native-packages 0.8.1 → 0.9.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ef21c207476e3d19df85ebdb463eb0ccfb020ab8a4fd8ead551a22c4c2d4de62
-  data.tar.gz: 1648f4ffa1698dfdccea0d3693943e696b2810c69f595bf48fa01c386346808d
+  metadata.gz: d89f67e56b034b1cc13d55891e7a88d32e4a607c2c79d44df51c7115f65a7a8d
+  data.tar.gz: b1d29fef3871480632f7557f3af5de763bbd7fa67e1ef04b792eb598e3352c49
 SHA512:
-  metadata.gz: f3cea3ca8d3d79956a0cca4ca779955b901795b1000a4ef57cad97abebfc32721d678df435ba8a46c2e226a210fdcb92f6c7cac586f81cc416ed5e8028ee300f
-  data.tar.gz: 2e6c2eaffc5cdab5cb3ef8ad3969b7058880cabb155f56170955f309d7b2e11701a384ac291f889cc5717d565b7073f1ec75edd51984b25554bad00e2564ec20
+  metadata.gz: 1d2b77dd672a81d231398884f02b4077c123f7cc05d6dff7b6fbed62417f2a7854ad7557245dc1fc291f0cd78884f799f6c97b0c96de003bc1ceaba16539550e
+  data.tar.gz: e77790947545f9086ec1ec16caf3c6226ae8bc398d860c40cced2939d1d4b65262c0d66067e9d545272ef14df3b92a7648111303e1cc8efc6a7e93439d4e8aa8

data/CONTRIBUTING.md

@@ -18,7 +18,7 @@ To check the packaged gem and standalone command:
 
 ```sh
 gem build native-packages.gemspec
-ruby test/gem_install.rb native-packages-0.8.1.gem
+ruby test/gem_install.rb native-packages-0.9.0.gem
 ```
 
 See [Releasing the gem](docs/releasing.md) for publication and

data/README.md

@@ -13,6 +13,8 @@ Homebrew casks.
 
 You bring the compiled app. native-packages handles packaging and release updates.
 
+https://github.com/user-attachments/assets/e3157514-570d-47b3-a2e9-aca70042a138
+
 [Documentation](https://native-packages.dev/)
 
 ## Get started
@@ -50,10 +52,10 @@ record. Local builds work without a GitHub release or credentials.
 | --- | --- |
 | Linux | DEB, RPM, AppImage, Arch Linux packages, Alpine APK, IPK, and source RPM |
 | macOS | DMG, using your packaging script; optional Apple signing and notarization |
-| Windows | MSIX, or Inno Setup installers using your packaging script |
+| Windows | MSIX, or MSI and Inno Setup installers using your packaging script |
 
-Each target needs files built for that platform. DMG and Inno builds run on
-macOS and Windows respectively. See [supported platforms](docs/_reference/platforms.md)
+Each target needs files built for that platform. DMG builds run on macOS;
+MSI and Inno builds run on Windows. See [supported platforms](docs/_reference/platforms.md)
 for prerequisites and distribution recipes.
 
 ## Guides

data/docs/_guides/getting-started.md

@@ -17,7 +17,7 @@ own compiled executable, or build the tiny example below.
 You need Ruby 3.2 or later. Install the version used by these guides:
 
 ```sh
-gem install native-packages --version 0.8.1
+gem install native-packages --version 0.9.0
 ```
 
 For Linux packages, install **nFPM 2.47.0**, the helper native-packages uses to
@@ -79,7 +79,7 @@ Open the generated `native-packages.yaml` and replace its contents with:
 ```yaml
 schema: 1
 tool:
-  version: '0.8.1'
+  version: '0.9.0'
   nfpm: '2.47.0'
 
 nfpm:

data/docs/_guides/github-actions.md

@@ -24,7 +24,7 @@ packaging:
   needs: release
   permissions:
     contents: write
-  uses: crmne/native-packages/.github/workflows/package.yml@v0.8.1
+  uses: crmne/native-packages/.github/workflows/package.yml@v0.9.0
   with:
     version: ${{ github.ref_name }}
     publish: true
@@ -39,7 +39,7 @@ The configuration must include `release.repository` and a `release_asset`
 for each selected target. See [Publishing a release](publishing.md).
 
 Use the same native-packages release for the workflow and `tool.version`.
-For an immutable workflow reference, replace `v0.8.1` with that release's
+For an immutable workflow reference, replace `v0.9.0` with that release's
 full commit SHA.
 
 ## Build without publishing
@@ -57,7 +57,7 @@ permissions:
   contents: read
 jobs:
   packaging:
-    uses: crmne/native-packages/.github/workflows/package.yml@v0.8.1
+    uses: crmne/native-packages/.github/workflows/package.yml@v0.9.0
 ```
 
 Validation does not compile the app or check that future release inputs exist.
@@ -72,7 +72,7 @@ packaging:
   needs: build
   permissions:
     contents: write
-  uses: crmne/native-packages/.github/workflows/package.yml@v0.8.1
+  uses: crmne/native-packages/.github/workflows/package.yml@v0.9.0
   with:
     version: '1.2.3'
     source-artifact: linux-binaries
@@ -101,7 +101,7 @@ The workflow passes the same target selection to build and publication.
 It requires every format declared for those targets. An empty selection
 means all configured targets.
 
-Build DMG and Inno targets in your own macOS and Windows jobs with the CLI.
+Build DMG, MSI and Inno targets in your own macOS and Windows jobs with the CLI.
 See [Building across platforms](multi-platform.md) for combining their outputs
 and generating recipes after all packages are available.
 

data/docs/_guides/native-recipes.md

@@ -1,17 +1,17 @@
 ---
 title: macOS and Windows installers
-description: Connect your DMG or Inno Setup script to the same build and publication process as your Linux packages.
+description: Connect your DMG, MSI or Inno Setup script to the same build and publication process as your Linux packages.
 nav_order: 5
 ---
 
 # macOS and Windows installers
 
-This guide shows how to connect an existing DMG or Inno Setup script to
+This guide shows how to connect an existing DMG, MSI or Inno Setup script to
 native-packages. You supply a built app and a packaging script. The build
 command checks the app, runs your script, and records the finished installer's
 checksum.
 
-Build **DMGs on macOS** and **Inno installers on Windows**. These targets use
+Build **DMGs on macOS** and **MSI or Inno installers on Windows**. These targets use
 your native tools and do not need an nFPM executable.
 
 ## Prepare your app
@@ -31,7 +31,7 @@ Here is a complete configuration for an ARM64 Mac app and an x86-64 Windows app:
 ```yaml
 schema: 1
 tool:
-  version: '0.8.1'
+  version: '0.9.0'
   nfpm: '2.47.0'
 nfpm:
   name: hello
@@ -54,15 +54,18 @@ targets:
   windows-amd64:
     platform: windows
     arch: amd64
-    formats: [inno]
+    formats: [msi]
     input:
       kind: directory
       local: dist/windows
     native:
-      command: [ruby, packaging/setup.rb, '@PAYLOAD@', '@PACKAGE@', '@VERSION@']
-      output: 'hello-@TAG@-windows-setup.exe'
+      command: [ruby, packaging/msi.rb, '@PAYLOAD@', '@PACKAGE@', '@VERSION@']
+      output: 'hello-@TAG@-windows-amd64.msi'
 ```
 
+For an Inno Setup installer instead, use `formats: [inno]` and an `.exe`
+output. A Windows target builds one installer format.
+
 The `nfpm` section still holds shared package metadata, and `tool.nfpm` keeps
 mixed-platform configurations consistent. Native targets use `native.command`
 to create their output.
@@ -110,6 +113,47 @@ abort "DMG verification failed" unless system("hdiutil", "verify", output)
 This places the app and an Applications shortcut inside a compressed disk
 image. Adapt the volume name and app name to your project.
 
+### A Windows Installer (MSI) project
+
+Keep your installer's WiX source in the repository. This minimal
+`packaging/hello.wxs` (WiX Toolset 5) installs everything in the payload
+for all users and replaces earlier versions on upgrade:
+
+```xml
+<Wix xmlns="http://wixtoolset.org/schemas/v4/wxs">
+  <Package Name="Hello" Manufacturer="Your Name" Version="$(Version)"
+    UpgradeCode="{00000000-0000-0000-0000-000000000000}" Scope="perMachine" Compressed="yes">
+    <MajorUpgrade DowngradeErrorMessage="A newer version of [ProductName] is already installed." />
+    <MediaTemplate EmbedCab="yes" />
+    <StandardDirectory Id="ProgramFiles64Folder">
+      <Directory Id="INSTALLFOLDER" Name="Hello" />
+    </StandardDirectory>
+    <Files Include="$(SourceDir)\**" Directory="INSTALLFOLDER" />
+  </Package>
+</Wix>
+```
+
+Generate your own `UpgradeCode` once and never change it: it is how Windows
+recognizes an upgrade. Then have `packaging/msi.rb` build it:
+
+```ruby
+payload, output, version = ARGV
+# Windows Installer versions are numeric: 1.2.3-beta.1 installs as 1.2.3.
+numeric = version.split("-").first
+success = system("wix", "build", File.join(__dir__, "hello.wxs"), "-arch", "x64",
+  "-d", "Version=#{numeric}", "-d", "SourceDir=#{payload}", "-pdbtype", "none", "-o", output)
+abort "MSI build failed" unless success
+```
+
+`-pdbtype none` stops WiX writing a `.wixpdb` debug file next to the MSI;
+the recipe may create only the declared output.
+
+Install WiX with `dotnet tool install --global wix --version 5.0.2`. Windows
+compares only the first three version fields, each at most 255.255.65535, so
+release candidates of one version upgrade each other in place. Per-user
+installs, shortcuts, file associations, and closing a running app are part of
+your WiX project; see the [WiX documentation](https://docs.firegiant.com/wix/).
+
 ### An Inno Setup script
 
 Keep your app's `.iss` recipe in the repository. Have `packaging/setup.rb`
@@ -143,11 +187,11 @@ native-packages build --version 1.2.3 --target windows-amd64 --output dist/windo
 ```
 
 `doctor` checks the host and the command's executable. Your script checks its
-additional tools, such as the Inno compiler. `validate` and `build --dry-run`
+additional tools, such as WiX or the Inno compiler. `validate` and `build --dry-run`
 do not execute it.
 
 The build checks Mach-O or PE architecture, runs the script, and checks that
-it produced exactly the declared DMG or EXE. Test installation, startup,
+it produced exactly the declared DMG, MSI or EXE. Test installation, startup,
 upgrades, and removal separately for your app.
 
 ## Preserve the prepared input

data/docs/_guides/publishing.md

@@ -71,7 +71,7 @@ The command downloads the inputs, verifies their published hashes, and builds
 packages in `dist/packages/1.2.3/`. It skips `before_build` hooks. Every binary
 release input needs a matching checksum.
 
-DMG and Inno targets use prepared local directories. Download and unpack their
+DMG, MSI and Inno targets use prepared local directories. Download and unpack their
 inputs in the native build job, then use `--version`. See
 [macOS and Windows installers](native-recipes.md).
 

data/docs/_guides/release-signing.md

@@ -67,7 +67,7 @@ Package publication's separate `packaging-checksums.txt` is also unchanged.
 
 ## Attest in the application's build job
 
-The examples use `v0.8.1` for readability. For release workflows, replace it
+The examples use `v0.9.0` for readability. For release workflows, replace it
 with that release's reviewed full commit SHA, not a mutable branch.
 After producing the final package, before uploading it, add this step to the
 job that built it:
@@ -79,7 +79,7 @@ permissions:
   attestations: write
 steps:
   # Existing checkout, build, platform signing and packaging steps go here.
-  - uses: crmne/native-packages/.github/actions/attest@v0.8.1
+  - uses: crmne/native-packages/.github/actions/attest@v0.9.0
     with:
       subject-path: dist/*.tar.gz
 ```
@@ -108,7 +108,7 @@ and install Ruby 3.2 or later with Ed25519-capable OpenSSL before the signing
 step. Then call:
 
 ```yaml
-- uses: crmne/native-packages/.github/actions/sign-release@v0.8.1
+- uses: crmne/native-packages/.github/actions/sign-release@v0.9.0
   with:
     directory: dist/release
     public-key: assets/update-public-key.hex

data/docs/_reference/commands.md

@@ -193,7 +193,7 @@ If several gem versions are installed, RubyGems lets you select the one required
 by the configuration:
 
 ```sh
-native-packages _0.8.1_ build --version 1.2.3
+native-packages _0.9.0_ build --version 1.2.3
 ```
 
 Bundler also works if you prefer to manage the gem in a Gemfile.

data/docs/_reference/configuration.md

@@ -28,7 +28,7 @@ expressions. Use the replacement values listed below.
 | Field | Purpose |
 | --- | --- |
 | `schema` | Required. Set to `1`. |
-| `tool.version` | Required. Exact native-packages version, such as `'0.8.1'`. |
+| `tool.version` | Required. Exact native-packages version, such as `'0.9.0'`. |
 | `tool.nfpm` | Required. Set to `'2.47.0'`, including in native-only configurations. |
 | `nfpm` | Shared package metadata and installed-file mappings, or a relative YAML filename. Requires `name`. |
 | `targets` | Required. Named build targets; use `{}` for recipe-only projects. |
@@ -48,7 +48,7 @@ command needed to install and select the configured gem.
 
 `nfpm` is named after the helper that writes Linux packages and MSIX files.
 It holds the package's metadata, files, dependencies, and package-manager
-settings. Native DMG and Inno targets also read the shared metadata.
+settings. Native DMG, MSI and Inno targets also read the shared metadata.
 
 Every target needs nonempty `maintainer`, `description`, and `license` values.
 Non-native targets need a `contents` list. The shared package name may contain
@@ -95,13 +95,13 @@ letters, digits, and hyphens, starting with a letter or digit.
 | `compiler_target` | Optional value for `@TARGET@`; otherwise it is the target ID. |
 | `before_build` | Command arguments run before copying a local input. |
 | `after_package` | Command arguments run on each package before its hash is recorded. |
-| `native` | Required for DMG/Inno. Contains `command` and `output`. |
+| `native` | Required for DMG, MSI and Inno. Contains `command` and `output`. |
 
 Formats are `deb`, `rpm`, `archlinux`, `apk`, `ipk`, `appimage`, `srpm`,
-`msix`, `dmg`, and `inno`. See [Supported platforms](platforms.md) for their requirements.
+`msix`, `dmg`, `msi`, and `inno`. See [Supported platforms](platforms.md) for their requirements.
 
-Windows targets select only `[msix]` or `[inno]`; macOS targets select `[dmg]`.
-DMG and Inno each require a separate binary target. SRPM requires a separate
+Windows targets select only `[msix]`, `[msi]` or `[inno]`; macOS targets select `[dmg]`.
+DMG, MSI and Inno each require a separate binary target. SRPM requires a separate
 `kind: source` target with only `[srpm]`.
 
 ### Inputs

data/docs/_reference/platforms.md

@@ -23,10 +23,11 @@ libraries.
 | `srpm` | Linux source target | RPM spec and source files. | nFPM; native RPM tooling for rebuild tests. |
 | `msix` | Windows | Windows binaries, identity, application assets, and capabilities. | nFPM; Windows tools for signing and installation tests. |
 | `dmg` | macOS | Complete app and a DMG script. | macOS, `lipo`, and your script's tools, such as `hdiutil`. |
+| `msi` | Windows | Complete app and a Windows Installer recipe/wrapper, such as a WiX project. | Windows and your installed MSI toolset, such as WiX. |
 | `inno` | Windows | Complete app and an Inno Setup recipe/wrapper. | Windows and your installed Inno compiler. |
 
 The supported nFPM version is **2.47.0**. It writes package files from your
-prepared contents. Native DMG and Inno targets call your scripts instead.
+prepared contents. Native DMG, MSI and Inno targets call your scripts instead.
 Archive inputs also require `bsdtar`; release downloads require `curl`.
 
 ## Linux compatibility
@@ -105,7 +106,7 @@ project's Windows acceptance tests do. Those tests found that Windows rejected
 nFPM 2.47.0's built-in signature with `0x80096010`. An MSIX file built
 successfully is not yet evidence that Windows will accept and install it.
 
-## DMG and Inno Setup
+## DMG, MSI and Inno Setup
 
 These formats run on their native host and each require a separate binary
 target with a local directory input. macOS inspection supports `amd64`,
@@ -127,7 +128,7 @@ An Arch package file and an AUR recipe are separate outputs: the former can
 be installed directly; the latter tells Arch tooling how to obtain and package
 your app.
 
-There is no Flatpak or Snap build/publication adapter, no NSIS/WiX adapter, and no
+There is no Flatpak or Snap build/publication adapter, no NSIS adapter, and no
 hosted APT/DNF index service. Keep those workflows in your app's release
 process if you need them.
 

data/docs/_reference/troubleshooting.md

@@ -23,8 +23,8 @@ working on with `doctor --target ID` and `build --target ID --dry-run`.
 Install and select the version named in the error:
 
 ```sh
-gem install native-packages --version 0.8.1
-native-packages _0.8.1_ doctor
+gem install native-packages --version 0.9.0
+native-packages _0.9.0_ doctor
 ```
 
 `tool.version` is an exact match. In CI, use the matching released reusable
@@ -36,7 +36,7 @@ Linux and MSIX packaging require nFPM 2.47.0. Linux binary inspection needs
 `readelf`; archive extraction needs `bsdtar`. Install these using the
 [setup instructions](../_guides/getting-started.md#1-install-the-tools).
 
-DMG and Inno targets do not require an nFPM executable. If you only intend to
+DMG, MSI and Inno targets do not require an nFPM executable. If you only intend to
 build a native target, select it explicitly so `doctor` does not check Linux
 targets from the same configuration.
 

data/docs/cli-design.md

@@ -3,7 +3,7 @@
 The owner approved compatible shared support for RekordFlash's native alpha
 packaging on 2026-09-13. Version 0.3's [native recipe and prerelease policy](native-recipes.md)
 extends the original stable-only policy explicitly; published 0.2 consumers stay
-pinned. DMG/Inno adapters coordinate existing app scripts and retain their
+pinned. DMG/MSI/Inno adapters coordinate existing app scripts and retain their
 signing/version decisions, without adding a compiler or plugin framework.
 
 Status: accepted, 2026-09-13. Publishing was subsequently aligned with RubyLLM: GitHub release publication triggers the workflow, using `RUBYGEMS_AUTH_TOKEN`. The original Trusted Publishing proposal below is superseded by that decision. The v0.2 implementation follows this design. See the current [configuration reference](configuration.md) and [release setup](releasing.md) for the implemented interface and publication requirements. This document records the original design; it does not describe v0.1.0.

data/docs/index.md

@@ -28,7 +28,7 @@ features:
     details: Create DEB, RPM, AppImage, Arch, Alpine, and IPK packages from your compatible Linux builds.
   - icon: 🖥️
     title: Native installers
-    details: Connect your macOS DMG and Windows Inno Setup scripts, or package Windows apps as MSIX.
+    details: Connect your macOS DMG script and your Windows MSI or Inno Setup script, or package Windows apps as MSIX.
   - icon: 🚀
     title: Release automation
     details: Build from local files or release assets. Add packaging to GitHub Actions and upload the finished packages.
@@ -39,3 +39,47 @@ features:
     title: Verified builds
     details: Check binary architecture and library requirements. Record file hashes and verify them before publishing.
 ---
+
+<video class="hero-film" controls muted loop playsinline preload="metadata" poster="{{ '/assets/images/launch-film-poster.jpg' | relative_url }}" aria-label="native-packages in under a minute: ZapFast, then seventeen packaging files become one configuration" hidden>
+  <source src="{{ '/assets/videos/launch-film.mp4' | relative_url }}" type="video/mp4">
+</video>
+
+<style>
+  /* The theme sizes its hero for a square logo; the film is 16:9. */
+  .VPHero .hero-film {
+    display: block;
+    width: 100%;
+    max-width: 560px;
+    height: auto;
+    aspect-ratio: 16 / 9;
+    margin: 0 auto;
+    border-radius: 12px;
+    background: #0d0e1a;
+  }
+  .VPHero .image-container:has(.hero-film) {
+    width: 100%;
+    height: auto;
+    padding: 0 24px;
+    transform: none;
+  }
+  @media (max-width: 959px) {
+    .VPHero .image:has(.hero-film) {
+      margin: 0 0 32px;
+    }
+  }
+</style>
+
+<script>
+  // The theme's hero takes a picture; the film takes its place where
+  // scripts run, and the logo stays where they do not.
+  (function () {
+    var film = document.querySelector(".hero-film");
+    var slot = document.querySelector(".VPHero .image-container");
+    if (!film || !slot) return;
+    slot.replaceChildren(film);
+    film.hidden = false;
+    if (!window.matchMedia("(prefers-reduced-motion: reduce)").matches) {
+      film.play().catch(function () {});
+    }
+  })();
+</script>

data/docs/releasing.md

@@ -23,7 +23,7 @@ Update the gemspec, `NativePackages::VERSION`, example/version references and ch
 Create a GitHub release for that commit:
 
 ```sh
-gh release create v0.8.1 --target main --title 'native-packages 0.8.1' --notes-file release-notes.md
+gh release create v0.9.0 --target main --title 'native-packages 0.9.0' --notes-file release-notes.md
 ```
 
 Adding `--draft` permits review before publication and does not trigger the publisher. The tag must match the exact gem version and point to a commit on `main`. Set `--prerelease` only for a prerelease gem version.
@@ -36,7 +36,7 @@ If the workflow itself needs a correction, fix it on `main` and dispatch the
 corrected release workflow against the existing published tag:
 
 ```sh
-gh workflow run release.yml --ref main -f tag=v0.8.1
+gh workflow run release.yml --ref main -f tag=v0.9.0
 ```
 
 Validation resolves the original tag to an exact commit, requires it to be on

data/examples/native-packages-all-formats.yaml

@@ -1,7 +1,7 @@
 # Supply the listed build outputs before running this example.
 schema: 1
 tool:
-  version: '0.8.1'
+  version: '0.9.0'
   nfpm: '2.47.0'
 nfpm:
   name: example-app

data/examples/native-packages.yaml

@@ -1,6 +1,6 @@
 schema: 1
 tool:
-  version: '0.8.1'
+  version: '0.9.0'
   nfpm: '2.47.0'
 nfpm:
   name: example-app

data/lib/native_packages/configuration.rb

@@ -6,7 +6,7 @@ require_relative "appimage"
 module NativePackages
   class Configuration
     include Support
-    NATIVE_FORMATS = %w[dmg inno].freeze
+    NATIVE_FORMATS = %w[dmg inno msi].freeze
     FORMATS = (%w[deb rpm archlinux apk ipk msix srpm appimage] + NATIVE_FORMATS).freeze
     NFPM_VERSION = "2.47.0"
     NAMES = %w[native-packages.yaml native-packages.yml].freeze
@@ -60,8 +60,8 @@ module NativePackages
     def check_prerelease(version, selected, defer_recipes: false)
       return unless version.include?("-")
       raise Error, "prerelease builds require release.prereleases: true" unless data.fetch("release")["prereleases"] == true
-      unless selected.values.all? { |target| (target.fetch("formats") - %w[deb rpm appimage dmg inno]).empty? } && (defer_recipes || data.fetch("templates").empty?)
-        raise Error, "prereleases support deb, rpm, appimage, dmg and inno only, without downstream recipes"
+      unless selected.values.all? { |target| (target.fetch("formats") - %w[deb rpm appimage dmg inno msi]).empty? } && (defer_recipes || data.fetch("templates").empty?)
+        raise Error, "prereleases support deb, rpm, appimage, dmg, inno and msi only, without downstream recipes"
       end
     end
 
@@ -97,11 +97,11 @@ module NativePackages
         kind = target.fetch("kind", "binary")
         raise Error, "targets.#{id}.kind: use binary, data or source" unless %w[binary data source].include?(kind)
         raise Error, "#{id}: MSIX requires a Windows target with only msix format" if formats.include?("msix") && (target["platform"] != "windows" || formats != ["msix"])
-        raise Error, "#{id}: Windows targets require msix or inno" if target["platform"] == "windows" && ![["msix"], ["inno"]].include?(formats)
+        raise Error, "#{id}: Windows targets require msix, inno or msi" if target["platform"] == "windows" && ![["msix"], ["inno"], ["msi"]].include?(formats)
         raise Error, "#{id}: macOS targets require dmg" if target["platform"] == "macos" && formats != ["dmg"]
         native = !(formats & NATIVE_FORMATS).empty?
         if native
-          expected = { "dmg" => "macos", "inno" => "windows" }[formats.first]
+          expected = { "dmg" => "macos", "inno" => "windows", "msi" => "windows" }[formats.first]
           raise Error, "#{id}: native formats require a separate binary target on their native platform" unless formats.length == 1 && expected == target["platform"] && kind == "binary"
           recipe = mapping(target.fetch("native"), "#{id}.native")
           raise Error, "#{id}.native: expected command and output" unless recipe.keys.sort == %w[command output]
@@ -110,13 +110,13 @@ module NativePackages
             raise Error, "#{id}.native.command: use command arguments including @PACKAGE@"
           end
           filename = render(recipe.fetch("output"), target_tokens(metadata, id, target, "/payload"))
-          extension = formats == ["dmg"] ? ".dmg" : ".exe"
+          extension = { "dmg" => ".dmg", "inno" => ".exe", "msi" => ".msi" }.fetch(formats.first)
           unless /\A[a-zA-Z0-9][a-zA-Z0-9._+-]*\z/.match?(filename) && filename.end_with?(extension)
             raise Error, "#{id}.native.output: expected a safe #{extension} filename"
           end
           render_tree(command, target_tokens(metadata, id, target, "/payload").merge("PACKAGE" => "/output/#{filename}", "FORMAT" => formats.first))
         elsif target.key?("native")
-          raise Error, "#{id}: native commands require a dmg or inno target"
+          raise Error, "#{id}: native commands require a dmg, inno or msi target"
         end
         raise Error, "#{id}: SRPM requires a separate source target" if (formats.include?("srpm") && (kind != "source" || formats != ["srpm"])) || (kind == "source" && formats != ["srpm"])
         if kind == "binary" && target["platform"] == "linux"

data/lib/native_packages/native_recipe.rb

@@ -76,6 +76,9 @@ module NativePackages
           next false if file.size < 512
           file.seek(-512, IO::SEEK_END)
           file.read(4) == "koly"
+        elsif format == "msi"
+          # Windows Installer databases are OLE compound files.
+          file.size >= 512 && file.read(8) == "\xD0\xCF\x11\xE0\xA1\xB1\x1A\xE1".b
         else
           next false unless file.size >= 64 && file.read(2) == "MZ"
           file.seek(0x3c)

data/lib/native_packages/support.rb

@@ -12,7 +12,7 @@ require "tmpdir"
 require "yaml"
 
 module NativePackages
-  VERSION = "0.8.1"
+  VERSION = "0.9.0"
   class Error < StandardError; end
 
   module Support

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: native-packages
 version: !ruby/object:Gem::Version
-  version: 0.8.1
+  version: 0.9.0
 platform: ruby
 authors:
 - Carmine Paolino