build-desktop-reusable.yml

name: "@Desktop • Build App"

on:
  workflow_call:
  workflow_dispatch:
    inputs:
      ref:
        description: |
          If you run this manually, and want to run on a PR, the correct ref should be refs/pull/{PR_NUMBER}/merge to
          have the "normal" scenario involving checking out a merge commit between your branch and the base branch.
          If you want to run only on a branch or specific commit, you can use either the sha or the branch name instead (prefer the first verion for PRs).
        type: string
        required: false
      login:
        description: The GitHub username that triggered the workflow
        type: string
        required: false
      base_ref:
        description: The base branch to merge the head into when checking out the code
        type: string
        required: false

permissions:
  id-token: write
  contents: read
  pull-requests: write

jobs:
  build-desktop-app:
    strategy:
      fail-fast: false
      matrix:
        config:
          [
            { name: "linux", os: "ledger-live-4xlarge", image: "linux-x86_64.AppImage" },
            { name: "win", os: "windows-2022", dotnet: true, image: "win-x64.exe" },
            { name: "mac", os: "macos-14", image: "mac.dmg" },
          ]
    name: "Build LLD | ${{ matrix.config.name }}"
    runs-on: ${{ matrix.config.os }}
    outputs:
      linux: ${{ steps.status.outputs.linux }}
      win: ${{ steps.status.outputs.win }}
      mac: ${{ steps.status.outputs.mac }}

    continue-on-error: true
    env:
      NODE_OPTIONS: "--max-old-space-size=7168"
    steps:
      - uses: actions/checkout@v4
        with:
          ref: ${{ inputs.ref || github.sha }}

      - name: Setup git user
        uses: LedgerHQ/ledger-live/tools/actions/composites/setup-git-user@develop

      - name: Setup the caches
        uses: LedgerHQ/ledger-live/tools/actions/composites/setup-caches@develop
        id: setup-caches
        with:
          install-proto: ${{ matrix.config.name != 'linux' }} # ledger-live-4xlarge has proto pre-installed
          skip-turbo-cache: "false"
          accountId: ${{ secrets.AWS_ACCOUNT_ID_PROD }}
          roleName: ${{ secrets.AWS_CACHE_ROLE_NAME }}
          region: ${{ secrets.AWS_CACHE_REGION }}
          turbo-server-token: ${{ secrets.TURBOREPO_SERVER_TOKEN }}

      - name: Build desktop
        id: build-desktop
        uses: LedgerHQ/ledger-live/tools/actions/composites/setup-build-desktop@develop
        with:
          os: ${{ matrix.config.name }}

      - name: Build the app
        id: build-app
        run: pnpm build:lld --api="http://127.0.0.1:${{ steps.setup-caches.outputs.port }}" --token="${{ secrets.TURBOREPO_SERVER_TOKEN }}" --team="foo"
        env:
          GENERATE_METAFILES: 1

      - name: Upload ${{ matrix.config.name }} app
        uses: actions/upload-artifact@v4
        with:
          name: ${{ steps.build-desktop.outputs.version }}-${{ matrix.config.image }}
          path: ${{ github.workspace }}/apps/ledger-live-desktop/dist/${{ steps.build-desktop.outputs.name }}-${{ steps.build-desktop.outputs.version }}-${{ matrix.config.image }}

      - name: Upload bundle metafiles
        uses: actions/upload-artifact@v4
        if: ${{ !cancelled() }}
        with:
          name: ${{ matrix.config.name }}-js-bundle-metafiles
          path: ${{ github.workspace }}/apps/ledger-live-desktop/metafile.*

      - name: Push status
        id: status
        shell: bash
        if: ${{ !cancelled() }}
        run: echo "${{ matrix.config.name }}=${{ steps.build-app.outcome }}" >> $GITHUB_OUTPUT

  report:
    needs: build-desktop-app
    runs-on: ubuntu-22.04
    if: ${{ !cancelled() && (github.event_name == 'workflow_dispatch' || github.event_name == 'workflow_call' || github.event_name == 'pull_request')}}
    steps:
      - uses: actions/checkout@v4
        with:
          ref: ${{ inputs.ref || github.sha }}

      - name: generate token
        id: generate-token
        uses: tibdex/github-app-token@v1
        with:
          app_id: ${{ secrets.GH_BOT_APP_ID }}
          private_key: ${{ secrets.GH_BOT_PRIVATE_KEY }}

      - uses: actions/download-artifact@v4
        with:
          name: linux-js-bundle-metafiles
          path: linux-js-bundle-metafiles
      - uses: actions/download-artifact@v4
        with:
          name: win-js-bundle-metafiles
          path: win-js-bundle-metafiles
      - uses: actions/download-artifact@v4
        with:
          name: mac-js-bundle-metafiles
          path: mac-js-bundle-metafiles

      - uses: actions/github-script@v7
        name: Produce statuses of builds
        id: statuses
        with:
          result-encoding: string
          script: |
            const obj = {
              linux: "${{ needs.build-desktop-app.outputs.linux }}",
              win: "${{ needs.build-desktop-app.outputs.win }}",
              mac: "${{ needs.build-desktop-app.outputs.mac }}"
            }
            return JSON.stringify(obj);

      - uses: LedgerHQ/ledger-live/tools/actions/build-checks@develop
        if: ${{ !cancelled() && github.event.number != '' }}
        with:
          token: ${{ steps.generate-token.outputs.token }}
          baseBranch: ${{ inputs.base_ref || 'develop' }}
          prNumber: ${{ github.event.number}}
          mode: desktop

      - uses: LedgerHQ/ledger-live/tools/actions/desktop-report-build@develop
        name: Report summary
        with:
          token: ${{ steps.generate-token.outputs.token }}
          statuses: ${{ steps.statuses.outputs.result }}
          attempt: ${{ github.run_attempt }}

      - uses: actions/upload-artifact@v4
        name: Upload output
        with:
          path: ${{ github.workspace }}/summary-build-desktop.json
          name: summary-build-desktop.json