### Surge CLI
- Added
vmnet status to inspect the VMNET interface configuration, including addresses, prefixes, MTU, and diagnostic table sizes.- Added
vmnet arp to inspect IPv4 neighbors learned from Gateway Mode clients.- Added
vmnet ndp to inspect the IPv6 neighbor table.- Added
vmnet ra to inspect IPv6 Router Advertisement takeover status, including clients, known routers, RA lifetimes, and blacklisted devices.### macOS
- Added a graphical Port Forwarding editor for creating and managing incoming TCP forwarding rules. Listening address, listening port, destination, and outbound policy can all be configured without editing the profile manually.
- Gateway-related device actions are now hidden when Gateway Mode is unavailable.
- Fixed system proxy settings being applied when using VIF mode without a default route.
### iOS UI
- When navigating to a new page, the bottom tab bar is no longer hidden. This change was made to avoid triggering known UIKit UI glitches that can occur when the tab bar is hidden during push transitions.
- The Script Editor now opens in a dedicated modal interface, with an updated toolbar, close action, and improved keyboard layout.
- Remote Controller and Ponte Diagnostics are now available for all Ponte devices, including devices shared by another iCloud account.
- Other UI improvements.
### Other Improvements
- Updated the IPv6 fake-IP range to avoid unnecessary browser local-network permission prompts, while retaining compatibility with previously cached addresses.
- Proxy connections closed during the protocol handshake now provide a clearer error message, with guidance to verify credentials, encryption methods, and protocol settings.
- Fixed rare crashes that could occur when proxy connections were synchronously closed while data was being written.
- Fixed recursive HTTP/3 timer processing that could cause a stack overflow under certain conditions.
