feat: plugins, sync UI, daemon sidecar, tests, release pipeline

.github/workflows/ci.yml

@@ -11,103 +11,92 @@ env:
 
 jobs:
   test:
-    name: Test
+    name: Test — ${{ matrix.os }}
     runs-on: ${{ matrix.os }}
     strategy:
+      fail-fast: false
       matrix:
         os: [ubuntu-22.04, macos-latest, windows-latest]
-        rust: [stable]
 
     steps:
-      - name: Checkout code
+      - name: Checkout
         uses: actions/checkout@v4
 
-      - name: Install system dependencies (Linux)
+      - name: Install Linux system dependencies
         if: matrix.os == 'ubuntu-22.04'
         run: |
           sudo apt-get update
-          sudo apt-get install -y libgtk-3-dev libwebkit2gtk-4.0-dev libappindicator3-dev librsvg2-dev patchelf
-
-      - name: Install Rust
-        uses: actions-rs/toolchain@v1
+          sudo apt-get install -y \
+            libgtk-3-dev \
+            libwebkit2gtk-4.0-dev \
+            libappindicator3-dev \
+            librsvg2-dev \
+            patchelf \
+            libssl-dev \
+            pkg-config
+
+      - name: Install Rust stable
+        uses: dtolnay/rust-toolchain@stable
         with:
-          profile: minimal
-          toolchain: ${{ matrix.rust }}
-          override: true
           components: rustfmt, clippy
 
-      - name: Cache cargo registry
-        uses: actions/cache@v3
-        with:
-          path: ~/.cargo/registry
-          key: ${{ runner.os }}-cargo-registry-${{ hashFiles('**/Cargo.lock') }}
-
-      - name: Cache cargo index
-        uses: actions/cache@v3
-        with:
-          path: ~/.cargo/git
-          key: ${{ runner.os }}-cargo-index-${{ hashFiles('**/Cargo.lock') }}
-
-      - name: Cache cargo build
-        uses: actions/cache@v3
-        with:
-          path: target
-          key: ${{ runner.os }}-cargo-build-target-${{ hashFiles('**/Cargo.lock') }}
-
-      - name: Run cargo check
-        run: cargo check --all --verbose
+      - name: Cache Rust build
+        uses: Swatinem/rust-cache@v2
 
-      - name: Run cargo test
-        run: cargo test --all --verbose
+      # Run tests on all workspace crates except the Tauri desktop app
+      # (it requires a display server / windowing environment to build)
+      - name: Run tests
+        run: cargo test --workspace --exclude openpaste-desktop
 
-      - name: Run cargo clippy
-        run: cargo clippy --all -- -D warnings
+      - name: Run clippy
+        run: cargo clippy --workspace --exclude openpaste-desktop -- -D warnings
 
-      - name: Run cargo fmt
+      - name: Check formatting
         run: cargo fmt --all -- --check
 
-  build:
-    name: Build
+  build-desktop:
+    name: Build desktop — ${{ matrix.os }}
     runs-on: ${{ matrix.os }}
     strategy:
+      fail-fast: false
       matrix:
         os: [ubuntu-22.04, macos-latest, windows-latest]
-        rust: [stable]
 
     steps:
-      - name: Checkout code
+      - name: Checkout
         uses: actions/checkout@v4
 
-      - name: Install system dependencies (Linux)
+      - name: Install Linux system dependencies
         if: matrix.os == 'ubuntu-22.04'
         run: |
           sudo apt-get update
-          sudo apt-get install -y libgtk-3-dev libwebkit2gtk-4.0-dev libappindicator3-dev librsvg2-dev patchelf
-
-      - name: Install Rust
-        uses: actions-rs/toolchain@v1
+          sudo apt-get install -y \
+            libgtk-3-dev \
+            libwebkit2gtk-4.0-dev \
+            libappindicator3-dev \
+            librsvg2-dev \
+            patchelf \
+            libssl-dev \
+            pkg-config
+
+      - name: Install Rust stable
+        uses: dtolnay/rust-toolchain@stable
+
+      - name: Cache Rust build
+        uses: Swatinem/rust-cache@v2
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
         with:
-          profile: minimal
-          toolchain: ${{ matrix.rust }}
-          override: true
-
-      - name: Cache cargo registry
-        uses: actions/cache@v3
-        with:
-          path: ~/.cargo/registry
-          key: ${{ runner.os }}-cargo-registry-${{ hashFiles('**/Cargo.lock') }}
-
-      - name: Cache cargo index
-        uses: actions/cache@v3
-        with:
-          path: ~/.cargo/git
-          key: ${{ runner.os }}-cargo-index-${{ hashFiles('**/Cargo.lock') }}
-
-      - name: Cache cargo build
-        uses: actions/cache@v3
-        with:
-          path: target
-          key: ${{ runner.os }}-cargo-build-target-${{ hashFiles('**/Cargo.lock') }}
-
-      - name: Run cargo build
-        run: cargo build --all --release --verbose
+          node-version: '20'
+          cache: 'npm'
+          cache-dependency-path: apps/desktop/package-lock.json
+
+      - name: Install frontend dependencies
+        working-directory: apps/desktop
+        run: npm ci
+
+      # cargo check is enough for CI — tauri-action handles the full build in release.yml
+      - name: Check Tauri app
+        working-directory: apps/desktop/src-tauri
+        run: cargo check

.github/workflows/release.yml

@@ -0,0 +1,117 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+permissions:
+  contents: write
+
+env:
+  CARGO_TERM_COLOR: always
+  RUST_BACKTRACE: 1
+
+jobs:
+  # ── Build + release matrix ─────────────────────────────────────────────────
+  build:
+    name: Build — ${{ matrix.label }}
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          # macOS Apple Silicon
+          - os: macos-latest
+            label: macOS-arm64
+            target: aarch64-apple-darwin
+            tauri_args: --target aarch64-apple-darwin
+
+          # macOS Intel
+          - os: macos-13
+            label: macOS-x64
+            target: x86_64-apple-darwin
+            tauri_args: --target x86_64-apple-darwin
+
+          # Windows x64
+          - os: windows-latest
+            label: Windows-x64
+            target: x86_64-pc-windows-msvc
+            tauri_args: ''
+
+          # Linux x64 (AppImage + deb)
+          - os: ubuntu-22.04
+            label: Linux-x64
+            target: x86_64-unknown-linux-gnu
+            tauri_args: ''
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      # ── System dependencies ─────────────────────────────────────────────
+      - name: Install Linux system dependencies
+        if: matrix.os == 'ubuntu-22.04'
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y \
+            libgtk-3-dev \
+            libwebkit2gtk-4.0-dev \
+            libappindicator3-dev \
+            librsvg2-dev \
+            patchelf \
+            libssl-dev \
+            pkg-config
+
+      # ── Rust ────────────────────────────────────────────────────────────
+      - name: Install Rust stable
+        uses: dtolnay/rust-toolchain@stable
+        with:
+          targets: ${{ matrix.target }}
+
+      - name: Cache Rust build
+        uses: Swatinem/rust-cache@v2
+        with:
+          key: ${{ matrix.target }}
+
+      # ── Node ────────────────────────────────────────────────────────────
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: 'npm'
+          cache-dependency-path: apps/desktop/package-lock.json
+
+      - name: Install frontend dependencies
+        working-directory: apps/desktop
+        run: npm ci
+
+      # ── Build daemon (must exist before Tauri build so the app can spawn it)
+      - name: Build daemon
+        run: cargo build --bin openpaste-daemon --release --target ${{ matrix.target }}
+
+      # ── Tauri build ─────────────────────────────────────────────────────
+      - name: Build Tauri app
+        uses: tauri-apps/tauri-action@v0
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          # Code-signing (optional — set these secrets to sign your builds)
+          # macOS
+          APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}
+          APPLE_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
+          APPLE_SIGNING_IDENTITY: ${{ secrets.APPLE_SIGNING_IDENTITY }}
+          APPLE_ID: ${{ secrets.APPLE_ID }}
+          APPLE_PASSWORD: ${{ secrets.APPLE_PASSWORD }}
+          APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
+          # Windows
+          TAURI_PRIVATE_KEY: ${{ secrets.TAURI_PRIVATE_KEY }}
+          TAURI_KEY_PASSWORD: ${{ secrets.TAURI_KEY_PASSWORD }}
+        with:
+          projectPath: apps/desktop
+          tagName: ${{ github.ref_name }}
+          releaseName: 'OpenPaste ${{ github.ref_name }}'
+          releaseBody: |
+            See [CHANGELOG.md](https://github.com/${{ github.repository }}/blob/main/CHANGELOG.md) for details.
+          releaseDraft: true
+          prerelease: false
+          args: ${{ matrix.tauri_args }}

CHANGELOG.md

@@ -0,0 +1,34 @@
+# Changelog
+
+All notable changes to OpenPaste are documented here.
+
+The format follows [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
+OpenPaste uses [Semantic Versioning](https://semver.org/).
+
+---
+
+## [Unreleased]
+
+## [0.1.0] — 2026-07-10
+
+### Added
+- Clipboard history capture with 500 ms polling (text + images)
+- SQLite storage with FTS5 full-text search
+- AES-256-GCM encryption with Argon2id key derivation
+- Auto-lock vault after configurable inactivity timeout
+- Pin and favorite items
+- Color-coded tags with sidebar filter
+- WASM plugin system (wasmtime sandbox) — auto-loads `.wasm` files from the plugins directory
+- Cross-device sync via HTTP push/pull relay server (`clipboard-api`)
+- Global shortcuts: `⌘⇧V` show/hide, `⌘⇧C` quick-paste
+- System tray with Show, Quick Paste, and Quit menu items
+- Hide-to-tray on window close
+- Launch at login (macOS LaunchAgent)
+- `openpaste` CLI: list, search, copy, get, pin, favorite, delete, status
+- Daemon auto-spawned by the desktop app; probe-before-spawn avoids double-start
+- Settings panel: max items, retention days, refresh interval, notifications, encryption toggle
+- Sync configuration UI (server URL, API token, enable toggle, Sync Now)
+- Plugin Manager UI (load from file picker, list loaded plugins, unload)
+- 26 automated tests (clipboard-db + clipboard-encryption)
+- GitHub Actions CI (test + build-desktop, all platforms)
+- GitHub Actions release workflow (macOS arm64/x64, Windows x64, Linux x64)