# Build and source notes

## Runtime assets

This plugin ships **plain PHP, CSS, hand-authored JavaScript, and static assets only**. There is no compiled JavaScript bundle, minified runtime asset, or build step required to run the plugin in WordPress.

## Source layout

```
agentic-bridge.php   # Bootstrap
uninstall.php                  # Uninstall handler (retain-by-default)
includes/                      # PHP classes (incl. class-findings-presentation.php)
views/                         # Admin templates
assets/admin.css               # Admin styles (hand-authored CSS)
assets/admin.js                # Admin dashboard interactions (hand-authored JS)
assets/admin-editor.js         # Editor Agent Ready tabs (hand-authored JS)
assets/brand/verified-span-mark.png  # Official runtime logo (Direction A / node 24:67)
languages/                     # Translation template (POT)
readme.txt                     # WordPress.org readme
license.txt                    # GPL-2.0-or-later notice
BUILD-SOURCE.txt               # Human-readable build/source notes
```

## Distribution package

From the repository root:

```bash
cd wordpress-plugin
composer run package
```

Outputs:

- `dist/agentic-bridge-0.2.3.zip`
- `dist/agentic-bridge-0.2.3.zip.sha256` (whole-archive SHA-256)
- `dist/agentic-bridge-0.2.3.manifest.sha256` (sorted per-file SHA-256 manifest for the staged plugin payload)

Reproducible timestamps use `SOURCE_DATE_EPOCH` (default `946684800`, `2000-01-01T00:00:00Z`) via `scripts/reproducible-env.sh`.

The zip contains exactly one top-level folder: `agentic-bridge/`.

Excluded from distribution: tests, PHPUnit cache, Composer vendor/dev files, repository docs, backend/dashboard code, secrets, and dotfiles.

## Translation template

Regenerate with official WP-CLI tooling (pinned `wordpress:cli-php8.3`):

```bash
composer run make-pot
```

Uses `wp i18n make-pot` via tar pipe into the CLI container (`--allow-root`). `POT-Creation-Date` is normalized from `SOURCE_DATE_EPOCH` (default `946684800`, i.e. `2000-01-01T00:00:00Z`) so consecutive `make-pot` and `package` runs produce byte-identical POT and zip artifacts. WordPress.org loads translations automatically; no runtime `load_plugin_textdomain()` call is bundled.

## Licensing

Plugin code: GPL-2.0-or-later. No runtime Composer/vendor dependencies or third-party font binaries are bundled in the distribution zip.