Overview
Context
Changes
Modified README.md
from [1ceb4dbb00]
to [5e6679d6b6].
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
|
-
+
|
# Package Client Toolset (pkgt)
> Secure, cross‑platform package delivery for **Tcl** and **Eagle** — designed to fetch on‑demand or pre‑install packages with cryptographic verification.
[](LICENSE)
---
## Table of contents
* [Why pkgt?](#why-pkgt)
* [What’s in this repo](#whats-in-this-repo)
* [What’s in this repository](#whats-in-this-repository)
* [Security model at a glance](#security-model-at-a-glance)
* [Supported runtimes & prerequisites](#supported-runtimes--prerequisites)
* [Quick start (consumers)](#quick-start-consumers)
* [Tcl](#tcl-consumers)
* [Eagle](#eagle-consumers)
* [Quick start (package producers & maintainers)](#quick-start-package-producers--maintainers)
|
| ︙ | | |
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
|
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
|
-
+
|
* **Fetching on demand** (transparent to `package require`) or **pre‑installing** ahead of time.
* **Verifying everything**: package metadata and files are **OpenPGP** signed; **Eagle** scripts are **also** signed with **Harpy**.
* **Working for both Tcl and Eagle** with the same client toolset.
---
## What’s in this repo
## What’s in this repository
```
.
├─ client/1.0/neutral/
│ ├─ VERSION # current toolset version (e.g., 1.0.11)
│ ├─ common.tcl # shared Tcl helpers
│ ├─ pkgIndex.tcl # Tcl-side integration
|
| ︙ | | |
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
|
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
|
-
+
-
+
|
## Supported runtimes & prerequisites
* **Tcl**: Standard Tcl (8.5+) environments.
* **Eagle**: Any environment that can run Eagle scripts.
* **Platforms**: Windows, Linux, macOS (no OS‑specific assumptions in the client libraries).
* **OpenPGP**: An implementation of the OpenPGP standard (e.g. GPG).
* **Tools inside this repo**:
* **Tools inside this repository**:
* **Tcl integration** via `client/1.0/neutral/pkgIndex.tcl` and `client/1.0/neutral/common.tcl`.
* **Eagle integration** via `client/1.0/neutral/pkgIndex.eagle` (+ Harpy-signed variants).
* **Harpy signing utility** at `externals/Harpy/Tools/sign.eagle`.
* **Eagle library packaged for Tcl** under `externals/Eagle/lib/Eagle1.0/`.
> When using the official Package Client Toolset, Package Repository Server, or Package Downloads Server, you will need to add the Primary Package Signing Key (dated "2003-06-09", with fingerprint "C3C7 5138 83EE DD3A ED1F E425 502C 96AF 495D C2D9") to your local OpenPGP key ring.
---
## Quick start (consumers)
### Tcl (consumers)
1. **Vendor the client** (recommended layout):
```
your-project/
vendor/pkgt/ # this repo (or a release snapshot)
vendor/pkgt/ # This repository (or a release snapshot)
client/1.0/neutral/ # Tcl/Eagle indices + client libs
externals/ # Eagle + Harpy helpers
```
2. **Add pkgt to Tcl’s search path** (e.g., early in your app bootstrap):
```tcl
|
| ︙ | | |
Modified README.md.asc
from [6a08ab4819]
to [15bcdba13c].
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
|
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
|
-----BEGIN PGP SIGNATURE-----
Comment: Eagle Package Repository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=x7LD
iQIzBAABCAAdFiEEw8dROIPu3TrtH+QlUCyWr0ldwtkFAmjXTMYACgkQUCyWr0ld
wtk1JA/9FLZOatl/pXrBGobsJ7gry7cLP23aH3L1JmUybWN9gy3Vdu1jQP/WfVW9
xLZbn5jzCEEUYJ2KfxBr0hBcGMHQToW3xlbMP2IGOp5LwYjFOhillIqn1O6xzMoU
Wl2cvb32QvvQgOJtYnytNM0EEDd2YzbVGcsTQAD07IIesN2UfN3eN/MbRC8h5FkR
IGZQEzjWeTNWvv7xL+hlORX8fDy40dn/ZrZfmCvGPr7zw0O7YJ7wPSENzeHKtbT5
TyLMQLiG2rThL98JYTHD3t39wxYg9AdEXM2SmfgXjvJf+2HHeNPKby6Uw4Z1g9vw
d9BWL8774WwgOen63KsPJgdc4cYGTditCLZsVpFeXwW88Ucb5YB/nuFkQpXKytny
jNZV9SFrwamWmVmwIIFlhAu/f/Nrbcde2DlV/N+60FFyx1kWG9mVENOQ7YNWj9fd
J27ZfDkszvudT3oEsiaAB1nfswKMYXsAf+ijPso2Bm+PL+oFQTtO0KQJvNML/0zH
ZXJ4qcL7Zc+dydHP+LQbI/A5wfyX4id+5XLMAA5twk6NtorK282f4G4v5Mjjeo86
cB6iCJ0mMuNMhtfmiGnCCJg0hPxACzpxmXboEh987zcvL8Fge57A1xJFvYDef0rx
WSv8X1EbyU72TcuZag/st7nicuETyrNcKTwfZqTzT5Zgpq4JiEQ=
=0dDX
-----END PGP SIGNATURE-----
|