substack-saved-mcp 0.3.1__tar.gz → 0.3.2__tar.gz

{substack_saved_mcp-0.3.1 → substack_saved_mcp-0.3.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: substack-saved-mcp
-Version: 0.3.1
+Version: 0.3.2
 Summary: Local stdio-based MCP server and sync engine for Substack saved posts
 Author-email: Toni Hermoso Pulido <toniher@cau.cat>
 License-Expression: MIT
@@ -11,7 +11,6 @@ Requires-Dist: fastmcp>=0.1.0
 Requires-Dist: playwright>=1.40.0
 Requires-Dist: pydantic>=2.0.0
 Provides-Extra: dev
-Requires-Dist: pytest-asyncio>=0.23.0; extra == 'dev'
 Requires-Dist: pytest>=8.0.0; extra == 'dev'
 Requires-Dist: ruff==0.16.1; extra == 'dev'
 Description-Content-Type: text/markdown

{substack_saved_mcp-0.3.1 → substack_saved_mcp-0.3.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "substack-saved-mcp"
-version = "0.3.1"
+version = "0.3.2"
 description = "Local stdio-based MCP server and sync engine for Substack saved posts"
 readme = "README.md"
 requires-python = ">=3.11"
@@ -20,7 +20,6 @@ dependencies = [
 [project.optional-dependencies]
 dev = [
     "pytest>=8.0.0",
-    "pytest-asyncio>=0.23.0",
     "ruff==0.16.1",
 ]
 

{substack_saved_mcp-0.3.1 → substack_saved_mcp-0.3.2}/src/substack_saved_mcp/__init__.py

@@ -1,3 +1,3 @@
 """Substack Saved Posts MCP & Sync Application."""
 
-__version__ = "0.3.1"
+__version__ = "0.3.2"

{substack_saved_mcp-0.3.1 → substack_saved_mcp-0.3.2}/src/substack_saved_mcp/cli.py

@@ -50,6 +50,8 @@ from substack_saved_mcp.database import (
 )
 from substack_saved_mcp.mcp_server import run_server
 from substack_saved_mcp.substack_client import (
+    STEALTH_CONTEXT_KWARGS,
+    STEALTH_LAUNCH_ARGS,
     AuthRequiredError,
     SubstackSavedPostsClient,
     perform_interactive_login,
@@ -806,18 +808,8 @@ def inspect_network(
     out_file = open(out_path, "a") if out_path else None
 
     with sync_playwright() as p:
-        browser = p.chromium.launch(
-            headless=False,
-            args=["--disable-blink-features=AutomationControlled"],
-        )
-        context_kwargs = {
-            "user_agent": (
-                "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) "
-                "AppleWebKit/537.36 (KHTML, like Gecko) "
-                "Chrome/131.0.0.0 Safari/537.36"
-            ),
-            "viewport": {"width": 1280, "height": 800},
-        }
+        browser = p.chromium.launch(headless=False, args=STEALTH_LAUNCH_ARGS)
+        context_kwargs = dict(STEALTH_CONTEXT_KWARGS)
         if storage_state:
             context_kwargs["storage_state"] = storage_state
 

{substack_saved_mcp-0.3.1 → substack_saved_mcp-0.3.2}/src/substack_saved_mcp/config.py

@@ -1,8 +1,11 @@
 """Configuration settings and filesystem path management."""
 
+import logging
 import os
 from pathlib import Path
 
+logger = logging.getLogger(__name__)
+
 APP_NAME = "substack-saved-mcp"
 
 _SAVED_POSTS_SOURCES = frozenset({"auto", "legacy", "unified", "dom"})
@@ -80,5 +83,5 @@ def ensure_app_dirs() -> None:
         try:
             data_dir.chmod(0o700)
             browser_dir.chmod(0o700)
-        except Exception:
-            pass
+        except Exception as err:
+            logger.warning(f"Could not restrict permissions on {data_dir}: {err}")

{substack_saved_mcp-0.3.1 → substack_saved_mcp-0.3.2}/src/substack_saved_mcp/database.py

@@ -66,6 +66,52 @@ def _read_state_clause(
     return clause, params
 
 
+def _resolve_row(
+    cursor: sqlite3.Cursor, table: str, id_column: str, url_or_id: str | int
+) -> sqlite3.Row | None:
+    """Look up a posts/notes row by local numeric id, or by URL/Substack id
+    otherwise. Shared by get_post/soft_delete_post/get_note/soft_delete_note,
+    which all resolved this identically except for the table and id column name."""
+    if isinstance(url_or_id, int) or (
+        isinstance(url_or_id, str) and url_or_id.isdigit()
+    ):
+        cursor.execute(f"SELECT * FROM {table} WHERE id = ?", (int(url_or_id),))
+    else:
+        clean_url = canonicalize_url(str(url_or_id))
+        cursor.execute(
+            f"SELECT * FROM {table} WHERE url = ? OR {id_column} = ?",
+            (clean_url, str(url_or_id)),
+        )
+    return cursor.fetchone()
+
+
+def _last_sync_info(
+    cursor: sqlite3.Cursor, entity: str
+) -> tuple[str | None, str | None]:
+    """Return (last_successful_completed_at, last_status) for a sync_runs
+    entity ('post' or 'note'). Shared by get_status()'s post/note blocks,
+    which were otherwise identical two-query lookups."""
+    cursor.execute(
+        """
+        SELECT completed_at FROM sync_runs
+        WHERE status = 'success' AND entity = ?
+        ORDER BY id DESC LIMIT 1
+        """,
+        (entity,),
+    )
+    success_row = cursor.fetchone()
+    last_success = success_row["completed_at"] if success_row else None
+
+    cursor.execute(
+        "SELECT status FROM sync_runs WHERE entity = ? ORDER BY id DESC LIMIT 1",
+        (entity,),
+    )
+    status_row = cursor.fetchone()
+    last_status = status_row["status"] if status_row else None
+
+    return last_success, last_status
+
+
 @contextmanager
 def get_db_connection(
     db_path: Path | None = None,
@@ -435,18 +481,7 @@ def soft_delete_post(
     with get_db_connection(db_path) as conn:
         cursor = conn.cursor()
 
-        if isinstance(url_or_id, int) or (
-            isinstance(url_or_id, str) and url_or_id.isdigit()
-        ):
-            cursor.execute("SELECT * FROM posts WHERE id = ?", (int(url_or_id),))
-        else:
-            clean_url = canonicalize_url(str(url_or_id))
-            cursor.execute(
-                "SELECT * FROM posts WHERE url = ? OR substack_post_id = ?",
-                (clean_url, str(url_or_id)),
-            )
-
-        row = cursor.fetchone()
+        row = _resolve_row(cursor, "posts", "substack_post_id", url_or_id)
         if not row:
             return None
 
@@ -496,17 +531,7 @@ def get_post(url_or_id: str | int, db_path: Path | None = None) -> SavedPost | N
     """Retrieve full post record by local ID, Substack post ID, or URL."""
     with get_db_connection(db_path) as conn:
         cursor = conn.cursor()
-        if isinstance(url_or_id, int) or (
-            isinstance(url_or_id, str) and url_or_id.isdigit()
-        ):
-            cursor.execute("SELECT * FROM posts WHERE id = ?", (int(url_or_id),))
-        else:
-            clean_url = canonicalize_url(str(url_or_id))
-            cursor.execute(
-                "SELECT * FROM posts WHERE url = ? OR substack_post_id = ?",
-                (clean_url, str(url_or_id)),
-            )
-        row = cursor.fetchone()
+        row = _resolve_row(cursor, "posts", "substack_post_id", url_or_id)
         return SavedPost(**dict(row)) if row else None
 
 
@@ -775,37 +800,8 @@ def get_status(db_path: Path | None = None) -> SavedPostsStatus:
         remaining_words = cursor.fetchone()[0] or 0
         minutes_remaining_total = math.ceil(remaining_words / WORDS_PER_MINUTE)
 
-        cursor.execute("""
-            SELECT completed_at, status FROM sync_runs
-            WHERE status = 'success' AND entity = 'post'
-            ORDER BY id DESC LIMIT 1
-        """)
-        last_success_row = cursor.fetchone()
-        last_success = last_success_row["completed_at"] if last_success_row else None
-
-        cursor.execute(
-            "SELECT status FROM sync_runs WHERE entity = 'post' ORDER BY id DESC LIMIT 1"
-        )
-        last_status_row = cursor.fetchone()
-        last_status = last_status_row["status"] if last_status_row else None
-
-        cursor.execute("""
-            SELECT completed_at, status FROM sync_runs
-            WHERE status = 'success' AND entity = 'note'
-            ORDER BY id DESC LIMIT 1
-        """)
-        last_note_success_row = cursor.fetchone()
-        last_note_success = (
-            last_note_success_row["completed_at"] if last_note_success_row else None
-        )
-
-        cursor.execute(
-            "SELECT status FROM sync_runs WHERE entity = 'note' ORDER BY id DESC LIMIT 1"
-        )
-        last_note_status_row = cursor.fetchone()
-        last_note_status = (
-            last_note_status_row["status"] if last_note_status_row else None
-        )
+        last_success, last_status = _last_sync_info(cursor, "post")
+        last_note_success, last_note_status = _last_sync_info(cursor, "note")
 
         return SavedPostsStatus(
             total_saved_posts=total_saved,
@@ -1003,17 +999,7 @@ def get_note(url_or_id: str | int, db_path: Path | None = None) -> SavedNote | N
     """Retrieve full note record by local ID, Substack note ID, or URL."""
     with get_db_connection(db_path) as conn:
         cursor = conn.cursor()
-        if isinstance(url_or_id, int) or (
-            isinstance(url_or_id, str) and url_or_id.isdigit()
-        ):
-            cursor.execute("SELECT * FROM notes WHERE id = ?", (int(url_or_id),))
-        else:
-            clean_url = canonicalize_url(str(url_or_id))
-            cursor.execute(
-                "SELECT * FROM notes WHERE url = ? OR substack_note_id = ?",
-                (clean_url, str(url_or_id)),
-            )
-        row = cursor.fetchone()
+        row = _resolve_row(cursor, "notes", "substack_note_id", url_or_id)
         return SavedNote(**dict(row)) if row else None
 
 
@@ -1044,18 +1030,7 @@ def soft_delete_note(
     with get_db_connection(db_path) as conn:
         cursor = conn.cursor()
 
-        if isinstance(url_or_id, int) or (
-            isinstance(url_or_id, str) and url_or_id.isdigit()
-        ):
-            cursor.execute("SELECT * FROM notes WHERE id = ?", (int(url_or_id),))
-        else:
-            clean_url = canonicalize_url(str(url_or_id))
-            cursor.execute(
-                "SELECT * FROM notes WHERE url = ? OR substack_note_id = ?",
-                (clean_url, str(url_or_id)),
-            )
-
-        row = cursor.fetchone()
+        row = _resolve_row(cursor, "notes", "substack_note_id", url_or_id)
         if not row:
             return None
 

{substack_saved_mcp-0.3.1 → substack_saved_mcp-0.3.2}/src/substack_saved_mcp/substack_client.py

@@ -3,6 +3,7 @@
 import concurrent.futures
 import json
 import logging
+import os
 import re
 import time
 from pathlib import Path
@@ -24,6 +25,18 @@ logger = logging.getLogger(__name__)
 # https://substack.com/@handle/note/c-300984381 -> "300984381"
 _NOTE_URL_ID_PATTERN = re.compile(r"/note/c-(\d+)")
 
+# Anti-bot evasion for the two headful browser flows (login, inspect-network):
+# a real Chrome UA/viewport plus disabling the automation-controlled flag.
+STEALTH_LAUNCH_ARGS = ["--disable-blink-features=AutomationControlled"]
+STEALTH_CONTEXT_KWARGS: dict[str, Any] = {
+    "user_agent": (
+        "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) "
+        "AppleWebKit/537.36 (KHTML, like Gecko) "
+        "Chrome/131.0.0.0 Safari/537.36"
+    ),
+    "viewport": {"width": 1280, "height": 800},
+}
+
 
 def _extract_note_id(url: str) -> str | None:
     match = _NOTE_URL_ID_PATTERN.search(url)
@@ -46,6 +59,20 @@ def _run_playwright_sync(func, *args, **kwargs):
     return func(*args, **kwargs)
 
 
+def _with_playwright(playwright_instance: Any, fn):
+    """Run fn(p) using an injected Playwright instance (test double) if given,
+    else spin up a real one. Shared by every ``_*_impl`` method's playwright
+    dispatch instead of each repeating the same instance-or-launch branch."""
+    if playwright_instance is not None:
+        return fn(playwright_instance)
+    try:
+        from playwright.sync_api import sync_playwright
+    except ImportError:
+        raise SubstackClientError("Playwright is not installed.") from None
+    with sync_playwright() as p:
+        return fn(p)
+
+
 class SubstackClientError(Exception):
     """Base exception for Substack client operations."""
 
@@ -58,6 +85,20 @@ class AuthRequiredError(SubstackClientError):
     pass
 
 
+def _require_https(url: str) -> None:
+    """Reject non-HTTPS URLs before an authenticated Playwright page navigates to
+    them, closing the file:// and internal-http(s) SSRF path a caller-supplied
+    URL (CLI arg or MCP tool input) could otherwise reach.
+
+    ponytail: scheme-only, not a domain allowlist — Substack publications can
+    live on custom domains, so a hard `*.substack.com` allowlist would reject
+    legitimate saves. Upgrade to a domain allowlist if custom-domain support
+    is ever dropped.
+    """
+    if urlparse(url).scheme != "https":
+        raise SubstackClientError(f"Refusing to navigate to non-HTTPS URL: {url}")
+
+
 def perform_interactive_login(browser_dir: Path | None = None) -> Path:
     """Launch a visible browser window for the user to log in to Substack.
 
@@ -90,18 +131,8 @@ def _perform_interactive_login_impl(browser_dir: Path | None = None) -> Path:
 
     with sync_playwright() as p:
         # Launch visible browser with anti-bot evasion flags
-        browser = p.chromium.launch(
-            headless=False,
-            args=["--disable-blink-features=AutomationControlled"],
-        )
-        context_kwargs = {
-            "user_agent": (
-                "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) "
-                "AppleWebKit/537.36 (KHTML, like Gecko) "
-                "Chrome/131.0.0.0 Safari/537.36"
-            ),
-            "viewport": {"width": 1280, "height": 800},
-        }
+        browser = p.chromium.launch(headless=False, args=STEALTH_LAUNCH_ARGS)
+        context_kwargs = dict(STEALTH_CONTEXT_KWARGS)
         if state_file.exists():
             context_kwargs["storage_state"] = str(state_file)
 
@@ -129,6 +160,13 @@ def _perform_interactive_login_impl(browser_dir: Path | None = None) -> Path:
         except Exception as err:
             logger.warning(f"Notice during login verification: {err}")
 
+        # Pre-create the credentials file with owner-only permissions so the
+        # write below never leaves a world/group-readable window (umask would
+        # otherwise apply to Playwright's own file creation). A no-op open on
+        # an already-existing file, since O_CREAT's mode is ignored then.
+        if os.name == "posix":
+            os.close(os.open(str(state_file), os.O_CREAT | os.O_WRONLY, 0o600))
+
         try:
             context.storage_state(path=str(state_file))
         except Exception as err:
@@ -139,14 +177,13 @@ def _perform_interactive_login_impl(browser_dir: Path | None = None) -> Path:
         except Exception:
             pass
 
-    # Restrict permissions on session storage state file
-    import os
-
+    # Belt-and-suspenders: re-assert restrictive permissions even though the
+    # file was pre-created 0o600 above.
     if os.name == "posix" and state_file.exists():
         try:
             state_file.chmod(0o600)
-        except Exception:
-            pass
+        except Exception as err:
+            logger.warning(f"Could not restrict permissions on {state_file}: {err}")
 
     print(f"--> Authentication state saved successfully to {state_file}")
     return state_file
@@ -309,16 +346,7 @@ class SubstackSavedPostsClient:
                     except Exception:
                         pass
 
-        if playwright_instance is not None:
-            return _do_fetch(playwright_instance)
-
-        try:
-            from playwright.sync_api import sync_playwright
-        except ImportError:
-            raise SubstackClientError("Playwright is not installed.") from None
-
-        with sync_playwright() as p:
-            return _do_fetch(p)
+        return _with_playwright(playwright_instance, _do_fetch)
 
     @staticmethod
     def _retry_after_seconds(res: Any, attempt: int, cap: float = 30.0) -> float:
@@ -574,16 +602,7 @@ class SubstackSavedPostsClient:
                 except Exception:
                     pass
 
-        if playwright_instance is not None:
-            return _do_fetch(playwright_instance)
-
-        try:
-            from playwright.sync_api import sync_playwright
-        except ImportError:
-            raise SubstackClientError("Playwright is not installed.") from None
-
-        with sync_playwright() as p:
-            return _do_fetch(p)
+        return _with_playwright(playwright_instance, _do_fetch)
 
     def fetch_saved_notes_page(
         self, limit: int = 50, offset: int = 0
@@ -626,16 +645,7 @@ class SubstackSavedPostsClient:
                 "endpoint can be re-diagnosed."
             )
 
-        if playwright_instance is not None:
-            return _do_fetch(playwright_instance)
-
-        try:
-            from playwright.sync_api import sync_playwright
-        except ImportError:
-            raise SubstackClientError("Playwright is not installed.") from None
-
-        with sync_playwright() as p:
-            return _do_fetch(p)
+        return _with_playwright(playwright_instance, _do_fetch)
 
     def _fetch_all_saved_notes_via_api(
         self,
@@ -838,13 +848,7 @@ class SubstackSavedPostsClient:
             return results
 
         if self._dom_cache is None:
-            if playwright_instance is not None:
-                self._dom_cache = _do_fetch(playwright_instance)
-            else:
-                from playwright.sync_api import sync_playwright
-
-                with sync_playwright() as p:
-                    self._dom_cache = _do_fetch(p)
+            self._dom_cache = _with_playwright(playwright_instance, _do_fetch)
 
         return self._dom_cache[offset : offset + limit]
 
@@ -913,6 +917,7 @@ class SubstackSavedPostsClient:
     ) -> tuple[SavedPost, str]:
         self._ensure_authenticated()
         clean_url = canonicalize_url(url)
+        _require_https(clean_url)
 
         def _do_save(p):
             browser = p.chromium.launch(headless=True)
@@ -989,12 +994,7 @@ class SubstackSavedPostsClient:
             )
             return saved_post, confirmation
 
-        if playwright_instance is not None:
-            return _do_save(playwright_instance)
-        from playwright.sync_api import sync_playwright
-
-        with sync_playwright() as p:
-            return _do_save(p)
+        return _with_playwright(playwright_instance, _do_save)
 
     def fetch_post_content(self, url: str) -> dict[str, Any]:
         """Fetch a post's full body HTML by visiting its page.
@@ -1014,6 +1014,7 @@ class SubstackSavedPostsClient:
     ) -> dict[str, Any]:
         self._ensure_authenticated()
         clean_url = canonicalize_url(url)
+        _require_https(clean_url)
 
         def _do_fetch(p):
             browser = p.chromium.launch(headless=True)
@@ -1043,12 +1044,7 @@ class SubstackSavedPostsClient:
                 "audience": post_obj.get("audience"),
             }
 
-        if playwright_instance is not None:
-            return _do_fetch(playwright_instance)
-        from playwright.sync_api import sync_playwright
-
-        with sync_playwright() as p:
-            return _do_fetch(p)
+        return _with_playwright(playwright_instance, _do_fetch)
 
     def unsave_post(self, url: str, post_id: int | None = None) -> str:
         """Unbookmark a post on Substack remotely; returns a confirmation status.
@@ -1069,6 +1065,7 @@ class SubstackSavedPostsClient:
     ) -> str:
         self._ensure_authenticated()
         clean_url = canonicalize_url(url)
+        _require_https(clean_url)
 
         def _do_unsave(p):
             if post_id is not None:
@@ -1105,12 +1102,7 @@ class SubstackSavedPostsClient:
             browser.close()
             return toggle_status
 
-        if playwright_instance is not None:
-            return _do_unsave(playwright_instance)
-        from playwright.sync_api import sync_playwright
-
-        with sync_playwright() as p:
-            return _do_unsave(p)
+        return _with_playwright(playwright_instance, _do_unsave)
 
     def save_note(self, url: str) -> tuple[SavedNote, str]:
         """Save/bookmark a Substack note by URL.
@@ -1175,12 +1167,7 @@ class SubstackSavedPostsClient:
             )
             return note, confirmation
 
-        if playwright_instance is not None:
-            return _do_save(playwright_instance)
-        from playwright.sync_api import sync_playwright
-
-        with sync_playwright() as p:
-            return _do_save(p)
+        return _with_playwright(playwright_instance, _do_save)
 
     def unsave_note(self, url: str, note_id: str | None = None) -> str:
         """Unsave/unbookmark a Substack note; returns a confirmation status.
@@ -1216,12 +1203,7 @@ class SubstackSavedPostsClient:
                 pass
             return "unconfirmed"
 
-        if playwright_instance is not None:
-            return _do_unsave(playwright_instance)
-        from playwright.sync_api import sync_playwright
-
-        with sync_playwright() as p:
-            return _do_unsave(p)
+        return _with_playwright(playwright_instance, _do_unsave)
 
     def fetch_note_content(self, url: str) -> dict[str, Any]:
         """Fetch a saved note's full content directly, without a browser page.
@@ -1274,9 +1256,4 @@ class SubstackSavedPostsClient:
                 "posted_at": comment.get("date"),
             }
 
-        if playwright_instance is not None:
-            return _do_fetch(playwright_instance)
-        from playwright.sync_api import sync_playwright
-
-        with sync_playwright() as p:
-            return _do_fetch(p)
+        return _with_playwright(playwright_instance, _do_fetch)

{substack_saved_mcp-0.3.1 → substack_saved_mcp-0.3.2}/tests/test_substack_client.py

@@ -344,6 +344,22 @@ def test_unsave_post_impl_falls_back_to_dom_when_api_delete_fails(tmp_path: Path
     assert status == "confirmed"  # confirmed via the DOM fallback, not the API
 
 
+@pytest.mark.parametrize(
+    "method", ["_save_post_impl", "_unsave_post_impl", "_fetch_post_content_impl"]
+)
+@pytest.mark.parametrize(
+    "url",
+    ["file:///etc/shadow", "http://169.254.169.254/", "http://localhost:8000/admin"],
+)
+def test_impl_rejects_non_https_url(tmp_path: Path, method: str, url: str):
+    """SSRF guard: a non-HTTPS URL must be rejected before any Playwright
+    navigation happens. playwright_instance is left unset (None) so a page
+    double is never even needed if the guard fires first."""
+    client = _client(tmp_path)
+    with pytest.raises(SubstackClientError, match="non-HTTPS"):
+        getattr(client, method)(url=url)
+
+
 class MockNoteApiResponse:
     """API response double for notes: no browser page needed at all, so this
     is the only mock notes' save/unsave/fetch tests require."""

{substack_saved_mcp-0.3.1 → substack_saved_mcp-0.3.2}/uv.lock

@@ -1073,19 +1073,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/24/25/1de2678b631f5a49215c6c96fff41ba892b0a34df68d6d80292b1b48aa7f/pytest-9.1.1-py3-none-any.whl", hash = "sha256:37a86b45efb9a47a61a36449063e8e18d0cab3161329fc099eb21783169c4f0c", size = 386536, upload-time = "2026-06-19T10:58:31.347Z" },
 ]
 
-[[package]]
-name = "pytest-asyncio"
-version = "1.4.0"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "pytest" },
-    { name = "typing-extensions", marker = "python_full_version < '3.13'" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/43/7c/d36d04db312ecf4298932ef77e6e4a9e8ad017906e24e34f0b0c361a2473/pytest_asyncio-1.4.0.tar.gz", hash = "sha256:c6c0d2259945122819f171a32ecea2c349ead889ee28176caaf492143424be42", size = 58514, upload-time = "2026-05-26T09:56:04.083Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/03/e2/08a497ef684b88559c9cc5f4ad53a37e7b99e727094a86d6ea32536d5d3c/pytest_asyncio-1.4.0-py3-none-any.whl", hash = "sha256:933ca923a23075a87fb7070c0ec272a6848489824d887c85c812670932835aa1", size = 16930, upload-time = "2026-05-26T09:56:02.576Z" },
-]
-
 [[package]]
 name = "python-dotenv"
 version = "1.2.2"
@@ -1419,7 +1406,7 @@ wheels = [
 
 [[package]]
 name = "substack-saved-mcp"
-version = "0.3.1"
+version = "0.3.2"
 source = { editable = "." }
 dependencies = [
     { name = "click" },
@@ -1431,7 +1418,6 @@ dependencies = [
 [package.optional-dependencies]
 dev = [
     { name = "pytest" },
-    { name = "pytest-asyncio" },
     { name = "ruff" },
 ]
 
@@ -1442,7 +1428,6 @@ requires-dist = [
     { name = "playwright", specifier = ">=1.40.0" },
     { name = "pydantic", specifier = ">=2.0.0" },
     { name = "pytest", marker = "extra == 'dev'", specifier = ">=8.0.0" },
-    { name = "pytest-asyncio", marker = "extra == 'dev'", specifier = ">=0.23.0" },
     { name = "ruff", marker = "extra == 'dev'", specifier = "==0.16.1" },
 ]
 provides-extras = ["dev"]