxyMode=None
ProxyPassword=
ProxyPort=0
ProxyUsername=
ServerRoutingMethod=0
ShareProxyGatewayEnabled=false
ShareProxyGatewayMode=HTTP
ShareProxyGatewayPassword=
ShareProxyGatewayPort=0
ShareProxyGatewayRequireAuth=true
ShareProxyGatewayUsername=
ShareProxyGatewayWhileConnected=false
SplitDNS=false
SplitDNSHostnames=
SplitTunnelingApps=/usr/bin/ping
SplitTunnelingEnabled=true
SplitTunnelingMode=Include
SplitTunnelingRoutes=

Firewall is always disabled. Issue is reproducible with firewall enabled aswell.

Garry seems to have received my logs and states:
"I found the culprit. Your Pi’s per-app split-tunneling component is failing its own startup check, so Include rules never get enforced. The tunnel itself is fine.
Tried: Config reloads, reconnects, firewall disabled, and a clean reinstall. Debug evidence shows the per-app process monitor fails its self-test.
Needed: Engineering review of the Linux CLI split-tunneling helper."

He tried creating the ticket for you guys but fails at:
"The ticket form failed to open because the website security check blocked the request. A fine little bureaucratic ambush."

So… here I am trying to let you guys know of this issue (unless I've messed up the config somehow…).

Cheers!