AssetAggregationMiddleware | Collects legacy appended attributes like ‘css’ and ‘js’ from the Request (when using adapter) and exposes them as PSR request attributes assets.css and assets.js. |
ContentNegotiationMiddleware | Minimal wrapper over middlewares/content-type. |
CoreMiddlewareRegistry | The single declaration of the middleware the framework ships. |
DispatchMiddleware | DispatchMiddleware runs the requested action. |
ErrorHandlingMiddleware | Catches unhandled throwables from downstream middleware/action dispatch and produces a generic 500 (or mapped) response. |
ExecutionTimeMiddleware | Basic execution timing middleware replacing ExecutionTimeFilter. |
FinalizeMiddleware | FinalizeMiddleware (scaffold): end-of-request persistence for session/user. |
FormPopulationMiddleware | Applies the modernized form population engine to PSR-7 responses so container-less requests still receive automatic form value and error message population. |
MiddlewareCatalog | MiddlewareCatalog stores enable/disable flags for middleware FQCNs, settable programmatically via MiddlewareCatalog::initialize() (tests, app bootstrap code), so the runtime pipeline builder can cheaply skip optional middlewares. |
MiddlewarePipeline | MiddlewarePipeline builds and caches the PSR-15 middleware chain; safe for worker reuse. |
OutputTypeSyncMiddleware | Synchronizes the Controller’s current output type with the PSR request attribute ‘output_type’ after routing has resolved (and potentially overridden) it. |
PayloadParsingMiddleware | Unified body parsing leveraging middlewares/payload. |
RoutingMiddleware | Executes Quiote routing and attaches module/action/outputType to PSR request attributes. |
SecurityMiddleware | Security middleware: evaluates action security requirements and forwards unauthenticated/unauthorized requests to login/secure system actions. |
SessionMiddleware | Bootstrap-phase session wiring for the framework pipeline. |
SlotMiddleware | SlotMiddleware: establishes a SlotStack in request attributes for nested slot/sub-action rendering. |
StealthMiddleware | Strips framework-identifying response headers when core.stealth_mode is enabled: any X-Quiote-* header, plus the names listed in core.stealth_additional_headers (covers X-Powered-By, which doesn’t follow that prefix). |
TelemetryMiddleware | Opens the root OpenTelemetry span for the request and records the headline resource measurements — wall time, CPU, memory — as both span attributes and OTel metrics. |
TimingMiddleware | Records timing spans for downstream middleware execution. |
TraceMiddleware | Captures names of executed middleware for debugging. |
ValidationMiddleware | Runs validation before the action executes, and enforces that only validated parameters are reachable afterwards. |