feat: fix npm trusted publishing, add GitHub release workflow

- publish-npm.yml: add registry-url to setup-node, set NODE_AUTH_TOKEN
  from NPM_TOKEN secret, add Playwright install for test step
- release.yml: new workflow creates GitHub releases with standalone
  tarball (bad-vX.Y.Z-node.tar.gz) + sha256 checksum on tag push
- README: add standalone curl install method alongside npm

Author: drewstone

.github/workflows/publish-npm.yml

@@ -23,8 +23,6 @@ jobs:
   publish:
     if: github.repository == 'tangle-network/browser-agent-driver'
     runs-on: ubuntu-latest
-    env:
-      NODE_AUTH_TOKEN: ''
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -39,13 +37,17 @@ jobs:
         with:
           node-version: '22'
           cache: pnpm
+          registry-url: 'https://registry.npmjs.org'
 
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
       - name: Build
         run: pnpm build
 
+      - name: Install Playwright browsers
+        run: pnpm exec playwright install --with-deps chromium
+
       - name: Test
         run: pnpm test
 
@@ -81,3 +83,5 @@ jobs:
 
       - name: Publish to npm
         run: npm publish --provenance --access public
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

.github/workflows/release.yml

@@ -0,0 +1,112 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - 'browser-agent-driver-v*'
+
+permissions:
+  contents: write
+
+jobs:
+  release:
+    if: github.repository == 'tangle-network/browser-agent-driver'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 10
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+          cache: pnpm
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Build
+        run: pnpm build
+
+      - name: Extract version
+        id: version
+        run: |
+          VERSION="${GITHUB_REF_NAME#browser-agent-driver-v}"
+          echo "version=${VERSION}" >> "$GITHUB_OUTPUT"
+          echo "Version: ${VERSION}"
+
+      - name: Package standalone tarball
+        run: |
+          VERSION="${{ steps.version.outputs.version }}"
+          STAGING="bad-v${VERSION}"
+          mkdir -p "${STAGING}"
+
+          # Copy dist, package.json, and required runtime files
+          cp -r dist "${STAGING}/"
+          cp package.json "${STAGING}/"
+          cp README.md LICENSE "${STAGING}/" 2>/dev/null || true
+
+          # Install production dependencies only
+          cd "${STAGING}"
+          pnpm install --prod --no-lockfile
+          cd ..
+
+          # Create launcher script
+          cat > "${STAGING}/bad" << 'LAUNCHER'
+          #!/usr/bin/env bash
+          set -euo pipefail
+          DIR="$(cd "$(dirname "$0")" && pwd)"
+          exec node "${DIR}/dist/cli.js" "$@"
+          LAUNCHER
+          chmod +x "${STAGING}/bad"
+
+          # Tar it up
+          tar czf "bad-v${VERSION}-node.tar.gz" "${STAGING}"
+          sha256sum "bad-v${VERSION}-node.tar.gz" > "bad-v${VERSION}-node.tar.gz.sha256"
+
+      - name: Generate release notes
+        id: notes
+        run: |
+          VERSION="${{ steps.version.outputs.version }}"
+          cat > release-notes.md << EOF
+          ## Install
+
+          ### npm (recommended)
+          \`\`\`bash
+          npm i -g @tangle-network/browser-agent-driver
+          npx playwright install chromium
+          \`\`\`
+
+          ### Standalone (requires Node.js 20+)
+          \`\`\`bash
+          curl -fsSL https://github.com/tangle-network/browser-agent-driver/releases/download/browser-agent-driver-v${VERSION}/bad-v${VERSION}-node.tar.gz | tar xz
+          export PATH="\$PWD/bad-v${VERSION}:\$PATH"
+          npx playwright install chromium
+          bad run --goal "..." --url https://...
+          \`\`\`
+
+          ### Verify checksum
+          \`\`\`bash
+          curl -fsSL https://github.com/tangle-network/browser-agent-driver/releases/download/browser-agent-driver-v${VERSION}/bad-v${VERSION}-node.tar.gz.sha256 | sha256sum -c
+          \`\`\`
+
+          ---
+
+          See [CHANGELOG](https://github.com/tangle-network/browser-agent-driver/blob/main/CHANGELOG.md) for details.
+          EOF
+
+      - name: Create GitHub release
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          VERSION="${{ steps.version.outputs.version }}"
+          gh release create "${GITHUB_REF_NAME}" \
+            --title "v${VERSION}" \
+            --notes-file release-notes.md \
+            "bad-v${VERSION}-node.tar.gz" \
+            "bad-v${VERSION}-node.tar.gz.sha256"

README.md

@@ -11,17 +11,24 @@ LLM-driven browser automation. Reads page state via accessibility tree, decides
 ```bash
 # global install — gives you the `bad` command
 npm i -g @tangle-network/browser-agent-driver
+npx playwright install chromium
 
 # or run without installing
 npx @tangle-network/browser-agent-driver run --goal "..." --url https://...
 ```
 
-Requires Playwright's Chromium. Install it after:
+### Standalone (no npm)
 
 ```bash
+# download, extract, add to PATH
+curl -fsSL https://github.com/tangle-network/browser-agent-driver/releases/latest/download/bad-v0.7.0-node.tar.gz | tar xz
+export PATH="$PWD/bad-v0.7.0:$PATH"
 npx playwright install chromium
+bad run --goal "..." --url https://...
 ```
 
+Requires Node.js 20+. See [Releases](https://github.com/tangle-network/browser-agent-driver/releases) for all versions.
+
 ### As a library
 
 ```bash