[codad5]

What

Two additions to the packager.

Build::plugin(__DIR__)->run('npm run build')->toDirectory('dist/{slug}');   // a folder instead of a zip
Build::plugin(__DIR__)->quiet()->zip();                                     // only warnings are printed

CLI: wptoolkit-build package --dir=PATH and --quiet. Config: "quiet": true.

Why

• zip() was the only way to finish a build, and staging is deleted afterwards. Deploying by rsync or SVN, mounting a built plugin in a test site, or inspecting exactly what ships (after all steps have run, which dryRun() does not do) needed a zip and an unzip. Our own E2E fixture did exactly that; it now uses toDirectory().
• zip() always prints its summary, and the only control was withOutput() with an empty closure, which also hides warnings. A consumer's build.php echoed $report->summary() again and printed it twice; the guide now says the summary is printed for you.

toDirectory() safety

The target folder is replaced, so it is checked before any command runs, and again before writing:

• refused if it is the project or a folder above it. Paths are resolved (., ..) and compared without letter case and through realpath(), because on Windows and macOS the project spelled in another case is the same folder, and its own main file would otherwise make it look like an earlier build;
• refused if it exists, is not empty, and is not an earlier build of this project (recognised by the project's main file with its header);
• nothing is written if a step or verification fails.

Other changes

• Packaging moved out of Build into ZipPackager and DirectoryPackager, sharing StagedFiles. Zip output is byte-for-byte unchanged (the reproducibility test still passes).
• BuildReport gains directory; for a directory build zip and sha256 are empty and files are relative to the folder.
• quiet() wins over verbose(); warnings are still printed and still on the report.

Tests

Written first. Directory output equals the zip's file list; commands and verification run; a previous build is replaced, not merged; empty target accepted; a folder holding other files is left untouched; the project, its parent, dist/.., .., an upper-cased project path and a source folder are all refused with the files intact; working tree unchanged; quiet prints nothing but warnings and still returns the report.

🤖 Generated with Claude Code