PHPackages                             coquibot/coqui-toolkit-composer - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Utility & Helpers](/categories/utility)
4. /
5. coquibot/coqui-toolkit-composer

ActiveLibrary[Utility & Helpers](/categories/utility)

coquibot/coqui-toolkit-composer
===============================

Composer dependency management toolkit for Coqui — install, remove, inspect, and update packages in the workspace

v0.1.3(2mo ago)0411↑183.2%MITPHPPHP ^8.4CI passing

Since Feb 19Pushed 2mo agoCompare

[ Source](https://github.com/carmelosantana/coqui-toolkit-composer)[ Packagist](https://packagist.org/packages/coquibot/coqui-toolkit-composer)[ RSS](/packages/coquibot-coqui-toolkit-composer/feed)WikiDiscussions main Synced 1mo ago

READMEChangelog (3)Dependencies (3)Versions (6)Used By (0)

Coqui Composer Toolkit
======================

[](#coqui-composer-toolkit)

Composer dependency management toolkit for [Coqui](https://github.com/AgentCoqui/coqui). Provides workspace-sandboxed `composer require`, `remove`, `update`, and audit tools that agents can use to manage dependencies at runtime.

Requirements
------------

[](#requirements)

- PHP 8.4+
- Composer 2.x available on `PATH`

Installation
------------

[](#installation)

```
composer require coquibot/coqui-toolkit-composer
```

When installed alongside Coqui, the toolkit is **auto-discovered** via Composer's `extra.php-agents.toolkits` — no manual registration needed.

Tools Provided
--------------

[](#tools-provided)

### `composer`

[](#composer)

Manage Composer dependencies in the workspace.

ParameterTypeRequiredDescription`action`enumYes`require`, `remove`, `show`, `installed`, `update`, `validate`, `outdated`, `audit``package`stringNoPackage name (vendor/package)`version`stringNoVersion constraint (e.g. `^2.0`)`dev`boolNoUse `--dev` flag (default: false)**Safety features:**

- All operations target the workspace project only — the host project is never modified
- Mutating operations create automatic backups before executing
- A denylist blocks full frameworks (Laravel, Laminas, Symfony framework-bundle, etc.)
- Security audit runs automatically after every install
- Newly installed toolkit packages are detected and registered via `PackageEventListenerInterface`

Package Event Listener
----------------------

[](#package-event-listener)

The toolkit accepts a `PackageEventListenerInterface` (from `carmelosantana/php-agents`) in its constructor. When provided, the listener is notified after package installs and removals — enabling features like automatic toolkit discovery.

```
use CoquiBot\Toolkits\Composer\ComposerToolkit;
use CarmeloSantana\PHPAgents\Contract\PackageEventListenerInterface;

$toolkit = new ComposerToolkit(
    workspacePath: '/path/to/.workspace',
    listener: $myDiscoveryListener,
);
```

Standalone Usage
----------------

[](#standalone-usage)

```