Merge develop into master

.cargo/config.toml

@@ -0,0 +1,11 @@
+# Cargo configuration for cross compilation aliases
+
+[alias]
+# Target platform aliases for cross compilation
+linux-x64 = "build --target x86_64-unknown-linux-gnu"
+linux-arm = "build --target aarch64-unknown-linux-gnu"
+# windows-x64 = "build --target x86_64-pc-windows-msvc"  # Use CI/CD for Windows builds
+
+# Combined cross-compilation command (Linux only)
+cross-all = ["build --target x86_64-unknown-linux-gnu",
+             "build --target aarch64-unknown-linux-gnu"]

.github/CLAUDE.md

@@ -0,0 +1,11 @@
+<claude-mem-context>
+# Recent Activity
+
+<!-- This section is auto-generated by claude-mem. Edit content outside the tags. -->
+
+### Jan 29, 2026
+
+| ID | Time | T | Title | Read |
+|----|------|---|-------|------|
+| #244 | 12:16 AM | 🔴 | Fixed multiple GitHub Actions test failures in keyring-cli | ~381 |
+</claude-mem-context>

.github/workflows/CLAUDE.md

@@ -0,0 +1,13 @@
+<claude-mem-context>
+# Recent Activity
+
+<!-- This section is auto-generated by claude-mem. Edit content outside the tags. -->
+
+### Jan 29, 2026
+
+| ID | Time | T | Title | Read |
+|----|------|---|-------|------|
+| #260 | 12:35 AM | 🔴 | Fixed GitHub Actions Windows compatibility issues | ~281 |
+| #251 | 12:19 AM | 🔴 | Fixed Test Coverage workflow missing dependencies | ~264 |
+| #250 | " | 🔴 | Fixed Windows MSRV check shell conflict in security workflow | ~284 |
+</claude-mem-context>

.github/workflows/build.yml

@@ -31,51 +31,50 @@ jobs:
         uses: actions/cache@v4
         with:
           path: ~/.cargo/registry
-          key: ${{ runner.os }}-cargo-registry-${{ hashFiles('**/Cargo.lock') }}
+          key: build-${{ runner.os }}-cargo-registry-${{ hashFiles('**/Cargo.lock') }}
 
       - name: Cache cargo index
         uses: actions/cache@v4
         with:
           path: ~/.cargo/git
-          key: ${{ runner.os }}-cargo-index-${{ hashFiles('**/Cargo.lock') }}
+          key: build-${{ runner.os }}-cargo-index-${{ hashFiles('**/Cargo.lock') }}
 
       - name: Cache cargo build
         uses: actions/cache@v4
         with:
-          path: keyring-cli/target
-          key: ${{ runner.os }}-cargo-build-target-${{ hashFiles('**/Cargo.lock') }}
+          path: target
+          key: build-${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
 
       - name: Build for x86_64
         run: |
-          cd keyring-cli
           cargo build --target x86_64-apple-darwin --release --verbose
 
       - name: Build for aarch64
         run: |
-          cd keyring-cli
           cargo build --target aarch64-apple-darwin --release --verbose
 
       - name: Create universal binary
         run: |
+          mkdir -p target/universal-apple-darwin-release
           lipo -create \
-            keyring-cli/target/x86_64-apple-darwin/release/ok \
-            keyring-cli/target/aarch64-apple-darwin/release/ok \
-            -output keyring-cli/target/universal-apple-darwin-release/ok
-          chmod +x keyring-cli/target/universal-apple-darwin-release/ok
+            target/x86_64-apple-darwin/release/ok \
+            target/aarch64-apple-darwin/release/ok \
+            -output target/universal-apple-darwin-release/ok
+          chmod +x target/universal-apple-darwin-release/ok
 
       - name: Strip binary
-        run: strip -x keyring-cli/target/universal-apple-darwin-release/ok
+        run: strip -x target/universal-apple-darwin-release/ok
 
       - name: Upload macOS universal binary
         uses: actions/upload-artifact@v4
         with:
           name: ok-macos-universal
-          path: keyring-cli/target/universal-apple-darwin-release/ok
+          path: target/universal-apple-darwin-release/ok
 
       - name: Create archive
         if: startsWith(github.ref, 'refs/tags/v')
         run: |
-          cd keyring-cli/target/universal-apple-darwin-release
+          cd target/universal-apple-darwin-release
           tar czf ok-macos-universal.tar.gz ok
           mv ok-macos-universal.tar.gz ../../../
 
@@ -98,38 +97,32 @@ jobs:
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@stable
 
-      - name: Install dependencies
-        run: |
-          sudo apt-get update
-          sudo apt-get install -y pkg-config libssl-dev
-
       - name: Cache cargo
         uses: actions/cache@v4
         with:
           path: |
             ~/.cargo/registry
             ~/.cargo/git
-            keyring-cli/target
-          key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
+            target
+          key: build-${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
 
       - name: Build
         run: |
-          cd keyring-cli
           cargo build --release --verbose
 
       - name: Strip binary
-        run: strip keyring-cli/target/release/ok
+        run: strip target/release/ok
 
       - name: Upload Linux binary
         uses: actions/upload-artifact@v4
         with:
           name: ok-linux-x86_64
-          path: keyring-cli/target/release/ok
+          path: target/release/ok
 
       - name: Create archive
         if: startsWith(github.ref, 'refs/tags/v')
         run: |
-          cd keyring-cli/target/release
+          cd target/release
           tar czf ok-linux-x86_64.tar.gz ok
           mv ok-linux-x86_64.tar.gz ../../../
 
@@ -165,29 +158,28 @@ jobs:
           path: |
             ~/.cargo/registry
             ~/.cargo/git
-            keyring-cli/target
-          key: ${{ runner.os }}-cargo-arm64-${{ hashFiles('**/Cargo.lock') }}
+            target
+          key: build-${{ runner.os }}-cargo-arm64-${{ hashFiles('**/Cargo.lock') }}
 
       - name: Build
         run: |
-          cd keyring-cli
           CC=aarch64-linux-gnu-gcc \
           CARGO_TARGET_AARCH64_UNKNOWN_LINUX_GNU_LINKER=aarch64-linux-gnu-gcc \
             cargo build --target aarch64-unknown-linux-gnu --release --verbose
 
       - name: Strip binary
-        run: aarch64-linux-gnu-strip keyring-cli/target/aarch64-unknown-linux-gnu/release/ok
+        run: aarch64-linux-gnu-strip target/aarch64-unknown-linux-gnu/release/ok
 
       - name: Upload Linux ARM64 binary
         uses: actions/upload-artifact@v4
         with:
           name: ok-linux-aarch64
-          path: keyring-cli/target/aarch64-unknown-linux-gnu/release/ok
+          path: target/aarch64-unknown-linux-gnu/release/ok
 
       - name: Create archive
         if: startsWith(github.ref, 'refs/tags/v')
         run: |
-          cd keyring-cli/target/aarch64-unknown-linux-gnu/release
+          cd target/aarch64-unknown-linux-gnu/release
           tar czf ok-linux-aarch64.tar.gz ok
           mv ok-linux-aarch64.tar.gz ../../../
 
@@ -201,7 +193,7 @@ jobs:
   # Build for Windows
   build-windows:
     name: Build Windows (x86_64)
-    runs-on: windows-latest
+    runs-on: windows-2022
 
     defaults:
       run:
@@ -220,24 +212,23 @@ jobs:
           path: |
             ~/.cargo/registry
             ~/.cargo/git
-            keyring-cli/target
-          key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
+            target
+          key: build-${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
 
       - name: Build
         run: |
-          cd keyring-cli
           cargo build --release --verbose
 
       - name: Upload Windows binary
         uses: actions/upload-artifact@v4
         with:
           name: ok-windows-x86_64
-          path: keyring-cli/target/release/ok.exe
+          path: target/release/ok.exe
 
       - name: Create archive
         if: startsWith(github.ref, 'refs/tags/v')
         run: |
-          Compress-Archive -Path keyring-cli\target\release\ok.exe -DestinationPath ok-windows-x86_64.zip
+          Compress-Archive -Path target\release\ok.exe -DestinationPath ok-windows-x86_64.zip
 
       - name: Upload release asset
         if: startsWith(github.ref, 'refs/tags/v')
@@ -249,7 +240,7 @@ jobs:
   # Build for Windows ARM64
   build-windows-arm64:
     name: Build Windows (ARM64)
-    runs-on: windows-latest
+    runs-on: windows-2022
 
     defaults:
       run:
@@ -270,24 +261,23 @@ jobs:
           path: |
             ~/.cargo/registry
             ~/.cargo/git
-            keyring-cli/target
-          key: ${{ runner.os }}-cargo-arm64-${{ hashFiles('**/Cargo.lock') }}
+            target
+          key: build-${{ runner.os }}-cargo-arm64-${{ hashFiles('**/Cargo.lock') }}
 
       - name: Build
         run: |
-          cd keyring-cli
           cargo build --target aarch64-pc-windows-msvc --release --verbose
 
       - name: Upload Windows ARM64 binary
         uses: actions/upload-artifact@v4
         with:
           name: ok-windows-aarch64
-          path: keyring-cli/target/aarch64-pc-windows-msvc/release/ok.exe
+          path: target/aarch64-pc-windows-msvc/release/ok.exe
 
       - name: Create archive
         if: startsWith(github.ref, 'refs/tags/v')
         run: |
-          Compress-Archive -Path keyring-cli\target\aarch64-pc-windows-msvc\release\ok.exe -DestinationPath ok-windows-aarch64.zip
+          Compress-Archive -Path target\aarch64-pc-windows-msvc\release\ok.exe -DestinationPath ok-windows-aarch64.zip
 
       - name: Upload release asset
         if: startsWith(github.ref, 'refs/tags/v')
@@ -296,50 +286,3 @@ jobs:
           files: ok-windows-aarch64.zip
           generate_release_notes: true
 
-  # Run tests
-  test:
-    name: Run Tests
-    runs-on: ${{ matrix.os }}
-    strategy:
-      matrix:
-        os: [ubuntu-latest, macos-latest, windows-latest]
-        rust: [stable]
-
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v4
-
-      - name: Install Rust toolchain
-        uses: dtolnay/rust-toolchain@master
-        with:
-          toolchain: ${{ matrix.rust }}
-
-      - name: Install dependencies (Linux)
-        if: runner.os == 'Linux'
-        run: |
-          sudo apt-get update
-          sudo apt-get install -y pkg-config libssl-dev
-
-      - name: Cache cargo
-        uses: actions/cache@v4
-        with:
-          path: |
-            ~/.cargo/registry
-            ~/.cargo/git
-            keyring-cli/target
-          key: ${{ runner.os }}-test-${{ hashFiles('**/Cargo.lock') }}
-
-      - name: Run tests
-        run: |
-          cd keyring-cli
-          cargo test --verbose --all-features
-
-      - name: Run clippy
-        run: |
-          cd keyring-cli
-          cargo clippy -- -D warnings
-
-      - name: Check formatting
-        run: |
-          cd keyring-cli
-          cargo fmt -- --check

.github/workflows/coverage.yml

@@ -0,0 +1,61 @@
+name: Test Coverage
+
+on:
+  push:
+    branches: [ master, develop ]
+  pull_request:
+    branches: [ master, develop ]
+
+jobs:
+  coverage:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Install dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y bc jq
+
+      - name: Install Rust toolchain
+        uses: dtolnay/rust-toolchain@stable
+
+      - name: Cache dependencies
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.cargo/registry
+            ~/.cargo/git
+            target
+          key: coverage-${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
+
+      - name: Run tests with coverage
+        run: |
+          cargo install cargo-tarpaulin
+          cargo tarpaulin --features test-env --out Html --out Json --output-dir coverage --timeout 300 --verbose
+
+      - name: Upload coverage report
+        uses: actions/upload-artifact@v4
+        with:
+          name: coverage-report
+          path: coverage/
+
+      - name: Check coverage threshold
+        run: |
+          COVERAGE=$(jq '.coverage // 0' coverage/tarpaulin.json 2>/dev/null || echo "0")
+          echo "Coverage: $COVERAGE%"
+          if (( $(echo "$COVERAGE < 80" | bc -l) )); then
+            echo "❌ Coverage below 80% (current: $COVERAGE%)"
+            exit 1
+          else
+            echo "✅ Coverage at $COVERAGE%"
+          fi
+
+      - name: Add coverage summary
+        run: |
+          COVERAGE=$(jq '.coverage // 0' coverage/tarpaulin.json 2>/dev/null || echo "0")
+          echo "## Test Coverage" >> $GITHUB_STEP_SUMMARY
+          echo "Current coverage: **$COVERAGE%**" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "Target: 80%+ for M1 v0.1 release" >> $GITHUB_STEP_SUMMARY