[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_101":102,"_103":104},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","vvampa","name","pleroma-librarian","path","main.ts","project",{"_22":45,"_11":12,"_33":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":25,"_58":32,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":79,"_80":81,"_82":83,"_84":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":-5,"_13":44},"permalink","https://www.val.town/x/vvampa/pleroma-librarian/code/main.ts","extension","id","4a207832-4356-4527-ba8e-8b12add839cb","fileId","61e469a2-9c28-11f1-8797-1607ee4eb77e","parentId","branchId","01cce2a6-6872-4702-87ae-1b7759b0922d","branchVersion",12,"latest",true,"createdAt",["D",1787381468515],"version",4,"fileType","http","content","import {\n createMcpHandler,\n McpServer,\n} from \"npm:@modelcontextprotocol/server@2\";\nimport * as z from \"npm:zod@4/v4\";\nimport { InstapaperClient } from \"./instapaper.ts\";\nimport { isBearerAuthorized } from \"./lib.ts\";\nimport { configurationStatus, escapeHtml } from \"./main_helpers.ts\";\n\nconst SERVICE = \"pleroma-librarian\";\n\nfunction envValues(): Record {\n return {\n INSTAPAPER_CONSUMER_KEY: Deno.env.get(\"INSTAPAPER_CONSUMER_KEY\"),\n INSTAPAPER_CONSUMER_SECRET: Deno.env.get(\"INSTAPAPER_CONSUMER_SECRET\"),\n INSTAPAPER_ACCESS_TOKEN: Deno.env.get(\"INSTAPAPER_ACCESS_TOKEN\"),\n INSTAPAPER_ACCESS_TOKEN_SECRET: Deno.env.get(\"INSTAPAPER_ACCESS_TOKEN_SECRET\"),\n MCP_BEARER_TOKEN: Deno.env.get(\"MCP_BEARER_TOKEN\"),\n SETUP_TOKEN: Deno.env.get(\"SETUP_TOKEN\"),\n };\n}\n\nfunction clientFromEnvironment(): InstapaperClient {\n const environment = envValues();\n const required = [\n \"INSTAPAPER_CONSUMER_KEY\",\n \"INSTAPAPER_CONSUMER_SECRET\",\n \"INSTAPAPER_ACCESS_TOKEN\",\n \"INSTAPAPER_ACCESS_TOKEN_SECRET\",\n ];\n const missing = required.filter((key) => !environment[key]);\n if (missing.length) throw new Error(`configuration incomplete: ${missing.join(\", \")}`);\n return new InstapaperClient({\n consumerKey: environment.INSTAPAPER_CONSUMER_KEY!,\n consumerSecret: environment.INSTAPAPER_CONSUMER_SECRET!,\n token: environment.INSTAPAPER_ACCESS_TOKEN!,\n tokenSecret: environment.INSTAPAPER_ACCESS_TOKEN_SECRET!,\n });\n}\n\nfunction toolSuccess(value: unknown) {\n return {\n content: [{ type: \"text\" as const, text: JSON.stringify(value, null, 2) }],\n };\n}\n\nfunction toolFailure(error: unknown) {\n const message = error instanceof Error ? error.message : \"unknown error\";\n return {\n isError: true,\n content: [{ type: \"text\" as const, text: message }],\n };\n}\n\nasync function withToolErrors(operation: () => Promise) {\n try {\n return toolSuccess(await operation());\n } catch (error) {\n return toolFailure(error);\n }\n}\n\nconst mcpHandler = createMcpHandler(() => {\n const server = new McpServer({ name: SERVICE, version: \"0.1.0\" });\n\n server.registerTool(\"verify-connection\", {\n description: \"Verify the configured Instapaper account and report subscription status.\",\n inputSchema: z.object({}),\n }, async () => withToolErrors(async () => clientFromEnvironment().verifyCredentials()));\n\n server.registerTool(\"save-to-kobo\", {\n description: \"Save a web article to Instapaper's main unread list so it syncs to Kobo.\",\n inputSchema: z.object({\n url: z.string().url(),\n title: z.string().optional(),\n description: z.string().optional(),\n tags: z.array(z.string()).optional(),\n }),\n }, async ({ url, title, description, tags }) => withToolErrors(async () =>\n clientFromEnvironment().addBookmark({ url, title, description, tags })\n ));\n\n server.registerTool(\"save-to-backlog\", {\n description: \"Save a web article to the lowercase backlog folder, which does not sync to Kobo.\",\n inputSchema: z.object({\n url: z.string().url(),\n title: z.string().optional(),\n description: z.string().optional(),\n tags: z.array(z.string()).optional(),\n }),\n }, async ({ url, title, description, tags }) => withToolErrors(async () => {\n const client = clientFromEnvironment();\n const listed = await client.listFolders();\n const folders = Array.isArray(listed) ? listed as Array> : [];\n let backlog = folders.find((folder) =>\n folder.type === \"folder\" && String(folder.title).toLowerCase() === \"backlog\"\n );\n if (!backlog) backlog = await client.createFolder(\"backlog\");\n const folderId = Number(backlog.folder_id);\n if (!Number.isSafeInteger(folderId)) throw new Error(\"backlog folder has no valid ID\");\n return client.addBookmark({ url, title, description, tags, folderId });\n }));\n\n server.registerTool(\"ensure-folder\", {\n description: \"Return an existing user folder by title or create it when absent.\",\n inputSchema: z.object({ title: z.string().min(1).max(64) }),\n }, async ({ title }) => withToolErrors(async () => {\n const client = clientFromEnvironment();\n const wanted = title.trim();\n const listed = await client.listFolders();\n const folders = Array.isArray(listed) ? listed as Array> : [];\n const existing = folders.find((folder) =>\n folder.type === \"folder\" && String(folder.title).toLowerCase() === wanted.toLowerCase()\n );\n return existing ?? await client.createFolder(wanted);\n }));\n\n server.registerTool(\"save-to-folder\", {\n description: \"Save a web object directly to a numeric Instapaper folder ID.\",\n inputSchema: z.object({\n url: z.string().url(),\n folderId: z.number().int().positive(),\n title: z.string().optional(),\n description: z.string().optional(),\n tags: z.array(z.string()).optional(),\n }),\n }, async ({ url, folderId, title, description, tags }) => withToolErrors(async () =>\n clientFromEnvironment().addBookmark({ url, folderId, title, description, tags })\n ));\n\n server.registerTool(\"list-articles\", {\n description: \"List Instapaper articles from unread, starred, archive, or a numeric folder ID.\",\n inputSchema: z.object({\n folder: z.string().default(\"unread\"),\n limit: z.number().int().min(1).max(500).default(25),\n }),\n }, async ({ folder, limit }) => withToolErrors(async () =>\n clientFromEnvironment().listBookmarks(folder, limit)\n ));\n\n server.registerTool(\"get-article-content\", {\n description: \"Retrieve Instapaper's processed HTML for one saved article.\",\n inputSchema: z.object({ bookmarkId: z.number().int().positive() }),\n }, async ({ bookmarkId }) => withToolErrors(async () => ({\n bookmarkId,\n html: await clientFromEnvironment().getText(bookmarkId),\n })));\n\n server.registerTool(\"list-folders\", {\n description: \"List user-created Instapaper folders.\",\n inputSchema: z.object({}),\n }, async () => withToolErrors(async () => clientFromEnvironment().listFolders()));\n\n server.registerTool(\"star-article\", {\n description: \"Star an article so it appears in Instapaper Liked and Kobo Liked.\",\n inputSchema: z.object({ bookmarkId: z.number().int().positive() }),\n }, async ({ bookmarkId }) => withToolErrors(async () =>\n clientFromEnvironment().star(bookmarkId)\n ));\n\n server.registerTool(\"archive-article\", {\n description: \"Move an article to the Instapaper archive without deleting it.\",\n inputSchema: z.object({ bookmarkId: z.number().int().positive() }),\n }, async ({ bookmarkId }) => withToolErrors(async () =>\n clientFromEnvironment().archive(bookmarkId)\n ));\n\n server.registerTool(\"delete-article\", {\n description: \"Permanently delete one exact duplicate Instapaper bookmark.\",\n inputSchema: z.object({ bookmarkId: z.number().int().positive() }),\n }, async ({ bookmarkId }) => withToolErrors(async () =>\n clientFromEnvironment().delete(bookmarkId)\n ));\n\n server.registerTool(\"move-article\", {\n description: \"Move an article to a numeric Instapaper folder ID.\",\n inputSchema: z.object({\n bookmarkId: z.number().int().positive(),\n folderId: z.number().int().positive(),\n }),\n }, async ({ bookmarkId, folderId }) => withToolErrors(async () =>\n clientFromEnvironment().move(bookmarkId, folderId)\n ));\n\n return server;\n});\n\nfunction secureHtml(body: string, status = 200): Response {\n return new Response(body, {\n status,\n headers: {\n \"content-type\": \"text/html; charset=utf-8\",\n \"cache-control\": \"no-store, max-age=0\",\n \"content-security-policy\": \"default-src 'none'; style-src 'unsafe-inline'; form-action 'self'; base-uri 'none'; frame-ancestors 'none'\",\n \"referrer-policy\": \"no-referrer\",\n \"x-content-type-options\": \"nosniff\",\n },\n });\n}\n\nfunction setupForm(): Response {\n return secureHtml(`pleroma librarian setup

pleroma librarian setup

One-time xAuth exchange. The password is sent only to Instapaper and is not stored by this service.

`);\n}\n\nasync function handleSetup(request: Request): Promise {\n const environment = envValues();\n const status = configurationStatus(environment);\n if (!status.setupEnabled) return new Response(\"setup disabled\", { status: 404 });\n if (request.method === \"GET\") return setupForm();\n if (request.method !== \"POST\") return new Response(\"method not allowed\", { status: 405 });\n\n const form = await request.formData();\n const submittedSetupToken = String(form.get(\"setup_token\") ?? \"\");\n if (!isBearerAuthorized(`Bearer ${submittedSetupToken}`, environment.SETUP_TOKEN)) {\n return secureHtml(\"

Unauthorized

\", 401);\n }\n const username = String(form.get(\"username\") ?? \"\");\n let password = String(form.get(\"password\") ?? \"\");\n if (!username || !password) return secureHtml(\"

Missing credentials

\", 400);\n\n try {\n const bootstrapClient = new InstapaperClient({\n consumerKey: environment.INSTAPAPER_CONSUMER_KEY!,\n consumerSecret: environment.INSTAPAPER_CONSUMER_SECRET!,\n });\n const tokens = await bootstrapClient.exchangeAccessToken(username, password);\n password = \"\";\n return secureHtml(`tokens generated

Access tokens generated

Add these two values to the Val Town environment, then remove SETUP_TOKEN.

INSTAPAPER_ACCESS_TOKEN

${escapeHtml(tokens.oauth_token)}

INSTAPAPER_ACCESS_TOKEN_SECRET

${escapeHtml(tokens.oauth_token_secret)}

Do not send these values through chat.

`);\n } catch (error) {\n password = \"\";\n const message = error instanceof Error ? error.message : \"setup failed\";\n return secureHtml(`

Setup failed

${escapeHtml(message)}

`, 400);\n }\n}\n\nexport default async function handler(request: Request): Promise {\n const url = new URL(request.url);\n if (url.pathname === \"/health\") {\n return Response.json({\n ok: true,\n service: SERVICE,\n configuration: configurationStatus(envValues()),\n }, { headers: { \"cache-control\": \"no-store\" } });\n }\n if (url.pathname === \"/setup\") return await handleSetup(request);\n if (url.pathname === \"/\") {\n return new Response(\"pleroma librarian\\npersonal reading and research integration\\n\", {\n headers: { \"content-type\": \"text/plain; charset=utf-8\" },\n });\n }\n if (url.pathname !== \"/mcp\") return new Response(\"not found\", { status: 404 });\n\n const environment = envValues();\n if (!isBearerAuthorized(request.headers.get(\"authorization\"), environment.MCP_BEARER_TOKEN)) {\n return new Response(\"unauthorized\", {\n status: 401,\n headers: { \"www-authenticate\": \"Bearer\" },\n });\n }\n return await mcpHandler.fetch(request);\n}\n","deleted",false,"label",[14],"75f80d4b-6b4c-4b2f-a2c6-6dbb105b9472",["D",1787183267868],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Personal Instapaper reading and research librarian","imageUrl","userId","4014c640-61ba-11f0-852d-15ceec715ebe","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","4014c641-61ba-11f0-852d-15ceec715ebe","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_100":96},"org",{"_9":10,"_94":-5,"_95":96,"_55":56,"_97":98,"_99":42},"branch",{"_35":30,"_11":85,"_22":28,"_86":45,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":12,"_93":10},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoiZGVmYXVsdCIsImlpZCI6Imluc18yTm10cGhQUklwU0tqZHNiOHNnNGd2ZjJURFUiLCJyaWQiOiJ1c2VyXzJ6dlV1b1h4VzRxbTBVblhueldOUjc4R3N1ViJ9","tier","free","canRestrictVals","profileImageUrl","ctx",{"_78":-5,"_134":135,"_136":137,"_138":139,"_140":42,"_141":42,"_142":42,"_143":32,"_144":-5,"_145":-7,"_146":-7,"_147":62,"_148":42,"_149":42,"_150":-5,"_151":42,"_152":42,"_153":42,"_154":-5},"ENV",{"_105":106,"_107":108,"_109":85,"_110":111,"_112":113,"_114":115,"_116":117,"_118":119,"_120":121,"_122":123,"_124":125,"_126":127,"_128":129,"_130":131,"_132":133},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]