From 349662a0554ec160df3f1899923d2140a62d4c8d Mon Sep 17 00:00:00 2001
From: Richard Toth <info@tothbt.com>
Date: Fri, 23 Oct 2026 19:30:41 +0200
Subject: [PATCH] feat(ci): build and publish macOS packages to CrabNebula

---
 .github/workflows/release.yml | 51 +++++++++++++++++++++++++++++++++++
 1 file changed, 51 insertions(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8072a61..d434d97 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -73,6 +73,56 @@ jobs:
           api-key: ${{ secrets.CN_API_KEY }}
           path: ./src-tauri
 
+  # ---------------------------------------------------------
+  # macOS Tauri builds (Apple Silicon and Intel)
+  # ---------------------------------------------------------
+  macos:
+    needs: draft
+
+    runs-on: macos-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        target:
+          - aarch64-apple-darwin
+          - x86_64-apple-darwin
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v5
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: npm
+
+      - name: Setup Rust
+        uses: actions-rust-lang/setup-rust-toolchain@v1
+        with:
+          toolchain: stable
+          target: ${{ matrix.target }}
+          cache: true
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Install Ionic CLI
+        run: npm install -g @ionic/cli
+
+      - name: Build Tauri macOS packages
+        env:
+          TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
+          TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
+        run: npm run tauri build -- --target ${{ matrix.target }} --bundles app,dmg
+
+      - name: Upload release assets to CrabNebula
+        uses: crabnebula-dev/cloud-release@v0
+        with:
+          command: release upload ${{ env.CN_APPLICATION }} --framework tauri
+          api-key: ${{ secrets.CN_API_KEY }}
+          path: ./src-tauri
+
   # ---------------------------------------------------------
   # Linux Tauri build + Snap
   # ---------------------------------------------------------
@@ -163,6 +213,7 @@ jobs:
   publish:
     needs:
       - windows
+      - macos
       - snap
 
     runs-on: ubuntu-22.04