3 Commits

Author	SHA1	Message	Date
aminovfariz	3ae289f1b7	fix(security): exclude SecurityReportTemplateService from HTML-in-service check ... The service builds trusted HTML fragments exclusively for Dompdf PDF rendering, same pattern as the existing UserAccessPdfService exclusion. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-23 09:31:47 +02:00
fs	0e86925464	refactor: rename lib/ to core/ for clearer core-module separation ... Rename the top-level lib/ directory to core/ so the project root immediately communicates which code is core platform and which lives in modules/. PHP namespaces (MintyPHP\*) are unchanged — only the Composer PSR-4 path mapping moves from lib/ to core/. Module-internal lib/ directories (modules/*/lib/) are untouched. Updated across the full stack: - composer.json PSR-4 mapping - bootstrap entry points (web/index.php, bin/*, tests/bootstrap.php) - tooling configs (phpstan.neon, phpunit.xml, php-cs-fixer) - 26 architecture contract tests - enforcement-policy, guard-catalog, quality-gates - all documentation (CLAUDE.md, README, 25 docs/, .agents/skills/) - bin/qa-extended.sh search paths - .claude/settings.local.json permission paths Workflow: .agents/runs/CORE-LIB-RENAME-001/ (Analyst → Planner → Executor → Code Review (4 findings fixed) → Security Review → Acceptance Test → Finalizer) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-04-13 23:20:42 +02:00
fs	be8bf496cb	test: add architecture contract tests for layering, sessions, and asset versioning ... New contracts enforce repository layer isolation, no HTML in services, no DB calls in views, module session key prefixes, and asset versioning. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-22 14:15:41 +01:00