fix(php): validate composite parameter variance

phpunit/code/interface_param_union_narrows_mixed.php

@@ -0,0 +1,13 @@
+<?php
+
+interface InterfaceParamUnionNarrowsMixed
+{
+    public function value(mixed $v);
+}
+
+class InterfaceParamUnionNarrowsMixedImpl implements InterfaceParamUnionNarrowsMixed
+{
+    public function value(string|int $v)
+    {
+    }
+}

phpunit/code/interface_param_union_narrows_untyped.php

@@ -0,0 +1,13 @@
+<?php
+
+interface InterfaceParamUnionNarrowsUntyped
+{
+    public function value($v);
+}
+
+class InterfaceParamUnionNarrowsUntypedImpl implements InterfaceParamUnionNarrowsUntyped
+{
+    public function value(string|int $v)
+    {
+    }
+}

phpunit/src/InheritanceErrorTest.php

@@ -58,6 +58,16 @@ class InheritanceErrorTest extends TestCase
         $this->exec('must be compatible', 'inheritance_error_param_covariant_class.php');
     }
 
+    public function testUnionParameterCannotNarrowUntypedParent()
+    {
+        $this->exec('must be compatible', 'interface_param_union_narrows_untyped.php');
+    }
+
+    public function testUnionParameterCannotNarrowMixedParent()
+    {
+        $this->exec('must be compatible', 'interface_param_union_narrows_mixed.php');
+    }
+
     public function testByRefMismatch()
     {
         $this->exec('must be compatible', 'inheritance_error_byref.php');

src/Php/ArgInfo.php

@@ -25,6 +25,7 @@ class ArgInfo
     public bool $variadic = false;
     public bool $nullable = false;
     public bool $undeclared = false;
+    public bool $explicitMixed = false;
     public bool $property = false;
 
     /**

src/Php/Preprocessor.php

@@ -237,6 +237,14 @@ class Preprocessor extends CompilerBase
         $class = '';
         $type = $this->parseTypeDecl($param->type, self::DECL_TYPE_OF_PARAM, $class);
         $argInfo->undeclared = $param->type === null;
+        if (
+            $param->type !== null
+            && !$param->type instanceof NullableType
+            && !$param->type instanceof UnionType
+            && !$param->type instanceof IntersectionType
+        ) {
+            $argInfo->explicitMixed = in_array(strtolower($this->parseIdentifier($param->type)), ['mixed', 'any'], true);
+        }
         if ($class and !$this->hasInterface($class) and !$this->isAbstractClass($class)) {
             $argInfo->class = $class;
         }

src/Php/Translator.php

@@ -3358,15 +3358,22 @@ CODE;
     {
         // Child methods may omit parameter types (contravariance — accepting a
         // wider set of inputs is always compatible with the parent contract).
-        if ($childArg->undeclared || $childArg->type === self::TYPE_VAR) {
+        if ($this->isTopParameterType($childArg)) {
             return true;
         }
-        if ($parentArg->undeclared || $parentArg->type === self::TYPE_VAR) {
+        if ($this->isTopParameterType($parentArg)) {
             return false;
         }
-        if ($parentArg->typeCheck || $childArg->typeCheck) {
+
-            return $parentArg->typeStr === $childArg->typeStr;
+        $parentAcceptedTypes = $this->getParameterAcceptedTypes($parentArg);
+        $childAcceptedTypes = $this->getParameterAcceptedTypes($childArg);
+        if ($parentAcceptedTypes !== null || $childAcceptedTypes !== null) {
+            if ($parentAcceptedTypes === null || $childAcceptedTypes === null) {
+                return false;
+            }
+            return $this->isAcceptedTypeSubset($parentAcceptedTypes, $childAcceptedTypes);
         }
+
         if ($childArg->type !== $parentArg->type) {
             return false;
         }
@@ -3382,6 +3389,82 @@ CODE;
         return $this->isInheritedFrom($parentArg->class, $childArg->class);
     }
 
+    private function isTopParameterType(ArgInfo $arg): bool
+    {
+        return $arg->undeclared || $arg->explicitMixed;
+    }
+
+    private function getParameterAcceptedTypes(ArgInfo $arg): ?array
+    {
+        if (!empty($arg->typeCheck)) {
+            return $arg->typeCheck;
+        }
+
+        return match ($arg->type) {
+            self::TYPE_INT => [['kind' => 'isInt']],
+            self::TYPE_FLOAT => [['kind' => 'isFloat']],
+            self::TYPE_BOOL => [['kind' => 'isBool']],
+            self::TYPE_STR => [['kind' => 'isString']],
+            self::TYPE_ARRAY => [['kind' => 'isArray']],
+            self::TYPE_RESOURCE => [['kind' => 'isResource']],
+            self::TYPE_OBJECT => $arg->class
+                ? [['kind' => 'instanceof', 'class' => $arg->class]]
+                : [['kind' => 'isObject']],
+            default => null,
+        };
+    }
+
+    private function isAcceptedTypeSubset(array $parentTypes, array $childTypes): bool
+    {
+        foreach ($parentTypes as $parentType) {
+            if (!$this->isAcceptedTypeCovered($parentType, $childTypes)) {
+                return false;
+            }
+        }
+        return true;
+    }
+
+    private function isAcceptedTypeCovered(array $parentType, array $childTypes): bool
+    {
+        foreach ($childTypes as $childType) {
+            if ($this->isAcceptedTypeCompatible($parentType, $childType)) {
+                return true;
+            }
+        }
+        return false;
+    }
+
+    private function isAcceptedTypeCompatible(array $parentType, array $childType): bool
+    {
+        $parentKind = $parentType['kind'] ?? null;
+        $childKind = $childType['kind'] ?? null;
+
+        if ($parentKind === 'instanceof' && $childKind === 'isObject') {
+            return true;
+        }
+        if ($parentKind !== $childKind) {
+            return false;
+        }
+
+        if ($parentKind === 'allOf') {
+            return $parentType == $childType;
+        }
+
+        if ($parentKind !== 'instanceof') {
+            return true;
+        }
+
+        $parentClass = $parentType['class'] ?? '';
+        $childClass = $childType['class'] ?? '';
+        if ($parentClass === $childClass) {
+            return true;
+        }
+        if ($parentClass === '' || $childClass === '') {
+            return false;
+        }
+        return $this->isInheritedFrom($parentClass, $childClass);
+    }
+
     private function checkInterfaceImplementations(Node\Stmt\Class_|Node\Stmt\Enum_ $classStmt): void
     {
         $classDef = $this->classDef;

tests/core/classes/class_implements_param_type.phpt

@@ -1,15 +1,8 @@
 --TEST--
-Class implements interface: union type / composite type parameter compatibility
+Class implements interface: parameter type compatibility
-Tests parameter type contravariance for interface implementation with union types:
- - Child method omitting the type should accept a wider set of inputs.
- - Child method declaring the identical union type should also compile.
- - nullable union (T1|T2|null) and three-way union (T1|T2|T3) are covered.
 --FILE--
 <?php
 
-// -------------------------------------------------------
-// Interface with single + union type parameters
-// -------------------------------------------------------
 interface ContractA
 {
     public function single(string $value);
@@ -18,7 +11,6 @@ interface ContractA
     public function nullableUnion(string|int|null $value);
 }
 
-// Child omits every parameter type — must be compatible with all.
 class ImplOmitAll implements ContractA
 {
     public function single($value) { var_dump($value); }
@@ -27,9 +19,6 @@ class ImplOmitAll implements ContractA
     public function nullableUnion($value) { var_dump($value); }
 }
 
-// -------------------------------------------------------
-// Interface where child mirrors the union type exactly
-// -------------------------------------------------------
 interface ContractB
 {
     public function mirror(string|int $x);
@@ -43,19 +32,30 @@ class ImplMirror implements ContractB
     }
 }
 
-// -------------------------------------------------------
-// Multiple interfaces with different union types
-// -------------------------------------------------------
 interface ContractC
 {
-    public function a(string|bool $v);
+    public function widen(string $v);
+}
+
+class ImplWiden implements ContractC
+{
+    public function widen(string|int $v)
+    {
+        var_dump($v);
+    }
 }
+
 interface ContractD
+{
+    public function a(string|bool $v);
+}
+
+interface ContractE
 {
     public function b(int|float $v);
 }
 
-class ImplMulti implements ContractC, ContractD
+class ImplMulti implements ContractD, ContractE
 {
     public function a($v) { var_dump($v); }
     public function b($v) { var_dump($v); }
@@ -63,7 +63,6 @@ class ImplMulti implements ContractC, ContractD
 
 function main()
 {
-    // ImplOmitAll — omitted types should still pass runtime checks
     $a = new ImplOmitAll;
     $a->single('hello');
     $a->union2('world');
@@ -74,17 +73,18 @@ function main()
     $a->nullableUnion(100);
     $a->nullableUnion(null);
 
-    // ImplMirror — explicit matching union type
     $b = new ImplMirror;
     $b->mirror('ok');
     $b->mirror(99);
 
-    // ImplMulti — multiple interfaces
+    $c = new ImplWiden;
-    $c = new ImplMulti;
+    $c->widen('wide');
-    $c->a('yes');
+
-    $c->a(true);
+    $d = new ImplMulti;
-    $c->b(123);
+    $d->a('yes');
-    $c->b(4.56);
+    $d->a(true);
+    $d->b(123);
+    $d->b(4.56);
 }
 ?>
 --EXPECT--
@@ -98,6 +98,7 @@ int(100)
 NULL
 string(2) "ok"
 int(99)
+string(4) "wide"
 string(3) "yes"
 bool(true)
 int(123)