Remove Slipstream support from CLI

Drop all Slipstream code, embedded binary support, and the Rust/C/OpenSSL
CI build pipeline. Slipstream configs now show an unsupported type error
directing users to the app. CLI builds are now Go-only on ubuntu-latest.

Author: anonvector

.github/workflows/release-cli.yml

@@ -17,117 +17,27 @@ on:
         default: true
 
 jobs:
-  # Build slipstream-client for each platform first
-  build-slipstream:
-    strategy:
-      fail-fast: false
-      matrix:
-        include:
-          - target: x86_64-pc-windows-msvc
-            suffix: windows-amd64
-            ext: .exe
-            os: windows-latest
-          - target: x86_64-unknown-linux-gnu
-            suffix: linux-amd64
-            os: ubuntu-latest
-          - target: aarch64-unknown-linux-gnu
-            suffix: linux-arm64
-            os: ubuntu-latest
-            cross: true
-            cc: aarch64-linux-gnu-gcc
-            ar: aarch64-linux-gnu-ar
-          - target: x86_64-apple-darwin
-            suffix: darwin-amd64
-            os: macos-15
-            cmake_osx_arch: x86_64
-          - target: aarch64-apple-darwin
-            suffix: darwin-arm64
-            os: macos-15
-
-    runs-on: ${{ matrix.os }}
-
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
-        with:
-          submodules: recursive
-          token: ${{ secrets.SUBMODULE_TOKEN }}
-
-      - name: Install Rust toolchain
-        uses: dtolnay/rust-toolchain@stable
-        with:
-          targets: ${{ matrix.target }}
-
-      - name: Install cross-compilation tools (Linux ARM64)
-        if: matrix.cross
-        run: |
-          sudo apt-get update
-          sudo apt-get install -y gcc-aarch64-linux-gnu
-
-      - name: Install Windows build dependencies (Perl, pkg-config)
-        if: runner.os == 'Windows'
-        run: choco install strawberryperl pkgconfiglite -y
-
-      - name: Build slipstream-client
-        working-directory: app/src/main/rust/slipstream-rust
-        shell: bash
-        env:
-          CARGO_TARGET_AARCH64_UNKNOWN_LINUX_GNU_LINKER: aarch64-linux-gnu-gcc
-          CC: ${{ matrix.cc || '' }}
-          AR: ${{ matrix.ar || '' }}
-          CMAKE_OSX_ARCHITECTURES: ${{ matrix.cmake_osx_arch || '' }}
-          CONFIG_ENCRYPTION_KEY: ${{ secrets.CONFIG_ENCRYPTION_KEY }}
-        run: |
-          # On Windows, prefer Strawberry Perl over Git Bash perl for OpenSSL
-          if [ -d "/c/Strawberry/perl/bin" ]; then
-            export PATH="/c/Strawberry/perl/bin:$PATH"
-          fi
-          # Unset CC/AR if empty so the build system uses its defaults
-          [ -z "$CC" ] && unset CC
-          [ -z "$AR" ] && unset AR
-          # macOS x86_64 cross-compilation from ARM64 runner
-          if [ -n "${CMAKE_OSX_ARCHITECTURES:-}" ]; then
-            export CFLAGS="-arch ${CMAKE_OSX_ARCHITECTURES}"
-            export CXXFLAGS="-arch ${CMAKE_OSX_ARCHITECTURES}"
-          fi
-          cargo build --release --bin slipstream-client \
-            --target ${{ matrix.target }} \
-            --features openssl-vendored,picoquic-minimal-build
-
-      - name: Upload slipstream binary
-        uses: actions/upload-artifact@v4
-        with:
-          name: slipstream-${{ matrix.suffix }}
-          path: app/src/main/rust/slipstream-rust/target/${{ matrix.target }}/release/slipstream-client${{ matrix.ext }}
-
-  # Build Go CLI with embedded slipstream binary
   build-cli:
-    needs: build-slipstream
     strategy:
+      fail-fast: false
       matrix:
         include:
           - goos: darwin
             goarch: amd64
             suffix: darwin-amd64
-            slipstream_suffix: darwin-amd64
           - goos: darwin
             goarch: arm64
             suffix: darwin-arm64
-            slipstream_suffix: darwin-arm64
           - goos: linux
             goarch: amd64
             suffix: linux-amd64
-            slipstream_suffix: linux-amd64
           - goos: linux
             goarch: arm64
             suffix: linux-arm64
-            slipstream_suffix: linux-arm64
           - goos: windows
             goarch: amd64
             suffix: windows-amd64
-            slipstream_suffix: windows-amd64
             ext: .exe
-            slipstream_ext: .exe
 
     runs-on: ubuntu-latest
 
@@ -143,16 +53,6 @@ jobs:
         with:
           go-version-file: cli/go.mod
 
-      - name: Download slipstream binary
-        uses: actions/download-artifact@v4
-        with:
-          name: slipstream-${{ matrix.slipstream_suffix }}
-          path: ./slipstream-download
-
-      - name: Embed slipstream binary
-        run: |
-          cp ./slipstream-download/slipstream-client${{ matrix.slipstream_ext }} cli/embedded/slipstream-client
-
       - name: Build
         working-directory: cli
         env:
@@ -165,7 +65,7 @@ jobs:
           if [ -n "${{ secrets.CONFIG_ENCRYPTION_KEY }}" ]; then
             LDFLAGS="${LDFLAGS} -X main.configKey=${{ secrets.CONFIG_ENCRYPTION_KEY }}"
           fi
-          go build -tags embed_slipstream -trimpath -ldflags="${LDFLAGS}" -o ../slipnet-${{ matrix.suffix }}${{ matrix.ext }} .
+          go build -trimpath -ldflags="${LDFLAGS}" -o ../slipnet-${{ matrix.suffix }}${{ matrix.ext }} .
 
       - name: Compress with UPX (Linux/macOS only)
         if: matrix.goos != 'windows'

cli/Makefile

@@ -1,11 +1,8 @@
-.PHONY: build build-slipstream build-cli windows resolvers clean
+.PHONY: build windows resolvers clean
 
 VERSION ?= dev
-RUST_DIR := ../app/src/main/rust/slipstream-rust
-SLIPSTREAM_BIN := $(RUST_DIR)/target/release/slipstream-client
 
 # CONFIG_ENCRYPTION_KEY: 64-char hex string for slipnet-enc:// decryption.
-# Same key used by the Rust build (see slipstream-client/build.rs).
 # Pass via: make CONFIG_ENCRYPTION_KEY=abc123...
 CONFIG_ENCRYPTION_KEY ?=
 
@@ -17,20 +14,9 @@ ifneq ($(CONFIG_ENCRYPTION_KEY),)
 	BUILD_TAGS += has_config_key
 endif
 
-# Default: full build (Rust + Go with embedded binary)
-build: build-slipstream build-cli
-
-build-slipstream:
-	CONFIG_ENCRYPTION_KEY=$(CONFIG_ENCRYPTION_KEY) \
-	cargo build --release --bin slipstream-client \
-		--features openssl-vendored,picoquic-minimal-build \
-		--manifest-path $(RUST_DIR)/Cargo.toml
-	mkdir -p embedded
-	gzip -9 -c $(SLIPSTREAM_BIN) > embedded/slipstream-client.gz
-
-build-cli: keygen resolvers
+build: keygen resolvers
 	CGO_ENABLED=0 garble -seed=random build \
-		-tags 'embed_slipstream $(BUILD_TAGS)' -trimpath \
+		-tags '$(BUILD_TAGS)' -trimpath \
 		-ldflags='$(LDFLAGS)' \
 		-o slipnet .
 
@@ -54,4 +40,3 @@ endif
 
 clean:
 	rm -f slipnet slipnet.exe key_generated.go resolvers.txt
-	rm -rf embedded/slipstream-client embedded/slipstream-client.gz

cli/embed_slipstream.go

@@ -48,7 +48,7 @@ func runInteractive() {
 		fmt.Printf("║          SlipNet CLI  %-25s  ║\n", version)
 		fmt.Println("╠══════════════════════════════════════════════════╣")
 		fmt.Println("║                                                  ║")
-		fmt.Println("║  1) Connect (DNSTT / NoizDNS / Slipstream)       ║")
+		fmt.Println("║  1) Connect (DNSTT / NoizDNS)                     ║")
 		fmt.Println("║  2) DNS Scanner                                  ║")
 		fmt.Println("║  3) DNS Scanner + E2E Test                       ║")
 		fmt.Println("║  4) Quick Scan (single IP)                       ║")
@@ -135,8 +135,8 @@ func interactiveConnectWithURI(uri string) {
 
 	var querySize int
 	var queryPadding int
-	// Query size and padding only apply to DNSTT/NoizDNS, not Slipstream
-	if profile.TunnelType != "ss" && profile.TunnelType != "slipstream_ssh" {
+	// Query size and padding apply to DNSTT/NoizDNS tunnel types
+	if profile.TunnelType == "dnstt" || profile.TunnelType == "dnstt_ssh" || profile.TunnelType == "sayedns" || profile.TunnelType == "sayedns_ssh" || profile.TunnelType == "" {
 		fmt.Println()
 		fmt.Println("  DNS query size (smaller = stealthier, slower):")
 		fmt.Println("    0) Full capacity (fastest, default)")

cli/embed_slipstream_stub.go

@@ -345,13 +345,6 @@ func connectWithParams(uri string, portOverride int, hostOverride string, dnsOve
 	switch profile.TunnelType {
 	case "dnstt", "dnstt_ssh", "sayedns", "sayedns_ssh":
 		// DNSTT/NoizDNS — handled below via noizdns/mobile
-	case "ss", "slipstream_ssh":
-		// Slipstream — handled via slipstream-client subprocess
-		if portOverride > 0 {
-			profile.Port = portOverride
-		}
-		connectSlipstream(profile, profile.Host, profile.Port)
-		return
 	case "ssh", "direct_ssh":
 		if portOverride > 0 {
 			profile.Port = portOverride
@@ -364,9 +357,9 @@ func connectWithParams(uri string, portOverride int, hostOverride string, dnsOve
 		}
 		connectSOCKS5(profile)
 		return
-	case "doh", "snowflake", "naive":
+	case "ss", "slipstream_ssh", "doh", "snowflake", "naive":
 		log.Fatalf("This config uses tunnel type %q which is not supported by the CLI.\n"+
-			"SlipNet CLI supports DNSTT, NoizDNS, Slipstream, SSH, and SOCKS5 tunnel types.\n"+
+			"SlipNet CLI supports DNSTT, NoizDNS, SSH, and SOCKS5 tunnel types.\n"+
 			"Use the SlipNet app for other tunnel types.", profile.TunnelType)
 	default:
 		if profile.TunnelType != "" {
@@ -806,7 +799,7 @@ func runScanCommand(args []string) {
 
 func printUsage() {
 	prog := filepath.Base(os.Args[0])
-	fmt.Fprintf(os.Stderr, `SlipNet CLI %s - Tunnel proxy (DNSTT, NoizDNS, Slipstream, SSH, SOCKS5)
+	fmt.Fprintf(os.Stderr, `SlipNet CLI %s - Tunnel proxy (DNSTT, NoizDNS, SSH, SOCKS5)
 
 Usage:
   %s [options] slipnet://BASE64...