Add Windows release workflow

- Build, test, package, and publish Windows releases from main
- Document package-version driven release behavior
- Add node-pre-gyp tooling for packaged native dependencies

Author: dbech

.github/workflows/release.yml

@@ -0,0 +1,94 @@
+name: Release
+
+on:
+  push:
+    branches:
+      - main
+  workflow_dispatch:
+
+permissions:
+  contents: write
+
+concurrency:
+  group: release-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  windows-release:
+    name: Windows release
+    runs-on: windows-latest
+
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@v4
+
+      - name: Read package version
+        id: version
+        shell: pwsh
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          $package = Get-Content package.json | ConvertFrom-Json
+          $version = $package.version
+          $tag = "v$version"
+
+          "version=$version" >> $env:GITHUB_OUTPUT
+          "tag=$tag" >> $env:GITHUB_OUTPUT
+
+          gh release view $tag --repo $env:GITHUB_REPOSITORY *> $null
+          if ($LASTEXITCODE -eq 0) {
+            "release_exists=true" >> $env:GITHUB_OUTPUT
+            "Release $tag already exists; skipping build and publish." >> $env:GITHUB_STEP_SUMMARY
+          } else {
+            "release_exists=false" >> $env:GITHUB_OUTPUT
+            "Release $tag does not exist; building Windows installer." >> $env:GITHUB_STEP_SUMMARY
+          }
+
+      - name: Set up Bun
+        if: steps.version.outputs.release_exists != 'true'
+        uses: oven-sh/setup-bun@v2
+
+      - name: Install dependencies
+        if: steps.version.outputs.release_exists != 'true'
+        run: bun install --frozen-lockfile
+
+      - name: Run checks
+        if: steps.version.outputs.release_exists != 'true'
+        run: bun run check
+
+      - name: Run unit tests
+        if: steps.version.outputs.release_exists != 'true'
+        run: bun run test:unit
+
+      - name: Build Windows installer
+        if: steps.version.outputs.release_exists != 'true'
+        run: bun run dist:win
+
+      - name: Upload workflow artifact
+        if: steps.version.outputs.release_exists != 'true'
+        uses: actions/upload-artifact@v4
+        with:
+          name: path-profile-windows-${{ steps.version.outputs.version }}
+          path: dist/Path-Profile*-win-x64.*
+          if-no-files-found: error
+
+      - name: Create GitHub release
+        if: steps.version.outputs.release_exists != 'true'
+        shell: pwsh
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          $tag = "${{ steps.version.outputs.tag }}"
+          $version = "${{ steps.version.outputs.version }}"
+          $artifacts = Get-ChildItem dist -File |
+            Where-Object { $_.Name -like "Path-Profile*-win-x64.*" } |
+            ForEach-Object { $_.FullName }
+
+          if (-not $artifacts) {
+            throw "No release artifacts were found in dist/."
+          }
+
+          gh release create $tag @artifacts `
+            --repo $env:GITHUB_REPOSITORY `
+            --title "Path Profile $version" `
+            --generate-notes

README.md

@@ -66,6 +66,11 @@ assets.
 
 ## Release
 
+Merging to `main` runs the GitHub Actions release workflow. The workflow reads
+`package.json` and creates a GitHub release named `v<version>` when that release
+does not already exist, so release PRs should bump the package version before
+merge.
+
 Create an unpacked Windows x64 app directory for smoke testing:
 
 ```bash

bun.lock

@@ -30,6 +30,7 @@
   "dependencies": {},
   "devDependencies": {
     "@eslint/eslintrc": "^3.3.1",
+    "@mapbox/node-pre-gyp": "^2.0.0",
     "@tailwindcss/postcss": "^4.0.15",
     "@types/node": "^20.14.10",
     "@types/pngjs": "^6.0.5",