Go to file

Marco Sadjadi a68e882092 feat(crypto): envelope encryption + key rotation via admin panel Closes structural weakness #4 from the audit (single global key, no rotation, no KMS path). Customer secrets now use envelope encryption with a real rotation story. Model: KEK — Key Encryption Key, 32 bytes from env (SECRETS_ENCRYPTION_KEY). Never stored in the DB. Root of trust. DEK — Data Encryption Key, 32 random bytes we generate, stored in the new encryption_keys table wrapped (AES-256-GCM encrypted) with the KEK. Secrets are encrypted with the DEK. Schema: - encryption_keys (version, wrappedDek, active, rotatedBy, createdAt, retiredAt) - secrets.keyId — which DEK encrypted this row. NULL = legacy (KEK-direct, pre-envelope); decryptSecret handles both and the first rotation migrates legacy rows onto a DEK. crypto.ts (full rewrite): - ensureActiveKey() — boot-time, loads keys + creates v1 if none. Fail-closed: index.ts process.exit(1) if it throws — the API will not serve if encryption can't initialize. - encryptSecret() — encrypts with the active DEK, returns { value, keyId }. - decryptSecret(value, keyId) — DEK path or legacy KEK-direct path. - rotateKeys() — mints a fresh DEK, re-encrypts EVERY secret under it inside a single transaction (decrypt-old / encrypt-new per row), retires the old key, activates the new one. A partial failure is recoverable because every row carries its own keyId. - encryptionStatus() — active version, key history, secret + legacy counts. Admin: - GET /v1/admin/encryption — status - POST /v1/admin/encryption/rotate — triggers rotateKeys, audit-logged as admin.encryption.rotate with { newVersion, reEncrypted }. - /admin/encryption page — active-key/secret/legacy cards, Rotate button with confirm, key-history table, plain-English how-it-works. Added to admin nav. Verified end-to-end: - boot → encryption_keys v1 active, '[crypto] envelope encryption ready' - created a server with secret MY_API_KEY → stored ciphertext, keyId = v1 - POST rotate → { newVersion: 2, reEncrypted: 1 }; ciphertext changed, keyId now v2, v1 retired, v2 active. The decrypt-then-reencrypt round-trip succeeded (rotation throws otherwise) — the secret is provably recoverable. - admin UI renders the status + history correctly. Deferred, named honestly (not built this iteration): - worker reads secrets from the DB instead of the BullMQ job-data plaintext copy — would also remove plaintext secrets from Redis. Separate change with its own risk surface on the iterate/fork flows. - per-server secret-value rotation UI - audit_log hash-chaining (tamper-evidence) - rate limiting on auth endpoints		2026-05-20 22:36:08 +02:00
apps	feat(crypto): envelope encryption + key rotation via admin panel	2026-05-20 22:36:08 +02:00
packages	feat(crypto): envelope encryption + key rotation via admin panel	2026-05-20 22:36:08 +02:00
scripts	chore(dev): bootstrap script wires docker + drizzle push + turbo dev	2026-05-19 00:35:27 +02:00
.env.example	feat(admin): password-auth admin panel with 8 pages + 15 API endpoints	2026-05-19 23:01:26 +02:00
.gitignore	chore: bootstrap monorepo (turbo, biome, docker-compose, env, CHOICES)	2026-05-19 00:20:15 +02:00
biome.json	chore: bootstrap monorepo (turbo, biome, docker-compose, env, CHOICES)	2026-05-19 00:20:15 +02:00
BuildMyMCPServer_MASTER_PROMPT.md	chore: bootstrap monorepo (turbo, biome, docker-compose, env, CHOICES)	2026-05-19 00:20:15 +02:00
CHOICES.md	feat(web): real 3-step wizard, settings, audit, docs, marketing pages	2026-05-19 18:20:31 +02:00
docker-compose.yml	fix: live-run wiring (SDK 1.29, zod 3.25, OAUTH_ISSUER split, alt host ports, web on 3001, log level cast, pino transport)	2026-05-19 00:57:23 +02:00
package.json	chore(dev): bootstrap script wires docker + drizzle push + turbo dev	2026-05-19 00:35:27 +02:00
pnpm-lock.yaml	feat(llm): extract Claude SYSTEM_PROMPT + generateSpec into shared @bmm/llm package	2026-05-19 18:05:31 +02:00
pnpm-workspace.yaml	chore: bootstrap monorepo (turbo, biome, docker-compose, env, CHOICES)	2026-05-19 00:20:15 +02:00
README.md	chore(dev): bootstrap script wires docker + drizzle push + turbo dev	2026-05-19 00:35:27 +02:00
TEMPLATE_SECURITY_AUDIT.md	fix(security): template integration sovereign audit + critical fixes	2026-05-19 23:35:45 +02:00
tsconfig.base.json	chore: bootstrap monorepo (turbo, biome, docker-compose, env, CHOICES)	2026-05-19 00:20:15 +02:00
turbo.json	chore: bootstrap monorepo (turbo, biome, docker-compose, env, CHOICES)	2026-05-19 00:20:15 +02:00

README.md

BuildMyMCPServer

Describe your tool. We host the server. AI uses it.

Prompt-to-production MCP servers with OAuth 2.1 and Streamable HTTP. Production-grade infrastructure for hosting Model Context Protocol servers your AI clients (Claude Desktop, Cursor, ChatGPT) can install with a copy-paste snippet.

Quick start

# 1. Install
pnpm install

# 2. Copy env. Defaults work for local dev. Set ANTHROPIC_API_KEY if you want real generation.
cp .env.example .env

# 3. Boot everything
pnpm dev

pnpm dev will:

Load .env.
docker compose up -d --wait postgres + redis.
Push the Drizzle schema (drizzle-kit push --force).
Start the full stack in parallel: web (Next.js, :3000), api (Fastify, :4000), generator (BullMQ worker).

Then open:

Dashboard: http://localhost:3000
API: http://localhost:4000/health

Click Start building, enter your email, copy the magic-link URL printed to the api terminal output, paste it in your browser. You land on /dashboard. Click New server, paste a prompt, and watch the build stream live over WebSocket.

If ANTHROPIC_API_KEY is unset, the generator returns a deterministic mock spec (an echo and a now tool) so the full end-to-end flow stays demoable.

If Docker is unavailable, the build will fail at the deploy step with a clear error. Otherwise: a fresh container is launched on a host port from RUNNER_PORT_RANGE_START…RUNNER_PORT_RANGE_END, the server is marked live, and the dashboard renders install snippets for Claude Desktop, Cursor and ChatGPT.

Architecture

See BuildMyMCPServer_MASTER_PROMPT.md for the full specification and CHOICES.md for decisions made during this Sprints 1–3 build.

apps/
  web/              Next.js 15 dashboard + marketing landing
  api/              Fastify control plane (auth, server CRUD, OAuth 2.1 AS, JWKS, WS stream)
  generator/        BullMQ worker — Claude → spec → render → docker build → local deploy
  runner-template/  Hosted MCP server template (Streamable HTTP + OAuth 2.1 RS)
packages/
  db/               Drizzle schema + client
  auth/             Magic-link + session
  types/            Shared Zod contracts

Scripts

Command	Effect
`pnpm dev`	Bootstrap + parallel dev for web, api, generator
`pnpm dev:no-docker`	Skip docker-compose (assumes postgres + redis already up)
`pnpm build`	Turbo build all apps
`pnpm typecheck`	Turbo typecheck all apps
`pnpm lint`	Biome check
`pnpm lint:fix`	Biome check --write
`pnpm db:push`	Push schema to postgres (drizzle-kit)
`pnpm db:generate`	Generate SQL migration files
`pnpm db:migrate`	Apply pending migrations
`pnpm stop`	docker compose down

Acceptance check

After pnpm dev is up:

http://localhost:3000 renders the landing page.
http://localhost:4000/health returns { "ok": true }.
Sign in via magic link (URL printed in the api terminal).
New Server → paste prompt → live WebSocket stream queued → generating → building → deploying → live.
If Docker is running, a container is launched and http://localhost:<port>/mcp responds 401 + WWW-Authenticate without a token, 200 with a valid token issued by /oauth/token.
Install snippets render with copy buttons for Claude Desktop, Cursor, ChatGPT.

Repo conventions

TypeScript strict, zero any (Biome lints noExplicitAny as error).
ESM-only, Node 20 LTS.
Conventional commits.
Tailwind v4 (@import 'tailwindcss').
Geist + Geist Mono.

README.md Unescape Escape