@dxheroes/local-mcp-backend 0.3.1

package/.swcrc

@@ -0,0 +1,22 @@
+{
+  "$schema": "https://json.schemastore.org/swcrc",
+  "sourceMaps": true,
+  "jsc": {
+    "parser": {
+      "syntax": "typescript",
+      "decorators": true,
+      "dynamicImport": true
+    },
+    "transform": {
+      "legacyDecorator": true,
+      "decoratorMetadata": true
+    },
+    "target": "es2022",
+    "keepClassNames": true
+  },
+  "module": {
+    "type": "es6",
+    "strict": true,
+    "noInterop": false
+  }
+}

package/.turbo/turbo-build.log

@@ -0,0 +1,9 @@
+
+> @dxheroes/local-mcp-backend@0.3.1 build /home/runner/work/local-mcp-gateway/local-mcp-gateway/apps/backend
+> nest build
+
+-  TSC  Initializing type checker...
+✔  TSC  Initializing type checker...
+>  TSC  Found 0 issues.
+>  SWC  Running...
+Successfully compiled: 32 files with swc (73.37ms)

package/AGENTS.md

@@ -0,0 +1,360 @@
+# Backend Application (NestJS)
+
+## Purpose
+
+NestJS backend that serves as the MCP proxy server. Handles profile management, MCP server management, OAuth flows for MCP servers, API key management, and MCP proxy endpoints per profile.
+
+**NOTE:** No user authentication required. All endpoints are public and immediately accessible.
+
+## Technology Stack
+
+- **Framework**: NestJS 11.x
+- **Language**: TypeScript (ES modules)
+- **Database**: Prisma ORM with SQLite
+- **Validation**: Zod (generated from Prisma schema)
+- **Security**: Helmet, CORS, Rate limiting (@nestjs/throttler)
+
+## Structure
+
+```
+backend/
+├── src/
+│   ├── main.ts                    # NestJS bootstrap
+│   ├── app.module.ts              # Root module
+│   ├── modules/
+│   │   ├── database/              # Prisma service (global)
+│   │   │   ├── database.module.ts
+│   │   │   └── prisma.service.ts
+│   │   ├── mcp/                   # MCP management, discovery, registry
+│   │   │   ├── mcp.module.ts
+│   │   │   ├── mcp.controller.ts
+│   │   │   ├── mcp.service.ts
+│   │   │   ├── mcp-discovery.service.ts
+│   │   │   ├── mcp-seed.service.ts
+│   │   │   └── mcp-registry.ts
+│   │   ├── profiles/              # Profile CRUD
+│   │   │   ├── profiles.module.ts
+│   │   │   ├── profiles.controller.ts
+│   │   │   └── profiles.service.ts
+│   │   ├── oauth/                 # OAuth for MCP servers (not user auth)
+│   │   │   ├── oauth.module.ts
+│   │   │   ├── oauth.controller.ts
+│   │   │   └── oauth.service.ts
+│   │   ├── proxy/                 # MCP proxy endpoints
+│   │   │   ├── proxy.module.ts
+│   │   │   ├── proxy.controller.ts
+│   │   │   └── proxy.service.ts
+│   │   ├── health/                # Health checks
+│   │   │   ├── health.module.ts
+│   │   │   └── health.controller.ts
+│   │   └── debug/                 # Debug logs
+│   │       ├── debug.module.ts
+│   │       ├── debug.controller.ts
+│   │       └── debug.service.ts
+│   ├── common/
+│   │   ├── filters/               # Exception filters
+│   │   │   └── all-exceptions.filter.ts
+│   │   ├── interceptors/          # Logging, timeout
+│   │   │   ├── logging.interceptor.ts
+│   │   │   └── timeout.interceptor.ts
+│   │   └── pipes/                 # Validation
+│   │       └── validation.pipe.ts
+│   └── config/                    # App configuration
+│       ├── app.config.ts
+│       └── database.config.ts
+├── test/
+│   └── *.e2e-spec.ts             # E2E tests
+├── nest-cli.json
+├── tsconfig.json
+├── tsconfig.build.json
+└── package.json
+```
+
+## Key Modules
+
+### DatabaseModule (Global)
+- **Purpose**: Provides PrismaService globally to all modules
+- **Files**: `database.module.ts`, `prisma.service.ts`
+- **Usage**: Inject `PrismaService` in any service
+
+```typescript
+@Injectable()
+export class MyService {
+  constructor(private readonly prisma: PrismaService) {}
+
+  async findAll() {
+    return this.prisma.myModel.findMany();
+  }
+}
+```
+
+### McpModule
+- **Purpose**: MCP package discovery, seeding, registry, and management
+- **Key Services**:
+  - `McpDiscoveryService`: Scans dependencies for `mcpPackage: true`
+  - `McpSeedService`: Creates database records for discovered packages
+  - `McpRegistry`: In-memory registry of MCP packages
+  - `McpService`: CRUD operations for MCP servers
+
+### ProfilesModule
+- **Purpose**: Profile CRUD operations
+- **Endpoints**:
+  - `GET /api/profiles` - List all profiles
+  - `GET /api/profiles/:id` - Get profile by ID
+  - `POST /api/profiles` - Create profile
+  - `PUT /api/profiles/:id` - Update profile
+  - `DELETE /api/profiles/:id` - Delete profile
+  - `POST /api/profiles/:id/servers` - Add server to profile
+  - `DELETE /api/profiles/:id/servers/:serverId` - Remove server from profile
+
+### ProxyModule
+- **Purpose**: MCP proxy endpoints for Claude/AI clients
+- **Endpoints**:
+  - `POST /api/mcp/:profileName` - MCP JSON-RPC endpoint for profile
+
+### OAuthModule
+- **Purpose**: OAuth 2.1 flows for MCP servers (not user authentication)
+- **Endpoints**:
+  - `GET /api/oauth/authorize/:serverId` - Start OAuth flow
+  - `GET /api/oauth/callback` - OAuth callback
+
+### HealthModule
+- **Purpose**: Health check endpoints
+- **Endpoints**:
+  - `GET /api/health` - Health status
+
+### DebugModule
+- **Purpose**: Debug logging for MCP traffic
+- **Endpoints**:
+  - `GET /api/debug/logs` - Get debug logs
+
+## API Endpoints Summary
+
+| Method | Endpoint | Description |
+|--------|----------|-------------|
+| GET | `/api/health` | Health check |
+| GET | `/api/profiles` | List profiles |
+| GET | `/api/profiles/:id` | Get profile |
+| POST | `/api/profiles` | Create profile |
+| PUT | `/api/profiles/:id` | Update profile |
+| DELETE | `/api/profiles/:id` | Delete profile |
+| POST | `/api/profiles/:id/servers` | Add server to profile |
+| DELETE | `/api/profiles/:id/servers/:serverId` | Remove server |
+| GET | `/api/mcp-servers` | List MCP servers |
+| GET | `/api/mcp-servers/available` | List available MCP packages |
+| GET | `/api/mcp-servers/:id` | Get MCP server |
+| POST | `/api/mcp-servers` | Create MCP server |
+| PUT | `/api/mcp-servers/:id` | Update MCP server |
+| DELETE | `/api/mcp-servers/:id` | Delete MCP server |
+| GET | `/api/mcp-servers/:id/tools` | Get server tools |
+| GET | `/api/mcp-servers/:id/status` | Get server status |
+| POST | `/api/mcp/:profileName` | MCP proxy endpoint |
+| GET | `/api/oauth/authorize/:serverId` | Start OAuth |
+| GET | `/api/oauth/callback` | OAuth callback |
+| GET | `/api/debug/logs` | Debug logs |
+
+## Development
+
+### Running
+
+```bash
+# Development with hot-reload
+pnpm dev:backend
+
+# Build
+pnpm --filter backend build
+
+# Production
+pnpm --filter backend start:prod
+```
+
+### Adding a New Module
+
+1. **Create module folder**:
+   ```bash
+   mkdir -p src/modules/my-feature
+   ```
+
+2. **Create files**:
+   ```typescript
+   // my-feature.module.ts
+   import { Module } from '@nestjs/common';
+   import { MyFeatureController } from './my-feature.controller';
+   import { MyFeatureService } from './my-feature.service';
+
+   @Module({
+     controllers: [MyFeatureController],
+     providers: [MyFeatureService],
+     exports: [MyFeatureService],
+   })
+   export class MyFeatureModule {}
+
+   // my-feature.controller.ts
+   import { Controller, Get, Post, Body } from '@nestjs/common';
+   import { MyFeatureService } from './my-feature.service';
+
+   @Controller('my-feature')
+   export class MyFeatureController {
+     constructor(private readonly service: MyFeatureService) {}
+
+     @Get()
+     findAll() {
+       return this.service.findAll();
+     }
+   }
+
+   // my-feature.service.ts
+   import { Injectable } from '@nestjs/common';
+   import { PrismaService } from '../database/prisma.service';
+
+   @Injectable()
+   export class MyFeatureService {
+     constructor(private readonly prisma: PrismaService) {}
+
+     async findAll() {
+       return this.prisma.myModel.findMany();
+     }
+   }
+   ```
+
+3. **Register in app.module.ts**:
+   ```typescript
+   import { MyFeatureModule } from './modules/my-feature/my-feature.module';
+
+   @Module({
+     imports: [
+       // ... other modules
+       MyFeatureModule,
+     ],
+   })
+   export class AppModule {}
+   ```
+
+### Using Prisma
+
+```typescript
+import { Injectable } from '@nestjs/common';
+import { PrismaService } from '../database/prisma.service';
+
+@Injectable()
+export class MyService {
+  constructor(private readonly prisma: PrismaService) {}
+
+  // Find all
+  async findAll() {
+    return this.prisma.profile.findMany({
+      include: { mcpServers: true },
+    });
+  }
+
+  // Find one
+  async findById(id: string) {
+    return this.prisma.profile.findUnique({
+      where: { id },
+    });
+  }
+
+  // Create
+  async create(data: { name: string; description?: string }) {
+    return this.prisma.profile.create({
+      data,
+    });
+  }
+
+  // Update
+  async update(id: string, data: { name?: string; description?: string }) {
+    return this.prisma.profile.update({
+      where: { id },
+      data,
+    });
+  }
+
+  // Delete
+  async delete(id: string) {
+    return this.prisma.profile.delete({
+      where: { id },
+    });
+  }
+}
+```
+
+### Validation with Zod
+
+Use generated Zod schemas from Prisma:
+
+```typescript
+import { ProfileCreateInputSchema } from '@dxheroes/local-mcp-database';
+
+// In controller or service
+const validated = ProfileCreateInputSchema.parse(input);
+```
+
+## Dependencies
+
+### Core NestJS
+
+- `@nestjs/common` - Common utilities
+- `@nestjs/core` - Core framework
+- `@nestjs/platform-express` - Express adapter
+- `@nestjs/config` - Configuration
+- `@nestjs/throttler` - Rate limiting
+
+### Database
+
+- `@dxheroes/local-mcp-database` - Prisma client and Zod schemas
+
+### MCP
+
+- `@modelcontextprotocol/sdk` - MCP SDK
+- `@dxheroes/local-mcp-core` - Core types and abstractions
+
+### Security
+
+- `helmet` - Security headers
+- `compression` - Response compression
+
+## Environment Variables
+
+| Variable | Default | Description |
+|----------|---------|-------------|
+| `PORT` | `3001` | Server port |
+| `NODE_ENV` | `development` | Environment |
+| `CORS_ORIGINS` | `http://localhost:3000` | Allowed CORS origins |
+| `DATABASE_URL` | `file:~/.local-mcp-gateway-data/...` | Prisma database URL |
+
+## MCP Package Discovery
+
+On module initialization (`onModuleInit`), the `McpModule`:
+
+1. **Discovers packages**: `McpDiscoveryService` scans all dependencies
+2. **Filters MCP packages**: Looks for `"mcpPackage": true` in package.json
+3. **Registers packages**: Loads and registers in `McpRegistry`
+4. **Seeds database**: `McpSeedService` creates records for new packages
+
+```
+[McpModule] Initializing MCP Module...
+[McpModule] Discovered 1 MCP packages
+[McpModule] Registered: Gemini Deep Research (gemini-deep-research)
+[McpModule] MCP Module initialization complete
+```
+
+## Testing
+
+```bash
+# Run tests
+pnpm --filter backend test
+
+# Watch mode
+pnpm --filter backend test:watch
+
+# E2E tests
+pnpm --filter backend test:e2e
+```
+
+## Important Notes
+
+- **No user authentication**: All endpoints are public
+- **OAuth is for MCP servers**: Not user login
+- **Prisma for database**: Type-safe queries
+- **NestJS modules**: Clean separation of concerns
+- **Auto-discovery**: MCP packages are auto-discovered on startup

package/CHANGELOG.md

@@ -0,0 +1,60 @@
+# Changelog
+
+## [0.3.1](https://github.com/DXHeroes/local-mcp-gateway/compare/backend-v0.3.0...backend-v0.3.1) (2026-01-13)
+
+
+### Bug Fixes
+
+* update package names in Dockerfiles and add apps to npm publish ([1928dba](https://github.com/DXHeroes/local-mcp-gateway/commit/1928dba89a6a9134fdadf5bcacd3a0617cee74dc))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @dxheroes/local-mcp-core bumped to 0.3.1
+    * @dxheroes/local-mcp-database bumped to 0.3.1
+    * @dxheroes/mcp-gemini-deep-research bumped to 0.3.1
+  * devDependencies
+    * @dxheroes/local-mcp-config bumped to 0.3.1
+
+## [0.3.0](https://github.com/DXHeroes/local-mcp-gateway/compare/backend-v0.2.0...backend-v0.3.0) (2026-01-13)
+
+
+### Miscellaneous
+
+* release 0.3.0 ([9d54f73](https://github.com/DXHeroes/local-mcp-gateway/commit/9d54f73a2d4cd49903ad353e131740513915d681))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @dxheroes/local-mcp-core bumped to 0.3.0
+    * @dxheroes/local-mcp-database bumped to 0.3.0
+    * @dxheroes/mcp-gemini-deep-research bumped to 0.3.0
+  * devDependencies
+    * @dxheroes/local-mcp-config bumped to 0.3.0
+
+## [0.2.0](https://github.com/DXHeroes/local-mcp-gateway/compare/backend-v0.2.0...backend-v0.2.0) (2026-01-13)
+
+
+### Features
+
+* initial release v0.2.0 ([35645f8](https://github.com/DXHeroes/local-mcp-gateway/commit/35645f81a4f291ae4b3e9f68657cd96db41b8a16))
+
+
+### Bug Fixes
+
+* add GET handler for MCP endpoint to return usage info instead of 404 ([d7273bb](https://github.com/DXHeroes/local-mcp-gateway/commit/d7273bbc66c18f0d30690483b10f41bc6382863c))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @dxheroes/local-mcp-core bumped to 0.2.1
+    * @dxheroes/local-mcp-database bumped to 0.2.1
+    * @dxheroes/mcp-gemini-deep-research bumped to 0.2.1
+  * devDependencies
+    * @dxheroes/local-mcp-config bumped to 0.2.1

package/Dockerfile

@@ -0,0 +1,71 @@
+# Build stage
+FROM node:22-alpine AS builder
+
+WORKDIR /app
+
+# Install pnpm
+RUN corepack enable && corepack prepare pnpm@latest --activate
+
+# Copy workspace files
+COPY pnpm-workspace.yaml pnpm-lock.yaml package.json turbo.json tsconfig.json ./
+COPY packages ./packages
+COPY apps/backend ./apps/backend
+COPY mcp-servers ./mcp-servers
+
+# Install dependencies
+RUN pnpm install --frozen-lockfile
+
+# Generate Prisma client
+RUN pnpm --filter @dxheroes/local-mcp-database prisma:generate
+
+# Build all required packages
+RUN pnpm --filter @dxheroes/local-mcp-backend... build
+
+# Production stage
+FROM node:22-alpine AS runner
+
+WORKDIR /app
+
+# Install pnpm for production
+RUN corepack enable && corepack prepare pnpm@latest --activate
+
+# Create data directory
+RUN mkdir -p /data
+
+# Copy package files for production install
+COPY --from=builder /app/package.json /app/pnpm-workspace.yaml /app/pnpm-lock.yaml ./
+COPY --from=builder /app/packages/core/package.json ./packages/core/
+COPY --from=builder /app/packages/database/package.json ./packages/database/
+COPY --from=builder /app/apps/backend/package.json ./apps/backend/
+COPY --from=builder /app/mcp-servers ./mcp-servers
+
+# Copy built files
+COPY --from=builder /app/packages/core/dist ./packages/core/dist
+COPY --from=builder /app/packages/database/dist ./packages/database/dist
+COPY --from=builder /app/packages/database/src/generated ./packages/database/src/generated
+COPY --from=builder /app/apps/backend/dist ./apps/backend/dist
+
+# Copy Prisma schema and migrations (required for migrate deploy)
+COPY --from=builder /app/packages/database/prisma ./packages/database/prisma
+
+# Install production dependencies only
+RUN pnpm install --frozen-lockfile --prod
+
+# Set environment
+ENV NODE_ENV=production
+ENV PORT=3001
+
+# Expose port
+EXPOSE 3001
+
+# Health check
+HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \
+  CMD wget --no-verbose --tries=1 --spider http://localhost:3001/api/health || exit 1
+
+# Copy and set up entrypoint script
+COPY apps/backend/docker-entrypoint.sh /app/docker-entrypoint.sh
+RUN chmod +x /app/docker-entrypoint.sh
+
+# Start the application via entrypoint (runs prisma db push first)
+WORKDIR /app
+ENTRYPOINT ["/app/docker-entrypoint.sh"]

package/LICENSE

@@ -0,0 +1,94 @@
+Elastic License 2.0
+
+Copyright (c) 2025 DX Heroes CZ s.r.o.
+
+## Acceptance
+
+By using the software, you agree to all of the terms and conditions below.
+
+## Copyright License
+
+The licensor grants you a non-exclusive, royalty-free, worldwide,
+non-sublicensable, non-transferable license to use, copy, distribute,
+make available, and prepare derivative works of the software, in each
+case subject to the limitations and conditions below.
+
+## Limitations
+
+You may not provide the software to third parties as a hosted or managed
+service, where the service provides users with access to any substantial
+set of the features or functionality of the software.
+
+You may not move, change, disable, or circumvent the license key
+functionality in the software, and you may not remove or obscure any
+functionality in the software that is protected by the license key.
+
+You may not alter, remove, or obscure any licensing, copyright, or other
+notices of the licensor in the software. Any use of the licensor's
+trademarks is subject to applicable law.
+
+## Patents
+
+The licensor grants you a license, under any patent claims the licensor
+can license, or becomes able to license, to make, have made, use, sell,
+offer for sale, import and have imported the software, in each case
+subject to the limitations and conditions in this license. This license
+does not cover any patent claims that you cause to be infringed by
+modifications or additions to the software. If you or your company make
+any written claim that the software infringes or contributes to
+infringement of any patent, your patent license for the software granted
+under these terms ends immediately. If your company makes such a claim,
+your patent license ends immediately for work on behalf of your company.
+
+## Notices
+
+You must ensure that anyone who gets a copy of any part of the software
+from you also gets a copy of these terms.
+
+If you modify the software, you must include in any modified copies of
+the software prominent notices stating that you have modified the software.
+
+## No Other Rights
+
+These terms do not imply any licenses other than those expressly granted
+in these terms.
+
+## Termination
+
+If you use the software in violation of these terms, such use is not
+licensed, and your licenses will automatically terminate. If the licensor
+provides you with a notice of your violation, and you cease all violation
+of this license no later than 30 days after you receive that notice, your
+licenses will be reinstated retroactively. However, if you violate these
+terms after such reinstatement, any additional violation of these terms
+will cause your licenses to terminate automatically and permanently.
+
+## No Liability
+
+AS FAR AS THE LAW ALLOWS, THE SOFTWARE COMES AS IS, WITHOUT ANY WARRANTY
+OR CONDITION, AND THE LICENSOR WILL NOT BE LIABLE TO YOU FOR ANY DAMAGES
+ARISING OUT OF THESE TERMS OR THE USE OR NATURE OF THE SOFTWARE, UNDER
+ANY KIND OF LEGAL CLAIM.
+
+## Definitions
+
+The "licensor" is the entity offering these terms, and the "software" is
+the software the licensor makes available under these terms, including
+any portion of it.
+
+"You" refers to the individual or entity agreeing to these terms.
+
+"Your company" is any legal entity, sole proprietorship, or other kind of
+organization that you work for, plus all organizations that have control
+over, are under the control of, or are under common control with that
+organization. "Control" means ownership of substantially all the assets
+of an entity, or the power to direct its management and policies by vote,
+contract, or otherwise. Control can be direct or indirect.
+
+"Your licenses" are all the licenses granted to you for the software
+under these terms.
+
+"Use" means anything you do with the software requiring one of your
+licenses.
+
+"Trademark" means trademarks, service marks, and similar rights.

package/dist/app.module.js

@@ -0,0 +1,72 @@
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+/**
+ * Root Application Module
+ *
+ * Configures all NestJS modules for the Local MCP Gateway.
+ * No authentication module - immediate access to all features.
+ */ import { Module } from "@nestjs/common";
+import { ConfigModule } from "@nestjs/config";
+import { ThrottlerModule } from "@nestjs/throttler";
+import appConfig from "./config/app.config.js";
+import databaseConfig from "./config/database.config.js";
+import { DatabaseModule } from "./modules/database/database.module.js";
+import { DebugModule } from "./modules/debug/debug.module.js";
+import { HealthModule } from "./modules/health/health.module.js";
+import { McpModule } from "./modules/mcp/mcp.module.js";
+import { OAuthModule } from "./modules/oauth/oauth.module.js";
+import { ProfilesModule } from "./modules/profiles/profiles.module.js";
+import { ProxyModule } from "./modules/proxy/proxy.module.js";
+export class AppModule {
+}
+AppModule = _ts_decorate([
+    Module({
+        imports: [
+            // Configuration
+            ConfigModule.forRoot({
+                isGlobal: true,
+                load: [
+                    appConfig,
+                    databaseConfig
+                ],
+                envFilePath: [
+                    '../../.env',
+                    '.env.local',
+                    '.env'
+                ]
+            }),
+            // Rate limiting
+            ThrottlerModule.forRoot([
+                {
+                    name: 'short',
+                    ttl: 1000,
+                    limit: 10
+                },
+                {
+                    name: 'medium',
+                    ttl: 10000,
+                    limit: 50
+                },
+                {
+                    name: 'long',
+                    ttl: 60000,
+                    limit: 200
+                }
+            ]),
+            // Core modules (no authentication - immediate access)
+            DatabaseModule,
+            McpModule,
+            ProfilesModule,
+            OAuthModule,
+            ProxyModule,
+            HealthModule,
+            DebugModule
+        ]
+    })
+], AppModule);
+
+//# sourceMappingURL=app.module.js.map