feat: add windows install support

Author: Rfluid

.github/workflows/release.yml

@@ -42,6 +42,14 @@ jobs:
                       runner: macos-15
                       target: aarch64-apple-darwin
                       experimental: false
+                    - label: windows-x86_64
+                      runner: windows-latest
+                      target: x86_64-pc-windows-msvc
+                      experimental: false
+                    - label: windows-aarch64
+                      runner: windows-latest
+                      target: aarch64-pc-windows-msvc
+                      experimental: true
 
         steps:
             - name: Checkout repository
@@ -95,7 +103,8 @@ jobs:
               if: startsWith(matrix.runner, 'macos')
               run: brew install librsvg
 
-            - name: Package release artifacts
+            - name: Package release artifacts (Unix)
+              if: ${{ !startsWith(matrix.runner, 'windows') }}
               shell: bash
               env:
                   TAG: ${{ github.ref_name }}
@@ -143,12 +152,43 @@ jobs:
                       fi
                   )
 
+            - name: Package release artifacts (Windows)
+              if: startsWith(matrix.runner, 'windows')
+              shell: pwsh
+              env:
+                  TAG: ${{ github.ref_name }}
+                  TARGET_TRIPLE: ${{ matrix.target }}
+              run: |
+                  $ErrorActionPreference = 'Stop'
+                  $assetDir = "aura-$env:TAG-$env:TARGET_TRIPLE"
+                  $stageRoot = "dist/$assetDir"
+                  New-Item -ItemType Directory -Force -Path $stageRoot | Out-Null
+
+                  Copy-Item "target/$env:TARGET_TRIPLE/release/aura.exe"            "$stageRoot/aura.exe"
+                  Copy-Item "target/$env:TARGET_TRIPLE/release/aura-plugin-rtk.exe" "$stageRoot/aura-plugin-rtk.exe"
+
+                  if (Test-Path "scripts/install.ps1") {
+                      Copy-Item "scripts/install.ps1" "$stageRoot/install.ps1"
+                  }
+
+                  foreach ($f in @('README.md', 'LICENSE')) {
+                      if (Test-Path $f) { Copy-Item $f "$stageRoot/$f" }
+                  }
+
+                  $zip = "dist/$assetDir.zip"
+                  if (Test-Path $zip) { Remove-Item $zip }
+                  Compress-Archive -Path "$stageRoot/*" -DestinationPath $zip
+
+                  $hash = (Get-FileHash -Algorithm SHA256 $zip).Hash.ToLower()
+                  "$hash  $assetDir.zip" | Out-File -Encoding ascii "dist/$assetDir.sha256"
+
             - name: Upload packaged artifacts
               uses: actions/upload-artifact@v7
               with:
                   name: release-${{ matrix.target }}
                   path: |
                       dist/*.tar.gz
+                      dist/*.zip
                       dist/*.sha256
                   if-no-files-found: error
 
@@ -170,4 +210,5 @@ jobs:
                   generate_release_notes: true
                   files: |
                       dist/*.tar.gz
+                      dist/*.zip
                       dist/*.sha256

PLAN.md

@@ -153,6 +153,19 @@
 
 ---
 
+## Phase 11 — Windows support ✓
+
+- [x] Cargo gating: `tray-icon` falls through to its Win32 backend on Windows (no `gtk` feature needed); the existing "not Linux/BSD" target table covers this
+- [x] Windows Credential Manager read/write for Claude Code OAuth (`Claude Code-credentials`, user = `%USERNAME%`) via `keyring` crate (`windows-native` backend); falls back to `.credentials.json` for legacy installs
+- [x] `scripts/install.ps1` — copies binaries to `%LOCALAPPDATA%\Programs\Aura` and drops a Startup-folder `Aura.lnk` for autostart
+- [x] `install.sh` detects MSYS/MinGW/Cygwin and points users at `install.ps1`
+- [x] `justfile` adds `install-windows`, `uninstall-windows`, `start-windows`, `stop-windows`, `status-windows`
+- [x] Release CI matrix builds `x86_64-pc-windows-msvc` (stable) and `aarch64-pc-windows-msvc` (experimental); Windows artifacts are zipped (not tarballed)
+- [x] README documents Windows config path (`%APPDATA%\aura\config.toml`), install flow, and Credential Manager caveat
+- [ ] **Manual test required** — first-launch verification on x86_64 + aarch64 Windows hosts; code-signing setup once a Windows Authenticode cert is available
+
+---
+
 ## Phase 10 — macOS support ✓
 
 - [x] Cross-platform Cargo gating for `tray-icon` (`gtk` feature only on Linux/BSD)

README.md

@@ -62,6 +62,7 @@ Aura is configured via a single TOML file at the OS-standard config location:
 |---|---|
 | Linux | `~/.config/aura/config.toml` |
 | macOS | `~/Library/Application Support/aura/config.toml` |
+| Windows | `%APPDATA%\aura\config.toml` |
 
 Define as many profiles as you need:
 
@@ -89,13 +90,15 @@ kind = "codex"
 - [ ] Custom command agents (BYOA — Bring Your Own Agent)
 - [ ] Plugin authoring guide + example plugin
 - [x] macOS support (Apple Silicon + Intel; menu-bar app + launchd autostart)
+- [x] Windows support (x86_64 + aarch64; tray app + Startup-folder autostart)
 - [ ] Plugin registry
 
 ## Installation
 
-Aura runs as a systemd user service on Linux and as a menu-bar app (launchd
-LaunchAgent + `Aura.app`) on macOS. You can either grab a prebuilt release
-archive or build from source with Cargo (Rust 1.80+).
+Aura runs as a systemd user service on Linux, as a menu-bar app (launchd
+LaunchAgent + `Aura.app`) on macOS, and as a tray app with a Startup-folder
+shortcut on Windows. You can either grab a prebuilt release archive or build
+from source with Cargo (Rust 1.80+).
 
 ### System dependencies (Linux)
 
@@ -129,84 +132,57 @@ Claude Code OAuth tokens are stored in the macOS Keychain on Darwin (service
 get a "Keychain read failed" warning, run Claude Code at least once to
 populate the entry, then restart Aura.
 
+### System dependencies (Windows)
+
+No system packages required — the MSVC C runtime ships with Windows. To
+build from source you'll need:
+
+```powershell
+# Install Rust (https://rustup.rs) and the MSVC build tools
+# (Visual Studio "Desktop development with C++" workload or VS Build Tools).
+rustup target add x86_64-pc-windows-msvc      # default on Windows hosts
+```
+
+On Windows Claude Code stores OAuth tokens in **Credential Manager** (target
+`Claude Code-credentials`); Aura reads them from there automatically, falling
+back to `%USERPROFILE%\.claude\.credentials.json` for legacy installs. If you
+get a "Credential Manager read failed" warning, run Claude Code at least once
+to populate the entry, then restart Aura.
+
 ### Install from GitHub Releases
 
-Published releases include tarballs containing the `aura` and `aura-plugin-rtk`
-binaries plus the systemd unit (Linux archives only):
+Published releases include tarballs (Linux/macOS) and a zip (Windows)
+containing the `aura` and `aura-plugin-rtk` binaries plus the platform
+autostart artifact:
 
 - Linux x86_64 (gnu) — `x86_64-unknown-linux-gnu`
 - Linux x86_64 (musl) — `x86_64-unknown-linux-musl`
 - Linux aarch64 (gnu) — `aarch64-unknown-linux-gnu`
 - macOS Intel — `x86_64-apple-darwin` (ships `Aura.app` + `com.aura.agent-usage.plist`)
 - macOS Apple Silicon — `aarch64-apple-darwin`
+- Windows x86_64 — `x86_64-pc-windows-msvc` (ships `aura.exe` + `install.ps1`)
+- Windows aarch64 — `aarch64-pc-windows-msvc` (experimental)
 
-> Note: the musl Linux artifact is still experimental. macOS archives are
-> built and signed best-effort — unsigned bundles will be quarantined by
-> Gatekeeper; see the macOS deps section above.
+> Note: the musl Linux artifact and the aarch64 Windows artifact are still
+> experimental. macOS archives are built and signed best-effort — unsigned
+> bundles will be quarantined by Gatekeeper; see the macOS deps section above.
+> Windows binaries are unsigned: SmartScreen may prompt on first run.
 
-Pick the archive that matches your host:
+Run the installer — it auto-detects your host, downloads the matching archive,
+verifies its checksum, and wires up autostart:
 
 ```bash
-VERSION="$(curl -fsSLI -o /dev/null -w '%{url_effective}' \
-  https://github.com/Rfluid/aura/releases/latest \
-  | sed 's:.*/::')"
-
-if [ -z "${VERSION}" ]; then
-  echo "Failed to determine the latest GitHub release version" >&2
-  exit 1
-fi
-
-case "$(uname -s)-$(uname -m)" in
-  Linux-x86_64)  ASSET="aura-${VERSION}-x86_64-unknown-linux-gnu" ;;
-  Linux-aarch64) ASSET="aura-${VERSION}-aarch64-unknown-linux-gnu" ;;
-  Darwin-x86_64) ASSET="aura-${VERSION}-x86_64-apple-darwin" ;;
-  Darwin-arm64)  ASSET="aura-${VERSION}-aarch64-apple-darwin" ;;
-  *)
-    echo "No published release artifact for $(uname -s)-$(uname -m)" >&2
-    exit 1
-    ;;
-esac
-
-curl -LO "https://github.com/Rfluid/aura/releases/download/${VERSION}/${ASSET}.tar.gz"
-curl -LO "https://github.com/Rfluid/aura/releases/download/${VERSION}/${ASSET}.sha256"
-
-if command -v sha256sum >/dev/null 2>&1; then
-  sha256sum -c "${ASSET}.sha256"
-else
-  shasum -a 256 -c "${ASSET}.sha256"
-fi
-
-tar -xzf "${ASSET}.tar.gz"
-
-install -Dm755 "${ASSET}/aura"            "${HOME}/.local/bin/aura"
-install -Dm755 "${ASSET}/aura-plugin-rtk" "${HOME}/.local/bin/aura-plugin-rtk"
-
-case "$(uname -s)" in
-  Linux)
-    if [ -f "${ASSET}/aura.service" ]; then
-      install -Dm644 "${ASSET}/aura.service" "${HOME}/.config/systemd/user/aura.service"
-      systemctl --user daemon-reload
-      systemctl --user enable --now aura
-    fi
-    ;;
-  Darwin)
-    if [ -d "${ASSET}/Aura.app" ]; then
-      rm -rf "/Applications/Aura.app"
-      cp -R "${ASSET}/Aura.app" "/Applications/Aura.app"
-      xattr -dr com.apple.quarantine "/Applications/Aura.app" 2>/dev/null || true
-    fi
-    if [ -f "${ASSET}/com.aura.agent-usage.plist" ]; then
-      install -m 644 "${ASSET}/com.aura.agent-usage.plist" \
-        "${HOME}/Library/LaunchAgents/com.aura.agent-usage.plist"
-      launchctl bootout   "gui/$(id -u)/com.aura.agent-usage" 2>/dev/null || true
-      launchctl bootstrap "gui/$(id -u)" \
-        "${HOME}/Library/LaunchAgents/com.aura.agent-usage.plist"
-    fi
-    ;;
-esac
+# Linux / macOS
+curl -fsSL https://raw.githubusercontent.com/Rfluid/aura/main/install.sh | bash
+```
+
+```powershell
+# Windows (PowerShell)
+iex (irm https://raw.githubusercontent.com/Rfluid/aura/main/scripts/install.ps1)
 ```
 
-Make sure `~/.local/bin` is on `PATH`.
+Make sure `~/.local/bin` (Linux/macOS) or `%LOCALAPPDATA%\Programs\Aura`
+(Windows) is on `PATH`.
 
 ### Build from source
 
@@ -216,6 +192,11 @@ Make sure `~/.local/bin` is on `PATH`.
 ./install.sh        # auto-detects Linux/macOS and wires up autostart
 ```
 
+```powershell
+# Windows
+powershell -ExecutionPolicy Bypass -File .\scripts\install.ps1
+```
+
 Or, with [`just`](https://github.com/casey/just):
 
 ```bash
@@ -224,6 +205,10 @@ just install                 # build + install (Linux: systemd, macOS: launchd +
 systemctl --user enable --now aura
 ```
 
+```powershell
+just install-windows         # build + install + Startup-folder shortcut
+```
+
 #### Manual (Linux)
 
 ```bash
@@ -251,13 +236,33 @@ launchctl bootstrap "gui/$(id -u)" \
     ~/Library/LaunchAgents/com.aura.agent-usage.plist
 ```
 
+#### Manual (Windows)
+
+```powershell
+cargo build --release --workspace
+
+$dst = Join-Path $env:LOCALAPPDATA 'Programs\Aura'
+New-Item -ItemType Directory -Force -Path $dst | Out-Null
+Copy-Item -Force target\release\aura.exe            "$dst\aura.exe"
+Copy-Item -Force target\release\aura-plugin-rtk.exe "$dst\aura-plugin-rtk.exe"
+
+# Autostart at sign-in via Startup-folder shortcut.
+$wsh = New-Object -ComObject WScript.Shell
+$lnk = $wsh.CreateShortcut((Join-Path ([Environment]::GetFolderPath('Startup')) 'Aura.lnk'))
+$lnk.TargetPath       = "$dst\aura.exe"
+$lnk.WorkingDirectory = $dst
+$lnk.WindowStyle      = 7
+$lnk.Save()
+```
+
 ### Common commands
 
-| Command                     | What it does                                                      |
-| --------------------------- | ----------------------------------------------------------------- |
-| `just run`                  | Launch Aura (debug build) without installing                      |
-| `just status` / `just logs` | Service status / tail logs (systemd on Linux, launchd on macOS)   |
-| `just uninstall`            | Remove binaries + unit / LaunchAgent (keeps config & state)       |
+| Command                                           | What it does                                                                       |
+| ------------------------------------------------- | ---------------------------------------------------------------------------------- |
+| `just run`                                        | Launch Aura (debug build) without installing                                       |
+| `just status` / `just logs`                       | Service status / tail logs (systemd on Linux, launchd on macOS)                    |
+| `just status-windows` / `just stop-windows`       | Show / stop the running `aura.exe` on Windows                                      |
+| `just uninstall` / `just uninstall-windows`       | Remove binaries + unit / LaunchAgent / Startup shortcut (keeps config & state)     |
 
 ## Sponsor
 

crates/aura-core/Cargo.toml

@@ -20,5 +20,12 @@ ureq.workspace                  = true
 [target.'cfg(target_os = "macos")'.dependencies]
 security-framework = "2"
 
+# On Windows Claude Code stores the same credential blob in the Windows
+# Credential Manager (service `Claude Code-credentials`) and likewise
+# removes the on-disk file. Use the `windows-native` keyring backend so
+# we don't pull dbus/secret-service deps on other platforms.
+[target.'cfg(target_os = "windows")'.dependencies]
+keyring = { version = "3", default-features = false, features = ["windows-native"] }
+
 [dev-dependencies]
 tempfile = "3"