Automate Windows installer releases

Author: nakorndev

.github/workflows/ci.yml

@@ -13,10 +13,10 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v4
 
       - name: Setup .NET
-        uses: actions/setup-dotnet@v5
+        uses: actions/setup-dotnet@v4
         with:
           dotnet-version: 8.0.x
 
@@ -26,12 +26,19 @@ jobs:
       - name: Build
         run: dotnet build ToastDesk.csproj --configuration Release --no-restore
 
-      - name: Publish Windows x64 package
+      - name: Install packaging tools
+        shell: pwsh
+        run: |
+          dotnet tool install --global wix
+          "$env:USERPROFILE\.dotnet\tools" >> $env:GITHUB_PATH
+          choco install innosetup --yes --no-progress
+
+      - name: Build distributable assets
         shell: pwsh
         run: ./scripts/publish-release.ps1
 
-      - name: Upload release package
+      - name: Upload distributable assets
         uses: actions/upload-artifact@v4
         with:
-          name: ToastDesk-win-x64
-          path: artifacts/release/ToastDesk-win-x64.zip
+          name: ToastDesk-windows-assets
+          path: artifacts/release/ToastDesk-*

.github/workflows/release.yml

@@ -5,6 +5,11 @@ on:
     tags:
       - "v*.*.*"
   workflow_dispatch:
+    inputs:
+      tag_name:
+        description: "Existing tag to release, for example v0.1.0"
+        required: true
+        type: string
 
 permissions:
   contents: write
@@ -14,20 +19,41 @@ jobs:
     runs-on: windows-latest
 
     steps:
+      - name: Resolve release tag
+        id: release_tag
+        shell: pwsh
+        run: |
+          if ("${{ github.event_name }}" -eq "workflow_dispatch") {
+            "tag=${{ inputs.tag_name }}" >> $env:GITHUB_OUTPUT
+          } else {
+            "tag=${{ github.ref_name }}" >> $env:GITHUB_OUTPUT
+          }
+
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ steps.release_tag.outputs.tag }}
 
       - name: Setup .NET
-        uses: actions/setup-dotnet@v5
+        uses: actions/setup-dotnet@v4
         with:
           dotnet-version: 8.0.x
 
-      - name: Publish Windows x64 package
+      - name: Install packaging tools
+        shell: pwsh
+        run: |
+          dotnet tool install --global wix
+          "$env:USERPROFILE\.dotnet\tools" >> $env:GITHUB_PATH
+          choco install innosetup --yes --no-progress
+
+      - name: Build release assets
         shell: pwsh
-        run: ./scripts/publish-release.ps1
+        run: ./scripts/publish-release.ps1 -ProductVersion "${{ steps.release_tag.outputs.tag }}"
 
       - name: Create GitHub release
         uses: softprops/action-gh-release@v2
         with:
-          files: artifacts/release/ToastDesk-win-x64.zip
+          tag_name: ${{ steps.release_tag.outputs.tag }}
+          name: ToastDesk ${{ steps.release_tag.outputs.tag }}
+          files: artifacts/release/ToastDesk-*
           generate_release_notes: true

AGENTS.md

@@ -26,6 +26,7 @@
 - For unpackaged WPF desktop notifications, register an AppUserModelID Start Menu shortcut before sending Windows toasts.
 - Prefer polling `UserNotificationListener.GetNotificationsAsync` for this prototype; subscribing to `NotificationChanged` can fail in this unpackaged desktop process.
 - The app should eventually ship as an easy Windows installable artifact, preferably `.exe` and/or `.msi`.
+- Release automation should publish public Windows assets from version tags: setup `.exe`, MSI, portable ZIP, and SHA256 checksums.
 
 ## Windows Behavior Requirements
 

README.md

@@ -1,24 +1,27 @@
 # ToastDesk
 
-Persistent Windows notifications you cannot miss.
+Windows notifications that stay visible until you act.
 
 ToastDesk is a Windows 11 desktop app that mirrors Windows notifications into persistent, always-on-top toast cards. It keeps important alerts visible until you open or dismiss them.
 
 ![ToastDesk icon](assets/icons/ToastDesk.png)
 
 ## Download
 
-Download the latest Windows build from:
+Download the latest Windows installer:
 
-[ToastDesk Releases](https://github.com/nakorncode/toastdeck/releases/latest)
+- [ToastDesk-Setup-win-x64.exe](https://github.com/nakorncode/toastdeck/releases/latest/download/ToastDesk-Setup-win-x64.exe) - recommended installer
+- [ToastDesk-Setup-win-x64.msi](https://github.com/nakorncode/toastdeck/releases/latest/download/ToastDesk-Setup-win-x64.msi) - MSI package for Windows deployment
+- [ToastDesk-Portable-win-x64.zip](https://github.com/nakorncode/toastdeck/releases/latest/download/ToastDesk-Portable-win-x64.zip) - portable self-contained build
+- [SHA256 checksums](https://github.com/nakorncode/toastdeck/releases/latest/download/ToastDesk-SHA256SUMS.txt)
 
-Use `ToastDesk-win-x64.zip`, extract it, then run `ToastDesk.exe`.
+All release builds are self-contained. No separate .NET runtime install is required.
 
-ToastDesk is currently distributed as a self-contained Windows x64 ZIP package. No separate .NET runtime install is required.
+If Windows SmartScreen warns about an unknown publisher, choose **More info** then **Run anyway**. Code signing is planned after the app identity and installer flow stabilize.
 
 ## Status
 
-ToastDesk is early public-preview software. Core notification capture, persistent overlay cards, tray behavior, settings, startup registration, notification actions, and notification sounds are implemented. Installer/signing work is still in progress.
+ToastDesk is early public-preview software. Core notification capture, persistent overlay cards, tray behavior, settings, startup registration, notification actions, notification sounds, and automated Windows release packaging are implemented. Code signing is still in progress.
 
 ## Features
 
@@ -42,15 +45,20 @@ git tag v0.1.0
 git push origin v0.1.0
 ```
 
-The GitHub Actions release workflow will build `ToastDesk-win-x64.zip` and attach it to the release.
+The GitHub Actions release workflow builds and uploads:
+
+- `ToastDesk-Setup-win-x64.exe`
+- `ToastDesk-Setup-win-x64.msi`
+- `ToastDesk-Portable-win-x64.zip`
+- `ToastDesk-SHA256SUMS.txt`
 
 You can also create the package locally:
 
 ```powershell
 powershell -ExecutionPolicy Bypass -File .\scripts\publish-release.ps1
 ```
 
-The local package is written to `artifacts/release/ToastDesk-win-x64.zip`.
+The local packages are written to `artifacts/release`.
 
 ## Requirements
 
@@ -70,19 +78,22 @@ powershell -ExecutionPolicy Bypass -File .\scripts\run-dev.ps1
 powershell -ExecutionPolicy Bypass -File .\scripts\run-build.ps1
 ```
 
-## Publish Release Package Locally
+## Publish Release Assets Locally
 
 ```powershell
 powershell -ExecutionPolicy Bypass -File .\scripts\publish-release.ps1
 ```
 
-The release package is written to `artifacts/release/ToastDesk-win-x64.zip`.
+The release assets are written to `artifacts/release`.
 
 ## Installer
 
-An Inno Setup script is provided at `installer/ToastDesk.iss`. It expects the published app under `artifacts/publish/win-x64`.
+Release packaging creates both an Inno Setup `.exe` installer and a WiX `.msi` installer.
+
+Local installer builds require:
 
-MSI packaging is not finalized yet. The current public-ready package target is a signed or unsigned Windows x64 ZIP/EXE package.
+- [Inno Setup 6](https://jrsoftware.org/isinfo.php)
+- WiX CLI: `dotnet tool install --global wix`
 
 ## Notification Sounds
 

docs/production-readiness.md

@@ -14,13 +14,13 @@
 - Toast cards now use explicit `Open` and `Dismiss` actions. `Open` attempts to launch the source app by AppUserModelID when Windows exposes one, with ToastDesk as fallback.
 - Notification capture prefers Windows change events when available. If WinRT event subscription fails in the unpackaged desktop app, ToastDesk falls back to guarded 500ms polling to keep latency low without overlapping capture calls.
 - Improve settings: durable migration, clear defaults, restore defaults, notification sound presets/custom audio, and direct links to Windows notification permissions.
-- Prepare packaging: self-contained `.exe`, installer path, icon, versioning, and uninstall cleanup.
+- Prepare packaging: portable ZIP, setup `.exe`, MSI, icon, versioning, and uninstall cleanup.
 - Add diagnostics: local logs for notification permission, shortcut registration, startup registration, and capture polling failures.
 
 ## Current Public Repo Assets
 
 - `README.md`, `LICENSE`, `SECURITY.md`, and `CONTRIBUTING.md`
 - GitHub Actions CI and release workflows
-- `scripts/publish-release.ps1` for Windows x64 self-contained release ZIPs
-- `installer/ToastDesk.iss` for an optional Inno Setup installer
+- `scripts/publish-release.ps1` for Windows x64 release ZIP, setup `.exe`, MSI, and checksums
+- `installer/ToastDesk.iss` for the Inno Setup installer
 - `assets/icons/ToastDesk.png` and `assets/icons/ToastDesk.ico`

docs/release-template.md

@@ -2,14 +2,17 @@
 
 ## Download
 
-Download `ToastDesk-win-x64.zip` from this release, extract it, then run `ToastDesk.exe`.
+- `ToastDesk-Setup-win-x64.exe` - recommended installer
+- `ToastDesk-Setup-win-x64.msi` - MSI package for Windows deployment
+- `ToastDesk-Portable-win-x64.zip` - portable self-contained build
+- `ToastDesk-SHA256SUMS.txt` - SHA256 checksums
 
 ## Notes
 
 - Windows 11 is the primary target.
-- The package is self-contained; no separate .NET runtime install is required.
+- Release builds are self-contained; no separate .NET runtime install is required.
 - Windows notification capture requires user permission.
-- This build is unsigned. Windows SmartScreen may warn on first launch until signing is added.
+- Release installers are unsigned. Windows SmartScreen may warn on first launch until signing is added.
 
 ## Changes
 

installer/ToastDesk.iss

@@ -1,5 +1,7 @@
 #define MyAppName "ToastDesk"
+#ifndef MyAppVersion
 #define MyAppVersion "0.1.0"
+#endif
 #define MyAppPublisher "NakornCode"
 #define MyAppExeName "ToastDesk.exe"
 
@@ -12,7 +14,7 @@ DefaultDirName={autopf}\{#MyAppName}
 DefaultGroupName={#MyAppName}
 DisableProgramGroupPage=yes
 OutputDir=..\artifacts\installer
-OutputBaseFilename=ToastDesk-Setup-{#MyAppVersion}
+OutputBaseFilename=ToastDesk-Setup-{#MyAppVersion}-win-x64
 Compression=lzma
 SolidCompression=yes
 WizardStyle=modern