php-backend-sdlc

Plugin php-backend-sdlc from marketplace vilnacrm-plugins in VilnaCRM-Org/claude-plugins. Commands read from the repo's manifest — today.

Skills (22)

• api-platform-crud

  Create complete REST API CRUD operations using API Platform with DDD and CQRS patterns, YAML resource configuration, and the command bus. Use when adding new API resources, implementing CRUD endpoints, creating DTOs, configuring operations, or setting up state processors. Skip when `framework.api_pl

• bmad-autonomous-planning

  Creates the full BMAD planning artifact chain (research, brief, PRD, architecture, epics/stories, readiness) autonomously from a short task description or GitHub issue, delegating each planning phase to a focused subagent and orchestrating the handoffs without human interaction. Use when /sdlc-plan

• bmad-fr-nfr-review-gate

  Run a BMAD spec-driven post-implementation review gate that blocks completion until every requirement row scores 5/5 and the gate reports zero new findings. Use when a GitHub PR, feature, bugfix, or task implemented against BMAD specs needs verification of every FR/NFR, pinned NFR catalog category,

• cache-management

  Implement production-grade caching with cache keys/TTLs/consistency classes per query, SWR (stale-while-revalidate), event-driven invalidation, HTTP cache headers, and comprehensive testing for stale reads and cache warmup. Use when adding caching to queries or repositories, implementing cache inval

• ci-workflow

  Run the full local CI suite through the profile's make target map and drive every check to green before committing. Use when the user asks to run CI, run quality checks, validate code quality, or before finishing any task that involves code changes.

• clean-architecture-llm

  Design LLM-powered modules with Clean Architecture boundaries, SOLID, DRY, KISS, and provider-agnostic ports/adapters. Use when adding prompt workflows, model/provider clients, tool orchestration, AI review automation, agent skills, or other LLM-backed capabilities.

• code-organization

  Enforce code organization principles - the "Directory X contains ONLY class type X" law, DDD naming patterns, type safety, SOLID, factory usage, and hardcoded config extraction to .env. Use when placing new classes, reviewing code structure, refactoring (moving, renaming, splitting classes), fixing

• code-review

  Systematically retrieve, categorize, and address PR code review comments with an auditable evidence ledger — AI review loop, per-comment commits, suppression-free fixes, and pushed-head verification of required checks and approval. Use when handling code review feedback, addressing PR comments, or d

• complexity-management

  Maintain and improve code quality with PHPInsights by refactoring code instead of relaxing configuration, keeping every score at or above the profile's quality.phpinsights.* floors. Use when PHPInsights fails, cyclomatic complexity is too high, a quality/architecture/style score drops, or when refac

• database-migrations

  Create, manage, and apply database schema changes with Doctrine — versioned migrations when the profile's persistence.mapper is doctrine-orm, mapping-driven schema/index sync when it is doctrine-odm. Use when modifying entities or documents, adding fields, managing database schema changes, creating

• deptrac-fixer

  Diagnose and fix Deptrac architectural violations by refactoring code to respect hexagonal architecture boundaries. Use when Deptrac reports dependency violations ("must not depend on"), layers are incorrectly coupled, the Domain layer imports framework code, or Infrastructure calls Application hand

• documentation-creation

  Create a comprehensive project documentation suite from scratch by analyzing the codebase and verifying every claim against it. Use when setting up INITIAL documentation for a project or building a complete docs/ suite where none exists. NOT for updating existing docs (use documentation-sync instead

• documentation-sync

  Keep project documentation in sync with code changes. Use when implementing features, modifying APIs, changing architecture, adding configuration, updating security, or making any change that affects user-facing or developer-facing documentation. Not for building an initial documentation suite from

• implementing-ddd-architecture

  Design and implement DDD patterns (entities, value objects, aggregates, CQRS) with strict hexagonal layer separation. Use when creating new domain objects, implementing bounded contexts, designing repository interfaces, or deciding proper layer placement for new code. For fixing existing Deptrac vio

• load-testing

  Create and manage K6 load tests for the REST and GraphQL APIs of a PHP backend service. Use when creating load tests, writing K6 scripts, testing API performance, debugging load test failures, or setting up performance monitoring. Covers REST endpoints, GraphQL operations, data generation, IRI handl

• observability-instrumentation

  Add type-safe business metrics for domain events to a PHP backend — emitted as AWS EMF (Embedded Metric Format) when `capabilities.observability_emf` is true, or through a generic metrics emitter otherwise. Use when implementing new endpoints, adding command handlers or domain events, or instrumenti

• openapi-development

  Contribute to the API Platform OpenAPI customization layer — endpoint factories, request/response/schema factories, and transformers — keeping the generated spec valid and diff-stable. Use when adding endpoint factories or processors, updating OpenAPI generation logic, or fixing OpenAPI validation e

• quality-standards

  Overview of the protected quality thresholds and a quick-reference router that maps every failing quality check to its command and specialized fixing skill. Use when you need to understand quality metrics, run comprehensive quality checks, or learn which specialized skill to use. For specific issues

• query-performance-analysis

  Detect N+1 queries, analyze slow queries with the engine-native plan tool (MySQL/MariaDB EXPLAIN or MongoDB explain()), identify missing indexes, and create safe online index migrations, branching on the profile's persistence.engine. Use when optimizing query performance, preventing performance regr

• security-audit

  Adversarial, authorized red-team / penetration-testing loop for a PHP backend you own — fans out one security-auditor subagent per OWASP/vuln family in parallel, each attacking the RUNNING service (black-box HTTP/GraphQL probing) AND inspecting source (SAST/taint, dependency, secret, config), verifi

• structurizr-architecture-sync

  Maintain Structurizr C4 architecture diagrams (workspace.dsl) in sync with code changes so the model reflects the current system. Use when adding components (processors, handlers, repositories, entities), modifying component relationships, changing architectural boundaries, or implementing new patte

• testing-workflow

  Run and manage functional tests (unit, integration, E2E, mutation) for a PHP backend service. Use when running tests, debugging test failures, ensuring test coverage, or fixing mutation testing issues. Covers PHPUnit, Behat-style E2E suites, and Infection. For load/performance tests, use the load-te

Slash commands (8)

• /php-backend-sdlc:sdlc-finish-pr

  Create or update the PR, then drive the CI-fix and comment-resolution loops until checks are green and zero review comments remain unresolved

• /php-backend-sdlc:sdlc-implement

  Implement the planned stories via bmalph/Ralph with the claude-code driver: parallel php-implementer dispatch, container-only execution, circuit-breaker safety

• /php-backend-sdlc:sdlc-issue

  Turn a task description into a labeled GitHub issue with testable acceptance criteria, or validate and adopt an existing issue URL

• /php-backend-sdlc:sdlc-plan

  Run the BMAD planning chain non-interactively for a GitHub issue, writing the six-artifact specs/<slug>/ chain until readiness passes

• /php-backend-sdlc:sdlc-qa

  Black-box QA: boot the service and verify every acceptance criterion through HTTP-only checks, emitting a PASS/FAIL report with reproduction steps

• /php-backend-sdlc:sdlc-review

  Review implemented changes: 22-skill applicability triage, multi-lens quality and FR/NFR review, gate loop until zero new findings

• /php-backend-sdlc:sdlc-setup

  Prepare a PHP backend repository for the SDLC loop: preflight, project profile, governance blocks, permissions

• /php-backend-sdlc:sdlc

  Run the full SDLC loop end-to-end: setup-check, issue, plan, implement, review, qa, finish-pr — gated transitions, resumable, loop-safe

Subagents (7)

• ci-fixer

  CI check fixer for SDLC stage 6 (/sdlc-finish-pr, counter A). Delegate to this agent whenever a pull request has red CI checks and the task is "fix CI", "make the checks green", "the pipeline is failing", "psalm/ deptrac/tests check failed on the PR", or stage 6 needs its CI-fix loop driven. It poll

• code-quality-reviewer

  Read-only PHP code-quality reviewer for SDLC stage 4 (/sdlc-review). Delegate to this agent when implemented changes need a quality verdict against the protected thresholds: it runs the read-only quality targets from the profile make map (make.psalm static analysis, make.deptrac layer-dependency che

• fr-nfr-reviewer

  BMAD spec-compliance reviewer for SDLC stage 4. Delegate to this agent when /sdlc-review (or the /sdlc orchestrator) needs the change set verified against the planning specs bundle — it runs the FR/NFR gate script against specs/<slug>/, builds the per-requirement PASS/FAIL matrix covering every FR,

• php-implementer

  Implementation agent for PHP backend stories. Delegate to this agent when a single planned story needs code written — dispatched by /sdlc-implement (stage 3) for each independent story fanned out in parallel, by /sdlc-review or /sdlc-qa loop-backs to fix review-gate findings or QA failures with repr

• pr-comment-resolver

  AI review comment resolver for SDLC stage 6 (/sdlc-finish-pr, comment resolution loop, counter B). Delegate to this agent when a pull request has unresolved review threads — CodeRabbit or any AI/human reviewer comments — that block the finish-pr exit condition "0 unresolved AI review comments": it t

• qa-manual-tester

  Black-box manual QA tester for SDLC stage 5 (/sdlc-qa). Delegate to this agent when implemented work needs an acceptance-criteria verdict derived purely from observed runtime behavior: it exercises the RUNNING service (booted via the profile make.start target) with curl and other HTTP/CLI probes, ex

• security-auditor

  Authorized, defensive red-team subagent for the security-audit skill. Delegate one instance per OWASP/vuln family when an adversarial security verdict is needed for a PHP backend the caller owns: it attacks the RUNNING service (black-box HTTP/GraphQL probing, the qa-manual-tester shape) AND inspects

Similar plugins