From cc0fcc690b71ac40e0674e3956a29a5b92d8300c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20Kr=C3=A1l?= Date: Sun, 26 Jul 2026 09:11:02 +0200 Subject: [PATCH 1/3] chore(deps): replace cursor-rules with laravel-agent-skills Swap pekral/cursor-rules for agentic-vibes/laravel-agent-skills: require-dev entry, allow-plugins entry and the build script installer call (the new binary is agent-skills and targets Claude Code only, so --editor is gone). Add the VCS repository entry because the package is not published on Packagist. Drop the leftover Cursor references: the .cursor ignore rule and the .cursor mention in CLAUDE.md. --- .gitignore | 1 - CLAUDE.md | 2 +- composer.json | 14 ++++++++++---- 3 files changed, 11 insertions(+), 6 deletions(-) diff --git a/.gitignore b/.gitignore index 8f4d483..6f04df9 100644 --- a/.gitignore +++ b/.gitignore @@ -1,6 +1,5 @@ /.idea /.claude -.cursor/* /vendor .DS_Store tests/.DS_Store diff --git a/CLAUDE.md b/CLAUDE.md index c088a79..083cfeb 100644 --- a/CLAUDE.md +++ b/CLAUDE.md @@ -65,5 +65,5 @@ Strong success criteria let you loop independently. Weak criteria ("make it work **These guidelines are working if:** fewer unnecessary changes in diffs, fewer rewrites due to overcomplication, and clarifying questions come before implementation rather than after mistakes. **Before push changes into repository run `composer build` and fix all errors, never ignore errors!** -- Files in the .claude/ and .cursor/ directories are not tracked by Git (they are likely listed in .gitignore). You only need to commit changes in the skills/ directory. +- Files in the .claude/ directory are not tracked by Git (they are likely listed in .gitignore). You only need to commit changes in the skills/ directory. \ No newline at end of file diff --git a/composer.json b/composer.json index e4fc673..e5cd542 100644 --- a/composer.json +++ b/composer.json @@ -40,7 +40,7 @@ } ], "scripts": { - "build": "vendor/bin/cursor-rules install --force --editor=claude && composer fix && composer rector && composer check && composer check-unused-sniffs && composer phpstan && composer test && git gone", + "build": "vendor/bin/agent-skills install --force && composer fix && composer rector && composer check && composer check-unused-sniffs && composer phpstan && composer test && git gone", "phpstan": "vendor/bin/phpstan analyse src/ --level=max --memory-limit=1G", "rector": "rector process src/ tests/ --config=vendor/pekral/rector-rules/rector.php --dry-run", "check": "vendor/bin/phpcs --standard=ruleset.xml Examples/ src/ tests/", @@ -60,7 +60,7 @@ "illuminate/collections": "^13.17.0", "phpunit/phpunit": "^13.2.1", "mockery/mockery": "^1.6.12", - "pekral/cursor-rules": "dev-master", + "agentic-vibes/laravel-agent-skills": "dev-master", "pekral/phpstan-rules": "dev-master", "pekral/rector-rules": "dev-master" }, @@ -80,7 +80,13 @@ "allow-plugins": { "dealerdirect/phpcodesniffer-composer-installer": true, "phpstan/extension-installer": true, - "pekral/cursor-rules": true + "agentic-vibes/laravel-agent-skills": true } - } + }, + "repositories": [ + { + "type": "vcs", + "url": "https://github.com/agentic-vibes/laravel-agent-skills.git" + } + ] } From 27fb6745671ff87fbe1bff87792dd05c42d1921d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20Kr=C3=A1l?= Date: Sun, 26 Jul 2026 09:11:02 +0200 Subject: [PATCH 2/3] ci: authenticate composer against the private agent-skills repository --- .github/workflows/ci.yml | 3 +++ .github/workflows/composer-update.yml | 3 +++ 2 files changed, 6 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 008327d..b89fa74 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -10,6 +10,9 @@ jobs: test: runs-on: ubuntu-latest name: Checks (PHP 8.5) + env: + # Read access to the private agentic-vibes/laravel-agent-skills repository. + COMPOSER_AUTH: '{"github-oauth":{"github.com":"${{ secrets.AGENTIC_VIBES_TOKEN }}"}}' steps: - name: Checkout code uses: actions/checkout@v5 diff --git a/.github/workflows/composer-update.yml b/.github/workflows/composer-update.yml index 41fb88e..609c1e2 100644 --- a/.github/workflows/composer-update.yml +++ b/.github/workflows/composer-update.yml @@ -13,6 +13,9 @@ jobs: update: name: Update Dependencies runs-on: ubuntu-latest + env: + # Read access to the private agentic-vibes/laravel-agent-skills repository. + COMPOSER_AUTH: '{"github-oauth":{"github.com":"${{ secrets.AGENTIC_VIBES_TOKEN }}"}}' steps: - name: Checkout code uses: actions/checkout@v4 From b6ee7eeaf3c7bad77d76baab74b35d86e6b9e299 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20Kr=C3=A1l?= Date: Sun, 26 Jul 2026 09:17:15 +0200 Subject: [PATCH 3/3] fix(ci): scope the composer PAT to the steps that use it Job-level env handed the private-repo token to every step, including the third-party actions (setup-php, cache, create-pull-request) that never touch Composer. Move COMPOSER_AUTH onto the install/update steps instead. --- .github/workflows/ci.yml | 6 +++--- .github/workflows/composer-update.yml | 7 ++++--- 2 files changed, 7 insertions(+), 6 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index b89fa74..d245ae0 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -10,9 +10,6 @@ jobs: test: runs-on: ubuntu-latest name: Checks (PHP 8.5) - env: - # Read access to the private agentic-vibes/laravel-agent-skills repository. - COMPOSER_AUTH: '{"github-oauth":{"github.com":"${{ secrets.AGENTIC_VIBES_TOKEN }}"}}' steps: - name: Checkout code uses: actions/checkout@v5 @@ -32,6 +29,9 @@ jobs: - name: Install dependencies run: composer install --prefer-dist --no-progress --no-suggest + env: + # Read access to the private agentic-vibes/laravel-agent-skills repository. + COMPOSER_AUTH: '{"github-oauth":{"github.com":"${{ secrets.AGENTIC_VIBES_TOKEN }}"}}' - name: PHP tests run: composer test diff --git a/.github/workflows/composer-update.yml b/.github/workflows/composer-update.yml index 609c1e2..16fd456 100644 --- a/.github/workflows/composer-update.yml +++ b/.github/workflows/composer-update.yml @@ -13,9 +13,6 @@ jobs: update: name: Update Dependencies runs-on: ubuntu-latest - env: - # Read access to the private agentic-vibes/laravel-agent-skills repository. - COMPOSER_AUTH: '{"github-oauth":{"github.com":"${{ secrets.AGENTIC_VIBES_TOKEN }}"}}' steps: - name: Checkout code uses: actions/checkout@v4 @@ -46,6 +43,8 @@ jobs: run: composer install --no-progress --prefer-dist --optimize-autoloader env: COMPOSER_MEMORY_LIMIT: -1 + # Read access to the private agentic-vibes/laravel-agent-skills repository. + COMPOSER_AUTH: '{"github-oauth":{"github.com":"${{ secrets.AGENTIC_VIBES_TOKEN }}"}}' - name: Create branch name id: branch-name @@ -65,6 +64,8 @@ jobs: composer update --no-progress --prefer-dist --optimize-autoloader env: COMPOSER_MEMORY_LIMIT: -1 + # Read access to the private agentic-vibes/laravel-agent-skills repository. + COMPOSER_AUTH: '{"github-oauth":{"github.com":"${{ secrets.AGENTIC_VIBES_TOKEN }}"}}' - name: Check for changes id: changes