fs
0e86925464
Rename the top-level lib/ directory to core/ so the project root immediately communicates which code is core platform and which lives in modules/. PHP namespaces (MintyPHP\*) are unchanged — only the Composer PSR-4 path mapping moves from lib/ to core/. Module-internal lib/ directories (modules/*/lib/) are untouched. Updated across the full stack: - composer.json PSR-4 mapping - bootstrap entry points (web/index.php, bin/*, tests/bootstrap.php) - tooling configs (phpstan.neon, phpunit.xml, php-cs-fixer) - 26 architecture contract tests - enforcement-policy, guard-catalog, quality-gates - all documentation (CLAUDE.md, README, 25 docs/, .agents/skills/) - bin/qa-extended.sh search paths - .claude/settings.local.json permission paths Workflow: .agents/runs/CORE-LIB-RENAME-001/ (Analyst → Planner → Executor → Code Review (4 findings fixed) → Security Review → Acceptance Test → Finalizer) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
55 lines
1.6 KiB
PHP
55 lines
1.6 KiB
PHP
<?php
|
|
|
|
namespace MintyPHP\Tests\Architecture;
|
|
|
|
use PHPUnit\Framework\TestCase;
|
|
|
|
/**
|
|
* GR-SEC-005: All encryption/decryption MUST use lib/Support/Crypto.php.
|
|
* No raw openssl_encrypt/decrypt calls outside that single file.
|
|
*/
|
|
class SecurityCryptoContractTest extends TestCase
|
|
{
|
|
use ProjectFileAssertionSupport;
|
|
|
|
private const CRYPTO_FILE = 'core/Support/Crypto.php';
|
|
|
|
public function testNoRawOpensslEncryptOutsideCrypto(): void
|
|
{
|
|
$violations = array_merge(
|
|
$this->findPatternMatchesInPhpFiles('core', '/\bopenssl_encrypt\s*\(/'),
|
|
$this->findPatternMatchesInPhpFiles('pages', '/\bopenssl_encrypt\s*\(/')
|
|
);
|
|
|
|
$violations = array_values(array_filter(
|
|
$violations,
|
|
static fn (string $path): bool => $path !== self::CRYPTO_FILE
|
|
));
|
|
|
|
$this->assertSame(
|
|
[],
|
|
$violations,
|
|
"Raw openssl_encrypt() found outside Crypto.php (GR-SEC-005):\n" . implode("\n", $violations)
|
|
);
|
|
}
|
|
|
|
public function testNoRawOpensslDecryptOutsideCrypto(): void
|
|
{
|
|
$violations = array_merge(
|
|
$this->findPatternMatchesInPhpFiles('core', '/\bopenssl_decrypt\s*\(/'),
|
|
$this->findPatternMatchesInPhpFiles('pages', '/\bopenssl_decrypt\s*\(/')
|
|
);
|
|
|
|
$violations = array_values(array_filter(
|
|
$violations,
|
|
static fn (string $path): bool => $path !== self::CRYPTO_FILE
|
|
));
|
|
|
|
$this->assertSame(
|
|
[],
|
|
$violations,
|
|
"Raw openssl_decrypt() found outside Crypto.php (GR-SEC-005):\n" . implode("\n", $violations)
|
|
);
|
|
}
|
|
}
|