Add CI workflow to build Windows + macOS Studio installers

Native windows-latest / macos-14 runners build the .exe and .dmg (no
cross-compiling / Wine needed) and attach them to the release for the
pushed studio-v* tag. Also make the daemon staging step npm call work on
Windows (shell: true), add a Windows app icon, and document the Windows
download.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: EfeAcar6431

.github/workflows/release-studio.yml

@@ -0,0 +1,63 @@
+name: Release CodeRouter Studio
+
+# Builds the CodeRouter Studio desktop installers on native runners (so the
+# Windows .exe and macOS .dmg are produced without cross-compiling) and
+# attaches them to the GitHub release for the pushed tag.
+#
+# Trigger by pushing a tag like `studio-v0.1.1`, or run manually and pass the
+# target release tag.
+
+on:
+  push:
+    tags:
+      - 'studio-v*'
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: 'Release tag to publish installers to (e.g. studio-v0.1.1)'
+        required: true
+        default: studio-v0.1.1
+
+permissions:
+  contents: write
+
+jobs:
+  build:
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [windows-latest, macos-14]
+    runs-on: ${{ matrix.os }}
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: pnpm/action-setup@v4
+        with:
+          version: 9.15.0
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 24
+          cache: pnpm
+
+      - name: Install dependencies
+        run: pnpm install --no-frozen-lockfile
+
+      - name: Build installer
+        run: pnpm --filter @coderouter/app package
+        env:
+          # Unsigned builds — skip macOS signing identity discovery so the
+          # build doesn't fail looking for a Developer ID certificate.
+          CSC_IDENTITY_AUTO_DISCOVERY: 'false'
+
+      - name: Publish to release
+        uses: softprops/action-gh-release@v2
+        with:
+          tag_name: ${{ github.event.inputs.tag || github.ref_name }}
+          fail_on_unmatched_files: false
+          files: |
+            packages/app/release/*.exe
+            packages/app/release/*.dmg
+            packages/app/release/*.blockmap
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

README.md

@@ -14,9 +14,12 @@ Use it two ways: the **CLI** (`coderouter`) for the terminal, or **CodeRouter St
 
 CodeRouter Studio is a native desktop app that wraps the same router in a full UI — your projects, chats, loops, usage, and plugins in one place. It runs a persistent local daemon so background work (like loops) keeps going after you close the window.
 
-**Download:** grab the latest `CodeRouter-Studio-*.dmg` (macOS) from the [Releases page](https://github.com/Code-Router/CodeRouter/releases), drag it to Applications, and open it.
+**Download** the latest build from the [Releases page](https://github.com/Code-Router/CodeRouter/releases):
 
-> The app isn't notarized yet, so on first launch macOS may warn that it's from an unidentified developer. Right‑click the app → **Open**, then confirm. The app is fully self‑contained — no separate Node or CLI install required.
+- **macOS (Apple Silicon):** the `.dmg` — open it and drag CodeRouter Studio to Applications.
+- **Windows:** the `.exe` installer — run it and CodeRouter Studio installs and launches.
+
+> Builds aren't code‑signed yet. On macOS, right‑click the app → **Open** and confirm. On Windows, if SmartScreen appears, click **More info → Run anyway**. The app is fully self‑contained — no separate Node or CLI install required.
 
 What's inside:
 

packages/app/electron-builder.json

@@ -11,5 +11,5 @@
     "icon": "build/icon.icns"
   },
   "linux": { "target": ["AppImage"], "category": "Development" },
-  "win": { "target": ["nsis"] }
+  "win": { "target": ["nsis"], "icon": "build/icon.png" }
 }

packages/app/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coderouter/app",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "private": true,
   "description": "CodeRouter Studio — Electron desktop app (Loops, Projects, Chats, Usage)",
   "author": "Efe Acar",

packages/app/scripts/stage-daemon.mjs

@@ -68,9 +68,12 @@ writeFileSync(
 );
 
 console.log('[stage-daemon] installing daemon runtime deps (ink, react, ws, ripgrep)…');
+// `shell: true` so this resolves npm.cmd on Windows as well as npm on
+// macOS/Linux — the staging step runs on every target platform in CI.
 execFileSync('npm', ['install', '--omit=dev', '--no-audit', '--no-fund', '--no-package-lock'], {
   cwd: out,
   stdio: 'inherit',
+  shell: true,
 });
 
 // 2. node-pty: copy the already-built package (with NAPI prebuilds) from the