feat(plugin): guard Rust-owned classes the worker has no proxy for

The worker's autoloader fell through to the real Composer source for every
Rust-owned FQCN without a proxy stub, so plugin code doing `new Filesystem()`
or subclassing `LibraryInstaller` silently ran on a second instance the Rust
side never sees. An unimplemented part of the plugin API has to fail with an
explicit error naming it, not quietly work on a disconnected copy.

The stub generator now emits a guard class for each of those FQCNs: the real
declaration, hierarchy and constants, with every constructor and method
raising an explicit error. References satisfied by the declaration alone
(`instanceof`, `X::class`, `Link::TYPE_REQUIRE`) keep working. Two FQCNs stay
resolvable to the real class, each listed with the worker-side mechanism that
makes a natively constructed instance correct.

The error had nowhere to go: `Installer::run` dropped the `Result` of both
`dispatch_script` calls, so an exception from a listener ended in exit 0.
Both propagate now, the way the exception does upstream.

Three real-plugin E2E comparisons stop at a guard and are ignored, each
naming the class it needs.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

13 files changed, 1003 insertions, 0 deletions

diff --git a/crates/shirabe-php-rpc/php/guards/Composer/Downloader/FileDownloader.php b/crates/shirabe-php-rpc/php/guards/Composer/Downloader/FileDownloader.php
new file mode 100644
index 00000000..0232b002
--- /dev/null
+++ b/crates/shirabe-php-rpc/php/guards/Composer/Downloader/FileDownloader.php
@@ -0,0 +1,105 @@
+<?php
+
+// Generated by scripts/plugin-stub-generator; do not edit by hand.
+// Guard for Composer\Downloader\FileDownloader.
+// The Rust side owns this class and the worker has no proxy for it, so this
+// declaration shadows the real one: the constants and the hierarchy stay, while
+// constructing it or calling anything on it raises an explicit error.
+
+namespace Composer\Downloader;
+
+use Composer\Config;
+use Composer\Cache;
+use Composer\IO\IOInterface;
+use Composer\Package\PackageInterface;
+use Composer\EventDispatcher\EventDispatcher;
+use Composer\Util\Filesystem;
+use Composer\Util\HttpDownloader;
+use Composer\Util\ProcessExecutor;
+use React\Promise\PromiseInterface;
+
+class FileDownloader implements DownloaderInterface, ChangeReportInterface
+{
+    public static $downloadMetadata = [];
+    public static $responseHeaders = [];
+
+    public function __construct(IOInterface $io, Config $config, HttpDownloader $httpDownloader, ?EventDispatcher $eventDispatcher = null, ?Cache $cache = null, ?Filesystem $filesystem = null, ?ProcessExecutor $process = null)
+    {
+        \ShirabeUnsupportedClass::fail(self::class, '__construct');
+    }
+
+    public function getInstallationSource(): string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'getInstallationSource');
+    }
+
+    public function download(PackageInterface $package, string $path, ?PackageInterface $prevPackage = null, bool $output = true): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'download');
+    }
+
+    public function prepare(string $type, PackageInterface $package, string $path, ?PackageInterface $prevPackage = null): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'prepare');
+    }
+
+    public function cleanup(string $type, PackageInterface $package, string $path, ?PackageInterface $prevPackage = null): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'cleanup');
+    }
+
+    public function install(PackageInterface $package, string $path, bool $output = true): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'install');
+    }
+
+    protected function getDistPath(PackageInterface $package, int $component): string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'getDistPath');
+    }
+
+    protected function clearLastCacheWrite(PackageInterface $package): void
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'clearLastCacheWrite');
+    }
+
+    protected function addCleanupPath(PackageInterface $package, string $path): void
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'addCleanupPath');
+    }
+
+    protected function removeCleanupPath(PackageInterface $package, string $path): void
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'removeCleanupPath');
+    }
+
+    public function update(PackageInterface $initial, PackageInterface $target, string $path): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'update');
+    }
+
+    public function remove(PackageInterface $package, string $path, bool $output = true): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'remove');
+    }
+
+    protected function getFileName(PackageInterface $package, string $path): string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'getFileName');
+    }
+
+    protected function getInstallOperationAppendix(PackageInterface $package, string $path): string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'getInstallOperationAppendix');
+    }
+
+    protected function processUrl(PackageInterface $package, string $url): string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'processUrl');
+    }
+
+    public function getLocalChanges(PackageInterface $package, string $path): ?string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'getLocalChanges');
+    }
+}
diff --git a/crates/shirabe-php-rpc/php/guards/Composer/Downloader/FossilDownloader.php b/crates/shirabe-php-rpc/php/guards/Composer/Downloader/FossilDownloader.php
new file mode 100644
index 00000000..1990705e
--- /dev/null
+++ b/crates/shirabe-php-rpc/php/guards/Composer/Downloader/FossilDownloader.php
@@ -0,0 +1,100 @@
+<?php
+
+// Generated by scripts/plugin-stub-generator; do not edit by hand.
+// Guard for Composer\Downloader\FossilDownloader.
+// The Rust side owns this class and the worker has no proxy for it, so this
+// declaration shadows the real one: the constants and the hierarchy stay, while
+// constructing it or calling anything on it raises an explicit error.
+
+namespace Composer\Downloader;
+
+use React\Promise\PromiseInterface;
+use Composer\Package\PackageInterface;
+
+class FossilDownloader extends VcsDownloader
+{
+    protected function doDownload(PackageInterface $package, string $path, string $url, ?PackageInterface $prevPackage = null): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'doDownload');
+    }
+
+    protected function doInstall(PackageInterface $package, string $path, string $url): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'doInstall');
+    }
+
+    protected function doUpdate(PackageInterface $initial, PackageInterface $target, string $path, string $url): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'doUpdate');
+    }
+
+    public function getLocalChanges(PackageInterface $package, string $path): ?string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'getLocalChanges');
+    }
+
+    protected function getCommitLogs(string $fromReference, string $toReference, string $path): string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'getCommitLogs');
+    }
+
+    protected function hasMetadataRepository(string $path): bool
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'hasMetadataRepository');
+    }
+
+    public function __construct(IOInterface $io, Config $config, ?ProcessExecutor $process = null, ?Filesystem $fs = null)
+    {
+        \ShirabeUnsupportedClass::fail(self::class, '__construct');
+    }
+
+    public function getInstallationSource(): string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'getInstallationSource');
+    }
+
+    public function download(PackageInterface $package, string $path, ?PackageInterface $prevPackage = null): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'download');
+    }
+
+    public function prepare(string $type, PackageInterface $package, string $path, ?PackageInterface $prevPackage = null): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'prepare');
+    }
+
+    public function cleanup(string $type, PackageInterface $package, string $path, ?PackageInterface $prevPackage = null): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'cleanup');
+    }
+
+    public function install(PackageInterface $package, string $path): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'install');
+    }
+
+    public function update(PackageInterface $initial, PackageInterface $target, string $path): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'update');
+    }
+
+    public function remove(PackageInterface $package, string $path): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'remove');
+    }
+
+    public function getVcsReference(PackageInterface $package, string $path): ?string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'getVcsReference');
+    }
+
+    protected function cleanChanges(PackageInterface $package, string $path, bool $update): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'cleanChanges');
+    }
+
+    protected function reapplyChanges(string $path): void
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'reapplyChanges');
+    }
+}
diff --git a/crates/shirabe-php-rpc/php/guards/Composer/Downloader/GitDownloader.php b/crates/shirabe-php-rpc/php/guards/Composer/Downloader/GitDownloader.php
new file mode 100644
index 00000000..3ab711fb
--- /dev/null
+++ b/crates/shirabe-php-rpc/php/guards/Composer/Downloader/GitDownloader.php
@@ -0,0 +1,149 @@
+<?php
+
+// Generated by scripts/plugin-stub-generator; do not edit by hand.
+// Guard for Composer\Downloader\GitDownloader.
+// The Rust side owns this class and the worker has no proxy for it, so this
+// declaration shadows the real one: the constants and the hierarchy stay, while
+// constructing it or calling anything on it raises an explicit error.
+
+namespace Composer\Downloader;
+
+use Composer\Config;
+use Composer\IO\IOInterface;
+use Composer\Package\PackageInterface;
+use Composer\Util\Filesystem;
+use Composer\Util\ProcessExecutor;
+use React\Promise\PromiseInterface;
+
+class GitDownloader extends VcsDownloader implements DvcsDownloaderInterface
+{
+    public function __construct(IOInterface $io, Config $config, ?ProcessExecutor $process = null, ?Filesystem $fs = null)
+    {
+        \ShirabeUnsupportedClass::fail(self::class, '__construct');
+    }
+
+    protected function doDownload(PackageInterface $package, string $path, string $url, ?PackageInterface $prevPackage = null): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'doDownload');
+    }
+
+    protected function doInstall(PackageInterface $package, string $path, string $url): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'doInstall');
+    }
+
+    protected function doUpdate(PackageInterface $initial, PackageInterface $target, string $path, string $url): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'doUpdate');
+    }
+
+    public function getLocalChanges(PackageInterface $package, string $path): ?string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'getLocalChanges');
+    }
+
+    public function getUnpushedChanges(PackageInterface $package, string $path): ?string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'getUnpushedChanges');
+    }
+
+    protected function cleanChanges(PackageInterface $package, string $path, bool $update): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'cleanChanges');
+    }
+
+    protected function reapplyChanges(string $path): void
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'reapplyChanges');
+    }
+
+    protected function updateToCommit(PackageInterface $package, string $path, string $reference, string $prettyVersion): ?string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'updateToCommit');
+    }
+
+    protected function updateOriginUrl(string $path, string $url): void
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'updateOriginUrl');
+    }
+
+    protected function setPushUrl(string $path, string $url): void
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'setPushUrl');
+    }
+
+    protected function getCommitLogs(string $fromReference, string $toReference, string $path): string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'getCommitLogs');
+    }
+
+    protected function discardChanges(string $path): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'discardChanges');
+    }
+
+    protected function stashChanges(string $path): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'stashChanges');
+    }
+
+    protected function viewDiff(string $path): void
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'viewDiff');
+    }
+
+    protected function normalizePath(string $path): string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'normalizePath');
+    }
+
+    protected function hasMetadataRepository(string $path): bool
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'hasMetadataRepository');
+    }
+
+    protected function getShortHash(string $reference): string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'getShortHash');
+    }
+
+    public function getInstallationSource(): string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'getInstallationSource');
+    }
+
+    public function download(PackageInterface $package, string $path, ?PackageInterface $prevPackage = null): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'download');
+    }
+
+    public function prepare(string $type, PackageInterface $package, string $path, ?PackageInterface $prevPackage = null): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'prepare');
+    }
+
+    public function cleanup(string $type, PackageInterface $package, string $path, ?PackageInterface $prevPackage = null): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'cleanup');
+    }
+
+    public function install(PackageInterface $package, string $path): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'install');
+    }
+
+    public function update(PackageInterface $initial, PackageInterface $target, string $path): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'update');
+    }
+
+    public function remove(PackageInterface $package, string $path): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'remove');
+    }
+
+    public function getVcsReference(PackageInterface $package, string $path): ?string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'getVcsReference');
+    }
+}
diff --git a/crates/shirabe-php-rpc/php/guards/Composer/Downloader/GzipDownloader.php b/crates/shirabe-php-rpc/php/guards/Composer/Downloader/GzipDownloader.php
new file mode 100644
index 00000000..df6da1d5
--- /dev/null
+++ b/crates/shirabe-php-rpc/php/guards/Composer/Downloader/GzipDownloader.php
@@ -0,0 +1,45 @@
+<?php
+
+// Generated by scripts/plugin-stub-generator; do not edit by hand.
+// Guard for Composer\Downloader\GzipDownloader.
+// The Rust side owns this class and the worker has no proxy for it, so this
+// declaration shadows the real one: the constants and the hierarchy stay, while
+// constructing it or calling anything on it raises an explicit error.
+
+namespace Composer\Downloader;
+
+use React\Promise\PromiseInterface;
+use Composer\Package\PackageInterface;
+
+class GzipDownloader extends ArchiveDownloader
+{
+    public function __construct()
+    {
+        \ShirabeUnsupportedClass::fail(self::class, '__construct');
+    }
+
+    protected function extract(PackageInterface $package, string $file, string $path): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'extract');
+    }
+
+    public function prepare(string $type, PackageInterface $package, string $path, ?PackageInterface $prevPackage = null): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'prepare');
+    }
+
+    public function cleanup(string $type, PackageInterface $package, string $path, ?PackageInterface $prevPackage = null): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'cleanup');
+    }
+
+    public function install(PackageInterface $package, string $path, bool $output = true): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'install');
+    }
+
+    protected function getInstallOperationAppendix(PackageInterface $package, string $path): string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'getInstallOperationAppendix');
+    }
+}
diff --git a/crates/shirabe-php-rpc/php/guards/Composer/Downloader/HgDownloader.php b/crates/shirabe-php-rpc/php/guards/Composer/Downloader/HgDownloader.php
new file mode 100644
index 00000000..24abe7d2
--- /dev/null
+++ b/crates/shirabe-php-rpc/php/guards/Composer/Downloader/HgDownloader.php
@@ -0,0 +1,100 @@
+<?php
+
+// Generated by scripts/plugin-stub-generator; do not edit by hand.
+// Guard for Composer\Downloader\HgDownloader.
+// The Rust side owns this class and the worker has no proxy for it, so this
+// declaration shadows the real one: the constants and the hierarchy stay, while
+// constructing it or calling anything on it raises an explicit error.
+
+namespace Composer\Downloader;
+
+use React\Promise\PromiseInterface;
+use Composer\Package\PackageInterface;
+
+class HgDownloader extends VcsDownloader
+{
+    protected function doDownload(PackageInterface $package, string $path, string $url, ?PackageInterface $prevPackage = null): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'doDownload');
+    }
+
+    protected function doInstall(PackageInterface $package, string $path, string $url): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'doInstall');
+    }
+
+    protected function doUpdate(PackageInterface $initial, PackageInterface $target, string $path, string $url): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'doUpdate');
+    }
+
+    public function getLocalChanges(PackageInterface $package, string $path): ?string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'getLocalChanges');
+    }
+
+    protected function getCommitLogs(string $fromReference, string $toReference, string $path): string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'getCommitLogs');
+    }
+
+    protected function hasMetadataRepository(string $path): bool
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'hasMetadataRepository');
+    }
+
+    public function __construct(IOInterface $io, Config $config, ?ProcessExecutor $process = null, ?Filesystem $fs = null)
+    {
+        \ShirabeUnsupportedClass::fail(self::class, '__construct');
+    }
+
+    public function getInstallationSource(): string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'getInstallationSource');
+    }
+
+    public function download(PackageInterface $package, string $path, ?PackageInterface $prevPackage = null): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'download');
+    }
+
+    public function prepare(string $type, PackageInterface $package, string $path, ?PackageInterface $prevPackage = null): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'prepare');
+    }
+
+    public function cleanup(string $type, PackageInterface $package, string $path, ?PackageInterface $prevPackage = null): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'cleanup');
+    }
+
+    public function install(PackageInterface $package, string $path): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'install');
+    }
+
+    public function update(PackageInterface $initial, PackageInterface $target, string $path): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'update');
+    }
+
+    public function remove(PackageInterface $package, string $path): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'remove');
+    }
+
+    public function getVcsReference(PackageInterface $package, string $path): ?string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'getVcsReference');
+    }
+
+    protected function cleanChanges(PackageInterface $package, string $path, bool $update): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'cleanChanges');
+    }
+
+    protected function reapplyChanges(string $path): void
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'reapplyChanges');
+    }
+}
diff --git a/crates/shirabe-php-rpc/php/guards/Composer/Downloader/PathDownloader.php b/crates/shirabe-php-rpc/php/guards/Composer/Downloader/PathDownloader.php
new file mode 100644
index 00000000..f565b3c4
--- /dev/null
+++ b/crates/shirabe-php-rpc/php/guards/Composer/Downloader/PathDownloader.php
@@ -0,0 +1,48 @@
+<?php
+
+// Generated by scripts/plugin-stub-generator; do not edit by hand.
+// Guard for Composer\Downloader\PathDownloader.
+// The Rust side owns this class and the worker has no proxy for it, so this
+// declaration shadows the real one: the constants and the hierarchy stay, while
+// constructing it or calling anything on it raises an explicit error.
+
+namespace Composer\Downloader;
+
+use React\Promise\PromiseInterface;
+use Composer\Package\PackageInterface;
+
+class PathDownloader extends FileDownloader implements VcsCapableDownloaderInterface
+{
+    private const STRATEGY_SYMLINK = 10;
+    private const STRATEGY_MIRROR = 20;
+
+    public function __construct()
+    {
+        \ShirabeUnsupportedClass::fail(self::class, '__construct');
+    }
+
+    public function download(PackageInterface $package, string $path, ?PackageInterface $prevPackage = null, bool $output = true): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'download');
+    }
+
+    public function install(PackageInterface $package, string $path, bool $output = true): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'install');
+    }
+
+    public function remove(PackageInterface $package, string $path, bool $output = true): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'remove');
+    }
+
+    public function getVcsReference(PackageInterface $package, string $path): ?string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'getVcsReference');
+    }
+
+    protected function getInstallOperationAppendix(PackageInterface $package, string $path): string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'getInstallOperationAppendix');
+    }
+}
diff --git a/crates/shirabe-php-rpc/php/guards/Composer/Downloader/PerforceDownloader.php b/crates/shirabe-php-rpc/php/guards/Composer/Downloader/PerforceDownloader.php
new file mode 100644
index 00000000..91eb45cf
--- /dev/null
+++ b/crates/shirabe-php-rpc/php/guards/Composer/Downloader/PerforceDownloader.php
@@ -0,0 +1,111 @@
+<?php
+
+// Generated by scripts/plugin-stub-generator; do not edit by hand.
+// Guard for Composer\Downloader\PerforceDownloader.
+// The Rust side owns this class and the worker has no proxy for it, so this
+// declaration shadows the real one: the constants and the hierarchy stay, while
+// constructing it or calling anything on it raises an explicit error.
+
+namespace Composer\Downloader;
+
+use React\Promise\PromiseInterface;
+use Composer\Package\PackageInterface;
+use Composer\Util\Perforce;
+
+class PerforceDownloader extends VcsDownloader
+{
+    protected function doDownload(PackageInterface $package, string $path, string $url, ?PackageInterface $prevPackage = null): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'doDownload');
+    }
+
+    public function doInstall(PackageInterface $package, string $path, string $url): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'doInstall');
+    }
+
+    public function initPerforce(PackageInterface $package, string $path, string $url): void
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'initPerforce');
+    }
+
+    protected function doUpdate(PackageInterface $initial, PackageInterface $target, string $path, string $url): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'doUpdate');
+    }
+
+    public function getLocalChanges(PackageInterface $package, string $path): ?string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'getLocalChanges');
+    }
+
+    protected function getCommitLogs(string $fromReference, string $toReference, string $path): string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'getCommitLogs');
+    }
+
+    public function setPerforce(Perforce $perforce): void
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'setPerforce');
+    }
+
+    protected function hasMetadataRepository(string $path): bool
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'hasMetadataRepository');
+    }
+
+    public function __construct(IOInterface $io, Config $config, ?ProcessExecutor $process = null, ?Filesystem $fs = null)
+    {
+        \ShirabeUnsupportedClass::fail(self::class, '__construct');
+    }
+
+    public function getInstallationSource(): string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'getInstallationSource');
+    }
+
+    public function download(PackageInterface $package, string $path, ?PackageInterface $prevPackage = null): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'download');
+    }
+
+    public function prepare(string $type, PackageInterface $package, string $path, ?PackageInterface $prevPackage = null): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'prepare');
+    }
+
+    public function cleanup(string $type, PackageInterface $package, string $path, ?PackageInterface $prevPackage = null): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'cleanup');
+    }
+
+    public function install(PackageInterface $package, string $path): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'install');
+    }
+
+    public function update(PackageInterface $initial, PackageInterface $target, string $path): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'update');
+    }
+
+    public function remove(PackageInterface $package, string $path): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'remove');
+    }
+
+    public function getVcsReference(PackageInterface $package, string $path): ?string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'getVcsReference');
+    }
+
+    protected function cleanChanges(PackageInterface $package, string $path, bool $update): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'cleanChanges');
+    }
+
+    protected function reapplyChanges(string $path): void
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'reapplyChanges');
+    }
+}
diff --git a/crates/shirabe-php-rpc/php/guards/Composer/Downloader/PharDownloader.php b/crates/shirabe-php-rpc/php/guards/Composer/Downloader/PharDownloader.php
new file mode 100644
index 00000000..84314215
--- /dev/null
+++ b/crates/shirabe-php-rpc/php/guards/Composer/Downloader/PharDownloader.php
@@ -0,0 +1,45 @@
+<?php
+
+// Generated by scripts/plugin-stub-generator; do not edit by hand.
+// Guard for Composer\Downloader\PharDownloader.
+// The Rust side owns this class and the worker has no proxy for it, so this
+// declaration shadows the real one: the constants and the hierarchy stay, while
+// constructing it or calling anything on it raises an explicit error.
+
+namespace Composer\Downloader;
+
+use React\Promise\PromiseInterface;
+use Composer\Package\PackageInterface;
+
+class PharDownloader extends ArchiveDownloader
+{
+    public function __construct()
+    {
+        \ShirabeUnsupportedClass::fail(self::class, '__construct');
+    }
+
+    protected function extract(PackageInterface $package, string $file, string $path): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'extract');
+    }
+
+    public function prepare(string $type, PackageInterface $package, string $path, ?PackageInterface $prevPackage = null): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'prepare');
+    }
+
+    public function cleanup(string $type, PackageInterface $package, string $path, ?PackageInterface $prevPackage = null): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'cleanup');
+    }
+
+    public function install(PackageInterface $package, string $path, bool $output = true): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'install');
+    }
+
+    protected function getInstallOperationAppendix(PackageInterface $package, string $path): string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'getInstallOperationAppendix');
+    }
+}
diff --git a/crates/shirabe-php-rpc/php/guards/Composer/Downloader/RarDownloader.php b/crates/shirabe-php-rpc/php/guards/Composer/Downloader/RarDownloader.php
new file mode 100644
index 00000000..74dbfa9f
--- /dev/null
+++ b/crates/shirabe-php-rpc/php/guards/Composer/Downloader/RarDownloader.php
@@ -0,0 +1,45 @@
+<?php
+
+// Generated by scripts/plugin-stub-generator; do not edit by hand.
+// Guard for Composer\Downloader\RarDownloader.
+// The Rust side owns this class and the worker has no proxy for it, so this
+// declaration shadows the real one: the constants and the hierarchy stay, while
+// constructing it or calling anything on it raises an explicit error.
+
+namespace Composer\Downloader;
+
+use React\Promise\PromiseInterface;
+use Composer\Package\PackageInterface;
+
+class RarDownloader extends ArchiveDownloader
+{
+    public function __construct()
+    {
+        \ShirabeUnsupportedClass::fail(self::class, '__construct');
+    }
+
+    protected function extract(PackageInterface $package, string $file, string $path): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'extract');
+    }
+
+    public function prepare(string $type, PackageInterface $package, string $path, ?PackageInterface $prevPackage = null): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'prepare');
+    }
+
+    public function cleanup(string $type, PackageInterface $package, string $path, ?PackageInterface $prevPackage = null): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'cleanup');
+    }
+
+    public function install(PackageInterface $package, string $path, bool $output = true): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'install');
+    }
+
+    protected function getInstallOperationAppendix(PackageInterface $package, string $path): string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'getInstallOperationAppendix');
+    }
+}
diff --git a/crates/shirabe-php-rpc/php/guards/Composer/Downloader/SvnDownloader.php b/crates/shirabe-php-rpc/php/guards/Composer/Downloader/SvnDownloader.php
new file mode 100644
index 00000000..9e776766
--- /dev/null
+++ b/crates/shirabe-php-rpc/php/guards/Composer/Downloader/SvnDownloader.php
@@ -0,0 +1,110 @@
+<?php
+
+// Generated by scripts/plugin-stub-generator; do not edit by hand.
+// Guard for Composer\Downloader\SvnDownloader.
+// The Rust side owns this class and the worker has no proxy for it, so this
+// declaration shadows the real one: the constants and the hierarchy stay, while
+// constructing it or calling anything on it raises an explicit error.
+
+namespace Composer\Downloader;
+
+use Composer\Package\PackageInterface;
+use React\Promise\PromiseInterface;
+
+class SvnDownloader extends VcsDownloader
+{
+    protected function doDownload(PackageInterface $package, string $path, string $url, ?PackageInterface $prevPackage = null): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'doDownload');
+    }
+
+    protected function doInstall(PackageInterface $package, string $path, string $url): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'doInstall');
+    }
+
+    protected function doUpdate(PackageInterface $initial, PackageInterface $target, string $path, string $url): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'doUpdate');
+    }
+
+    public function getLocalChanges(PackageInterface $package, string $path): ?string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'getLocalChanges');
+    }
+
+    protected function execute(PackageInterface $package, string $baseUrl, array $command, string $url, ?string $cwd = null, ?string $path = null): string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'execute');
+    }
+
+    protected function cleanChanges(PackageInterface $package, string $path, bool $update): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'cleanChanges');
+    }
+
+    protected function getCommitLogs(string $fromReference, string $toReference, string $path): string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'getCommitLogs');
+    }
+
+    protected function discardChanges(string $path): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'discardChanges');
+    }
+
+    protected function hasMetadataRepository(string $path): bool
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'hasMetadataRepository');
+    }
+
+    public function __construct(IOInterface $io, Config $config, ?ProcessExecutor $process = null, ?Filesystem $fs = null)
+    {
+        \ShirabeUnsupportedClass::fail(self::class, '__construct');
+    }
+
+    public function getInstallationSource(): string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'getInstallationSource');
+    }
+
+    public function download(PackageInterface $package, string $path, ?PackageInterface $prevPackage = null): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'download');
+    }
+
+    public function prepare(string $type, PackageInterface $package, string $path, ?PackageInterface $prevPackage = null): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'prepare');
+    }
+
+    public function cleanup(string $type, PackageInterface $package, string $path, ?PackageInterface $prevPackage = null): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'cleanup');
+    }
+
+    public function install(PackageInterface $package, string $path): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'install');
+    }
+
+    public function update(PackageInterface $initial, PackageInterface $target, string $path): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'update');
+    }
+
+    public function remove(PackageInterface $package, string $path): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'remove');
+    }
+
+    public function getVcsReference(PackageInterface $package, string $path): ?string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'getVcsReference');
+    }
+
+    protected function reapplyChanges(string $path): void
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'reapplyChanges');
+    }
+}
diff --git a/crates/shirabe-php-rpc/php/guards/Composer/Downloader/TarDownloader.php b/crates/shirabe-php-rpc/php/guards/Composer/Downloader/TarDownloader.php
new file mode 100644
index 00000000..755f6b24
--- /dev/null
+++ b/crates/shirabe-php-rpc/php/guards/Composer/Downloader/TarDownloader.php
@@ -0,0 +1,45 @@
+<?php
+
+// Generated by scripts/plugin-stub-generator; do not edit by hand.
+// Guard for Composer\Downloader\TarDownloader.
+// The Rust side owns this class and the worker has no proxy for it, so this
+// declaration shadows the real one: the constants and the hierarchy stay, while
+// constructing it or calling anything on it raises an explicit error.
+
+namespace Composer\Downloader;
+
+use Composer\Package\PackageInterface;
+use React\Promise\PromiseInterface;
+
+class TarDownloader extends ArchiveDownloader
+{
+    public function __construct()
+    {
+        \ShirabeUnsupportedClass::fail(self::class, '__construct');
+    }
+
+    protected function extract(PackageInterface $package, string $file, string $path): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'extract');
+    }
+
+    public function prepare(string $type, PackageInterface $package, string $path, ?PackageInterface $prevPackage = null): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'prepare');
+    }
+
+    public function cleanup(string $type, PackageInterface $package, string $path, ?PackageInterface $prevPackage = null): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'cleanup');
+    }
+
+    public function install(PackageInterface $package, string $path, bool $output = true): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'install');
+    }
+
+    protected function getInstallOperationAppendix(PackageInterface $package, string $path): string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'getInstallOperationAppendix');
+    }
+}
diff --git a/crates/shirabe-php-rpc/php/guards/Composer/Downloader/XzDownloader.php b/crates/shirabe-php-rpc/php/guards/Composer/Downloader/XzDownloader.php
new file mode 100644
index 00000000..8a76e994
--- /dev/null
+++ b/crates/shirabe-php-rpc/php/guards/Composer/Downloader/XzDownloader.php
@@ -0,0 +1,45 @@
+<?php
+
+// Generated by scripts/plugin-stub-generator; do not edit by hand.
+// Guard for Composer\Downloader\XzDownloader.
+// The Rust side owns this class and the worker has no proxy for it, so this
+// declaration shadows the real one: the constants and the hierarchy stay, while
+// constructing it or calling anything on it raises an explicit error.
+
+namespace Composer\Downloader;
+
+use React\Promise\PromiseInterface;
+use Composer\Package\PackageInterface;
+
+class XzDownloader extends ArchiveDownloader
+{
+    public function __construct()
+    {
+        \ShirabeUnsupportedClass::fail(self::class, '__construct');
+    }
+
+    protected function extract(PackageInterface $package, string $file, string $path): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'extract');
+    }
+
+    public function prepare(string $type, PackageInterface $package, string $path, ?PackageInterface $prevPackage = null): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'prepare');
+    }
+
+    public function cleanup(string $type, PackageInterface $package, string $path, ?PackageInterface $prevPackage = null): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'cleanup');
+    }
+
+    public function install(PackageInterface $package, string $path, bool $output = true): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'install');
+    }
+
+    protected function getInstallOperationAppendix(PackageInterface $package, string $path): string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'getInstallOperationAppendix');
+    }
+}
diff --git a/crates/shirabe-php-rpc/php/guards/Composer/Downloader/ZipDownloader.php b/crates/shirabe-php-rpc/php/guards/Composer/Downloader/ZipDownloader.php
new file mode 100644
index 00000000..6fda26a5
--- /dev/null
+++ b/crates/shirabe-php-rpc/php/guards/Composer/Downloader/ZipDownloader.php
@@ -0,0 +1,55 @@
+<?php
+
+// Generated by scripts/plugin-stub-generator; do not edit by hand.
+// Guard for Composer\Downloader\ZipDownloader.
+// The Rust side owns this class and the worker has no proxy for it, so this
+// declaration shadows the real one: the constants and the hierarchy stay, while
+// constructing it or calling anything on it raises an explicit error.
+
+namespace Composer\Downloader;
+
+use Composer\Package\PackageInterface;
+use React\Promise\PromiseInterface;
+
+class ZipDownloader extends ArchiveDownloader
+{
+    public function __construct()
+    {
+        \ShirabeUnsupportedClass::fail(self::class, '__construct');
+    }
+
+    public function download(PackageInterface $package, string $path, ?PackageInterface $prevPackage = null, bool $output = true): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'download');
+    }
+
+    protected function extract(PackageInterface $package, string $file, string $path): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'extract');
+    }
+
+    protected function getErrorMessage(int $retval, string $file): string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'getErrorMessage');
+    }
+
+    public function prepare(string $type, PackageInterface $package, string $path, ?PackageInterface $prevPackage = null): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'prepare');
+    }
+
+    public function cleanup(string $type, PackageInterface $package, string $path, ?PackageInterface $prevPackage = null): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'cleanup');
+    }
+
+    public function install(PackageInterface $package, string $path, bool $output = true): PromiseInterface
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'install');
+    }
+
+    protected function getInstallOperationAppendix(PackageInterface $package, string $path): string
+    {
+        \ShirabeUnsupportedClass::fail(self::class, 'getInstallOperationAppendix');
+    }
+}