[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_214":215,"_216":217},"routes/_app.x.$handle.$name",{"_95":94,"_31":44,"_103":85,"_26":104,"_13":14,"_105":-5,"_11":106,"_107":108,"_109":110,"_111":112,"_113":114,"_20":-5,"_115":-5,"_116":-5,"_117":24,"_118":119,"_120":24,"_121":-5,"_122":-5,"_123":124},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_42":43,"_31":44,"_37":45,"_46":-5,"_47":24,"_48":49,"_50":49,"_51":-5,"_52":-5,"_18":53,"_54":55,"_56":57,"_58":57,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":78,"_79":80,"_81":82,"_83":24},"version",5,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":14,"_40":41,"_23":24},"previous","deleted",false,"deletedHere","path","backend/auth/session.ts","latestPath","fileId","9eab866c-ac01-11f0-8c2e-0224a6c84d84","name","session.ts","fileType","script","content","import { blob } from \"https://esm.town/v/std/blob\";\nimport type { User, Session } from \"../../shared/types.ts\";\n\nconst JWT_SECRET = Deno.env.get(\"JWT_SECRET\") || \"default-secret-change-in-production\";\n\n// Simple JWT-like token creation (for demo purposes)\n// In production, use a proper JWT library\nasync function createToken(payload: any): Promise {\n const header = btoa(JSON.stringify({ alg: \"HS256\", typ: \"JWT\" }));\n const payloadStr = btoa(JSON.stringify(payload));\n const signature = btoa(await crypto.subtle.digest(\"SHA-256\", \n new TextEncoder().encode(`${header}.${payloadStr}.${JWT_SECRET}`)\n ).then(buf => String.fromCharCode(...new Uint8Array(buf))));\n \n return `${header}.${payloadStr}.${signature}`;\n}\n\nasync function verifyToken(token: string): Promise {\n try {\n const [header, payload, signature] = token.split(\".\");\n \n // Verify signature\n const expectedSignature = btoa(await crypto.subtle.digest(\"SHA-256\", \n new TextEncoder().encode(`${header}.${payload}.${JWT_SECRET}`)\n ).then(buf => String.fromCharCode(...new Uint8Array(buf))));\n \n if (signature !== expectedSignature) {\n return null;\n }\n \n const decoded = JSON.parse(atob(payload));\n \n // Check expiration\n if (decoded.exp && Date.now() > decoded.exp * 1000) {\n return null;\n }\n \n return decoded;\n } catch {\n return null;\n }\n}\n\nexport async function createSession(\n user: User, \n accessToken: string, \n refreshToken: string, \n expiresIn: number\n): Promise {\n const sessionId = crypto.randomUUID();\n const now = Date.now();\n \n const session: Session = {\n userId: user.id,\n accessToken,\n refreshToken,\n expiresAt: now + (expiresIn * 1000),\n createdAt: now,\n };\n \n // Store session in blob storage\n await blob.setJSON(`session:${sessionId}`, session);\n await blob.setJSON(`user:${user.id}`, user);\n \n // Create session token\n const tokenPayload = {\n sessionId,\n userId: user.id,\n exp: Math.floor((now + (7 * 24 * 60 * 60 * 1000)) / 1000), // 7 days\n };\n \n return await createToken(tokenPayload);\n}\n\nexport async function getSession(token: string): Promise {\n const decoded = await verifyToken(token);\n if (!decoded || !decoded.sessionId) {\n return null;\n }\n \n const session = await blob.getJSON(`session:${decoded.sessionId}`);\n if (!session) {\n return null;\n }\n \n // Check if access token is expired\n if (Date.now() > session.expiresAt) {\n // Try to refresh token\n const refreshed = await refreshAccessToken(session);\n if (refreshed) {\n await blob.setJSON(`session:${decoded.sessionId}`, refreshed);\n return refreshed;\n }\n return null;\n }\n \n return session;\n}\n\nexport async function getUserFromToken(token: string): Promise {\n const session = await getSession(token);\n if (!session) {\n return null;\n }\n \n const user = await blob.getJSON(`user:${session.userId}`);\n return user || null;\n}\n\nasync function refreshAccessToken(session: Session): Promise {\n try {\n const response = await fetch(\"https://oauth2.googleapis.com/token\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n },\n body: new URLSearchParams({\n client_id: Deno.env.get(\"GOOGLE_CLIENT_ID\")!,\n client_secret: Deno.env.get(\"GOOGLE_CLIENT_SECRET\")!,\n refresh_token: session.refreshToken,\n grant_type: \"refresh_token\",\n }),\n });\n \n if (!response.ok) {\n return null;\n }\n \n const tokens = await response.json();\n \n return {\n ...session,\n accessToken: tokens.access_token,\n expiresAt: Date.now() + (tokens.expires_in * 1000),\n };\n } catch {\n return null;\n }\n}","createdAt",["D",1760778340535],"branchVersion","branchId","108a0516-ac01-11f0-af53-0224a6c84d84","id","10899022-ac01-11f0-af53-0224a6c84d84","MCP_Proxy",["D",1760778102083],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","3b4e808e-fb1b-4130-93cd-9c30e28e6cfb","pinnedFileId","89408cb4-ac01-11f0-8121-0224a6c84d84","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","fd372ed8-9526-47fc-9a7a-9bdb45c58177","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_95":94,"_102":98},"org",{"_95":94,"_96":-5,"_97":98,"_18":53,"_99":100,"_101":24},"branch",{"_13":84,"_31":85,"_42":41,"_86":43,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":44,"_93":94},"isOwned",17,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","jeffreyyoung","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18yYlBiWmVId3NYSFQ1VmtnTTZSQ1BCM082Tk0ifQ","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_42":43,"_31":44,"_37":210,"_46":-5,"_47":24,"_48":49,"_50":49,"_51":-5,"_52":-5,"_18":53,"_54":55,"_56":57,"_58":57,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":211,"_79":212,"_81":213,"_83":24},"tree",[161,166,168],"files",[161,162,163,164,165,166,167,168],"counts",{"_151":61,"_152":132,"_153":61,"_154":155,"_156":157},"contents",[125,126,127],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_42":145,"_31":146,"_29":147,"_131":-5,"_40":41,"_39":148,"_133":57,"_37":149,"_13":61,"_33":143,"_35":-5,"_23":24,"_136":-5,"_26":150},{"_42":138,"_31":139,"_29":140,"_131":-5,"_40":41,"_39":141,"_133":57,"_37":142,"_13":61,"_33":143,"_35":-5,"_23":24,"_136":-5,"_26":144},{"_42":128,"_31":129,"_29":130,"_131":-5,"_40":41,"_39":132,"_133":57,"_37":134,"_13":61,"_33":20,"_35":135,"_23":24,"_136":-5,"_26":137},"801cc684-ac01-11f0-b9e9-0224a6c84d84","README.md","801cc71a-ac01-11f0-b9e9-0224a6c84d84","parentId",1,"latest",["D",1760778289255],"# MCP Gmail Proxy\n\nAn MCP (Model Context Protocol) proxy server that provides authenticated Gmail access through OAuth.\n\n## Features\n\n- OAuth 2.0 authentication with Google\n- MCP server implementation for Gmail operations\n- Session management and token refresh\n- Secure proxy for Gmail API access\n\n## Architecture\n\n- `backend/index.ts` - Main HTTP server and MCP endpoint\n- `backend/auth/` - OAuth flow and session management\n- `backend/mcp/` - MCP protocol implementation\n- `backend/gmail/` - Gmail API integration\n- `frontend/` - OAuth callback and admin interface\n\n## Environment Variables\n\nRequired:\n- `GOOGLE_CLIENT_ID` - Google OAuth client ID\n- `GOOGLE_CLIENT_SECRET` - Google OAuth client secret\n- `JWT_SECRET` - Secret for signing session tokens\n\n## Usage\n\n1. Start OAuth flow: `GET /auth/google`\n2. Handle callback: `GET /auth/callback`\n3. Connect MCP client to: `POST /mcp` (with Authorization header)\n\n## MCP Tools\n\n- `gmail_list_messages` - List Gmail messages\n- `gmail_get_message` - Get specific message content\n- `gmail_send_message` - Send email\n- `gmail_search_messages` - Search messages with query","label",[129],"846bb1b4-ac01-11f0-9420-0224a6c84d84","shared","0570609a-08a5-4dd2-b293-4bbf6f11edec",2,["D",1760778296491],"directory",[139],"894094c0-ac01-11f0-8121-0224a6c84d84","backend","df32a19a-fa94-45ef-9ce8-a7d608fd2397",3,["D",1760778304599],[146],"pulls","branches","forks","envVars",{"_158":61,"_160":61},"connections",{"_158":61,"_159":61},"count","unfilledCount","emptyCount",{"_42":145,"_31":146,"_29":147,"_131":-5,"_40":41,"_39":148,"_133":57,"_37":207,"_13":61,"_33":143,"_35":-5,"_23":24,"_136":-5,"_170":208,"_26":209},{"_42":203,"_31":194,"_29":190,"_131":147,"_40":41,"_39":198,"_133":57,"_37":204,"_13":61,"_33":143,"_35":-5,"_23":24,"_136":-5,"_170":205,"_26":206},{"_42":195,"_31":196,"_29":197,"_131":190,"_40":41,"_39":198,"_133":24,"_37":199,"_13":61,"_33":34,"_35":200,"_23":24,"_136":-5,"_170":201,"_26":202},{"_42":189,"_31":32,"_29":30,"_131":190,"_40":41,"_39":14,"_133":57,"_37":191,"_13":61,"_33":34,"_35":36,"_23":24,"_136":-5,"_170":192,"_26":193},{"_42":183,"_31":184,"_29":55,"_131":147,"_40":41,"_39":148,"_133":24,"_37":185,"_13":61,"_33":34,"_35":186,"_23":24,"_136":-5,"_170":187,"_26":188},{"_42":138,"_31":139,"_29":140,"_131":-5,"_40":41,"_39":141,"_133":57,"_37":180,"_13":61,"_33":143,"_35":-5,"_23":24,"_136":-5,"_170":181,"_26":182},{"_42":173,"_31":174,"_29":175,"_131":140,"_40":41,"_39":141,"_133":57,"_37":176,"_13":61,"_33":34,"_35":177,"_23":24,"_136":-5,"_170":178,"_26":179},{"_42":128,"_31":129,"_29":130,"_131":-5,"_40":41,"_39":132,"_133":57,"_37":169,"_13":61,"_33":20,"_35":135,"_23":24,"_136":-5,"_170":171,"_26":172},["D",1760778289255],"children",[],[129],"846ba336-ac01-11f0-9420-0224a6c84d84","types.ts","846ba408-ac01-11f0-9420-0224a6c84d84",["D",1760778296491],"// Shared types for MCP Gmail Proxy\n\nexport interface User {\n id: string;\n email: string;\n name: string;\n picture?: string;\n}\n\nexport interface Session {\n userId: string;\n accessToken: string;\n refreshToken: string;\n expiresAt: number;\n createdAt: number;\n}\n\nexport interface MCPRequest {\n jsonrpc: \"2.0\";\n id: string | number;\n method: string;\n params?: any;\n}\n\nexport interface MCPResponse {\n jsonrpc: \"2.0\";\n id: string | number;\n result?: any;\n error?: {\n code: number;\n message: string;\n data?: any;\n };\n}\n\nexport interface MCPTool {\n name: string;\n description: string;\n inputSchema: {\n type: \"object\";\n properties: Record;\n required?: string[];\n };\n}\n\nexport interface GmailMessage {\n id: string;\n threadId: string;\n snippet: string;\n payload: {\n headers: Array<{ name: string; value: string }>;\n body?: { data?: string };\n parts?: Array<{\n mimeType: string;\n body: { data?: string };\n }>;\n };\n internalDate: string;\n}\n\nexport interface GmailListResponse {\n messages: Array<{ id: string; threadId: string }>;\n nextPageToken?: string;\n resultSizeEstimate: number;\n}",[],[139,174],["D",1760778296491],[167],[139],"89408be2-ac01-11f0-8121-0224a6c84d84","index.ts",["D",1760778304599],"import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport { cors } from \"https://esm.sh/hono@3.11.7/middleware\";\nimport { readFile, serveFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { authRoutes } from \"./auth/routes.ts\";\nimport { mcpHandler } from \"./mcp/handler.ts\";\nimport { getUserFromToken } from \"./auth/session.ts\";\n\nconst app = new Hono();\n\n// Unwrap Hono errors to see original error details\napp.onError((err) => Promise.reject(err));\n\n// CORS is handled automatically by Val Town, but we'll add it for completeness\napp.use(\"*\", cors({\n origin: \"*\",\n allowMethods: [\"GET\", \"POST\", \"PUT\", \"DELETE\", \"OPTIONS\"],\n allowHeaders: [\"Content-Type\", \"Authorization\"],\n}));\n\n// Serve static files\napp.get(\"/frontend/*\", c => serveFile(c.req.path, import.meta.url));\napp.get(\"/shared/*\", c => serveFile(c.req.path, import.meta.url));\n\n// Serve main page\napp.get(\"/\", async c => {\n let html = await readFile(\"/frontend/index.html\", import.meta.url);\n return c.html(html);\n});\n\n// Auth routes\napp.route(\"/auth\", authRoutes);\n\n// MCP endpoint\napp.post(\"/mcp\", async c => {\n const authHeader = c.req.header(\"Authorization\");\n if (!authHeader || !authHeader.startsWith(\"Bearer \")) {\n return c.json({ error: \"Missing or invalid authorization header\" }, 401);\n }\n\n const token = authHeader.substring(7);\n const user = await getUserFromToken(token);\n \n if (!user) {\n return c.json({ error: \"Invalid token\" }, 401);\n }\n\n return mcpHandler(c, user);\n});\n\n// Health check\napp.get(\"/health\", c => c.json({ status: \"ok\", timestamp: new Date().toISOString() }));\n\nexport default app.fetch;",[],[146,184],"9eab85d6-ac01-11f0-8c2e-0224a6c84d84","ed7ef217-397c-402b-9d9f-ace8d60f3d08",["D",1760778340535],[],[146,194,32],"auth","949aae6e-ac01-11f0-8d19-0224a6c84d84","routes.ts","949aaf4a-ac01-11f0-8d19-0224a6c84d84",4,["D",1760778323594],"import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport { setCookie } from \"https://esm.sh/hono@3.11.7/helper\";\nimport { createSession, getSession } from \"./session.ts\";\nimport type { User } from \"../../shared/types.ts\";\n\nconst authRoutes = new Hono();\n\nconst GOOGLE_CLIENT_ID = Deno.env.get(\"GOOGLE_CLIENT_ID\");\nconst GOOGLE_CLIENT_SECRET = Deno.env.get(\"GOOGLE_CLIENT_SECRET\");\n\nif (!GOOGLE_CLIENT_ID || !GOOGLE_CLIENT_SECRET) {\n throw new Error(\"Missing required environment variables: GOOGLE_CLIENT_ID, GOOGLE_CLIENT_SECRET\");\n}\n\n// Start OAuth flow\nauthRoutes.get(\"/google\", c => {\n const baseUrl = new URL(c.req.url).origin;\n const redirectUri = `${baseUrl}/auth/callback`;\n \n const params = new URLSearchParams({\n client_id: GOOGLE_CLIENT_ID,\n redirect_uri: redirectUri,\n response_type: \"code\",\n scope: \"openid email profile https://www.googleapis.com/auth/gmail.readonly https://www.googleapis.com/auth/gmail.send\",\n access_type: \"offline\",\n prompt: \"consent\",\n });\n\n const authUrl = `https://accounts.google.com/o/oauth2/v2/auth?${params}`;\n return c.redirect(authUrl);\n});\n\n// Handle OAuth callback\nauthRoutes.get(\"/callback\", async c => {\n const code = c.req.query(\"code\");\n const error = c.req.query(\"error\");\n\n if (error) {\n return c.html(`\n \n \n

Authentication Error

Error: ${error}

\n Try again\n \n \n `);\n }\n\n if (!code) {\n return c.html(`\n \n \n

Authentication Error

No authorization code received

\n Try again\n \n \n `);\n }\n\n try {\n const baseUrl = new URL(c.req.url).origin;\n const redirectUri = `${baseUrl}/auth/callback`;\n\n // Exchange code for tokens\n const tokenResponse = await fetch(\"https://oauth2.googleapis.com/token\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n },\n body: new URLSearchParams({\n client_id: GOOGLE_CLIENT_ID,\n client_secret: GOOGLE_CLIENT_SECRET,\n code,\n grant_type: \"authorization_code\",\n redirect_uri: redirectUri,\n }),\n });\n\n if (!tokenResponse.ok) {\n throw new Error(`Token exchange failed: ${tokenResponse.statusText}`);\n }\n\n const tokens = await tokenResponse.json();\n\n // Get user info\n const userResponse = await fetch(\"https://www.googleapis.com/oauth2/v2/userinfo\", {\n headers: {\n Authorization: `Bearer ${tokens.access_token}`,\n },\n });\n\n if (!userResponse.ok) {\n throw new Error(`Failed to get user info: ${userResponse.statusText}`);\n }\n\n const userInfo = await userResponse.json();\n\n const user: User = {\n id: userInfo.id,\n email: userInfo.email,\n name: userInfo.name,\n picture: userInfo.picture,\n };\n\n // Create session\n const sessionToken = await createSession(user, tokens.access_token, tokens.refresh_token, tokens.expires_in);\n\n // Set cookie and redirect\n setCookie(c, \"session_token\", sessionToken, {\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n maxAge: 7 * 24 * 60 * 60, // 7 days\n });\n\n return c.html(`\n \n \n

Authentication Successful!

Welcome, ${user.name}!

Your session token: ${sessionToken}

Use this token in the Authorization header when connecting your MCP client:

Authorization: Bearer ${sessionToken}

\n Back to home\n \n \n `);\n } catch (error) {\n console.error(\"OAuth callback error:\", error);\n return c.html(`\n \n \n

Authentication Error

Failed to complete authentication: ${error.message}

\n Try again\n \n \n `);\n }\n});\n\n// Get current session info\nauthRoutes.get(\"/me\", async c => {\n const sessionToken = c.req.header(\"Authorization\")?.replace(\"Bearer \", \"\") || \n c.req.cookie(\"session_token\");\n\n if (!sessionToken) {\n return c.json({ error: \"No session token provided\" }, 401);\n }\n\n const session = await getSession(sessionToken);\n if (!session) {\n return c.json({ error: \"Invalid or expired session\" }, 401);\n }\n\n // Get fresh user info\n const userResponse = await fetch(\"https://www.googleapis.com/oauth2/v2/userinfo\", {\n headers: {\n Authorization: `Bearer ${session.accessToken}`,\n },\n });\n\n if (!userResponse.ok) {\n return c.json({ error: \"Failed to get user info\" }, 500);\n }\n\n const userInfo = await userResponse.json();\n return c.json({\n user: {\n id: userInfo.id,\n email: userInfo.email,\n name: userInfo.name,\n picture: userInfo.picture,\n },\n session: {\n expiresAt: session.expiresAt,\n createdAt: session.createdAt,\n },\n });\n});\n\nexport { authRoutes };",[],[146,194,196],"949ac39a-ac01-11f0-8d19-0224a6c84d84",["D",1760778323594],[163,164],[146,194],["D",1760778304599],[162,165],[146],["D",1760778102083],{"_95":94,"_102":98},{"_95":94,"_96":-5,"_97":98,"_18":53,"_99":100,"_101":24},{"_13":84,"_31":85,"_42":41,"_86":43,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":44,"_93":94},"ctx",{"_77":-5,"_122":247,"_248":249,"_250":251,"_252":24,"_253":24,"_254":24,"_255":57,"_256":-5,"_257":-7,"_258":-7,"_259":61,"_260":24,"_261":24,"_262":-5,"_263":24,"_264":24,"_265":24,"_266":-5},"ENV",{"_218":219,"_220":221,"_222":85,"_223":224,"_225":226,"_227":228,"_229":230,"_231":232,"_233":234,"_235":236,"_237":238,"_239":240,"_241":242,"_243":244,"_245":246},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","71c1b20804b3232a7e513be260cfffc1932a9e97","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v5