Name: Php Symfony
Author: epci971

Php Symfony | Skills Pool

project/
├── config/
│   ├── packages/              # Bundle configuration
│   ├── routes/                # Route definitions
│   └── services.yaml          # DI configuration
├── src/
│   ├── Controller/            # Thin HTTP controllers
│   ├── Command/               # Console commands
│   ├── Entity/                # Doctrine entities
│   ├── Repository/            # Doctrine repositories
│   ├── Service/               # Business logic (final classes)
│   ├── Dto/                   # Data Transfer Objects
│   ├── Handler/               # Use-case handlers (CQRS)
│   ├── Message/               # Messenger messages
│   ├── MessageHandler/        # Async handlers
│   ├── Event/                 # Domain events
│   ├── EventListener/         # Event listeners
│   ├── Security/Voter/        # Authorization voters
│   └── Validator/Constraint/  # Custom validation
├── templates/                 # Twig templates
├── tests/
│   ├── Unit/
│   └── Functional/
└── public/index.php

<?php
declare(strict_types=1);

#[Route('/api/users', name: 'api_users_')]
final class UserController extends AbstractController
{
    public function __construct(
        private readonly UserService $userService,
    ) {}

    #[Route('', name: 'create', methods: ['POST'])]
    public function create(#[MapRequestPayload] CreateUserDto $dto): JsonResponse
    {
        $user = $this->userService->createUser($dto->email, $dto->name);
        return $this->json($user, Response::HTTP_CREATED, [], ['groups' => ['user:read']]);
    }
}

<?php
declare(strict_types=1);

final class UserService
{
    public function __construct(
        private readonly UserRepository $userRepository,
        private readonly EntityManagerInterface $entityManager,
        private readonly EventDispatcherInterface $eventDispatcher,
    ) {}

    public function createUser(string $email, string $name): User
    {
        $user = new User($email, $name);
        $this->entityManager->persist($user);
        $this->entityManager->flush();
        $this->eventDispatcher->dispatch(new UserCreatedEvent($user));
        return $user;
    }
}

<?php
declare(strict_types=1);

#[ORM\Entity(repositoryClass: UserRepository::class)]
#[ORM\Table(name: 'users')]
#[ORM\Index(columns: ['status', 'created_at'], name: 'idx_user_status_created')]
final class User
{
    public const STATUS_PENDING = 'pending';
    public const STATUS_ACTIVE = 'active';

    #[ORM\Id, ORM\GeneratedValue, ORM\Column]
    private ?int $id = null;

    #[ORM\Column(length: 255, unique: true)]
    private string $email;

    #[ORM\Column(length: 20)]
    private string $status = self::STATUS_PENDING;

    public function __construct(string $email, string $name) { /* ... */ }

    public function activate(): void
    {
        if ($this->status !== self::STATUS_PENDING) {
            throw new \DomainException('Only pending users can be activated');
        }
        $this->status = self::STATUS_ACTIVE;
    }
}

// BAD - N+1 queries
foreach ($orders as $order) {
    echo $order->getCustomer()->getName(); // 1 query per order
}

// GOOD - Eager loading with JOIN
public function findAllWithCustomer(): array
{
    return $this->createQueryBuilder('o')
        ->select('o', 'c')
        ->join('o.customer', 'c')
        ->getQuery()
        ->getResult();
}

<?php
declare(strict_types=1);

final class PostVoter extends Voter
{
    public const EDIT = 'POST_EDIT';

    protected function voteOnAttribute(string $attribute, mixed $subject, TokenInterface $token): bool
    {
        $user = $token->getUser();
        if (!$user instanceof User) return false;

        return match ($attribute) {
            self::EDIT => $subject->getAuthor() === $user,
            default => false,
        };
    }
}

// In controller
#[IsGranted('POST_EDIT', subject: 'post')]
public function edit(Post $post): Response { /* ... */ }

// In form - enabled by default
// For non-form actions
#[IsCsrfTokenValid('delete-post', tokenKey: '_token')]
public function delete(Post $post): Response { /* ... */ }

<?php
// Message (simple data object)
final readonly class SendWelcomeEmailMessage
{
    public function __construct(
        public int $userId,
        public string $email,
    ) {}
}

// Handler
#[AsMessageHandler]
final class SendWelcomeEmailHandler
{
    public function __invoke(SendWelcomeEmailMessage $message): void
    {
        $this->emailService->sendWelcomeEmail($message->email);
    }
}

// Dispatch
$this->bus->dispatch(new SendWelcomeEmailMessage($user->getId(), $user->getEmail()));

<?php
declare(strict_types=1);

final class UserControllerTest extends WebTestCase
{
    public function testCreateUser(): void
    {
        $client = static::createClient();
        $client->request('POST', '/api/users', [], [],
            ['CONTENT_TYPE' => 'application/json'],
            json_encode(['email' => '[email protected]', 'name' => 'Test'])
        );

        $this->assertResponseStatusCodeSame(Response::HTTP_CREATED);
    }

    public function testAdminAccessRequiresAuthentication(): void
    {
        $client = static::createClient();
        $client->loginUser($admin);
        $client->request('GET', '/admin/users');
        $this->assertResponseIsSuccessful();
    }
}

# Entity & Migration
php bin/console make:entity
php bin/console make:migration
php bin/console doctrine:migrations:migrate

# Debug
php bin/console debug:router
php bin/console debug:container UserService
php bin/console debug:autowiring

# Messenger
php bin/console messenger:consume async --limit=100 --memory-limit=128M

# Tests
php bin/phpunit
php bin/phpunit --testsuite Unit
php bin/phpunit --coverage-html coverage/

Element	Convention	Example
Controller	`*Controller`, final	`UserController`
Entity	Singular, PascalCase, final	`User`, `OrderItem`
Repository	`*Repository`, final	`UserRepository`
Service	Descriptive, final	`EmailNotifier`
DTO	`*Dto`, readonly	`CreateUserDto`
Message	`*Message`, readonly	`SendWelcomeEmailMessage`
Voter	`*Voter`, final	`PostVoter`
Command	`app:domain:action`	`app:user:cleanup`

Pattern	Implementation
Thin Controller	Delegate to service, return response only
Final Services	All services `final class`, constructor injection
DTO Validation	`#[MapRequestPayload]` with `#[Assert\*]` constraints
Repository Methods	Custom finders, no business logic
Domain Events	Dispatch via `EventDispatcherInterface`
Async Processing	Messenger with `#[AsMessageHandler]`
Authorization	Voters with `#[IsGranted]` attribute
CSRF	`#[IsCsrfTokenValid]` for non-form actions

Anti-pattern	Problem	Solution
Fat controller	Business logic in controller	Extract to service
`$container->get()`	Service locator, untestable	Constructor injection
Public setters	Mutable state, no validation	Business methods
N+1 queries	Performance degradation	`select()` + `join()`
Hardcoded config	Environment-specific values	`%env(VAR)%`
Manual validation	Inconsistent, verbose	Validator constraints
Role checks in code	Scattered authorization	Voters
Sync heavy tasks	Blocking requests	Messenger async

Php Symfony

PHP/Symfony Development Patterns

Overview

Auto-detection

Architecture → @references/architecture.md

Project Structure

Php Symfony

PHP/Symfony Development Patterns

Overview

Auto-detection

Architecture → @references/architecture.md

Project Structure

Thin Controller Pattern

Service Layer

Doctrine ORM → @references/doctrine.md

Entity with Business Methods

N+1 Prevention

Security → @references/security.md

Voters for Authorization

CSRF Protection

Messenger → @references/messenger.md

Async Message Pattern

Testing → @references/testing.md

PHPUnit WebTestCase

Commands

Quick Reference

Common Patterns

Anti-patterns

Notion

Prose

Coding Agent (bash-first)

Continuous Learning

Security Review

Widget Generator