Feature/macos intel support

.github/workflows/build-devtest.yml

@@ -13,6 +13,11 @@ on:
         required: false
         type: boolean
         default: true
+  pull_request:
+    types: [opened, synchronize, reopened]
+  push:
+    branches:
+      - feature/macos-intel-support
 
 # Cancel duplicate workflow runs
 concurrency:
@@ -34,9 +39,13 @@ jobs:
       matrix:
         include:
           - platform: macos-latest
-            platform-name: macOS
-            target: aarch64-apple-darwin
+            platform-name: macOS (Apple Silicon)
+            target: "aarch64-apple-darwin"
             args: --target aarch64-apple-darwin
+          - platform: macos-latest
+            platform-name: macOS (Intel)
+            target: "x86_64-apple-darwin"
+            args: --target x86_64-apple-darwin
           - platform: windows-latest
             platform-name: Windows
             target: x86_64-pc-windows-msvc
@@ -53,9 +62,45 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
+        continue-on-error: true
         with:
           fetch-depth: 0
 
+      - name: Ensure repository checkout
+        shell: bash
+        env:
+          REPO: ${{ github.repository }}
+          REF: ${{ github.ref }}
+          GITHUB_TOKEN: ${{ github.token }}
+        run: |
+          set -euo pipefail
+
+          if git rev-parse --verify HEAD >/dev/null 2>&1; then
+            echo "Checkout succeeded."
+            exit 0
+          fi
+
+          echo "Checkout failed; retrying with manual fetch."
+          rm -rf .git
+          git init .
+          git remote add origin "https://x-access-token:${GITHUB_TOKEN}@github.com/${REPO}.git"
+
+          if [[ -z "${REF}" ]]; then
+            REF="HEAD"
+          fi
+
+          for i in 1 2 3; do
+            if git fetch --no-tags --prune origin "${REF}" && git checkout FETCH_HEAD; then
+              echo "Manual checkout succeeded on attempt ${i}."
+              exit 0
+            fi
+            echo "Manual checkout attempt ${i} failed; retrying..."
+            sleep $((i * 5))
+          done
+
+          echo "Manual checkout failed after retries."
+          exit 1
+
       - name: Get version from tauri.conf.json
         id: get-version
         shell: bash
@@ -347,8 +392,8 @@ jobs:
             LLAMA_FEATURES="--features metal"
             echo "Using Metal GPU acceleration for macOS"
           elif [[ "${{ matrix.platform }}" == *"windows"* ]]; then
-            LLAMA_FEATURES="--features vulkan"
-            echo "Using Vulkan GPU acceleration for Windows"
+            LLAMA_FEATURES=""
+            echo "Using CPU-only mode for Windows"
           else
             echo "Using CPU-only mode for Linux"
           fi
@@ -383,9 +428,10 @@ jobs:
           APPLE_CERTIFICATE: ${{ contains(matrix.platform, 'macos') && secrets.APPLE_CERTIFICATE || '' }}
           APPLE_CERTIFICATE_PASSWORD: ${{ contains(matrix.platform, 'macos') && secrets.APPLE_CERTIFICATE_PASSWORD || '' }}
           APPLE_SIGNING_IDENTITY: ${{ contains(matrix.platform, 'macos') && env.CERT_ID || '' }}
-          # Tauri updater signing (ALWAYS enabled for .sig files)
-          TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
-          TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
+          # Tauri updater signing (enabled only when explicitly signing the build and key is available)
+          TAURI_SIGNING_PRIVATE_KEY: ${{ github.event.inputs.sign-build == 'true' && secrets.TAURI_SIGNING_PRIVATE_KEY || '' }}
+          TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ github.event.inputs.sign-build == 'true' && secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD || '' }}
+          TAURI_BUNDLE_CREATE_UPDATER_ARTIFACTS: ${{ github.event.inputs.sign-build == 'true' && secrets.TAURI_SIGNING_PRIVATE_KEY != '' && 'true' || 'false' }}
           # License validation RSA public key (embedded at build time)
           MEETILY_RSA_PUBLIC_KEY: ${{ secrets.MEETILY_RSA_PUBLIC_KEY }}
           # Supabase configuration (for online license verification)
@@ -401,9 +447,10 @@ jobs:
         uses: tauri-apps/tauri-action@v0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          # Tauri updater signing (ALWAYS enabled for .sig files)
-          TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
-          TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
+          # Tauri updater signing (disabled for unsigned builds)
+          TAURI_SIGNING_PRIVATE_KEY: ''
+          TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ''
+          TAURI_BUNDLE_CREATE_UPDATER_ARTIFACTS: 'false'
           # License validation RSA public key (embedded at build time)
           MEETILY_RSA_PUBLIC_KEY: ${{ secrets.MEETILY_RSA_PUBLIC_KEY }}
           # Supabase configuration (for online license verification)
@@ -467,24 +514,42 @@ jobs:
             Get-AuthenticodeSignature -FilePath "$msiPath" | Format-List
           }
 
+      - name: Prepare artifact paths
+        if: github.event_name != 'workflow_dispatch' || github.event.inputs.upload-artifacts == 'true'
+        id: artifact-paths
+        shell: bash
+        run: |
+          set -euo pipefail
+
+          if [[ "${{ matrix.platform }}" == *"macos"* ]]; then
+            printf '%s\n' \
+              "paths=target/${{ matrix.target }}/release/bundle/dmg/*.dmg" \
+              "target/${{ matrix.target }}/release/bundle/macos/*.app" \
+              "target/${{ matrix.target }}/release/bundle/macos/*.app.tar.gz" \
+              "target/${{ matrix.target }}/release/bundle/macos/*.app.tar.gz.sig" \
+              >> "$GITHUB_OUTPUT"
+          elif [[ "${{ matrix.platform }}" == *"windows"* ]]; then
+            printf '%s\n' \
+              "paths=target/${{ matrix.target }}/release/bundle/msi/*.msi" \
+              "target/${{ matrix.target }}/release/bundle/msi/*.msi.sig" \
+              "target/${{ matrix.target }}/release/bundle/nsis/*.exe" \
+              "target/${{ matrix.target }}/release/bundle/nsis/*.exe.sig" \
+              >> "$GITHUB_OUTPUT"
+          else
+            printf '%s\n' \
+              "paths=target/${{ matrix.target }}/release/bundle/deb/*.deb" \
+              "target/${{ matrix.target }}/release/bundle/appimage/*.AppImage" \
+              "target/${{ matrix.target }}/release/bundle/rpm/*.rpm" \
+              >> "$GITHUB_OUTPUT"
+          fi
+
       # Upload artifacts
       - name: Upload artifacts
-        if: github.event.inputs.upload-artifacts == 'true'
+        if: github.event_name != 'workflow_dispatch' || github.event.inputs.upload-artifacts == 'true'
         uses: actions/upload-artifact@v4
         with:
           name: meetily-devtest-${{ matrix.platform-name }}-${{ matrix.target }}-${{ steps.get-version.outputs.version }}
-          path: |
-            target/aarch64-apple-darwin/release/bundle/dmg/*.dmg
-            target/aarch64-apple-darwin/release/bundle/macos/*.app
-            target/aarch64-apple-darwin/release/bundle/macos/*.app.tar.gz
-            target/aarch64-apple-darwin/release/bundle/macos/*.app.tar.gz.sig
-            target/x86_64-pc-windows-msvc/release/bundle/msi/*.msi
-            target/x86_64-pc-windows-msvc/release/bundle/msi/*.msi.sig
-            target/x86_64-pc-windows-msvc/release/bundle/nsis/*.exe
-            target/x86_64-pc-windows-msvc/release/bundle/nsis/*.exe.sig
-            target/x86_64-unknown-linux-gnu/release/bundle/deb/*.deb
-            target/x86_64-unknown-linux-gnu/release/bundle/appimage/*.AppImage
-            target/x86_64-unknown-linux-gnu/release/bundle/rpm/*.rpm
+          path: ${{ steps.artifact-paths.outputs.paths }}
           retention-days: 14
 
       # Generate summary