pull · Jul 4, 2026 · Jul 4, 2026 · Jul 4, 2026 · Jul 4, 2026 · Jul 4, 2026
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -28,14 +28,9 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - uses: actions-rust-lang/setup-rust-toolchain@v1
-        with:
-          components: clippy
       - name: Install system dependencies
         if: ${{ matrix.run_on != 'windows-latest' }}
         run: script/bootstrap
-      - name: Machete
-        if: ${{ matrix.run_on == 'macos-latest' }}
-        uses: bnjbvr/[email protected]
       - name: Setup | Cache Cargo
         uses: actions/cache@v4
         with:
@@ -45,10 +40,8 @@ jobs:
             ~/.cargo/git/db/
             target/
           key: test-cargo-${{ matrix.target }}-${{ hashFiles('**/Cargo.lock') }}
-      - name: Lint
-        if: ${{ matrix.run_on == 'macos-latest' }}
-        run: |
-          cargo clippy --workspace --all-targets
+      - name: Install wasm-tools
+        run: cargo install wasm-tools --locked --version 1.251.0
       - name: Test Linux
         if: ${{ matrix.run_on == 'ubuntu-latest' }}
         run: |

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -4,6 +4,11 @@ on:
     tags:
       - "v*"
   workflow_dispatch:
+    inputs:
+      keep_build_cache:
+        description: "Restore and save Cargo build cache for faster release builds"
+        type: boolean
+        default: true
 
 permissions:
   contents: write
@@ -34,6 +39,10 @@ jobs:
             os: ubuntu-latest
             binary: onetcli
             archive: onetcli-x86_64-unknown-linux-gnu.tar.gz
+          - target: aarch64-unknown-linux-gnu
+            os: ubuntu-24.04-arm
+            binary: onetcli
+            archive: onetcli-aarch64-unknown-linux-gnu.tar.gz
           - target: x86_64-pc-windows-msvc
             os: windows-latest
             binary: onetcli.exe
@@ -53,9 +62,28 @@ jobs:
         if: runner.os == 'macOS'
         run: |
           df -h
-          sudo rm -rf /usr/local/lib/node_modules
-          sudo rm -rf ~/.npm ~/.nvm ~/Library/Caches
-          sudo rm -rf /System/Library/Frameworks/Python.framework
+
+          remove_path() {
+            local path="$1"
+            if [ -e "$path" ]; then
+              sudo rm -rf "$path" || echo "::warning::Failed to remove $path"
+            fi
+          }
+
+          remove_directory_contents() {
+            local path="$1"
+            if [ -d "$path" ]; then
+              sudo find "$path" -mindepth 1 -maxdepth 1 -exec rm -rf {} + \
+                || echo "::warning::Failed to remove some entries under $path"
+            fi
+          }
+
+          remove_path /usr/local/lib/node_modules
+          remove_path "$HOME/.npm"
+          remove_path "$HOME/.nvm"
+          remove_directory_contents "$HOME/Library/Caches"
+          remove_path /System/Library/Frameworks/Python.framework
+
           df -h
 
       - name: Install system dependencies (Linux)
@@ -73,15 +101,18 @@ jobs:
           cmake --version
 
       - name: Cache Cargo
+        if: ${{ github.event_name != 'workflow_dispatch' || inputs.keep_build_cache }}
         uses: actions/cache@v4
         with:
           path: |
             ~/.cargo/registry/index/
             ~/.cargo/registry/cache/
             ~/.cargo/git/db/
-          key: build-${{ matrix.target }}-${{ hashFiles('**/Cargo.lock') }}
+            target/
+          key: release-cargo-${{ runner.os }}-${{ matrix.target }}-${{ hashFiles('**/Cargo.lock') }}-${{ github.run_id }}
           restore-keys: |
-            build-${{ matrix.target }}-
+            release-cargo-${{ runner.os }}-${{ matrix.target }}-${{ hashFiles('**/Cargo.lock') }}-
+            release-cargo-${{ runner.os }}-${{ matrix.target }}-
 
       - name: Set environment variables
         shell: bash
@@ -94,6 +125,12 @@ jobs:
             echo "ONETCLI_VERSION=0.0.0-dev.$(git rev-parse --short HEAD)" >> "$GITHUB_ENV"
           fi
 
+          if [[ "${{ matrix.target }}" == "aarch64-unknown-linux-gnu" ]]; then
+            echo "CARGO_BUILD_JOBS=1" >> "$GITHUB_ENV"
+            echo "CARGO_PROFILE_RELEASE_LTO=false" >> "$GITHUB_ENV"
+            echo "CARGO_PROFILE_RELEASE_CODEGEN_UNITS=16" >> "$GITHUB_ENV"
+          fi
+
       - name: Verify secrets are set
         shell: bash
         env:
@@ -113,16 +150,19 @@ jobs:
         env:
           SUPABASE_URL: ${{ secrets.SUPABASE_URL }}
           SUPABASE_ANON_KEY: ${{ secrets.SUPABASE_ANON_KEY }}
-          ONETCLI_UPDATE_URL: ${{ secrets.ONETCLI_UPDATE_URL }}
-          ONETCLI_UPDATE_DOWNLOAD_URL: ${{ secrets.ONETCLI_UPDATE_DOWNLOAD_URL }}
-          ONETCLI_WECHAT_QR_URL: ${{ secrets.ONETCLI_WECHAT_QR_URL }}
-          ONETCLI_ALIPAY_QR_URL: ${{ secrets.ONETCLI_ALIPAY_QR_URL }}
-          ONETCLI_PAYPAL_QR_URL: ${{ secrets.ONETCLI_PAYPAL_QR_URL }}
-        run: cargo build --release -p main --target ${{ matrix.target }}
+          ONETCLI_PUBLIC_BASE_URL: ${{ vars.ONETCLI_PUBLIC_BASE_URL }}
+          ONETCLI_TEAM_MANAGEMENT_URL_TEMPLATE: ${{ vars.ONETCLI_TEAM_MANAGEMENT_URL_TEMPLATE }}
+        run: |
+          cargo --version
+          rustc --version
+          echo "CARGO_BUILD_JOBS=${CARGO_BUILD_JOBS:-}"
+          echo "CARGO_PROFILE_RELEASE_LTO=${CARGO_PROFILE_RELEASE_LTO:-}"
+          echo "CARGO_PROFILE_RELEASE_CODEGEN_UNITS=${CARGO_PROFILE_RELEASE_CODEGEN_UNITS:-}"
+          cargo build --release -p main --target ${{ matrix.target }}
 
 
       - name: Clean build artifacts (macOS)
-        if: runner.os == 'macOS'
+        if: ${{ runner.os == 'macOS' && github.event_name == 'workflow_dispatch' && inputs.keep_build_cache == false }}
         run: |
           rm -rf target/debug
           find target -name "incremental" -o -name "deps" -o -name "build" | xargs rm -rf || true
@@ -153,11 +193,99 @@ jobs:
           cp resources/linux/onetcli-512.png package/usr/share/icons/hicolor/512x515/apps/onetcli.png
           tar czf ${{ matrix.archive }} -C package .
 
+      - name: Install Linux packaging dependencies
+        if: matrix.target == 'x86_64-unknown-linux-gnu'
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y rpm
+
+      - name: Package Linux installers (x86_64)
+        if: matrix.target == 'x86_64-unknown-linux-gnu'
+        shell: bash
+        run: |
+          set -euo pipefail
+
+          PACKAGE_VERSION="${ONETCLI_VERSION//-/.}"
+          DEB_NAME="onetcli_${PACKAGE_VERSION}_amd64.deb"
+          RPM_NAME="onetcli-${PACKAGE_VERSION}-1.x86_64.rpm"
+          APPIMAGE_NAME="onetcli_${PACKAGE_VERSION}_amd64.AppImage"
+
+          rm -rf package-deb rpmbuild OnetCli.AppDir linuxdeploy-x86_64.AppImage
+
+          mkdir -p package-deb/DEBIAN
+          cp -a package/. package-deb/
+          cat > package-deb/DEBIAN/control <<EOF
+          Package: onetcli
+          Version: ${PACKAGE_VERSION}
+          Section: utils
+          Priority: optional
+          Architecture: amd64
+          Maintainer: feigeCode <[email protected]>
+          Homepage: https://github.com/feigeCode/onetcli
+          Description: One Net Client - Database, SSH, Terminal, AI Tools
+          EOF
+          dpkg-deb --root-owner-group --build package-deb "${DEB_NAME}"
+
+          RPM_ROOT="${PWD}/rpmbuild"
+          mkdir -p "${RPM_ROOT}"/{BUILD,BUILDROOT,RPMS,SOURCES,SPECS,SRPMS}
+          tar czf "${RPM_ROOT}/SOURCES/onetcli-${PACKAGE_VERSION}.tar.gz" -C package .
+          cat > "${RPM_ROOT}/SPECS/onetcli.spec" <<EOF
+          Name: onetcli
+          Version: ${PACKAGE_VERSION}
+          Release: 1%{?dist}
+          Summary: One Net Client - Database, SSH, Terminal, AI Tools
+          License: Apache-2.0
+          URL: https://github.com/feigeCode/onetcli
+          BuildArch: x86_64
+          Source0: %{name}-%{version}.tar.gz
+
+          %description
+          One Net Client - Database, SSH, Terminal, AI Tools.
+
+          %prep
+          mkdir -p %{_builddir}/%{name}-%{version}
+          tar -xzf %{SOURCE0} -C %{_builddir}/%{name}-%{version}
+
+          %build
+
+          %install
+          mkdir -p %{buildroot}
+          cp -a %{_builddir}/%{name}-%{version}/* %{buildroot}/
+
+          %files
+          /usr/bin/onetcli
+          /usr/share/applications/onetcli.desktop
+          /usr/share/icons/hicolor/128x128/apps/onetcli.png
+          /usr/share/icons/hicolor/256x256/apps/onetcli.png
+          /usr/share/icons/hicolor/512x515/apps/onetcli.png
+          EOF
+          rpmbuild --define "_topdir ${RPM_ROOT}" -bb "${RPM_ROOT}/SPECS/onetcli.spec"
+          generated_rpm="$(find "${RPM_ROOT}/RPMS" -name "onetcli-${PACKAGE_VERSION}-1*.x86_64.rpm" -print -quit)"
+          test -n "${generated_rpm}"
+          cp "${generated_rpm}" "${RPM_NAME}"
+
+          mkdir -p OnetCli.AppDir
+          cp -a package/. OnetCli.AppDir/
+          curl -L -o linuxdeploy-x86_64.AppImage \
+            https://github.com/linuxdeploy/linuxdeploy/releases/download/continuous/linuxdeploy-x86_64.AppImage
+          chmod +x linuxdeploy-x86_64.AppImage
+          VERSION="${PACKAGE_VERSION}" APPIMAGE_EXTRACT_AND_RUN=1 ./linuxdeploy-x86_64.AppImage \
+            --appdir OnetCli.AppDir \
+            --executable OnetCli.AppDir/usr/bin/onetcli \
+            --desktop-file resources/linux/onetcli.desktop \
+            --icon-file package/usr/share/icons/hicolor/512x515/apps/onetcli.png \
+            --output appimage
+          generated_appimage="$(find . -maxdepth 1 -name '*.AppImage' ! -name 'linuxdeploy-x86_64.AppImage' -print -quit)"
+          test -n "${generated_appimage}"
+          mv "${generated_appimage}" "${APPIMAGE_NAME}"
+
       - name: Package (Windows)
         if: runner.os == 'Windows'
         shell: pwsh
         run: |
-          Compress-Archive -Path "target/${{ matrix.target }}/release/${{ matrix.binary }}" -DestinationPath "${{ matrix.archive }}"
+          New-Item -ItemType Directory -Force package | Out-Null
+          Copy-Item "target/${{ matrix.target }}/release/${{ matrix.binary }}" "package/${{ matrix.binary }}"
+          Compress-Archive -Path "package/*" -DestinationPath "${{ matrix.archive }}"
 
       - name: Upload artifact
         uses: actions/upload-artifact@v4
@@ -172,6 +300,16 @@ jobs:
           name: onetcli-${{ matrix.target }}.dmg
           path: "*.dmg"
 
+      - name: Upload Linux installer artifacts
+        if: matrix.target == 'x86_64-unknown-linux-gnu'
+        uses: actions/upload-artifact@v4
+        with:
+          name: onetcli-linux-x86_64-installers
+          path: |
+            onetcli_*.deb
+            onetcli-*.rpm
+            onetcli_*.AppImage
+
   release:
     name: Create Release
     needs: build
@@ -193,9 +331,33 @@ jobs:
       - name: Generate checksums
         run: |
           cd artifacts
-          sha256sum onetcli-* > sha256sums.txt
+          shopt -s nullglob
+          release_files=(onetcli-* onetcli_*)
+          if [ "${#release_files[@]}" -eq 0 ]; then
+            echo "::error::No release artifacts found for checksum generation"
+            exit 1
+          fi
+          sha256sum "${release_files[@]}" > sha256sums.txt
           cat sha256sums.txt
 
+      - name: Write release metadata
+        run: |
+          node <<'NODE'
+          const fs = require("fs");
+          const releaseTag = process.env.GITHUB_REF_NAME;
+          const version = releaseTag.replace(/^v/, "");
+          fs.writeFileSync(
+            "artifacts/release-metadata.json",
+            `${JSON.stringify({ release_tag: releaseTag, version }, null, 2)}\n`,
+          );
+          NODE
+
+      - name: Upload release metadata
+        uses: actions/upload-artifact@v4
+        with:
+          name: release-metadata
+          path: artifacts/release-metadata.json
+
       - name: Create GitHub Release
         uses: softprops/action-gh-release@v2
         with:
@@ -205,4 +367,7 @@ jobs:
             artifacts/onetcli-*.tar.gz
             artifacts/onetcli-*.zip
             artifacts/onetcli-*.dmg
+            artifacts/onetcli_*.deb
+            artifacts/onetcli-*.rpm
+            artifacts/onetcli_*.AppImage
             artifacts/sha256sums.txt