shadowdaoandClaude Opus 4.7
077d0a0825
End-to-end Phase 1 of shared-memory: a logged-in Authentik user can sign into the Web UI (/me debug page), and an MCP client with an Authentik- issued bearer token can call memory.write / memory.list / memory.get / memory.delete plus project.identify against /api/mcp. Stack: - Next.js 15 (App Router) + React 19 + TypeScript, pnpm workspaces - Drizzle ORM + Postgres 16 + pgvector + pg_trgm - Auth.js v5 with Authentik provider (Web UI) - jose + Authentik JWKS for MCP bearer-token validation - JSON-RPC 2.0 dispatcher implementing the MCP wire protocol over plain HTTP POST (hand-rolled to fit Next.js App Router; switches to SSE in a later phase if server-initiated events are needed) - bge-small embeddings sidecar deferred to Phase 2; the schema already reserves the vector(384) column + IVFFlat index, FTS via a STORED tsvector column, and the visibility enum (private/shared/team) so cross-user memory sharing can be added without a future migration Deployment supports two modes (set in .env, never committed): - Behind an external reverse proxy (HAProxy / nginx / Cloudflare Tunnel / Traefik) — DEFAULT; the app exposes APP_PORT on the host with X-Forwarded-* trusted, no in-container TLS - Built-in TLS via Caddy — opt-in with `docker compose --profile tls up` Discovery endpoint at /.well-known/oauth-protected-resource (RFC 9728) points MCP clients at the Authentik authorization server after a 401. README walks through both Authentik providers (Web UI + MCP resource server), the audience scope mapping, redirect URIs, and includes a worked HAProxy config snippet. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
36 lines
1.0 KiB
TypeScript
36 lines
1.0 KiB
TypeScript
import Link from "next/link";
|
|
import { auth } from "@/auth";
|
|
|
|
export const dynamic = "force-dynamic";
|
|
|
|
export default async function HomePage() {
|
|
const session = await auth();
|
|
|
|
return (
|
|
<main className="container">
|
|
<h1>shared-memory</h1>
|
|
<p className="muted">
|
|
Self-hosted MCP server providing shared persistent memory across Claude Code sessions.
|
|
</p>
|
|
|
|
{session?.user ? (
|
|
<p>
|
|
Signed in as <strong>{session.user.email ?? session.user.name ?? session.user.id}</strong>{" "}
|
|
— <Link href="/me">view session</Link>
|
|
</p>
|
|
) : (
|
|
<p>
|
|
<Link href="/api/auth/signin">Sign in with Authentik</Link>
|
|
</p>
|
|
)}
|
|
|
|
<hr style={{ borderColor: "var(--border)", margin: "2rem 0" }} />
|
|
<h2>MCP endpoint</h2>
|
|
<p className="muted">
|
|
Connect a Claude Code session to <code>/api/mcp</code> with a bearer token
|
|
issued by Authentik for this resource. See the README for setup steps.
|
|
</p>
|
|
</main>
|
|
);
|
|
}
|