[datlechin]

Summary

• The UI-free crates move from linux/crates to core/crates (git mv, crate names unchanged). linux/crates keeps the app and a new tablepro-linux-platform.
• The Cargo workspace moves to the top of the repository: Cargo.toml, Cargo.lock, rust-toolchain.toml, rustfmt.toml, clippy.toml, deny.toml, .config/nextest.toml. deny.toml also checks the Windows and macOS targets.
• tablepro-linux-platform holds GSettings (AppSettings), the oo7 SecretStore and GLib's XDG paths (storage_paths, was StoragePaths::from_glib). Storage no longer links GLib or oo7.
• New SecretItem and SecretItems in tablepro_core::credentials. ApiKeyVault and TokenVault are blanket impls over it. The MCP token and AI key labels go through a SecretItemLabeler, translated by the app.
• Platform splits: FileIdentity in core (device and inode, /dev/fd with fstat on macOS, volume and file index on Windows), TCP_USER_TIMEOUT on Linux only, the safe write is a 0600 temp file + fsync + rename + directory fsync instead of g_file_set_contents_full, sync_directory in core.
• session reaches SSH through an SshTunnels trait the app passes in. The OpenSSH transport and the askpass helper build on Unix only.
• Drivers: SQLite bundled off Linux, DuckDB's replace lock is fcntl on Unix and LockFileEx on Windows, the MongoDB relay is Unix-only, Cassandra's relay serves no one off Linux, SQL Server integrated login uses SSPI (tiberius winauth) on Windows. Test helpers build on Windows, with the route proxy on loopback TCP there.
• Each boundary error enum has a stable code() (driver.timeout, ssh.host_key_changed, ...).
• Packaging: make-dist.sh writes the source tarball with git archive (workspace files, core/, linux/) in place of meson dist. Debian builds with --sourcedirectory=linux, the RPM sets _vpath_srcdir linux, the Flatpak module builds subdir: linux from core, linux and the root Cargo files.
• CI: new core.yml checks the core crates and runs tablepro-core's tests on windows-2025, windows-11-arm and macos-15. core/ and the root workspace files trigger the linux suite. Cache, JUnit, deny, shear and Secret Service paths follow the move.
• Docs: core/AGENTS.md, core/ARCHITECTURE.md (split from linux/ARCHITECTURE.md), core/docs/decisions/0001-shared-core.md. Linux ADRs 0006 and 0018 get only their Status line. No changelog fragment: nothing user-visible.
• Tests changed with the behavior: test_license_metadata.py (copyright names linux/data/...), test_check_packaging.py (workspace Cargo.toml above linux/), test_regression_names.py (scans core/crates), error_text/files.rs (write errors carry io::ErrorKind), the session and MCP tests that build ConnectServices (Arc<dyn SshTunnels>, process_id). The /proc and Unix-socket tests are cfg(unix) or Linux-only.

Test plan

• Docker ubuntu:26.04 arm64: cargo fmt --check, clippy with and without default features, meson compile, meson test under xvfb-run -a dbus-run-session, the Secret Service test.
• macOS native: clippy --all-targets on every core crate, cargo test -p tablepro-core -p tablepro-storage.
• cargo xwin check for x86_64-pc-windows-msvc and aarch64-pc-windows-msvc on every core crate, warnings denied.
• cargo deny, cargo shear, update-third-party-licenses.sh (no change), test_detect_changed_paths.py, actionlint and zizmor.