agentgate 0.1.0

package/src/routes/reddit.js

@@ -0,0 +1,138 @@
+import { Router } from 'express';
+import { getAccountCredentials, setAccountCredentials } from '../lib/db.js';
+
+const router = Router();
+const REDDIT_API = 'https://oauth.reddit.com';
+const REDDIT_AUTH = 'https://www.reddit.com/api/v1';
+
+// Service metadata - exported for /api/readme and /api/skill
+export const serviceInfo = {
+  key: 'reddit',
+  name: 'Reddit',
+  shortDesc: 'Subreddits, posts, comments (DMs blocked)',
+  description: 'Reddit API proxy (DMs blocked)',
+  authType: 'oauth',
+  docs: 'https://www.reddit.com/dev/api/',
+  examples: [
+    'GET /api/reddit/{accountName}/api/v1/me',
+    'GET /api/reddit/{accountName}/r/{subreddit}/hot',
+    'GET /api/reddit/{accountName}/user/{username}/submitted'
+  ]
+};
+
+// Blocked routes - no DMs/private messages
+const BLOCKED_PATTERNS = [
+  /^message\//,                 // /message/inbox, /message/sent, etc.
+  /^api\/v1\/me\/blocked/,      // blocked users list
+  /^api\/v1\/me\/friends/      // friends list (privacy)
+];
+
+// Get a valid access token, refreshing if needed
+async function getAccessToken(accountName) {
+  const creds = getAccountCredentials('reddit', accountName);
+  if (!creds) {
+    return null;
+  }
+
+  // If we have an access token and it's not expired, use it
+  if (creds.accessToken && creds.expiresAt && Date.now() < creds.expiresAt) {
+    return creds.accessToken;
+  }
+
+  // Need to refresh the token
+  if (!creds.refreshToken) {
+    return null;
+  }
+
+  try {
+    const basicAuth = Buffer.from(`${creds.clientId}:${creds.clientSecret}`).toString('base64');
+
+    const response = await fetch(`${REDDIT_AUTH}/access_token`, {
+      method: 'POST',
+      headers: {
+        'Authorization': `Basic ${basicAuth}`,
+        'Content-Type': 'application/x-www-form-urlencoded'
+      },
+      body: new URLSearchParams({
+        grant_type: 'refresh_token',
+        refresh_token: creds.refreshToken
+      })
+    });
+
+    if (!response.ok) {
+      console.error('Reddit token refresh failed:', await response.text());
+      return null;
+    }
+
+    const tokens = await response.json();
+
+    // Store the new tokens
+    setAccountCredentials('reddit', accountName, {
+      ...creds,
+      accessToken: tokens.access_token,
+      expiresAt: Date.now() + (tokens.expires_in * 1000) - 60000 // 1 min buffer
+    });
+
+    return tokens.access_token;
+  } catch (error) {
+    console.error('Reddit token refresh failed:', error);
+    return null;
+  }
+}
+
+// Proxy GET requests to Reddit API
+// Route: /api/reddit/:accountName/*
+router.get('/:accountName/*', async (req, res) => {
+  try {
+    const { accountName } = req.params;
+    const accessToken = await getAccessToken(accountName);
+    if (!accessToken) {
+      return res.status(401).json({
+        error: 'Reddit account not configured',
+        message: `Set up Reddit account "${accountName}" in the admin UI`
+      });
+    }
+
+    const path = req.params[0] || '';
+
+    // Check blocked routes
+    for (const pattern of BLOCKED_PATTERNS) {
+      if (pattern.test(path)) {
+        return res.status(403).json({
+          error: 'Route blocked',
+          message: 'This endpoint is blocked for privacy (DMs/messages)'
+        });
+      }
+    }
+
+    const queryString = new URLSearchParams(req.query).toString();
+    const url = `${REDDIT_API}/${path}${queryString ? '?' + queryString : ''}`;
+
+    const response = await fetch(url, {
+      headers: {
+        'Authorization': `Bearer ${accessToken}`,
+        'User-Agent': 'agentgate-gateway/1.0'
+      }
+    });
+
+    const data = await response.json();
+    res.status(response.status).json(data);
+  } catch (error) {
+    res.status(500).json({ error: 'Reddit API request failed', message: error.message });
+  }
+});
+
+// Handle root path for account
+router.get('/:accountName', async (req, res) => {
+  res.json({
+    service: 'reddit',
+    account: req.params.accountName,
+    description: 'Reddit API proxy (DMs blocked). Append API path after account name.',
+    examples: [
+      `GET /api/reddit/${req.params.accountName}/api/v1/me`,
+      `GET /api/reddit/${req.params.accountName}/r/programming/hot`
+    ]
+  });
+});
+
+export default router;

package/src/routes/ui/bluesky.js

@@ -0,0 +1,66 @@
+import { setAccountCredentials, deleteAccount, getAccountCredentials } from '../../lib/db.js';
+
+export function registerRoutes(router) {
+  router.post('/bluesky/setup', (req, res) => {
+    const { accountName, identifier, appPassword } = req.body;
+    if (!accountName || !identifier || !appPassword) {
+      return res.status(400).send('Account name, identifier, and app password required');
+    }
+    setAccountCredentials('bluesky', accountName, { identifier, appPassword });
+    res.redirect('/ui');
+  });
+
+  router.post('/bluesky/delete', (req, res) => {
+    const { accountName } = req.body;
+    deleteAccount('bluesky', accountName);
+    res.redirect('/ui');
+  });
+}
+
+export function renderCard(accounts, _baseUrl) {
+  const serviceAccounts = accounts.filter(a => a.service === 'bluesky');
+
+  const renderAccounts = () => {
+    if (serviceAccounts.length === 0) return '';
+    return serviceAccounts.map(acc => {
+      const creds = getAccountCredentials('bluesky', acc.name);
+      const info = creds?.identifier ? `${acc.name} (${creds.identifier})` : acc.name;
+      return `
+        <div class="account-item">
+          <span><strong>${info}</strong></span>
+          <form method="POST" action="/ui/bluesky/delete" style="margin:0;">
+            <input type="hidden" name="accountName" value="${acc.name}">
+            <button type="submit" class="btn-sm btn-danger">Remove</button>
+          </form>
+        </div>
+      `;
+    }).join('');
+  };
+
+  return `
+  <div class="card">
+    <div class="service-header">
+      <img class="service-icon" src="/public/icons/bluesky.svg" alt="Bluesky">
+      <h3>Bluesky</h3>
+    </div>
+    ${renderAccounts()}
+    <details>
+      <summary>Add Bluesky Account</summary>
+      <div style="margin-top: 15px;">
+        <p class="help">Create an app password at <a href="https://bsky.app/settings/app-passwords" target="_blank">bsky.app/settings/app-passwords</a></p>
+        <form method="POST" action="/ui/bluesky/setup">
+          <label>Account Name</label>
+          <input type="text" name="accountName" placeholder="main, alt, etc." required>
+          <label>Handle (no @ symbol)</label>
+          <input type="text" name="identifier" placeholder="yourname.bsky.social" required>
+          <label>App Password</label>
+          <input type="password" name="appPassword" placeholder="xxxx-xxxx-xxxx-xxxx" required>
+          <button type="submit" class="btn-primary">Add Account</button>
+        </form>
+      </div>
+    </details>
+  </div>`;
+}
+
+export const serviceName = 'bluesky';
+export const displayName = 'Bluesky';

package/src/routes/ui/calendar.js

@@ -0,0 +1,120 @@
+import { setAccountCredentials, deleteAccount, getAccountCredentials } from '../../lib/db.js';
+
+export function registerRoutes(router, baseUrl) {
+  router.post('/google/setup', (req, res) => {
+    const { accountName, clientId, clientSecret } = req.body;
+    if (!accountName || !clientId || !clientSecret) {
+      return res.status(400).send('Account name, client ID, and secret required');
+    }
+    setAccountCredentials('google_calendar', accountName, { clientId, clientSecret });
+
+    const redirectUri = `${baseUrl}/ui/google/callback`;
+    const scope = 'https://www.googleapis.com/auth/calendar.readonly';
+    const state = `agentgate_google_${accountName}`;
+
+    const authUrl = 'https://accounts.google.com/o/oauth2/v2/auth?' +
+      `client_id=${clientId}&response_type=code&` +
+      `state=${encodeURIComponent(state)}&redirect_uri=${encodeURIComponent(redirectUri)}&` +
+      `scope=${encodeURIComponent(scope)}&access_type=offline&prompt=consent`;
+
+    res.redirect(authUrl);
+  });
+
+  router.get('/google/callback', async (req, res) => {
+    const { code, error, state } = req.query;
+    if (error) {
+      return res.status(400).send(`Google OAuth error: ${error}`);
+    }
+
+    const accountName = state?.replace('agentgate_google_', '') || 'default';
+    const creds = getAccountCredentials('google_calendar', accountName);
+    if (!creds) {
+      return res.status(400).send('Google Calendar account not found. Please try setup again.');
+    }
+
+    try {
+      const redirectUri = `${baseUrl}/ui/google/callback`;
+
+      const response = await fetch('https://oauth2.googleapis.com/token', {
+        method: 'POST',
+        headers: {
+          'Content-Type': 'application/x-www-form-urlencoded'
+        },
+        body: new URLSearchParams({
+          client_id: creds.clientId,
+          client_secret: creds.clientSecret,
+          code,
+          grant_type: 'authorization_code',
+          redirect_uri: redirectUri
+        })
+      });
+
+      const tokens = await response.json();
+      if (tokens.error) {
+        return res.status(400).send(`Google token error: ${tokens.error}`);
+      }
+
+      setAccountCredentials('google_calendar', accountName, {
+        ...creds,
+        accessToken: tokens.access_token,
+        refreshToken: tokens.refresh_token,
+        expiresAt: Date.now() + (tokens.expires_in * 1000) - 60000
+      });
+
+      res.redirect('/ui');
+    } catch (err) {
+      res.status(500).send(`Google OAuth failed: ${err.message}`);
+    }
+  });
+
+  router.post('/google/delete', (req, res) => {
+    const { accountName } = req.body;
+    deleteAccount('google_calendar', accountName);
+    res.redirect('/ui');
+  });
+}
+
+export function renderCard(accounts, baseUrl) {
+  const serviceAccounts = accounts.filter(a => a.service === 'google_calendar');
+
+  const renderAccounts = () => {
+    if (serviceAccounts.length === 0) return '';
+    return serviceAccounts.map(acc => `
+      <div class="account-item">
+        <span><strong>${acc.name}</strong></span>
+        <form method="POST" action="/ui/google/delete" style="margin:0;">
+          <input type="hidden" name="accountName" value="${acc.name}">
+          <button type="submit" class="btn-sm btn-danger">Remove</button>
+        </form>
+      </div>
+    `).join('');
+  };
+
+  return `
+  <div class="card">
+    <div class="service-header">
+      <img class="service-icon" src="/public/icons/google-calendar.svg" alt="Google Calendar">
+      <h3>Google Calendar</h3>
+    </div>
+    ${renderAccounts()}
+    <details>
+      <summary>Add Google Calendar Account</summary>
+      <div style="margin-top: 15px;">
+        <p class="help">Create OAuth credentials at <a href="https://console.cloud.google.com/apis/credentials" target="_blank">Google Cloud Console</a>. Enable the Calendar API.</p>
+        <p class="help">Redirect URI: <span class="copyable">${baseUrl}/ui/google/callback <button type="button" class="copy-btn" onclick="copyText('${baseUrl}/ui/google/callback', this)">Copy</button></span></p>
+        <form method="POST" action="/ui/google/setup">
+          <label>Account Name</label>
+          <input type="text" name="accountName" placeholder="personal, work, etc." required>
+          <label>Client ID</label>
+          <input type="text" name="clientId" placeholder="xxxxxxxx.apps.googleusercontent.com" required>
+          <label>Client Secret</label>
+          <input type="password" name="clientSecret" placeholder="Google client secret" required>
+          <button type="submit" class="btn-primary">Add Account</button>
+        </form>
+      </div>
+    </details>
+  </div>`;
+}
+
+export const serviceName = 'google_calendar';
+export const displayName = 'Google Calendar';

package/src/routes/ui/fitbit.js

@@ -0,0 +1,122 @@
+import { setAccountCredentials, deleteAccount, getAccountCredentials } from '../../lib/db.js';
+
+export function registerRoutes(router, baseUrl) {
+  router.post('/fitbit/setup', (req, res) => {
+    const { accountName, clientId, clientSecret } = req.body;
+    if (!accountName || !clientId || !clientSecret) {
+      return res.status(400).send('Account name, client ID, and secret required');
+    }
+    setAccountCredentials('fitbit', accountName, { clientId, clientSecret });
+
+    const redirectUri = `${baseUrl}/ui/fitbit/callback`;
+    const scope = 'activity heartrate location nutrition oxygen_saturation profile respiratory_rate settings sleep social temperature weight';
+    const state = `agentgate_fitbit_${accountName}`;
+
+    const authUrl = 'https://www.fitbit.com/oauth2/authorize?' +
+      `client_id=${clientId}&response_type=code&` +
+      `state=${encodeURIComponent(state)}&redirect_uri=${encodeURIComponent(redirectUri)}&` +
+      `scope=${encodeURIComponent(scope)}`;
+
+    res.redirect(authUrl);
+  });
+
+  router.get('/fitbit/callback', async (req, res) => {
+    const { code, error, state } = req.query;
+    if (error) {
+      return res.status(400).send(`Fitbit OAuth error: ${error}`);
+    }
+
+    const accountName = state?.replace('agentgate_fitbit_', '') || 'default';
+    const creds = getAccountCredentials('fitbit', accountName);
+    if (!creds) {
+      return res.status(400).send('Fitbit account not found. Please try setup again.');
+    }
+
+    try {
+      const redirectUri = `${baseUrl}/ui/fitbit/callback`;
+      const basicAuth = Buffer.from(`${creds.clientId}:${creds.clientSecret}`).toString('base64');
+
+      const response = await fetch('https://api.fitbit.com/oauth2/token', {
+        method: 'POST',
+        headers: {
+          'Content-Type': 'application/x-www-form-urlencoded',
+          'Authorization': `Basic ${basicAuth}`
+        },
+        body: new URLSearchParams({
+          client_id: creds.clientId,
+          code,
+          grant_type: 'authorization_code',
+          redirect_uri: redirectUri
+        })
+      });
+
+      const tokens = await response.json();
+      if (tokens.errors) {
+        return res.status(400).send(`Fitbit token error: ${tokens.errors[0]?.message || 'Unknown error'}`);
+      }
+
+      setAccountCredentials('fitbit', accountName, {
+        ...creds,
+        accessToken: tokens.access_token,
+        refreshToken: tokens.refresh_token,
+        userId: tokens.user_id,
+        expiresAt: Date.now() + (tokens.expires_in * 1000) - 60000
+      });
+
+      res.redirect('/ui');
+    } catch (err) {
+      res.status(500).send(`Fitbit OAuth failed: ${err.message}`);
+    }
+  });
+
+  router.post('/fitbit/delete', (req, res) => {
+    const { accountName } = req.body;
+    deleteAccount('fitbit', accountName);
+    res.redirect('/ui');
+  });
+}
+
+export function renderCard(accounts, baseUrl) {
+  const serviceAccounts = accounts.filter(a => a.service === 'fitbit');
+
+  const renderAccounts = () => {
+    if (serviceAccounts.length === 0) return '';
+    return serviceAccounts.map(acc => `
+      <div class="account-item">
+        <span><strong>${acc.name}</strong></span>
+        <form method="POST" action="/ui/fitbit/delete" style="margin:0;">
+          <input type="hidden" name="accountName" value="${acc.name}">
+          <button type="submit" class="btn-sm btn-danger">Remove</button>
+        </form>
+      </div>
+    `).join('');
+  };
+
+  return `
+  <div class="card">
+    <div class="service-header">
+      <img class="service-icon" src="/public/icons/fitbit.svg" alt="Fitbit">
+      <h3>Fitbit</h3>
+    </div>
+    ${renderAccounts()}
+    <details>
+      <summary>Add Fitbit Account</summary>
+      <div style="margin-top: 15px;">
+        <p class="help">Create an app at <a href="https://dev.fitbit.com/apps/new" target="_blank">Fitbit Developer</a>. Set OAuth 2.0 Application Type to "Personal".</p>
+        <p class="help">Redirect URI: <span class="copyable">${baseUrl}/ui/fitbit/callback <button type="button" class="copy-btn" onclick="copyText('${baseUrl}/ui/fitbit/callback', this)">Copy</button></span></p>
+        <form method="POST" action="/ui/fitbit/setup">
+          <label>Account Name</label>
+          <input type="text" name="accountName" placeholder="personal, etc." required>
+          <label>Client ID (OAuth 2.0 Client ID)</label>
+          <input type="text" name="clientId" placeholder="Fitbit client ID" required>
+          <label>Client Secret</label>
+          <input type="password" name="clientSecret" placeholder="Fitbit client secret" required>
+          <button type="submit" class="btn-primary">Add Account</button>
+        </form>
+      </div>
+    </details>
+  </div>`;
+}
+
+export const serviceName = 'fitbit';
+export const displayName = 'Fitbit';

package/src/routes/ui/github.js

@@ -0,0 +1,60 @@
+import { setAccountCredentials, deleteAccount } from '../../lib/db.js';
+
+export function registerRoutes(router) {
+  router.post('/github/setup', (req, res) => {
+    const { accountName, token } = req.body;
+    if (!accountName || !token) {
+      return res.status(400).send('Account name and personal access token required');
+    }
+    setAccountCredentials('github', accountName, { token });
+    res.redirect('/ui');
+  });
+
+  router.post('/github/delete', (req, res) => {
+    const { accountName } = req.body;
+    deleteAccount('github', accountName);
+    res.redirect('/ui');
+  });
+}
+
+export function renderCard(accounts, _baseUrl) {
+  const serviceAccounts = accounts.filter(a => a.service === 'github');
+
+  const renderAccounts = () => {
+    if (serviceAccounts.length === 0) return '';
+    return serviceAccounts.map(acc => `
+      <div class="account-item">
+        <span><strong>${acc.name}</strong></span>
+        <form method="POST" action="/ui/github/delete" style="margin:0;">
+          <input type="hidden" name="accountName" value="${acc.name}">
+          <button type="submit" class="btn-sm btn-danger">Remove</button>
+        </form>
+      </div>
+    `).join('');
+  };
+
+  return `
+  <div class="card">
+    <div class="service-header">
+      <img class="service-icon" src="/public/icons/github.svg" alt="GitHub">
+      <h3>GitHub</h3>
+    </div>
+    ${renderAccounts()}
+    <details>
+      <summary>Add GitHub Account</summary>
+      <div style="margin-top: 15px;">
+        <p class="help">Create a token at <a href="https://github.com/settings/tokens" target="_blank">github.com/settings/tokens</a></p>
+        <form method="POST" action="/ui/github/setup">
+          <label>Account Name</label>
+          <input type="text" name="accountName" placeholder="personal, work, etc." required>
+          <label>Personal Access Token</label>
+          <input type="password" name="token" placeholder="ghp_xxxx or github_pat_xxxx" required>
+          <button type="submit" class="btn-primary">Add Account</button>
+        </form>
+      </div>
+    </details>
+  </div>`;
+}
+
+export const serviceName = 'github';
+export const displayName = 'GitHub';

package/src/routes/ui/index.js

@@ -0,0 +1,35 @@
+// Service handlers - add new services here
+import * as github from './github.js';
+import * as bluesky from './bluesky.js';
+import * as reddit from './reddit.js';
+import * as calendar from './calendar.js';
+import * as youtube from './youtube.js';
+import * as mastodon from './mastodon.js';
+import * as linkedin from './linkedin.js';
+import * as jira from './jira.js';
+import * as fitbit from './fitbit.js';
+
+// Export all services in display order
+export const services = [
+  github,
+  bluesky,
+  mastodon,
+  reddit,
+  calendar,
+  youtube,
+  fitbit,
+  jira,
+  linkedin
+];
+
+// Register all service routes
+export function registerAllRoutes(router, baseUrl) {
+  for (const service of services) {
+    service.registerRoutes(router, baseUrl);
+  }
+}
+
+// Render all service cards
+export function renderAllCards(accounts, baseUrl) {
+  return services.map(service => service.renderCard(accounts, baseUrl)).join('\n');
+}

package/src/routes/ui/jira.js

@@ -0,0 +1,72 @@
+import { setAccountCredentials, deleteAccount, getAccountCredentials } from '../../lib/db.js';
+
+export function registerRoutes(router, _baseUrl) {
+  router.post('/jira/setup', (req, res) => {
+    const { accountName, domain, email, apiToken } = req.body;
+    if (!accountName || !domain || !email || !apiToken) {
+      return res.status(400).send('Account name, domain, email, and API token required');
+    }
+    setAccountCredentials('jira', accountName, {
+      domain: domain.replace(/^https?:\/\//, '').replace(/\/$/, ''),
+      email,
+      apiToken
+    });
+    res.redirect('/ui');
+  });
+
+  router.post('/jira/delete', (req, res) => {
+    const { accountName } = req.body;
+    deleteAccount('jira', accountName);
+    res.redirect('/ui');
+  });
+}
+
+export function renderCard(accounts, _baseUrl) {
+  const serviceAccounts = accounts.filter(a => a.service === 'jira');
+
+  const renderAccounts = () => {
+    if (serviceAccounts.length === 0) return '';
+    return serviceAccounts.map(acc => {
+      const creds = getAccountCredentials('jira', acc.name);
+      const info = creds?.domain ? `${acc.name} (${creds.domain})` : acc.name;
+      return `
+        <div class="account-item">
+          <span><strong>${info}</strong></span>
+          <form method="POST" action="/ui/jira/delete" style="margin:0;">
+            <input type="hidden" name="accountName" value="${acc.name}">
+            <button type="submit" class="btn-sm btn-danger">Remove</button>
+          </form>
+        </div>
+      `;
+    }).join('');
+  };
+
+  return `
+  <div class="card">
+    <div class="service-header">
+      <img class="service-icon" src="/public/icons/jira.svg" alt="Jira">
+      <h3>Jira</h3>
+    </div>
+    ${renderAccounts()}
+    <details>
+      <summary>Add Jira Account</summary>
+      <div style="margin-top: 15px;">
+        <p class="help">Create an API token at <a href="https://id.atlassian.com/manage-profile/security/api-tokens" target="_blank">Atlassian Account Settings</a>.</p>
+        <form method="POST" action="/ui/jira/setup">
+          <label>Account Name</label>
+          <input type="text" name="accountName" placeholder="work, client, etc." required>
+          <label>Jira Domain</label>
+          <input type="text" name="domain" placeholder="yourcompany.atlassian.net" required>
+          <label>Email</label>
+          <input type="text" name="email" placeholder="you@company.com" required>
+          <label>API Token</label>
+          <input type="password" name="apiToken" placeholder="Your Jira API token" required>
+          <button type="submit" class="btn-primary">Add Account</button>
+        </form>
+      </div>
+    </details>
+  </div>`;
+}
+
+export const serviceName = 'jira';
+export const displayName = 'Jira';