Added reactor-extension-alloy as a package within alloy

.changeset/vast-needles-beam.md

@@ -0,0 +1,2 @@
+---
+---

.github/ISSUE_TEMPLATE_EXTENSION.md

@@ -0,0 +1,16 @@
+<!--- STOP! Before you open an issue please search this repository's issues to see if it has already been reported. This helps reduce duplicate issues from being created. -->
+<!--- SECURITY DISCLOSURE: If this is a security disclosure please follow the guidelines in CONTRIBUTING.md. This helps keep folks from accidentally releasing vulnerabilities before the maintainers get a chance to fix the issue. -->
+
+### Expected Behaviour
+
+### Actual Behaviour
+
+### Reproduce Scenario (including but not limited to)
+
+#### Steps to Reproduce
+
+#### Platform and Version
+
+#### Sample Code that illustrates the problem
+
+#### Logs taken while reproducing problem

.github/PULL_REQUEST_TEMPLATE.md

@@ -2,9 +2,12 @@
 <!--- In general, start the title with a past tense verb (i.e. added, optimized, removed.) -->
 <!--- For bug fixes, start with "fixed" (i.e. fixed an issue, fixed broken.) -->
 <!--- For PRs that should not be included in the release notes, attach the label "ignore-for-release" -->
-<!--- For PRs that should increment the patch version, attach the label "bug-fix" or "improvement" -->
-<!--- For PRs that should increment the minor version, no labels are required -->
-<!--- For PRs that should increment the major version, attach the label "breaking-change" -->
+
+## Changed Packages
+<!--- Indicate which package your changes directly affect. -->
+<!--- (i.e., do not choose the extension if it's only change is updating its core version). -->
+- [ ] core
+- [ ] reactor-extension 
 
 ## Description
 
@@ -23,12 +26,27 @@
 
 ## Screenshots (if appropriate):
 
+## Documentation
+<!-- Significant consumer-facing changes should be documented -->
+
+## Types of changes
+
+<!--- What types of changes does your code introduce? Put an `x` in all the boxes that apply: -->
+
+- [ ] Bug fix (non-breaking change which fixes an issue)
+- [ ] New feature (non-breaking change which adds functionality)
+- [ ] Improvement (non-breaking change which does not add functionality)
+- [ ] Breaking change (fix or feature that would cause existing functionality to change)
+
 ## Checklist:
 
+<!--- A changeset file is required for the PR. To add a changeset file, run `pnpm changset` and follow the prompts. -->
+<!--- If your changes are not consumer facing, use `pnpm changeset --empty` to add an empty changeset file. -->
+<!--- For more information about the changesets or the release process, see https://github.com/adobe/alloy/wiki/Release-process -->
 <!--- Go over all the following points, and put an `x` in all the boxes that apply. -->
 <!--- If you're unsure about any of these, don't hesitate to ask. We're here to help! -->
 
+- [ ] I have added a Changeset file with a consumer-facing description of my changes.
 - [ ] I have signed the [Adobe Open Source CLA](https://opensource.adobe.com/cla.html) or I'm an Adobe employee.
 - [ ] I have made any necessary test changes and all tests pass.
 - [ ] I have run the Sandbox successfully.
-- [ ] I have added a Changeset (`pnpm changeset`) or it is not necessary because this PR is not consumer-facing.

.github/workflows/changeset-publish.yml

@@ -144,6 +144,18 @@ jobs:
           VERSION=$(jq -r '.version' package.json)
           echo "Root version after versioning: ${VERSION}"
 
+      - name: Bump extension when @adobe/alloy was released
+        if: hashFiles('packages/reactor-extension/package.json') != ''
+        run: |
+          ALLOY_NEW=$(jq -r '.releases[] | select(.name=="@adobe/alloy") | .newVersion' changeset-status.json)
+          if [ -z "${ALLOY_NEW}" ] || [ "${ALLOY_NEW}" = "null" ]; then
+            echo "No @adobe/alloy release in this run; skipping extension bump."
+            exit 0
+          fi
+          cd packages/reactor-extension
+          pnpm add @adobe/alloy@$ALLOY_NEW
+          pnpm version patch --no-commit-hooks
+
       - name: Update lockfile
         run: pnpm install --no-frozen-lockfile --ignore-scripts
 
@@ -218,6 +230,31 @@ jobs:
       - name: Upload browser artifacts to CDN
         run: node scripts/uploadToCDN.js
 
+      - name: Package and deploy extension to Reactor (when @adobe/alloy was released)
+        if: hashFiles('packages/reactor-extension/package.json') != ''
+        env:
+          REACTOR_IO_INTEGRATION_CLIENT_SECRET: ${{ secrets.REACTOR_IO_INTEGRATION_CLIENT_SECRET }}
+        run: |
+          if ! jq -e '.releases[] | select(.name=="@adobe/alloy")' changeset-status.json >/dev/null; then
+            echo "@adobe/alloy was not in this release; skipping extension deploy."
+            exit 0
+          fi
+          EXT_VERSION=$(node -p "require('./packages/reactor-extension/package.json').version")
+          pnpm --filter reactor-extension-alloy run build
+          node scripts/deployExtensionToReactor.mjs "${EXT_VERSION}"
+
+      - name: Restore extension workspace protocol for @adobe/alloy
+        if: hashFiles('packages/reactor-extension/package.json') != ''
+        run: |
+          if ! jq -e '.releases[] | select(.name=="@adobe/alloy")' changeset-status.json >/dev/null; then exit 0; fi
+          node -e "
+            const fs = require('fs');
+            const p = JSON.parse(fs.readFileSync('packages/reactor-extension/package.json', 'utf8'));
+            if (p.dependencies['@adobe/alloy']) p.dependencies['@adobe/alloy'] = 'workspace:*';
+            fs.writeFileSync('packages/reactor-extension/package.json', JSON.stringify(p, null, 2));
+          "
+          git add packages/reactor-extension/package.json
+
       - name: Re-enter beta prerelease mode for next cycle after a stable release
         if: needs.analyze.outputs.is_prerelease != 'true'
         run: pnpm changeset pre enter beta

.github/workflows/codeql-analysis.yml

@@ -0,0 +1,38 @@
+name: CodeQL
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+  schedule:
+    - cron: "26 7 * * 3"
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language: ["javascript"]
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v3
+        with:
+          languages: ${{ matrix.language }}
+
+      - name: Autobuild
+        uses: github/codeql-action/autobuild@v3
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v3

.github/workflows/deployExtensionRelease.yml

@@ -0,0 +1,113 @@
+name: Deploy Extension Release
+
+on:
+  workflow_dispatch:
+    inputs:
+      version:
+        description: "Extension version (e.g. 2.34.2)"
+        required: true
+
+jobs:
+  validate:
+    name: Validate version
+    runs-on: ubuntu-latest
+    steps:
+      - uses: adobe/project-card-release-automation/validate-version@v2
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          version: ${{ github.event.inputs.version }}
+
+  release:
+    name: Release
+    runs-on: ubuntu-latest
+    needs: validate
+    if: ${{ contains(github.event.inputs.version, '-') == false }}
+    environment: Production
+    steps:
+      - uses: actions/checkout@v4
+      - uses: pnpm/action-setup@v4
+        with:
+          version: latest
+      - name: Set up Node.js
+        uses: actions/setup-node@v5
+        with:
+          node-version-file: .nvmrc
+          cache: pnpm
+      - uses: webfactory/ssh-agent@v0.9.1
+        with:
+          ssh-private-key: ${{ secrets.ALLOY_BOT_GITHUB_SSH_PRIVATE_KEY }}
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+      - name: Version extension
+        run: pnpm version ${{ github.event.inputs.version }} --no-commit-hooks
+        working-directory: packages/reactor-extension
+      - name: Build extension (refresh extension.json)
+        run: pnpm --filter reactor-extension-alloy run build
+      - name: Commit and push
+        run: |
+          git config user.name "$GITHUB_ACTOR"
+          git config user.email "gh-actions-$GITHUB_ACTOR@github.com"
+          git remote set-url origin "git@github.com:${{ github.repository }}.git"
+          git add packages/reactor-extension/package.json
+          git diff --staged --quiet || git commit -m "[skip ci] extension ${{ github.event.inputs.version }}"
+          git push origin HEAD:${{ github.ref_name }}
+      - name: Package and deploy to Reactor
+        env:
+          REACTOR_IO_INTEGRATION_CLIENT_SECRET: ${{ secrets.REACTOR_IO_INTEGRATION_CLIENT_SECRET }}
+        run: node scripts/deployExtensionToReactor.mjs ${{ github.event.inputs.version }}
+      - uses: actions/upload-artifact@v4
+        with:
+          name: extension-package
+          path: packages/reactor-extension/package-adobe-alloy-${{ github.event.inputs.version }}.zip
+      - name: Record release
+        uses: adobe/project-card-release-automation/record-release@v2
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          version: ${{ github.event.inputs.version }}
+
+  prerelease:
+    name: Prerelease
+    runs-on: ubuntu-latest
+    needs: validate
+    if: ${{ contains(github.event.inputs.version, '-') }}
+    steps:
+      - uses: actions/checkout@v4
+      - uses: pnpm/action-setup@v4
+        with:
+          version: latest
+      - name: Set up Node.js
+        uses: actions/setup-node@v5
+        with:
+          node-version-file: .nvmrc
+          cache: pnpm
+      - uses: webfactory/ssh-agent@v0.9.1
+        with:
+          ssh-private-key: ${{ secrets.ALLOY_BOT_GITHUB_SSH_PRIVATE_KEY }}
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+      - name: Version extension
+        run: pnpm version ${{ github.event.inputs.version }} --no-commit-hooks
+        working-directory: packages/reactor-extension
+      - name: Build extension (refresh extension.json)
+        run: pnpm --filter reactor-extension-alloy run build
+      - name: Commit and push
+        run: |
+          git config user.name "$GITHUB_ACTOR"
+          git config user.email "gh-actions-$GITHUB_ACTOR@github.com"
+          git remote set-url origin "git@github.com:${{ github.repository }}.git"
+          git add packages/reactor-extension/package.json
+          git diff --staged --quiet || git commit -m "[skip ci] extension ${{ github.event.inputs.version }}"
+          git push origin HEAD:${{ github.ref_name }}
+      - name: Package and deploy to Reactor
+        env:
+          REACTOR_IO_INTEGRATION_CLIENT_SECRET: ${{ secrets.REACTOR_IO_INTEGRATION_CLIENT_SECRET }}
+        run: node scripts/deployExtensionToReactor.mjs ${{ github.event.inputs.version }}
+      - uses: actions/upload-artifact@v4
+        with:
+          name: extension-package
+          path: packages/reactor-extension/package-adobe-alloy-${{ github.event.inputs.version }}.zip
+      - name: Record release
+        uses: adobe/project-card-release-automation/record-release@v2
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          version: ${{ github.event.inputs.version }}

.github/workflows/dev.yaml

@@ -22,6 +22,8 @@ jobs:
         run: pnpm install --frozen-lockfile
       - name: Linting
         run: pnpm run lint
+      - name: Format check
+        run: pnpm run format:check
 
   unit-test:
     name: "Test"
@@ -37,8 +39,12 @@ jobs:
           node-version-file: .nvmrc
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
-      - name: Build Alloy
+      - name: Build Alloy (dist, distTest for integration tests)
         run: pnpm run build
+      - name: Build Alloy lib (libEs5, libEs6 for extension and tests)
+        run: pnpm run build:lib
+      - name: Build all packages
+        run: pnpm -r run build
       - name: Run Test
         run: pnpm run test
         env:

.github/workflows/generate-coverage-report.yaml

@@ -31,9 +31,12 @@ jobs:
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
-      - name: Build Alloy
+      - name: Build Alloy (dist, distTest for integration tests)
         run: pnpm run build
 
+      - name: Build all packages
+        run: pnpm -r run build
+
       - name: Run Unit Test with coverage
         run: pnpm run test:coverage
         env:

.github/workflows/initializeExtensionRelease.yml

@@ -0,0 +1,19 @@
+name: Initialize Intended Extension Release
+
+on:
+  workflow_dispatch:
+    inputs:
+      type:
+        description: "Release Type [major|minor|patch]"
+        required: true
+
+jobs:
+  initializeIntendedRelease:
+    name: Initialize Intended Extension Release
+    runs-on: ubuntu-latest
+    steps:
+      - uses: adobe/project-card-release-automation/initialize-card@v2
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          releaseType: ${{ github.event.inputs.type }}
+          projectNumber: 1

.github/workflows/triggerExtensionRelease.yml

@@ -0,0 +1,21 @@
+name: Trigger Extension Release
+
+on:
+  project_card:
+    types: [moved]
+  push:
+    branches:
+      - main
+      - "v[0-9]+"
+      - "v[0-9]+.[0-9]+"
+
+jobs:
+  triggerReleaseIfNeeded:
+    name: Trigger Extension Release If Needed
+    runs-on: ubuntu-latest
+    steps:
+      - uses: adobe/project-card-release-automation/trigger-release@v2
+        with:
+          token: ${{ secrets.ALLOY_BOT_GITHUB_TOKEN }}
+          workflowId: "deployExtensionRelease.yml"
+          projectNumber: 1