Menu
Guides
Task-focused deep dives grouped by the surfaces you actually build: pages, data, live UI, security, tooling, and deployment.
Pages & Routing
Routing & navigation
Declare routes as typed values, link to them with the path's literal type, and let renaming a path turn every stale link red under check.
Read →Layouts
Declare nested route chrome with layout queries, guards, stylesheets, and explainable boundaries.
Read →Request shell
Close one app contract, inspect dispatch order, and configure documents, adapters, error shells, and pre-dispatch load shedding.
Read →
Data & Mutations
Data layer
Annotate Drizzle tables, load through read handles, and declare opaque mutation touches only when analysis cannot see the write.
Read →Queries & invalidation
Load data through query loaders, declare access posture, and let Kovo connect Drizzle reads to mutation refreshes.
Read →Pagination
Page a query with a cursor, keep DOM identity stable, and ship only the new rows on the wire.
Read →Caching
Understand Kovo's default cache posture, opt into a public query cache, and verify the headers the app actually serves.
Read →Mutations & forms
Post a typed form, keep reads in the handler, route writes through a named domain helper, and refresh stale query-backed UI after commit.
Read →File uploads & storage
Accept a file from a form, store it, and serve it back with a scoped download URL.
Read →Database lifecycle
Start with PGlite, define the schema, seed dev data, and move the same app to reviewed Postgres migrations.
Read →Endpoints & webhooks
Declare raw HTTP ingress for OAuth callbacks, webhooks, downloads, typed headers, cookies, and audit review.
Read →
Live & Async UI
Live queries
Keep open pages fresh with shipped mutation responses, tab sync, and refetch-on-focus; SSE live queries are roadmap.
Read →Optimistic updates
Make writes feel instant by declaring one transform per query, with a check that catches the one you forgot.
Read →Streaming & defer
Answer immediately with the cheap parts of a page and stream the expensive parts into the same response with Defer.
Read →
UI
Components & copy-in UI
Use public styled components from @kovojs/ui subpaths, or copy their source into your app when you want to own the styling.
Read →Composing primitives
Merge headless primitive behavior into your own elements, know which attributes compose, and see where conflicts fail the build.
Read →Styling with StyleX
Use typed StyleX objects for component styling, plain document CSS for page chrome, and one stylesheet contract for pages, fragments, and streams.
Read →Interactive islands & client state (L1)
Author interactivity as pure client islands — local state plus a derived update plan — and let the compiler lower your inline closures to named handlers.
Read →Accessibility
Kovo's styled primitives are axe-clean across their interactive state tiers — proven, not asserted, by the framework's own gallery browser axe suite.
Read →
Security & Auth
Security & authorization
Protect routes and actions, keep secrets off the wire, scope writes, and review the security graph without a browser.
Read →Confidential values
Mark secrets and untrusted input, reveal them deliberately, and keep them off the client wire by default.
Read →Outbound requests & egress
Call third-party APIs through Kovo's runtime egress surface, then narrow exactly which destinations are allowed.
Read →Error handling
Catch render failures, render the right shell, and understand how mutation, route, and request-shell failures differ.
Read →Better Auth integration
Use Kovo's generated Better Auth boundary for sessions, credential mutations, CSRF, and production-safe configuration.
Read →
Operations
Testing & Tooling
Testing with @kovojs/test
Exercise one imported Kovo app with inferred types and runtime facts from an exact successful build.
Read →Dataflow devtool
Generate Kovo dataflow graphs, mount the visual devtool, and query the same cards through MCP.
Read →The kovo CLI
Use one framework command for development, checks, tests, builds, and inspection.
Read →Reading kovo check & kovo explain
Query the graph your build emits, turn product rules into CI assertions, and debug mutations straight from the Network panel.
Read →
Deployment
Reference
More Guides
Golden task recipes
Copy the smallest checked Kovo pattern for sixteen everyday app tasks, then follow the focused guide when you need the production shape.
Read →Team access with Postgres RLS
Use a custom Postgres authzPolicy predicate when a table is visible through team or org membership.
Read →Wire protocol
Read Kovo's mutation, query, fragment, text, defer, and delta frames when debugging a page.
Read →Render component trees
Render CMS or model-authored rich text through a closed set of approved Kovo components.
Read →Verify release artifacts
Check a Kovo certificate against independently reviewed policy and exact packed modules.
Read →