GMX — Go + HTMX Transpiler Framework¶

Write components. Compile to Go. Ship a binary.

GMX is a full-stack language that compiles to Go, designed for building HTMX-powered web applications with type safety, automatic CSRF protection, and zero runtime dependencies.

What is GMX?¶

GMX is a declarative language that combines models, business logic, and templates into a single .gmx file. The compiler generates production-ready Go code with GORM for database access, HTMX for dynamic interactions, and built-in security features.

One file. One command. One binary.

Quick Example¶

<script>
service Database {
  provider: "sqlite"
  url:      string @env("DATABASE_URL")
}

model Task {
  id:    uuid    @pk @default(uuid_v4)
  title: string  @min(3) @max(255)
  done:  bool    @default(false)
}

func toggleTask(id: uuid) error {
  let task = try Task.find(id)
  task.done = !task.done
  try task.save()
  return render(task)
}

func createTask(title: string) error {
  if title == "" {
    return error("Title cannot be empty")
  }
  const task = Task{title: title, done: false}
  try task.save()
  return render(task)
}
</script>

<template>
<ul id="task-list">
  {{range .Tasks}}
  <li class="task-item {{if .Done}}done{{end}}" id="task-{{.ID}}">
    <input type="checkbox" {{if .Done}}checked{{end}}
      hx-patch="{{route "toggleTask"}}?id={{.ID}}"
      hx-target="#task-{{.ID}}"
      hx-swap="outerHTML" />
    <span>{{.Title}}</span>
  </li>
  {{end}}
</ul>
</template>

Compiles to:

gmx demo.gmx main.go
go run main.go
# → Full-featured web server with SQLite, CSRF protection, HTMX handlers

Key Features¶

Type-Safe HTMX¶

Route references are validated at compile time. No more broken HTMX attributes.

{{route "toggleTask"}}  <!-- ✅ Compile-time check -->
{{route "nonExistent"}} <!-- ❌ Compilation error -->

Automatic CSRF Protection¶

Double-submit cookie pattern with zero configuration. POST/PATCH/DELETE requests are automatically protected.

// Generated automatically:
// - CSRF cookie on GET
// - Token validation on POST/PATCH/DELETE
// - HTMX header injection

Multi-Tenant by Default¶

Use @scoped annotation for automatic tenant isolation:

<script>
model Post {
  tenantId: uuid @scoped
  title:    string
}
</script>

All queries are automatically scoped to the current tenant.

Single Binary Deployment¶

The generated Go code compiles to a standalone binary with embedded templates and SQLite support.

go build -o app main.go
./app  # Ready to deploy

How It Works¶

graph LR
    A[.gmx file] --> B[Lexer]
    B --> C[Parser]
    C --> D[AST]
    D --> E[Generator]
    E --> F[Go Source]
    F --> G[go build]
    G --> H[Binary]

Lexer tokenizes the .gmx source
Parser builds an Abstract Syntax Tree
Script Transpiler converts GMX Script to Go
Generator produces complete Go code
Go Compiler creates the final binary

Get Started¶

Check out the Getting Started Guide to build your first GMX application.

Documentation¶

For Users¶

Getting Started — Installation and first app
Components — Structure of .gmx files
Models — Database models and validation
Script — GMX Script language reference
Templates — HTML templates with HTMX
Services — External service integration
Security — Built-in security features

For Contributors¶

Architecture — Compiler pipeline overview
AST — Abstract Syntax Tree types
Lexer & Parser — Tokenization and parsing
Generator — Code generation internals
Script Transpiler — GMX Script → Go
Testing — Test strategy and coverage

Status¶

GMX is currently in active development. The compiler is functional with 81% test coverage. See the AUDIT_REPORT.md for detailed analysis.

Production Readiness: - ✅ Prototype/POC ready - 🟡 Refactoring recommended before scale-up - 🔴 Security hardening required for public deployment

License¶

Apache License 2.0