feat(desktop): add Windows NSIS installer and unified GitHub Releases

Extend desktop staging and Tauri server spawn for Windows, build x64
setup.exe in CI, and publish macOS dmg + Windows installer under the
same codedelta-desktop-v* tag from tauri.conf.json version.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: heqikai

.github/workflows/desktop-macos.yml

@@ -9,6 +9,7 @@ on:
       - 'apps/web/**'
       - 'packages/**'
       - 'scripts/desktop-stage.mjs'
+      - 'scripts/desktop-publish-release.mjs'
       - 'src/**'
 
 permissions:
@@ -35,7 +36,7 @@ jobs:
         run: npm run stage:desktop
 
       - name: Build desktop app
-        run: npm run build:app -w @codedelta/desktop
+        run: npm run build:app -w @codedelta/desktop -- --bundles dmg
 
       - name: Upload dmg artifact
         uses: actions/upload-artifact@v4
@@ -51,25 +52,7 @@ jobs:
           GH_TOKEN: ${{ github.token }}
         run: |
           set -euo pipefail
-          VERSION=$(node -p "require('./apps/desktop/src-tauri/tauri.conf.json').version")
-          TAG="codedelta-desktop-v${VERSION}"
           DMG=$(ls apps/desktop/src-tauri/target/release/bundle/dmg/*.dmg)
-          SHA_SHORT=$(git rev-parse --short HEAD)
-          NOTES=$(cat <<EOF
-          CodeDelta macOS desktop app (unsigned, Apple Silicon arm64).
-
-          Bundled: web UI, API server, CodeGraph runtime, and Node 22 — no separate Node install required.
-
-          - Built from commit \`${SHA_SHORT}\`
-          - Requires **git** on \`PATH\`
-          - If macOS blocks launch: right-click → **Open**, or \`xattr -cr /Applications/CodeDelta.app\`
-          EOF
-          )
-          if gh release view "$TAG" >/dev/null 2>&1; then
-            gh release upload "$TAG" "$DMG" --clobber
-            gh release edit "$TAG" --notes "$NOTES"
-          else
-            gh release create "$TAG" "$DMG" --title "CodeDelta Desktop v${VERSION}" --notes "$NOTES"
-          fi
+          node scripts/desktop-publish-release.mjs macos "$DMG"
 
       # Optional: add APPLE_CERTIFICATE / notarytool steps when signing secrets are configured.

.github/workflows/desktop-windows.yml

@@ -0,0 +1,60 @@
+name: Desktop (Windows)
+
+on:
+  workflow_dispatch:
+  push:
+    branches: [main]
+    paths:
+      - 'apps/desktop/**'
+      - 'apps/web/**'
+      - 'packages/**'
+      - 'scripts/desktop-stage.mjs'
+      - 'scripts/desktop-publish-release.mjs'
+      - 'src/**'
+
+permissions:
+  contents: write
+
+jobs:
+  build-windows:
+    runs-on: windows-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+          cache: npm
+
+      - name: Install Rust
+        uses: dtolnay/rust-toolchain@1.88.0
+
+      - name: Install NSIS
+        run: choco install nsis -y
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Stage desktop runtime
+        run: npm run stage:desktop
+
+      - name: Build desktop app
+        run: npm run build:app -w @codedelta/desktop -- --bundles nsis
+
+      - name: Upload Windows installer artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: codedelta-windows-exe
+          path: |
+            apps/desktop/src-tauri/target/release/bundle/nsis/*.exe
+          if-no-files-found: error
+
+      - name: Publish installer to GitHub Release
+        if: github.ref == 'refs/heads/main'
+        shell: bash
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          set -euo pipefail
+          EXE=$(ls apps/desktop/src-tauri/target/release/bundle/nsis/*.exe)
+          node scripts/desktop-publish-release.mjs windows "$EXE"

README.md

@@ -229,24 +229,31 @@ Roadmap and deferred work: [docs/codedelta/ROADMAP.md](docs/codedelta/ROADMAP.md
 - Panorama export is a simplified card layout (no live *Expand* buttons); prefer **SVG** for zoom/clarity
 - Symbol click opens **file** diff, not symbol-to-hunk mapping
 
-## Desktop (macOS)
+## Desktop (macOS & Windows)
 
-CodeDelta ships a **macOS desktop app** ([`apps/desktop/`](apps/desktop/)) — a Tauri 2 shell that bundles Node 22 (for CodeGraph’s `node:sqlite`) and the API server. End users do not need a separate Node install.
+CodeDelta ships **desktop apps** ([`apps/desktop/`](apps/desktop/)) — Tauri 2 shells that bundle Node 22 (for CodeGraph’s `node:sqlite`) and the API server. End users do not need a separate Node install.
 
-### Download (Apple Silicon)
+**Version** is read from `apps/desktop/src-tauri/tauri.conf.json` (currently `0.1.0`). macOS and Windows installers publish to the same GitHub Release: `codedelta-desktop-v0.1.0`.
 
-Pre-built **unsigned** `.dmg` (arm64 / M1–M4):
+### Download
 
-- [GitHub Releases](https://github.com/ingeniousfrog/CodeDelta/releases/tag/codedelta-desktop-v0.1.0) — `CodeDelta_0.1.0_aarch64.dmg` (auto-updated on each `main` desktop CI build)
-- [百度网盘](https://pan.baidu.com/s/1FQxOgNHyvU1Y5EB34RpogQ?pwd=frog) · 提取码: `frog` (mirror)
+| Platform | File | Notes |
+|----------|------|-------|
+| **macOS** (Apple Silicon) | [GitHub Releases](https://github.com/ingeniousfrog/CodeDelta/releases/tag/codedelta-desktop-v0.1.0) → `CodeDelta_*_aarch64.dmg` | Unsigned; right-click → Open if blocked |
+| **Windows** (x64) | Same release → `CodeDelta_*_x64-setup.exe` | NSIS installer |
+| macOS mirror | [百度网盘](https://pan.baidu.com/s/1FQxOgNHyvU1Y5EB34RpogQ?pwd=frog) · 提取码: `frog` | |
 
-Install: open the dmg → drag **CodeDelta** to Applications. If macOS blocks launch, right-click the app → **Open**, or run `xattr -cr /Applications/CodeDelta.app` (common after Baidu Netdisk download). Requires **git** on `PATH`.
+**Install (macOS):** open the dmg → drag **CodeDelta** to Applications. If blocked: `xattr -cr /Applications/CodeDelta.app`
 
-**Runtime data:** `~/Library/Application Support/CodeDelta` (repos, snapshots, settings).
+**Install (Windows):** run the setup `.exe` and follow the wizard.
+
+Requires **git** on `PATH` on both platforms.
+
+**Runtime data:** `~/Library/Application Support/CodeDelta` (macOS) · `%APPDATA%\CodeDelta` (Windows)
 
 ### Build from source
 
-**Requirements:** macOS (arm64 or x64), [Xcode Command Line Tools](https://developer.apple.com/xcode/resources/), [Rust 1.88+](https://rustup.rs/) via `rustup` (Homebrew `cargo` alone may be too old), and repo dev dependencies (`npm ci`).
+**Requirements:** target OS (macOS or Windows), [Rust 1.88+](https://rustup.rs/), repo dev dependencies (`npm ci`). macOS also needs Xcode Command Line Tools; Windows needs [NSIS](https://nsis.sourceforge.io/) for the installer.
 
 ```bash
 # One-time: stage embedded Node + server runtime (~200MB under apps/desktop/src-tauri/resources/runtime/)
@@ -259,7 +266,9 @@ npm run build:desktop
 npm run dev:desktop
 ```
 
-Output: `apps/desktop/src-tauri/target/release/bundle/dmg/CodeDelta_*_aarch64.dmg` (or copy to `release/` manually if `bundle_dmg.sh` fails).
+Output:
+- macOS: `apps/desktop/src-tauri/target/release/bundle/dmg/CodeDelta_*_aarch64.dmg`
+- Windows: `apps/desktop/src-tauri/target/release/bundle/nsis/CodeDelta_*_x64-setup.exe`
 
 **`apps/desktop/` layout:**
 

apps/desktop/package.json

@@ -2,10 +2,10 @@
   "name": "@codedelta/desktop",
   "version": "0.1.0",
   "private": true,
-  "description": "CodeDelta desktop shell (macOS, Tauri 2)",
+  "description": "CodeDelta desktop shell (Tauri 2, macOS + Windows)",
   "scripts": {
-    "dev": "PATH=\"$HOME/.cargo/bin:$PATH\" tauri dev",
-    "build:app": "PATH=\"$HOME/.cargo/bin:$PATH\" tauri build"
+    "dev": "tauri dev",
+    "build:app": "tauri build"
   },
   "devDependencies": {
     "@tauri-apps/cli": "^2.5.0"

apps/desktop/src-tauri/src/server.rs

@@ -14,32 +14,60 @@ pub fn api_base_url() -> String {
 }
 
 fn health_ok() -> bool {
-    let output = Command::new("curl")
-        .args([
-            "-sf",
-            &format!("{}/api/health", api_base_url()),
-        ])
-        .output();
-    matches!(output, Ok(o) if o.status.success())
+    #[cfg(windows)]
+    {
+        let script = format!(
+            "try {{ (Invoke-WebRequest -Uri '{}/api/health' -UseBasicParsing -TimeoutSec 2).StatusCode -eq 200 }} catch {{ $false }}",
+            api_base_url()
+        );
+        let output = Command::new("powershell")
+            .args(["-NoProfile", "-NonInteractive", "-Command", &script])
+            .output();
+        return matches!(output, Ok(o) if o.status.success() && String::from_utf8_lossy(&o.stdout).trim() == "True");
+    }
+
+    #[cfg(not(windows))]
+    {
+        let output = Command::new("curl")
+            .args(["-sf", &format!("{}/api/health", api_base_url())])
+            .output();
+        matches!(output, Ok(o) if o.status.success())
+    }
 }
 
 fn cache_dir() -> Result<PathBuf, String> {
-    let home = dirs::home_dir().ok_or("Could not resolve home directory")?;
-    Ok(home.join("Library/Application Support/CodeDelta"))
+    let base = dirs::data_dir()
+        .or_else(dirs::home_dir)
+        .ok_or("Could not resolve application data directory")?;
+    Ok(base.join("CodeDelta"))
+}
+
+fn bundled_node_path(runtime: &PathBuf) -> PathBuf {
+    #[cfg(windows)]
+    {
+        runtime.join("node/node.exe")
+    }
+    #[cfg(not(windows))]
+    {
+        runtime.join("node/bin/node")
+    }
+}
+
+fn runtime_has_node(runtime: &PathBuf) -> bool {
+    bundled_node_path(runtime).exists()
 }
 
 fn resolve_runtime_dir(app: &AppHandle) -> Result<PathBuf, String> {
     let resource = app
         .path()
         .resource_dir()
         .map_err(|e| e.to_string())?;
-    // Tauri copies `resources/runtime/` → `$RESOURCE/resources/runtime/`.
     let candidates = [
         resource.join("resources/runtime"),
         resource.join("runtime"),
     ];
     for staged in candidates {
-        if staged.join("node/bin/node").exists() {
+        if runtime_has_node(&staged) {
             return Ok(staged);
         }
     }
@@ -48,7 +76,7 @@ fn resolve_runtime_dir(app: &AppHandle) -> Result<PathBuf, String> {
     {
         let manifest = PathBuf::from(env!("CARGO_MANIFEST_DIR"));
         let dev_staged = manifest.join("resources/runtime");
-        if dev_staged.join("node/bin/node").exists() {
+        if runtime_has_node(&dev_staged) {
             return Ok(dev_staged);
         }
     }
@@ -77,7 +105,7 @@ fn resolve_server_entry(runtime: &PathBuf) -> Result<PathBuf, String> {
 
 fn spawn_bundled(app: &AppHandle) -> Result<Child, String> {
     let runtime = resolve_runtime_dir(app)?;
-    let node = runtime.join("node/bin/node");
+    let node = bundled_node_path(&runtime);
     let server_js = resolve_server_entry(&runtime)?;
 
     let web_dist = runtime.join("web-dist");
@@ -144,18 +172,45 @@ pub fn stop(_app: &AppHandle) {
 }
 
 pub fn port_in_use_hint() -> Option<String> {
-    let output = Command::new("lsof")
-        .args(["-i", &format!(":{API_PORT}")])
-        .output()
-        .ok()?;
-    if !output.status.success() {
-        return None;
+    #[cfg(windows)]
+    {
+        let output = Command::new("netstat")
+            .args(["-ano"])
+            .output()
+            .ok()?;
+        if !output.status.success() {
+            return None;
+        }
+        let text = String::from_utf8_lossy(&output.stdout);
+        let needle = format!(":{API_PORT}");
+        let lines: Vec<&str> = text
+            .lines()
+            .filter(|l| l.contains(&needle))
+            .collect();
+        if lines.is_empty() {
+            return None;
+        }
+        return Some(format!(
+            "Port {API_PORT} is already in use. Quit the other CodeDelta or dev server and try again.\n{}",
+            lines.join("\n")
+        ));
     }
-    let text = String::from_utf8_lossy(&output.stdout);
-    if text.trim().is_empty() {
-        return None;
+
+    #[cfg(not(windows))]
+    {
+        let output = Command::new("lsof")
+            .args(["-i", &format!(":{API_PORT}")])
+            .output()
+            .ok()?;
+        if !output.status.success() {
+            return None;
+        }
+        let text = String::from_utf8_lossy(&output.stdout);
+        if text.trim().is_empty() {
+            return None;
+        }
+        Some(format!(
+            "Port {API_PORT} is already in use. Quit the other CodeDelta or dev server and try again.\n{text}"
+        ))
     }
-    Some(format!(
-        "Port {API_PORT} is already in use. Quit the other CodeDelta or dev server and try again.\n{text}"
-    ))
 }

apps/desktop/src-tauri/tauri.conf.json

@@ -28,16 +28,22 @@
   },
   "bundle": {
     "active": true,
-    "targets": ["dmg"],
+    "targets": ["dmg", "nsis"],
     "icon": [
       "icons/32x32.png",
       "icons/128x128.png",
       "icons/128x128@2x.png",
-      "icons/icon.icns"
+      "icons/icon.icns",
+      "icons/icon.ico"
     ],
     "resources": ["resources/runtime/"],
     "macOS": {
       "minimumSystemVersion": "12.0"
+    },
+    "windows": {
+      "nsis": {
+        "installMode": "currentUser"
+      }
     }
   }
 }

docs/codedelta/ROADMAP.md

@@ -131,7 +131,8 @@ Not implemented yet (planned):
 - [x] Import page recent repositories
 - [x] `npm run dev:desktop` / `stage:desktop` / `build:desktop`
 - [ ] Apple code signing + notarization for public distribution
-- [ ] Windows / Linux desktop
+- [x] Windows desktop (x64 NSIS installer, CI + GitHub Releases)
+- [ ] Linux desktop
 - [ ] Auto-update, menu bar quick open, drag-and-drop import
 
 ## Architecture snapshot