specforge-mcp 0.1.0

package/dist/config/llm-guardrails-tooling.json

@@ -0,0 +1,122 @@
+{
+  "_description": "LLM guardrails, MLOps tools catalog, and EU AI Act high-risk domain keywords. SPEC-045.",
+  "_regulation_date": "2024-12-31",
+  "highRiskDomains": {
+    "healthcare": [
+      "healthcare",
+      "medical",
+      "clinical",
+      "hospital",
+      "patient",
+      "diagnosis",
+      "therapy",
+      "pharma",
+      "drug"
+    ],
+    "employment": ["hr", "hiring", "recruitment", "employee", "resume", "job application", "workforce", "payroll"],
+    "credit": ["credit", "loan", "mortgage", "insurance", "financial assessment", "creditworthiness", "scoring"],
+    "education": ["education", "student", "exam", "grading", "school", "university", "admission"],
+    "critical-infrastructure": [
+      "critical infrastructure",
+      "power grid",
+      "water treatment",
+      "transport",
+      "pipeline",
+      "nuclear",
+      "energy"
+    ],
+    "justice": ["law enforcement", "justice", "court", "police", "surveillance", "crime prediction", "border control"]
+  },
+  "unacceptableRiskKeywords": [
+    "biometric",
+    "social scoring",
+    "social credit",
+    "subliminal",
+    "emotion recognition",
+    "facial recognition",
+    "cognitive manipulation"
+  ],
+  "guardrailTools": {
+    "python": [
+      {
+        "name": "Guardrails AI",
+        "description": "Multi-proveedor, validación de output estructurado con validators",
+        "docsUrl": "https://www.guardrailsai.com",
+        "required": false
+      },
+      {
+        "name": "LLM Guard",
+        "description": "Detección de prompt injection, PII redaction, toxicity",
+        "docsUrl": "https://llm-guard.com",
+        "required": false
+      },
+      {
+        "name": "Rebuff",
+        "description": "Detección de prompt injection con modelo propio",
+        "docsUrl": "https://github.com/protectai/rebuff",
+        "required": false
+      }
+    ],
+    "node": [
+      {
+        "name": "LangChain guardrails integration",
+        "description": "Output parsers + structured output validation",
+        "docsUrl": "https://js.langchain.com/docs/modules/model_io/output_parsers/",
+        "required": false
+      }
+    ],
+    "enterprise": [
+      {
+        "name": "Nemo Guardrails",
+        "description": "NVIDIA, políticas declarativas en Colang para LLMs enterprise",
+        "docsUrl": "https://github.com/NVIDIA/NeMo-Guardrails",
+        "required": false
+      }
+    ]
+  },
+  "mlopsTools": {
+    "start": [
+      {
+        "name": "MLflow",
+        "description": "Open-source, self-hosted, experiment tracking + model registry",
+        "docsUrl": "https://mlflow.org"
+      }
+    ],
+    "scale": [
+      {
+        "name": "Weights & Biases",
+        "description": "Experiment tracking con UI avanzada",
+        "docsUrl": "https://wandb.ai"
+      },
+      {
+        "name": "BentoML",
+        "description": "Model serving escalable",
+        "docsUrl": "https://bentoml.com"
+      }
+    ],
+    "enterprise": [
+      {
+        "name": "Vertex AI Pipelines",
+        "description": "GCP managed ML pipelines",
+        "docsUrl": "https://cloud.google.com/vertex-ai"
+      },
+      {
+        "name": "Azure ML Pipelines",
+        "description": "Azure managed ML pipelines",
+        "docsUrl": "https://azure.microsoft.com/en-us/products/machine-learning"
+      }
+    ],
+    "llmops": [
+      {
+        "name": "Langfuse",
+        "description": "Tracing open-source, self-hosteable para LLMs",
+        "docsUrl": "https://langfuse.com"
+      },
+      {
+        "name": "LangSmith",
+        "description": "Hosted, integrado con LangChain, debugging y evaluation",
+        "docsUrl": "https://smith.langchain.com"
+      }
+    ]
+  }
+}

package/dist/config/local-first-tools.json

@@ -0,0 +1,122 @@
+{
+  "crdtLibraries": [
+    {
+      "name": "yjs",
+      "platforms": ["browser", "node", "react-native"],
+      "useCases": ["rich-text", "maps", "arrays"],
+      "stars": 20000,
+      "status": "stable",
+      "description": "Most adopted CRDT library — rich text, maps, arrays with y-websocket sync",
+      "docsUrl": "https://docs.yjs.dev"
+    },
+    {
+      "name": "automerge",
+      "platforms": ["browser", "node", "react-native"],
+      "useCases": ["json-document", "maps", "lists"],
+      "stars": 16000,
+      "status": "stable",
+      "description": "JSON-CRDT with Rust core (automerge-repo for sync) — structured document merging",
+      "docsUrl": "https://automerge.org"
+    },
+    {
+      "name": "loro-crdt",
+      "platforms": ["browser", "node"],
+      "useCases": ["rich-text", "maps", "trees"],
+      "status": "stable",
+      "description": "High-performance Rust-based CRDT with rich-text and tree support",
+      "docsUrl": "https://loro.dev"
+    },
+    {
+      "name": "diamond-types",
+      "platforms": ["browser", "node", "rust"],
+      "useCases": ["text", "sequences"],
+      "status": "stable",
+      "description": "Ultra-fast text CRDT by Joseph Gentle (Rust core, WASM bindings)",
+      "docsUrl": "https://github.com/josephg/diamond-types"
+    }
+  ],
+  "storageEngines": [
+    {
+      "name": "wa-sqlite",
+      "platforms": ["browser"],
+      "runtime": "WASM",
+      "status": "stable",
+      "description": "Production-grade SQLite WASM for browsers — persistent via OPFS",
+      "docsUrl": "https://github.com/rhashimoto/wa-sqlite"
+    },
+    {
+      "name": "better-sqlite3",
+      "platforms": ["node", "electron"],
+      "runtime": "native",
+      "status": "stable",
+      "description": "Synchronous SQLite for Node.js/Electron — fastest JS SQLite binding",
+      "docsUrl": "https://github.com/WiseLibs/better-sqlite3"
+    },
+    {
+      "name": "expo-sqlite",
+      "platforms": ["react-native"],
+      "runtime": "native",
+      "status": "stable",
+      "description": "SQLite for Expo/React Native — async API, WAL mode support",
+      "docsUrl": "https://docs.expo.dev/versions/latest/sdk/sqlite"
+    },
+    {
+      "name": "sqflite",
+      "platforms": ["flutter"],
+      "runtime": "native",
+      "status": "stable",
+      "description": "SQLite plugin for Flutter — iOS/Android native SQLite",
+      "docsUrl": "https://pub.dev/packages/sqflite"
+    },
+    {
+      "name": "leveldb",
+      "platforms": ["node"],
+      "runtime": "native",
+      "status": "stable",
+      "description": "Embedded key-value store — great for event sourcing and CRDT storage",
+      "docsUrl": "https://github.com/google/leveldb"
+    }
+  ],
+  "syncBackends": [
+    {
+      "name": "y-websocket",
+      "platforms": ["node", "browser"],
+      "hosted": false,
+      "status": "stable",
+      "description": "Simple WebSocket server for Yjs — relay mode, no state on server",
+      "docsUrl": "https://github.com/yjs/y-websocket"
+    },
+    {
+      "name": "hocuspocus",
+      "platforms": ["node", "browser"],
+      "hosted": false,
+      "status": "stable",
+      "description": "Full-featured Yjs server: auth, database persistence, webhooks",
+      "docsUrl": "https://tiptap.dev/hocuspocus"
+    },
+    {
+      "name": "electric-sql",
+      "platforms": ["browser", "react-native", "node"],
+      "hosted": false,
+      "status": "stable",
+      "description": "PostgreSQL → SQLite sync, open-source, partial replication",
+      "docsUrl": "https://electric-sql.com"
+    },
+    {
+      "name": "powersync",
+      "platforms": ["react-native", "flutter", "browser"],
+      "hosted": true,
+      "status": "stable",
+      "description": "PostgreSQL/MySQL/MongoDB → SQLite sync for mobile apps — offline-first",
+      "docsUrl": "https://www.powersync.com"
+    },
+    {
+      "name": "liveblocks",
+      "platforms": ["browser", "react-native"],
+      "hosted": true,
+      "status": "stable",
+      "description": "CRDT-as-a-service — Yjs-compatible, rooms, presence, history",
+      "docsUrl": "https://liveblocks.io"
+    }
+  ]
+}

package/dist/config/mcp-catalog.json

@@ -0,0 +1,104 @@
+{
+  "_description": "Catálogo de MCPs conocidos. Auto-extensible via web. El MCP consulta este catálogo para recomendar MCPs relevantes al proyecto.",
+  "mcps": {
+    "supabase": {
+      "name": "Supabase MCP",
+      "source": "npm:@supabase/mcp-server-supabase",
+      "docsUrl": "https://supabase.com/docs/guides/getting-started/mcp",
+      "type": "database",
+      "services": ["supabase"],
+      "capabilities": ["execute_sql", "apply_migration", "list_tables", "list_extensions", "get_logs"],
+      "installCommand": "npx @supabase/mcp-server-supabase"
+    },
+    "railway": {
+      "name": "Railway MCP",
+      "source": "npm:@railway/mcp-server",
+      "docsUrl": "https://docs.railway.com/reference/mcp",
+      "type": "deployment",
+      "services": ["railway"],
+      "capabilities": ["deploy", "get_logs", "list_services", "set_variables", "generate_domain"],
+      "installCommand": "npx @railway/mcp-server"
+    },
+    "figma": {
+      "name": "Figma MCP",
+      "source": "npm:figma-developer-mcp",
+      "docsUrl": "https://github.com/nicholasgriffintn/figma-mcp-server",
+      "type": "design",
+      "services": ["figma"],
+      "capabilities": ["get_design_context", "get_screenshot", "get_metadata", "get_variable_defs"],
+      "installCommand": "npx figma-developer-mcp"
+    },
+    "stripe": {
+      "name": "Stripe MCP",
+      "source": "npm:@stripe/mcp",
+      "docsUrl": "https://docs.stripe.com/building-with-llms/mcp",
+      "type": "payments",
+      "services": ["stripe"],
+      "capabilities": ["create_payment", "list_customers", "manage_subscriptions"],
+      "installCommand": "npx @stripe/mcp"
+    },
+    "github": {
+      "name": "GitHub MCP",
+      "source": "npm:@modelcontextprotocol/server-github",
+      "docsUrl": "https://github.com/modelcontextprotocol/servers",
+      "type": "code-management",
+      "services": ["github"],
+      "capabilities": ["create_issue", "create_pr", "search_repos", "get_file_contents"],
+      "installCommand": "npx @modelcontextprotocol/server-github"
+    },
+    "slack": {
+      "name": "Slack MCP",
+      "source": "npm:@modelcontextprotocol/server-slack",
+      "docsUrl": "https://github.com/modelcontextprotocol/servers",
+      "type": "communication",
+      "services": ["slack"],
+      "capabilities": ["send_message", "read_channel", "list_channels"],
+      "installCommand": "npx @modelcontextprotocol/server-slack"
+    },
+    "sentry": {
+      "name": "Sentry MCP",
+      "source": "npm:@sentry/mcp-server",
+      "docsUrl": "https://docs.sentry.io/product/integrations/mcp/",
+      "type": "monitoring",
+      "services": ["sentry"],
+      "capabilities": ["list_issues", "get_issue_details", "search_errors"],
+      "installCommand": "npx @sentry/mcp-server"
+    },
+    "postgres": {
+      "name": "PostgreSQL MCP",
+      "source": "npm:@modelcontextprotocol/server-postgres",
+      "docsUrl": "https://github.com/modelcontextprotocol/servers",
+      "type": "database",
+      "services": ["postgresql"],
+      "capabilities": ["query", "list_tables", "describe_table"],
+      "installCommand": "npx @modelcontextprotocol/server-postgres"
+    },
+    "sqlite": {
+      "name": "SQLite MCP",
+      "source": "npm:@modelcontextprotocol/server-sqlite",
+      "docsUrl": "https://github.com/modelcontextprotocol/servers",
+      "type": "database",
+      "services": ["sqlite"],
+      "capabilities": ["query", "list_tables", "describe_table"],
+      "installCommand": "npx @modelcontextprotocol/server-sqlite"
+    },
+    "puppeteer": {
+      "name": "Puppeteer MCP",
+      "source": "npm:@modelcontextprotocol/server-puppeteer",
+      "docsUrl": "https://github.com/modelcontextprotocol/servers",
+      "type": "testing",
+      "services": ["browser-automation"],
+      "capabilities": ["navigate", "screenshot", "click", "evaluate"],
+      "installCommand": "npx @modelcontextprotocol/server-puppeteer"
+    },
+    "linear": {
+      "name": "Linear MCP",
+      "source": "npm:mcp-linear",
+      "docsUrl": "https://github.com/jerhadf/linear-mcp-server",
+      "type": "project-management",
+      "services": ["linear"],
+      "capabilities": ["create_issue", "list_issues", "update_issue"],
+      "installCommand": "npx mcp-linear"
+    }
+  }
+}

package/dist/config/middleware-patterns.json

@@ -0,0 +1,126 @@
+{
+  "frameworks": [
+    {
+      "name": "express",
+      "language": "nodejs",
+      "detectionPatterns": ["express"],
+      "middlewareRegistration": "app.use(fn) / router.use(fn)",
+      "lifecycleHooks": ["before-handler", "after-handler", "error-handler"],
+      "earlyReturnNote": "Middleware can short-circuit by calling next(err) or not calling next()",
+      "typicalChainOrder": ["cors", "body-parser", "auth", "rate-limit", "validation", "handler", "error-handler"]
+    },
+    {
+      "name": "fastify",
+      "language": "nodejs",
+      "detectionPatterns": ["fastify"],
+      "middlewareRegistration": "fastify.addHook(hookName, fn)",
+      "lifecycleHooks": [
+        "onRequest",
+        "preParsing",
+        "preValidation",
+        "preHandler",
+        "preSerialization",
+        "onSend",
+        "onResponse",
+        "onError"
+      ],
+      "note": "Fastify has granular hooks per phase — more control than Express"
+    },
+    {
+      "name": "hono",
+      "language": "nodejs",
+      "detectionPatterns": ["hono"],
+      "middlewareRegistration": "app.use('*', fn) / app.use('/path', fn)",
+      "lifecycleHooks": ["before-handler", "after-handler"],
+      "note": "Edge-first framework: middleware identical to Express but optimized for Workers/Deno/Bun"
+    },
+    {
+      "name": "koa",
+      "language": "nodejs",
+      "detectionPatterns": ["koa"],
+      "middlewareRegistration": "app.use(async (ctx, next) => {...})",
+      "lifecycleHooks": ["before-handler", "after-handler"],
+      "note": "Onion middleware model: each middleware can act before and after next()"
+    },
+    {
+      "name": "nestjs",
+      "language": "nodejs",
+      "detectionPatterns": ["@nestjs/core", "@nestjs/common"],
+      "middlewareRegistration": "implements NestMiddleware / @Injectable()",
+      "lifecycleHooks": ["Guards", "Interceptors", "Pipes", "Filters"],
+      "note": "NestJS uses Guards (auth), Interceptors (logging), Pipes (validation), Filters (errors)"
+    },
+    {
+      "name": "aspnet-core",
+      "language": "dotnet",
+      "detectionPatterns": ["Microsoft.AspNetCore"],
+      "middlewareRegistration": "app.Use(async (ctx, next) => {...}) / app.UseMiddleware<T>()",
+      "lifecycleHooks": ["before-handler", "after-handler"],
+      "typicalChainOrder": [
+        "exception-handler",
+        "https-redirection",
+        "static-files",
+        "routing",
+        "cors",
+        "auth",
+        "rate-limiting",
+        "endpoint"
+      ]
+    },
+    {
+      "name": "spring-boot",
+      "language": "java",
+      "detectionPatterns": ["spring-boot", "spring-web", "spring-webmvc"],
+      "middlewareRegistration": "implements Filter / implements HandlerInterceptor",
+      "lifecycleHooks": ["preHandle", "postHandle", "afterCompletion"],
+      "note": "Spring Security integrates as FilterChain before HandlerInterceptors"
+    },
+    {
+      "name": "django",
+      "language": "python",
+      "detectionPatterns": ["django"],
+      "middlewareRegistration": "MIDDLEWARE = [...] in settings.py",
+      "lifecycleHooks": ["process_request", "process_view", "process_exception", "process_response"],
+      "note": "Order in MIDDLEWARE matters: top-to-bottom on request, bottom-to-top on response"
+    },
+    {
+      "name": "fastapi",
+      "language": "python",
+      "detectionPatterns": ["fastapi"],
+      "middlewareRegistration": "app.add_middleware(cls) / @app.middleware('http')",
+      "lifecycleHooks": ["before-handler", "after-handler"],
+      "dependencyInjection": "Depends() for auth, validation, rate-limiting as endpoint dependencies"
+    },
+    {
+      "name": "flask",
+      "language": "python",
+      "detectionPatterns": ["flask"],
+      "middlewareRegistration": "@app.before_request / @app.after_request / WSGI middleware",
+      "lifecycleHooks": ["before_request", "after_request", "teardown_request", "errorhandler"]
+    },
+    {
+      "name": "gin",
+      "language": "go",
+      "detectionPatterns": ["gin-gonic/gin"],
+      "middlewareRegistration": "r.Use(fn) / r.Group('/').Use(fn)",
+      "lifecycleHooks": ["before-handler", "after-handler"],
+      "note": "Middleware in Go is simply a function that receives *gin.Context and calls c.Next()"
+    },
+    {
+      "name": "chi",
+      "language": "go",
+      "detectionPatterns": ["go-chi/chi"],
+      "middlewareRegistration": "r.Use(fn) where fn is func(http.Handler) http.Handler",
+      "lifecycleHooks": ["before-handler", "after-handler"],
+      "note": "Standard net/http pattern: middleware wraps http.Handler"
+    },
+    {
+      "name": "rack",
+      "language": "ruby",
+      "detectionPatterns": ["rack"],
+      "middlewareRegistration": "use MiddlewareClass in config.ru",
+      "lifecycleHooks": ["call(env)"],
+      "note": "All Rack middleware implements call(env) and returns [status, headers, body]"
+    }
+  ]
+}