What this enables:
- A user builds an MCP server. If others would benefit, they click 'Publish as
template' on their server detail page. The spec + pre-rendered TypeScript
snapshot is preserved.
- Visitors browse /templates, filter by category, sort by trending/top/newest.
Each template card shows fork count + active deployment count as natural
manipulation-resistant popularity signal.
- /templates/[slug] shows the full plan: tool list with input schemas,
required-credential explanations (with 'how to get one' deep links), and a
collapsible code preview so users can audit before forking.
- Fork is one click → /servers/new?template=slug. The wizard skips Step 1 and
pre-fills Step 2 with the template's parsed spec. Forker only fills in their
own credentials. mcp_servers.template_id is recorded; template.fork_count is
bumped atomically. Each fork gets its own isolated container with its own
port, its own AES-256 secrets — the template author has zero visibility into
the fork's traffic or data.
- Admin /admin/templates moderation: verify quality templates (shows shield
badge in marketplace), hide low-effort ones, takedown anything malicious.
Takedowns cascade-pause every fork container — owners must re-deploy.
Why template+fork instead of shared-container:
- Shared containers would mean the publisher's quota + their secrets + their
logs are exposed to forkers. Bad ergonomics, bad security, bad ownership.
- Templates/forks decouple the spec (shared, vouched-for) from the runtime
(isolated per user). Network-effect moat without the trust collapse.
Why no 5-star voting in v1:
- Manipulation-anfällig, empty lists without adoption. We use fork count +
active deploys + verified badge. Trending algorithm:
score = (activeDeploys * 3 + forks) / sqrt(ageDays + 1)
Real signal, no brigading attack surface.
Backend:
- New schema: templates table (16 cols incl. tools_schema, generated_code,
required_secrets, allowedDomains, status enum, verified, fork_count).
- mcp_servers.template_id FK + idx for fork lookup.
- @bmm/types: SpecEdit unchanged, CreateServerInput accepts optional templateId.
- preview-cache.ts: new cachePrebuiltCode/loadPrebuiltCode for storing the
template's full rendered server.ts alongside the spec. Generator worker
detects this and skips the render step — uses the audited pre-built code
verbatim. Banned-pattern re-scan at publish time.
- routes/templates.ts: 5 public/auth routes + 2 admin routes. Banned-pattern
re-scan before publish. Slug auto-uniqued. forkCount atomic-increment via
SQL.
UI:
- /templates marketplace with trending/top/newest tabs, category filter, search.
Cards show forks + live count + author + verified badge.
- /templates/[slug] full detail with tools, credentials-with-hints, expandable
code preview, fork CTA, ownership + stats sidebar, 'forking is safe' explainer.
- /servers/new?template=slug — wizard auto-jumps to Step 2 with template spec
pre-filled, fork banner at top with link back to template.
- /servers/[id] new Publish tab with title, category, descriptions, per-secret
hint fields (description + howToGetUrl per UPPER_SNAKE_CASE key).
- /admin/templates moderation with verify/hide/takedown actions.
- Marketing nav now includes /templates.
Verified end-to-end:
- Published Echo Demo Template from marco@test.local's live server
- Marketplace lists it correctly with stats
- Detail page renders with all sections
- Fork CTA navigates to wizard with ?template= param
- Wizard skips Step 1, shows fork banner, pre-fills spec
- Build succeeds in ~10s (cached spec + prebuilt code path skips Claude AND
render), container live on :4109 with proper OAuth 401 → token → 200 flow
- DB: templates.fork_count=1, activeDeployments=1, mcp_servers.template_id
populated on the fork
- /admin/templates shows the new template with verify/hide/takedown controls
267 lines
10 KiB
TypeScript
267 lines
10 KiB
TypeScript
'use client';
|
|
|
|
import { useEffect, useState } from 'react';
|
|
import Link from 'next/link';
|
|
import { useParams, useRouter } from 'next/navigation';
|
|
import { ShieldCheck, GitFork, Activity, ExternalLink, ChevronDown, ChevronRight } from 'lucide-react';
|
|
import { apiFetch } from '@/lib/api';
|
|
import { Logo } from '@/components/logo';
|
|
import { Button } from '@/components/ui/button';
|
|
import { CodeBlock } from '@/components/code-block';
|
|
|
|
interface Tool {
|
|
name: string;
|
|
description: string;
|
|
inputSchema: Record<string, unknown>;
|
|
}
|
|
|
|
interface SecretHint {
|
|
key: string;
|
|
description: string;
|
|
howToGetUrl?: string;
|
|
}
|
|
|
|
interface TemplateDetail {
|
|
id: string;
|
|
slug: string;
|
|
title: string;
|
|
shortDescription: string;
|
|
longDescription: string | null;
|
|
category: string;
|
|
verified: boolean;
|
|
forkCount: number;
|
|
activeDeployments: number;
|
|
toolsSchema: Tool[];
|
|
generatedCode: string;
|
|
requiredSecrets: SecretHint[];
|
|
scopes: string[];
|
|
ownerName: string | null;
|
|
ownerOrgName: string | null;
|
|
createdAt: string;
|
|
}
|
|
|
|
export default function TemplateDetail() {
|
|
const params = useParams<{ slug: string }>();
|
|
const router = useRouter();
|
|
const [template, setTemplate] = useState<TemplateDetail | null>(null);
|
|
const [error, setError] = useState<string | null>(null);
|
|
const [showCode, setShowCode] = useState(false);
|
|
|
|
useEffect(() => {
|
|
apiFetch<{ template: TemplateDetail }>(`/v1/templates/${params.slug}`)
|
|
.then((r) => setTemplate(r.template))
|
|
.catch((e) => {
|
|
const detail = (e as { detail?: { error?: string } }).detail;
|
|
setError(detail?.error ?? (e as Error).message);
|
|
});
|
|
}, [params.slug]);
|
|
|
|
function useTemplate() {
|
|
if (!template) return;
|
|
router.push(`/servers/new?template=${template.slug}`);
|
|
}
|
|
|
|
if (error) {
|
|
return (
|
|
<div className="flex min-h-screen items-center justify-center px-6">
|
|
<div className="text-center">
|
|
<p className="text-[14px]">Template not found.</p>
|
|
<Link href="/templates" className="mt-3 inline-block text-[12px] text-[--color-accent] underline">
|
|
← Back to marketplace
|
|
</Link>
|
|
</div>
|
|
</div>
|
|
);
|
|
}
|
|
|
|
if (!template) {
|
|
return (
|
|
<div className="px-8 py-20 text-center mono text-[12px] text-[--color-fg-muted]">Loading…</div>
|
|
);
|
|
}
|
|
|
|
return (
|
|
<div className="flex min-h-screen flex-col">
|
|
<header className="sticky top-0 z-50 border-b border-[--color-border] bg-[--color-bg]/85 backdrop-blur-md">
|
|
<div className="mx-auto flex h-12 max-w-5xl items-center justify-between px-6">
|
|
<div className="flex items-center gap-3">
|
|
<Logo />
|
|
<span className="text-[12.5px] text-[--color-fg-subtle]">
|
|
/ <Link href="/templates" className="hover:text-[--color-fg]">templates</Link> / {template.slug}
|
|
</span>
|
|
</div>
|
|
<Link
|
|
href="/login"
|
|
className="rounded-md bg-[--color-accent] px-3 py-1.5 text-[12.5px] font-medium text-white transition-colors duration-200 hover:bg-[#5557e8]"
|
|
>
|
|
Start building
|
|
</Link>
|
|
</div>
|
|
</header>
|
|
|
|
<main className="mx-auto w-full max-w-5xl flex-1 px-6 py-10">
|
|
<div className="grid gap-10 lg:grid-cols-[1fr_300px]">
|
|
<div>
|
|
<div className="flex items-center gap-2">
|
|
<span className="mono rounded-full border border-[--color-border] bg-[--color-bg-subtle] px-2 py-0.5 text-[11px] text-[--color-fg-muted]">
|
|
{template.category}
|
|
</span>
|
|
{template.verified && (
|
|
<span className="inline-flex items-center gap-1 rounded-full border border-[--color-accent]/40 bg-[--color-accent]/10 px-2 py-0.5 text-[11px] font-medium text-[--color-accent]">
|
|
<ShieldCheck size={10} /> verified
|
|
</span>
|
|
)}
|
|
</div>
|
|
<h1 className="mt-3 text-[28px] font-semibold tracking-tight">{template.title}</h1>
|
|
<p className="mt-2 text-[14px] leading-relaxed text-[--color-fg-muted]">
|
|
{template.shortDescription}
|
|
</p>
|
|
|
|
{template.longDescription && (
|
|
<p className="mt-4 whitespace-pre-wrap text-[13.5px] leading-relaxed text-[--color-fg]">
|
|
{template.longDescription}
|
|
</p>
|
|
)}
|
|
|
|
<section className="mt-10">
|
|
<h2 className="text-[16px] font-semibold tracking-tight">
|
|
Tools ({template.toolsSchema.length})
|
|
</h2>
|
|
<div className="mt-3 space-y-3">
|
|
{template.toolsSchema.map((tool) => (
|
|
<div key={tool.name} className="panel p-3">
|
|
<div className="flex items-baseline gap-2">
|
|
<span className="mono text-[13px] font-semibold">{tool.name}</span>
|
|
<span className="mono text-[10.5px] text-[--color-fg-subtle]">
|
|
{Object.keys(tool.inputSchema ?? {}).length} param
|
|
{Object.keys(tool.inputSchema ?? {}).length === 1 ? '' : 's'}
|
|
</span>
|
|
</div>
|
|
<p className="mt-1.5 text-[12.5px] text-[--color-fg-muted]">{tool.description}</p>
|
|
{Object.keys(tool.inputSchema ?? {}).length > 0 && (
|
|
<div className="mt-2">
|
|
<CodeBlock
|
|
label="input schema"
|
|
code={JSON.stringify(tool.inputSchema, null, 2)}
|
|
/>
|
|
</div>
|
|
)}
|
|
</div>
|
|
))}
|
|
</div>
|
|
</section>
|
|
|
|
{template.requiredSecrets.length > 0 && (
|
|
<section className="mt-10">
|
|
<h2 className="text-[16px] font-semibold tracking-tight">
|
|
Credentials you'll need
|
|
</h2>
|
|
<p className="mt-1 text-[12.5px] text-[--color-fg-muted]">
|
|
When you fork, the wizard asks you for these. Your values stay in your container —
|
|
the template author never sees them.
|
|
</p>
|
|
<div className="mt-3 space-y-2">
|
|
{template.requiredSecrets.map((s) => (
|
|
<div key={s.key} className="panel p-3">
|
|
<div className="flex items-baseline justify-between gap-2">
|
|
<span className="mono text-[13px] font-semibold">{s.key}</span>
|
|
{s.howToGetUrl && (
|
|
<a
|
|
href={s.howToGetUrl}
|
|
target="_blank"
|
|
rel="noreferrer"
|
|
className="inline-flex items-center gap-1 text-[11.5px] text-[--color-accent] hover:underline"
|
|
>
|
|
How to get one <ExternalLink size={10} />
|
|
</a>
|
|
)}
|
|
</div>
|
|
<p className="mt-1.5 text-[12.5px] text-[--color-fg-muted]">
|
|
{s.description}
|
|
</p>
|
|
</div>
|
|
))}
|
|
</div>
|
|
</section>
|
|
)}
|
|
|
|
<section className="mt-10">
|
|
<button
|
|
type="button"
|
|
onClick={() => setShowCode((s) => !s)}
|
|
className="inline-flex items-center gap-1 text-[14px] font-semibold tracking-tight text-[--color-fg] transition-colors hover:text-[--color-fg-muted]"
|
|
>
|
|
{showCode ? <ChevronDown size={14} /> : <ChevronRight size={14} />}
|
|
Generated code ({template.generatedCode.length} chars)
|
|
</button>
|
|
<p className="mt-1 text-[12px] text-[--color-fg-muted]">
|
|
Audit before you fork. We re-scan every published template for banned patterns
|
|
(eval, child_process, prompt-injection markers).
|
|
</p>
|
|
{showCode && (
|
|
<div className="mt-3">
|
|
<CodeBlock label="src/server.ts" code={template.generatedCode} />
|
|
</div>
|
|
)}
|
|
</section>
|
|
</div>
|
|
|
|
<aside className="space-y-3">
|
|
<div className="panel p-4">
|
|
<Button variant="primary" size="lg" className="w-full" onClick={useTemplate}>
|
|
Fork this template →
|
|
</Button>
|
|
<p className="mt-2 text-[11.5px] text-[--color-fg-muted]">
|
|
One click → your own isolated container.
|
|
</p>
|
|
</div>
|
|
|
|
<div className="panel p-3 text-[12px]">
|
|
<Row label="Forks" value={template.forkCount} icon={<GitFork size={11} />} />
|
|
<Row
|
|
label="Live deployments"
|
|
value={template.activeDeployments}
|
|
icon={<Activity size={11} />}
|
|
/>
|
|
<Row label="Category" value={template.category} mono />
|
|
<Row
|
|
label="Published"
|
|
value={new Date(template.createdAt).toLocaleDateString()}
|
|
/>
|
|
<Row label="Author" value={template.ownerName ?? template.ownerOrgName ?? 'anonymous'} />
|
|
</div>
|
|
|
|
<div className="panel p-3 text-[11.5px] leading-relaxed text-[--color-fg-muted]">
|
|
<strong className="text-[--color-fg]">Forking is safe.</strong> Your fork gets its own
|
|
Docker container, its own port, its own AES-256-encrypted secrets. The template
|
|
author has no visibility into your traffic or data.
|
|
</div>
|
|
</aside>
|
|
</div>
|
|
</main>
|
|
</div>
|
|
);
|
|
}
|
|
|
|
function Row({
|
|
label,
|
|
value,
|
|
mono,
|
|
icon,
|
|
}: {
|
|
label: string;
|
|
value: string | number;
|
|
mono?: boolean;
|
|
icon?: React.ReactNode;
|
|
}) {
|
|
return (
|
|
<div className="flex items-baseline justify-between gap-3 py-1">
|
|
<span className="text-[--color-fg-subtle]">{label}</span>
|
|
<span className={`inline-flex items-center gap-1.5 ${mono ? 'mono' : ''} text-[--color-fg]`}>
|
|
{icon}
|
|
{value}
|
|
</span>
|
|
</div>
|
|
);
|
|
}
|