Add release infrastructure: updater, signing, and cross-platform support

- Add tauri-plugin-updater for auto-update capability

- Configure updater endpoint for GitHub releases

- Add Apple signing/notarization support to release workflow

- Add Linux .desktop file with deep link handler

- Add bundle configuration for all platforms

- Add setup-release.ps1 script for signing key generation

Author: Mohammod Al Amin Ashik

.github/workflows/release.yml

@@ -101,18 +101,45 @@ jobs:
 
       - run: pnpm install --frozen-lockfile
 
+      # Import Apple certificate for macOS signing
+      - name: Import Apple certificate
+        if: matrix.os == 'macos-latest' || matrix.os == 'macos-13'
+        env:
+          APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}
+          APPLE_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
+          KEYCHAIN_PASSWORD: ${{ secrets.KEYCHAIN_PASSWORD }}
+        run: |
+          if [ -n "$APPLE_CERTIFICATE" ]; then
+            echo $APPLE_CERTIFICATE | base64 --decode > certificate.p12
+            security create-keychain -p "$KEYCHAIN_PASSWORD" build.keychain
+            security default-keychain -s build.keychain
+            security unlock-keychain -p "$KEYCHAIN_PASSWORD" build.keychain
+            security import certificate.p12 -k build.keychain -P "$APPLE_CERTIFICATE_PASSWORD" -T /usr/bin/codesign
+            security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "$KEYCHAIN_PASSWORD" build.keychain
+            rm certificate.p12
+          fi
+
       - name: Build Tauri app
         uses: tauri-apps/tauri-action@v0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
           TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
+          # macOS signing
+          APPLE_SIGNING_IDENTITY: ${{ secrets.APPLE_SIGNING_IDENTITY }}
+          APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}
+          APPLE_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
+          # macOS notarization
+          APPLE_ID: ${{ secrets.APPLE_ID }}
+          APPLE_PASSWORD: ${{ secrets.APPLE_PASSWORD }}
+          APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
         with:
           tagName: v__VERSION__
           releaseName: 'McpMux v__VERSION__'
           releaseBody: 'See the changelog for details.'
           releaseDraft: false
           prerelease: false
+          updaterJsonKeepUniversal: true
 
   # ─────────────────────────────────────────────────────────────
   # Nightly: Build on every push (no release)

Cargo.lock

@@ -18,6 +18,7 @@ tauri = { version = "2", features = ["tray-icon"] }
 tauri-plugin-opener = "2"
 tauri-plugin-single-instance = "2"
 tauri-plugin-deep-link = "2"
+tauri-plugin-updater = "2"
 serde.workspace = true
 serde_json.workspace = true
 tokio.workspace = true

apps/desktop/src-tauri/Cargo.toml

@@ -3,5 +3,10 @@
   "identifier": "default",
   "description": "Capability for the main window",
   "windows": ["main"],
-  "permissions": ["core:default", "opener:default", "deep-link:default"]
+  "permissions": [
+    "core:default",
+    "opener:default",
+    "deep-link:default",
+    "updater:default"
+  ]
 }

apps/desktop/src-tauri/capabilities/default.json

@@ -0,0 +1,11 @@
+[Desktop Entry]
+Name=McpMux
+Comment=Unified MCP Gateway & Manager
+Exec={{exec}} %U
+Icon={{icon}}
+Terminal=false
+Type=Application
+Categories=Development;Utility;
+MimeType=x-scheme-handler/mcpmux;
+StartupWMClass=McpMux
+Keywords=mcp;model context protocol;ai;llm;

apps/desktop/src-tauri/linux/mcpmux.desktop

@@ -15,6 +15,12 @@
       "desktop": {
         "schemes": ["mcpmux"]
       }
+    },
+    "updater": {
+      "endpoints": [
+        "https://github.com/MCP-Mux/mcp-mux/releases/latest/download/latest.json"
+      ],
+      "pubkey": ""
     }
   },
   "app": {
@@ -45,6 +51,43 @@
     ],
     "category": "DeveloperTool",
     "shortDescription": "Unified MCP Gateway & Manager",
-    "longDescription": "McpMux is a desktop application for managing Model Context Protocol (MCP) servers with spaces, credentials, and cloud sync."
+    "longDescription": "McpMux is a desktop application for managing Model Context Protocol (MCP) servers with spaces, credentials, and cloud sync.",
+    "publisher": "McpMux",
+    "copyright": "Copyright © 2024-2026 McpMux",
+    "macOS": {
+      "entitlements": null,
+      "exceptionDomain": null,
+      "frameworks": [],
+      "minimumSystemVersion": "10.13",
+      "signingIdentity": null
+    },
+    "windows": {
+      "certificateThumbprint": null,
+      "digestAlgorithm": "sha256",
+      "timestampUrl": "http://timestamp.digicert.com",
+      "webviewInstallMode": {
+        "type": "downloadBootstrapper"
+      },
+      "nsis": {
+        "installerIcon": "icons/icon.ico",
+        "headerImage": null,
+        "sidebarImage": null,
+        "installMode": "currentUser",
+        "languages": ["English"],
+        "displayLanguageSelector": false
+      }
+    },
+    "linux": {
+      "appimage": {
+        "bundleMediaFramework": false
+      },
+      "deb": {
+        "depends": [],
+        "desktopTemplate": "linux/mcpmux.desktop"
+      },
+      "rpm": {
+        "depends": []
+      }
+    }
   }
 }

apps/desktop/src-tauri/tauri.conf.json

@@ -8,6 +8,7 @@
     "build": "pnpm --filter @mcpmux/desktop build",
     "changeset": "changeset",
     "version": "changeset version",
+    "release:key": "pnpm --filter @mcpmux/desktop tauri signer generate -w ~/.tauri/mcpmux.key",
     "test": "pnpm test:rust && pnpm test:ts",
     "test:rust": "cargo nextest run --workspace",
     "test:rust:unit": "cargo nextest run --workspace --lib",