feat: replace the Tauri app with a native egui app

.github/CONTRIBUTING.md

@@ -5,63 +5,48 @@ checks CI enforces, and what is expected of a pull request.
 
 ## Prerequisites
 
-- Node.js 22 (the version CI uses).
-- pnpm 10.32.1. It is pinned by `packageManager` in `package.json`, so
-  `corepack enable` gives you the right version automatically.
 - A stable Rust toolchain with the `rustfmt` and `clippy` components.
-- Tauri 2 system dependencies for your OS. Follow
-  [tauri.app/start/prerequisites](https://tauri.app/start/prerequisites/).
+- Node.js 22 and pnpm 10.32.1, only to build installers (the Tauri bundler) and
+  to work on the telemetry worker. pnpm is pinned by `packageManager` in
+  `package.json`, so `corepack enable` gives you the right version.
 
 On Ubuntu, the packages CI installs are:
 
 ```bash
-sudo apt-get install -y libwebkit2gtk-4.1-dev libgtk-3-dev \
-  libayatana-appindicator3-dev librsvg2-dev libsoup-3.0-dev libssl-dev pkg-config
+sudo apt-get install -y libdbus-1-dev libgtk-3-dev libxkbcommon-dev pkg-config
 ```
 
 ## Getting started
 
 ```bash
-pnpm install
-pnpm tauri dev
+cargo run -p accshift-egui
 ```
 
-`pnpm tauri build` produces a release bundle for your platform.
+`node crates/accshift-egui/bundle/bundle.mjs --build` builds the installers for
+your platform after `pnpm install`.
 
 ## Checks
 
-CI runs the `validate` job on Windows, Ubuntu and macOS. Every step must pass on
+CI runs the `rust` job on Windows, Ubuntu and macOS. Every step must pass on
 all three. Run the equivalents locally before opening a pull request:
 
 ```bash
-pnpm exec vp check              # Vite+ check
-pnpm run check:frontend         # svelte-check
-pnpm exec vp test               # frontend tests
-pnpm exec vp build              # frontend build
-pnpm run fmt:check              # cargo fmt --all --check
-pnpm run clippy                 # cargo clippy --workspace -- -D warnings
-pnpm run check:rust             # cargo check --workspace
-pnpm run test:rust              # cargo test --workspace
+cargo fmt --all --check
+cargo clippy --workspace --all-targets --locked -- -D warnings
+cargo test --workspace --locked
 ```
 
-`pnpm run check` chains the Vite+ check, `check:frontend` and `check:rust` in one
-command. `pnpm gates` runs `check`, the frontend and worker tests, the worker
-typecheck, `fmt:check`, `clippy` and `test:rust`, then prints each exit code;
-`pnpm gates clippy rust` runs only the named gates. It needs
-`server/node_modules` installed. The frontend build is not part of it.
-
-Two details that are easy to miss locally:
-
-- The Rust check, test and clippy scripts run `scripts/stage-cli.mjs` first.
-  It stages the gitignored CLI sidecar and builds it if missing. Direct
-  `cargo check`, `cargo test` or `cargo clippy` commands do not run this step;
-  run `node scripts/stage-cli.mjs` first on a fresh checkout.
-- The telemetry worker in `server/` is a separate pnpm package and is
-  typechecked on its own:
-  ```bash
-  pnpm --dir server install --frozen-lockfile
-  pnpm --dir server exec tsc --noEmit
-  ```
+`node scripts/gates.mjs` runs those three and the worker typecheck and tests,
+then prints each exit code; `node scripts/gates.mjs clippy rust` runs only the
+named gates. It needs `server/node_modules` installed.
+
+The telemetry worker in `server/` is a separate pnpm package:
+
+```bash
+pnpm --dir server install --frozen-lockfile
+pnpm --dir server exec tsc --noEmit
+pnpm --dir server exec vitest run
+```
 
 `cargo audit --file Cargo.lock` runs on Ubuntu only. If your change touches
 dependencies, run it locally too.
@@ -70,9 +55,10 @@ dependencies, run it locally too.
 
 See the "Project Structure" section of the [README](../README.md#project-structure).
 
-The Cargo workspace has three members: `src-tauri` (the Tauri GUI wrapper),
-`crates/accshift-core` (platform logic, config, storage, OS primitives) and
-`crates/accshift-cli` (the CLI binary).
+The Cargo workspace has five members: `crates/accshift-core` (platform logic,
+config, storage, OS primitives), `crates/accshift-cli` (the CLI binary),
+`crates/accshift-app` (the UI-free app logic), `crates/accshift-theme` (the
+theme engine) and `crates/accshift-egui` (the GUI).
 
 The CLI and GUI both sit on top of `crates/accshift-core`, so a platform change
 usually touches both surfaces. When you add or modify a platform, check that the

.github/SECURITY.md

@@ -35,7 +35,7 @@ In scope:
 - The exclusive file lock shared by the GUI and CLI on mutating operations.
 - The `accshift://` deep link handler and any input reaching it.
 - The updater and its signature verification.
-- The webview-reachable command surface and input validation on platform ids.
+- Input validation on platform ids and deep links (`accshift://`).
 - The optional CS2 stats bridge and the storage of its Bearer token.
 
 Out of scope:

.github/dependabot.yml

@@ -59,6 +59,15 @@ updates:
         update-types:
           - minor
           - patch
+    # A new egui minor needs crates/accshift-egui/vendor/epaint and
+    # egui_software_backend moved to it by hand.
+    ignore:
+      - dependency-name: "egui*"
+        update-types: ["version-update:semver-minor", "version-update:semver-major"]
+      - dependency-name: "eframe"
+        update-types: ["version-update:semver-minor", "version-update:semver-major"]
+      - dependency-name: "epaint"
+        update-types: ["version-update:semver-minor", "version-update:semver-major"]
 
   - package-ecosystem: github-actions
     directory: /

.github/workflows/ci.yml

@@ -11,7 +11,7 @@ permissions:
   contents: read
 
 jobs:
-  validate:
+  rust:
     strategy:
       fail-fast: false
       matrix:
@@ -22,70 +22,57 @@ jobs:
       - name: Checkout
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
-      - name: Install Linux Tauri build deps
+      - name: Install Linux build deps
         if: matrix.os == 'ubuntu-latest'
         run: |
           sudo apt-get update
           sudo apt-get install -y \
-            libwebkit2gtk-4.1-dev \
-            libgtk-3-dev \
-            libayatana-appindicator3-dev \
-            librsvg2-dev \
-            libsoup-3.0-dev \
-            libssl-dev \
+            libxkbcommon-dev \
             pkg-config
 
-      - name: Setup Vite+
-        uses: voidzero-dev/setup-vp@3754dd7dbdb32bd8f6d28b6043de13ad3a75f21f # v1.21.1
-        with:
-          node-version: 22
-          cache: true
-
       - name: Setup Rust
         uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable branch, pinned 2026-06-09
         with:
           components: rustfmt, clippy
 
-      - name: Vite+ check
-        run: vp check
-
-      - name: Svelte check
-        run: vp run check:frontend
-
-      - name: Frontend tests
-        run: vp test
-
-      # setup-vp only puts `vp` on PATH; the server worker is a plain pnpm
-      # package. `corepack enable` writes its pnpm shim next to the real node
-      # binary, which is not on PATH here, so drive pnpm through corepack
-      # itself (version pinned by packageManager in the root package.json).
-      - name: Install server dependencies
-        run: corepack pnpm --dir server install --frozen-lockfile
-
-      - name: Server typecheck
-        run: corepack pnpm --dir server exec tsc --noEmit
-
-      - name: Build frontend
-        run: vp build
-
-      # clippy, check:rust and test:rust each run scripts/stage-cli.mjs first:
-      # tauri-build resolves `externalBin` at build-script time and the sidecar
-      # is gitignored, so a fresh checkout has to stage it before any of them.
-
       - name: Cargo fmt
-        run: vp run fmt:check
+        run: cargo fmt --all --check
 
       - name: Cargo clippy
-        run: vp run clippy
-
-      - name: Cargo check
-        run: vp run check:rust
+        run: cargo clippy --workspace --all-targets --locked -- -D warnings
 
       - name: Rust tests
-        run: vp run test:rust
+        run: cargo test --workspace --locked
 
       - name: Cargo audit
         if: matrix.os == 'ubuntu-latest'
         run: |
           cargo install cargo-audit --quiet
           cargo audit --file Cargo.lock
+
+  # The telemetry worker (server/) is a plain pnpm package of its own.
+  worker:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+
+      # Only used for the Node runtime. `corepack enable` writes its pnpm shim
+      # next to the real node binary, which is not on PATH here, so drive pnpm
+      # through corepack itself (version pinned by packageManager in the root
+      # package.json).
+      - name: Setup Node
+        uses: voidzero-dev/setup-vp@3754dd7dbdb32bd8f6d28b6043de13ad3a75f21f # v1.21.1
+        with:
+          node-version: 22
+          run-install: false
+
+      - name: Install server dependencies
+        run: corepack pnpm --dir server install --frozen-lockfile
+
+      - name: Server typecheck
+        run: corepack pnpm --dir server exec tsc --noEmit
+
+      - name: Server tests
+        run: corepack pnpm --dir server exec vitest run

.github/workflows/dev-build.yml

@@ -19,63 +19,62 @@ jobs:
           - os: windows-latest
             artifact_name: accshift-windows
             artifact_paths: |
-              target/release/bundle/nsis/*.exe
-              target/release/bundle/msi/*.msi
+              target/x86_64-pc-windows-msvc/release/bundle/nsis/*.exe
           - os: ubuntu-latest
             artifact_name: accshift-linux
             artifact_paths: |
-              target/release/bundle/deb/*.deb
-              target/release/bundle/appimage/*.AppImage
-              target/release/bundle/rpm/*.rpm
+              target/x86_64-unknown-linux-gnu/release/bundle/deb/*.deb
+              target/x86_64-unknown-linux-gnu/release/bundle/appimage/*.AppImage
+              target/x86_64-unknown-linux-gnu/release/bundle/rpm/*.rpm
           - os: macos-latest
             artifact_name: accshift-macos
             artifact_paths: |
-              target/release/bundle/dmg/*.dmg
-              target/release/bundle/macos/*.app.zip
+              target/aarch64-apple-darwin/release/bundle/dmg/*.dmg
+              target/aarch64-apple-darwin/release/bundle/macos/*.app.zip
     runs-on: ${{ matrix.os }}
     steps:
       - name: Checkout
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           ref: ${{ inputs.ref || github.ref }}
 
-      - name: Install Linux Tauri build deps
+      - name: Install Linux build deps
         if: matrix.os == 'ubuntu-latest'
         run: |
           sudo apt-get update
           sudo apt-get install -y \
-            libwebkit2gtk-4.1-dev \
             libgtk-3-dev \
-            libayatana-appindicator3-dev \
+            libxkbcommon-dev \
             librsvg2-dev \
-            libsoup-3.0-dev \
-            libssl-dev \
             pkg-config
 
-      - name: Setup Vite+
+      - name: Setup Node
         uses: voidzero-dev/setup-vp@3754dd7dbdb32bd8f6d28b6043de13ad3a75f21f # v1.21.1
         with:
           node-version: 22
-          cache: true
+          run-install: false
 
       - name: Setup Rust
         uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable branch, pinned 2026-06-09
 
+      - name: Install the bundler
+        run: corepack pnpm install --frozen-lockfile
+
       # No ACCSHIFT_TELEMETRY_URL: a dev build compiles in the inert fallback, so
       # test installs never reach the analytics dashboard. Only release.yml sets it.
-      - name: Build Tauri bundles (unsigned, no updater artifacts)
-        run: vp exec tauri build -c '{"bundle":{"createUpdaterArtifacts":false}}'
+      - name: Build the installers (unsigned, no updater artifacts)
+        run: node crates/accshift-egui/bundle/bundle.mjs --build --no-updater
 
       - name: Compress macOS .app bundle
         if: matrix.os == 'macos-latest'
         run: |
-          cd target/release/bundle/macos
+          cd target/aarch64-apple-darwin/release/bundle/macos
           for app in *.app; do
             zip -r "${app%.app}.app.zip" "$app"
           done
 
       - name: Upload artifacts
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: ${{ matrix.artifact_name }}
           path: ${{ matrix.artifact_paths }}