netbird/.github/workflows/frontend-ui.yml

name: UI Frontend

on:
  pull_request:
    paths:
      - "client/ui/frontend/**"
      - "client/ui/i18n/**"
      - "client/ui/**/*.go"
      - ".github/workflows/frontend-ui.yml"
  push:
    branches:
      - main
      - "release-*"
    paths:
      - "client/ui/frontend/**"
      - "client/ui/i18n/**"
      - "client/ui/**/*.go"

permissions:
  contents: read

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}-${{ github.head_ref || github.actor_id }}
  cancel-in-progress: true

jobs:
  lint-and-build:
    name: Lint & Build
    runs-on: ubuntu-latest
    timeout-minutes: 15
    defaults:
      run:
        working-directory: client/ui/frontend
    steps:
      - name: Checkout repository
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false

      - name: Set up Node.js
        uses: actions/setup-node@v7
        with:
          node-version: "22"

      - name: Set up pnpm
        uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
        with:
          version: 11

      # Bindings are generated by wails3 from the Go service definitions and
      # are not checked in (see client/ui/frontend/bindings/). Without them,
      # typecheck/build fail on missing module imports.
      - name: Set up Go
        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
        with:
          go-version-file: "go.mod"
          cache: false

      # wails3 CLI links against GTK4 / WebKitGTK 6.0 via its internal/operatingsystem
      # package, so the dev libraries must be present before `go install`.
      - name: Install Wails Linux system dependencies
        run: |
          sudo apt-get update
          sudo apt-get install -y --no-install-recommends \
            pkg-config \
            libgtk-4-dev \
            libwebkitgtk-6.0-dev

      - name: Install wails3 CLI
        # Version derived from go.mod so the binding generator always matches
        # the wails runtime the daemon links against.
        working-directory: ${{ github.workspace }}
        run: |
          WAILS_VERSION=$(go list -m -f '{{.Version}}' github.com/wailsapp/wails/v3)
          go install github.com/wailsapp/wails/v3/cmd/wails3@$WAILS_VERSION

      - name: Get pnpm store directory
        id: pnpm-store
        run: echo "path=$(pnpm store path --silent)" >> "$GITHUB_OUTPUT"

      - name: Cache pnpm store
        uses: actions/cache@v6
        with:
          path: ${{ steps.pnpm-store.outputs.path }}
          key: ${{ runner.os }}-pnpm-${{ hashFiles('client/ui/frontend/pnpm-lock.yaml') }}
          restore-keys: |
            ${{ runner.os }}-pnpm-

      - name: Install dependencies
        run: pnpm install --frozen-lockfile --ignore-scripts

      - name: Generate Wails bindings
        run: pnpm run bindings

      - name: Lint, typecheck, format
        run: pnpm check

      - name: Build
        run: pnpm build