Add migration CLI, test suite, and comment support

Features:
- WP-CLI migration commands for posts/pages/comments
  - wp djot analyze/migrate/rollback
  - wp djot analyze-comments/migrate-comments/rollback-comments
- Full test suite (42 tests, 119 assertions)
- HTMLPurifier integration for extra XSS protection (optional)
- Comment Djot processing with process_full_comments option

Changes:
- Add phpstan/phpcs to require-dev with PhpCollective standard
- Add phpunit with WordPress function mocks
- Fix mixed HTML/Markdown migration (process Markdown first)
- CI uses composer scripts instead of runtime tool install

Author: dereuromark

.github/workflows/ci.yml

@@ -13,10 +13,10 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        php-version: ['8.2', '8.3', '8.4']
+        php-version: ['8.2', '8.5']
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Setup PHP
         uses: shivammathur/setup-php@v2
@@ -38,35 +38,35 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Setup PHP
         uses: shivammathur/setup-php@v2
         with:
           php-version: '8.2'
-          tools: composer:v2, phpstan
+          tools: composer:v2
 
       - name: Install dependencies
         run: composer install --prefer-dist --no-progress
 
       - name: Run PHPStan
-        run: phpstan analyse --configuration=phpstan.neon || true
+        run: composer stan
 
   coding-standards:
     name: Coding Standards
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Setup PHP
         uses: shivammathur/setup-php@v2
         with:
           php-version: '8.2'
-          tools: composer:v2, phpcs
+          tools: composer:v2
 
       - name: Install dependencies
         run: composer install --prefer-dist --no-progress
 
       - name: Check coding standards
-        run: phpcs --standard=phpcs.xml || true
+        run: composer cs-check

CONTRIBUTING.md

@@ -0,0 +1,71 @@
+# Contributing to WP Djot
+
+Contributions are welcome! Please feel free to submit a Pull Request.
+
+## How to Contribute
+
+1. Fork the repository
+2. Create your feature branch (`git checkout -b feature/amazing-feature`)
+3. Commit your changes (`git commit -m 'Add some amazing feature'`)
+4. Push to the branch (`git push origin feature/amazing-feature`)
+5. Open a Pull Request
+
+## Development Setup
+
+### Requirements
+
+- PHP 8.2 or higher
+- Composer
+- WordPress 6.0+ (for testing)
+- WP-CLI (optional, for CLI command testing)
+
+### Installation
+
+```bash
+git clone https://github.com/php-collective/wp-djot.git
+cd wp-djot
+composer install
+```
+
+### Running Tests
+
+```bash
+composer test
+```
+
+### Code Style
+
+This project follows PSR-12 coding standards.
+
+```bash
+# Check code style
+composer cs-check
+
+# Fix code style automatically
+composer cs-fix
+```
+
+### Static Analysis
+
+```bash
+composer stan
+```
+
+## Pull Request Guidelines
+
+- Follow the existing code style
+- Add tests for new features
+- Update documentation as needed
+- Keep commits focused and atomic
+- Write clear commit messages
+
+## Reporting Issues
+
+- Use the GitHub issue tracker
+- Include WordPress and PHP version
+- Provide steps to reproduce the issue
+- Include any error messages
+
+## License
+
+By contributing, you agree that your contributions will be licensed under the MIT License.

composer.json

@@ -13,6 +13,14 @@
         "php": ">=8.2",
         "php-collective/djot": "^0.1"
     },
+    "require-dev": {
+        "phpunit/phpunit": "^11.4 || ^12.3",
+        "php-collective/code-sniffer": "dev-master",
+        "phpstan/phpstan": "^2.0"
+    },
+    "suggest": {
+        "ezyang/htmlpurifier": "For additional XSS protection on comments (^4.18)"
+    },
     "autoload": {
         "psr-4": {
             "WpDjot\\": "src/"
@@ -21,8 +29,22 @@
             "src/functions.php"
         ]
     },
+    "autoload-dev": {
+        "psr-4": {
+            "WpDjot\\Test\\": "tests/"
+        }
+    },
     "config": {
+        "allow-plugins": {
+            "dealerdirect/phpcodesniffer-composer-installer": true
+        },
         "optimize-autoloader": true,
         "sort-packages": true
+    },
+    "scripts": {
+        "cs-check": "phpcs --colors --parallel=16",
+        "cs-fix": "phpcbf --colors --parallel=16",
+        "stan": "phpstan analyze",
+        "test": "phpunit"
     }
 }

phpcs.xml

@@ -1,25 +1,20 @@
 <?xml version="1.0"?>
-<ruleset name="WP Djot Coding Standards">
-    <description>PHP CodeSniffer configuration for WP Djot</description>
+<ruleset name="wp-djot">
+    <arg value="nps"/>
 
-    <!-- Scan these files -->
-    <file>./src</file>
-    <file>./wp-djot.php</file>
-    <file>./uninstall.php</file>
+    <file>src/</file>
 
-    <!-- Exclude vendor directory -->
     <exclude-pattern>*/vendor/*</exclude-pattern>
-    <exclude-pattern>*/node_modules/*</exclude-pattern>
 
-    <!-- Use PSR-12 as base -->
-    <rule ref="PSR12"/>
+    <rule ref="PhpCollective"/>
 
-    <!-- Additional rules -->
-    <rule ref="Generic.Arrays.DisallowLongArraySyntax"/>
-    <rule ref="Generic.PHP.RequireStrictTypes"/>
+    <rule ref="SlevomatCodingStandard.Functions.RequireTrailingCommaInDeclaration"/>
+    <rule ref="SlevomatCodingStandard.Functions.RequireTrailingCommaInClosureUse"/>
 
-    <!-- Allow WordPress functions -->
+    <!-- WordPress plugin files have side effects by design -->
     <rule ref="PSR1.Files.SideEffects.FoundWithSymbols">
         <exclude-pattern>wp-djot.php</exclude-pattern>
+        <exclude-pattern>uninstall.php</exclude-pattern>
     </rule>
+
 </ruleset>

phpunit.xml.dist

@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<phpunit
+    bootstrap="tests/bootstrap.php"
+    colors="true"
+    stopOnFailure="false"
+    cacheDirectory=".phpunit.cache"
+>
+    <testsuites>
+        <testsuite name="WP Djot Test Suite">
+            <directory>tests/TestCase</directory>
+        </testsuite>
+    </testsuites>
+    <source>
+        <include>
+            <directory suffix=".php">src</directory>
+        </include>
+    </source>
+</phpunit>

src/Admin/Settings.php

@@ -9,8 +9,14 @@
  */
 class Settings
 {
+    /**
+     * @var string
+     */
     private const OPTION_GROUP = 'wp_djot_settings';
 
+    /**
+     * @var string
+     */
     private const PAGE_SLUG = 'wp-djot-settings';
 
     /**
@@ -41,6 +47,7 @@ public function addMenuPage(): void
      * Add settings link to plugin list.
      *
      * @param array<string> $links
+     *
      * @return array<string>
      */
     public function addSettingsLink(array $links): array
@@ -111,7 +118,16 @@ public function registerSettings(): void
             [$this, 'renderCheckboxField'],
             self::PAGE_SLUG,
             'wp_djot_content',
-            ['field' => 'process_full_content', 'description' => __('Process entire post/page content as Djot. When disabled, only [djot]...[/djot] blocks are processed.', 'wp-djot')],
+            ['field' => 'process_full_content', 'description' => __('Process entire post/page content as Djot. When disabled, only {djot}...{/djot} blocks are processed.', 'wp-djot')],
+        );
+
+        add_settings_field(
+            'process_full_comments',
+            __('Process Full Comments', 'wp-djot'),
+            [$this, 'renderCheckboxField'],
+            self::PAGE_SLUG,
+            'wp_djot_content',
+            ['field' => 'process_full_comments', 'description' => __('Process entire comment content as Djot. When disabled, only {djot}...{/djot} blocks are processed.', 'wp-djot')],
         );
 
         // Security Settings Section
@@ -188,6 +204,7 @@ public function registerSettings(): void
      * Sanitize settings before saving.
      *
      * @param array<string, mixed> $input
+     *
      * @return array<string, mixed>
      */
     public function sanitizeSettings(array $input): array
@@ -197,6 +214,7 @@ public function sanitizeSettings(array $input): array
             'enable_pages' => !empty($input['enable_pages']),
             'enable_comments' => !empty($input['enable_comments']),
             'process_full_content' => !empty($input['process_full_content']),
+            'process_full_comments' => !empty($input['process_full_comments']),
             'safe_mode' => !empty($input['safe_mode']),
             'highlight_code' => !empty($input['highlight_code']),
             'highlight_theme' => sanitize_text_field($input['highlight_theme'] ?? 'github'),