tyro-login

name	tyro-login
version	2.10.0
domain	authentication
mindset	framework-maintainer
description	Laravel authentication infrastructure package providing guards, providers, sessions, tokens, verification, and security for the Tyro ecosystem.
maintained-since	2024
consumer-count	thousands
composer	hasinhayder/tyro-login
namespace	HasinHayder\TyroLogin
php	^8.2
laravel	^12.0 || ^13.0

Tyro Login Skill

This is a framework-maintainer skill for the hasinhayder/tyro-login authentication package.

It teaches AI models how to create, review, refactor, and maintain Tyro Login with the mindset of a framework maintainer — protecting public APIs, preserving backward compatibility, and designing for ecosystem growth over a 10+ year maintenance horizon.

This is NOT an application-development skill. This is NOT a login page generator. This is NOT a starter kit. This is authentication infrastructure.

---

Activation Triggers

The skill activates when any of these patterns appear in the task context:

File Paths

src/**/*.php
config/tyro-login.php
routes/web.php
resources/views/**/*.blade.php
database/migrations/*.php
tests/**/*.php
composer.json
skills/tyro-login/**

Class References

HasinHayder\TyroLogin\*
HasinHayder\TyroLogin\Providers\TyroLoginServiceProvider
HasinHayder\TyroLogin\Http\Controllers\*
HasinHayder\TyroLogin\Models\*
HasinHayder\TyroLogin\Console\Commands\*
HasinHayder\TyroLogin\Mail\*
HasinHayder\TyroLogin\Casts\EncryptedOrPlaintext
HasinHayder\TyroLogin\Traits\HasTwoFactorAuth
HasinHayder\TyroLogin\Helpers\InvitationHelper

Config and Environment Keys

config('tyro-login.*')
env('TYRO_LOGIN_*')

---

Consistency First

Eight immutable principles that govern every decision in this package:

#	Principle	Rationale
1	Config-first design	Every feature must be toggleable via config. Never hardcode behavior.
2	Cache over database for transient state	OTP codes, lockout counters, password reset tokens, magic links, verification tokens — all use cache, not the database.
3	Soft integration for optional packages	Use class_exists() and method_exists() at runtime. Never add optional packages to require in composer.json.
4	Backward compatible encryption	New data is encrypted. Legacy data is read as plaintext and encrypted on write. The EncryptedOrPlaintext cast handles this transition.
5	POST-only state mutations