Nard for Laravel

Zero-config activity tracking for Laravel applications.

Install the package and Nard automatically records what happens in your app — HTTP requests, logins, every Eloquent model change, and queue jobs — then streams it to the local Nard Agent, which forwards it to Sadeim Central. No code changes, no manual instrumentation.

Why it's safe to leave on

• Zero added latency. HTTP tracking runs in terminable middleware — events are recorded and sent after the response has already been delivered to the visitor.
• In-memory buffering. Recording an event is just an array append (microseconds). The actual send to the agent happens once, post-response.
• Loopback only. The package talks solely to the local agent on 127.0.0.1; every send is best-effort and failure is swallowed, so tracking can never break or slow your app.
• Sensitive data is redacted before anything leaves the server — see SECURITY.md.

Requirements

• PHP 8.1+
• Laravel 10, 11, or 12
• A running Nard Agent on the same server (listening on 127.0.0.1:8765 by default)

Installation

composer require sadeim/nard-laravel

The service provider and the Nard facade are auto-discovered. That's it — tracking is now on.

Optionally publish the config file to tune behaviour:

php artisan vendor:publish --tag=nard-config

Configuration

All settings live in config/nard.php and can be driven by environment variables.

To turn everything off without uninstalling:

NARD_ENABLED=false

On a very high-traffic app you can sample HTTP requests (auth, model and queue events are always recorded in full):

NARD_SAMPLE_RATE=0.2

Automatic tracking

Once installed, the following are captured with no further work:

• HTTP — method, path, status code, duration, source IP, user agent.
• Auth — auth.login, auth.logout, auth.failed, auth.registered.
• Models — model.created / model.updated / model.deleted, with the changed scalar attributes (sensitive ones redacted).
• Queue — queue.processed and queue.failed.

Manual tracking

Use the Nard facade for named business events that span more than one model — automatic tracking already covers the rest.

use Sadeim\Nard\Facades\Nard;

Nard::track()

Nard::track('checkout.completed', [
    'target_type' => 'Order',
    'target_id'   => $order->id,
    'payload'     => ['total' => $order->total, 'currency' => 'USD'],
]);

Nard::activity() — fluent builder

Nard::activity('checkout.completed')
    ->actor($user)                       // or ->actorId('42', 'Sara')
    ->target('Order', $order->id)
    ->targetName("Order #{$order->id}")
    ->action('completed')
    ->payload(['total' => $order->total])
    ->with('currency', 'USD')
    ->record();

If no actor is set, the currently authenticated user is used automatically.

Nard::batch()

In long-running processes (console commands, daemons) there is no HTTP response to flush on. Wrap a unit of work in batch() to record it and immediately ship whatever it tracked:

Nard::batch(function () {
    foreach ($invoices as $invoice) {
        $invoice->markPaid();                 // tracked automatically
        Nard::track('invoice.reconciled', ['target_id' => $invoice->id]);
    }
});

Security

Sensitive values (passwords, tokens, card numbers, …) are redacted from every payload before it leaves your server, recursively and case-insensitively. The list is configurable. See SECURITY.md for the full default set and how to extend or exclude.

Testing

composer install
vendor/bin/phpunit

Links

• Documentation: https://nard.sadeim.com/docs/laravel
• Nard: https://nard.sadeim.com
• Sadeim: https://sadeim.com

License

The MIT License (MIT). See LICENSE.