Automate desktop latest channel and keep single installer download path

Author: MarcoAIsaac

.github/workflows/windows_desktop_release.yml

@@ -2,14 +2,16 @@ name: Windows desktop release
 
 on:
   push:
+    branches:
+      - "main"
     tags:
       - "v*"
       - "*.*.*"
   workflow_dispatch:
     inputs:
       release_tag:
-        description: "Existing release tag to upload assets to (example: v1.3.0)"
-        required: true
+        description: "Tag/channel to upload assets to (example: v1.4.0 or desktop-latest)"
+        required: false
         type: string
 
 permissions:
@@ -33,22 +35,40 @@ jobs:
         shell: pwsh
         run: choco install innosetup --no-progress -y
 
-      - name: Resolve release tag
-        id: resolve_tag
+      - name: Resolve release channel
+        id: resolve_channel
         shell: pwsh
         run: |
           $eventName = "${{ github.event_name }}"
-          if ($eventName -eq "workflow_dispatch") {
-            $tag = "${{ github.event.inputs.release_tag }}"
+          $refType = "${{ github.ref_type }}"
+          $refName = "${{ github.ref_name }}"
+          $manualTag = "${{ github.event.inputs.release_tag }}"
+
+          if ($eventName -eq "workflow_dispatch" -and ![string]::IsNullOrWhiteSpace($manualTag)) {
+            $tag = $manualTag
+          } elseif ($refType -eq "tag") {
+            $tag = $refName
+          } elseif ($refName -eq "main") {
+            # Rolling channel that always points to latest main build.
+            $tag = "desktop-latest"
           } else {
-            $tag = "${{ github.ref_name }}"
+            throw "Unable to resolve release tag/channel."
           }
 
           if ([string]::IsNullOrWhiteSpace($tag)) {
-            throw "Unable to resolve release tag."
+            throw "Resolved tag/channel is empty."
+          }
+
+          $isRolling = ($tag -eq "desktop-latest")
+          if ($isRolling) {
+            $releaseName = "OCC Desktop - rolling latest (main)"
+          } else {
+            $releaseName = "OCC Desktop $tag"
           }
 
           "tag=$tag" | Out-File -FilePath $env:GITHUB_OUTPUT -Encoding utf8 -Append
+          "is_rolling=$isRolling" | Out-File -FilePath $env:GITHUB_OUTPUT -Encoding utf8 -Append
+          "release_name=$releaseName" | Out-File -FilePath $env:GITHUB_OUTPUT -Encoding utf8 -Append
 
       - name: Build Windows desktop assets
         shell: pwsh
@@ -67,14 +87,34 @@ jobs:
           path: release-windows/*
           if-no-files-found: error
 
-      - name: Upload assets to GitHub Release
+      - name: Upload rolling assets (desktop-latest)
+        if: steps.resolve_channel.outputs.is_rolling == 'True'
+        uses: softprops/action-gh-release@v2
+        with:
+          tag_name: ${{ steps.resolve_channel.outputs.tag }}
+          name: ${{ steps.resolve_channel.outputs.release_name }}
+          prerelease: true
+          make_latest: false
+          generate_release_notes: false
+          overwrite_files: true
+          files: |
+            release-windows/OCCDesktop-windows-x64.exe
+            release-windows/OCCDesktop-windows-x64.zip
+            release-windows/OCCDesktop-Setup-windows-x64.exe
+            release-windows/OCCDesktop-build-info.json
+            release-windows/OCCDesktop-windows-x64.sha256
+
+      - name: Upload versioned assets (tags/manual)
+        if: steps.resolve_channel.outputs.is_rolling != 'True'
         uses: softprops/action-gh-release@v2
         with:
-          tag_name: ${{ steps.resolve_tag.outputs.tag }}
+          tag_name: ${{ steps.resolve_channel.outputs.tag }}
+          name: ${{ steps.resolve_channel.outputs.release_name }}
           generate_release_notes: true
           overwrite_files: true
           files: |
             release-windows/OCCDesktop-windows-x64.exe
             release-windows/OCCDesktop-windows-x64.zip
             release-windows/OCCDesktop-Setup-windows-x64.exe
+            release-windows/OCCDesktop-build-info.json
             release-windows/OCCDesktop-windows-x64.sha256

README.es.md

@@ -113,27 +113,28 @@ Experiment Lab (nuevo en 1.4.0):
 - CLI:
   `occ lab run --claims-dir examples/claim_specs --profiles core nuclear --out .occ_lab/latest`
 
-Descargar paquete preconstruido más reciente para Windows:
+Descargar paquete preconstruido para Windows:
 
-- Página de release (siempre disponible): [Último release](https://github.com/MarcoAIsaac/OCC/releases/latest)
-- Instalador (recomendado): [`OCCDesktop-Setup-windows-x64.exe`](https://github.com/MarcoAIsaac/OCC/releases/latest/download/OCCDesktop-Setup-windows-x64.exe)
-- ZIP (recomendado): [`OCCDesktop-windows-x64.zip`](https://github.com/MarcoAIsaac/OCC/releases/latest/download/OCCDesktop-windows-x64.zip)
-- EXE: [`OCCDesktop-windows-x64.exe`](https://github.com/MarcoAIsaac/OCC/releases/latest/download/OCCDesktop-windows-x64.exe)
-- Checksums: [`OCCDesktop-windows-x64.sha256`](https://github.com/MarcoAIsaac/OCC/releases/latest/download/OCCDesktop-windows-x64.sha256)
+- Canal automático rolling (siempre el último build de `main`):
+  - Instalador (recomendado): [`OCCDesktop-Setup-windows-x64.exe`](https://github.com/MarcoAIsaac/OCC/releases/download/desktop-latest/OCCDesktop-Setup-windows-x64.exe)
+  - Build info: [`OCCDesktop-build-info.json`](https://github.com/MarcoAIsaac/OCC/releases/download/desktop-latest/OCCDesktop-build-info.json)
+  - Checksums: [`OCCDesktop-windows-x64.sha256`](https://github.com/MarcoAIsaac/OCC/releases/download/desktop-latest/OCCDesktop-windows-x64.sha256)
+- Canal estable (último tag de versión): [Último release](https://github.com/MarcoAIsaac/OCC/releases/latest)
 
-Si los enlaces directos devuelven `404`, abre la página del release y espera a que el workflow
-`Windows desktop release` termine de subir los assets.
-Ese pipeline corre automáticamente cuando empujas un tag de versión (por ejemplo `1.4.0` o `v1.4.0`).
-Si hace falta, ejecuta ese workflow manualmente y usa `release_tag` con la versión
-(ejemplo `1.4.0`) para adjuntar assets a un release ya existente.
+Si el enlace directo del instalador devuelve `404`, abre la página del último release y espera a
+que el workflow `Windows desktop release` termine de subir los assets.
+Ese pipeline corre automáticamente en cada push a `main` (rolling `desktop-latest`)
+y también en tags de versión (por ejemplo `1.4.0` o `v1.4.0`).
+Si hace falta, ejecútalo manualmente y usa `release_tag`
+(ejemplo `1.4.0` o `desktop-latest`) para refrescar assets.
 
 Verificación SHA256 en Windows:
 
 ```powershell
-certutil -hashfile .\OCCDesktop-windows-x64.exe SHA256
+certutil -hashfile .\OCCDesktop-Setup-windows-x64.exe SHA256
 ```
 
-Compara con `OCCDesktop-windows-x64.sha256`.
+Compara con la fila `OCCDesktop-Setup-windows-x64.exe` en `OCCDesktop-windows-x64.sha256`.
 
 Desde código fuente sin entrypoint instalado:
 
@@ -155,6 +156,42 @@ Para reducir avisos de SmartScreen en binarios distribuidos, configura secretos
 Sin un certificado de firma confiable (idealmente EV), no se puede eliminar por completo
 la advertencia de SmartScreen en binarios nuevos.
 
+## App móvil (Android)
+
+La app compañera Android (`android/`) incluye:
+
+- Pestaña Workbench (claim YAML + perfiles `core`/`nuclear`)
+- Pestaña Lab (matriz de perfiles sobre claims de muestra con resumen de divergencia)
+- Pestaña Assistant (guía OCC offline)
+- Pestaña History (base de datos local Room)
+
+Permisos Android requeridos:
+
+- `INTERNET` (endpoints/enlaces online opcionales)
+- `ACCESS_NETWORK_STATE` (comprobación de conectividad)
+
+Compilar localmente:
+
+```bash
+cd android
+./gradlew assembleRelease
+```
+
+Prerequisitos: JDK 17 y Android SDK (`ANDROID_HOME` configurado).
+
+APK generado:
+
+- `android/app/build/outputs/apk/release/app-release.apk`
+
+Descargar APK preconstruido del último release:
+
+- [`OCCMobile-android.apk`](https://github.com/MarcoAIsaac/OCC/releases/latest/download/OCCMobile-android.apk)
+- [`OCCMobile-android.sha256`](https://github.com/MarcoAIsaac/OCC/releases/latest/download/OCCMobile-android.sha256)
+
+Automatización de release:
+
+- El workflow `.github/workflows/android_release.yml` publica assets Android automáticamente al empujar tags de versión (`1.4.0` o `v1.4.0`).
+
 ## Utilidades de mantenimiento
 
 ```bash
@@ -225,9 +262,9 @@ Para ejecuciones largas, conviene usar el flujo manual de verificación completa
 
 ## Expansiones de dominio
 
-`v1.4.0` mantiene el conjunto de candados nucleares (`nuclear_guard`, `NUC*`) y agrega
+`v1.4.0` mantiene el conjunto de candados nucleares (`j4_nuclear_guard`, `L4C*/L4E*`) y agrega
 flujos matriciales de Experiment Lab junto con distribución de escritorio para Windows vía GitHub Releases
-(`OCCDesktop-windows-x64.exe/.zip`).
+(`OCCDesktop-Setup-windows-x64.exe`).
 
 ## Estructura del repositorio
 

README.md

@@ -113,27 +113,28 @@ Experiment Lab (new in 1.4.0):
 - CLI:
   `occ lab run --claims-dir examples/claim_specs --profiles core nuclear --out .occ_lab/latest`
 
-Download latest prebuilt Windows package:
+Download prebuilt Windows package:
 
-- Release page (always available): [Latest release](https://github.com/MarcoAIsaac/OCC/releases/latest)
-- Installer (recommended): [`OCCDesktop-Setup-windows-x64.exe`](https://github.com/MarcoAIsaac/OCC/releases/latest/download/OCCDesktop-Setup-windows-x64.exe)
-- ZIP (recommended): [`OCCDesktop-windows-x64.zip`](https://github.com/MarcoAIsaac/OCC/releases/latest/download/OCCDesktop-windows-x64.zip)
-- EXE: [`OCCDesktop-windows-x64.exe`](https://github.com/MarcoAIsaac/OCC/releases/latest/download/OCCDesktop-windows-x64.exe)
-- Checksums: [`OCCDesktop-windows-x64.sha256`](https://github.com/MarcoAIsaac/OCC/releases/latest/download/OCCDesktop-windows-x64.sha256)
+- Automatic rolling channel (always latest `main` build):
+  - Installer (recommended): [`OCCDesktop-Setup-windows-x64.exe`](https://github.com/MarcoAIsaac/OCC/releases/download/desktop-latest/OCCDesktop-Setup-windows-x64.exe)
+  - Build info: [`OCCDesktop-build-info.json`](https://github.com/MarcoAIsaac/OCC/releases/download/desktop-latest/OCCDesktop-build-info.json)
+  - Checksums: [`OCCDesktop-windows-x64.sha256`](https://github.com/MarcoAIsaac/OCC/releases/download/desktop-latest/OCCDesktop-windows-x64.sha256)
+- Stable channel (latest version tag): [Latest release](https://github.com/MarcoAIsaac/OCC/releases/latest)
 
-If direct download links return `404`, open the release page and wait for workflow
+If the direct installer link returns `404`, open the latest release page and wait for workflow
 `Windows desktop release` to finish uploading assets.
-This pipeline runs automatically when you push a version tag (for example `1.4.0` or `v1.4.0`).
-If needed, trigger that workflow manually and set `release_tag` to your version
-(example `1.4.0`) to attach assets to an existing release.
+This pipeline runs automatically on every push to `main` (rolling `desktop-latest`)
+and on version tags (for example `1.4.0` or `v1.4.0`).
+If needed, trigger the workflow manually and set `release_tag`
+(example `1.4.0` or `desktop-latest`) to refresh assets.
 
 Windows checksum verification:
 
 ```powershell
-certutil -hashfile .\OCCDesktop-windows-x64.exe SHA256
+certutil -hashfile .\OCCDesktop-Setup-windows-x64.exe SHA256
 ```
 
-Compare with `OCCDesktop-windows-x64.sha256`.
+Compare with the `OCCDesktop-Setup-windows-x64.exe` row in `OCCDesktop-windows-x64.sha256`.
 
 From source without install entrypoint:
 
@@ -155,6 +156,42 @@ To reduce SmartScreen warnings in distributed binaries, configure repository sec
 Without a trusted code-signing certificate (ideally EV), SmartScreen warnings cannot be fully
 eliminated for fresh binaries.
 
+## Mobile app (Android)
+
+Android companion app (`android/`) includes:
+
+- Workbench tab (claim YAML + `core`/`nuclear` judge profiles)
+- Lab tab (profile matrix over sample claims with divergence summary)
+- Assistant tab (offline OCC guidance)
+- History tab (local Room database)
+
+Required Android permissions:
+
+- `INTERNET` (optional online endpoints / links)
+- `ACCESS_NETWORK_STATE` (network availability checks)
+
+Build locally:
+
+```bash
+cd android
+./gradlew assembleRelease
+```
+
+Prerequisites: JDK 17 and Android SDK (`ANDROID_HOME` configured).
+
+Generated APK:
+
+- `android/app/build/outputs/apk/release/app-release.apk`
+
+Download prebuilt APK from latest release:
+
+- [`OCCMobile-android.apk`](https://github.com/MarcoAIsaac/OCC/releases/latest/download/OCCMobile-android.apk)
+- [`OCCMobile-android.sha256`](https://github.com/MarcoAIsaac/OCC/releases/latest/download/OCCMobile-android.sha256)
+
+Release automation:
+
+- Workflow `.github/workflows/android_release.yml` publishes Android assets automatically on pushed version tags (`1.4.0` or `v1.4.0`).
+
 ## Maintenance helpers
 
 ```bash
@@ -225,9 +262,9 @@ For long runs, prefer the manual full-suite workflow in GitHub Actions.
 
 ## Domain expansions
 
-`v1.4.0` keeps the nuclear-domain lock set (`nuclear_guard`, `NUC*`) and adds
+`v1.4.0` keeps the nuclear-domain lock set (`j4_nuclear_guard`, `L4C*/L4E*`) and adds
 Experiment Lab matrix workflows plus Windows desktop distribution via GitHub Releases
-(`OCCDesktop-windows-x64.exe/.zip`).
+(`OCCDesktop-Setup-windows-x64.exe`).
 
 ## Repository layout
 

occ/desktop.py

@@ -85,6 +85,13 @@ def _fmt_cmd(cmd: Sequence[str]) -> str:
     return " ".join(shlex.quote(x) for x in cmd)
 
 
+RELEASE_STABLE_URL = "https://github.com/MarcoAIsaac/OCC/releases/latest"
+RELEASE_DESKTOP_ROLLING_URL = "https://github.com/MarcoAIsaac/OCC/releases/tag/desktop-latest"
+RELEASE_DESKTOP_ROLLING_BASE = (
+    "https://github.com/MarcoAIsaac/OCC/releases/download/desktop-latest/"
+)
+
+
 class OCCDesktopApp(tk.Tk):
     BG = "#0b1220"
     SURFACE = "#111827"
@@ -549,7 +556,7 @@ def _build_menu(self) -> None:
         )
         help_menu.add_command(
             label=_tr("Latest release", "Ultimo release"),
-            command=lambda: webbrowser.open("https://github.com/MarcoAIsaac/OCC/releases/latest"),
+            command=lambda: webbrowser.open(RELEASE_STABLE_URL),
         )
         help_menu.add_separator()
         help_menu.add_command(label=_tr("About", "Acerca de"), command=self._show_about_dialog)
@@ -817,8 +824,8 @@ def _build_sidebar(self, parent: ttk.Frame) -> None:
         link_row.pack(fill=tk.X, pady=(6, 0))
         release_btn = self._create_modern_button(
             link_row,
-            label=_tr("Open latest release", "Abrir ultimo release"),
-            command=lambda: self._open_url("https://github.com/MarcoAIsaac/OCC/releases/latest"),
+            label=_tr("Open desktop-latest release", "Abrir release desktop-latest"),
+            command=lambda: self._open_url(RELEASE_DESKTOP_ROLLING_URL),
             variant="ghost",
         )
         release_btn.pack(fill=tk.X)
@@ -981,8 +988,8 @@ def _build_workbench_tab(self, tab: ttk.Frame) -> None:
         ).grid(row=0, column=1, sticky="e")
         ttk.Button(
             hero,
-            text=_tr("Open release page", "Abrir pagina release"),
-            command=lambda: webbrowser.open("https://github.com/MarcoAIsaac/OCC/releases/latest"),
+            text=_tr("Open desktop-latest page", "Abrir pagina desktop-latest"),
+            command=lambda: webbrowser.open(RELEASE_DESKTOP_ROLLING_URL),
             style="Ghost.TButton",
         ).grid(row=1, column=1, sticky="e", pady=(4, 0))
 
@@ -1684,40 +1691,12 @@ def _build_security_tab(self, tab: ttk.Frame) -> None:
 
         ttk.Button(
             link_frame,
-            text=_tr("Open latest release", "Abrir ultimo release"),
-            command=lambda: webbrowser.open("https://github.com/MarcoAIsaac/OCC/releases/latest"),
-            style="Primary.TButton",
-        ).pack(side=tk.LEFT)
-
-        ttk.Button(
-            link_frame,
-            text=_tr("Open latest ZIP", "Abrir ultimo ZIP"),
+            text=_tr("Download Setup installer", "Descargar instalador Setup"),
             command=lambda: webbrowser.open(
-                "https://github.com/MarcoAIsaac/OCC/releases/latest/download/"
-                "OCCDesktop-windows-x64.zip"
+                RELEASE_DESKTOP_ROLLING_BASE + "OCCDesktop-Setup-windows-x64.exe"
             ),
-            style="Ghost.TButton",
-        ).pack(side=tk.LEFT, padx=(8, 0))
-
-        ttk.Button(
-            link_frame,
-            text=_tr("Open Setup installer", "Abrir instalador Setup"),
-            command=lambda: webbrowser.open(
-                "https://github.com/MarcoAIsaac/OCC/releases/latest/download/"
-                "OCCDesktop-Setup-windows-x64.exe"
-            ),
-            style="Ghost.TButton",
-        ).pack(side=tk.LEFT, padx=(8, 0))
-
-        ttk.Button(
-            link_frame,
-            text=_tr("Open latest EXE", "Abrir ultimo EXE"),
-            command=lambda: webbrowser.open(
-                "https://github.com/MarcoAIsaac/OCC/releases/latest/download/"
-                "OCCDesktop-windows-x64.exe"
-            ),
-            style="Ghost.TButton",
-        ).pack(side=tk.LEFT, padx=(8, 0))
+            style="Primary.TButton",
+        ).pack(side=tk.LEFT)
 
         ttk.Button(
             tab,