PR 709 dropped the Composer files entry for flight/autoload.php and that file returned early when vendor/autoload.php existed, so Loader::autoload() never registered. path() still added directories; namespaced app classes never loaded. Upgrades must not break that.
Assign Request::$allowMethodOverride on the class before any Request is
built, so the constructor does not cache an overridden verb while the
static still defaults to true. When override is disabled and an override
header or _method field is present, recompute the cached request method
so early Flight::request() access cannot keep a spoofed DELETE/PUT/PATCH.
Add regression tests for the Engine start path, early request construction,
_method, and intentional manual method assignment without override input.
make:controller now generates App\Controller under app/Controller/, and
ai:generate-instructions writes only AGENTS.md with Twig/SimplePdo
conventions. Clear a stale PHPStan baseline entry and resolve PHPCS
issues so multi-PHP tests/phpstan/phpcs pass cleanly.
On Windows, PHP_EOL is \\r\\n but the CLI library writes \\n to the
output file. The removeColors() helper converts \\r\\n→\\n, so using
str_replace(PHP_EOL, '') afterwards failed to strip those \\n on
Windows, leaving newlines in the haystack while the needle had none.
Fix: replace both \\r\\n and \\n so all newline variants are stripped
from both needle and haystack before comparison, making the test
platform-independent.
String middleware classes that do not exist or fail container
resolution are now validated at request time, matching route
handler behavior. Middleware that only implements one phase
(before/after) continues to be skipped for the other phase.
Fixes#696