Save this content to: AGENTS.md

# Laravel Agent Auth - Agent Guide

Passwordless authentication and signed URL login for AI agents (Cursor, Claude, Copilot, Antigravity,..), Chrome DevTools MCP, and browser automation in Laravel and Filament.

## Fast CLI Usage

Generate signed login URL:
```bash
php artisan agent:url
```

Optional parameters:
```bash
php artisan agent:url [email protected] --redirect=/admin/pages --ttl=15
```

## Agent Browser Workflow (Chrome DevTools MCP)

1. Execute `php artisan agent:url` via terminal.
2. Parse the output URL from the stdout (`http://.../_agent/login?...`).
3. Call `navigate_page` with the signed URL.
4. The browser automatically receives the `web` session cookie and redirects to the Filament panel (or custom `--redirect`).

## Environment Variables (.env)

- `AGENT_AUTH_ENABLED=true` (defaults to true in `local`)
- `AGENT_AUTH_ALLOW_PRODUCTION=false` (must be true to run in production)
- `AGENT_AUTH_TOKEN=` (optional static token for headless CI/CD, min 16 chars)
- `AGENT_AUTH_USER_EMAIL=` (optional default user email)
- `AGENT_AUTH_REDIRECT_URL=` (optional override for post-login redirect)

## Architecture Notes

- **Filament**: Zero-config auto-detection. Dynamically discovers default panel and users passing `canAccessPanel()`.
- **Framework**: Compatible with Laravel 11 and 12. No hard dependencies on Filament.
- **Security**: Local-only by default, signed URL HMAC verification, session regeneration, rate limiting.