[danog]

Psalm 7.0.0-rc10 replaces the old purity annotations with capability sets, and it requires a contract anywhere it can infer one. psalm/phar is now ^7.0.0-rc10. PHP 8.1 CI still removes that dev dependency before install, same as before.

EventLoop's scheduling methods (queue, defer, delay, repeat, onReadable, onWritable, onSignal, enable, disable, cancel, reference, unreference, isEnabled, isReferenced, getSuspension) and Suspension::resume()/suspend()/throw() are @psalm-capabilities io, the same capability Psalm gives usleep(). A suspended fiber doesn't see what the driver and the other fibers do while it waits, the same way Psalm treats Fiber::suspend(). Psalm can't infer that boundary, so those EventLoop methods suppress ImpureMethodCall and DriverSuspension suppresses ImmutableDependency. Consumers get the contract from the package itself, with no stub to load.

Driver itself stays impure. Implementations mutate callback state, read the clock and run user callbacks. Concrete methods are annotated with the narrower set Psalm infers (property reads, writes on $this, and so on). FiberLocal and InvalidCallbackError are @api, so private helpers used only by that public surface are not reported as unused.

The memory benchmark no longer instantiates a driver from a getopt string. The HTTP suspension example prints a raw response header to the CLI, so the two taint issues on that file are suppressed in psalm.xml.