desktop.yml

name: Desktop

# Builds the Wails desktop app natively on each OS (Wails cannot be
# cross-compiled — it links each platform's native webview), packages a
# per-OS installer, and attaches them to the GitHub Release on version tags.
#
# This workflow is intentionally separate from release.yml (which builds the
# CLI/agent binaries + container image) so the desktop app can be iterated and
# triggered independently.

on:
  workflow_dispatch:
    inputs:
      version:
        description: 'Version label for the desktop build (e.g. v0.14.5). Defaults to "dev".'
        required: false
        type: string
  push:
    tags:
      - 'v*'

permissions:
  contents: write

concurrency:
  group: desktop-${{ github.ref }}
  cancel-in-progress: true

env:
  WAILS_VERSION: v2.12.0

jobs:
  build:
    name: Build (${{ matrix.name }})
    strategy:
      fail-fast: false
      matrix:
        include:
          # ubuntu-22.04 links against an older glibc for a broader-compatible
          # tarball; if libwebkit2gtk-4.1-dev is ever unavailable here, switch
          # to ubuntu-latest (the AppImage bundles webkit regardless).
          - name: linux
            os: ubuntu-22.04
          - name: macos
            os: macos-latest
          - name: windows
            os: windows-latest
    runs-on: ${{ matrix.os }}
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Set up Go
        uses: actions/setup-go@v5
        with:
          go-version-file: go.mod
          cache: true

      - name: Set up Node
        uses: actions/setup-node@v4
        with:
          node-version: '20'
          cache: npm
          cache-dependency-path: web/package-lock.json

      - name: Install Linux build dependencies
        if: matrix.name == 'linux'
        run: |
          sudo apt-get update
          sudo apt-get install -y libgtk-3-dev libwebkit2gtk-4.1-dev build-essential pkg-config

      - name: Install NSIS (Windows installer toolchain)
        if: matrix.name == 'windows'
        shell: pwsh
        run: |
          choco install nsis -y --no-progress
          "C:\Program Files (x86)\NSIS" | Out-File -FilePath $env:GITHUB_PATH -Encoding utf8 -Append

      - name: Install Wails CLI
        run: go install github.com/wailsapp/wails/v2/cmd/wails@${{ env.WAILS_VERSION }}

      - name: Resolve version
        id: version
        shell: bash
        run: |
          if [ "${{ github.event_name }}" = "workflow_dispatch" ] && [ -n "${{ inputs.version }}" ]; then
            echo "value=${{ inputs.version }}" >> "$GITHUB_OUTPUT"
          elif [[ "${GITHUB_REF}" == refs/tags/* ]]; then
            echo "value=${GITHUB_REF_NAME}" >> "$GITHUB_OUTPUT"
          else
            echo "value=dev" >> "$GITHUB_OUTPUT"
          fi

      # ---- Native builds (Wails picks the host's webview) ----
      - name: Build desktop app (Linux)
        if: matrix.name == 'linux'
        working-directory: desktop
        run: wails build -tags webkit2_41 -platform linux/amd64

      - name: Build desktop app (macOS, universal)
        if: matrix.name == 'macos'
        working-directory: desktop
        run: wails build -platform darwin/universal

      - name: Build desktop app (Windows + NSIS installer)
        if: matrix.name == 'windows'
        working-directory: desktop
        run: wails build -platform windows/amd64 -nsis

      # ---- Per-OS packaging ----
      - name: Package Linux (tarball + AppImage)
        if: matrix.name == 'linux'
        working-directory: desktop
        run: |
          set -euo pipefail
          # Always produce a portable tarball (needs host libwebkit2gtk-4.1).
          tar -czf build/bin/StacyVM-linux-amd64.tar.gz -C build/bin StacyVM

      - name: Package Linux AppImage (self-contained)
        if: matrix.name == 'linux'
        continue-on-error: true
        working-directory: desktop
        run: |
          set -euo pipefail
          APPDIR=StacyVM.AppDir
          mkdir -p "$APPDIR/usr/bin" "$APPDIR/usr/share/applications" "$APPDIR/usr/share/icons/hicolor/512x512/apps"
          cp build/bin/StacyVM "$APPDIR/usr/bin/StacyVM"
          cp build/appicon.png "$APPDIR/usr/share/icons/hicolor/512x512/apps/stacyvm.png"
          printf '[Desktop Entry]\nType=Application\nName=StacyVM\nExec=StacyVM\nIcon=stacyvm\nCategories=Development;\nTerminal=false\n' \
            > "$APPDIR/usr/share/applications/stacyvm.desktop"
          wget -q https://github.com/linuxdeploy/linuxdeploy/releases/download/continuous/linuxdeploy-x86_64.AppImage
          wget -q https://github.com/linuxdeploy/linuxdeploy-plugin-gtk/raw/master/linuxdeploy-plugin-gtk.sh
          chmod +x linuxdeploy-x86_64.AppImage linuxdeploy-plugin-gtk.sh
          ./linuxdeploy-x86_64.AppImage --appimage-extract-and-run \
            --appdir "$APPDIR" --plugin gtk --output appimage \
            --desktop-file "$APPDIR/usr/share/applications/stacyvm.desktop" \
            --icon-file build/appicon.png
          mv StacyVM*.AppImage build/bin/StacyVM-x86_64.AppImage

      - name: Package macOS DMG
        if: matrix.name == 'macos'
        working-directory: desktop
        run: |
          set -euo pipefail
          brew install create-dmg
          create-dmg \
            --volname "StacyVM" \
            --window-size 600 400 \
            --icon-size 100 \
            --icon "StacyVM.app" 150 200 \
            --app-drop-link 450 200 \
            "build/bin/StacyVM-macos-universal.dmg" \
            "build/bin/StacyVM.app" \
          || hdiutil create -volname "StacyVM" -srcfolder "build/bin/StacyVM.app" -ov -format UDZO "build/bin/StacyVM-macos-universal.dmg"

      - name: Upload build artifacts
        uses: actions/upload-artifact@v4
        with:
          name: stacyvm-desktop-${{ matrix.name }}
          if-no-files-found: warn
          path: |
            desktop/build/bin/*.AppImage
            desktop/build/bin/*.tar.gz
            desktop/build/bin/*.dmg
            desktop/build/bin/*-installer.exe

  release:
    name: Attach to GitHub Release
    needs: build
    if: startsWith(github.ref, 'refs/tags/')
    runs-on: ubuntu-latest
    permissions:
      contents: write
    steps:
      - name: Download all desktop artifacts
        uses: actions/download-artifact@v4
        with:
          path: artifacts
          merge-multiple: true

      - name: Upload desktop installers to the release
        env:
          GH_TOKEN: ${{ github.token }}
          TAG: ${{ github.ref_name }}
        run: |
          set -euo pipefail
          # release.yml may create the release first; create it here only if missing.
          gh release view "$TAG" --repo "$GITHUB_REPOSITORY" >/dev/null 2>&1 \
            || gh release create "$TAG" --repo "$GITHUB_REPOSITORY" --title "$TAG" --generate-notes \
            || true
          gh release upload "$TAG" artifacts/* --repo "$GITHUB_REPOSITORY" --clobber