Add redirect-aware TLS inspection UI + Update KnownCTLogs.swift

.github/workflows/ci.yml

@@ -2,9 +2,6 @@ name: CI
 
 on:
   push:
-    branches:
-      - main
-      - master
   pull_request:
 
 concurrency:
@@ -14,8 +11,6 @@ concurrency:
 jobs:
   build-and-test:
     runs-on: macos-26
-    env:
-      CARGO_NET_GIT_FETCH_WITH_CLI: "true"
 
     steps:
       - name: Check out repository
@@ -29,18 +24,21 @@ jobs:
       - name: Show Xcode version
         run: xcodebuild -version
 
-      - name: Install XcodeGen
-        run: brew install xcodegen
+      - name: Install tools
+        run: brew install xcodegen swiftlint
 
-      - name: Generate Xcode project
-        run: xcodegen generate
+      - name: Lint
+        run: swiftlint lint --quiet --strict Apps Packages/InspectCore/Sources
 
       - name: Test InspectCore package
         shell: bash
         run: |
           set -o pipefail
           swift test --package-path Packages/InspectCore
 
+      - name: Generate Xcode project
+        run: xcodegen generate
+
       - name: Build iOS app for Simulator
         shell: bash
         run: |

.gitignore

@@ -30,7 +30,7 @@ output/
 Pods/
 fastlane/README.md
 fastlane/report.xml
-Configs/LocalOverrides.xcconfig
+project.local.yml
 .asc/
 Rust/**/target/
 Inspect.xcodeproj/

.swiftlint.yml

@@ -2,8 +2,10 @@ disabled_rules:
   - line_length
   - file_length
   - type_body_length
-  - identifier_name
-  - cyclomatic_complexity
+  - function_body_length
+  - opening_brace
+  - optional_data_string_conversion
+  - trailing_comma
 
 excluded:
   - Carthage
@@ -13,4 +15,9 @@ excluded:
   - ./QRCode
 
 
+identifier_name:
+  excluded:
+    - i
+    - id
+
 force_cast: warning

Apps/iOS/Sources/InspectAppDelegate.swift

@@ -2,9 +2,9 @@ import UIKit
 
 final class InspectAppDelegate: NSObject, UIApplicationDelegate {
     func application(
-        _ application: UIApplication,
+        _: UIApplication,
         configurationForConnecting connectingSceneSession: UISceneSession,
-        options: UIScene.ConnectionOptions
+        options _: UIScene.ConnectionOptions
     ) -> UISceneConfiguration {
         let configuration = UISceneConfiguration(
             name: nil,

Apps/iOS/Sources/InspectAppRootView.swift

@@ -18,20 +18,20 @@ struct InspectAppRootView: View {
                     showsMonitorCard: false,
                     showsAboutCard: false
                 )
-                    .tabItem {
-                        Label(InspectSection.inspect.title, systemImage: InspectSection.inspect.systemImage)
-                    }
-                    .tag(InspectSection.inspect)
-                    .accessibilityIdentifier("tab.inspect")
+                .tabItem {
+                    Label(InspectSection.inspect.title, systemImage: InspectSection.inspect.systemImage)
+                }
+                .tag(InspectSection.inspect)
+                .accessibilityIdentifier("tab.inspect")
 
                 InspectionMonitorView {
                     await liveMonitorManager.refresh()
                 }
-                    .tabItem {
-                        Label(InspectSection.monitor.title, systemImage: InspectSection.monitor.systemImage)
-                    }
-                    .tag(InspectSection.monitor)
-                    .accessibilityIdentifier("tab.monitor")
+                .tabItem {
+                    Label(InspectSection.monitor.title, systemImage: InspectSection.monitor.systemImage)
+                }
+                .tag(InspectSection.monitor)
+                .accessibilityIdentifier("tab.monitor")
 
                 InspectSettingsView(manager: liveMonitorManager)
                     .tabItem {

Apps/iOS/Sources/InspectQuickAction.swift

@@ -1,5 +1,5 @@
-import UIKit
 import InspectKit
+import UIKit
 
 enum InspectQuickAction {
     static let inspectType = "in.fourplex.Inspect.shortcut.inspect"

Apps/iOS/Sources/InspectSceneDelegate.swift

@@ -2,20 +2,21 @@ import UIKit
 
 final class InspectSceneDelegate: NSObject, UIWindowSceneDelegate {
     func scene(
-        _ scene: UIScene,
-        willConnectTo session: UISceneSession,
+        _: UIScene,
+        willConnectTo _: UISceneSession,
         options connectionOptions: UIScene.ConnectionOptions
     ) {
         guard let shortcutItem = connectionOptions.shortcutItem,
-              let route = InspectQuickAction.route(for: shortcutItem) else {
+              let route = InspectQuickAction.route(for: shortcutItem)
+        else {
             return
         }
 
         InspectAppRouteCenter.submit(route)
     }
 
     func windowScene(
-        _ windowScene: UIWindowScene,
+        _: UIWindowScene,
         performActionFor shortcutItem: UIApplicationShortcutItem,
         completionHandler: @escaping (Bool) -> Void
     ) {

Apps/iOS/Sources/InspectSettingsSections.swift

@@ -13,7 +13,7 @@ struct InspectTunnelSettingsSection: View {
                 systemImage: "checkmark.shield",
                 tint: .green
             ) {
-                Text(manager.isConfigured ? InspectionCommonStrings.yes : InspectionCommonStrings.no)
+                Text(manager.isConfigured ? InspectionCommonStrings.yesLabel : InspectionCommonStrings.noLabel)
                     .font(.subheadline.weight(.medium))
                     .foregroundStyle(.primary)
                     .monospacedDigit()

Apps/iOS/Sources/LiveMonitorManager.swift

@@ -1,10 +1,10 @@
+import Foundation
 import InspectCore
 import InspectKit
-import Foundation
 @preconcurrency import NetworkExtension
 import Observation
 #if canImport(WidgetKit)
-import WidgetKit
+    import WidgetKit
 #endif
 
 @MainActor
@@ -36,10 +36,10 @@ final class LiveMonitorManager {
             if desiredLiveMonitorEnabled == nil {
                 desiredLiveMonitorEnabled = LiveMonitorTunnelState.isActive(for: manager.connection.status)
             }
-            self.lastErrorMessage = nil
+            lastErrorMessage = nil
             logger.verbose("Refresh complete. status=\(manager.connection.status.inspectionDescription) configured=\(manager.isEnabled)")
         } catch {
-            self.lastErrorMessage = error.localizedDescription
+            lastErrorMessage = error.localizedDescription
             logger.critical("Refresh failed: \(error.localizedDescription)")
         }
     }
@@ -167,9 +167,9 @@ final class LiveMonitorManager {
         InspectionLiveMonitorPreferenceStore.setEnabled(
             LiveMonitorTunnelState.isActive(for: currentStatus)
         )
-#if canImport(WidgetKit)
-        WidgetCenter.shared.reloadTimelines(ofKind: InspectWidgetKind.liveMonitor)
-#endif
+        #if canImport(WidgetKit)
+            WidgetCenter.shared.reloadTimelines(ofKind: InspectWidgetKind.liveMonitor)
+        #endif
         logger.verbose("Updated state. status=\(currentStatus.inspectionDescription) configured=\(isConfigured)")
     }
 

Apps/macOS/Sources/InspectMacLiveMonitorManager.swift

@@ -1,6 +1,6 @@
+import Foundation
 import InspectCore
 import InspectKit
-import Foundation
 @preconcurrency import NetworkExtension
 import Observation
 
@@ -184,7 +184,8 @@ final class InspectMacLiveMonitorManager {
 
         if preservesActiveStatus,
            LiveMonitorTunnelState.isActive(for: status),
-           LiveMonitorTunnelState.isActive(for: refreshedStatus) == false {
+           LiveMonitorTunnelState.isActive(for: refreshedStatus) == false
+        {
             effectiveStatus = status
         } else {
             effectiveStatus = refreshedStatus

Apps/macOS/Sources/InspectMacRootView.swift

@@ -1,4 +1,5 @@
 import AppKit
+import InspectCore
 import InspectKit
 import SwiftUI
 
@@ -56,7 +57,8 @@ struct InspectMacRootView: View {
             case let .report(report, opensCertificateDetail):
                 if opensCertificateDetail {
                     externalCertificateRoute = InspectionCertificateRoute(
-                        report: report,
+                        inspection: TLSInspection(report: report),
+                        initialReportIndex: 0,
                         initialSelectionIndex: 0
                     )
                 } else {
@@ -77,7 +79,8 @@ struct InspectMacRootView: View {
         case let .report(report, opensCertificateDetail):
             if opensCertificateDetail {
                 externalCertificateRoute = InspectionCertificateRoute(
-                    report: report,
+                    inspection: TLSInspection(report: report),
+                    initialReportIndex: 0,
                     initialSelectionIndex: 0
                 )
             }
@@ -99,26 +102,34 @@ struct InspectMacRootView: View {
     @ViewBuilder
     private var detailView: some View {
         let inspectSessionID = appModel.inspectSessionID
-
-        switch appModel.selectedSection {
-        case .inspect:
+        ZStack {
             InspectionRootView(
                 showsMonitorCard: false,
                 showsAboutCard: false
             )
             .id(inspectSessionID)
-        case .monitor:
+            .opacity(appModel.selectedSection == .inspect ? 1 : 0)
+            .allowsHitTesting(appModel.selectedSection == .inspect)
+            .accessibilityHidden(appModel.selectedSection != .inspect)
+
             InspectionMonitorView {
                 await manager.refresh()
             }
-        case .settings:
-            InspectMacSettingsView(manager: manager)
-        case nil:
-            ContentUnavailableView(
-                "Select a Section",
-                systemImage: "sidebar.left",
-                description: Text("Choose Inspect, Monitor, or Settings from the sidebar.")
-            )
+            .opacity(appModel.selectedSection == .monitor ? 1 : 0)
+            .allowsHitTesting(appModel.selectedSection == .monitor)
+            .accessibilityHidden(appModel.selectedSection != .monitor)
+
+            if appModel.selectedSection == .settings {
+                InspectMacSettingsView(manager: manager)
+            }
+
+            if appModel.selectedSection == nil {
+                ContentUnavailableView(
+                    "Select a Section",
+                    systemImage: "sidebar.left",
+                    description: Text("Choose Inspect, Monitor, or Settings from the sidebar.")
+                )
+            }
         }
     }
 }

Apps/macOS/Sources/InspectMacSettingsSections.swift

@@ -12,7 +12,7 @@ struct InspectMacLiveMonitorSettingsSection: View {
                 systemImage: "checkmark.shield",
                 tint: .green
             ) {
-                Text(manager.isConfigured ? InspectionCommonStrings.yes : InspectionCommonStrings.no)
+                Text(manager.isConfigured ? InspectionCommonStrings.yesLabel : InspectionCommonStrings.noLabel)
                     .font(.body.weight(.medium))
             }
 

Apps/macOS/Sources/InspectMacTunnelProfile.swift

@@ -1,6 +1,6 @@
 import Foundation
 
-struct InspectMacTunnelProfile: Sendable {
+struct InspectMacTunnelProfile {
     let localizedDescription: String
     let serverAddress: String
     let providerBundleIdentifier: String

Apps/macOS/Sources/InspectMacVerificationSections.swift

@@ -1,5 +1,5 @@
-import InspectKit
 import InspectCore
+import InspectKit
 @preconcurrency import NetworkExtension
 import SwiftUI
 
@@ -32,7 +32,7 @@ struct InspectMacVerificationProfileCard: View {
                 GridRow {
                     Text("Configured")
                         .foregroundStyle(.secondary)
-                    Text(isConfigured ? InspectionCommonStrings.yes : InspectionCommonStrings.no)
+                    Text(isConfigured ? InspectionCommonStrings.yesLabel : InspectionCommonStrings.noLabel)
                         .fontWeight(.medium)
                 }
 

Apps/macOS/Sources/InspectMacWindowController.swift

@@ -68,7 +68,8 @@ final class InspectMacWindowController {
 
     private func installDockIcon() {
         guard let iconURL = Bundle.main.url(forResource: "Inspect", withExtension: "icns"),
-              let iconImage = NSImage(contentsOf: iconURL) else {
+              let iconImage = NSImage(contentsOf: iconURL)
+        else {
             return
         }
 
@@ -79,7 +80,7 @@ final class InspectMacWindowController {
 struct InspectMacWindowReader: NSViewRepresentable {
     let onResolve: @MainActor (NSWindow) -> Void
 
-    func makeNSView(context: Context) -> NSView {
+    func makeNSView(context _: Context) -> NSView {
         let view = NSView(frame: .zero)
         DispatchQueue.main.async {
             if let window = view.window {
@@ -89,7 +90,7 @@ struct InspectMacWindowReader: NSViewRepresentable {
         return view
     }
 
-    func updateNSView(_ nsView: NSView, context: Context) {
+    func updateNSView(_ nsView: NSView, context _: Context) {
         DispatchQueue.main.async {
             if let window = nsView.window {
                 onResolve(window)

Apps/macOS/Sources/MacSystemExtensionActivator.swift

@@ -18,13 +18,13 @@ final class MacSystemExtensionActivator: NSObject, OSSystemExtensionRequestDeleg
         }
     }
 
-    func requestNeedsUserApproval(_ request: OSSystemExtensionRequest) {
+    func requestNeedsUserApproval(_: OSSystemExtensionRequest) {
         onApprovalRequired?()
     }
 
     func request(
         _ request: OSSystemExtensionRequest,
-        didFinishWithResult result: OSSystemExtensionRequest.Result
+        didFinishWithResult _: OSSystemExtensionRequest.Result
     ) {
         finish(request: request, result: .success(()))
     }
@@ -37,9 +37,9 @@ final class MacSystemExtensionActivator: NSObject, OSSystemExtensionRequestDeleg
     }
 
     func request(
-        _ request: OSSystemExtensionRequest,
-        actionForReplacingExtension existing: OSSystemExtensionProperties,
-        withExtension ext: OSSystemExtensionProperties
+        _: OSSystemExtensionRequest,
+        actionForReplacingExtension _: OSSystemExtensionProperties,
+        withExtension _: OSSystemExtensionProperties
     ) -> OSSystemExtensionRequest.ReplacementAction {
         .replace
     }