[coisa]

Refs #2. The package lacked maintainer/support/funding metadata, portable skill
discovery and direct contracts for interfaces already imported by its provider.
It also relied on the Composer2.2 binary-proxy autoload variable without declaring
that runtime API. The manifest now declares those requirements and complete,
applicable package metadata, using expanded objects/arrays throughout.

extra.skills.source exports the existing canonical skill; llm/skills remains
optional. The development check validates Composer metadata and the actual
platform. The locked graph stays at49 identical package records. A real strict
optimized-autoload failure identified formatter-data classes under the test
namespace scan; those fixtures are now excluded from development classmaps and
remain available as fixture data. PHPUnit configuration is expanded for reading.

References are current Changelog/DevTools and the actual code imports/runtime
requirements. Tool-specific dependencies stay within their owning domains.

Validation: full71tests481assertions and27PHP syntax/ECS; strictComposer,
actualplatform requirements, optimized strictPSR autoload, unchanged official
actionlint all5workflows and diff checks passed. Independent review approved
exact46cd1b269ea61e6d297faa1b9ee6491fd9d1c860. Native archive bytes match Git,
SHA256d11eacd7878641c415742a5f3e64bdd75daee1c71e5b5b3cc547b227fcba8c3f.

Fresh no-dev archive consumer resolves SymfonyConsole8.1.9/ECS13.3.9, correctly
loads this installation's classes/proxy and preserves source in check and the
lock in every operation. Native LLM Skills mapper/enumerator detects exactly the
canonical skill without warnings or activation. Development dependencies are
not transitive. The EOF-sensitive formatter requires a second explicit pass;
that observed defect is recorded separately in #24, not called idempotent here.

Base is the consolidated release-channel branch b1eaa0b, retaining all current
initial-branch merges. Changelog fragment is minor for0.x development. Final-HEAD
checks, Codex and CodeRabbit remain required; no stable-version announcement,
release/tag, persistent permission or consumer rollout is part of this PR.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: b6963723-6c95-4bdb-b8cd-ee9a30061968

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-25T16:26:18.647359Z	46cd1b2	PR opened
🔒 Security Review	✅ Completed 2026-10-25T16:26:58.498672Z	46cd1b2	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.