Merge pull request #8 from KaririCode-Framework/develop

Develop

Author: walmir-silva

.github/workflows/ci.yml

@@ -23,16 +23,16 @@ jobs:
         run: composer install --no-interaction --prefer-dist --optimize-autoloader
 
       - name: Initialize devkit
-        run: vendor/bin/kcode init
+        run: php bin/kcode init
 
       - name: Code style check
-        run: vendor/bin/kcode cs:fix --check
+        run: php bin/kcode cs:fix --check
 
       - name: Static analysis
-        run: vendor/bin/kcode analyse
+        run: php bin/kcode analyse
 
       - name: Tests
-        run: vendor/bin/kcode test --coverage
+        run: php bin/kcode test --coverage
 
   build-phar:
     name: PHAR Build Smoke Test

.github/workflows/code-quality.yml

@@ -32,17 +32,6 @@ jobs:
       - name: Validate composer.json
         run: composer validate --strict --no-check-lock
 
-      - name: Get Composer cache directory
-        id: composer-cache
-        run: echo "dir=$(composer config cache-files-dir)" >> "$GITHUB_OUTPUT"
-
-      - name: Cache dependencies
-        uses: actions/cache@v4
-        with:
-          path: ${{ steps.composer-cache.outputs.dir }}
-          key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.json') }}
-          restore-keys: ${{ runner.os }}-composer-
-
       - name: Install dependencies
         run: composer install --prefer-dist --no-progress --no-scripts
 
@@ -65,19 +54,8 @@ jobs:
           tools: composer:v2
           coverage: none
 
-      - name: Get Composer cache directory
-        id: composer-cache
-        run: echo "dir=$(composer config cache-files-dir)" >> "$GITHUB_OUTPUT"
-
-      - name: Cache dependencies
-        uses: actions/cache@v4
-        with:
-          path: ${{ steps.composer-cache.outputs.dir }}
-          key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}
-          restore-keys: ${{ runner.os }}-composer-
-
-      - name: Install dependencies (no-dev for audit)
-        run: composer install --no-dev --prefer-dist --no-progress
+      - name: Install dependencies
+        run: composer install --prefer-dist --no-progress --no-scripts
 
       - name: Run composer audit
         run: composer audit --format=plain
@@ -98,25 +76,14 @@ jobs:
           coverage: none
           tools: composer:v2
 
-      - name: Get Composer cache directory
-        id: composer-cache
-        run: echo "dir=$(composer config cache-files-dir)" >> "$GITHUB_OUTPUT"
-
-      - name: Cache dependencies
-        uses: actions/cache@v4
-        with:
-          path: ${{ steps.composer-cache.outputs.dir }}
-          key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}
-          restore-keys: ${{ runner.os }}-composer-
-
       - name: Install dependencies
-        run: composer install --prefer-dist --no-progress
+        run: composer install --prefer-dist --no-progress --no-scripts
 
       - name: Initialize devkit config
-        run: vendor/bin/kcode init
+        run: php bin/kcode init
 
       - name: Run PHPStan via kcode
-        run: vendor/bin/kcode analyse
+        run: php bin/kcode analyse
 
   # ============================================================================
   # CODE STYLE (PHP CS Fixer via kcode)
@@ -134,25 +101,14 @@ jobs:
           coverage: none
           tools: composer:v2
 
-      - name: Get Composer cache directory
-        id: composer-cache
-        run: echo "dir=$(composer config cache-files-dir)" >> "$GITHUB_OUTPUT"
-
-      - name: Cache dependencies
-        uses: actions/cache@v4
-        with:
-          path: ${{ steps.composer-cache.outputs.dir }}
-          key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}
-          restore-keys: ${{ runner.os }}-composer-
-
       - name: Install dependencies
-        run: composer install --prefer-dist --no-progress
+        run: composer install --prefer-dist --no-progress --no-scripts
 
       - name: Initialize devkit config
-        run: vendor/bin/kcode init
+        run: php bin/kcode init
 
       - name: Check code style via kcode
-        run: vendor/bin/kcode cs:fix --check
+        run: php bin/kcode cs:fix --check
 
   # ============================================================================
   # QUALITY SUMMARY

composer.json

@@ -27,9 +27,9 @@
         "php": ">=8.4"
     },
     "require-dev": {
-        "phpunit/phpunit": "^12.0",
-        "phpstan/phpstan": "^2.0",
         "friendsofphp/php-cs-fixer": "^3.64",
+        "phpstan/phpstan": "^2.0",
+        "phpunit/phpunit": "^12.5.8",
         "rector/rector": "^2.0",
         "vimeo/psalm": "^6.0"
     },

src/Core/ProcessExecutor.php

@@ -99,6 +99,7 @@ public function resolveBinary(string $vendorBin): ?string
 
         // Tier 3: Global PATH
         $basename = basename($vendorBin);
+        /** @psalm-suppress ForbiddenCode — shell_exec is intentional for binary resolution; input is escaped */
         $globalBin = trim((string) shell_exec('command -v ' . escapeshellarg($basename) . ' 2>/dev/null'));
         if ('' !== $globalBin && is_executable($globalBin)) {
             return $globalBin;

src/Runner/ComposerAuditRunner.php

@@ -39,6 +39,7 @@ protected function defaultArguments(): array
     #[\Override]
     protected function binary(): ?string
     {
+        /** @psalm-suppress ForbiddenCode — shell_exec is intentional for binary resolution; input is escaped */
         $global = trim((string) shell_exec('command -v ' . escapeshellarg('composer') . ' 2>/dev/null'));
 
         if ('' !== $global && is_executable($global)) {