General Website Widget Pack

# 3.0.1

- Migrated package identity from legacy standalone-widget packaging to first-class DivisionDesk `widget-pack` contract 1.0.
- Replaced pack-level renderer bootstrap with `widget-pack.json` + registrar `Bootstrap.php`.
- Converted contained widgets to namespaced `Renderer.php` classes while preserving widget IDs and behavior.
- Minimum Core is 4.3.5.

# Changelog

## 3.0.0
- Replaced placeholder renderers with functional implementations across the pack.
- Added direct-render QA for every widget.
- CadetCorner: real downloadable PDF generation with per-page contact footer and end-user footer override policy support.

## 2.1.0
- Fixed Page Builder `Widget entry did not return a renderer.` across contained widgets.
- Converted every contained widget entry to return a callable renderer directly.
- Preserved package descriptors and `Registry::widget()` metadata separately from the renderer entry.
- Added direct-entry and registered-renderer QA across every widget.

## 2.0.3
- Fixed current Core install failure `Widget entry file is missing.`
- Added explicit root widget entry metadata pointing to `widget.php`.
- Added transition-compatible entry aliases (`index.php`, `entry.php`, `render.php`) that delegate to the authoritative `widget.php`.
- Added explicit entry metadata to each contained widget descriptor.
- Documented the widget-family entry-field gap in the supplied Platform 1.0 manifest contract.

## 2.0.2
- Kept security/developer reference documents as non-executable package Help files rather than embedding prohibited-code examples into PHP.
- Static restricted-package scanner now evaluates executable code without false positives from documentation examples.

## 2.0.1
- Removed runtime package-local filesystem Help reads by embedding Help bodies during package build.
- Removed shipped executable QA fixtures from the install archive.
- Rechecked restricted-package prohibited primitives.
- General Website: removed legacy direct cURL/stream/filesystem cache access from Weather and Sunrise/Sunset.
- General Website: documented the missing frozen package-facing PackageHttpClient method contract rather than guessing an internal API.

## 2.0.0
- Rebuilt against DivisionDesk Developer Platform 1.0 / Core 4.3.x SDK.
- Replaced custom pack registry assumptions with stable `Registry::widget()` registrations.
- Added stable `Registry::help()` discovery for package Help.
- Normalized package-qualified widget machine identities.
- Normalized root Platform 1.0 manifest fields and client runtime.
- Removed package-local trust authority assumptions.
- Declared external network hosts where known.
- Added Platform 1.0 compliance documentation.
- Preserved collision/global-state security hard rules.

## 1.0.3
- Added required root package `slug` for current Core manifest validation.
- Added/normalized widget-level slugs for contained widgets.
- Revalidated flat ZIP root, JSON descriptors, PHP syntax, and archive integrity.

## 1.0.2
- Fixed Store/Core package detection by placing a recognized `widget.json` at the ZIP root.
- ZIP now has a flat package root instead of an extra enclosing directory.
- Added root `widget.php` compatibility registry for contained widgets.
- Added installer metadata listing every contained widget path.
- Added release QA for root-package detection.

## 1.0.0 — 2026-08-17

### Added
- Current Weather / Forecast.
- Clock & Date.
- Generic Countdown.
- Quote Rotator.
- Number Counter.
- Progress / Goal Meter.
- QR Code.
- Share Page.
- Back to Top.
- Sunrise / Sunset.
- Pack-level and per-widget author/developer provenance metadata.
- User documentation.
- Developer guide.
- “Build Your First DivisionDesk Widget: Countdown” reference tutorial.
- Release-gate QA script and checks.

### Compatibility
- Targets DivisionDesk Core 3.7.0+ and PHP 8.1+.
- No Membership Manager, Events, Finance, Articles, organization-hierarchy, or other future-module dependency.

## 1.0.1 — Security architecture rebuild
- Rebuilt all widgets around namespaced anonymous object scope; loose helper functions removed.
- Established hard prohibition on shared/global mutable widget state for third-party development.
- Added explicit trust model: package metadata cannot self-grant Official/Trusted status; local admin policy may downgrade/disable trust.
- Added Package Security Policy and Trust/Store guidance Help documents.
- Added future Store upvote/downvote guidance as reputation only, never a replacement for security review.
- Removed QR widget dependency on ambient `$_SERVER`; current page URL is accepted only through explicit widget context.
- Added security-policy QA validator.