[dknauss]

Summary

This is Phase B, ticket 5 of docs/planning/refactor-and-standards-memo.md, plus ticket 9 pulled forward.

• The move. The 14 CSL-JSON validation and sanitization functions go from bibliography-builder.php to the new includes/csl-sanitize.php, unchanged and under the same names. Examples: bibliography_builder_get_known_csl_types(), …_sanitize_csl_date(), …_validate_and_sanitize_csl_item(). bibliography-builder.php drops from 2,213 to 1,592 lines; its only addition is one require_once.
• Proof the moved text is unchanged: lines 425–1045 of the old root file are byte-identical to the new file after its 14-line header (checked with cmp).
• Ticket 9 first, so it guards every later move.
  • tests/phpunit/FunctionInventoryTest.php checks the 255 bibliography_builder_* functions listed in tests/fixtures/function-inventory.txt (captured before any move).
  • It fails if any listed function is missing, or if any function is defined in more than one plugin file.
  • New functions don't need listing.
  • Mutation check: removing the new require_once makes the test fail, naming the missing functions.
• Docs: CLAUDE.md, docs/current-metrics.md (line counts, the list of included files), and a progress table in the memo.

This touches the same root file as #158, but in different places, so the second to merge should merge cleanly. The metrics doc's list of included files will need a one-line merge.

Validation

• composer lint:php, composer analyze:php: pass.
• PHPUnit: 450 pass, including the new inventory test (3 tests).
• npm run format:check, composer verify:metrics: pass.
• npm run package:release: the ZIP includes includes/csl-sanitize.php, since packaging copies includes/ wholesale.

Checklist

• No behavior change; function names unchanged
• Tests added
• Docs and metrics updated

---

Generated by Claude Code

[codecov]

Codecov Report

❌ Patch coverage is 94.31438% with 17 lines in your changes missing coverage. Please review.
✅ Project coverage is 88.27%. Comparing base (944f0bc) to head (a0bd8d7).
⚠️ Report is 1 commits behind head on main.

Files with missing lines	Patch %	Lines
includes/csl-sanitize.php	94.31%	17 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff            @@
##               main     #160   +/-   ##
=========================================
  Coverage     88.27%   88.27%           
  Complexity       22       22           
=========================================
  Files            62       63    +1     
  Lines          7359     7359           
  Branches        699      699           
=========================================
  Hits           6496     6496           
  Misses          292      292           
  Partials        571      571           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.