flowproof 0.3.0__tar.gz → 0.4.0__tar.gz

{flowproof-0.3.0 → flowproof-0.4.0}/Cargo.lock

@@ -209,6 +209,15 @@ dependencies = [
  "hybrid-array",
 ]
 
+[[package]]
+name = "block2"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cdeb9d870516001442e364c5220d3574d2da8dc765554b4a617230d33fa58ef5"
+dependencies = [
+ "objc2",
+]
+
 [[package]]
 name = "borrow-or-share"
 version = "0.2.4"
@@ -273,6 +282,12 @@ version = "1.0.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"
 
+[[package]]
+name = "cfg_aliases"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f079e83a288787bcd14a6aea84cee5c87a67c5a3e660c30f557a3d24761b3527"
+
 [[package]]
 name = "chacha20"
 version = "0.10.1"
@@ -502,6 +517,17 @@ dependencies = [
  "hybrid-array",
 ]
 
+[[package]]
+name = "ctrlc"
+version = "3.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e0b1fab2ae45819af2d0731d60f2afe17227ebb1a1538a236da84c93e9a60162"
+dependencies = [
+ "dispatch2",
+ "nix",
+ "windows-sys 0.61.2",
+]
+
 [[package]]
 name = "ctutils"
 version = "0.4.2"
@@ -611,6 +637,18 @@ dependencies = [
  "ctutils",
 ]
 
+[[package]]
+name = "dispatch2"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e0e367e4e7da84520dedcac1901e4da967309406d1e51017ae1abfb97adbd38"
+dependencies = [
+ "bitflags 2.13.1",
+ "block2",
+ "libc",
+ "objc2",
+]
+
 [[package]]
 name = "displaydoc"
 version = "0.2.6"
@@ -722,15 +760,17 @@ dependencies = [
 
 [[package]]
 name = "flowproof-adapters"
-version = "0.3.0"
+version = "0.4.0"
 dependencies = [
  "anyhow",
  "flowproof-driver",
  "flowproof-trace",
  "headless_chrome",
  "image",
+ "libc",
  "ocrs",
  "rten",
+ "serde",
  "serde_json",
  "thiserror 2.0.18",
  "ureq",
@@ -739,11 +779,12 @@ dependencies = [
 
 [[package]]
 name = "flowproof-agent"
-version = "0.3.0"
+version = "0.4.0"
 dependencies = [
  "chrono",
  "flowproof-driver",
  "flowproof-trace",
+ "regex",
  "serde",
  "serde_json",
  "serde_yaml",
@@ -754,10 +795,12 @@ dependencies = [
 
 [[package]]
 name = "flowproof-cli"
-version = "0.3.0"
+version = "0.4.0"
 dependencies = [
  "ab_glyph",
+ "chrono",
  "clap",
+ "ctrlc",
  "flowproof-adapters",
  "flowproof-agent",
  "flowproof-driver",
@@ -765,6 +808,7 @@ dependencies = [
  "flowproof-trace",
  "image",
  "imageproc",
+ "serde",
  "serde_json",
  "serde_yaml",
  "tiny_http",
@@ -772,7 +816,7 @@ dependencies = [
 
 [[package]]
 name = "flowproof-driver"
-version = "0.3.0"
+version = "0.4.0"
 dependencies = [
  "image",
  "postgres",
@@ -786,7 +830,7 @@ dependencies = [
 
 [[package]]
 name = "flowproof-python"
-version = "0.3.0"
+version = "0.4.0"
 dependencies = [
  "flowproof-agent",
  "flowproof-cli",
@@ -798,7 +842,7 @@ dependencies = [
 
 [[package]]
 name = "flowproof-replay"
-version = "0.3.0"
+version = "0.4.0"
 dependencies = [
  "chrono",
  "flowproof-agent",
@@ -812,9 +856,10 @@ dependencies = [
 
 [[package]]
 name = "flowproof-trace"
-version = "0.3.0"
+version = "0.4.0"
 dependencies = [
  "jsonschema",
+ "regex",
  "serde",
  "serde_json",
  "thiserror 2.0.18",
@@ -1462,6 +1507,18 @@ dependencies = [
  "typenum",
 ]
 
+[[package]]
+name = "nix"
+version = "0.31.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf20d2fde8ff38632c426f1165ed7436270b44f199fc55284c38276f9db47c3d"
+dependencies = [
+ "bitflags 2.13.1",
+ "cfg-if",
+ "cfg_aliases",
+ "libc",
+]
+
 [[package]]
 name = "num"
 version = "0.4.3"
@@ -1557,6 +1614,15 @@ dependencies = [
  "libc",
 ]
 
+[[package]]
+name = "objc2"
+version = "0.6.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3a12a8ed07aefc768292f076dc3ac8c48f3781c8f2d5851dd3d98950e8c5a89f"
+dependencies = [
+ "objc2-encode",
+]
+
 [[package]]
 name = "objc2-core-foundation"
 version = "0.3.2"
@@ -1566,6 +1632,12 @@ dependencies = [
  "bitflags 2.13.1",
 ]
 
+[[package]]
+name = "objc2-encode"
+version = "4.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ef25abbcd74fb2609453eb695bd2f860d389e457f67dc17cafc8b8cbc89d0c33"
+
 [[package]]
 name = "objc2-system-configuration"
 version = "0.3.2"

{flowproof-0.3.0 → flowproof-0.4.0}/Cargo.toml

@@ -3,7 +3,7 @@ resolver = "2"
 members = ["crates/flowproof-driver", "crates/flowproof-trace", "crates/flowproof-replay", "crates/flowproof-agent", "crates/flowproof-adapters", "crates/flowproof-cli", "crates/flowproof-python"]
 
 [workspace.package]
-version = "0.3.0"
+version = "0.4.0"
 edition = "2021"
 license = "Apache-2.0"
 repository = "https://github.com/automators-com/flowproof"
@@ -22,6 +22,7 @@ anyhow = "1"
 chrono = { version = "0.4", default-features = false, features = ["clock"] }
 clap = { version = "4", features = ["derive"] }
 serde = { version = "1", features = ["derive"] }
+regex = "1"
 serde_json = "1"
 serde_yaml = "0.9"
 thiserror = "2"

{flowproof-0.3.0 → flowproof-0.4.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: flowproof
-Version: 0.3.0
+Version: 0.4.0
 Classifier: Development Status :: 2 - Pre-Alpha
 Classifier: Intended Audience :: Developers
 Classifier: Programming Language :: Python :: 3

{flowproof-0.3.0 → flowproof-0.4.0}/crates/flowproof-adapters/Cargo.toml

@@ -14,14 +14,16 @@ web = ["dep:headless_chrome"]
 # Pixels-only (Citrix/RDP) driving: OCR perception via ocrs/rten, model
 # download via ureq.
 vision = ["dep:ocrs", "dep:rten", "dep:ureq"]
-# Agent-boundary testing: the model-API proxy that serves a cassette.
-agent = []
+# Agent-boundary testing: the model-API proxy, and record mode forwarding
+# to a real model over ureq (TLS via platform-verifier, already in-tree).
+agent = ["dep:ureq"]
 
 [dependencies]
 anyhow = { workspace = true }
 flowproof-driver = { workspace = true }
 flowproof-trace = { workspace = true }
 headless_chrome = { version = "1", optional = true }
+serde = { workspace = true }
 serde_json = "1"
 image = { version = "0.25.10", default-features = false, features = ["png"] }
 thiserror = { workspace = true }
@@ -30,6 +32,15 @@ ocrs = { version = "0.12", optional = true }
 rten = { version = "0.24", optional = true }
 ureq = { version = "3", features = ["platform-verifier"], optional = true }
 
+# Egress containment (`app: agent`) is a Linux-only, unprivileged seccomp
+# user-notification supervisor. `libc` is pure Rust (no C library to link),
+# so a non-Linux build never pulls it and a cross `cargo check --target
+# x86_64-unknown-linux-gnu` type-checks the module off a Mac. The BPF filter
+# is hand-built: seccompiler builds classic-BPF filters but its actions do
+# not include SECCOMP_RET_USER_NOTIF, which this design requires.
+[target.'cfg(target_os = "linux")'.dependencies]
+libc = "0.2"
+
 [target.'cfg(windows)'.dependencies]
 windows = { version = "0.62", features = [
     "Win32_Foundation",