v4.3.1 — Production-readiness patch

Patch release on top of v4.3.0 collecting the production-readiness fixes that landed in commits 8d99c0a, e6db31f, and 26a9bb1 (this tag).

Highlights

CLI fatal fixed. ./devtb translate <source> <target> <file> no longer throws "class not found." The inline autoloader in devtb-php mangled namespaced class names — replaced with a shared includes/class-devtb-autoloader.php used by CLI, PHPUnit, and (defense-in-depth) WordPress.

Framework matrix aligned (14 everywhere). REST API, CLI, file-handler, config class, admin types, admin selector, and Monaco language map now derive from DEVTB_Converter_Factory::get_framework_info(). Purged the stale claude pseudo-framework from every consumer.

Test suite green. PHPUnit went from 41 errors + 3 failures → 0/0 (284 tests, 4,133 assertions). Zero PHP 8.5 deprecation warnings during the full run.

Admin lint + build clean. Resolved no-explicit-any, no-case-declarations, and a react-hooks/exhaustive-deps issue. Added typed window.devtbData via wp-globals.d.ts.

PHP 8.1+ floor. composer.json, style.css, devtb-php, and the README all declare PHP 8.1+ (was 7.4). Static analysis confirmed no PHP 8-only syntax was actually in use; this aligns the declared floor with the tested runtime.

Security. Cleared CVE-2026-24765 (unsafe deserialization in PHPT coverage) by bumping phpunit/phpunit 9.6.29 → 9.6.34.

Admin build documented + soft-enforced. README's Install section now includes the cd admin && npm ci && npm run build step. Added prepack + release-build scripts to admin/package.json.

Review summary bundled. CODEX_REVIEW.md (at the repo root) ships inside this tag with the file-by-file rationale and trap callouts.

Verification

Check	Result
PHPUnit	284 / 4,133 passing, 0 errors, 0 failures, 0 deprecations
Python pytest	109 passed
php -l across repo	clean
Admin ESLint	clean
Admin Vite build	clean (~98 KB gzipped)
composer audit	no advisories
CLI smoke (bootstrap → kadence/thrive/oxygen-6/divi --dry-run)	✓

Files

41 modified, 4 new (includes/class-devtb-autoloader.php, includes/wp-function-stubs.php, admin/src/types/wp-globals.d.ts, CODEX_REVIEW.md). Full file-by-file rationale in CODEX_REVIEW.md.

Breaking changes

• GET /wp-json/devtb/v2/frameworks response: type/extension keys removed; format/file_extensions added. No known external consumer was bound to the old keys.
• The claude framework slug is no longer accepted anywhere (factory, REST, CLI, admin). It had no converter implementation; any callers were already broken.
• PHP floor raised to 8.1 (was 7.4). PHP 7.4 EOL'd 2022-11; 8.0 EOL'd 2023-11.

Upgrade

git fetch && git checkout v4.3.1
composer install
cd admin && npm ci && npm run build && cd ..
chmod +x devtb
./devtb --version  # → DevelopmentTranslation Bridge v4.3.1

🤖 Generated with Claude Code