Port Internal Comments to the v2 framework

.wp-env.tests.json

@@ -5,6 +5,7 @@
     "port": 8820,
     "testsEnvironment": false,
     "mappings": {
+        "wp-content/plugins/internal-comments": "./plugins/internal-comments",
         "wp-content/plugins/linked-orders-for-woocommerce": "./plugins/linked-orders-for-woocommerce",
         "wp-content/plugins/woocommerce": "./vendor/wp-plugin/woocommerce"
     },
@@ -14,6 +15,6 @@
         "WP_ENVIRONMENT_TYPE": false
     },
     "lifecycleScripts": {
-        "afterStart": "node_modules/.bin/wp-env --config .wp-env.tests.json run cli wp plugin activate woocommerce && node_modules/.bin/wp-env --config .wp-env.tests.json run cli wp wc hpos enable --ignore-plugin-compatibility && node_modules/.bin/wp-env --config .wp-env.tests.json run cli wp plugin activate linked-orders-for-woocommerce"
+        "afterStart": "node_modules/.bin/wp-env --config .wp-env.tests.json run cli wp plugin activate woocommerce && node_modules/.bin/wp-env --config .wp-env.tests.json run cli wp wc hpos enable --ignore-plugin-compatibility && node_modules/.bin/wp-env --config .wp-env.tests.json run cli wp plugin activate linked-orders-for-woocommerce internal-comments"
     }
 }

AGENTS.md

@@ -7,7 +7,8 @@ The monorepo of the DWS v2 WordPress plugins, each built on the wp-framework pac
 ```
 wordpress-plugins/
 ├── plugins/
-│   └── linked-orders-for-woocommerce/    Linked Orders for WooCommerce → wc-linked-orders, ports 8822 and 8823, on wordpress.org
+│   ├── linked-orders-for-woocommerce/    Linked Orders for WooCommerce → wc-linked-orders, ports 8822 and 8823, on wordpress.org
+│   └── internal-comments/                Internal Comments → wp-internal-comments, ports 8824 and 8825, on wordpress.org
 ├── tests/
 │   ├── e2e/                              the shared environment's smoke check, over the plugins .wp-env.tests.json maps
 │   └── Fixtures/multi-plugin-smoke/      reserved for a fixture plugin the shared environment mounts
@@ -48,4 +49,4 @@ Each plugin's `AGENTS.md` states its code style, the template's. Markdown keeps
 
 - CI runs twice per change: the root's lanes on the pull request, and the mirror's own after the split.
 - The root's workflow checks cover the root's workflows; a plugin's own are checked on its mirror after the split, and locally by the command above.
-- Until a second plugin lands, the shared environment runs its one plugin's suites a second time.
+- Each plugin's Integration suite runs twice: in the plugin's own environments and in the shared one.

composer.json

@@ -58,7 +58,8 @@
       "Composer\\Config::disableProcessTimeout",
       "@putenv CI=1",
       "npm --prefix=. run plugins:build",
-      "node_modules/.bin/wp-env --config .wp-env.tests.json run cli --env-cwd=wp-content/plugins/linked-orders-for-woocommerce vendor/bin/phpunit --testsuite=Integration"
+      "node_modules/.bin/wp-env --config .wp-env.tests.json run cli --env-cwd=wp-content/plugins/linked-orders-for-woocommerce vendor/bin/phpunit --testsuite=Integration",
+      "node_modules/.bin/wp-env --config .wp-env.tests.json run cli --env-cwd=wp-content/plugins/internal-comments vendor/bin/phpunit --testsuite=Integration"
     ],
 
     "quality-check": [
@@ -68,31 +69,39 @@
     ],
 
     "plugins:packages-install": [
-      "@composer --working-dir=plugins/linked-orders-for-woocommerce packages-install"
+      "@composer --working-dir=plugins/linked-orders-for-woocommerce packages-install",
+      "@composer --working-dir=plugins/internal-comments packages-install"
     ],
     "plugins:packages-update": [
-      "@composer --working-dir=plugins/linked-orders-for-woocommerce packages-update"
+      "@composer --working-dir=plugins/linked-orders-for-woocommerce packages-update",
+      "@composer --working-dir=plugins/internal-comments packages-update"
     ],
 
     "plugins:format:php": [
-      "@composer --working-dir=plugins/linked-orders-for-woocommerce format:php"
+      "@composer --working-dir=plugins/linked-orders-for-woocommerce format:php",
+      "@composer --working-dir=plugins/internal-comments format:php"
     ],
     "plugins:lint:php": [
-      "@composer --working-dir=plugins/linked-orders-for-woocommerce lint:php"
+      "@composer --working-dir=plugins/linked-orders-for-woocommerce lint:php",
+      "@composer --working-dir=plugins/internal-comments lint:php"
     ],
 
     "plugins:test": [
-      "@composer --working-dir=plugins/linked-orders-for-woocommerce test"
+      "@composer --working-dir=plugins/linked-orders-for-woocommerce test",
+      "@composer --working-dir=plugins/internal-comments test"
     ],
     "plugins:test:unit": [
-      "@composer --working-dir=plugins/linked-orders-for-woocommerce test:unit"
+      "@composer --working-dir=plugins/linked-orders-for-woocommerce test:unit",
+      "@composer --working-dir=plugins/internal-comments test:unit"
     ],
     "plugins:test:integration": [
-      "@composer --working-dir=plugins/linked-orders-for-woocommerce test:integration"
+      "@composer --working-dir=plugins/linked-orders-for-woocommerce test:integration",
+      "@composer --working-dir=plugins/internal-comments test:integration"
     ],
 
     "plugins:quality-check": [
-      "@composer --working-dir=plugins/linked-orders-for-woocommerce quality-check"
+      "@composer --working-dir=plugins/linked-orders-for-woocommerce quality-check",
+      "@composer --working-dir=plugins/internal-comments quality-check"
     ],
 
     "changelog:add": "@php vendor/bin/changelogger add",

package.json

@@ -28,11 +28,11 @@
         "packages-update": "npm update",
         "packages-update:wp": "wp-scripts packages-update",
 
-        "plugins:packages-install": "npm --prefix=plugins/linked-orders-for-woocommerce run packages-install",
-        "plugins:packages-update": "npm --prefix=plugins/linked-orders-for-woocommerce run packages-update",
-        "plugins:packages-update:wp": "npm --prefix=plugins/linked-orders-for-woocommerce run packages-update:wp",
+        "plugins:packages-install": "npm --prefix=plugins/linked-orders-for-woocommerce run packages-install && npm --prefix=plugins/internal-comments run packages-install",
+        "plugins:packages-update": "npm --prefix=plugins/linked-orders-for-woocommerce run packages-update && npm --prefix=plugins/internal-comments run packages-update",
+        "plugins:packages-update:wp": "npm --prefix=plugins/linked-orders-for-woocommerce run packages-update:wp && npm --prefix=plugins/internal-comments run packages-update:wp",
 
-        "plugins:build": "npm --prefix=plugins/linked-orders-for-woocommerce run build",
+        "plugins:build": "npm --prefix=plugins/linked-orders-for-woocommerce run build && npm --prefix=plugins/internal-comments run build",
 
         "wp-env:tests:start": "wp-env --config .wp-env.tests.json start",
         "wp-env:tests:stop": "wp-env --config .wp-env.tests.json stop",
@@ -45,7 +45,7 @@
         "check:licenses": "wp-scripts check-licenses",
 
         "test:e2e": "playwright test --config=playwright.config.js",
-        "plugins:test:e2e": "npm --prefix=plugins/linked-orders-for-woocommerce run test:e2e",
+        "plugins:test:e2e": "npm --prefix=plugins/linked-orders-for-woocommerce run test:e2e && npm --prefix=plugins/internal-comments run test:e2e",
         "test:all": "composer test:integration && npm run test:e2e",
 
         "quality-check:all": "composer quality-check && npm run test:e2e"

plugins/internal-comments/.distignore

@@ -0,0 +1,39 @@
+.cache
+.distignore
+.editorconfig
+.git
+.github
+.gitignore
+.idea
+.vscode
+.wp-env.json
+.wp-env.override.json
+.wp-env.tests.json
+
+AGENTS.md
+CHANGELOG.md
+CLAUDE.md
+CONTRIBUTING.md
+README.md
+SECURITY.md
+
+changelog/
+docs/
+
+node_modules/
+tests/
+vendor/bin/
+
+composer.json
+composer.lock
+package.json
+package-lock.json
+tsconfig.json
+eslint.config.mjs
+stylelint.config.js
+phpcs.dist.xml
+phpcs.tests.dist.xml
+phpstan.dist.neon
+phpunit.dist.xml
+playwright.config.js
+scoper.inc.php

plugins/internal-comments/.editorconfig

@@ -0,0 +1,24 @@
+# This file is for unifying the coding style for different editors and IDEs
+# editorconfig.org
+
+# WordPress Coding Standards
+# https://make.wordpress.org/core/handbook/coding-standards/
+
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+insert_final_newline = true
+trim_trailing_whitespace = true
+indent_style = tab
+
+[*.{yml,yaml,json}]
+indent_style = space
+indent_size = 2
+
+[*.md]
+trim_trailing_whitespace = false
+
+[*.txt]
+end_of_line = crlf

plugins/internal-comments/.github/workflows/audit.yml

@@ -0,0 +1,21 @@
+name: Supply-Chain Audit
+
+on:
+  push:
+    branches: [trunk]
+  pull_request:
+  schedule:
+    # Weekly Monday at 07:00 UTC — staggered after dependabot (06:00) so PRs from
+    # dependency bumps surface audit results in the same morning batch.
+    - cron: '0 7 * * 1'
+
+permissions:
+  contents: read
+
+jobs:
+  audit:
+    name: Audit
+    # npm gate audits production deps only — the dev-tooling graph (wp-scripts/playwright trees) is advisory via dependabot alerts.
+    uses: ahegyes/wordpress-configs/.github/workflows/reusable-supply-chain-audit.yml@8d53efd292e4abee4a9c57b0e379434f54bedbe9
+    with:
+      npm-audit-flags: '--omit=dev --audit-level=high'

plugins/internal-comments/.github/workflows/codeql.yml

@@ -0,0 +1,23 @@
+name: CodeQL
+
+on:
+  push:
+    branches: [trunk]
+  pull_request:
+    branches: [trunk]
+  schedule:
+    - cron: '0 6 * * 1'
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions: {}
+
+jobs:
+  analyze:
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+    uses: ahegyes/wordpress-configs/.github/workflows/reusable-codeql.yml@8d53efd292e4abee4a9c57b0e379434f54bedbe9

plugins/internal-comments/.github/workflows/quality.yml

@@ -0,0 +1,83 @@
+name: Quality
+
+on:
+  push:
+    branches: [trunk]
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  lint-php:
+    name: PHP Lint
+    uses: ahegyes/wordpress-configs/.github/workflows/reusable-php-lint.yml@8d53efd292e4abee4a9c57b0e379434f54bedbe9
+    with:
+      php-version: '8.5'
+      scripts: '["lint:php:phpcs", "lint:php:phpcs:tests", "lint:php:phpstan"]'
+
+  lint-scripts-styles:
+    name: Scripts and styles lint
+    uses: ahegyes/wordpress-configs/.github/workflows/reusable-scripts-styles-lint.yml@8d53efd292e4abee4a9c57b0e379434f54bedbe9
+    with:
+      scripts: '["lint:scripts", "lint:styles", "lint:types"]'
+
+  block-json:
+    name: block.json schema
+    uses: ahegyes/wordpress-configs/.github/workflows/reusable-block-json-check.yml@8d53efd292e4abee4a9c57b0e379434f54bedbe9
+
+  slug:
+    name: Plugin slug
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    outputs:
+      slug: ${{ steps.slug.outputs.slug }}
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      # GitHub refuses a GITHUB_TOKEN push that changes a workflow, so the fill-in leaves workflows alone and they read the slug the plugin declares.
+      - name: Read the slug from composer.json
+        id: slug
+        run: |
+          slug=$(jq -r '.extra["text-domain"] // empty' composer.json)
+          if ! [[ "$slug" =~ ^[a-z0-9]+(-[a-z0-9]+)*$ ]]; then
+            echo "::error::composer.json's extra.text-domain must be the plugin's kebab-case slug — got '$slug'."
+            exit 1
+          fi
+          echo "slug=$slug" >> "$GITHUB_OUTPUT"
+
+  php-syntax:
+    name: PHP syntax
+    needs: slug
+    uses: ahegyes/wordpress-configs/.github/workflows/reusable-php-syntax-check.yml@8d53efd292e4abee4a9c57b0e379434f54bedbe9
+    with:
+      php-versions: '["7.4"]'
+      paths: ${{ format('["{0}.php", "uninstall.php", "includes"]', needs.slug.outputs.slug) }}
+
+  readme-lint:
+    name: readme.txt lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: thetwopct/wporg-plugin-readme-linter@1f869aba959265ecc90935b2380c6569d56646ac # v1.0.2
+        with:
+          path: readme.txt
+          fail-on: error
+
+  changelog:
+    name: Changelog fragments
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: shivammathur/setup-php@eb7c497e18156a6bbabfef1d3a82760b9eda3962 # 2.40.0
+        with:
+          php-version: '8.5'
+          coverage: none
+          tools: composer:v2
+      - uses: ramsey/composer-install@65e4f84970763564f46a70b8a54b90d033b3bdda # 4.0.0
+      - run: composer changelog:validate