fix: scope windows packaging workaround

Author: Jonohobs

.github/workflows/ci.yml

@@ -105,7 +105,7 @@ jobs:
         run: bun install --frozen-lockfile
 
       - name: Build Windows desktop artifact
-        run: bun run dist:desktop:win
+        run: bun run dist:desktop:artifact -- --platform win --target nsis --arch x64 --verbose
 
       - name: Upload Windows desktop artifact
         uses: actions/upload-artifact@v7

scripts/build-desktop-artifact.ts

@@ -500,10 +500,6 @@ const createBuildConfig = Effect.fn("createBuildConfig")(function* (
     appId: "com.okcode.okcode",
     productName,
     artifactName: "OK-Code-${version}-${arch}.${ext}",
-    // Production dependencies are installed into the staged app ahead of packaging.
-    // Skip electron-builder's extra native rebuild step so packaged builds can use
-    // shipped prebuilds like node-pty on Windows instead of requiring local Spectre libs.
-    npmRebuild: false,
     directories: {
       buildResources: "apps/desktop/resources",
     },
@@ -557,6 +553,10 @@ const createBuildConfig = Effect.fn("createBuildConfig")(function* (
     if (signed) {
       winConfig.azureSignOptions = yield* AzureTrustedSigningOptionsConfig;
     } else {
+      // Production dependencies are installed into the staged app ahead of packaging.
+      // Skip electron-builder's extra native rebuild step so Windows builds can use
+      // shipped prebuilds like node-pty instead of requiring local Spectre libs.
+      buildConfig.npmRebuild = false;
       // Unsigned local builds shouldn't need the Windows code-signing toolchain or
       // rcedit metadata pass; skipping it avoids symlink-privileged cache extraction.
       winConfig.signAndEditExecutable = false;