name: Build Magic Windows

# Baut den NSIS-Installer der ReBreak-Magic-Windows-App (Tauri) auf einem
# echten Windows-Runner — vom Mac aus geht kein Cross-Compile (MSVC + WebView2).
# Artefakt: x64-Installer, herunterladbar unter Actions → Run → Artifacts.

on:
  workflow_dispatch:
  push:
    branches: [main]
    paths:
      - "apps/rebreak-magic-win/**"
      - ".github/workflows/build-magic-win.yml"

permissions:
  contents: read

concurrency:
  group: build-magic-win
  cancel-in-progress: true

jobs:
  build:
    name: NSIS Installer (x64)
    runs-on: windows-latest
    steps:
      - uses: actions/checkout@v4

      - uses: pnpm/action-setup@v4
        with:
          version: 10

      - uses: actions/setup-node@v4
        with:
          node-version: 20
          cache: pnpm

      - uses: dtolnay/rust-toolchain@stable

      - name: Install deps (nur Magic-Win)
        run: pnpm install --filter rebreak-magic-win --no-frozen-lockfile

      - name: Build Tamper-Service (Tauri-Sidecar)
        working-directory: apps/rebreak-magic-win/src-tauri
        shell: pwsh
        run: |
          cargo build --release -p rebreak-protection-service
          $triple = (rustc -vV | Select-String 'host: (.*)').Matches.Groups[1].Value
          New-Item -ItemType Directory -Force -Path binaries | Out-Null
          Copy-Item "target/release/rebreak-protection-service.exe" "binaries/rebreak-protection-service-$triple.exe" -Force

      - name: Build Tauri-App (Frontend + NSIS)
        working-directory: apps/rebreak-magic-win
        run: pnpm tauri build

      - name: Upload Installer
        uses: actions/upload-artifact@v4
        with:
          name: RebreakMagic-Windows-x64
          path: apps/rebreak-magic-win/src-tauri/target/release/bundle/nsis/*.exe
          if-no-files-found: error