Abilities API: scope the WP_Settings_Abilities class.

Make WP_Settings_Abilities final and tighten member visibility so the
intended surface is enforced rather than only documented via @access
private. Only the externally-invoked entry points remain public
(register(), execute_get_settings(), has_permission()); register_get_settings()
and the shared helpers become private, and CATEGORY becomes a private const.
Method bodies and the static cache are unchanged.

Author: jorgefilipecosta

src/wp-includes/abilities/class-wp-settings-abilities.php

@@ -24,15 +24,15 @@
  *
  * @access private
  */
-class WP_Settings_Abilities {
+final class WP_Settings_Abilities {
 
 	/**
 	 * The ability category used for settings abilities.
 	 *
 	 * @since 7.1.0
 	 * @var string
 	 */
-	const CATEGORY = 'site';
+	private const CATEGORY = 'site';
 
 	/**
 	 * Settings exposed through the Abilities API, computed once at registration.
@@ -68,7 +68,7 @@ public static function register(): void {
 	 *
 	 * @since 7.1.0
 	 */
-	public static function register_get_settings(): void {
+	private static function register_get_settings(): void {
 		// Compute once; execute_get_settings() reuses this exact structure.
 		self::$exposed_settings = self::get_exposed_settings();
 
@@ -173,7 +173,7 @@ public static function has_permission(): bool {
 	 * @param list<string> $field_names Available exposed setting names.
 	 * @return array<string, mixed> The input JSON Schema.
 	 */
-	protected static function get_settings_input_schema( array $groups, array $field_names ): array {
+	private static function get_settings_input_schema( array $groups, array $field_names ): array {
 		return array(
 			'type'                 => 'object',
 			// Object (not array()) so the serialized schema default is {}, consistent with type:object.
@@ -209,7 +209,7 @@ protected static function get_settings_input_schema( array $groups, array $field
 	 *
 	 * @return array<string, array{option: string, group: string, default: mixed, schema: array<string, mixed>}> Settings keyed by exposed name.
 	 */
-	protected static function get_exposed_settings(): array {
+	private static function get_exposed_settings(): array {
 		$settings = array();
 
 		foreach ( get_registered_settings() as $option_name => $args ) {
@@ -241,7 +241,7 @@ protected static function get_exposed_settings(): array {
 	 * @param bool|array<string, mixed> $show The setting's `show_in_abilities` value.
 	 * @return array<string, mixed> The value JSON Schema.
 	 */
-	protected static function value_schema( array $args, $show ): array {
+	private static function value_schema( array $args, $show ): array {
 		$schema = array(
 			'type' => isset( $args['type'] ) && is_string( $args['type'] ) ? $args['type'] : 'string',
 		);
@@ -269,7 +269,7 @@ protected static function value_schema( array $args, $show ): array {
 	 * @param string $type  The registered setting type.
 	 * @return mixed The value cast to the declared type.
 	 */
-	protected static function cast_value( $value, string $type ) {
+	private static function cast_value( $value, string $type ) {
 		switch ( $type ) {
 			case 'boolean':
 				return (bool) $value;