feat: light/dark theme system, ShortcutField i18n, dark-mode styling

.github/workflows/build-unsigned.yml

@@ -0,0 +1,100 @@
+name: Build Tauri App (Unsigned)
+
+on:
+  workflow_dispatch:
+
+permissions:
+  contents: write
+
+jobs:
+  build:
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - platform: 'macos-latest'
+            args: '--target x86_64-apple-darwin'
+            target: 'x86_64-apple-darwin'
+          - platform: 'macos-latest'
+            args: '--target aarch64-apple-darwin'
+            target: 'aarch64-apple-darwin'
+          - platform: 'windows-latest'
+            args: ''
+          - platform: 'ubuntu-24.04'
+            args: ''
+          - platform: 'ubuntu-24.04-arm'
+            args: ''
+
+    runs-on: ${{ matrix.platform }}
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v1
+        with:
+          bun-version: latest
+
+      - name: Install Rust stable
+        uses: dtolnay/rust-toolchain@stable
+        with:
+          targets: ${{ matrix.target || '' }}
+
+      - name: Rust cache
+        uses: swatinem/rust-cache@v2
+        with:
+          workspaces: './src-tauri -> target'
+
+      - name: Install dependencies (Ubuntu only)
+        if: contains(matrix.platform, 'ubuntu-24.04')
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y libwebkit2gtk-4.1-dev libappindicator3-dev librsvg2-dev patchelf libudev-dev xdg-utils
+
+      - name: Import self-signed signing cert (macOS only)
+        if: contains(matrix.platform, 'macos')
+        run: |
+          echo "${{ secrets.SELF_SIGNED_CERT_P12 }}" | base64 --decode > /tmp/penio-signing.p12
+          security create-keychain -p "peniosigning" build.keychain
+          security default-keychain -s build.keychain
+          security unlock-keychain -p "peniosigning" build.keychain
+          security set-keychain-settings -u build.keychain
+          security import /tmp/penio-signing.p12 -k build.keychain -P "peniosigning" -T /usr/bin/codesign
+          security set-key-partition-list -S apple-tool:,apple: -s -k "peniosigning" build.keychain
+          security list-keychains -d user -s build.keychain
+          rm /tmp/penio-signing.p12
+
+      - name: Install frontend dependencies
+        run: bun install
+
+      - name: Get version from tauri.conf.json
+        id: get_version
+        shell: bash
+        run: |
+          VERSION=$(cat src-tauri/tauri.conf.json | grep -o '"version": *"[^"]*"' | head -1 | sed 's/"version": *"\(.*\)"/\1/')
+          echo "version=$VERSION" >> $GITHUB_OUTPUT
+          echo "Version: $VERSION"
+
+      - name: Build the app
+        uses: tauri-apps/tauri-action@v0
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          tagName: v${{ steps.get_version.outputs.version }}
+          releaseName: 'Penio v${{ steps.get_version.outputs.version }} (Unsigned)'
+          releaseBody: |
+            ## Install Instructions
+
+            **macOS** — The app is ad-hoc signed but not notarized. After dragging to Applications:
+            - Right-click the app → **Open** → click Open in the dialog, OR
+            - If you still see "damaged", run in Terminal:
+              ```
+              sudo xattr -rd com.apple.quarantine /Applications/Penio.app
+              ```
+
+            **Windows** — If SmartScreen appears, click "More info" → "Run anyway".
+
+            **Linux** — `.deb` for Debian/Ubuntu, `.rpm` for Fedora/RHEL, `.AppImage` runs without install.
+          releaseDraft: true
+          prerelease: false
+          args: ${{ matrix.args }}

.npmrc

@@ -0,0 +1,2 @@
+save-exact=true
+legacy-peer-deps=true