NENE2
PHP micro-framework: JSON APIs first, minimal server HTML, easy React starter integration, structure friendly to AI tooling.
OpenAPI contract — machine-readable API spec (OpenAPI 3.1). Live Swagger UI at http://localhost:8200/docs/ after docker compose up -d app.
NENE2 is a small, modern PHP framework foundation designed for projects that want to ship JSON APIs quickly, keep server-rendered HTML thin, and add a React frontend starter without turning the backend into frontend build glue.
The v1.x foundation covers full Note/Tag CRUD, Bearer JWT auth, pagination helpers, and a six-language VitePress documentation site, with opt-in rate limiting and database health checks as production-ready opt-in features. A maintainer can clone the repository, run a local API, share an OpenAPI contract, expose safe MCP tools through the API boundary, and verify database behavior in Docker Compose.
Project Highlights
NENE2 is built in the open, at high velocity, by a solo maintainer using an AI-assisted, Issue-driven workflow:
- 140+ releases (current:
v1.12.0) and 780+ merged pull requests since the first commit in May 2026 (as of 2026-07) — every change lands through an Issue → branch → PR → CI pipeline; nothing is committed directly to main.
- 262 how-to guides covering authentication, security, database patterns, API design, background jobs, and 100+ product feature recipes.
- 125+ runnable example apps — each a self-contained JSON API with tests, built as field trials of the framework itself.
- Powers the NeNe product family — 12+ open-source, self-hosted business tools for small teams (invoicing, records, deal tracking, contact management, and more), all built on this framework and sharing its fail-closed security baseline.
- Documented decisions — ADRs for every architectural choice, an OpenAPI 3.1 contract, six-language documentation, and an MCP server listed on Smithery.
Theme
- API first: define behavior through clear HTTP boundaries and OpenAPI contracts.
- Simple HTML: keep server HTML minimal, predictable, and easy to replace with SPA shells.
- Frontend ready: provide a React + TypeScript starter direction while keeping the frontend layer replaceable.
- AI readable: prefer explicit directories, small classes, typed boundaries, and documented decisions.
- LLM delivery ready: keep API, MCP, auth, database, and handoff docs aligned for small client-style projects.
- Modern PHP: use strict types, PSR-oriented style, dependency injection, automated tests, and static analysis.
Current Capabilities
The foundation currently includes:
- PSR-7 / PSR-15 / PSR-17 HTTP runtime with explicit routing and middleware.
- OpenAPI contract, Swagger UI, and runtime contract tests for shipped JSON endpoints.
- RFC 9457 Problem Details error responses.
- Typed app and database configuration through
.env loading boundaries.
- PSR-11 dependency injection with explicit runtime service wiring.
- PDO connection, query executor, transaction manager, SQLite tests, and opt-in MySQL verification through Docker Compose.
- Bearer JWT middleware with allowlist, blocklist, and prefix path options;
CompositeAuthMiddleware for three-tier access models (public / Bearer / API key).
- Fail-closed JWT secret resolution (
GuardedJwtSecretResolver): production never accepts a development signing key, and an empty secret is treated as unset rather than silently trusted.
- API-key middleware with path and method filters for machine-client endpoints.
- Server-rendered HTML via
NativePhpViewRenderer and HtmlResponseFactory — thin HTML coexists with JSON API routes.
- Local MCP server support for read/write tools aligned with OpenAPI, with an authentication guard on write operations.
- Opt-in installer toolkit (
Nene2\Install) for shared-hosting setup: preflight and config validation, release manifest handling, database schema application, and an unbranded reference renderer that stays dormant until wired.
- Audit logging base (
Nene2\Audit): append-only audit events recorded in the same transaction as the business mutation they describe.
- React + TypeScript + Vite starter kept optional and decoupled from backend runtime behavior.
Articles
Installation
NENE2 is available on Packagist.
The recommended way to start a new project is to clone the repository directly — it ships with Docker, .env.example, and all configuration you need out of the box:
git clone https://github.com/hideyukiMORI/NENE2.git my-project
cd my-project
If you want to use NENE2 as a Composer dependency in an existing project:
以上为 README 的开头部分。其余内容请阅读原文。 查看完整 README ↗
