Commit Graph
7 Commits
Author SHA1 Message Date
ian-at-strix b2e036f7c6 Run any command after firewall verbatim, -- included (#6)
bpaf always consumes `--`, so `firewall cargo run -- --release` handed
--release to cargo and our --config flags to the program. The CLI is now clap
with one trailing COMMAND argument, which keeps `--`.

Every manager's environment is set on every run, and cargo's and gem's flags
are added when the command is cargo or gem, so `firewall sh -c '…'` is
screened too. Since every command now gets HTTPS_PROXY, HTTPS to hosts that
aren't registries is tunnelled; registry hosts are still refused.
2026-10-12 16:55:27 -04:00
Ian 0351ab3672 Various minor QoL changes (message text changes), main.rs & build.sh tidied-up, etc. 2026-09-24 15:09:22 -04:00
Ian 3f0b335c5f Installer/macOS UI improvements 2026-09-24 14:46:31 -04:00
Ian 76d52f6817 MITM Service + configability + refactors. Most of the way to MacOS on-device 2026-09-22 13:48:36 -04:00
Ian 4bcb3b5115 Fetch denylist on demand (requires GH token until repo is public) + architecture for caching/configurability 2026-09-21 12:53:18 -04:00
Ian 5f141c729d log-levelled tracing 2026-09-18 15:41:24 -04:00
Ian 22e6e83240 Initial prototype: core functionality + aliasing, but not configurable 2026-09-18 09:33:40 -04:00