From ec8aba4879785e590a052fe674bf1c89b72daff8 Mon Sep 17 00:00:00 2001
From: Kevin Wang <wy721@qq.com>
Date: Mon, 5 Jan 2026 01:15:19 +0000
Subject: [PATCH 1/3] Add CI for vmm-ui

---
 .github/workflows/vmm-ui.yml | 32 ++++++++++++++++++++++++++++++++
 1 file changed, 32 insertions(+)
 create mode 100644 .github/workflows/vmm-ui.yml

diff --git a/.github/workflows/vmm-ui.yml b/.github/workflows/vmm-ui.yml
new file mode 100644
index 000000000..5149abf9d
--- /dev/null
+++ b/.github/workflows/vmm-ui.yml
@@ -0,0 +1,32 @@
+# SPDX-FileCopyrightText: © 2024-2025 Phala Network <dstack@phala.network>
+#
+# SPDX-License-Identifier: Apache-2.0
+
+name: VMM UI build
+
+on:
+  push:
+    branches: [ master, next, dev-* ]
+  pull_request:
+    branches: [ master, next, dev-* ]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+
+    - name: Install Node.js
+      uses: actions/setup-node@v4
+      with:
+        node-version: '20'
+
+    - name: Build vmm UI
+      run: |
+        npm ci
+        npm run build
+      working-directory: vmm/ui
+
+    - name: Ensure vmm UI build is clean
+      run: |
+        test -z "$(git status --porcelain)"

From 59b09a4cd34c3e482546479d2d3619a84b0558da Mon Sep 17 00:00:00 2001
From: Kevin Wang <wy721@qq.com>
Date: Mon, 5 Jan 2026 01:18:54 +0000
Subject: [PATCH 2/3] ci: More friendly error report

---
 .github/workflows/vmm-ui.yml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/vmm-ui.yml b/.github/workflows/vmm-ui.yml
index 5149abf9d..4786daf3b 100644
--- a/.github/workflows/vmm-ui.yml
+++ b/.github/workflows/vmm-ui.yml
@@ -29,4 +29,10 @@ jobs:
 
     - name: Ensure vmm UI build is clean
       run: |
-        test -z "$(git status --porcelain)"
+        if [ -n "$(git status --porcelain)" ]; then
+          echo "VMM UI build produced uncommitted changes."
+          echo "Run: cd vmm/ui && npm ci && npm run build"
+          echo "Then commit the updated build output `vmm/src/console_v1.html`"
+          git status --porcelain
+          exit 1
+        fi

From b27f81c71f9ba71235ee37246acd3a66d0e0b4b5 Mon Sep 17 00:00:00 2001
From: Kevin Wang <wy721@qq.com>
Date: Mon, 5 Jan 2026 01:21:09 +0000
Subject: [PATCH 3/3] ci: Add permissions

---
 .github/workflows/vmm-ui.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/vmm-ui.yml b/.github/workflows/vmm-ui.yml
index 4786daf3b..60762c15a 100644
--- a/.github/workflows/vmm-ui.yml
+++ b/.github/workflows/vmm-ui.yml
@@ -4,6 +4,9 @@
 
 name: VMM UI build
 
+permissions:
+  contents: read
+
 on:
   push:
     branches: [ master, next, dev-* ]