[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_161":162,"_163":164},"routes/_app.x.$handle.$name",{"_102":101,"_38":51,"_110":92,"_33":111,"_13":14,"_112":-5,"_11":113,"_114":115,"_116":117,"_118":119,"_120":121,"_26":-5,"_122":-5,"_123":-5,"_124":31,"_125":126,"_127":64,"_128":-5,"_129":-5,"_130":131},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":-5},"project",{"_49":50,"_38":51,"_44":52,"_53":-5,"_54":31,"_55":56,"_57":56,"_58":59,"_60":-5,"_19":61,"_62":37,"_63":64,"_65":-5,"_66":-5,"_67":68,"_69":70,"_71":-5,"_72":-5,"_73":-5,"_74":-5,"_75":76,"_77":76,"_78":79,"_80":79,"_81":79,"_82":76,"_83":76,"_84":85,"_86":87,"_88":89,"_90":31},"version",5,"changes",[25],"aiChatInfo",{"_20":21,"_22":-5,"_23":-5,"_24":-5},"userId","aiChatMessageId","e9cc2486-23c4-4be5-83b0-d8751fc630c2","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle",{"_26":27,"_28":29,"_30":31,"_32":31,"_33":34,"_35":34},"file",{"_36":37,"_38":34,"_39":40,"_41":43,"_44":45,"_46":14,"_47":48,"_30":31},"previous",{"_36":37,"_38":34,"_39":40,"_41":42},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","acd8b71c-831c-11f1-a42c-1607ee4eb77e","name","fileType","http","content","// Captivate Podcast API — Remote MCP Server (JSON-RPC 2.0 over HTTP)\n\nconst CAPTIVATE_BASE = \"https://api.captivate.fm\";\n\n// ---------------------------------------------------------------------------\n// CORS — applied to EVERY response from this val\n// ---------------------------------------------------------------------------\n\nconst CORS_HEADERS: Record = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, Authorization\",\n};\n\n// Module-level bearer token cache\nlet cachedToken: string | null = null;\nlet tokenExpiry = 0;\n\nasync function getToken(): Promise {\n const now = Date.now();\n if (cachedToken && now < tokenExpiry) {\n return cachedToken;\n }\n\n const userId = Deno.env.get(\"CAPTIVATE_USER_ID\");\n const apiToken = Deno.env.get(\"CAPTIVATE_API_TOKEN\");\n\n if (!userId || !apiToken) {\n throw new Error(\n \"Missing CAPTIVATE_USER_ID or CAPTIVATE_API_TOKEN environment variables\",\n );\n }\n\n const form = new URLSearchParams();\n form.set(\"username\", userId);\n form.set(\"token\", apiToken);\n\n const res = await fetch(`${CAPTIVATE_BASE}/authenticate/token`, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: form.toString(),\n });\n\n if (!res.ok) {\n const text = await res.text();\n throw new Error(`Captivate auth failed (${res.status}): ${text}`);\n }\n\n const data = await res.json();\n const token = data?.data?.user?.token ?? data?.token ?? data?.data?.token;\n\n if (!token) {\n throw new Error(\"Captivate auth response did not include a token\");\n }\n\n cachedToken = token;\n // Cache for 50 minutes\n tokenExpiry = now + 50 * 60 * 1000;\n return token;\n}\n\nasync function captivateGet(path: string): Promise {\n const token = await getToken();\n const res = await fetch(`${CAPTIVATE_BASE}${path}`, {\n headers: { Authorization: `Bearer ${token}` },\n });\n\n if (!res.ok) {\n const text = await res.text();\n throw new Error(`Captivate API error (${res.status}): ${text}`);\n }\n\n return await res.json();\n}\n\n// ---------------------------------------------------------------------------\n// Tool definitions\n// ---------------------------------------------------------------------------\n\nconst TOOLS = [\n {\n name: \"list_my_shows\",\n description: \"List all shows the user manages\",\n inputSchema: {\n type: \"object\",\n properties: {},\n },\n },\n {\n name: \"get_show\",\n description: \"Get details for a specific show\",\n inputSchema: {\n type: \"object\",\n properties: {\n show_id: { type: \"string\", description: \"The show ID\" },\n },\n required: [\"show_id\"],\n },\n },\n {\n name: \"get_show_episodes\",\n description: \"List episodes for a show with optional pagination offset\",\n inputSchema: {\n type: \"object\",\n properties: {\n show_id: { type: \"string\", description: \"The show ID\" },\n offset: {\n type: \"number\",\n description: \"Pagination offset (default 0)\",\n },\n },\n required: [\"show_id\"],\n },\n },\n {\n name: \"get_episode\",\n description: \"Get details for a specific episode\",\n inputSchema: {\n type: \"object\",\n properties: {\n episode_id: { type: \"string\", description: \"The episode ID\" },\n },\n required: [\"episode_id\"],\n },\n },\n {\n name: \"get_show_feed_url\",\n description: \"Get the RSS feed URL for a show\",\n inputSchema: {\n type: \"object\",\n properties: {\n show_id: { type: \"string\", description: \"The show ID\" },\n },\n required: [\"show_id\"],\n },\n },\n {\n name: \"get_podcast_overview_analytics\",\n description:\n \"Get overview analytics for a podcast show, optionally filtered by date range\",\n inputSchema: {\n type: \"object\",\n properties: {\n show_id: { type: \"string\", description: \"The show ID\" },\n start: {\n type: \"string\",\n description: \"Start date (optional, e.g. YYYY-MM-DD)\",\n },\n end: {\n type: \"string\",\n description: \"End date (optional, e.g. YYYY-MM-DD)\",\n },\n },\n required: [\"show_id\"],\n },\n },\n {\n name: \"get_episode_overview_analytics\",\n description:\n \"Get overview analytics for a specific episode, optionally filtered by date range\",\n inputSchema: {\n type: \"object\",\n properties: {\n show_id: { type: \"string\", description: \"The show ID\" },\n episode_id: { type: \"string\", description: \"The episode ID\" },\n start: {\n type: \"string\",\n description: \"Start date (optional, e.g. YYYY-MM-DD)\",\n },\n end: {\n type: \"string\",\n description: \"End date (optional, e.g. YYYY-MM-DD)\",\n },\n },\n required: [\"show_id\", \"episode_id\"],\n },\n },\n {\n name: \"get_podcast_average_analytics\",\n description:\n \"Get average analytics for a podcast show over a given interval\",\n inputSchema: {\n type: \"object\",\n properties: {\n show_id: { type: \"string\", description: \"The show ID\" },\n intervalDays: {\n type: \"number\",\n description: \"Number of days for the averaging interval (default 28)\",\n },\n },\n required: [\"show_id\"],\n },\n },\n];\n\n// ---------------------------------------------------------------------------\n// Tool dispatcher\n// ---------------------------------------------------------------------------\n\nasync function callTool(name: string, args: Record): Promise {\n const userId = Deno.env.get(\"CAPTIVATE_USER_ID\");\n\n switch (name) {\n case \"list_my_shows\":\n return captivateGet(`/users/${userId}/shows/manager`);\n\n case \"get_show\":\n return captivateGet(`/shows/${args.show_id}`);\n\n case \"get_show_episodes\":\n return captivateGet(\n `/shows/${args.show_id}/episodes?offset=${args.offset ?? 0}`,\n );\n\n case \"get_episode\":\n return captivateGet(`/episodes/${args.episode_id}`);\n\n case \"get_show_feed_url\":\n return captivateGet(`/shows/${args.show_id}/feed`);\n\n case \"get_podcast_overview_analytics\": {\n const params = new URLSearchParams();\n if (args.start) params.set(\"start\", args.start);\n if (args.end) params.set(\"end\", args.end);\n params.set(\"includeTopEpisodes\", \"true\");\n const qs = params.toString();\n return captivateGet(`/insights/${args.show_id}/overview${qs ? `?${qs}` : \"\"}`);\n }\n\n case \"get_episode_overview_analytics\": {\n const params = new URLSearchParams();\n if (args.start) params.set(\"start\", args.start);\n if (args.end) params.set(\"end\", args.end);\n const qs = params.toString();\n return captivateGet(\n `/insights/${args.show_id}/overview/${args.episode_id}${qs ? `?${qs}` : \"\"}`,\n );\n }\n\n case \"get_podcast_average_analytics\":\n return captivateGet(\n `/insights/${args.show_id}/averages?intervalDays=${args.intervalDays ?? 28}`,\n );\n\n default:\n throw new Error(`Unknown tool: ${name}`);\n }\n}\n\n// ---------------------------------------------------------------------------\n// JSON-RPC helpers (all include CORS_HEADERS)\n// ---------------------------------------------------------------------------\n\nfunction jsonrpcResponse(id: any, result: any): Response {\n return new Response(JSON.stringify({ jsonrpc: \"2.0\", id, result }), {\n status: 200,\n headers: {\n \"Content-Type\": \"application/json\",\n ...CORS_HEADERS,\n },\n });\n}\n\nfunction jsonrpcError(\n id: any,\n code: number,\n message: string,\n status = 400,\n): Response {\n return new Response(\n JSON.stringify({\n jsonrpc: \"2.0\",\n id,\n error: { code, message },\n }),\n {\n status,\n headers: {\n \"Content-Type\": \"application/json\",\n ...CORS_HEADERS,\n },\n },\n );\n}\n\n// ---------------------------------------------------------------------------\n// OAuth 2.1 shim — no-login, satisfies Claude's remote connector flow\n// ---------------------------------------------------------------------------\n\nfunction randomString(len = 32): string {\n const bytes = new Uint8Array(len);\n crypto.getRandomValues(bytes);\n return Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nfunction oauthMetadata(origin: string) {\n return {\n issuer: origin,\n authorization_endpoint: `${origin}/authorize`,\n token_endpoint: `${origin}/token`,\n registration_endpoint: `${origin}/register`,\n response_types_supported: [\"code\"],\n grant_types_supported: [\"authorization_code\", \"refresh_token\"],\n code_challenge_methods_supported: [\"S256\"],\n token_endpoint_auth_methods_supported: [\"none\"],\n scopes_supported: [\"mcp\"],\n };\n}\n\nasync function handleOAuth(req: Request, url: URL): Promise {\n const origin = url.origin;\n\n // Metadata discovery\n if (\n req.method === \"GET\" &&\n (url.pathname === \"/.well-known/oauth-authorization-server\" ||\n url.pathname === \"/.well-known/oauth-protected-resource\")\n ) {\n return new Response(JSON.stringify(oauthMetadata(origin)), {\n status: 200,\n headers: { \"Content-Type\": \"application/json\", ...CORS_HEADERS },\n });\n }\n\n // Dynamic client registration\n if (req.method === \"POST\" && url.pathname === \"/register\") {\n let body: any = {};\n try {\n body = await req.json();\n } catch {\n // ignore parse errors\n }\n return new Response(\n JSON.stringify({\n client_id: randomString(16),\n client_name: body.client_name ?? \"mcp-client\",\n redirect_uris: body.redirect_uris ?? [],\n client_id_issued_at: Math.floor(Date.now() / 1000),\n token_endpoint_auth_method: \"none\",\n grant_types: [\"authorization_code\", \"refresh_token\"],\n response_types: [\"code\"],\n }),\n {\n status: 200,\n headers: { \"Content-Type\": \"application/json\", ...CORS_HEADERS },\n },\n );\n }\n\n // Authorization endpoint — auto-approve, no login form\n if (req.method === \"GET\" && url.pathname === \"/authorize\") {\n const redirectUri = url.searchParams.get(\"redirect_uri\");\n const state = url.searchParams.get(\"state\");\n if (!redirectUri) {\n return new Response(\"Missing redirect_uri\", {\n status: 400,\n headers: { \"Content-Type\": \"text/plain\", ...CORS_HEADERS },\n });\n }\n const code = randomString(16);\n const params = new URLSearchParams({ code });\n if (state) params.set(\"state\", state);\n return new Response(null, {\n status: 302,\n headers: { Location: `${redirectUri}?${params.toString()}`, ...CORS_HEADERS },\n });\n }\n\n // Token endpoint — issue token without validation\n if (req.method === \"POST\" && url.pathname === \"/token\") {\n return new Response(\n JSON.stringify({\n access_token: randomString(32),\n token_type: \"bearer\",\n expires_in: 3600,\n refresh_token: randomString(32),\n }),\n {\n status: 200,\n headers: { \"Content-Type\": \"application/json\", ...CORS_HEADERS },\n },\n );\n }\n\n return null;\n}\n\n// ---------------------------------------------------------------------------\n// Main handler\n// ---------------------------------------------------------------------------\n\nexport default async (req: Request): Promise => {\n const url = new URL(req.url);\n\n // CORS preflight — applies to ALL routes (OAuth + MCP)\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: CORS_HEADERS });\n }\n\n // OAuth 2.1 shim routes\n const oauthResponse = await handleOAuth(req, url);\n if (oauthResponse) return oauthResponse;\n\n // Non-POST info response\n if (req.method !== \"POST\") {\n return new Response(\"Captivate MCP Server — send JSON-RPC 2.0 POST requests.\", {\n status: 200,\n headers: { \"Content-Type\": \"text/plain\", ...CORS_HEADERS },\n });\n }\n\n // Parse JSON-RPC body\n let body: any;\n try {\n body = await req.json();\n } catch {\n return jsonrpcError(null, -32700, \"Parse error\");\n }\n\n const { id, method, params } = body;\n\n // notifications/initialized — return 202 empty\n if (method === \"notifications/initialized\") {\n return new Response(null, { status: 202, headers: CORS_HEADERS });\n }\n\n switch (method) {\n case \"initialize\":\n return jsonrpcResponse(id, {\n protocolVersion: \"2024-11-05\",\n capabilities: { tools: {} },\n serverInfo: { name: \"captivate-mcp\", version: \"1.0.0\" },\n });\n\n case \"tools/list\":\n return jsonrpcResponse(id, { tools: TOOLS });\n\n case \"tools/call\": {\n const { name, arguments: toolArgs } = params ?? {};\n try {\n const result = await callTool(name, toolArgs ?? {});\n return jsonrpcResponse(id, {\n content: [\n { type: \"text\", text: JSON.stringify(result, null, 2) },\n ],\n });\n } catch (err) {\n return jsonrpcResponse(id, {\n isError: true,\n content: [\n {\n type: \"text\",\n text: err instanceof Error ? err.message : String(err),\n },\n ],\n });\n }\n }\n\n default:\n return jsonrpcError(id, -32601, `Method not found: ${method}`);\n }\n};\n","// Captivate Podcast API — Remote MCP Server (JSON-RPC 2.0 over HTTP)\n\nconst CAPTIVATE_BASE = \"https://api.captivate.fm\";\n\n// ---------------------------------------------------------------------------\n// CORS — applied to EVERY response from this val\n// ---------------------------------------------------------------------------\n\nconst CORS_HEADERS: Record = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, Authorization\",\n};\n\n// Module-level bearer token cache\nlet cachedToken: string | null = null;\nlet tokenExpiry = 0;\n\nasync function getToken(): Promise {\n const now = Date.now();\n if (cachedToken && now < tokenExpiry) {\n return cachedToken;\n }\n\n const userId = Deno.env.get(\"CAPTIVATE_USER_ID\");\n const apiToken = Deno.env.get(\"CAPTIVATE_API_TOKEN\");\n\n if (!userId || !apiToken) {\n throw new Error(\n \"Missing CAPTIVATE_USER_ID or CAPTIVATE_API_TOKEN environment variables\",\n );\n }\n\n const form = new URLSearchParams();\n form.set(\"username\", userId);\n form.set(\"token\", apiToken);\n\n const res = await fetch(`${CAPTIVATE_BASE}/authenticate/token`, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: form.toString(),\n });\n\n if (!res.ok) {\n const text = await res.text();\n throw new Error(`Captivate auth failed (${res.status}): ${text}`);\n }\n\n const data = await res.json();\n const token = data?.data?.user?.token ?? data?.token ?? data?.data?.token;\n\n if (!token) {\n throw new Error(\"Captivate auth response did not include a token\");\n }\n\n cachedToken = token;\n // Cache for 50 minutes\n tokenExpiry = now + 50 * 60 * 1000;\n return token;\n}\n\nasync function captivateGet(path: string): Promise {\n const token = await getToken();\n const res = await fetch(`${CAPTIVATE_BASE}${path}`, {\n headers: { Authorization: `Bearer ${token}` },\n });\n\n if (!res.ok) {\n const text = await res.text();\n throw new Error(`Captivate API error (${res.status}): ${text}`);\n }\n\n return await res.json();\n}\n\n// ---------------------------------------------------------------------------\n// Tool definitions\n// ---------------------------------------------------------------------------\n\nconst TOOLS = [\n {\n name: \"list_my_shows\",\n description: \"List all shows the user manages\",\n inputSchema: {\n type: \"object\",\n properties: {},\n },\n },\n {\n name: \"get_show\",\n description: \"Get details for a specific show\",\n inputSchema: {\n type: \"object\",\n properties: {\n show_id: { type: \"string\", description: \"The show ID\" },\n },\n required: [\"show_id\"],\n },\n },\n {\n name: \"get_show_episodes\",\n description: \"List episodes for a show with optional pagination offset\",\n inputSchema: {\n type: \"object\",\n properties: {\n show_id: { type: \"string\", description: \"The show ID\" },\n offset: {\n type: \"number\",\n description: \"Pagination offset (default 0)\",\n },\n },\n required: [\"show_id\"],\n },\n },\n {\n name: \"get_episode\",\n description: \"Get details for a specific episode\",\n inputSchema: {\n type: \"object\",\n properties: {\n episode_id: { type: \"string\", description: \"The episode ID\" },\n },\n required: [\"episode_id\"],\n },\n },\n {\n name: \"get_show_feed_url\",\n description: \"Get the RSS feed URL for a show\",\n inputSchema: {\n type: \"object\",\n properties: {\n show_id: { type: \"string\", description: \"The show ID\" },\n },\n required: [\"show_id\"],\n },\n },\n {\n name: \"get_podcast_overview_analytics\",\n description:\n \"Get overview analytics for a podcast show, optionally filtered by date range\",\n inputSchema: {\n type: \"object\",\n properties: {\n show_id: { type: \"string\", description: \"The show ID\" },\n start: {\n type: \"string\",\n description: \"Start date (optional, e.g. YYYY-MM-DD)\",\n },\n end: {\n type: \"string\",\n description: \"End date (optional, e.g. YYYY-MM-DD)\",\n },\n },\n required: [\"show_id\"],\n },\n },\n {\n name: \"get_episode_overview_analytics\",\n description:\n \"Get overview analytics for a specific episode, optionally filtered by date range\",\n inputSchema: {\n type: \"object\",\n properties: {\n show_id: { type: \"string\", description: \"The show ID\" },\n episode_id: { type: \"string\", description: \"The episode ID\" },\n start: {\n type: \"string\",\n description: \"Start date (optional, e.g. YYYY-MM-DD)\",\n },\n end: {\n type: \"string\",\n description: \"End date (optional, e.g. YYYY-MM-DD)\",\n },\n },\n required: [\"show_id\", \"episode_id\"],\n },\n },\n {\n name: \"get_podcast_average_analytics\",\n description:\n \"Get average analytics for a podcast show over a given interval\",\n inputSchema: {\n type: \"object\",\n properties: {\n show_id: { type: \"string\", description: \"The show ID\" },\n intervalDays: {\n type: \"number\",\n description: \"Number of days for the averaging interval (default 28)\",\n },\n },\n required: [\"show_id\"],\n },\n },\n];\n\n// ---------------------------------------------------------------------------\n// Tool dispatcher\n// ---------------------------------------------------------------------------\n\nasync function callTool(name: string, args: Record): Promise {\n const userId = Deno.env.get(\"CAPTIVATE_USER_ID\");\n\n switch (name) {\n case \"list_my_shows\":\n return captivateGet(`/users/${userId}/shows/manager`);\n\n case \"get_show\":\n return captivateGet(`/shows/${args.show_id}`);\n\n case \"get_show_episodes\":\n return captivateGet(\n `/shows/${args.show_id}/episodes?offset=${args.offset ?? 0}`,\n );\n\n case \"get_episode\":\n return captivateGet(`/episodes/${args.episode_id}`);\n\n case \"get_show_feed_url\":\n return captivateGet(`/shows/${args.show_id}/feed`);\n\n case \"get_podcast_overview_analytics\": {\n const params = new URLSearchParams();\n if (args.start) params.set(\"start\", args.start);\n if (args.end) params.set(\"end\", args.end);\n params.set(\"includeTopEpisodes\", \"true\");\n const qs = params.toString();\n return captivateGet(`/insights/${args.show_id}/overview${qs ? `?${qs}` : \"\"}`);\n }\n\n case \"get_episode_overview_analytics\": {\n const params = new URLSearchParams();\n if (args.start) params.set(\"start\", args.start);\n if (args.end) params.set(\"end\", args.end);\n const qs = params.toString();\n return captivateGet(\n `/insights/${args.show_id}/overview/${args.episode_id}${qs ? `?${qs}` : \"\"}`,\n );\n }\n\n case \"get_podcast_average_analytics\":\n return captivateGet(\n `/insights/${args.show_id}/averages?intervalDays=${args.intervalDays ?? 28}`,\n );\n\n default:\n throw new Error(`Unknown tool: ${name}`);\n }\n}\n\n// ---------------------------------------------------------------------------\n// JSON-RPC helpers (all include CORS_HEADERS)\n// ---------------------------------------------------------------------------\n\nfunction jsonrpcResponse(id: any, result: any): Response {\n return new Response(JSON.stringify({ jsonrpc: \"2.0\", id, result }), {\n status: 200,\n headers: {\n \"Content-Type\": \"application/json\",\n ...CORS_HEADERS,\n },\n });\n}\n\nfunction jsonrpcError(\n id: any,\n code: number,\n message: string,\n status = 400,\n): Response {\n return new Response(\n JSON.stringify({\n jsonrpc: \"2.0\",\n id,\n error: { code, message },\n }),\n {\n status,\n headers: {\n \"Content-Type\": \"application/json\",\n ...CORS_HEADERS,\n },\n },\n );\n}\n\n// ---------------------------------------------------------------------------\n// OAuth 2.1 shim — no-login, satisfies Claude's remote connector flow\n// ---------------------------------------------------------------------------\n\nfunction randomString(len = 32): string {\n const bytes = new Uint8Array(len);\n crypto.getRandomValues(bytes);\n return Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nfunction oauthMetadata(origin: string) {\n return {\n issuer: origin,\n authorization_endpoint: `${origin}/authorize`,\n token_endpoint: `${origin}/token`,\n registration_endpoint: `${origin}/register`,\n response_types_supported: [\"code\"],\n grant_types_supported: [\"authorization_code\", \"refresh_token\"],\n code_challenge_methods_supported: [\"S256\"],\n token_endpoint_auth_methods_supported: [\"none\"],\n scopes_supported: [\"mcp\"],\n };\n}\n\nasync function handleOAuth(req: Request, url: URL): Promise {\n const origin = url.origin;\n\n // OAuth Authorization Server metadata (RFC 8414)\n if (\n req.method === \"GET\" &&\n url.pathname === \"/.well-known/oauth-authorization-server\"\n ) {\n return new Response(JSON.stringify(oauthMetadata(origin)), {\n status: 200,\n headers: { \"Content-Type\": \"application/json\", ...CORS_HEADERS },\n });\n }\n\n // OAuth Protected Resource metadata (RFC 9728)\n if (\n req.method === \"GET\" &&\n url.pathname === \"/.well-known/oauth-protected-resource\"\n ) {\n return new Response(\n JSON.stringify({\n resource: origin,\n authorization_servers: [origin],\n bearer_methods_supported: [\"header\"],\n }),\n {\n status: 200,\n headers: { \"Content-Type\": \"application/json\", ...CORS_HEADERS },\n },\n );\n }\n\n // Dynamic client registration\n if (req.method === \"POST\" && url.pathname === \"/register\") {\n let body: any = {};\n try {\n body = await req.json();\n } catch {\n // ignore parse errors\n }\n return new Response(\n JSON.stringify({\n client_id: randomString(16),\n client_name: body.client_name ?? \"mcp-client\",\n redirect_uris: body.redirect_uris ?? [],\n client_id_issued_at: Math.floor(Date.now() / 1000),\n token_endpoint_auth_method: \"none\",\n grant_types: [\"authorization_code\", \"refresh_token\"],\n response_types: [\"code\"],\n }),\n {\n status: 200,\n headers: { \"Content-Type\": \"application/json\", ...CORS_HEADERS },\n },\n );\n }\n\n // Authorization endpoint — auto-approve, no login form\n if (req.method === \"GET\" && url.pathname === \"/authorize\") {\n const redirectUri = url.searchParams.get(\"redirect_uri\");\n const state = url.searchParams.get(\"state\");\n if (!redirectUri) {\n return new Response(\"Missing redirect_uri\", {\n status: 400,\n headers: { \"Content-Type\": \"text/plain\", ...CORS_HEADERS },\n });\n }\n const code = randomString(16);\n const params = new URLSearchParams({ code });\n if (state) params.set(\"state\", state);\n return new Response(null, {\n status: 302,\n headers: { Location: `${redirectUri}?${params.toString()}`, ...CORS_HEADERS },\n });\n }\n\n // Token endpoint — issue token without validation\n if (req.method === \"POST\" && url.pathname === \"/token\") {\n return new Response(\n JSON.stringify({\n access_token: randomString(32),\n token_type: \"bearer\",\n expires_in: 3600,\n refresh_token: randomString(32),\n }),\n {\n status: 200,\n headers: { \"Content-Type\": \"application/json\", ...CORS_HEADERS },\n },\n );\n }\n\n return null;\n}\n\n// ---------------------------------------------------------------------------\n// Main handler\n// ---------------------------------------------------------------------------\n\nexport default async (req: Request): Promise => {\n const url = new URL(req.url);\n\n // CORS preflight — applies to ALL routes (OAuth + MCP)\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: CORS_HEADERS });\n }\n\n // OAuth 2.1 shim routes\n const oauthResponse = await handleOAuth(req, url);\n if (oauthResponse) return oauthResponse;\n\n // Non-POST info response\n if (req.method !== \"POST\") {\n return new Response(\"Captivate MCP Server — send JSON-RPC 2.0 POST requests.\", {\n status: 200,\n headers: { \"Content-Type\": \"text/plain\", ...CORS_HEADERS },\n });\n }\n\n // Parse JSON-RPC body\n let body: any;\n try {\n body = await req.json();\n } catch {\n return jsonrpcError(null, -32700, \"Parse error\");\n }\n\n const { id, method, params } = body;\n\n // notifications/initialized — return 202 empty\n if (method === \"notifications/initialized\") {\n return new Response(null, { status: 202, headers: CORS_HEADERS });\n }\n\n switch (method) {\n case \"initialize\":\n return jsonrpcResponse(id, {\n protocolVersion: \"2024-11-05\",\n capabilities: { tools: {} },\n serverInfo: { name: \"captivate-mcp\", version: \"1.0.0\" },\n });\n\n case \"tools/list\":\n return jsonrpcResponse(id, { tools: TOOLS });\n\n case \"tools/call\": {\n const { name, arguments: toolArgs } = params ?? {};\n try {\n const result = await callTool(name, toolArgs ?? {});\n return jsonrpcResponse(id, {\n content: [\n { type: \"text\", text: JSON.stringify(result, null, 2) },\n ],\n });\n } catch (err) {\n return jsonrpcResponse(id, {\n isError: true,\n content: [\n {\n type: \"text\",\n text: err instanceof Error ? err.message : String(err),\n },\n ],\n });\n }\n }\n\n default:\n return jsonrpcError(id, -32601, `Method not found: ${method}`);\n }\n};\n","createdAt",["D",1784431491987],"branchVersion","branchId","8ed4c7b2-d245-4d4c-a597-b49e36b6be76","id","c6c86151-1c19-4950-9fb3-7ff6806b13c8","mcp-server",["D",1784429445384],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","A minimal MCP server with a sample tool","imageUrl","08c30eeb-afbc-482a-b9b2-3f14b39b3476","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019f7848-33dc-7189-a01b-4995e51048ab","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_102":101,"_109":-5},"org",{"_102":101,"_103":104,"_105":-5,"_19":-5,"_106":107,"_108":31},"branch",{"_13":91,"_38":92,"_49":48,"_93":50,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":-5,"_99":51,"_100":101},"isOwned",9,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","therelaunch","handle","displayName","Therelaunch","avatar","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_49":50,"_38":51,"_44":157,"_53":-5,"_54":31,"_55":56,"_57":56,"_58":59,"_60":-5,"_19":61,"_62":37,"_63":64,"_65":-5,"_66":-5,"_67":68,"_69":70,"_71":-5,"_72":-5,"_73":-5,"_74":-5,"_75":76,"_77":76,"_78":79,"_80":79,"_81":79,"_82":76,"_83":76,"_84":158,"_86":159,"_88":160,"_90":31},"tree",[152],"files",[152],"counts",{"_140":68,"_141":142,"_143":68,"_144":145,"_146":147},"contents",[132],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_49":133,"_38":34,"_36":37,"_134":-5,"_47":48,"_46":14,"_135":31,"_44":136,"_13":137,"_39":40,"_41":43,"_30":31,"_138":-5,"_33":139},"7a383865-2d5e-416d-9359-cb1ecf7d08bf","parentId","latest",["D",1784431491987],4,"label",[34],"pulls","branches",1,"forks","envVars",{"_148":150,"_151":68},"connections",{"_148":68,"_149":68},"count","unfilledCount",2,"emptyCount",{"_49":133,"_38":34,"_36":37,"_134":-5,"_47":48,"_46":14,"_135":31,"_44":153,"_13":137,"_39":40,"_41":43,"_30":31,"_138":-5,"_154":155,"_33":156},["D",1784431491987],"children",[],[34],["D",1784429445384],{"_102":101,"_109":-5},{"_102":101,"_103":104,"_105":-5,"_19":-5,"_106":107,"_108":31},{"_13":91,"_38":92,"_49":48,"_93":50,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":-5,"_99":51,"_100":101},"ctx",{"_84":-5,"_129":194,"_195":196,"_197":198,"_199":31,"_200":31,"_201":31,"_202":64,"_203":-5,"_204":-7,"_205":-7,"_206":68,"_207":31,"_208":31,"_209":-5,"_210":31,"_211":31,"_212":31,"_213":-5},"ENV",{"_165":166,"_167":168,"_169":92,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187,"_188":189,"_190":191,"_192":193},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v5