README

Opinionated personal Laravel preset. One command scaffolds the dev tooling, code conventions and CI used across new projects (on top of the Laravel + Vue starter kit, so anything the starter kit already ships is not duplicated).

Install

composer require paolobellini/laravel-preset --dev
php artisan preset:install

preset:install runs composer update for you when the scripts group is selected — using ./vendor/bin/sail composer update when Laravel Sail is installed, otherwise plain composer update (pass --no-install to skip). Then generate helpers:

composer ide-helper

What it does

php artisan preset:install is interactive — pick any of the four groups:

configs — lint / format / static analysis

Copies the configs not already in the starter kit:

ai — conventions

Copies the .ai/ directory only:

• .ai/guidelines/personal/* — precedence, comments, commits, controllers (action pattern), testing, workflow.
• .ai/mcp/mcp.json.

scripts — composer quality scripts + dev deps

Merges into composer.json without clobbering existing keys.

Composer require-dev added (skips anything already present): barryvdh/laravel-ide-helper, fruitcake/laravel-debugbar, larastan/larastan, laravel/pint, laravel/boost, laravel/pail, rector/rector, driftingly/rector-laravel, pestphp/pest + pest-plugin-type-coverage. nunomaduro/essentials goes into require. nunomaduro/collision and pestphp/pest-plugin-laravel are not added — they already ship with the starter kit.

Composer scripts added: lint, analyse, refactor, type, coverage, tests, check:lint, check:refactor, php-checks, node-checks, ide-helper, cleanup.

• composer cleanup → Pint, Pest (90% coverage + type-coverage), PHPStan, Rector dry-run.
• composer ide-helper → ide-helper:generate + ide-helper:models -RW.

npm deps and scripts are not touched — the starter kit already provides ESLint, Prettier, TypeScript and their lint/format/types:check scripts.

github — CI workflows

First removes the starter-kit lint.yml + tests.yml (superseded), then copies caller workflows that reference the reusable workflows / composite actions in paolobellini/bellini.one:

• .github/workflows/analyse.yml — on push to main / any PR, calls laravel-lint.yml@v1.0 (pint + rector + phpstan + node-checks).
• .github/workflows/tests.yml — on push to main / any PR, calls laravel-test.yml@v1.0.
• .github/workflows/security.yml — on PR targeting staging, runs the actions/general/security@v1.0 Trivy scan.

Flags

php artisan preset:install --configs --ai --scripts --github   # pick groups
php artisan preset:install --force                             # overwrite existing files / deps
php artisan preset:install --no-install                        # skip the auto composer update

Without flags in a non-interactive shell, all groups install.

Conventions in brief

• Actions pattern: thin controllers — validate (Form Request) → bind → $action->handle(...) → Resource. One final action per write, single handle().
• No explanatory comments; PHPDoc only (array shapes / generics).
• Commits: type(scope): message, all lowercase, subject only.
• Tests: Pest, ≥90% coverage. Unit tests assert the object; feature tests assert the database. tests/Feature/{Model}/{Method}Test.php.
• PHP: strict types, final classes, constructor property promotion, explicit return types, curly braces always.

License

MIT