# Proxy God for macOS

This workspace now runs the Python/CustomTkinter Proxy God dashboard from the reference repo, patched for macOS launch and GOST bootstrap.

## Run

```sh
make run
```

Or double-click:

```text
run_mac.command
```

To refresh the clickable app bundle:

```sh
make app
open "Proxy God.app"
```

The first run creates `.venv`, installs dependencies, downloads the correct macOS GOST binary, and starts the GUI.

## What Was Ported

- Neon Proxy God v2 dashboard layout, top status bar, chain visualization, progress strip, and tabs.
- Live tab with direct/exit IP, exit intel, chain map, and verbose logs.
- Chain Builder with pinned chains, manual exit parsing, per-hop testing, fixed final hop, and source management.
- Browser tab with hardened Firefox profile controls.
- Ban Tester, Signup Prep, Privacy, and Settings tabs.
- GOST-backed rotating multi-hop chain service.
- Proxifly/jsDelivr proxy source ingestion, validation, pool rotation, exit verification, HTTPS tunnel probe, leak checks, and health rotation.
- macOS app-data paths under `~/Library/Application Support/ProxyChainManager`.
- macOS GOST download/extract for `darwin_arm64` or `darwin_amd64`.
- macOS DNS cache flush and system proxy apply/clear through `networksetup`.
- macOS launch-at-login through a per-user LaunchAgent.
- macOS hostname spoof and IPv6-off controls with standard administrator prompts.

## Platform Notes

The upstream project is Windows-first. Features that do not have a clean, safe macOS equivalent were removed from the Mac UI instead of being left as fake toggles: netsh firewall kill-switch, registry Chrome/Edge WebRTC policy, MAC spoofing, Windows telemetry kill, and Windows LAN broadcast lockdown.

macOS networking is handled through:

- GOST bound to loopback at `127.0.0.1`.
- System HTTP/HTTPS proxy apply/clear via `networksetup`.
- Administrator prompt fallback when macOS requires permission for network changes.
- DNS cache flush with `dscacheutil` and `mDNSResponder`.
- Hardened Firefox profile for WebRTC and fingerprint controls.

The global Windows fail-closed firewall was not ported because a safe one-click macOS PF equivalent would require managing privileged packet-filter state and can leave the machine offline if interrupted. The Mac build favors deterministic system-proxy cleanup and verified chain health over unsafe PF mutation.