What's Included
A map of implemented capabilities to their documentation. Status: ✅ implemented, ◐ partial, ⚗️ experimental (runtime). Everything below is exercised by the test suite.
Core & routing
| Capability | Docs |
|---|---|
| File routing (pages, nested layouts, route groups) | Routing |
Dynamic params [id] and catch-all [...slug] |
Routing |
| API routes with method exports + 404/405 | Routing |
| Global + per-folder middleware | Routing |
Error boundaries (error.tsx) + stable RMX-* codes |
Troubleshooting |
| Request limits (body 1 MiB, 10 s timeout, 100 concurrent) | Routing |
Config pass-through (ramonyx.config.ts) |
CLI |
Rendering & data
| Capability | Docs |
|---|---|
| SSR React (sync + streaming opt-in) | SSR & Hydration |
| Hydration payload + soft navigation + prefetch | SSR & Hydration |
Loaders (params, query, env, assets, locale) |
SSR & Hydration |
| Server actions + schema validation + 303 PRG | SSR & Hydration |
| Loader cache with TTL + stale-while-revalidate + tags | Data & Caching |
On-demand invalidation (revalidate) |
Data & Caching |
| Metadata/SEO (sitemap, robots, canonical) | SSR & Hydration |
| i18n routing + translation helpers | Internationalization |
Typed routes (routeHref) |
Typed Routes |
| Streaming SSR | SSR & Hydration |
Security
| Capability | Docs |
|---|---|
| Security headers + CSP nonce | Security overview |
| CSRF double-submit | Sessions & Auth |
| Rate limiting per client | Security overview |
SSRF guard with DNS pinning (guardedFetch) |
Security overview |
| Safe cookies + HMAC-signed sessions | Sessions & Auth |
| Server/client boundary enforcement | Architecture |
| Body/timeout/concurrency/output limits | Routing |
Assets & media
| Capability | Docs |
|---|---|
src/assets/** hashing + manifest + resolver |
Assets & Images |
Image (anti-CLS, lazy, <picture>) |
Assets & Images |
| Build-time image variants (WebP; AVIF opt-in) | Assets & Images |
| Font preload helper | Assets & Images |
Tooling & deployment
| Capability | Docs |
|---|---|
CLI (dev, build, start, doctor, watch) |
CLI |
| Dev server + HMR | CLI |
| Devtools panel (dev-only) | Devtools Panel |
Scaffolder (create-ramonyx-app) |
Getting Started |
| Typed routes codegen | Typed Routes |
| Observability (trace id, logs, metrics) | Observability |
| Static export / SSG | Deployment |
| Edge/serverless target | Deployment |
| Compression + ETag + immutable assets | Deployment |
| Source maps (client + packages) | Troubleshooting |
| Benchmark protocol | Benchmarks |
| Test utilities | Testing |
Extensibility
| Capability | Docs |
|---|---|
| Plugins (Vite, middleware, hooks, assets) | Plugins |
| Plugin publishing conventions | Plugins |
Image plugin (sharp optional peer) |
Assets & Images |
MCP docs server + llms.txt |
For Agents |
Experimental runtime (Rust + V8)
Permission deny-all model, HTTP server with streaming/cancellation, worker and process isolation,
CPU/RSS quotas, plugin sandbox (Landlock), TLS fetch, CommonJS interop. Shipped as a separate
binary; not part of the production promise yet — see the repository for its assessments.