v0.1.31 — Live Tunnel Traffic Counters

MobaRust v0.1.31 — Live Tunnel Traffic Counters

Free, open-source MobaXterm alternative built with Rust

This Mac preview fixes the active/cancelled tunnel counters observed in v0.1.30.
Windows/Linux downloads remain v0.1.12.

What changed

• See traffic while a tunnel is open: local, SOCKS5 and remote forwards count successful payload writes in both directions and emit changed totals on a 250 ms interval.
• Retain partial totals: Stop, cancellation and copy errors keep bytes already accepted by the forwarding stream. Completed copies are counted once; SOCKS5 handshake framing is excluded.
• Keep existing cleanup guarantees: tunnel workers remain owned, cancelled and joined. The session's 32-job owner and 64-command admission queue are unchanged.

Downloads

Mac	Installer	Bytes	SHA-256
Apple Silicon	DMG	9,456,735	2acd253387b52a52ae621ee2ebb49ee8ce8027546f900399f3c9fecf0f3b6d65
Intel	DMG	10,254,468	bacfb73bcacd5f4ec06c16b1de69cbb896878ee089cd491e5e8eb589a53aea2c

Each installer has an attached SHA-256 manifest. Both were built locally,
offline, from source/tag d9910c815508fcf51e074c89fcb4a1353220a05d.

Verified locally

Both DMGs passed disk-image verification, read-only mounted layout, strict
ad hoc signature checks, app/VNC architecture checks, exact seven-file inventory,
bundled LICENSE/NOTICE comparison, isolated CLI version checks and checksum
manifests. Owned mounts were detached. Intel CLI execution used Rosetta on
Apple Silicon with a 60-second deadline; Intel hardware/GUI acceptance remains
pending. No lab state or environment metadata was packaged.

The version-aligned cargo xtask check passed in 459.99 seconds on macOS ARM64,
including workspace tests/Clippy, frontend tests/type checks/lint/build, release
and lab tools, isolated RDP/VNC fixtures, package contracts and fuzz compilation.
Coverage includes 114 desktop tests, four forwarding cases and 25 OpenSSH cases.
Manual native labs remain opt-in; real Xvfb reported a missing-prerequisite skip.
The pre-push check passed.

The counter regression first failed on the previous implementation. The fixed
backend checks cover active and completed traffic in all three modes, native
worker cancellation, pending handshakes/channel opens and partial accepted
bytes after a copy error. Source checks.

The ARM64 installer copy passed live counts, completed-copy accumulation,
retained Stop totals, SSH-tab Close and normal Quit. Eight distinct clients
each matched a 32 KiB binary echo. Open roundtrips showed 64.0 KB across both
directions; a completed plus active local copy showed 128.0 KB. Client EOF,
listener rebinding and owned process/fixture cleanup passed.
Native receipt and limits.

Public downloads

All four public assets downloaded anonymously with HTTP 200 and matched the
verified local files byte for byte. Both downloaded SHA-256 manifests passed.
This is a public prerelease; Windows/Linux remain v0.1.12.

Limits

The native checks are short ARM64 workflows, not sustained throughput or broad
server/platform acceptance. Saturated writes, larger transfer lists, finite-action
saturation/Retry, uncertain forwarding failure dialogues, keyboard/focus,
clean install/uninstall and Intel hardware/GUI remain open. Earlier retention,
startup and editor receipts retain their original artifact scope.

A later native busy-session check
found that Files retains a stale busy error after listing recovers, and that
directory error can also appear on Monitor. A source correction scopes the
error to its listing; it is not included in these tagged installers and still
needs native acceptance. Backend listing and explicit monitor Refresh recovered.

RustSec database ef6173cbc5c50ec8166f9a5b28f07834144373ee (1,290 advisories)
reports no vulnerabilities in the shipping workspace, VNC helper or fuzz lockfile.
Workspace proc-macro-error/glib warnings remain. The excluded RDP candidate
still fails on RUSTSEC-2023-0071 and retains atomic-polyfill/rustls-pemfile
unmaintained warnings; no findings were suppressed. Only 15 local package version
entries changed across four lockfiles; third-party packages did not change.

These are ad hoc signed Mac previews without Developer ID/notarization.
Checksums establish integrity, not publisher identity. VNC/RDP remain experimental;
RDP is absent from normal installers. The real walkthrough remains v0.1.17.
GitHub workflows remain disabled. Historical releases and tags are preserved.
The roadmap remains 57 of 76 checked items (75%), a checklist measure rather
than production readiness.

Protocol tests use disposable HOME/state, generated credentials and loopback
listeners only. They do not enable Remote Login, change firewall/router rules,
inspect personal SSH configuration or expose an Internet-facing listener.