exp-mitmproxy-rs 0.12.11.post1__tar.gz

exp_mitmproxy_rs-0.12.11.post1/.cargo/config.toml

@@ -0,0 +1,14 @@
+[env]
+WINDIVERT_PATH = { value = "mitmproxy-windows/mitmproxy_windows/", relative = true }
+
+[target.x86_64-apple-darwin]
+rustflags = [
+  "-C", "link-arg=-undefined",
+  "-C", "link-arg=dynamic_lookup",
+]
+
+[target.aarch64-apple-darwin]
+rustflags = [
+  "-C", "link-arg=-undefined",
+  "-C", "link-arg=dynamic_lookup",
+]

exp_mitmproxy_rs-0.12.11.post1/.github/FUNDING.yml

@@ -0,0 +1 @@
+github: [decathorpe, mhils]

exp_mitmproxy_rs-0.12.11.post1/.github/RELEASING.md

@@ -0,0 +1,30 @@
+# Publishing the Capture native package
+
+This fork publishes `exp-mitmproxy-rs`. Its Python import remains `mitmproxy_rs`.
+The original `mitmproxy_macos==0.12.11` package supplies the signed macOS app and
+Network Extension. The release builds neither of those signed components.
+
+Configure a pending trusted publisher at <https://pypi.org/manage/account/publishing/>:
+
+- Project: `exp-mitmproxy-rs`
+- Owner: `experientiallabs`
+- Repository: `mitmproxy_rs`
+- Workflow: `ci.yml`
+- Environment: `pypi`
+
+The GitHub repository needs an environment named `pypi`. No long-lived API token
+is needed. The workflow publishes only `exp-v*` tags whose version matches
+`mitmproxy-rs/pyproject.toml`, after every test and wheel build passes. Pull requests
+and branch pushes cannot publish. PyPI receives the artifacts from that same run,
+with publishing attestations.
+
+For version `0.12.11.post1`, tag the intended tested commit and push that tag:
+
+```sh
+git tag exp-v0.12.11.post1 <commit>
+git push experiential exp-v0.12.11.post1
+```
+
+Verify all four platform wheels and the source archive appear on PyPI before
+publishing the dependent `exp-mitmproxy` package. Never replace a published version;
+use a new post-release version for changes.

exp_mitmproxy_rs-0.12.11.post1/.github/actions/setup/action.yml

@@ -0,0 +1,31 @@
+name: 'setup'
+description: 'checkout, setup rust and python'
+inputs:
+  rust-version:
+    description: 'Rust version'
+    required: true
+    default: 'stable'
+  extra-targets:
+    description: 'Extra Rust targets'
+  toolchain-args:
+    description: 'Extra args for `rustup toolchain`'
+runs:
+  using: "composite"
+  steps:
+    - uses: mhils/workflows/setup-python@3c9fc8f5b40cb8f3f1b81163f3f195cad843b09a  # v18.0  # PyO3 wants recent Python on Windows.
+    - run: rustup toolchain install ${{ inputs.rust-version }} --profile minimal ${{ inputs.toolchain-args }}
+      shell: bash
+    - if: runner.os == 'Linux'
+      run: rustup toolchain install nightly --component rust-src
+      shell: bash
+    - run: rustup default ${{ inputs.rust-version }}
+      shell: bash
+    - if: inputs.extra-targets
+      run: rustup target add ${{ inputs.extra-targets }}
+      shell: bash
+    - uses: mhils/workflows/rust-cache@5b6540d578f48644ffa5e955cedadc81034cb7d8  # v19.0
+      with:
+        key: ${{ inputs.rust-version }} # proxy value for glibc version
+    - if: runner.os == 'Linux'
+      run: cargo install --locked bpf-linker@0.9.15
+      shell: bash

exp_mitmproxy_rs-0.12.11.post1/.github/dependabot.yml

@@ -0,0 +1,27 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: "/"
+    cooldown:
+      default-days: 42
+    schedule:
+      interval: "monthly"
+    groups:
+      dependencies:
+        patterns:
+          - "*"
+  - package-ecosystem: cargo
+    directory: "/"
+    cooldown:
+      default-days: 42
+    schedule:
+      interval: "monthly"
+    groups:
+      # If a dependency matches more than one rule, it's included in the first group that it matches.
+      # Any outdated dependencies that do not match a rule are updated in individual pull requests.
+      windows:
+        patterns:
+          - "windows"
+      dependencies:
+        patterns:
+          - "*"

exp_mitmproxy_rs-0.12.11.post1/.github/python-version.txt

@@ -0,0 +1 @@
+3.12

exp_mitmproxy_rs-0.12.11.post1/.github/scripts/build-macos-redirector.sh

@@ -0,0 +1,58 @@
+#!/usr/bin/env bash
+
+set -eou pipefail
+
+if [ -n "${APPLE_ID-}" ]; then
+  echo "Signing keys available, building signed binary..."
+
+  APPLE_TEAM_ID=S8XHQB96PW
+
+  # Install provisioning profiles
+  mkdir -p ~/Library/MobileDevice/Provisioning\ Profiles
+  echo -n "$APPLE_PROVISIONING_PROFILE_APP" | base64 --decode -o ~/Library/MobileDevice/Provisioning\ Profiles/app.provisionprofile
+  echo -n "$APPLE_PROVISIONING_PROFILE_EXT" | base64 --decode -o ~/Library/MobileDevice/Provisioning\ Profiles/ext.provisionprofile
+
+  # Create temporary keychain
+  KEYCHAIN_PATH=$RUNNER_TEMP/app-signing.keychain
+  security create-keychain -p "app-signing" $KEYCHAIN_PATH
+  security set-keychain-settings -lut 21600 $KEYCHAIN_PATH
+  security unlock-keychain -p "app-signing" $KEYCHAIN_PATH
+  # Import certificate to keychain
+  security import <(echo -n "$APPLE_CERTIFICATE") -A -k $KEYCHAIN_PATH
+  security list-keychain -s $KEYCHAIN_PATH
+
+  mkdir build
+  xcodebuild \
+    -scheme macos-redirector \
+    -archivePath build/macos-redirector.xcarchive \
+    OTHER_CODE_SIGN_FLAGS="--keychain $KEYCHAIN_PATH" \
+    archive
+  xcodebuild \
+    -exportArchive \
+    -archivePath build/macos-redirector.xcarchive \
+    -exportOptionsPlist ./ExportOptions.plist \
+    -exportPath ./build
+
+  # Notarize
+  # https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/customizing_the_notarization_workflow
+  xcrun notarytool store-credentials "AC_PASSWORD" \
+    --keychain "$KEYCHAIN_PATH" \
+    --apple-id "$APPLE_ID" \
+    --team-id "$APPLE_TEAM_ID" \
+    --password "$APPLE_APP_PASSWORD"
+  ditto -c -k --keepParent "./build/Mitmproxy Redirector.app" "./build/Mitmproxy Redirector.zip"
+  xcrun notarytool submit \
+    "./build/Mitmproxy Redirector.zip" \
+    --keychain "$KEYCHAIN_PATH" \
+    --keychain-profile "AC_PASSWORD" \
+    --wait
+  xcrun stapler staple "./build/Mitmproxy Redirector.app"
+
+  mkdir -p dist
+  tar --create --file "./dist/Mitmproxy Redirector.app.tar" --cd "./build" "Mitmproxy Redirector.app"
+else
+  echo "Signing keys not available, building unsigned binary..."
+  xcodebuild -scheme macos-redirector CODE_SIGNING_ALLOWED="NO" build
+  mkdir -p dist
+  touch "dist/Mitmproxy Redirector.app.tar"
+fi

exp_mitmproxy_rs-0.12.11.post1/.github/scripts/pin-versions.py

@@ -0,0 +1,17 @@
+#!/usr/bin/env python3
+
+import tomllib
+from pathlib import Path
+
+with open("Cargo.toml", "rb") as f:
+    version = tomllib.load(f)["workspace"]["package"]["version"]
+
+pyproject_toml = Path("mitmproxy-rs/pyproject.toml")
+contents = pyproject_toml.read_text()
+contents = (
+    contents
+    .replace(f"mitmproxy_windows", f"mitmproxy_windows=={version}")
+    .replace(f"mitmproxy_linux", f"mitmproxy_linux=={version}")
+    .replace(f"mitmproxy_macos", f"mitmproxy_macos=={version}")
+)
+pyproject_toml.write_text(contents)

exp_mitmproxy_rs-0.12.11.post1/.github/scripts/release

@@ -0,0 +1,27 @@
+#!/usr/bin/env -S python3 -u
+import logging
+
+from releasetool import branch
+from releasetool import get_next_dev_version
+from releasetool import git_commit
+from releasetool import git_push
+from releasetool import git_tag
+from releasetool import status_check
+from releasetool import update_changelog
+from releasetool import update_rust_version
+
+logger = logging.getLogger(__name__)
+
+if __name__ == "__main__":
+    status_check()
+    update_changelog()
+    update_rust_version()
+    git_commit()
+    git_tag()
+
+    if branch == "main":
+        update_rust_version(version=get_next_dev_version())
+        git_commit(message="reopen main for development")
+
+    git_push()
+    logger.info("✅ All done. 🥳")

exp_mitmproxy_rs-0.12.11.post1/.github/workflows/autofix.yml

@@ -0,0 +1,56 @@
+name: Formatting
+
+on:
+  pull_request:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+env:
+  MSRV: "1.95"  # Minimum Supported Rust Version
+
+jobs:
+  protobuf:
+    runs-on: macos-latest
+    steps:
+      - uses: mhils/workflows/checkout@5b6540d578f48644ffa5e955cedadc81034cb7d8  # v18.0
+      # FIXME: https://github.com/mitmproxy/mitmproxy/issues/7877 - bump SwiftProtobuf and then re-add this here.
+      # - run: brew install swift-protobuf
+      - run: brew install protobuf
+      - run: cargo install --locked protoc-gen-prost@0.5.0
+      - run: protoc --proto_path=./src/ipc/ mitmproxy_ipc.proto
+          --prost_out=./src/ipc/
+          --prost_opt="bytes=data"
+          --prost_opt="flat_output_dir=true"
+          # --swift_out=./mitmproxy-macos/redirector/ipc
+      - run: cargo fmt --all
+      - run: git diff --exit-code
+
+  rustfmt:
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        include:
+          - os: windows-latest
+          - os: macos-latest
+          - os: ubuntu-latest
+    steps:
+      - uses: mhils/workflows/checkout@5b6540d578f48644ffa5e955cedadc81034cb7d8  # v18.0
+      - uses: ./.github/actions/setup
+        with:
+          rust-version: ${{ env.MSRV }}
+          toolchain-args: --component rustfmt --component clippy
+
+        # We could run clippy on mitmproxy-linux-ebpf with
+        #   cargo +nightly clippy --workspace -- -C panic=abort -Zpanic_abort_tests
+        # but that means we'd use nightly clippy, which may change its behavior (and thus break CI).
+        # So we rather exempt mitmproxy-linux-ebpf from clippy lints.
+      - run: cargo clippy --fix --allow-dirty --workspace --exclude mitmproxy-linux-ebpf
+      - run: cargo fmt --all
+      - run: git checkout src/ipc/mitmproxy_ipc.rs
+
+      - run: git diff --exit-code

exp_mitmproxy_rs-0.12.11.post1/.github/workflows/ci.yml

@@ -0,0 +1,149 @@
+name: CI
+
+on:
+  push:
+    branches:
+      - main
+    tags:
+      - 'exp-v*'
+  pull_request:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  test:
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        include:
+          - os: windows-latest
+            rust: "1.95"  # MSRV - can't use variables here.
+            args: --exclude mitmproxy-linux-ebpf
+          - os: macos-latest
+            rust: "1.95"  # MSRV - can't use variables here.
+            args: --exclude mitmproxy-linux-ebpf
+          - os: ubuntu-22.04
+            rust: "1.95"  # MSRV - can't use variables here.
+            args: --exclude mitmproxy-linux-ebpf
+          - os: ubuntu-latest
+            rust: stable
+            args: --exclude mitmproxy-linux-ebpf
+          - os: ubuntu-latest  # old Ubuntu to test eBPF verifier compatibility
+            rust: nightly
+            args: --package mitmproxy-linux-ebpf
+    env:
+      RUSTFLAGS: ${{ matrix.rust == 'nightly' && '-Zpanic_abort_tests -C panic=abort' || '' }}
+    steps:
+      - uses: mhils/workflows/checkout@5b6540d578f48644ffa5e955cedadc81034cb7d8  # v18.0
+      - uses: ./.github/actions/setup
+        with:
+          rust-version: ${{ matrix.rust }}
+
+      - name: Run "cargo check"
+        # the action-rs/cargo action adds inline annotations for "cargo check" output
+        uses: actions-rs/cargo@9e120dd99b0fbad1c065f686657e914e76bd7b72
+        with:
+          toolchain: ${{ matrix.rust }}
+          command: check
+          args: --workspace --verbose ${{ matrix.args }}
+      - if: matrix.rust != 'nightly'  # XXX: weird errors here
+        name: Run "cargo test"
+        # the action-rs/cargo action adds inline annotations for "cargo test" output
+        uses: actions-rs/cargo@9e120dd99b0fbad1c065f686657e914e76bd7b72
+        with:
+          toolchain: ${{ matrix.rust }}
+          command: test
+          args: --workspace --verbose ${{ matrix.args }}
+      - if: matrix.os == 'ubuntu-22.04'  # Test that eBPF loads
+        run: cargo test --features root-tests
+        working-directory: mitmproxy-linux
+        env:
+          CARGO_TARGET_X86_64_UNKNOWN_LINUX_GNU_RUNNER: sudo -E
+
+  build:
+    strategy:
+      matrix:
+        include:
+          - name: windows-x86_64
+            os: windows-latest
+          - name: linux-x86_64
+            os: ubuntu-latest
+            args: --compatibility manylinux2014 --zig --sdist
+          - name: linux-arm64
+            os: ubuntu-24.04-arm
+            args: --compatibility manylinux2014 --zig
+          - name: macos-universal
+            os: macos-latest
+            target: aarch64-apple-darwin x86_64-apple-darwin
+            args: --target universal2-apple-darwin
+    runs-on: ${{ matrix.os }}
+    name: build mitmproxy-rs (${{ matrix.name }})
+    steps:
+      - uses: mhils/workflows/checkout@5b6540d578f48644ffa5e955cedadc81034cb7d8  # v18.0
+      - uses: ./.github/actions/setup
+        with:
+          extra-targets: ${{ matrix.target }}
+
+      - name: Verify release version
+        if: startsWith(github.ref, 'refs/tags/exp-v')
+        shell: bash
+        run: |
+          python - <<'PY'
+          import os
+          import tomllib
+          from pathlib import Path
+          project = tomllib.loads(Path('mitmproxy-rs/pyproject.toml').read_text())['project']
+          assert project['name'] == 'exp-mitmproxy-rs'
+          assert os.environ['GITHUB_REF_NAME'] == 'exp-v' + project['version']
+          PY
+
+      - if: runner.os == 'Linux'
+        name: Install maturin[zig] from PyPI
+        uses: install-pinned/maturin-with-zig@7f54e6144d8fd17188d0e99742fefc4bcb178e06
+      - if: runner.os != 'Linux'
+        name: Install maturin from PyPI
+        uses: install-pinned/maturin@3bfd83cd34bdcbcc8a10e459c2a9e41e6c33e706
+
+      - run: maturin build --release ${{ matrix.args }}
+        working-directory: ./mitmproxy-rs
+
+      # ensure that sdist is building.
+      # We do this here instead of a separate job because we don't want to wait for the entire matrix.
+      - if: contains(matrix.args, 'sdist')
+        run: pip install --no-dependencies target/wheels/*.tar.gz
+
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        with:
+          name: wheels-${{ matrix.name }}
+          path: target/wheels
+
+  check:
+    if: always()
+    needs:
+      - test
+      - build
+    uses: mhils/workflows/.github/workflows/alls-green.yml@5b6540d578f48644ffa5e955cedadc81034cb7d8  # v18.0
+    with:
+      jobs: ${{ toJSON(needs) }}
+
+  publish:
+    if: github.repository == 'experientiallabs/mitmproxy_rs' && startsWith(github.ref, 'refs/tags/exp-v')
+    needs: check
+    runs-on: ubuntu-latest
+    environment: pypi
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        with:
+          pattern: wheels-*
+          merge-multiple: true
+          path: dist
+      - name: Publish tested distributions to PyPI
+        uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # release/v1

exp_mitmproxy_rs-0.12.11.post1/.github/workflows/docs.yml

@@ -0,0 +1,55 @@
+name: docs
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+
+# security: restrict permissions for CI jobs.
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  # Build the documentation and upload the static HTML files as an artifact.
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      # TODO: This should ideally just reuse the main CI artifacts.
+      - uses: mhils/workflows/checkout@5b6540d578f48644ffa5e955cedadc81034cb7d8  # v18.0
+      - uses: ./.github/actions/setup
+      - uses: install-pinned/maturin-with-zig@7f54e6144d8fd17188d0e99742fefc4bcb178e06
+      - uses: install-pinned/mypy@75779f141592e4909d64e13f8a1861f06aa9cd8d
+      - uses: install-pinned/pdoc@69ba59f9699df21e1026110af4ec6b10a98cf5cd
+
+      - run: maturin build --features docs,pyo3/extension-module
+        working-directory: ./mitmproxy-rs
+      - run: pip install --no-index --no-dependencies --find-links target/wheels/ exp-mitmproxy-rs
+
+      - run: stubtest --allowlist mitmproxy-rs/stubtest-allowlist.txt --mypy-config-file mitmproxy-rs/pyproject.toml mitmproxy_rs
+
+      - run: pdoc -o docs/ mitmproxy_rs
+
+      - uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5
+        with:
+          path: docs/
+
+  # Deploy the artifact to GitHub pages.
+  # This is a separate job so that only actions/deploy-pages has the necessary permissions.
+  deploy:
+    if: github.ref == 'refs/heads/main'
+    needs: build
+    runs-on: ubuntu-latest
+    permissions:
+      pages: write
+      id-token: write
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    steps:
+      - id: deployment
+        uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5

exp_mitmproxy_rs-0.12.11.post1/.gitignore

@@ -0,0 +1,10 @@
+/.idea/
+/dist/
+/out/
+/target/
+/venv/
+/docs/
+__pycache__/
+*.xcuserstate
+editable.marker
+*.DS_Store