Packages from waffle-commons · Transparency log
-
PHP
waffle-commons/async
Fiber-based finish-request deferred task runner for Waffle Commons: short post-response work lifted out of the user-perceived latency path, under a bounded per-request budget.
-
PHP
waffle-commons/auth
The Universal Authentication Bridge for Waffle Commons (RFC-021): JWT, OAuth2/OIDC, HMAC assertions, API-key/Basic and WebAuthn passkeys behind one stateless, fail-closed authenticator surface.
-
PHP
waffle-commons/cache
PSR-6 and PSR-16 caching for Waffle Commons: a worker-safe pool and simple-cache facade with pluggable stores.
-
PHP
waffle-commons/config
YAML configuration for Waffle Commons: environment-layered parameter loading with %env()% placeholder resolution, fail-secure parsing, and boot-time freezing for FrankenPHP workers. Requires ext-yaml.
-
PHP
waffle-commons/console
A minimalist, zero-magic CLI runtime for Waffle Commons: commands registered explicitly at boot, constructor-injected dependencies, plus the Waffle Maker code generators.
-
PHP
waffle-commons/container
PSR-11 dependency-injection container for Waffle Commons: autowiring, singleton lifecycles, and per-request reset semantics for resident-worker mode.
-
PHP
waffle-commons/contracts
The central contract package for Waffle Commons. Every other waffle-commons/* component depends only on this package and its declared PSR interfaces — the perimeter that keeps components independently replaceable.
-
PHP
waffle-commons/data
The data and persistence layer for Waffle Commons (RFC-022): a warm connection pool, a backend-agnostic query AST, and parameterized SQL / CQL / MongoDB / Firestore / key-value / GraphQL compilers for resident-worker mode.
-
PHP
waffle-commons/ecoshield-gateway
FinOps-driven Strangler-Fig API gateway POC: intercept, proxy and cache a legacy PHP monolith from a FrankenPHP worker.
-
PHP
waffle-commons/error-handler
PSR-15 error handling for Waffle Commons: RFC 7807 application/problem+json responses, PSR-3 logging, and debug-safe rendering that never leaks internals in production.
-
PHP
waffle-commons/event-dispatcher
PSR-14 event dispatching for Waffle Commons: listener providers, stoppable events, and a worker-safe dispatcher wired at boot.
-
PHP
waffle-commons/http
PSR-7 HTTP messages and PSR-17 factories for Waffle Commons: immutable request/response objects, streams, and contained file uploads.
-
PHP
waffle-commons/http-client
PSR-18 HTTP client for Waffle Commons: default-on SSRF protection, bounded 8 KiB streaming in both directions, timeout ceilings, and concurrent promise-based fan-out.
-
PHP
waffle-commons/log
PSR-3 logging for Waffle Commons: a minimal stream logger with channel separation, safe to hold across FrankenPHP worker requests.
-
PHP
waffle-commons/pipeline
PSR-15 middleware pipeline for Waffle Commons: an ordered, boot-frozen stack with automatic OPTIONS answering and no per-request mutation.
-
PHP
waffle-commons/routing
Attribute-driven routing for Waffle Commons: routes declared with #[Route] next to the controller, discovered at boot, and resolved through an AOT-compiled trie in O(depth).
-
PHP
waffle-commons/runtime
The SAPI-agnostic runtime for Waffle Commons: boots a kernel and emits responses through contracts interfaces only, so the same application runs under FrankenPHP worker mode, PHP-FPM or the CLI server.
-
PHP
waffle-commons/security
Hierarchical Attribute-Based Access Control for Waffle Commons: fail-closed by default, object-level voters, a stateless HMAC CSRF subsystem bound to a per-browser session id, and fail-closed CORS.
-
-
PHP
waffle-commons/telemetry
SDK-free enterprise telemetry for Waffle Commons: contract-first tracing no-ops, a Prometheus /waffle-metrics exporter, and stateless worker-metric collectors.
-
PHP
waffle-commons/telemetry-otel
OpenTelemetry SDK bridge for Waffle Commons: implements the framework TracerInterface with W3C trace-context propagation, keeping the OTel SDK out of the core perimeter.
-
PHP
waffle-commons/utils
Stateless, pure-function helpers shared across the Waffle Commons ecosystem: no I/O, no per-process state, safe to use across FrankenPHP worker requests.
-