Migrate from Tauri to Electron

.github/actions/install-desktop-deps/action.yml

@@ -19,7 +19,6 @@ runs:
       run: |
         sudo apt update
         sudo apt install -y --no-install-recommends \
-          libwebkit2gtk-4.1-dev \
           build-essential \
           pkg-config \
           curl \

.github/workflows/ci.yml

@@ -1,4 +1,8 @@
 name: "CI"
+
+permissions:
+  contents: read
+
 on:
   push:
     branches:
@@ -19,14 +23,14 @@ jobs:
     runs-on: ubuntu-latest
     outputs:
       rust: ${{ steps.filter.outputs.rust }}
-      tauri-plugins: ${{ steps.filter.outputs.tauri-plugins }}
+      desktop: ${{ steps.filter.outputs.desktop }}
       branch: ${{ steps.branch.outputs.branch }}
     steps:
       - name: Checkout
         uses: actions/checkout@v4
 
       - name: Check for changes
-        uses: dorny/paths-filter@v2
+        uses: dorny/paths-filter@v3
         id: filter
         with:
           filters: |
@@ -37,17 +41,14 @@ jobs:
               - '.github/**'
               - 'apps/cli/**'
               - 'crates/**'
-              - 'apps/desktop/src-tauri/**'
+              - 'apps/desktop/src-backend/**'
               - 'Cargo.toml'
               - 'Cargo.lock'
-            tauri-plugins:
-              - 'Cargo.lock'
-              - 'pnpm-lock.yaml'
 
       - name: Output branch name
         id: branch
         run: |
-          echo "branch=${{ env.BRANCH_NAME }}" >> $GITHUB_OUTPUT
+          echo "branch=${{ env.BRANCH_NAME }}" >> "$GITHUB_OUTPUT"
 
   typecheck:
     name: Typecheck
@@ -147,24 +148,22 @@ jobs:
 
       - name: Create .env file in root
         run: |
-          echo "VITE_ENVIRONMENT=production" >> .env
-          echo "CAP_DESKTOP_SENTRY_URL=https://6a3b6a09e6ae976c2ad6fff710e88748@o4506859771527168.ingest.us.sentry.io/4508330917101568" >> .env
-          echo "NEXT_PUBLIC_WEB_URL=${{ secrets.NEXT_PUBLIC_WEB_URL }}" >> .env
-          echo 'NEXTAUTH_URL=${{ secrets.NEXT_PUBLIC_WEB_URL }}' >> .env
-          echo 'VITE_OPENPANEL_CLIENT_ID=${{ secrets.VITE_OPENPANEL_CLIENT_ID }}' >> .env
-          echo 'VITE_OPENPANEL_API_URL=${{ secrets.VITE_OPENPANEL_API_URL }}' >> .env
-          echo 'VITE_SERVER_URL=${{ secrets.NEXT_PUBLIC_WEB_URL }}' >> .env
-
-          cat .env >> $GITHUB_ENV
+          {
+            echo "VITE_ENVIRONMENT=production"
+            echo "CAP_DESKTOP_SENTRY_URL=https://6a3b6a09e6ae976c2ad6fff710e88748@o4506859771527168.ingest.us.sentry.io/4508330917101568"
+            echo "NEXT_PUBLIC_WEB_URL=${{ secrets.NEXT_PUBLIC_WEB_URL }}"
+            echo 'NEXTAUTH_URL=${{ secrets.NEXT_PUBLIC_WEB_URL }}'
+            echo 'VITE_OPENPANEL_CLIENT_ID=${{ secrets.VITE_OPENPANEL_CLIENT_ID }}'
+            echo 'VITE_OPENPANEL_API_URL=${{ secrets.VITE_OPENPANEL_API_URL }}'
+            echo 'VITE_SERVER_URL=${{ secrets.NEXT_PUBLIC_WEB_URL }}'
+          } >> .env
+
+          cat .env >> "$GITHUB_ENV"
 
       - name: Run setup
         shell: bash
         run: node scripts/setup.js
 
-      - name: Build desktop binaries
-        shell: bash
-        run: ./scripts/build-desktop-binaries.sh ${{ matrix.settings.target }}
-
       - name: Run Clippy
         run: cargo clippy --workspace --all-features --locked -- -D warnings
 
@@ -199,6 +198,10 @@ jobs:
     env:
       TURBO_TOKEN: ${{ secrets.TURBO_TOKEN }}
       TURBO_TEAM: ${{ secrets.TURBO_TEAM }}
+      # CI validates release-mode compilation and packaging without paying the
+      # production profile's full-LTO cost on every pull request.
+      CARGO_PROFILE_RELEASE_LTO: "false"
+      CARGO_PROFILE_RELEASE_CODEGEN_UNITS: "16"
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
@@ -216,20 +219,19 @@ jobs:
 
       - name: Create .env file in root
         run: |
-          echo "VITE_ENVIRONMENT=production" >> .env
-          echo "CAP_DESKTOP_SENTRY_URL=https://6a3b6a09e6ae976c2ad6fff710e88748@o4506859771527168.ingest.us.sentry.io/4508330917101568" >> .env
-          echo "NEXT_PUBLIC_WEB_URL=${{ secrets.NEXT_PUBLIC_WEB_URL }}" >> .env
-          echo 'NEXTAUTH_URL=${{ secrets.NEXT_PUBLIC_WEB_URL }}' >> .env
-          echo 'VITE_OPENPANEL_CLIENT_ID=${{ secrets.VITE_OPENPANEL_CLIENT_ID }}' >> .env
-          echo 'VITE_OPENPANEL_API_URL=${{ secrets.VITE_OPENPANEL_API_URL }}' >> .env
-          echo 'VITE_SERVER_URL=${{ secrets.NEXT_PUBLIC_WEB_URL }}' >> .env
+          {
+            echo "VITE_ENVIRONMENT=production"
+            echo "CAP_DESKTOP_SENTRY_URL=https://6a3b6a09e6ae976c2ad6fff710e88748@o4506859771527168.ingest.us.sentry.io/4508330917101568"
+            echo "NEXT_PUBLIC_WEB_URL=${{ secrets.NEXT_PUBLIC_WEB_URL }}"
+            echo 'NEXTAUTH_URL=${{ secrets.NEXT_PUBLIC_WEB_URL }}'
+            echo 'VITE_OPENPANEL_CLIENT_ID=${{ secrets.VITE_OPENPANEL_CLIENT_ID }}'
+            echo 'VITE_OPENPANEL_API_URL=${{ secrets.VITE_OPENPANEL_API_URL }}'
+            echo 'VITE_SERVER_URL=${{ secrets.NEXT_PUBLIC_WEB_URL }}'
+          } >> .env
 
       - name: Copy .env to apps/desktop
         run: cp .env apps/desktop/.env
 
-      - name: Output .env file
-        run: cat apps/desktop/.env
-
       - name: Run cap-setup
         shell: bash
         run: pnpm -w cap-setup
@@ -242,27 +244,19 @@ jobs:
 
       - name: Build app
         working-directory: apps/desktop
-        run: pnpm tauri build --debug --target ${{ matrix.settings.target }} --no-bundle
+        shell: bash
+        run: |
+          pnpm run preparescript
+          pnpm build
+          pnpm build:electron-main
+          if [[ "$RUNNER_OS" == "macOS" ]]; then
+            pnpm exec electron-builder --dir --mac --arm64
+          else
+            pnpm exec electron-builder --dir --win --x64
+          fi
         env:
           RUST_TARGET_TRIPLE: ${{ matrix.settings.target }}
-
-  tauri-plugins:
-    name: Verify Tauri plugin versions
-    runs-on: ubuntu-latest
-    needs: changes
-    if: needs.changes.outputs.tauri-plugins == 'true'
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-
-      - name: Setup node
-        uses: actions/setup-node@v3
-        with:
-          node-version: 20
-
-      - name: Run verify
-        shell: bash
-        run: node scripts/check-tauri-plugin-versions.js
+          CSC_IDENTITY_AUTO_DISCOVERY: false
 
   rust-cache:
     name: Rust cache
@@ -294,7 +288,7 @@ jobs:
           save-cache: true
 
       - name: Setup node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: 24