Forge-Space Core

Shared standards, patterns, and MCP context server for the Forge Space ecosystem.

Part of Forge Space — the open full-stack AI workspace. This repo provides the foundation that all other Forge Space projects build on: code quality standards, security framework, CI/CD workflows, and a local MCP context server for IDE integration.

Version 1.2.0

Overview

Forge-Space Core provides shared configurations, workflows, and architectural patterns for consistency across the ecosystem. Centralized feature toggles, reusable GitHub Actions workflows (95% reduction in maintenance overhead), and comprehensive security validation.

Key Features

🔒 Zero Secrets: Public repository with comprehensive security validation
🏗️ Architectural Patterns: Proven patterns for scalable applications
🔄 Automation: Scripts and workflows for consistent project setup
📊 Quality Standards: 80% test coverage, linting, and security scanning
🛡️ Security First: Built-in security scanning and validation
🐳 Docker Patterns: Containerization and deployment patterns
🎛️ Centralized Feature Toggles: Cross-project feature management with CLI control
📡 MCP Context Server: Local stdio MCP server exposing all Forge Space project context documents as resources
📝 Logger Module: Comprehensive logging with observability and distributed tracing
🚀 High Performance: Sub-100ms integration times and optimized patterns
🔄 GitHub Workflows Optimization: Organization-level reusable workflows eliminating duplication

📋 Projects Using These Patterns

mcp-gateway: Python/Node.js MCP gateway with comprehensive CI/CD
forge-space-ui: Next.js web application with multi-environment deployment
forge-space-mcp: Node.js MCP server with security-focused workflows

🌐 Ecosystem Integration

This core repository provides the foundation for the entire Forge Space ecosystem:

🔗 Shared Standards: Consistent coding patterns across all projects
🛡️ Security Framework: Unified security validation and scanning
🔄 Automation: Centralized workflows and CI/CD pipelines
📊 Quality Gates: Standardized testing and quality requirements

Related Projects:

Forge Space - UI - AI-powered UI generation platform
MCP Gateway - Central tool aggregation and routing
Forge Space - UI MCP - Specialized UI development tools

Documentation:

Ecosystem Overview - Complete ecosystem guide
Integration Guide - Step-by-step integration instructions
Architecture Diagrams - Visual architecture reference

� GitHub Workflows Optimization

Organization-Level Reusable Workflows

Forge-Space Core now provides centralized reusable workflows that eliminate duplication across the Forge Space ecosystem:

95% reduction in maintenance overhead
Single source of truth for all CI/CD logic
Organization-level sharing via GitHub Actions
Zero duplicated files across projects

Available Reusable Workflows

Core CI/CD Workflows

ci-base.yml - Unified base CI pipeline with configurable inputs
security-scan.yml - Comprehensive security scanning and validation
branch-protection.yml - Automated branch protection and validation
dependency-management.yml - Centralized dependency updates and auditing
release-publish.yml - Automated release publishing with version management

Usage Examples

# In your project's .github/workflows/ci.yml
jobs:
  ci:
    uses: Forge-Space/core/.github/workflows/reusable/ci-base.yml@main
    with:
      project-type: 'gateway'  # or 'mcp', 'webapp', 'patterns'
      node-version: '22'
      python-version: '3.12'
      enable-docker: true
      enable-security: true
      enable-coverage: true

Integration Benefits

Instant Updates: Change once, apply everywhere
Consistency: Standardized patterns across all projects
Maintenance: Single point of update for workflow improvements
Quality: Centralized testing and validation of workflows

Quick Integration

Configure Repository Access: Enable organization access to Forge-Space/core workflows
Update Workflow References: Replace local copies with organization references
Remove Duplicated Files: Delete any local -shared.yml files
Test and Validate: Ensure workflows run correctly with new references

� Documentation

For complete documentation, see our Documentation Hub which includes:

Project Context - Complete project guide and context
Implementation Reports - Integration and analysis reports
Pattern Documentation - All pattern documentation
Architecture Decisions - System design decisions
User Guides - Deployment and user journey guides
MCP Context Server - Setup and IDE integration for the Forge Space context MCP server
VSCode Extension - Pattern discovery, scaffolding, and compliance validation in VSCode
Development Standards - Coding and security standards

🚀 Quick Start

1. Install Forge Patterns

npm install @uiforge/forge-patterns

2. Integrate into Your Project

# Navigate to your project directory
cd /path/to/your-project
# Use the automated integration CLI
npx forge-patterns integrate

# Or use individual integration commands
npx forge-patterns integrate --project=mcp-gateway
npx forge-patterns integrate --project=uiforge-mcp
npx forge-patterns integrate --project=uiforge-webapp

📁 Repository Structure

uiforge-patterns/
├── .github/
│   ├── workflows/          # CI/CD workflow templates
│   └── templates/          # GitHub templates (PR, issues)
├── patterns/
│   ├── code-quality/       # ESLint, Prettier configurations
│   ├── config/            # Centralized configuration management
│   ├── docker/            # Docker and containerization patterns
│   ├── feature-toggles/   # 🎛️ Centralized feature toggle system
│   ├── git/               # Git hooks and workflows
│   ├── mcp-gateway/       # MCP Gateway patterns (security, performance)
│   ├── mcp-servers/       # MCP Server patterns (AI providers, streaming)
│   ├── security/          # Security patterns (authentication, middleware)
│   └── shared-infrastructure/ # Shared infrastructure patterns (optimization)
├── docs/                   # 📚 Comprehensive documentation
│   ├── architecture/       # Architecture decisions and summaries
│   ├── architecture-decisions/ # ADRs for system design
│   ├── guides/            # User guides and deployment playbooks
│   ├── standards/         # Development and security standards
│   └── reports/           # Implementation and analysis reports
├── test/                   # 🧪 Comprehensive test suites
│   ├── feature-toggle-validation.js # Feature toggle system tests
│   ├── cross-project-integration.js # Cross-project integration tests
│   └── performance-benchmark.js # Performance benchmarking
├── scripts/
│   ├── forge-features      # 🎛️ CLI tool for feature management
│   ├── integrate.js        # Automated integration script
│   ├── security/          # Security validation scripts
│   └── bootstrap/         # Project bootstrap scripts
├── src/                   # TypeScript source files
├── test/                  # 🧪 Comprehensive test suites
├── package.json           # Package configuration
└── README.md             # This file

🔧 Available Patterns

🎛️ Centralized Feature Toggle System

NEW: Cross-project feature management with unified control

# Enable global features
forge-features enable global.debug-mode
forge-features enable global.beta-features

# Enable project-specific features
forge-features enable mcp-gateway.rate-limiting
forge-features enable forge-space-ui.rate-limiting
forge-features enable forge-space-mcp.ai-chat
forge-features enable forge-space-ui.dark-mode

# Check feature status
forge-features status --global
forge-features status --project=mcp-gateway

Features:

Global and project-specific feature namespaces
CLI tool for feature management
Real-time feature updates
Cross-project consistency

Code Quality Patterns

ESLint Configuration

// Base ESLint config for TypeScript projects
module.exports = {
  root: true,
  extends: ['eslint:recommended', '@typescript-eslint/recommended', 'prettier'],
  // ... comprehensive rules
};

Prettier Configuration

{
  "semi": true,
  "trailingComma": "es5",
  "singleQuote": true,
  "printWidth": 100,
  "tabWidth": 2,
  "useTabs": false,
  "arrowParens": "always",
  "endOfLine": "lf"
}

Docker Patterns

NEW: High-Efficiency Docker Standards

# Three-state service model with sleep/wake architecture
services:
  [service-name]:
    resources:
      memory: "512M"
      cpu: "0.5"
      memory_reservation: "256M"
    sleep_policy:
      enabled: true
      idle_timeout: 300
      priority: "normal"
    auto_start: false

Multi-stage Dockerfile

# Build stage
FROM node:22-alpine AS builder
# ... build process

# Production stage
FROM node:22-alpine AS runtime
# ... optimized production image

Docker Compose Development

version: '3.8'
services:
  app:
    build: .
    ports:
      - "3000:3000"
    volumes:
      - .:/app
    command: npm run dev

Test Coverage Patterns

Jest Configuration (TypeScript)

module.exports = {
  collectCoverageFrom: ['src/**/*.ts'],
  coverageThreshold: {
    global: {
      branches: 80,
      functions: 80,
      lines: 80,
      statements: 80
    }
  }
};

Codecov Configuration

codecov:
  coverage:
    status:
      project:
        default:
          target: 80%
          threshold: 1%

Git Workflow Patterns

Pre-commit Hook

#!/bin/bash
# Comprehensive pre-commit validation
echo "🚀 Running Forge Space pre-commit validations..."
# Security validation, linting, testing, etc.

Conventional Commits

# Enforces conventional commit format
# feat, fix, docs, style, refactor, test, chore, etc.

Security Patterns

Environment Template

# SECURITY NOTICE: PUBLIC REPOSITORY TEMPLATE
JWT_SECRET_KEY=REPLACE_WITH_STRONG_SECRET
DATABASE_URL=REPLACE_WITH_DATABASE_URL
API_KEY=REPLACE_WITH_API_KEY

Security Validation

# Automated secret detection and validation
./scripts/security/validate-no-secrets.sh
./scripts/security/validate-placeholders.sh

🐳 Docker Development

Quick Start with Docker

# Start development environment
docker-compose up -d

# View logs
docker-compose logs -f app

# Stop environment
docker-compose down

Production Deployment

# Build production image
docker build -t my-app .

# Run production container
docker run -p 3000:3000 my-app

# Or use production compose
docker-compose -f docker-compose.prod.yml up -d

Available Docker Patterns

🆕 High-Efficiency Standards: Serverless-like efficiency with sleep/wake architecture
Multi-stage builds: Optimized production images
Development environments: Hot reload and debugging
Production deployments: Scaling and monitoring
Security best practices: Non-root users, minimal images
Resource Optimization: 50-80% memory reduction, 80-95% CPU reduction
Fast Wake Times: ~100-200ms vs 2-5 second cold starts
Costless Scalability: Serverless efficiency with container benefits

📋 Rules Library (35+ Rules)

Core Development Rules

agent-rules.md: Code partner philosophy and minimal changes
documentation-first.md: Documentation-driven development
error-handling.md: Consistent error handling patterns

Code Quality & Standards

code-quality-analysis.md: Comprehensive code quality standards
testing-quality.md: Testing standards and quality assurance
ts-js-rules.md: TypeScript/JavaScript coding standards

Security & Dependencies

security-secrets.md: Security and secrets management
dependencies-security.md: Dependency vulnerability management
snyk_rules.md: Snyk security scanning rules

CI/CD & Automation

ci-cd.md: CI/CD pipeline standards
enforcement-automation.md: Automated enforcement of standards

Project Management

commit-pr-release.md: Commit, PR, and release standards
version-management.md: Comprehensive version management
plan-context.md: Project context and state management

Frontend & UI

react-patterns.md: React development patterns
nextjs-app-router.md: Next.js App Router patterns
accessibility-openness.md: Accessibility guidelines

Backend & Architecture

pattern.md: Architectural patterns and SOLID principles
dependency-injection.md: Dependency injection patterns
db-migrations.md: Database migration standards

🔄 Workflows Library (16+ Workflows)

Development Workflows

quality-checks.md: Comprehensive quality validation (// turbo)
run-tests.md: Testing workflow execution
verify.md: Implementation verification

Tool & Framework Workflows

add-framework-template.md: Framework template addition
implement-tool.md: Tool implementation procedures
deploy-checklist.md: Deployment preparation

MCP & Documentation Workflows

mcp-docs-and-tools.md: MCP documentation usage
skill-mcp-docs-search.md: Documentation search skills

Infrastructure Workflows

start-and-register-gateway.md: Gateway setup
connect-ide-to-mcp-gateway.md: IDE integration
change-gateways-prompts-resources.md: Gateway configuration

Specialized Skill Workflows

skill-backend-express.md: Express.js development
skill-frontend-react-vite.md: React + Vite development
skill-e2e-playwright.md: E2E testing

Planning Workflows

use-plan-context.md: Plan context loading
update-plan.md: Plan maintenance

Safety Workflows

safety-shell-commands.md: Safe command execution

🎯 Skills Library (5+ Skills)

Development & Engineering Skills

code-generation-templates.md: Code generation and templating
design-output.md: System design and specification
docker-deployment.md: Docker deployment expertise

Documentation & Research Skills

mcp-docs-search.md: Documentation research and lookup
mcp-tool-development.md: MCP tool development

📋 Plans Library (5+ Plans)

Comprehensive Project Plans

high-efficiency-docker-standards-c1f908.md: Complete Docker standards
docker-standards-implementation-summary-c1f908.md: Implementation overview
serverless-mcp-sleep-architecture-c1f908.md: Sleep/wake architecture
scalable-docker-compose-architecture-c1f908.md: Dynamic scaling
docker-optimization-lightweight-mcp-c1f908.md: Docker optimization

🛡️ Security

Zero Secrets Policy

This repository is designed to be completely public with zero secrets:

✅ No actual secrets in any files
✅ All sensitive values use REPLACE_WITH_[TYPE] format
✅ Automated secret scanning and validation
✅ Comprehensive security workflows

Security Validation

# Run comprehensive security scan
./scripts/security/scan-for-secrets.sh

# Validate no secrets
./scripts/security/validate-no-secrets.sh

# Validate placeholder formats
./scripts/security/validate-placeholders.sh

Security Features

Trufflehog: Secret detection with verified secrets only
Gitleaks: Custom secret detection rules
Custom Validation: Placeholder format validation
Continuous Monitoring: Daily security scans

📊 Quality Standards

Test Coverage Requirements

Minimum Coverage: 80% across all metrics
Coverage Types: Branches, Functions, Lines, Statements
Quality Gates: Fail builds below 80%
Reporting: XML, HTML, Terminal formats

Code Quality Requirements

Linting: ESLint/Prettier for consistency
Type Checking: TypeScript strict mode
Security Auditing: npm audit for vulnerabilities
Pre-commit: Automated quality validation

🔄 Automation

Bootstrap Scripts

# Create new project with full patterns
./scripts/bootstrap/project.sh my-project node

# Bootstrap specific project types
./scripts/bootstrap/gateway.sh      # mcp-gateway style
./scripts/bootstrap/webapp.sh       # uiforge-webapp style
./scripts/bootstrap/mcp.sh          # uiforge-mcp style

Synchronization Scripts

# Sync patterns to all projects
./scripts/sync/patterns.sh

# Sync configurations
./scripts/sync/configs.sh

# Sync templates
./scripts/sync/templates.sh

Validation Scripts

# Validate pattern consistency
./scripts/validate/patterns.sh

# Validate security configs
./scripts/validate/security.sh

# Validate code quality
./scripts/validate/quality.sh

🚀 CI/CD Integration

GitHub Actions Workflows

# Security scanning (automated)
- name: Security Scan
  uses: trufflesecurity/trufflehog@v3.93.3
- name: Gitleaks Secret Scan
  uses: gitleaks/gitleaks-action@v2

# Quality checks
- name: Lint and Format
- name: Type Check
- name: Test with Coverage
- name: Security Audit

Quality Gates

✅ All linting checks pass
✅ All tests pass (100% success)
✅ Code coverage ≥ 80%
✅ Security scans pass
✅ Build verification succeeds

📚 Documentation

Getting Started

Setup Guide - Complete setup instructions
Customization Guide - How to adapt patterns
Maintenance Guide - Ongoing maintenance
Docker Guide - Containerization patterns

Architecture

Architecture Overview - System architecture
Security Guidelines - Security best practices
Deployment Guide - Deployment patterns

Reference

Pattern Catalog - All available patterns
Configuration Reference - All options
Troubleshooting - Common issues

🤝 Contributing

We welcome contributions to Forge Space Patterns! Please see our Contributing Guide for details.

Contribution Process

Fork the repository
Create a feature branch
Make your changes
Run all validation scripts
Submit a pull request

Requirements for Contributions

✅ Follow security guidelines (no secrets)
✅ Pass all automated tests
✅ Maintain 80% test coverage
✅ Follow conventional commit format
✅ Update documentation as needed

📄 License

MIT License - see LICENSE file for details.

🔗 Links

Repository: https://github.com/Forge-Space/core
Issues: https://github.com/Forge-Space/core/issues
Discussions: https://github.com/Forge-Space/core/discussions

📞 Support

For questions, issues, or suggestions:

📧 Create an issue on GitHub
💬 Start a discussion
📖 Check the documentation
🔍 Search existing issues

Forge Space Patterns - Consistency, Security, Quality, Automation, Docker 🚀

Name		Name	Last commit message	Last commit date
Latest commit History 155 Commits
.github		.github
.husky		.husky
.serena		.serena
docs		docs
patterns		patterns
scripts		scripts
src		src
test		test
.eslintrc.js		.eslintrc.js
.gitignore		.gitignore
.gitleaks.yml		.gitleaks.yml
.npmrc		.npmrc
.prettierignore		.prettierignore
.prettierrc.json		.prettierrc.json
.shellcheckrc		.shellcheckrc
.vimrc		.vimrc
CHANGELOG.md		CHANGELOG.md
CONTRIBUTING.md		CONTRIBUTING.md
README.md		README.md
eslint.config.js		eslint.config.js
fix-markdown.sh		fix-markdown.sh
jest.config.js		jest.config.js
jest.config.old.js		jest.config.old.js
jest.setup.js		jest.setup.js
package-lock.json		package-lock.json
package.json		package.json
tsconfig.json		tsconfig.json
validate-markdown.sh		validate-markdown.sh

Forge-Space/core

Folders and files

Latest commit

History

Repository files navigation

Forge-Space Core

Overview

Key Features

📋 Projects Using These Patterns

🌐 Ecosystem Integration

� GitHub Workflows Optimization

Organization-Level Reusable Workflows

Available Reusable Workflows

Core CI/CD Workflows

Usage Examples

Integration Benefits

Quick Integration

� Documentation

🚀 Quick Start

1. Install Forge Patterns

2. Integrate into Your Project

📁 Repository Structure

🔧 Available Patterns

🎛️ Centralized Feature Toggle System

Code Quality Patterns

ESLint Configuration

Prettier Configuration

Docker Patterns

NEW: High-Efficiency Docker Standards

Multi-stage Dockerfile

Docker Compose Development

Test Coverage Patterns

Jest Configuration (TypeScript)

Codecov Configuration

Git Workflow Patterns

Pre-commit Hook

Conventional Commits

Security Patterns

Environment Template

Security Validation

🐳 Docker Development

Quick Start with Docker

Production Deployment

Available Docker Patterns

📋 Rules Library (35+ Rules)

Core Development Rules

Code Quality & Standards

Security & Dependencies

CI/CD & Automation

Project Management

Frontend & UI

Backend & Architecture

🔄 Workflows Library (16+ Workflows)

Development Workflows

Tool & Framework Workflows

MCP & Documentation Workflows

Infrastructure Workflows

Specialized Skill Workflows

Planning Workflows

Safety Workflows

🎯 Skills Library (5+ Skills)

Development & Engineering Skills

Documentation & Research Skills

📋 Plans Library (5+ Plans)

Comprehensive Project Plans

🛡️ Security

Zero Secrets Policy

Security Validation

Security Features

📊 Quality Standards

Test Coverage Requirements

Code Quality Requirements

🔄 Automation

Bootstrap Scripts

Synchronization Scripts

Validation Scripts

🚀 CI/CD Integration

GitHub Actions Workflows

Quality Gates

📚 Documentation

Packages