v1.0.10 — Microsoft Store AppX target (x64 + arm64)

Adds an AppX build target alongside the existing NSIS installers for
Windows, wired with the Store identity registered in Partner Center
under RFGuru.SVXLink-HotSpot:

  identityName:         RFGuru.SVXLink-HotSpot
  publisher:            CN=FBF35633-D0C5-410A-883E-75B3C38AB746
  publisherDisplayName: RF Guru
  applicationId:        HotSpot
  displayName:          SVXLink HotSpot

Outputs land in dist/ as HotSpot-x64.appx + HotSpot-arm64.appx, uploaded
to the draft release alongside the NSIS .exe files. Submit them to the
Store via Partner Center → SVXLink-HotSpot → New submission → upload
each .appx.

Signing: electron-builder's appx target requires the package to be
signed for makeappx/signtool to succeed, but Microsoft re-signs during
Store certification. So we generate a throwaway self-signed cert in CI
whose Subject matches the Publisher CN — just enough to make
signtool.exe happy. Sideload users who install the .appx directly will
have to trust the publisher cert on first launch; Store users see no
prompt because the Store-signed copy chains to Microsoft.

BLE: the AppX manifest declares `runFullTrust` (electron-builder's
Desktop-Bridge template default), so the packaged app retains full
Win32 trust including Web Bluetooth.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: Joeri Van Dooren

.github/workflows/release.yml

@@ -60,7 +60,9 @@ jobs:
           - name: Windows
             os: windows-latest
             script: build:win
-            artifacts: dist/*.exe
+            artifacts: |
+              dist/*.exe
+              dist/*.appx
 
           - name: Linux
             os: ubuntu-latest
@@ -203,6 +205,43 @@ jobs:
         if: matrix.os != 'macos-latest'
         run: npm run ${{ matrix.script }} -- --publish never
 
+      # Microsoft Store / sideload AppX for Windows. Generates a self-signed
+      # cert whose Subject matches the Publisher CN declared in the manifest
+      # (Partner Center → SVXLink-HotSpot identity). The cert is throwaway:
+      # Microsoft re-signs the package during Store certification, so it only
+      # needs to make signtool.exe happy here. Sideload users who install the
+      # .appx directly will have to trust the publisher cert at install time.
+      - name: Generate AppX signing cert (Windows only)
+        if: matrix.os == 'windows-latest'
+        shell: pwsh
+        run: |
+          $cert = New-SelfSignedCertificate `
+            -Type Custom `
+            -Subject "CN=FBF35633-D0C5-410A-883E-75B3C38AB746" `
+            -KeyUsage DigitalSignature `
+            -FriendlyName "HotSpot Store Build Cert" `
+            -CertStoreLocation "Cert:\CurrentUser\My" `
+            -TextExtension @("2.5.29.37={text}1.3.6.1.5.5.7.3.3", "2.5.29.19={text}")
+          $pfxPath = Join-Path $env:RUNNER_TEMP "store-cert.pfx"
+          $pwd = ConvertTo-SecureString -String "store-cert-temp" -Force -AsPlainText
+          $cert | Export-PfxCertificate -FilePath $pfxPath -Password $pwd | Out-Null
+          Write-Host "Exported PFX to $pfxPath"
+          "APPX_CERT_PATH=$pfxPath"        | Out-File -FilePath $env:GITHUB_ENV -Encoding utf8 -Append
+          "APPX_CERT_PASSWORD=store-cert-temp" | Out-File -FilePath $env:GITHUB_ENV -Encoding utf8 -Append
+
+      - name: Build Windows AppX (x64 + arm64, signed)
+        if: matrix.os == 'windows-latest'
+        shell: pwsh
+        run: |
+          # WIN_CSC_* are Windows-only signing inputs read by electron-builder.
+          # We re-export inside the shell rather than reading the APPX_CERT_*
+          # vars via a step-level env block: the validator can't statically
+          # confirm a var set by a previous step exists, and we want a clean
+          # actions-lint pass.
+          $env:WIN_CSC_LINK = $env:APPX_CERT_PATH
+          $env:WIN_CSC_KEY_PASSWORD = $env:APPX_CERT_PASSWORD
+          npm run build:win:appx -- --publish never
+
       - name: Upload artifacts to draft release
         uses: softprops/action-gh-release@v2
         with:

RELEASE_NOTES.md

@@ -23,6 +23,12 @@ A minimal desktop companion for the Analog HotSpot SVXLink box.
 | Windows | `.exe` (NSIS installer, x64) |
 | Linux | `.AppImage` (x64 + arm64) |
 
+## What's new in 1.0.10
+
+- **Microsoft Store packages.** Each release now ships `HotSpot-x64.appx` and `HotSpot-arm64.appx` alongside the NSIS installers. These match the **RFGuru.SVXLink-HotSpot** identity registered in Partner Center and are ready to upload to the Microsoft Store submission flow.
+- AppX manifest declares `runFullTrust` (via electron-builder's Desktop-Bridge template), so the packaged app retains full Web Bluetooth access just like the NSIS installer.
+- Signed in CI with a self-signed cert whose CN matches the registered Publisher (`CN=FBF35633-D0C5-410A-883E-75B3C38AB746`). The Store re-signs during certification, so this signature only exists to satisfy `signtool.exe` during the build.
+
 ## What's new in 1.0.9
 
 A targeted hardening pass after a 10-lens adversarial audit. Most items are invisible if everything was already working — the value is in the failure modes that no longer happen.

package.json

@@ -1,14 +1,15 @@
 {
   "name": "hotspot-app",
   "productName": "HotSpot",
-  "version": "1.0.9",
+  "version": "1.0.10",
   "description": "HotSpot — Desktop App for Mac, Windows and Linux (BLE feed viewer)",
   "main": "main.js",
   "scripts": {
     "start": "electron .",
     "build:mac": "electron-builder --mac",
     "build:linux": "electron-builder --linux",
-    "build:win": "electron-builder --win"
+    "build:win": "electron-builder --win nsis --x64 --arm64",
+    "build:win:appx": "electron-builder --win appx --x64 --arm64"
   },
   "build": {
     "appId": "com.gururf.hotspot-app",
@@ -53,11 +54,30 @@
             "x64",
             "arm64"
           ]
+        },
+        {
+          "target": "appx",
+          "arch": [
+            "x64",
+            "arm64"
+          ]
         }
       ],
       "artifactName": "${productName}-Setup-${arch}.${ext}",
       "icon": "build/icon.png"
     },
+    "appx": {
+      "identityName": "RFGuru.SVXLink-HotSpot",
+      "publisher": "CN=FBF35633-D0C5-410A-883E-75B3C38AB746",
+      "publisherDisplayName": "RF Guru",
+      "applicationId": "HotSpot",
+      "displayName": "SVXLink HotSpot",
+      "backgroundColor": "#0b1220",
+      "languages": [
+        "en-US"
+      ],
+      "artifactName": "${productName}-${arch}.${ext}"
+    },
     "linux": {
       "target": [
         {