[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_204":205,"_206":207},"routes/_app.x.$handle.$name",{"_97":96,"_32":45,"_105":87,"_27":106,"_13":14,"_107":-5,"_11":108,"_109":110,"_111":112,"_113":114,"_115":116,"_20":-5,"_117":-5,"_118":-5,"_119":25,"_120":121,"_122":59,"_123":-5,"_124":-5,"_125":126},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":-5,"_67":-5,"_68":-5,"_69":-5,"_70":71,"_72":71,"_73":74,"_75":74,"_76":74,"_77":71,"_78":71,"_79":80,"_81":82,"_83":84,"_85":25},"version",11,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","instapaper.ts","latestPath","fileId","11355302-9c2a-11f1-8251-1607ee4eb77e","name","fileType","script","content","import { createOAuthAuthorization, parseFormEncoded } from \"./lib.ts\";\n\nexport type InstapaperCredentials = {\n consumerKey: string;\n consumerSecret: string;\n token?: string;\n tokenSecret?: string;\n fetcher?: typeof fetch;\n};\n\nexport type BookmarkInput = {\n url: string;\n title?: string;\n description?: string;\n folderId?: number;\n tags?: string[];\n};\n\ntype ApiRecord = Record & { type?: string; error_code?: number };\n\nexport class InstapaperClient {\n private readonly fetcher: typeof fetch;\n private readonly credentials: InstapaperCredentials;\n\n constructor(credentials: InstapaperCredentials) {\n this.credentials = credentials;\n this.fetcher = credentials.fetcher ?? fetch;\n }\n\n private async signedPost(\n path: string,\n params: Record = {},\n expectText = false,\n includeToken = true,\n ): Promise {\n const url = `https://www.instapaper.com/api/${path}`;\n const body = new URLSearchParams();\n for (const [key, value] of Object.entries(params)) body.set(key, String(value));\n const authorization = await createOAuthAuthorization({\n method: \"POST\",\n url,\n consumerKey: this.credentials.consumerKey,\n consumerSecret: this.credentials.consumerSecret,\n token: includeToken ? this.credentials.token : undefined,\n tokenSecret: includeToken ? this.credentials.tokenSecret : undefined,\n bodyParams: params,\n });\n const response = await this.fetcher(url, {\n method: \"POST\",\n headers: {\n authorization: authorization.header,\n \"content-type\": \"application/x-www-form-urlencoded; charset=utf-8\",\n },\n body,\n });\n const responseBody = await response.text();\n\n if (expectText && response.ok) return responseBody;\n\n let parsed: unknown;\n try {\n parsed = JSON.parse(responseBody);\n } catch {\n throw new Error(`Instapaper API temporary failure (${response.status || 503})`);\n }\n const records = Array.isArray(parsed) ? parsed as ApiRecord[] : [];\n const apiError = records.find((record) => record.type === \"error\");\n if (apiError) {\n throw new Error(`Instapaper API ${apiError.error_code ?? \"error\"}`);\n }\n if (!response.ok) throw new Error(`Instapaper API HTTP ${response.status}`);\n return parsed;\n }\n\n async exchangeAccessToken(username: string, password: string): Promise<{\n oauth_token: string;\n oauth_token_secret: string;\n }> {\n const url = \"https://www.instapaper.com/api/1/oauth/access_token\";\n const params = {\n x_auth_username: username,\n x_auth_password: password,\n x_auth_mode: \"client_auth\",\n };\n const body = new URLSearchParams(params);\n const authorization = await createOAuthAuthorization({\n method: \"POST\",\n url,\n consumerKey: this.credentials.consumerKey,\n consumerSecret: this.credentials.consumerSecret,\n bodyParams: params,\n });\n const response = await this.fetcher(url, {\n method: \"POST\",\n headers: {\n authorization: authorization.header,\n \"content-type\": \"application/x-www-form-urlencoded; charset=utf-8\",\n },\n body,\n });\n const text = await response.text();\n if (!response.ok) throw new Error(`Instapaper xAuth failed (${response.status})`);\n const result = parseFormEncoded(text);\n if (!result.oauth_token || !result.oauth_token_secret) {\n throw new Error(\"Instapaper xAuth returned an invalid token response\");\n }\n return {\n oauth_token: result.oauth_token,\n oauth_token_secret: result.oauth_token_secret,\n };\n }\n\n private requireFirstType(result: unknown, type: string): ApiRecord {\n if (!Array.isArray(result)) throw new Error(`Instapaper API omitted ${type}`);\n const found = (result as ApiRecord[]).find((record) => record.type === type);\n if (!found) throw new Error(`Instapaper API omitted ${type}`);\n return found;\n }\n\n async verifyCredentials(): Promise {\n return this.requireFirstType(await this.signedPost(\"1/account/verify_credentials\"), \"user\");\n }\n\n async listBookmarks(folderId = \"unread\", limit = 25): Promise {\n return await this.signedPost(\"1/bookmarks/list\", {\n folder_id: folderId,\n limit: Math.max(1, Math.min(500, limit)),\n });\n }\n\n async addBookmark(input: BookmarkInput): Promise {\n const params: Record = { url: input.url, resolve_final_url: 1 };\n if (input.title) params.title = input.title;\n if (input.description) params.description = input.description;\n if (input.folderId !== undefined) params.folder_id = input.folderId;\n if (input.tags?.length) params.tags = JSON.stringify(input.tags.map((name) => ({ name })));\n return this.requireFirstType(await this.signedPost(\"1/bookmarks/add\", params), \"bookmark\");\n }\n\n async getText(bookmarkId: number): Promise {\n return await this.signedPost(\n \"1/bookmarks/get_text\",\n { bookmark_id: bookmarkId },\n true,\n ) as string;\n }\n\n async listFolders(): Promise {\n return await this.signedPost(\"1/folders/list\");\n }\n\n async createFolder(title: string): Promise {\n return this.requireFirstType(await this.signedPost(\"1/folders/add\", { title }), \"folder\");\n }\n\n async star(bookmarkId: number): Promise {\n return this.bookmarkAction(\"star\", bookmarkId);\n }\n\n async archive(bookmarkId: number): Promise {\n return this.bookmarkAction(\"archive\", bookmarkId);\n }\n\n async delete(bookmarkId: number): Promise {\n return this.bookmarkAction(\"delete\", bookmarkId);\n }\n\n async move(bookmarkId: number, folderId: number): Promise {\n return this.requireFirstType(\n await this.signedPost(\"1/bookmarks/move\", { bookmark_id: bookmarkId, folder_id: folderId }),\n \"bookmark\",\n );\n }\n\n private async bookmarkAction(action: \"star\" | \"archive\", bookmarkId: number): Promise {\n return this.requireFirstType(\n await this.signedPost(`1/bookmarks/${action}`, { bookmark_id: bookmarkId }),\n \"bookmark\",\n );\n }\n}\n","import { createOAuthAuthorization, parseFormEncoded } from \"./lib.ts\";\n\nexport type InstapaperCredentials = {\n consumerKey: string;\n consumerSecret: string;\n token?: string;\n tokenSecret?: string;\n fetcher?: typeof fetch;\n};\n\nexport type BookmarkInput = {\n url: string;\n title?: string;\n description?: string;\n folderId?: number;\n tags?: string[];\n};\n\ntype ApiRecord = Record & { type?: string; error_code?: number };\n\nexport class InstapaperClient {\n private readonly fetcher: typeof fetch;\n private readonly credentials: InstapaperCredentials;\n\n constructor(credentials: InstapaperCredentials) {\n this.credentials = credentials;\n this.fetcher = credentials.fetcher ?? fetch;\n }\n\n private async signedPost(\n path: string,\n params: Record = {},\n expectText = false,\n includeToken = true,\n ): Promise {\n const url = `https://www.instapaper.com/api/${path}`;\n const body = new URLSearchParams();\n for (const [key, value] of Object.entries(params)) body.set(key, String(value));\n const authorization = await createOAuthAuthorization({\n method: \"POST\",\n url,\n consumerKey: this.credentials.consumerKey,\n consumerSecret: this.credentials.consumerSecret,\n token: includeToken ? this.credentials.token : undefined,\n tokenSecret: includeToken ? this.credentials.tokenSecret : undefined,\n bodyParams: params,\n });\n const response = await this.fetcher(url, {\n method: \"POST\",\n headers: {\n authorization: authorization.header,\n \"content-type\": \"application/x-www-form-urlencoded; charset=utf-8\",\n },\n body,\n });\n const responseBody = await response.text();\n\n if (expectText && response.ok) return responseBody;\n\n let parsed: unknown;\n try {\n parsed = JSON.parse(responseBody);\n } catch {\n throw new Error(`Instapaper API temporary failure (${response.status || 503})`);\n }\n const records = Array.isArray(parsed) ? parsed as ApiRecord[] : [];\n const apiError = records.find((record) => record.type === \"error\");\n if (apiError) {\n throw new Error(`Instapaper API ${apiError.error_code ?? \"error\"}`);\n }\n if (!response.ok) throw new Error(`Instapaper API HTTP ${response.status}`);\n return parsed;\n }\n\n async exchangeAccessToken(username: string, password: string): Promise<{\n oauth_token: string;\n oauth_token_secret: string;\n }> {\n const url = \"https://www.instapaper.com/api/1/oauth/access_token\";\n const params = {\n x_auth_username: username,\n x_auth_password: password,\n x_auth_mode: \"client_auth\",\n };\n const body = new URLSearchParams(params);\n const authorization = await createOAuthAuthorization({\n method: \"POST\",\n url,\n consumerKey: this.credentials.consumerKey,\n consumerSecret: this.credentials.consumerSecret,\n bodyParams: params,\n });\n const response = await this.fetcher(url, {\n method: \"POST\",\n headers: {\n authorization: authorization.header,\n \"content-type\": \"application/x-www-form-urlencoded; charset=utf-8\",\n },\n body,\n });\n const text = await response.text();\n if (!response.ok) throw new Error(`Instapaper xAuth failed (${response.status})`);\n const result = parseFormEncoded(text);\n if (!result.oauth_token || !result.oauth_token_secret) {\n throw new Error(\"Instapaper xAuth returned an invalid token response\");\n }\n return {\n oauth_token: result.oauth_token,\n oauth_token_secret: result.oauth_token_secret,\n };\n }\n\n private requireFirstType(result: unknown, type: string): ApiRecord {\n if (!Array.isArray(result)) throw new Error(`Instapaper API omitted ${type}`);\n const found = (result as ApiRecord[]).find((record) => record.type === type);\n if (!found) throw new Error(`Instapaper API omitted ${type}`);\n return found;\n }\n\n async verifyCredentials(): Promise {\n return this.requireFirstType(await this.signedPost(\"1/account/verify_credentials\"), \"user\");\n }\n\n async listBookmarks(folderId = \"unread\", limit = 25): Promise {\n return await this.signedPost(\"1/bookmarks/list\", {\n folder_id: folderId,\n limit: Math.max(1, Math.min(500, limit)),\n });\n }\n\n async addBookmark(input: BookmarkInput): Promise {\n const params: Record = { url: input.url, resolve_final_url: 1 };\n if (input.title) params.title = input.title;\n if (input.description) params.description = input.description;\n if (input.folderId !== undefined) params.folder_id = input.folderId;\n if (input.tags?.length) params.tags = JSON.stringify(input.tags.map((name) => ({ name })));\n return this.requireFirstType(await this.signedPost(\"1/bookmarks/add\", params), \"bookmark\");\n }\n\n async getText(bookmarkId: number): Promise {\n return await this.signedPost(\n \"1/bookmarks/get_text\",\n { bookmark_id: bookmarkId },\n true,\n ) as string;\n }\n\n async listFolders(): Promise {\n return await this.signedPost(\"1/folders/list\");\n }\n\n async createFolder(title: string): Promise {\n return this.requireFirstType(await this.signedPost(\"1/folders/add\", { title }), \"folder\");\n }\n\n async star(bookmarkId: number): Promise {\n return this.bookmarkAction(\"star\", bookmarkId);\n }\n\n async archive(bookmarkId: number): Promise {\n return this.bookmarkAction(\"archive\", bookmarkId);\n }\n\n async delete(bookmarkId: number): Promise {\n return this.bookmarkAction(\"delete\", bookmarkId);\n }\n\n async move(bookmarkId: number, folderId: number): Promise {\n return this.requireFirstType(\n await this.signedPost(\"1/bookmarks/move\", { bookmark_id: bookmarkId, folder_id: folderId }),\n \"bookmark\",\n );\n }\n\n private async bookmarkAction(action: \"star\" | \"archive\" | \"delete\", bookmarkId: number): Promise {\n return this.requireFirstType(\n await this.signedPost(`1/bookmarks/${action}`, { bookmark_id: bookmarkId }),\n \"bookmark\",\n );\n }\n}\n","createdAt",["D",1787381456328],"branchVersion","branchId","01cce2a6-6872-4702-87ae-1b7759b0922d","id","75f80d4b-6b4c-4b2f-a2c6-6dbb105b9472","pleroma-librarian",["D",1787183267868],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Personal Instapaper reading and research librarian","imageUrl","4014c640-61ba-11f0-852d-15ceec715ebe","pinnedFileId","61e469a2-9c28-11f1-8797-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","4014c641-61ba-11f0-852d-15ceec715ebe","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_97":96,"_104":100},"org",{"_97":96,"_98":-5,"_99":100,"_18":55,"_101":102,"_103":25},"branch",{"_13":86,"_32":87,"_43":42,"_88":44,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":45,"_95":96},"isOwned",12,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","vvampa","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoiZGVmYXVsdCIsImlpZCI6Imluc18yTm10cGhQUklwU0tqZHNiOHNnNGd2ZjJURFUiLCJyaWQiOiJ1c2VyXzJ6dlV1b1h4VzRxbTBVblhueldOUjc4R3N1ViJ9","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":200,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":-5,"_67":-5,"_68":-5,"_69":-5,"_70":71,"_72":71,"_73":74,"_75":74,"_76":74,"_77":71,"_78":71,"_79":201,"_81":202,"_83":203,"_85":25},"tree",[179,180,181,182,183],"files",[179,180,181,182,183],"counts",{"_168":63,"_169":139,"_170":63,"_171":172,"_173":174},"contents",[127,128,129,130,131],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":165,"_32":28,"_30":31,"_135":-5,"_41":42,"_40":14,"_137":59,"_38":166,"_13":161,"_33":34,"_35":37,"_24":25,"_141":-5,"_27":167},{"_43":158,"_32":159,"_30":160,"_135":-5,"_41":42,"_40":161,"_137":59,"_38":162,"_13":63,"_33":34,"_35":163,"_24":25,"_141":-5,"_27":164},{"_43":150,"_32":151,"_30":57,"_135":-5,"_41":42,"_40":152,"_137":25,"_38":153,"_13":154,"_33":155,"_35":156,"_24":25,"_141":-5,"_27":157},{"_43":143,"_32":144,"_30":145,"_135":-5,"_41":42,"_40":146,"_137":59,"_38":147,"_13":63,"_33":34,"_35":148,"_24":25,"_141":-5,"_27":149},{"_43":132,"_32":133,"_30":134,"_135":-5,"_41":42,"_40":136,"_137":59,"_38":138,"_13":139,"_33":34,"_35":140,"_24":25,"_141":-5,"_27":142},"7b701ff6-f0c9-4254-8e57-00e58bee563f","verify.ts","d8d134b6-9c2b-11f1-a2ad-1607ee4eb77e","parentId",7,"latest",["D",1787184775234],1,"import { InstapaperClient } from \"./instapaper.ts\";\n\nconst required = [\n \"INSTAPAPER_CONSUMER_KEY\",\n \"INSTAPAPER_CONSUMER_SECRET\",\n \"INSTAPAPER_ACCESS_TOKEN\",\n \"INSTAPAPER_ACCESS_TOKEN_SECRET\",\n];\nconst values = Object.fromEntries(required.map((key) => [key, Deno.env.get(key)]));\nconst missing = required.filter((key) => !values[key]);\nif (missing.length) throw new Error(`missing configuration: ${missing.join(\", \")}`);\nconst client = new InstapaperClient({\n consumerKey: values.INSTAPAPER_CONSUMER_KEY!,\n consumerSecret: values.INSTAPAPER_CONSUMER_SECRET!,\n token: values.INSTAPAPER_ACCESS_TOKEN!,\n tokenSecret: values.INSTAPAPER_ACCESS_TOKEN_SECRET!,\n});\nconst user = await client.verifyCredentials();\nconsole.log(JSON.stringify({\n ok: true,\n premium: user.subscription_is_active === \"1\",\n}));\n","label",[133],"59f2dc06-6830-49a8-a261-cef7c306c3dc","main_helpers.ts","115206e6-9c2a-11f1-a550-1607ee4eb77e",4,["D",1787183991818],"export type EnvironmentValues = Record;\n\nexport function configurationStatus(environment: EnvironmentValues) {\n const consumerConfigured = Boolean(\n environment.INSTAPAPER_CONSUMER_KEY && environment.INSTAPAPER_CONSUMER_SECRET\n );\n const accessTokenConfigured = Boolean(\n environment.INSTAPAPER_ACCESS_TOKEN && environment.INSTAPAPER_ACCESS_TOKEN_SECRET\n );\n const mcpAuthConfigured = Boolean(environment.MCP_BEARER_TOKEN);\n const setupEnabled = Boolean(environment.SETUP_TOKEN && consumerConfigured);\n return {\n consumerConfigured,\n accessTokenConfigured,\n mcpAuthConfigured,\n setupEnabled,\n ready: consumerConfigured && accessTokenConfigured && mcpAuthConfigured,\n };\n}\n\nexport function escapeHtml(value: string): string {\n return value.replace(/[&<>\"']/g, (character) => ({\n \"&\": \"&\",\n \"<\": \"<\",\n \">\": \">\",\n '\"': \""\",\n \"'\": \"'\",\n })[character]!);\n}\n",[144],"932746ca-ef8f-4b95-b953-9bc682d5f958","main.ts",9,["D",1787380952507],3,"http","import {\n createMcpHandler,\n McpServer,\n} from \"npm:@modelcontextprotocol/server@2\";\nimport * as z from \"npm:zod@4/v4\";\nimport { InstapaperClient } from \"./instapaper.ts\";\nimport { isBearerAuthorized } from \"./lib.ts\";\nimport { configurationStatus, escapeHtml } from \"./main_helpers.ts\";\n\nconst SERVICE = \"pleroma-librarian\";\n\nfunction envValues(): Record {\n return {\n INSTAPAPER_CONSUMER_KEY: Deno.env.get(\"INSTAPAPER_CONSUMER_KEY\"),\n INSTAPAPER_CONSUMER_SECRET: Deno.env.get(\"INSTAPAPER_CONSUMER_SECRET\"),\n INSTAPAPER_ACCESS_TOKEN: Deno.env.get(\"INSTAPAPER_ACCESS_TOKEN\"),\n INSTAPAPER_ACCESS_TOKEN_SECRET: Deno.env.get(\"INSTAPAPER_ACCESS_TOKEN_SECRET\"),\n MCP_BEARER_TOKEN: Deno.env.get(\"MCP_BEARER_TOKEN\"),\n SETUP_TOKEN: Deno.env.get(\"SETUP_TOKEN\"),\n };\n}\n\nfunction clientFromEnvironment(): InstapaperClient {\n const environment = envValues();\n const required = [\n \"INSTAPAPER_CONSUMER_KEY\",\n \"INSTAPAPER_CONSUMER_SECRET\",\n \"INSTAPAPER_ACCESS_TOKEN\",\n \"INSTAPAPER_ACCESS_TOKEN_SECRET\",\n ];\n const missing = required.filter((key) => !environment[key]);\n if (missing.length) throw new Error(`configuration incomplete: ${missing.join(\", \")}`);\n return new InstapaperClient({\n consumerKey: environment.INSTAPAPER_CONSUMER_KEY!,\n consumerSecret: environment.INSTAPAPER_CONSUMER_SECRET!,\n token: environment.INSTAPAPER_ACCESS_TOKEN!,\n tokenSecret: environment.INSTAPAPER_ACCESS_TOKEN_SECRET!,\n });\n}\n\nfunction toolSuccess(value: unknown) {\n return {\n content: [{ type: \"text\" as const, text: JSON.stringify(value, null, 2) }],\n };\n}\n\nfunction toolFailure(error: unknown) {\n const message = error instanceof Error ? error.message : \"unknown error\";\n return {\n isError: true,\n content: [{ type: \"text\" as const, text: message }],\n };\n}\n\nasync function withToolErrors(operation: () => Promise) {\n try {\n return toolSuccess(await operation());\n } catch (error) {\n return toolFailure(error);\n }\n}\n\nconst mcpHandler = createMcpHandler(() => {\n const server = new McpServer({ name: SERVICE, version: \"0.1.0\" });\n\n server.registerTool(\"verify-connection\", {\n description: \"Verify the configured Instapaper account and report subscription status.\",\n inputSchema: z.object({}),\n }, async () => withToolErrors(async () => clientFromEnvironment().verifyCredentials()));\n\n server.registerTool(\"save-to-kobo\", {\n description: \"Save a web article to Instapaper's main unread list so it syncs to Kobo.\",\n inputSchema: z.object({\n url: z.string().url(),\n title: z.string().optional(),\n description: z.string().optional(),\n tags: z.array(z.string()).optional(),\n }),\n }, async ({ url, title, description, tags }) => withToolErrors(async () =>\n clientFromEnvironment().addBookmark({ url, title, description, tags })\n ));\n\n server.registerTool(\"save-to-backlog\", {\n description: \"Save a web article to the lowercase backlog folder, which does not sync to Kobo.\",\n inputSchema: z.object({\n url: z.string().url(),\n title: z.string().optional(),\n description: z.string().optional(),\n tags: z.array(z.string()).optional(),\n }),\n }, async ({ url, title, description, tags }) => withToolErrors(async () => {\n const client = clientFromEnvironment();\n const listed = await client.listFolders();\n const folders = Array.isArray(listed) ? listed as Array> : [];\n let backlog = folders.find((folder) =>\n folder.type === \"folder\" && String(folder.title).toLowerCase() === \"backlog\"\n );\n if (!backlog) backlog = await client.createFolder(\"backlog\");\n const folderId = Number(backlog.folder_id);\n if (!Number.isSafeInteger(folderId)) throw new Error(\"backlog folder has no valid ID\");\n return client.addBookmark({ url, title, description, tags, folderId });\n }));\n\n server.registerTool(\"ensure-folder\", {\n description: \"Return an existing user folder by title or create it when absent.\",\n inputSchema: z.object({ title: z.string().min(1).max(64) }),\n }, async ({ title }) => withToolErrors(async () => {\n const client = clientFromEnvironment();\n const wanted = title.trim();\n const listed = await client.listFolders();\n const folders = Array.isArray(listed) ? listed as Array> : [];\n const existing = folders.find((folder) =>\n folder.type === \"folder\" && String(folder.title).toLowerCase() === wanted.toLowerCase()\n );\n return existing ?? await client.createFolder(wanted);\n }));\n\n server.registerTool(\"save-to-folder\", {\n description: \"Save a web object directly to a numeric Instapaper folder ID.\",\n inputSchema: z.object({\n url: z.string().url(),\n folderId: z.number().int().positive(),\n title: z.string().optional(),\n description: z.string().optional(),\n tags: z.array(z.string()).optional(),\n }),\n }, async ({ url, folderId, title, description, tags }) => withToolErrors(async () =>\n clientFromEnvironment().addBookmark({ url, folderId, title, description, tags })\n ));\n\n server.registerTool(\"list-articles\", {\n description: \"List Instapaper articles from unread, starred, archive, or a numeric folder ID.\",\n inputSchema: z.object({\n folder: z.string().default(\"unread\"),\n limit: z.number().int().min(1).max(500).default(25),\n }),\n }, async ({ folder, limit }) => withToolErrors(async () =>\n clientFromEnvironment().listBookmarks(folder, limit)\n ));\n\n server.registerTool(\"get-article-content\", {\n description: \"Retrieve Instapaper's processed HTML for one saved article.\",\n inputSchema: z.object({ bookmarkId: z.number().int().positive() }),\n }, async ({ bookmarkId }) => withToolErrors(async () => ({\n bookmarkId,\n html: await clientFromEnvironment().getText(bookmarkId),\n })));\n\n server.registerTool(\"list-folders\", {\n description: \"List user-created Instapaper folders.\",\n inputSchema: z.object({}),\n }, async () => withToolErrors(async () => clientFromEnvironment().listFolders()));\n\n server.registerTool(\"star-article\", {\n description: \"Star an article so it appears in Instapaper Liked and Kobo Liked.\",\n inputSchema: z.object({ bookmarkId: z.number().int().positive() }),\n }, async ({ bookmarkId }) => withToolErrors(async () =>\n clientFromEnvironment().star(bookmarkId)\n ));\n\n server.registerTool(\"archive-article\", {\n description: \"Move an article to the Instapaper archive without deleting it.\",\n inputSchema: z.object({ bookmarkId: z.number().int().positive() }),\n }, async ({ bookmarkId }) => withToolErrors(async () =>\n clientFromEnvironment().archive(bookmarkId)\n ));\n\n server.registerTool(\"move-article\", {\n description: \"Move an article to a numeric Instapaper folder ID.\",\n inputSchema: z.object({\n bookmarkId: z.number().int().positive(),\n folderId: z.number().int().positive(),\n }),\n }, async ({ bookmarkId, folderId }) => withToolErrors(async () =>\n clientFromEnvironment().move(bookmarkId, folderId)\n ));\n\n return server;\n});\n\nfunction secureHtml(body: string, status = 200): Response {\n return new Response(body, {\n status,\n headers: {\n \"content-type\": \"text/html; charset=utf-8\",\n \"cache-control\": \"no-store, max-age=0\",\n \"content-security-policy\": \"default-src 'none'; style-src 'unsafe-inline'; form-action 'self'; base-uri 'none'; frame-ancestors 'none'\",\n \"referrer-policy\": \"no-referrer\",\n \"x-content-type-options\": \"nosniff\",\n },\n });\n}\n\nfunction setupForm(): Response {\n return secureHtml(`pleroma librarian setup

pleroma librarian setup

One-time xAuth exchange. The password is sent only to Instapaper and is not stored by this service.

`);\n}\n\nasync function handleSetup(request: Request): Promise {\n const environment = envValues();\n const status = configurationStatus(environment);\n if (!status.setupEnabled) return new Response(\"setup disabled\", { status: 404 });\n if (request.method === \"GET\") return setupForm();\n if (request.method !== \"POST\") return new Response(\"method not allowed\", { status: 405 });\n\n const form = await request.formData();\n const submittedSetupToken = String(form.get(\"setup_token\") ?? \"\");\n if (!isBearerAuthorized(`Bearer ${submittedSetupToken}`, environment.SETUP_TOKEN)) {\n return secureHtml(\"

Unauthorized

\", 401);\n }\n const username = String(form.get(\"username\") ?? \"\");\n let password = String(form.get(\"password\") ?? \"\");\n if (!username || !password) return secureHtml(\"

Missing credentials

\", 400);\n\n try {\n const bootstrapClient = new InstapaperClient({\n consumerKey: environment.INSTAPAPER_CONSUMER_KEY!,\n consumerSecret: environment.INSTAPAPER_CONSUMER_SECRET!,\n });\n const tokens = await bootstrapClient.exchangeAccessToken(username, password);\n password = \"\";\n return secureHtml(`tokens generated

Access tokens generated

Add these two values to the Val Town environment, then remove SETUP_TOKEN.

INSTAPAPER_ACCESS_TOKEN

${escapeHtml(tokens.oauth_token)}

INSTAPAPER_ACCESS_TOKEN_SECRET

${escapeHtml(tokens.oauth_token_secret)}

Do not send these values through chat.

`);\n } catch (error) {\n password = \"\";\n const message = error instanceof Error ? error.message : \"setup failed\";\n return secureHtml(`

Setup failed

${escapeHtml(message)}

`, 400);\n }\n}\n\nexport default async function handler(request: Request): Promise {\n const url = new URL(request.url);\n if (url.pathname === \"/health\") {\n return Response.json({\n ok: true,\n service: SERVICE,\n configuration: configurationStatus(envValues()),\n }, { headers: { \"cache-control\": \"no-store\" } });\n }\n if (url.pathname === \"/setup\") return await handleSetup(request);\n if (url.pathname === \"/\") {\n return new Response(\"pleroma librarian\\npersonal reading and research integration\\n\", {\n headers: { \"content-type\": \"text/plain; charset=utf-8\" },\n });\n }\n if (url.pathname !== \"/mcp\") return new Response(\"not found\", { status: 404 });\n\n const environment = envValues();\n if (!isBearerAuthorized(request.headers.get(\"authorization\"), environment.MCP_BEARER_TOKEN)) {\n return new Response(\"unauthorized\", {\n status: 401,\n headers: { \"www-authenticate\": \"Bearer\" },\n });\n }\n return await mcpHandler.fetch(request);\n}\n",[151],"a0015f8b-5be3-41e6-acd6-c15cb936730f","lib.ts","10ea5ca8-9c2a-11f1-8eb6-1607ee4eb77e",2,["D",1787183991142],"export function percentEncode(value: string | number): string {\n return encodeURIComponent(String(value)).replace(/[!'()*]/g, (character) =>\n `%${character.charCodeAt(0).toString(16).toUpperCase()}`\n );\n}\n\nexport type OAuthAuthorizationOptions = {\n method: string;\n url: string;\n consumerKey: string;\n consumerSecret: string;\n token?: string;\n tokenSecret?: string;\n bodyParams?: Record;\n nonce?: string;\n timestamp?: string;\n};\n\nfunction bytesToBase64(bytes: ArrayBuffer): string {\n let binary = \"\";\n for (const byte of new Uint8Array(bytes)) binary += String.fromCharCode(byte);\n return btoa(binary);\n}\n\nexport async function createOAuthAuthorization(\n options: OAuthAuthorizationOptions,\n): Promise<{ header: string; signature: string; baseString: string }> {\n const parsedUrl = new URL(options.url);\n const oauthParams: Record = {\n oauth_consumer_key: options.consumerKey,\n oauth_nonce: options.nonce ?? crypto.randomUUID().replaceAll(\"-\", \"\"),\n oauth_signature_method: \"HMAC-SHA1\",\n oauth_timestamp: options.timestamp ?? String(Math.floor(Date.now() / 1000)),\n };\n if (options.token) oauthParams.oauth_token = options.token;\n\n const allParams: Array<[string, string]> = [];\n for (const [key, value] of parsedUrl.searchParams.entries()) {\n allParams.push([percentEncode(key), percentEncode(value)]);\n }\n for (const [key, value] of Object.entries(options.bodyParams ?? {})) {\n allParams.push([percentEncode(key), percentEncode(value)]);\n }\n for (const [key, value] of Object.entries(oauthParams)) {\n allParams.push([percentEncode(key), percentEncode(value)]);\n }\n allParams.sort(([keyA, valueA], [keyB, valueB]) =>\n keyA === keyB ? valueA.localeCompare(valueB) : keyA.localeCompare(keyB)\n );\n\n const normalizedParams = allParams.map(([key, value]) => `${key}=${value}`).join(\"&\");\n const baseUrl = `${parsedUrl.protocol}//${parsedUrl.host}${parsedUrl.pathname}`;\n const baseString = [\n options.method.toUpperCase(),\n percentEncode(baseUrl),\n percentEncode(normalizedParams),\n ].join(\"&\");\n const signingKey = `${percentEncode(options.consumerSecret)}&${percentEncode(options.tokenSecret ?? \"\")}`;\n const key = await crypto.subtle.importKey(\n \"raw\",\n new TextEncoder().encode(signingKey),\n { name: \"HMAC\", hash: \"SHA-1\" },\n false,\n [\"sign\"],\n );\n const signature = bytesToBase64(\n await crypto.subtle.sign(\"HMAC\", key, new TextEncoder().encode(baseString)),\n );\n const headerParams = { ...oauthParams, oauth_signature: signature };\n const header = \"OAuth \" + Object.entries(headerParams)\n .sort(([a], [b]) => a.localeCompare(b))\n .map(([key, value]) => `${percentEncode(key)}=\\\"${percentEncode(value)}\\\"`)\n .join(\", \");\n\n return { header, signature, baseString };\n}\n\nexport function parseFormEncoded(body: string): Record {\n return Object.fromEntries(new URLSearchParams(body).entries());\n}\n\nexport function isBearerAuthorized(\n authorizationHeader: string | null,\n expectedToken: string | undefined,\n): boolean {\n if (!authorizationHeader || !expectedToken) return false;\n const prefix = \"Bearer \";\n if (!authorizationHeader.startsWith(prefix)) return false;\n const actualToken = authorizationHeader.slice(prefix.length);\n if (actualToken.length !== expectedToken.length) return false;\n let difference = 0;\n for (let index = 0; index < expectedToken.length; index++) {\n difference |= actualToken.charCodeAt(index) ^ expectedToken.charCodeAt(index);\n }\n return difference === 0;\n}\n",[159],"f7ccf328-c474-4349-9315-376a3fa6bf4d",["D",1787381456328],[28],"pulls","branches","forks","envVars",{"_175":177,"_178":63},"connections",{"_175":63,"_176":63},"count","unfilledCount",5,"emptyCount",{"_43":165,"_32":28,"_30":31,"_135":-5,"_41":42,"_40":14,"_137":59,"_38":197,"_13":161,"_33":34,"_35":37,"_24":25,"_141":-5,"_185":198,"_27":199},{"_43":158,"_32":159,"_30":160,"_135":-5,"_41":42,"_40":161,"_137":59,"_38":194,"_13":63,"_33":34,"_35":163,"_24":25,"_141":-5,"_185":195,"_27":196},{"_43":150,"_32":151,"_30":57,"_135":-5,"_41":42,"_40":152,"_137":25,"_38":191,"_13":154,"_33":155,"_35":156,"_24":25,"_141":-5,"_185":192,"_27":193},{"_43":143,"_32":144,"_30":145,"_135":-5,"_41":42,"_40":146,"_137":59,"_38":188,"_13":63,"_33":34,"_35":148,"_24":25,"_141":-5,"_185":189,"_27":190},{"_43":132,"_32":133,"_30":134,"_135":-5,"_41":42,"_40":136,"_137":59,"_38":184,"_13":139,"_33":34,"_35":140,"_24":25,"_141":-5,"_185":186,"_27":187},["D",1787184775234],"children",[],[133],["D",1787183991818],[],[144],["D",1787380952507],[],[151],["D",1787183991142],[],[159],["D",1787381456328],[],[28],["D",1787183267868],{"_97":96,"_104":100},{"_97":96,"_98":-5,"_99":100,"_18":55,"_101":102,"_103":25},{"_13":86,"_32":87,"_43":42,"_88":44,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":45,"_95":96},"ctx",{"_79":-5,"_124":237,"_238":239,"_240":241,"_242":25,"_243":25,"_244":25,"_245":59,"_246":-5,"_247":-7,"_248":-7,"_249":63,"_250":25,"_251":25,"_252":-5,"_253":25,"_254":25,"_255":25,"_256":-5},"ENV",{"_208":209,"_210":211,"_212":87,"_213":214,"_215":216,"_217":218,"_219":220,"_221":222,"_223":224,"_225":226,"_227":228,"_229":230,"_231":232,"_233":234,"_235":236},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v11