Introduction

Pondoknusa is a TypeScript-native web framework for Node.js 26+. It runs on standard Web APIs (Request, Response, fetch) and ships as a set of focused npm packages you can adopt incrementally.

What you get

• Application kernel — service container, providers, HTTP kernel, and facades (Route, Auth, Queue, …)
• HTTP layer — router with groups and named routes, middleware registry, JSON/HTML/XML responses
• Views — TSX modules in resources/views/ (<AppLayout>, <Island>, compiled cache)
• Database — Eloquent-style models, query builder, migrations, factories, seeders, and pagination
• Auth — session and token guards, social OAuth (GitHub, Google, X, Apple, …), OAuth2 server, CSRF, API token hardening, policies, password reset
• Crypto — post-quantum KEM/signatures (@pondoknusa/crypto), session encryption at rest, signed OAuth tokens
• Async work — typed jobs, database/redis queue drivers, domain events and listeners (async-native boot and I/O since v0.9.0)
• DX — pondoknusa CLI for scaffolding, migrations, seeding, and a built-in dev server
• Agent-ready HTTP — /llms.txt, sitemap, OpenAPI, markdown Accept, and JSON-LD from registerHttpMiddleware() (guide)

Requirements

• Node.js 26+ (Bun is also supported as a runtime)
• npm workspaces for monorepo development; published packages install like any other dependency

Packages

Package	Role
@pondoknusa/core	Application kernel and facades
@pondoknusa/http	Router, middleware, requests, responses
@pondoknusa/database	ORM, migrations, pagination
@pondoknusa/auth	Guards, sessions, social OAuth, policies
@pondoknusa/auth-oauth	OAuth2 authorization server
@pondoknusa/crypto	Post-quantum encryption and signatures
@pondoknusa/views	TSX view engine, islands, compiled cache
@pondoknusa/cli	Project scaffolding and generators

See the package reference for every @pondoknusa/* package, or the monorepo README for a quick overview.

Documentation map

Section	Best for
Guide	Concepts and how things work
Reference	Package exports, CLI commands, facades
Tutorials	Zero-to-deploy learning path
Cookbook	Focused recipes (realtime, RAG, testing)
Configuration reference	Every config/*.ts key from scaffolds
Broadcasting	WebSocket hub, Echo client, production deploy
Deployment	Platform matrix, Docker, Fly, Railway, Cloudflare, CI/CD
Pondoknusa Cloud	Planned managed hosting (like Laravel Cloud)
Ecosystem	Publishing third-party @pondoknusa/* extensions

Upgrading

Pondoknusa 6.0.0 changes the TSX dialect (<Raw html>, island pn-* markers, host events) and JSON error Content-Type. See Upgrading to 6.0.

Pondoknusa 5.0.0 replaces .tyr templates with TSX views. See Upgrading to 5.0.

4.0.0 reworks config, route, and view caches for cold starts. See Upgrading to 4.0.

3.0.0 hardens security across auth, HTTP, database, and debug tooling. See Upgrading to 3.0 for breaking changes and the migration checklist.

2.0.0 renamed the project from Tyravel (@tyravel/* → @pondoknusa/*). See Upgrading to 2.0 for the rename checklist.

1.0.x and later follow strict semver for stable APIs. Read API stability before upgrading across minor versions. Apps still on 0.11–0.16 should follow Upgrading to 1.0 first.