first commit

sign-firefox.sh

@@ -0,0 +1,47 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+SOURCE_DIR="$ROOT_DIR/dist/firefox"
+SIGNED_DIR="$ROOT_DIR/dist/signed"
+
+if [ -f "$ROOT_DIR/.env" ]; then
+  set -a
+  # shellcheck disable=SC1091
+  . "$ROOT_DIR/.env"
+  set +a
+fi
+
+if [ -z "${AMO_JWT_ISSUER:-}" ] || [ -z "${AMO_JWT_SECRET:-}" ]; then
+  echo "AMO_JWT_ISSUER / AMO_JWT_SECRET 값이 필요합니다."
+  echo "(.env 또는 환경변수에서 읽습니다)"
+  echo "예:"
+  echo "  export AMO_JWT_ISSUER=\"<your-api-key>\""
+  echo "  export AMO_JWT_SECRET=\"<your-api-secret>\""
+  exit 1
+fi
+
+"$ROOT_DIR/build-firefox.sh"
+mkdir -p "$SIGNED_DIR"
+
+if command -v web-ext >/dev/null 2>&1; then
+  web-ext sign \
+    --source-dir "$SOURCE_DIR" \
+    --artifacts-dir "$SIGNED_DIR" \
+    --api-key "$AMO_JWT_ISSUER" \
+    --api-secret "$AMO_JWT_SECRET" \
+    --channel unlisted
+elif command -v npx >/dev/null 2>&1; then
+  npx --yes web-ext sign \
+    --source-dir "$SOURCE_DIR" \
+    --artifacts-dir "$SIGNED_DIR" \
+    --api-key "$AMO_JWT_ISSUER" \
+    --api-secret "$AMO_JWT_SECRET" \
+    --channel unlisted
+else
+  echo "web-ext 또는 npx가 필요합니다."
+  echo "Nix 사용 시: nix develop -c ./sign-firefox.sh"
+  exit 1
+fi
+
+echo "Signed XPI generated under: $SIGNED_DIR"