name: Release Binary

on:
  workflow_dispatch:
    inputs:
      tag:
        description: 'Release tag (e.g. chromium-v145.0.7718.0)'
        required: true
      title:
        description: 'Release title (e.g. Chromium v145 — Stealth Build)'
        required: true
        default: 'Stealth Chromium Build'
      patch_count:
        description: 'Number of fingerprint patches'
        required: true
        default: '16'

jobs:
  release:
    runs-on: ubuntu-latest
    permissions:
      contents: write
    steps:
      - uses: actions/checkout@v4

      - name: Create release
        uses: softprops/action-gh-release@v2
        with:
          tag_name: ${{ github.event.inputs.tag }}
          name: "${{ github.event.inputs.title }}"
          body: |
            ## Stealth Chromium Build

            Pre-built Chromium with ${{ github.event.inputs.patch_count }} source-level fingerprint patches.

            ### Install
            ```bash
            pip install cloakbrowser    # Python
            npm install cloakbrowser    # JavaScript
            # Binary auto-downloads on first launch
            ```

            > Binary integrity is verified automatically via SHA-256 checksums on download.
            >
            > Release signed with CloakHQ GPG key: `C60C0DDC9D0DE2DD`
