feat: SOCKS5 + HTTP CONNECT proxy integration

.cargo/config.toml

@@ -0,0 +1,21 @@
+# Cargo configuration for specter
+# Uses prebuilt BoringSSL libraries from lib/boringssl/
+
+# Note: Environment variables for boring-sys are set via:
+# - Local dev: source scripts/env.sh
+# - CI: Set BORING_BSSL_PATH and BORING_BSSL_INCLUDE_PATH in workflow
+
+[build]
+# Uncomment to use prebuilt BoringSSL by default
+# rustflags = []
+
+[env]
+# These are relative to the manifest directory (where Cargo.toml lives)
+# Unfortunately Cargo doesn't support relative paths in [env], so we use scripts instead
+
+# Target-specific linker settings for cross-compilation
+[target.aarch64-unknown-linux-gnu]
+linker = "aarch64-linux-gnu-gcc"
+
+[target.x86_64-unknown-linux-musl]
+linker = "x86_64-linux-musl-gcc"

.config/nextest.toml

@@ -13,8 +13,8 @@ retries = 1
 slow-timeout = { period = "60s", terminate-after = 2 }
 
 [profile.ci]
-# CI profile with stricter settings
-retries = 0
+# CI profile -- retry once to handle transient flakes
+retries = 1
 failure-output = "final"
 success-output = "never"
 

.github/workflows/boringssl-release.yml

@@ -0,0 +1,94 @@
+name: BoringSSL Prebuilt Release
+
+on:
+  workflow_dispatch:
+    inputs:
+      version:
+        description: 'Version tag (e.g., boringssl-prebuilt-v1)'
+        required: true
+        default: 'boringssl-prebuilt-v1'
+
+permissions:
+  contents: write
+
+jobs:
+  package:
+    name: Package prebuilt BoringSSL
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Verify libraries exist
+        run: |
+          echo "Checking for prebuilt libraries..."
+          ls -la lib/boringssl/
+
+          # Verify all expected targets
+          for target in aarch64-apple-darwin x86_64-apple-darwin \
+                        x86_64-unknown-linux-gnu x86_64-unknown-linux-musl \
+                        aarch64-unknown-linux-gnu \
+                        x86_64-pc-windows-msvc aarch64-pc-windows-msvc; do
+            if [[ -d "lib/boringssl/$target" ]]; then
+              echo "✓ $target"
+              ls -lh "lib/boringssl/$target/"
+            else
+              echo "✗ $target (missing)"
+            fi
+          done
+
+      - name: Package archives
+        run: |
+          cd lib/boringssl
+
+          # Create per-target archives
+          for target in */; do
+            target=${target%/}
+            [[ "$target" == "include" ]] && continue
+
+            echo "Packaging $target..."
+            tar -czf "boringssl-${target}.tar.gz" include/ "$target/"
+
+            # Also create zip for Windows
+            if [[ "$target" == *windows* ]]; then
+              zip -r "boringssl-${target}.zip" include/ "$target/"
+            fi
+          done
+
+          # Create all-in-one archive
+          tar -czf boringssl-all-targets.tar.gz include/ */
+
+          ls -lh *.tar.gz *.zip 2>/dev/null || true
+
+      - name: Create Release
+        uses: softprops/action-gh-release@v2
+        with:
+          tag_name: ${{ inputs.version }}
+          name: BoringSSL Prebuilt Libraries ${{ inputs.version }}
+          body: |
+            Prebuilt BoringSSL static libraries for use with `boring-sys` crate.
+
+            ## Targets
+            - `aarch64-apple-darwin` - macOS ARM64 (Apple Silicon)
+            - `x86_64-apple-darwin` - macOS x86_64
+            - `x86_64-unknown-linux-gnu` - Linux x86_64 (glibc)
+            - `x86_64-unknown-linux-musl` - Linux x86_64 (musl)
+            - `aarch64-unknown-linux-gnu` - Linux ARM64 (glibc)
+            - `x86_64-pc-windows-msvc` - Windows x86_64
+            - `aarch64-pc-windows-msvc` - Windows ARM64
+
+            ## Usage
+
+            Download the archive for your target and set environment variables:
+
+            ```bash
+            export BORING_BSSL_PATH=/path/to/boringssl/<target>/build
+            export BORING_BSSL_INCLUDE_PATH=/path/to/boringssl/include
+            cargo build
+            ```
+
+            Or download `boringssl-all-targets.tar.gz` for all platforms.
+          files: |
+            lib/boringssl/*.tar.gz
+            lib/boringssl/*.zip
+          draft: false
+          prerelease: false

.github/workflows/ci.yml

@@ -8,72 +8,121 @@ on:
 env:
   CARGO_TERM_COLOR: always
   RUST_BACKTRACE: 1
-  # Disable incremental compilation in CI (sccache handles caching)
   CARGO_INCREMENTAL: 0
-  # RUSTC_WRAPPER set after sccache is initialized (see step below)
   SCCACHE_GHA_ENABLED: "true"
 
 jobs:
-  ci:
-    name: CI
-    runs-on: macos-latest
+  test:
+    name: Test (macOS)
+    runs-on: macos-14
     timeout-minutes: 20
     steps:
-      - name: Checkout code
-        uses: actions/checkout@v4
+      - uses: actions/checkout@v4
 
-      - name: Install Rust toolchain
+      - name: Install Rust
         uses: dtolnay/rust-toolchain@stable
         with:
           components: rustfmt
 
-      - name: Setup sccache
-        uses: mozilla-actions/sccache-action@v0.0.9
+      - uses: mozilla-actions/sccache-action@v0.0.9
+      - run: echo "RUSTC_WRAPPER=sccache" >> $GITHUB_ENV
 
-      - name: Configure sccache for Rust
-        run: echo "RUSTC_WRAPPER=sccache" >> $GITHUB_ENV
-
-      - name: Cache cargo registry
-        uses: actions/cache@v4
+      - uses: actions/cache@v4
         with:
           path: |
             ~/.cargo/registry
             ~/.cargo/git
-          key: ${{ runner.os }}-cargo-registry-${{ hashFiles('**/Cargo.lock') }}
-          restore-keys: |
-            ${{ runner.os }}-cargo-registry-
+          key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
 
-      - name: Install cargo-nextest
-        uses: taiki-e/install-action@v2
+      - uses: taiki-e/install-action@v2
         with:
           tool: cargo-nextest
 
-      - name: Check formatting
-        run: cargo fmt -- --check
+      - name: Configure prebuilt BoringSSL
+        run: |
+          if [[ "$(uname -m)" == "arm64" ]]; then
+            echo "BORING_BSSL_PATH=${{ github.workspace }}/lib/boringssl/aarch64-apple-darwin/build" >> $GITHUB_ENV
+          else
+            echo "BORING_BSSL_PATH=${{ github.workspace }}/lib/boringssl/x86_64-apple-darwin/build" >> $GITHUB_ENV
+          fi
+          echo "BORING_BSSL_INCLUDE_PATH=${{ github.workspace }}/lib/boringssl/include" >> $GITHUB_ENV
 
-      - name: Run tests
-        run: cargo nextest run --all-features --profile ci
+      - run: cargo fmt -- --check
+      - run: cargo nextest run --all-features --profile ci
 
-      - name: Archive test results
+      - uses: actions/upload-artifact@v4
         if: always()
-        uses: actions/upload-artifact@v4
         with:
           name: nextest-results
           path: target/nextest/ci/junit.xml
           if-no-files-found: ignore
 
-      - name: Run fingerprint_validation example
+      - name: Run examples
         uses: nick-fields/retry@v3
         with:
-          timeout_minutes: 2
+          timeout_minutes: 3
           max_attempts: 3
           retry_wait_seconds: 10
-          command: cargo run --example fingerprint_validation
+          command: |
+            cargo run --example fingerprint_validation
+            cargo run --example protocol_test
 
-      - name: Run protocol_test example
-        uses: nick-fields/retry@v3
+  build-linux:
+    name: Build Linux (${{ matrix.target }})
+    runs-on: macos-14
+    strategy:
+      matrix:
+        target:
+          - aarch64-unknown-linux-gnu
+          - x86_64-unknown-linux-gnu
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install Rust
+        uses: dtolnay/rust-toolchain@stable
         with:
-          timeout_minutes: 3
-          max_attempts: 3
-          retry_wait_seconds: 10
-          command: cargo run --example protocol_test
+          targets: ${{ matrix.target }}
+
+      - uses: taiki-e/install-action@v2
+        with:
+          tool: just,cargo-zigbuild
+
+      - name: Install zig
+        run: brew install zig
+
+      - name: Build
+        run: |
+          chmod +x scripts/zig-cc-* scripts/zig-cxx-*
+          just zigbuild ${{ matrix.target }}
+
+  build-windows:
+    name: Build Windows (${{ matrix.target }})
+    runs-on: macos-14
+    strategy:
+      matrix:
+        target:
+          - x86_64-pc-windows-msvc
+          - aarch64-pc-windows-msvc
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install Rust
+        uses: dtolnay/rust-toolchain@stable
+        with:
+          targets: ${{ matrix.target }}
+
+      - name: Install LLVM
+        run: brew install llvm
+
+      - name: Add LLVM to PATH
+        run: echo "$(brew --prefix llvm)/bin" >> "$GITHUB_PATH"
+
+      - uses: taiki-e/install-action@v2
+        with:
+          tool: cargo-xwin
+
+      - name: Build
+        run: cargo xwin build --release --target ${{ matrix.target }} --lib
+        env:
+          BORING_BSSL_PATH: ${{ github.workspace }}/lib/boringssl/${{ matrix.target }}/build
+          BORING_BSSL_INCLUDE_PATH: ${{ github.workspace }}/lib/boringssl/include