Start screening when the app launches

.github/build-setup.yml

@@ -1,3 +0,0 @@
-- name: Set the telemetry key
-  shell: bash
-  run: echo "FIREWALL_POSTHOG_KEY=${{ secrets.FIREWALL_POSTHOG_KEY }}" >> "$GITHUB_ENV"

.github/workflows/build-macos-pkg.yml

@@ -13,7 +13,6 @@ jobs:
     env:
       TEAM: ${{ vars.APPLE_TEAM }}
       NOTARY_PROFILE: firewall
-      FIREWALL_POSTHOG_KEY: ${{ secrets.FIREWALL_POSTHOG_KEY }}
     steps:
       - uses: actions/checkout@v6
         with:

.github/workflows/release-notes.yml

@@ -1,42 +0,0 @@
-name: Rewrite release notes
-
-on:
-  workflow_call:
-    inputs:
-      plan:
-        required: true
-        type: string
-
-jobs:
-  notes:
-    runs-on: ubuntu-22.04
-    env:
-      GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      TAG: ${{ fromJson(inputs.plan).announcement_tag }}
-    steps:
-      - run: |
-          url="https://github.com/${{ github.repository }}/releases/download/$TAG"
-          cat > notes.md <<NOTES
-          ## macOS
-
-          [Firewall.pkg]($url/Firewall.pkg)
-
-          ## Windows
-
-          [strix-firewall-x86_64-pc-windows-msvc.msi]($url/strix-firewall-x86_64-pc-windows-msvc.msi)
-
-          ## Command line
-
-          \`\`\`sh
-          cargo install strix-firewall
-          \`\`\`
-
-          \`\`\`sh
-          curl --proto '=https' --tlsv1.2 -LsSf $url/strix-firewall-installer.sh | sh
-          \`\`\`
-
-          \`\`\`sh
-          powershell -ExecutionPolicy Bypass -c "irm $url/strix-firewall-installer.ps1 | iex"
-          \`\`\`
-          NOTES
-          gh release edit "$TAG" --repo "${{ github.repository }}" --notes-file notes.md

.github/workflows/release.yml

@@ -127,9 +127,6 @@ jobs:
             curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y
             echo "$HOME/.cargo/bin" >> $GITHUB_PATH
           fi
-      - name: "Set the telemetry key"
-        run: "echo \"FIREWALL_POSTHOG_KEY=${{ secrets.FIREWALL_POSTHOG_KEY }}\" >> \"$GITHUB_ENV\""
-        shell: "bash"
       - name: Install dist
         run: ${{ matrix.install_dist.run }}
       # Get the dist-manifest
@@ -322,12 +319,3 @@ jobs:
         with:
           persist-credentials: false
           submodules: recursive
-
-  custom-release-notes:
-    needs:
-      - plan
-      - announce
-    uses: ./.github/workflows/release-notes.yml
-    with:
-      plan: ${{ needs.plan.outputs.val }}
-    secrets: inherit

core/Cargo.lock

@@ -3393,7 +3393,7 @@ checksum = "6ce2be8dc25455e1f91df71bfa12ad37d7af1092ae736f3a6cd0e37bc7810596"
 
 [[package]]
 name = "strix-firewall"
-version = "0.1.1"
+version = "0.1.0"
 dependencies = [
  "clap",
  "core-foundation 0.10.1",

core/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "strix-firewall"
-version = "0.1.1"
+version = "0.1.0"
 edition = "2021"
 license = "Apache-2.0"
 authors = ["Strix"]

dist-workspace.toml

@@ -8,9 +8,6 @@ installers = ["shell", "powershell", "msi"]
 # core/wix/main.wxs is edited to install the service.
 allow-dirty = ["msi"]
 features = ["machine-wide"]
-source-tarball = false
 publish-jobs = ["./publish-crates"]
-post-announce-jobs = ["./release-notes"]
 global-artifacts-jobs = ["./build-macos-pkg"]
-github-build-setup = "../build-setup.yml"
 targets = ["aarch64-apple-darwin", "x86_64-apple-darwin", "aarch64-unknown-linux-gnu", "x86_64-unknown-linux-gnu", "x86_64-pc-windows-msvc"]

macos/App/FirewallModel.swift

@@ -2,7 +2,6 @@ import AppKit
 import NetworkExtension
 import OSLog
 import Security
-import ServiceManagement
 import SystemExtensions
 
 enum StepStatus: Equatable {
@@ -120,11 +119,6 @@ final class FirewallModel: NSObject, ObservableObject {
                           work: trustCertificateAuthority)
         else { return }
 
-        do {
-            try SMAppService.mainApp.register()
-        } catch {
-            log("Could not open the app at login: \(error.localizedDescription)")
-        }
         completed = true
         log("Setup complete")
         offerRestart()
@@ -165,7 +159,6 @@ final class FirewallModel: NSObject, ObservableObject {
         await removeConfiguration()
         let strandedKey = removeStoredCA()
         await deactivate()
-        try? await SMAppService.mainApp.unregister()
         if let strandedKey { trustStep = .failed(strandedKey) }
 
         let failed = [extensionStep, screeningStep, trustStep].contains(where: \.isFailed)