🛠️ Mako Refinery

A secure, modern AI chat platform featuring passwordless authentication and access to 28+ free AI models. Built with security-first principles and cutting-edge web technologies.

🌟 Features

🔐 Security First

• WebAuthn Passkeys - No passwords, just biometrics and hardware keys
• Zero-Knowledge Architecture - Your data stays yours
• Security Headers - CSRF, XSS, and clickjacking protection
• Encrypted Storage - All sensitive data encrypted at rest

🤖 AI-Powered

• 28+ Free AI Models - Qwen3, DeepSeek R1, Gemma 2, Llama 3.2, and more
• Real-time Streaming - Live responses as they're generated
• Context Aware - Maintains conversation history
• Model Switching - Choose the right AI for each task

🎨 Modern Experience

• Responsive Design - Perfect on desktop, tablet, and mobile
• Dark/Light Themes - Automatic preference detection
• Admin Dashboard - Complete user and system management
• Developer Tools - Comprehensive debugging utilities

🚀 Quick Start

For Users

1. Visit https://makorefinery.com
2. Register with your passkey (first user becomes admin)
3. Start chatting with 28+ free AI models
4. Optionally add a passphrase for additional security

For Developers

# Check system status
./scripts/dev-tools.sh db-inspect stats

# Start development server
./scripts/dev-tools.sh start

# Create test admin user
./scripts/dev-tools.sh backdoor

# View all available tools
./scripts/dev-tools.sh

📊 Current Status

• ✅ Core Application - Next.js 15 with App Router, fully configured
• ✅ Authentication System - WebAuthn passkey implementation complete
• ✅ Admin Panel - Complete dashboard with user/model/log management
• ✅ Database - SQLite with Prisma ORM, 28 AI models pre-loaded
• ✅ Security - Comprehensive protection and audit-ready
• ✅ Development Tools - Full debugging and management suite
• ✅ Production Ready - Apache SSL proxy, optimized configuration

🛠️ Development Tools

The project includes a comprehensive suite of development tools:

• ./scripts/dev-tools.sh - Main development script with all tools
• Database Management - Inspect, seed, clear, and reset database
• Authentication Testing - Test auth flows and create backdoor users
• Model Management - Load 28 AI models from JSON configuration
• Development Server - Start/stop with hot reload support

See DEVELOPMENT.md for complete tool documentation.

🏗️ Architecture

Tech Stack

• Frontend: Next.js 15 with App Router, TypeScript, Tailwind CSS
• UI Components: shadcn/ui with custom theming
• Database: SQLite with Prisma ORM (PostgreSQL production-ready)
• Authentication: WebAuthn (passkeys) with secure session management
• AI Integration: OpenRouter API with 28+ free models
• Deployment: Apache reverse proxy with SSL (Let's Encrypt ready)

Database Schema

• Users - Profile and authentication data
• Sessions - Secure session management
• Authenticators - WebAuthn passkey credentials
• Models - AI model metadata and configuration
• ChatLogs - Conversation history and usage tracking
• ApiKeys - Encrypted service credentials

🔧 Configuration

Environment Variables

DATABASE_URL="file:./dev.db"
NODE_ENV="development"

AI Models

Models are configured in models/free-models.json with:

• Model names and descriptions
• Context window sizes (8K - 163K tokens)
• Release dates and OpenRouter links
• Cost information (all free tier)

🎯 Roadmap

Phase 1: Core Chat Features (In Progress)

• ✅ WebAuthn passkey authentication
• ✅ Admin panel and user management
• ✅ Model management system
• 🚧 Chat interface with model selector
• 🚧 Streaming AI responses
• 📋 Chat history and persistence

Phase 2: Enhanced Features (Planned)

• 📋 Real-time notifications
• 📋 Usage analytics and monitoring
• 📋 API rate limiting
• 📋 Bulk model operations
• 📋 Export/import functionality

Phase 3: Production & Scale (Future)

• 📋 PostgreSQL migration
• 📋 Redis session store
• 📋 Container deployment
• 📋 Monitoring integration
• 📋 Performance optimization

🔒 Security

Mako Refinery is built with security-first principles:

• 🔐 WebAuthn Passkeys - Hardware-backed biometric authentication
• 🛡️ Zero Passwords - No password storage or transmission
• 🔒 Encrypted Storage - All sensitive data encrypted at rest
• 🚫 CSRF Protection - Cross-site request forgery prevention
• 🔗 Security Headers - XSS, clickjacking, and injection protection
• 🍪 Secure Sessions - HTTP-only, secure, SameSite cookies
• 📊 Security Audit - Regular security reviews and vulnerability scanning

See SECURITY.md for our complete security policy and reporting procedures.

📖 Documentation

• SECURITY.md - Security policy and vulnerability reporting
• LICENSE - MIT License terms and conditions
• DEVELOPMENT.md - Complete developer guide and tools
• AI-HANDOFF.md - Quick context for AI assistants
• ADMIN.md - Admin panel documentation
• TODO/TODO.md - Project roadmap and status
• scripts/README.md - Development script documentation

🤝 Contributing

We welcome contributions! Please:

1. Fork the repository
2. Create a feature branch (git checkout -b feature/amazing-feature)
3. Test your changes with our development tools
4. Commit with clear, descriptive messages
5. Push to your branch (git push origin feature/amazing-feature)
6. Open a Pull Request

Development Workflow

1. Setup: Clone repo and install dependencies
2. Check Status: ./scripts/dev-tools.sh db-inspect stats
3. Start Development: ./scripts/dev-tools.sh start
4. Make Changes: Edit with hot reload
5. Test: Use debugging tools and backdoor access
6. Commit: Clean, descriptive Git commits

📞 Support & Contact

• 🐛 Bug Reports: GitHub Issues
• 🔒 Security Issues: Security Advisories
• 💬 General Contact: [email protected]
• 🌐 Website: https://makorefinery.com
• 📄 Documentation: Check individual .md files for specific topics

📄 License

This project is licensed under the MIT License - see the LICENSE file for details.

🙋 Author

Timothy John Michael (saintpetejackboy, Deadend Deafchild)

• GitHub: @saintpetejackboy
• Email: [email protected]

🚀 Ready for production! Secure, fast, and feature-complete.

Built with ❤️ and a commitment to security and user privacy.