adel-mahmoud/devtools
Advanced tools
A lightweight and secure developer toolkit for Laravel applications that allows you to execute predefined Artisan commands directly from the browser using keyboard shortcuts.
During development, developers constantly run commands such as:
php artisan optimize:clear
php artisan migrate
php artisan queue:restart
php artisan cache:clear
Instead of switching to the terminal repeatedly, Laravel DevTools allows you to execute these commands directly inside the browser using keyboard shortcuts.
composer require adel-mahmoud/devtools --dev
php artisan devtools:install
This command publishes:
config/devtools.php)Add the directive before the closing </body> tag:
@devtoolsScript
Example:
<!DOCTYPE html>
<html>
<head>
<title>App</title>
</head>
<body>
@yield('content')
@devtoolsScript
</body>
</html>
| Shortcut | Command | Description |
|---|---|---|
Alt + C | optimize:clear | Clear all application caches |
Alt + M | migrate | Run database migrations (with confirmation) |
Alt + S | storage:link | Create symbolic link from public/storage to storage/app/public |
Alt + Q | queue:restart | Restart queue worker daemons |
Alt + R | route:clear | Clear the route cache |
Alt + V | view:clear | Clear all compiled view files |
Note: The
migratecommand includes--forceoption and requires user confirmation before execution.
The package configuration file is published to:
config/devtools.php
<?php
return [
'enabled' => env('DEVTOOLS_ENABLED', true),
'middleware' => [
'web',
'auth',
'throttle:10,1',
],
'allowed_environments' => [
'local',
'development',
],
'commands' => [
'c' => [
'command' => 'optimize:clear',
'route' => 'optimize-clear',
'description' => 'Clear all caches',
'confirm' => false,
],
'm' => [
'command' => 'migrate',
'route' => 'migrate',
'description' => 'Run database migrations',
'confirm' => true,
'options' => [
'--force' => true,
],
],
's' => [
'command' => 'storage:link',
'route' => 'storage-link',
'description' => 'Create storage symbolic link',
'confirm' => false,
],
'q' => [
'command' => 'queue:restart',
'route' => 'queue-restart',
'description' => 'Restart queue workers',
'confirm' => false,
],
'r' => [
'command' => 'route:clear',
'route' => 'route-clear',
'description' => 'Clear route cache',
'confirm' => false,
],
'v' => [
'command' => 'view:clear',
'route' => 'view-clear',
'description' => 'Clear compiled views',
'confirm' => false,
],
],
];
Laravel DevTools was designed with security in mind.
You can protect routes using middleware:
'middleware' => [
'web',
'auth', // Requires authentication
'verified', // Requires email verification
'can:admin', // Requires specific permissions
'throttle:10,1', // Rate limiting
]
Commands only work in allowed environments. This prevents accidental command execution in production:
'allowed_environments' => [
'local',
'development',
'staging', // Add if needed
]
Only commands explicitly defined in the commands array can be executed. This prevents arbitrary Artisan command execution.
Protects against brute force attacks:
'throttle:10,1' // 10 requests per minute
For dangerous commands (like migrate), set 'confirm' => true to require user confirmation before execution.
The package uses event.code instead of event.key, which fixes keyboard shortcut issues with:
You can define your own shortcuts by adding entries to the commands array:
'x' => [
'command' => 'cache:clear',
'route' => 'cache-clear',
'description' => 'Clear application cache',
'confirm' => false,
'options' => [], // Optional Artisan command options
],
Usage: Press Alt + X
All package routes are prefixed automatically:
/devtools/*
Example routes:
/devtools/optimize-clear/devtools/migrate/devtools/storage-linksrc/
├───Commands
├───Http
│ ├───Controllers
│ └───Middleware
├───resources
│ └───views
└───routes
└── config/
Recommended for:
Not recommended for:
Ensure the script directive exists:
@devtoolsScript
Check browser console for errors:
F12 → Console
Verify routes are registered:
php artisan route:list | grep devtools
Clear application caches:
php artisan optimize:clear
Ensure correct environment:
APP_ENV=local
DEVTOOLS_ENABLED=true
Check if shortcuts conflict with browser defaults:
authAPP_ENV is in allowed_environmentsstorage/logs/laravel.logauth middleware in non-local environments'confirm' => true for destructive commands (migrate, etc.)| Laravel Version | PHP Version | Supported |
|---|---|---|
| Laravel 10 | PHP 8.1+ | ✅ Yes |
| Laravel 11 | PHP 8.2+ | ✅ Yes |
| Laravel 12 | PHP 8.2+ | ✅ Yes |
Planned features:
MIT License - feel free to use and modify as needed.
Adel Mahmoud
Issues and pull requests are welcome! If you find discrepancies between documentation and code, please open an issue.
FAQs
Developer tools package for Laravel
We found that adel-mahmoud/devtools demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Threat Research
/Security News
Compromised maintainer accounts pushed malicious @ethersphere/bee-js 13.3.0 and Swarm Desktop 0.56.2, reusing SleepyDuck’s Ethereum-addressed C2 infrastructure.
Security News
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.
Security News
/Threat Research
A malicious Ruby gem runs a credential-stealing worm during installation, poisons AI coding tools, and can wipe files when a stolen GitHub token is revoked.