Tauri 2.0 Build Configuration Release Builds and Optimization

// Cargo.toml - Release profile optimization
[profile.release]
# Optimize for size
opt-level = "z"          # Optimize for size ('z' is more aggressive than 's')
lto = true               # Enable Link-Time Optimization
codegen-units = 1        # Better optimization (slower compile)
panic = "abort"          # Smaller binary, no unwinding
strip = true             # Remove debug symbols

# Alternative: Optimize for speed
[profile.release-fast]
inherits = "release"
opt-level = 3            # Maximum optimization for speed
lto = "fat"              # Aggressive LTO
codegen-units = 1

# Development-optimized release (faster builds, good performance)
[profile.release-dev]
inherits = "release"
opt-level = 2            # Good optimization
lto = "thin"             # Faster LTO
codegen-units = 16       # Faster compilation
strip = false            # Keep debug symbols

// Build with specific profile
cargo build --release                    # Standard release
cargo build --profile release-fast       # Speed-optimized
cargo build --profile release-dev        # Dev-friendly release

// Tauri build commands
npm run tauri build                      # Standard release
npm run tauri build -- --profile release-fast

// Feature flags for conditional compilation
// Cargo.toml
[features]
default = ["custom-protocol"]
custom-protocol = ["tauri/custom-protocol"]
devtools = []

// Build with specific features
cargo build --release --no-default-features --features "custom-protocol"

// Conditional compilation based on features
#[cfg(feature = "devtools")]
fn enable_devtools(app: &mut App) {
    app.get_window("main").unwrap().open_devtools();
}

#[cfg(not(feature = "devtools"))]
fn enable_devtools(_app: &mut App) {
    // Do nothing in production
}

// Platform-specific optimization
[target.'cfg(target_os = "windows")'.dependencies]
windows = { version = "0.48", features = ["Win32_Foundation"] }

// Workspace optimization for multiple crates
[workspace]
members = ["src-tauri", "plugins/*"]

[profile.release]
opt-level = "z"
lto = true
codegen-units = 1

// Dependencies optimization
[profile.release.package."*"]
opt-level = 3            # Optimize dependencies for speed

[profile.release.package.my-app]
opt-level = "z"          # Optimize main crate for size

// Build scripts optimization
[build-dependencies]
cc = "1.0"

// vite.config.ts - Production optimization
import { defineConfig } from 'vite';
import react from '@vitejs/plugin-react';
import { resolve } from 'path';

export default defineConfig({
  plugins: [react()],
  
  // Production build settings
  build: {
    target: 'esnext',
    minify: 'terser',
    
    terserOptions: {
      compress: {
        drop_console: true,        // Remove console.log
        drop_debugger: true,       // Remove debugger statements
        pure_funcs: ['console.log'], // Remove specific functions
      },
      format: {
        comments: false,           // Remove comments
      },
    },
    
    // Code splitting
    rollupOptions: {
      output: {
        manualChunks: {
          // Separate vendor code
          vendor: ['react', 'react-dom'],
          tauri: ['@tauri-apps/api'],
          utils: ['lodash', 'date-fns'],
        },
        // Naming pattern for chunks
        chunkFileNames: 'js/[name]-[hash].js',
        entryFileNames: 'js/[name]-[hash].js',
        assetFileNames: 'assets/[name]-[hash].[ext]',
      },
    },
    
    // Source maps (disable in production)
    sourcemap: false,
    
    // Asset inline threshold (smaller assets inlined as base64)
    assetsInlineLimit: 4096, // 4kb
    
    // Output directory
    outDir: 'dist',
    emptyOutDir: true,
    
    // Chunk size warnings
    chunkSizeWarningLimit: 1000, // KB
  },
  
  // Optimization
  optimizeDeps: {
    include: ['react', 'react-dom', '@tauri-apps/api'],
  },
  
  // Environment variables
  define: {
    'process.env.NODE_ENV': JSON.stringify('production'),
    __APP_VERSION__: JSON.stringify(process.env.npm_package_version),
  },
  
  // Asset handling
  assetsInclude: ['**/*.woff2', '**/*.png'],
});

// package.json - Build scripts
{
  "scripts": {
    "dev": "vite",
    "build": "tsc && vite build",
    "build:analyze": "vite build --mode analyze",
    "tauri": "tauri",
    "tauri:dev": "tauri dev",
    "tauri:build": "tauri build",
    "tauri:build:debug": "tauri build --debug"
  }
}

// TypeScript configuration for production
// tsconfig.json
{
  "compilerOptions": {
    "target": "ES2020",
    "module": "ESNext",
    "lib": ["ES2020", "DOM", "DOM.Iterable"],
    "skipLibCheck": true,
    
    // Bundler mode
    "moduleResolution": "bundler",
    "allowImportingTsExtensions": true,
    "resolveJsonModule": true,
    "isolatedModules": true,
    "noEmit": true,
    "jsx": "react-jsx",
    
    // Strict type checking
    "strict": true,
    "noUnusedLocals": true,
    "noUnusedParameters": true,
    "noFallthroughCasesInSwitch": true
  },
  "include": ["src"]
}

// Environment-specific builds
// .env.production
VITE_API_URL=https://api.example.com
VITE_APP_TITLE=My App
VITE_ENABLE_ANALYTICS=true

// .env.development
VITE_API_URL=http://localhost:3000
VITE_APP_TITLE=My App (Dev)
VITE_ENABLE_ANALYTICS=false

// Usage in code
const apiUrl = import.meta.env.VITE_API_URL;
const appTitle = import.meta.env.VITE_APP_TITLE;

// Conditional code based on environment
if (import.meta.env.DEV) {
  console.log('Development mode');
}

if (import.meta.env.PROD) {
  // Production-only code
  enableAnalytics();
}

// tauri.conf.json - Production configuration
{
  "$schema": "https://schema.tauri.app/config/2.0.0",
  "productName": "MyApp",
  "version": "1.0.0",
  "identifier": "com.mycompany.myapp",
  
  "build": {
    "beforeDevCommand": "npm run dev",
    "devUrl": "http://localhost:5173",
    "beforeBuildCommand": "npm run build",
    "frontendDist": "../dist"
  },
  
  "bundle": {
    "active": true,
    "targets": ["nsis", "msi", "app", "dmg", "deb", "appimage"],
    
    "icon": [
      "icons/32x32.png",
      "icons/128x128.png",
      "icons/[email protected]",
      "icons/icon.icns",
      "icons/icon.ico"
    ],
    
    "publisher": "My Company",
    "copyright": "Copyright © 2026 My Company",
    "category": "Productivity",
    "shortDescription": "A powerful desktop application",
    "longDescription": "Full description of your application...",
    
    // Windows-specific
    "windows": {
      "certificateThumbprint": null,
      "digestAlgorithm": "sha256",
      "timestampUrl": "http://timestamp.digicert.com",
      "wix": {
        "language": "en-US",
        "template": "path/to/custom.wxs"
      },
      "nsis": {
        "installerIcon": "icons/icon.ico",
        "installMode": "perUser",
        "languages": ["English"],
        "displayLanguageSelector": false
      }
    },
    
    // macOS-specific
    "macOS": {
      "frameworks": [],
      "minimumSystemVersion": "10.15",
      "exceptionDomain": "myapp.com",
      "signingIdentity": null,
      "providerShortName": null,
      "entitlements": "entitlements.plist"
    },
    
    // Linux-specific
    "linux": {
      "deb": {
        "depends": []
      },
      "appimage": {
        "bundleMediaFramework": false
      }
    },
    
    // External binaries
    "externalBin": [
      "binaries/sidecar"
    ],
    
    // Additional resources
    "resources": [
      "resources/*"
    ]
  },
  
  "app": {
    "windows": [
      {
        "title": "MyApp",
        "width": 1200,
        "height": 800,
        "minWidth": 800,
        "minHeight": 600,
        "resizable": true,
        "fullscreen": false,
        "decorations": true,
        "transparent": false
      }
    ],
    
    "security": {
      "csp": "default-src 'self'; img-src 'self' data: https:; script-src 'self' 'unsafe-inline'",
      "devCsp": "default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'",
      "freezePrototype": true,
      "dangerousDisableAssetCspModification": false
    },
    
    "macOSPrivateApi": false,
    "withGlobalTauri": false
  },
  
  "plugins": {}
}

// Environment-specific configurations
// tauri.conf.production.json (merged with base)
{
  "app": {
    "security": {
      "csp": "default-src 'self'; connect-src https://api.example.com"
    }
  },
  "bundle": {
    "resources": [
      "resources/production/*"
    ]
  }
}

// Build with specific config
tauri build --config tauri.conf.production.json

// Multiple bundle targets
tauri build --target nsis     # Windows NSIS installer
tauri build --target msi      # Windows MSI installer
tauri build --target app      # macOS .app bundle
tauri build --target dmg      # macOS DMG
tauri build --target deb      # Linux Debian package
tauri build --target appimage # Linux AppImage

// Windows code signing
// Using certificate file (.pfx)
tauri build --runner cargo -- --features custom-protocol

// Set environment variables
set TAURI_PRIVATE_KEY=path/to/cert.pfx
set TAURI_KEY_PASSWORD=your_password

// Or in tauri.conf.json
"windows": {
  "certificateThumbprint": "ABC123...",
  "digestAlgorithm": "sha256",
  "timestampUrl": "http://timestamp.digicert.com"
}

// macOS code signing and notarization
// 1. Code sign
codesign --sign "Developer ID Application: Your Name" \
  --options runtime \
  --entitlements entitlements.plist \
  --force \
  --deep \
  target/release/bundle/macos/MyApp.app

// 2. Create DMG
hdiutil create -volname "MyApp" \
  -srcfolder target/release/bundle/macos/MyApp.app \
  -ov -format UDZO \
  MyApp.dmg

// 3. Sign DMG
codesign --sign "Developer ID Application: Your Name" MyApp.dmg

// 4. Notarize
xcrun notarytool submit MyApp.dmg \
  --apple-id [email protected] \
  --team-id TEAM123 \
  --password app-specific-password \
  --wait

// 5. Staple notarization
xcrun stapler staple MyApp.dmg

// entitlements.plist
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
  <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
  <true/>
  <key>com.apple.security.cs.disable-library-validation</key>
  <true/>
  <key>com.apple.security.cs.allow-dyld-environment-variables</key>
  <true/>
</dict>
</plist>

// Automated signing in CI/CD
// GitHub Actions example
name: Release

on:
  push:
    tags:
      - 'v*'

jobs:
  release:
    strategy:
      matrix:
        platform: [ubuntu-latest, macos-latest, windows-latest]
    
    runs-on: ${{ matrix.platform }}
    
    steps:
      - uses: actions/checkout@v3
      
      - name: Setup Node
        uses: actions/setup-node@v3
        with:
          node-version: 18
      
      - name: Install Rust
        uses: actions-rs/toolchain@v1
        with:
          toolchain: stable
      
      - name: Install dependencies
        run: npm install
      
      # macOS signing
      - name: Import Certificate (macOS)
        if: matrix.platform == 'macos-latest'
        env:
          CERTIFICATE_BASE64: ${{ secrets.MACOS_CERTIFICATE }}
          CERTIFICATE_PASSWORD: ${{ secrets.MACOS_CERTIFICATE_PASSWORD }}
        run: |
          echo $CERTIFICATE_BASE64 | base64 --decode > certificate.p12
          security create-keychain -p actions build.keychain
          security default-keychain -s build.keychain
          security unlock-keychain -p actions build.keychain
          security import certificate.p12 -k build.keychain -P $CERTIFICATE_PASSWORD -T /usr/bin/codesign
          security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k actions build.keychain
      
      # Windows signing
      - name: Setup Certificate (Windows)
        if: matrix.platform == 'windows-latest'
        env:
          CERTIFICATE_BASE64: ${{ secrets.WINDOWS_CERTIFICATE }}
          CERTIFICATE_PASSWORD: ${{ secrets.WINDOWS_CERTIFICATE_PASSWORD }}
        run: |
          echo $env:CERTIFICATE_BASE64 | Out-File -FilePath cert.txt
          certutil -decode cert.txt cert.pfx
          echo "TAURI_PRIVATE_KEY=$pwd\cert.pfx" >> $env:GITHUB_ENV
          echo "TAURI_KEY_PASSWORD=$env:CERTIFICATE_PASSWORD" >> $env:GITHUB_ENV
      
      - name: Build Tauri App
        run: npm run tauri build
      
      - name: Upload Release Assets
        uses: softprops/action-gh-release@v1
        with:
          files: src-tauri/target/release/bundle/*/*