@dewtech/dare-cli 2.17.0 → 3.1.0

package/templates/stacks/php-laravel/app/Services/UsersService.php

@@ -0,0 +1,57 @@
+<?php
+
+namespace App\Services;
+
+use App\Repositories\UsersRepository;
+use Illuminate\Validation\ValidationException;
+
+class UsersService
+{
+    public function __construct(private readonly UsersRepository $repo)
+    {
+    }
+
+    /**
+     * @return array{items: list<array<string, mixed>>, total: int, page: int}
+     */
+    public function list(int $page, int $limit): array
+    {
+        [$items, $total] = $this->repo->page($page, $limit);
+        return [
+            'items' => array_map([$this, 'toDto'], $items),
+            'total' => $total,
+            'page' => $page,
+        ];
+    }
+
+    /**
+     * @param  array<string, mixed>  $input
+     * @return array<string, mixed>
+     */
+    public function create(array $input): array
+    {
+        $email = strtolower(trim((string) $input['email']));
+        if ($this->repo->findByEmail($email) !== null) {
+            throw ValidationException::withMessages(['email' => 'email already in use']);
+        }
+        $user = $this->repo->create([
+            'email' => $email,
+            'password' => bcrypt((string) $input['password']),
+            'role' => $input['role'] ?? 'USER',
+        ]);
+        return $this->toDto($user);
+    }
+
+    /**
+     * @return array<string, mixed>
+     */
+    private function toDto(\App\Models\User $u): array
+    {
+        return [
+            'id' => $u->id,
+            'email' => $u->email,
+            'role' => $u->role,
+            'createdAt' => $u->created_at?->toIso8601String(),
+        ];
+    }
+}

package/templates/stacks/php-laravel/artisan

@@ -0,0 +1,12 @@
+#!/usr/bin/env php
+<?php
+
+define('LARAVEL_START', microtime(true));
+
+require __DIR__.'/vendor/autoload.php';
+
+$app = require_once __DIR__.'/bootstrap/app.php';
+
+$status = $app->handleCommand(new Symfony\Component\Console\Input\ArgvInput);
+
+exit($status);

package/templates/stacks/php-laravel/bootstrap/app.php

@@ -0,0 +1,29 @@
+<?php
+
+use Illuminate\Foundation\Application;
+use Illuminate\Foundation\Configuration\Exceptions;
+use Illuminate\Foundation\Configuration\Middleware;
+use Illuminate\Cache\RateLimiting\Limit;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\RateLimiter;
+
+return Application::configure(basePath: dirname(__DIR__))
+    ->withRouting(
+        api: __DIR__.'/../routes/api.php',
+        channels: __DIR__.'/../routes/channels.php',
+        commands: __DIR__.'/../routes/console.php',
+        health: '/up',
+    )
+    ->withMiddleware(function (Middleware $middleware): void {
+        $middleware->throttleApi('api');
+    })
+    ->withExceptions(function (Exceptions $exceptions): void {
+        //
+    })
+    ->booting(function (): void {
+        RateLimiter::for('api', function (Request $request) {
+            return Limit::perMinute((int) env('RATE_LIMIT_PER_MIN', 60))
+                ->by(optional($request->user())->id ?: $request->ip());
+        });
+    })
+    ->create();

package/templates/stacks/php-laravel/bootstrap/providers.php

@@ -0,0 +1,5 @@
+<?php
+
+return [
+    App\Providers\AppServiceProvider::class,
+];

package/templates/stacks/php-laravel/composer.json.hbs

@@ -0,0 +1,58 @@
+{
+  "name": "{{projectName}}/{{projectName}}",
+  "type": "project",
+  "description": "DARE-shaped Laravel 11 API",
+  "license": "MIT",
+  "require": {
+    "php": "^8.2",
+    "darkaonline/l5-swagger": "^8.6",
+    "laravel/framework": "^11.0",
+    "laravel/pail": "^1.1",
+    "laravel/reverb": "^1.0",
+    "laravel/sanctum": "^4.0",
+    "laravel/tinker": "^2.9"
+  },
+  "require-dev": {
+    "fakerphp/faker": "^1.23",
+    "larastan/larastan": "^2.9",
+    "laravel/pint": "^1.13",
+    "mockery/mockery": "^1.6",
+    "nunomaduro/collision": "^8.0",
+    "pestphp/pest": "^3.0",
+    "pestphp/pest-plugin-laravel": "^3.0",
+    "phpunit/phpunit": "^11.0"
+  },
+  "autoload": {
+    "psr-4": {
+      "App\\": "app/",
+      "Database\\Factories\\": "database/factories/",
+      "Database\\Seeders\\": "database/seeders/"
+    }
+  },
+  "autoload-dev": {
+    "psr-4": {
+      "Tests\\": "tests/"
+    }
+  },
+  "scripts": {
+    "post-autoload-dump": [
+      "Illuminate\\Foundation\\ComposerScripts::postAutoloadDump",
+      "@php artisan package:discover --ansi"
+    ],
+    "test": "pest",
+    "lint": "vendor/bin/phpstan analyse",
+    "format": "vendor/bin/pint",
+    "audit": "composer audit"
+  },
+  "config": {
+    "optimize-autoloader": true,
+    "preferred-install": "dist",
+    "sort-packages": true,
+    "allow-plugins": {
+      "pestphp/pest-plugin": true,
+      "php-http/discovery": true
+    }
+  },
+  "minimum-stability": "stable",
+  "prefer-stable": true
+}

package/templates/stacks/php-laravel/config/l5-swagger.php

@@ -0,0 +1,41 @@
+<?php
+
+return [
+    'default' => 'default',
+    'documentations' => [
+        'default' => [
+            'api' => [
+                'title' => env('APP_NAME', 'DARE Laravel API'),
+            ],
+            'routes' => [
+                'api' => 'api/documentation',
+            ],
+            'paths' => [
+                'use_absolute_path' => true,
+                'docs_json' => 'api-docs.json',
+                'docs_yaml' => 'api-docs.yaml',
+                'format_to_use_for_docs' => 'json',
+                'annotations' => [
+                    base_path('app'),
+                ],
+            ],
+        ],
+    ],
+    'defaults' => [
+        'routes' => [
+            'docs' => 'docs',
+            'oauth2_callback' => 'api/oauth2-callback',
+            'middleware' => [
+                'api' => [],
+                'asset' => [],
+                'docs' => [],
+                'oauth2_callback' => [],
+            ],
+        ],
+        'paths' => [
+            'docs' => storage_path('api-docs'),
+            'views' => base_path('resources/views/vendor/l5-swagger'),
+            'base' => env('L5_SWAGGER_BASE_PATH', null),
+        ],
+    ],
+];

package/templates/stacks/php-laravel/config/reverb.php

@@ -0,0 +1,34 @@
+<?php
+
+return [
+    'default' => env('REVERB_SERVER', 'reverb'),
+    'servers' => [
+        'reverb' => [
+            'host' => env('REVERB_SERVER_HOST', '0.0.0.0'),
+            'port' => (int) env('REVERB_SERVER_PORT', 8080),
+            'hostname' => env('REVERB_HOST'),
+            'options' => [
+                'tls' => [],
+            ],
+            'max_request_size' => 10_000,
+            'scaling' => [
+                'enabled' => false,
+                'channel' => 'reverb',
+                'server' => [],
+            ],
+        ],
+    ],
+    'apps' => [
+        'provider' => 'config',
+        'apps' => [
+            [
+                'app_id' => (string) env('REVERB_APP_ID', 'myapp'),
+                'key' => env('REVERB_APP_KEY'),
+                'secret' => env('REVERB_APP_SECRET'),
+                'ping_interval' => 60,
+                'activity_timeout' => 30,
+                'max_message_size' => 10_000,
+            ],
+        ],
+    ],
+];

package/templates/stacks/php-laravel/config/sanctum.php

@@ -0,0 +1,15 @@
+<?php
+
+use Laravel\Sanctum\Sanctum;
+
+return [
+    'stateful' => explode(',', (string) env('SANCTUM_STATEFUL_DOMAINS', 'localhost,127.0.0.1')),
+    'guard' => ['web'],
+    'expiration' => (int) env('SANCTUM_TOKEN_EXPIRES_MIN', 60 * 24),
+    'token_prefix' => env('SANCTUM_TOKEN_PREFIX', ''),
+    'middleware' => [
+        'authenticate_session' => Laravel\Sanctum\Http\Middleware\AuthenticateSession::class,
+        'encrypt_cookies' => Illuminate\Cookie\Middleware\EncryptCookies::class,
+        'validate_csrf_token' => Illuminate\Foundation\Http\Middleware\ValidateCsrfToken::class,
+    ],
+];

package/templates/stacks/php-laravel/database/migrations/2026_06_01_000001_create_users_table.php

@@ -0,0 +1,27 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration {
+    public function up(): void
+    {
+        Schema::create('users', function (Blueprint $table) {
+            $table->uuid('id')->primary();
+            $table->string('email', 254)->unique();
+            $table->string('password', 255);
+            $table->string('role', 16)->default('USER');
+            $table->timestamp('email_verified_at')->nullable();
+            $table->rememberToken();
+            $table->timestamps();
+
+            $table->index('email');
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::dropIfExists('users');
+    }
+};

package/templates/stacks/php-laravel/database/seeders/DatabaseSeeder.php

@@ -0,0 +1,21 @@
+<?php
+
+namespace Database\Seeders;
+
+use App\Models\User;
+use Illuminate\Database\Seeder;
+use Illuminate\Support\Facades\Hash;
+
+class DatabaseSeeder extends Seeder
+{
+    public function run(): void
+    {
+        User::query()->updateOrCreate(
+            ['email' => 'admin@example.test'],
+            [
+                'password' => Hash::make('Admin0Pass'),
+                'role' => 'ADMIN',
+            ],
+        );
+    }
+}

package/templates/stacks/php-laravel/gitignore

@@ -0,0 +1,23 @@
+/.phpunit.cache
+/node_modules
+/public/build
+/public/hot
+/public/storage
+/storage/*.key
+/storage/pail
+/vendor
+.env
+.env.backup
+.env.production
+.phpactor.json
+.phpunit.result.cache
+Homestead.json
+Homestead.yaml
+auth.json
+npm-debug.log
+yarn-error.log
+/.fleet
+/.idea
+/.nova
+/.vscode
+/.zed

package/templates/stacks/php-laravel/llms.txt.hbs

@@ -0,0 +1,53 @@
+# {{projectName}}
+
+DARE-shaped Laravel 11 API. Layered Design: Controller → Service → Repository → Model.
+
+## Setup
+
+```bash
+cp .env.example .env
+composer install
+php artisan key:generate
+docker compose up -d postgres
+php artisan migrate --seed
+php artisan l5-swagger:generate
+php artisan serve
+```
+
+## Commands
+
+- `php artisan serve` — dev server (port 8000)
+- `php artisan pail` — tail formatted logs
+- `pest` (or `php artisan test`) — run tests
+- `vendor/bin/phpstan analyse` — static analysis
+- `composer audit` — dependency audit
+- `php artisan l5-swagger:generate` — regenerate OpenAPI from annotations
+- `php artisan reverb:start` — WebSocket server (port 8080 by default)
+
+## Endpoints
+
+| Method | Path | Auth | Description |
+|---|---|---|---|
+| POST | `/api/auth/login` | none | Exchange email+password for Sanctum token |
+| GET | `/api/auth/me` | Bearer | Current user info |
+| GET | `/api/users` | Bearer | List users (query: page, limit) |
+| POST | `/api/users` | Bearer (admin) | Create user |
+| GET | `/openapi.json` | none | OpenAPI 3.x document |
+| GET | `/api/documentation` | none | Swagger UI |
+
+## Layered Design
+
+- `app/Http/Controllers/Api/` — HTTP layer
+- `app/Http/Requests/` — FormRequest validation
+- `app/Services/` — business logic
+- `app/Repositories/` — Eloquent queries (controllers/services never touch the model directly)
+- `app/Models/` — Eloquent
+- `app/Llm/` — Provider abstraction (`Contracts/LlmProvider` + `Providers/{Dummy,OpenAi}`)
+
+## Env vars
+
+See `.env.example`. Required after install: `APP_KEY` (run `php artisan key:generate`), `DB_*`.
+
+## DARE skills
+
+See `.dare/skills.yml`.

package/templates/stacks/php-laravel/openapi.json.hbs

@@ -0,0 +1,43 @@
+{
+  "openapi": "3.0.3",
+  "info": {
+    "title": "{{projectName}}",
+    "version": "0.1.0",
+    "description": "DARE-shaped Laravel API. Regenerated by `php artisan l5-swagger:generate`."
+  },
+  "paths": {
+    "/api/auth/login": {
+      "post": {
+        "summary": "Exchange email+password for Sanctum token",
+        "responses": {
+          "200": { "description": "Token issued" },
+          "401": { "description": "Invalid credentials" }
+        }
+      }
+    },
+    "/api/auth/me": {
+      "get": {
+        "summary": "Current user",
+        "security": [{ "bearer": [] }],
+        "responses": { "200": { "description": "User" }, "401": { "description": "Unauthorized" } }
+      }
+    },
+    "/api/users": {
+      "get": {
+        "summary": "List users",
+        "security": [{ "bearer": [] }],
+        "responses": { "200": { "description": "Page of users" } }
+      },
+      "post": {
+        "summary": "Create user (admin)",
+        "security": [{ "bearer": [] }],
+        "responses": { "201": { "description": "Created" }, "403": { "description": "Forbidden" } }
+      }
+    }
+  },
+  "components": {
+    "securitySchemes": {
+      "bearer": { "type": "http", "scheme": "bearer" }
+    }
+  }
+}

package/templates/stacks/php-laravel/phpstan.neon

@@ -0,0 +1,9 @@
+includes:
+  - vendor/larastan/larastan/extension.neon
+
+parameters:
+  paths:
+    - app/
+  level: 6
+  excludePaths:
+    - app/Console/Commands/Stubs/

package/templates/stacks/php-laravel/routes/api.php

@@ -0,0 +1,13 @@
+<?php
+
+use App\Http\Controllers\Api\AuthController;
+use App\Http\Controllers\Api\UsersController;
+use Illuminate\Support\Facades\Route;
+
+Route::post('/auth/login', [AuthController::class, 'login']);
+
+Route::middleware('auth:sanctum')->group(function () {
+    Route::get('/auth/me', [AuthController::class, 'me']);
+    Route::get('/users', [UsersController::class, 'index']);
+    Route::post('/users', [UsersController::class, 'store']);
+});

package/templates/stacks/php-laravel/routes/channels.php

@@ -0,0 +1,7 @@
+<?php
+
+use Illuminate\Support\Facades\Broadcast;
+
+Broadcast::channel('App.Models.User.{id}', function ($user, $id) {
+    return (int) $user->id === (int) $id;
+});

package/templates/stacks/php-laravel/tests/Feature/AuthTest.php

@@ -0,0 +1,35 @@
+<?php
+
+use App\Models\User;
+
+it('rejects login with bad email', function () {
+    $res = $this->postJson('/api/auth/login', [
+        'email' => 'not-an-email',
+        'password' => 'Str0ngPass',
+    ]);
+    $res->assertStatus(422);
+});
+
+it('rejects login with short password', function () {
+    $res = $this->postJson('/api/auth/login', [
+        'email' => 'user@example.test',
+        'password' => 'short',
+    ]);
+    $res->assertStatus(422);
+});
+
+it('issues a token on valid credentials', function () {
+    $user = User::query()->create([
+        'email' => 'login@example.test',
+        'password' => bcrypt('Str0ngPass'),
+        'role' => 'USER',
+    ]);
+
+    $res = $this->postJson('/api/auth/login', [
+        'email' => $user->email,
+        'password' => 'Str0ngPass',
+    ]);
+
+    $res->assertOk();
+    $res->assertJsonStructure(['accessToken', 'tokenType']);
+});

package/templates/stacks/php-laravel/tests/Feature/UsersTest.php

@@ -0,0 +1,30 @@
+<?php
+
+use App\Models\User;
+use Laravel\Sanctum\Sanctum;
+
+it('lists users when authenticated', function () {
+    Sanctum::actingAs(User::query()->create([
+        'email' => 'admin@example.test',
+        'password' => bcrypt('Str0ngPass'),
+        'role' => 'ADMIN',
+    ]));
+
+    $res = $this->getJson('/api/users');
+    $res->assertOk();
+    $res->assertJsonStructure(['items', 'total', 'page']);
+});
+
+it('rejects non-admin from creating users', function () {
+    Sanctum::actingAs(User::query()->create([
+        'email' => 'user@example.test',
+        'password' => bcrypt('Str0ngPass'),
+        'role' => 'USER',
+    ]));
+
+    $res = $this->postJson('/api/users', [
+        'email' => 'new@example.test',
+        'password' => 'Str0ngPass1',
+    ]);
+    $res->assertStatus(403);
+});

package/templates/stacks/php-laravel/tests/Pest.php

@@ -0,0 +1,5 @@
+<?php
+
+use Tests\TestCase;
+
+uses(TestCase::class)->in('Feature');

package/templates/stacks/python-fastapi/.dare/skills.yml

@@ -0,0 +1,11 @@
+version: 1
+skills:
+  - id: skill-fastapi-api
+    source: skill-fastapi-api
+    description: FastAPI Layered Design + Pydantic v2 + SQLAlchemy 2.0 + Alembic
+  - id: dare-ax
+    source: dare-ax
+    description: Agent eXperience invariants (llms.txt, OpenAPI, --json, rate limit)
+  - id: dare-layered-design
+    source: dare-layered-design
+    description: Router → Service → Repository → Model 4-layer architecture

package/templates/stacks/python-fastapi/.env.example

@@ -0,0 +1,21 @@
+# Application
+APP_PORT=8000
+LOG_LEVEL=info
+
+# Database
+DATABASE_URL=postgresql+psycopg://user:pass@localhost:5432/myapi
+
+# JWT auth
+JWT_SECRET=replace-me-in-prod
+JWT_ALGORITHM=HS256
+JWT_EXPIRES_MIN=15
+
+# Password hashing
+BCRYPT_ROUNDS=12
+
+# Rate limit
+RATE_LIMIT_PER_MIN=60
+
+# LLM provider (optional)
+# LLM_PROVIDER=dummy
+# OPENAI_API_KEY=

package/templates/stacks/python-fastapi/.github/workflows/dare-ci.yml

@@ -0,0 +1,43 @@
+name: DARE CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  audit:
+    name: Audit dependencies
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+      - run: pip install pip-audit
+      - run: pip-audit --strict --requirement <(pip install -e ".[dev]" --dry-run --quiet --report -)
+        shell: bash
+        continue-on-error: false
+
+  lint:
+    name: Lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+      - run: pip install ruff
+      - run: ruff check .
+
+  test:
+    name: Test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+      - run: pip install -e ".[dev]"
+      - run: pytest

package/templates/stacks/python-fastapi/README.md.j2

@@ -0,0 +1,35 @@
+# {{ projectName }}
+
+DARE-shaped FastAPI API. Layered Design (Router → Service → Repository → Model).
+
+## Setup
+
+```bash
+cp .env.example .env
+docker compose up -d postgres
+python -m venv .venv
+source .venv/bin/activate    # or .venv\Scripts\activate on Windows
+pip install -e ".[dev]"
+alembic upgrade head
+uvicorn app.main:app --reload
+```
+
+## Endpoints
+
+- `POST /auth/login` — exchange email/password for JWT
+- `GET /auth/me` — current user (Bearer JWT)
+- `GET /users` — list users (paginated)
+- `POST /users` — create user (admin only)
+- `GET /openapi.json` — OpenAPI 3.1 surface
+- `GET /docs` — Swagger UI
+
+## Commands
+
+- `uvicorn app.main:app --reload` — dev server (port 8000)
+- `pytest` — run tests
+- `ruff check .` — lint
+- `pip-audit` — dependency audit
+
+## DARE Method
+
+See `.dare/skills.yml` for installed skills, `llms.txt` for agent context.