Band Lineup Display, the backstage app itself

The Electron app that runs on the backstage PC: stage lineup photos with
mic/pack labels, packaged for Windows. It also carries the ProPresenter
Now/Next feature in two forms that share one engine — propresenter-core, where
every ProPresenter 7/20 quirk lives, and propresenter-app, the standalone
display it serves.

Until now this existed only on the production machine and as a read-only
snapshot inside the ProdDash repo. Source only: the 231 MB dist/ is build
output, and credentials, photos and processed images are written to the
Electron userData directory, never here. tmp/pp-mock.js stays — it is the
ProPresenter mock ProdDash's own CLAUDE.md tells people to run.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

build/installer.nsh

@@ -0,0 +1,112 @@
+; Make upgrades self-healing:
+; 1. Kill any running Band Lineup process tree.
+; 2. Delete the previous install folder directly.
+; 3. Remove stale registry keys so electron-builder does not invoke the old uninstaller.
+
+!macro forceCloseBandLineup
+  DetailPrint "Force-closing ${PRODUCT_NAME}..."
+  nsExec::Exec `"$SYSDIR\cmd.exe" /c taskkill /F /T /IM "${APP_EXECUTABLE_FILENAME}"`
+  Pop $R9
+  Sleep 500
+  nsExec::Exec `"$SYSDIR\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -WindowStyle Hidden -Command "Stop-Process -Name '${PRODUCT_NAME}' -Force -ErrorAction SilentlyContinue"`
+  Pop $R9
+  Sleep 500
+  nsExec::Exec `"$SYSDIR\cmd.exe" /c taskkill /F /T /IM "${APP_EXECUTABLE_FILENAME}"`
+  Pop $R9
+  Sleep 1000
+!macroend
+
+!macro removePreviousInstall ROOT_KEY
+  ReadRegStr $R8 ${ROOT_KEY} "${INSTALL_REGISTRY_KEY}" "InstallLocation"
+  ${if} $R8 != ""
+    DetailPrint "Removing previous installation from $R8"
+    !insertmacro forceCloseBandLineup
+    RMDir /r "$R8"
+    nsExec::Exec `"$SYSDIR\cmd.exe" /c rmdir /S /Q "$R8"`
+    Pop $R9
+    nsExec::Exec `"$SYSDIR\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -WindowStyle Hidden -Command "if (Test-Path -LiteralPath '$R8') { Remove-Item -LiteralPath '$R8' -Force -Recurse -ErrorAction SilentlyContinue }"`
+    Pop $R9
+  ${endif}
+  DeleteRegKey ${ROOT_KEY} "${UNINSTALL_REGISTRY_KEY}"
+  !ifdef UNINSTALL_REGISTRY_KEY_2
+    DeleteRegKey ${ROOT_KEY} "${UNINSTALL_REGISTRY_KEY_2}"
+  !endif
+  DeleteRegKey ${ROOT_KEY} "${INSTALL_REGISTRY_KEY}"
+!macroend
+
+!macro customCheckAppRunning
+  !insertmacro forceCloseBandLineup
+!macroend
+
+!macro preInit
+  !insertmacro forceCloseBandLineup
+!macroend
+
+!macro customInit
+  !insertmacro forceCloseBandLineup
+  !insertmacro removePreviousInstall HKCU
+  !insertmacro removePreviousInstall HKLM
+  Sleep 1000
+!macroend
+
+!macro customUnInstallCheck
+  DetailPrint "Skipping old uninstaller result and continuing with clean install."
+  ClearErrors
+  StrCpy $R0 0
+!macroend
+
+!macro customUnInstallCheckCurrentUser
+  DetailPrint "Skipping old per-user uninstaller result and continuing with clean install."
+  ClearErrors
+  StrCpy $R0 0
+!macroend
+
+; ---------------------------------------------------------------------------
+; Studio displays: allow the app through Windows Defender Firewall.
+;
+; Why this belongs in the installer: the firewall prompt fires the moment the app
+; starts listening, and Microsoft documents that if the user is NOT a local admin,
+; block rules are created no matter which button they press — and a block rule is
+; sticky and silent afterwards. The backstage machine then serves localhost perfectly
+; while every studio screen times out. The installer is the one place we reliably
+; have elevation, so create the allow rules here.
+;
+; Rules are program-scoped (not port-scoped) so they survive the operator changing
+; the display port in the app. UDP covers mDNS on 5353, which publishes the
+; nownext.local name that makes bookmarks survive a DHCP change.
+;
+; NOTE: this needs an elevated (per-machine) install. With oneClick:false and
+; perMachine unset, the user may choose a per-user install, where netsh will fail —
+; harmlessly, thanks to the swallowed exit codes below. If studio screens can't
+; connect, the in-app "Studio Displays" status says so and names the fix.
+; ---------------------------------------------------------------------------
+
+!macro addBandLineupFirewallRules
+  DetailPrint "Allowing ${PRODUCT_NAME} through Windows Firewall..."
+  nsExec::Exec `"$SYSDIR\netsh.exe" advfirewall firewall delete rule name="Band Lineup Display (TCP)"`
+  Pop $R9
+  nsExec::Exec `"$SYSDIR\netsh.exe" advfirewall firewall delete rule name="Band Lineup Display (UDP)"`
+  Pop $R9
+  nsExec::Exec `"$SYSDIR\netsh.exe" advfirewall firewall add rule name="Band Lineup Display (TCP)" dir=in action=allow program="$INSTDIR\${APP_EXECUTABLE_FILENAME}" enable=yes profile=domain,private protocol=TCP`
+  Pop $R9
+  ; UDP is port-locked deliberately: mDNS is always 5353 (a hard-coded constant in mdns.js),
+  ; so unlike the TCP rule this can never go stale, and a program-wide UDP allow would open
+  ; every UDP port the app ever binds.
+  nsExec::Exec `"$SYSDIR\netsh.exe" advfirewall firewall add rule name="Band Lineup Display (UDP)" dir=in action=allow program="$INSTDIR\${APP_EXECUTABLE_FILENAME}" enable=yes profile=domain,private protocol=UDP localport=5353`
+  Pop $R9
+!macroend
+
+!macro removeBandLineupFirewallRules
+  nsExec::Exec `"$SYSDIR\netsh.exe" advfirewall firewall delete rule name="Band Lineup Display (TCP)"`
+  Pop $R9
+  nsExec::Exec `"$SYSDIR\netsh.exe" advfirewall firewall delete rule name="Band Lineup Display (UDP)"`
+  Pop $R9
+!macroend
+
+!macro customInstall
+  !insertmacro addBandLineupFirewallRules
+!macroend
+
+!macro customUnInstall
+  !insertmacro removeBandLineupFirewallRules
+!macroend