pleroma librarian setup

One-time xAuth exchange. The password is sent only to Instapaper and is not stored by this service.

`);\n}\n\nasync function handleSetup(request: Request): Promise {\n const environment = envValues();\n const status = configurationStatus(environment);\n if (!status.setupEnabled) return new Response(\"setup disabled\", { status: 404 });\n if (request.method === \"GET\") return setupForm();\n if (request.method !== \"POST\") return new Response(\"method not allowed\", { status: 405 });\n\n const form = await request.formData();\n const submittedSetupToken = String(form.get(\"setup_token\") ?? \"\");\n if (!isBearerAuthorized(`Bearer ${submittedSetupToken}`, environment.SETUP_TOKEN)) {\n return secureHtml(\"

Unauthorized

\", 401);\n }\n const username = String(form.get(\"username\") ?? \"\");\n let password = String(form.get(\"password\") ?? \"\");\n if (!username || !password) return secureHtml(\"

Missing credentials

\", 400);\n\n try {\n const bootstrapClient = new InstapaperClient({\n consumerKey: environment.INSTAPAPER_CONSUMER_KEY!,\n consumerSecret: environment.INSTAPAPER_CONSUMER_SECRET!,\n });\n const tokens = await bootstrapClient.exchangeAccessToken(username, password);\n password = \"\";\n return secureHtml(`tokens generated

Access tokens generated

Add these two values to the Val Town environment, then remove SETUP_TOKEN.

INSTAPAPER_ACCESS_TOKEN

${escapeHtml(tokens.oauth_token)}

INSTAPAPER_ACCESS_TOKEN_SECRET

${escapeHtml(tokens.oauth_token_secret)}

Do not send these values through chat.

`);\n } catch (error) {\n password = \"\";\n const message = error instanceof Error ? error.message : \"setup failed\";\n return secureHtml(`

Setup failed

${escapeHtml(message)}

`, 400);\n }\n}\n\nexport default async function handler(request: Request): Promise {\n const url = new URL(request.url);\n if (url.pathname === \"/health\") {\n return Response.json({\n ok: true,\n service: SERVICE,\n configuration: configurationStatus(envValues()),\n }, { headers: { \"cache-control\": \"no-store\" } });\n }\n if (url.pathname === \"/setup\") return await handleSetup(request);\n if (url.pathname === \"/\") {\n return new Response(\"pleroma librarian\\npersonal reading and research integration\\n\", {\n headers: { \"content-type\": \"text/plain; charset=utf-8\" },\n });\n }\n if (url.pathname !== \"/mcp\") return new Response(\"not found\", { status: 404 });\n\n const environment = envValues();\n if (!isBearerAuthorized(request.headers.get(\"authorization\"), environment.MCP_BEARER_TOKEN)) {\n return new Response(\"unauthorized\", {\n status: 401,\n headers: { \"www-authenticate\": \"Bearer\" },\n });\n }\n return await mcpHandler.fetch(request);\n}\n",[],[185],["D",1787183991142],[],[18],"f7ccf328-c474-4349-9315-376a3fa6bf4d","instapaper.ts","11355302-9c2a-11f1-8251-1607ee4eb77e",11,["D",1787381456328],"import { createOAuthAuthorization, parseFormEncoded } from \"./lib.ts\";\n\nexport type InstapaperCredentials = {\n consumerKey: string;\n consumerSecret: string;\n token?: string;\n tokenSecret?: string;\n fetcher?: typeof fetch;\n};\n\nexport type BookmarkInput = {\n url: string;\n title?: string;\n description?: string;\n folderId?: number;\n tags?: string[];\n};\n\ntype ApiRecord = Record & { type?: string; error_code?: number };\n\nexport class InstapaperClient {\n private readonly fetcher: typeof fetch;\n private readonly credentials: InstapaperCredentials;\n\n constructor(credentials: InstapaperCredentials) {\n this.credentials = credentials;\n this.fetcher = credentials.fetcher ?? fetch;\n }\n\n private async signedPost(\n path: string,\n params: Record = {},\n expectText = false,\n includeToken = true,\n ): Promise {\n const url = `https://www.instapaper.com/api/${path}`;\n const body = new URLSearchParams();\n for (const [key, value] of Object.entries(params)) body.set(key, String(value));\n const authorization = await createOAuthAuthorization({\n method: \"POST\",\n url,\n consumerKey: this.credentials.consumerKey,\n consumerSecret: this.credentials.consumerSecret,\n token: includeToken ? this.credentials.token : undefined,\n tokenSecret: includeToken ? this.credentials.tokenSecret : undefined,\n bodyParams: params,\n });\n const response = await this.fetcher(url, {\n method: \"POST\",\n headers: {\n authorization: authorization.header,\n \"content-type\": \"application/x-www-form-urlencoded; charset=utf-8\",\n },\n body,\n });\n const responseBody = await response.text();\n\n if (expectText && response.ok) return responseBody;\n\n let parsed: unknown;\n try {\n parsed = JSON.parse(responseBody);\n } catch {\n throw new Error(`Instapaper API temporary failure (${response.status || 503})`);\n }\n const records = Array.isArray(parsed) ? parsed as ApiRecord[] : [];\n const apiError = records.find((record) => record.type === \"error\");\n if (apiError) {\n throw new Error(`Instapaper API ${apiError.error_code ?? \"error\"}`);\n }\n if (!response.ok) throw new Error(`Instapaper API HTTP ${response.status}`);\n return parsed;\n }\n\n async exchangeAccessToken(username: string, password: string): Promise<{\n oauth_token: string;\n oauth_token_secret: string;\n }> {\n const url = \"https://www.instapaper.com/api/1/oauth/access_token\";\n const params = {\n x_auth_username: username,\n x_auth_password: password,\n x_auth_mode: \"client_auth\",\n };\n const body = new URLSearchParams(params);\n const authorization = await createOAuthAuthorization({\n method: \"POST\",\n url,\n consumerKey: this.credentials.consumerKey,\n consumerSecret: this.credentials.consumerSecret,\n bodyParams: params,\n });\n const response = await this.fetcher(url, {\n method: \"POST\",\n headers: {\n authorization: authorization.header,\n \"content-type\": \"application/x-www-form-urlencoded; charset=utf-8\",\n },\n body,\n });\n const text = await response.text();\n if (!response.ok) throw new Error(`Instapaper xAuth failed (${response.status})`);\n const result = parseFormEncoded(text);\n if (!result.oauth_token || !result.oauth_token_secret) {\n throw new Error(\"Instapaper xAuth returned an invalid token response\");\n }\n return {\n oauth_token: result.oauth_token,\n oauth_token_secret: result.oauth_token_secret,\n };\n }\n\n private requireFirstType(result: unknown, type: string): ApiRecord {\n if (!Array.isArray(result)) throw new Error(`Instapaper API omitted ${type}`);\n const found = (result as ApiRecord[]).find((record) => record.type === type);\n if (!found) throw new Error(`Instapaper API omitted ${type}`);\n return found;\n }\n\n async verifyCredentials(): Promise {\n return this.requireFirstType(await this.signedPost(\"1/account/verify_credentials\"), \"user\");\n }\n\n async listBookmarks(folderId = \"unread\", limit = 25): Promise {\n return await this.signedPost(\"1/bookmarks/list\", {\n folder_id: folderId,\n limit: Math.max(1, Math.min(500, limit)),\n });\n }\n\n async addBookmark(input: BookmarkInput): Promise {\n const params: Record = { url: input.url, resolve_final_url: 1 };\n if (input.title) params.title = input.title;\n if (input.description) params.description = input.description;\n if (input.folderId !== undefined) params.folder_id = input.folderId;\n if (input.tags?.length) params.tags = JSON.stringify(input.tags.map((name) => ({ name })));\n return this.requireFirstType(await this.signedPost(\"1/bookmarks/add\", params), \"bookmark\");\n }\n\n async getText(bookmarkId: number): Promise {\n return await this.signedPost(\n \"1/bookmarks/get_text\",\n { bookmark_id: bookmarkId },\n true,\n ) as string;\n }\n\n async listFolders(): Promise {\n return await this.signedPost(\"1/folders/list\");\n }\n\n async createFolder(title: string): Promise {\n return this.requireFirstType(await this.signedPost(\"1/folders/add\", { title }), \"folder\");\n }\n\n async star(bookmarkId: number): Promise {\n return this.bookmarkAction(\"star\", bookmarkId);\n }\n\n async archive(bookmarkId: number): Promise {\n return this.bookmarkAction(\"archive\", bookmarkId);\n }\n\n async delete(bookmarkId: number): Promise {\n return this.bookmarkAction(\"delete\", bookmarkId);\n }\n\n async move(bookmarkId: number, folderId: number): Promise {\n return this.requireFirstType(\n await this.signedPost(\"1/bookmarks/move\", { bookmark_id: bookmarkId, folder_id: folderId }),\n \"bookmark\",\n );\n }\n\n private async bookmarkAction(action: \"star\" | \"archive\" | \"delete\", bookmarkId: number): Promise {\n return this.requireFirstType(\n await this.signedPost(`1/bookmarks/${action}`, { bookmark_id: bookmarkId }),\n \"bookmark\",\n );\n }\n}\n",[],[195],["D",1787183267868],{"_11":12,"_120":69},{"_11":12,"_116":-5,"_68":69,"_30":67,"_117":118,"_119":24},{"_38":107,"_13":16,"_32":35,"_108":71,"_109":-5,"_110":-5,"_111":-5,"_112":-5,"_113":-5,"_114":14,"_115":12},"ctx",{"_52":-5,"_139":239,"_240":241,"_242":243,"_244":24,"_245":24,"_246":24,"_247":84,"_248":-5,"_249":-7,"_250":-7,"_251":26,"_252":24,"_253":24,"_254":-5,"_255":24,"_256":24,"_257":24,"_258":-5},"ENV",{"_210":211,"_212":213,"_214":16,"_215":216,"_217":218,"_219":220,"_221":222,"_223":224,"_225":226,"_227":228,"_229":230,"_231":232,"_233":234,"_235":236,"_237":238},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · lib.ts