feat: xray support

.github/workflows/release.yml

@@ -124,7 +124,7 @@ jobs:
         if: matrix.platform == 'ubuntu-22.04' || matrix.platform == 'ubuntu-22.04-arm'
         run: |
           sudo apt-get update
-          sudo apt-get install -y libwebkit2gtk-4.1-dev libgtk-3-dev libayatana-appindicator3-dev librsvg2-dev libxdo-dev pkg-config xdg-utils
+          sudo apt-get install -y libwebkit2gtk-4.1-dev libgtk-3-dev libayatana-appindicator3-dev librsvg2-dev libxdo-dev pkg-config unzip xdg-utils
 
       - name: Rust cache
         uses: swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #v2.9.1
@@ -139,7 +139,7 @@ jobs:
         # from secrets explicitly — they are NOT inherited from the job env.
         env:
           NEXT_PUBLIC_TURNSTILE: ${{ secrets.NEXT_PUBLIC_TURNSTILE }}
-        run: pnpm exec next build
+        run: pnpm build
 
       - name: Verify frontend dist exists
         shell: bash
@@ -172,6 +172,9 @@ jobs:
             chmod +x src-tauri/binaries/donut-proxy-${{ matrix.target }}
           fi
 
+      - name: Download verified Xray-core sidecar
+        run: node src-tauri/download-xray.mjs --target ${{ matrix.target }}
+
       - name: Import Apple certificate
         if: matrix.platform == 'macos-latest'
         env:
@@ -245,6 +248,9 @@ jobs:
 
           # Copy sidecar binaries
           cp "src-tauri/target/${{ matrix.target }}/release/donut-proxy.exe" "$PORTABLE_DIR/"
+          cp "src-tauri/binaries/xray-${{ matrix.target }}.exe" "$PORTABLE_DIR/xray.exe"
+          mkdir -p "$PORTABLE_DIR/licenses"
+          cp "src-tauri/binaries/xray-LICENSE.txt" "$PORTABLE_DIR/licenses/Xray-core-LICENSE.txt"
           # The daemon is currently disabled (no Cargo bin target), so it isn't
           # built. Copy it only if a build produced it, so the absent binary
           # doesn't fail the job.