Download the PHP package velkymx/vibefw without Composer

VibeFW v2.1

[]()

A high-performance, security-focused PHP 8.4+ MVC framework built for modern, high-concurrency web development.

v2.1: SPA Scaffold + Security Hardening

VibeFW v2.1 adds first-class SPA tooling, security improvements, and correctness fixes across the framework.

What's New in 2.1

• make:spa command — Scaffold a production-ready Vue 3 + TypeScript + Vite SPA in seconds. Generates a full-stack starter (PHP API + Vue frontend) with auth, routing, and VibeUI components wired up. Runs npm install and npm run build automatically.
• HTTPS-aware auth cookies — Remember-me cookies now set Secure: true automatically in production.
• QueryBuilder SELECT quoting — Column identifiers in SELECT clauses are now properly quoted.
• Worker-mode safe Str caches — Static conversion caches are now bounded at 512 entries.

See CHANGELOG.md for the full list of changes.

v2.0: The Concurrency Update

VibeFW v2.0 is a ground-up architectural refactor designed for persistent runtimes like FrankenPHP Worker Mode. It introduces true request isolation and massive performance gains.

Key v2.0 Features

• 40,000+ Requests/Sec - Optimized for high-concurrency worker environments.
• Fiber-Isolated State - Automatic request isolation using Fiber-local container singletons and WeakMap context.
• Zero-Side-Effect Response - Response is now a pure value object, decoupled from PHP's output buffer.
• Strictly Immutable QueryBuilder - Prevents silent query contamination across branching logic.
• Bulletproof Memory Management - Automatic state resetting and container flushing prevents leaks in long-running processes.

Features

• Blazing Fast - 40,000+ requests/sec with FrankenPHP worker mode.
• Security First - Built-in protection against CSRF, XSS, SQL injection, and timing attacks.
• True Async I/O - Non-blocking HTTP and Database execution using PHP Fibers and EventLoop.
• Result/Option Types - Null-safe, exception-free error handling.
• Active Record ORM - Elegant, immutable database interactions with mass assignment protection.
• CQRS & Events - Command/Query separation and event-driven architecture built-in.
• Modern PHP - Leveraging property hooks, asymmetric visibility, and readonly properties.

Requirements

• PHP 8.4+
• Composer
• SQLite, MySQL, or PostgreSQL

Quick Start

Create a New Project

That's it. Composer automatically:

• Creates .env with secure keys
• Sets up storage directories
• Creates the SQLite database
• Runs all migrations

Add a Vue 3 Frontend (Optional)

Generates a complete SPA with auth, routing, and VibeUI components. See the SPA Quick Start for details.

Manual Setup (for cloned repos)

Run in High-Performance Worker Mode (Recommended)

VibeFW is designed to run at peak performance using FrankenPHP:

CLI Commands

Full-Stack in Two Commands

The SPA scaffold generates a complete Vue 3 + TypeScript + VibeUI frontend with:

• Home — Public landing page with feature cards
• Login / Register — Auth forms with validation, wired to the PHP API
• Dashboard — Protected stats page inside a sidebar + topbar shell
• Dark mode — Toggle with Bootstrap CSS variable support
• TypeScript types — Interfaces for all API responses

Documentation

• SPA Quick Start — Build a full-stack app in 5 minutes
• Changelog
• Upgrading to v2.0.0
• Controllers
• Models
• Views
• Routing
• Middleware
• Result & Option Types
• Database & Migrations
• VibeUI Components — Full component reference
• VibeUI AI Blueprint — AI agent integration guide

Performance

Benchmarked with FrankenPHP worker mode on Apple M2 (MacBook Air):

Core Concepts

Immutable Query Building

The QueryBuilder is now immutable. Chaining works normally, but conditional steps require re-assignment:

Side-Effect Free Responses

Controllers return Response objects which are emitted by the kernel. No more global header() calls or exit().

Testing

License

MIT License. See LICENSE for details.