2026-05-19 00:20:15 +02:00
|
|
|
# ---- Core ----
|
|
|
|
|
NODE_ENV=development
|
|
|
|
|
|
|
|
|
|
# ---- Database ----
|
2026-05-19 00:57:23 +02:00
|
|
|
DATABASE_URL=postgresql://bmm:bmm@localhost:5440/bmm
|
|
|
|
|
REDIS_URL=redis://localhost:6390
|
2026-05-19 00:20:15 +02:00
|
|
|
|
|
|
|
|
# ---- Auth (Better-Auth) ----
|
|
|
|
|
BETTER_AUTH_SECRET=replace-me-with-32-bytes-of-random-hex-1234567890abcdef
|
2026-05-19 00:57:23 +02:00
|
|
|
BETTER_AUTH_URL=http://localhost:3001
|
|
|
|
|
NEXT_PUBLIC_APP_URL=http://localhost:3001
|
2026-05-19 00:20:15 +02:00
|
|
|
NEXT_PUBLIC_API_URL=http://localhost:4000
|
|
|
|
|
|
feat(auth): GitHub OAuth login + SMS one-time-code login
GitHub: /v1/auth/github + /callback — authorization-code flow, fetches
the verified primary email via /user/emails, reuses upsertOAuthLogin.
SMS: phone is now a first-class login identity.
- schema: users.email nullable, users.phone added, new sms_codes table.
- @bmm/auth: issueSmsCode / consumeSmsCode — 6-digit code, hashed at
rest, 10-min TTL, per-phone rate limit, 5-attempt cap, get-or-create
user by phone.
- apps/api: /v1/auth/sms/request + /verify, Twilio REST send (no SDK),
per-IP throttle. /v1/auth/providers now reports google/github/sms.
- login UI: Google + GitHub buttons, Email|Phone toggle, two-step SMS
(number -> 6-digit code with one-time-code autofill).
SMS link was rejected in favour of an OTP code — carrier link-scanners
consume magic-link tokens before the user taps them.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-21 22:59:58 +02:00
|
|
|
# ---- GitHub OAuth ("Continue with GitHub") ----
|
|
|
|
|
# Create at https://github.com/settings/applications/new
|
|
|
|
|
# Authorized callback URL: <CONTROL_PLANE_PUBLIC_URL>/v1/auth/github/callback
|
2026-05-19 00:20:15 +02:00
|
|
|
GITHUB_OAUTH_ID=
|
|
|
|
|
GITHUB_OAUTH_SECRET=
|
|
|
|
|
|
feat(auth): GitHub OAuth login + SMS one-time-code login
GitHub: /v1/auth/github + /callback — authorization-code flow, fetches
the verified primary email via /user/emails, reuses upsertOAuthLogin.
SMS: phone is now a first-class login identity.
- schema: users.email nullable, users.phone added, new sms_codes table.
- @bmm/auth: issueSmsCode / consumeSmsCode — 6-digit code, hashed at
rest, 10-min TTL, per-phone rate limit, 5-attempt cap, get-or-create
user by phone.
- apps/api: /v1/auth/sms/request + /verify, Twilio REST send (no SDK),
per-IP throttle. /v1/auth/providers now reports google/github/sms.
- login UI: Google + GitHub buttons, Email|Phone toggle, two-step SMS
(number -> 6-digit code with one-time-code autofill).
SMS link was rejected in favour of an OTP code — carrier link-scanners
consume magic-link tokens before the user taps them.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-21 22:59:58 +02:00
|
|
|
# ---- Twilio SMS (phone one-time-code login) ----
|
|
|
|
|
# Credentials + a verified sender number from the Twilio console.
|
|
|
|
|
TWILIO_ACCOUNT_SID=
|
|
|
|
|
TWILIO_AUTH_TOKEN=
|
|
|
|
|
TWILIO_SMS_FROM=
|
|
|
|
|
|
2026-05-21 00:26:44 +02:00
|
|
|
# ---- Google OAuth (optional — "Continue with Google") ----
|
|
|
|
|
# Create at https://console.cloud.google.com/apis/credentials
|
|
|
|
|
# Authorized redirect URI must be: <CONTROL_PLANE_PUBLIC_URL>/v1/auth/google/callback
|
|
|
|
|
# e.g. dev: http://localhost:4000/v1/auth/google/callback
|
|
|
|
|
# prod: https://api.buildmymcp.com/v1/auth/google/callback
|
|
|
|
|
GOOGLE_OAUTH_ID=
|
|
|
|
|
GOOGLE_OAUTH_SECRET=
|
|
|
|
|
|
|
|
|
|
# Public URL of this API, used to build the OAuth redirect URI.
|
|
|
|
|
CONTROL_PLANE_PUBLIC_URL=http://localhost:4000
|
|
|
|
|
|
2026-05-19 00:20:15 +02:00
|
|
|
# ---- Anthropic ----
|
|
|
|
|
ANTHROPIC_API_KEY=
|
|
|
|
|
|
|
|
|
|
# ---- Crypto ----
|
|
|
|
|
# 32-byte hex for AES-256-GCM; generate with: openssl rand -hex 32
|
|
|
|
|
SECRETS_ENCRYPTION_KEY=0000000000000000000000000000000000000000000000000000000000000000
|
|
|
|
|
|
feat(admin): password-auth admin panel with 8 pages + 15 API endpoints
Schema migrations:
- users.is_admin boolean
- users.password_hash text (scrypt N=16384, 16-byte salt)
- users.last_login_at timestamp
- organizations.suspended + suspended_reason
- admin_settings table (DB-stored prompt override + future settings)
Auth (@bmm/auth):
- hashPassword + verifyPassword via node:crypto scrypt (no extra dep)
- loginWithPassword: scrypt-verifies, issues 30-day session, updates last_login_at
- seedAdmin: idempotent upsert keyed on email; creates org + membership on first run
- AuthedUser now carries isAdmin flag
API:
- POST /v1/auth/admin/login (email + password) — 300ms throttle on failure
- requireAdmin preHandler — 401 if no session, 403 if non-admin
- Bootstrap: api on boot calls seedAdmin(ADMIN_EMAIL, ADMIN_PASSWORD, ADMIN_NAME)
if env present. Idempotent.
Admin API routes (all gated by requireAdmin):
- GET /v1/admin/overview (totals, trends 7d, server-status breakdown, builds 24h, recent activity)
- GET /v1/admin/users (search, per-row org + plan + serverCount)
- PATCH /v1/admin/users/:id (isAdmin, name)
- DELETE /v1/admin/users/:id (self-delete blocked)
- GET /v1/admin/orgs (member + server counts)
- PATCH /v1/admin/orgs/:id (plan, quota, suspended; cascades to mcp_servers.status=paused on suspend)
- GET /v1/admin/servers (cross-org with status filter)
- POST /v1/admin/servers/:id/rebuild (re-queues build using last prompt)
- DELETE /v1/admin/servers/:id
- GET /v1/admin/builds (status filter, error messages, prompt previews)
- GET /v1/admin/builds/:id/logs
- GET /v1/admin/audit (system-wide with user email join)
- GET /v1/admin/system (DB ping, Redis ping, BullMQ queue depth, docker ps count)
- GET /v1/admin/prompt (builtin + override + updatedAt)
- PATCH /v1/admin/prompt (value: string | null) — saves DB override or drops it
UI (apps/web/app/admin/*):
- /admin/login — password form, separate from /login magic-link
- AdminLayout — Linear-style sidebar (8 nav items), bottom panel with user email +
'user view' shortcut + logout, client-side requireAdmin guard with redirect
- /admin — overview dashboard with 4 metric cards, 2 panels (status + 24h builds),
recent activity table linking to full audit
- /admin/users — search + admin toggle + delete (self-delete blocked)
- /admin/orgs — plan/quota/suspend actions via prompts
- /admin/servers — cross-org table with rebuild + delete actions, status filter
- /admin/builds — every build cross-fleet with error vs prompt preview
- /admin/audit — system-wide log + CSV export + filter dropdowns
- /admin/system — auto-refreshing 5s health probes for Postgres, Redis, queue, Docker
- /admin/prompt — live editor for the LLM system prompt with built-in baseline,
override-state badge, drop-override action, diff preview, save-as-override
End-to-end verified: login as marco.frangiskatos@gmail.com + Melusa112233.*, every
admin page returns 200, admin login + overview tested via screenshot, docker probe
returns true count of running MCP containers.
2026-05-19 23:01:26 +02:00
|
|
|
# ---- Admin bootstrap ----
|
|
|
|
|
# On API boot, an admin user is upserted with these credentials (idempotent).
|
|
|
|
|
ADMIN_EMAIL=
|
|
|
|
|
ADMIN_PASSWORD=
|
|
|
|
|
ADMIN_NAME=Admin
|
|
|
|
|
|
2026-05-19 00:20:15 +02:00
|
|
|
# ---- OAuth signing (RS256 JWKS) ----
|
|
|
|
|
# Path to PEM keypair; auto-generated on api boot if missing
|
|
|
|
|
OAUTH_KEY_DIR=./keys
|
|
|
|
|
|
|
|
|
|
# ---- Runner / Generator ----
|
|
|
|
|
# Where MCP runtime containers bind (host machine reachable from API)
|
|
|
|
|
RUNNER_HOST=localhost
|
|
|
|
|
# Range of host ports used for generated MCP containers
|
|
|
|
|
RUNNER_PORT_RANGE_START=4100
|
|
|
|
|
RUNNER_PORT_RANGE_END=4999
|
|
|
|
|
# Public URL template — $SLUG and $PORT are interpolated
|
|
|
|
|
RUNNER_PUBLIC_URL_TEMPLATE=http://localhost:$PORT
|
|
|
|
|
# Control plane URL reachable from runner containers
|
|
|
|
|
CONTROL_PLANE_URL=http://host.docker.internal:4000
|
|
|
|
|
|
|
|
|
|
# ---- Stripe (Sprint 4) ----
|
|
|
|
|
STRIPE_SECRET_KEY=
|
|
|
|
|
STRIPE_WEBHOOK_SECRET=
|
|
|
|
|
|
|
|
|
|
# ---- Observability (optional) ----
|
|
|
|
|
SENTRY_DSN=
|
|
|
|
|
OTEL_EXPORTER_OTLP_ENDPOINT=
|