From ea92aaee7abcb83089483125e018d643bc4676a8 Mon Sep 17 00:00:00 2001
From: CyberMind-FR <gandalf@Gk2.net>
Date: Thu, 28 May 2026 11:04:26 +0200
Subject: [PATCH] build(webext): add build.sh to produce the .xpi (ref #401)

---
 packages/secubox-webext/.gitignore |  1 +
 packages/secubox-webext/build.sh   | 14 ++++++++++++++
 2 files changed, 15 insertions(+)
 create mode 100644 packages/secubox-webext/.gitignore
 create mode 100755 packages/secubox-webext/build.sh

diff --git a/packages/secubox-webext/.gitignore b/packages/secubox-webext/.gitignore
new file mode 100644
index 00000000..f9aca83c
--- /dev/null
+++ b/packages/secubox-webext/.gitignore
@@ -0,0 +1 @@
+secubox-webext-*.xpi
diff --git a/packages/secubox-webext/build.sh b/packages/secubox-webext/build.sh
new file mode 100755
index 00000000..2cbbe74f
--- /dev/null
+++ b/packages/secubox-webext/build.sh
@@ -0,0 +1,14 @@
+#!/usr/bin/env bash
+# SPDX-License-Identifier: LicenseRef-CMSD-1.0
+# SecuBox Companion — build the unsigned .xpi (a zip of the extension dir).
+# Usage: ./build.sh   → produces ../secubox-webext-<version>.xpi
+set -euo pipefail
+cd "$(dirname "$0")"
+VER=$(grep -oE '"version"[^,]*' manifest.json | grep -oE '[0-9.]+' | head -1)
+OUT="../secubox-webext-${VER}.xpi"
+rm -f "$OUT"
+# -FS = sync (delete stale entries); exclude VCS + dotfiles + the build script.
+zip -r -FS "$OUT" . -x '*.git*' '*/.*' 'build.sh' >/dev/null
+echo "built $OUT"
+echo "Load in Firefox: about:debugging → This Firefox → Load Temporary Add-on → pick this .xpi (or manifest.json)."
+echo "Permanent install requires signing (web-ext sign / AMO) or Developer/ESR with xpinstall.signatures.required=false."