cieplik206/laravel-integration-operations

Durable integration operation kernel for Laravel applications and provider SDKs

v0.3.9 2026-08-28 15:42 UTC

Requires

• php: ^8.4
• ext-pdo: *
• ext-pdo_pgsql: *
• illuminate/bus: ^13.0
• illuminate/cache: ^13.0
• illuminate/console: ^13.0
• illuminate/container: ^13.0
• illuminate/contracts: ^13.0
• illuminate/database: ^13.0
• illuminate/encryption: ^13.0
• illuminate/events: ^13.0
• illuminate/queue: ^13.0
• illuminate/redis: ^13.0
• illuminate/support: ^13.0
• psr/log: ^3.0
• symfony/uid: ^7.4|^8.0

Requires (Dev)

• larastan/larastan: ^3.0
• laravel/pint: ^1.0
• orchestra/testbench: ^11.0
• pestphp/pest: ^5.0
• pestphp/pest-plugin-laravel: ^5.0
• pestphp/pest-plugin-phpstan: ^5.0
• symfony/var-dumper: ^7.4|^8.0

MIT

• Paweł Ciepliński

• workflow
• laravel
• integration
• outbox
• idempotency
• reconciliation
• durable-operations

Published on Packagist.org on 2026-08-28 15:43 UTC

README

Provider-neutral Laravel foundation for durable integration operations and versioned provider SDKs.

Version 0.3 provides the durable RT-1/RT-2 boundary:

• immutable, versioned receipts, snapshots, scopes, contexts, failures, and encoded results;
• canonical JSON, SHA-256 content hashes, domain-separated HMAC lookup digests, a versioned secret key ring, a UTC clock, and canonical ULIDs;
• framework-neutral handler, retry, failure-classification, polling, reconciliation, projection, compensation, and result-codec contracts;
• a trusted boot-only operation definition registry that freezes after Laravel boots without constructing provider services or performing database, cache, credential, or HTTP I/O;
• an authoritative boot-frozen Provider SPI v2 registry, poll-first and immediate-execute operation lanes, terminal proof contracts, and a public provider conformance kit;
• PostgreSQL persistence for encrypted payloads and results, idempotent intent acceptance, single-effect boundaries, leases, recovery, scoped queries, dispatch cursors, relations, and compensation acceptance;
• Redis-backed scope limiters and redacted PSR-3 lifecycle telemetry.

Contracts

• Provider SPI 0.1 defines the provider/kernel boundary, single-effect rule, reconciliation vocabulary, and terminal contracts.
• Kernel Schema Specification 0.1 freezes the future persistence blueprint without shipping migrations or running DDL.
• Operations runbook defines scoped diagnosis, manual review, incident response, and N/N-1 rolling deployment.
• Provider SPI JSON Schema validates provider-neutral conformance manifests for both a read-only operation and a single-effect operation.

The JSON artifacts are conformance specifications, not executable runtime configuration. Never hydrate service references or class names from database rows, queue payloads, requests, or other persisted data.

Scope boundary

The kernel owns provider-neutral technical lifecycle only. It persists and executes registered operations, but provider SDKs still own transport details, failure semantics, reconciliation algorithms, codecs, and projection plans. Consuming applications own cross-provider business workflows.

The kernel does not depend on Fakturownia, Allegro, Saloon, or application domain models. Provider semantics belong to provider SDKs, while cross-provider business workflows remain in the consuming application.

Requirements

• PHP 8.4 or newer;
• Laravel 13;
• PHP PDO and PDO PostgreSQL extensions;
• PostgreSQL, with PostgreSQL 17 used by the blocking release gate.

Installation

composer require cieplik206/laravel-integration-operations:^0.3

Laravel discovers the package service provider automatically. Provider SDKs must register their operation definitions and exact final singleton extension classes during application boot; the registry rejects later registration or a changed container binding.

Development setup

composer install
composer check

Durable runtime

Publish the package migrations and configure an independent payload-encryption key before accepting operations. Provider packages register immutable operation definitions; consuming applications receive receipts and scoped snapshots without importing lease or recovery internals.

License

The package is released under the MIT License in LICENSE.md.