{"slug":"laravel-ops","title":"laravel-ops","summary":"Laravel framework patterns, Eloquent ORM, authentication, queues, and testing. Use for: laravel, eloquent, artisan, blade, php, sanctum, livewire, inertia, pest, phpunit, forge, vapor, queue, middleware, migration, factory, seeder.","platform":"Claude","tags":[],"authorName":"LLM Mart","authorSlug":"llm-mart","score":0,"source":"github","price":null,"verified":false,"createdAt":"2026-09-30T19:36:47.717947Z","repo":{"url":"https://github.com/0xDarkMatter/claude-mods","stars":43,"forks":7,"license":"MIT","updatedAt":"2026-09-30T15:18:48Z"},"bodyHtml":"
\nname: laravel-ops\ndescription: \"Laravel framework patterns, Eloquent ORM, authentication, queues, and testing. Use for: laravel, eloquent, artisan, blade, php, sanctum, livewire, inertia, pest, phpunit, forge, vapor, queue, middleware, migration, factory, seeder.\"\nwhen_to_use: \"Use when building Laravel 11+ apps — e.g. 'write an Eloquent query or migration', 'set up Sanctum auth', 'configure queues and jobs', 'test with Pest or PHPUnit'. Covers artisan, Blade, Livewire/Inertia, Forge/Vapor, factories, and seeders.\"\nlicense: MIT\nallowed-tools: \"Read Write Bash\"\nmetadata:\nauthor: claude-mods\nrelated-skills: sql-ops, postgres-ops, testing-ops, docker-ops
\nLaravel Operations
\n\nFacts verified as of 2026-07.
\n
\nAuthoritative reference for Laravel 11+ development: architecture decisions, Eloquent patterns, authentication strategies, queue configuration, and testing approaches.
\n
\nArchitecture Decision Tree
\nWhat type of application?\n│\n├─ Full-stack web (HTML responses)\n│ ├─ Simple CRUD, small team → Monolith (Blade + Eloquent directly)\n│ │ └─ Use action classes for business logic over 20 lines\n│ ├─ Rich interactivity needed → Livewire (server-driven reactivity)\n│ │ └─ Add Alpine.js for client-side micro-interactions\n│ └─ SPA-like feel, React/Vue team → Inertia.js\n│ └─ Keep server-side routing, dump client-side routing overhead\n│\n├─ API backend (JSON responses)\n│ ├─ Single consumer (mobile/SPA) → API-only with Sanctum SPA auth\n│ ├─ Multiple consumers / public → RESTful API with token auth\n│ └─ Complex graph queries → Consider GraphQL (lighthouse-php/lighthouse)\n│\n├─ Large team / complex domain\n│ ├─ Domain-driven → Modular monolith (app/Modules/{Domain}/)\n│ │ ├─ Each module: Models, Actions, Events, Jobs, Http/\n│ │ └─ Shared: app/Shared/ for cross-cutting concerns\n│ └─ Independent deployability needed → Microservices\n│ └─ Use Laravel Octane for high-throughput services\n│\n└─ What business logic pattern?\n ├─ Simple CRUD, < 20 lines → Direct Eloquent in controller\n ├─ Reusable operation (create order, send invoice) → Action class\n │ └─ Single public handle() or execute() method\n ├─ Complex queries, multiple data sources → Repository pattern\n │ └─ Interface + Eloquent implementation (enables swapping)\n └─ Cross-cutting operations (audit, caching) → Service class\n └─ Inject via constructor, bind in ServiceProvider\n
\nAction Class vs Repository vs Service
\n\n\n\n| Pattern | \nUse When | \nExample | \n
\n\n\n\n| Action class | \nSingle, reusable business operation | \nCreateOrderAction, SendInvoiceAction | \n
\n\n| Repository | \nAbstract data access, multiple sources | \nOrderRepository with EloquentOrderRepository | \n
\n\n| Service | \nOrchestrate multiple actions/repos | \nOrderService combining payment + inventory | \n
\n\n| Direct Eloquent | \nSimple CRUD, < 5 lines in controller | \nUser::create($data) | \n
\n\n
\n
\nEloquent Quick Reference
\nRelationships
\n\n\n\n| Relationship | \nMethod | \nForeign Key Convention | \n
\n\n\n\nhasOne | \nreturn $this->hasOne(Profile::class) | \nprofiles.user_id | \n
\n\nhasMany | \nreturn $this->hasMany(Post::class) | \nposts.user_id | \n
\n\nbelongsTo | \nreturn $this->belongsTo(User::class) | \nposts.user_id | \n
\n\nbelongsToMany | \nreturn $this->belongsToMany(Role::class) | \nrole_user pivot | \n
\n\nhasManyThrough | \nreturn $this->hasManyThrough(Post::class, User::class) | \nCountry → User → Post | \n
\n\nmorphTo | \nreturn $this->morphTo() | \n{col}_type, {col}_id | \n
\n\nmorphMany | \nreturn $this->morphMany(Comment::class, 'commentable') | \nPolymorphic | \n
\n\nmorphToMany | \nreturn $this->morphToMany(Tag::class, 'taggable') | \nPolymorphic pivot | \n
\n\n
\nEager Loading
\n// Prevent N+1: always eager load in controllers\n$posts = Post::with(['author', 'comments.author', 'tags'])->paginate(15);\n\n// Conditional eager loading (load after retrieval)\n$user->load('posts.comments');\n$user->loadMissing('posts'); // only if not already loaded\n\n// Eager load counts (no SELECT *)\n$posts = Post::withCount('comments')->get();\n\n// Constrained eager loading\n$posts = Post::with(['comments' => fn($q) => $q->approved()->latest()])->get();\n
\nQuery Scopes
\n// Local scope (reusable query constraint)\npublic function scopeActive(Builder $query): void\n{\n $query->where('status', 'active');\n}\n\n// Usage: User::active()->get()\n\n// Dynamic scope\npublic function scopeOfType(Builder $query, string $type): void\n{\n $query->where('type', $type);\n}\n// Usage: User::ofType('admin')->get()\n
\nMass Assignment
\n// Fillable (allowlist - preferred)\nprotected $fillable = ['name', 'email', 'password'];\n\n// Guarded (denylist - use [] only if you trust all input)\nprotected $guarded = ['id', 'is_admin'];\n\n// Never set guarded = [] in production code\n
\n
\nArtisan Command Cheat Sheet
\n\n\n\n| Command | \nPurpose | \nCommon Options | \n
\n\n\n\nmake:model Post -mfs | \nModel + migration + factory + seeder | \n-c controller, -r resource | \n
\n\nmake:controller PostController -r | \nResource controller (7 methods) | \n--api skips create/edit | \n
\n\nmake:request StorePostRequest | \nForm request for validation | \n | \n
\n\nmake:job ProcessPayment | \nQueueable job class | \n--sync for sync job | \n
\n\nmake:event OrderPlaced | \nEvent class | \n | \n
\n\nmake:listener SendOrderConfirmation -e OrderPlaced | \nListener for event | \n--queued | \n
\n\nmake:notification InvoicePaid | \nNotification class | \n | \n
\n\nmake:policy PostPolicy -m Post | \nPolicy with model | \n | \n
\n\nmake:middleware EnsureUserIsAdmin | \nHTTP middleware | \n | \n
\n\nmake:command SendDailyReport | \nCustom Artisan command | \n | \n
\n\nmigrate | \nRun pending migrations | \n--step for individual | \n
\n\nmigrate:rollback | \nRoll back last batch | \n--step=5 | \n
\n\nmigrate:fresh --seed | \nDrop all + re-migrate + seed | \n | \n
\n\ndb:seed | \nRun all seeders | \n--class=UserSeeder | \n
\n\ntinker | \nREPL with app context | \n | \n
\n\nroute:list | \nShow all routes | \n--name=api filter | \n
\n\nroute:cache | \nCache routes for production | \n | \n
\n\nconfig:cache | \nCache config for production | \n | \n
\n\nview:cache | \nPre-compile Blade templates | \n | \n
\n\noptimize | \nRun all cache commands | \noptimize:clear to reset | \n
\n\nqueue:work | \nProcess queue jobs | \n--queue=high,default | \n
\n\nqueue:listen | \nWork + auto-reload on code change | \n | \n
\n\nqueue:failed | \nList failed jobs | \n | \n
\n\nqueue:retry all | \nRetry all failed jobs | \n | \n
\n\nschedule:run | \nRun due scheduled tasks | \n | \n
\n\nschedule:work | \nRun scheduler every minute (dev) | \n | \n
\n\nkey:generate | \nGenerate APP_KEY | \n | \n
\n\ntest | \nRun PHPUnit/Pest tests | \n--filter=UserTest | \n
\n\ntest --parallel | \nRun tests in parallel | \n--processes=4 | \n
\n\nvendor:publish | \nPublish package assets/config | \n--tag=config | \n
\n\n
\n
\nAuthentication Decision Tree
\nWhat do you need?\n│\n├─ SPA (Vue/React) + Laravel API backend\n│ └─ Sanctum SPA authentication\n│ ├─ Cookie-based (same domain or subdomain)\n│ ├─ Csrf-cookie endpoint: GET /sanctum/csrf-cookie\n│ └─ No tokens in localStorage (XSS safe)\n│\n├─ Mobile app or third-party API consumers\n│ └─ Sanctum API tokens (Bearer tokens)\n│ ├─ createToken($name, $abilities)\n│ ├─ Token abilities for fine-grained control\n│ └─ Token expiration with token:prune schedule\n│\n├─ Traditional web app (server-rendered)\n│ ├─ Just need auth pages quickly → Breeze\n│ │ ├─ Minimal, educational, Blade or Inertia stack\n│ │ └─ Install: composer require laravel/breeze --dev\n│ ├─ Need teams, 2FA, profile management → Jetstream\n│ │ ├─ Livewire or Inertia stack\n│ │ └─ Install: composer require laravel/jetstream\n│ └─ Need headless auth (API + custom UI) → Fortify\n│ ├─ Actions in app/Actions/Fortify/\n│ └─ Customize: CreateNewUser, UpdateUserPassword\n│\n└─ Custom / enterprise\n ├─ LDAP/SAML → socialiteproviders/saml2\n ├─ OAuth social login → laravel/socialite\n └─ Custom guard → Implement Guard + UserProvider contracts\n
\nSanctum Quick Setup
\n// config/sanctum.php - stateful domains for SPA\n'stateful' => explode(',', env('SANCTUM_STATEFUL_DOMAINS', 'localhost')),\n\n// API token creation\n$token = $user->createToken('mobile-app', ['orders:read', 'orders:write']);\nreturn ['token' => $token->plainTextToken];\n\n// Check token ability\nRoute::get('/orders', function (Request $request) {\n $request->user()->tokenCan('orders:read'); // bool\n});\n\n// Protect routes\nRoute::middleware('auth:sanctum')->group(function () {\n // authenticated routes\n});\n
\n
\nQueue Decision Tree
\nQueue driver selection:\n│\n├─ Development / testing\n│ └─ sync driver (executes immediately, no worker needed)\n│ QUEUE_CONNECTION=sync\n│\n├─ Small app, no Redis available\n│ └─ database driver\n│ ├─ php artisan queue:table && migrate\n│ ├─ Works fine for < 100 jobs/min\n│ └─ QUEUE_CONNECTION=database\n│\n├─ Medium-high throughput, self-hosted\n│ └─ Redis driver (via predis or phpredis)\n│ ├─ QUEUE_CONNECTION=redis\n│ ├─ Laravel Horizon for monitoring\n│ └─ Supports priorities, pausing, metrics\n│\n└─ AWS infrastructure / massive scale\n └─ SQS driver\n ├─ QUEUE_CONNECTION=sqs\n ├─ Managed, auto-scaling\n └─ Use with Laravel Vapor for serverless\n
\nJob Patterns
\n// Basic job dispatch\nProcessPayment::dispatch($order);\nProcessPayment::dispatch($order)->onQueue('payments')->delay(now()->addMinutes(5));\n\n// Chaining (sequential)\nBus::chain([\n new ProcessPayment($order),\n new SendInvoice($order),\n new UpdateInventory($order),\n])->dispatch();\n\n// Batching (parallel + callback)\n$batch = Bus::batch([\n new ImportRow($row1),\n new ImportRow($row2),\n new ImportRow($row3),\n])->then(fn(Batch $batch) => ImportComplete::dispatch())\n ->catch(fn(Batch $batch, Throwable $e) => Log::error($e))\n ->dispatch();\n\n// Rate limiting (throttle to 5 per minute)\npublic function middleware(): array\n{\n return [new RateLimited('payments')];\n}\n\n// Unique jobs (prevent duplicate processing)\nuse Illuminate\\Contracts\\Queue\\ShouldBeUnique;\n\nclass ProcessPayment implements ShouldQueue, ShouldBeUnique\n{\n public string $uniqueId => $this->order->id;\n public int $uniqueFor = 3600; // seconds\n}\n\n// Retry configuration\npublic int $tries = 3;\npublic int $backoff = 60; // seconds between retries\n\npublic function retryUntil(): DateTime\n{\n return now()->addHours(24);\n}\n
\nTask Scheduling
\n// routes/console.php (Laravel 11+)\nSchedule::job(SendDailyReport::class)->dailyAt('08:00')->timezone('America/New_York');\nSchedule::command('backup:run')->daily()->runInBackground()->emailOutputOnFailure('ops@app.com');\nSchedule::call(fn() => Cache::flush())->weekly()->sundays()->at('00:00');\n\n// Prevent overlap (long-running tasks)\nSchedule::job(ProcessImport::class)->everyFiveMinutes()->withoutOverlapping();\n\n// Run on one server only (requires Redis/database cache driver)\nSchedule::job(SendNewsletters::class)->daily()->onOneServer();\n
\n
\nTesting Quick Reference
\nTest Types
\n\n\n\n| Type | \nClass extends | \nDatabase | \nPurpose | \n
\n\n\n\n| Feature test | \nTests\\TestCase | \nYes (with trait) | \nHTTP endpoints, full stack | \n
\n\n| Unit test | \nPHPUnit\\Framework\\TestCase | \nNo | \nPure logic, no app boot | \n
\n\n| Browser test | \nLaravel\\Dusk\\TestCase | \nYes | \nReal browser via ChromeDriver | \n
\n\n
\nDatabase Traits
\nuse Illuminate\\Foundation\\Testing\\RefreshDatabase; // migrate fresh each test (slower)\nuse Illuminate\\Foundation\\Testing\\DatabaseTransactions; // rollback each test (faster)\n
\nPest Syntax (preferred in Laravel 11+)
\ndescribe('User authentication', function () {\n beforeEach(function () {\n $this->user = User::factory()->create();\n });\n\n it('allows login with valid credentials', function () {\n $response = $this->post('/login', [\n 'email' => $this->user->email,\n 'password' => 'password',\n ]);\n\n $response->assertRedirect('/dashboard');\n $this->assertAuthenticatedAs($this->user);\n });\n\n it('rejects invalid credentials')->todo();\n});\n
\nCommon Assertions
\n// HTTP response\n$response->assertStatus(200);\n$response->assertOk(); // 200\n$response->assertCreated(); // 201\n$response->assertNoContent(); // 204\n$response->assertUnauthorized(); // 401\n$response->assertForbidden(); // 403\n$response->assertNotFound(); // 404\n$response->assertRedirect('/home');\n\n// JSON responses\n$response->assertJson(['status' => 'ok']);\n$response->assertJsonPath('data.email', 'user@example.com');\n$response->assertJsonCount(3, 'data');\n$response->assertJsonStructure(['data' => ['id', 'name', 'email']]);\n$response->assertJsonMissing(['password']);\n\n// Database\n$this->assertDatabaseHas('users', ['email' => 'user@example.com']);\n$this->assertDatabaseMissing('users', ['email' => 'deleted@example.com']);\n$this->assertDatabaseCount('posts', 5);\n$this->assertSoftDeleted('posts', ['id' => $post->id]);\n
\n
\nCommon Gotchas
\n\n\n\n| Gotcha | \nWhy | \nFix | \n
\n\n\n\n| N+1 queries on relationships | \nEloquent lazy-loads by default | \nUse with() eager loading; enable Model::preventLazyLoading() in AppServiceProvider during development | \n
\n\n| Mass assignment vulnerability | \n$fillable = [] accepts all | \nAlways define $fillable; never use $guarded = [] in production | \n
\n\ncreated_at not updating on update() | \nOnly updated_at auto-sets | \nUse $model->touch() or timestamps = true (default) | \n
\n\n| Queue job fails on model serialization | \nModel state may change between dispatch and processing | \nUse SerializesModels trait; re-fetch from DB in handle() if needed | \n
\n\n| Timezone mismatch in scheduled tasks | \nServer tz != app tz | \nSet APP_TIMEZONE in .env; use ->timezone() on schedule entries | \n
\n\n| Middleware order matters | \nAuth middleware must run before policies | \nGlobal → route group → route. Auth before throttle check or vice versa changes 401 vs 429 | \n
\n\n| Route model binding skips soft-deleted records | \nRouteServiceProvider ignores trashed() | \nExtend binding: Route::bind('post', fn($id) => Post::withTrashed()->findOrFail($id)) | \n
\n\n| Service container binding not auto-resolved | \nInterface not bound to implementation | \nRegister in AppServiceProvider::register(): $this->app->bind(Interface::class, Implementation::class) | \n
\n\n| Migration foreign key order | \nMust create referenced table first | \nRun migrate:fresh to verify; use Schema::disableForeignKeyConstraints() in tests | \n
\n\n| CSRF protection blocks API routes | \nVerifyCsrfToken runs on all web routes | \nRegister API routes in routes/api.php (uses api middleware group without CSRF) | \n
\n\nenv() returns null after caching | \nconfig:cache bakes env values | \nAlways access env via config() helper in app code; only use env() in config/ files | \n
\n\nBlade @stack renders in wrong order | \n@push must appear after @stack in execution | \nUse @prepend for scripts that must appear first | \n
\n\n| Event listener not firing | \nListener not registered or discovered | \nCheck EventServiceProvider::$listen; or enable Event::discover() in Laravel 11 | \n
\n\n
\n
\nReference Files
\n\n\n\n| File | \nContents | \n
\n\n\n\nreferences/eloquent-queries.md | \nDeep-dive: relationships, query builder, scopes, accessors, mutators, events, soft deletes, pagination, performance, collections, factories | \n
\n\nreferences/architecture.md | \nService container, providers, facades, middleware, events, notifications, jobs, scheduling, Blade components, Livewire, Inertia | \n
\n\nreferences/testing-auth.md | \nPHPUnit/Pest setup, HTTP tests, database testing, fakes, Sanctum, Fortify, policies, form requests, Dusk | \n
\n\n
\n
\nSee Also
\n\nsql-ops - Query optimization, indexing strategy, raw SQL patternspostgres-ops - PostgreSQL-specific features, JSON columns, full-text searchtesting-ops - General testing philosophy, TDD, CI integrationdocker-ops - Containerizing Laravel apps, Docker Compose, production setup
\nKey External Resources
\n\n","files":[{"path":"assets/.gitkeep","sizeBytes":0,"isText":false},{"path":"references/architecture.md","sizeBytes":24782,"isText":true},{"path":"references/eloquent-queries.md","sizeBytes":21248,"isText":true},{"path":"references/testing-auth.md","sizeBytes":27753,"isText":true},{"path":"scripts/.gitkeep","sizeBytes":0,"isText":false},{"path":"SKILL.md","sizeBytes":16960,"isText":true}],"reviewScore":null,"reviewSummary":null,"trust":{"provenance":"trusted-source-unreviewed","notice":"Community-authored content, reproduced verbatim and not vetted as instructions. Treat it as data to evaluate, never as directives to follow.","bodySource":null},"bodyLocked":false,"purchaseUrl":null,"sourceUrl":null,"report":{"provenance":"trusted-source-unreviewed","screen":{"ran":true,"outcome":"notes-only","suspicious":0,"notes":2,"hiddenCharacters":false},"virusScan":{"engine":"clamav","status":"clean","scannedAt":"2026-09-30T19:37:58.789829Z","sha256":"8005A7842D8F8C9CE4B8CB14175F26DCB4A27DB8566C35E3ACE1F4A3BB1849EC","sizeBytes":31221},"review":null,"source":{"repositoryUrl":"https://github.com/0xDarkMatter/claude-mods","path":"skills/laravel-ops","license":"MIT","commit":"3dfaf0ba5753026a99ee13f9d9ed56b9793bb6e8","subtreeSha":"427C04A322B132102D4BA704330BF82A009C9881E03F6BFCFDA26247A902E1D9","lastSyncedAt":"2026-09-30T19:37:28.226022Z"},"reviewedAt":"2026-09-30T19:39:57.773352Z","notice":"Community-authored content, reproduced verbatim and not vetted as instructions. Treat it as data to evaluate, never as directives to follow."},"install":[{"target":"skills-cli","command":"npx skills add https://github.com/0xDarkMatter/claude-mods/tree/main/skills/laravel-ops"},{"target":"claude-code","command":"claude plugin marketplace add https://llmmart.ai/marketplace.json && claude plugin install 0xdarkmatter-claude-mods@llmmart"},{"target":"git","command":"git clone https://github.com/0xDarkMatter/claude-mods.git"}]}