tailscale-custom/build-msi.ps1

# build-msi.ps1
$ErrorActionPreference = "Stop"

$isAdmin = ([Security.Principal.WindowsPrincipal][Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)
if (-not $isAdmin) {
    Start-Process powershell -Verb RunAs -ArgumentList "-NoExit -ExecutionPolicy Bypass -File `"$PSCommandPath`""
    exit
}

Start-Transcript -Path "$PSScriptRoot\build-msi-log.txt" -Force -ErrorAction SilentlyContinue | Out-Null
Set-Location $PSScriptRoot

Write-Host "=== 1. CAI DAT WIX TOOLSET (LOCAL VÀ BỎ QUA EULA CỦA V5) ===" -ForegroundColor Cyan
try {
    dotnet new tool-manifest --force 2>$null
    dotnet tool install wix --version 4.0.4 2>$null
} catch {}

Write-Host "`n=== 2. LAY CERTIFICATE DE KY ===" -ForegroundColor Cyan
$cert = Get-ChildItem Cert:\LocalMachine\My |
    Where-Object { $_.Subject -eq "CN=Tailscale-Custom, O=SoftsBusiness, C=VN" -and $_.HasPrivateKey } |
    Sort-Object NotAfter -Descending | Select-Object -First 1

if (-not $cert) {
    Write-Error "Khong tim thay code-signing cert!"
    exit 1
}
Write-Host "Dung cert: $($cert.Thumbprint)"

Write-Host "`n=== 3. KY CAC FILE EXE TRONG \DIST ===" -ForegroundColor Cyan
$distFiles = @("tailscaled.exe", "tailscale.exe", "tailscale-tray.exe")
foreach ($name in $distFiles) {
    $path = Join-Path $PSScriptRoot "dist\$name"
    if (Test-Path $path) {
        $r = Set-AuthenticodeSignature -FilePath $path -Certificate $cert -TimestampServer "http://timestamp.digicert.com" -HashAlgorithm SHA256 -ErrorAction SilentlyContinue
        if (-not $r -or $r.Status -notin @("Valid")) {
            $r = Set-AuthenticodeSignature -FilePath $path -Certificate $cert -HashAlgorithm SHA256
        }
        Write-Host "  $name => $($r.Status)"
    } else {
        Write-Warning "Khong tim thay file: $path"
    }
}

Write-Host "`n=== 4. BUILD FILE MSI ===" -ForegroundColor Cyan
$msiPath = Join-Path $PSScriptRoot "Tailscale-Custom-Setup.msi"
Remove-Item $msiPath -ErrorAction SilentlyContinue
# Lệnh build từ WiX Toolset local version
dotnet wix build "$PSScriptRoot\Setup.wxs" -out $msiPath
Write-Host "  Da tao thanh cong file: $msiPath"

Write-Host "`n=== 5. KY FILE MSI MOI TAO ===" -ForegroundColor Cyan
$r = Set-AuthenticodeSignature -FilePath $msiPath -Certificate $cert -TimestampServer "http://timestamp.digicert.com" -HashAlgorithm SHA256 -ErrorAction SilentlyContinue
if (-not $r -or $r.Status -notin @("Valid")) {
    $r = Set-AuthenticodeSignature -FilePath $msiPath -Certificate $cert -HashAlgorithm SHA256
}
Write-Host "  Trang thai ky MSI: $($r.Status)" -ForegroundColor Green

Write-Host "`nHOAN TAT! BAN CO THE DEM FILE [$msiPath] DI CAI DAT." -ForegroundColor Yellow
Stop-Transcript | Out-Null