Imported from pablojnd/aurion (.opencode/skills/laravel-project-api/SKILL.md). Install upstream with npx skills add pablojnd/aurion --skill laravel-project-api. Copyright stays with the author.

Project API Contract

Name: laravel-project-api
Author: pablojnd

The project runs Laravel 13 on PHP 8.4.
API routes live in routes/api.php and are automatically prefixed with /api.
Versioned application routes use /api/v1.
Use Laravel Sanctum bearer tokens with auth:sanctum.
File routes require token abilities files:read or files:write as appropriate.
Use Form Requests for non-trivial validation and never pass $request->all() to application code.
Keep API responses JSON and rely on the existing JSON exception rendering for api/* requests.
Use the named api-files rate limiter for file API traffic.
Stateless bearer-token API routes are not CSRF-exempt web routes; keep browser/session flows in the web middleware group. If a first-party SPA is introduced, configure Sanctum stateful cookies and CSRF explicitly.
Keep secrets in environment variables read through config files. Never commit .env, tokens, API keys, or payment credentials.
Install packages only with the local project Composer and keep vendor/ local; do not use global package managers or user configuration.

# after Install: the listing is in your workspace's routing pool - a plan picks it for its slot curl -s -X POST https://api.opensmartroute.ai/api/v1/route -H 'Authorization: Bearer $OSR_API_KEY' -H 'Content-Type: application/json' -d '{"text": "...", "plan": true}'

{ "ocm": "1", "id": "pablojnd-aurion-laravel-project-api", "kind": "skill", "name": "laravel-project-api", "description": "Use for REST JSON API work in this Laravel 13 project, including Sanctum authentication, token abilities, validation, authorization, rate limiting, CSRF boundaries, and JSON errors.", "publisher": "pablojnd", "version": "1.0.0", "capabilities": { "domains": [ "coding" ], "tags": [ "skill-md", "github" ], "languages": [ "en" ] }, "quality_prior": 0.6, "examples": [ "Use for REST JSON API work in this Laravel 13 project, including Sanctum authentication, token abilities, validation, authorization, rate limiting, CSRF boundaries, and JSON errors." ], "primary": false, "metadata": { "source": { "provider": "github", "repository": "https://github.com/pablojnd/aurion", "path": ".opencode/skills/laravel-project-api/SKILL.md", "ref": "f4cd3504ebdcf30ff57430bc3b61999f334444b9", "url": "https://github.com/pablojnd/aurion/blob/f4cd3504ebdcf30ff57430bc3b61999f334444b9/.opencode/skills/laravel-project-api/SKILL.md", "key": "pablojnd/aurion/.opencode/skills/laravel-project-api/SKILL.md" } }, "instructions": "# Project API Contract\n\n- The project runs Laravel 13 on PHP 8.4.\n- API routes live in `routes/api.php` and are automatically prefixed with `/api`.\n- Versioned application routes use `/api/v1`.\n- Use Laravel Sanctum bearer tokens with `auth:sanctum`.\n- File routes require token abilities `files:read` or `files:write` as appropriate.\n- Use Form Requests for non-trivial validation and never pass `$request->all()` to application code.\n- Keep API responses JSON and rely on the existing JSON exception rendering for `api/*` requests.\n- Use the named `api-files` rate limiter for file API traffic.\n- S", "cost": { "context_tokens": 271 } }

laravel-project-api

About

Project API Contract

Use it

Manifest

Reviews