mirror of
https://github.com/Vateron-Media/XC_VM.git
synced 2026-10-04 20:03:11 +02:00
Divarion_D
1aede3bf4c
Move the .ini language files from src/resources/langs/ to src/Core/Localization/lang/, next to the Translator subsystem that owns them — which already defaulted its $langsDir to __DIR__ . '/lang/'. This dissolves the now-vestigial src/resources/ bucket (its data/ tree went with admin_constants, libs/ was empty). - bootstrap.php calls Translator::init() with no argument, relying on the class's own __DIR__-relative default instead of MAIN_HOME . 'resources/langs/'. - Makefile LB removal list points at Core/Localization/lang (and drops the gone resources/langs, resources/libs); LB still ships no UI translations. - Drop the stale src/resources entries from phpstan scanDirectories and the phpunit coverage excludes. - Update the English docs (translations guide, build-system table); the ru tree is regenerated before release.
246 lines
8.9 KiB
Plaintext
246 lines
8.9 KiB
Plaintext
parameters:
|
|
# Start low for a legacy codebase, then raise one step at a time (0 → max).
|
|
# Every increment surfaces a new class of issues; fix or baseline, then bump.
|
|
level: 5
|
|
|
|
phpVersion: 80300
|
|
|
|
# Entry points to analyze. Add/remove dirs as the audit progresses.
|
|
paths:
|
|
- ../src/Core
|
|
- ../src/Domain
|
|
- ../src/Infrastructure
|
|
- ../src/Streaming
|
|
- ../src/Modules
|
|
- ../src/Ministra
|
|
- ../src/Cli
|
|
|
|
# The bootstrap only defines global constants; it does NOT wire a project
|
|
# autoloader. PHPStan resolves every symbol statically from `paths` +
|
|
# `scanDirectories` below (no project code is executed).
|
|
bootstrapFiles:
|
|
- ../tools/phpstan/phpstan-bootstrap.php
|
|
# Listed directly (not just require'd from the bootstrap) so PHPStan
|
|
# tracks it for result-cache invalidation when constants change.
|
|
- ../tools/phpstan/constants.stub.php
|
|
|
|
# Indexed for symbol resolution (classes/interfaces/functions defined here
|
|
# are findable) but NOT reported on directly. These cover every source dir
|
|
# outside `paths` so cross-references always resolve.
|
|
scanDirectories:
|
|
- ../src/Public
|
|
- ../src/signals
|
|
- ../src/content
|
|
- ../src/config
|
|
- ../src/migrations
|
|
|
|
# Root file holding the global XC_Bootstrap class, referenced across the
|
|
# codebase but living outside any scanned directory.
|
|
scanFiles:
|
|
- ../src/bootstrap.php
|
|
|
|
excludePaths:
|
|
analyse:
|
|
- ../src/*/tmp/*
|
|
- ../src/tmp/*
|
|
- ../src/backups/*
|
|
# Composer autoloader glue + third-party packages (committed +
|
|
# shipped). Symbols resolve via src/vendor/autoload.php, which the
|
|
# Composer-installed phpstan binary loads automatically.
|
|
- ../src/vendor/*
|
|
# View templates: included into a controller's scope, so their
|
|
# variables ($rSettings, $language, ...) are injected by the caller.
|
|
# PHPStan analyses files standalone and would flag every such var as
|
|
# undefined — not real bugs. (Still indexed via scanDirectories.)
|
|
- ../src/Modules/*/views/*
|
|
# ministra portal entry: procedural front-controller whose
|
|
# $rSettings/$db are injected by the bootstrap it includes — same
|
|
# standalone-analysis false positives as views. The PortalHandler /
|
|
# PortalHelpers classes next to it ARE analysed; only this entry is
|
|
# excluded (it was scan-only under the old src/ministra layout too).
|
|
- ../src/Ministra/portal.php
|
|
# Bundled third-party libraries (not our code): the php-tmdb client
|
|
# and the Mobile-Detect library. Like the vendored packages above,
|
|
# they are indexed for symbol resolution but not analysed.
|
|
- ../src/Infrastructure/Tmdb/lib/*
|
|
|
|
treatPhpDocTypesAsCertain: false
|
|
reportUnmatchedIgnoredErrors: false
|
|
|
|
# These constants are defined at runtime with values that vary by
|
|
# deployment; tell PHPStan to use their type, not the literal value the
|
|
# stub happens to set (otherwise comparisons read as always true/false).
|
|
dynamicConstantNames:
|
|
- ARCHIVE_PATH
|
|
- BIN_PATH
|
|
- BUFFER_SIZE
|
|
- CACHE_TMP_PATH
|
|
- CIDR_TMP_PATH
|
|
- CLIENT_BANNED
|
|
- CLIENT_DISABLED
|
|
- CLIENT_DISALLOWED
|
|
- CLIENT_EXPIRED
|
|
- CLIENT_INVALID
|
|
- CLIENT_IS_E2
|
|
- CLIENT_IS_MAG
|
|
- CLIENT_IS_STALKER
|
|
- CLOSE_EMPTY
|
|
- CONFIG_PATH
|
|
- CONS_TMP_PATH
|
|
- CONTENT_PATH
|
|
- CREATED_PATH
|
|
- CRONS_TMP_PATH
|
|
- DB_ACCESS_ENABLED
|
|
- DELAY_PATH
|
|
- DEV_MODE
|
|
- DIVERGENCE_TMP_PATH
|
|
- E2_IMAGES_PATH
|
|
- EPG_PATH
|
|
- FFMPEG
|
|
- FFMPEG_BIN_40
|
|
- FFMPEG_BIN_71
|
|
- FFMPEG_BIN_80
|
|
- FFMPEG_FONT
|
|
- FFPROBE
|
|
- FFPROBE_BIN_40
|
|
- FFPROBE_BIN_71
|
|
- FFPROBE_BIN_80
|
|
- FLOOD_TMP_PATH
|
|
- GEOISP_BIN
|
|
- GEOLITE2_BIN
|
|
- GEOLITE2C_BIN
|
|
- GIT_OWNER
|
|
- GIT_REPO_BIN
|
|
- GIT_REPO_MAIN
|
|
- GIT_REPO_UPDATE
|
|
- HOST
|
|
- IMAGES_PATH
|
|
- KEYFRAME_HEADER
|
|
- LINES_TMP_PATH
|
|
- LOGS_TMP_PATH
|
|
- MAIN_HOME
|
|
- MAX_PREBUFFER
|
|
- MAX_SEG_BYTES
|
|
- MINISTRA_TMP_PATH
|
|
- MIN_SEG_PTS
|
|
- MONITOR_CALLS
|
|
- OPENSSL_EXTRA
|
|
- PACKET_SIZE
|
|
- PAGE_NAME
|
|
- PAT_HEADER
|
|
- PAT_PERIOD
|
|
- PHP_BIN
|
|
- PHP_ERRORS
|
|
- PLAYER_BOOTSTRAP_DONE
|
|
- PLAYER_TMP_PATH
|
|
- PLAYLIST_PATH
|
|
- SEGMENT_DURATION
|
|
- SERIES_TMP_PATH
|
|
- SERVER_ID
|
|
- SIGNALS_PATH
|
|
- SIGNALS_TMP_PATH
|
|
- STATUS_CERTBOT
|
|
- STATUS_CERTBOT_INVALID
|
|
- STATUS_CERTBOT_RUNNING
|
|
- STATUS_CODE_LENGTH
|
|
- STATUS_DISABLED
|
|
- STATUS_EXISTS_CODE
|
|
- STATUS_EXISTS_DIR
|
|
- STATUS_EXISTS_HMAC
|
|
- STATUS_EXISTS_IP
|
|
- STATUS_EXISTS_MAC
|
|
- STATUS_EXISTS_NAME
|
|
- STATUS_EXISTS_SOURCE
|
|
- STATUS_EXISTS_USERNAME
|
|
- STATUS_FAILURE
|
|
- STATUS_FLUSH
|
|
- STATUS_INSUFFICIENT_CREDITS
|
|
- STATUS_INVALID_CAPTCHA
|
|
- STATUS_INVALID_CODE
|
|
- STATUS_INVALID_DATA
|
|
- STATUS_INVALID_DATE
|
|
- STATUS_INVALID_DIR
|
|
- STATUS_INVALID_EMAIL
|
|
- STATUS_INVALID_FILE
|
|
- STATUS_INVALID_GROUP
|
|
- STATUS_INVALID_INPUT
|
|
- STATUS_INVALID_IP
|
|
- STATUS_INVALID_MAC
|
|
- STATUS_INVALID_NAME
|
|
- STATUS_INVALID_PACKAGE
|
|
- STATUS_INVALID_PASSWORD
|
|
- STATUS_INVALID_PLAYLIST
|
|
- STATUS_INVALID_SUBRESELLER
|
|
- STATUS_INVALID_TYPE
|
|
- STATUS_INVALID_USER
|
|
- STATUS_INVALID_USERNAME
|
|
- STATUS_NO_DESCRIPTION
|
|
- STATUS_NO_KEY
|
|
- STATUS_NO_SOURCE
|
|
- STATUS_NO_SOURCES
|
|
- STATUS_NOT_ADMIN
|
|
- STATUS_NO_TITLE
|
|
- STATUS_NOT_RESELLER
|
|
- STATUS_NO_TRIALS
|
|
- STATUS_RESERVED_CODE
|
|
- STATUS_SPACE_ISSUE
|
|
- STATUS_SUCCESS
|
|
- STATUS_SUCCESS_MULTI
|
|
- STATUS_SUCCESS_REPLACE
|
|
- STATUS_TOO_MANY_RESULTS
|
|
- STORAGE_PATH
|
|
- STORE_PREBUFFER
|
|
- STREAMS_PATH
|
|
- STREAMS_TMP_PATH
|
|
- TIMEOUT
|
|
- TIMEOUT_READ
|
|
- TMP_PATH
|
|
- VIDEO_PATH
|
|
- VOD_PATH
|
|
- WATCH_TMP_PATH
|
|
- XC_VM_VERSION
|
|
- YOUTUBE_BIN
|
|
|
|
# Documented FALSE POSITIVES that static analysis cannot resolve — NOT a
|
|
# baseline of real bugs. Each entry is unactionable by design.
|
|
ignoreErrors:
|
|
# Dynamic require/include built from absolute runtime paths
|
|
# (MAIN_HOME = /home/xc_vm/ on a deployed server). The files exist at
|
|
# deploy time; PHPStan cannot see them on a dev/CI checkout.
|
|
- identifier: requireOnce.fileNotFound
|
|
- identifier: include.fileNotFound
|
|
- identifier: require.fileNotFound
|
|
# Proprietary ioncube-encoded class, shipped only in licensed builds.
|
|
# Every call site is guarded with class_exists('XC_VM').
|
|
- '#unknown class XC_VM\.#'
|
|
# Same class: method_exists('XC_VM', ...) probes for APIs that exist
|
|
# only in licensed builds; PHPStan treats the unknown class as absent
|
|
# and calls the guard impossible.
|
|
- '#method_exists\(\) with .XC_VM.#'
|
|
# External vendor library (maxmind-db/reader), installed at runtime and
|
|
# not part of the source tree.
|
|
- '#MaxMind\\Db\\Reader#'
|
|
# ext-inotify stub is incomplete: inotify_init() really can return false
|
|
# (PHP manual), so the defensive check below is correct, not dead code.
|
|
-
|
|
message: '#=== between resource and false will always evaluate to false#'
|
|
path: ../src/Streaming/AsyncFileOperations.php
|
|
# CacheHandlerCommand force-reloads settings from the DB mid-run via
|
|
# SettingsManager::set(SettingsRepository::getAll(true)); PHPStan does not
|
|
# model that static mutation, so it carries the earlier enable_cache
|
|
# narrowing and reads the re-check as always-false. At runtime enable_cache
|
|
# can genuinely flip, so the guard (and its break) is meaningful.
|
|
-
|
|
message: '#^Negated boolean expression is always false\.$#'
|
|
identifier: booleanNot.alwaysFalse
|
|
path: ../src/Cli/Commands/CacheHandlerCommand.php
|
|
# EpgCronJob reconnect-verify: after $db->db_connect() the inner
|
|
# $db->ping() really can return true. ping() is marked @phpstan-impure,
|
|
# but PHPStan still memoizes the outer ping()===false from the else branch
|
|
# across the intervening reconnect. Removing the check would break real
|
|
# reconnect verification.
|
|
-
|
|
message: '#^If condition is always false\.$#'
|
|
identifier: if.alwaysFalse
|
|
path: ../src/Cli/CronJobs/EpgCronJob.php
|