13 built in static file handler

.clang-format

@@ -46,6 +46,7 @@ AllowShortCaseLabelsOnASingleLine: false
 AllowShortFunctionsOnASingleLine: None
 AllowShortIfStatementsOnASingleLine: false
 AllowShortLoopsOnASingleLine: false
+InsertBraces: true
 AlwaysBreakAfterReturnType: None
 BreakBeforeBinaryOperators: None
 BreakBeforeTernaryOperators: true

.gitignore

@@ -134,3 +134,4 @@ fuzz/crash-*
 fuzz/leak-*
 fuzz/timeout-*
 fuzz/oom-*
+*~

CHANGELOG.md

@@ -7,8 +7,70 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Added
+
+- `HttpResponse::sendFile(string $path, ?SendFileOptions $options = null): void`
+  — handler-driven file delivery. Records path + options on the response
+  and returns immediately; the protocol's `send_static_response` op
+  runs the actual transfer in the dispose phase, reusing the static
+  module's open-stat-sendfile FSM (MIME detection, ETag, IMF date,
+  Range, conditional GET, precompressed sidecars). Path is treated as
+  trusted (handler made the access decision). Open / fstat errors
+  surface as a 500 since headers aren't on the wire yet.
+  After `sendFile()` the response is sealed: `setHeader` / `setStatus*` /
+  `write` / `send` / `setBody` / `json` / `html` / `redirect` / `end` /
+  a second `sendFile()` throw `HttpServerRuntimeException`.
+  New value-object `TrueAsync\SendFileOptions` (`final readonly class`,
+  named-args constructor) carries `contentType`, `disposition`
+  (`SendFileDisposition::INLINE | ATTACHMENT`), `downloadName`,
+  `cacheControl`, `etag`, `lastModified`, `acceptRanges`,
+  `precompressed`, `conditional`, `deleteAfterSend`, `status` overrides.
+  Compression middleware is bypassed for sendFile bodies (own
+  delivery pipeline). HTTP/3 path is follow-up — the dispose hook
+  refuses with 500 for now.
+
+### Changed
+
+- Static-handler PHP enum cases renamed to UPPER_CASE for project-wide
+  consistency: `StaticOnMissing::{NotFound→NOT_FOUND, Next→NEXT}`,
+  `StaticDotfiles::{Deny→DENY, Allow→ALLOW, Ignore→IGNORE}`,
+  `StaticSymlinks::{Reject→REJECT, Follow→FOLLOW, OwnerMatch→OWNER_MATCH}`.
+  Breaking for any existing user code that referenced the old casings.
+
+### Performance
+
+- Static file delivery — inline `open(2)` / `fstat(2)` in `send_file`
+  engine (issue #13). The previous `ZEND_ASYNC_FS_OPEN` /
+  `ZEND_ASYNC_IO_STAT` chain routed both syscalls through the libuv
+  thread pool: one futex round-trip per request just to learn whether
+  a file existed. On a warm dentry cache both syscalls are sub-µs;
+  the dispatch was pure overhead. A 0-ms timer defers `engine_handle_stat`
+  off the synchronous tail so on_done cannot re-enter the request
+  dispatcher on its own call stack. Wins: H1 tiny 256B 19k → 35k req/s,
+  H1 304 If-None-Match 24k → 123k req/s.
+- Static file delivery — small-file fast path (≤ 64 KiB). libuv's
+  `uv_fs_sendfile` on Linux is doubly broken for file→TCP-socket: it
+  tries `copy_file_range` first (returns EINVAL on socket), then falls
+  into a userspace `pread` + `write` loop inside a worker thread — no
+  kernel zero-copy plus a futex round-trip per request. Files at or
+  under 64 KiB are now slurped synchronously into a `zend_string` and
+  emitted as one `writev(headers + body)` through libuv's per-socket
+  write queue; ordering with prior writes is then libuv's problem.
+  Files above 64 KiB stay on the (broken-but-functional) sendfile
+  path. Wins on top of the inline-syscall change: H1 tiny → 103k req/s
+  (×2.9), H1 small 16K → 73k (×1.9), H2 tiny → 154k (×4.4), H2 small
+  → 73k (×2.7).
+
 ### Fixed
 
+- HTTP/2 single byte-range delivery served bytes from offset 0 of the
+  file regardless of the requested range start. The H2 body FSM stored
+  `body_offset` in its state but never applied it to the file: the
+  buffered read path (`ZEND_ASYNC_IO_READ`) uses the fd's tracked
+  position, which is 0 right after open. Seek the io once before the
+  first read when `body_offset > 0`. H1 was unaffected (sendfile path
+  passes the offset explicitly to the syscall).
+  Closes pre-existing failure of `tests/phpt/server/static/012-static-h2`.
 - Proactive drain mis-fired on the first response when CoDel/telemetry
   were disabled. The fallback timestamp used `CLOCK_MONOTONIC_COARSE`
   while `created_at_ns` and `drain_not_before_ns` are `zend_hrtime`

config.m4

@@ -464,16 +464,34 @@ if test "$PHP_HTTP_SERVER" != "no"; then
     src/core/conn_arena.c
     src/http1/http_parser.c
     src/http1/http1_stream.c
+    src/http1/http1_sendfile.c
     src/formats/multipart_parser.c
     src/formats/multipart_processor.c
     src/http_request.c
     src/http_response.c
+    src/http_mime.c
+    src/http_date.c
+    src/http_etag.c
+    src/http_conditional.c
+    src/http_range.c
+    src/fs_util.c
+    src/http_rfc5987.c
+    src/http_precompressed.c
+    src/http_param_parse.c
+    src/send_file.c
+    src/http_send_file.c
+    src/http_send_file_options.c
     src/uploaded_file.c
     src/core/http_protocol_handlers.c
     src/core/http_protocol_strategy.c
     src/core/http_known_strings.c
     src/log/http_log.c
     src/log/trace_context.c
+    src/static/static_handler_class.c
+    src/static/http_static_path.c
+    src/static/http_static_cache.c
+    src/static/http_static.c
+    src/static/http_static_safety.c
   "
 
   dnl TLS-only TU split out of http_connection.c (BIO ring writer +
@@ -491,6 +509,7 @@ if test "$PHP_HTTP_SERVER" != "no"; then
       src/http2/http2_strategy.c
       src/http2/http2_session.c
       src/http2/http2_stream.c
+      src/http2/http2_static_response.c
     "
   fi
 
@@ -532,6 +551,7 @@ if test "$PHP_HTTP_SERVER" != "no"; then
       src/http3/http3_io.c
       src/http3/http3_callbacks.c
       src/http3/http3_dispatch.c
+      src/http3/http3_static_response.c
       src/http3/http3_stream.c
       src/http3/http3_stream_pool.c
     "
@@ -572,6 +592,7 @@ if test "$PHP_HTTP_SERVER" != "no"; then
   PHP_ADD_BUILD_DIR([$ext_builddir/src/http1])
   PHP_ADD_BUILD_DIR([$ext_builddir/src/formats])
   PHP_ADD_BUILD_DIR([$ext_builddir/src/log])
+  PHP_ADD_BUILD_DIR([$ext_builddir/src/static])
   PHP_ADD_BUILD_DIR([$ext_builddir/deps/llhttp])
 
   if test "$PHP_HTTP2" = "yes"; then