Update build-cli.yml

Update pyproject.toml

Update uv.lock

Author: baseplate-admin

.github/workflows/build-cli.yml

@@ -14,8 +14,30 @@ on:
     workflow_dispatch:
 
 jobs:
-    build-linux:
-        runs-on: ubuntu-latest
+    build:
+        name: Build (${{ matrix.target }})
+        runs-on: ${{ matrix.os }}
+        strategy:
+            fail-fast: false
+            matrix:
+                include:
+                    # Linux AMD64
+                    - os: ubuntu-latest
+                      target: linux-amd64
+                      build_cmd: nuitka-linux
+                    # Linux ARM64
+                    - os: ubuntu-latest-arm
+                      target: linux-arm64
+                      build_cmd: nuitka-linux
+                    # Windows AMD64
+                    - os: windows-latest
+                      target: windows-amd64
+                      build_cmd: nuitka-windows
+                    # Windows ARM64 
+                    - os: windows-11-arm
+                      target: windows-arm64
+                      build_cmd: nuitka-windows
+
         defaults:
             run:
                 working-directory: ./src/cli
@@ -25,68 +47,33 @@ jobs:
               uses: actions/checkout@v6
 
             - name: Install uv
-              uses: astral-sh/setup-uv@v7
+              uses: astral-sh/setup-uv@v5
 
             - name: Install deps with uv
               run: uv sync --frozen
 
-            - name: Build
-              run: uv run poe nuitka-linux
+            - name: Build Binary
+              run: uv run poe ${{ matrix.build_cmd }}
 
             - name: Show build outputs
-              run: ls -la
+              shell: bash # Use bash for consistent listing across OS
+              run: ls -R .
 
-            - name: Verify Linux artifact exists
+            - name: Verify artifact exists
+              shell: bash
               run: |
                   if ! ls ./app* >/dev/null 2>&1; then
                     echo "No artifact found"; exit 1
                   else
                     echo "Found artifact(s):"; ls ./app*
                   fi
 
-            - name: Upload Linux CLI artifact
-              uses: actions/upload-artifact@v7
-              with:
-                  name: cli-linux
-                  path: ./src/cli/**/app*
-
-    build-windows:
-        runs-on: windows-latest
-        defaults:
-            run:
-                working-directory: ./src/cli
-
-        steps:
-            - name: Checkout repository
-              uses: actions/checkout@v6
-
-            - name: Install uv
-              uses: astral-sh/setup-uv@v7
-
-            - name: Install deps with uv
-              run: uv sync --frozen
-
-            - name: Build (Windows) via poe
-              run: uv run poe nuitka-windows
-
-            - name: Show build outputs
-              run: |
-                  Get-ChildItem -Path . -Recurse -File | Select-Object FullName
-              shell: powershell
-
-            - name: Verify Windows artifact exists
-              run: |
-                  $files = Get-ChildItem -Path . -Filter 'app*.exe' -Recurse -File
-                  if ($files.Count -eq 0) {
-                    Write-Error 'No exe found'
-                    exit 1
-                  } else {
-                    $files | ForEach-Object { Write-Host "Found: $($_.FullName)" }
-                  }
-              shell: powershell
-
-            - name: Upload Windows CLI artifact
-              uses: actions/upload-artifact@v7
+            - name: Upload CLI artifact
+              uses: actions/upload-artifact@v4
               with:
-                  name: cli-windows
-                  path: ./src/cli/**/app*.exe
+                  name: cli-${{ matrix.target }}
+                  path: |
+                    src/cli/app
+                    src/cli/app.bin
+                    src/cli/app.exe
+                  if-no-files-found: error

src/cli/pyproject.toml

@@ -10,7 +10,7 @@ dependencies = [
     # Http Client
     "requests>=2.32.0",
     # Encryption (AES-256-GCM + Argon2id KDF)
-    "cryptography>=44.0.0",
+    "cryptography==46.0.3",
     # ZIP with WinZip AES-256 support (matches web front-end)
     "pyzipper>=0.3.6",
     # Progress bars