From d2359a00d1186cd68a9ef48955c2386961fc9b53 Mon Sep 17 00:00:00 2001
From: Ondrej Mirtes <ondrej@mirtes.cz>
Date: Thu, 27 Aug 2026 18:15:12 +0200
Subject: [PATCH] Include a bootstrap autoloader's located files for real
 before re-running it

The file-read trap's pseudo-include succeeds with dummy data, so a
bootstrap autoloader that memoizes a require's result - deptrac's
bootstrap caches $loader = require .../vendor/autoload.php in a closure
static - is left holding an int instead of the class loader and never
retries the require. The run-for-real fallback then re-runs a permanently
broken autoloader and the class stays unresolvable: on a project using
deptrac's contract interfaces this surfaced as "Internal error: Interface
DEPTRAC_INTERNAL\...\EventSubscriberInterface not found", aborting the
analysis.

When the located files declare nothing under the wanted name and the
redeclare gate allows a real run, include those files for real first -
that performs the include the poisoned autoloader can no longer do
itself. An autoload-infrastructure file registers its nested class
loader, and locating the class again consults it through the file-read
trap, so the class is still found statically.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014fMtimQECyyBNKTmFddr8L
---
 .github/workflows/e2e-tests.yml               |  3 +++
 e2e/bug-15102d/dep/E2eNestedClassLoader.php   | 21 +++++++++++++++++++
 e2e/bug-15102d/dep/SomeInterface.php          | 10 +++++++++
 e2e/bug-15102d/dep/autoload.php               |  8 +++++++
 e2e/bug-15102d/dep/bootstrap.php              | 21 +++++++++++++++++++
 e2e/bug-15102d/phpstan.dist.neon              |  6 ++++++
 e2e/bug-15102d/test.php                       | 15 +++++++++++++
 .../AutoloadFunctionsSourceLocator.php        | 21 +++++++++++++++++++
 8 files changed, 105 insertions(+)
 create mode 100644 e2e/bug-15102d/dep/E2eNestedClassLoader.php
 create mode 100644 e2e/bug-15102d/dep/SomeInterface.php
 create mode 100644 e2e/bug-15102d/dep/autoload.php
 create mode 100644 e2e/bug-15102d/dep/bootstrap.php
 create mode 100644 e2e/bug-15102d/phpstan.dist.neon
 create mode 100644 e2e/bug-15102d/test.php

diff --git a/.github/workflows/e2e-tests.yml b/.github/workflows/e2e-tests.yml
index 84f234836b..4ea4016bae 100644
--- a/.github/workflows/e2e-tests.yml
+++ b/.github/workflows/e2e-tests.yml
@@ -151,6 +151,9 @@ jobs:
               cd e2e/bug-15102c
               composer install
               ../../bin/phpstan analyze
+          - script: |
+              cd e2e/bug-15102d
+              ../../bin/phpstan analyze
           - script: |
               cd e2e/bug-14724
               composer install
diff --git a/e2e/bug-15102d/dep/E2eNestedClassLoader.php b/e2e/bug-15102d/dep/E2eNestedClassLoader.php
new file mode 100644
index 0000000000..b40badffb8
--- /dev/null
+++ b/e2e/bug-15102d/dep/E2eNestedClassLoader.php
@@ -0,0 +1,21 @@
+<?php declare(strict_types = 1);
+
+// The shape of Composer's ClassLoader: register() + loadClass() reading a file.
+final class E2eNestedClassLoader
+{
+
+	public function register(): void
+	{
+		spl_autoload_register([$this, 'loadClass']);
+	}
+
+	public function loadClass(string $class): void
+	{
+		if ($class !== 'E2eDepInternal\\SomeInterface') {
+			return;
+		}
+
+		require __DIR__ . '/SomeInterface.php';
+	}
+
+}
diff --git a/e2e/bug-15102d/dep/SomeInterface.php b/e2e/bug-15102d/dep/SomeInterface.php
new file mode 100644
index 0000000000..8f88c3471d
--- /dev/null
+++ b/e2e/bug-15102d/dep/SomeInterface.php
@@ -0,0 +1,10 @@
+<?php declare(strict_types = 1);
+
+namespace E2eDepInternal;
+
+interface SomeInterface
+{
+
+	public function handle(): string;
+
+}
diff --git a/e2e/bug-15102d/dep/autoload.php b/e2e/bug-15102d/dep/autoload.php
new file mode 100644
index 0000000000..4dc4ff2925
--- /dev/null
+++ b/e2e/bug-15102d/dep/autoload.php
@@ -0,0 +1,8 @@
+<?php declare(strict_types = 1);
+
+require_once __DIR__ . '/E2eNestedClassLoader.php';
+
+$loader = new E2eNestedClassLoader();
+$loader->register();
+
+return $loader;
diff --git a/e2e/bug-15102d/dep/bootstrap.php b/e2e/bug-15102d/dep/bootstrap.php
new file mode 100644
index 0000000000..3999b34096
--- /dev/null
+++ b/e2e/bug-15102d/dep/bootstrap.php
@@ -0,0 +1,21 @@
+<?php declare(strict_types = 1);
+
+// The shape deptrac's bootstrap.php creates: an autoloader that lazily requires a nested
+// Composer-style autoloader and memoizes the result in a closure static. The file-read
+// trap's pseudo-include makes that require "succeed" with dummy data, so the memo ends up
+// holding an int and the require is never retried.
+spl_autoload_register(static function (string $class): void {
+	static $composerAutoloader;
+
+	if (!str_starts_with($class, 'E2eDepInternal\\')) {
+		return;
+	}
+
+	if ($composerAutoloader === null) {
+		$composerAutoloader = require __DIR__ . '/autoload.php';
+	}
+
+	if ($composerAutoloader instanceof E2eNestedClassLoader) {
+		$composerAutoloader->loadClass($class);
+	}
+});
diff --git a/e2e/bug-15102d/phpstan.dist.neon b/e2e/bug-15102d/phpstan.dist.neon
new file mode 100644
index 0000000000..ceaba424f3
--- /dev/null
+++ b/e2e/bug-15102d/phpstan.dist.neon
@@ -0,0 +1,6 @@
+parameters:
+	level: 8
+	bootstrapFiles:
+		- dep/bootstrap.php
+	paths:
+		- test.php
diff --git a/e2e/bug-15102d/test.php b/e2e/bug-15102d/test.php
new file mode 100644
index 0000000000..8143081e89
--- /dev/null
+++ b/e2e/bug-15102d/test.php
@@ -0,0 +1,15 @@
+<?php declare(strict_types = 1);
+
+namespace E2eMemoizedRequire;
+
+use E2eDepInternal\SomeInterface;
+
+final class Handler implements SomeInterface
+{
+
+	public function handle(): string
+	{
+		return 'ok';
+	}
+
+}
diff --git a/src/Reflection/BetterReflection/SourceLocator/AutoloadFunctionsSourceLocator.php b/src/Reflection/BetterReflection/SourceLocator/AutoloadFunctionsSourceLocator.php
index ba554f1950..cadd99460d 100644
--- a/src/Reflection/BetterReflection/SourceLocator/AutoloadFunctionsSourceLocator.php
+++ b/src/Reflection/BetterReflection/SourceLocator/AutoloadFunctionsSourceLocator.php
@@ -11,6 +11,7 @@
 use function class_exists;
 use function function_exists;
 use function interface_exists;
+use function is_file;
 use function opcache_invalidate;
 use function PHPStan\autoloadFunctions;
 use function PHPStan\autoloadFunctionsPrependedToComposer;
@@ -92,6 +93,26 @@ public function locateIdentifier(Reflector $reflector, Identifier $identifier):
 			return null;
 		}
 
+		// Include the located files for real first. The probe's pseudo-include succeeds with
+		// dummy data, so an autoloader that memoizes such a require's result - deptrac's
+		// bootstrap caches `$loader = require .../vendor/autoload.php` in a closure static -
+		// is left holding an int and never retries it. This include does what that autoloader
+		// can no longer do itself: an autoload-infrastructure file registers its own class
+		// loader, and locating the class again consults it through the file-read trap.
+		foreach ($locatedFiles as $locatedFile) {
+			if (!is_file($locatedFile)) {
+				continue;
+			}
+			(static function (string $file): void {
+				require $file;
+			})($locatedFile);
+		}
+
+		$reflection = $this->locateWithoutAutoloading($reflector, $identifier);
+		if ($reflection !== null) {
+			return $reflection;
+		}
+
 		foreach ($autoloadFunctions as $autoloadFunction) {
 			$autoloadFunction($className);