Add portable Windows release workflow

Author: evgyur

.github/workflows/release-portable.yml

@@ -0,0 +1,42 @@
+name: release-portable
+
+on:
+  workflow_dispatch:
+  push:
+    tags:
+      - "v*"
+
+permissions:
+  contents: write
+
+jobs:
+  build-windows-portable:
+    runs-on: windows-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: "npm"
+
+      - name: Install dependencies
+        run: npm install --legacy-peer-deps
+        env:
+          VERCEL: "1"
+
+      - name: Download Claude binary
+        run: npm run claude:download
+
+      - name: Build app
+        run: npm run build
+
+      - name: Package portable
+        run: npm run package:win:portable
+
+      - name: Upload release assets
+        uses: softprops/action-gh-release@v2
+        with:
+          files: release/*.exe

package.json

@@ -15,6 +15,7 @@
     "package": "node scripts/package-windows.mjs",
     "package:mac": "electron-builder --mac",
     "package:win": "electron-builder --win",
+    "package:win:portable": "node scripts/package-windows-portable.mjs",
     "package:linux": "electron-builder --linux",
     "dist": "electron-builder",
     "dist:manifest": "node scripts/generate-update-manifest.mjs",

scripts/package-windows-portable.mjs

@@ -0,0 +1,133 @@
+#!/usr/bin/env node
+/**
+ * Windows portable packaging script that suppresses winCodeSign extraction errors.
+ * This mirrors package-windows.mjs but produces a portable .exe.
+ */
+
+import { spawn } from "child_process"
+import { fileURLToPath } from "url"
+import { dirname, join } from "path"
+import { existsSync } from "fs"
+
+const __filename = fileURLToPath(import.meta.url)
+const __dirname = dirname(__filename)
+const projectRoot = join(__dirname, "..")
+
+// Set environment variables to prevent code signing attempts
+const env = {
+  ...process.env,
+  CSC_IDENTITY_AUTO_SELECT: "false",
+  WIN_CSC_LINK: "",
+  WIN_CSC_KEY_PASSWORD: "",
+}
+
+// Track if we detect file lock errors
+let hasFileLockError = false
+
+// Filter out winCodeSign/darwin symlink errors from output
+const filterOutput = (data) => {
+  const lines = data.toString().split("\n")
+  const filtered = lines.filter((line) => {
+    const lower = line.toLowerCase()
+
+    // Detect file lock/overwrite errors in stdout too
+    if (
+      lower.includes("ebusy") ||
+      lower.includes("eacces") ||
+      lower.includes("eperm") ||
+      lower.includes("file is in use") ||
+      lower.includes("cannot overwrite") ||
+      lower.includes("access is denied") ||
+      lower.includes("the process cannot access the file") ||
+      lower.includes("being used by another process") ||
+      lower.includes("file is locked") ||
+      lower.includes("cannot delete") ||
+      lower.includes("sharing violation")
+    ) {
+      hasFileLockError = true
+    }
+
+    return (
+      !lower.includes("wincodesign") &&
+      !lower.includes("darwin") &&
+      !lower.includes("symbolic link") &&
+      !lower.includes("libcrypto.dylib") &&
+      !lower.includes("libssl.dylib") &&
+      !lower.includes("cannot create symbolic link")
+    )
+  })
+  if (filtered.length > 0) {
+    process.stdout.write(filtered.join("\n"))
+  }
+}
+
+const electronBuilder = spawn("npx", ["electron-builder", "--win", "portable"], {
+  cwd: projectRoot,
+  shell: true,
+  env,
+})
+
+// Filter stdout
+electronBuilder.stdout?.on("data", filterOutput)
+
+// Filter stderr but keep important errors
+electronBuilder.stderr?.on("data", (data) => {
+  const text = data.toString()
+  const lower = text.toLowerCase()
+
+  // Detect file lock/overwrite errors in stderr too
+  if (
+    lower.includes("ebusy") ||
+    lower.includes("eacces") ||
+    lower.includes("eperm") ||
+    lower.includes("file is in use") ||
+    lower.includes("cannot overwrite") ||
+    lower.includes("access is denied") ||
+    lower.includes("the process cannot access the file") ||
+    lower.includes("being used by another process") ||
+    lower.includes("file is locked") ||
+    lower.includes("cannot delete") ||
+    lower.includes("sharing violation")
+  ) {
+    hasFileLockError = true
+  }
+
+  // Only show errors that aren't related to winCodeSign/darwin
+  if (
+    !lower.includes("wincodesign") &&
+    !lower.includes("darwin") &&
+    !lower.includes("symbolic link") &&
+    !lower.includes("libcrypto.dylib") &&
+    !lower.includes("libssl.dylib")
+  ) {
+    process.stderr.write(data)
+  }
+})
+
+electronBuilder.on("error", (error) => {
+  console.error("Failed to start electron-builder:", error)
+  process.exit(1)
+})
+
+electronBuilder.on("close", (code) => {
+  const releaseDir = join(projectRoot, "release")
+  const exeCandidates = [
+    join(releaseDir, "1Code.exe"),
+  ]
+  const exePath = exeCandidates.find((p) => existsSync(p))
+
+  if (hasFileLockError) {
+    console.log("\n❌ Build failed: Cannot overwrite files (app may be running)")
+    console.log("   Please close 1Code.exe and try again")
+    process.exit(1)
+  } else if (exePath) {
+    console.log("\n✅ Build completed successfully!")
+    console.log(`   Executable: ${exePath}`)
+    process.exit(0)
+  } else if (code === 0) {
+    console.log("\n⚠️  Build completed but executable not found in release/")
+    process.exit(1)
+  } else {
+    process.exit(code || 1)
+  }
+})