feat: add desktop app (#3)

Author: wesbillman

.github/workflows/ci.yml

@@ -8,19 +8,87 @@ env:
   CARGO_TERM_COLOR: always
 
 jobs:
-  check:
+  rust-lint:
+    name: Rust Lint
     runs-on: ubuntu-latest
     timeout-minutes: 30
+    permissions:
+      contents: read
     steps:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
-      - uses: dtolnay/rust-toolchain@631a55b12751854ce901bb631d5902ceb48146f7 # stable
-        with:
-          components: rustfmt, clippy
+      - uses: cashapp/activate-hermit@e49f5cb4dd64ff0b0b659d1d8df499595451155a # v1
       - uses: Swatinem/rust-cache@ad397744b0d591a723ab90405b7247fac0e6b8db # v2
-      - run: cargo fmt --all -- --check
-      - run: cargo clippy --workspace --all-targets -- -D warnings
-      - run: cargo test --workspace
-      - run: cargo install cargo-audit --locked
-      - run: cargo audit --ignore RUSTSEC-2023-0071 --ignore RUSTSEC-2024-0384
-      - run: cargo install cargo-deny --locked
-      - run: cargo deny check
+      - name: Format check
+        run: just fmt-check
+      - name: Clippy
+        run: just clippy
+
+  unit-tests:
+    name: Unit Tests
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+      - uses: cashapp/activate-hermit@e49f5cb4dd64ff0b0b659d1d8df499595451155a # v1
+      - uses: Swatinem/rust-cache@ad397744b0d591a723ab90405b7247fac0e6b8db # v2
+      - name: Unit tests
+        run: just test-unit
+
+  desktop:
+    name: Desktop
+    runs-on: ubuntu-latest
+    timeout-minutes: 45
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+      - uses: cashapp/activate-hermit@e49f5cb4dd64ff0b0b659d1d8df499595451155a # v1
+      - uses: Swatinem/rust-cache@ad397744b0d591a723ab90405b7247fac0e6b8db # v2
+        with:
+          workspaces: desktop/src-tauri
+      - name: Install Tauri dependencies (Linux)
+        env:
+          DEBIAN_FRONTEND: noninteractive
+        run: |
+          sudo apt-get update \
+            -o Acquire::Retries=3 \
+            -o Acquire::http::Timeout=30 \
+            -o Acquire::https::Timeout=30
+          sudo apt-get install -y --no-install-recommends \
+            -o Acquire::Retries=3 \
+            -o Acquire::http::Timeout=30 \
+            -o Acquire::https::Timeout=30 \
+            -o DPkg::Lock::Timeout=120 \
+            build-essential \
+            curl \
+            file \
+            libayatana-appindicator3-dev \
+            libgtk-3-dev \
+            librsvg2-dev \
+            libssl-dev \
+            libwebkit2gtk-4.1-dev \
+            libxdo-dev \
+            patchelf \
+            wget
+      - name: Install desktop dependencies
+        run: just desktop-install-ci
+      - name: Desktop lint and format
+        run: just desktop-check
+      - name: Desktop build
+        run: just desktop-build
+      - name: Desktop Tauri check
+        run: just desktop-tauri-check
+
+  security:
+    name: Security
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+      - uses: cashapp/activate-hermit@e49f5cb4dd64ff0b0b659d1d8df499595451155a # v1
+      - name: Dependency policy
+        run: cargo-deny check

CONTRIBUTING.md

@@ -39,8 +39,11 @@ unacceptable behavior to **conduct@sprout-relay.org**.
 | Tool | Version | Notes |
 |------|---------|-------|
 | Rust | 1.88+ | Install via [rustup](https://rustup.rs/) |
+| Node.js | 24+ | Required for desktop app commands and `just ci` |
+| pnpm | 10+ | Required for desktop app commands and `just ci` |
 | Docker | 24+ | For MySQL, Redis, Typesense |
 | `just` | latest | Task runner — `cargo install just` |
+| `lefthook` | latest | Optional; run `lefthook install` for local Git hooks |
 | `sqlx-cli` | latest | Optional; `just migrate` falls back to `docker exec` |
 
 This repo uses [Hermit](https://cashapp.github.io/hermit/) for toolchain
@@ -68,6 +71,9 @@ cp .env.example .env
 
 # 4. Start infrastructure + run migrations
 just setup
+
+# 5. Install Git hooks (optional, recommended)
+lefthook install
 ```
 
 `just setup` starts Docker services (MySQL on `:3306`, Redis on `:6379`,
@@ -134,7 +140,7 @@ Before opening a PR, run the full CI gate locally:
 
 ```bash
 just ci
-# Runs: fmt-check + clippy + unit tests
+# Runs: check + unit tests + desktop build + Tauri check
 ```
 
 This is the same check that runs in CI. PRs that fail `just ci` will not be

Cargo.toml

@@ -14,6 +14,7 @@ members = [
     "crates/sprout-admin",
     "crates/sprout-workflow",
 ]
+exclude = ["desktop/src-tauri"]
 resolver = "2"
 
 [workspace.package]

README.md

@@ -193,7 +193,7 @@ Set `SPROUT_PRIVATE_KEY` (nsec format) to use a persistent identity.
 
 ## Development
 
-**Prerequisites:** Rust 1.88+, Docker, [`just`](https://github.com/casey/just)
+**Prerequisites:** Rust 1.88+, Docker, Node.js 24+, pnpm 10+, [`just`](https://github.com/casey/just)
 
 This repo uses [Hermit](https://cashapp.github.io/hermit/) for toolchain pinning. Activate with:
 
@@ -206,11 +206,15 @@ This repo uses [Hermit](https://cashapp.github.io/hermit/) for toolchain pinning
 ```bash
 just setup          # Start Docker services + run migrations
 just relay          # Run the relay (dev mode)
-just build          # Build entire workspace
-just check          # fmt-check + clippy
+just build          # Build the Rust workspace
+just desktop-install # Install desktop dependencies
+just desktop-dev    # Run the desktop web UI only
+just desktop-app    # Run the Tauri desktop app
+just desktop-ci     # Desktop check + build + Tauri Rust check
+just check          # Rust fmt/clippy + desktop check
 just test-unit      # Unit tests (no infra required)
 just test           # All tests (starts services if needed)
-just ci             # fmt-check + clippy + unit tests (CI gate)
+just ci             # check + unit tests + desktop build + Tauri check
 just migrate        # Run pending migrations
 just down           # Stop Docker services (keep data)
 just reset          # ⚠️  Wipe all data and recreate environment

bin/.rust@1.88.pkg bin/.cargo-deny-0.19.0.pkgbin/.rust@1.88.pkg renamed to bin/.cargo-deny-0.19.0.pkg

@@ -0,0 +1 @@
+hermit

bin/.lefthook-2.1.3.pkg

@@ -0,0 +1 @@
+hermit

bin/.node-24.14.0.pkg

@@ -0,0 +1 @@
+hermit

bin/.pnpm-10.31.0.pkg

@@ -0,0 +1 @@
+hermit

bin/.rustup-1.28.2.pkg

@@ -1 +1 @@
-.rust@1.88.pkg
+.rustup-1.28.2.pkg