Release 7.0.9-beta

.github/workflows/dotnetcore.yml

@@ -78,7 +78,9 @@ jobs:
       run: dotnet build src/Titanium.Web.Proxy.sln --configuration Release --no-restore --warnaserror
 
     - name: Begin SonarCloud analysis
+      id: sonar_begin
       if: env.SONAR_TOKEN != ''
+      continue-on-error: true
       shell: pwsh
       run: >
         .\.sonar\scanner\dotnet-sonarscanner begin
@@ -87,10 +89,10 @@ jobs:
         /d:sonar.token="$env:SONAR_TOKEN"
         /d:sonar.cs.vscoveragexml.reportsPaths="coverage/coverage.xml"
         /d:sonar.exclusions="**/docs/**,**/examples/**,**/benchmarks/**,**/tools/**,**/*.axaml,**/website/**,**/.github/**"
-        /d:sonar.coverage.exclusions="**/examples/**,**/benchmarks/**,**/docs/**,**/Http3/Http3OriginBridge.cs,**/Http3/Http3OriginClientSession.cs,**/Titanium.Plus/Dashboard/**,**/Titanium.Inspector/Views/**,**/Titanium.Inspector/Services/AppContainerLoopback.cs,**/Titanium.Inspector/App.axaml.cs,**/Titanium.Inspector/Program.cs,**/Titanium.Inspector/InspectorAppFactory.cs,**/Titanium.Inspector/Services/UpdateService.cs,**/Titanium.Cli/Program.cs,**/Titanium.Cli/AsyncConsole.cs,**/Titanium.Cli/Http3/Http3DepsCommand.cs,**/Titanium.Cli/Updates/VersionAndUpdateCommands.cs,**/Titanium.Cli/Certificates/CertificateBootstrap.cs,**/Titanium.Plus/Discovery/**,**/Titanium.Plus/Security/**,**/Titanium.Plus/State/**,**/Titanium.Plus/Resilience/**,**/Titanium.Plus/PlusLog.cs,**/Titanium.Web.Proxy/Helpers/LinuxSystemProxyBackend.cs,**/Titanium.Web.Proxy/Helpers/MacOsSystemProxyBackend.cs,**/Titanium.Web.Proxy/Helpers/IElevationPrompt.cs,**/Titanium.Web.Proxy/Helpers/IProcessRunner.cs"
+        /d:sonar.coverage.exclusions="**/examples/**,**/benchmarks/**,**/docs/**,**/Http3/Http3OriginBridge.cs,**/Http3/Http3OriginClientSession.cs,**/Handlers/Http11ToHttp2BridgeHandler.cs,**/Handlers/H1TerminateFastForward.cs,**/Titanium.Plus/Dashboard/**,**/Titanium.Inspector/Views/**,**/Titanium.Inspector/ViewModels/MainWindowViewModel.Trust.cs,**/Titanium.Inspector/Services/AppContainerLoopback.cs,**/Titanium.Inspector/Services/AvaloniaStatusNotifier.cs,**/Titanium.Inspector/Services/DesktopShell.cs,**/Titanium.Inspector/App.axaml.cs,**/Titanium.Inspector/Program.cs,**/Titanium.Inspector/InspectorAppFactory.cs,**/Titanium.Inspector/Services/UpdateService.cs,**/Titanium.Cli/Program.cs,**/Titanium.Cli/AsyncConsole.cs,**/Titanium.Cli/Http3/Http3DepsCommand.cs,**/Titanium.Cli/Updates/VersionAndUpdateCommands.cs,**/Titanium.Cli/Certificates/CertificateBootstrap.cs,**/Titanium.Plus/Discovery/**,**/Titanium.Plus/Security/**,**/Titanium.Plus/State/**,**/Titanium.Plus/Resilience/**,**/Titanium.Plus/PlusLog.cs,**/Titanium.Web.Proxy/Helpers/LinuxSystemProxyBackend.cs,**/Titanium.Web.Proxy/Helpers/MacOsSystemProxyBackend.cs,**/Titanium.Web.Proxy/Helpers/IElevationPrompt.cs,**/Titanium.Web.Proxy/Helpers/IProcessRunner.cs,**/Titanium.Web.Proxy/Certificates/FirefoxCertificateTrust.cs"
 
     - name: Build for SonarCloud analysis
-      if: env.SONAR_TOKEN != ''
+      if: env.SONAR_TOKEN != '' && steps.sonar_begin.outcome == 'success'
       run: dotnet build src/Titanium.Web.Proxy.sln --configuration Release --no-restore --no-incremental --disable-build-servers
 
     - name: Test
@@ -108,7 +110,8 @@ jobs:
         if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
         dotnet test tests/Titanium.Cli.Tests/Titanium.Cli.Tests.csproj --configuration Release --no-build --no-restore --collect:"Code Coverage" --results-directory coverage/cli
         if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
-        dotnet test tests/Titanium.E2E.Tests/Titanium.E2E.Tests.csproj --configuration Release --no-build --no-restore --filter "TestCategory=E2E|TestCategory=E2E-UI" --collect:"Code Coverage" --results-directory coverage/e2e
+        # CLI process E2E (TestCategory=E2E) runs on the cli-e2e OS matrix — avoid doubling Windows.
+        dotnet test tests/Titanium.E2E.Tests/Titanium.E2E.Tests.csproj --configuration Release --no-build --no-restore --filter "TestCategory=E2E-UI" --collect:"Code Coverage" --results-directory coverage/e2e
         if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
 
         # The integration suite spins up real listening sockets and TLS handshakes, which
@@ -130,12 +133,13 @@ jobs:
       run: .\.coverage\tools\dotnet-coverage merge "coverage\**\*.coverage" --output coverage/coverage.xml --output-format xml
 
     - name: Complete SonarCloud analysis
-      if: env.SONAR_TOKEN != ''
+      if: env.SONAR_TOKEN != '' && steps.sonar_begin.outcome == 'success'
+      continue-on-error: true
       shell: pwsh
       run: .\.sonar\scanner\dotnet-sonarscanner end /d:sonar.token="$env:SONAR_TOKEN"
 
     # DocFX output races other develop pushes (incl. concurrent "Update documentation").
-    # Sync to origin/develop, regenerate, commit docs-only, retry push — never fail the
+    # Sync to origin/develop, regenerate, commit docs-only, retry push — never fail the
     # job on stash/rebase conflicts from EndBug/add-and-commit autostash.
     - name: Publish Documentation
       if: github.ref == 'refs/heads/develop'
@@ -172,7 +176,7 @@ jobs:
         throw "Failed to publish documentation after retries"
 
   # Cross-OS Inspector + Plus dashboard UI gates (Headless / Visual / Playwright).
-  # Inspector unit suite stays on Windows `build` only except Inspector-Stress (below).
+  # Inspector unit suite stays on Windows `build` only except Inspector-Stress / Inspector-Trust-Decision (below).
   ui-portable:
     runs-on: ${{ matrix.os }}
     timeout-minutes: 35
@@ -215,7 +219,7 @@ jobs:
       shell: pwsh
       run: |
         $ErrorActionPreference = 'Stop'
-        # Intel macOS bottles are sparse; do not force-upgrade openssl (no bottle → job fail).
+        # Intel macOS bottles are sparse; do not force-upgrade openssl (no bottle → job fail).
         $env:HOMEBREW_NO_AUTO_UPDATE = '1'
         $env:HOMEBREW_NO_INSTALL_UPGRADE = '1'
         brew install openssl@3 libmsquic
@@ -240,7 +244,7 @@ jobs:
         }
 
         if (-not (Test-QuicSupported)) {
-          Write-Host 'QuicListener.IsSupported still false after brew; trying Microsoft libmsquic drop…'
+          Write-Host 'QuicListener.IsSupported still false after brew; trying Microsoft libmsquic drop…'
           $arch = (& uname -m).Trim()
           $rid = if ($arch -eq 'arm64') { 'osx-arm64' } else { 'osx-x64' }
           $dest = Join-Path $env:RUNNER_TEMP 'msquic-osx'
@@ -259,7 +263,7 @@ jobs:
             Select-Object -First 1
           if ($found) {
             $extra = $found.Directory.FullName
-            # ${extra} — bare $extra: is parsed as a PowerShell drive-qualified variable.
+            # ${extra} — bare $extra: is parsed as a PowerShell drive-qualified variable.
             $dyld2 = "${extra}:${dyld}"
             Add-Content -Path $env:GITHUB_ENV -Value "DYLD_LIBRARY_PATH=$dyld2"
             Add-Content -Path $env:GITHUB_ENV -Value "DYLD_FALLBACK_LIBRARY_PATH=$dyld2"
@@ -300,7 +304,7 @@ jobs:
         dotnet test tests/Titanium.E2E.Tests/Titanium.E2E.Tests.csproj --configuration Release --no-build --no-restore --filter "TestCategory=E2E-UI-Headless|TestCategory=E2E-UI-Visual|TestCategory=E2E-UI-Plus-Dashboard"
     - name: Inspector retention stress (spill + H3)
       run: |
-        dotnet test tests/Titanium.Inspector.Tests/Titanium.Inspector.Tests.csproj --configuration Release --no-restore --filter "TestCategory=Inspector-Stress"
+        dotnet test tests/Titanium.Inspector.Tests/Titanium.Inspector.Tests.csproj --configuration Release --no-restore --filter "TestCategory=Inspector-Stress|TestCategory=Inspector-Trust-Decision"
     - name: OS proxy-backend filters
       run: |
         dotnet test tests/Titanium.Web.Proxy.UnitTests/Titanium.Web.Proxy.UnitTests.csproj --configuration Release --no-build --no-restore --filter "FullyQualifiedName~UnixProxyBypassMapperTests|FullyQualifiedName~MacOsSystemProxyBackendTests|FullyQualifiedName~LinuxSystemProxyBackendTests|FullyQualifiedName~ElevationPromptCancelTests|FullyQualifiedName~SystemProxyBackendFactoryPlatformTests"
@@ -327,8 +331,70 @@ jobs:
           **/playwright-report/**
         if-no-files-found: ignore
 
-  # Tiered RPS gates for beta/stable publish (parallel — wall clock ~max of the two).
-  # Editions: CLI/Plus tax vs Core. Peer: Core reverse vs YARP (+ MITM÷Reverse) so a
+  # Full CLI + CLI Plus process E2E on all three OS (command tree, services, control plane).
+  # Does not pre-install libmsquic so http3-deps install can exercise the real leaf when Quic is false.
+  cli-e2e:
+    runs-on: ${{ matrix.os }}
+    timeout-minutes: 60
+    permissions:
+      contents: read
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [windows-latest, ubuntu-latest, macos-latest]
+    steps:
+    - uses: actions/checkout@v6
+    - name: Setup .NET
+      uses: actions/setup-dotnet@v5
+      with:
+        dotnet-version: |
+          10.0.x
+    - name: Linux Playwright OS deps
+      if: runner.os == 'Linux'
+      run: |
+        sudo apt-get update
+        sudo apt-get install -y fonts-liberation libnss3 libatk-bridge2.0-0 libdrm2 libxkbcommon0 libgbm1 libasound2t64 || sudo apt-get install -y fonts-liberation libnss3 libatk-bridge2.0-0 libdrm2 libxkbcommon0 libgbm1 libasound2
+    - name: Restore
+      run: dotnet restore src/Titanium.Web.Proxy.sln
+    - name: Build CLI + Plus + E2E
+      run: |
+        dotnet build src/Titanium.Cli/Titanium.Cli.csproj --configuration Release --no-restore
+        dotnet build src/Titanium.Plus/Titanium.Plus.csproj --configuration Release --no-restore
+        dotnet build tests/Titanium.E2E.Tests/Titanium.E2E.Tests.csproj --configuration Release --no-restore
+    - name: Install Playwright Chromium
+      shell: pwsh
+      run: |
+        $pw = Join-Path (Resolve-Path "tests/Titanium.E2E.Tests/bin/Release/net10.0") "playwright.ps1"
+        if (-not (Test-Path $pw)) {
+          throw "playwright.ps1 missing at $pw"
+        }
+        & $pw install chromium
+    - name: CLI process E2E (all leaves)
+      shell: pwsh
+      run: |
+        if ($IsLinux -or $IsMacOS) {
+          sudo -n true 2>$null
+          if ($LASTEXITCODE -ne 0) {
+            Write-Warning "sudo -n not available; machine service lifecycle may Inconclusive"
+          }
+        }
+        dotnet test tests/Titanium.E2E.Tests/Titanium.E2E.Tests.csproj `
+          --configuration Release --no-build --no-restore `
+          --filter "TestCategory=E2E" `
+          --logger "trx;LogFileName=cli-e2e.trx" `
+          --results-directory "artifacts/cli-e2e-${{ matrix.os }}"
+    - name: Upload CLI E2E artifacts
+      if: failure()
+      uses: actions/upload-artifact@v4
+      with:
+        name: cli-e2e-${{ matrix.os }}
+        path: |
+          artifacts/cli-e2e-${{ matrix.os }}/**
+          tests/Titanium.E2E.Tests/TestResults/**
+        if-no-files-found: ignore
+
+  # Tiered RPS gates for beta/stable publish (parallel) — wall clock ~max of the two).
+  # Editions: CLI/Plus tax vs Core. Peer: Core reverse vs YARP (+ MITM÷Reverse) so a
   # uniform Core slowdown cannot hide behind green edition ratios.
   rps-publish-gate:
     if: github.event_name == 'push' && (github.ref == 'refs/heads/beta' || github.ref == 'refs/heads/stable')
@@ -388,7 +454,7 @@ jobs:
         sudo apt-get update
         sudo apt-get install -y libmsquic
         pwsh -NoProfile -Command 'if (-not [System.Net.Quic.QuicListener]::IsSupported) { throw "QuicListener.IsSupported is false after libmsquic install" }; Write-Host "QuicListener.IsSupported=$([System.Net.Quic.QuicListener]::IsSupported)"'
-    - name: compare-spot (Core÷YARP + MITM÷Reverse)
+    - name: compare-spot (Core÷YARP + MITM÷Reverse)
       shell: pwsh
       run: |
         pwsh tools/RpsLoadProbe/run-spot-matrix.ps1
@@ -447,7 +513,7 @@ jobs:
   # Product zips stay on release.yml (v* tags). After beta/stable merge, create/move the
   # version tag and dispatch release.yml (GITHUB_TOKEN tag pushes do not re-trigger workflows).
   # release.yml also packs/pushes Chocolatey (titanium-cli / titanium-inspector) after the
-  # GitHub Release exists — no separate chocolatey step here.
+  # GitHub Release exists — no separate chocolatey step here.
   cut-product-tag:
     if: github.event_name == 'push' && (github.ref == 'refs/heads/beta' || github.ref == 'refs/heads/stable')
     needs: [build, ui-portable, rps-publish-gate, rps-peer-gate]

.github/workflows/release.yml

@@ -83,8 +83,8 @@ jobs:
             if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
           }
 
-          Write-Host "=== E2E / E2E-UI ==="
-          dotnet test tests/Titanium.E2E.Tests/Titanium.E2E.Tests.csproj -c Release --no-build --no-restore --nologo --filter "TestCategory=E2E|TestCategory=E2E-UI"
+          Write-Host "=== E2E-UI (CLI process E2E is cli-e2e matrix) ==="
+          dotnet test tests/Titanium.E2E.Tests/Titanium.E2E.Tests.csproj -c Release --no-build --no-restore --nologo --filter "TestCategory=E2E-UI"
           if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
 
           $maxAttempts = 2
@@ -106,8 +106,43 @@ jobs:
           if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
 
 
+  cli-e2e:
+    needs: resolve-version
+    runs-on: ${{ matrix.os }}
+    timeout-minutes: 60
+    permissions:
+      contents: read
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [windows-latest, ubuntu-latest, macos-latest]
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/setup-dotnet@v5
+        with:
+          dotnet-version: '10.0.x'
+      - name: Linux Playwright OS deps
+        if: runner.os == 'Linux'
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y fonts-liberation libnss3 libatk-bridge2.0-0 libdrm2 libxkbcommon0 libgbm1 libasound2t64 || sudo apt-get install -y fonts-liberation libnss3 libatk-bridge2.0-0 libdrm2 libxkbcommon0 libgbm1 libasound2
+      - name: Restore and build
+        run: |
+          dotnet restore src/Titanium.Web.Proxy.sln
+          dotnet build src/Titanium.Cli/Titanium.Cli.csproj -c Release --no-restore
+          dotnet build src/Titanium.Plus/Titanium.Plus.csproj -c Release --no-restore
+          dotnet build tests/Titanium.E2E.Tests/Titanium.E2E.Tests.csproj -c Release --no-restore
+      - name: Install Playwright Chromium
+        shell: pwsh
+        run: |
+          $pw = Join-Path (Resolve-Path "tests/Titanium.E2E.Tests/bin/Release/net10.0") "playwright.ps1"
+          & $pw install chromium
+      - name: CLI process E2E
+        run: |
+          dotnet test tests/Titanium.E2E.Tests/Titanium.E2E.Tests.csproj -c Release --no-build --no-restore --nologo --filter "TestCategory=E2E"
+
   build-cli:
-    needs: [resolve-version, test]
+    needs: [resolve-version, test, cli-e2e]
     runs-on: ${{ matrix.os }}
     # win-x64 uses environment "signing" for Azure OIDC (federated cred).
     environment: ${{ matrix.rid == 'win-x64' && 'signing' || '' }}

.gitignore

@@ -1,10 +1,8 @@
 ## Ignore Visual Studio temporary files, build results, and
 ## files generated by popular Visual Studio add-ons.
 
-# Local Cursor config (plans, caches). Shared project rules are tracked.
-.cursor/*
-!.cursor/rules/
-!.cursor/rules/**
+# Local Cursor agent rules / config (not shared)
+.cursor/
 
 # User-specific files
 *.suo

README.md

@@ -19,11 +19,13 @@ Requires .NET 10 or later for the library. CLI and Inspector downloads are self-
 
 ## What you can do
 
-- Run a reverse / edge proxy in front of any backend, or inspect and modify HTTP(S) traffic in the desktop Inspector
-- Explicit, transparent, and SOCKS4/5 endpoints; decrypt HTTPS when you trust a local root certificate
-- Stream bodies across HTTP/1.x, HTTP/2, and HTTP/3; upstream proxies, auth, and mutual TLS
+- Decrypt and inspect HTTPS in a native desktop Inspector on Windows, macOS, and Linux — AutoResponder, Map Local/Remote, breakpoints, Composer, HAR, curl/fetch
+- Keep sign-in working: SSO hosts stay on OS bypass; hosts that reject MITM auto-tunnel
+- Speak modern HTTP — HTTP/2 by default, optional HTTP/3, WebSocket, gRPC, SSE, GraphQL rules in the same grid
+- Run the same engine as a reverse / edge proxy from the CLI (YAML, load balancing, ACME, live reload)
+- Embed in .NET via NuGet (MIT); Inspector is free for personal and education use
 
-Protocol coverage: [protocol support matrix](https://github.com/justcoding121/titanium-web-proxy/wiki/Protocol-Support). HTTP/3 packaging: [HTTP/3 wiki](https://github.com/justcoding121/titanium-web-proxy/wiki/HTTP-3).
+Full catalog: [Features](https://titaniumproxy.com/docs/features). Protocol coverage: [protocol support matrix](https://github.com/justcoding121/titanium-web-proxy/wiki/Protocol-Support). HTTP/3 packaging: [HTTP/3 wiki](https://github.com/justcoding121/titanium-web-proxy/wiki/HTTP-3).
 
 ## Performance
 
@@ -108,8 +110,8 @@ Point your client at `127.0.0.1:8000` as its HTTP and HTTPS proxy. Trusting a ge
 
 ## Examples and documentation
 
-- **[Website](https://titaniumproxy.com)** — product docs, [download](https://titaniumproxy.com/download), [getting started](https://titaniumproxy.com/docs/getting-started), [release notes](https://titaniumproxy.com/releases)
-- **[Wiki](https://github.com/justcoding121/titanium-web-proxy/wiki)** — deeper guides (performance, streaming bodies, HTTP/3, protocol support)
+- **[Website](https://titaniumproxy.com)** — product docs, [download](https://titaniumproxy.com/download), [getting started](https://titaniumproxy.com/docs/getting-started), [features](https://titaniumproxy.com/docs/features), [release notes](https://titaniumproxy.com/releases)
+- **[Wiki](https://github.com/justcoding121/titanium-web-proxy/wiki)** — deeper guides (performance, streaming bodies, HTTP/3, protocol support) and a short [Features](https://github.com/justcoding121/titanium-web-proxy/wiki/Features) pointer
 - [Basic console proxy](examples/Titanium.Web.Proxy.Examples.Basic)
 - [WPF desktop example](examples/Titanium.Web.Proxy.Examples.Wpf)
 - [Windows service example](examples/Titanium.Web.Proxy.Examples.WindowsService)