Another attempt.

Author: EdgarTwigg

.github/workflows/release.yml

@@ -95,6 +95,8 @@ jobs:
             standalone/src-tauri/target/${{ matrix.target }}/release/bundle/**/*.nsis.zip.sig
             standalone/src-tauri/target/${{ matrix.target }}/release/bundle/nsis/**
             standalone/src-tauri/target/${{ matrix.target }}/release/nsis/**
+            standalone/sidecar/**
+            standalone/src-tauri/binaries/**
 
   build-vscode:
     name: Build VSCode Extension

scripts/patch-nsis-paths.pl

@@ -0,0 +1,50 @@
+#!/usr/bin/env perl
+# Patches absolute Windows paths in a Tauri-generated .nsi script so it can
+# be rebuilt on macOS/Linux with makensis.
+#
+# Usage: perl patch-nsis-paths.pl <installer.nsi> <local-artifact-root>
+#
+# The script extracts the CI checkout root from MAINBINARYSRCPATH, then
+# replaces all occurrences with the local artifact root, converting
+# backslashes to forward slashes.
+
+use strict;
+use warnings;
+
+my $nsi_file   = $ARGV[0] or die "Usage: $0 <installer.nsi> <local-artifact-root>\n";
+my $local_root = $ARGV[1] or die "Usage: $0 <installer.nsi> <local-artifact-root>\n";
+
+open my $fh, '<', $nsi_file or die "Cannot open $nsi_file: $!";
+my $content = do { local $/; <$fh> };
+close $fh;
+
+# Extract CI checkout root from MAINBINARYSRCPATH.
+# The path looks like: "D:\a\mouseterm\mouseterm\standalone\src-tauri\target\...\mouseterm.exe"
+# We want everything before \standalone\src-tauri\
+my $ci_root;
+if ($content =~ /MAINBINARYSRCPATH\s+"(.+?)\\standalone\\src-tauri\\/) {
+    $ci_root = $1;
+} else {
+    die "Could not extract CI checkout root from MAINBINARYSRCPATH in $nsi_file\n";
+}
+print "CI checkout root: $ci_root\n";
+print "Local artifact root: $local_root\n";
+
+# Count occurrences before replacement
+my $count = 0;
+while ($content =~ /\Q$ci_root\E/g) { $count++ }
+print "Found $count path(s) to replace\n";
+
+# Replace all occurrences of ci_root...<rest-of-path> with local_root/<rest>,
+# converting backslashes to forward slashes in the <rest> portion.
+$content =~ s/\Q$ci_root\E([^"]*)/
+    my $rest = $1;
+    $rest =~ s{\\}{\/}g;
+    "$local_root$rest"
+/ge;
+
+open my $out, '>', $nsi_file or die "Cannot write $nsi_file: $!";
+print $out $content;
+close $out;
+
+print "Done. Patched $count path(s).\n";

scripts/sign-and-deploy.sh

@@ -145,13 +145,13 @@ rebuild_windows_installer() {
     local script_dir
     script_dir="$(cd "$(dirname "$script_path")" && pwd)"
 
-    # The .nsi contains absolute Windows paths that don't exist on macOS.
-    # Patch MAINBINARYSRCPATH to point to the signed exe.
-    local abs_signed_exe
-    abs_signed_exe="$(cd "$(dirname "$signed_exe")" && pwd)/$(basename "$signed_exe")"
-    sed -i '' "s|^!define MAINBINARYSRCPATH .*|!define MAINBINARYSRCPATH \"$abs_signed_exe\"|" "$script_path"
+    # The .nsi contains ~60 absolute Windows paths from the CI runner.
+    # Replace them all with local artifact paths using the helper script.
+    local artifact_dir
+    artifact_dir="$(cd "$WORK_DIR/standalone-win-x64" && pwd)"
+    perl "$SCRIPT_DIR/patch-nsis-paths.pl" "$script_path" "$artifact_dir"
 
-    # Patch ADDITIONALPLUGINSPATH to point to the plugin bundled in artifacts.
+    # Patch ADDITIONALPLUGINSPATH separately — it is outside the checkout tree.
     local plugin_dir
     plugin_dir=$(find "$WORK_DIR/standalone-win-x64" -name "nsis_tauri_utils.dll" -exec dirname {} \; | head -1)
     if [[ -n "$plugin_dir" ]]; then