Aura Cms Laravel Package

Highlights

• Slim aura:install — unified installer without shipping large install artifacts; non-interactive CI flags; Global Admin defaults; Role Catalog seeding on migrate; no app service-provider copy; GitHub star targets eminiarts/aura-cms.
• Security & auth — media IDOR hardening and table mutation authorization; explicit queued Team execution context.
• Reliability — detect incomplete published Aura assets (#73); fix upload badge race between media-uploaded and refreshTable.
• Deps — axios/vite bumps to clear npm advisories; GitHub Actions checkout/setup-node/upload-artifact bumps.

Docs

Companion site docs updated for Laravel 12/13 install flow, plus Record Layouts and Preferences pages.

Upgrade

composer require eminiarts/aura-cms:^1.0.0@beta
php artisan aura:install   # or re-publish assets/config if already installed

If assets look broken after upgrade, re-publish package assets and clear the view/config cache.

Third beta of Aura CMS 1.0, containing the changes merged after beta.2.

New since beta.2

Customization

• Added per-resource page component hooks for index, create, edit, and view pages while preserving existing URLs and route names.
• Added the aura:customize command to scaffold custom Blade views, Livewire components, or both. It replaces the broken aura:customize-component command.

Fixes

• Media uploads, serving, thumbnails, imports, and generated URLs now consistently honor aura.media.disk and aura.media.path (#66).
• Added Resource::__isset() so meta-backed attributes work correctly with null coalescing, isset(), empty(), and collection pluck() (#67).
• Made the resource save pipeline independent of trait boot order, fixing PHP 8.5/Laravel 13 failures; PHP 8.5 is restored to the CI matrix (#68).

All checks passed for PHP 8.4/8.5 with Laravel 12/13, teams-off, PHPStan, Pint, fresh-install, and browser-test jobs.

Installing

composer require eminiarts/aura-cms:^1.0@beta

Full comparison: https://github.com/eminiarts/aura-cms/compare/v1.0.0-beta.2...v1.0.0-beta.3

Second beta of Aura CMS 1.0 — v1.0.0 remains in beta while the release is finalized (the previously published stable v1.0.0 tag has been withdrawn).

Support matrix: Laravel 12/13 · Livewire 4 · PHP 8.4+ (see ADR-0001)

New since beta.1

Media Library

• Details Panel on the Media Library page and inside the Media Picker: preview, auto-saving Title/Alt Text, facts, copy URL, download, prev/next with arrow keys, delete with sibling advance.
• Upload experience: per-file queue with individual progress and ✓/✗ indication; client-side pre-checks; fresh uploads highlighted in the grid; image dimensions captured at upload.
• Filters & grid: type quick-filter pills and upload-month dropdown (generic Table::quickFilters + resource indexQuery() hook), thumbnail/lazy-loading polish, bulk delete.
• Fixed: on-the-fly thumbnails 404'd for meta-backed attachments; picker uploads no longer commit the field before Select (modal-teardown race).

Access Control

• Role Catalog: Global Roles vs Team Roles with slug-based Shadowing resolved at check time (ADR-0005); seeded admin + user; team creation attaches to the global admin role; consolidation migration for existing installs.
• Global Admin: instance-level flag behind the host-overridable AuraGlobalAdmin gate; sees all users/teams, may visit any team without Membership; CLI bootstrap via aura:user --global-admin; guarded against self-grant and mass assignment.
• Teams tab: shows actual Memberships (parent-aware many-to-many), plus a permission-gated membership editor (attach/detach teams, change per-team role).
• Merged, shadow-resolved Roles index with read-only marking for Global Roles; role pickers use the same merged set.

Testing & CI

• Real-browser test suite (Pest v4 + Playwright/Chromium against Testbench): 29 tests covering uploads, library, picker, registration, login, invitation E2E, user management, role catalog. composer test-browser; dedicated CI job with failure-screenshot artifacts.
• 40 hardening tests across invitation/registration/user flows; fixes for bugs they caught, including per-resource header views never resolving on Linux (case-sensitivity) — the Invite button now actually renders on Linux installs.
• 1786 unit/feature tests, teams-on and teams-off both green.

From the withdrawn v1.0.0

Performance (batched table column queries), Laravel Octane support, security hardening (roles, Wysiwyg sanitization, saved filters, media access), decomposed resource-configuration traits, portable meta JSON queries, dedicated tests for every field type.

Installing

composer require eminiarts/aura-cms:^1.0@beta
php artisan aura:install

See the installation guide — note the vendor:publish --tag=aura-migrations step before migrate.

Full changelog: https://github.com/eminiarts/aura-cms/blob/main/CHANGELOG.md

What changed

• Added plugin extension points for custom field payload handling, including support for translatable field indicators in field wrappers.
• Improved Livewire compatibility and modal/component registration behavior.
• Hardened media uploads and added coverage for media uploader security.
• Fixed authentication edge cases around case-insensitive email login and password reset.
• Added configurable team creation via AURA_CREATE_TEAMS / create_teams config.
• Improved resource field saving, edit validation, Roles field behavior, and handling for missing or unknown field slugs.
• Refined user create form layout and updated UI styling/build assets.
• Expanded and refreshed documentation plus broader feature/test coverage.

Upgrade notes

This release is tagged as v0.2.0 and can be required with Composer using eminiarts/aura-cms:^0.2.0. It is also the baseline required by eminiarts/aura-translations:^0.1.0.

🎉 Aura CMS v0.1.0 - Initial Release

This is the first official tagged release of Aura CMS, marking a stable checkpoint for projects already using the package. Version 0.1.0 represents the current stable state before planned upgrades to Laravel and Livewire in version 1.0.0.

✨ Highlights

• Modern TALL Stack CMS - Built with Tailwind CSS, Alpine.js, Laravel, and Livewire
• 43 Field Types - Comprehensive field system for flexible content structures
• Resource System - Enhanced Eloquent models with automatic CRUD generation
• Multi-Tenancy - Optional team-based multi-tenancy with automatic scoping
• Role-Based Access Control - Fine-grained permissions per resource
• Visual Resource Editor - Build resources and fields through a UI
• Global Search - Quick navigation with keyboard shortcuts (⇧⌘K)
• 512 Passing Tests - Comprehensive test coverage with parallel execution support

🚀 Core Features

Resource System

• Support for both shared posts table and custom database tables
• Automatic CRUD generation with permission handling
• Built-in soft deletes and searchable functionality
• Meta fields for flexible data without schema changes

Field Types (43 Available)

• Basic: Text, Textarea, Number, Email, URL, Password, Date, DateTime, Time
• Rich Content: Wysiwyg, Markdown, Code
• Selection: Select, Radio, Checkbox, Boolean, Toggle, AdvancedSelect
• Media: Image, File, Gallery
• Relationships: BelongsTo, HasMany, BelongsToMany, MorphMany, MorphToMany, Tags
• Structural: Panel, Tab, Repeater
• Specialized: Slug, Color, Icon, Custom, ID, Computed, View

Developer Tools

• 8 Artisan commands for scaffolding (aura:install, aura:resource, aura:field, aura:plugin, etc.)
• Custom field API for extending functionality
• Plugin system for modular features
• Visual resource editor in development mode

User Experience

• Responsive design with dark mode support
• Bookmarks for frequently accessed pages
• Recent pages tracking
• Customizable table views with sorting, filtering, and saved views
• Modal and slide-over components

🛠 Technical Specifications

• PHP: ^8.1
• Laravel: ^10.0 | ^11.0
• Livewire: ^3.0
• Testing: PestPHP with parallel support (10 processes)
• Code Quality: PHPStan (level 5), Laravel Pint

🧪 Test Suite

• 512 passing tests with 2,657 assertions
• Parallel test execution support
• Comprehensive coverage of resources, fields, permissions, and multi-tenancy

🔧 Fixed in This Release

• Race conditions in parallel test execution
• TeamScope cache issues causing test failures
• Tags field initialization (now returns empty array instead of null)
• Resource loading in dynamic contexts
• Various test infrastructure improvements

⚠️ Important Notes

• Pre-1.0 Release: Breaking changes may occur in future versions
• Version 1.0.0 Plans: Laravel upgrade, Livewire upgrade, comprehensive documentation
• Recommendation: Use version constraint ^0.1.0 in composer.json

📦 Installation

composer require eminiarts/aura-cms:^0.1.0
php artisan aura:install

📚 Documentation

• Installation Guide
• CHANGELOG
• Resources Documentation
• Fields Documentation

🙏 Credits

Built with ❤️ by Emini Arts

Full Changelog: https://github.com/eminiarts/aura-cms/blob/main/CHANGELOG.md