remix-run/remix

Build Better Websites. Create modern, resilient user experiences with web fundamentals.

Structural Verdict

How Data Flows Through the System

HTTP requests flow through middleware chains, with context passed between layers and responses transformed on the way back

1. Request Parsing — Incoming HTTP requests parsed into Web API Request objects
2. Middleware Processing — Request flows through composable middleware chain (auth, CORS, compression)
3. Route Matching — URL patterns matched against registered routes using route-pattern
4. Handler Execution — Route handlers execute with access to request context and middleware state
5. Response Processing — Responses flow back through middleware for compression, headers, cookies

System Behavior

How the system actually operates at runtime — where data accumulates, what loops, what waits, and what controls what.

Data Pools

Feedback Loops

• OAuth State Verification (retry, balancing) — Trigger: OAuth callback with invalid state. Action: Reject request and clear transaction. Exit: Valid state parameter received.
• CSRF Token Rotation (cache-invalidation, balancing) — Trigger: Token validation failure. Action: Generate new token and store in session. Exit: Valid token submitted.

Delays & Async Processing

• OAuth Authorization Flow (async-processing, ~user-dependent) — User redirected to provider and back
• Compression Processing (async-processing, ~response-size-dependent) — Response buffered and compressed before sending

Control Points

• Compression Threshold (threshold) — Controls: Minimum response size for compression. Default: 1024 bytes
• CORS Origin Validation (runtime-toggle) — Controls: Dynamic origin allow/deny decisions
• Auth Scheme Selection (feature-flag) — Controls: Which authentication methods to attempt

Package Structure

This monorepo contains 8 packages:

Technology Stack

Key Components

• createRouter (function) — Creates HTTP routers with middleware support built on Web APIs packages/fetch-router/src/index.ts
• asyncContext (function) — Middleware that stores request context in AsyncLocalStorage for access anywhere packages/async-context-middleware/src/lib/async-context.ts
• auth (middleware) — Authentication middleware that validates requests and stores auth state packages/auth-middleware/src/lib/auth.ts
• Schema (class) — Type-safe data validation compatible with Standard Schema v1 spec packages/data-schema/src/lib/schema.ts
• Component (class) — Base component class providing React-like lifecycle and state management packages/component/src/index.ts
• createOAuthProvider (function) — Creates OAuth providers for third-party authentication flows packages/auth/src/lib/provider.ts
• DataTable (class) — Database-agnostic query builder with pagination and filtering packages/data-table/src/index.ts
• Session (class) — Type-safe session management with pluggable storage backends packages/session/src/index.ts
• cors (middleware) — CORS middleware with dynamic origin validation and preflight handling packages/cors-middleware/src/lib/cors.ts
• compression (middleware) — Automatic response compression with Brotli, gzip, and deflate support packages/compression-middleware/src/lib/compression.ts

Configuration

cspell.yml (yaml)

• version (string, unknown) — default: 0.2
• language (string, unknown) — default: en
• words (array, unknown) — default: accentunder,actiontype,activedescendant,aftertoggle,arcrole,Arcrole,autocorrect,backlink,bbox,biblioentry,biblioref,Booleanish,braillelabel,brailleroledescription,closedby,closerequest,colcount,colindex,colindextext,columnalign,columnlines,columnspacing,columnspan,commandfor,contenteditable,contentinfo,controlslist,denomalign,describedby,desync,disableremoteplayback,displaystyle,DOMCSS,dropeffect,elementtiming,enterkeyhint,exportparts,fetchpriority,fixpoint,flowto,focusin,focusout,fontstyle,fontweight,formaction,formenctype,formmethod,formnovalidate,formtarget,FOUC,framespacing,glossref,haspopup,healthcheck,horiz,hsba,inlist,inputmode,itemprop,itemref,itemscope,itemtype,jsxs,keybind,keyshortcuts,keyup,labelledby,largeop,linethickness,lquote,lspace,maction,mathbackground,mathcolor,mathsize,mathvariant,maxlength,maxsize,menclose,menuitemcheckbox,menuitemradio,merror,mfenced,mfrac,Microdata,minsize,Mmulti,mmultiscripts,movablelimits,mpadded,mpath,mphantom,mprescripts,mroot,mrow,mspace,msqrt,mstyle,msub,msubsup,msup,mtable,mtext,multiselectable,munder,munderover,noteref,novalidate,numalign,outerclick,pagebreak,pagelist,panose,playsinline,pointerdown,pointerenter,pointerleave,pointermove,pointerup,popovertarget,popovertargetaction,posinset,pullquote,referrerpolicy,renderable,roledescription,roletype,rowalign,rowcount,rowindex,rowindextext,rowlines,rowspacing,rowspan,rquote,rspace,scriptlevel,scriptminsize,scriptsizemultiplier,sectionhead,setsize,Signalish,spinbutton,statusline,stemh,stemv,subscriptshift,Subsup,superscriptshift,SVGM,treegrid,treeitems,unitless,unkeyed,valuenow,valuetext,vdom,visibilitychange,vnode,VNODE,vnodes,voffset,wmode,xlink
• ignorePaths (array, unknown) — default: node_modules/**,dist/**,build/**,pnpm-lock.yaml

pnpm-workspace.yaml (yaml)

• catalog.@types/node (string, unknown) — default: ^24.6.0
• catalog.@typescript/native-preview (string, unknown) — default: 7.0.0-dev.20251125.1
• catalog.playwright (string, unknown) — default: ^1.53.1
• catalog.tsx (string, unknown) — default: ^4.20.6
• catalog.typescript (string, unknown) — default: ^5.9.3
• packages (array, unknown) — default: demos/*,docs,packages/*,packages/fetch-router/demos/*,packages/form-data-parser/demos/*,packages/component/demos,packages/component/bench,packages/component/bench/frameworks/*,packages/lazy-file/scripts,packages/multipart-parser/bench,packages/multipart-parser/demos/*,packages/node-fetch-server/bench,packages/node-fetch-server/demos/*,packages/route-pattern/bench,packages/static-middleware/demos/*,packages/tar-parser/bench,scripts
• shellEmulator (boolean, unknown) — default: true

Related Fullstack Repositories

Frequently Asked Questions

Analyzed on March 31, 2026 by CodeSea. Written by Karolina Sarna.