# Install VirtIO drivers only (no guest agent or SPICE)
# Used during build for network access, not needed on real hardware
{ drivers, ... }:
{
  name = "virtio-drv";
  cdroms = [ drivers.virtio-iso ];
  auditScript = ''
    @echo off
    if exist D:\cert\virtio_win_cert.cer (
      certutil -addstore TrustedPublisher D:\cert\virtio_win_cert.cer
    )
    :: Install drivers via pnputil (network, storage, balloon, serial)
    for %%d in (NetKVM vioinput viostor vioscsi Balloon vioserial) do (
      if exist "D:\%%d\w10\amd64" pnputil /add-driver "D:\%%d\w10\amd64\*.inf" /install 2>nul
      if exist "D:\%%d\w11\amd64" pnputil /add-driver "D:\%%d\w11\amd64\*.inf" /install 2>nul
    )
  '';
}