[{"_1":2,"_430":-5,"_431":-5},"loaderData",{"_3":4,"_92":93,"_358":359},"root",{"_5":6,"_35":36,"_65":66},"ctx",{"_7":8,"_23":-5,"_24":25,"_26":27,"_28":22,"_29":22,"_30":22,"_31":32,"_33":22,"_34":22},"auth",{"_9":10,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":-5,"_20":-5,"_21":22},"tokenType","session_token","sessionClaims","sessionId","sessionStatus","userId","actor","orgId","orgRole","orgSlug","orgPermissions","factorVerificationAge","isAuthenticated",false,"user","preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","notificationCount",0,"flagDenols","isTeamOrgMember","ENV",{"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":52,"_53":54,"_55":56,"_57":58,"_59":60,"_61":62,"_63":64},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","VAL_RUNTIME_NAME","prod","RENDER_GIT_COMMIT","5c349ef9e7d7333839a0634dd567aae2d49623a6","RENDER_GIT_BRANCH","main","CLERK_PUBLISHABLE_KEY","pk_live_Y2xlcmsudmFsLnRvd24k","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","API_URL","https://api.val.town","clerkState",{"_67":68},"__internal_clerk_state",{"_69":70,"_71":46,"_72":73,"_74":73,"_75":22,"_76":73,"_77":73,"_78":73,"_79":73,"_80":81,"_90":22,"_91":22},"__clerk_ssr_state",{"_9":10,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":-5,"_20":-5,"_21":22},"__publishableKey","__proxyUrl","","__domain","__isSatellite","__signInUrl","__signUpUrl","__afterSignInUrl","__afterSignUpUrl","__clerk_debug",{"_82":22,"_21":22,"_83":73,"_84":85,"_86":73,"_87":46,"_88":22,"_89":73},"isSignedIn","proxyUrl","reason","session-token-and-uat-missing","message","publishableKey","isSatellite","domain","__telemetryDisabled","__telemetryDebug","routes/_app.x.$handle.$name",{"_94":95,"_96":97,"_98":44,"_99":100,"_101":102,"_103":104,"_152":153,"_333":334,"_335":336,"_347":348,"_226":349,"_352":-5,"_353":-5,"_354":22,"_355":22,"_356":357},"handle","drewmcdonald","name","inbox","branchName","path",".vtignore","version",177,"project",{"_105":106,"_96":97,"_107":108,"_109":-5,"_110":22,"_111":112,"_113":-5,"_114":-5,"_14":115,"_116":117,"_118":119,"_120":119,"_121":-5,"_122":32,"_16":123,"_124":125,"_126":125,"_127":128,"_129":128,"_130":128,"_131":125,"_132":125,"_23":133,"_136":137,"_139":140,"_151":22},"id","a6919e76-ad18-11f0-8387-0224a6c84d84","createdAt",["D",1760898183380],"deletedAt","legacyEnvVars","privacy","public","description","imageUrl","b8db9d60-1994-11f0-a97f-49be2029e0a3","pinnedFileId","e16e438c-ad18-11f0-b4c5-0224a6c84d84","pinPreview",true,"pinMigrated","screenshotVersion","likeCount","5affebf8-2371-44b9-a6da-146d4a0e1f13","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_94":95,"_134":135},"profileImageUrl","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18ydmtBUlRqVEEwb1lKTWo3UHNHN25IZlo0UFYifQ","org",{"_94":95,"_138":135,"_14":115},"avatar","branch",{"_101":141,"_96":44,"_105":142,"_143":106,"_144":-5,"_145":-5,"_146":-5,"_147":-5,"_148":-5,"_149":97,"_150":95},374,"a6921cac-ad18-11f0-8387-0224a6c84d84","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","isOwned","tree",[154,184,221,230,239,248,257,267,276,285,294,305,315,324],{"_105":155,"_96":156,"_157":158,"_159":-5,"_160":142,"_161":162,"_163":119,"_107":164,"_101":32,"_165":166,"_167":-5,"_168":22,"_169":-5,"_170":171,"_99":183},"dcd5bc0a-ae90-11f0-acf5-0224a6c84d84","mcp","fileId","dcd5bcbe-ae90-11f0-acf5-0224a6c84d84","parentId","branchId","branchVersion",173,"latest",["D",1761059765190],"fileType","directory","content","deleted","label","children",[172],{"_105":173,"_96":174,"_157":175,"_159":158,"_160":142,"_161":176,"_163":22,"_107":177,"_101":178,"_165":179,"_167":180,"_168":22,"_169":-5,"_170":181,"_99":182},"dcf836fe-ae90-11f0-b817-0224a6c84d84","mcp.ts","08da214e-adbd-11f0-9481-0224a6c84d84",174,["D",1761059765404],72,"script","import { McpServer } from \"npm:@modelcontextprotocol/sdk/server/mcp.js\";\nimport { hc } from \"npm:hono/client\";\nimport type { AppType } from \"./httpHandler.ts\";\nimport { inboxRecordSchema } from \"./types.ts\";\nimport { z } from \"npm:zod@^3.23.8\";\nimport { clientConfig } from \"./clientConfig.ts\";\n\n// Create typed Hono client\nconst client = hc(clientConfig.endpoint, {\n headers: {\n \"Authorization\": `Bearer ${clientConfig.token}`,\n },\n});\n\nconst server = new McpServer({\n name: \"inbox\",\n version: \"0.1.0\",\n});\n\n// Tool: Read Inbox\nserver.registerTool(\"read_inbox\", {\n title: \"Read Inbox\",\n description: \"Return all unprocessed records currently in the inbox\",\n inputSchema: {},\n}, async () => {\n const res = await client.api.inbox.$get();\n if (!res.ok) {\n throw new Error(`Failed to fetch inbox: ${res.status} ${res.statusText}`);\n }\n const records = await res.json();\n const output = { records };\n return {\n content: [{ type: \"text\", text: JSON.stringify(output, null, 2) }],\n };\n});\n\n// Tool: Add Record\nserver.registerTool(\"add_record\", {\n title: \"Add Record to Inbox\",\n description:\n \"Create a new inbox record. Matches the core InboxRecord schema.\",\n inputSchema: {\n raw: z.string().describe(\"The raw content of the record\"),\n summary: z.string().optional().describe(\n \"A brief summary of the content of the record\",\n ),\n from: z.string().optional().describe(\n \"The original sender or source of the record\",\n ),\n subject: z.string().optional().describe(\"Subject line or title\"),\n date: z.coerce.date().optional().describe(\"Date the record was received\"),\n attachmentBlobIds: z.array(z.string()).default([]).describe(\n \"Array of blob IDs for attachments (defaults to empty array)\",\n ),\n },\n outputSchema: {\n id: z.string().describe(\"The UUID of the created record\"),\n },\n}, async (params) => {\n // Validate against core schema before saving\n const validatedRecord = inboxRecordSchema.parse(params);\n\n const res = await client.api.record.$post({\n json: validatedRecord,\n });\n\n if (!res.ok) {\n throw new Error(`Failed to create record: ${res.status} ${res.statusText}`);\n }\n\n const response = await res.json();\n const output = { id: response.key };\n return {\n content: [{ type: \"text\", text: JSON.stringify(output, null, 2) }],\n structuredContent: output,\n };\n});\n\n// Tool: Mark Processed\nserver.registerTool(\"mark_record_processed\", {\n title: \"Mark Processed\",\n description: \"Mark an inbox record as processed by ID\",\n inputSchema: {\n id: z.string().describe(\"The record ID to mark as processed\"),\n },\n outputSchema: {\n success: z.boolean(),\n },\n}, async (params) => {\n const res = await client.api.record[\":id\"].processed.$patch({\n param: { id: params.id },\n });\n\n const success = res.ok;\n const output = { success };\n return {\n content: [{ type: \"text\", text: JSON.stringify(output, null, 2) }],\n structuredContent: output,\n };\n});\n\n// Tool: Get Attachments\nserver.registerTool(\"get_record_attachments\", {\n title: \"Get Record Attachments\",\n description: \"Get attachment metadata for a record by ID\",\n inputSchema: {\n recordId: z.string().describe(\"The record ID to get attachments for\"),\n },\n outputSchema: {\n recordId: z.string(),\n attachments: z.array(z.object({\n blobId: z.string(),\n filename: z.string(),\n contentType: z.string(),\n size: z.number(),\n })),\n },\n}, async (params) => {\n try {\n const res = await client.api.record[\":recordId\"].attachments.$get({\n param: { recordId: params.recordId },\n });\n\n if (!res.ok) {\n throw new Error(\n `Failed to get attachments: ${res.status} ${res.statusText}`,\n );\n }\n\n const response = await res.json();\n const output = {\n recordId: params.recordId,\n attachments: response.attachments,\n };\n return {\n content: [{ type: \"text\", text: JSON.stringify(output, null, 2) }],\n structuredContent: output,\n };\n } catch (error) {\n const output = {\n recordId: params.recordId,\n attachments: [],\n };\n return {\n content: [{\n type: \"text\",\n text: `Error: ${\n error instanceof Error ? error.message : String(error)\n }\\n${JSON.stringify(output, null, 2)}`,\n }],\n structuredContent: output,\n isError: true,\n };\n }\n});\n\n// Tool: Download Attachment\nserver.registerTool(\"download_record_attachment\", {\n title: \"Download Record Attachment\",\n description:\n \"Download attachment data by blob ID and record ID. Returns base64-encoded binary data.\",\n inputSchema: {\n recordId: z.string().describe(\"The record ID\"),\n blobId: z.string().describe(\"The blob ID of the attachment to download\"),\n },\n outputSchema: {\n filename: z.string(),\n contentType: z.string(),\n size: z.number(),\n data: z.string().describe(\"Base64-encoded attachment data\"),\n },\n}, async (params) => {\n try {\n const res = await client.api.record[\":recordId\"].attachments[\":blobId\"]\n .$get({\n param: { recordId: params.recordId, blobId: params.blobId },\n });\n\n if (!res.ok) {\n throw new Error(\n `Failed to download attachment: ${res.status} ${res.statusText}`,\n );\n }\n\n const filename = res.headers.get(\"Content-Disposition\")\n ?.match(/filename=\"(.+)\"/)?.[1] || \"unknown\";\n const contentType = res.headers.get(\"Content-Type\") ||\n \"application/octet-stream\";\n const data = await res.arrayBuffer();\n\n // Convert ArrayBuffer to base64\n const bytes = new Uint8Array(data);\n const binary = Array.from(bytes, (byte) => String.fromCharCode(byte)).join(\n \"\",\n );\n const base64 = btoa(binary);\n\n const output = {\n filename,\n contentType,\n size: data.byteLength,\n data: base64,\n };\n\n return {\n content: [{ type: \"text\", text: JSON.stringify(output, null, 2) }],\n structuredContent: output,\n };\n } catch (error) {\n const output = {\n filename: \"\",\n contentType: \"\",\n size: 0,\n data: \"\",\n };\n return {\n content: [{\n type: \"text\",\n text: `Error: ${\n error instanceof Error ? error.message : String(error)\n }\\n${JSON.stringify(output, null, 2)}`,\n }],\n structuredContent: output,\n isError: true,\n };\n }\n});\n\nexport { server };\n",[],[156,174],[156],{"_105":185,"_96":186,"_157":187,"_159":-5,"_160":142,"_161":188,"_163":119,"_107":189,"_101":32,"_165":166,"_167":-5,"_168":22,"_169":-5,"_170":190,"_99":220},"dcc66570-ae90-11f0-811e-0224a6c84d84","server","dcc66656-ae90-11f0-811e-0224a6c84d84",172,["D",1761059765089],[191,201,210],{"_105":192,"_96":193,"_157":194,"_159":187,"_160":142,"_161":195,"_163":22,"_107":196,"_101":197,"_165":179,"_167":198,"_168":22,"_169":-5,"_170":199,"_99":200},"dd0a57c6-ae90-11f0-9f89-0224a6c84d84","InboxService.ts","e160826a-ad18-11f0-b2ed-0224a6c84d84",176,["D",1761059765445],25,"import { validator } from \"npm:hono/validator\";\nimport { eq, isNull, sql } from \"npm:drizzle-orm\";\nimport { db, inboxRecords } from \"./db.ts\";\nimport AttachmentService from \"./AttachmentService.ts\";\nimport {\n type InboxRecord,\n inboxRecordSchema,\n type InboxRecordWithId,\n} from \"./types.ts\";\n\n// Re-export for backward compatibility\nexport { type InboxRecord, inboxRecordSchema, type InboxRecordWithId };\n\nexport const validateInboxRecord = validator(\"json\", (value, c) => {\n const parsed = inboxRecordSchema.safeParse(value);\n if (!parsed.success) {\n return c.json({ error: \"Invalid request\", details: parsed.error }, 400);\n }\n return parsed.data;\n});\n\nconst InboxService = {\n async save(data: InboxRecord): Promise {\n const id = crypto.randomUUID();\n const textData = JSON.stringify(data);\n\n await db.insert(inboxRecords).values({\n id,\n record: textData,\n });\n\n return id;\n },\n\n async markProcessed(id: string): Promise {\n const result = await db\n .update(inboxRecords)\n .set({\n processed_at: new Date().toISOString(),\n })\n .where(eq(inboxRecords.id, id))\n .returning({ id: inboxRecords.id });\n\n return result.length > 0;\n },\n\n async retrieveUnprocessed(): Promise {\n const rows = await db\n .select()\n .from(inboxRecords)\n .where(isNull(inboxRecords.processed_at));\n\n return rows.map((row) => {\n const parsed = JSON.parse(row.record);\n return { ...inboxRecordSchema.parse(parsed), id: row.id };\n });\n },\n\n async getById(id: string): Promise {\n const rows = await db\n .select()\n .from(inboxRecords)\n .where(eq(inboxRecords.id, id));\n\n if (rows.length === 0) {\n return null;\n }\n\n const parsed = JSON.parse(rows[0].record);\n return inboxRecordSchema.parse(parsed);\n },\n\n /** Delete records processed more than 30 days ago */\n async hardDeleteProcessedRecords(): Promise {\n const rows = await db\n .select()\n .from(inboxRecords)\n .where(\n sql`${inboxRecords.processed_at} IS NOT NULL AND ${inboxRecords.processed_at} <= date('now', '-30 days')`,\n );\n\n const records = rows.map((row) => {\n const parsed = JSON.parse(row.record);\n return { ...inboxRecordSchema.parse(parsed), id: row.id };\n });\n\n const recordIds = records.map((record) => record.id);\n const attachmentKeys = records.flatMap((record) =>\n record.attachmentBlobIds || []\n );\n\n await Promise.all([\n ...recordIds.map((id) =>\n db.delete(inboxRecords).where(eq(inboxRecords.id, id))\n ),\n ...attachmentKeys.map((key) => AttachmentService.delete(key)),\n ]);\n },\n} as const;\n\nexport default InboxService;\n",[],[186,193],{"_105":202,"_96":203,"_157":204,"_159":187,"_160":142,"_161":102,"_163":22,"_107":205,"_101":206,"_165":179,"_167":207,"_168":22,"_169":-5,"_170":208,"_99":209},"dd105068-ae90-11f0-9940-0224a6c84d84","auth.ts","e187d1c6-ad18-11f0-b841-0224a6c84d84",["D",1761059765409],2,"import type { Context } from \"npm:hono\";\nimport { serverConfig } from \"./serverConfig.ts\";\n\nexport async function bearerAuthMiddleware(\n c: Context,\n next: () => Promise,\n) {\n const expectedToken = serverConfig.token;\n\n if (!expectedToken) {\n return c.json({ error: \"Server configuration error\" }, 500);\n }\n\n const authHeader = c.req.header(\"Authorization\");\n if (!authHeader || !authHeader.startsWith(\"Bearer \")) {\n return c.json({ error: \"Unauthorized\" }, 401);\n }\n\n const token = authHeader.substring(7);\n if (token !== expectedToken) {\n return c.json({ error: \"Unauthorized\" }, 401);\n }\n\n await next();\n}\n\nexport function isAllowedSender({ from }: Email): boolean {\n // Extract email address from 'Full Name ' or just 'email@domain'\n const match = from.match(/<([^>]+)>/);\n const emailAddress = match ? match[1] : from;\n\n const isAllowed = serverConfig.allowlist.includes(emailAddress);\n\n if (!isAllowed) {\n console.error(\n `Email from ${from} (parsed: ${emailAddress}) not in allow list`,\n { from },\n );\n }\n\n return isAllowed;\n}\n",[],[186,203],{"_105":211,"_96":212,"_157":213,"_159":187,"_160":142,"_161":214,"_163":22,"_107":215,"_101":216,"_165":179,"_167":217,"_168":22,"_169":-5,"_170":218,"_99":219},"dcffeaac-ae90-11f0-81b4-0224a6c84d84","db.ts","33e17d6c-ad1b-11f0-87af-0224a6c84d84",175,["D",1761059765418],6,"import { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { sql } from \"npm:drizzle-orm\";\nimport { drizzle } from \"npm:drizzle-orm/libsql\";\nimport { sqliteTable, text } from \"npm:drizzle-orm/sqlite-core\";\n\nexport const inboxRecords = sqliteTable(\"inbox_records\", {\n id: text(\"id\").primaryKey(),\n record: text(\"record\").notNull(),\n created_at: text(\"created_at\").default(sql`current_timestamp`),\n processed_at: text(\"processed_at\"),\n});\n\nexport const db = drizzle(sqlite as any);\n\nexport type InboxRecordRow = typeof inboxRecords.$inferSelect;\nexport type InboxRecordInsert = typeof inboxRecords.$inferInsert;\n",[],[186,212],[186],{"_105":222,"_96":100,"_157":223,"_159":-5,"_160":142,"_161":224,"_163":119,"_107":225,"_101":206,"_165":226,"_167":227,"_168":22,"_169":-5,"_170":228,"_99":229},"33f59da6-ad1b-11f0-b734-0224a6c84d84","e17e0452-ad18-11f0-a853-0224a6c84d84",26,["D",1760899279407],"file",".env\n.git\n.vscode\n.cursor\n.DS_Store\n.zed\nnode_modules\nvendor\n",[],[100],{"_105":231,"_96":232,"_157":233,"_159":-5,"_160":142,"_161":234,"_163":22,"_107":235,"_101":32,"_165":179,"_167":236,"_168":22,"_169":-5,"_170":237,"_99":238},"e1a2f6ae-ad18-11f0-aeab-0224a6c84d84","AttachmentService.ts","e1a2f73a-ad18-11f0-aeab-0224a6c84d84",16,["D",1760898282151],"import { blob } from \"https://esm.town/v/std/blob\";\n\nexport interface FileMetadata {\n filename: string;\n contentType: string;\n size: number;\n}\n\nexport interface StoredAttachment {\n filename: string;\n contentType: string;\n size: number;\n data: ArrayBuffer;\n}\n\nconst getFileMetadata = (file: File): FileMetadata => {\n return {\n filename: file.name,\n contentType: file.type,\n size: file.size,\n };\n};\n\nconst AttachmentService = {\n async save(file: File): Promise {\n const key = crypto.randomUUID();\n const metadata = getFileMetadata(file);\n await Promise.all([\n blob.set(key, await file.arrayBuffer()),\n blob.setJSON(`${key}:meta`, metadata),\n ]);\n return key;\n },\n\n async get(key: string): Promise {\n const [data, metadata] = await Promise.all([\n blob.get(key),\n blob.getJSON(`${key}:meta`) as Promise,\n ]);\n\n if (!data || !metadata) {\n return null;\n }\n\n return {\n filename: metadata.filename,\n contentType: metadata.contentType,\n size: metadata.size,\n data: await data.arrayBuffer(),\n };\n },\n\n async delete(key: string): Promise {\n await Promise.all([\n blob.delete(key),\n blob.delete(`${key}:meta`),\n ]);\n },\n} as const;\n\nexport default AttachmentService;\n",[],[232],{"_105":240,"_96":241,"_157":242,"_159":-5,"_160":142,"_161":243,"_163":119,"_107":244,"_101":32,"_165":226,"_167":245,"_168":22,"_169":-5,"_170":246,"_99":247},"e18fd70e-ad18-11f0-9137-0224a6c84d84","CLAUDE.md","e18fd7c2-ad18-11f0-9137-0224a6c84d84",13,["D",1760898282257],"# Claude Code Instructions for Obsidian Inbox\n\n## Project Overview\nSee PROJECT.md for full architecture. This is a Val.town service providing a temporary inbox for content before Obsidian vault processing.\n\n## Quick Context\n- **Platform**: Val.town (Deno serverless)\n- **Stack**: TypeScript, Hono, SQLite, Blob storage\n- **Purpose**: Buffer layer between input sources (email/HTTP) and Obsidian clients\n- **Current State**: Core internals focused, client integration TBD\n\n## AI Assistant Guidelines\n\n### When Working on This Project\n\n1. **Consult PROJECT.md first** for architecture and data flow\n2. **Consult .cursor/rules/townie.mdc** for Val.town platform specifics\n3. **Keep it simple** - this is a buffer service, not a full application\n4. **Manual testing only** - use Val.town web interface\n\n### Common Tasks\n\n**Schema Changes**:\n- Update `inboxRecordSchema` in InboxService.ts\n- Change SQLite table name (append `_2`, `_3`, etc.) - don't use ALTER TABLE\n- Update handlers if record structure changes\n\n**Adding Endpoints**:\n- Modify httpHandler.ts (Hono app)\n- Add bearer auth middleware to protected routes\n- Return proper status codes (200/201/400/401/404/500)\n\n**Modifying Processing Logic**:\n- Email processing → emailHandler.ts\n- HTTP processing → httpHandler.ts\n- Keep services (InboxService, AttachmentService) as pure data operations\n\n### Key Constraints\n\n- **No external services** - use Val.town stdlib (sqlite, blob, email)\n- **No binary files in project** - only text files allowed\n- **Environment variables** - never hardcode secrets, use `Deno.env.get()`\n- **Val.town quirks** - redirects need manual Response, not Response.redirect()\n- **Imports** - always use `https://esm.sh` for npm packages\n\n### Code Style\n\n- TypeScript with explicit types on public interfaces\n- Functional style preferred over classes\n- Keep functions small and focused\n- Export const objects for services (e.g., `InboxService`, `AttachmentService`)\n- Avoid try-catch unless you have a clear local resolution\n\n### Error Handling Philosophy\n\n- Let errors bubble up with full context\n- Don't catch just to log and re-throw\n- Use Zod validation for input schemas\n- Return descriptive error messages in HTTP responses\n\n### Testing Approach\n\nTest manually via Val.town web interface:\n- Email trigger: send test emails from allowlisted addresses\n- HTTP API: use curl/Postman with bearer token\n- Focus on edge cases: malformed input, auth failures, missing data\n\n### TODO Items to Consider\n\nWhen suggesting improvements, be aware of known TODOs:\n- Error handling and retry logic currently not implemented\n- Client architecture still being finalized\n- Consider push notifications vs polling for clients\n\n### File Navigation\n\nCore files you'll modify most:\n- `InboxService.ts` - data persistence layer\n- `emailHandler.ts` - email input processing\n- `httpHandler.ts` - HTTP API endpoints\n- `auth.ts` - authentication logic\n- `AttachmentService.ts` - blob storage operations\n\nSee PROJECT.md for full file reference and component descriptions.\n\n## Platform-Specific Reminders\n\nThis codebase runs on Val.town, which means:\n- Deno runtime (not Node.js)\n- Serverless execution model\n- Built-in SQLite and blob storage\n- Email sending/receiving capabilities\n- No filesystem access (use blob storage or SQLite)\n- All dependencies via HTTPS imports\n\nRefer to `.cursor/rules/townie.mdc` for comprehensive Val.town development guidelines including standard library usage, common gotchas, and best practices.\n",[],[241],{"_105":249,"_96":250,"_157":251,"_159":-5,"_160":142,"_161":252,"_163":22,"_107":253,"_101":206,"_165":226,"_167":254,"_168":22,"_169":-5,"_170":255,"_99":256},"4c7fac78-ae8c-11f0-b5ca-0224a6c84d84","MCP-README.md","26bdc4fc-ae8c-11f0-96dc-0224a6c84d84",170,["D",1761057805042],"# Obsidian Inbox MCP Server\n\nThis MCP (Model Context Protocol) server allows Claude Desktop to interact with your Obsidian Inbox service.\n\n## Architecture\n\nThe MCP server runs **locally on your machine** and communicates with your **remote Val.town API**. This keeps the MCP logic separate from the serverless service and allows for better local development and control.\n\n```\nClaude Desktop → Local MCP Server → Remote Val.town API → SQLite/Blob Storage\n```\n\n## Setup\n\n### 1. Deploy the Val.town Service\n\nFirst, ensure your Val.town service is deployed and accessible. You'll need:\n- The public URL of your Val.town service (e.g., `https://yourusername-inbox.val.town`)\n- An API token (set as `API_TOKEN` in Val.town secrets)\n\n### 2. Configure Environment Variables\n\nThe MCP server requires two environment variables:\n- `INBOX_API_URL`: The base URL of your deployed Val.town service\n- `INBOX_API_TOKEN`: The API bearer token for authentication\n\n### 3. Add to Claude Desktop Config\n\nEdit your Claude Desktop configuration file:\n\n**macOS**: `~/Library/Application Support/Claude/claude_desktop_config.json`\n**Windows**: `%APPDATA%\\Claude\\claude_desktop_config.json`\n\nAdd the following configuration:\n\n```json\n{\n \"mcpServers\": {\n \"obsidian-inbox\": {\n \"command\": \"deno\",\n \"args\": [\n \"run\",\n \"--allow-net\",\n \"--allow-env\",\n \"https://esm.town/v/drewmcdonald/inbox/mcp.ts\"\n ],\n \"env\": {\n \"INBOX_API_URL\": \"https://yourusername-inbox.val.town\",\n \"INBOX_API_TOKEN\": \"your-api-token-here\"\n }\n }\n }\n}\n```\n\n**Note**: The MCP script is hosted on Val.town, so Deno will fetch and run it directly from the URL. No local installation needed!\n\n### 4. Restart Claude Desktop\n\nAfter updating the configuration, restart Claude Desktop for the changes to take effect.\n\n## Available Tools\n\nOnce configured, Claude will have access to the following tools:\n\n### `read_inbox`\nRetrieve all unprocessed records from the inbox.\n\n**Example**: \"Show me what's in my inbox\"\n\n### `add_record`\nCreate a new inbox record.\n\n**Parameters**:\n- `raw` (required): The raw content\n- `summary` (optional): Brief summary\n- `from` (optional): Source identifier\n- `subject` (optional): Subject/title\n- `date` (optional): When received\n- `attachmentBlobIds` (optional): Array of blob IDs\n\n**Example**: \"Add a note to my inbox: 'Remember to review the Q4 budget'\"\n\n### `mark_record_processed`\nMark a record as processed by ID.\n\n**Parameters**:\n- `id` (required): Record UUID\n\n**Example**: \"Mark record abc-123 as processed\"\n\n### `get_record_attachments`\nGet attachment metadata for a record.\n\n**Parameters**:\n- `recordId` (required): Record UUID\n\n**Example**: \"What attachments does record abc-123 have?\"\n\n### `download_record_attachment`\nDownload attachment data (base64-encoded).\n\n**Parameters**:\n- `recordId` (required): Record UUID\n- `blobId` (required): Blob UUID\n\n**Example**: \"Download the attachment xyz-456 from record abc-123\"\n\n## Troubleshooting\n\n### \"Missing required environment variables\"\nMake sure `INBOX_API_URL` and `INBOX_API_TOKEN` are set in your Claude Desktop config.\n\n### \"API request failed: 401\"\nCheck that your `INBOX_API_TOKEN` matches the `API_TOKEN` secret in your Val.town service.\n\n### \"API request failed: 404\"\nVerify your `INBOX_API_URL` is correct and the service is deployed.\n\n### MCP server not appearing in Claude\n1. Ensure Deno is installed: `deno --version`\n2. Verify the URL `https://esm.town/v/drewmcdonald/inbox/mcp.ts` is accessible\n3. Check Claude Desktop logs for errors\n4. Restart Claude Desktop after config changes\n\n## Development\n\n### Testing the MCP Server Locally\n\nYou can test the MCP server without Claude Desktop:\n\n```bash\n# Set environment variables\nexport INBOX_API_URL=\"https://yourusername-inbox.val.town\"\nexport INBOX_API_TOKEN=\"your-token\"\n\n# Run the MCP server\ndeno run --allow-net --allow-env mcp.ts\n```\n\n### Modifying the MCP Server\n\nThe MCP server is in `mcp.ts` and uses:\n- `apiClient.ts` - HTTP client for the remote API\n- `types.ts` - Shared TypeScript types between MCP and API\n\nWhen you modify the API endpoints or schemas, update `types.ts` to keep the client and server in sync.\n\n## Architecture Notes\n\n**Why run locally?**\n- Easier development and debugging\n- No serverless constraints (can maintain state if needed)\n- Better authentication handling (token stored locally)\n- Separation of concerns (MCP logic vs API logic)\n\n**Type sharing**\nAll TypeScript types are defined in `types.ts` and imported by both the API (`InboxService.ts`, `httpHandler.ts`) and the MCP client (`mcp.ts`, `apiClient.ts`). This ensures type safety across the boundary.\n\n**No breaking changes to Val.town service**\nThe HTTP API remains unchanged. The MCP server is just a client that calls those endpoints. You can still use the API directly with curl, Postman, or other HTTP clients.\n",[],[250],{"_105":258,"_96":259,"_157":260,"_159":-5,"_160":142,"_161":261,"_163":22,"_107":262,"_101":263,"_165":226,"_167":264,"_168":22,"_169":-5,"_170":265,"_99":266},"2677405e-ae8c-11f0-8f4a-0224a6c84d84","PROJECT.md","e159175a-ad18-11f0-867e-0224a6c84d84",165,["D",1761057741216],1,"# Obsidian Inbox\n\nA Val.town service that acts as a temporary inbox for raw information before it's processed into an Obsidian vault.\n\n## Purpose\n\nThis service provides a buffer layer between various information sources (email, HTTP POST) and Obsidian vault management systems. It:\n- Receives raw information from multiple sources\n- Stores unprocessed items with attachments\n- Provides a simple API for clients to retrieve and process items\n- Manages the lifecycle of inbox items (unprocessed → processed → deleted)\n\n## Architecture\n\n### Platform\n- **Runtime**: Deno on Val.town serverless environment\n- **Database**: SQLite (Val.town standard library)\n- **Storage**: Blob storage (Val.town standard library)\n- **Language**: TypeScript\n\n### Core Components\n\n#### 1. Input Handlers\n- **emailHandler.ts**: Email trigger that processes incoming emails\n - Validates sender against allowlist\n - Extracts email content and metadata\n - Saves attachments to blob storage\n - Creates inbox record\n \n- **httpHandler.ts**: HTTP API using Hono framework\n - `GET /` - Retrieve all unprocessed items\n - `POST /` - Create new inbox item (for non-email sources)\n - `PATCH /:id/processed` - Mark item as processed (returns 404 if record not found)\n - `GET /:recordId/attachments` - Get attachment metadata for a record\n\n#### 2. Services\n- **InboxService.ts**: Core data persistence for inbox records\n - Stores records in SQLite with UUID keys\n - Tracks processing state (unprocessed/processed timestamp)\n - Provides lifecycle operations (save, markProcessed, retrieveUnprocessed)\n - Auto-deletes processed records after 30 days\n\n- **AttachmentService.ts**: Blob storage for email attachments\n - Stores binary data and metadata separately\n - Supports get/save/delete operations\n - Uses UUID keys for blob identification\n\n- **auth.ts**: Authentication and authorization\n - Bearer token auth for HTTP endpoints (via `API_TOKEN` env var)\n - Email sender allowlist (via `INCOMING_EMAIL_ALLOWLIST` env var)\n\n### Data Model\n\n#### InboxRecord\n```typescript\n{\n raw: string, // Full text content (email body, etc.)\n summary?: string, // Optional summary\n from: string, // Source identifier (email address, etc.)\n subject: string, // Subject line or title\n date: Date, // When item was received\n attachmentBlobIds: string[] // References to blob storage\n}\n```\n\nStored in SQLite table `inbox_records` with:\n- `id` (UUID primary key)\n- `record` (JSON-serialized InboxRecord)\n- `created_at` (timestamp)\n- `processed_at` (nullable timestamp)\n\n#### AttachmentMetadata\n```typescript\n{\n filename: string,\n contentType: string,\n size: number,\n data: ArrayBuffer // The actual binary content\n}\n```\n\nStored in blob storage as:\n- `{uuid}` - binary data\n- `{uuid}:meta` - JSON metadata\n\n## Processing Lifecycle\n\n1. **Ingestion**: Item arrives via email or HTTP POST\n2. **Storage**: Saved to SQLite with `processed_at = null`\n3. **Retrieval**: Client calls `GET /` to fetch unprocessed items\n4. **Processing**: Client transforms item into Obsidian note(s) (outside this service)\n5. **Completion**: Client calls `PATCH /:id/processed` to mark as done\n6. **Cleanup**: After 30 days, processed records auto-delete (including attachments)\n\n**Note**: Clients are responsible for idempotency. If processing fails partway through, the client should handle re-processing gracefully.\n\n## Environment Variables\n\nRequired configuration via Val.town secrets:\n- `API_TOKEN` - Bearer token for HTTP API authentication\n- `INCOMING_EMAIL_ALLOWLIST` - Comma-separated email addresses allowed to send\n\n## Client Integration\n\n### MCP Server (Recommended)\n\nA Model Context Protocol (MCP) server is provided that runs locally and communicates with the remote API. This allows Claude Desktop to interact with your inbox.\n\n**Setup**: See `MCP-README.md` for complete setup instructions.\n\n**Architecture**: The MCP server (`mcp.ts`) runs on your local machine and uses `apiClient.ts` to call the remote Val.town HTTP API. This keeps the MCP logic separate from the serverless service.\n\n### Custom Clients\n\nOther clients that consume this inbox should:\n1. Poll `GET /api/inbox` endpoint for unprocessed items\n2. Get attachment metadata via `GET /api/record/:recordId/attachments`\n3. Download attachments via `GET /api/record/:recordId/attachments/:blobId`\n4. Process items into desired format (e.g., Obsidian notes)\n5. Mark each item as processed via `PATCH /api/record/:id/processed`\n6. Handle failures gracefully (service doesn't retry)\n\nAll API calls require Bearer token authentication.\n\n## Development Guidelines\n\n### Val.town Specifics\n- All code must be compatible with Deno runtime\n- Use `https://esm.sh` for npm imports\n- Storage limited to SQLite + blob storage (no filesystem)\n- See `.cursor/rules/townie.mdc` for full Val.town development guidelines\n\n### Common Modification Patterns\n\n**Schema Changes**:\n- Modify `inboxRecordSchema` in InboxService.ts\n- Change table name (e.g., `inbox_records` → `inbox_records_2`) to avoid migration issues\n- Update both email and HTTP handlers if needed\n\n**Adding Input Sources**:\n1. Create new handler file (e.g., `webhookHandler.ts`)\n2. Map to appropriate trigger type (HTTP, cron, etc.)\n3. Transform input to InboxRecord format\n4. Call `InboxService.save()`\n\n**Processing Logic Changes**:\n- Most business logic lives in handlers (emailHandler.ts, httpHandler.ts)\n- Keep services (InboxService, AttachmentService) focused on data operations\n- Prefer small, focused functions over complex class hierarchies\n\n### Testing\n- Manual testing via Val.town web interface\n- No formal test suite currently\n- Focus on edge cases: malformed emails, missing attachments, auth failures\n\n## Known TODOs\n\n- [ ] Error handling and retry logic for failed processing\n- [ ] Consider webhook/push notification when new items arrive (vs polling)\n- [ ] Finalize client architecture (MCP vs custom scripts)\n- [ ] Evaluate if 30-day retention is appropriate for all use cases\n\n## File Reference\n\n```\n.\n├── emailHandler.ts # Email trigger entry point\n├── httpHandler.ts # HTTP API entry point (Hono app)\n├── InboxService.ts # Inbox record persistence\n├── AttachmentService.ts # Blob storage for attachments\n├── auth.ts # Authentication/authorization\n├── db.ts # Database schema and connection\n├── types.ts # Shared TypeScript types\n├── mcp.ts # MCP server (runs locally)\n├── apiClient.ts # HTTP client for remote API\n├── deno.json # Deno/Val.town configuration\n├── MCP-README.md # MCP server setup guide\n├── mcp-config.example.json # Example Claude Desktop config\n└── .cursor/rules/\n └── townie.mdc # Val.town development guidelines\n```\n\n## Design Principles\n\n1. **Simple buffer**: This is NOT a full email client or note-taking app. It's a temporary holding area.\n2. **Client-side processing**: Complex transformations happen in clients, not here.\n3. **Stateless**: Each inbox item is independent. No complex workflows or state machines.\n4. **Val.town native**: Leverage platform services (SQLite, blob, email) rather than external dependencies.\n5. **Fail-fast**: Let errors bubble up with context rather than hiding them.\n",[],[259],{"_105":268,"_96":269,"_157":270,"_159":-5,"_160":142,"_161":271,"_163":22,"_107":272,"_101":32,"_165":226,"_167":273,"_168":22,"_169":-5,"_170":274,"_99":275},"e17608c4-ad18-11f0-867e-0224a6c84d84","TODO.md","e17609b4-ad18-11f0-867e-0224a6c84d84",10,["D",1760898282101],"# TODO\n\n## High Priority\n\n### Error Handling & Retry\nImplement consistent error handling strategy across the codebase:\n- **Issue**: Email handler catches and sends error emails (inconsistent with \"fail fast\" philosophy)\n- **Decision needed**: Should we retry on transient failures (SQLite lock, network issues)?\n- **Consider**: Dead-letter queue for failed email processing\n- **File**: emailHandler.ts:29-39\n\n### Cleanup Cron Job\nThe `hardDeleteProcessedRecords()` function is implemented but never invoked.\n- **Action**: Create Val.town cron trigger to run cleanup periodically (daily or weekly)\n- **Function**: InboxService.hardDeleteProcessedRecords() (InboxService.ts:88)\n- **Recommendation**: Daily cron at low-traffic time\n\n## Medium Priority\n\n### Attachment Download Endpoint\nCurrent implementation returns attachment metadata. Consider adding direct download capability:\n- **Current**: `GET /:recordId/attachments` → returns JSON list of attachments\n- **Add option 1**: `GET /:recordId/attachments/:blobId` → download specific attachment\n- **Add option 2**: `GET /attachments/:blobId` → direct blob download (simpler)\n- **File**: httpHandler.ts:30-56\n\n### Rate Limiting\nEmail endpoint could be spammed even with allowlist (minor concern for personal use).\n- **Note**: Val.town provides some platform-level rate limiting\n- **Consider**: Application-level throttling for email processing\n- **Consider**: Max emails per sender per time window\n\n## Low Priority\n\n### Attachment Array Ordering\n`attachmentBlobIds` array has no guaranteed order preservation.\n- **Impact**: Low - usually not critical for inbox use case\n- **Consider**: Add explicit ordering metadata if needed\n- **File**: InboxService.ts (inboxRecordSchema)\n\n## Documentation Updates Needed\n\nAfter implementing fixes, update the following:\n- [ ] PROJECT.md - Update API documentation for `GET /:recordId/attachments` endpoint\n- [ ] PROJECT.md - Document that cleanup requires cron setup (once implemented)\n- [ ] CLAUDE.md - Add note about error handling philosophy consistency\n",[],[269],{"_105":277,"_96":278,"_157":279,"_159":-5,"_160":142,"_161":280,"_163":22,"_107":281,"_101":32,"_165":179,"_167":282,"_168":22,"_169":-5,"_170":283,"_99":284},"2693d4b2-ae8c-11f0-8847-0224a6c84d84","apiClient.ts","2693d58e-ae8c-11f0-8847-0224a6c84d84",167,["D",1761057741101],"import type {\n AttachmentMetadata,\n CreateRecordResponse,\n GetAttachmentsResponse,\n InboxRecord,\n InboxRecordWithId,\n MarkProcessedResponse,\n} from \"./types.ts\";\n\nexport interface ApiClientConfig {\n baseUrl: string;\n apiToken: string;\n}\n\nexport class InboxApiClient {\n private baseUrl: string;\n private headers: HeadersInit;\n\n constructor(config: ApiClientConfig) {\n this.baseUrl = config.baseUrl.replace(/\\/$/, \"\"); // Remove trailing slash\n this.headers = {\n \"Authorization\": `Bearer ${config.apiToken}`,\n \"Content-Type\": \"application/json\",\n };\n }\n\n private async fetchJson(\n path: string,\n options: RequestInit = {},\n ): Promise {\n const response = await fetch(`${this.baseUrl}${path}`, {\n ...options,\n headers: {\n ...this.headers,\n ...options.headers,\n },\n });\n\n if (!response.ok) {\n const errorText = await response.text();\n throw new Error(\n `API request failed: ${response.status} ${response.statusText}\\n${errorText}`,\n );\n }\n\n return await response.json();\n }\n\n async getUnprocessed(): Promise {\n return await this.fetchJson(\"/api/inbox\");\n }\n\n async createRecord(record: InboxRecord): Promise {\n const response = await this.fetchJson(\n \"/api/record\",\n {\n method: \"POST\",\n body: JSON.stringify(record),\n },\n );\n return response.key;\n }\n\n async markProcessed(id: string): Promise {\n try {\n await this.fetchJson(\n `/api/record/${id}/processed`,\n {\n method: \"PATCH\",\n },\n );\n return true;\n } catch (error) {\n if (error instanceof Error && error.message.includes(\"404\")) {\n return false;\n }\n throw error;\n }\n }\n\n async getAttachmentMetadata(\n recordId: string,\n ): Promise {\n const response = await this.fetchJson(\n `/api/record/${recordId}/attachments`,\n );\n return response.attachments;\n }\n\n async downloadAttachment(\n recordId: string,\n blobId: string,\n ): Promise<{ filename: string; contentType: string; data: ArrayBuffer }> {\n const response = await fetch(\n `${this.baseUrl}/api/record/${recordId}/attachments/${blobId}`,\n {\n headers: this.headers,\n },\n );\n\n if (!response.ok) {\n throw new Error(\n `Failed to download attachment: ${response.status} ${response.statusText}`,\n );\n }\n\n const filename = response.headers.get(\"Content-Disposition\")\n ?.match(/filename=\"(.+)\"/)?.[1] || \"unknown\";\n const contentType = response.headers.get(\"Content-Type\") ||\n \"application/octet-stream\";\n const data = await response.arrayBuffer();\n\n return { filename, contentType, data };\n }\n}\n",[],[278],{"_105":286,"_96":287,"_157":288,"_159":-5,"_160":142,"_161":289,"_163":22,"_107":290,"_101":32,"_165":226,"_167":291,"_168":22,"_169":-5,"_170":292,"_99":293},"e1671986-ad18-11f0-9137-0224a6c84d84","deno.json","e1671a4e-ad18-11f0-9137-0224a6c84d84",8,["D",1760898282044],"{\n \"$schema\": \"https://raw.githubusercontent.com/denoland/deno/348900b8b79f4a434cab4c74b3bc8d4d2fa8ee74/cli/schemas/config-file.v1.json\",\n \"lock\": false,\n \"compilerOptions\": {\n \"noImplicitAny\": false,\n \"strict\": false,\n \"types\": [\n \"https://www.val.town/types/valtown.d.ts\"\n ],\n \"lib\": [\n \"dom\",\n \"dom.iterable\",\n \"dom.asynciterable\",\n \"deno.ns\",\n \"deno.unstable\"\n ]\n },\n \"lint\": {\n \"files\": {\n \"include\": [\n \"deno:/https/esm.town/**/*\"\n ]\n },\n \"rules\": {\n \"exclude\": [\n \"no-explicit-any\",\n \"no-unversioned-import\",\n \"no-import-prefix\"\n ]\n }\n },\n \"node_modules_dir\": false,\n \"experimental\": {\n \"unstable-node-globals\": true,\n \"unstable-temporal\": true,\n \"unstable-worker-options\": true,\n \"unstable-sloppy-imports\": true\n }\n}\n",[],[287],{"_105":295,"_96":296,"_157":297,"_159":-5,"_160":142,"_161":298,"_163":22,"_107":299,"_101":32,"_165":300,"_167":301,"_168":22,"_169":302,"_170":303,"_99":304},"e19590b8-ad18-11f0-a8a2-0224a6c84d84","emailHandler.ts","e1959162-ad18-11f0-a8a2-0224a6c84d84",14,["D",1760898282374],"email","import { email as sendEmail } from \"https://esm.town/v/std/email?v=13\";\n\nimport { dedent } from \"npm:ts-dedent\";\nimport { isAllowedSender } from \"./auth.ts\";\nimport InboxService from \"./InboxService.ts\";\nimport AttachmentService from \"./AttachmentService.ts\";\n\nconst emailToText = (email: Email): string => {\n return dedent`\n From: ${email.from}\n Subject: ${email.subject}\n\n ${email.text}\n `;\n};\n\nexport default async function emailHandler(email: Email) {\n if (!isAllowedSender(email)) {\n return;\n }\n\n // Process attachments\n const attachmentBlobIds: string[] = [];\n for (const attachment of email.attachments) {\n try {\n const blobId = await AttachmentService.save(attachment);\n attachmentBlobIds.push(blobId);\n } catch (err) {\n console.error(\"Failed to save attachment\", {\n filename: attachment.name,\n error: err instanceof Error ? err.message : String(err),\n });\n // Continue processing - omit failed attachments\n }\n }\n\n try {\n await InboxService.save({\n raw: emailToText(email),\n from: email.from,\n subject: email.subject,\n date: new Date(),\n attachmentBlobIds,\n });\n } catch (err) {\n const error = err instanceof Error ? err.message : String(err);\n console.error(\"Error processing email\", { email, error });\n await sendEmail({\n to: email.from,\n subject: \"Email handler error\",\n text: error,\n });\n }\n}\n","dmcd-inbox",[],[296],{"_105":306,"_96":307,"_157":117,"_159":-5,"_160":142,"_161":308,"_163":22,"_107":309,"_101":310,"_165":311,"_167":312,"_168":22,"_169":302,"_170":313,"_99":314},"26561b68-ae8c-11f0-a4a2-0224a6c84d84","httpHandler.ts",161,["D",1761057741016],22,"http","import { type Context, Hono } from \"npm:hono\";\nimport InboxService, { validateInboxRecord } from \"./InboxService.ts\";\nimport AttachmentService from \"./AttachmentService.ts\";\nimport { bearerAuth } from \"./auth.ts\";\n\nconst app = new Hono().use(bearerAuth);\n\napp.get(\"/api/inbox\", async (c: Context) => {\n const unprocessed = await InboxService.retrieveUnprocessed();\n return c.json(unprocessed, 200);\n});\n\napp.post(\n \"/api/record\",\n validateInboxRecord,\n async (c) => {\n const key = await InboxService.save(c.req.valid(\"json\"));\n return c.json({ key }, 201);\n },\n);\n\napp.patch(\n \"/api/record/:id/processed\",\n async (c) => {\n const key = c.req.param(\"id\");\n const wasUpdated = await InboxService.markProcessed(key);\n\n if (!wasUpdated) {\n return c.json({ error: \"Record not found\" }, 404);\n }\n\n return c.json({ key, processed: true }, 200);\n },\n);\n\napp.get(\"/api/record/:recordId/attachments\", async (c) => {\n const recordId = c.req.param(\"recordId\");\n const record = await InboxService.getById(recordId);\n\n if (!record) {\n return c.json({ error: \"Record not found\" }, 404);\n }\n\n // Return attachment metadata with download links\n const attachments = await Promise.all(\n record.attachmentBlobIds.map(async (blobId) => {\n const attachment = await AttachmentService.get(blobId);\n return attachment\n ? {\n blobId,\n filename: attachment.filename,\n contentType: attachment.contentType,\n size: attachment.size,\n }\n : null;\n }),\n );\n\n return c.json({\n recordId,\n attachments: attachments.filter((a) => a !== null),\n }, 200);\n});\n\napp.get(\"/api/record/:recordId/attachments/:blobId\", async (c) => {\n const blobId = c.req.param(\"blobId\");\n const attachment = await AttachmentService.get(blobId);\n\n if (!attachment) {\n return c.json({ error: \"Attachment not found\" }, 404);\n }\n\n return new Response(attachment.data, {\n headers: {\n \"Content-Type\": attachment.contentType,\n \"Content-Disposition\": `attachment; filename=\"${attachment.filename}\"`,\n \"Content-Length\": attachment.size.toString(),\n },\n });\n});\n\nexport default app.fetch;\n",[],[307],{"_105":316,"_96":317,"_157":318,"_159":-5,"_160":142,"_161":319,"_163":22,"_107":320,"_101":263,"_165":226,"_167":321,"_168":22,"_169":-5,"_170":322,"_99":323},"514d0e62-ae8c-11f0-aa3f-0224a6c84d84","mcp-config.example.json","265dcc82-ae8c-11f0-929e-0224a6c84d84",171,["D",1761057813095],"{\n \"mcpServers\": {\n \"obsidian-inbox\": {\n \"command\": \"deno\",\n \"args\": [\n \"run\",\n \"--allow-net\",\n \"--allow-env\",\n \"https://esm.town/v/drewmcdonald/inbox/mcp.ts\"\n ],\n \"env\": {\n \"INBOX_API_URL\": \"https://your-username-inbox.val.town\",\n \"INBOX_API_TOKEN\": \"your-api-token-here\"\n }\n }\n }\n}\n",[],[317],{"_105":325,"_96":326,"_157":327,"_159":-5,"_160":142,"_161":328,"_163":22,"_107":329,"_101":32,"_165":179,"_167":330,"_168":22,"_169":-5,"_170":331,"_99":332},"26660a64-ae8c-11f0-8f4a-0224a6c84d84","types.ts","26660b22-ae8c-11f0-8f4a-0224a6c84d84",163,["D",1761057741078],"import { z } from \"https://esm.sh/zod@3.23.8\";\n\n// Core inbox record schema shared between API and MCP\nexport const inboxRecordSchema = z.object({\n raw: z.string(),\n summary: z.string().optional(),\n from: z.string().optional(),\n subject: z.string().optional(),\n date: z.coerce.date().optional(),\n attachmentBlobIds: z.array(z.string()),\n});\n\nexport type InboxRecord = z.infer;\nexport type InboxRecordWithId = InboxRecord & { id: string };\n\n// API response types\nexport interface AttachmentMetadata {\n blobId: string;\n filename: string;\n contentType: string;\n size: number;\n}\n\nexport interface GetAttachmentsResponse {\n recordId: string;\n attachments: AttachmentMetadata[];\n}\n\nexport interface CreateRecordResponse {\n key: string;\n}\n\nexport interface MarkProcessedResponse {\n key: string;\n processed: boolean;\n}\n\nexport interface ErrorResponse {\n error: string;\n details?: unknown;\n}\n",[],[326],"files",[154,172,184,191,201,210,221,230,239,248,257,267,276,285,294,305,315,324],"counts",{"_337":32,"_338":263,"_339":32,"_340":341,"_344":345},"pulls","branches","forks","envVars",{"_342":206,"_343":32},"count","emptyCount","connections",{"_342":32,"_346":32},"unfilledCount","contents",[],{"_105":222,"_96":100,"_157":223,"_159":-5,"_160":142,"_161":224,"_163":119,"_107":350,"_101":206,"_165":226,"_167":227,"_168":22,"_169":-5,"_99":351},["D",1760899279407],[100],"upstreamProject","upstreamBranch","emptyEnvVars","isNew","flags",[],"routes/_app.x.$handle.$name.branch.$branch.version.$version.code.$",{"_94":95,"_96":97,"_98":44,"_101":102,"_99":100,"_103":360,"_152":365,"_333":420,"_226":421,"_347":423,"_424":-5,"_425":-5,"_426":-5,"_427":-5,"_428":429,"_340":-5},{"_105":106,"_96":97,"_107":361,"_109":-5,"_110":22,"_111":112,"_113":-5,"_114":-5,"_14":115,"_116":117,"_118":119,"_120":119,"_121":-5,"_122":32,"_16":123,"_124":125,"_126":125,"_127":128,"_129":128,"_130":128,"_131":125,"_132":125,"_23":362,"_136":363,"_139":364,"_151":22},["D",1760898183380],{"_94":95,"_134":135},{"_94":95,"_138":135,"_14":115},{"_101":141,"_96":44,"_105":142,"_143":106,"_144":-5,"_145":-5,"_146":-5,"_147":-5,"_148":-5,"_149":97,"_150":95},[366,372,384,387,390,393,396,399,402,405,408,411,414,417],{"_105":155,"_96":156,"_157":158,"_159":-5,"_160":142,"_161":162,"_163":119,"_107":164,"_101":32,"_165":166,"_167":-5,"_168":22,"_169":-5,"_170":367,"_99":371},[368],{"_105":173,"_96":174,"_157":175,"_159":158,"_160":142,"_161":176,"_163":22,"_107":177,"_101":178,"_165":179,"_167":180,"_168":22,"_169":-5,"_170":369,"_99":370},[],[156,174],[156],{"_105":185,"_96":186,"_157":187,"_159":-5,"_160":142,"_161":188,"_163":119,"_107":189,"_101":32,"_165":166,"_167":-5,"_168":22,"_169":-5,"_170":373,"_99":383},[374,377,380],{"_105":192,"_96":193,"_157":194,"_159":187,"_160":142,"_161":195,"_163":22,"_107":196,"_101":197,"_165":179,"_167":198,"_168":22,"_169":-5,"_170":375,"_99":376},[],[186,193],{"_105":202,"_96":203,"_157":204,"_159":187,"_160":142,"_161":102,"_163":22,"_107":205,"_101":206,"_165":179,"_167":207,"_168":22,"_169":-5,"_170":378,"_99":379},[],[186,203],{"_105":211,"_96":212,"_157":213,"_159":187,"_160":142,"_161":214,"_163":22,"_107":215,"_101":216,"_165":179,"_167":217,"_168":22,"_169":-5,"_170":381,"_99":382},[],[186,212],[186],{"_105":222,"_96":100,"_157":223,"_159":-5,"_160":142,"_161":224,"_163":119,"_107":225,"_101":206,"_165":226,"_167":227,"_168":22,"_169":-5,"_170":385,"_99":386},[],[100],{"_105":231,"_96":232,"_157":233,"_159":-5,"_160":142,"_161":234,"_163":22,"_107":235,"_101":32,"_165":179,"_167":236,"_168":22,"_169":-5,"_170":388,"_99":389},[],[232],{"_105":240,"_96":241,"_157":242,"_159":-5,"_160":142,"_161":243,"_163":119,"_107":244,"_101":32,"_165":226,"_167":245,"_168":22,"_169":-5,"_170":391,"_99":392},[],[241],{"_105":249,"_96":250,"_157":251,"_159":-5,"_160":142,"_161":252,"_163":22,"_107":253,"_101":206,"_165":226,"_167":254,"_168":22,"_169":-5,"_170":394,"_99":395},[],[250],{"_105":258,"_96":259,"_157":260,"_159":-5,"_160":142,"_161":261,"_163":22,"_107":262,"_101":263,"_165":226,"_167":264,"_168":22,"_169":-5,"_170":397,"_99":398},[],[259],{"_105":268,"_96":269,"_157":270,"_159":-5,"_160":142,"_161":271,"_163":22,"_107":272,"_101":32,"_165":226,"_167":273,"_168":22,"_169":-5,"_170":400,"_99":401},[],[269],{"_105":277,"_96":278,"_157":279,"_159":-5,"_160":142,"_161":280,"_163":22,"_107":281,"_101":32,"_165":179,"_167":282,"_168":22,"_169":-5,"_170":403,"_99":404},[],[278],{"_105":286,"_96":287,"_157":288,"_159":-5,"_160":142,"_161":289,"_163":22,"_107":290,"_101":32,"_165":226,"_167":291,"_168":22,"_169":-5,"_170":406,"_99":407},[],[287],{"_105":295,"_96":296,"_157":297,"_159":-5,"_160":142,"_161":298,"_163":22,"_107":299,"_101":32,"_165":300,"_167":301,"_168":22,"_169":302,"_170":409,"_99":410},[],[296],{"_105":306,"_96":307,"_157":117,"_159":-5,"_160":142,"_161":308,"_163":22,"_107":309,"_101":310,"_165":311,"_167":312,"_168":22,"_169":302,"_170":412,"_99":413},[],[307],{"_105":316,"_96":317,"_157":318,"_159":-5,"_160":142,"_161":319,"_163":22,"_107":320,"_101":263,"_165":226,"_167":321,"_168":22,"_169":-5,"_170":415,"_99":416},[],[317],{"_105":325,"_96":326,"_157":327,"_159":-5,"_160":142,"_161":328,"_163":22,"_107":329,"_101":32,"_165":179,"_167":330,"_168":22,"_169":-5,"_170":418,"_99":419},[],[326],[366,368,372,374,377,380,384,387,390,393,396,399,402,405,408,411,414,417],{"_105":222,"_96":100,"_157":223,"_159":-5,"_160":142,"_161":224,"_163":119,"_107":350,"_101":206,"_165":226,"_167":227,"_168":22,"_169":-5,"_99":422},[100],[],"upstream","pull","ahead","behind","templates",[],"actionData","errors"]