From 154cafa6d900c9edbb3a460896fec2f8809a1165 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?H=C3=A9ctor=20Franco?= <hectorfranco@nowo.tech>
Date: Thu, 1 Oct 2026 10:15:11 +0200
Subject: [PATCH] fix: Igor WorkerSafe for once-per-worker LibreOffice boot
 check.

Co-authored-by: Cursor <cursoragent@cursor.com>
---
 demo/symfony8/composer.lock                    |  6 +++++-
 demo/symfony8/config/reference.php             |  1 +
 docs/CHANGELOG.md                              | 10 ++++++++++
 docs/FRANKENPHP-WORKER-AUDIT.md                |  3 ++-
 docs/UPGRADING.md                              | 10 ++++++++++
 specs/001-baseline/spec.md                     |  2 +-
 src/EventListener/RuntimeBootCheckListener.php |  5 +++++
 7 files changed, 34 insertions(+), 3 deletions(-)

diff --git a/demo/symfony8/composer.lock b/demo/symfony8/composer.lock
index a9dd4a7..84cd653 100644
--- a/demo/symfony8/composer.lock
+++ b/demo/symfony8/composer.lock
@@ -200,7 +200,7 @@
             "dist": {
                 "type": "path",
                 "url": "/var/word-to-pdf-bundle",
-                "reference": "d78f6d06166edd071a8c1d809a53b07a2d377ef4"
+                "reference": "320e2d00b620035c6077b2a0b4d457630a2a31dc"
             },
             "require": {
                 "ext-fileinfo": "*",
@@ -215,6 +215,7 @@
             },
             "require-dev": {
                 "friendsofphp/php-cs-fixer": "^3.0",
+                "igor-php/igor-php": "^0.9.7",
                 "nowo-tech/phpstan-frankenphp": "^1.0",
                 "phpstan/extension-installer": "^1.0",
                 "phpstan/phpstan": "^2.0",
@@ -278,6 +279,9 @@
                 ],
                 "rector-dry": [
                     "@php vendor/bin/rector --dry-run --no-progress-bar"
+                ],
+                "igor": [
+                    "igor-php --no-agent ."
                 ]
             },
             "license": [
diff --git a/demo/symfony8/config/reference.php b/demo/symfony8/config/reference.php
index a401a86..de0e52c 100644
--- a/demo/symfony8/config/reference.php
+++ b/demo/symfony8/config/reference.php
@@ -752,6 +752,7 @@
  * @psalm-type NowoWordToPdfConfig = array{
  *     engine?: scalar|Param|null, // Conversion backend: libreoffice (LibreOffice Writer / soffice). // Default: "libreoffice"
  *     default_profile?: scalar|Param|null, // Default: "default"
+ *     max_batch_size?: int|Param, // Maximum number of Word sources accepted by convertMany() (DoS guard). // Default: 10
  *     profiles?: array<string, array{ // Default: []
  *         binary_path?: scalar|Param|null, // Absolute path to soffice/libreoffice. Null = auto-detect. // Default: null
  *         temp_dir?: scalar|Param|null, // Writable temp directory. Null = sys_get_temp_dir(). // Default: null
diff --git a/docs/CHANGELOG.md b/docs/CHANGELOG.md
index a48be5a..b27e25b 100644
--- a/docs/CHANGELOG.md
+++ b/docs/CHANGELOG.md
@@ -8,6 +8,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
 ## Table of contents
 
 - [[Unreleased]](#unreleased)
+- [[1.3.2] - 2026-10-01](#132-2026-10-01)
 - [[1.3.1] - 2026-09-28](#131-2026-09-28)
 - [[1.3.0] - 2026-09-28](#130-2026-09-28)
 - [[1.2.10] - 2026-09-27](#1210-2026-09-27)
@@ -26,6 +27,15 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
 
 ## [Unreleased]
 
+## [1.3.2] - 2026-10-01
+
+### Fixed
+
+- **Igor IncompleteReset:** `RuntimeBootCheckListener::$checked` is marked `#[WorkerSafe]` (once-per-worker LibreOffice probe, **REQ-RUNTIME-002**) so `make igor` reports 0 WARN without changing the intentional no-op `reset()`.
+
+[1.3.2]: https://github.com/nowo-tech/WordToPdfBundle/releases/tag/v1.3.2
+[1.3.1]: https://github.com/nowo-tech/WordToPdfBundle/releases/tag/v1.3.1
+
 ## [1.3.1] - 2026-09-28
 
 ### Fixed
diff --git a/docs/FRANKENPHP-WORKER-AUDIT.md b/docs/FRANKENPHP-WORKER-AUDIT.md
index dbf71bb..9fe4ab3 100644
--- a/docs/FRANKENPHP-WORKER-AUDIT.md
+++ b/docs/FRANKENPHP-WORKER-AUDIT.md
@@ -7,6 +7,7 @@
 | Audit date | 2026-09-25 |
 | Method | Manual review of every PHP file under `src/` + PHPStan `ruleset-classic.neon` + `ruleset-worker-no-kernel-reset.neon` |
 | Remediation (2026-09-25) | `WordToPdfBundle::getContainerExtension()` made stateless; `RuntimeBootCheckListener` implements `ResetInterface` with a **no-op** `reset()` so the once-per-worker LibreOffice probe survives `services_resetter`; phpstan includes `ruleset-worker-no-kernel-reset.neon` |
+| Remediation (2026-10-01) | `$checked` marked `#[WorkerSafe]` so Igor IncompleteReset is silent while the probe remains once-per-worker |
 | **Verdict** | ✅ **Viable under scenario B** (and A) — no request-scoped state leaks; LibreOffice runs as an isolated child process with explicit timeouts |
 
 ## Execution model assumed
@@ -22,7 +23,7 @@ A bundle that is safe under **B** is safe under **A** and under classic mode / P
 
 | Area | Status | Notes |
 |------|--------|-------|
-| Mutable state in shared services | ✅ | Only `RuntimeBootCheckListener::$checked` (intentional once-per-worker; `reset()` is a no-op) |
+| Mutable state in shared services | ✅ | Only `RuntimeBootCheckListener::$checked` (intentional once-per-worker; `#[WorkerSafe]`; `reset()` is a no-op) |
 | Static properties / `static` locals | ✅ | None that hold request data |
 | `ResetInterface` / `kernel.reset` | ✅ | Boot-check listener implements `ResetInterface`; `reset()` intentionally does **not** clear `$checked` |
 | Request / user / locale in services | ✅ | Paths, options and profiles are method arguments |
diff --git a/docs/UPGRADING.md b/docs/UPGRADING.md
index 8453e42..c45bb9f 100644
--- a/docs/UPGRADING.md
+++ b/docs/UPGRADING.md
@@ -6,6 +6,8 @@
 - [From 1.2.8 to 1.2.9](#from-128-to-129)
 - [From 1.2.7 to 1.2.8](#from-127-to-128)
 - [Unreleased](#unreleased)
+- [To 1.3.2](#to-132)
+- [To 1.3.1](#to-131)
 - [To 1.3.0](#to-130)
 - [To 1.2.10](#to-1210)
 - [To 1.2.7](#to-127)
@@ -48,6 +50,14 @@ composer update nowo-tech/word-to-pdf-bundle
 
 ## Unreleased
 
+## To 1.3.2
+
+From **1.3.1** — Igor `#[WorkerSafe]` on the once-per-worker boot-check flag. **No application upgrade steps.**
+
+```bash
+composer update nowo-tech/word-to-pdf-bundle
+```
+
 ## To 1.3.1
 
 From **1.3.0** — CI style only. **No application upgrade steps.**
diff --git a/specs/001-baseline/spec.md b/specs/001-baseline/spec.md
index bf20cc0..eef2bc4 100644
--- a/specs/001-baseline/spec.md
+++ b/specs/001-baseline/spec.md
@@ -71,7 +71,7 @@ Production source count: every PHP class under `src/` plus `src/Resources/config
 
 1. **Given** profile `timeout: N`, **When** LibreOffice exceeds N seconds, **Then** `ConversionFailedException` (timed out) is thrown and the process is stopped.
 2. **Given** a hanging binary, **When** idle timeout elapses, **Then** the same failure path runs (no endless worker block).
-3. **Given** FrankenPHP worker with kernel reuse and `check_on_boot: true`, **When** multiple main requests hit the same worker, **Then** the LibreOffice boot probe runs at most once (`RuntimeBootCheckListener::reset()` is a no-op).
+3. **Given** FrankenPHP worker with kernel reuse and `check_on_boot: true`, **When** multiple main requests hit the same worker, **Then** the LibreOffice boot probe runs at most once (`RuntimeBootCheckListener::reset()` is a no-op; `$checked` is `#[WorkerSafe]` for Igor).
 4. **Given** `phpstan.neon.dist` includes `ruleset-worker-no-kernel-reset.neon`, **When** `composer phpstan` runs, **Then** analysis passes with no `frankenphp.worker.noMissingResetInterface` errors on bundle services.
 
 ---
diff --git a/src/EventListener/RuntimeBootCheckListener.php b/src/EventListener/RuntimeBootCheckListener.php
index 3bf095b..9b5a442 100644
--- a/src/EventListener/RuntimeBootCheckListener.php
+++ b/src/EventListener/RuntimeBootCheckListener.php
@@ -4,6 +4,7 @@
 
 namespace Nowo\WordToPdfBundle\EventListener;
 
+use IgorPhp\IgorBundle\Attribute\WorkerSafe;
 use Nowo\WordToPdfBundle\Config\ProfileResolver;
 use Nowo\WordToPdfBundle\Exception\MissingDependencyException;
 use Nowo\WordToPdfBundle\Runtime\RuntimeRequirementsChecker;
@@ -22,6 +23,10 @@
  */
 final class RuntimeBootCheckListener implements EventSubscriberInterface, ResetInterface
 {
+    #[WorkerSafe(
+        scope: 'boot-time',
+        reason: 'Once-per-worker LibreOffice probe (REQ-RUNTIME-002); intentionally survives services_resetter',
+    )]
     private bool $checked = false;
 
     private readonly LoggerInterface $logger;