Freek.dev

WordPress 6.8+ stores bcrypt of an HMAC-SHA384 of the password behind a $wp prefix, and Laravel 13 throws on it. Import those rows with User::create() and they break without an error.

A request that added a product to a membership with 5,000 members timed out. Instead of hiding it on a queue, we batched the writes, fetched only what we needed and skipped the ORM, and got it down to under a second and a half.

Large photo uploads can be slow, but resizing and compressing images in the browser can freeze the page if the work runs on the main thread. This article shows how to use a Web Worker to process images before uploading them without interrupting the app.

What Agent Experience engineering means in practice: discoverable code paths, scoped agent instructions, useful feedback, and human ownership of risky decisions.

Five Laravel iteration methods timed over 1,000,000 MySQL rows. And a PostgreSQL run where PHP reported 3.3 MB while the process peaked at 324.8 MB.

The AWS SDK for PHP ships a bunch of clients you may never use. This extra weight is often unnecessary, and can also cause problems with serverless deployment limits. Fortunately, Composer has a solution!

A privacy issue in a service my family uses reminded me that authorization and retention matter - but how you handle and communicate an incident matters just as much.

A Laravel agent that remembers conversations re-sends every tool result it ever stored, on every turn, capped at a hundred rows nobody documents. Ten measured turns: over a million tokens of history, most of it pages the model already read. Three fixes, with the before and after for each.

A deep dive into Eloquent performance, from detecting N+1 queries to choosing aggregates, indexes, query plans, pagination, chunking, and transaction boundaries for a growing team dashboard.

A single-source CLI tool to compile repository rules, skills, commands, and MCP configurations to the developer's local AI agents.

Laravel queues are great out of the box, until they bite. Over the years I’ve collected a few gotchas the hard way. Let me save you the headache.

Transformers.js lets you run AI models directly in the browser without a backend, API keys, or an internet connection after the model is cached. The article explores how it works, which models are available, and the trade-offs of client-side AI compared to traditional AI providers.

Fuzz brings the power of Fuzz testing to PestPHP. Allowing you to write coverage-guided fuzz tests in the Pest style you already know and love.

Split a task into reasoning and execution to get deterministic behaviour out of a non-deterministic model.

In this article, we’ll build an AI-powered Slack bot with the Laravel AI SDK. Unlike tools such as Claude Tag, it can switch AI providers, answer questions, execute tasks, and retrieve information from a knowledge base you control.

A schema viewer that had only ever read a live database connection was quietly relying on that connection being trustworthy. Letting people paste a mysqldump instead turned up three assumptions that broke silently: identifiers written straight into the diagram definition, unrecognised statements skipped without a word, and relationship inference presenting a guess as a fact. Plus a fourth bug that the regex-based tests could not see, because a regex has no concept of a tag still being open ten lines later.

A deep dive into modular monoliths, from module APIs and database ownership to cross-module communication, architecture tests, incremental migration, and the signals that justify microservices.

We just shipped Leaf 5 a lightweight PHP framework rebuilt around AI-assisted development, with errors that explain their own fix and docs designed to be cheap for agents to read.

Most AI slop is a context problem, not a model problem: the same model, given no rules file, no memory and no record of past decisions, invents something plausible instead of something consistent. This covers the four ways context fails, and three checks you can actually enforce: a line budget in CI, a drift check on your context files, and a small set of golden tasks you re-run.