release.yml

name: Build CRX and Release

on:
  push:
    tags:
      - 'v*'

jobs:
  build:
    runs-on: ubuntu-latest
    permissions:
      contents: write

    steps:
      - uses: actions/checkout@v4

      - uses: actions/setup-node@v4
        with:
          node-version: '20'

      - name: Decode private key
        run: echo "${{ secrets.CRX_PRIVATE_KEY }}" | base64 -d > key.pem

      - name: Build CRX
        run: |
          npm install crx
          node -e "
            const fs = require('fs');
            const path = require('path');
            const ChromeExtension = require('crx');
            const crx = new ChromeExtension({ privateKey: fs.readFileSync('key.pem') });
            crx.load(path.resolve('.'))
              .then(crx => crx.pack())
              .then(buf => {
                fs.writeFileSync('opencode-reader.crx', buf);
                console.log('CRX built successfully');
              })
              .catch(e => { console.error(e); process.exit(1); });
          "

      - name: Clean up key
        run: rm -f key.pem

      - name: Get version from tag
        id: version
        run: echo "tag=${GITHUB_REF#refs/tags/}" >> "$GITHUB_OUTPUT"

      - name: Create Release
        uses: softprops/action-gh-release@v2
        with:
          name: ${{ steps.version.outputs.tag }}
          files: opencode-reader.crx
          generate_release_notes: true