Implement the 2026-10-07 improvement backlog (2.0.0)

[indy2kro]

Implements every item of the second improvement audit, docs/improvement-audit/2026-10-07-improvement-backlog.md: 44 items, all ticked. The backlog document is included in this PR.

This targets 2.0.0. It contains BC breaks, which are listed in CHANGELOG.md and explained with before/after snippets in UPGRADE-2.0.md.

Highlights

Parsing fixes

• Partition descriptor location and size are now read as 32-bit both-byte-order values. The test builder used to encode the same mistake.
• An ISO 9660:1999 Enhanced Volume Descriptor or a non-Joliet SVD is no longer decoded as UTF-16. New getEnhancedVolume().
• On bridge images whose ISO 9660 tree is only a stub (Windows install ISOs), getFileSystem() now returns the UDF file system.
• Names lose the ;N version and the trailing separator dot (README.;1 becomes README).
• The Joliet ASCII fallback no longer garbles CJK strings.
• Associated files are skipped, and data after an extended attribute record is read correctly.
• Multi-extent files keep their Rock Ridge data.
• getFullPath() always uses /.

Robustness

• Volume descriptors must carry the CD001 identifier and are capped at 64.
• Truncated images give a clear error.
• UDF tag checksum and location are verified, and extents are bounded by the partition length.
• Rock Ridge: CE handling fixed and SP len_skp honoured.
• Impossible dates are rejected and out-of-range GMT offsets ignored.
• SafePath rejects Windows reserved names and characters.

Features

• UDF 2.50 metadata partitions.
• UDF symlinks, owner and permissions, and Rock Ridge TF/PN.
• IsoEntry gains uid, gid, mode and symlinkTarget.
• find() reads only the directories on the path (listDirectory()).
• openStream() is a lazy, seekable stream (Util\EntryStream).
• El Torito boot image size and extraction; catalogs spanning several sectors are read.
• Extractor keeps file times, with preserveMode and continueOnError/getErrors().
• WalkWarnings makes incomplete listings detectable, with a strict mode that throws.
• All exposed dates are now CarbonImmutable.

CLI

• New options: --volume=primary|joliet|udf, --no-rock-ridge, --files, --ndjson, --extract-boot, --strict.
• Two actions at once is a usage error.
• Short flags can be bundled (-lj).
• A missing --file exits with code 1.

Tests, CI and docs

• Four real-world fixtures, generated with xorriso/genisoimage in Docker (fixtures/build-fixtures.sh): Rock Ridge, ISO 9660:1999, Joliet CJK, and names without extension.
• A deterministic fuzz test, which found and fixed one PHP warning in 17-byte dates.
• Cross-checks between the test builders and real images, and edge-case tests.
• New Windows CI job; PHPStan memory limit; tests:coverage works with Xdebug; dev files are export-ignored.
• SECURITY.md now points to private vulnerability reporting.
• Refreshed README, new CHANGELOG.md and UPGRADE-2.0.md.

Main BC breaks

• Dates are CarbonImmutable.
• FileSystem gained listDirectory() and getEntryRanges(), and an optional WalkWarnings parameter on walk, listDirectory, find and search.
• Volume::walk($isoFile, $depth, $warnings, $rockRidge): Rock Ridge is now the last parameter.
• Name normalisation.
• getSupplementaryVolume() returns only Joliet descriptors.
• CLI info output no longer lists files without --files.

Known limits

• UDF: no metadata mirror fallback, and sparable or VAT partitions are reported as unsupported.
• UDF metadata partitions are tested only on synthetic images, not on a real Blu-ray image.
• The preserveMode chmod test is skipped on Windows.
• The new Windows CI job has not run yet.

Verification

composer run check passes: phpcs, phpstan, rector and phpunit (608 tests, 2196 assertions, 1 skipped on Windows). composer audit, gitleaks and actionlint are clean. Line coverage is 97.1%.

🤖 Generated with Claude Code

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 752 complexity · 0 duplication

Metric	Results
Complexity	752
Duplication	0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}

[codecov]

Codecov Report

❌ Patch coverage is 97.11664% with 22 lines in your changes missing coverage. Please review.
✅ Project coverage is 97.42%. Comparing base (931ca0a) to head (d34ba39).
✅ All tests successful. No failed tests found.

Files with missing lines	Patch %	Lines
src/Udf/UdfFileSystem.php	94.37%	9 Missing ⚠️
src/Util/EntryStream.php	92.20%	6 Missing ⚠️
src/Util/Buffer.php	80.00%	2 Missing ⚠️
src/Cli/IsoTool.php	98.90%	1 Missing ⚠️
src/Descriptor/BootCatalog.php	97.56%	1 Missing ⚠️
src/Descriptor/RockRidge.php	98.36%	1 Missing ⚠️
src/Descriptor/Volume.php	98.86%	1 Missing ⚠️
src/Udf/UdfPartition.php	97.22%	1 Missing ⚠️

Additional details and impacted files

@@             Coverage Diff              @@
##               main     #121      +/-   ##
============================================
+ Coverage     96.87%   97.42%   +0.55%     
- Complexity      592      888     +296     
============================================
  Files            22       25       +3     
  Lines          1344     1904     +560     
============================================
+ Hits           1302     1855     +553     
- Misses           42       49       +7     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.