phpstan-baseline.neon

parameters:
	ignoreErrors:
		# Defensive orphaned-owner guard: larastan types $server->user (BelongsTo) as non-null, but the FK can be orphaned at runtime.
		-
			message: '#^Negated boolean expression is always false\.$#'
			identifier: booleanNot.alwaysFalse
			count: 1
			path: app/Console/Commands/Email/SendServerRenewalNoticesCommand.php

		# Defensive ?-> on Product::find() result; larastan types it non-null.
		-
			message: '#^Using nullsafe property access "\?\-\>price" on left side of \?\? is unnecessary\. Use \-\> instead\.$#'
			identifier: nullsafe.neverNull
			count: 1
			path: app/Console/Commands/Email/SendServerRenewalNoticesCommand.php

		# Symmetric exhaustive branch conditions kept for readability; last branch is provably redundant.
		-
			message: '#^Variable \$servers in empty\(\) always exists and is always falsy\.$#'
			identifier: empty.variable
			count: 1
			path: app/Console/Commands/Server/BulkPowerActionCommand.php

		# join+select hydrates users.uuid/users.username onto ActivityLog models; attributes exist at runtime, typing them on the model would be wrong.
		-
			message: '#^Access to an undefined property Everest\\Models\\ActivityLog\:\:\$username\.$#'
			identifier: property.notFound
			count: 1
			path: app/Http/Controllers/Api/Application/ActivityLogController.php

		-
			message: '#^Access to an undefined property Everest\\Models\\ActivityLog\:\:\$uuid\.$#'
			identifier: property.notFound
			count: 1
			path: app/Http/Controllers/Api/Application/ActivityLogController.php

		# Defensive orphaned-owner guard on $server->user (see renewal notices note).
		-
			message: '#^Ternary operator condition is always true\.$#'
			identifier: ternary.alwaysTrue
			count: 2
			path: app/Http/Controllers/Api/Application/Billing/BillingController.php

		# Defensive ?-> on $egg->nest; relation typed non-null but FK can be orphaned.
		-
			message: '#^Using nullsafe property access on non\-nullable type Everest\\Models\\Nest\. Use \-\> instead\.$#'
			identifier: nullsafe.neverNull
			count: 2
			path: app/Http/Controllers/Api/Application/Billing/CustomDomainController.php

		# Defensive $request->user()?-> behind auth middleware; contract says non-null but kept as belt-and-braces.
		-
			message: '#^Using nullsafe property access on non\-nullable type Everest\\Models\\User\. Use \-\> instead\.$#'
			identifier: nullsafe.neverNull
			count: 2
			path: app/Http/Controllers/Api/Application/EmailTemplateController.php

		# Defensive ?? / ?-> on aggregates and relations larastan types non-null.
		-
			message: '#^Expression on left side of \?\? is not nullable\.$#'
			identifier: nullCoalesce.expr
			count: 1
			path: app/Http/Controllers/Api/Application/IntelligenceController.php

		-
			message: '#^Using nullsafe property access "\?\-\>email" on left side of \?\? is unnecessary\. Use \-\> instead\.$#'
			identifier: nullsafe.neverNull
			count: 1
			path: app/Http/Controllers/Api/Application/IntelligenceController.php

		-
			message: '#^Using nullsafe property access "\?\-\>name" on left side of \?\? is unnecessary\. Use \-\> instead\.$#'
			identifier: nullsafe.neverNull
			count: 1
			path: app/Http/Controllers/Api/Application/IntelligenceController.php

		-
			message: '#^Using nullsafe property access "\?\-\>username" on left side of \?\? is unnecessary\. Use \-\> instead\.$#'
			identifier: nullsafe.neverNull
			count: 2
			path: app/Http/Controllers/Api/Application/IntelligenceController.php

		-
			message: '#^Using nullsafe property access on non\-nullable type Everest\\Models\\User\. Use \-\> instead\.$#'
			identifier: nullsafe.neverNull
			count: 3
			path: app/Http/Controllers/Api/Application/IntelligenceController.php

		# Payment path belt-and-braces: Stripe SDK types retrieve() non-null (throws instead of returning null); guards kept deliberately.
		-
			message: '#^Negated boolean expression is always false\.$#'
			identifier: booleanNot.alwaysFalse
			count: 2
			path: app/Http/Controllers/Api/Client/Billing/CheckoutController.php

		# False positive: Stripe's magic setter accepts arrays for metadata; SDK docblock is too narrow.
		-
			message: '#^Property Stripe\\PaymentIntent\:\:\$metadata \(Stripe\\StripeObject\) does not accept array\<string, string\|false\>\.$#'
			identifier: assign.propertyType
			count: 1
			path: app/Http/Controllers/Api/Client/Billing/CheckoutController.php

		# Explicit re-check before capture after the early-throw above; kept for safety in the money path.
		-
			message: '#^Strict comparison using \=\=\= between ''requires_capture'' and ''requires_capture'' will always evaluate to true\.$#'
			identifier: identical.alwaysTrue
			count: 1
			path: app/Http/Controllers/Api/Client/Billing/CheckoutController.php

		# Defensive ?-> on $server->egg; relation typed non-null but egg can be missing.
		-
			message: '#^Using nullsafe property access "\?\-\>name" on left side of \?\? is unnecessary\. Use \-\> instead\.$#'
			identifier: nullsafe.neverNull
			count: 1
			path: app/Http/Controllers/Api/Client/Servers/AIController.php

		# join+select hydration, same as the application ActivityLogController above.
		-
			message: '#^Access to an undefined property Illuminate\\Database\\Eloquent\\Model\:\:\$username\.$#'
			identifier: property.notFound
			count: 1
			path: app/Http/Controllers/Api/Client/Servers/ActivityLogController.php

		-
			message: '#^Access to an undefined property Illuminate\\Database\\Eloquent\\Model\:\:\$uuid\.$#'
			identifier: property.notFound
			count: 1
			path: app/Http/Controllers/Api/Client/Servers/ActivityLogController.php

		# Defensive ?-> on route-model-bound parameter typed non-null.
		-
			message: '#^Using nullsafe property access "\?\-\>id" on left side of \?\? is unnecessary\. Use \-\> instead\.$#'
			identifier: nullsafe.neverNull
			count: 1
			path: app/Http/Requests/Api/Application/CustomDomains/UpdateCustomDomainApiKeyRequest.php

		# Defensive orphaned-owner guard on $server->user.
		-
			message: '#^If condition is always true\.$#'
			identifier: if.alwaysTrue
			count: 1
			path: app/Observers/ServerObserver.php

		# Guards against non-Eloquent Authenticatable implementations from custom guards.
		-
			message: '#^Instanceof between Everest\\Models\\User and Illuminate\\Database\\Eloquent\\Model will always evaluate to true\.$#'
			identifier: instanceof.alwaysTrue
			count: 1
			path: app/Services/Activity/ActivityLogService.php

		# Guard before end($steps); upstream guarantees non-empty but the guard is cheap insurance.
		-
			message: '#^Variable \$steps in empty\(\) always exists and is not falsy\.$#'
			identifier: empty.variable
			count: 1
			path: app/Services/Billing/BillingCycleService.php

		# Defensive ?-> in invoice/PII snapshot path against orphaned user/billing profile.
		-
			message: '#^Using nullsafe property access "\?\-\>email" on left side of \?\? is unnecessary\. Use \-\> instead\.$#'
			identifier: nullsafe.neverNull
			count: 1
			path: app/Services/Billing/InvoiceGenerationService.php

		-
			message: '#^Using nullsafe property access "\?\-\>encrypted_data" on left side of \?\? is unnecessary\. Use \-\> instead\.$#'
			identifier: nullsafe.neverNull
			count: 1
			path: app/Services/Billing/InvoiceGenerationService.php

		-
			message: '#^Using nullsafe property access "\?\-\>name" on left side of \?\? is unnecessary\. Use \-\> instead\.$#'
			identifier: nullsafe.neverNull
			count: 1
			path: app/Services/Billing/InvoiceGenerationService.php

		-
			message: '#^Using nullsafe property access "\?\-\>username" on left side of \?\? is unnecessary\. Use \-\> instead\.$#'
			identifier: nullsafe.neverNull
			count: 1
			path: app/Services/Billing/InvoiceGenerationService.php

		# Defensive ?->/?? chains over allocation/node/api-key relations in DNS provisioning; relations typed non-null but can be absent.
		-
			message: '#^Expression on left side of \?\? is not nullable\.$#'
			identifier: nullCoalesce.expr
			count: 2
			path: app/Services/CustomDomains/CustomDomainProvisioningService.php

		-
			message: '#^Strict comparison using \!\=\= between string and null will always evaluate to true\.$#'
			identifier: notIdentical.alwaysTrue
			count: 1
			path: app/Services/CustomDomains/CustomDomainProvisioningService.php

		-
			message: '#^Using nullsafe property access "\?\-\>ip_alias" on left side of \?\? is unnecessary\. Use \-\> instead\.$#'
			identifier: nullsafe.neverNull
			count: 2
			path: app/Services/CustomDomains/CustomDomainProvisioningService.php

		-
			message: '#^Using nullsafe property access "\?\-\>name" on left side of \?\? is unnecessary\. Use \-\> instead\.$#'
			identifier: nullsafe.neverNull
			count: 2
			path: app/Services/CustomDomains/CustomDomainProvisioningService.php

		-
			message: '#^Using nullsafe property access "\?\-\>port" on left side of \?\? is unnecessary\. Use \-\> instead\.$#'
			identifier: nullsafe.neverNull
			count: 1
			path: app/Services/CustomDomains/CustomDomainProvisioningService.php

		-
			message: '#^Using nullsafe property access "\?\-\>token" on left side of \?\? is unnecessary\. Use \-\> instead\.$#'
			identifier: nullsafe.neverNull
			count: 3
			path: app/Services/CustomDomains/CustomDomainProvisioningService.php

		# False positive family: $config comes from Collection::get() which larastan types non-null; it is genuinely nullable at runtime, so ?-> must stay.
		-
			message: '#^Call to function is_array\(\) with array will always evaluate to true\.$#'
			identifier: function.alreadyNarrowedType
			count: 1
			path: app/Services/Extensions/ExtensionCatalogService.php

		-
			message: '#^Using nullsafe property access "\?\-\>allowed_eggs" on left side of \?\? is unnecessary\. Use \-\> instead\.$#'
			identifier: nullsafe.neverNull
			count: 3
			path: app/Services/Extensions/ExtensionCatalogService.php

		-
			message: '#^Using nullsafe property access "\?\-\>allowed_nests" on left side of \?\? is unnecessary\. Use \-\> instead\.$#'
			identifier: nullsafe.neverNull
			count: 3
			path: app/Services/Extensions/ExtensionCatalogService.php

		-
			message: '#^Using nullsafe property access "\?\-\>enabled" on left side of \?\? is unnecessary\. Use \-\> instead\.$#'
			identifier: nullsafe.neverNull
			count: 2
			path: app/Services/Extensions/ExtensionCatalogService.php

		-
			message: '#^Using nullsafe property access "\?\-\>name" on left side of \?\? is unnecessary\. Use \-\> instead\.$#'
			identifier: nullsafe.neverNull
			count: 1
			path: app/Services/Extensions/ExtensionCatalogService.php

		# Belt-and-braces hunk normalization; PHPStan proves the nulls impossible via array shapes.
		-
			message: '#^Strict comparison using \=\=\= between mixed and null will always evaluate to false\.$#'
			identifier: identical.alwaysFalse
			count: 2
			path: app/Services/Files/FileDiffService.php

		# Defensive parsing of external version manifests (Mojang/Paper/etc.); redundant per types but guards malformed remote data.
		-
			message: '#^Call to function is_string\(\) with non\-empty\-string will always evaluate to true\.$#'
			identifier: function.alreadyNarrowedType
			count: 1
			path: app/Services/Servers/StartupVariableVersionService.php

		-
			message: '#^Call to function is_string\(\) with string will always evaluate to true\.$#'
			identifier: function.alreadyNarrowedType
			count: 1
			path: app/Services/Servers/StartupVariableVersionService.php

		-
			message: '#^Offset ''supports_snapshots'' on array\{provider\: ''bungeecord_builds'', supports_snapshots\: false, include_special_latest\: true\}\|array\{provider\: ''forge_promotions''\|''sponge_versions'', supports_snapshots\: false\}\|array\{provider\: ''mojang_manifest'', supports_snapshots\: true, include_special_latest\?\: true\}\|array\{provider\: ''paper_builds'', supports_snapshots\: false, include_special_latest\: true, depends_on\: array\{''MINECRAFT_VERSION'', ''MC_VERSION''\}\} on left side of \?\? always exists and is not nullable\.$#'
			identifier: nullCoalesce.offset
			count: 1
			path: app/Services/Servers/StartupVariableVersionService.php

		-
			message: '#^Offset 0 on non\-empty\-list\<string\> on left side of \?\? always exists and is not nullable\.$#'
			identifier: nullCoalesce.offset
			count: 1
			path: app/Services/Servers/StartupVariableVersionService.php

		-
			message: '#^Offset 1 on array\{list\<string\>, list\<non\-empty\-string\>\} on left side of \?\? always exists and is not nullable\.$#'
			identifier: nullCoalesce.offset
			count: 1
			path: app/Services/Servers/StartupVariableVersionService.php

		-
			message: '#^Strict comparison using \!\=\= between non\-empty\-string and '''' will always evaluate to true\.$#'
			identifier: notIdentical.alwaysTrue
			count: 1
			path: app/Services/Servers/StartupVariableVersionService.php