Merge pull request #18 from closedloop-ai/FEAT-63

Add automated release workflow with Slack notifications

Author: shafty023

.github/actions/slack-notify/action.yml

@@ -0,0 +1,23 @@
+name: 'Slack Notification'
+description: 'Send a notification to Slack via incoming webhook'
+inputs:
+  webhook_url:
+    description: 'Slack webhook URL'
+    required: true
+  message:
+    description: 'Message text (supports Slack mrkdwn and \n for newlines)'
+    required: true
+
+runs:
+  using: 'composite'
+  steps:
+    - name: Send Slack notification
+      shell: bash
+      env:
+        SLACK_WEBHOOK_URL: ${{ inputs.webhook_url }}
+        SLACK_MESSAGE: ${{ inputs.message }}
+      run: |
+        PAYLOAD=$(jq -n --arg text "$SLACK_MESSAGE" '{text: $text}')
+        curl --fail-with-body -X POST -H 'Content-type: application/json' \
+              --data "$PAYLOAD" \
+              "$SLACK_WEBHOOK_URL"

.github/workflows/release.yml

@@ -0,0 +1,102 @@
+name: Release Desktop
+
+on:
+  push:
+    branches: [main]
+    paths:
+      - "apps/desktop/**"
+
+concurrency:
+  group: release-desktop
+  cancel-in-progress: false
+
+env:
+  SKIP: "false"
+
+jobs:
+  release:
+    runs-on: macos-latest
+    timeout-minutes: 30
+    permissions:
+      contents: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Read version from package.json
+        id: version
+        run: |
+          VERSION=$(node -p "require('./apps/desktop/package.json').version")
+          echo "version=$VERSION" >> $GITHUB_OUTPUT
+
+      - name: Check if version already released
+        id: check_release
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          VERSION="${{ steps.version.outputs.version }}"
+          if gh release view "v$VERSION" --repo "${{ github.repository }}" > /dev/null 2>&1; then
+            echo "skip=true" >> $GITHUB_OUTPUT
+            echo "::warning::Version $VERSION already released — skipping build. Bump the version in apps/desktop/package.json to trigger a new release."
+          else
+            echo "skip=false" >> $GITHUB_OUTPUT
+          fi
+
+      - name: Install pnpm
+        if: steps.check_release.outputs.skip != 'true'
+        uses: pnpm/action-setup@v4
+
+      - name: Setup Node.js
+        if: steps.check_release.outputs.skip != 'true'
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: pnpm
+
+      - name: Install dependencies
+        if: steps.check_release.outputs.skip != 'true'
+        run: pnpm install --frozen-lockfile
+
+      - name: Typecheck
+        if: steps.check_release.outputs.skip != 'true'
+        run: pnpm -C apps/desktop typecheck
+
+      - name: Run tests
+        if: steps.check_release.outputs.skip != 'true'
+        run: pnpm -C apps/desktop test
+
+      - name: Build and publish to GitHub Releases
+        if: steps.check_release.outputs.skip != 'true'
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: pnpm -C apps/desktop release
+
+      - name: Upload DMG as workflow artifact
+        if: steps.check_release.outputs.skip != 'true'
+        uses: actions/upload-artifact@v4
+        with:
+          name: ClosedLoop-macOS-${{ steps.version.outputs.version }}
+          path: apps/desktop/dist-dmg/*.dmg
+          if-no-files-found: error
+
+      - name: Build Slack message
+        if: steps.check_release.outputs.skip != 'true'
+        id: slack_message
+        run: |
+          VERSION="${{ steps.version.outputs.version }}"
+          RELEASE_URL="https://github.com/${{ github.repository }}/releases/tag/v${VERSION}"
+          RUN_URL="${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"
+          MSG=$(printf "New ClosedLoop Desktop build ready\nVersion: %s\nRelease: %s\nArtifact: %s" \
+            "$VERSION" "$RELEASE_URL" "$RUN_URL")
+          echo "message<<EOF" >> $GITHUB_OUTPUT
+          echo "$MSG" >> $GITHUB_OUTPUT
+          echo "EOF" >> $GITHUB_OUTPUT
+
+      - name: Notify Slack
+        if: steps.check_release.outputs.skip != 'true'
+        continue-on-error: true
+        uses: ./.github/actions/slack-notify
+        with:
+          webhook_url: ${{ secrets.SLACK_GITHUB_REPO_WEBHOOK_URL }}
+          message: ${{ steps.slack_message.outputs.message }}

CLAUDE.md

@@ -75,6 +75,38 @@ curl -s -H "X-Desktop-Session-Token: <TOKEN>" -H "Origin: http://localhost" \
   "http://localhost:19432/api/engineer/directories?path=/Users/<you>/.ssh"
 ```
 
+## Releasing Desktop Builds
+
+Releases are automated via CI. When a PR that touches `apps/desktop/**` is merged to main, the release workflow runs:
+
+1. Reads the `version` from `apps/desktop/package.json`
+2. Checks if that version already has a GitHub Release — if so, skips with a warning
+3. Builds a universal macOS DMG via `electron-builder`
+4. Publishes the DMG to GitHub Releases and uploads it as a workflow artifact
+5. Sends a Slack notification to the team
+
+### Triggering a new release
+
+Bump the `version` field in `apps/desktop/package.json` as part of your PR. When it merges, CI will build and publish automatically.
+
+```jsonc
+// apps/desktop/package.json
+{ "version": "0.2.0" }  // ← bump this
+```
+
+If you merge desktop changes **without** bumping the version, the workflow will skip the build and log a warning — no harm done, no duplicate releases.
+
+### Auto-update for users
+
+- **Packaged builds** (DMG installs) use `electron-updater` to check GitHub Releases every 5 minutes. Users are notified in-app when a new version is available, and it auto-installs on quit.
+- **Dev builds** (running from source) compare `origin/main` commit hashes via `git fetch` and offer to pull + rebuild.
+
+### Required GitHub secrets
+
+- `SLACK_GITHUB_REPO_WEBHOOK_URL` — Slack incoming webhook for release notifications
+
+The `GITHUB_TOKEN` (automatic in Actions) handles GitHub Releases publishing. If the repo has restricted default token permissions, ensure `contents: write` is allowed (Settings → Actions → General).
+
 ## Updating App Icons
 
 The source of truth for the app icon is `apps/desktop/app-icon.svg`. All other icon assets are derived from it. To regenerate after updating the SVG:

apps/desktop/package.json

@@ -11,7 +11,8 @@
     "build": "pnpm prebuild && tsc -p tsconfig.json",
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "test": "tsx --test test/*.test.ts",
-    "package": "pnpm build && electron-builder --mac --config electron-builder.yml"
+    "package": "pnpm build && electron-builder --mac --config electron-builder.yml",
+    "release": "pnpm build && electron-builder --mac --publish always --config electron-builder.yml"
   },
   "dependencies": {
     "busboy": "^1.6.0",