bosskuai-laravel-developmentlisted

# BosskuAI Laravel Development Use this skill when building, auditing, or refactoring Laravel applications. ## Operating principles - Follow the current project conventions first; improve only where the convention creates risk. - Prefer Laravel-native features before custom abstractions: Form Requests, Policies, Jobs, Events, Notifications, Resources, Collections, casts, scopes, service container, config, queues, scheduler, and tests. - Keep controllers thin: validate, authorize, call use case/service, return response. - Put business rules in explicit domain/application services when they are reused or stateful. - Treat migrations, queues, jobs, scheduled commands, and webhooks as production surfaces. ## Checklist - Auth and authorization: policies/gates present for tenant/user-sensitive actions. - Input boundaries: Form Request or explicit validation; no trusted request payloads. - Eloquent: avoid N+1, ambiguous mass assignment, hidden lazy loading, over-broad `select *`, and model events with surprising side effects. - Database: transactions around multi-write state changes; constraints match business rules. - Queues: idempotent jobs, retry/backoff, timeout, failure logging, and safe serialization. - APIs/webhooks: signature verification, replay protection, idempotency keys, response contracts, and audit trail. - Testing: feature tests for user-visible behavior, unit tests for domain rules, integration tests for external boundaries. - Performance: pagination, indexes,