nix: fix (#22)

* nix: add Direnv support

* ignore Nix build artifacts

* ci: do not create an out link

* ci: re-enable nix hash workflow; add manual trigger

* flake: bump inputs

* ci: make sure ONLY the relevant file gets committed

* build: ensure Nix artifact are not included

Avoid accidental inclusions for local build.

Author: NotAShelf

.envrc

@@ -0,0 +1 @@
+use flake

.github/workflows/nix-fix.yml

@@ -1,10 +1,11 @@
 name: Fix PNPM Dependency Hash
 
-# on:
-#   push:
-#     branches: [main]
-#   pull_request:
-#     branches: [main]
+on:
+  workflow_dispatch:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
 
 concurrency:
   group: ${{ github.workflow }}-$${{ github.head_ref || github.run_id }}
@@ -36,7 +37,7 @@ jobs:
 
       - if: steps.changed-files.outputs.files == 'true'
         run: |
-          if nix build --print-build-logs .#vermilion 2> /tmp/log; then
+          if nix build -Lv --no-link .#vermilion 2> /tmp/log; then
             exit 0
           fi
 
@@ -49,3 +50,4 @@ jobs:
       - uses: stefanzweifel/git-auto-commit-action@v5
         with:
           commit_message: "[CI]: update pnpm dependency hash"
+          file_pattern: 'nix/package.nix'

.gitignore

@@ -134,3 +134,6 @@ dist
 .yarn/build-state.yml
 .yarn/install-state.gz
 .pnp.*
+
+# Nix
+result*

electron-builder.yml

@@ -10,6 +10,7 @@ files:
   - '!{.eslintcache,eslint.config.mjs,.prettierignore,.prettierrc.yaml,dev-app-update.yml,CHANGELOG.md,README.md}'
   - '!{.env,.env.*,.npmrc,pnpm-lock.yaml}'
   - '!{tsconfig.json,tsconfig.node.json,tsconfig.web.json}'
+  - '!result*'
 asarUnpack:
   - resources/**
 win: