calibreweb-mcp 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Willi Thiel
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,167 @@
+# calibreweb-mcp
+
+[![CI](https://img.shields.io/github/actions/workflow/status/ni-c/calibreweb-mcp/ci.yml?branch=main&label=CI)](https://github.com/ni-c/calibreweb-mcp/actions/workflows/ci.yml)
+[![npm version](https://img.shields.io/npm/v/calibreweb-mcp)](https://www.npmjs.com/package/calibreweb-mcp)
+[![node](https://img.shields.io/node/v/calibreweb-mcp)](https://nodejs.org)
+[![license](https://img.shields.io/npm/l/calibreweb-mcp)](LICENSE)
+[![container](https://img.shields.io/badge/ghcr.io-ni--c%2Fcalibreweb--mcp-2496ed?logo=docker&logoColor=white)](https://github.com/ni-c/calibreweb-mcp/pkgs/container/calibreweb-mcp)
+
+A read-only [Model Context Protocol](https://modelcontextprotocol.io) server for
+[Calibre-Web](https://github.com/janeczku/calibre-web) (and
+[Calibre-Web Automated](https://github.com/crocodilestick/Calibre-Web-Automated)),
+the self-hosted ebook library web UI.
+
+Calibre-Web has no REST API — its only stable machine-readable interface is the
+OPDS catalog feed it serves for e-reader apps. This server speaks that feed:
+Atom XML with HTTP Basic auth in, structured book data out. Search the library,
+browse the curated views and shelves, follow per-format download links, and pull
+cover images straight into the conversation. It never writes anything: every
+tool is a GET against the OPDS routes.
+
+<!-- <picture> is resolved against the colour scheme of the page showing it, so GitHub
+     picks the variant that matches its own theme toggle. npm strips <picture> and
+     <source> when it sanitises the README and keeps the <img>, which is why that
+     fallback brings its own dark card instead of relying on a media query. -->
+<picture>
+  <source media="(prefers-color-scheme: dark)" srcset="https://calibreweb-mcp.ni-c.de/architecture-dark.svg">
+  <source media="(prefers-color-scheme: light)" srcset="https://calibreweb-mcp.ni-c.de/architecture-light.svg">
+  <img src="https://calibreweb-mcp.ni-c.de/architecture.svg" alt="An MCP client speaks stdio to calibreweb-mcp, which reads the OPDS feed of Calibre-Web over HTTPS with Basic auth" width="800">
+</picture>
+
+## Requirements
+
+- Node.js 22 or newer
+- A Calibre-Web instance (developed against the current
+  `linuxserver/calibre-web` image; Calibre-Web Automated works the same way)
+- A Calibre-Web user for the server. The OPDS feed authenticates with the
+  normal web login — use a **dedicated account with only the View and Download
+  roles**, not your admin account. If the instance allows anonymous browsing,
+  the server can also run without credentials.
+
+## Configuration
+
+| Variable                   | Required | Description                                                                                             |
+| -------------------------- | -------- | ------------------------------------------------------------------------------------------------------- |
+| `CALIBRE_WEB_URL`          | yes      | Root URL of the instance, e.g. `https://books.example.com`. The `/opds` path is appended automatically. |
+| `CALIBRE_WEB_USERNAME`     | yes¹     | Username of the Calibre-Web account.                                                                    |
+| `CALIBRE_WEB_PASSWORD`     | yes¹     | Password of that account (the web login password).                                                      |
+| `CALIBRE_WEB_INSECURE_TLS` | no       | `true` to accept self-signed certificates — scoped to the configured host only.                         |
+
+¹ Leave **both** unset for an instance that allows anonymous browsing; setting
+only one of them is a configuration error.
+
+### Claude Code
+
+```sh
+claude mcp add calibreweb \
+  -e CALIBRE_WEB_URL=https://books.example.com \
+  -e CALIBRE_WEB_USERNAME=reader \
+  -e CALIBRE_WEB_PASSWORD=... \
+  -- npx calibreweb-mcp
+```
+
+### Claude Desktop
+
+```json
+{
+  "mcpServers": {
+    "calibreweb": {
+      "command": "npx",
+      "args": ["calibreweb-mcp"],
+      "env": {
+        "CALIBRE_WEB_URL": "https://books.example.com",
+        "CALIBRE_WEB_USERNAME": "reader",
+        "CALIBRE_WEB_PASSWORD": "..."
+      }
+    }
+  }
+}
+```
+
+### Codex
+
+```toml
+[mcp_servers.calibreweb]
+command = "npx"
+args = ["calibreweb-mcp"]
+env = { CALIBRE_WEB_URL = "https://books.example.com", CALIBRE_WEB_USERNAME = "reader", CALIBRE_WEB_PASSWORD = "..." }
+```
+
+## Tools
+
+All tools are read-only (`readOnlyHint: true`).
+
+| Tool              | Description                                                                                                                                                                            |
+| ----------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `search_books`    | Search by title, author, series, publisher and tags. Calibre-Web returns every match at once; the result is capped client-side (`limit`, default 50) and reports the real match count. |
+| `list_books`      | Book listings by view: `new` (default), `hot`, `rated`, `discover` (random), `read`, `unread`, or `all` (optionally narrowed to an initial letter).                                    |
+| `list_shelves`    | Public shelves plus the configured user's own shelves.                                                                                                                                 |
+| `get_shelf_books` | The books on a shelf, in shelf order.                                                                                                                                                  |
+| `get_cover`       | A book's cover, returned as an image the client can display.                                                                                                                           |
+| `get_stats`       | Total books, authors, categories and series.                                                                                                                                           |
+
+Book entries include authors, tags, series (with index), rating, a bounded
+summary, a cover URL and per-format download URLs — ready-made links a human can
+open, since the model itself has no reason to download an EPUB.
+
+### Pagination
+
+Feeds are paginated by the instance's _books per page_ setting (default 60); the
+page size is not client-controllable. Every listing returns
+`pagination.nextOffset` when more pages exist — pass it as `offset` in the next
+call. The `discover` view is a random selection and not paginated.
+
+### Deliberately out of scope
+
+- **No writes.** The OPDS feed has none, and this server would not add any.
+- **No file downloads.** Tools return download URLs, not ebook payloads.
+- **No facet browsing** (authors/series/tags/publishers/languages/formats as
+  their own index feeds). `search_books` covers those lookups; the routes exist
+  and tools for them can be added if there is a real use case.
+
+## Safety
+
+- The server is read-only by construction — GET requests only, no state anywhere.
+- Book metadata is untrusted third-party data; every result says so, control
+  characters are stripped, and XML entity processing is disabled (documents
+  declaring a DOCTYPE or entities are refused outright).
+- Responses are bounded before parsing (8 MB feeds, 1 MB covers) and again
+  before they reach the model (per-book and per-response budgets).
+- Feed hrefs are only passed through when they resolve to the configured
+  origin over http(s) — a hostile feed cannot plant `javascript:`, `file:` or
+  cross-origin URLs into the results.
+- Redirects are refused so the Basic credentials can never be replayed to
+  another host; covers are only passed through for real image content types.
+- The password is scrubbed from the process environment at startup, and URLs
+  are credential-redacted before they appear in any log or result.
+
+## Container
+
+```sh
+docker run -i --rm \
+  -e CALIBRE_WEB_URL=https://books.example.com \
+  -e CALIBRE_WEB_USERNAME=reader \
+  -e CALIBRE_WEB_PASSWORD=... \
+  ghcr.io/ni-c/calibreweb-mcp
+```
+
+## Development
+
+```sh
+npm install
+npm test            # unit tests against a stubbed OPDS feed, no instance needed
+npm run lint
+npm run build
+```
+
+See [CONTRIBUTING.md](CONTRIBUTING.md).
+
+## Releasing
+
+1. Update `CHANGELOG.md` and bump the version in `package.json` (+ lockfile).
+2. `npm run lint && npm run test:coverage && npm run build`
+3. Tag the release: `git tag -s vX.Y.Z -m "vX.Y.Z" && git push origin vX.Y.Z`
+
+## License
+
+[MIT](LICENSE)

package/dist/api.d.ts

@@ -0,0 +1,33 @@
+import { type Config } from './config.js';
+export declare class CalibreWebApiError extends Error {
+    readonly status: number;
+    readonly body: string;
+    constructor(status: number, body: string, method: string, path: string);
+}
+/** Minimal client for the Calibre-Web OPDS endpoints, using HTTP Basic auth. */
+export declare class CalibreWebApi {
+    private readonly config;
+    private readonly baseUrl;
+    /** Unset when both credentials are absent — anonymous-browsing instances. */
+    private readonly authHeader?;
+    /**
+     * Only set when `CALIBRE_WEB_INSECURE_TLS` is enabled. Scopes the relaxed
+     * certificate validation to requests against the configured host instead of
+     * disabling it process-wide via NODE_TLS_REJECT_UNAUTHORIZED.
+     */
+    private readonly insecureDispatcher?;
+    constructor(config: Config);
+    /** Base URL for absolutizing feed hrefs; empty string when unconfigured. */
+    get url(): string;
+    private send;
+    /** Fetches an OPDS feed and returns the parsed XML document. */
+    getFeed(path: string, params?: Record<string, string | number | undefined>): Promise<unknown>;
+    /** Fetches a JSON endpoint (`/opds/stats`). */
+    getJson(path: string): Promise<unknown>;
+    /** Fetches a binary body (cover images), bounded by {@link MAX_COVER_BYTES}. */
+    getBinary(path: string): Promise<{
+        data: Buffer;
+        contentType: string;
+    }>;
+    private isConfiguredOrigin;
+}

package/dist/api.js

@@ -0,0 +1,231 @@
+import { XMLParser } from 'fast-xml-parser';
+import { Agent, fetch as undiciFetch, } from 'undici';
+import { missingConfigKeys, missingConfigMessage, } from './config.js';
+const REQUEST_TIMEOUT_MS = 30_000;
+/**
+ * Ceiling on a single feed response. The OPDS search endpoint is not paginated
+ * server-side — a broad query on a huge library returns every match in one
+ * document — and the per-tool budgets in `shape.ts` and `result.ts` only trim
+ * data that is already resident as a string. 8 MB is far above any legitimate
+ * feed page and far below trouble.
+ */
+const MAX_FEED_BYTES = 8 * 1024 * 1024;
+/**
+ * Ceiling on a cover image. Calibre-Web serves the full-size cover on the OPDS
+ * cover route (the thumbnail aliases are client compat only). The result goes
+ * into the client's context as base64 (+33%), so this is deliberately tight —
+ * an oversized scan is better retrieved out-of-band via the book's coverUrl.
+ */
+const MAX_COVER_BYTES = 1 * 1024 * 1024;
+export class CalibreWebApiError extends Error {
+    status;
+    body;
+    constructor(status, body, method, path) {
+        super(`Calibre-Web ${method} ${path} failed with HTTP ${status}`);
+        this.status = status;
+        this.body = body;
+        this.name = 'CalibreWebApiError';
+    }
+}
+/**
+ * The parser is deliberately dumb: no entity processing (the five XML built-ins
+ * and numeric references are decoded — with a control-character guard — in
+ * `shape.ts`), no value coercion (a book titled "1984" must stay a string), and
+ * the xhtml `<content>` blob is kept as a raw string for `htmlToText` instead
+ * of being exploded into objects.
+ */
+const feedParser = new XMLParser({
+    ignoreAttributes: false,
+    attributeNamePrefix: '@_',
+    processEntities: false,
+    parseTagValue: false,
+    parseAttributeValue: false,
+    isArray: (name) => ['entry', 'link', 'author', 'category', 'dcterms:language'].includes(name),
+    stopNodes: ['feed.entry.content'],
+});
+/**
+ * Refuses any document that declares a DTD or entities. The parser above does
+ * not process entities, so there is no local expansion exposure — this guard
+ * exists so that can never silently change with a parser update, and because a
+ * legitimate Calibre-Web feed simply never contains a DOCTYPE.
+ */
+function assertNoDoctype(xml, path) {
+    if (/<!(doctype|entity)\b/i.test(xml)) {
+        throw new Error(`Calibre-Web GET ${path} returned XML containing a DOCTYPE or ENTITY ` +
+            'declaration, which this server refuses to parse.');
+    }
+}
+/** Minimal client for the Calibre-Web OPDS endpoints, using HTTP Basic auth. */
+export class CalibreWebApi {
+    config;
+    baseUrl;
+    /** Unset when both credentials are absent — anonymous-browsing instances. */
+    authHeader;
+    /**
+     * Only set when `CALIBRE_WEB_INSECURE_TLS` is enabled. Scopes the relaxed
+     * certificate validation to requests against the configured host instead of
+     * disabling it process-wide via NODE_TLS_REJECT_UNAUTHORIZED.
+     */
+    insecureDispatcher;
+    constructor(config) {
+        this.config = config;
+        this.baseUrl = config.url ?? '';
+        if (config.username && config.password) {
+            this.authHeader = `Basic ${Buffer.from(`${config.username}:${config.password}`).toString('base64')}`;
+        }
+        if (config.insecureTls) {
+            this.insecureDispatcher = new Agent({
+                connect: { rejectUnauthorized: false },
+            });
+        }
+    }
+    /** Base URL for absolutizing feed hrefs; empty string when unconfigured. */
+    get url() {
+        return this.baseUrl;
+    }
+    async send(path, accept, params) {
+        // The credentials are only required here, not at startup, so the server can
+        // still be started and introspected without them.
+        const missing = missingConfigKeys(this.config);
+        if (missing.length > 0) {
+            throw new Error(missingConfigMessage(missing));
+        }
+        const headers = { Accept: accept };
+        if (this.authHeader !== undefined) {
+            headers.Authorization = this.authHeader;
+        }
+        const init = {
+            method: 'GET',
+            headers,
+            // Never follow a redirect: it would resend the Basic credentials to
+            // whatever host the upstream points at. (Calibre-Web redirects to its
+            // HTML login page when Basic auth is refused behind some proxies — that
+            // case surfaces as an explicit error here instead.)
+            redirect: 'error',
+            signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+        };
+        const search = new URLSearchParams();
+        for (const [key, value] of Object.entries(params ?? {})) {
+            if (value !== undefined)
+                search.set(key, String(value));
+        }
+        const query = search.size > 0 ? `?${search.toString()}` : '';
+        const url = `${this.baseUrl}${path}${query}`;
+        // The insecure dispatcher requires undici's own fetch; the default path
+        // uses the (stubbable) global fetch. Only requests that actually go to the
+        // configured instance may use the relaxed dispatcher.
+        const useInsecure = this.insecureDispatcher !== undefined && this.isConfiguredOrigin(url);
+        const response = useInsecure
+            ? (await undiciFetch(url, {
+                ...init,
+                dispatcher: this.insecureDispatcher,
+            }))
+            : await fetch(url, init);
+        return {
+            status: response.status,
+            ok: response.ok,
+            headers: response.headers,
+            response,
+        };
+    }
+    /** Fetches an OPDS feed and returns the parsed XML document. */
+    async getFeed(path, params) {
+        const { ok, status, response } = await this.send(path, 'application/atom+xml', params);
+        const bytes = await readBoundedBody(response, path, MAX_FEED_BYTES);
+        const text = bytes.toString('utf8');
+        if (!ok) {
+            throw new CalibreWebApiError(status, text, 'GET', path);
+        }
+        const trimmed = text.trimStart();
+        if (/^(<!doctype\s+html|<html[\s>])/i.test(trimmed)) {
+            throw new Error(`Calibre-Web GET ${path} returned an HTML page instead of an Atom feed — ` +
+                'CALIBRE_WEB_URL is probably not the root of the Calibre-Web instance, ' +
+                'or a proxy in front of it answered with a login page.');
+        }
+        assertNoDoctype(text, path);
+        try {
+            return feedParser.parse(text);
+        }
+        catch {
+            throw new Error(`Calibre-Web GET ${path} did not return parseable Atom XML — check CALIBRE_WEB_URL.`);
+        }
+    }
+    /** Fetches a JSON endpoint (`/opds/stats`). */
+    async getJson(path) {
+        const { ok, status, response } = await this.send(path, 'application/json');
+        const bytes = await readBoundedBody(response, path, MAX_FEED_BYTES);
+        const text = bytes.toString('utf8');
+        if (!ok) {
+            throw new CalibreWebApiError(status, text, 'GET', path);
+        }
+        try {
+            return JSON.parse(text);
+        }
+        catch {
+            throw new Error(`Calibre-Web GET ${path} did not return valid JSON — check CALIBRE_WEB_URL.`);
+        }
+    }
+    /** Fetches a binary body (cover images), bounded by {@link MAX_COVER_BYTES}. */
+    async getBinary(path) {
+        const { ok, status, headers, response } = await this.send(path, 'image/*');
+        const data = await readBoundedBody(response, path, MAX_COVER_BYTES);
+        if (!ok) {
+            throw new CalibreWebApiError(status, data.toString('utf8'), 'GET', path);
+        }
+        return { data, contentType: headers.get('content-type') ?? '' };
+    }
+    isConfiguredOrigin(url) {
+        try {
+            return new URL(url).origin === new URL(this.baseUrl).origin;
+        }
+        catch {
+            return false;
+        }
+    }
+}
+function hasStreamingBody(body) {
+    return (typeof body === 'object' &&
+        body !== null &&
+        typeof body.getReader === 'function');
+}
+/**
+ * Reads a response body, refusing anything past `maxBytes`.
+ *
+ * A declared `content-length` is rejected before a single byte is read; a
+ * chunked response is aborted as soon as the accumulated size crosses the
+ * ceiling. Responses without a streamable body — which is what the test stubs
+ * of global `fetch` return — fall back to `arrayBuffer()` and are checked
+ * afterwards.
+ */
+async function readBoundedBody(response, path, maxBytes) {
+    const tooLarge = () => new Error(`Calibre-Web GET ${path} returned a response larger than ` +
+        `${maxBytes} bytes and was refused.`);
+    const declared = Number(response.headers.get('content-length'));
+    if (Number.isFinite(declared) && declared > maxBytes)
+        throw tooLarge();
+    const body = response.body;
+    if (!hasStreamingBody(body)) {
+        const buffer = Buffer.from(await response.arrayBuffer());
+        if (buffer.byteLength > maxBytes)
+            throw tooLarge();
+        return buffer;
+    }
+    const reader = body.getReader();
+    const chunks = [];
+    let total = 0;
+    for (;;) {
+        const { done, value } = await reader.read();
+        if (done)
+            break;
+        if (value === undefined)
+            continue;
+        total += value.byteLength;
+        if (total > maxBytes) {
+            await reader.cancel();
+            throw tooLarge();
+        }
+        chunks.push(value);
+    }
+    return Buffer.concat(chunks);
+}
+//# sourceMappingURL=api.js.map

package/dist/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EACL,KAAK,EACL,KAAK,IAAI,WAAW,GAErB,MAAM,QAAQ,CAAC;AAEhB,OAAO,EACL,iBAAiB,EACjB,oBAAoB,GAErB,MAAM,aAAa,CAAC;AAErB,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC;;;;;;GAMG;AACH,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEvC;;;;;GAKG;AACH,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAExC,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAEzB;IACA;IAFlB,YACkB,MAAc,EACd,IAAY,EAC5B,MAAc,EACd,IAAY;QAEZ,KAAK,CAAC,eAAe,MAAM,IAAI,IAAI,qBAAqB,MAAM,EAAE,CAAC,CAAC;QALlD,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAQ;QAK5B,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,UAAU,GAAG,IAAI,SAAS,CAAC;IAC/B,gBAAgB,EAAE,KAAK;IACvB,mBAAmB,EAAE,IAAI;IACzB,eAAe,EAAE,KAAK;IACtB,aAAa,EAAE,KAAK;IACpB,mBAAmB,EAAE,KAAK;IAC1B,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAChB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5E,SAAS,EAAE,CAAC,oBAAoB,CAAC;CAClC,CAAC,CAAC;AAEH;;;;;GAKG;AACH,SAAS,eAAe,CAAC,GAAW,EAAE,IAAY;IAChD,IAAI,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,mBAAmB,IAAI,+CAA+C;YACpE,kDAAkD,CACrD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,MAAM,OAAO,aAAa;IACP,MAAM,CAAS;IACf,OAAO,CAAS;IACjC,6EAA6E;IAC5D,UAAU,CAAU;IACrC;;;;OAIG;IACc,kBAAkB,CAAS;IAE5C,YAAY,MAAc;QACxB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;QAChC,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACvC,IAAI,CAAC,UAAU,GAAG,SAAS,MAAM,CAAC,IAAI,CACpC,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CACxC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,CAAC;QACD,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,IAAI,CAAC,kBAAkB,GAAG,IAAI,KAAK,CAAC;gBAClC,OAAO,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE;aACvC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,IAAI,CAChB,IAAY,EACZ,MAAc,EACd,MAAoD;QAOpD,4EAA4E;QAC5E,kDAAkD;QAClD,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,OAAO,GAA2B,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC3D,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC;QAC1C,CAAC;QACD,MAAM,IAAI,GAAgB;YACxB,MAAM,EAAE,KAAK;YACb,OAAO;YACP,oEAAoE;YACpE,sEAAsE;YACtE,wEAAwE;YACxE,oDAAoD;YACpD,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;SAChD,CAAC;QAEF,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;YACxD,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,KAAK,EAAE,CAAC;QAE7C,wEAAwE;QACxE,2EAA2E;QAC3E,sDAAsD;QACtD,MAAM,WAAW,GACf,IAAI,CAAC,kBAAkB,KAAK,SAAS,IAAI,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACxE,MAAM,QAAQ,GAAG,WAAW;YAC1B,CAAC,CAAE,CAAC,MAAM,WAAW,CAAC,GAAG,EAAE;gBACvB,GAAG,IAAI;gBACP,UAAU,EAAE,IAAI,CAAC,kBAAkB;aACf,CAAC,CAAyB;YAClD,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3B,OAAO;YACL,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,QAAQ;SACT,CAAC;IACJ,CAAC;IAED,gEAAgE;IAChE,KAAK,CAAC,OAAO,CACX,IAAY,EACZ,MAAoD;QAEpD,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAC9C,IAAI,EACJ,sBAAsB,EACtB,MAAM,CACP,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,MAAM,IAAI,kBAAkB,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QACjC,IAAI,iCAAiC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CACb,mBAAmB,IAAI,mDAAmD;gBACxE,wEAAwE;gBACxE,uDAAuD,CAC1D,CAAC;QACJ,CAAC;QACD,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC;YACH,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CACb,mBAAmB,IAAI,6DAA6D,CACrF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,OAAO,CAAC,IAAY;QACxB,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;QAC3E,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,MAAM,IAAI,kBAAkB,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CACb,mBAAmB,IAAI,qDAAqD,CAC7E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,SAAS,CACb,IAAY;QAEZ,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC3E,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;QACpE,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,MAAM,IAAI,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC;IAClE,CAAC;IAEO,kBAAkB,CAAC,GAAW;QACpC,IAAI,CAAC;YACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF;AAUD,SAAS,gBAAgB,CAAC,IAAa;IACrC,OAAO,CACL,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACb,OAAQ,IAAsB,CAAC,SAAS,KAAK,UAAU,CACxD,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,eAAe,CAC5B,QAIC,EACD,IAAY,EACZ,QAAgB;IAEhB,MAAM,QAAQ,GAAG,GAAU,EAAE,CAC3B,IAAI,KAAK,CACP,mBAAmB,IAAI,mCAAmC;QACxD,GAAG,QAAQ,yBAAyB,CACvC,CAAC;IAEJ,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAChE,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,QAAQ;QAAE,MAAM,QAAQ,EAAE,CAAC;IAEvE,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC3B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;QACzD,IAAI,MAAM,CAAC,UAAU,GAAG,QAAQ;YAAE,MAAM,QAAQ,EAAE,CAAC;QACnD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IAChC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,SAAS,CAAC;QACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,IAAI;YAAE,MAAM;QAChB,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;QAC1B,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;YACrB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;YACtB,MAAM,QAAQ,EAAE,CAAC;QACnB,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,32 @@
+export interface Config {
+    /**
+     * Base URL of the Calibre-Web instance, e.g. `https://books.example.com` —
+     * the root of the web UI; the `/opds` path is appended automatically. May be
+     * undefined together with the credentials: the server still starts and lists
+     * its tools, every API call then fails with {@link missingConfigMessage}.
+     */
+    url: string | undefined;
+    username: string | undefined;
+    /** The normal web-login password of the Calibre-Web user (OPDS uses HTTP Basic auth). */
+    password: string | undefined;
+    insecureTls: boolean;
+}
+/** Shown when the configuration is incomplete — at startup and on every API call. */
+export declare function missingConfigMessage(missing: string[]): string;
+/**
+ * Names of the required environment variables that are unset in `config`.
+ *
+ * Username and password count as a pair: both unset is a supported mode
+ * (instances with anonymous browsing serve the OPDS feed without auth), only
+ * one of them set is a configuration error.
+ */
+export declare function missingConfigKeys(config: Config): string[];
+/**
+ * Reads the configuration from environment variables.
+ *
+ * Missing credentials are only a warning, not a fatal error: the server must be
+ * able to complete the MCP handshake and answer `tools/list` without them, so
+ * registries and sandbox inspectors can introspect it. A malformed URL still
+ * exits — that one could send the credentials to the wrong host.
+ */
+export declare function loadConfig(env?: NodeJS.ProcessEnv): Config;

package/dist/config.js

@@ -0,0 +1,98 @@
+import { redactUrlCredentials } from './redact.js';
+/** Shown when the configuration is incomplete — at startup and on every API call. */
+export function missingConfigMessage(missing) {
+    return (`missing required environment variable(s): ${missing.join(', ')}\n` +
+        'Required: CALIBRE_WEB_URL (e.g. https://books.example.com), ' +
+        'CALIBRE_WEB_USERNAME, CALIBRE_WEB_PASSWORD\n' +
+        'The credentials are the normal web login of a Calibre-Web user; the OPDS ' +
+        'feed authenticates with HTTP Basic auth. If the instance allows anonymous ' +
+        'browsing, leave BOTH username and password unset.\n' +
+        'Optional: CALIBRE_WEB_INSECURE_TLS=true to accept self-signed certificates');
+}
+/**
+ * Names of the required environment variables that are unset in `config`.
+ *
+ * Username and password count as a pair: both unset is a supported mode
+ * (instances with anonymous browsing serve the OPDS feed without auth), only
+ * one of them set is a configuration error.
+ */
+export function missingConfigKeys(config) {
+    const missing = [];
+    if (!config.url)
+        missing.push('CALIBRE_WEB_URL');
+    if (!config.username !== !config.password) {
+        missing.push(!config.username ? 'CALIBRE_WEB_USERNAME' : 'CALIBRE_WEB_PASSWORD');
+    }
+    return missing;
+}
+/**
+ * Reads the configuration from environment variables.
+ *
+ * Missing credentials are only a warning, not a fatal error: the server must be
+ * able to complete the MCP handshake and answer `tools/list` without them, so
+ * registries and sandbox inspectors can introspect it. A malformed URL still
+ * exits — that one could send the credentials to the wrong host.
+ */
+export function loadConfig(env = process.env) {
+    const url = env.CALIBRE_WEB_URL;
+    const username = env.CALIBRE_WEB_USERNAME;
+    const password = env.CALIBRE_WEB_PASSWORD;
+    const insecureTls = env.CALIBRE_WEB_INSECURE_TLS === 'true';
+    // Don't keep the password in process.env for the process lifetime: it would be
+    // inherited by child processes and show up in env dumps. (The kernel's
+    // /proc/<pid>/environ snapshot is NOT rewritten by this — it always keeps the
+    // startup environment.) Deleted before any early return below so no code path
+    // leaves it behind.
+    delete env.CALIBRE_WEB_PASSWORD;
+    if (!url) {
+        console.error(`calibreweb-mcp: ${missingConfigMessage(['CALIBRE_WEB_URL'])}`);
+        return { url: undefined, username, password, insecureTls };
+    }
+    if (!username !== !password) {
+        console.error('calibreweb-mcp: CALIBRE_WEB_USERNAME and CALIBRE_WEB_PASSWORD must be ' +
+            'set together (or both left unset for an instance with anonymous browsing)');
+    }
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        // Redacted, and deliberately so: the userinfo check below only runs once the
+        // URL parses, so a value that does not parse at all but still carries
+        // credentials — "https://admin:s3cret@host:99999", an out-of-range port —
+        // would otherwise print the password into the MCP client's log file.
+        console.error(`calibreweb-mcp: CALIBRE_WEB_URL is not a valid URL: ${redactUrlCredentials(url)}`);
+        process.exit(1);
+    }
+    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
+        console.error(`calibreweb-mcp: CALIBRE_WEB_URL must use http:// or https:// (got ${parsed.protocol})`);
+        process.exit(1);
+    }
+    // Credentials embedded in the URL would end up in logs and error messages.
+    if (parsed.username || parsed.password) {
+        console.error('calibreweb-mcp: CALIBRE_WEB_URL must not contain credentials — use ' +
+            'CALIBRE_WEB_USERNAME and CALIBRE_WEB_PASSWORD');
+        process.exit(1);
+    }
+    if (parsed.protocol === 'http:' && !isLoopbackHost(parsed.hostname)) {
+        console.error('calibreweb-mcp: WARNING: CALIBRE_WEB_URL uses plain http to a non-local ' +
+            'host — the password will be sent unencrypted. Use https:// instead.');
+    }
+    return {
+        url: url.replace(/\/+$/, ''),
+        username,
+        password,
+        insecureTls,
+    };
+}
+function isLoopbackHost(hostname) {
+    // URL.hostname keeps the brackets around an IPv6 literal, so comparing against
+    // a bare '::1' never matches and the plain-http warning fires on a loopback
+    // URL written as http://[::1]:8083.
+    const host = hostname.replace(/^\[|\]$/g, '');
+    return (host === 'localhost' ||
+        host.endsWith('.localhost') ||
+        host.startsWith('127.') ||
+        host === '::1');
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAgBnD,qFAAqF;AACrF,MAAM,UAAU,oBAAoB,CAAC,OAAiB;IACpD,OAAO,CACL,6CAA6C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;QACnE,8DAA8D;QAC9D,8CAA8C;QAC9C,2EAA2E;QAC3E,4EAA4E;QAC5E,qDAAqD;QACrD,4EAA4E,CAC7E,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,GAAG;QAAE,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC1C,OAAO,CAAC,IAAI,CACV,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,sBAAsB,CACnE,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7D,MAAM,GAAG,GAAG,GAAG,CAAC,eAAe,CAAC;IAChC,MAAM,QAAQ,GAAG,GAAG,CAAC,oBAAoB,CAAC;IAC1C,MAAM,QAAQ,GAAG,GAAG,CAAC,oBAAoB,CAAC;IAC1C,MAAM,WAAW,GAAG,GAAG,CAAC,wBAAwB,KAAK,MAAM,CAAC;IAE5D,+EAA+E;IAC/E,uEAAuE;IACvE,8EAA8E;IAC9E,8EAA8E;IAC9E,oBAAoB;IACpB,OAAO,GAAG,CAAC,oBAAoB,CAAC;IAEhC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,CAAC,KAAK,CACX,mBAAmB,oBAAoB,CAAC,CAAC,iBAAiB,CAAC,CAAC,EAAE,CAC/D,CAAC;QACF,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,QAAQ,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC5B,OAAO,CAAC,KAAK,CACX,wEAAwE;YACtE,2EAA2E,CAC9E,CAAC;IACJ,CAAC;IAED,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,6EAA6E;QAC7E,sEAAsE;QACtE,0EAA0E;QAC1E,qEAAqE;QACrE,OAAO,CAAC,KAAK,CACX,uDAAuD,oBAAoB,CAAC,GAAG,CAAC,EAAE,CACnF,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChE,OAAO,CAAC,KAAK,CACX,qEAAqE,MAAM,CAAC,QAAQ,GAAG,CACxF,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,2EAA2E;IAC3E,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACvC,OAAO,CAAC,KAAK,CACX,qEAAqE;YACnE,+CAA+C,CAClD,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpE,OAAO,CAAC,KAAK,CACX,0EAA0E;YACxE,qEAAqE,CACxE,CAAC;IACJ,CAAC;IAED,OAAO;QACL,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5B,QAAQ;QACR,QAAQ;QACR,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB;IACtC,+EAA+E;IAC/E,4EAA4E;IAC5E,oCAAoC;IACpC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC9C,OAAO,CACL,IAAI,KAAK,WAAW;QACpB,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC3B,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QACvB,IAAI,KAAK,KAAK,CACf,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/index.js

@@ -0,0 +1,21 @@
+#!/usr/bin/env node
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { loadConfig } from './config.js';
+import { createServer } from './server.js';
+async function main() {
+    const config = loadConfig();
+    if (config.insecureTls) {
+        console.error('calibreweb-mcp: CALIBRE_WEB_INSECURE_TLS=true — TLS certificate validation is disabled for the Calibre-Web connection');
+    }
+    const server = createServer(config);
+    // stdout belongs to the protocol; everything human-readable goes to stderr.
+    await server.connect(new StdioServerTransport());
+    console.error(config.url
+        ? `calibreweb-mcp: connected, targeting ${config.url}`
+        : 'calibreweb-mcp: connected without configuration — tools are listed but every call will fail');
+}
+main().catch((error) => {
+    console.error('calibreweb-mcp: fatal error:', error);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAE5B,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,OAAO,CAAC,KAAK,CACX,uHAAuH,CACxH,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACpC,4EAA4E;IAC5E,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,KAAK,CACX,MAAM,CAAC,GAAG;QACR,CAAC,CAAC,wCAAwC,MAAM,CAAC,GAAG,EAAE;QACtD,CAAC,CAAC,6FAA6F,CAClG,CAAC;AACJ,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;IACrD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/redact.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Removes credentials from a URL before it reaches the model or a log.
+ *
+ * The URLs this server emits are built from `CALIBRE_WEB_URL` plus feed hrefs, so
+ * they should never carry userinfo — but a misconfigured value or a reverse proxy
+ * rewriting `Location`-style hrefs could smuggle one in, and Basic-auth users are
+ * exactly the audience that pastes `https://user:pass@host` into config files.
+ */
+export declare function redactUrlCredentials(url: string): string;