[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_303":304,"_305":306},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":-7,"_18":19,"_17":-7,"_226":-5,"_20":227,"_22":228,"_229":230,"_231":232,"_26":233,"_24":234,"_235":-5,"_236":-5,"_237":55,"_238":239,"_240":46,"_241":-5,"_242":-5,"_243":244},"routes/_app.x.$handle.$name.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":25,"_26":27,"_28":-5,"_29":-5,"_30":-5,"_31":-5,"_32":-5},"handle","jeffreyyoung","name","MCP_Proxy","branchName","main","version","path","backend/gmail","project",{"_34":173,"_13":14,"_47":174,"_175":-5,"_176":55,"_177":178,"_179":178,"_180":-5,"_181":-5,"_182":183,"_184":119,"_185":46,"_186":46,"_187":-5,"_188":49,"_189":190,"_191":-5,"_192":-5,"_193":-5,"_194":-5,"_195":196,"_197":196,"_198":199,"_200":199,"_201":199,"_202":196,"_203":196,"_204":205,"_206":207,"_208":209,"_210":55},"tree",[65,66,67,68],"file",{"_34":60,"_13":59,"_37":40,"_39":61,"_41":42,"_43":44,"_45":46,"_47":62,"_17":49,"_50":63,"_52":-5,"_54":55,"_56":-5,"_18":64},"contents",[33],"upstream","pull","ahead","behind","envVars",{"_34":35,"_13":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_17":49,"_50":51,"_52":53,"_54":55,"_56":-5,"_18":57},"id","b75997ee-ac01-11f0-be5c-0224a6c84d84","service.ts","fileId","b75998c0-ac01-11f0-be5c-0224a6c84d84","parentId","563dabf2-4a16-471a-b8bd-14fa55279586","branchId","108a0516-ac01-11f0-af53-0224a6c84d84","branchVersion",7,"latest",true,"createdAt",["D",1760778381938],0,"fileType","script","content","import type { GmailMessage, GmailListResponse } from \"../../shared/types.ts\";\n\nexport class GmailService {\n private accessToken: string;\n private baseUrl = \"https://gmail.googleapis.com/gmail/v1\";\n\n constructor(accessToken: string) {\n this.accessToken = accessToken;\n }\n\n private async makeRequest(endpoint: string, options: RequestInit = {}): Promise {\n const response = await fetch(`${this.baseUrl}${endpoint}`, {\n ...options,\n headers: {\n Authorization: `Bearer ${this.accessToken}`,\n \"Content-Type\": \"application/json\",\n ...options.headers,\n },\n });\n\n if (!response.ok) {\n const error = await response.text();\n throw new Error(`Gmail API error: ${response.status} ${response.statusText} - ${error}`);\n }\n\n return response.json();\n }\n\n async listMessages(\n query?: string,\n maxResults: number = 10,\n pageToken?: string\n ): Promise {\n const params = new URLSearchParams({\n maxResults: Math.min(maxResults, 100).toString(),\n });\n\n if (query) {\n params.append(\"q\", query);\n }\n if (pageToken) {\n params.append(\"pageToken\", pageToken);\n }\n\n const response = await this.makeRequest(`/users/me/messages?${params}`);\n \n return {\n messages: response.messages || [],\n nextPageToken: response.nextPageToken,\n resultSizeEstimate: response.resultSizeEstimate || 0,\n };\n }\n\n async getMessage(messageId: string): Promise {\n const response = await this.makeRequest(`/users/me/messages/${messageId}`);\n return response;\n }\n\n async searchMessages(query: string, includeSpamTrash: boolean = false): Promise {\n const params = new URLSearchParams({\n q: query,\n includeSpamTrash: includeSpamTrash.toString(),\n });\n\n const response = await this.makeRequest(`/users/me/messages?${params}`);\n \n return {\n messages: response.messages || [],\n nextPageToken: response.nextPageToken,\n resultSizeEstimate: response.resultSizeEstimate || 0,\n };\n }\n\n async sendMessage(\n to: string,\n subject: string,\n body: string,\n cc?: string,\n bcc?: string\n ): Promise<{ id: string; threadId: string }> {\n // Create email message in RFC 2822 format\n let message = `To: ${to}\\r\\n`;\n if (cc) {\n message += `Cc: ${cc}\\r\\n`;\n }\n if (bcc) {\n message += `Bcc: ${bcc}\\r\\n`;\n }\n message += `Subject: ${subject}\\r\\n`;\n message += `Content-Type: text/plain; charset=utf-8\\r\\n\\r\\n`;\n message += body;\n\n // Encode message in base64url format\n const encodedMessage = btoa(message)\n .replace(/\\+/g, \"-\")\n .replace(/\\//g, \"_\")\n .replace(/=+$/, \"\");\n\n const response = await this.makeRequest(\"/users/me/messages/send\", {\n method: \"POST\",\n body: JSON.stringify({\n raw: encodedMessage,\n }),\n });\n\n return {\n id: response.id,\n threadId: response.threadId,\n };\n }\n\n // Helper method to decode message body\n static decodeMessageBody(message: GmailMessage): string {\n let body = \"\";\n\n // Check if message has a body\n if (message.payload.body?.data) {\n body = atob(message.payload.body.data.replace(/-/g, \"+\").replace(/_/g, \"/\"));\n } else if (message.payload.parts) {\n // Multi-part message, find text/plain part\n for (const part of message.payload.parts) {\n if (part.mimeType === \"text/plain\" && part.body?.data) {\n body = atob(part.body.data.replace(/-/g, \"+\").replace(/_/g, \"/\"));\n break;\n }\n }\n }\n\n return body;\n }\n\n // Helper method to get message headers\n static getMessageHeaders(message: GmailMessage): Record {\n const headers: Record = {};\n \n for (const header of message.payload.headers) {\n headers[header.name.toLowerCase()] = header.value;\n }\n \n return headers;\n }\n\n // Helper method to format message for display\n static formatMessage(message: GmailMessage): {\n id: string;\n threadId: string;\n subject: string;\n from: string;\n to: string;\n date: string;\n snippet: string;\n body: string;\n } {\n const headers = this.getMessageHeaders(message);\n const body = this.decodeMessageBody(message);\n\n return {\n id: message.id,\n threadId: message.threadId,\n subject: headers.subject || \"(No Subject)\",\n from: headers.from || \"\",\n to: headers.to || \"\",\n date: headers.date || new Date(parseInt(message.internalDate)).toISOString(),\n snippet: message.snippet,\n body,\n };\n }\n}","deleted",false,"label",[58,59,36],"backend","gmail","b759a90a-ac01-11f0-be5c-0224a6c84d84","df32a19a-fa94-45ef-9ce8-a7d608fd2397",["D",1760778381938],"directory",[58,59],{"_34":108,"_13":58,"_37":61,"_39":-5,"_41":42,"_43":109,"_45":46,"_47":110,"_17":49,"_50":63,"_52":-5,"_54":55,"_56":-5,"_75":111,"_18":112},{"_34":93,"_13":94,"_37":95,"_39":-5,"_41":42,"_43":96,"_45":46,"_47":97,"_17":49,"_50":63,"_52":-5,"_54":55,"_56":-5,"_75":98,"_18":99},{"_34":78,"_13":79,"_37":80,"_39":-5,"_41":42,"_43":81,"_45":46,"_47":82,"_17":49,"_50":63,"_52":-5,"_54":55,"_56":-5,"_75":83,"_18":84},{"_34":69,"_13":70,"_37":71,"_39":-5,"_41":42,"_43":72,"_45":46,"_47":73,"_17":49,"_50":24,"_52":74,"_54":55,"_56":-5,"_75":76,"_18":77},"801cc684-ac01-11f0-b9e9-0224a6c84d84","README.md","801cc71a-ac01-11f0-b9e9-0224a6c84d84",1,["D",1760778289255],"# MCP Gmail Proxy\n\nAn MCP (Model Context Protocol) proxy server that provides authenticated Gmail access through OAuth.\n\n## Features\n\n- OAuth 2.0 authentication with Google\n- MCP server implementation for Gmail operations\n- Session management and token refresh\n- Secure proxy for Gmail API access\n\n## Architecture\n\n- `backend/index.ts` - Main HTTP server and MCP endpoint\n- `backend/auth/` - OAuth flow and session management\n- `backend/mcp/` - MCP protocol implementation\n- `backend/gmail/` - Gmail API integration\n- `frontend/` - OAuth callback and admin interface\n\n## Environment Variables\n\nRequired:\n- `GOOGLE_CLIENT_ID` - Google OAuth client ID\n- `GOOGLE_CLIENT_SECRET` - Google OAuth client secret\n- `JWT_SECRET` - Secret for signing session tokens\n\n## Usage\n\n1. Start OAuth flow: `GET /auth/google`\n2. Handle callback: `GET /auth/callback`\n3. Connect MCP client to: `POST /mcp` (with Authorization header)\n\n## MCP Tools\n\n- `gmail_list_messages` - List Gmail messages\n- `gmail_get_message` - Get specific message content\n- `gmail_send_message` - Send email\n- `gmail_search_messages` - Search messages with query","children",[],[70],"846bb1b4-ac01-11f0-9420-0224a6c84d84","shared","0570609a-08a5-4dd2-b293-4bbf6f11edec",2,["D",1760778296491],[85],[79],{"_34":86,"_13":87,"_37":88,"_39":80,"_41":42,"_43":81,"_45":46,"_47":89,"_17":49,"_50":51,"_52":90,"_54":55,"_56":-5,"_75":91,"_18":92},"846ba336-ac01-11f0-9420-0224a6c84d84","types.ts","846ba408-ac01-11f0-9420-0224a6c84d84",["D",1760778296491],"// Shared types for MCP Gmail Proxy\n\nexport interface User {\n id: string;\n email: string;\n name: string;\n picture?: string;\n}\n\nexport interface Session {\n userId: string;\n accessToken: string;\n refreshToken: string;\n expiresAt: number;\n createdAt: number;\n}\n\nexport interface MCPRequest {\n jsonrpc: \"2.0\";\n id: string | number;\n method: string;\n params?: any;\n}\n\nexport interface MCPResponse {\n jsonrpc: \"2.0\";\n id: string | number;\n result?: any;\n error?: {\n code: number;\n message: string;\n data?: any;\n };\n}\n\nexport interface MCPTool {\n name: string;\n description: string;\n inputSchema: {\n type: \"object\";\n properties: Record;\n required?: string[];\n };\n}\n\nexport interface GmailMessage {\n id: string;\n threadId: string;\n snippet: string;\n payload: {\n headers: Array<{ name: string; value: string }>;\n body?: { data?: string };\n parts?: Array<{\n mimeType: string;\n body: { data?: string };\n }>;\n };\n internalDate: string;\n}\n\nexport interface GmailListResponse {\n messages: Array<{ id: string; threadId: string }>;\n nextPageToken?: string;\n resultSizeEstimate: number;\n}",[],[79,87],"c7b318fe-ac01-11f0-8531-0224a6c84d84","frontend","ced5ea7a-c36c-4ee0-8957-d44eb33a4be0",8,["D",1760778409354],[100],[94],{"_34":101,"_13":102,"_37":103,"_39":95,"_41":42,"_43":96,"_45":46,"_47":104,"_17":49,"_50":24,"_52":105,"_54":55,"_56":-5,"_75":106,"_18":107},"c7b2fa54-ac01-11f0-8531-0224a6c84d84","index.html","c7b2fb12-ac01-11f0-8531-0224a6c84d84",["D",1760778409354],"\n\n\n \n \n MCP Gmail Proxy\n \n \n\n\n

📧 MCP Gmail Proxy

Secure Gmail access through Model Context Protocol

\n\n

🔐 Authentication

Checking authentication status...

\n \n 🔑 Sign in with Google\n \n

\n\n

🔧 MCP Connection

\n After authentication, use this endpoint for your MCP client:\n

\n POST https://your-domain.web.val.run/mcp\n

\n Include your session token in the Authorization header:\n

\n Authorization: Bearer YOUR_SESSION_TOKEN\n

\n\n

📋 Available Tools

gmail_list_messages

List Gmail messages with optional query and pagination

\n Parameters: query (optional), maxResults (optional), pageToken (optional)\n

\n \n

gmail_get_message

Get a specific Gmail message by ID

\n Parameters: messageId (required)\n

\n \n

gmail_send_message

Send an email via Gmail

\n Parameters: to (required), subject (required), body (required), cc (optional), bcc (optional)\n

\n \n

gmail_search_messages

Search Gmail messages with advanced query

\n Parameters: query (required), includeSpamTrash (optional)\n

\n\n

📖 Usage Examples

List recent messages:

{\n  \"jsonrpc\": \"2.0\",\n  \"id\": 1,\n  \"method\": \"tools/call\",\n  \"params\": {\n    \"name\": \"gmail_list_messages\",\n    \"arguments\": {\n      \"maxResults\": 5\n    }\n  }\n}

\n \n

Search for unread messages:

{\n  \"jsonrpc\": \"2.0\",\n  \"id\": 2,\n  \"method\": \"tools/call\",\n  \"params\": {\n    \"name\": \"gmail_search_messages\",\n    \"arguments\": {\n      \"query\": \"is:unread\"\n    }\n  }\n}

\n \n

Send an email:

{\n  \"jsonrpc\": \"2.0\",\n  \"id\": 3,\n  \"method\": \"tools/call\",\n  \"params\": {\n    \"name\": \"gmail_send_message\",\n    \"arguments\": {\n      \"to\": \"recipient@example.com\",\n      \"subject\": \"Hello from MCP\",\n      \"body\": \"This email was sent via the MCP Gmail proxy!\"\n    }\n  }\n}

\n\n \n\n",[],[94,102],"894094c0-ac01-11f0-8121-0224a6c84d84",3,["D",1760778304599],[113,114,115,116],[58],{"_34":148,"_13":149,"_37":150,"_39":61,"_41":42,"_43":151,"_45":46,"_47":152,"_17":49,"_50":63,"_52":-5,"_54":55,"_56":-5,"_75":153,"_18":154},{"_34":60,"_13":59,"_37":40,"_39":61,"_41":42,"_43":44,"_45":46,"_47":141,"_17":49,"_50":63,"_52":-5,"_54":55,"_56":-5,"_75":142,"_18":143},{"_34":126,"_13":127,"_37":128,"_39":61,"_41":42,"_43":129,"_45":46,"_47":130,"_17":49,"_50":63,"_52":-5,"_54":55,"_56":-5,"_75":131,"_18":132},{"_34":117,"_13":118,"_37":119,"_39":61,"_41":42,"_43":120,"_45":46,"_47":121,"_17":81,"_50":122,"_52":123,"_54":55,"_56":-5,"_75":124,"_18":125},"cf08117c-ac01-11f0-9322-0224a6c84d84","index.ts","89408cb4-ac01-11f0-8121-0224a6c84d84",10,["D",1760778421668],"http","import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport { readFile, serveFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { authRoutes } from \"./auth/routes.ts\";\nimport { mcpHandler } from \"./mcp/handler.ts\";\nimport { getUserFromToken } from \"./auth/session.ts\";\n\nconst app = new Hono();\n\n// Unwrap Hono errors to see original error details\napp.onError((err) => Promise.reject(err));\n\n// Serve static files\napp.get(\"/frontend/*\", c => serveFile(c.req.path, import.meta.url));\napp.get(\"/shared/*\", c => serveFile(c.req.path, import.meta.url));\n\n// Serve main page\napp.get(\"/\", async c => {\n let html = await readFile(\"/frontend/index.html\", import.meta.url);\n return c.html(html);\n});\n\n// Auth routes\napp.route(\"/auth\", authRoutes);\n\n// MCP endpoint\napp.post(\"/mcp\", async c => {\n const authHeader = c.req.header(\"Authorization\");\n if (!authHeader || !authHeader.startsWith(\"Bearer \")) {\n return c.json({ error: \"Missing or invalid authorization header\" }, 401);\n }\n\n const token = authHeader.substring(7);\n const user = await getUserFromToken(token);\n \n if (!user) {\n return c.json({ error: \"Invalid token\" }, 401);\n }\n\n return mcpHandler(c, user);\n});\n\n// Health check\napp.get(\"/health\", c => c.json({ status: \"ok\", timestamp: new Date().toISOString() }));\n\nexport default app.fetch;",[],[58,118],"ac51995a-ac01-11f0-bc57-0224a6c84d84","mcp","859648cb-31bb-444c-8dd4-2846bd1fc254",6,["D",1760778363380],[133],[58,127],{"_34":134,"_13":135,"_37":136,"_39":128,"_41":42,"_43":129,"_45":46,"_47":137,"_17":49,"_50":51,"_52":138,"_54":55,"_56":-5,"_75":139,"_18":140},"ac517f10-ac01-11f0-bc57-0224a6c84d84","handler.ts","ac517fc4-ac01-11f0-bc57-0224a6c84d84",["D",1760778363380],"import type { Context } from \"https://esm.sh/hono@3.11.7\";\nimport type { User, MCPRequest, MCPResponse, MCPTool } from \"../../shared/types.ts\";\nimport { getSession } from \"../auth/session.ts\";\nimport { GmailService } from \"../gmail/service.ts\";\n\nconst MCP_TOOLS: MCPTool[] = [\n {\n name: \"gmail_list_messages\",\n description: \"List Gmail messages with optional query and pagination\",\n inputSchema: {\n type: \"object\",\n properties: {\n query: {\n type: \"string\",\n description: \"Gmail search query (e.g., 'is:unread', 'from:example@gmail.com')\"\n },\n maxResults: {\n type: \"number\",\n description: \"Maximum number of messages to return (default: 10, max: 100)\",\n minimum: 1,\n maximum: 100\n },\n pageToken: {\n type: \"string\",\n description: \"Token for pagination\"\n }\n }\n }\n },\n {\n name: \"gmail_get_message\",\n description: \"Get a specific Gmail message by ID\",\n inputSchema: {\n type: \"object\",\n properties: {\n messageId: {\n type: \"string\",\n description: \"The Gmail message ID\"\n }\n },\n required: [\"messageId\"]\n }\n },\n {\n name: \"gmail_send_message\",\n description: \"Send an email via Gmail\",\n inputSchema: {\n type: \"object\",\n properties: {\n to: {\n type: \"string\",\n description: \"Recipient email address\"\n },\n subject: {\n type: \"string\",\n description: \"Email subject\"\n },\n body: {\n type: \"string\",\n description: \"Email body (plain text)\"\n },\n cc: {\n type: \"string\",\n description: \"CC email addresses (comma-separated)\"\n },\n bcc: {\n type: \"string\",\n description: \"BCC email addresses (comma-separated)\"\n }\n },\n required: [\"to\", \"subject\", \"body\"]\n }\n },\n {\n name: \"gmail_search_messages\",\n description: \"Search Gmail messages with advanced query\",\n inputSchema: {\n type: \"object\",\n properties: {\n query: {\n type: \"string\",\n description: \"Gmail search query\"\n },\n includeSpamTrash: {\n type: \"boolean\",\n description: \"Include messages from spam and trash\"\n }\n },\n required: [\"query\"]\n }\n }\n];\n\nexport async function mcpHandler(c: Context, user: User): Promise {\n try {\n const request: MCPRequest = await c.req.json();\n \n // Validate MCP request format\n if (!request.jsonrpc || request.jsonrpc !== \"2.0\" || !request.method) {\n return c.json({\n jsonrpc: \"2.0\",\n id: request.id || null,\n error: {\n code: -32600,\n message: \"Invalid Request\"\n }\n } as MCPResponse);\n }\n\n // Get user session for Gmail access\n const authHeader = c.req.header(\"Authorization\");\n const token = authHeader?.substring(7);\n const session = await getSession(token!);\n \n if (!session) {\n return c.json({\n jsonrpc: \"2.0\",\n id: request.id,\n error: {\n code: -32001,\n message: \"Session expired or invalid\"\n }\n } as MCPResponse);\n }\n\n const gmailService = new GmailService(session.accessToken);\n\n // Handle different MCP methods\n switch (request.method) {\n case \"initialize\":\n return c.json({\n jsonrpc: \"2.0\",\n id: request.id,\n result: {\n protocolVersion: \"2024-11-05\",\n capabilities: {\n tools: {}\n },\n serverInfo: {\n name: \"gmail-mcp-proxy\",\n version: \"1.0.0\"\n }\n }\n } as MCPResponse);\n\n case \"tools/list\":\n return c.json({\n jsonrpc: \"2.0\",\n id: request.id,\n result: {\n tools: MCP_TOOLS\n }\n } as MCPResponse);\n\n case \"tools/call\":\n const { name, arguments: args } = request.params;\n \n try {\n let result;\n \n switch (name) {\n case \"gmail_list_messages\":\n result = await gmailService.listMessages(\n args?.query,\n args?.maxResults || 10,\n args?.pageToken\n );\n break;\n \n case \"gmail_get_message\":\n if (!args?.messageId) {\n throw new Error(\"messageId is required\");\n }\n result = await gmailService.getMessage(args.messageId);\n break;\n \n case \"gmail_send_message\":\n if (!args?.to || !args?.subject || !args?.body) {\n throw new Error(\"to, subject, and body are required\");\n }\n result = await gmailService.sendMessage(\n args.to,\n args.subject,\n args.body,\n args.cc,\n args.bcc\n );\n break;\n \n case \"gmail_search_messages\":\n if (!args?.query) {\n throw new Error(\"query is required\");\n }\n result = await gmailService.searchMessages(\n args.query,\n args.includeSpamTrash || false\n );\n break;\n \n default:\n throw new Error(`Unknown tool: ${name}`);\n }\n \n return c.json({\n jsonrpc: \"2.0\",\n id: request.id,\n result: {\n content: [\n {\n type: \"text\",\n text: JSON.stringify(result, null, 2)\n }\n ]\n }\n } as MCPResponse);\n \n } catch (error) {\n return c.json({\n jsonrpc: \"2.0\",\n id: request.id,\n error: {\n code: -32603,\n message: \"Internal error\",\n data: error.message\n }\n } as MCPResponse);\n }\n\n default:\n return c.json({\n jsonrpc: \"2.0\",\n id: request.id,\n error: {\n code: -32601,\n message: \"Method not found\"\n }\n } as MCPResponse);\n }\n \n } catch (error) {\n return c.json({\n jsonrpc: \"2.0\",\n id: null,\n error: {\n code: -32700,\n message: \"Parse error\",\n data: error.message\n }\n } as MCPResponse);\n }\n}",[],[58,127,135],["D",1760778381938],[144],[58,59],{"_34":35,"_13":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":145,"_17":49,"_50":51,"_52":53,"_54":55,"_56":-5,"_75":146,"_18":147},["D",1760778381938],[],[58,59,36],"949ac39a-ac01-11f0-8d19-0224a6c84d84","auth","ed7ef217-397c-402b-9d9f-ace8d60f3d08",4,["D",1760778323594],[155,156],[58,149],{"_34":165,"_13":166,"_37":167,"_39":150,"_41":42,"_43":168,"_45":46,"_47":169,"_17":44,"_50":51,"_52":170,"_54":55,"_56":-5,"_75":171,"_18":172},{"_34":157,"_13":158,"_37":159,"_39":150,"_41":42,"_43":160,"_45":46,"_47":161,"_17":49,"_50":51,"_52":162,"_54":55,"_56":-5,"_75":163,"_18":164},"9eab85d6-ac01-11f0-8c2e-0224a6c84d84","session.ts","9eab866c-ac01-11f0-8c2e-0224a6c84d84",5,["D",1760778340535],"import { blob } from \"https://esm.town/v/std/blob\";\nimport type { User, Session } from \"../../shared/types.ts\";\n\nconst JWT_SECRET = Deno.env.get(\"JWT_SECRET\") || \"default-secret-change-in-production\";\n\n// Simple JWT-like token creation (for demo purposes)\n// In production, use a proper JWT library\nasync function createToken(payload: any): Promise {\n const header = btoa(JSON.stringify({ alg: \"HS256\", typ: \"JWT\" }));\n const payloadStr = btoa(JSON.stringify(payload));\n const signature = btoa(await crypto.subtle.digest(\"SHA-256\", \n new TextEncoder().encode(`${header}.${payloadStr}.${JWT_SECRET}`)\n ).then(buf => String.fromCharCode(...new Uint8Array(buf))));\n \n return `${header}.${payloadStr}.${signature}`;\n}\n\nasync function verifyToken(token: string): Promise {\n try {\n const [header, payload, signature] = token.split(\".\");\n \n // Verify signature\n const expectedSignature = btoa(await crypto.subtle.digest(\"SHA-256\", \n new TextEncoder().encode(`${header}.${payload}.${JWT_SECRET}`)\n ).then(buf => String.fromCharCode(...new Uint8Array(buf))));\n \n if (signature !== expectedSignature) {\n return null;\n }\n \n const decoded = JSON.parse(atob(payload));\n \n // Check expiration\n if (decoded.exp && Date.now() > decoded.exp * 1000) {\n return null;\n }\n \n return decoded;\n } catch {\n return null;\n }\n}\n\nexport async function createSession(\n user: User, \n accessToken: string, \n refreshToken: string, \n expiresIn: number\n): Promise {\n const sessionId = crypto.randomUUID();\n const now = Date.now();\n \n const session: Session = {\n userId: user.id,\n accessToken,\n refreshToken,\n expiresAt: now + (expiresIn * 1000),\n createdAt: now,\n };\n \n // Store session in blob storage\n await blob.setJSON(`session:${sessionId}`, session);\n await blob.setJSON(`user:${user.id}`, user);\n \n // Create session token\n const tokenPayload = {\n sessionId,\n userId: user.id,\n exp: Math.floor((now + (7 * 24 * 60 * 60 * 1000)) / 1000), // 7 days\n };\n \n return await createToken(tokenPayload);\n}\n\nexport async function getSession(token: string): Promise {\n const decoded = await verifyToken(token);\n if (!decoded || !decoded.sessionId) {\n return null;\n }\n \n const session = await blob.getJSON(`session:${decoded.sessionId}`);\n if (!session) {\n return null;\n }\n \n // Check if access token is expired\n if (Date.now() > session.expiresAt) {\n // Try to refresh token\n const refreshed = await refreshAccessToken(session);\n if (refreshed) {\n await blob.setJSON(`session:${decoded.sessionId}`, refreshed);\n return refreshed;\n }\n return null;\n }\n \n return session;\n}\n\nexport async function getUserFromToken(token: string): Promise {\n const session = await getSession(token);\n if (!session) {\n return null;\n }\n \n const user = await blob.getJSON(`user:${session.userId}`);\n return user || null;\n}\n\nasync function refreshAccessToken(session: Session): Promise {\n try {\n const response = await fetch(\"https://oauth2.googleapis.com/token\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n },\n body: new URLSearchParams({\n client_id: Deno.env.get(\"GOOGLE_CLIENT_ID\")!,\n client_secret: Deno.env.get(\"GOOGLE_CLIENT_SECRET\")!,\n refresh_token: session.refreshToken,\n grant_type: \"refresh_token\",\n }),\n });\n \n if (!response.ok) {\n return null;\n }\n \n const tokens = await response.json();\n \n return {\n ...session,\n accessToken: tokens.access_token,\n expiresAt: Date.now() + (tokens.expires_in * 1000),\n };\n } catch {\n return null;\n }\n}",[],[58,149,158],"007968e6-ac02-11f0-9ab8-0224a6c84d84","routes.ts","949aaf4a-ac01-11f0-8d19-0224a6c84d84",17,["D",1760778504620],"import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport { setCookie } from \"https://esm.sh/hono@3.11.7/cookie\";\nimport { createSession, getSession } from \"./session.ts\";\nimport type { User } from \"../../shared/types.ts\";\n\nconst authRoutes = new Hono();\n\nconst GOOGLE_CLIENT_ID = Deno.env.get(\"GOOGLE_CLIENT_ID\");\nconst GOOGLE_CLIENT_SECRET = Deno.env.get(\"GOOGLE_CLIENT_SECRET\");\n\nif (!GOOGLE_CLIENT_ID || !GOOGLE_CLIENT_SECRET) {\n console.warn(\"Missing Google OAuth credentials. Please set GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET environment variables.\");\n}\n\n// Start OAuth flow\nauthRoutes.get(\"/google\", c => {\n if (!GOOGLE_CLIENT_ID || !GOOGLE_CLIENT_SECRET) {\n return c.html(`\n \n \n

Configuration Required

Please set up Google OAuth credentials:

Go to Google Cloud Console
Create OAuth 2.0 credentials
Set authorized redirect URI to: ${new URL(c.req.url).origin}/auth/callback
Set environment variables: GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET

\n Back to home\n \n \n `);\n }\n \n const baseUrl = new URL(c.req.url).origin;\n const redirectUri = `${baseUrl}/auth/callback`;\n \n const params = new URLSearchParams({\n client_id: GOOGLE_CLIENT_ID,\n redirect_uri: redirectUri,\n response_type: \"code\",\n scope: \"openid email profile https://www.googleapis.com/auth/gmail.readonly https://www.googleapis.com/auth/gmail.send\",\n access_type: \"offline\",\n prompt: \"consent\",\n });\n\n const authUrl = `https://accounts.google.com/o/oauth2/v2/auth?${params}`;\n return c.redirect(authUrl);\n});\n\n// Handle OAuth callback\nauthRoutes.get(\"/callback\", async c => {\n if (!GOOGLE_CLIENT_ID || !GOOGLE_CLIENT_SECRET) {\n return c.html(`\n \n \n

Configuration Required

Google OAuth credentials not configured.

\n Back to home\n \n \n `);\n }\n \n const code = c.req.query(\"code\");\n const error = c.req.query(\"error\");\n\n if (error) {\n return c.html(`\n \n \n

Authentication Error

Error: ${error}

\n Try again\n \n \n `);\n }\n\n if (!code) {\n return c.html(`\n \n \n

Authentication Error

No authorization code received

\n Try again\n \n \n `);\n }\n\n try {\n const baseUrl = new URL(c.req.url).origin;\n const redirectUri = `${baseUrl}/auth/callback`;\n\n // Exchange code for tokens\n const tokenResponse = await fetch(\"https://oauth2.googleapis.com/token\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n },\n body: new URLSearchParams({\n client_id: GOOGLE_CLIENT_ID,\n client_secret: GOOGLE_CLIENT_SECRET,\n code,\n grant_type: \"authorization_code\",\n redirect_uri: redirectUri,\n }),\n });\n\n if (!tokenResponse.ok) {\n throw new Error(`Token exchange failed: ${tokenResponse.statusText}`);\n }\n\n const tokens = await tokenResponse.json();\n\n // Get user info\n const userResponse = await fetch(\"https://www.googleapis.com/oauth2/v2/userinfo\", {\n headers: {\n Authorization: `Bearer ${tokens.access_token}`,\n },\n });\n\n if (!userResponse.ok) {\n throw new Error(`Failed to get user info: ${userResponse.statusText}`);\n }\n\n const userInfo = await userResponse.json();\n\n const user: User = {\n id: userInfo.id,\n email: userInfo.email,\n name: userInfo.name,\n picture: userInfo.picture,\n };\n\n // Create session\n const sessionToken = await createSession(user, tokens.access_token, tokens.refresh_token, tokens.expires_in);\n\n // Set cookie and redirect\n setCookie(c, \"session_token\", sessionToken, {\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n maxAge: 7 * 24 * 60 * 60, // 7 days\n });\n\n return c.html(`\n \n \n

Authentication Successful!

Welcome, ${user.name}!

Your session token: ${sessionToken}

Use this token in the Authorization header when connecting your MCP client:

Authorization: Bearer ${sessionToken}

\n Back to home\n \n \n `);\n } catch (error) {\n console.error(\"OAuth callback error:\", error);\n return c.html(`\n \n \n

Authentication Error

Failed to complete authentication: ${error.message}

\n Try again\n \n \n `);\n }\n});\n\n// Get current session info\nauthRoutes.get(\"/me\", async c => {\n const sessionToken = c.req.header(\"Authorization\")?.replace(\"Bearer \", \"\") || \n c.req.cookie(\"session_token\");\n\n if (!sessionToken) {\n return c.json({ error: \"No session token provided\" }, 401);\n }\n\n const session = await getSession(sessionToken);\n if (!session) {\n return c.json({ error: \"Invalid or expired session\" }, 401);\n }\n\n // Get fresh user info\n const userResponse = await fetch(\"https://www.googleapis.com/oauth2/v2/userinfo\", {\n headers: {\n Authorization: `Bearer ${session.accessToken}`,\n },\n });\n\n if (!userResponse.ok) {\n return c.json({ error: \"Failed to get user info\" }, 500);\n }\n\n const userInfo = await userResponse.json();\n return c.json({\n user: {\n id: userInfo.id,\n email: userInfo.email,\n name: userInfo.name,\n picture: userInfo.picture,\n },\n session: {\n expiresAt: session.expiresAt,\n createdAt: session.createdAt,\n },\n });\n});\n\nexport { authRoutes };",[],[58,149,166],"10899022-ac01-11f0-af53-0224a6c84d84",["D",1760778102083],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","userId","3b4e808e-fb1b-4130-93cd-9c30e28e6cfb","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","fd372ed8-9526-47fc-9a7a-9bdb45c58177","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_225":221},"org",{"_11":12,"_219":-5,"_220":221,"_182":183,"_222":223,"_224":55},"branch",{"_17":168,"_13":16,"_34":42,"_211":173,"_212":-5,"_213":-5,"_214":-5,"_215":-5,"_216":-5,"_217":14,"_218":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18yYlBiWmVId3NYSFQ1VmtnTTZSQ1BCM082Tk0ifQ","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_34":173,"_13":14,"_47":299,"_175":-5,"_176":55,"_177":178,"_179":178,"_180":-5,"_181":-5,"_182":183,"_184":119,"_185":46,"_186":46,"_187":-5,"_188":49,"_189":190,"_191":-5,"_192":-5,"_193":-5,"_194":-5,"_195":196,"_197":196,"_198":199,"_200":199,"_201":199,"_202":196,"_203":196,"_204":300,"_206":301,"_208":302,"_210":55},[257,266,268,270],"files",[257,258,259,260,261,262,263,264,265,266,267,268,269,270],"counts",{"_248":49,"_249":72,"_250":49,"_32":251,"_252":253},[246],{"_34":60,"_13":59,"_37":40,"_39":61,"_41":42,"_43":44,"_45":46,"_47":62,"_17":49,"_50":63,"_52":-5,"_54":55,"_56":-5,"_18":245},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},[58,59],{"_34":35,"_13":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_17":49,"_50":51,"_52":53,"_54":55,"_56":-5,"_18":247},[58,59,36],"pulls","branches","forks",{"_254":49,"_256":49},"connections",{"_254":49,"_255":49},"count","unfilledCount","emptyCount",{"_34":108,"_13":58,"_37":61,"_39":-5,"_41":42,"_43":109,"_45":46,"_47":110,"_17":49,"_50":63,"_52":-5,"_54":55,"_56":-5,"_75":297,"_18":298},{"_34":148,"_13":149,"_37":150,"_39":61,"_41":42,"_43":151,"_45":46,"_47":152,"_17":49,"_50":63,"_52":-5,"_54":55,"_56":-5,"_75":295,"_18":296},{"_34":165,"_13":166,"_37":167,"_39":150,"_41":42,"_43":168,"_45":46,"_47":169,"_17":44,"_50":51,"_52":170,"_54":55,"_56":-5,"_75":293,"_18":294},{"_34":157,"_13":158,"_37":159,"_39":150,"_41":42,"_43":160,"_45":46,"_47":161,"_17":49,"_50":51,"_52":162,"_54":55,"_56":-5,"_75":291,"_18":292},{"_34":60,"_13":59,"_37":40,"_39":61,"_41":42,"_43":44,"_45":46,"_47":141,"_17":49,"_50":63,"_52":-5,"_54":55,"_56":-5,"_75":289,"_18":290},{"_34":35,"_13":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":145,"_17":49,"_50":51,"_52":53,"_54":55,"_56":-5,"_75":287,"_18":288},{"_34":126,"_13":127,"_37":128,"_39":61,"_41":42,"_43":129,"_45":46,"_47":130,"_17":49,"_50":63,"_52":-5,"_54":55,"_56":-5,"_75":285,"_18":286},{"_34":134,"_13":135,"_37":136,"_39":128,"_41":42,"_43":129,"_45":46,"_47":137,"_17":49,"_50":51,"_52":138,"_54":55,"_56":-5,"_75":283,"_18":284},{"_34":117,"_13":118,"_37":119,"_39":61,"_41":42,"_43":120,"_45":46,"_47":121,"_17":81,"_50":122,"_52":123,"_54":55,"_56":-5,"_75":281,"_18":282},{"_34":93,"_13":94,"_37":95,"_39":-5,"_41":42,"_43":96,"_45":46,"_47":97,"_17":49,"_50":63,"_52":-5,"_54":55,"_56":-5,"_75":279,"_18":280},{"_34":101,"_13":102,"_37":103,"_39":95,"_41":42,"_43":96,"_45":46,"_47":104,"_17":49,"_50":24,"_52":105,"_54":55,"_56":-5,"_75":277,"_18":278},{"_34":78,"_13":79,"_37":80,"_39":-5,"_41":42,"_43":81,"_45":46,"_47":82,"_17":49,"_50":63,"_52":-5,"_54":55,"_56":-5,"_75":275,"_18":276},{"_34":86,"_13":87,"_37":88,"_39":80,"_41":42,"_43":81,"_45":46,"_47":89,"_17":49,"_50":51,"_52":90,"_54":55,"_56":-5,"_75":273,"_18":274},{"_34":69,"_13":70,"_37":71,"_39":-5,"_41":42,"_43":72,"_45":46,"_47":73,"_17":49,"_50":24,"_52":74,"_54":55,"_56":-5,"_75":271,"_18":272},[],[70],[],[79,87],[269],[79],[],[94,102],[267],[94],[],[58,118],[],[58,127,135],[264],[58,127],[],[58,59,36],[262],[58,59],[],[58,149,158],[],[58,149,166],[259,260],[58,149],[258,261,263,265],[58],["D",1760778102083],{"_11":12,"_225":221},{"_11":12,"_219":-5,"_220":221,"_182":183,"_222":223,"_224":55},{"_17":168,"_13":16,"_34":42,"_211":173,"_212":-5,"_213":-5,"_214":-5,"_215":-5,"_216":-5,"_217":14,"_218":12},"ctx",{"_204":-5,"_242":336,"_337":338,"_339":340,"_341":55,"_342":55,"_343":55,"_344":46,"_345":-5,"_346":-7,"_347":-7,"_348":49,"_349":55,"_350":55,"_351":-5,"_352":55,"_353":55,"_354":55,"_355":-5},"ENV",{"_307":308,"_309":310,"_311":16,"_312":313,"_314":315,"_316":317,"_318":319,"_320":321,"_322":323,"_324":325,"_326":327,"_328":329,"_330":331,"_332":333,"_334":335},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","71c1b20804b3232a7e513be260cfffc1932a9e97","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]