valise-sh 0.2.0 → 0.3.0

package/lib/fish/profile.fish

@@ -0,0 +1,170 @@
+# Copyright (c) 2026 Joseph Cumines
+# SPDX-License-Identifier: MIT
+
+# Fish adapter for a release built by `valise build`, installed at
+# runtime/fish/profile.fish.
+#
+# The valise Fish integration authenticates the active sealed release and
+# exports SHELL_PROJECT_ROOT pointing at its root before sourcing this file.
+# The seeds are the release's own roots_fish line in valise-release.conf, so a
+# Fish login loads exactly the bundle the release was built for. VALISE_MODE
+# selects strict or permissive failure handling (default strict, as in the
+# POSIX plans). The adapter sources the release's native Fish metadata and
+# loader, consumes the loader's bootstrap status marker, and publishes
+# VALISE_FISH_READY=1 only after a successful activation.
+
+# Readiness and the bootstrap handshake are engine-private state. A forged
+# or stale value must not survive this activation, even one that fails
+# early: erase every visible scope first, failing closed if an erase is
+# refused.
+for _valise_fish_profile_stale in VALISE_FISH_READY _sp_fish_loader_bootstrap_mode _sp_fish_loader_bootstrap_seeds _sp_fish_loader_bootstrap_status _sp_fish_loader_expected_source _sp_fish_metadata_expected_source
+    if builtin set -q -g "$_valise_fish_profile_stale"; and not builtin set -e -g "$_valise_fish_profile_stale"
+        builtin printf '%s\n' "valise Fish profile: cannot clear stale global $_valise_fish_profile_stale" >&2
+        return 1
+    end
+    if builtin set -q -U "$_valise_fish_profile_stale"; and not builtin set -e -U "$_valise_fish_profile_stale"
+        builtin printf '%s\n' "valise Fish profile: cannot clear stale universal $_valise_fish_profile_stale" >&2
+        return 1
+    end
+end
+
+# Each activation starts from nothing. Remove the functions the previous
+# activation's loader recorded as its own, but only where the live function
+# still has the recorded Fish provenance, then drop that loader state. A
+# failure below therefore never leaves the old activation callable without
+# readiness.
+set -l _valise_fish_profile_owned_index 1
+for _valise_fish_profile_owned in $_sp_fish_loader_owned_exports
+    set -l _valise_fish_profile_owned_source "$_sp_fish_loader_owned_sources[$_valise_fish_profile_owned_index]"
+    if builtin test -n "$_valise_fish_profile_owned_source"; and builtin functions -q -- "$_valise_fish_profile_owned"; and builtin test (builtin functions --details -- "$_valise_fish_profile_owned") = "$_valise_fish_profile_owned_source"
+        builtin functions -e -- "$_valise_fish_profile_owned"; or builtin exit 125
+    end
+    set _valise_fish_profile_owned_index (builtin math $_valise_fish_profile_owned_index + 1)
+end
+for _valise_fish_profile_stale in _sp_fish_loader_owned_exports _sp_fish_loader_owned_sources _sp_fish_loaded_modules _sp_fish_module_roots _sp_fish_metadata_provider
+    if builtin set -q -g "$_valise_fish_profile_stale"; and not builtin set -e -g "$_valise_fish_profile_stale"
+        builtin exit 125
+    end
+    if builtin set -q -U "$_valise_fish_profile_stale"; and not builtin set -e -U "$_valise_fish_profile_stale"
+        builtin exit 125
+    end
+end
+
+if not builtin set -q SHELL_PROJECT_ROOT
+    builtin printf '%s\n' 'valise Fish profile: SHELL_PROJECT_ROOT is not set' >&2
+    return 1
+end
+set -l _valise_fish_profile_root (builtin path resolve -- "$SHELL_PROJECT_ROOT" 2>/dev/null)
+if builtin test (builtin count $_valise_fish_profile_root) -ne 1; or builtin test -z "$_valise_fish_profile_root"
+    builtin printf '%s\n' 'valise Fish profile: SHELL_PROJECT_ROOT cannot be resolved' >&2
+    return 1
+end
+set -l _valise_fish_profile_runtime "$_valise_fish_profile_root/runtime/fish"
+
+for _valise_fish_profile_file in "$_valise_fish_profile_root/valise-release.conf" "$_valise_fish_profile_runtime/metadata.fish" "$_valise_fish_profile_runtime/loader.fish"
+    if not builtin test -f "$_valise_fish_profile_file"; or not builtin test -r "$_valise_fish_profile_file"
+        builtin printf '%s\n' "valise Fish profile: release file is not readable: $_valise_fish_profile_file" >&2
+        return 1
+    end
+end
+
+set -l _valise_fish_profile_mode strict
+if builtin set -q VALISE_MODE
+    set _valise_fish_profile_mode "$VALISE_MODE"
+end
+
+# roots_fish holds space-separated module references. The Fish loader
+# resolves modules by name, so a qualified name@source keeps only its name.
+set -l _valise_fish_profile_roots_lines (builtin string match -r '^roots_fish=.*' < "$_valise_fish_profile_root/valise-release.conf")
+if builtin test (builtin count $_valise_fish_profile_roots_lines) -ne 1
+    builtin printf '%s\n' 'valise Fish profile: valise-release.conf must hold exactly one roots_fish line' >&2
+    return 1
+end
+set -l _valise_fish_profile_seeds
+for _valise_fish_profile_ref in (builtin string split ' ' -- (builtin string replace 'roots_fish=' '' -- $_valise_fish_profile_roots_lines[1]))
+    builtin test -n "$_valise_fish_profile_ref"; or continue
+    set -a _valise_fish_profile_seeds (builtin string replace -r '@.*$' '' -- $_valise_fish_profile_ref)
+end
+
+# The adapter, not the sourced files, names the provenance anchors the
+# loader checks its own definitions against. Pinning them here means a
+# caller cannot preset a forged anchor before activation.
+set -l _valise_fish_profile_loader_anchor "$_valise_fish_profile_runtime/loader.fish"
+set -l _valise_fish_profile_metadata_anchor "$_valise_fish_profile_runtime/metadata.fish"
+builtin set -g _sp_fish_loader_expected_source "$_valise_fish_profile_loader_anchor"
+builtin set -g _sp_fish_metadata_expected_source "$_valise_fish_profile_metadata_anchor"
+
+builtin set -gx _sp_fish_loader_bootstrap_mode "$_valise_fish_profile_mode"
+builtin set -gx _sp_fish_loader_bootstrap_seeds $_valise_fish_profile_seeds
+
+builtin source "$_valise_fish_profile_metadata_anchor"
+set -l _valise_fish_profile_metadata_status $status
+# Metadata defines functions only. It must leave the activation state it was
+# handed untouched; a source that returns success after rewriting it is
+# rejected the same as one that fails.
+if builtin test $_valise_fish_profile_metadata_status -eq 0
+    set -l _valise_fish_profile_tampered
+    if not builtin test "$SHELL_PROJECT_ROOT" = "$_valise_fish_profile_root"; and not builtin test (builtin path resolve -- "$SHELL_PROJECT_ROOT" 2>/dev/null) = "$_valise_fish_profile_root"
+        set -a _valise_fish_profile_tampered SHELL_PROJECT_ROOT
+    end
+    if builtin set -q -U _sp_fish_loader_expected_source; or not builtin test "$_sp_fish_loader_expected_source" = "$_valise_fish_profile_loader_anchor"
+        set -a _valise_fish_profile_tampered _sp_fish_loader_expected_source
+    end
+    if builtin set -q -U _sp_fish_metadata_expected_source; or not builtin test "$_sp_fish_metadata_expected_source" = "$_valise_fish_profile_metadata_anchor"
+        set -a _valise_fish_profile_tampered _sp_fish_metadata_expected_source
+    end
+    if builtin set -q -U _sp_fish_loader_bootstrap_mode; or not builtin test "$_sp_fish_loader_bootstrap_mode" = "$_valise_fish_profile_mode"
+        set -a _valise_fish_profile_tampered _sp_fish_loader_bootstrap_mode
+    end
+    if builtin set -q -U _sp_fish_loader_bootstrap_seeds; or not builtin test "$_sp_fish_loader_bootstrap_seeds" = "$_valise_fish_profile_seeds"
+        set -a _valise_fish_profile_tampered _sp_fish_loader_bootstrap_seeds
+    end
+    if builtin set -q _sp_fish_loader_bootstrap_status
+        set -a _valise_fish_profile_tampered _sp_fish_loader_bootstrap_status
+    end
+    if builtin test (builtin count $_valise_fish_profile_tampered) -ne 0
+        builtin printf '%s\n' "valise Fish profile: metadata changed activation state: $_valise_fish_profile_tampered" >&2
+        set _valise_fish_profile_metadata_status 1
+    end
+end
+if builtin test $_valise_fish_profile_metadata_status -ne 0
+    for _valise_fish_profile_stale in _sp_fish_loader_bootstrap_mode _sp_fish_loader_bootstrap_seeds _sp_fish_loader_bootstrap_status _sp_fish_loader_expected_source _sp_fish_metadata_expected_source
+        builtin set -q -U "$_valise_fish_profile_stale"; and builtin set -e -U "$_valise_fish_profile_stale"
+        builtin set -q -g "$_valise_fish_profile_stale"; and builtin set -e -g "$_valise_fish_profile_stale"
+    end
+    builtin set -g _sp_fish_loader_expected_source "$_valise_fish_profile_loader_anchor"
+    builtin set -g _sp_fish_metadata_expected_source "$_valise_fish_profile_metadata_anchor"
+    return $_valise_fish_profile_metadata_status
+end
+
+builtin source "$_valise_fish_profile_loader_anchor"
+set -l _valise_fish_profile_loader_status $status
+# The loader consumes the bootstrap request when it sources cleanly; erase
+# any request a failed source left behind so it cannot leak to callers.
+if builtin set -q _sp_fish_loader_bootstrap_mode
+    builtin set -e _sp_fish_loader_bootstrap_mode
+end
+if builtin set -q _sp_fish_loader_bootstrap_seeds
+    builtin set -e _sp_fish_loader_bootstrap_seeds
+end
+if builtin test $_valise_fish_profile_loader_status -ne 0
+    if builtin set -q _sp_fish_loader_bootstrap_status
+        builtin set -e _sp_fish_loader_bootstrap_status
+    end
+    return $_valise_fish_profile_loader_status
+end
+
+# The loader publishes a fresh bootstrap status marker on every activation;
+# its absence means the loader never completed its handshake.
+if not builtin set -q _sp_fish_loader_bootstrap_status
+    builtin printf '%s\n' 'valise Fish profile: loader bootstrap status marker is absent' >&2
+    return 1
+end
+set -l _valise_fish_profile_status $_sp_fish_loader_bootstrap_status
+builtin set -e _sp_fish_loader_bootstrap_status
+if builtin test $_valise_fish_profile_status -ne 0
+    return $_valise_fish_profile_status
+end
+
+builtin set -gx VALISE_FISH_READY 1
+return 0

package/lib/loader.sh

@@ -94,7 +94,6 @@ _sp_loader_read_record() {
   _splrr_platforms=
   _splrr_side_effect=
   _splrr_exports=
-  _splrr_updates=
   _splrr_version=
   _splrr_load=
   while IFS= read -r _splrr_line || [ -n "$_splrr_line" ]; do
@@ -112,7 +111,6 @@ _sp_loader_read_record() {
     platforms) _splrr_platforms=$_splrr_value ;;
     side_effect) _splrr_side_effect=$_splrr_value ;;
     exports) _splrr_exports=$_splrr_value ;;
-    updates) _splrr_updates=$_splrr_value ;;
     version) _splrr_version=$_splrr_value ;;
     load) _splrr_load=$_splrr_value ;;
     esac
@@ -124,12 +122,11 @@ _sp_loader_read_record() {
   _spl_record_platforms=$_splrr_platforms
   _spl_record_side_effect=$_splrr_side_effect
   _spl_record_exports=$_splrr_exports
-  _spl_record_updates=$_splrr_updates
   _spl_record_version=$_splrr_version
   _spl_record_load=$_splrr_load
   unset _splrr_file _splrr_line _splrr_key _splrr_value _splrr_name _splrr_requires \
     _splrr_optional _splrr_shells _splrr_platforms _splrr_side_effect _splrr_exports \
-    _splrr_updates _splrr_version _splrr_load
+    _splrr_version _splrr_load
 }
 
 _sp_loader_reserved_scan() {
@@ -639,7 +636,8 @@ sp_loader_load_modules() {
       fi
       IFS=' '
       for _spl_value in $_spl_record_shells; do
-        [ "$_spl_value" = sh ] && _spl_shell_match=1
+        # posix names every POSIX shell; sh names only the generic class.
+        [ "$_spl_value" = posix ] && _spl_shell_match=1
         [ "$_spl_value" = "$_spl_current_shell" ] && _spl_shell_match=1
       done
       for _spl_value in $_spl_record_platforms; do
@@ -742,7 +740,7 @@ sp_loader_load_modules() {
         fi
       done
       unset _spl_record_name _spl_record_requires _spl_record_optional _spl_record_shells \
-        _spl_record_platforms _spl_record_side_effect _spl_record_exports _spl_record_updates \
+        _spl_record_platforms _spl_record_side_effect _spl_record_exports \
         _spl_record_version _spl_record_load
       if [ "$_spl_dep_ifs_was_set" -eq 1 ]; then
         IFS=$_spl_dep_old_ifs
@@ -1613,7 +1611,7 @@ sp_loader_load_modules() {
       _spl_order_words _spl_failed_words _spl_guard_seen_words _spl_guard_strict_required_words \
       _spl_guard_blocked_words _spl_guard_modules_words _spl_guard_order_words _spl_guard_failed_words \
       _spl_record_name _spl_record_requires _spl_record_optional _spl_record_shells \
-      _spl_record_platforms _spl_record_side_effect _spl_record_exports _spl_record_updates \
+      _spl_record_platforms _spl_record_side_effect _spl_record_exports \
       _spl_record_version _spl_record_load _spl_run_line _spl_module_root
     unset -f _sp_loader_path_is_physical _sp_loader_read_record _sp_loader_reserved_scan 2>/dev/null || :
     return 0
@@ -1663,7 +1661,7 @@ sp_loader_load_modules() {
     _spl_order_words _spl_failed_words _spl_guard_seen_words _spl_guard_strict_required_words \
     _spl_guard_blocked_words _spl_guard_modules_words _spl_guard_order_words _spl_guard_failed_words \
     _spl_record_name _spl_record_requires _spl_record_optional _spl_record_shells \
-    _spl_record_platforms _spl_record_side_effect _spl_record_exports _spl_record_updates \
+    _spl_record_platforms _spl_record_side_effect _spl_record_exports \
     _spl_record_version _spl_record_load _spl_run_line _spl_module_root
   unset -f _sp_loader_path_is_physical _sp_loader_read_record _sp_loader_reserved_scan 2>/dev/null || :
   return 1

package/lib/metadata.sh

@@ -144,7 +144,7 @@ sp_metadata_validate_shell_list() {
   for _spm_shell in $1; do
     _spm_shell_seen=1
     case "$_spm_shell" in
-    sh | bash | zsh | ksh | fish) ;;
+    posix | sh | bash | zsh | ksh | fish) ;;
     *)
       sp_metadata_error "invalid shell: $_spm_shell"
       if [ "$_spm_shell_ifs_was_set" -eq 1 ]; then
@@ -285,6 +285,92 @@ sp_metadata_validate_relative_path() {
   return 0
 }
 
+# sp_metadata_validate_path_list <list> <label>
+# Validate space-separated module-relative file paths: each must be a
+# relative path with no empty, "." or ".." segment and no trailing slash.
+sp_metadata_validate_path_list() {
+  _spm_plist=$1
+  _spm_plabel=$2
+  sp_metadata_reject_glob_characters "$_spm_plist" "$_spm_plabel" || {
+    unset _spm_plist _spm_plabel
+    return 1
+  }
+  if [ "${IFS+x}" = x ]; then
+    _spm_plist_ifs_was_set=1
+    _spm_plist_ifs=${IFS-}
+  else
+    _spm_plist_ifs_was_set=0
+    _spm_plist_ifs=
+  fi
+  _spm_plist_status=0
+  IFS=' '
+  for _spm_pword in $_spm_plist; do
+    case "$_spm_pword" in
+    . | ./* | */. | */./* | *//* | */)
+      sp_metadata_error "invalid $_spm_plabel path: $_spm_pword"
+      _spm_plist_status=1
+      break
+      ;;
+    esac
+    if ! sp_metadata_validate_relative_path "$_spm_pword"; then
+      _spm_plist_status=1
+      break
+    fi
+    if [ "$_spm_plabel" = executable ]; then
+      _spm_pbase=${_spm_pword##*/}
+      case "$_spm_pbase" in
+      [abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789_]*) ;;
+      *)
+        sp_metadata_error "invalid executable name: $_spm_pbase"
+        _spm_plist_status=1
+        break
+        ;;
+      esac
+    fi
+  done
+  if [ "$_spm_plist_ifs_was_set" -eq 1 ]; then
+    IFS=$_spm_plist_ifs
+  else
+    unset IFS
+  fi
+  _spm_plist_rc=$_spm_plist_status
+  unset _spm_plist _spm_plabel _spm_pword _spm_pbase _spm_plist_ifs _spm_plist_ifs_was_set _spm_plist_status
+  return "$_spm_plist_rc"
+}
+
+# sp_metadata_validate_commands <commands> <exports>
+# Every published command must be one of the module's declared exports.
+sp_metadata_validate_commands() {
+  sp_metadata_validate_identifier_list "$1" command || return 1
+  if [ "${IFS+x}" = x ]; then
+    _spm_cmd_ifs_was_set=1
+    _spm_cmd_ifs=${IFS-}
+  else
+    _spm_cmd_ifs_was_set=0
+    _spm_cmd_ifs=
+  fi
+  _spm_cmd_status=0
+  IFS=' '
+  for _spm_cmd in $1; do
+    case " $2 " in
+    *" $_spm_cmd "*) ;;
+    *)
+      sp_metadata_error "command is not a declared export: $_spm_cmd"
+      _spm_cmd_status=1
+      break
+      ;;
+    esac
+  done
+  if [ "$_spm_cmd_ifs_was_set" -eq 1 ]; then
+    IFS=$_spm_cmd_ifs
+  else
+    unset IFS
+  fi
+  _spm_cmd_rc=$_spm_cmd_status
+  unset _spm_cmd _spm_cmd_ifs _spm_cmd_ifs_was_set _spm_cmd_status
+  return "$_spm_cmd_rc"
+}
+
 sp_metadata_validate_load_target() {
   _spm_target_load=$1
   _spm_target_requires=${2-}
@@ -327,9 +413,12 @@ sp_metadata_read() (
   _spm_platforms=
   _spm_side_effect=
   _spm_exports=
-  _spm_updates=
+  _spm_commands=
+  _spm_executables=
+  _spm_tests=
   _spm_version=
   _spm_load=
+  _spm_seen=' '
 
   while IFS= read -r _spm_line || [ -n "$_spm_line" ]; do
     case "$_spm_line" in
@@ -343,6 +432,13 @@ sp_metadata_read() (
     _spm_key=${_spm_line%%=*}
     _spm_value=${_spm_line#*=}
     sp_metadata_reject_control_characters "$_spm_value" "$_spm_key" || return 1
+    case "$_spm_seen" in
+    *" $_spm_key "*)
+      sp_metadata_error "duplicate metadata field: $_spm_key"
+      return 1
+      ;;
+    esac
+    _spm_seen="$_spm_seen$_spm_key "
     case "$_spm_key" in
     name) _spm_name=$_spm_value ;;
     requires) _spm_requires=$_spm_value ;;
@@ -351,7 +447,13 @@ sp_metadata_read() (
     platforms) _spm_platforms=$_spm_value ;;
     side_effect) _spm_side_effect=$_spm_value ;;
     exports) _spm_exports=$_spm_value ;;
-    updates) _spm_updates=$_spm_value ;;
+    commands) _spm_commands=$_spm_value ;;
+    executables) _spm_executables=$_spm_value ;;
+    tests) _spm_tests=$_spm_value ;;
+    updates)
+      sp_metadata_error 'metadata field updates is not supported since valise 0.3.0; publish commands with commands= or executables='
+      return 1
+      ;;
     version) _spm_version=$_spm_value ;;
     load) _spm_load=$_spm_value ;;
     load_hook)
@@ -381,7 +483,9 @@ sp_metadata_read() (
   sp_metadata_validate_platform_list "$_spm_platforms" || return 1
   sp_metadata_validate_side_effect "$_spm_side_effect" || return 1
   sp_metadata_validate_identifier_list "$_spm_exports" export || return 1
-  sp_metadata_validate_identifier_list "$_spm_updates" update_registration || return 1
+  sp_metadata_validate_commands "$_spm_commands" "$_spm_exports" || return 1
+  sp_metadata_validate_path_list "$_spm_executables" executable || return 1
+  sp_metadata_validate_path_list "$_spm_tests" test || return 1
   sp_metadata_validate_version "$_spm_version" || return 1
   sp_metadata_validate_relative_path "$_spm_load" || return 1
 
@@ -392,7 +496,9 @@ sp_metadata_read() (
   printf 'platforms=%s\n' "$_spm_platforms"
   printf 'side_effect=%s\n' "$_spm_side_effect"
   printf 'exports=%s\n' "$_spm_exports"
-  printf 'updates=%s\n' "$_spm_updates"
+  printf 'commands=%s\n' "$_spm_commands"
+  printf 'executables=%s\n' "$_spm_executables"
+  printf 'tests=%s\n' "$_spm_tests"
   printf 'version=%s\n' "$_spm_version"
   printf 'load=%s\n' "$_spm_load"
 )

package/manifests/parser-support.tsv

@@ -1,7 +1,7 @@
 # path_pattern	class	parsers	requirement	notes
 entrypoints/profile.sh	posix	sh,dash,ksh,busybox-ash,bash	required	Portable profile entrypoint must parse with POSIX-family shells and Bash when those parsers are available.
-entrypoints/fish/*.fish	fish	fish	required	Generic Fish entrypoint adapter requires the Fish parser, not POSIX shells.
-lib/*.sh	posix	sh,dash,ksh,busybox-ash,bash	required	Library files are portable core unless a narrower shell-specific path owns them.
+bin/valise	posix	sh,dash,ksh,busybox-ash,bash	required	CLI dispatcher is pure POSIX sh.
+lib/*.sh	posix	sh,dash,ksh,busybox-ash,bash	required	Library files (including lib/cli) are portable core unless a narrower shell-specific path owns them.
 lib/*.awk	non-shell	none	required	Awk compiler is not a shell script; excluded from shell parser validation.
 lib/fish/*.fish	fish	fish	required	Fish-native library files require Fish parser, not POSIX shells.
 modules/system/*.sh	posix	sh,dash,ksh,busybox-ash,bash	required	System utility modules use portable syntax plus capability gates.

package/module.d/valise_editor.meta

@@ -0,0 +1,9 @@
+name=valise_editor
+requires=
+optional=
+shells=posix
+platforms=any
+side_effect=path-env
+exports=valise_editor_defaults
+version=1.0.0
+load=modules/system/valise_editor.sh

package/module.d/valise_history.meta

@@ -0,0 +1,9 @@
+name=valise_history
+requires=
+optional=
+shells=posix
+platforms=any
+side_effect=path-env
+exports=valise_history_defaults
+version=1.0.0
+load=modules/system/valise_history.sh

package/module.d/valise_pager.meta

@@ -0,0 +1,9 @@
+name=valise_pager
+requires=
+optional=
+shells=posix
+platforms=any
+side_effect=path-env
+exports=valise_pager_defaults
+version=1.0.0
+load=modules/system/valise_pager.sh

package/module.d/valise_path.meta

@@ -0,0 +1,9 @@
+name=valise_path
+requires=
+optional=
+shells=posix
+platforms=any
+side_effect=path-env
+exports=valise_path_prepend valise_path_append
+version=1.0.0
+load=modules/system/valise_path.sh

package/module.d/{platform_bsd.meta → valise_platform_bsd.meta}

@@ -1,9 +1,8 @@
-name=platform_bsd
-requires=platform_posix
+name=valise_platform_bsd
+requires=valise_platform_posix
 optional=
-shells=sh bash zsh ksh
+shells=posix
 platforms=bsd freebsd openbsd netbsd
 side_effect=read-only
 exports=sp_platform_bsd_available sp_platform_bsd_cpu_count sp_platform_bsd_file_mtime
-updates=
 load=modules/platform/bsd/capabilities.sh

package/module.d/{platform_linux.meta → valise_platform_linux.meta}

@@ -1,9 +1,8 @@
-name=platform_linux
-requires=platform_posix
+name=valise_platform_linux
+requires=valise_platform_posix
 optional=
-shells=sh bash zsh ksh
+shells=posix
 platforms=linux
 side_effect=read-only
 exports=sp_platform_linux_available sp_platform_linux_cpu_count sp_platform_linux_file_mtime
-updates=
 load=modules/platform/linux/capabilities.sh

package/module.d/{platform_macos.meta → valise_platform_macos.meta}

@@ -1,9 +1,8 @@
-name=platform_macos
-requires=platform_posix
+name=valise_platform_macos
+requires=valise_platform_posix
 optional=
-shells=sh bash zsh ksh
+shells=posix
 platforms=darwin
 side_effect=read-only
 exports=sp_platform_macos_available sp_platform_macos_homebrew_prefix sp_platform_macos_homebrew_gnubin sp_platform_macos_cpu_count
-updates=
 load=modules/platform/macos/capabilities.sh

package/module.d/{platform_posix.meta → valise_platform_posix.meta}

@@ -1,9 +1,8 @@
-name=platform_posix
+name=valise_platform_posix
 requires=
 optional=
-shells=sh bash zsh ksh
+shells=posix
 platforms=any
 side_effect=read-only
 exports=sp_platform_os sp_platform_cpu_count sp_platform_file_mtime sp_platform_mktemp_dir sp_platform_canonical_path sp_platform_path_under sp_platform_command_path
-updates=
 load=modules/platform/posix.sh

package/module.d/valise_xdg.meta

@@ -0,0 +1,9 @@
+name=valise_xdg
+requires=
+optional=
+shells=posix
+platforms=any
+side_effect=path-env
+exports=valise_xdg_defaults
+version=1.0.0
+load=modules/system/valise_xdg.sh

package/modules/system/{contrib_editor.sh → valise_editor.sh}

@@ -1,14 +1,14 @@
 # Copyright (c) 2026 Joseph Cumines
 # SPDX-License-Identifier: MIT
 
-# contrib_editor: predictable EDITOR/VISUAL defaults.
+# valise_editor: predictable EDITOR/VISUAL defaults.
 #
 # Respects values the user already set; otherwise uses the first available
 # of nvim, vim, vi. vi is POSIX-mandated and present on conforming systems,
 # so a default is always found there. Prints nothing and succeeds in every
 # case, including when nothing is available.
 
-contrib_editor_defaults() {
+valise_editor_defaults() {
   if [ -n "${EDITOR-}" ] && [ -n "${VISUAL-}" ]; then
     return 0
   fi

package/modules/system/{contrib_history.sh → valise_history.sh}

@@ -1,13 +1,13 @@
 # Copyright (c) 2026 Joseph Cumines
 # SPDX-License-Identifier: MIT
 
-# contrib_history: predictable shell history defaults.
+# valise_history: predictable shell history defaults.
 #
 # Sets HISTFILE under HOME and a portable HISTSIZE only when each is unset
 # or empty; values the user already set are never touched. When HOME is
 # unset, HISTFILE is left alone. Prints nothing and succeeds in every case.
 
-contrib_history_defaults() {
+valise_history_defaults() {
   if [ -z "${HISTFILE-}" ] && [ -n "${HOME-}" ]; then
     HISTFILE=$HOME/.sh_history
     export HISTFILE

package/modules/system/{contrib_pager.sh → valise_pager.sh}

@@ -1,13 +1,13 @@
 # Copyright (c) 2026 Joseph Cumines
 # SPDX-License-Identifier: MIT
 
-# contrib_pager: predictable PAGER default.
+# valise_pager: predictable PAGER default.
 #
 # Respects a value the user already set; otherwise uses the first available
 # of less, more. When neither exists, PAGER is left unset. Prints nothing
 # and succeeds in every case.
 
-contrib_pager_defaults() {
+valise_pager_defaults() {
   if [ -n "${PAGER-}" ]; then
     return 0
   fi

package/modules/system/{contrib_path.sh → valise_path.sh}

@@ -1,7 +1,7 @@
 # Copyright (c) 2026 Joseph Cumines
 # SPDX-License-Identifier: MIT
 
-# contrib_path: idempotent PATH augmentation.
+# valise_path: idempotent PATH augmentation.
 #
 # Each listed directory ends up in PATH exactly once. With no arguments the
 # functions normalize PATH in place (duplicates and empty components are
@@ -73,12 +73,12 @@ _contrib_path_rebuild() {
   unset _contrib_path_mode _contrib_path_wanted _contrib_path_item _contrib_path_kept _contrib_path_field _contrib_path_new _contrib_path_old_ifs _contrib_path_ifs_was_set _contrib_path_glob_off
 }
 
-contrib_path_prepend() {
+valise_path_prepend() {
   # Move each argument to the front of PATH, preserving argument order, so
   # the first argument ends up first.
   _contrib_path_rebuild prepend "$@"
 }
 
-contrib_path_append() {
+valise_path_append() {
   _contrib_path_rebuild append "$@"
 }

package/modules/system/{contrib_xdg.sh → valise_xdg.sh}

@@ -1,14 +1,14 @@
 # Copyright (c) 2026 Joseph Cumines
 # SPDX-License-Identifier: MIT
 
-# contrib_xdg: predictable XDG base directory defaults.
+# valise_xdg: predictable XDG base directory defaults.
 #
 # Fills in each of XDG_DATA_HOME, XDG_CONFIG_HOME, XDG_STATE_HOME, and
 # XDG_CACHE_HOME from HOME only when that variable is unset or empty;
 # values the user already set are never touched. When HOME itself is
 # unset, nothing is set. Prints nothing and succeeds in every case.
 
-contrib_xdg_defaults() {
+valise_xdg_defaults() {
   if [ -z "${HOME-}" ]; then
     return 0
   fi