Outlook Gatekeeper (OAuth)

\n \n ${content}\n

\n \n \n \n`;\n// --- ROUTES ---\napp.get(\"/\", async (c) => {\n await ensureTables();\n const auth = await getStoredAuth(c);\n const error = c.req.query(\"error\");\n const cleanup = c.req.query(\"cleanup\");\n const scheduleMessageParam = c.req.query(\"schedule\");\n if (!auth) {\n return c.html(Layout(`\n

\n \n

\n `, false));\n }\n const auditRes = await sqlite.execute(\"SELECT * FROM gatekeeper_audit ORDER BY timestamp DESC LIMIT 20\");\n const auditRows = auditRes.rows.map((row) => ({\n id: Array.isArray(row) ? row[0] : row.id,\n subject: Array.isArray(row) ? row[1] : row.subject,\n decision: Array.isArray(row) ? row[2] : row.decision,\n reasoning: Array.isArray(row) ? row[3] : row.reasoning,\n timestamp: Array.isArray(row) ? row[4] : row.timestamp,\n }));\n const rulesRes = await sqlite.execute(\"SELECT * FROM gatekeeper_rules\");\n const rulesRows = rulesRes.rows.map((row) => ({\n id: Array.isArray(row) ? row[0] : row.id,\n pattern: Array.isArray(row) ? row[1] : row.pattern,\n type: Array.isArray(row) ? row[2] : row.type,\n }));\n const aiStatus = OPENAI_API_KEY\n ? `AI classifier enabled with ${escapeHtml(OPENAI_MODEL)}.`\n : \"AI classifier is not configured yet. Manual rules and Outlook out-of-office status still work.\";\n const mutedCount = auditRows.filter((row) => [\"noise\", \"muted\"].includes(String(row.decision || \"\").toLowerCase())).length;\n const keptCount = auditRows.filter((row) => displayDecision(row.decision).label === \"Kept\").length;\n const latestEventTime = auditRows[0]?.timestamp ? formatNycEventTime(auditRows[0].timestamp) : \"None\";\n const schedule = await getScheduleSettings();\n const scheduleOptions = SCHEDULE_OPTIONS.map((option) => ``).join(\"\");\n const cleanupMessage = cleanup ? cleanup.split(\"|\").map((part) => escapeHtml(part)).join(\" \") : \"\";\n const scheduleMessage = scheduleMessageParam ? scheduleMessageParam.split(\"|\").map((part) => escapeHtml(part)).join(\" \") : \"\";\n const content = `\n ${error ? `` : \"\"}\n ${cleanupMessage ? `` : \"\"}\n ${scheduleMessage ? `` : \"\"}\n ${OPENAI_API_KEY ? \"\" : ``}\n\n

${escapeHtml(auth.user_email || \"Authenticated\")}

Calendar Sync Log

Review what Gatekeeper kept, where it turned alerts off, and why. Times are shown in New York time.

\n \n \n ${OPENAI_API_KEY ? \"AI\" : \"Manual\"} classifier\n \n \n \n NYC time\n \n \n

${auditRows.length}Logged events

${mutedCount}Alerts off

${keptCount}Kept

${rulesRows.length}Rules

\n \n \n \n \n \n ${auditRows.length ? auditRows.map((row) => {\n const decision = displayDecision(row.decision);\n return `\n \n \n \n \n \n `;\n }).join(\"\") : \"\"}\n \n

Event Time	Subject	Result	Why
${formatNycEventTime(row.timestamp)}	${escapeHtml(row.subject \|\| \"No Subject\")}	${decision.label}	${escapeHtml(displayReason(row.reasoning))}
No events processed yet.

\n ${auditRows.length ? auditRows.map((row) => {\n const decision = displayDecision(row.decision);\n return `\n

\n ${formatNycEventTime(row.timestamp)}\n ${decision.label}\n

${escapeHtml(row.subject || \"No Subject\")}

${escapeHtml(displayReason(row.reasoning))}

`;\n }).join(\"\") : `

No events processed yet.

`}\n

\n\n

Auto Sync

${schedule.enabled ? escapeHtml(scheduleLabel(schedule.intervalMinutes)) : \"Paused\"}

Val Town wakes the scheduler every 15 minutes. Gatekeeper only syncs when this saved schedule is enabled and due.

Last scheduled sync: ${escapeHtml(formatNycDateTime(schedule.lastRunAt))}

Next due: ${escapeHtml(nextScheduledRunText(schedule))}

Last result: ${escapeHtml(schedule.lastSummary)}

Schedule

\n \n

\n\n

Alert Rules

Personal blockers stay quiet.

Manual phrases run before AI. Current classifier: ${aiStatus}

Latest logged event: ${escapeHtml(latestEventTime)}

Add rule

Use short phrases for cases where reminders should be disabled.

\n \n

${escapeHtml(row.pattern)}remove
No manual rules

\n `;\n return c.html(Layout(content, true));\n});\napp.get(\"/login\", (c) => {\n if (!CLIENT_ID)\n return c.text(\"Missing MICROSOFT_CLIENT_ID env var\");\n const state = newToken();\n setOAuthStateCookie(c, state);\n const url = new URL(`https://login.microsoftonline.com/${TENANT_ID}/oauth2/v2.0/authorize`);\n url.searchParams.set(\"client_id\", CLIENT_ID);\n url.searchParams.set(\"response_type\", \"code\");\n url.searchParams.set(\"redirect_uri\", getRedirectUri(c));\n url.searchParams.set(\"response_mode\", \"query\");\n url.searchParams.set(\"scope\", \"offline_access Calendars.ReadWrite User.Read\");\n url.searchParams.set(\"state\", state);\n return c.redirect(url.toString());\n});\napp.get(\"/callback\", async (c) => {\n await ensureTables();\n const code = c.req.query(\"code\");\n const state = c.req.query(\"state\");\n const expectedState = getCookie(c, OAUTH_STATE_COOKIE);\n if (!code)\n return c.redirect(\"/?error=Authorization+code+missing\");\n if (!state || !expectedState || state !== expectedState) {\n clearOAuthStateCookie(c);\n return c.redirect(\"/?error=OAuth+state+check+failed\");\n }\n try {\n const res = await fetch(`https://login.microsoftonline.com/${TENANT_ID}/oauth2/v2.0/token`, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({\n client_id: CLIENT_ID,\n client_secret: CLIENT_SECRET,\n code,\n redirect_uri: getRedirectUri(c),\n grant_type: \"authorization_code\",\n }),\n });\n const data = await res.json();\n if (data.error) {\n console.error(\"Token exchange failed:\", data.error_description);\n return c.redirect(`/?error=${encodeURIComponent(data.error_description)}`);\n }\n const meRes = await fetch(\"https://graph.microsoft.com/v1.0/me\", {\n headers: { Authorization: `Bearer ${data.access_token}` },\n });\n const me = await meRes.json();\n const userEmail = me.mail || me.userPrincipalName || me.displayName || \"Authenticated User\";\n if (!isAllowedEmail(userEmail)) {\n clearOAuthStateCookie(c);\n clearSessionCookie(c);\n return c.redirect(\"/?error=This+Microsoft+account+is+not+allowed\");\n }\n const sessionId = newToken();\n const expiresAt = Date.now() + data.expires_in * 1000;\n await sqlite.execute({\n sql: \"INSERT OR REPLACE INTO gatekeeper_auth (id, access_token, refresh_token, expires_at, user_email) VALUES (?, ?, ?, ?, ?)\",\n args: [sessionId, data.access_token, data.refresh_token, expiresAt, userEmail],\n });\n clearOAuthStateCookie(c);\n setSessionCookie(c, sessionId);\n return c.redirect(\"/\");\n }\n catch (err) {\n console.error(\"Callback error:\", err);\n return c.redirect(`/?error=${encodeURIComponent(String(err))}`);\n }\n});\napp.get(\"/run\", async (c) => {\n await ensureTables();\n const wantsJson = c.req.query(\"format\") === \"json\" || (c.req.header(\"accept\") || \"\").includes(\"application/json\");\n try {\n const auth = await getStoredAuth(c);\n if (!auth)\n return wantsJson ? c.json({ ok: false, error: \"Login required\" }, 401) : c.redirect(\"/login\");\n const token = await getValidToken(c);\n if (!token)\n return wantsJson ? c.json({ ok: false, error: \"Login required\" }, 401) : c.redirect(\"/login\");\n const syncResult = await syncCalendarEvents(auth, token);\n if (wantsJson) {\n return c.json(syncResult);\n }\n return c.redirect(\"/\");\n }\n catch (err) {\n console.error(\"Sync run error:\", err);\n if (wantsJson)\n return c.json({ ok: false, error: String(err) }, 500);\n return c.redirect(`/?error=${encodeURIComponent(String(err))}`);\n }\n});\napp.post(\"/schedule\", async (c) => {\n await ensureTables();\n const auth = await getStoredAuth(c);\n if (!auth)\n return c.redirect(\"/login\");\n const body = await c.req.parseBody();\n const enabled = body.enabled === \"true\";\n const intervalMinutes = normalizeScheduleMinutes(body.interval_minutes);\n await setSetting(\"schedule_enabled\", enabled ? \"true\" : \"false\");\n await setSetting(\"schedule_interval_minutes\", String(intervalMinutes));\n const message = enabled\n ? `Automatic sync enabled: ${scheduleLabel(intervalMinutes)}.`\n : \"Automatic sync paused.\";\n return c.redirect(`/?schedule=${encodeURIComponent(message)}`);\n});\napp.post(\"/cleanup-muted-prefix\", async (c) => {\n await ensureTables();\n try {\n const auth = await getStoredAuth(c);\n if (!auth)\n return c.redirect(\"/login\");\n const token = await getValidToken(c);\n if (!token)\n return c.redirect(\"/login\");\n const now = new Date();\n const startRange = new Date(now.getTime() - CLEANUP_DAYS_BACK * 24 * 60 * 60 * 1000);\n const endRange = new Date(now.getTime() + CLEANUP_DAYS_FORWARD * 24 * 60 * 60 * 1000);\n const calendarUrl = new URL(\"https://graph.microsoft.com/v1.0/me/calendarView\");\n calendarUrl.searchParams.set(\"startDateTime\", startRange.toISOString());\n calendarUrl.searchParams.set(\"endDateTime\", endRange.toISOString());\n calendarUrl.searchParams.set(\"$select\", \"id,subject,isOrganizer,organizer,start\");\n calendarUrl.searchParams.set(\"$orderby\", \"start/dateTime\");\n calendarUrl.searchParams.set(\"$top\", \"100\");\n let nextUrl = calendarUrl.toString();\n let scanned = 0;\n let matched = 0;\n let repaired = 0;\n let skippedOwn = 0;\n let failed = 0;\n const seenIds = new Set();\n while (nextUrl) {\n const eventsRes = await fetch(nextUrl, {\n headers: {\n Authorization: `Bearer ${token}`,\n Prefer: `outlook.timezone=\"${NYC_TIME_ZONE}\"`,\n },\n });\n if (!eventsRes.ok) {\n const errorText = await eventsRes.text();\n throw new Error(`Graph API Error: ${errorText}`);\n }\n const eventsData = await eventsRes.json();\n for (const event of eventsData.value || []) {\n if (seenIds.has(event.id))\n continue;\n seenIds.add(event.id);\n scanned += 1;\n const subject = event.subject || \"\";\n const cleanedSubject = removeMutedPrefix(subject);\n if (!subject || cleanedSubject === subject)\n continue;\n matched += 1;\n if (isOwnEvent(event, auth)) {\n skippedOwn += 1;\n continue;\n }\n const patchRes = await fetch(`https://graph.microsoft.com/v1.0/me/events/${event.id}`, {\n method: \"PATCH\",\n headers: { Authorization: `Bearer ${token}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ subject: cleanedSubject }),\n });\n if (patchRes.ok) {\n repaired += 1;\n }\n else {\n failed += 1;\n console.error(\"Failed to repair renamed event:\", subject, await patchRes.text());\n }\n }\n nextUrl = eventsData[\"@odata.nextLink\"] || \"\";\n }\n const parts = [\n `Repaired ${repaired} renamed attendee-copy event${repaired === 1 ? \"\" : \"s\"}.`,\n `Scanned ${scanned} events; found ${matched}.`,\n skippedOwn ? `Skipped ${skippedOwn} organizer-owned event${skippedOwn === 1 ? \"\" : \"s\"} to avoid sending attendee updates.` : \"No organizer-owned renamed events found.\",\n failed ? `${failed} repair${failed === 1 ? \"\" : \"s\"} failed; check logs.` : \"\",\n ].filter(Boolean);\n return c.redirect(`/?cleanup=${encodeURIComponent(parts.join(\"|\"))}`);\n }\n catch (err) {\n console.error(\"Cleanup renamed titles error:\", err);\n return c.redirect(`/?error=${encodeURIComponent(String(err))}`);\n }\n});\napp.get(\"/logout\", async (c) => {\n const sessionId = getCookie(c, SESSION_COOKIE);\n if (sessionId) {\n await sqlite.execute({\n sql: \"DELETE FROM gatekeeper_auth WHERE id = ?\",\n args: [sessionId],\n });\n }\n clearSessionCookie(c);\n clearOAuthStateCookie(c);\n return c.redirect(\"/\");\n});\napp.post(\"/rules\", async (c) => {\n const auth = await getStoredAuth(c);\n if (!auth)\n return c.redirect(\"/login\");\n const { pattern } = await c.req.parseBody();\n await sqlite.execute({\n sql: \"INSERT OR IGNORE INTO gatekeeper_rules (pattern) VALUES (?)\",\n args: [pattern],\n });\n return c.redirect(\"/\");\n});\napp.get(\"/rules/delete/:id\", async (c) => {\n const auth = await getStoredAuth(c);\n if (!auth)\n return c.redirect(\"/login\");\n await sqlite.execute({\n sql: \"DELETE FROM gatekeeper_rules WHERE id = ?\",\n args: [c.req.param(\"id\")],\n });\n return c.redirect(\"/\");\n});\napp.onError((err) => Promise.reject(err));\nexport default app.fetch;\n",[138],"pulls","branches",1,"forks","envVars",{"_153":155,"_156":61},"connections",{"_153":61,"_154":61},"count","unfilledCount",7,"emptyCount",{"_41":137,"_31":138,"_29":55,"_132":-5,"_39":40,"_38":139,"_133":24,"_36":163,"_13":141,"_32":142,"_34":143,"_23":24,"_135":-5,"_160":164,"_26":165},{"_41":131,"_31":27,"_29":30,"_132":-5,"_39":40,"_38":14,"_133":57,"_36":159,"_13":61,"_32":33,"_34":35,"_23":24,"_135":-5,"_160":161,"_26":162},["D",1783447558411],"children",[],[27],["D",1783447550539],[],[138],["D",1783440688481],["D",1789521640046],{"_98":97,"_106":102},{"_98":97,"_99":100,"_101":102,"_18":53,"_103":104,"_105":24},{"_13":87,"_31":88,"_41":40,"_89":42,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":43,"_96":97},"ctx",{"_80":-5,"_126":204,"_205":206,"_207":208,"_209":24,"_210":24,"_211":24,"_212":57,"_213":-5,"_214":-7,"_215":-7,"_216":61,"_217":24,"_218":24,"_219":-5,"_220":24,"_221":24,"_222":24,"_223":-5},"ENV",{"_175":176,"_177":178,"_179":88,"_180":181,"_182":183,"_184":185,"_186":187,"_188":189,"_190":191,"_192":193,"_194":195,"_196":197,"_198":199,"_200":201,"_202":203},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Gatekeeper is waiting.

Calendar Sync Log

${escapeHtml(row.subject || \"No Subject\")}

${schedule.enabled ? escapeHtml(scheduleLabel(schedule.intervalMinutes)) : \"Paused\"}

Schedule

Personal blockers stay quiet.

Add rule

Diff · v69