21: Packaging and CI hygiene for a 1.0.0 tag

.gitattributes

@@ -1,6 +1,8 @@
 * text=auto eol=lf
 
+/.claude            export-ignore
 /.github            export-ignore
+/.superpowers       export-ignore
 /docs               export-ignore
 /tests              export-ignore
 /.editorconfig      export-ignore

.github/workflows/static-analysis.yml

@@ -40,6 +40,25 @@ jobs:
           extensions: mbstring, intl
           coverage: none
 
+      # Manifest validity does not vary by PHP or WordPress version, so it is
+      # asserted once here rather than on all four legs of the test matrix.
+      # --strict promotes the advisory notices -- a missing description, a
+      # non-canonical license string -- to failures, since those are what a
+      # consumer reads on Packagist. --no-check-lock because composer.lock is
+      # deliberately not committed for a library.
+      - name: Validate composer.json
+        run: composer validate --strict --no-check-lock
+
+      # cspell.json is checked in and every workflow carries `# cspell:ignore`
+      # directives, so something is expected to read it. Until this step existed
+      # nothing did, and the dictionary was decorative. Run before the composer
+      # install so vendor/ is absent and the ignorePaths entry for it is belt
+      # rather than braces. The major version is pinned: a minor cspell release
+      # that widens its dictionaries would otherwise turn a comment red without
+      # a commit here.
+      - name: Spellcheck
+        run: npx --yes cspell@8 lint --no-progress .
+
       # ext-* only, never the blanket --ignore-platform-reqs. The blanket form
       # also switches off the config.platform.php pin, which resolves dev
       # dependencies requiring PHP 8.1+ that cannot run here at all -- PHPStan

.github/workflows/tests-php.yml

@@ -34,6 +34,13 @@ jobs:
         # PHP version fires on every later one, so 8.5 catches what 8.0-8.4
         # would, and every leg resolves identical dependencies because
         # config.platform.php pins resolution to 7.4 regardless of runtime.
+        #
+        # That pin is also the only reason the 8.5 leg has a test harness at
+        # all: wp-browser 3.8.1 declares php ">=7.1 <8.0", so it installs
+        # because resolution sees 7.4, then executes on 8.5. Its constraint is
+        # bypassed rather than satisfied. That is deliberate -- wp-browser 4.x
+        # is unreachable while 7.4 is the floor -- and the leg passes today. If
+        # it ever stops passing, drop the column rather than chasing it.
         php:
           - "7.4"
           - "8.5"
@@ -109,7 +116,6 @@ jobs:
         run: |
           ${SLIC_BIN} use ${{ github.event.repository.name }}
           ${SLIC_BIN} composer set-version 2
-          ${SLIC_BIN} composer validate
           ${SLIC_BIN} composer install
 
       # The slic image ships a fixed WordPress that varies by PHP version, and

.gitignore

@@ -8,3 +8,5 @@
 .DS_Store
 .idea/
 .vscode/
+/.claude/
+/.superpowers/

composer.json

@@ -4,12 +4,23 @@
     "type": "library",
     "license": "GPL-2.0-or-later",
     "minimum-stability": "stable",
+    "keywords": [
+        "wordpress",
+        "plugin",
+        "bundled",
+        "loader",
+        "stellarwp"
+    ],
     "authors": [
         {
             "name": "StellarWP",
             "email": "dev@stellarwp.com"
         }
     ],
+    "support": {
+        "issues": "https://github.com/stellarwp/plugin-absorber/issues",
+        "source": "https://github.com/stellarwp/plugin-absorber"
+    },
     "require": {
         "php": ">=7.4",
         "stellarwp/container-contract": "^1.0"
@@ -20,9 +31,9 @@
         "lucatume/di52": "^3.0",
         "lucatume/wp-browser": "^3.6.5",
         "php-stubs/wordpress-stubs": "~6.4.0",
-        "phpstan/phpstan": "^1.10",
+        "phpstan/phpstan": "~1.12.0",
         "phpunit/phpunit": "^9.5",
-        "szepeviktor/phpstan-wordpress": "^1.3"
+        "szepeviktor/phpstan-wordpress": "~1.3.0"
     },
     "autoload": {
         "psr-4": {

cspell.json

@@ -2,50 +2,99 @@
     "version": "0.2",
     "language": "en,en-GB",
     "words": [
+        "ABSPATH",
         "absorber",
+        "adbario",
+        "akismet",
+        "alloptions",
         "assertable",
+        "autowirability",
+        "autowirable",
+        "autowires",
+        "autonumber",
+        "basenames",
         "codeception",
         "docblocks",
+        "fataled",
+        "fataling",
         "fatals",
         "invokable",
         "kadence",
         "kses",
         "learndash",
         "lucatume",
+        "mbstring",
         "multisite",
+        "mysqli",
         "nexcess",
         "packagist",
+        "pagenow",
+        "phpdotenv",
         "phpstan",
         "phpunit",
         "propanel",
+        "rebindable",
         "redirector",
         "referer",
         "sapi",
         "sfwd",
         "singlesite",
+        "sitemeta",
         "sitewide",
         "slic",
+        "standalones",
         "stellarwp",
         "strauss",
+        "subclassing",
+        "subsite",
+        "szepeviktor",
+        "superadmin",
+        "superglobal",
         "togglable",
+        "twentytwenty",
+        "unbooted",
+        "unbuildable",
         "unbuilt",
         "uncallable",
+        "universalframework",
         "uncastable",
+        "unconfigured",
         "ungated",
         "unnegated",
         "unreviewed",
+        "unsets",
+        "unslash",
+        "unslashed",
+        "unstubbed",
+        "unwire",
+        "unwires",
+        "unwiring",
         "uopz",
+        "upgrader",
+        "vlucas",
         "worktree",
         "wpautop",
+        "wpdb",
+        "WPMU",
         "wpunit"
     ],
     "ignoreWords": [
         "ance",
-        "defered"
+        "Brien",
+        "defered",
+        "Dpage",
+        "giverecurring",
+        "mstest",
+        "экспорт"
     ],
     "ignorePaths": [
-        "vendor/**",
+        ".git/**",
+        "LICENSE",
+        "composer.lock",
+        "node_modules/**",
+        "phpstan-cache/**",
         "tests/_output/**",
-        "composer.lock"
+        "tests/_support/_generated/**",
+        "vendor/**"
     ]
 }