Headroom: Counting Tokens Before a Laravel AI SDK Agent Sends Them
Headroom counts every token a Laravel AI SDK agent is about to send, checks it against the context window and your cost limits, and blocks it before it goes.
Trying Jev with the Laravel AI SDK 1.0 to Mark Year 6 Science Exams
I tried Jev, TypeSafe's decision model, through the Laravel AI SDK 1.0 to mark pupils' exam answers. Here is what it returns and how typed answers became marks.
CakePHP and Laravel Don't Share a Codebase, But They Share a Lineage
Laravel wasn't forked from CakePHP. Both frameworks independently built on the same PHP MVC conventions, here's what that means when you translate between them.
Dysgu Cymraeg: An Obsidian Vault for Learning Welsh with Claude Code
How I built Dysgu Cymraeg, an Obsidian vault for learning Welsh, using Claude Code to generate content and the Git plugin to sync progress to GitHub.
Why HTTP QUERY Exists: Playing With Laravel 13's Native Support
Why the HTTP QUERY method was standardised and what it fixes that GET and POST cannot. A hands-on look at Laravel 13's native Http::query() support.
Building My First Laravel MCP Server: What I Discovered
What I learned building a production-grade Laravel MCP server: tool authorisation, prompt injection, parity testing, and the decisions most tutorials skip.
Catching Laravel env() Misuse Before It Hits Production
How laravel-env-audit catches env() calls outside config/, .env.example drift, and possible secrets using AST-based static analysis. No runtime needed.
How I Built a Tool to Catch Laravel's Most Common Security Blind Spot
Auth middleware proves who the user is, not what they can access. Learn how I built laravel-auth-audit v2 to catch IDOR, discarded gate results, unscoped bindings, and broken access control before it ships.
Multi-Provider OAuth in Laravel: One Controller, Three Providers, Zero Hacks
How to build production-ready multi-provider OAuth in Laravel 13 with Socialite: a clean provider_accounts table, smart auto-linking, and a last-method guard.