forge

package module
v0.10.0 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Sep 8, 2026 License: MIT Imports: 8 Imported by: 0

README

GoForge

GoForge is an opinionated, batteries-included Go application framework for developers who value Laravel, Symfony, Rails, or Spring ergonomics but want the result to remain unmistakably Go.

Its contract is simple:

  • Generate source, do not conceal it. Routes, controllers, requests, configuration, and migrations are ordinary files in the application.
  • Build on the standard library. The HTTP kernel is net/http; persistence is database/sql; dependencies are constructor parameters.
  • Fail at startup. Typed configuration reports all invalid values together.
  • Keep every exit visible. Use a standard http.Handler, *sql.DB, custom middleware, or a hand-built server whenever the defaults stop fitting.
  • Prefer boring production behavior. Request IDs, structured logs, panic recovery, secure headers, body limits, graceful shutdown, and reversible SQL migrations are first-class.

Status

GoForge v0.10.0 is PostgreSQL-first and tracked against its written milestone scorecard. It includes explicit database wiring, parallel JSON and server-rendered authentication, database-backed sessions, CSRF-protected HTML forms, production middleware, embedded migrations, owner-scoped JSON and HTML CRUD generation, a reflection-free typed ORM, a static Go-model parser, deterministic mapping generation, explicit eager-loaded relationships, and ORM-backed fresh scaffolds/resources. Its positioned .forge.html compiler adds static components, strict props and slots, control directives, page-local stacks, explicit form helpers, application-owned functions, and source-mapped diagnostics while emitting ordinary html/template. The API can still change before v1. Durable typed jobs add transactional dispatch, delays, active deduplication, bounded PostgreSQL workers, lease fencing and crash recovery, finite retries, failed-job operations, and structured payload-free lifecycle events without hidden worker startup or handler discovery. Its explicit request boundary adds typed composable validation, exact JSON/form failure semantics, bounded HTTP timeouts and headers, correlated completion logs, validated CORS and security policy, trusted-proxy parsing, and PostgreSQL authentication throttles shared across processes and restarts. Account integrity now includes JSON and browser password change, transparent hash upgrades, immediate cross-process session revocation, and independently configured idle and absolute session lifetimes. Credential writes are ordinary application-owned compare-and-swap SQL, and stale concurrent requests cannot restore an old password or overwrite a winning rotated browser session. The v0.9 developer-loop milestone is accepted. It adds opinionated, non-mutating forge test and forge build gates while retaining the underlying Go commands as complete escape hatches. The v0.10 development server closes the compiled-view edit loop: forge serve watches application inputs, builds and checks candidate liveness off-port, and promotes only a live replacement while preserving the last-good server through invalid edits.

Install and try it

Install the released CLI and generate an application:

go install github.com/ShanilKoshitha/goforge/cmd/forge@v0.10.0
forge new myapp --module example.com/myapp
cd myapp
docker compose up -d
forge make:resource Issue
forge migrate
# For plain-HTTP development, first set APP_ENV=local in .env.
forge serve

For framework development from this checkout:

go install ./cmd/forge
forge new myapp --module example.com/myapp --replace /path/to/goforge
cd myapp
docker compose up -d
forge make:resource Issue
forge migrate
forge test
forge build
# For plain-HTTP development, first set APP_ENV=local in .env.
forge serve

Generated projects retain APP_ENV=production in .env, which keeps session cookies HTTPS-only. Change it to APP_ENV=local only for local plain-HTTP development, before running forge serve. Never use APP_ENV=local in a deployed process because it disables secure cookies.

Visit http://localhost:8080/register for the browser workflow or http://localhost:8080/health for liveness. Readiness, including PostgreSQL and expected migration state, is available at http://localhost:8080/ready.

The generated request path

cmd/server/main.go
  -> internal/config.Load()       explicit typed environment
  -> internal/application.New()   explicit dependency construction
  -> routes.Register()            complete searchable route table
  -> controller method            normal Go function
  -> httpx.Context                thin request/response convenience

There is no annotation scanning, reflection-driven container, global application state, hidden route discovery, or ORM query language.

CLI

forge new <directory> [--module <path>] [--replace <goforge-path>]
forge serve
forge test
forge build
forge migrate
forge views:compile
forge orm:generate [--check]
forge make:model <name>
forge make:resource <name>
forge make:controller <name>
forge make:request <name>
forge make:migration <name>
forge make:job <name>
forge queue:work
forge queue:failed
forge queue:retry <id|--all>
forge queue:forget <id>

The spaced forms (forge make controller Users) also work. Generators never overwrite existing files.

forge test and forge build are intentionally no-argument defaults for format-4 through format-8 projects. Both non-mutating preflights check the generated ORM first and compiled views second. Testing then runs exactly go test ./.... Building stages a trimmed ./cmd/server executable and publishes it atomically as bin/app on Unix or bin/app.exe on Windows, so a failed build does not replace the last-good binary.

The exact direct escape hatches are:

forge orm:generate --check
forge views:compile --check
go test ./...
go build -trimpath -o bin/app ./cmd/server
go run ./cmd/server

Use direct Go commands for custom packages, flags, tags, targets, output paths, or worker and console builds. forge serve is the watched development default; it compiles application-owned views, stages ordinary server binaries outside the repository, health-checks them on private loopback addresses, and switches its stable public proxy only after success. Invalid view or Go source leaves the last-good server reachable and recovers on the next correction. Refresh the browser after a successful reload; the proxy does not inject scripts or rewrite responses. Promotion proves /health liveness, not /ready database or migration readiness; run forge migrate explicitly after SQL changes.

PID-verified candidate promotion is batteries-included on Linux, Windows, and macOS. AIX, DragonFly BSD, FreeBSD, illumos, iOS, NetBSD, OpenBSD, and Solaris use the system lsof command for the same check. Where that utility is absent, use the exact one-shot escape hatch go run ./cmd/server.

The wrappers never start services, apply migrations, generate a stale ORM, modify .env, or start workers. Browser LiveReload/HMR, frontend assets, multi-process development, and environment diagnosis remain separate milestones.

Framework packages

  • forge: application lifecycle and graceful shutdown
  • httpx: routing, JSON binding, errors, middleware, and net/http adapters
  • config: typed environment and optional dotenv loading
  • validation: fluent validation without reflection
  • cache: cache contracts, typed JSON helpers, and an in-memory store
  • view: .forge.html compilation to inspectable, contextually escaped standard-library templates
  • web: buffered browser sessions, CSRF, flash-safe responses, and redirects
  • session: signed-ID server-side sessions with flash data and swappable storage
  • security/ratelimit: bounded authentication throttling with a replaceable store
  • database: transaction helper over database/sql
  • database/migrate: paired SQL migrations; PostgreSQL runs are advisory-locked and transactionally applied when the migration SQL is transaction-safe. MySQL DDL may commit implicitly and is not promised to be atomic.
  • orm: typed, inspectable PostgreSQL builders, mappings, partial fields, optimistic guards, bulk inserts, and explicit batched relationships over ordinary *sql.DB or *sql.Tx executors
  • orm/postgres: disclosure-safe PostgreSQL constraint and retryable-error classification that preserves native causes
  • job: typed definitions, explicit registries, dispatch policy, at-least-once worker lifecycle, retry semantics, and replaceable store/observer contracts
  • job/postgres: parameterized durable queue storage with database-clock claims, SKIP LOCKED, leases, generation fencing, and failed-job operations

See docs/philosophy.md for design constraints and docs/building-an-app.md for the end-to-end workflow. Developers arriving from full-stack ecosystems can use docs/framework-map.md as a concept-by-concept translation. See docs/jobs.md for the durable-jobs contract and operating workflow.

See CONTRIBUTING.md for code conventions, template ownership, and verification, and docs/CODE_QUALITY.md for the repository quality assessment.

Documentation

Overview

Package forge provides the small application kernel used by GoForge projects. Everything below it is ordinary net/http, database/sql, and explicit Go code.

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type App 

type App struct {
	Router *httpx.Router
	// contains filtered or unexported fields
}

func New 

func New(config Config) *App

func NewChecked 

func NewChecked(config Config) (*App, error)

NewChecked validates explicit lifecycle limits before applying defaults. Generated applications use it so invalid environment values fail before the server starts. New remains source-compatible for pre-v0.7 callers.

func (*App) Handler 

func (app *App) Handler() http.Handler

func (*App) Run 

func (app *App) Run(ctx context.Context) error

Run serves until the context is cancelled. Applications that need different server behavior can ignore Run and pass app.Handler() to their own http.Server.

type Config 

type Config struct {
	Address           string
	ShutdownTimeout   time.Duration
	ReadHeaderTimeout time.Duration
	ReadTimeout       time.Duration
	WriteTimeout      time.Duration
	IdleTimeout       time.Duration
	MaxHeaderBytes    int
	Logger            *slog.Logger
}

Source Files

View all Source files

Directories

Path Synopsis
Package cache defines a deliberately small cache contract and an in-process implementation.
 Package cache defines a deliberately small cache contract and an in-process implementation.
cmd
forge command
Package config provides explicit, typed environment configuration without reflection.
 Package config provides explicit, typed environment configuration without reflection.
Package database adds small, explicit helpers around database/sql.
 Package database adds small, explicit helpers around database/sql.
migrate
Package migrate applies paired .up.sql and .down.sql files using database/sql.
 Package migrate applies paired .up.sql and .down.sql files using database/sql.
Package httpx provides error-returning handlers and explicit middleware around the standard library HTTP server and router.
 Package httpx provides error-returning handlers and explicit middleware around the standard library HTTP server and router.
internal
cli
job
Package job provides typed, explicit durable job dispatch and worker lifecycle.
 Package job provides typed, explicit durable job dispatch and worker lifecycle.
postgres
Package postgres provides an inspectable PostgreSQL job store.
 Package postgres provides an inspectable PostgreSQL job store.
orm
Package orm provides a small, code-generation-oriented data mapper over database/sql.
 Package orm provides a small, code-generation-oriented data mapper over database/sql.
postgres
Package postgres adapts PostgreSQL driver errors to GoForge ORM errors.
 Package postgres adapts PostgreSQL driver errors to GoForge ORM errors.
security
csrf
Package csrf provides session-bound synchronizer tokens.
 Package csrf provides session-bound synchronizer tokens.
password
Package password hashes and verifies user passwords with the standard-library PBKDF2 implementation.
 Package password hashes and verifies user passwords with the standard-library PBKDF2 implementation.
ratelimit
Package ratelimit provides explicit fixed-window request throttling with a replaceable persistence contract.
 Package ratelimit provides explicit fixed-window request throttling with a replaceable persistence contract.
ratelimit/postgres
Package postgres provides an inspectable durable PostgreSQL rate-limit store.
 Package postgres provides an inspectable durable PostgreSQL rate-limit store.
Package session provides signed-ID, server-side HTTP sessions.
 Package session provides signed-ID, server-side HTTP sessions.
Package validation contains composable, typed validation rules without reflection.
 Package validation contains composable, typed validation rules without reflection.
Package view renders html/template files to a buffer before committing an HTTP response.
 Package view renders html/template files to a buffer before committing an HTTP response.
Package web provides the buffered request lifecycle used by browser routes.
 Package web provides the buffered request lifecycle used by browser routes.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.