fix: resolve all CI/CD workflow failures

CRITICAL fixes:
- build.yml: Add mkdir -p before lipo to create output directory
- clipboard_test.rs: Add #[cfg(target_os)] guards to platform-specific imports/tests
- security.yml: Fix binary name (keyring-cli -> ok)

IMPORTANT fixes:
- commands/mod.rs: Add #[allow(unused_imports)] to pub use statements

MINOR improvements:
- security.yml, coverage.yml: Standardize to dtolnay/rust-toolchain@stable
- coverage.yml: Combine HTML+JSON in single tarpaulin run, read from file

Fixes issues from code review:
- macOS universal build: lipo failed due to missing directory
- Test compilation: Platform-specific imports caused errors on Linux/Windows
- Security verification: Wrong binary name meant checks weren't running

Co-Authored-By: Claude (glm-4.7) <noreply@anthropic.com>

Author: alphaqiu

.github/workflows/build.yml

@@ -55,6 +55,7 @@ jobs:
 
       - name: Create universal binary
         run: |
+          mkdir -p target/universal-apple-darwin-release
           lipo -create \
             target/x86_64-apple-darwin/release/ok \
             target/aarch64-apple-darwin/release/ok \

.github/workflows/coverage.yml

@@ -14,9 +14,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Install Rust toolchain
-        uses: actions-rust-lang/setup-rust-toolchain@v1
-        with:
-          toolchain: stable
+        uses: dtolnay/rust-toolchain@stable
 
       - name: Cache dependencies
         uses: actions/cache@v4
@@ -30,7 +28,7 @@ jobs:
       - name: Run tests with coverage
         run: |
           cargo install cargo-tarpaulin
-          cargo tarpaulin --out Html --output-dir coverage --timeout 300 --verbose
+          cargo tarpaulin --out Html --out Json --output-dir coverage --timeout 300 --verbose
 
       - name: Upload coverage report
         uses: actions/upload-artifact@v4
@@ -40,7 +38,7 @@ jobs:
 
       - name: Check coverage threshold
         run: |
-          COVERAGE=$(cargo tarpaulin --out Json 2>/dev/null | jq '.coverage // 0' || echo "0")
+          COVERAGE=$(jq '.coverage // 0' coverage/tarpaulin.json 2>/dev/null || echo "0")
           echo "Coverage: $COVERAGE%"
           if (( $(echo "$COVERAGE < 80" | bc -l) )); then
             echo "❌ Coverage below 80% (current: $COVERAGE%)"
@@ -51,7 +49,7 @@ jobs:
 
       - name: Add coverage summary
         run: |
-          COVERAGE=$(cargo tarpaulin --out Json 2>/dev/null | jq '.coverage // 0' || echo "0")
+          COVERAGE=$(jq '.coverage // 0' coverage/tarpaulin.json 2>/dev/null || echo "0")
           echo "## Test Coverage" >> $GITHUB_STEP_SUMMARY
           echo "Current coverage: **$COVERAGE%**" >> $GITHUB_STEP_SUMMARY
           echo "" >> $GITHUB_STEP_SUMMARY

.github/workflows/security.yml

@@ -26,10 +26,10 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Install Rust toolchain
-        uses: actions-rust-lang/setup-rust-toolchain@v1
+        uses: dtolnay/rust-toolchain@stable
         with:
           toolchain: stable
-          target: ${{ matrix.target }}
+          targets: ${{ matrix.target }}
 
       - name: Cache dependencies
         uses: actions/cache@v4
@@ -48,7 +48,7 @@ jobs:
         if: runner.os != 'Windows'
         run: |
           echo "Checking for test environment variables in release binary..."
-          if grep -r "OK_MASTER_PASSWORD\|OK_CONFIG_DIR\|OK_DATA_DIR" target/release/keyring-cli 2>/dev/null; then
+          if grep -r "OK_MASTER_PASSWORD\|OK_CONFIG_DIR\|OK_DATA_DIR" target/release/ok 2>/dev/null; then
             echo "❌ ERROR: Test environment variables leaked to release!"
             exit 1
           fi
@@ -59,7 +59,7 @@ jobs:
         shell: pwsh
         run: |
           Write-Host "Checking for test environment variables in release binary..."
-          $binaryPath = "target\release\keyring-cli.exe"
+          $binaryPath = "target\release\ok.exe"
           if (Test-Path $binaryPath) {
             $content = Get-Content $binaryPath -Raw -Encoding ASCII
             if ($content -match "OK_MASTER_PASSWORD|OK_CONFIG_DIR|OK_DATA_DIR") {

src/tui/commands/mod.rs

@@ -9,10 +9,16 @@ mod update;
 mod delete;
 mod search;
 
+// Re-export command handlers for external use
+#[allow(unused_imports)]
 pub use list::handle_list;
+#[allow(unused_imports)]
 pub use show::handle_show;
+#[allow(unused_imports)]
 pub use new::handle_new;
+#[allow(unused_imports)]
 pub use update::handle_update;
+#[allow(unused_imports)]
 pub use delete::handle_delete;
 pub use search::handle_search;
 

tests/clipboard_test.rs

@@ -1,12 +1,17 @@
 #[cfg(target_os = "linux")]
 use keyring_cli::clipboard::linux::LinuxClipboard;
+
+#[cfg(target_os = "macos")]
 use keyring_cli::clipboard::macos::MacOSClipboard;
-use keyring_cli::clipboard::manager::{ClipboardConfig, ClipboardManager};
+
 #[cfg(target_os = "windows")]
 use keyring_cli::clipboard::windows::WindowsClipboard;
+
+use keyring_cli::clipboard::manager::{ClipboardConfig, ClipboardManager};
 use keyring_cli::clipboard::ClipboardService;
 use std::time::Duration;
 
+#[cfg(target_os = "macos")]
 #[test]
 fn test_macos_clipboard() {
     let mut clipboard = MacOSClipboard;
@@ -49,9 +54,10 @@ fn test_linux_clipboard() {
     assert_eq!(clipboard.timeout(), Duration::from_secs(45));
 }
 
+#[cfg(target_os = "macos")]
 #[test]
 fn test_clipboard_service() {
-    let mut macos_clipboard = MacOSClipboard;
+    let macos_clipboard = MacOSClipboard;
     let config = ClipboardConfig {
         timeout_seconds: 60,
         clear_after_copy: true,
@@ -70,9 +76,10 @@ fn test_clipboard_service() {
     assert!(service.clear_clipboard().is_ok());
 }
 
+#[cfg(target_os = "macos")]
 #[test]
 fn test_content_length_limit() {
-    let mut macos_clipboard = MacOSClipboard;
+    let macos_clipboard = MacOSClipboard;
     let config = ClipboardConfig {
         timeout_seconds: 30,
         clear_after_copy: true,