feat: add independent managed SSH agent packages

Managed SSH previously tied remote Agent and Runtime artifacts to desktop
packaging and Host activation. Settings now manages verified Linux x64 and
arm64 .gbagent packages explicitly, with source-aligned download and update
plus offline import and export. Each package contains the signed Agent, pinned
Node, and compatible OpenCode Runtime, and project activation never downloads
one automatically.

Dedicated native CI and a protected release workflow publish deterministic,
signed cumulative catalogs to GitHub and Beijing OSS without replacing the
desktop Latest release. Desktop packaging is metadata-only, remains independent
of Agent artifacts and signing credentials, and Linux desktop releases add RPM
installers.

The managed SSH path also keeps model credentials in Main, enforces Ask as
read-only, verifies signed Agent and Runtime inputs, preserves ACP recovery, and
reports Host update cancellation and failures accurately.

Release note: 远程项目现可在“设置”中手动下载、更新或离线导入签名 Agent 包，桌面安装包与远程组件发布相互独立；Linux 桌面版同时新增 RPM 安装包。

sites/README.md

@@ -85,9 +85,9 @@ https://github.com/mesalogo/goodbuddy/releases/latest
 安装包文件名必须与发布生成器完全一致：Windows 使用
 `GoodBuddy-${version}-windows-${arch}-setup.exe` 与
 `GoodBuddy-${version}-windows-${arch}-portable.zip`；macOS 使用
-`GoodBuddy-${version}-mac-${arch}.dmg|zip`；Linux x64 的 AppImage 与
-DEB 分别使用 electron-builder 的 `x86_64` 与 `amd64` 架构名，Linux
-arm64 使用 `arm64`。
+`GoodBuddy-${version}-mac-${arch}.dmg|zip`；Linux x64 的 AppImage、DEB 与
+RPM 分别使用 electron-builder 的 `x86_64`、`amd64` 与 `x86_64` 架构名。
+Linux arm64 的 AppImage/DEB 使用 `arm64`，RPM 使用 `aarch64`。
 
 ## 字体与可访问性
 

sites/app.js

@@ -49,6 +49,7 @@
     zip: "ZIP",
     AppImage: "AppImage",
     deb: "DEB",
+    rpm: "RPM",
   };
 
   const formatFileSize = (bytes) => {

sites/en.html

@@ -274,7 +274,7 @@
               <div class="platform-icon">
                 <img src="./assets/linux-plain.svg" alt="" />
               </div>
-              <div><h3>Linux</h3><p>x64 / arm64 · AppImage / DEB</p></div>
+              <div><h3>Linux</h3><p>x64 / arm64 · AppImage / DEB / RPM</p></div>
               <a
                 class="button button--download"
                 href="https://github.com/mesalogo/goodbuddy/releases/latest"

sites/index.html

@@ -314,7 +314,7 @@
               <div class="platform-icon">
                 <img src="./assets/linux-plain.svg" alt="" />
               </div>
-              <div><h3>Linux</h3><p>x64 / arm64 · AppImage / DEB</p></div>
+              <div><h3>Linux</h3><p>x64 / arm64 · AppImage / DEB / RPM</p></div>
               <div class="download-options" data-download-card="linux">
                 <label>
                   <span>处理器</span>
@@ -328,6 +328,7 @@
                   <select data-download-format aria-label="Linux 安装包类型">
                     <option value="AppImage">AppImage（推荐）</option>
                     <option value="deb">DEB</option>
+                    <option value="rpm">RPM</option>
                   </select>
                 </label>
               </div>

sites/release-index.js

@@ -34,12 +34,12 @@
     "linux-x64": Object.freeze({
       platform: "linux",
       arch: "x64",
-      formats: Object.freeze(["AppImage", "deb"]),
+      formats: Object.freeze(["AppImage", "deb", "rpm"]),
     }),
     "linux-arm64": Object.freeze({
       platform: "linux",
       arch: "arm64",
-      formats: Object.freeze(["AppImage", "deb"]),
+      formats: Object.freeze(["AppImage", "deb", "rpm"]),
     }),
   });
   const targetKeys = Object.freeze(Object.keys(targetDefinitions));
@@ -78,10 +78,12 @@
 
     const artifactArch =
       arch === "x64"
-        ? format === "AppImage"
-          ? "x86_64"
-          : "amd64"
-        : arch;
+        ? format === "deb"
+          ? "amd64"
+          : "x86_64"
+        : format === "rpm"
+          ? "aarch64"
+          : "arm64";
     return `GoodBuddy-${version}-linux-${artifactArch}.${format}`;
   };
 

sites/scripts/release-index.test.mjs

@@ -16,8 +16,8 @@ const definitions = [
   ["windows", "arm64", ["nsis", "portable"]],
   ["macos", "x64", ["dmg", "zip"]],
   ["macos", "arm64", ["dmg", "zip"]],
-  ["linux", "x64", ["AppImage", "deb"]],
-  ["linux", "arm64", ["AppImage", "deb"]],
+  ["linux", "x64", ["AppImage", "deb", "rpm"]],
+  ["linux", "arm64", ["AppImage", "deb", "rpm"]],
 ];
 
 const canonicalFileName = (version, platform, arch, format) => {
@@ -41,10 +41,12 @@ const canonicalFileName = (version, platform, arch, format) => {
     "linux-x64": {
       AppImage: `GoodBuddy-${version}-linux-x86_64.AppImage`,
       deb: `GoodBuddy-${version}-linux-amd64.deb`,
+      rpm: `GoodBuddy-${version}-linux-x86_64.rpm`,
     },
     "linux-arm64": {
       AppImage: `GoodBuddy-${version}-linux-arm64.AppImage`,
       deb: `GoodBuddy-${version}-linux-arm64.deb`,
+      rpm: `GoodBuddy-${version}-linux-aarch64.rpm`,
     },
   };
   return names[`${platform}-${arch}`][format];

sites/scripts/validate.mjs

@@ -501,7 +501,7 @@ const expectedDownloadOptions = {
   },
   linux: {
     arches: ["x64", "arm64"],
-    formats: ["AppImage", "deb"],
+    formats: ["AppImage", "deb", "rpm"],
   },
 };
 for (const [platform, expected] of Object.entries(expectedDownloadOptions)) {
@@ -598,7 +598,7 @@ for (const asset of cssAssets) {
 }
 
 report(
-  !/<a\b[^>]*href="[^"]+\.(?:exe|dmg|zip|AppImage|deb)(?:[?#][^"]*)?"/i.test(
+  !/<a\b[^>]*href="[^"]+\.(?:exe|dmg|zip|AppImage|deb|rpm)(?:[?#][^"]*)?"/i.test(
     `${html}\n${englishHtml}`,
   ),
   "具体安装资产链接应由 OSS 发布索引动态提供",