release(web): prepare standalone Web SDK 0.1.0

.eslintignore

@@ -4,6 +4,7 @@ docs
 **/build/**
 **/dist/**
 coverage/**
+artifacts/**
 website/.astro/**
 website/versioned-dist/**
 website/public/worker/**

.github/workflows/build-apk.yml

@@ -17,7 +17,7 @@ jobs:
           node-version: '22.22.0'
 
       - name: Set up JDK 1.8
-        uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
         with:
           distribution: 'temurin'
           java-version: '17'

.github/workflows/ci.yml

@@ -5,7 +5,7 @@ on:
   workflow_dispatch:
 
 concurrency:
-  group: ${{ github.workflow }}-${{ github.head_ref }}
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
   cancel-in-progress: true
 
 jobs:
@@ -89,6 +89,7 @@ jobs:
                   "cpp/**",
                   "src/**",
                   "packages/editor/**",
+                  "packages/web/**",
                   "packages/recipe/**",
                   "package.json",
                   "package-lock.json",
@@ -115,6 +116,7 @@ jobs:
                   "cpp/**",
                   "src/**",
                   "packages/editor/**",
+                  "packages/web/**",
                   "packages/recipe/**",
                   "package.json",
                   "package-lock.json",
@@ -140,11 +142,17 @@ jobs:
                   "src/**",
                   "cpp/**",
                   "packages/editor/**",
+                  "packages/web/**",
                   "packages/recipe/**",
                   "package.json",
                   "package-lock.json",
                   "app.plugin.js",
                   "tsconfig*.json",
+                  "scripts/build-web-package.mjs",
+                  "scripts/verify-web-*.mjs",
+                  "scripts/fixtures/web-consumer/**",
+                  "scripts/verify-expo-sdk-versions.mjs",
+                  "scripts/__tests__/verify-expo-sdk-versions.test.mjs",
                   "lefthook.yml",
                   ".eslintignore",
                   ".eslintrc.js",
@@ -173,6 +181,7 @@ jobs:
                   "src/**",
                   "docs/**",
                   "packages/editor/**",
+                  "packages/web/**",
                   "packages/recipe/**",
                   "packages/node/**",
                   "packages/cli/**",
@@ -238,12 +247,16 @@ jobs:
           editor = any_changed(
               [
                   "packages/editor/**",
+                  "packages/web/**",
                   "src/**",
                   "scripts/fix-esm-imports.mjs",
                   "scripts/verify-package-consumer.mjs",
                   "package.json",
                   "package-lock.json",
                   "tsconfig*.json",
+                  "scripts/build-web-package.mjs",
+                  "scripts/verify-web-*.mjs",
+                  "scripts/fixtures/web-consumer/**",
                   ".github/workflows/ci.yml",
                   ".github/actions/**",
               ]
@@ -258,6 +271,9 @@ jobs:
                   "package.json",
                   "package-lock.json",
                   "tsconfig*.json",
+                  "scripts/build-web-package.mjs",
+                  "scripts/verify-web-*.mjs",
+                  "scripts/fixtures/web-consumer/**",
                   ".github/workflows/ci.yml",
                   ".github/actions/**",
               ]
@@ -274,6 +290,9 @@ jobs:
                   "package.json",
                   "package-lock.json",
                   "tsconfig*.json",
+                  "scripts/build-web-package.mjs",
+                  "scripts/verify-web-*.mjs",
+                  "scripts/fixtures/web-consumer/**",
                   ".github/workflows/ci.yml",
                   ".github/workflows/npm-publish.yml",
                   ".github/actions/**",
@@ -293,6 +312,9 @@ jobs:
                   "package.json",
                   "package-lock.json",
                   "tsconfig*.json",
+                  "scripts/build-web-package.mjs",
+                  "scripts/verify-web-*.mjs",
+                  "scripts/fixtures/web-consumer/**",
                   ".github/workflows/ci.yml",
                   ".github/workflows/npm-publish.yml",
                   ".github/actions/**",
@@ -639,6 +661,30 @@ jobs:
           }
           NODE
 
+  web-sdk:
+    runs-on: ubuntu-latest
+    name: Standalone Web SDK Consumer
+    needs: changes
+    if: needs.changes.outputs.js == 'true' || needs.changes.outputs.editor == 'true' || needs.changes.outputs.docs == 'true'
+    steps:
+      - name: Checkout the code
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - name: Setup Node.js
+        uses: ./.github/actions/setup
+        with:
+          node-version: '22.22.0'
+      - name: Install tooling
+        run: |
+          npm ci
+          npm ci --prefix website
+          npm exec --prefix website -- playwright install --with-deps chromium
+      - name: Verify standalone package and production browser consumer
+        run: |
+          npm run build:web
+          npm run check:web-api
+          npm run verify:size:web
+          node scripts/verify-web-consumer.mjs
+
   docs-site:
     runs-on: ubuntu-latest
     name: Documentation Site
@@ -741,8 +787,15 @@ jobs:
       - name: Install dependencies
         run: npm ci --prefix expo-example --ignore-scripts --no-audit --no-fund
 
-      - name: Verify Expo versions
-        run: (cd expo-example && npx --yes expo-doctor@1.20.1)
+      - name: Verify locked Expo SDK versions
+        # Check the installed SDK's compatibility data, not mutable patch
+        # recommendations fetched from Expo's current online version matrix.
+        run: node scripts/verify-expo-sdk-versions.mjs
+
+      - name: Verify Expo project configuration
+        # Only the dependency-version check is replaced above. Keep the other
+        # doctor checks online, including schema and React Native Directory.
+        run: (cd expo-example && EXPO_DOCTOR_SKIP_DEPENDENCY_VERSION_CHECK=1 npx --yes expo-doctor@1.20.1)
 
       - name: Build workspace dependencies
         run: |
@@ -1040,6 +1093,7 @@ jobs:
         security,
         js-check,
         editor-check,
+        web-sdk,
         recipe-check,
         c2pa-service,
         trace-service,

.github/workflows/docs-site.yml

@@ -14,6 +14,7 @@ on:
       - 'packages/editor/package.json'
       - 'packages/editor/README.md'
       - 'packages/recipe/**'
+      - 'packages/web/**'
       - 'packages/node/**'
       - 'packages/cli/**'
       - 'docs/**'

.github/workflows/npm-publish.yml

@@ -73,7 +73,7 @@ jobs:
         run: npm ci
 
       - name: Build Recipe workspace dependency
-        if: needs.resolve.outputs.package_path == 'packages/editor' || needs.resolve.outputs.package_path == 'packages/node' || needs.resolve.outputs.package_path == 'packages/cli'
+        if: needs.resolve.outputs.package_path == 'packages/editor' || needs.resolve.outputs.package_path == 'packages/node' || needs.resolve.outputs.package_path == 'packages/cli' || needs.resolve.outputs.package_path == 'packages/web'
         run: npm run build:recipe
 
       - name: Build Core type dependency for Editor
@@ -155,10 +155,24 @@ jobs:
         with:
           ref: ${{ needs.resolve.outputs.branch }}
           path: .release-verifier
-          sparse-checkout: scripts/verify-registry-consumer.mjs
+          sparse-checkout: |
+            scripts/verify-registry-consumer.mjs
+            scripts/verify-web-consumer.mjs
+            scripts/fixtures/web-consumer
+            example/assets/fonts/RubikBurned-Regular.ttf
           sparse-checkout-cone-mode: false
 
+      - name: Install Web registry verifier browser tooling
+        if: needs.resolve.outputs.package_path == 'packages/web'
+        run: |
+          mkdir -p .release-verifier/.browser-tools
+          printf '{"private":true}\n' > .release-verifier/.browser-tools/package.json
+          npm install --prefix .release-verifier/.browser-tools --no-audit --no-fund playwright@1.62.1
+          node .release-verifier/.browser-tools/node_modules/playwright/cli.js install --with-deps chromium
+
       - name: Verify fresh registry consumer
+        env:
+          IMAGE_MARKER_PLAYWRIGHT_ROOT: ${{ github.workspace }}/.release-verifier/.browser-tools/node_modules/playwright
         run: >-
           node .release-verifier/scripts/verify-registry-consumer.mjs
           --package-name "${{ needs.resolve.outputs.package_name }}"

.gitignore

@@ -85,3 +85,8 @@ website/src/content/docs/api/
 # testing
 /coverage
 examples/trace-service/benchmark-report.json
+
+# Standalone SDK generated source staging and local delivery artifacts
+packages/web/.build-*/
+/artifacts/
+examples/web-sdk/dist/