[hamidfzm]

Summary

Adds the official German (com.glyph.dictionary-de) and Spanish (com.glyph.dictionary-es) spell-check dictionaries, built like the Persian one: sandboxed, no permissions, and their data read through ctx.assets only once the language is picked in Settings, Editor, Spell Check.

Refs hamidfzm/glyph#1052 (closed by hamidfzm/glyph#1057, the app side).

Status: merge after hamidfzm/glyph#1057 is in a release (0.28.0). Merging here publishes both plugins at once. German declares apiVersion 0.28.0: from that version the app checks with Hunspell itself, while older apps ignore the compound flags igerman98 builds words from and would underline Fußball and every other compound. A 0.27 app would still list German in the marketplace and then refuse to load it with its API-version error, so waiting for the release reads best. The app's plugin API version is its own version, so if hamidfzm/glyph#1057 ships in a later release than 0.28.0, German's apiVersion moves to that release first. Spanish needs no compounding, keeps apiVersion 0.16.0, and works on current apps too.

Changes

• plugins/com.glyph.dictionary-de/: igerman98 by way of dictionary-de 3.0.0, label "Deutsch (German)".
• plugins/com.glyph.dictionary-es/: RLA-ES by way of dictionary-es 4.0.0, a general Spanish dictionary not tied to one country, label "Español (Spanish)".
• Each LICENSE holds the upstream notice and the full text of the license this package distributes the data under, and is listed in the manifest's files so it ships in the zip. Both upstreams let the recipient choose: German ships under GPL-2.0 (its "version 2 or 3"), Spanish under MPL-1.1 (one of GPL-3.0, LGPL-3.0 and MPL-1.1).
• plugin.json carries the placeholder sha256; the release job rewrites packageUrl and the digest.
• scripts/dictionaries.test.mjs checks the German, Spanish and Persian word lists (accepted words, flagged misspellings, the expected correction among the suggestions) with hunspell-wasm 0.3.0, the engine the app ships. A root package.json and package-lock.json pin it as the repo's only dev dependency, and smoke.yml installs it with npm ci --ignore-scripts before node --test; the job still holds only contents: read.
• index.json, index/, and docs/plugin-catalog.md regenerated with scripts/build-index.mjs.
• docs/api-reference.md: stacking (unloading a dictionary brings back the one it replaced), the Hunspell engine from 0.28.0, the size cap, and how the text is decoded (the affix file's SET line is ignored, so an ISO-8859 dictionary is converted first). docs/recipes.md: ship the license in files (the example manifest now lists it), and declare 0.28.0 for a compounding dictionary. docs/ecosystem.md: English is now a core plugin, and why it is the one dictionary in the app. docs/contributing.md: the smoke job.
• The Persian README said "Sandbox: no", but its manifest runs it sandboxed (as the catalog says); it now says yes.

Testing

• npm ci --ignore-scripts && node --test: 33 passing, including the three word lists.
• node scripts/check-plugins.mjs passes, and a fresh scripts/build-index.mjs leaves the committed index unchanged.
• The same German, Spanish and Persian lists, plus load times, were measured against nspell before the engine change; the results are on Add German and Spanish spell-check dictionaries and move English to a core plugin hamidfzm/glyph#1052.
• Not installed into a running app: the plugins need the 0.28.0 engine in feat(spellcheck): check with Hunspell and ship English as a core plugin hamidfzm/glyph#1057.