refactor: rename lib/ to core/ for clearer core-module separation

Rename the top-level lib/ directory to core/ so the project root immediately communicates which code is core platform and which lives in modules/. PHP namespaces (MintyPHP\*) are unchanged — only the Composer PSR-4 path mapping moves from lib/ to core/. Module-internal lib/ directories (modules/*/lib/) are untouched. Updated across the full stack: - composer.json PSR-4 mapping - bootstrap entry points (web/index.php, bin/*, tests/bootstrap.php) - tooling configs (phpstan.neon, phpunit.xml, php-cs-fixer) - 26 architecture contract tests - enforcement-policy, guard-catalog, quality-gates - all documentation (CLAUDE.md, README, 25 docs/, .agents/skills/) - bin/qa-extended.sh search paths - .claude/settings.local.json permission paths Workflow: .agents/runs/CORE-LIB-RENAME-001/ (Analyst → Planner → Executor → Code Review (4 findings fixed) → Security Review → Acceptance Test → Finalizer) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-13 23:20:05 +02:00
parent 7c10fadcb9
commit 0e86925464
371 changed files with 191 additions and 192 deletions
--- a/core/Http/Request.php
+++ b/core/Http/Request.php
@@ -0,0 +1,97 @@
+<?php
+
+namespace MintyPHP\Http;
+
+use MintyPHP\I18n;
+use MintyPHP\Router;
+
+class Request
+{
+    public static function stripBasePath(string $path): string
+    {
+        $base = trim(parse_url(Router::getBaseUrl(), PHP_URL_PATH) ?: '/', '/');
+        $path = ltrim($path, '/');
+
+        if ($base !== '' && strpos($path, $base . '/') === 0) {
+            return substr($path, strlen($base) + 1);
+        }
+        if ($base !== '' && $path === $base) {
+            return '';
+        }
+
+        return $path;
+    }
+
+    public static function path(): string
+    {
+        $uri = $_SERVER['REQUEST_URI'] ?? '';
+        $path = parse_url($uri, PHP_URL_PATH) ?: '';
+
+        return self::stripBasePath($path);
+    }
+
+    // Returns a safe redirect target after login — guards against open-redirect attacks
+    // by rejecting any value with a scheme or host (i.e. an absolute external URL).
+    public static function safeReturnTarget(string $returnParam = ''): string
+    {
+        if ($returnParam !== '') {
+            $parts = parse_url($returnParam);
+            if (($parts['scheme'] ?? '') === '' && ($parts['host'] ?? '') === '') {
+                $path = self::stripBasePath($parts['path'] ?? '');
+                $query = isset($parts['query']) ? '?' . $parts['query'] : '';
+                return $path . $query;
+            }
+        }
+
+        $referer = $_SERVER['HTTP_REFERER'] ?? '';
+        if ($referer !== '') {
+            $parts = parse_url($referer);
+            $host = $parts['host'] ?? '';
+            $currentHost = $_SERVER['HTTP_HOST'] ?? '';
+            if ($host === '' || $host === $currentHost) {
+                $path = self::stripBasePath($parts['path'] ?? '');
+                $query = isset($parts['query']) ? '?' . $parts['query'] : '';
+                return $path . $query;
+            }
+        }
+
+        return '';
+    }
+
+    public static function pathWithQuery(): string
+    {
+        $uri = $_SERVER['REQUEST_URI'] ?? '';
+        $path = self::path();
+        $query = parse_url($uri, PHP_URL_QUERY);
+
+        return $path . ($query ? '?' . $query : '');
+    }
+
+    public static function stripLocale(string $path, ?array $locales = null): string
+    {
+        $locales = $locales ?? (defined('APP_LOCALES') ? APP_LOCALES : [I18n::$defaultLocale]);
+        $path = ltrim($path, '/');
+        if ($path === '') {
+            return '';
+        }
+        $parts = explode('/', $path);
+        while ($parts && $parts[0] !== '' && in_array($parts[0], $locales, true)) {
+            array_shift($parts);
+        }
+        return implode('/', $parts);
+    }
+
+    public static function withLocale(string $path = '', ?string $locale = null): string
+    {
+        $locale = $locale ?? (I18n::$locale ?? I18n::$defaultLocale);
+        $path = ltrim($path, '/');
+        return ($locale !== '' ? $locale . '/' : '') . $path;
+    }
+
+    public static function wantsJson(): bool
+    {
+        $accept = $_SERVER['HTTP_ACCEPT'] ?? '';
+        $requestedWith = $_SERVER['HTTP_X_REQUESTED_WITH'] ?? '';
+        return stripos($accept, 'application/json') !== false || $requestedWith !== '';
+    }
+}