[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_259":260,"_261":262},"routes/_app.x.$handle.$name",{"_106":105,"_37":49,"_114":92,"_32":115,"_13":14,"_116":-5,"_11":117,"_118":119,"_120":121,"_122":123,"_124":125,"_26":-5,"_126":127,"_128":129,"_130":30,"_131":132,"_133":64,"_134":-5,"_135":-5,"_136":137},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":-5},"project",{"_47":48,"_37":49,"_42":50,"_51":-5,"_52":30,"_53":54,"_55":54,"_56":57,"_58":59,"_19":60,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":68,"_69":70,"_71":-5,"_72":-5,"_73":-5,"_74":-5,"_75":76,"_77":76,"_78":79,"_80":79,"_81":79,"_82":76,"_83":76,"_84":85,"_86":87,"_88":89,"_90":30},"version",5,"changes",[25],"aiChatInfo",{"_20":21,"_22":-5,"_23":-5,"_24":-5},"userId","aiChatMessageId","a3f70af8-85c5-4445-ac50-6c46f843707f","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle",{"_26":27,"_28":-7,"_29":30,"_31":30,"_32":33,"_34":33},"file",{"_35":36,"_37":33,"_38":39,"_40":41,"_42":43,"_44":14,"_45":46,"_29":30},"previous","deleted",false,"deletedHere","path","mcpServer.ts","latestPath","fileId","7f059456-8d56-11f1-bc1b-1607ee4eb77e","name","fileType","script","content","/**\n * The public-facing MCP server: implements enough of the JSON-RPC 2.0 /\n * Streamable HTTP protocol for `initialize`, `tools/list`, and `tools/call`.\n * No authentication is required from callers — this file is what runs at\n * POST /mcp.\n */\nimport { callTool, listAllTools } from \"./registry.ts\";\n\nconst PROTOCOL_VERSION = \"2025-06-18\";\n\ninterface JsonRpcRequest {\n jsonrpc: \"2.0\";\n id?: string | number | null;\n method: string;\n params?: any;\n}\n\nfunction rpcResult(id: string | number | null | undefined, result: unknown) {\n return { jsonrpc: \"2.0\", id: id ?? null, result };\n}\n\nfunction rpcError(id: string | number | null | undefined, code: number, message: string) {\n return { jsonrpc: \"2.0\", id: id ?? null, error: { code, message } };\n}\n\n/** Handles a single JSON-RPC message. Returns null for notifications (no response expected). */\nexport async function handleRpcMessage(msg: JsonRpcRequest): Promise {\n const isNotification = msg.id === undefined;\n\n try {\n switch (msg.method) {\n case \"initialize\": {\n return rpcResult(msg.id, {\n protocolVersion: PROTOCOL_VERSION,\n capabilities: { tools: {} },\n serverInfo: { name: \"valtown-mcp-gateway\", version: \"1.0.0\" },\n });\n }\n\n case \"notifications/initialized\":\n case \"notifications/cancelled\":\n return null; // no response for notifications\n\n case \"ping\":\n return rpcResult(msg.id, {});\n\n case \"tools/list\": {\n const tools = await listAllTools();\n return rpcResult(msg.id, { tools });\n }\n\n case \"tools/call\": {\n const { name, arguments: args } = msg.params ?? {};\n if (!name) return rpcError(msg.id, -32602, \"Missing required param: name\");\n try {\n const result = await callTool(name, args);\n return rpcResult(msg.id, result);\n } catch (err) {\n // Surface upstream failures as MCP tool errors, not transport errors.\n return rpcResult(msg.id, {\n isError: true,\n content: [{ type: \"text\", text: err instanceof Error ? err.message : String(err) }],\n });\n }\n }\n\n default:\n if (isNotification) return null;\n return rpcError(msg.id, -32601, `Method not found: ${msg.method}`);\n }\n } catch (err) {\n if (isNotification) return null;\n return rpcError(msg.id, -32603, err instanceof Error ? err.message : String(err));\n }\n}\n\n/** Handles a full HTTP request body, which per spec may be a single message or a batch array. */\nexport async function handleMcpRequest(body: unknown): Promise {\n if (Array.isArray(body)) {\n const responses = (await Promise.all(body.map((m) => handleRpcMessage(m)))).filter(\n (r) => r !== null,\n );\n return responses.length > 0 ? responses : null;\n }\n return await handleRpcMessage(body as JsonRpcRequest);\n}\n","createdAt",["D",1785553806288],"branchVersion","branchId","a512eba7-02b2-45dc-b6d5-35e156574e53","id","87c02ff4-ba2e-4342-9fae-eee645b2363d","mcp-gateway",["D",1785553765138],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Authless public MCP gateway to token-gated providers","imageUrl","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/c0239427-e00f-4148-05e5-9ae43f5d9900/square512?exp=1789585199&sig=01bf599d5c18d363b52c47ba498f20a9d66bc5fe632fc5b03e0c7b8e75e73a3a","c94f26a6-095b-410f-9863-932d0daf4df4","pinnedFileId","019fbb4c-435a-77b6-a1db-ed03ccfe08b5","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019fbafd-5266-716c-969f-f171ce67672a","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_106":105,"_113":-5},"org",{"_106":105,"_107":108,"_109":-5,"_19":60,"_110":111,"_112":30},"branch",{"_13":91,"_37":92,"_47":46,"_93":48,"_94":95,"_96":97,"_98":54,"_99":100,"_101":102,"_103":49,"_104":105},"isOwned",8,"main","projectId","forkedBranchId","69713bf6-594c-11f1-a5c4-ee650bb23af1","forkedBranchVersion",20,"forkedProjectPrivacy","forkedProjectId","69708896-594c-11f1-a5c4-ee650bb23af1","forkedProjectOrgId","019aa807-52c2-709c-928b-2029bae9a558","projectName","userHandle","thevt1","handle","displayName","VTklgy","avatar","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_47":48,"_37":49,"_42":255,"_51":-5,"_52":30,"_53":54,"_55":54,"_56":57,"_58":59,"_19":60,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":68,"_69":70,"_71":-5,"_72":-5,"_73":-5,"_74":-5,"_75":76,"_77":76,"_78":79,"_80":79,"_81":79,"_82":76,"_83":76,"_84":256,"_86":257,"_88":258,"_90":30},"tree",[210,213,214,215,216,217,218],"files",[210,211,212,213,214,215,216,217,218],"counts",{"_200":68,"_201":184,"_202":68,"_203":204,"_205":206},"contents",[148,149,150,151,152,153,154],"upstreamProject",{"_47":100,"_37":144,"_56":145,"_58":59,"_53":54,"_84":146},"upstreamBranch",{"_47":95,"_42":138,"_139":140,"_37":92,"_93":100,"_13":97,"_94":-5,"_96":-5,"_141":142,"_51":-5,"_90":30,"_53":54,"_104":143,"_69":102,"_103":144},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1779832014660],"updatedAt",["D",1779896135471],"lockfileKey","1779896174494-esm.town_v_templates_hono-jsx-starter@20-main","templates","hono-jsx-starter","Minimal Hono JSX starter for Val Town",{"_106":143,"_113":147},"https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/129cab32-3bd7-4c3e-f39b-f12900c76100/square512?exp=1789585199&sig=e0ad9b96a0e58967744de3785adb3e9a68085da5b0c135b58439da2ef923cdc0",{"_47":195,"_37":54,"_35":196,"_158":-5,"_45":46,"_44":184,"_160":64,"_42":197,"_13":68,"_38":198,"_40":-5,"_29":30,"_163":-5,"_32":199},{"_47":189,"_37":190,"_35":191,"_158":-5,"_45":46,"_44":184,"_160":30,"_42":192,"_13":68,"_38":26,"_40":193,"_29":30,"_163":-5,"_32":194},{"_47":182,"_37":183,"_35":62,"_158":-5,"_45":46,"_44":184,"_160":30,"_42":185,"_13":68,"_38":186,"_40":187,"_29":30,"_163":-5,"_32":188},{"_47":175,"_37":176,"_35":177,"_158":-5,"_45":46,"_44":178,"_160":64,"_42":179,"_13":68,"_38":39,"_40":180,"_29":30,"_163":-5,"_32":181},{"_47":172,"_37":33,"_35":36,"_158":-5,"_45":46,"_44":14,"_160":64,"_42":173,"_13":68,"_38":39,"_40":41,"_29":30,"_163":-5,"_32":174},{"_47":165,"_37":166,"_35":167,"_158":-5,"_45":46,"_44":168,"_160":64,"_42":169,"_13":68,"_38":39,"_40":170,"_29":30,"_163":-5,"_32":171},{"_47":155,"_37":156,"_35":157,"_158":-5,"_45":46,"_44":159,"_160":64,"_42":161,"_13":68,"_38":39,"_40":162,"_29":30,"_163":-5,"_32":164},"21b4ce28-9a20-44af-8044-197d4b725eb9","registry.ts","78e1a3bc-8d56-11f1-8e8e-1607ee4eb77e","parentId",4,"latest",["D",1785553795986],"/**\n * Aggregates tools across all configured providers into one flat namespace,\n * prefixed as `${providerId}__${toolName}`, and dispatches calls back to the\n * right upstream. Tool lists are cached briefly in-memory (best effort — a\n * cold Val Town instance will just refetch).\n */\nimport { providers } from \"./providers.ts\";\nimport { callUpstreamTool, listUpstreamTools } from \"./mcpClient.ts\";\n\nconst PREFIX_SEP = \"__\";\nconst CACHE_TTL_MS = 5 * 60 * 1000;\n\nlet cache: { at: number; tools: any[] } | null = null;\n\nexport function providerFor(prefixedName: string) {\n const idx = prefixedName.indexOf(PREFIX_SEP);\n if (idx === -1) return null;\n const providerId = prefixedName.slice(0, idx);\n const toolName = prefixedName.slice(idx + PREFIX_SEP.length);\n const provider = providers.find((p) => p.id === providerId);\n if (!provider) return null;\n return { provider, toolName };\n}\n\nexport async function listAllTools(forceRefresh = false): Promise {\n if (!forceRefresh && cache && Date.now() - cache.at < CACHE_TTL_MS) {\n return cache.tools;\n }\n\n const results = await Promise.allSettled(providers.map((p) => listUpstreamTools(p)));\n\n const tools: any[] = [];\n results.forEach((result, i) => {\n const provider = providers[i];\n if (result.status === \"fulfilled\") {\n for (const tool of result.value) {\n tools.push({\n ...tool,\n name: `${provider.id}${PREFIX_SEP}${tool.name}`,\n description: `[${provider.name}] ${tool.description ?? \"\"}`.trim(),\n });\n }\n } else {\n console.error(`Failed to list tools for provider \"${provider.id}\":`, result.reason);\n }\n });\n\n cache = { at: Date.now(), tools };\n return tools;\n}\n\nexport async function callTool(prefixedName: string, args: Record | undefined) {\n const resolved = providerFor(prefixedName);\n if (!resolved) {\n throw new Error(\n `Unknown tool \"${prefixedName}\". Expected format \"__\", e.g. \"context7__resolve-library-id\".`,\n );\n }\n return await callUpstreamTool(resolved.provider, resolved.toolName, args);\n}\n","label",[156],"b567aafe-5ec4-4fd4-8a99-4684b2d86a62","providers.ts","6be3ebd4-8d56-11f1-b98c-1607ee4eb77e",2,["D",1785553774188],"/**\n * Config for upstream MCP providers this gateway tunnels to.\n *\n * Each provider is a remote MCP server (Streamable HTTP transport) that may\n * require its own secret. The secret lives in THIS val's env vars — callers\n * of our public gateway never see it and never need to auth themselves.\n *\n * To add a new provider:\n * 1. Add an entry below with a unique `id` (used as the tool-name prefix).\n * 2. If it needs a secret, add an env var to this val and reference it via\n * `authEnvVar`.\n */\nexport interface McpProviderConfig {\n /** Unique slug. Used as the prefix for tool names, e.g. \"context7__resolve-library-id\". */\n id: string;\n /** Human-readable name shown on the homepage. */\n name: string;\n /** Upstream MCP Streamable HTTP endpoint. */\n url: string;\n /** Env var (on this val) holding the secret to send upstream, if any. */\n authEnvVar?: string;\n /** Header name to send the secret as (default: \"Authorization\"). */\n authHeader?: string;\n /** Optional prefix before the secret value, e.g. \"Bearer \" for Authorization headers. */\n authPrefix?: string;\n /** Short description shown on the homepage. */\n description?: string;\n}\n\nexport const providers: McpProviderConfig[] = [\n {\n id: \"context7\",\n name: \"Context7\",\n url: \"https://mcp.context7.com/mcp\",\n authEnvVar: \"CONTEXT7_API_KEY\",\n authHeader: \"CONTEXT7_API_KEY\",\n description: \"Up-to-date library docs & code examples for LLMs\",\n },\n // Add more providers here, e.g.:\n // {\n // id: \"firecrawl\",\n // name: \"Firecrawl\",\n // url: \"https://mcp.firecrawl.dev/mcp\",\n // authEnvVar: \"FIRECRAWL_API_KEY\",\n // authHeader: \"Authorization\",\n // authPrefix: \"Bearer \",\n // description: \"Web scraping & crawling\",\n // },\n];\n",[166],"ff7979d6-9129-4fc0-b37d-35794f2a46bf",["D",1785553806288],[33],"28108f5f-bc4a-45cf-8c24-cf3c7d768b2d","mcpClient.ts","73747710-8d56-11f1-9c8a-1607ee4eb77e",3,["D",1785553786882],"/**\n * A minimal MCP *client* for talking to upstream Streamable HTTP MCP servers\n * (https://modelcontextprotocol.io — 2025-06-18 transport spec).\n *\n * Handles the initialize handshake, session-id propagation, and both\n * plain-JSON and SSE-framed responses.\n */\nimport type { McpProviderConfig } from \"./providers.ts\";\n\nconst PROTOCOL_VERSION = \"2025-06-18\";\nconst CLIENT_INFO = { name: \"valtown-mcp-gateway\", version: \"1.0.0\" };\n\nfunction authHeaders(provider: McpProviderConfig): Record {\n const headers: Record = {};\n if (provider.authEnvVar) {\n const secret = Deno.env.get(provider.authEnvVar);\n if (secret) {\n const headerName = provider.authHeader ?? \"Authorization\";\n headers[headerName] = provider.authPrefix ? `${provider.authPrefix}${secret}` : secret;\n }\n }\n return headers;\n}\n\nasync function postToUpstream(\n provider: McpProviderConfig,\n body: unknown,\n sessionId?: string,\n): Promise {\n const headers: Record = {\n \"Content-Type\": \"application/json\",\n \"Accept\": \"application/json, text/event-stream\",\n ...authHeaders(provider),\n };\n if (sessionId) headers[\"Mcp-Session-Id\"] = sessionId;\n return await fetch(provider.url, {\n method: \"POST\",\n headers,\n body: JSON.stringify(body),\n });\n}\n\n/** Parses either a plain JSON body or a single-shot SSE stream into a JSON-RPC message. */\nasync function parseRpcResponse(res: Response): Promise {\n const contentType = res.headers.get(\"content-type\") ?? \"\";\n const text = await res.text();\n if (!text) return null;\n if (contentType.includes(\"text/event-stream\")) {\n let last: any = null;\n for (const line of text.split(\"\\n\")) {\n if (line.startsWith(\"data:\")) {\n try {\n last = JSON.parse(line.slice(5).trim());\n } catch {\n // ignore malformed SSE lines\n }\n }\n }\n return last;\n }\n try {\n return JSON.parse(text);\n } catch {\n return null;\n }\n}\n\n/** Performs the initialize + notifications/initialized handshake. Returns the session id, if any. */\nasync function handshake(provider: McpProviderConfig): Promise {\n const initRes = await postToUpstream(provider, {\n jsonrpc: \"2.0\",\n id: 1,\n method: \"initialize\",\n params: {\n protocolVersion: PROTOCOL_VERSION,\n capabilities: {},\n clientInfo: CLIENT_INFO,\n },\n });\n const sessionId = initRes.headers.get(\"mcp-session-id\") ?? undefined;\n const initData = await parseRpcResponse(initRes);\n if (initData?.error) {\n throw new Error(`[${provider.id}] initialize failed: ${initData.error.message}`);\n }\n // Fire-and-forget notification; upstream returns 202 with no body.\n await postToUpstream(provider, { jsonrpc: \"2.0\", method: \"notifications/initialized\" }, sessionId);\n return sessionId;\n}\n\nexport async function listUpstreamTools(provider: McpProviderConfig): Promise {\n const sessionId = await handshake(provider);\n const res = await postToUpstream(\n provider,\n { jsonrpc: \"2.0\", id: 2, method: \"tools/list\", params: {} },\n sessionId,\n );\n const data = await parseRpcResponse(res);\n if (data?.error) {\n throw new Error(`[${provider.id}] tools/list failed: ${data.error.message}`);\n }\n return data?.result?.tools ?? [];\n}\n\nexport async function callUpstreamTool(\n provider: McpProviderConfig,\n toolName: string,\n args: Record | undefined,\n): Promise {\n const sessionId = await handshake(provider);\n const res = await postToUpstream(\n provider,\n {\n jsonrpc: \"2.0\",\n id: 2,\n method: \"tools/call\",\n params: { name: toolName, arguments: args ?? {} },\n },\n sessionId,\n );\n const data = await parseRpcResponse(res);\n if (data?.error) {\n throw new Error(`[${provider.id}] tools/call failed: ${data.error.message}`);\n }\n return data?.result;\n}\n",[176],"d329b9ec-4f10-4f94-95b1-c422b7b8bd70","index.tsx",1,["D",1785553765138],"http","/** @jsxImportSource npm:hono@4/jsx */\nimport { Hono } from \"npm:hono@4\";\nimport { parseVal, serveFile } from \"https://esm.town/v/std/utils/index.ts\";\n\n// In-memory state. Resets whenever the server restarts.\n// For persistence across restarts, use std/sqlite or std/blob.\nlet count = 0;\n\nconst Layout = ({ title, children }: { title: string; children: any }) => (\n \n \n {title}\n \n \n \n \n \n \n \n {children}\n \n \n);\n\nconst app = new Hono();\n\napp.get(\"/\", (c) =>\n c.html(\n \n

Hello from Hono JSX

\n A minimal Val Town starter.{\" \"}\n \n Remix this val.\n \n

\n Server count:{\" \"}\n {count}\n

\n \n Increment\n \n

\n Lives in memory on the server. Resets when the val restarts.\n

\n \n ,\n ));\n\napp.get(\"/about\", (c) =>\n c.html(\n \n

About

Server-rendered with Hono JSX on Val Town.

\n ,\n ));\n\n// API routes\napp.post(\"/api/increment\", (c) => c.json({ count: ++count }));\n\n// Serve static files\napp.get(\"/public/*\", (c) => serveFile(c.req.path));\n\n// View source on Val Town\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\n// Unwrap and rethrow Hono errors as the original error\napp.onError((err) => Promise.reject(err));\n\nexport default app.fetch;",[183],"b558ba0a-957f-40cd-b511-4ae6f557ebf0","README.md","019fbb4c-435a-77b6-a1db-ea2d40b85af2",["D",1785553765138],"# hono-jsx-starter\n\nA minimal [Hono](https://hono.dev) + Hono JSX starter for Val Town.\nServer-rendered HTML, no build step, no React.\n\n## Picking a starter\n\n| Starter | When to pick it |\n| --- | --- |\n| [`basic-html-starter`](https://www.val.town/x/templates/basic-html-starter) | Static HTML pages. Sprinkle of vanilla JS. No server-side rendering. |\n| **[`hono-jsx-starter`](https://www.val.town/x/templates/hono-jsx-starter)** *(you're here)* | Dynamic server-rendered HTML with JSX. API routes. No React, no SPA. |\n| [`react-hono-starter`](https://www.val.town/x/templates/react-hono-starter) | Client-side React SPA with a Hono API backend. |\n\n## What's here\n\n```\nindex.tsx Hono app, Layout, routes\npublic/\n favicon.svg Static asset\n counter.ts Tiny client-side script\n```\n\nThe whole app fits in one file. As you grow it, the natural next moves are:\n\n- Pull `Layout` into its own `.tsx` file once you have 3+ pages.\n- Split routes with `app.route(\"/api\", api)` if `/api/*` grows.\n- Add more files under `public/` — they're served by a single\n `app.get(\"/public/*\", ...)` route.\n\n## Patterns worth knowing\n\n**JSX pragma.** Every `.tsx` file that uses JSX needs this at the top:\n\n```tsx\n/** @jsxImportSource npm:hono@4/jsx */\n```\n\n**Server state.** The counter on `/` is `let count = 0` at module scope. It\nlives in memory on the Val Town server and survives across requests — but resets\nwhenever the val restarts (deploys, idle timeouts, etc.). For persistent state,\nswap it for [`std/sqlite`](https://www.val.town/x/std/sqlite) or\n[`std/blob`](https://www.val.town/x/std/blob).\n\n**API routes.** The `Increment` button POSTs to `/api/increment`, which returns\nJSON. Mix server-rendered pages and JSON endpoints in the same Hono app:\n\n```ts\napp.post(\"/api/increment\", (c) => c.json({ count: ++count }));\n```\n\n**Static files.** `serveFile` reads the file by path and serves it with the\nright content-type. `.ts` files are transpiled to JS on request by Val Town — so\nyou can write `public/counter.ts` and reference it as\n`

Diff · v5