@dewtech/dare-cli 3.0.0 → 3.1.0

package/templates/stacks/go-stdlib/openapi.json.tpl

@@ -0,0 +1,46 @@
+{
+  "openapi": "3.0.3",
+  "info": {
+    "title": "{{projectName}}",
+    "version": "0.1.0",
+    "description": "DARE-shaped Go API on net/http stdlib."
+  },
+  "paths": {
+    "/auth/login": {
+      "post": {
+        "summary": "Exchange email+password for JWT",
+        "responses": { "200": { "description": "JWT issued" }, "401": { "description": "Invalid credentials" } }
+      }
+    },
+    "/auth/me": {
+      "get": {
+        "summary": "Current user",
+        "security": [{ "bearer": [] }],
+        "responses": { "200": { "description": "User" }, "401": { "description": "Unauthorized" } }
+      }
+    },
+    "/users": {
+      "get": {
+        "summary": "List users",
+        "security": [{ "bearer": [] }],
+        "responses": { "200": { "description": "Page of users" } }
+      },
+      "post": {
+        "summary": "Create user (admin)",
+        "security": [{ "bearer": [] }],
+        "responses": { "201": { "description": "Created" }, "403": { "description": "Forbidden" } }
+      }
+    },
+    "/ws": {
+      "get": {
+        "summary": "WebSocket echo",
+        "responses": { "101": { "description": "Switching Protocols" } }
+      }
+    }
+  },
+  "components": {
+    "securitySchemes": {
+      "bearer": { "type": "http", "scheme": "bearer", "bearerFormat": "JWT" }
+    }
+  }
+}

package/templates/stacks/go-stdlib/sqlc.yaml

@@ -0,0 +1,14 @@
+version: "2"
+sql:
+  - engine: "postgresql"
+    queries: "db/queries"
+    schema: "db/migrations"
+    gen:
+      go:
+        package: "sqlcgen"
+        out: "internal/repository/sqlcgen"
+        sql_package: "pgx/v5"
+        emit_json_tags: true
+        emit_prepared_queries: false
+        emit_interface: false
+        emit_exact_table_names: false

package/templates/stacks/go-stdlib/tests/smoke_test.go.tpl

@@ -0,0 +1,45 @@
+// Smoke tests — exercise pure helpers without a DB.
+package tests
+
+import (
+	"net/http"
+	"net/http/httptest"
+	"os"
+	"testing"
+
+	"github.com/stretchr/testify/require"
+
+	"{{moduleName}}/internal/config"
+	"{{moduleName}}/internal/middleware"
+)
+
+func TestConfigFromEnvDefaultsAreSane(t *testing.T) {
+	t.Setenv("DATABASE_URL", "postgres://u:p@localhost:5432/x?sslmode=disable")
+	os.Unsetenv("APP_PORT")
+	cfg, err := config.FromEnv()
+	require.NoError(t, err)
+	require.Equal(t, 8000, cfg.AppPort)
+	require.GreaterOrEqual(t, cfg.RateLimitBurst, cfg.RateLimitPerSec)
+}
+
+func TestRateLimitBlocksAfterBurst(t *testing.T) {
+	mw := middleware.RateLimit(1, 2)
+	h := mw(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
+		w.WriteHeader(http.StatusOK)
+	}))
+
+	// First 2 (burst) should pass.
+	for i := 0; i < 2; i++ {
+		rec := httptest.NewRecorder()
+		req := httptest.NewRequest(http.MethodGet, "/", nil)
+		req.RemoteAddr = "10.0.0.1:1234"
+		h.ServeHTTP(rec, req)
+		require.Equal(t, http.StatusOK, rec.Code)
+	}
+	// 3rd should be 429.
+	rec := httptest.NewRecorder()
+	req := httptest.NewRequest(http.MethodGet, "/", nil)
+	req.RemoteAddr = "10.0.0.1:1234"
+	h.ServeHTTP(rec, req)
+	require.Equal(t, http.StatusTooManyRequests, rec.Code)
+}

package/templates/stacks/mcp-go/.dare/skills.yml

@@ -0,0 +1,8 @@
+version: 1
+skills:
+  - id: skill-mcp-server
+    source: skill-mcp-server
+    description: MCP server patterns (tools, prompts, transports)
+  - id: dare-ax
+    source: dare-ax
+    description: Agent eXperience invariants (llms.txt, OpenAPI, --json --list-tools, rate limit)

package/templates/stacks/mcp-go/.env.example

@@ -0,0 +1,14 @@
+# MCP transport — overrides --transport flag if set
+# Valid: stdio | sse | http
+MCP_TRANSPORT=stdio
+
+# HTTP/SSE transport bind (ignored on stdio)
+MCP_HOST=0.0.0.0
+MCP_PORT=3001
+
+# Logging
+LOG_LEVEL=info
+
+# LLM provider (optional)
+LLM_PROVIDER=dummy
+# OPENAI_API_KEY=

package/templates/stacks/mcp-go/.github/workflows/dare-ci.yml

@@ -0,0 +1,42 @@
+name: DARE CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  audit:
+    name: govulncheck
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-go@v5
+        with:
+          go-version: "1.22"
+      - run: go install golang.org/x/vuln/cmd/govulncheck@latest
+      - run: govulncheck ./...
+
+  lint:
+    name: golangci-lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-go@v5
+        with:
+          go-version: "1.22"
+      - uses: golangci/golangci-lint-action@v6
+        with:
+          version: v1.61
+
+  test:
+    name: go test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-go@v5
+        with:
+          go-version: "1.22"
+      - run: go mod download
+      - run: go test ./...

package/templates/stacks/mcp-go/README.md.tpl

@@ -0,0 +1,50 @@
+# {{projectName}}
+
+DARE-shaped MCP server in Go using `mark3labs/mcp-go`.
+Default transport: **{{defaultTransport}}**.
+
+> ⚠️ **Beta.** `mark3labs/mcp-go` is the community Go SDK. Migrate to an
+> official Anthropic Go SDK if/when one ships.
+
+## Setup
+
+```bash
+cp .env.example .env
+go mod tidy
+go run ./cmd/server          # uses {{defaultTransport}} transport by default
+```
+
+## Test with MCP Inspector
+
+```bash
+npx @modelcontextprotocol/inspector go run ./cmd/server
+```
+
+## Tools
+
+- `echo` — returns its input. Canonical smoke test.
+
+## Prompts
+
+- `summarize` — placeholder prompt template taking a `text` argument.
+
+## Transports
+
+Pick at runtime via `--transport stdio|sse|http` or `MCP_TRANSPORT`:
+
+| Transport | When to use |
+|---|---|
+| `stdio` (default) | Local CLI agents |
+| `sse`             | Web clients via SSE |
+| `http`            | Streamable HTTP |
+
+## Commands
+
+- `go run ./cmd/server` — start server
+- `go test ./...` — tests
+- `golangci-lint run` — lint
+- `govulncheck ./...` — vuln scan
+
+## DARE Method
+
+See `.dare/skills.yml` and `llms.txt`.

package/templates/stacks/mcp-go/cmd/server/main.go.tpl

@@ -0,0 +1,62 @@
+// {{projectName}} — MCP server entrypoint.
+package main
+
+import (
+	"encoding/json"
+	"flag"
+	"fmt"
+	"os"
+
+	"github.com/joho/godotenv"
+
+	"{{moduleName}}/internal/server"
+	"{{moduleName}}/internal/transports"
+)
+
+func main() {
+	_ = godotenv.Load()
+
+	defaultTransport := os.Getenv("MCP_TRANSPORT")
+	if defaultTransport == "" {
+		defaultTransport = "{{defaultTransport}}"
+	}
+
+	transport := flag.String("transport", defaultTransport, "stdio | sse | http")
+	jsonOut := flag.Bool("json", false, "emit JSON output (use with --list-tools)")
+	listTools := flag.Bool("list-tools", false, "list registered tools as JSON and exit")
+	flag.Parse()
+
+	// --json --list-tools short-circuits before starting any transport (M-03).
+	if *listTools && *jsonOut {
+		out, _ := json.MarshalIndent(server.InventoryJSON(), "", "  ")
+		fmt.Println(string(out))
+		return
+	}
+
+	host := envOr("MCP_HOST", "0.0.0.0")
+	port := envOr("MCP_PORT", "3001")
+
+	var err error
+	switch *transport {
+	case "stdio":
+		err = transports.RunStdio()
+	case "sse":
+		err = transports.RunSSE(host, port)
+	case "http":
+		err = transports.RunHTTP(host, port)
+	default:
+		fmt.Fprintf(os.Stderr, "invalid transport %q (valid: stdio, sse, http)\n", *transport)
+		os.Exit(1)
+	}
+	if err != nil {
+		fmt.Fprintf(os.Stderr, "[mcp] fatal: %v\n", err)
+		os.Exit(1)
+	}
+}
+
+func envOr(key, def string) string {
+	if v := os.Getenv(key); v != "" {
+		return v
+	}
+	return def
+}

package/templates/stacks/mcp-go/gitignore

@@ -0,0 +1,6 @@
+/bin/
+/vendor/
+.env
+.env.local
+*.log
+.DS_Store

package/templates/stacks/mcp-go/go.mod.tpl

@@ -0,0 +1,9 @@
+module {{moduleName}}
+
+go 1.23
+
+require (
+	github.com/mark3labs/mcp-go v0.54.1
+	github.com/joho/godotenv v1.5.1
+	github.com/stretchr/testify v1.9.0
+)

package/templates/stacks/mcp-go/internal/prompts/summarize.go

@@ -0,0 +1,9 @@
+// Package prompts holds pure prompt builders.
+package prompts
+
+import "fmt"
+
+// Summarize returns the user-message body for a summarize prompt.
+func Summarize(text string) string {
+	return fmt.Sprintf("Summarize the following text in 1-2 sentences.\n\n%s", text)
+}

package/templates/stacks/mcp-go/internal/server/server.go.tpl

@@ -0,0 +1,80 @@
+// Package server builds the mcp-go server with tools and prompts.
+//
+// NOTE: mark3labs/mcp-go is pre-1.0. The registration calls below match the
+// v0.8.x surface; adjust here if an upstream bump changes the API. Business
+// logic lives in internal/tools and internal/prompts (pure, unit-tested) so a
+// breaking SDK change only touches this file.
+package server
+
+import (
+	"context"
+
+	"github.com/mark3labs/mcp-go/mcp"
+	"github.com/mark3labs/mcp-go/server"
+
+	"{{moduleName}}/internal/prompts"
+	"{{moduleName}}/internal/tools"
+)
+
+// New builds and returns a configured MCP server.
+func New() *server.MCPServer {
+	s := server.NewMCPServer(
+		"{{projectName}}",
+		"0.1.0",
+		server.WithToolCapabilities(true),
+		server.WithPromptCapabilities(true),
+	)
+
+	echoTool := mcp.NewTool("echo",
+		mcp.WithDescription("Returns its input. Canonical smoke test for an MCP server."),
+		mcp.WithString("text",
+			mcp.Required(),
+			mcp.Description("Text to echo back"),
+		),
+	)
+	s.AddTool(echoTool, func(_ context.Context, req mcp.CallToolRequest) (*mcp.CallToolResult, error) {
+		// v0.54: tool arguments are accessed via GetArguments() (returns map[string]any).
+		text, _ := req.GetArguments()["text"].(string)
+		out, err := tools.Echo(text)
+		if err != nil {
+			return mcp.NewToolResultError(err.Error()), nil
+		}
+		return mcp.NewToolResultText(out), nil
+	})
+
+	summarizePrompt := mcp.NewPrompt("summarize",
+		mcp.WithPromptDescription("Summarize the given text in 1-2 sentences."),
+		mcp.WithArgument("text", mcp.ArgumentDescription("Text to summarize"), mcp.RequiredArgument()),
+	)
+	s.AddPrompt(summarizePrompt, func(_ context.Context, req mcp.GetPromptRequest) (*mcp.GetPromptResult, error) {
+		text := req.Params.Arguments["text"]
+		body := prompts.Summarize(text)
+		return mcp.NewGetPromptResult(
+			"summarize",
+			[]mcp.PromptMessage{
+				mcp.NewPromptMessage(mcp.RoleUser, mcp.NewTextContent(body)),
+			},
+		), nil
+	})
+
+	return s
+}
+
+// InventoryJSON returns a machine-readable tool inventory for --list-tools (M-03).
+func InventoryJSON() map[string]any {
+	return map[string]any{
+		"tools": []map[string]any{
+			{
+				"name":        "echo",
+				"description": "Returns its input. Canonical smoke test for an MCP server.",
+				"inputSchema": map[string]any{
+					"type":     "object",
+					"required": []string{"text"},
+					"properties": map[string]any{
+						"text": map[string]any{"type": "string", "minLength": 1},
+					},
+				},
+			},
+		},
+	}
+}

package/templates/stacks/mcp-go/internal/tools/echo.go

@@ -0,0 +1,15 @@
+// Package tools holds pure tool implementations, testable without the SDK.
+package tools
+
+import "errors"
+
+// ErrEmpty is returned when echo is given an empty string.
+var ErrEmpty = errors.New("text must be a non-empty string")
+
+// Echo returns its input verbatim.
+func Echo(text string) (string, error) {
+	if text == "" {
+		return "", ErrEmpty
+	}
+	return text, nil
+}

package/templates/stacks/mcp-go/internal/transports/http.go.tpl

@@ -0,0 +1,21 @@
+package transports
+
+import (
+	"fmt"
+
+	mcpserver "github.com/mark3labs/mcp-go/server"
+
+	srv "{{moduleName}}/internal/server"
+)
+
+// RunHTTP serves the MCP server over Streamable HTTP.
+//
+// NOTE: the streamable-http constructor name may vary across mark3labs/mcp-go
+// releases. If `go build` fails after an SDK bump, check the server package
+// for the current streamable HTTP server type.
+func RunHTTP(host, port string) error {
+	s := srv.New()
+	addr := fmt.Sprintf("%s:%s", host, port)
+	httpServer := mcpserver.NewStreamableHTTPServer(s)
+	return httpServer.Start(addr)
+}

package/templates/stacks/mcp-go/internal/transports/sse.go.tpl

@@ -0,0 +1,17 @@
+package transports
+
+import (
+	"fmt"
+
+	mcpserver "github.com/mark3labs/mcp-go/server"
+
+	srv "{{moduleName}}/internal/server"
+)
+
+// RunSSE serves the MCP server over SSE-over-HTTP.
+func RunSSE(host, port string) error {
+	s := srv.New()
+	addr := fmt.Sprintf("%s:%s", host, port)
+	sse := mcpserver.NewSSEServer(s)
+	return sse.Start(addr)
+}

package/templates/stacks/mcp-go/internal/transports/stdio.go.tpl

@@ -0,0 +1,14 @@
+// Package transports — one runner per MCP transport.
+package transports
+
+import (
+	mcpserver "github.com/mark3labs/mcp-go/server"
+
+	srv "{{moduleName}}/internal/server"
+)
+
+// RunStdio serves over stdin/stdout — the default for local agents.
+func RunStdio() error {
+	s := srv.New()
+	return mcpserver.ServeStdio(s)
+}

package/templates/stacks/mcp-go/llms.txt.tpl

@@ -0,0 +1,60 @@
+# {{projectName}}
+
+DARE-shaped MCP server (Go, mark3labs/mcp-go). Default transport: **{{defaultTransport}}**. BETA.
+
+## Setup
+
+```bash
+cp .env.example .env
+go mod tidy
+go run ./cmd/server
+```
+
+## Commands
+
+- `go run ./cmd/server` — start server (transport via --transport or MCP_TRANSPORT env)
+- `go test ./...` — tests
+- `golangci-lint run` — lint
+- `govulncheck ./...` — vuln scan
+- `npx @modelcontextprotocol/inspector go run ./cmd/server` — MCP Inspector
+
+## Tools (registered in internal/server/server.go)
+
+| Name | Input | Output | Description |
+|---|---|---|---|
+| `echo` | `text: string` | `string` | Returns input verbatim. Smoke test. |
+
+## Prompts
+
+| Name | Args | Description |
+|---|---|---|
+| `summarize` | `text` | Summarize the input text. Placeholder. |
+
+## Transports
+
+Choose with `--transport stdio|sse|http` or `MCP_TRANSPORT`:
+
+- `stdio` (default) — local agents. No port.
+- `sse` — SSE-over-HTTP on MCP_PORT (default 3001).
+- `http` — Streamable HTTP on MCP_PORT (default 3001).
+
+## Architecture
+
+- `cmd/server/main.go` — entrypoint, flag parsing, transport dispatch.
+- `internal/server/server.go` — builds the mcp-go server with tools + prompts.
+- `internal/tools/`, `internal/prompts/` — pure functions, unit-tested.
+- `internal/transports/` — one runner per transport.
+
+## CLI inventory
+
+`go run ./cmd/server --json --list-tools` prints the tool registry as JSON (M-03).
+
+## Note on beta status
+
+`mark3labs/mcp-go` is community-led. If Anthropic ships an official Go SDK,
+migrate `internal/server` + `internal/transports` to it; the pure
+tools/prompts functions stay unchanged.
+
+## DARE skills
+
+See `.dare/skills.yml`.

package/templates/stacks/mcp-go/openapi.json.tpl

@@ -0,0 +1,31 @@
+{
+  "openapi": "3.1.0",
+  "info": {
+    "title": "{{projectName}}",
+    "version": "0.1.0",
+    "description": "MCP server JSON-RPC surface. MCP is not REST; this describes the HTTP/SSE transport envelopes only."
+  },
+  "paths": {
+    "/sse": {
+      "get": {
+        "summary": "SSE event stream",
+        "responses": { "200": { "description": "text/event-stream with MCP JSON-RPC frames" } }
+      }
+    },
+    "/messages": {
+      "post": {
+        "summary": "MCP JSON-RPC message (HTTP / SSE post-back)",
+        "requestBody": {
+          "required": true,
+          "content": { "application/json": { "schema": { "type": "object" } } }
+        },
+        "responses": {
+          "200": {
+            "description": "JSON-RPC 2.0 response",
+            "content": { "application/json": { "schema": { "type": "object" } } }
+          }
+        }
+      }
+    }
+  }
+}

package/templates/stacks/mcp-go/tests/echo_test.go.tpl

@@ -0,0 +1,37 @@
+// Smoke tests — pure tools/prompts, no SDK or transport needed.
+package tests
+
+import (
+	"testing"
+
+	"github.com/stretchr/testify/require"
+
+	"{{moduleName}}/internal/prompts"
+	"{{moduleName}}/internal/server"
+	"{{moduleName}}/internal/tools"
+)
+
+func TestEchoReturnsInput(t *testing.T) {
+	out, err := tools.Echo("hello")
+	require.NoError(t, err)
+	require.Equal(t, "hello", out)
+}
+
+func TestEchoRejectsEmpty(t *testing.T) {
+	_, err := tools.Echo("")
+	require.ErrorIs(t, err, tools.ErrEmpty)
+}
+
+func TestSummarizeIncludesInput(t *testing.T) {
+	out := prompts.Summarize("long text here")
+	require.Contains(t, out, "long text here")
+	require.Contains(t, out, "Summarize")
+}
+
+func TestInventoryListsEcho(t *testing.T) {
+	inv := server.InventoryJSON()
+	toolsList, ok := inv["tools"].([]map[string]any)
+	require.True(t, ok)
+	require.NotEmpty(t, toolsList)
+	require.Equal(t, "echo", toolsList[0]["name"])
+}

package/templates/stacks/mcp-node-ts/.dare/skills.yml

@@ -0,0 +1,8 @@
+version: 1
+skills:
+  - id: skill-mcp-server
+    source: skill-mcp-server
+    description: MCP server patterns (tools, prompts, transports)
+  - id: dare-ax
+    source: dare-ax
+    description: Agent eXperience invariants (llms.txt, OpenAPI, --json --list-tools, rate limit)

package/templates/stacks/mcp-node-ts/.env.example

@@ -0,0 +1,16 @@
+# MCP transport — overrides --transport flag if set
+# Valid: stdio | sse | http
+MCP_TRANSPORT=stdio
+
+# HTTP/SSE transport port (ignored on stdio)
+MCP_PORT=3001
+
+# Rate limit (HTTP/SSE only — stdio is single-client local)
+RATE_LIMIT_RPM=120
+
+# Logging
+LOG_LEVEL=info
+
+# LLM provider (optional — for tools that call out)
+LLM_PROVIDER=dummy
+# OPENAI_API_KEY=

package/templates/stacks/mcp-node-ts/.github/workflows/dare-ci.yml

@@ -0,0 +1,54 @@
+name: DARE CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  audit:
+    name: Audit dependencies
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: pnpm/action-setup@v3
+        with:
+          version: 9
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: pnpm
+      - run: pnpm install --frozen-lockfile
+      - run: pnpm audit --audit-level=high
+
+  lint:
+    name: Lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: pnpm/action-setup@v3
+        with:
+          version: 9
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: pnpm
+      - run: pnpm install --frozen-lockfile
+      - run: pnpm lint
+
+  test:
+    name: Test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: pnpm/action-setup@v3
+        with:
+          version: 9
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: pnpm
+      - run: pnpm install --frozen-lockfile
+      - run: pnpm build
+      - run: pnpm test