feat: Linux support — platform abstraction, systemd autostart, Secret Service keyring, CI matrix

[daviirodrig]

Overview

Makes the server and desktop build/run properly on Linux without touching the polished macOS flow. macOS behavior is identical to before.

---

What changed

Backend — platform abstraction (crates/server/src/platform/)

Replaced scattered #[cfg(target_os = "macos")] blocks with a proper platform module:

• platform/mod.rs — pure TargetOs enum + PlatformLabels struct + platform_labels(os) function (fully testable without a host OS). Exposes autostart_info / install / restart that delegate to the right platform impl.
• platform/macos.rs — existing LaunchAgent logic, now isolated behind #[cfg(target_os = "macos")] mod macos. No Linux compiler warnings.
• platform/linux.rs — systemd user service: install writes ~/.config/systemd/user/projectus.service, runs systemctl --user enable --now; restart delegates to systemctl --user restart; status checks is-active --quiet. Suggests loginctl enable-linger but never calls it automatically. No sudo.

daemon.rs

DaemonStatus gains:

field	purpose
plataforma	"macOS" / "Linux" / "sistema atual"
autostart_nome	"LaunchAgent" / "systemd user service"
service_path	replaces plist; absolute path to the service file
instalacao_manual	hint script path for manual install

status(), install(), restart() now fully delegate — no cfg in daemon.rs.

Cargo deps

[target.'cfg(target_os = "macos")'.dependencies]
keyring = { version = "3", features = ["apple-native"] }
libc = "0.2"

[target.'cfg(target_os = "linux")'.dependencies]
keyring = { version = "3", features = ["sync-secret-service"] }

Eliminates unused-import warnings on Linux. Linux uses DBus Secret Service (GNOME Keyring / KWallet).

domain.rs + storage.rs

• BackupCredentialStatus gains store_nome ("Keychain" / "Secret Service")
• ApiCapabilities gains data_root (absolute path) and data_root_label (~-expanded path), filled by storage.bootstrap()

UI

All hardcoded macOS strings replaced by API data:

Before	After
"Salva no Keychain do macOS"	"Salva no {credentialStore}"
"fixar credenciais no Keychain"	"fixar credenciais no {credentialStore}"
"autostart instalado no macOS"	"autostart instalado via {daemon.autostart_nome}"
"execute ./scripts/instalar-autostart.sh"	"use o botão instalar ou {daemon.instalacao_manual}"
~/Documents/PROJECTUS (hardcoded)	capacidades.data_root_label (real path, ~-expanded)

Scripts

script	behavior
instalar-autostart.sh	bash dispatcher → *-macos.sh or *-linux.sh
remover-autostart.sh	bash dispatcher → *-macos.sh or *-linux.sh
instalar-autostart-macos.sh	original zsh LaunchAgent logic, unchanged
remover-autostart-macos.sh	original zsh logic, unchanged
instalar-autostart-linux.sh	systemctl --user, no sudo
remover-autostart-linux.sh	disable + rm + daemon-reload
instalar.sh	early exit on Linux with helpful message
build-linux.sh	pnpm build + cargo release + tauri deb,appimage
check-tauri-linux-deps.sh	pkg-config probe; prints Arch/Debian install commands on failure

CI (.github/workflows/ci.yml)

Three jobs on every push/PR to main:

• web (Ubuntu): typecheck + test + build
• rust-linux (Ubuntu): libdbus-1-dev, cargo test --workspace, release build
• rust-macos (macOS): cargo test --workspace, release build

---

Tests

4 new unit tests in platform/mod.rs:

• daemon_status_on_linux_reports_systemd_user_service
• daemon_status_on_macos_reports_launch_agent
• credential_store_label_matches_platform
• manual_install_message_mentions_correct_script

All tests pass (cargo test --workspace: 16 passed, pnpm test --run: 16 passed).

---

Linux quick start (server only)

pnpm install
pnpm build
cargo build --release -p projectus-server
PROJECTUS_WEB_DIST="$PWD/apps/web/dist" ./target/release/projectus-server
# → http://127.0.0.1:4387

Autostart:

./scripts/instalar-autostart.sh
systemctl --user status projectus.service

Secret Service (R2 credentials): requires GNOME Keyring or KWallet running. Headless environments get a clear error, no panic.