italix-framework

PSR-16 shaped caching: an opcache-backed file driver, an array driver, and an adapter over any Contracts KeyValueStore

Password authentication with leak-resistant ordering, and abstaining authorization policies. Ships no table and no session handling.

Transactional mail that cannot fail silently: the log row is written before the transport is touched. SMTP in core, PHPMailer optional.

Sessions as records about a subject and a tenant: device lists, per-account revocation, replay detection, step-up re-authentication, concurrency caps and pluggable stores.

Validation vocabulary and executor: machine error codes rather than prose, and a third verdict — unknown — for the checks it cannot honestly settle

Named events with declared listeners: printable, no wildcards, no cancellation, and a throwing listener does not take the dispatcher with it.

Calendar sets and event feeds: sources declared in PHP, driver-rendered client configuration

Named routes and URL generation: declare a route once, link to it by name, and fail loudly at generation time instead of 404ing later.

Category trees and tag lists in separate collections, SKOS labels in every language, SKOS mappings between them, and a pre/post-order interval index for O(1) ancestry

PSR-15 engine, middleware pipeline, service registry, controllers with declared dependencies, view renderer with block layouts, sessions and translation

Interfaces the Italix libraries meet through: schema metadata (TableMeta, ColumnMeta, RelationMeta, RuleMeta) that italix/orm implements and italix/forms and italix/datasets read, and service contracts — Cache, KeyValueStore, RateLimiter, Translator

A versioned tree of documents with human names, projected onto a real directory you can edit with any tool: every version kept, moves leave aliases, translations know when they fall behind

Context-aware output encoding as a type: HTML text, attributes, URLs and JSON, with a template lint that finds unencoded output.

Database-backed queue and cron scheduling: JSON payloads not serialized objects, atomic claiming, backoff, stalled-worker recovery.

Translation and formatting on ICU: CLDR plural categories, locale-aware numbers, money and dates, URL slugs in the language of the URL, and a key extractor that refuses to guess

Signed expiring tokens, authenticated encryption and fixed-window rate limiting, with key rotation built in

Framework CLI runner: commands listed not discovered, dependencies declared like a controller's, PSR-11 container, exit codes that mean something.

Form metadata and HTML rendering: FormMeta/FieldMeta descriptors, widgets, and adapters that build a form from a table schema

A pairwise format-conversion contract and a shortest-route driver registry, plus the crop, grid and gap geometry every driver shares — the plumbing of italix/documents and italix/media

A type-safe ORM for PHP: query builder, migrations, relations, partitions (rows that belong to one tenant), soft deletes, optimistic locking and read replicas — on MySQL, PostgreSQL, SQLite and Supabase