Communitygithub.com

laravel-verification

Laravel 项目的验证循环:环境检查、代码规范、静态分析、带覆盖率的测试、安全扫描和部署就绪检查。在合并或部署前验证 Laravel 项目时使用——代码规范、静态分析、测试、覆盖率、安全。

laravel-verification 是什么?

该技能为 Laravel 项目提供了一套全面的验证循环流程,涵盖从环境检查到部署就绪的完整阶段。它支持多种平台(如本地开发、CI 环境),并通过顺序执行的阶段确保每个验证层次都建立在上一阶段之上。技能详细描述了 7 个阶段:环境检查、Composer 和自动加载、代码规范与静态分析、测试与覆盖率、安全与依赖检查、数据库与迁移、构建与部署就绪、队列与调度检查。每个阶段都提供了具体的命令示例,包括使用 Laravel Sail、Psalm 替代 PHPStan、Horizon 等工具的变体。该技能对于在 PR 合并前、重大变更后或部署前进行快速、系统化的 Laravel 项目健康检查非常有用,能有效预防生产问题。

兼容平台~Claude Code~Codex CLI~Cursor
npx skills add https://github.com/affaan-m/ECC/tree/main/skills/laravel-verification

在你喜欢的 AI 中提问

打开一个已预加载此 Agent Skill 的新对话。

文档

Laravel 验证循环

在拉取请求前、重大变更后以及部署前运行。

何时使用

  • 为 Laravel 项目打开拉取请求之前
  • 重大重构或依赖升级之后
  • 预部署验证(用于预发或生产环境)
  • 运行完整的代码规范 -> 测试 -> 安全 -> 部署就绪流水线

工作原理

  • 按顺序运行阶段:从环境检查到部署就绪,每个阶段建立在上一个阶段基础上。
  • 环境和 Composer 检查是其他一切的前置关卡;一旦失败立即停止。
  • 代码规范/静态分析应在运行完整测试和覆盖率之前保持干净。
  • 安全检查和迁移审查在测试之后进行,以便在数据或发布步骤之前验证行为。
  • 构建/部署就绪以及队列/调度检查是最终关卡;任何失败都会阻止发布。

阶段 1:环境检查

php -v
composer --version
php artisan --version
  • 验证 .env 文件存在且包含必需的键
  • 确认生产环境中 APP_DEBUG=false
  • 确认 APP_ENV 与目标部署环境匹配(production、staging)

如果在本地使用 Laravel Sail:

./vendor/bin/sail php -v
./vendor/bin/sail artisan --version

阶段 1.5:Composer 和自动加载

composer validate
composer dump-autoload -o

阶段 2:代码规范和静态分析

vendor/bin/pint --test
vendor/bin/phpstan analyse

如果你的项目使用 Psalm 而不是 PHPStan:

vendor/bin/psalm

阶段 3:测试和覆盖率

php artisan test

覆盖率(CI 中):

XDEBUG_MODE=coverage php artisan test --coverage

CI 示例(格式检查 -> 静态分析 -> 测试):

vendor/bin/pint --test
vendor/bin/phpstan analyse
XDEBUG_MODE=coverage php artisan test --coverage

阶段 4:安全和依赖检查

composer audit

阶段 5:数据库和迁移

php artisan migrate --pretend
php artisan migrate:status
  • 仔细审查破坏性迁移
  • 确保迁移文件名遵循 Y_m_d_His_* 格式(例如 2025_03_14_154210_create_orders_table.php)并清晰描述变更内容
  • 确保可以回滚
  • 验证 down() 方法,避免在没有明确备份的情况下造成不可逆的数据丢失

阶段 6:构建和部署就绪

php artisan optimize:clear
php artisan config:cache
php artisan route:cache
php artisan view:cache
  • 确保在生产配置下缓存预热成功
  • 验证队列工作者和调度器已配置
  • 确认目标环境中 storage/ 和 bootstrap/cache/ 可写

阶段 7:队列和调度检查

php artisan schedule:list
php artisan queue:failed

如果使用 Horizon:

php artisan horizon:status

如果 queue:monitor 可用,使用它来检查积压而不处理作业:

php artisan queue:monitor default --max=100

主动验证(仅预发环境):向专用队列分派一个无操作作业,并运行一个单次工作者来处理它(确保配置了非 sync 的队列连接)。

php artisan tinker --execute="dispatch((new App\\Jobs\\QueueHealthcheck())->onQueue('healthcheck'))"
php artisan queue:work --once --queue=healthcheck

验证作业产生了预期的副作用(日志条目、健康检查表行或指标)。

仅在不处理生产任务的非生产环境中运行此操作。

示例

最小流程:

php -v
composer --version
php artisan --version
composer validate
vendor/bin/pint --test
vendor/bin/phpstan analyse
php artisan test
composer audit
php artisan migrate --pretend
php artisan config:cache
php artisan queue:failed

CI 风格的流水线:

composer validate
composer dump-autoload -o
vendor/bin/pint --test
vendor/bin/phpstan analyse
XDEBUG_MODE=coverage php artisan test --coverage
composer audit
php artisan migrate --pretend
php artisan optimize:clear
php artisan config:cache
php artisan route:cache
php artisan view:cache
php artisan schedule:list

Individual skills in this repo

This repo contains 20 individual skills — each has its own dedicated page.

accessibility

Design, implement, and audit inclusive digital products using WCAG 2.2 Level AA. Use when building or auditing UI that must meet WCAG 2.2 Level AA, or when reviewing a change for keyboard, contrast, or screen-reader support.

affaan-m/content-engine

Create platform-native content systems for X, LinkedIn, TikTok, YouTube, newsletters, and repurposed multi-platform campaigns. Use when the user wants social posts, threads, scripts, content calendars, or one source asset adapted cleanly across platforms.

affaan-m/ECC

Multi-platform content distribution across X, LinkedIn, Threads, and Bluesky. Adapts content per platform using content-engine patterns. Never posts identical content cross-platform. Use when the user wants to distribute content across social platforms.

affaan-m/fal-ai-media

Unified media generation via fal.ai MCP — image, video, and audio. Covers text-to-image (Nano Banana), text/image-to-video (Seedance, Kling, Veo 3), text-to-speech (CSM-1B), and video-to-audio (ThinkSound). Use when the user wants to generate images, videos, or audio with AI.

affaan-m/manim-video

日本語翻訳:このファイルは manim-video 用の日本語翻訳が必要です

affaan-m/remotion-video-creation

Remotion のベストプラクティス - React で動画を作成する。3D、アニメーション、音声、字幕、チャート、トランジションなどをカバーするドメイン固有の29のルール。

affaan-m/video-editing

AI-assisted video editing workflows for cutting, structuring, and augmenting real footage. Covers the full pipeline from raw capture through FFmpeg, Remotion, ElevenLabs, fal.ai, and final polish in Descript or CapCut. Use when the user wants to edit video, cut footage, create vlogs, or build video content.

agent-architecture-audit

Full-stack diagnostic for agent and LLM applications. Audits the 12-layer agent stack for wrapper regression, memory pollution, tool discipline failures, hidden repair loops, and rendering corruption. Produces severity-ranked findings with code-first fixes. Essential for developers building agent applications, autonomous loops, or any LLM-powered feature. Use when an agent or LLM feature misbehaves and the failing layer is unknown, or before shipping an agent stack.

agent-eval

Head-to-head comparison of coding agents (Claude Code, Aider, Codex, etc.) on custom tasks with pass rate, cost, time, and consistency metrics. Use when choosing between coding agents, or when a change to an agent setup needs measured pass rate, cost, and time rather than an impression.

agent-harness-construction

Design and optimize AI agent action spaces, tool definitions, and observation formatting for higher completion rates. Use when defining or revising an agent

agentic-engineering

Operate as an agentic engineer using eval-first execution, decomposition, and cost-aware model routing. Use when planning or executing engineering work that agents will carry out end to end.

agentic-os

Build persistent multi-agent operating systems on Claude Code. Covers kernel architecture, specialist agents, slash commands, file-based memory, scheduled automation, and state management without external databases. Use when building a persistent multi-agent system on Claude Code with its own memory, commands, and scheduling.

agent-introspection-debugging

Structured self-debugging workflow for AI agent failures using capture, diagnosis, contained recovery, and introspection reports. Use when an agent run fails and you need a reproducible diagnosis instead of a retry.

agent-payment-x402

Add x402 payment execution to AI agents with per-task budgets, spending controls, and non-custodial wallets. Supports Base through agentwallet-sdk and X Layer through OKX Payments / OKX Agent Payments Protocol. Use when an agent must pay for something itself and needs per-task budgets, spending controls, and a non-custodial wallet.

agent-self-evaluation

Use after completing any non-trivial task. The agent self-rates its output on 5 axes — accuracy, completeness, clarity, actionability, conciseness — with concrete evidence per criterion. Produces a structured 1-5 scorecard with specific improvement suggestions.

agent-sort

Build an evidence-backed ECC install plan for a specific repo by sorting skills, commands, rules, hooks, and extras into DAILY vs LIBRARY buckets using parallel repo-aware review passes. Use when ECC should be trimmed to what a project actually needs instead of loading the full bundle.

ai-first-engineering

Engineering operating model for teams where AI agents generate a large share of implementation output. Use when setting team process, review gates, or ownership rules for a codebase largely written by agents.

ai-regression-testing

Regression testing strategies for AI-assisted development. Sandbox-mode API testing without database dependencies, automated bug-check workflows, and patterns to catch AI blind spots where the same model writes and reviews code. Use when adding regression coverage to AI-assisted code, or when the same model both wrote and reviewed a change.

android-clean-architecture

Clean Architecture patterns for Android and Kotlin Multiplatform projects — module structure, dependency rules, UseCases, Repositories, and data layer patterns. Use when structuring modules, layers, or data flow in an Android or KMP project.

angular-developer

Generates Angular code and provides architectural guidance. Trigger when creating projects, components, or services, or for best practices on reactivity (signals, linkedSignal, resource), forms, dependency injection, routing, SSR, accessibility (ARIA), animations, styling (component styles, Tailwind CSS), testing, or CLI tooling.

相关技能