@dewtech/dare-cli 3.0.0 → 3.1.0

package/templates/stacks/php-laravel/app/Http/Controllers/Api/UsersController.php

@@ -0,0 +1,33 @@
+<?php
+
+namespace App\Http\Controllers\Api;
+
+use App\Http\Requests\CreateUserRequest;
+use App\Services\UsersService;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+use Illuminate\Routing\Controller;
+
+class UsersController extends Controller
+{
+    public function __construct(private readonly UsersService $users)
+    {
+    }
+
+    public function index(Request $request): JsonResponse
+    {
+        $page = max(1, (int) $request->query('page', '1'));
+        $limit = min(100, max(1, (int) $request->query('limit', '20')));
+        return response()->json($this->users->list($page, $limit));
+    }
+
+    public function store(CreateUserRequest $request): JsonResponse
+    {
+        $caller = $request->user();
+        if ($caller === null || $caller->role !== 'ADMIN') {
+            return response()->json(['error' => 'admin role required'], 403);
+        }
+        $created = $this->users->create($request->validated());
+        return response()->json($created, 201);
+    }
+}

package/templates/stacks/php-laravel/app/Http/Requests/CreateUserRequest.php

@@ -0,0 +1,26 @@
+<?php
+
+namespace App\Http\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Validation\Rule;
+
+class CreateUserRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * @return array<string, mixed>
+     */
+    public function rules(): array
+    {
+        return [
+            'email' => ['required', 'email', 'max:254', 'unique:users,email'],
+            'password' => ['required', 'string', 'min:8', 'regex:/[A-Z]/', 'regex:/[0-9]/'],
+            'role' => ['sometimes', Rule::in(['USER', 'ADMIN'])],
+        ];
+    }
+}

package/templates/stacks/php-laravel/app/Http/Requests/LoginRequest.php

@@ -0,0 +1,34 @@
+<?php
+
+namespace App\Http\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class LoginRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * @return array<string, mixed>
+     */
+    public function rules(): array
+    {
+        return [
+            'email' => ['required', 'email', 'max:254'],
+            'password' => ['required', 'string', 'min:8', 'regex:/[A-Z]/', 'regex:/[0-9]/'],
+        ];
+    }
+
+    /**
+     * @return array<string, string>
+     */
+    public function messages(): array
+    {
+        return [
+            'password.regex' => 'Password must contain an uppercase letter and a digit.',
+        ];
+    }
+}

package/templates/stacks/php-laravel/app/Llm/Contracts/LlmProvider.php

@@ -0,0 +1,12 @@
+<?php
+
+namespace App\Llm\Contracts;
+
+interface LlmProvider
+{
+    /**
+     * Complete a prompt. Implementations decide on streaming vs. one-shot
+     * via their own configuration; this contract is the synchronous shape.
+     */
+    public function complete(string $prompt, int $maxTokens = 512): string;
+}

package/templates/stacks/php-laravel/app/Llm/Providers/DummyProvider.php

@@ -0,0 +1,13 @@
+<?php
+
+namespace App\Llm\Providers;
+
+use App\Llm\Contracts\LlmProvider;
+
+class DummyProvider implements LlmProvider
+{
+    public function complete(string $prompt, int $maxTokens = 512): string
+    {
+        return '[dummy] '.substr($prompt, 0, $maxTokens);
+    }
+}

package/templates/stacks/php-laravel/app/Llm/Providers/OpenAiProvider.php

@@ -0,0 +1,33 @@
+<?php
+
+namespace App\Llm\Providers;
+
+use App\Llm\Contracts\LlmProvider;
+use Illuminate\Support\Facades\Http;
+use RuntimeException;
+
+class OpenAiProvider implements LlmProvider
+{
+    public function __construct(
+        private readonly string $apiKey,
+        private readonly string $model = 'gpt-4o-mini',
+        private readonly string $baseUri = 'https://api.openai.com/v1',
+    ) {
+    }
+
+    public function complete(string $prompt, int $maxTokens = 512): string
+    {
+        $res = Http::withToken($this->apiKey)
+            ->post("{$this->baseUri}/chat/completions", [
+                'model' => $this->model,
+                'messages' => [['role' => 'user', 'content' => $prompt]],
+                'max_tokens' => $maxTokens,
+            ]);
+
+        if (! $res->successful()) {
+            throw new RuntimeException('OpenAI request failed: '.$res->status());
+        }
+
+        return (string) ($res->json('choices.0.message.content') ?? '');
+    }
+}

package/templates/stacks/php-laravel/app/Models/User.php

@@ -0,0 +1,44 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Concerns\HasUuids;
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Foundation\Auth\User as Authenticatable;
+use Illuminate\Notifications\Notifiable;
+use Laravel\Sanctum\HasApiTokens;
+
+/**
+ * @property string $id
+ * @property string $email
+ * @property string $password
+ * @property string $role
+ * @property \Illuminate\Support\Carbon|null $created_at
+ * @property \Illuminate\Support\Carbon|null $updated_at
+ */
+class User extends Authenticatable
+{
+    use HasApiTokens;
+    use HasFactory;
+    use HasUuids;
+    use Notifiable;
+
+    protected $fillable = [
+        'email',
+        'password',
+        'role',
+    ];
+
+    protected $hidden = [
+        'password',
+        'remember_token',
+    ];
+
+    protected function casts(): array
+    {
+        return [
+            'email_verified_at' => 'datetime',
+            'password' => 'hashed',
+        ];
+    }
+}

package/templates/stacks/php-laravel/app/Repositories/UsersRepository.php

@@ -0,0 +1,32 @@
+<?php
+
+namespace App\Repositories;
+
+use App\Models\User;
+
+class UsersRepository
+{
+    public function findByEmail(string $email): ?User
+    {
+        return User::query()->where('email', $email)->first();
+    }
+
+    /**
+     * @return array{0: list<User>, 1: int}
+     */
+    public function page(int $page, int $limit): array
+    {
+        $offset = ($page - 1) * $limit;
+        $items = User::query()->orderByDesc('created_at')->skip($offset)->take($limit)->get()->all();
+        $total = User::query()->count();
+        return [$items, $total];
+    }
+
+    /**
+     * @param  array{email: string, password: string, role: string}  $data
+     */
+    public function create(array $data): User
+    {
+        return User::query()->create($data);
+    }
+}

package/templates/stacks/php-laravel/app/Services/AuthService.php

@@ -0,0 +1,37 @@
+<?php
+
+namespace App\Services;
+
+use App\Repositories\UsersRepository;
+use Illuminate\Auth\AuthenticationException;
+use Illuminate\Support\Facades\Hash;
+
+class AuthService
+{
+    public function __construct(private readonly UsersRepository $users)
+    {
+    }
+
+    /**
+     * @param  array<string, mixed>  $input
+     * @return array{accessToken: string, tokenType: string}
+     *
+     * @throws AuthenticationException
+     */
+    public function login(array $input): array
+    {
+        $email = strtolower(trim((string) $input['email']));
+        $user = $this->users->findByEmail($email);
+
+        if ($user === null || ! Hash::check((string) $input['password'], (string) $user->password)) {
+            throw new AuthenticationException('Invalid credentials');
+        }
+
+        $token = $user->createToken('api', ['*'])->plainTextToken;
+
+        return [
+            'accessToken' => $token,
+            'tokenType' => 'Bearer',
+        ];
+    }
+}

package/templates/stacks/php-laravel/app/Services/UsersService.php

@@ -0,0 +1,57 @@
+<?php
+
+namespace App\Services;
+
+use App\Repositories\UsersRepository;
+use Illuminate\Validation\ValidationException;
+
+class UsersService
+{
+    public function __construct(private readonly UsersRepository $repo)
+    {
+    }
+
+    /**
+     * @return array{items: list<array<string, mixed>>, total: int, page: int}
+     */
+    public function list(int $page, int $limit): array
+    {
+        [$items, $total] = $this->repo->page($page, $limit);
+        return [
+            'items' => array_map([$this, 'toDto'], $items),
+            'total' => $total,
+            'page' => $page,
+        ];
+    }
+
+    /**
+     * @param  array<string, mixed>  $input
+     * @return array<string, mixed>
+     */
+    public function create(array $input): array
+    {
+        $email = strtolower(trim((string) $input['email']));
+        if ($this->repo->findByEmail($email) !== null) {
+            throw ValidationException::withMessages(['email' => 'email already in use']);
+        }
+        $user = $this->repo->create([
+            'email' => $email,
+            'password' => bcrypt((string) $input['password']),
+            'role' => $input['role'] ?? 'USER',
+        ]);
+        return $this->toDto($user);
+    }
+
+    /**
+     * @return array<string, mixed>
+     */
+    private function toDto(\App\Models\User $u): array
+    {
+        return [
+            'id' => $u->id,
+            'email' => $u->email,
+            'role' => $u->role,
+            'createdAt' => $u->created_at?->toIso8601String(),
+        ];
+    }
+}

package/templates/stacks/php-laravel/artisan

@@ -0,0 +1,12 @@
+#!/usr/bin/env php
+<?php
+
+define('LARAVEL_START', microtime(true));
+
+require __DIR__.'/vendor/autoload.php';
+
+$app = require_once __DIR__.'/bootstrap/app.php';
+
+$status = $app->handleCommand(new Symfony\Component\Console\Input\ArgvInput);
+
+exit($status);

package/templates/stacks/php-laravel/bootstrap/app.php

@@ -0,0 +1,29 @@
+<?php
+
+use Illuminate\Foundation\Application;
+use Illuminate\Foundation\Configuration\Exceptions;
+use Illuminate\Foundation\Configuration\Middleware;
+use Illuminate\Cache\RateLimiting\Limit;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\RateLimiter;
+
+return Application::configure(basePath: dirname(__DIR__))
+    ->withRouting(
+        api: __DIR__.'/../routes/api.php',
+        channels: __DIR__.'/../routes/channels.php',
+        commands: __DIR__.'/../routes/console.php',
+        health: '/up',
+    )
+    ->withMiddleware(function (Middleware $middleware): void {
+        $middleware->throttleApi('api');
+    })
+    ->withExceptions(function (Exceptions $exceptions): void {
+        //
+    })
+    ->booting(function (): void {
+        RateLimiter::for('api', function (Request $request) {
+            return Limit::perMinute((int) env('RATE_LIMIT_PER_MIN', 60))
+                ->by(optional($request->user())->id ?: $request->ip());
+        });
+    })
+    ->create();

package/templates/stacks/php-laravel/bootstrap/providers.php

@@ -0,0 +1,5 @@
+<?php
+
+return [
+    App\Providers\AppServiceProvider::class,
+];

package/templates/stacks/php-laravel/composer.json.hbs

@@ -0,0 +1,58 @@
+{
+  "name": "{{projectName}}/{{projectName}}",
+  "type": "project",
+  "description": "DARE-shaped Laravel 11 API",
+  "license": "MIT",
+  "require": {
+    "php": "^8.2",
+    "darkaonline/l5-swagger": "^8.6",
+    "laravel/framework": "^11.0",
+    "laravel/pail": "^1.1",
+    "laravel/reverb": "^1.0",
+    "laravel/sanctum": "^4.0",
+    "laravel/tinker": "^2.9"
+  },
+  "require-dev": {
+    "fakerphp/faker": "^1.23",
+    "larastan/larastan": "^2.9",
+    "laravel/pint": "^1.13",
+    "mockery/mockery": "^1.6",
+    "nunomaduro/collision": "^8.0",
+    "pestphp/pest": "^3.0",
+    "pestphp/pest-plugin-laravel": "^3.0",
+    "phpunit/phpunit": "^11.0"
+  },
+  "autoload": {
+    "psr-4": {
+      "App\\": "app/",
+      "Database\\Factories\\": "database/factories/",
+      "Database\\Seeders\\": "database/seeders/"
+    }
+  },
+  "autoload-dev": {
+    "psr-4": {
+      "Tests\\": "tests/"
+    }
+  },
+  "scripts": {
+    "post-autoload-dump": [
+      "Illuminate\\Foundation\\ComposerScripts::postAutoloadDump",
+      "@php artisan package:discover --ansi"
+    ],
+    "test": "pest",
+    "lint": "vendor/bin/phpstan analyse",
+    "format": "vendor/bin/pint",
+    "audit": "composer audit"
+  },
+  "config": {
+    "optimize-autoloader": true,
+    "preferred-install": "dist",
+    "sort-packages": true,
+    "allow-plugins": {
+      "pestphp/pest-plugin": true,
+      "php-http/discovery": true
+    }
+  },
+  "minimum-stability": "stable",
+  "prefer-stable": true
+}

package/templates/stacks/php-laravel/config/l5-swagger.php

@@ -0,0 +1,41 @@
+<?php
+
+return [
+    'default' => 'default',
+    'documentations' => [
+        'default' => [
+            'api' => [
+                'title' => env('APP_NAME', 'DARE Laravel API'),
+            ],
+            'routes' => [
+                'api' => 'api/documentation',
+            ],
+            'paths' => [
+                'use_absolute_path' => true,
+                'docs_json' => 'api-docs.json',
+                'docs_yaml' => 'api-docs.yaml',
+                'format_to_use_for_docs' => 'json',
+                'annotations' => [
+                    base_path('app'),
+                ],
+            ],
+        ],
+    ],
+    'defaults' => [
+        'routes' => [
+            'docs' => 'docs',
+            'oauth2_callback' => 'api/oauth2-callback',
+            'middleware' => [
+                'api' => [],
+                'asset' => [],
+                'docs' => [],
+                'oauth2_callback' => [],
+            ],
+        ],
+        'paths' => [
+            'docs' => storage_path('api-docs'),
+            'views' => base_path('resources/views/vendor/l5-swagger'),
+            'base' => env('L5_SWAGGER_BASE_PATH', null),
+        ],
+    ],
+];

package/templates/stacks/php-laravel/config/reverb.php

@@ -0,0 +1,34 @@
+<?php
+
+return [
+    'default' => env('REVERB_SERVER', 'reverb'),
+    'servers' => [
+        'reverb' => [
+            'host' => env('REVERB_SERVER_HOST', '0.0.0.0'),
+            'port' => (int) env('REVERB_SERVER_PORT', 8080),
+            'hostname' => env('REVERB_HOST'),
+            'options' => [
+                'tls' => [],
+            ],
+            'max_request_size' => 10_000,
+            'scaling' => [
+                'enabled' => false,
+                'channel' => 'reverb',
+                'server' => [],
+            ],
+        ],
+    ],
+    'apps' => [
+        'provider' => 'config',
+        'apps' => [
+            [
+                'app_id' => (string) env('REVERB_APP_ID', 'myapp'),
+                'key' => env('REVERB_APP_KEY'),
+                'secret' => env('REVERB_APP_SECRET'),
+                'ping_interval' => 60,
+                'activity_timeout' => 30,
+                'max_message_size' => 10_000,
+            ],
+        ],
+    ],
+];

package/templates/stacks/php-laravel/config/sanctum.php

@@ -0,0 +1,15 @@
+<?php
+
+use Laravel\Sanctum\Sanctum;
+
+return [
+    'stateful' => explode(',', (string) env('SANCTUM_STATEFUL_DOMAINS', 'localhost,127.0.0.1')),
+    'guard' => ['web'],
+    'expiration' => (int) env('SANCTUM_TOKEN_EXPIRES_MIN', 60 * 24),
+    'token_prefix' => env('SANCTUM_TOKEN_PREFIX', ''),
+    'middleware' => [
+        'authenticate_session' => Laravel\Sanctum\Http\Middleware\AuthenticateSession::class,
+        'encrypt_cookies' => Illuminate\Cookie\Middleware\EncryptCookies::class,
+        'validate_csrf_token' => Illuminate\Foundation\Http\Middleware\ValidateCsrfToken::class,
+    ],
+];

package/templates/stacks/php-laravel/database/migrations/2026_06_01_000001_create_users_table.php

@@ -0,0 +1,27 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration {
+    public function up(): void
+    {
+        Schema::create('users', function (Blueprint $table) {
+            $table->uuid('id')->primary();
+            $table->string('email', 254)->unique();
+            $table->string('password', 255);
+            $table->string('role', 16)->default('USER');
+            $table->timestamp('email_verified_at')->nullable();
+            $table->rememberToken();
+            $table->timestamps();
+
+            $table->index('email');
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::dropIfExists('users');
+    }
+};

package/templates/stacks/php-laravel/database/seeders/DatabaseSeeder.php

@@ -0,0 +1,21 @@
+<?php
+
+namespace Database\Seeders;
+
+use App\Models\User;
+use Illuminate\Database\Seeder;
+use Illuminate\Support\Facades\Hash;
+
+class DatabaseSeeder extends Seeder
+{
+    public function run(): void
+    {
+        User::query()->updateOrCreate(
+            ['email' => 'admin@example.test'],
+            [
+                'password' => Hash::make('Admin0Pass'),
+                'role' => 'ADMIN',
+            ],
+        );
+    }
+}

package/templates/stacks/php-laravel/gitignore

@@ -0,0 +1,23 @@
+/.phpunit.cache
+/node_modules
+/public/build
+/public/hot
+/public/storage
+/storage/*.key
+/storage/pail
+/vendor
+.env
+.env.backup
+.env.production
+.phpactor.json
+.phpunit.result.cache
+Homestead.json
+Homestead.yaml
+auth.json
+npm-debug.log
+yarn-error.log
+/.fleet
+/.idea
+/.nova
+/.vscode
+/.zed

package/templates/stacks/php-laravel/llms.txt.hbs

@@ -0,0 +1,53 @@
+# {{projectName}}
+
+DARE-shaped Laravel 11 API. Layered Design: Controller → Service → Repository → Model.
+
+## Setup
+
+```bash
+cp .env.example .env
+composer install
+php artisan key:generate
+docker compose up -d postgres
+php artisan migrate --seed
+php artisan l5-swagger:generate
+php artisan serve
+```
+
+## Commands
+
+- `php artisan serve` — dev server (port 8000)
+- `php artisan pail` — tail formatted logs
+- `pest` (or `php artisan test`) — run tests
+- `vendor/bin/phpstan analyse` — static analysis
+- `composer audit` — dependency audit
+- `php artisan l5-swagger:generate` — regenerate OpenAPI from annotations
+- `php artisan reverb:start` — WebSocket server (port 8080 by default)
+
+## Endpoints
+
+| Method | Path | Auth | Description |
+|---|---|---|---|
+| POST | `/api/auth/login` | none | Exchange email+password for Sanctum token |
+| GET | `/api/auth/me` | Bearer | Current user info |
+| GET | `/api/users` | Bearer | List users (query: page, limit) |
+| POST | `/api/users` | Bearer (admin) | Create user |
+| GET | `/openapi.json` | none | OpenAPI 3.x document |
+| GET | `/api/documentation` | none | Swagger UI |
+
+## Layered Design
+
+- `app/Http/Controllers/Api/` — HTTP layer
+- `app/Http/Requests/` — FormRequest validation
+- `app/Services/` — business logic
+- `app/Repositories/` — Eloquent queries (controllers/services never touch the model directly)
+- `app/Models/` — Eloquent
+- `app/Llm/` — Provider abstraction (`Contracts/LlmProvider` + `Providers/{Dummy,OpenAi}`)
+
+## Env vars
+
+See `.env.example`. Required after install: `APP_KEY` (run `php artisan key:generate`), `DB_*`.
+
+## DARE skills
+
+See `.dare/skills.yml`.