Fix: Support VPN modes on MacOS without hacks with osascript

[AlexStrNik]

I’ve added the SingboxHelper daemon agent, which registers on launch with privileged mode, allowing the VPN service to run smoothly without any hacks. To implement this, I added another SingboxService implementation, which is enabled by default on macOS 13+ (and honestly, I didn’t bother with settings no one’s asked for). macOS 13+ is the minimum supported version for the SMAppService daemons API, and while there’s SMBlessJob, it’s deprecated—so who even cares about supporting outdated macOS versions? Just to be clear, the app still works on earlier macOS versions, I just didn’t feel like writing two different daemon registration flows for those ancient OS versions.

Communication with the daemon is handled by NSXPCConnection, which is type-safe, secure, and fast. The daemon loads the dylib, so now all functions in libcore run with sudo rights, and the VPN mode just works™.

There’s also another thing: since libcore expects a DartDL_API, and Swift didn’t have that out of the box, I went ahead and created one. It’s mostly a bunch of stubs, semi-auto-generated from C++ headers (don’t judge me, I’m too lazy to finish the script and upload it, but it would be super easy, I swear). The only function that’s implemented so far is Dart_PostCObject, which receives different statuses from libcore.

What else, code is type-safe, with all the necessary assertions, checks, and guards. It’s not the most readable thing in the world, but who cares if it solves the problem? And if anyone cares to tidy it up, it should be pretty easy to reorganize.

[Demezy]

awesome work, hope would be merged soon!

For now used automator script but it feels like a crunch.

[AlexStrNik]

@0xConsumer @lymanjre please take a look when possible