ci: build acceptance installers without draft release privileges

Author: gevianajr

.github/workflows/installer-acceptance.yml

@@ -13,7 +13,43 @@ on:
 permissions:
   contents: read
 jobs:
+  build:
+    runs-on: windows-latest
+    timeout-minutes: 45
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.13'
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+      - name: Build frozen engine
+        shell: pwsh
+        run: |
+          python -m pip install . pyinstaller
+          if ($LASTEXITCODE -ne 0) { throw 'Python installation failed' }
+          python -m PyInstaller --noconfirm packaging/formslang-engine.spec
+          if ($LASTEXITCODE -ne 0) { throw 'Engine build failed' }
+          New-Item -ItemType Directory -Force desktop/src-tauri/binaries | Out-Null
+          Copy-Item dist/formslang-engine.exe desktop/src-tauri/binaries/formslang-engine-x86_64-pc-windows-msvc.exe
+      - name: Build Windows installers
+        shell: pwsh
+        run: |
+          npm --prefix desktop ci
+          if ($LASTEXITCODE -ne 0) { throw 'Desktop dependencies failed' }
+          $env:CI='true'
+          npm --prefix desktop run tauri -- build
+          if ($LASTEXITCODE -ne 0) { throw 'Installer build failed' }
+      - uses: actions/upload-artifact@v4
+        with:
+          name: candidate-installers
+          path: |
+            desktop/src-tauri/target/release/bundle/nsis/*.exe
+            desktop/src-tauri/target/release/bundle/msi/*.msi
+          retention-days: 7
   upgrade:
+    needs: build
     runs-on: windows-latest
     timeout-minutes: 20
     strategy:
@@ -29,14 +65,18 @@ jobs:
       - uses: actions/setup-python@v5
         with:
           python-version: '3.13'
+      - uses: actions/download-artifact@v4
+        with:
+          name: candidate-installers
+          path: installer-assets/built
       - name: Download exact release installers
         shell: pwsh
         run: |
           if ($env:BASELINE -notmatch '^\d+\.\d+\.\d+$' -or $env:CANDIDATE -notmatch '^\d+\.\d+\.\d+$') { throw 'Invalid version' }
           gh release download "v$env:BASELINE" --dir installer-assets/baseline --pattern '*.exe' --pattern '*.msi'
           if ($LASTEXITCODE -ne 0) { throw 'Baseline download failed' }
-          gh release download "v$env:CANDIDATE" --dir installer-assets/candidate --pattern '*.exe' --pattern '*.msi'
-          if ($LASTEXITCODE -ne 0) { throw 'Candidate download failed' }
+          New-Item -ItemType Directory -Force installer-assets/candidate | Out-Null
+          Get-ChildItem installer-assets/built -Recurse -File | Copy-Item -Destination installer-assets/candidate
       - name: Install, save review, upgrade, verify
         shell: pwsh
         run: ./examples/verify/installer_upgrade.ps1 -Kind '${{ matrix.kind }}' -BaselineVersion $env:BASELINE -CandidateVersion $env:CANDIDATE