app/Config/Cookie.php

@@ -84,6 +84,8 @@ class Cookie extends BaseConfig
      * Defaults to `Lax` for compatibility with modern browsers. Setting `''`
      * (empty string) means default SameSite attribute set by browsers (`Lax`)
      * will be set on cookies. If set to `None`, `$secure` must also be set.
+     *
+     * @phpstan-var 'None'|'Lax'|'Strict'|''
      */
     public string $samesite = 'Lax';
 

app/Config/Cors.php

+<?php
+
+declare(strict_types=1);
+
+namespace Config;
+
+use CodeIgniter\Config\BaseConfig;
+
+/**
+ * Cross-Origin Resource Sharing (CORS) Configuration
+ *
+ * @see https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS
+ */
+class Cors extends BaseConfig
+{
+    /**
+     * The default CORS configuration.
+     *
+     * @var array{
+     *      allowedOrigins: list<string>,
+     *      allowedOriginsPatterns: list<string>,
+     *      supportsCredentials: bool,
+     *      allowedHeaders: list<string>,
+     *      exposedHeaders: list<string>,
+     *      allowedMethods: list<string>,
+     *      maxAge: int,
+     *  }
+     */
+    public array $default = [
+        /**
+         * Origins for the `Access-Control-Allow-Origin` header.
+         *
+         * @see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Origin
+         *
+         * E.g.:
+         *   - ['http://localhost:8080']
+         *   - ['https://www.example.com']
+         */
+        'allowedOrigins' => [],
+
+        /**
+         * Origin regex patterns for the `Access-Control-Allow-Origin` header.
+         *
+         * @see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Origin
+         *
+         * NOTE: A pattern specified here is part of a regular expression. It will
+         *       be actually `#\A<pattern>\z#`.
+         *
+         * E.g.:
+         *   - ['https://\w+\.example\.com']
+         */
+        'allowedOriginsPatterns' => [],
+
+        /**
+         * Weather to send the `Access-Control-Allow-Credentials` header.
+         *
+         * The Access-Control-Allow-Credentials response header tells browsers whether
+         * the server allows cross-origin HTTP requests to include credentials.
+         *
+         * @see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Credentials
+         */
+        'supportsCredentials' => false,
+
+        /**
+         * Set headers to allow.
+         *
+         * The Access-Control-Allow-Headers response header is used in response to
+         * a preflight request which includes the Access-Control-Request-Headers to
+         * indicate which HTTP headers can be used during the actual request.
+         *
+         * @see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Headers
+         */
+        'allowedHeaders' => [],
+
+        /**
+         * Set headers to expose.
+         *
+         * The Access-Control-Expose-Headers response header allows a server to
+         * indicate which response headers should be made available to scripts running
+         * in the browser, in response to a cross-origin request.
+         *
+         * @see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Expose-Headers
+         */
+        'exposedHeaders' => [],
+
+        /**
+         * Set methods to allow.
+         *
+         * The Access-Control-Allow-Methods response header specifies one or more
+         * methods allowed when accessing a resource in response to a preflight
+         * request.
+         *
+         * E.g.:
+         *   - ['GET', 'POST', 'PUT', 'DELETE']
+         *
+         * @see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Methods
+         */
+        'allowedMethods' => [],
+
+        /**
+         * Set how many seconds the results of a preflight request can be cached.
+         *
+         * @see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Max-Age
+         */
+        'maxAge' => 7200,
+    ];
+}

app/Config/Database.php

@@ -24,53 +24,66 @@ class Database extends Config
     /**
      * The default database connection.
      *
-     * @var array<string, string|bool|int|array>
+     * @var array<string, mixed>
      */
     public array $default = [
-        'DSN' => '',
-        'hostname' => 'localhost',
-        'username' => '',
-        'password' => '',
-        'database' => '',
-        'DBDriver' => 'MySQLi',
-        'DBPrefix' => 'cp_',
-        'pConnect' => false,
-        'DBDebug' => ENVIRONMENT !== 'production',
-        'charset' => 'utf8mb4',
-        'DBCollat' => 'utf8mb4_unicode_ci',
-        'swapPre' => '',
-        'encrypt' => false,
-        'compress' => false,
-        'strictOn' => false,
-        'failover' => [],
-        'port' => 3306,
+        'DSN'          => '',
+        'hostname'     => 'localhost',
+        'username'     => '',
+        'password'     => '',
+        'database'     => '',
+        'DBDriver'     => 'MySQLi',
+        'DBPrefix'     => 'cp_',
+        'pConnect'     => false,
+        'DBDebug'      => true,
+        'charset'      => 'utf8mb4',
+        'DBCollat'     => 'utf8mb4_unicode_ci',
+        'swapPre'      => '',
+        'encrypt'      => false,
+        'compress'     => false,
+        'strictOn'     => false,
+        'failover'     => [],
+        'port'         => 3306,
+        'numberNative' => false,
+        'foundRows'    => false,
+        'dateFormat'   => [
+            'date'     => 'Y-m-d',
+            'datetime' => 'Y-m-d H:i:s',
+            'time'     => 'H:i:s',
+        ],
     ];
 
     /**
      * This database connection is used when running PHPUnit database tests.
      *
-     * @noRector StringClassNameToClassConstantRector
-     *
-     * @var array<string, string|bool|int|array>
+     * @var array<string, mixed>
      */
     public array $tests = [
-        'DSN' => '',
+        'DSN'      => '',
         'hostname' => '127.0.0.1',
         'username' => '',
         'password' => '',
         'database' => ':memory:',
         'DBDriver' => 'SQLite3',
         'DBPrefix' => 'db_',
-        'pConnect' => false,
-        'DBDebug' => ENVIRONMENT !== 'production',
-        'charset' => 'utf8',
-        'DBCollat' => 'utf8_general_ci',
-        'swapPre' => '',
-        'encrypt' => false,
-        'compress' => false,
-        'strictOn' => false,
-        'failover' => [],
-        'port' => 3306,
+        // Needed to ensure we're working correctly with prefixes live. DO NOT REMOVE FOR CI DEVS
+        'pConnect'    => false,
+        'DBDebug'     => true,
+        'charset'     => 'utf8',
+        'DBCollat'    => '',
+        'swapPre'     => '',
+        'encrypt'     => false,
+        'compress'    => false,
+        'strictOn'    => false,
+        'failover'    => [],
+        'port'        => 3306,
+        'foreignKeys' => true,
+        'busyTimeout' => 1000,
+        'dateFormat'  => [
+            'date'     => 'Y-m-d',
+            'datetime' => 'Y-m-d H:i:s',
+            'time'     => 'H:i:s',
+        ],
     ];
 
     //--------------------------------------------------------------------

app/Config/DocTypes.php

@@ -4,6 +4,9 @@ declare(strict_types=1);
 
 namespace Config;
 
+/**
+ * @immutable
+ */
 class DocTypes
 {
     /**
@@ -12,42 +15,34 @@ class DocTypes
      * @var array<string, string>
      */
     public array $list = [
-        'xhtml11' =>
-            '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">',
-        'xhtml1-strict' =>
-            '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">',
-        'xhtml1-trans' =>
-            '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">',
-        'xhtml1-frame' =>
-            '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Frameset//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-frameset.dtd">',
-        'xhtml-basic11' =>
-            '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML Basic 1.1//EN" "http://www.w3.org/TR/xhtml-basic/xhtml-basic11.dtd">',
-        'html5' => '<!DOCTYPE html>',
-        'html4-strict' =>
-            '<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">',
-        'html4-trans' =>
-            '<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">',
-        'html4-frame' =>
-            '<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">',
-        'mathml1' =>
-            '<!DOCTYPE math SYSTEM "http://www.w3.org/Math/DTD/mathml1/mathml.dtd">',
-        'mathml2' =>
-            '<!DOCTYPE math PUBLIC "-//W3C//DTD MathML 2.0//EN" "http://www.w3.org/Math/DTD/mathml2/mathml2.dtd">',
-        'svg10' =>
-            '<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.0//EN" "http://www.w3.org/TR/2001/REC-SVG-20010904/DTD/svg10.dtd">',
-        'svg11' =>
-            '<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">',
-        'svg11-basic' =>
-            '<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1 Basic//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11-basic.dtd">',
-        'svg11-tiny' =>
-            '<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1 Tiny//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11-tiny.dtd">',
-        'xhtml-math-svg-xh' =>
-            '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1 plus MathML 2.0 plus SVG 1.1//EN" "http://www.w3.org/2002/04/xhtml-math-svg/xhtml-math-svg.dtd">',
-        'xhtml-math-svg-sh' =>
-            '<!DOCTYPE svg:svg PUBLIC "-//W3C//DTD XHTML 1.1 plus MathML 2.0 plus SVG 1.1//EN" "http://www.w3.org/2002/04/xhtml-math-svg/xhtml-math-svg.dtd">',
-        'xhtml-rdfa-1' =>
-            '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd">',
-        'xhtml-rdfa-2' =>
-            '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.1//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-2.dtd">',
+        'xhtml11'           => '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">',
+        'xhtml1-strict'     => '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">',
+        'xhtml1-trans'      => '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">',
+        'xhtml1-frame'      => '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Frameset//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-frameset.dtd">',
+        'xhtml-basic11'     => '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML Basic 1.1//EN" "http://www.w3.org/TR/xhtml-basic/xhtml-basic11.dtd">',
+        'html5'             => '<!DOCTYPE html>',
+        'html4-strict'      => '<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">',
+        'html4-trans'       => '<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">',
+        'html4-frame'       => '<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">',
+        'mathml1'           => '<!DOCTYPE math SYSTEM "http://www.w3.org/Math/DTD/mathml1/mathml.dtd">',
+        'mathml2'           => '<!DOCTYPE math PUBLIC "-//W3C//DTD MathML 2.0//EN" "http://www.w3.org/Math/DTD/mathml2/mathml2.dtd">',
+        'svg10'             => '<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.0//EN" "http://www.w3.org/TR/2001/REC-SVG-20010904/DTD/svg10.dtd">',
+        'svg11'             => '<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">',
+        'svg11-basic'       => '<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1 Basic//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11-basic.dtd">',
+        'svg11-tiny'        => '<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1 Tiny//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11-tiny.dtd">',
+        'xhtml-math-svg-xh' => '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1 plus MathML 2.0 plus SVG 1.1//EN" "http://www.w3.org/2002/04/xhtml-math-svg/xhtml-math-svg.dtd">',
+        'xhtml-math-svg-sh' => '<!DOCTYPE svg:svg PUBLIC "-//W3C//DTD XHTML 1.1 plus MathML 2.0 plus SVG 1.1//EN" "http://www.w3.org/2002/04/xhtml-math-svg/xhtml-math-svg.dtd">',
+        'xhtml-rdfa-1'      => '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd">',
+        'xhtml-rdfa-2'      => '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.1//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-2.dtd">',
     ];
+
+    /**
+     * Whether to remove the solidus (`/`) character for void HTML elements (e.g. `<input>`)
+     * for HTML5 compatibility.
+     *
+     * Set to:
+     *    `true` - to be HTML5 compatible
+     *    `false` - to be XHTML compatible
+     */
+    public bool $html5 = true;
 }

app/Config/Email.php

@@ -8,21 +8,21 @@ use CodeIgniter\Config\BaseConfig;
 
 class Email extends BaseConfig
 {
-    public string $fromEmail;
+    public string $fromEmail = '';
 
-    public string $fromName;
+    public string $fromName = 'Castopod';
 
-    public string $recipients;
+    public string $recipients = '';
 
     /**
      * The "user agent"
      */
-    public string $userAgent = 'CodeIgniter';
+    public string $userAgent = 'Castopod/' . CP_VERSION;
 
     /**
      * The mail sending protocol: mail, sendmail, smtp
      */
-    public string $protocol = 'mail';
+    public string $protocol = 'smtp';
 
     /**
      * The server path to Sendmail.
@@ -30,19 +30,19 @@ class Email extends BaseConfig
     public string $mailPath = '/usr/sbin/sendmail';
 
     /**
-     * SMTP Server Address
+     * SMTP Server Hostname
      */
-    public string $SMTPHost;
+    public string $SMTPHost = '';
 
     /**
      * SMTP Username
      */
-    public string $SMTPUser;
+    public string $SMTPUser = '';
 
     /**
      * SMTP Password
      */
-    public string $SMTPPass;
+    public string $SMTPPass = '';
 
     /**
      * SMTP Port
@@ -60,7 +60,11 @@ class Email extends BaseConfig
     public bool $SMTPKeepAlive = false;
 
     /**
-     * SMTP Encryption. Either tls or ssl
+     * SMTP Encryption.
+     *
+     * @var string '', 'tls' or 'ssl'. 'tls' will issue a STARTTLS command
+     *             to the server. 'ssl' means implicit SSL. Connection on port
+     *             465 should set this to ''.
      */
     public string $SMTPCrypto = 'tls';
 
@@ -77,7 +81,7 @@ class Email extends BaseConfig
     /**
      * Type of mail, either 'text' or 'html'
      */
-    public string $mailType = 'text';
+    public string $mailType = 'html';
 
     /**
      * Character set (utf-8, iso-8859-1, etc.)
@@ -118,4 +122,11 @@ class Email extends BaseConfig
      * Enable notify message from server
      */
     public bool $DSN = false;
+
+    public function __construct()
+    {
+        parent::__construct();
+
+        $this->userAgent = 'Castopod/' . CP_VERSION . '; +' . base_url('', 'https');
+    }
 }

app/Config/Encryption.php

@@ -58,4 +58,37 @@ class Encryption extends BaseConfig
      * HMAC digest to use, e.g. 'SHA512' or 'SHA256'. Default value is 'SHA512'.
      */
     public string $digest = 'SHA512';
+
+    /**
+     * Whether the cipher-text should be raw. If set to false, then it will be base64 encoded.
+     * This setting is only used by OpenSSLHandler.
+     *
+     * Set to false for CI3 Encryption compatibility.
+     */
+    public bool $rawData = true;
+
+    /**
+     * Encryption key info.
+     * This setting is only used by OpenSSLHandler.
+     *
+     * Set to 'encryption' for CI3 Encryption compatibility.
+     */
+    public string $encryptKeyInfo = '';
+
+    /**
+     * Authentication key info.
+     * This setting is only used by OpenSSLHandler.
+     *
+     * Set to 'authentication' for CI3 Encryption compatibility.
+     */
+    public string $authKeyInfo = '';
+
+    /**
+     * Cipher to use.
+     * This setting is only used by OpenSSLHandler.
+     *
+     * Set to 'AES-128-CBC' to decrypt encrypted data that encrypted
+     * by CI3 Encryption default configuration.
+     */
+    public string $cipher = 'AES-256-CTR';
 }

app/Config/Events.php

@@ -7,9 +7,10 @@ namespace Config;
 use App\Entities\Actor;
 use App\Entities\Post;
 use App\Models\EpisodeModel;
+use CodeIgniter\Debug\Toolbar\Collectors\Database;
 use CodeIgniter\Events\Events;
 use CodeIgniter\Exceptions\FrameworkException;
-use Modules\Auth\Entities\User;
+use CodeIgniter\HotReloader\HotReloader;
 
 /*
  * --------------------------------------------------------------------
@@ -28,8 +29,7 @@ use Modules\Auth\Entities\User;
  *      Events::on('create', [$myInstance, 'myMethod']);
  */
 
-Events::on('pre_system', function () {
-    // @phpstan-ignore-next-line
+Events::on('pre_system', static function (): void {
     if (ENVIRONMENT !== 'testing') {
         if (ini_get('zlib.output_compression')) {
             throw FrameworkException::forEnabledZlibOutputCompression();
@@ -39,9 +39,7 @@ Events::on('pre_system', function () {
             ob_end_flush();
         }
 
-        ob_start(function ($buffer) {
-            return $buffer;
-        });
+        ob_start(static fn ($buffer) => $buffer);
     }
 
     /*
@@ -49,32 +47,21 @@ Events::on('pre_system', function () {
      * Debug Toolbar Listeners.
      * --------------------------------------------------------------------
      * If you delete, they will no longer be collected.
-     *
-     * @phpstan-ignore-next-line
      */
     if (CI_DEBUG && ! is_cli()) {
-        Events::on('DBQuery', 'CodeIgniter\Debug\Toolbar\Collectors\Database::collect');
-        Services::toolbar()->respond();
-    }
-});
-
-Events::on('login', function (User $user): void {
-    helper('auth');
-
-    // set interact_as_actor_id value
-    $userPodcasts = $user->podcasts;
-    if ($userPodcasts = $user->podcasts) {
-        set_interact_as_actor($userPodcasts[0]->actor_id);
+        Events::on('DBQuery', Database::class . '::collect');
+        service('toolbar')
+            ->respond();
+
+        // Hot Reload route - for framework use on the hot reloader.
+        if (ENVIRONMENT === 'development') {
+            service('routes')->get('__hot-reload', static function (): void {
+                (new HotReloader())->run();
+            });
+        }
     }
 });
 
-Events::on('logout', function (User $user): void {
-    helper('auth');
-
-    // remove user's interact_as_actor session
-    remove_interact_as_actor();
-});
-
 /*
  * --------------------------------------------------------------------
  * Fediverse events
@@ -84,7 +71,7 @@ Events::on('logout', function (User $user): void {
  * @param Actor $actor
  * @param Actor $targetActor
  */
-Events::on('on_follow', function ($actor, $targetActor): void {
+Events::on('on_follow', static function ($actor, $targetActor): void {
     if ($actor->is_podcast) {
         cache()
             ->deleteMatching("podcast#{$actor->podcast->id}*");
@@ -104,7 +91,7 @@ Events::on('on_follow', function ($actor, $targetActor): void {
  * @param Actor $actor
  * @param Actor $targetActor
  */
-Events::on('on_undo_follow', function ($actor, $targetActor): void {
+Events::on('on_undo_follow', static function ($actor, $targetActor): void {
     if ($actor->is_podcast) {
         cache()
             ->deleteMatching("podcast#{$actor->podcast->id}*");
@@ -123,25 +110,10 @@ Events::on('on_undo_follow', function ($actor, $targetActor): void {
 /**
  * @param Post $post
  */
-Events::on('on_post_add', function ($post): void {
-    $isReply = $post->in_reply_to_id !== null;
-
-    if ($isReply) {
-        $post = $post->reply_to_post;
-    }
-
-    if ($post->episode_id !== null) {
-        if ($isReply) {
-            model(EpisodeModel::class, false)
-                ->where('id', $post->episode_id)
-                ->increment('comments_count');
-        } else {
-            model(EpisodeModel::class, false)
-                ->where('id', $post->episode_id)
-                ->increment('posts_count');
-        }
-    }
-
+Events::on('on_post_add', static function ($post): void {
+    model(EpisodeModel::class, false)->builder()
+        ->where('id', $post->episode_id)
+        ->increment('posts_count');
     if ($post->actor->is_podcast) {
         // Removing all of the podcast pages is a bit overkill, but works to avoid caching bugs
         // same for other events below
@@ -155,13 +127,9 @@ Events::on('on_post_add', function ($post): void {
 /**
  * @param Post $post
  */
-Events::on('on_post_remove', function ($post): void {
-    if ($post->in_reply_to_id !== null) {
-        Events::trigger('on_post_remove', $post->reply_to_post);
-    }
-
+Events::on('on_post_remove', static function ($post): void {
     if ($episodeId = $post->episode_id) {
-        model(EpisodeModel::class, false)
+        model(EpisodeModel::class, false)->builder()
             ->where('id', $episodeId)
             ->decrement('posts_count');
     }
@@ -181,7 +149,7 @@ Events::on('on_post_remove', function ($post): void {
  * @param Actor $actor
  * @param Post $post
  */
-Events::on('on_post_reblog', function ($actor, $post): void {
+Events::on('on_post_reblog', static function ($actor, $post): void {
     if ($post->actor->is_podcast) {
         cache()
             ->deleteMatching("podcast#{$post->actor->podcast->id}*");
@@ -197,7 +165,6 @@ Events::on('on_post_reblog', function ($actor, $post): void {
 
     cache()
         ->deleteMatching("page_post#{$post->id}*");
-
     if ($post->in_reply_to_id !== null) {
         cache()->deleteMatching("page_post#{$post->in_reply_to_id}");
     }
@@ -206,9 +173,8 @@ Events::on('on_post_reblog', function ($actor, $post): void {
 /**
  * @param Post $reblogPost
  */
-Events::on('on_post_undo_reblog', function ($reblogPost): void {
+Events::on('on_post_undo_reblog', static function ($reblogPost): void {
     $post = $reblogPost->reblog_of_post;
-
     if ($post->actor->is_podcast) {
         cache()
             ->deleteMatching("podcast#{$post->actor->podcast->id}*");
@@ -220,7 +186,6 @@ Events::on('on_post_undo_reblog', function ($reblogPost): void {
         ->deleteMatching("page_post#{$post->id}*");
     cache()
         ->deleteMatching("page_post#{$reblogPost->id}*");
-
     if ($post->in_reply_to_id !== null) {
         cache()->deleteMatching("page_post#{$post->in_reply_to_id}");
     }
@@ -236,10 +201,17 @@ Events::on('on_post_undo_reblog', function ($reblogPost): void {
 /**
  * @param Post $reply
  */
-Events::on('on_post_reply', function ($reply): void {
+Events::on('on_post_reply', static function ($reply): void {
     $post = $reply->reply_to_post;
+    if ($post->in_reply_to_id === null) {
+        model(EpisodeModel::class, false)->builder()
+            ->where('id', $post->episode_id)
+            ->increment('comments_count');
+    }
 
     if ($post->actor->is_podcast) {
+        cache()
+            ->deleteMatching("podcast-{$post->actor->podcast->handle}*");
         cache()
             ->deleteMatching("podcast#{$post->actor->podcast->id}*");
         cache()
@@ -253,10 +225,17 @@ Events::on('on_post_reply', function ($reply): void {
 /**
  * @param Post $reply
  */
-Events::on('on_reply_remove', function ($reply): void {
+Events::on('on_reply_remove', static function ($reply): void {
     $post = $reply->reply_to_post;
+    if ($post->in_reply_to_id === null) {
+        model(EpisodeModel::class, false)->builder()
+            ->where('id', $post->episode_id)
+            ->decrement('comments_count');
+    }
 
     if ($post->actor->is_podcast) {
+        cache()
+            ->deleteMatching("podcast-{$post->actor->podcast->handle}*");
         cache()
             ->deleteMatching("page_podcast#{$post->actor->podcast->id}*");
         cache()
@@ -273,7 +252,7 @@ Events::on('on_reply_remove', function ($reply): void {
  * @param Actor $actor
  * @param Post $post
  */
-Events::on('on_post_favourite', function ($actor, $post): void {
+Events::on('on_post_favourite', static function ($actor, $post): void {
     if ($post->actor->is_podcast) {
         cache()
             ->deleteMatching("podcast#{$post->actor->podcast->id}*");
@@ -283,7 +262,6 @@ Events::on('on_post_favourite', function ($actor, $post): void {
 
     cache()
         ->deleteMatching("page_post#{$post->id}*");
-
     if ($post->in_reply_to_id !== null) {
         cache()->deleteMatching("page_post#{$post->in_reply_to_id}*");
     }
@@ -299,7 +277,7 @@ Events::on('on_post_favourite', function ($actor, $post): void {
  * @param Actor $actor
  * @param Post $post
  */
-Events::on('on_post_undo_favourite', function ($actor, $post): void {
+Events::on('on_post_undo_favourite', static function ($actor, $post): void {
     if ($post->actor->is_podcast) {
         cache()
             ->deleteMatching("podcast#{$post->actor->podcast->id}*");
@@ -309,7 +287,6 @@ Events::on('on_post_undo_favourite', function ($actor, $post): void {
 
     cache()
         ->deleteMatching("page_post#{$post->id}*");
-
     if ($post->in_reply_to_id !== null) {
         cache()->deleteMatching("page_post#{$post->in_reply_to_id}*");
     }
@@ -321,7 +298,7 @@ Events::on('on_post_undo_favourite', function ($actor, $post): void {
     }
 });
 
-Events::on('on_block_actor', function (int $actorId): void {
+Events::on('on_block_actor', static function (int $actorId): void {
     cache()->deleteMatching('page_podcast*');
     cache()
         ->deleteMatching('podcast*');
@@ -329,7 +306,7 @@ Events::on('on_block_actor', function (int $actorId): void {
         ->deleteMatching('page_post*');
 });
 
-Events::on('on_unblock_actor', function (int $actorId): void {
+Events::on('on_unblock_actor', static function (int $actorId): void {
     cache()->deleteMatching('page_podcast*');
     cache()
         ->deleteMatching('podcast*');
@@ -337,7 +314,7 @@ Events::on('on_unblock_actor', function (int $actorId): void {
         ->deleteMatching('page_post*');
 });
 
-Events::on('on_block_domain', function (string $domainName): void {
+Events::on('on_block_domain', static function (string $domainName): void {
     cache()->deleteMatching('page_podcast*');
     cache()
         ->deleteMatching('podcast*');
@@ -345,7 +322,7 @@ Events::on('on_block_domain', function (string $domainName): void {
         ->deleteMatching('page_post*');
 });
 
-Events::on('on_unblock_domain', function (string $domainName): void {
+Events::on('on_unblock_domain', static function (string $domainName): void {
     cache()->deleteMatching('page_podcast*');
     cache()
         ->deleteMatching('podcast*');

app/Config/Exceptions.php

@@ -5,6 +5,10 @@ declare(strict_types=1);
 namespace Config;
 
 use CodeIgniter\Config\BaseConfig;
+use CodeIgniter\Debug\ExceptionHandler;
+use CodeIgniter\Debug\ExceptionHandlerInterface;
+use Psr\Log\LogLevel;
+use Throwable;
 
 /**
  * Setup how the exception handler works.
@@ -29,7 +33,7 @@ class Exceptions extends BaseConfig
      * Any status codes here will NOT be logged if logging is turned on.
      * By default, only 404 (Page Not Found) exceptions are ignored.
      *
-     * @var int[]
+     * @var list<int>
      */
     public array $ignoreCodes = [404];
 
@@ -52,7 +56,53 @@ class Exceptions extends BaseConfig
      * In order to specify 2 levels, use "/" to separate.
      * ex. ['server', 'setup/password', 'secret_token']
      *
-     * @var string[]
+     * @var list<string>
      */
     public array $sensitiveDataInTrace = [];
+
+    /**
+     * --------------------------------------------------------------------------
+     * WHETHER TO THROW AN EXCEPTION ON DEPRECATED ERRORS
+     * --------------------------------------------------------------------------
+     * If set to `true`, DEPRECATED errors are only logged and no exceptions are
+     * thrown. This option also works for user deprecations.
+     */
+    public bool $logDeprecations = true;
+
+    /**
+     * --------------------------------------------------------------------------
+     * LOG LEVEL THRESHOLD FOR DEPRECATIONS
+     * --------------------------------------------------------------------------
+     * If `$logDeprecations` is set to `true`, this sets the log level
+     * to which the deprecation will be logged. This should be one of the log
+     * levels recognized by PSR-3.
+     *
+     * The related `Config\Logger::$threshold` should be adjusted, if needed,
+     * to capture logging the deprecations.
+     */
+    public string $deprecationLogLevel = LogLevel::WARNING;
+
+    /*
+     * DEFINE THE HANDLERS USED
+     * --------------------------------------------------------------------------
+     * Given the HTTP status code, returns exception handler that
+     * should be used to deal with this error. By default, it will run CodeIgniter's
+     * default handler and display the error information in the expected format
+     * for CLI, HTTP, or AJAX requests, as determined by is_cli() and the expected
+     * response format.
+     *
+     * Custom handlers can be returned if you want to handle one or more specific
+     * error codes yourself like:
+     *
+     *      if (in_array($statusCode, [400, 404, 500])) {
+     *          return new \App\Libraries\MyExceptionHandler();
+     *      }
+     *      if ($exception instanceOf PageNotFoundException) {
+     *          return new \App\Libraries\MyExceptionHandler();
+     *      }
+     */
+    public function handler(int $statusCode, Throwable $exception): ExceptionHandlerInterface
+    {
+        return new ExceptionHandler($this);
+    }
 }

app/Config/Feature.php

@@ -12,16 +12,28 @@ use CodeIgniter\Config\BaseConfig;
 class Feature extends BaseConfig
 {
     /**
-     * Enable multiple filters for a route or not
+     * Use improved new auto routing instead of the legacy version.
+     */
+    public bool $autoRoutesImproved = true;
+
+    /**
+     * Use filter execution order in 4.4 or before.
+     */
+    public bool $oldFilterOrder = false;
+
+    /**
+     * The behavior of `limit(0)` in Query Builder.
+     *
+     * If true, `limit(0)` returns all records. (the behavior of 4.4.x or before in version 4.x.)
+     * If false, `limit(0)` returns no records. (the behavior of 3.1.9 or later in version 3.x.)
+     */
+    public bool $limitZeroAsAll = true;
+
+    /**
+     * Use strict location negotiation.
      *
-     * If you enable this:
-     *   - CodeIgniter\CodeIgniter::handleRequest() uses:
-     *     - CodeIgniter\Filters\Filters::enableFilters(), instead of enableFilter()
-     *   - CodeIgniter\CodeIgniter::tryToRouteIt() uses:
-     *     - CodeIgniter\Router\Router::getFilters(), instead of getFilter()
-     *   - CodeIgniter\Router\Router::handle() uses:
-     *     - property $filtersInfo, instead of $filterInfo
-     *     - CodeIgniter\Router\RouteCollection::getFiltersForRoute(), instead of getFilterForRoute()
+     * By default, the locale is selected based on a loose comparison of the language code (ISO 639-1)
+     * Enabling strict comparison will also consider the region code (ISO 3166-1 alpha-2).
      */
-    public bool $multipleFilters = false;
+    public bool $strictLocaleNegotiation = false;
 }

app/Config/Fediverse.php

@@ -11,6 +11,7 @@ declare(strict_types=1);
 namespace Config;
 
 use App\Libraries\NoteObject;
+use Exception;
 use Modules\Fediverse\Config\Fediverse as FediverseBaseConfig;
 
 class Fediverse extends FediverseBaseConfig
@@ -22,17 +23,26 @@ class Fediverse extends FediverseBaseConfig
      */
     public string $noteObject = NoteObject::class;
 
+    public string $defaultAvatarImagePath = 'castopod-avatar_thumbnail.webp';
+
+    public string $defaultAvatarImageMimetype = 'image/webp';
+
     public function __construct()
     {
         parent::__construct();
 
-        $defaultBanner = config('Images')
-            ->podcastBannerDefaultPaths[service('settings')->get('App.theme')] ?? config(
-                'Images'
-            )->podcastBannerDefaultPaths['default'];
+        try {
+            $appTheme = service('settings')
+                ->get('App.theme');
+            $defaultBanner = config('Images')
+                ->podcastBannerDefaultPaths[$appTheme] ?? config('Images')->podcastBannerDefaultPaths['default'];
+        } catch (Exception) {
+            $defaultBanner = config('Images')
+                ->podcastBannerDefaultPaths['default'];
+        }
 
         ['dirname' => $dirname, 'extension' => $extension, 'filename' => $filename] = pathinfo(
-            $defaultBanner['path']
+            $defaultBanner['path'],
         );
         $defaultBannerPath = $filename;
         if ($dirname !== '.') {
@@ -42,7 +52,7 @@ class Fediverse extends FediverseBaseConfig
 
         helper('media');
 
-        $this->defaultCoverImagePath = media_path($defaultBannerPath . '_federation.' . $extension);
+        $this->defaultCoverImagePath = $defaultBannerPath . '_federation.' . $extension;
         $this->defaultCoverImageMimetype = $defaultBanner['mimetype'];
     }
 }

app/Config/Filters.php

@@ -4,52 +4,84 @@ declare(strict_types=1);
 
 namespace Config;
 
+use App\Filters\AllowCorsFilter;
 use CodeIgniter\Config\BaseConfig;
 use CodeIgniter\Filters\CSRF;
 use CodeIgniter\Filters\DebugToolbar;
+use CodeIgniter\Filters\ForceHTTPS;
 use CodeIgniter\Filters\Honeypot;
 use CodeIgniter\Filters\InvalidChars;
+use CodeIgniter\Filters\PageCache;
+use CodeIgniter\Filters\PerformanceMetrics;
 use CodeIgniter\Filters\SecureHeaders;
 use Modules\Auth\Filters\PermissionFilter;
-use Modules\Fediverse\Filters\AllowCorsFilter;
-use Modules\Fediverse\Filters\FediverseFilter;
-use Myth\Auth\Filters\LoginFilter;
-use Myth\Auth\Filters\RoleFilter;
 
 class Filters extends BaseConfig
 {
     /**
      * Configures aliases for Filter classes to make reading things nicer and simpler.
      *
-     * @var array<string, string>
+     * @var array<string, class-string|list<class-string>>
+     *
+     * [filter_name => classname]
+     * or [filter_name => [classname1, classname2, ...]]
      */
     public array $aliases = [
-        'csrf' => CSRF::class,
-        'toolbar' => DebugToolbar::class,
-        'honeypot' => Honeypot::class,
-        'invalidchars' => InvalidChars::class,
+        'csrf'          => CSRF::class,
+        'toolbar'       => DebugToolbar::class,
+        'honeypot'      => Honeypot::class,
+        'invalidchars'  => InvalidChars::class,
         'secureheaders' => SecureHeaders::class,
-        'login' => LoginFilter::class,
-        'role' => RoleFilter::class,
-        'permission' => PermissionFilter::class,
-        'fediverse' => FediverseFilter::class,
-        'allow-cors' => AllowCorsFilter::class,
+        'allow-cors'    => AllowCorsFilter::class,
+        'cors'          => Cors::class,
+        'forcehttps'    => ForceHTTPS::class,
+        'pagecache'     => PageCache::class,
+        'performance'   => PerformanceMetrics::class,
+    ];
+
+    /**
+     * List of special required filters.
+     *
+     * The filters listed here are special. They are applied before and after
+     * other kinds of filters, and always applied even if a route does not exist.
+     *
+     * Filters set by default provide framework functionality. If removed,
+     * those functions will no longer work.
+     *
+     * @see https://codeigniter.com/user_guide/incoming/filters.html#provided-filters
+     *
+     * @var array{before: list<string>, after: list<string>}
+     */
+    public array $required = [
+        'before' => [
+            'forcehttps', // Force Global Secure Requests
+            'pagecache',  // Web Page Caching
+        ],
+        'after' => [
+            'pagecache',   // Web Page Caching
+            'performance', // Performance Metrics
+            'toolbar',     // Debug Toolbar
+        ],
     ];
 
     /**
      * List of filter aliases that are always applied before and after every request.
      *
-     * @var array<string, string[]>
+     * @var array<string, array<string, array<string, string|array<string>>>>|array<string, list<string>>
      */
     public array $globals = [
         'before' => [
             // 'honeypot',
-            // 'csrf',
+            'csrf' => [
+                'except' => [
+                    '@[a-zA-Z0-9\_]{1,32}/inbox',
+                    'api/rest/v1/episodes',
+                    'api/rest/v1/episodes/[0-9]+/publish',
+                ],
+            ],
             // 'invalidchars',
         ],
         'after' => [
-            'toolbar',
-            // 'honeypot',
             // 'honeypot',
             // 'secureheaders',
         ],
@@ -58,9 +90,12 @@ class Filters extends BaseConfig
     /**
      * List of filter aliases that works on a particular HTTP method (GET, POST, etc.).
      *
-     * Example: 'post' => ['csrf', 'throttle']
+     * Example: 'POST' => ['foo', 'bar']
+     *
+     * If you use this, you should disable auto-routing because auto-routing permits any HTTP method to access a
+     * controller. Accessing the controller with a method you don’t expect could bypass the filter.
      *
-     * @var array<string, string[]>
+     * @var array<string, list<string>>
      */
     public array $methods = [];
 
@@ -69,7 +104,7 @@ class Filters extends BaseConfig
      *
      * Example: 'isLoggedIn' => ['before' => ['account/*', 'profiles/*']]
      *
-     * @var array<string, array<string, string[]>>
+     * @var array<string, array<string, list<string>>>
      */
     public array $filters = [];
 
@@ -78,9 +113,14 @@ class Filters extends BaseConfig
         parent::__construct();
 
         $this->filters = [
-            'login' => [
-                'before' => [config('Admin') ->gateway . '*', config('Analytics') ->gateway . '*'],
+            'session' => [
+                'before' => [config('Admin')->gateway . '*', config('Analytics')->gateway . '*'],
+            ],
+            'podcast-unlock' => [
+                'before' => ['*@*/episodes/*'],
             ],
         ];
+
+        $this->aliases['permission'] = PermissionFilter::class;
     }
 }

app/Config/ForeignCharacters.php

@@ -6,6 +6,9 @@ namespace Config;
 
 use CodeIgniter\Config\ForeignCharacters as BaseForeignCharacters;
 
+/**
+ * @immutable
+ */
 class ForeignCharacters extends BaseForeignCharacters
 {
 }

app/Config/Format.php

@@ -5,7 +5,6 @@ declare(strict_types=1);
 namespace Config;
 
 use CodeIgniter\Config\BaseConfig;
-use CodeIgniter\Format\FormatterInterface;
 use CodeIgniter\Format\JSONFormatter;
 use CodeIgniter\Format\XMLFormatter;
 
@@ -24,7 +23,7 @@ class Format extends BaseConfig
      * These formats are only checked when the data passed to the respond()
      * method is an array.
      *
-     * @var string[]
+     * @var list<string>
      */
     public array $supportedResponseFormats = [
         'application/json',
@@ -45,8 +44,8 @@ class Format extends BaseConfig
      */
     public array $formatters = [
         'application/json' => JSONFormatter::class,
-        'application/xml' => XMLFormatter::class,
-        'text/xml' => XMLFormatter::class,
+        'application/xml'  => XMLFormatter::class,
+        'text/xml'         => XMLFormatter::class,
     ];
 
     /**
@@ -61,19 +60,7 @@ class Format extends BaseConfig
      */
     public array $formatterOptions = [
         'application/json' => JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES,
-        'application/xml' => 0,
-        'text/xml' => 0,
+        'application/xml'  => 0,
+        'text/xml'         => 0,
     ];
-
-    //--------------------------------------------------------------------
-
-    /**
-     * A Factory method to return the appropriate formatter for the given mime type.
-     *
-     * @deprecated This is an alias of `\CodeIgniter\Format\Format::getFormatter`. Use that instead.
-     */
-    public function getFormatter(string $mime): FormatterInterface
-    {
-        return Services::format()->getFormatter($mime);
-    }
 }

app/Config/Generators.php

@@ -25,23 +25,22 @@ class Generators extends BaseConfig
      *
      * YOU HAVE BEEN WARNED!
      *
-     * @var array<string, string>
+     * @var array<string, string|array<string,string>>
      */
     public array $views = [
-        'make:command' =>
-            'CodeIgniter\Commands\Generators\Views\command.tpl.php',
-        'make:config' => 'CodeIgniter\Commands\Generators\Views\config.tpl.php',
-        'make:controller' =>
-            'CodeIgniter\Commands\Generators\Views\controller.tpl.php',
-        'make:entity' => 'CodeIgniter\Commands\Generators\Views\entity.tpl.php',
-        'make:filter' => 'CodeIgniter\Commands\Generators\Views\filter.tpl.php',
-        'make:migration' =>
-            'CodeIgniter\Commands\Generators\Views\migration.tpl.php',
-        'make:model' => 'CodeIgniter\Commands\Generators\Views\model.tpl.php',
-        'make:seeder' => 'CodeIgniter\Commands\Generators\Views\seeder.tpl.php',
-        'make:validation' =>
-            'CodeIgniter\Commands\Generators\Views\validation.tpl.php',
-        'session:migration' =>
-            'CodeIgniter\Commands\Generators\Views\migration.tpl.php',
+        'make:cell' => [
+            'class' => 'CodeIgniter\Commands\Generators\Views\cell.tpl.php',
+            'view'  => 'CodeIgniter\Commands\Generators\Views\cell_view.tpl.php',
+        ],
+        'make:command'      => 'CodeIgniter\Commands\Generators\Views\command.tpl.php',
+        'make:config'       => 'CodeIgniter\Commands\Generators\Views\config.tpl.php',
+        'make:controller'   => 'CodeIgniter\Commands\Generators\Views\controller.tpl.php',
+        'make:entity'       => 'CodeIgniter\Commands\Generators\Views\entity.tpl.php',
+        'make:filter'       => 'CodeIgniter\Commands\Generators\Views\filter.tpl.php',
+        'make:migration'    => 'CodeIgniter\Commands\Generators\Views\migration.tpl.php',
+        'make:model'        => 'CodeIgniter\Commands\Generators\Views\model.tpl.php',
+        'make:seeder'       => 'CodeIgniter\Commands\Generators\Views\seeder.tpl.php',
+        'make:validation'   => 'CodeIgniter\Commands\Generators\Views\validation.tpl.php',
+        'session:migration' => 'CodeIgniter\Commands\Generators\Views\migration.tpl.php',
     ];
 }

app/Config/Honeypot.php

@@ -30,6 +30,15 @@ class Honeypot extends BaseConfig
 
     /**
      * Honeypot container
+     *
+     * If you enabled CSP, you can remove `style="display:none"`.
      */
     public string $container = '<div style="display:none">{template}</div>';
+
+    /**
+     * The id attribute for Honeypot container tag
+     *
+     * Used when CSP is enabled.
+     */
+    public string $containerId = 'hpc';
 }

app/Config/Images.php

@@ -26,7 +26,7 @@ class Images extends BaseConfig
      * @var array<string, string>
      */
     public array $handlers = [
-        'gd' => GDHandler::class,
+        'gd'      => GDHandler::class,
         'imagick' => ImageMagickHandler::class,
     ];
 
@@ -51,55 +51,55 @@ class Images extends BaseConfig
      */
     public array $podcastCoverSizes = [
         'tiny' => [
-            'width' => 40,
-            'height' => 40,
-            'mimetype' => 'image/webp',
+            'width'     => 40,
+            'height'    => 40,
+            'mimetype'  => 'image/webp',
             'extension' => 'webp',
         ],
         'thumbnail' => [
-            'width' => 150,
-            'height' => 150,
-            'mimetype' => 'image/webp',
+            'width'     => 150,
+            'height'    => 150,
+            'mimetype'  => 'image/webp',
             'extension' => 'webp',
         ],
         'medium' => [
-            'width' => 320,
-            'height' => 320,
-            'mimetype' => 'image/webp',
+            'width'     => 320,
+            'height'    => 320,
+            'mimetype'  => 'image/webp',
             'extension' => 'webp',
         ],
         'large' => [
-            'width' => 1024,
-            'height' => 1024,
-            'mimetype' => 'image/webp',
+            'width'     => 1024,
+            'height'    => 1024,
+            'mimetype'  => 'image/webp',
             'extension' => 'webp',
         ],
         'feed' => [
-            'width' => 1400,
+            'width'  => 1400,
             'height' => 1400,
         ],
         'id3' => [
-            'width' => 500,
+            'width'  => 500,
             'height' => 500,
         ],
         'og' => [
-            'width' => 1200,
+            'width'  => 1200,
             'height' => 1200,
         ],
         'federation' => [
-            'width' => 400,
+            'width'  => 400,
             'height' => 400,
         ],
         'webmanifest192' => [
-            'width' => 192,
-            'height' => 192,
-            'mimetype' => 'image/png',
+            'width'     => 192,
+            'height'    => 192,
+            'mimetype'  => 'image/png',
             'extension' => 'png',
         ],
         'webmanifest512' => [
-            'width' => 512,
-            'height' => 512,
-            'mimetype' => 'image/png',
+            'width'     => 512,
+            'height'    => 512,
+            'mimetype'  => 'image/png',
             'extension' => 'png',
         ],
     ];
@@ -113,24 +113,24 @@ class Images extends BaseConfig
      */
     public array $podcastBannerSizes = [
         'small' => [
-            'width' => 320,
-            'height' => 128,
-            'mimetype' => 'image/webp',
+            'width'     => 320,
+            'height'    => 128,
+            'mimetype'  => 'image/webp',
             'extension' => 'webp',
         ],
         'medium' => [
-            'width' => 960,
-            'height' => 320,
-            'mimetype' => 'image/webp',
+            'width'     => 960,
+            'height'    => 320,
+            'mimetype'  => 'image/webp',
             'extension' => 'webp',
         ],
         'federation' => [
-            'width' => 1500,
+            'width'  => 1500,
             'height' => 500,
         ],
     ];
 
-    public string $avatarDefaultPath = 'castopod-avatar.jpg';
+    public string $avatarDefaultPath = 'assets/images/castopod-avatar.jpg';
 
     public string $avatarDefaultMimeType = 'image/jpg';
 
@@ -139,31 +139,31 @@ class Images extends BaseConfig
      */
     public array $podcastBannerDefaultPaths = [
         'default' => [
-            'path' => 'castopod-banner-pine.jpg',
+            'path'     => 'assets/images/castopod-banner-pine.jpg',
             'mimetype' => 'image/jpeg',
         ],
         'pine' => [
-            'path' => 'castopod-banner-pine.jpg',
+            'path'     => 'assets/images/castopod-banner-pine.jpg',
             'mimetype' => 'image/jpeg',
         ],
         'crimson' => [
-            'path' => 'castopod-banner-crimson.jpg',
+            'path'     => 'assets/images/castopod-banner-crimson.jpg',
             'mimetype' => 'image/jpeg',
         ],
         'amber' => [
-            'path' => 'castopod-banner-amber.jpg',
+            'path'     => 'assets/images/castopod-banner-amber.jpg',
             'mimetype' => 'image/jpeg',
         ],
         'lake' => [
-            'path' => 'castopod-banner-lake.jpg',
+            'path'     => 'assets/images/castopod-banner-lake.jpg',
             'mimetype' => 'image/jpeg',
         ],
         'jacaranda' => [
-            'path' => 'castopod-banner-jacaranda.jpg',
+            'path'     => 'assets/images/castopod-banner-jacaranda.jpg',
             'mimetype' => 'image/jpeg',
         ],
         'onyx' => [
-            'path' => 'castopod-banner-onyx.jpg',
+            'path'     => 'assets/images/castopod-banner-onyx.jpg',
             'mimetype' => 'image/jpeg',
         ],
     ];
@@ -181,26 +181,25 @@ class Images extends BaseConfig
      */
     public array $personAvatarSizes = [
         'federation' => [
-            'width' => 400,
+            'width'  => 400,
             'height' => 400,
         ],
         'tiny' => [
-            'width' => 40,
-            'height' => 40,
-            'mimetype' => 'image/webp',
+            'width'     => 40,
+            'height'    => 40,
+            'mimetype'  => 'image/webp',
             'extension' => 'webp',
         ],
         'thumbnail' => [
-            'width' => 150,
-            'height' => 150,
-            'mimetype' => 'image/webp',
+            'width'     => 150,
+            'height'    => 150,
+            'mimetype'  => 'image/webp',
             'extension' => 'webp',
         ],
         'medium' => [
-            'width' => 320,
-            'height' => 320,
-            'mimetype' =>
-             'image/webp',
+            'width'     => 320,
+            'height'    => 320,
+            'mimetype'  => 'image/webp',
             'extension' => 'webp',
         ],
     ];

app/Config/Kint.php

@@ -4,12 +4,12 @@ declare(strict_types=1);
 
 namespace Config;
 
-use CodeIgniter\Config\BaseConfig;
-use Kint\Renderer\Renderer;
+use Kint\Parser\ConstructablePluginInterface;
+use Kint\Renderer\Rich\TabPluginInterface;
+use Kint\Renderer\Rich\ValuePluginInterface;
 
 /**
  * --------------------------------------------------------------------------
- * Kint
  * --------------------------------------------------------------------------
  *
  * We use Kint's `RichRenderer` and `CLIRenderer`. This area contains options
@@ -17,7 +17,7 @@ use Kint\Renderer\Renderer;
  *
  * @see https://kint-php.github.io/kint/ for details on these settings.
  */
-class Kint extends BaseConfig
+class Kint
 {
     /*
     |--------------------------------------------------------------------------
@@ -26,9 +26,9 @@ class Kint extends BaseConfig
     */
 
     /**
-     * @var string[]
+     * @var list<class-string<ConstructablePluginInterface>|ConstructablePluginInterface>|null
      */
-    public array $plugins = [];
+    public ?array $plugins = [];
 
     public int $maxDepth = 6;
 
@@ -46,17 +46,15 @@ class Kint extends BaseConfig
 
     public bool $richFolder = false;
 
-    public int $richSort = Renderer::SORT_FULL;
-
     /**
-     * @var string[]
+     * @var array<string, class-string<ValuePluginInterface>>|null
      */
-    public array $richObjectPlugins = [];
+    public ?array $richObjectPlugins = [];
 
     /**
-     * @var string[]
+     * @var array<string, class-string<TabPluginInterface>>|null
      */
-    public array $richTabPlugins = [];
+    public ?array $richTabPlugins = [];
 
     /*
     |--------------------------------------------------------------------------

app/Config/Logger.php

@@ -38,9 +38,9 @@ class Logger extends BaseConfig
      * For a live site you'll usually enable Critical or higher (3) to be logged otherwise
      * your log files will fill up very fast.
      *
-     * @var int|int[]
+     * @var int|list<int>
      */
-    public int | array $threshold = 4;
+    public int | array $threshold = (ENVIRONMENT === 'production') ? 4 : 9;
 
     /**
      * --------------------------------------------------------------------------
@@ -60,7 +60,7 @@ class Logger extends BaseConfig
      * The logging system supports multiple actions to be taken when something
      * is logged. This is done by allowing for multiple Handlers, special classes
      * designed to write the log to their chosen destinations, whether that is
-     * a file on the getServer, a cloud-based service, or even taking actions such
+     * a file on the server, a cloud-based service, or even taking actions such
      * as emailing the dev team.
      *
      * Each handler is defined by the class name used for that handler, and it
@@ -75,7 +75,7 @@ class Logger extends BaseConfig
      * Handlers are executed in the order defined in this array, starting with
      * the handler on top and continuing down.
      *
-     * @var array<string, mixed>
+     * @var array<class-string, array<string, int|list<string>|string>>
      */
     public array $handlers = [
         /*
@@ -114,5 +114,32 @@ class Logger extends BaseConfig
              */
             'path' => '',
         ],
+
+        /*
+         * The ChromeLoggerHandler requires the use of the Chrome web browser
+         * and the ChromeLogger extension. Uncomment this block to use it.
+         */
+        // 'CodeIgniter\Log\Handlers\ChromeLoggerHandler' => [
+        //     /*
+        //      * The log levels that this handler will handle.
+        //      */
+        //     'handles' => ['critical', 'alert', 'emergency', 'debug',
+        //                   'error', 'info', 'notice', 'warning'],
+        // ],
+
+        /*
+         * The ErrorlogHandler writes the logs to PHP's native `error_log()` function.
+         * Uncomment this block to use it.
+         */
+        // 'CodeIgniter\Log\Handlers\ErrorlogHandler' => [
+        //     /* The log levels this handler can handle. */
+        //     'handles' => ['critical', 'alert', 'emergency', 'debug', 'error', 'info', 'notice', 'warning'],
+        //
+        //     /*
+        //     * The message type where the error should go. Can be 0 or 4, or use the
+        //     * class constants: `ErrorlogHandler::TYPE_OS` (0) or `ErrorlogHandler::TYPE_SAPI` (4)
+        //     */
+        //     'messageType' => 0,
+        // ],
     ];
 }

app/Config/Migrations.php

@@ -27,9 +27,7 @@ class Migrations extends BaseConfig
      *
      * This is the name of the table that will store the current migrations state.
      * When migrations runs it will store in a database table which migration
-     * level the system is at. It then compares the migration level in this
-     * table to the $config['migration_version'] if they are not the same it
-     * will migrate up. This must be set.
+     * files have already been run.
      */
     public string $table = 'migrations';