mojulo 0.0.0 → 0.1.0

package/README.md

@@ -1,6 +1,55 @@
-# mojulo
+# Mojulo
 
-Placeholder — the real `mojulo` release will expose a stdio MCP server for
-building self-hosted bots from inside Claude Code or Claude Desktop.
+**MCP server for building self-hosted chatbots from inside Claude.** Describe the bot you want — Mojulo compiles it into a portable Docker artifact you own. Conversations live in the bot's own SQLite, hash-chained turn by turn. The MCP surface composes alongside your other MCPs (Drive, Gmail, your CRM), so the build/deploy/operate loop runs entirely inside a Claude session.
 
-Track progress at https://github.com/zombico/mojulo.
+## Quickstart
+
+```bash
+# 1. Wire mojulo into Claude (Claude Code or Claude Desktop)
+claude mcp add mojulo --command "npx -y mojulo"
+
+# 2. Configure at least one LLM provider key
+npx -y mojulo-config set anthropic sk-ant-...
+
+# 3. In a Claude session, ask:
+#    "build me a triage bot for my dental practice"
+```
+
+Compiled bots land in `~/.mojulo/data/artifacts/`. Run them with `docker compose up`, or set a Fly token (`mojulo-config set fly fo1_...`) and ask Claude to deploy to the cloud.
+
+On first connect, Claude calls `forward_context` to read mojulo's glossary, lifecycle, and tool index — so the session orients itself before doing anything.
+
+## Tools at a glance
+
+- **Build** — `infer_intent`, `generate_*`, `save_modular_bot`. Describe a bot in free text; the tools sequence themselves into a compiled zip.
+- **Operate** — `get_deployment`, `query_conversations`, `get_conversation`, `query_submissions`, `verify_chain`. Read what each connected bot has captured. Transcript content never leaves the bot's SQLite — these tools proxy through.
+- **Fleet** — `fleet_query_conversations`, `fleet_analytics_summary`, `verify_fleet_chains`. Cross-bot rollups; same posture, just batched.
+- **Catalysts** — `list_catalysts`, `recommend_catalysts`, `get_catalyst`. Curated workflow recipes Claude turns into local skills in your `.claude/skills/`.
+
+## Catalysts shipped
+
+`qualify-lead-to-crm` · `appointment-to-calendar` · `submission-to-ticket` · `submissions-to-warehouse` · `document-extract-to-store` · `scan-conversations-for-signal` · `knowledge-gap-miner` · `weekly-submissions-digest` · `conversations-to-channel-digest`
+
+Claude reads one, binds it to a destination MCP you already have installed, and writes a local skill. The catalyst is the nucleation point; the resulting skill is yours.
+
+## Dashboard
+
+There's a browser dashboard (Settings UI, in-app builder, wizard) but it's not shipped in this npm package yet — clone the repo to run it:
+
+```bash
+git clone https://github.com/zombico/mojulo.git
+cd mojulo/control && cp .env.example .env && npm install && npm run dev
+```
+
+The MCP surface in the npm package covers the build/deploy/operate loop end-to-end without it.
+
+## More
+
+- Full repo and docs: <https://github.com/zombico/mojulo>
+- Architecture: [ARCHITECTURE.md](https://github.com/zombico/mojulo/blob/main/ARCHITECTURE.md)
+- MCP integration: [docs/mcp-integration.md](https://github.com/zombico/mojulo/blob/main/docs/mcp-integration.md)
+- Catalysts: [docs/catalysts.md](https://github.com/zombico/mojulo/blob/main/docs/catalysts.md)
+
+## License
+
+[Apache License 2.0](https://github.com/zombico/mojulo/blob/main/LICENSE)

package/lib/audit-logger-new.js

@@ -0,0 +1,11 @@
+// Lite writes audit events to stdout for transparency during local ops.
+// Fleet-wide audit trails live in the Full product.
+
+export async function auditLog(event, _request) {
+  if (process.env.MOJULO_LITE_AUDIT_QUIET === '1') return;
+  try {
+    console.log('[audit]', JSON.stringify({ ts: Date.now(), ...event }));
+  } catch {
+    // ignore
+  }
+}

package/lib/auth/gate.js

@@ -0,0 +1,25 @@
+import { redirect } from 'next/navigation';
+import { ApiKeyRepository } from '@/lib/db/repositories/apiKeys';
+
+/**
+ * requireLLMKey
+ *
+ * Gate for pages that depend on an LLM provider key being configured.
+ * Mojulo-Lite's builders (wizard + chat builder) all call out to the user's LLM
+ * (to compose RAG summaries, generate forms, infer intent, etc.), so they
+ * are unusable until a key has been saved on /settings.
+ *
+ * Use from any server component:
+ *
+ *   export default async function Page() {
+ *     await requireLLMKey();
+ *     // ...render
+ *   }
+ */
+export async function requireLLMKey() {
+  const keys = await ApiKeyRepository.findByUserId('local');
+  if (!keys || keys.length === 0) {
+    redirect('/settings?gate=no-key');
+  }
+  return keys;
+}

package/lib/auth/service.js

@@ -0,0 +1,17 @@
+// Single-user auth stub for Mojulo-Lite.
+// Every request is treated as the same local operator. The user object shape
+// matches what the builder/deploy code expects (id + email).
+
+const LOCAL_USER = {
+  id: 'local',
+  email: 'local@mojulo-lite',
+  name: 'Local Operator',
+};
+
+export async function getCurrentUser() {
+  return LOCAL_USER;
+}
+
+export async function requireAuth() {
+  return LOCAL_USER;
+}

package/lib/auth/session.js

@@ -0,0 +1,63 @@
+// HMAC-signed session token, used by middleware.js + /api/auth/*.
+// The token is `<exp>.<base64url(hmac(password, exp))>`. Signing with the
+// password itself means rotating CONTROL_PLANE_PASSWORD invalidates every
+// outstanding session with no extra bookkeeping.
+//
+// Web Crypto only — middleware runs on the Edge runtime.
+
+const enc = new TextEncoder();
+
+export const SESSION_COOKIE = 'mojulo_session';
+export const SESSION_TTL_SECONDS = 60 * 60 * 24 * 7;
+
+export function isAuthEnabled() {
+  return !!(process.env.CONTROL_PLANE_USER && process.env.CONTROL_PLANE_PASSWORD);
+}
+
+async function hmacKey(password) {
+  return crypto.subtle.importKey(
+    'raw',
+    enc.encode(password),
+    { name: 'HMAC', hash: 'SHA-256' },
+    false,
+    ['sign', 'verify'],
+  );
+}
+
+function b64urlEncode(buf) {
+  const bytes = new Uint8Array(buf);
+  let bin = '';
+  for (let i = 0; i < bytes.length; i++) bin += String.fromCharCode(bytes[i]);
+  return btoa(bin).replaceAll('+', '-').replaceAll('/', '_').replaceAll('=', '');
+}
+
+function b64urlDecode(s) {
+  const pad = s.length % 4 === 0 ? '' : '='.repeat(4 - (s.length % 4));
+  const bin = atob(s.replaceAll('-', '+').replaceAll('_', '/') + pad);
+  const buf = new Uint8Array(bin.length);
+  for (let i = 0; i < bin.length; i++) buf[i] = bin.charCodeAt(i);
+  return buf.buffer;
+}
+
+export async function createSessionToken(password, ttlSeconds = SESSION_TTL_SECONDS) {
+  const exp = Math.floor(Date.now() / 1000) + ttlSeconds;
+  const key = await hmacKey(password);
+  const sig = await crypto.subtle.sign('HMAC', key, enc.encode(String(exp)));
+  return `${exp}.${b64urlEncode(sig)}`;
+}
+
+export async function verifySessionToken(token, password) {
+  if (!token || typeof token !== 'string') return false;
+  const dot = token.indexOf('.');
+  if (dot === -1) return false;
+  const expStr = token.slice(0, dot);
+  const sigStr = token.slice(dot + 1);
+  const exp = Number.parseInt(expStr, 10);
+  if (!Number.isFinite(exp) || exp < Math.floor(Date.now() / 1000)) return false;
+  try {
+    const key = await hmacKey(password);
+    return await crypto.subtle.verify('HMAC', key, b64urlDecode(sigStr), enc.encode(expStr));
+  } catch {
+    return false;
+  }
+}