lib tier r1: suite-built tcllib/tcllibc, both generations (shellspy G-138/G-139)

First publication to the G-138 library tier - immutable r1 artifacts emitted
by the shellspy suite_tcl90/suite_tcl86 'library-artifacts' steps (verified
builds; zips punkzip-deterministic, embedded schema-v2 class=library records
with checkout/toolchain provenance; per-artifact toml sidecars):

  lib/allplatforms/tcllib2.0-tcl9-r1.zip   tcllib 2.0 pure-tcl (tcl9 gen)
  lib/allplatforms/tcllib2.0-tcl8-r1.zip   tcllib 2.0 pure-tcl (tcl8 gen)
  lib/win32-x86_64/tcllibc-tcl9-r1.zip     critcl accelerators vs Tcl 9.0.5
  lib/win32-x86_64/tcllibc-tcl8-r1.zip     critcl accelerators vs Tcl 8.6.18

Provenance (embedded + sidecars): tcllib checkout c784f6fda4 (trunk
2026-06-30), critcl 3.3.1 (254bdffe2a), zig 0.16.0 ReleaseFast; tcllib
testsuite evidence lines ride the sidecars. sha1sums.txt generated per tier
by src/build_sha1sums.tcl (all pre-existing artifacts SAME; platforms.txt
unchanged - lib is not a platform folder). Consumed by shellspy's
'make.tcl libfetch' (declarations in its src/runtime/libpackages.toml).

Assisted-by: harness=claude; primary-model=claude-fable-5; api-location=anthropic.com

lib/allplatforms/sha1sums.txt

@@ -0,0 +1,4 @@
+59552911ae78f88a4bf3c3af33f74c5f48b329c1 *tcllib2.0-tcl8-r1.toml
+a826c0c82a07a042655a0c83b65bc6c9997f9047 *tcllib2.0-tcl8-r1.zip
+7420362a6fb7a7f457c0c92c7cd6e151ffae1ee8 *tcllib2.0-tcl9-r1.toml
+aabda9db57838eb8f78c7b776a07eed53b753381 *tcllib2.0-tcl9-r1.zip

lib/allplatforms/tcllib2.0-tcl8-r1.toml

@@ -0,0 +1,55 @@
+#punkshell library artifact metadata (schema v2, class "library") - generated
+#by library_artifacts.tcl. Sidecar copy: the record embedded in the zip at
+#<folder>/punkbin-artifact.toml plus the finished-zip facts (sha1, size, built).
+#The sidecar + sha1sums.txt remain the integrity authority.
+schema = 2
+
+[artifact]
+name = "tcllib2.0-tcl8-r1.zip"
+class = "library"
+package = "tcllib"
+package_version = "2.0"
+#folder: the installed-shape package folder the zip carries at its root
+folder = "tcllib2.0"
+revision = 1
+target = "allplatforms"
+#tcl_generation: the Tcl major-generation the package was built/installed under
+#(and, for binary packages, compiled against) - part of the artifact name.
+tcl_generation = "tcl8"
+sha1 = "a826c0c82a07a042655a0c83b65bc6c9997f9047"
+size = 2422817
+built = "2026-07-30T08:48:41Z"
+#build_id: offline correlation key re-joining a renamed copy to its record;
+#identical in the embedded and sidecar copies (a deterministic identity digest,
+#not an integrity key - the sidecar sha1 is the integrity fact).
+build_id = "79d3c3dc-f966-d3ae-182f-c93a6bcc5175"
+#origin: canonical artifact repo this artifact was BUILT FOR - not necessarily
+#where it is hosted; mirrors preserve it.
+origin = "https://www.gitea1.intx.com.au/jn/punkbin"
+#packager: declared identity, not proof - signing (minisign sidecars) is the
+#verification layer.
+packager = "Julian Noble <julian@precisium.com.au>"
+project = "punkshell"
+project_url = "unrecorded"
+#license: summary for the distributed package; the package's own license text
+#rides inside the zip (license.terms etc).
+license = "BSD"
+build_host_platform = "win32-x86_64"
+
+[library]
+#driving_tcl_patchlevel: patchlevel of the suite-built shell that ran the
+#installer/critcl - the generation witness, not a runtime version requirement.
+driving_tcl_patchlevel = "8.6.18"
+
+[provenance]
+#class: build-origin class (schema v2): suite-built | third-party | local.
+#NOTE for line-based consumers: '[artifact] class' above is the first 'class ='
+#line in the record by construction - whole-text single-key scans see that one.
+class = "suite-built"
+suite = "suite_tcl86"
+toolchain = "zig 0.16.0"
+optimize = "ReleaseFast"
+tcllib_checkout = "c784f6fda4516f676453a2785b3c56f1ca5999f450e80ccba6c317ba78ce4e21"
+
+[tests]
+tcllib = "result=pass mode=record total=64259 passed=61186 skipped=3032 failed=41"

lib/allplatforms/tcllib2.0-tcl9-r1.toml

@@ -0,0 +1,55 @@
+#punkshell library artifact metadata (schema v2, class "library") - generated
+#by library_artifacts.tcl. Sidecar copy: the record embedded in the zip at
+#<folder>/punkbin-artifact.toml plus the finished-zip facts (sha1, size, built).
+#The sidecar + sha1sums.txt remain the integrity authority.
+schema = 2
+
+[artifact]
+name = "tcllib2.0-tcl9-r1.zip"
+class = "library"
+package = "tcllib"
+package_version = "2.0"
+#folder: the installed-shape package folder the zip carries at its root
+folder = "tcllib2.0"
+revision = 1
+target = "allplatforms"
+#tcl_generation: the Tcl major-generation the package was built/installed under
+#(and, for binary packages, compiled against) - part of the artifact name.
+tcl_generation = "tcl9"
+sha1 = "aabda9db57838eb8f78c7b776a07eed53b753381"
+size = 2422816
+built = "2026-07-30T08:48:17Z"
+#build_id: offline correlation key re-joining a renamed copy to its record;
+#identical in the embedded and sidecar copies (a deterministic identity digest,
+#not an integrity key - the sidecar sha1 is the integrity fact).
+build_id = "119f0c54-5f79-f2a1-a966-93efd89a69a4"
+#origin: canonical artifact repo this artifact was BUILT FOR - not necessarily
+#where it is hosted; mirrors preserve it.
+origin = "https://www.gitea1.intx.com.au/jn/punkbin"
+#packager: declared identity, not proof - signing (minisign sidecars) is the
+#verification layer.
+packager = "Julian Noble <julian@precisium.com.au>"
+project = "punkshell"
+project_url = "unrecorded"
+#license: summary for the distributed package; the package's own license text
+#rides inside the zip (license.terms etc).
+license = "BSD"
+build_host_platform = "win32-x86_64"
+
+[library]
+#driving_tcl_patchlevel: patchlevel of the suite-built shell that ran the
+#installer/critcl - the generation witness, not a runtime version requirement.
+driving_tcl_patchlevel = "9.0.5"
+
+[provenance]
+#class: build-origin class (schema v2): suite-built | third-party | local.
+#NOTE for line-based consumers: '[artifact] class' above is the first 'class ='
+#line in the record by construction - whole-text single-key scans see that one.
+class = "suite-built"
+suite = "suite_tcl90"
+toolchain = "zig 0.16.0"
+optimize = "ReleaseFast"
+tcllib_checkout = "c784f6fda4516f676453a2785b3c56f1ca5999f450e80ccba6c317ba78ce4e21"
+
+[tests]
+tcllib = "result=pass mode=record total=62328 passed=59240 skipped=3034 failed=54"

lib/win32-x86_64/sha1sums.txt

@@ -0,0 +1,4 @@
+0b3525ed4be394a8d37e1c8dd996e2e95298f7fb *tcllibc-tcl8-r1.toml
+99b97375a00de3cbdfba813a0d54ccc914f7c27f *tcllibc-tcl8-r1.zip
+8fe0eff8de1d70a27d06783d61d39cbcfd486ed9 *tcllibc-tcl9-r1.toml
+f9300c027368ed9f119fa68974c1cd6ee862474a *tcllibc-tcl9-r1.zip

lib/win32-x86_64/tcllibc-tcl8-r1.toml

@@ -0,0 +1,58 @@
+#punkshell library artifact metadata (schema v2, class "library") - generated
+#by library_artifacts.tcl. Sidecar copy: the record embedded in the zip at
+#<folder>/punkbin-artifact.toml plus the finished-zip facts (sha1, size, built).
+#The sidecar + sha1sums.txt remain the integrity authority.
+schema = 2
+
+[artifact]
+name = "tcllibc-tcl8-r1.zip"
+class = "library"
+package = "tcllibc"
+package_version = "2.0"
+#folder: the installed-shape package folder the zip carries at its root
+folder = "tcllibc"
+revision = 1
+target = "win32-x86_64"
+#tcl_generation: the Tcl major-generation the package was built/installed under
+#(and, for binary packages, compiled against) - part of the artifact name.
+tcl_generation = "tcl8"
+sha1 = "99b97375a00de3cbdfba813a0d54ccc914f7c27f"
+size = 159367
+built = "2026-07-30T08:48:41Z"
+#build_id: offline correlation key re-joining a renamed copy to its record;
+#identical in the embedded and sidecar copies (a deterministic identity digest,
+#not an integrity key - the sidecar sha1 is the integrity fact).
+build_id = "5a4b3656-bc0e-4a68-d1e0-85ae051ee883"
+#origin: canonical artifact repo this artifact was BUILT FOR - not necessarily
+#where it is hosted; mirrors preserve it.
+origin = "https://www.gitea1.intx.com.au/jn/punkbin"
+#packager: declared identity, not proof - signing (minisign sidecars) is the
+#verification layer.
+packager = "Julian Noble <julian@precisium.com.au>"
+project = "punkshell"
+project_url = "unrecorded"
+#license: summary for the distributed package; the package's own license text
+#rides inside the zip (license.terms etc).
+license = "BSD"
+build_host_platform = "win32-x86_64"
+
+[library]
+#driving_tcl_patchlevel: patchlevel of the suite-built shell that ran the
+#installer/critcl - the generation witness, not a runtime version requirement.
+driving_tcl_patchlevel = "8.6.18"
+
+[provenance]
+#class: build-origin class (schema v2): suite-built | third-party | local.
+#NOTE for line-based consumers: '[artifact] class' above is the first 'class ='
+#line in the record by construction - whole-text single-key scans see that one.
+class = "suite-built"
+suite = "suite_tcl86"
+toolchain = "zig 0.16.0"
+optimize = "ReleaseFast"
+#critcl: version declared by the package's own critcl-generated teapot.txt
+critcl = "3.3.1"
+tcllib_checkout = "c784f6fda4516f676453a2785b3c56f1ca5999f450e80ccba6c317ba78ce4e21"
+critcl_checkout = "254bdffe2afc78148f79f92df8d6823a24f971bf"
+
+[tests]
+tcllib = "result=pass mode=record total=64259 passed=61186 skipped=3032 failed=41"

lib/win32-x86_64/tcllibc-tcl9-r1.toml

@@ -0,0 +1,58 @@
+#punkshell library artifact metadata (schema v2, class "library") - generated
+#by library_artifacts.tcl. Sidecar copy: the record embedded in the zip at
+#<folder>/punkbin-artifact.toml plus the finished-zip facts (sha1, size, built).
+#The sidecar + sha1sums.txt remain the integrity authority.
+schema = 2
+
+[artifact]
+name = "tcllibc-tcl9-r1.zip"
+class = "library"
+package = "tcllibc"
+package_version = "2.0"
+#folder: the installed-shape package folder the zip carries at its root
+folder = "tcllibc"
+revision = 1
+target = "win32-x86_64"
+#tcl_generation: the Tcl major-generation the package was built/installed under
+#(and, for binary packages, compiled against) - part of the artifact name.
+tcl_generation = "tcl9"
+sha1 = "f9300c027368ed9f119fa68974c1cd6ee862474a"
+size = 157615
+built = "2026-07-30T08:48:17Z"
+#build_id: offline correlation key re-joining a renamed copy to its record;
+#identical in the embedded and sidecar copies (a deterministic identity digest,
+#not an integrity key - the sidecar sha1 is the integrity fact).
+build_id = "e734b4e2-7671-401a-2692-9d87a1e62db4"
+#origin: canonical artifact repo this artifact was BUILT FOR - not necessarily
+#where it is hosted; mirrors preserve it.
+origin = "https://www.gitea1.intx.com.au/jn/punkbin"
+#packager: declared identity, not proof - signing (minisign sidecars) is the
+#verification layer.
+packager = "Julian Noble <julian@precisium.com.au>"
+project = "punkshell"
+project_url = "unrecorded"
+#license: summary for the distributed package; the package's own license text
+#rides inside the zip (license.terms etc).
+license = "BSD"
+build_host_platform = "win32-x86_64"
+
+[library]
+#driving_tcl_patchlevel: patchlevel of the suite-built shell that ran the
+#installer/critcl - the generation witness, not a runtime version requirement.
+driving_tcl_patchlevel = "9.0.5"
+
+[provenance]
+#class: build-origin class (schema v2): suite-built | third-party | local.
+#NOTE for line-based consumers: '[artifact] class' above is the first 'class ='
+#line in the record by construction - whole-text single-key scans see that one.
+class = "suite-built"
+suite = "suite_tcl90"
+toolchain = "zig 0.16.0"
+optimize = "ReleaseFast"
+#critcl: version declared by the package's own critcl-generated teapot.txt
+critcl = "3.3.1"
+tcllib_checkout = "c784f6fda4516f676453a2785b3c56f1ca5999f450e80ccba6c317ba78ce4e21"
+critcl_checkout = "254bdffe2afc78148f79f92df8d6823a24f971bf"
+
+[tests]
+tcllib = "result=pass mode=record total=62328 passed=59240 skipped=3034 failed=54"