@vornrun/connector-substack 0.1.0 → 0.2.0

package/CHANGELOG.md

@@ -2,6 +2,31 @@
 
 All notable changes to `@vornrun/connector-substack`.
 
+## 0.2.0
+
+Adds the whole archive and a single post's body, so a workflow can check what
+a publication already said, plus Notes, likes and restacks on posts, updating
+a draft, and the subscriber count.
+
+- **Actions:** `listPosts` (the archive, newest first, up to 500), `getPost`
+  (one post's full body as HTML and text), `updateDraft` (replace a draft's
+  title, subtitle and body; a published post is refused), `postNote`,
+  `readNotes`, `deleteNote`, `setPostLike`, `setPostRestack` (posts only) and
+  `readSubscriberCount`.
+- **The publishing guard** still refuses every request path containing
+  `publish` or `schedule`, with one exception: a `GET` to
+  `/api/v1/publish-dashboard/`, the dashboard's read-only figures. Nothing
+  here publishes or schedules.
+
+Each new request was made from a signed-in browser on 2026-09-12 against the
+author's own publication, and then every new action ran live through the built
+package against it, with every write undone: a draft saved, updated and
+deleted, a Note posted and deleted, a like and a restack each made and taken
+back. `updateDraft` changed the draft's title, subtitle and body as sent.
+`readSubscriberCount` reports the dashboard's total as `subscribers`, from the
+summary's `totalEmail`, and the summary's own `subscribers`, which counts paid
+subscribers only, as `paidSubscribers`.
+
 ## 0.1.0
 
 First release.

package/README.md

@@ -1,8 +1,9 @@
 # @vornrun/connector-substack
 
 Trigger Vorn workflows from new posts on a Substack publication, and read a
-feed, search posts, read comments, save a draft, comment, and like or delete
-comments from a workflow step. Substack publishes no API for any of this, so
+feed or the whole archive, search and read posts, read comments, save and
+update drafts, comment, like and restack posts, and post and read Notes from a
+workflow step. Substack publishes no API for any of this, so
 the connector reads the public RSS feed and asks the same web endpoints
 Substack's own pages use, from inside a window you signed in to.
 
@@ -22,22 +23,24 @@ When Substack signs the window out, a workflow step that needed it waits as
 "waiting for sign-in" until you sign in again, then runs again. When Vorn is
 closed on the desktop that signed in, the step fails and says to open it.
 
-Reading a feed, searching posts and reading the comments on a public post
-need no sign-in.
+Reading a feed or the archive, searching posts, reading one post and reading
+the comments on a public post need no sign-in.
 
 ## Settings
 
 | Setting | Env | What it is |
 | --- | --- | --- |
-| `publication` | `SUBSTACK_PUBLICATION` | Your publication's substack.com subdomain, such as `novumai`. The `newPost` trigger reads its feed, and a step that names no publication uses it. When it is empty, signed-in actions use the account's primary publication. |
+| `publication` | `SUBSTACK_PUBLICATION` | Your publication's substack.com subdomain, such as `exampleletter`. The `newPost` trigger reads its feed, and a step that names no publication uses it. When it is empty, signed-in actions use the account's primary publication. |
 
 ## It never publishes
 
 Publishing a post emails every subscriber, so nothing here publishes or
 schedules. `createDraft` saves a draft and returns the address to open it in
 the editor, where you publish it yourself. Any request path containing
-`publish` or `schedule` is refused before it leaves, and `deleteDraft` reads
-the draft first and refuses a published post.
+`publish` or `schedule` is refused before it leaves, and `deleteDraft` and
+`updateDraft` read the draft first and refuse a published post. The one
+exception to the guard is a `GET` to `/api/v1/publish-dashboard/`, the
+dashboard's read-only figures that `readSubscriberCount` reads.
 
 ## Substack's terms
 
@@ -64,11 +67,20 @@ for templates.
 | `readFeed` | yes | no | `GET https://<publication>/feed`, for any publication, a custom domain included. `limit` from 1 to 20, default 10. Returns `publication`, `count` and `posts` (`id`, `title`, `subtitle`, `url`, `author`, `publishedAt`, `html`, `text`). |
 | `searchPosts` | yes | no | `GET substack.com/api/v1/post/search` with `query` and `page` (from 0). Returns `count`, `more` and `posts` (`id`, `title`, `subtitle`, `url`, `publishedAt`, `author`, `authorHandle`, `likes`, `comments`, `publicationId`). |
 | `readComments` | yes | no | Looks the post up by address or slug (`GET /api/v1/posts/<slug>`) unless given `postId`, then `GET /api/v1/post/<id>/comments?all_comments=true&sort=newest_first`. Returns `postId`, `count` and `comments` (`id`, `body`, `author`, `handle`, `date`, `likes`, `parentId`, `replies`), each reply after the comment it answers. |
+| `listPosts` | yes | no | `GET /api/v1/archive?sort=new&limit=25&offset=<n>` on the publication, a page at a time until a page comes back short or `limit` is reached (1 to 500, default 50). Returns `publication`, `count` and `posts` (`id`, `title`, `subtitle`, `slug`, `url`, `publishedAt`, `audience`). |
+| `getPost` | yes | no | `GET /api/v1/posts/<slug>` for the post given by address, or by slug on the publication. Returns the fields `listPosts` gives plus `wordcount`, `html`, `text`, `likes` and `restacks`. |
 | `createDraft` | no | yes | `GET substack.com/api/v1/user/profile/self` for the byline, then `POST /api/v1/drafts` on the publication with the markdown body converted to the editor's document. Returns `id`, `title` and `editUrl`. |
+| `updateDraft` | no | yes | `GET substack.com/api/v1/user/profile/self` for the byline, `GET /api/v1/drafts/<id>` to refuse a published post, then `PUT /api/v1/drafts/<id>` with the new title, subtitle and markdown body. Returns `updated`, `id`, `title` and `editUrl`. |
 | `deleteDraft` | no | yes | `GET`, then `DELETE /api/v1/drafts/<id>`; a published post is refused. Returns `deleted`. |
 | `commentOnPost` | no | yes | `POST /api/v1/post/<id>/comment` with `{ body }`. Returns `id` and `postId`. |
 | `setCommentLike` | yes | yes | `POST` to like or `DELETE` to unlike `/api/v1/comment/<id>/reaction`, with `{ reaction: "❤" }`. Returns `liked`. |
 | `deleteComment` | no | yes | `DELETE /api/v1/comment/<id>`. Returns `deleted`. |
+| `setPostLike` | no | yes | `POST` to like or `DELETE` to unlike `/api/v1/post/<id>/reaction`, with `{ reaction: "❤" }`. Returns `postId` and `liked`. |
+| `setPostRestack` | no | yes | `POST` to restack or `DELETE` to undo `/api/v1/restack/feed`, with `{ postId, commentId: null }`. Posts only. Returns `postId` and `restacked`. |
+| `postNote` | no | yes | `GET substack.com/api/v1/user/profile/self` for the handle, then `POST substack.com/api/v1/comment/feed` with the markdown as the editor's document under `attrs.schemaVersion: "v1"`, plus `tabId: "for-you"`, `surface: "feed"` and `replyMinimumRole: "everyone"`. Returns `id` and `url`. |
+| `readNotes` | yes | yes | Resolves a handle with `GET substack.com/api/v1/user/<handle>/public_profile`, or takes the signed-in account, then follows `nextCursor` through `GET substack.com/api/v1/reader/feed/profile/<userId>` for up to ten pages, keeping the items that are Notes. `limit` from 1 to 100, default 20. Returns `profile`, `count` and `notes` (`id`, `body`, `url`, `date`, `likes`, `restacks`). |
+| `deleteNote` | no | yes | `DELETE substack.com/api/v1/comment/<id>`. Returns `deleted`. |
+| `readSubscriberCount` | yes | yes | `GET /api/v1/publish-dashboard/summary` on your publication. Returns `subscribers` (every subscriber, free and paid, from the summary's `totalEmail`, the count the dashboard shows), `paidSubscribers` (from the summary's `subscribers`, which counts paid ones only), `appSubscribers`, `views` and `openRate`, as the summary reports them. |
 
 Writes stay on `*.substack.com`. A publication on a custom domain can be read
 at its own address, but a comment on one of its posts is refused; write to it
@@ -97,8 +109,8 @@ check skips.
 ## Built from
 
 Substack publishes no API reference. Every request here was made from a
-signed-in browser on 2026-09-10 against the author's own publication, and
-each write was undone.
+signed-in browser against the author's own publication, and each write was
+undone. On 2026-09-10:
 
 - `GET substack.com/api/v1/user/profile/self` answers 200 with `id`, `name`,
   `handle` and `publicationUsers` when signed in, and 401 when not.
@@ -108,3 +120,19 @@ each write was undone.
 - `POST /api/v1/drafts` answers 400 `draft_bylines Invalid value` without a
   byline and 200 with one. A deleted draft then reads back 404.
 - Commenting, liking and deleting a comment are the requests listed above.
+
+On 2026-09-12:
+
+- The archive pages with `offset`, and `/api/v1/posts/<slug>` carries the
+  whole `body_html`, `reactions` and `restacks`.
+- A Note posted with `POST /api/v1/comment/feed` showed on the profile feed as
+  a `comment` item whose `context.type` is `note`, and
+  `DELETE substack.com/api/v1/comment/<id>` removed it.
+- Liking a post and restacking it, then taking both back, are the requests
+  listed above; the post read back unliked and unrestacked.
+- The dashboard reads its figures with `GET /api/v1/publish-dashboard/summary`.
+  Its `subscribers` is the paid count (0 on the author's publication) and its
+  `totalEmail` the total (29, the dashboard's "29 subscribers").
+- Then all nine new actions ran through the built package against the same
+  publication, and everything was put back. `updateDraft`'s `PUT` changed the
+  draft's title, subtitle and body as sent.

package/dist/index.js

@@ -1465,7 +1465,7 @@ function markdownToDoc(markdown) {
 var SUBDOMAIN = /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/i;
 function publicationHost(value) {
   const raw = String(value ?? "").trim();
-  if (raw === "") throw new Error('publication is required: its substack.com subdomain, such as "novumai"');
+  if (raw === "") throw new Error('publication is required: its substack.com subdomain, such as "exampleletter"');
   if (SUBDOMAIN.test(raw)) return `${raw.toLowerCase()}.substack.com`;
   try {
     return new URL(raw.includes("://") ? raw : `https://${raw}`).hostname.toLowerCase();
@@ -1477,7 +1477,7 @@ function substackHost(value) {
   const host = publicationHost(value);
   if (!host.endsWith(".substack.com")) {
     throw new Error(
-      `${host} is a custom domain; use the publication's substack.com address instead, such as novumai.substack.com`
+      `${host} is a custom domain; use the publication's substack.com address instead, such as exampleletter.substack.com`
     );
   }
   return host;
@@ -1485,7 +1485,7 @@ function substackHost(value) {
 function postRef(value) {
   const raw = String(value ?? "").trim();
   const notAPost = new Error(
-    `post must be a post's address, such as https://novumai.substack.com/p/its-slug; got "${raw}"`
+    `post must be a post's address, such as https://exampleletter.substack.com/p/its-slug; got "${raw}"`
   );
   let url;
   try {
@@ -1501,8 +1501,8 @@ function postRef(value) {
 // package.json
 var package_default = {
   name: "@vornrun/connector-substack",
-  version: "0.1.0",
-  description: "Trigger workflows from new posts on a Substack publication, and read, search and comment on posts or save a draft from a step.",
+  version: "0.2.0",
+  description: "Trigger workflows from new posts on a Substack publication, and read, search, like, restack and comment on posts, post and read Notes, or save and update a draft from a step.",
   type: "module",
   license: "MIT",
   author: "Javier Canizalez <javier-canizalez@outlook.com>",
@@ -1558,6 +1558,7 @@ var package_default = {
       "posts",
       "comments",
       "drafts",
+      "notes",
       "writing"
     ],
     auth: "Sign in to Substack in the window Vorn opens; reading a publication's feed and searching posts need no sign-in.",
@@ -1569,11 +1570,20 @@ var package_default = {
 var ORIGINS = ["https://substack.com", "https://*.substack.com"];
 var PROFILE_URL = "https://substack.com/api/v1/user/profile/self";
 var SEARCH_URL = "https://substack.com/api/v1/post/search";
+var NOTES_URL = "https://substack.com/api/v1/comment/feed";
 var MAX_FEED_POSTS = 20;
 var DEFAULT_FEED_POSTS = 10;
+var MAX_POSTS = 500;
+var DEFAULT_POSTS = 50;
+var MAX_NOTES = 100;
+var DEFAULT_NOTES = 20;
+var ARCHIVE_PAGE = 25;
+var NOTE_PAGES = 10;
 var REACTION = "\u2764";
 var SLUG = /^[a-z0-9][a-z0-9-]*$/i;
+var HANDLE = /^[\w.-]+$/;
 var NEVER = /publish|schedul/i;
+var DASHBOARD = /^\/api\/v1\/publish-dashboard\//;
 function text2(value) {
   const trimmed = String(value ?? "").trim();
   return trimmed || void 0;
@@ -1610,8 +1620,10 @@ async function call(fetchImpl, url, init = {}) {
 }
 function neverPublishing(fetchImpl) {
   return ((input, init) => {
-    const { pathname } = new URL(input instanceof Request ? input.url : String(input));
-    if (NEVER.test(pathname)) {
+    const request = input instanceof Request ? input : void 0;
+    const { pathname } = new URL(request ? request.url : String(input));
+    const method = (init?.method ?? request?.method ?? "GET").toUpperCase();
+    if (NEVER.test(pathname) && !(method === "GET" && DASHBOARD.test(pathname))) {
       return Promise.reject(new Error(`Refused ${pathname}: this connector never publishes or schedules`));
     }
     return fetchImpl(input, init);
@@ -1639,15 +1651,18 @@ async function readPosts(fetchImpl, host) {
   if (!res.ok) throw new Error(`GET /feed on ${host} answered ${res.status}`);
   return parseFeed(await res.text());
 }
-function feedLimit(value) {
+function countLimit(value, fallback, max) {
   const raw = text2(value);
-  if (raw === void 0) return DEFAULT_FEED_POSTS;
+  if (raw === void 0) return fallback;
   const parsed = Number(raw);
-  if (!Number.isInteger(parsed) || parsed < 1 || parsed > MAX_FEED_POSTS) {
-    throw new Error(`limit must be a whole number from 1 to ${MAX_FEED_POSTS}`);
+  if (!Number.isInteger(parsed) || parsed < 1 || parsed > max) {
+    throw new Error(`limit must be a whole number from 1 to ${max}`);
   }
   return parsed;
 }
+function feedLimit(value) {
+  return countLimit(value, DEFAULT_FEED_POSTS, MAX_FEED_POSTS);
+}
 function wholeId(value, name) {
   const parsed = Number(text2(value));
   if (!Number.isSafeInteger(parsed) || parsed <= 0) throw new Error(`${name} must be a Substack id, a whole number`);
@@ -1710,11 +1725,54 @@ function flattenComments(comments) {
     return [record, ...flattenComments(comment.children)];
   });
 }
+function listedPost(post) {
+  return {
+    id: Number(post.id ?? 0),
+    title: String(post.title ?? ""),
+    subtitle: String(post.subtitle ?? ""),
+    slug: String(post.slug ?? ""),
+    url: String(post.canonical_url ?? ""),
+    publishedAt: String(post.post_date ?? ""),
+    audience: String(post.audience ?? "")
+  };
+}
+function likesOf(entry) {
+  return Number(entry.reaction_count ?? entry.reactions?.[REACTION] ?? 0);
+}
+function noteUrl(handle, id) {
+  return `https://substack.com/@${handle}/note/c-${id}`;
+}
+function noteRecord(note, handle) {
+  const id = Number(note.id ?? 0);
+  return {
+    id,
+    body: String(note.body ?? ""),
+    url: noteUrl(text2(note.handle) ?? handle, id),
+    date: String(note.date ?? ""),
+    likes: likesOf(note),
+    restacks: Number(note.restacks ?? 0)
+  };
+}
+async function unpublishedDraft(session, host, id, verb) {
+  const draft = await call(session.fetch, `https://${host}/api/v1/drafts/${id}`);
+  if (draft.is_published === true) {
+    throw new Error(`${id} is a published post, not a draft; this action ${verb} only drafts`);
+  }
+}
+function draftFields(me2, title, subtitle, body) {
+  return {
+    draft_title: title,
+    draft_subtitle: text2(subtitle) ?? "",
+    draft_body: JSON.stringify(markdownToDoc(body)),
+    // Substack refuses a draft without a byline and says so; only a profile with no id leaves it out.
+    ...typeof me2.id === "number" && { draft_bylines: [{ id: me2.id, is_guest: false }] }
+  };
+}
 var SAMPLE_POST = {
-  id: "https://novumai.substack.com/p/anthropic-passed-openai-this-week",
-  title: "Anthropic passed OpenAI this week. The $65 billion shows what the lead costs.",
+  id: "https://exampleletter.substack.com/p/the-weekly-letter",
+  title: "A weekly letter about the week in software.",
   subtitle: "Both moves are really about one question: who can pay for compute.",
-  url: "https://novumai.substack.com/p/anthropic-passed-openai-this-week",
+  url: "https://exampleletter.substack.com/p/the-weekly-letter",
   author: "Javier Canizalez",
   publishedAt: "2026-05-29T20:03:32.000Z",
   html: "<p>Both moves are really about one question.</p>",
@@ -1750,7 +1808,7 @@ var connector = defineConnector({
   id: "substack",
   name: "Substack",
   version: package_default.version,
-  description: "Trigger workflows from new posts on a Substack publication, and read, search and comment on posts or save a draft from a step.",
+  description: "Trigger workflows from new posts on a Substack publication, and read, search, like, restack and comment on posts, post and read Notes, or save and update a draft from a step.",
   icon: {
     viewBox: "0 0 24 24",
     paths: [
@@ -1770,7 +1828,7 @@ var connector = defineConnector({
       key: "publication",
       label: "Publication",
       env: "SUBSTACK_PUBLICATION",
-      description: "Your publication's substack.com subdomain, such as novumai. The new-post trigger reads its feed, and a step that names no publication uses it.",
+      description: "Your publication's substack.com subdomain, such as exampleletter. The new-post trigger reads its feed, and a step that names no publication uses it.",
       builderHint: "The part before .substack.com in the publication address; a custom domain works for reading only."
     }
   ],
@@ -1878,6 +1936,79 @@ var connector = defineConnector({
         return { postId: id, count: comments.length, comments };
       }
     },
+    {
+      type: "listPosts",
+      label: "List posts",
+      description: `A publication's archive, newest first, up to ${MAX_POSTS} posts, where the feed holds only the last twenty. Needs no sign-in.`,
+      idempotent: true,
+      inputs: [
+        PUBLICATION_INPUT,
+        {
+          key: "limit",
+          label: "Posts",
+          type: "number",
+          description: `How many of the newest posts, from 1 to ${MAX_POSTS}; ${DEFAULT_POSTS} when empty.`
+        }
+      ],
+      outputs: [
+        { key: "publication", type: "string", description: "The host the archive was read from" },
+        { key: "count", type: "number", description: "How many posts came back, in `posts`" }
+      ],
+      run: async (args, ctx) => {
+        const host = publicationHost(stepPublication(args.publication, ctx.config));
+        const limit = countLimit(args.limit, DEFAULT_POSTS, MAX_POSTS);
+        const posts = [];
+        for (let offset = 0; posts.length < limit; offset += ARCHIVE_PAGE) {
+          const page = await call(
+            ctx.fetch,
+            `https://${host}/api/v1/archive?sort=new&limit=${ARCHIVE_PAGE}&offset=${offset}`
+          );
+          const rows = Array.isArray(page) ? page : [];
+          posts.push(...rows);
+          if (rows.length < ARCHIVE_PAGE) break;
+        }
+        const listed = posts.slice(0, limit).map(listedPost);
+        return { publication: host, count: listed.length, posts: listed };
+      }
+    },
+    {
+      type: "getPost",
+      label: "Get post",
+      description: "One post with its whole body as HTML and as text, and its likes and restacks. Needs no sign-in for a public post.",
+      idempotent: true,
+      inputs: [
+        {
+          key: "post",
+          label: "Post",
+          required: true,
+          description: "The post's address, or its slug on the publication."
+        },
+        PUBLICATION_INPUT
+      ],
+      outputs: [
+        { key: "id", type: "number", description: "The post's id" },
+        { key: "title", type: "string", description: "The post's title" },
+        { key: "url", type: "string", description: "The post's address" },
+        { key: "text", type: "string", description: "The body as plain text" }
+      ],
+      run: async (args, ctx) => {
+        const raw = text2(args.post);
+        if (raw === void 0) throw new Error("post is required");
+        const host = postHost(raw, stepPublication(args.publication, ctx.config));
+        const slug = raw.includes("/") ? postRef(raw).slug : raw;
+        if (!SLUG.test(slug)) throw new Error(`"${slug}" is not a post slug`);
+        const post = await call(ctx.fetch, `https://${host}/api/v1/posts/${slug}`);
+        const html = String(post.body_html ?? "");
+        return {
+          ...listedPost(post),
+          wordcount: Number(post.wordcount ?? 0),
+          html,
+          text: plainText(html),
+          likes: likesOf(post),
+          restacks: Number(post.restacks ?? 0)
+        };
+      }
+    },
     {
       type: "createDraft",
       label: "Save draft",
@@ -1909,11 +2040,7 @@ var connector = defineConnector({
         const draft = await call(session.fetch, `https://${host}/api/v1/drafts`, {
           method: "POST",
           body: {
-            draft_title: title,
-            draft_subtitle: text2(args.subtitle) ?? "",
-            draft_body: JSON.stringify(markdownToDoc(body)),
-            // Substack refuses a draft without a byline and says so; only a profile with no id leaves it out.
-            ...typeof me2.id === "number" && { draft_bylines: [{ id: me2.id, is_guest: false }] },
+            ...draftFields(me2, title, args.subtitle, body),
             type: "newsletter",
             audience: "everyone",
             section_chosen: false,
@@ -1924,6 +2051,51 @@ var connector = defineConnector({
         return { title, ...id !== void 0 && { id, editUrl: `https://${host}/publish/post/${id}` } };
       }
     },
+    {
+      type: "updateDraft",
+      label: "Update draft",
+      description: "Replace a draft's title, subtitle and body with new markdown. A published post is refused, and it never publishes.",
+      idempotent: false,
+      inputs: [
+        {
+          key: "draftId",
+          label: "Draft id",
+          type: "number",
+          required: true,
+          description: "The id Save draft returned."
+        },
+        { key: "title", label: "Title", required: true, description: "The draft's title." },
+        { key: "subtitle", label: "Subtitle", description: "The line under the title; empty leaves the draft without one." },
+        {
+          key: "body",
+          label: "Body",
+          required: true,
+          description: "The whole post in markdown, replacing what the draft held."
+        },
+        { ...OWN_PUBLICATION_INPUT, type: "select", loadOptions: "publications" }
+      ],
+      outputs: [
+        { key: "updated", type: "boolean", description: "Whether the draft was saved" },
+        { key: "id", type: "number", description: "The draft's id" },
+        { key: "editUrl", type: "string", description: "Where to open the draft in the Substack editor" }
+      ],
+      run: async (args, ctx) => {
+        const session = signedIn(ctx.session);
+        const id = wholeId(args.draftId, "draftId");
+        const title = text2(args.title);
+        const body = text2(args.body);
+        if (title === void 0) throw new Error("title is required");
+        if (body === void 0) throw new Error("body is required");
+        const me2 = await call(session.fetch, PROFILE_URL);
+        const host = namedPublication(args.publication, ctx.config) ?? primaryPublication(me2);
+        await unpublishedDraft(session, host, id, "updates");
+        await call(session.fetch, `https://${host}/api/v1/drafts/${id}`, {
+          method: "PUT",
+          body: draftFields(me2, title, args.subtitle, body)
+        });
+        return { updated: true, id, title, editUrl: `https://${host}/publish/post/${id}` };
+      }
+    },
     {
       type: "deleteDraft",
       label: "Delete draft",
@@ -1944,10 +2116,7 @@ var connector = defineConnector({
         const session = signedIn(ctx.session);
         const id = wholeId(args.draftId, "draftId");
         const host = await ownPublication(args.publication, ctx.config, session);
-        const draft = await call(session.fetch, `https://${host}/api/v1/drafts/${id}`);
-        if (draft.is_published === true) {
-          throw new Error(`${id} is a published post, not a draft; this action deletes only drafts`);
-        }
+        await unpublishedDraft(session, host, id, "deletes");
         await call(session.fetch, `https://${host}/api/v1/drafts/${id}`, { method: "DELETE" });
         return { deleted: true, id };
       }
@@ -2038,6 +2207,208 @@ var connector = defineConnector({
         await call(session.fetch, `https://${host}/api/v1/comment/${id}`, { method: "DELETE" });
         return { deleted: true, commentId: id };
       }
+    },
+    {
+      type: "setPostLike",
+      label: "Like or unlike post",
+      description: "Like a post as the signed-in account, or take the like back.",
+      idempotent: false,
+      inputs: [
+        ...POST_INPUTS,
+        {
+          key: "liked",
+          label: "Liked",
+          type: "boolean",
+          required: true,
+          description: "true to like it, false to take the like back."
+        },
+        PUBLICATION_INPUT
+      ],
+      outputs: [{ key: "liked", type: "boolean", description: "The state now set" }],
+      run: async (args, ctx) => {
+        const session = signedIn(ctx.session);
+        const liked = args.liked === true;
+        const publication = stepPublication(args.publication, ctx.config);
+        const host = substackHost(postHost(args.post, publication));
+        const { id } = await resolvePost(ctx.fetch, args.post, args.postId, publication);
+        await call(session.fetch, `https://${host}/api/v1/post/${id}/reaction`, {
+          method: liked ? "POST" : "DELETE",
+          body: { reaction: REACTION }
+        });
+        return { postId: id, liked };
+      }
+    },
+    {
+      type: "setPostRestack",
+      label: "Restack or undo restack post",
+      description: "Restack a post to the signed-in account's followers, or take the restack back. Posts only, not Notes.",
+      idempotent: false,
+      inputs: [
+        ...POST_INPUTS,
+        {
+          key: "restacked",
+          label: "Restacked",
+          type: "boolean",
+          required: true,
+          description: "true to restack it, false to take the restack back."
+        },
+        PUBLICATION_INPUT
+      ],
+      outputs: [{ key: "restacked", type: "boolean", description: "The state now set" }],
+      run: async (args, ctx) => {
+        const session = signedIn(ctx.session);
+        const restacked = args.restacked === true;
+        const publication = stepPublication(args.publication, ctx.config);
+        const host = substackHost(postHost(args.post, publication));
+        const { id } = await resolvePost(ctx.fetch, args.post, args.postId, publication);
+        await call(session.fetch, `https://${host}/api/v1/restack/feed`, {
+          method: restacked ? "POST" : "DELETE",
+          body: { postId: id, commentId: null }
+        });
+        return { postId: id, restacked };
+      }
+    },
+    {
+      type: "postNote",
+      label: "Post a note",
+      description: "Post a Note as the signed-in account. Followers see it in their feeds as soon as it posts; Delete note takes it down.",
+      idempotent: false,
+      inputs: [
+        {
+          key: "body",
+          label: "Note",
+          required: true,
+          description: "The Note in markdown, converted the way a draft's body is."
+        }
+      ],
+      outputs: [
+        { key: "id", type: "number", description: "The Note's id" },
+        { key: "url", type: "string", description: "The Note's address" }
+      ],
+      run: async (args, ctx) => {
+        const session = signedIn(ctx.session);
+        const body = text2(args.body);
+        if (body === void 0) throw new Error("body is required");
+        const me2 = await call(session.fetch, PROFILE_URL);
+        const note = await call(session.fetch, NOTES_URL, {
+          method: "POST",
+          body: {
+            bodyJson: { ...markdownToDoc(body), attrs: { schemaVersion: "v1" } },
+            tabId: "for-you",
+            surface: "feed",
+            replyMinimumRole: "everyone"
+          }
+        });
+        if (typeof note.id !== "number") return {};
+        const handle = text2(me2.handle);
+        return { id: note.id, ...handle !== void 0 && { url: noteUrl(handle, note.id) } };
+      }
+    },
+    {
+      type: "readNotes",
+      label: "Read notes",
+      description: `A profile's Notes, newest first, up to ${MAX_NOTES}, from its activity feed as the signed-in account sees it.`,
+      idempotent: true,
+      inputs: [
+        {
+          key: "profile",
+          label: "Profile",
+          description: "A Substack handle, with or without @; the signed-in account when empty."
+        },
+        {
+          key: "limit",
+          label: "Notes",
+          type: "number",
+          description: `How many of the newest Notes, from 1 to ${MAX_NOTES}; ${DEFAULT_NOTES} when empty.`
+        }
+      ],
+      outputs: [
+        { key: "profile", type: "string", description: "The handle the Notes are from" },
+        { key: "count", type: "number", description: "How many Notes came back, in `notes`" }
+      ],
+      run: async (args, ctx) => {
+        const session = signedIn(ctx.session);
+        const limit = countLimit(args.limit, DEFAULT_NOTES, MAX_NOTES);
+        const named = text2(args.profile)?.replace(/^@/, "");
+        if (named !== void 0 && !HANDLE.test(named)) throw new Error(`"${named}" is not a Substack handle`);
+        const who = await call(
+          session.fetch,
+          named === void 0 ? PROFILE_URL : `https://substack.com/api/v1/user/${named}/public_profile`
+        );
+        const handle = text2(who.handle) ?? named ?? "";
+        const notes = [];
+        let cursor;
+        for (let page = 0; typeof who.id === "number" && page < NOTE_PAGES && notes.length < limit; page++) {
+          const url = new URL(`https://substack.com/api/v1/reader/feed/profile/${who.id}`);
+          if (cursor !== void 0) url.searchParams.set("cursor", cursor);
+          const feed = await call(session.fetch, url.href);
+          for (const entry of feed.items ?? []) {
+            if (entry.type === "comment" && entry.context?.type === "note" && entry.comment) {
+              notes.push(noteRecord(entry.comment, handle));
+            }
+          }
+          cursor = text2(feed.nextCursor);
+          if (cursor === void 0) break;
+        }
+        const kept = notes.slice(0, limit);
+        return { profile: handle, count: kept.length, notes: kept };
+      }
+    },
+    {
+      type: "deleteNote",
+      label: "Delete note",
+      description: "Delete one of the signed-in account's Notes.",
+      idempotent: false,
+      inputs: [
+        {
+          key: "noteId",
+          label: "Note id",
+          type: "number",
+          required: true,
+          description: "The id Post a note or Read notes returned."
+        }
+      ],
+      outputs: [{ key: "deleted", type: "boolean", description: "Whether the Note was deleted" }],
+      run: async (args, ctx) => {
+        const session = signedIn(ctx.session);
+        const id = wholeId(args.noteId, "noteId");
+        await call(session.fetch, `https://substack.com/api/v1/comment/${id}`, { method: "DELETE" });
+        return { deleted: true, noteId: id };
+      }
+    },
+    {
+      type: "readSubscriberCount",
+      label: "Read subscriber count",
+      description: "Your publication's subscriber, email and view figures, as its dashboard shows them. Needs the signed-in account to run the publication.",
+      idempotent: true,
+      inputs: [{ ...OWN_PUBLICATION_INPUT, type: "select", loadOptions: "publications" }],
+      outputs: [
+        {
+          key: "subscribers",
+          type: "number",
+          description: "Every subscriber, free and paid: the count the dashboard's subscribers page shows"
+        },
+        { key: "paidSubscribers", type: "number", description: "Paid subscribers only" },
+        { key: "appSubscribers", type: "number", description: "The dashboard summary\u2019s app subscriber figure" },
+        { key: "views", type: "number", description: "The dashboard summary\u2019s view count" },
+        { key: "openRate", type: "number", description: "Email open rate, as the dashboard summary reports it" }
+      ],
+      run: async (args, ctx) => {
+        const session = signedIn(ctx.session);
+        const host = await ownPublication(args.publication, ctx.config, session);
+        const summary = await call(
+          session.fetch,
+          `https://${host}/api/v1/publish-dashboard/summary`
+        );
+        return {
+          publication: host,
+          subscribers: Number(summary.totalEmail ?? 0),
+          paidSubscribers: Number(summary.subscribers ?? 0),
+          appSubscribers: Number(summary.appSubscribers ?? 0),
+          views: Number(summary.views ?? 0),
+          openRate: Number(summary.openRate ?? 0)
+        };
+      }
     }
   ]
 });

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@vornrun/connector-substack",
-  "version": "0.1.0",
-  "description": "Trigger workflows from new posts on a Substack publication, and read, search and comment on posts or save a draft from a step.",
+  "version": "0.2.0",
+  "description": "Trigger workflows from new posts on a Substack publication, and read, search, like, restack and comment on posts, post and read Notes, or save and update a draft from a step.",
   "type": "module",
   "license": "MIT",
   "author": "Javier Canizalez <javier-canizalez@outlook.com>",
@@ -57,6 +57,7 @@
       "posts",
       "comments",
       "drafts",
+      "notes",
       "writing"
     ],
     "auth": "Sign in to Substack in the window Vorn opens; reading a publication's feed and searching posts need no sign-in.",