nm-applet replaces the foot terminal workaround for VPN authentication, providing a proper NetworkManager secret agent. moonarch-vpn now handles both VPN and WireGuard connection types. Waybar indicator switched from tun0 interface check to nmcli active connection query with signal-based instant refresh.