TetherBay 0.2.385
· Updated 2026-08-02
TetherBay 0.2.385 packages the latest documented beta improvements across relay resilience, storage, and encrypted sync.
Highlights
- Windows upgrades now retire the legacy beta auto-updater.
Setup removes the old scheduled updater and its LocalAppData application copy before launching the Program Files build, preventing obsolete beta clients from reappearing after a successful installation while preserving settings and synced folders.
- Windows one-line upgrades now complete cleanly over running beta clients.
The PowerShell flow downloads a recognisably named installer, closes existing launcher and agent processes, waits for setup to finish, and cleans up afterward. The Windows installer no longer lets Restart Manager reopen a legacy client behind the setup wizard.
- Sync server no longer slows down as the total number of synced files grows.
The relay's metadata store became database-authoritative: per-write work is now proportional to what actually changed (indexed point/range queries) instead of the whole dataset, and the server no longer loads all records into memory at startup — so boot time and memory stay flat as the service grows.
Fixes
- Windows upgrades now retire the legacy beta auto-updater. Setup removes the old scheduled updater and its LocalAppData application copy before launching the Program Files build, preventing obsolete beta clients from reappearing after a successful installation while preserving settings and synced folders.
- Windows one-line upgrades now complete cleanly over running beta clients. The PowerShell flow downloads a recognisably named installer, closes existing launcher and agent processes, waits for setup to finish, and cleans up afterward. The Windows installer no longer lets Restart Manager reopen a legacy client behind the setup wizard.
- Sync server no longer slows down as the total number of synced files grows. The relay's metadata store became database-authoritative: per-write work is now proportional to what actually changed (indexed point/range queries) instead of the whole dataset, and the server no longer loads all records into memory at startup — so boot time and memory stay flat as the service grows.
- One busy account can no longer degrade everyone else. Write contention is now keyed per folder/account behind a new lock manager (opt-in sharded mode), with a fair-share soft throttle that *slows* an over-active tenant rather than blocking it, and per-tenant lock metrics on /metrics. Closes the single-account denial-of-service path that could previously wedge the whole relay.
- PostgreSQL is now a supported metadata backend for the relay (selectable by configuration), alongside the existing SQLite store which remains the default for local and self-hosted use. Includes a one-shot SQLite→Postgres data migration tool with row-count reconciliation.
- Cloudflare R2 (S3-compatible) blob storage is production-ready. The relay can store encrypted blobs in R2 with presigned zero-egress downloads, a live storage health/deep-probe check, and a global storage-cap safety valve; switching is a configuration change. Verified end-to-end against a real S3 server.
- Server startup no longer waits on the boot-time storage maintenance pass. The audit that repairs/cleans staged and orphaned blobs now runs after the server is listening instead of before it binds, so health checks come up immediately even on an object-store backend where that pass can take minutes. Controlled by TETHERBAY_STARTUP_AUDIT_MODE (background default, off to skip at boot, blocking for the legacy pre-bind behavior).
- End-to-end encryption for synced folders and clipboard. File contents are encrypted on the sending device with AES-256-GCM (framed streaming AEAD) before upload; folder keys are shared device-to-device via sealed ECDH envelopes and never reach the relay. Clipboard items are sealed per-event with the account key. The relay stores ciphertext only and has no decryption path. Rollout is fail-closed — uploads are held rather than sent in the clear if any device in a folder cannot yet support E2E, so every device in a folder must be updated before content flows again. Clipboard E2E defaults ON since 2026-06-15.
- Remote file access hardened alongside folder encryption.
Known issues
- macOS beta packages are unsigned and not notarized; follow the documented Gatekeeper first-launch steps.
Availability
- win-x64 — Download
7aad95a6f283275dd8f90e32310cd99a986dcf61066e1d23fdf5625f5ebd8451 - osx-arm64 — Download
fa0dea1397fbceac9b02eb848eba3f194444a901dc7fbf5f7dbbbcd61b171ece - osx-x64 — Download
a7647a41e72bb9f9f507a57c15800c71c04e50bea337add9d5edc1c5ea1a3961 - linux-x64 — Download
6dd5ccc6b5071432642506e54bbae8d68cafb826b2632778f10158613787573d - linux-arm64 — Download
b188f33a3789695d22ff003259aa844abbd5abddb4caec19f166f28d04b10137 - android — Download
50dd8c64970f08391e955c13c4a40b08cde16659ca926a9ed2dd4172f2086abe - ios — pending