salvatori / alma

8.1.0 2026-10-20 09:09 UTC

Requires

• php: ^8.4
• composer/installers: ^2.3
• oscarotero/env: ^2.1
• roots/bedrock-autoloader: ^1.0
• roots/bedrock-disallow-indexing: ^2.0
• roots/wordpress: ^7.1
• roots/wp-config: ^1.0
• vlucas/phpdotenv: ^5.6
• wordpress/mcp-adapter: ^0.7
• wpackagist-plugin/autodescription: ^5.1
• wpengine/advanced-custom-fields-pro: ^6.8

Requires (Dev)

• laravel/pint: ^1.32

Suggests

• wpackagist-plugin/woocommerce: Enables the optional Commerce module (composer require wpackagist-plugin/woocommerce).

MIT

• wordpress
• boilerplate
• bedrock
• acorn
• livewire

Published on Packagist.org on 2026-10-20 09:09 UTC

README

A WordPress + Laravel boilerplate for marketing websites that deploy to shared hosting.

Every project starts on a foundation that has already been through production: Alma v8 carries the lessons of the Remote Leverage rebuild, minus the AWS/Docker infrastructure, so it runs anywhere with PHP 8.4, MySQL, cron and SSH.

What you get

Stack	Bedrock · WordPress 7.1 · Acorn 6 (Laravel 13) · Livewire 4 + Flux · ACF Pro (ACF Composer) · Tailwind 4 · Vite 8
Content	Code-first ACF blocks with an enforced authoring contract, pages as patterns in git, a curated editor, a build-time image pipeline
Leads	Lead form block, first/last-touch attribution, spam protection, email notifications, signed CRM webhook, wp-admin screens, retention and privacy tools
SEO	The SEO Framework with settings in code, robots.txt, noindex markers, real 404s, two-tier redirects
Accounts	Login, registration and 2FA enforced at WordPress authentication (wp-admin included)
Optional	WooCommerce integration; a gateway-agnostic payment module; MCP abilities so Claude can operate the site
Operations	Post-deploy command, health endpoints, cron health, Sentry, SMTP, outbound-call log, hardened .htaccess
Delivery	CI (Pint, Larastan, Pest, Vite), SSH release deploys with atomic switch and rollback, bin/pull for production → local

Quick start

cp auth.json.example auth.json        # add your ACF Pro license key
bin/setup.sh                          # .env, dependencies, database, WordPress install, first deploy
cd web/app/themes/alma && npm run dev

Then work through local development. Before the first deploy, follow deployment and its launch checklist.

Checks

cd web/app/themes/alma && composer check && npm run build

composer check runs Pint, Larastan and the Pest suite. The suite boots the real application on SQLite, with WordPress faked and the network closed, and runs in seconds with no services.

Documentation

All docs live in web/app/themes/alma/docs: architecture, one guide per module, configuration, deployment, operations, decision records and known issues. Working with Claude Code? CLAUDE.md and the skills in .claude/skills/ load automatically.

License

MIT. Built on Roots Bedrock and Sage.