HVE Core VS Code extension

.github/prompts/pull-request.prompt.md

@@ -34,11 +34,24 @@ You WILL ALWAYS preserve template structure and formatting.
 * **If `pr-reference.xml` is NOT provided**:
   * Use `git fetch {{remote}} {{branch}}` determined from `${input:branch:origin/main}`, to update the remote branch to build a correct pull request.
   * **MANDATORY**: You MUST create `pr-reference.xml` using the repository scripts—select the command that matches your host environment. Do not use any other commands to gather git status or diffs.
-    * **Unix-like shells**: Use `./scripts/dev-tools/pr-ref-gen.sh`.
+  * **Script Location**: Scripts may be available locally at `./scripts/dev-tools/` OR bundled in a VS Code extension. Check local path first, then fall back to extension:
+    * **Local path**: `./scripts/dev-tools/pr-ref-gen.sh` or `./scripts/dev-tools/Generate-PrReference.ps1`
+    * **Extension path** (if local not found): `~/.vscode/extensions/ise-hve-essentials.hve-core-*/scripts/dev-tools/`
+    * **Locate from extension** (cross-platform):
+
+      ```bash
+      # Find PowerShell script
+      pwsh -c '$SCRIPT = Get-ChildItem -Path "$HOME/.vscode/extensions" -Filter "Generate-PrReference.ps1" -Recurse -ErrorAction SilentlyContinue | Select-Object -First 1 -ExpandProperty FullName; Write-Host "Found: $SCRIPT"'
+
+      # Find shell script
+      find ~/.vscode/extensions -name "pr-ref-gen.sh" 2>/dev/null | head -1
+      ```
+
+    * **Unix-like shells**: Use `./scripts/dev-tools/pr-ref-gen.sh` (or extension path if local not available).
       * Default: `./scripts/dev-tools/pr-ref-gen.sh`.
       * If `${input:excludeMarkdown}` is true: `./scripts/dev-tools/pr-ref-gen.sh --no-md-diff` (excludes markdown).
       * If a different base branch is specified via `${input:branch}`: `./scripts/dev-tools/pr-ref-gen.sh --no-md-diff --base-branch ${input:branch}` (adjust markdown inclusion as needed).
-    * **Windows PowerShell hosts**: Use `pwsh -File ./scripts/dev-tools/Generate-PrReference.ps1`.
+    * **Windows PowerShell hosts**: Use `pwsh -File ./scripts/dev-tools/Generate-PrReference.ps1` (or extension path if local not available).
       * Default: `pwsh -File ./scripts/dev-tools/Generate-PrReference.ps1`.
       * If `${input:excludeMarkdown}` is true: `pwsh -File ./scripts/dev-tools/Generate-PrReference.ps1 -ExcludeMarkdownDiff` (excludes markdown).
       * If a different base branch is specified via `${input:branch}`: `pwsh -File ./scripts/dev-tools/Generate-PrReference.ps1 -ExcludeMarkdownDiff -BaseBranch ${input:branch}` (adjust markdown inclusion as needed).

.github/workflows/extension-package.yml

@@ -0,0 +1,103 @@
+name: Package Extension
+
+on:
+  workflow_call:
+    inputs:
+      version:
+        description: 'Full version to use (e.g., 1.0.0 or empty to use package.json)'
+        required: false
+        type: string
+        default: ''
+      dev-patch-number:
+        description: 'Dev patch number to append (creates version like 1.0.0-dev.123)'
+        required: false
+        type: string
+        default: ''
+      use-changelog:
+        description: 'Whether to download and use changelog artifact'
+        required: false
+        type: boolean
+        default: false
+    outputs:
+      version:
+        description: 'Version that was packaged'
+        value: ${{ jobs.package.outputs.version }}
+      vsix-file:
+        description: 'Path to the packaged VSIX file'
+        value: ${{ jobs.package.outputs.vsix-file }}
+
+permissions:
+  contents: read
+
+jobs:
+  package:
+    runs-on: ubuntu-latest
+    outputs:
+      version: ${{ steps.package.outputs.version }}
+      vsix-file: ${{ steps.package.outputs.vsix-file }}
+    steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
+        with:
+          egress-policy: audit
+
+      - name: Checkout code
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
+
+      - name: Setup Node.js
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: '20'
+
+      - name: Install dependencies
+        run: npm install -g @vscode/vsce
+
+      - name: Setup PowerShell
+        shell: pwsh
+        run: |
+          Write-Host "PowerShell version: $($PSVersionTable.PSVersion)"
+
+      - name: Download changelog artifact
+        if: inputs.use-changelog
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
+        with:
+          name: changelog
+          path: ./
+        continue-on-error: true
+
+      - name: Package extension
+        id: package
+        shell: pwsh
+        run: |
+          $version = "${{ inputs.version }}".Trim()
+          $devPatch = "${{ inputs.dev-patch-number }}".Trim()
+
+          Write-Host "📦 Packaging extension..."
+
+          $arguments = @()
+
+          if ($version) {
+            $arguments += '-Version'
+            $arguments += $version
+          }
+
+          if ($devPatch) {
+            $arguments += '-DevPatchNumber'
+            $arguments += $devPatch
+          }
+
+          if (Test-Path "./CHANGELOG.md") {
+            $arguments += '-ChangelogPath'
+            $arguments += "./CHANGELOG.md"
+          }
+
+          ./scripts/extension/Package-Extension.ps1 @arguments
+
+      - name: Upload VSIX artifact
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        with:
+          name: extension-vsix
+          path: extension/*.vsix
+          retention-days: 30

.github/workflows/extension-publish.yml

@@ -0,0 +1,146 @@
+name: Publish Extension
+
+on:
+  release:
+    types: [published]
+  workflow_dispatch:
+    inputs:
+      version:
+        description: 'Version to publish (leave empty to use package.json version)'
+        required: false
+        type: string
+        default: ''
+      dry-run:
+        description: 'Dry run (package only, do not publish)'
+        required: false
+        type: boolean
+        default: false
+
+permissions:
+  contents: read
+  id-token: write
+
+jobs:
+  prepare-changelog:
+    name: Prepare Changelog
+    runs-on: ubuntu-latest
+    outputs:
+      changelog-path: ${{ steps.create-changelog.outputs.path }}
+    steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
+        with:
+          egress-policy: audit
+
+      - name: Checkout code
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
+
+      - name: Create changelog file
+        id: create-changelog
+        run: |
+          if [ "${{ github.event_name }}" == "release" ]; then
+            cat > CHANGELOG.md << 'EOF'
+          ${{ github.event.release.body }}
+          EOF
+            echo "path=CHANGELOG.md" >> $GITHUB_OUTPUT
+          elif [ "${{ github.event_name }}" == "workflow_dispatch" ]; then
+            echo "path=" >> $GITHUB_OUTPUT
+          else
+            echo "path=" >> $GITHUB_OUTPUT
+          fi
+
+      - name: Upload changelog
+        if: steps.create-changelog.outputs.path != ''
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        with:
+          name: changelog
+          path: CHANGELOG.md
+          retention-days: 1
+
+  normalize-version:
+    name: Normalize Version
+    runs-on: ubuntu-latest
+    outputs:
+      version: ${{ steps.normalize.outputs.version }}
+    steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
+        with:
+          egress-policy: audit
+
+      - name: Normalize version string
+        id: normalize
+        run: |
+          if [ "${{ github.event_name }}" == "release" ]; then
+            VERSION="${{ github.event.release.tag_name }}"
+          else
+            VERSION="${{ inputs.version }}"
+          fi
+          # Strip leading 'v' if present
+          VERSION="${VERSION#v}"
+          echo "version=$VERSION" >> $GITHUB_OUTPUT
+
+  package:
+    name: Package Extension
+    needs: [prepare-changelog, normalize-version]
+    uses: ./.github/workflows/extension-package.yml
+    with:
+      version: ${{ needs.normalize-version.outputs.version }}
+      use-changelog: ${{ needs.prepare-changelog.outputs.changelog-path != '' }}
+    permissions:
+      contents: read
+
+  publish:
+    name: Publish to Marketplace
+    needs: [prepare-changelog, package]
+    if: ${{ !inputs.dry-run }}
+    runs-on: ubuntu-latest
+    environment: marketplace
+    steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
+        with:
+          egress-policy: audit
+
+      - name: Checkout code
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
+
+      - name: Azure Login (OIDC)
+        uses: azure/login@a65d910e8af852a8061c627c456678983e180302 # v2.2.0
+        with:
+          client-id: ${{ secrets.AZURE_CLIENT_ID }}
+          tenant-id: ${{ secrets.AZURE_TENANT_ID }}
+          subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
+
+      - name: Setup Node.js
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: '20'
+
+      - name: Install VSCE
+        run: npm install -g @vscode/vsce
+
+      - name: Download VSIX artifact
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
+        with:
+          name: extension-vsix
+          path: ./extension
+
+      - name: Publish to VS Code Marketplace
+        run: |
+          VSIX_FILE=$(ls -t extension/hve-core-*.vsix | head -1)
+          echo "📦 Publishing: $VSIX_FILE"
+          vsce publish --packagePath "$VSIX_FILE" --azure-credential
+
+      - name: Summary
+        run: |
+          echo "## 🎉 Extension Published Successfully" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "**Version:** ${{ needs.package.outputs.version }}" >> $GITHUB_STEP_SUMMARY
+          echo "**VSIX File:** ${{ needs.package.outputs.vsix-file }}" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "View on [VS Code Marketplace](https://marketplace.visualstudio.com/items?itemName=ise-hve-essentials.hve-core)" >> $GITHUB_STEP_SUMMARY

.github/workflows/main.yml

@@ -4,6 +4,7 @@ on:
   push:
     branches:
       - main
+
   workflow_dispatch:
 
 # Minimal permissions for security
@@ -46,13 +47,27 @@ jobs:
       upload-sarif: true
       upload-artifact: true
 
+  extension-package:
+    name: Package VS Code Extension
+    needs:
+      - spell-check
+      - markdown-lint
+      - table-format
+      - dependency-pinning-scan
+    uses: ./.github/workflows/extension-package.yml
+    with:
+      dev-patch-number: ${{ github.run_number }}
+    permissions:
+      contents: read
+
   release-please:
     name: Release Please
     needs:
       - spell-check
       - markdown-lint
       - table-format
       - dependency-pinning-scan
+      - extension-package
     runs-on: ubuntu-latest
     permissions:
       contents: write

.gitignore

@@ -3,6 +3,9 @@
 ##
 ## Get latest from https://github.com/github/gitignore/blob/main/VisualStudio.gitignore
 
+# macOS
+.DS_Store
+
 # User-specific files
 *.rsuser
 *.suo
@@ -412,6 +415,10 @@ FodyWeavers.xsd
 # Built Visual Studio Code Extensions
 *.vsix
 
+# Extension build artifacts
+extension/LICENSE
+extension/CHANGELOG.md
+
 # Windows Installer files from build outputs
 *.cab
 *.msi

extension/.vscodeignore

@@ -0,0 +1,13 @@
+# Exclude everything by default
+**
+
+# Include only the extension essentials
+!.github/chatmodes/**
+!.github/prompts/**
+!.github/instructions/**
+!.github/agents/**
+!scripts/dev-tools/**
+!package.json
+!README.md
+!LICENSE
+!CHANGELOG.md

extension/LICENSE

@@ -0,0 +1,21 @@
+# MIT License
+
+Copyright (c) Microsoft Corporation. All rights reserved.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.