calibreweb-mcp 0.2.0 → 0.3.0

package/dist/tools/shelves.js

@@ -1,6 +1,7 @@
 import { z } from 'zod';
-import { jsonResult, run } from '../result.js';
-import { Notes, shapeFeed } from '../shape.js';
+import { READ_ONLY } from './annotations.js';
+import { run, untrustedResult } from '../result.js';
+import { Notes, notes as notesSchema, pagination, shapedBook, shapedNavItem, shapeFeed, untrustedFields, } from '../shape.js';
 export function registerShelfTools(server, api) {
     server.registerTool('list_shelves', {
         title: 'List shelves',
@@ -8,20 +9,26 @@ export function registerShelfTools(server, api) {
             'plus the user’s own private ones. Use the returned id with ' +
             'get_shelf_books. isPublic is only reported on English-locale instances ' +
             '(Calibre-Web marks public shelves with a localized title suffix).',
-        inputSchema: {
+        inputSchema: z.object({
             offset: z
                 .number()
                 .int()
                 .min(0)
                 .optional()
                 .describe('Pagination offset; use pagination.nextOffset from the previous call'),
-        },
-        annotations: { readOnlyHint: true },
+        }),
+        annotations: READ_ONLY,
+        outputSchema: z.object({
+            ...untrustedFields,
+            shelves: z.array(shapedNavItem),
+            pagination,
+            notes: notesSchema,
+        }),
     }, async ({ offset }) => run(async () => {
         const notes = new Notes();
         const parsed = await api.getFeed('/opds/shelfindex', offset === undefined || offset === 0 ? undefined : { offset });
         const shaped = shapeFeed(parsed, api.url, offset ?? 0, notes);
-        return jsonResult({
+        return untrustedResult({
             shelves: shaped.navItems,
             pagination: shaped.pagination,
             notes: notes.list(),
@@ -32,7 +39,7 @@ export function registerShelfTools(server, api) {
         description: 'Lists the books on a shelf, in the shelf’s own order. Shelf ids ' +
             'come from list_shelves. Book entries include per-format download URLs ' +
             'and a cover URL; fetch the cover image itself with get_cover.',
-        inputSchema: {
+        inputSchema: z.object({
             shelf_id: z
                 .number()
                 .int()
@@ -45,8 +52,15 @@ export function registerShelfTools(server, api) {
                 .min(0)
                 .optional()
                 .describe('Pagination offset; use pagination.nextOffset from the previous call'),
-        },
-        annotations: { readOnlyHint: true },
+        }),
+        annotations: READ_ONLY,
+        outputSchema: z.object({
+            ...untrustedFields,
+            shelfId: z.number().int(),
+            books: z.array(shapedBook),
+            pagination,
+            notes: notesSchema,
+        }),
     }, async ({ shelf_id, offset }) => run(async () => {
         const notes = new Notes();
         const parsed = await api.getFeed(`/opds/shelf/${shelf_id}`, offset === undefined || offset === 0 ? undefined : { offset });
@@ -54,7 +68,7 @@ export function registerShelfTools(server, api) {
         if (shaped.books.length === 0) {
             notes.add('An empty result can also mean the shelf does not exist or is not accessible to the configured user — Calibre-Web returns an empty feed in that case.');
         }
-        return jsonResult({
+        return untrustedResult({
             shelfId: shelf_id,
             books: shaped.books,
             pagination: shaped.pagination,

package/dist/tools/shelves.js.map

@@ -1 +1 @@
-{"version":3,"file":"shelves.js","sourceRoot":"","sources":["../../src/tools/shelves.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE/C,MAAM,UAAU,kBAAkB,CAChC,MAAiB,EACjB,GAAkB;IAElB,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;QACE,KAAK,EAAE,cAAc;QACrB,WAAW,EACT,uEAAuE;YACvE,6DAA6D;YAC7D,yEAAyE;YACzE,mEAAmE;QACrE,WAAW,EAAE;YACX,MAAM,EAAE,CAAC;iBACN,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,GAAG,CAAC,CAAC,CAAC;iBACN,QAAQ,EAAE;iBACV,QAAQ,CACP,qEAAqE,CACtE;SACJ;QACD,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;KACpC,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CACnB,GAAG,CAAC,KAAK,IAAI,EAAE;QACb,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAC9B,kBAAkB,EAClB,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAC9D,CAAC;QACF,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;QAC9D,OAAO,UAAU,CAAC;YAChB,OAAO,EAAE,MAAM,CAAC,QAAQ;YACxB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE;SACpB,CAAC,CAAC;IACL,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EACT,kEAAkE;YAClE,wEAAwE;YACxE,+DAA+D;QACjE,WAAW,EAAE;YACX,QAAQ,EAAE,CAAC;iBACR,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,QAAQ,EAAE;iBACV,GAAG,CAAC,aAAa,CAAC;iBAClB,QAAQ,CAAC,oCAAoC,CAAC;YACjD,MAAM,EAAE,CAAC;iBACN,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,GAAG,CAAC,CAAC,CAAC;iBACN,QAAQ,EAAE;iBACV,QAAQ,CACP,qEAAqE,CACtE;SACJ;QACD,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;KACpC,EACD,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAC7B,GAAG,CAAC,KAAK,IAAI,EAAE;QACb,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAC9B,eAAe,QAAQ,EAAE,EACzB,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAC9D,CAAC;QACF,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;QAC9D,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,KAAK,CAAC,GAAG,CACP,sJAAsJ,CACvJ,CAAC;QACJ,CAAC;QACD,OAAO,UAAU,CAAC;YAChB,OAAO,EAAE,QAAQ;YACjB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE;SACpB,CAAC,CAAC;IACL,CAAC,CAAC,CACL,CAAC;AACJ,CAAC"}
+{"version":3,"file":"shelves.js","sourceRoot":"","sources":["../../src/tools/shelves.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,GAAG,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EACL,KAAK,EACL,KAAK,IAAI,WAAW,EACpB,UAAU,EACV,UAAU,EACV,aAAa,EACb,SAAS,EACT,eAAe,GAChB,MAAM,aAAa,CAAC;AAErB,MAAM,UAAU,kBAAkB,CAChC,MAAiB,EACjB,GAAkB;IAElB,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;QACE,KAAK,EAAE,cAAc;QACrB,WAAW,EACT,uEAAuE;YACvE,6DAA6D;YAC7D,yEAAyE;YACzE,mEAAmE;QACrE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,MAAM,EAAE,CAAC;iBACN,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,GAAG,CAAC,CAAC,CAAC;iBACN,QAAQ,EAAE;iBACV,QAAQ,CACP,qEAAqE,CACtE;SACJ,CAAC;QACF,WAAW,EAAE,SAAS;QACtB,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;YACrB,GAAG,eAAe;YAClB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC;YAC/B,UAAU;YACV,KAAK,EAAE,WAAW;SACnB,CAAC;KACH,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CACnB,GAAG,CAAC,KAAK,IAAI,EAAE;QACb,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAC9B,kBAAkB,EAClB,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAC9D,CAAC;QACF,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;QAC9D,OAAO,eAAe,CAAC;YACrB,OAAO,EAAE,MAAM,CAAC,QAAQ;YACxB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE;SACpB,CAAC,CAAC;IACL,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EACT,kEAAkE;YAClE,wEAAwE;YACxE,+DAA+D;QACjE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,QAAQ,EAAE,CAAC;iBACR,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,QAAQ,EAAE;iBACV,GAAG,CAAC,aAAa,CAAC;iBAClB,QAAQ,CAAC,oCAAoC,CAAC;YACjD,MAAM,EAAE,CAAC;iBACN,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,GAAG,CAAC,CAAC,CAAC;iBACN,QAAQ,EAAE;iBACV,QAAQ,CACP,qEAAqE,CACtE;SACJ,CAAC;QACF,WAAW,EAAE,SAAS;QACtB,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;YACrB,GAAG,eAAe;YAClB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;YACzB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC;YAC1B,UAAU;YACV,KAAK,EAAE,WAAW;SACnB,CAAC;KACH,EACD,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAC7B,GAAG,CAAC,KAAK,IAAI,EAAE;QACb,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAC9B,eAAe,QAAQ,EAAE,EACzB,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAC9D,CAAC;QACF,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;QAC9D,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,KAAK,CAAC,GAAG,CACP,sJAAsJ,CACvJ,CAAC;QACJ,CAAC;QACD,OAAO,eAAe,CAAC;YACrB,OAAO,EAAE,QAAQ;YACjB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE;SACpB,CAAC,CAAC;IACL,CAAC,CAAC,CACL,CAAC;AACJ,CAAC"}

package/dist/tools/stats.d.ts

@@ -1,3 +1,3 @@
-import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { McpServer } from '@modelcontextprotocol/server';
 import type { CalibreWebApi } from '../api.js';
 export declare function registerStatsTools(server: McpServer, api: CalibreWebApi): void;

package/dist/tools/stats.js

@@ -1,11 +1,21 @@
+import { z } from 'zod';
+import { READ_ONLY } from './annotations.js';
 import { jsonResult, run } from '../result.js';
 export function registerStatsTools(server, api) {
     server.registerTool('get_stats', {
         title: 'Get library statistics',
         description: 'Returns the total number of books, authors, categories (tags) and ' +
             'series in the library.',
-        inputSchema: {},
-        annotations: { readOnlyHint: true },
+        inputSchema: z.object({}),
+        annotations: READ_ONLY,
+        // No untrusted marker: four counters this server checked are numbers,
+        // and nothing a publisher wrote reaches here.
+        outputSchema: z.object({
+            books: z.number().optional(),
+            authors: z.number().optional(),
+            categories: z.number().optional().describe('Tags, in Calibre’s terms.'),
+            series: z.number().optional(),
+        }),
     }, async () => run(async () => {
         const raw = await api.getJson('/opds/stats');
         const stats = typeof raw === 'object' && raw !== null

package/dist/tools/stats.js.map

@@ -1 +1 @@
-{"version":3,"file":"stats.js","sourceRoot":"","sources":["../../src/tools/stats.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAE/C,MAAM,UAAU,kBAAkB,CAChC,MAAiB,EACjB,GAAkB;IAElB,MAAM,CAAC,YAAY,CACjB,WAAW,EACX;QACE,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EACT,oEAAoE;YACpE,wBAAwB;QAC1B,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;KACpC,EACD,KAAK,IAAI,EAAE,CACT,GAAG,CAAC,KAAK,IAAI,EAAE;QACb,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAC7C,MAAM,KAAK,GACT,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;YACrC,CAAC,CAAE,GAA+B;YAClC,CAAC,CAAC,EAAE,CAAC;QACT,qEAAqE;QACrE,kEAAkE;QAClE,MAAM,IAAI,GAAG,CAAC,GAAW,EAAsB,EAAE,CAC/C,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1D,OAAO,UAAU,CAAC;YAChB,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC;YACpB,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;YACxB,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC;YAC9B,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC;SACvB,CAAC,CAAC;IACL,CAAC,CAAC,CACL,CAAC;AACJ,CAAC"}
+{"version":3,"file":"stats.js","sourceRoot":"","sources":["../../src/tools/stats.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAE/C,MAAM,UAAU,kBAAkB,CAChC,MAAiB,EACjB,GAAkB;IAElB,MAAM,CAAC,YAAY,CACjB,WAAW,EACX;QACE,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EACT,oEAAoE;YACpE,wBAAwB;QAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,WAAW,EAAE,SAAS;QACtB,sEAAsE;QACtE,8CAA8C;QAC9C,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;YACrB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC9B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;YACvE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SAC9B,CAAC;KACH,EACD,KAAK,IAAI,EAAE,CACT,GAAG,CAAC,KAAK,IAAI,EAAE;QACb,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAC7C,MAAM,KAAK,GACT,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;YACrC,CAAC,CAAE,GAA+B;YAClC,CAAC,CAAC,EAAE,CAAC;QACT,qEAAqE;QACrE,kEAAkE;QAClE,MAAM,IAAI,GAAG,CAAC,GAAW,EAAsB,EAAE,CAC/C,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1D,OAAO,UAAU,CAAC;YAChB,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC;YACpB,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;YACxB,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC;YAC9B,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC;SACvB,CAAC,CAAC;IACL,CAAC,CAAC,CACL,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "calibreweb-mcp",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "mcpName": "io.github.ni-c/calibreweb-mcp",
-  "description": "MCP server for Calibre-Web \u2014 read-only library access via the OPDS feed",
+  "description": "MCP server for Calibre-Web — read-only library access via the OPDS feed",
   "keywords": [
     "mcp",
     "model-context-protocol",
@@ -36,30 +36,34 @@
   },
   "scripts": {
     "build": "tsc",
+    "typecheck": "tsc --project tsconfig.test.json",
     "watch": "tsc --watch",
-    "lint": "eslint . && prettier --check .",
+    "lint": "oxlint --deny-warnings && prettier --check .",
     "format": "prettier --write .",
     "test": "vitest run",
     "test:coverage": "vitest run --coverage",
-    "prepublishOnly": "npm run lint && npm test && npm run build",
-    "assets": "node scripts/gen-assets.mjs",
-    "assets:check": "node scripts/gen-assets.mjs --check"
+    "test:integration": "vitest run --config vitest.integration.config.ts",
+    "prepublishOnly": "npm run lint && npm run typecheck && npm test && npm run build",
+    "assets": "svg-asset-set",
+    "assets:check": "svg-asset-set --check"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.30.0",
+    "@modelcontextprotocol/server": "^2.0.0",
     "fast-xml-parser": "^5.11.0",
+    "mcp-internal-hosts": "^0.2.1",
+    "mcp-tool-allowlist": "^0.2.1",
     "undici": "^8.10.0",
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@eslint/js": "^10.0.1",
-    "@resvg/resvg-js": "^2.6.2",
+    "@modelcontextprotocol/client": "^2.0.0",
     "@types/node": "^26.2.0",
     "@vitest/coverage-v8": "4.1.11",
-    "eslint": "^10.8.1",
+    "mcp-integration-harness": "^0.4.0",
+    "oxlint": "^1.80.0",
     "prettier": "^3.9.6",
-    "typescript": "^6.0.3",
-    "typescript-eslint": "^8.67.0",
+    "svg-asset-set": "https://github.com/ni-c/svg-asset-set/releases/download/v0.2.0/svg-asset-set-0.2.0.tgz",
+    "typescript": "^7.0.2",
     "vitest": "^4.1.11"
   }
 }

package/dist/hosts.d.ts

@@ -1,22 +0,0 @@
-/**
- * Why a host is only reachable from the machine it is named on: `loopback`
- * addresses that machine itself, `link-local` covers 169.254/16, fe80::/10 and
- * the handful of addresses cloud providers put their metadata service on.
- */
-export type InternalHostKind = 'loopback' | 'link-local';
-/**
- * Classifies a hostname that addresses the machine itself, its link-local
- * range, or a cloud metadata service — or returns null for anything routable.
- *
- * It does the job numerically rather than by comparing strings, because the
- * spellings differ more than they look. `URL` canonicalises an IPv4-mapped IPv6
- * literal into hex — `http://[::ffff:127.0.0.1]/` arrives here as
- * `[::ffff:7f00:1]` — while every dual-stack client dials it as plain
- * 127.0.0.1, and `localhost.` with its root label is the same name as
- * `localhost`. String comparison misses both.
- *
- * Takes a hostname from anywhere, not only from `URL`: a resolver hands back
- * `::ffff:127.0.0.1` in dotted form and may attach a `%zone` suffix, so both
- * are handled here rather than assumed away.
- */
-export declare function internalHostKind(hostname: string): InternalHostKind | null;

package/dist/hosts.js

@@ -1,144 +0,0 @@
-import { isIP } from 'node:net';
-/**
- * Names for the cloud metadata service, which resolve on an instance and
- * nowhere else.
- */
-const METADATA_NAMES = new Set([
-    'metadata',
-    'metadata.google.internal',
-    'metadata.goog',
-    'instance-data',
-    'instance-data.ec2.internal',
-]);
-/**
- * Metadata endpoints that sit outside 169.254/16.
- *
- * Alibaba Cloud answers on 100.100.100.200, which is carrier-grade NAT space,
- * and Oracle's legacy endpoint is 192.0.0.192, which is IETF protocol
- * assignments. Neither is link-local by address, but both are the same thing by
- * purpose, and neither is somewhere a legitimate target lives.
- */
-const METADATA_ADDRESSES = new Set(['100.100.100.200', '192.0.0.192']);
-/**
- * Classifies a hostname that addresses the machine itself, its link-local
- * range, or a cloud metadata service — or returns null for anything routable.
- *
- * It does the job numerically rather than by comparing strings, because the
- * spellings differ more than they look. `URL` canonicalises an IPv4-mapped IPv6
- * literal into hex — `http://[::ffff:127.0.0.1]/` arrives here as
- * `[::ffff:7f00:1]` — while every dual-stack client dials it as plain
- * 127.0.0.1, and `localhost.` with its root label is the same name as
- * `localhost`. String comparison misses both.
- *
- * Takes a hostname from anywhere, not only from `URL`: a resolver hands back
- * `::ffff:127.0.0.1` in dotted form and may attach a `%zone` suffix, so both
- * are handled here rather than assumed away.
- */
-export function internalHostKind(hostname) {
-    const host = bareHost(hostname);
-    if (host === 'localhost' || host.endsWith('.localhost'))
-        return 'loopback';
-    if (METADATA_NAMES.has(host))
-        return 'link-local';
-    if (METADATA_ADDRESSES.has(host))
-        return 'link-local';
-    const version = isIP(host);
-    if (version === 4)
-        return ipv4Kind(host.split('.').map(Number));
-    if (version !== 6)
-        return null;
-    const groups = expandIpv6(host);
-    if (groups === null)
-        return null;
-    const explicit = ipv6Kind(groups);
-    if (explicit !== null)
-        return explicit;
-    const embedded = embeddedIpv4(groups);
-    return embedded === null ? null : ipv4Kind(embedded);
-}
-function bareHost(hostname) {
-    return (hostname
-        .toLowerCase()
-        // URL.hostname keeps the brackets around an IPv6 literal, so a bare '::1'
-        // would never match.
-        .replace(/^\[|]$/g, '')
-        // A scope id belongs to the interface, not to the address. `isIP` accepts
-        // it, so leaving it on would desynchronise every check below from what
-        // `isIP` just agreed was an address.
-        .replace(/%.*$/, '')
-        // 'localhost.' is the same name as 'localhost' — the root label is what
-        // makes it fully qualified, not a different host.
-        .replace(/\.+$/, ''));
-}
-/** Expands an IPv6 literal into its eight 16-bit groups. */
-function expandIpv6(address) {
-    let text = address;
-    // A literal may end in dotted-quad notation (::ffff:127.0.0.1). Fold that tail
-    // into the two hex groups it stands for so the rest of this is uniform.
-    const dotted = /:(\d{1,3}(?:\.\d{1,3}){3})$/.exec(text);
-    if (dotted !== null) {
-        const [a = 0, b = 0, c = 0, d = 0] = (dotted[1] ?? '')
-            .split('.')
-            .map(Number);
-        const high = ((a << 8) | b).toString(16);
-        const low = ((c << 8) | d).toString(16);
-        text = `${text.slice(0, dotted.index)}:${high}:${low}`;
-    }
-    const [head = '', tail] = text.split('::');
-    const left = head === '' ? [] : head.split(':');
-    const right = tail === undefined ? null : tail === '' ? [] : tail.split(':');
-    if (right === null)
-        return toGroups(left);
-    const missing = 8 - left.length - right.length;
-    if (missing < 0)
-        return null;
-    return toGroups([...left, ...Array(missing).fill('0'), ...right]);
-}
-function toGroups(groups) {
-    if (groups.length !== 8)
-        return null;
-    // Tested rather than left to `parseInt`, which stops at the first character it
-    // does not like and returns a number for '7f00xyz' just as happily.
-    if (!groups.every((group) => /^[0-9a-f]{1,4}$/.test(group)))
-        return null;
-    return groups.map((group) => parseInt(group, 16));
-}
-/**
- * Extracts the IPv4 address an IPv6 literal carries, for the prefixes whose
- * whole purpose is to stand in for one.
- */
-function embeddedIpv4(groups) {
-    const [a = 0, b = 0, c = 0, d = 0, e = 0, f = 0, g = 0, h = 0] = groups;
-    const carriesIpv4 = 
-    // ::a.b.c.d (IPv4-compatible) and ::ffff:a.b.c.d (IPv4-mapped, RFC 4291).
-    ((a | b | c | d | e) === 0 && (f === 0 || f === 0xffff)) ||
-        // ::ffff:0:a.b.c.d — IPv4-translated (RFC 2765).
-        ((a | b | c | d) === 0 && e === 0xffff && f === 0) ||
-        // 64:ff9b::a.b.c.d — the well-known NAT64 prefix (RFC 6052).
-        (a === 0x64 && b === 0xff9b && (c | d | e | f) === 0);
-    return carriesIpv4 ? [g >> 8, g & 0xff, h >> 8, h & 0xff] : null;
-}
-function ipv4Kind(octets) {
-    const [a = 0, b = 0] = octets;
-    // 0.0.0.0/8 ('this host', RFC 1122) and 127/8 both reach the machine itself.
-    if (a === 0 || a === 127)
-        return 'loopback';
-    // 169.254/16, which holds 169.254.169.254 — the AWS/GCP/Azure metadata service.
-    if (a === 169 && b === 254)
-        return 'link-local';
-    return null;
-}
-function ipv6Kind(groups) {
-    // `::` and `::1` are also caught by the IPv4-compatible unwrapping below, but
-    // they are named here so that removing that unwrapping cannot silently take
-    // the two most obvious loopback literals with it.
-    if (groups.every((group) => group === 0))
-        return 'loopback'; // ::
-    if (groups.slice(0, 7).every((group) => group === 0) && groups[7] === 1) {
-        return 'loopback'; // ::1
-    }
-    if (((groups[0] ?? 0) & 0xffc0) === 0xfe80)
-        return 'link-local'; // fe80::/10
-    return null;
-}
-//# sourceMappingURL=hosts.js.map

package/dist/hosts.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"hosts.js","sourceRoot":"","sources":["../src/hosts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAShC;;;GAGG;AACH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,UAAU;IACV,0BAA0B;IAC1B,eAAe;IACf,eAAe;IACf,4BAA4B;CAC7B,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC,CAAC;AAEvE;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChC,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,UAAU,CAAC;IAC3E,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,YAAY,CAAC;IAClD,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,YAAY,CAAC;IAEtD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAChE,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAE/B,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC;IACvC,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACtC,OAAO,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,QAAQ,CAAC,QAAgB;IAChC,OAAO,CACL,QAAQ;SACL,WAAW,EAAE;QACd,0EAA0E;QAC1E,qBAAqB;SACpB,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;QACvB,0EAA0E;QAC1E,uEAAuE;QACvE,qCAAqC;SACpC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACpB,wEAAwE;QACxE,kDAAkD;SACjD,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CACvB,CAAC;AACJ,CAAC;AAED,4DAA4D;AAC5D,SAAS,UAAU,CAAC,OAAe;IACjC,IAAI,IAAI,GAAG,OAAO,CAAC;IACnB,+EAA+E;IAC/E,wEAAwE;IACxE,MAAM,MAAM,GAAG,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACnD,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,MAAM,CAAC,CAAC;QACf,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,GAAG,EAAE,CAAC;IACzD,CAAC;IAED,MAAM,CAAC,IAAI,GAAG,EAAE,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7E,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC/C,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7B,OAAO,QAAQ,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,KAAK,CAAS,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,QAAQ,CAAC,MAAgB;IAChC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,+EAA+E;IAC/E,oEAAoE;IACpE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACzE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;AACpD,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,MAAgB;IACpC,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC;IACxE,MAAM,WAAW;IACf,0EAA0E;IAC1E,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,CAAC;QACxD,iDAAiD;QACjD,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,6DAA6D;QAC7D,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACxD,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACnE,CAAC;AAED,SAAS,QAAQ,CAAC,MAAgB;IAChC,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC;IAC9B,6EAA6E;IAC7E,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,UAAU,CAAC;IAC5C,gFAAgF;IAChF,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,YAAY,CAAC;IAChD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,MAAgB;IAChC,8EAA8E;IAC9E,4EAA4E;IAC5E,kDAAkD;IAClD,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,UAAU,CAAC,CAAC,KAAK;IAClE,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,UAAU,CAAC,CAAC,MAAM;IAC3B,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,MAAM;QAAE,OAAO,YAAY,CAAC,CAAC,YAAY;IAC7E,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/tool-filter.d.ts

@@ -1,43 +0,0 @@
-import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-/**
- * A tool list that names something this server does not have.
- *
- * Thrown rather than `process.exit(1)`: `createServer` is called in-process by
- * the tests, and an exiting constructor cannot be tested. `src/index.ts` turns
- * it back into an exit code.
- */
-export declare class ToolFilterError extends Error {
-    constructor(message: string);
-}
-export interface ToolFilter {
-    /** False when neither variable was set — then nothing is wrapped at all. */
-    readonly active: boolean;
-    /** The tools that survive. Only meaningful while `active`. */
-    readonly selected: ReadonlySet<string>;
-}
-/**
- * Reads `CALIBRE_WEB_ALLOW_TOOLS` / `CALIBRE_WEB_DENY_TOOLS` and works out which
- * tools survive.
- *
- * Every entry has to match at least one tool in the catalogue. An entry that
- * matches nothing is fatal rather than ignored, because the failure it produces
- * otherwise — a tool quietly missing from `tools/list` — is invisible: nobody
- * looks for the cause of an absence in an environment variable.
- */
-export declare function buildToolFilter(config: {
-    allowTools: string | undefined;
-    denyTools: string | undefined;
-}): ToolFilter;
-/**
- * Makes `server` register only the tools the filter selected.
- *
- * The tool is registered and then removed again rather than skipped. Skipping
- * looks cheaper and breaks one case: the SDK installs its `tools/list` handler
- * from inside the registration path, so a server whose every tool was skipped
- * would answer `tools/list` with "method not found" instead of an empty list.
- * `remove()` deletes the entry from the SDK's tool map outright, which makes a
- * filtered tool answer `Tool X not found`. `disable()` would be wrong: it hides
- * the tool from `tools/list` but still answers a call with "disabled", which is
- * the advertising-a-refusal this server avoids everywhere else.
- */
-export declare function installToolFilter(server: McpServer, filter: ToolFilter): void;

package/dist/tool-filter.js

@@ -1,138 +0,0 @@
-import { ALL_TOOLS, ESSENTIAL_TOOLS } from './tools/catalogue.js';
-/**
- * A tool list that names something this server does not have.
- *
- * Thrown rather than `process.exit(1)`: `createServer` is called in-process by
- * the tests, and an exiting constructor cannot be tested. `src/index.ts` turns
- * it back into an exit code.
- */
-export class ToolFilterError extends Error {
-    constructor(message) {
-        super(message);
-        this.name = 'ToolFilterError';
-    }
-}
-/** The `essential` preset is spelled out here so it cannot collide with a tool name. */
-const PRESET = 'essential';
-/**
- * Splits a comma-separated value into entries.
- *
- * Empty entries are dropped, so `a,,b` and a trailing comma are both fine, and
- * a value that is empty or only whitespace counts as *unset* — `X_ALLOW_TOOLS=`
- * in a compose file must not mean "allow nothing". Entries are lowercased: the
- * catalogue is entirely lowercase, so this is lossless, and a shell that
- * upper-cased a name should not take the server down.
- */
-function entriesOf(raw) {
-    if (raw === undefined)
-        return undefined;
-    const entries = raw
-        .split(',')
-        .map((entry) => entry.trim().toLowerCase())
-        .filter((entry) => entry.length > 0);
-    return entries.length > 0 ? entries : undefined;
-}
-/**
- * Expands one entry to the catalogue tools it names.
- *
- * A pattern is a literal prefix plus exactly one trailing `*`. Anything else is
- * rejected outright: `*_thing` and `list_*_x` look plausible, match nothing, and
- * would otherwise be silent forever.
- */
-function expand(entry, variable) {
-    const star = entry.indexOf('*');
-    if (star !== -1) {
-        if (star !== entry.length - 1) {
-            throw new ToolFilterError(`${variable}: "${entry}" is not a valid entry — a pattern is a prefix ` +
-                'followed by a single trailing "*", for example "list_*". Everything ' +
-                'else is an exact tool name.');
-        }
-        const prefix = entry.slice(0, -1);
-        return ALL_TOOLS.filter((tool) => tool.startsWith(prefix));
-    }
-    return ALL_TOOLS.filter((tool) => tool === entry);
-}
-/** The full catalogue, for the "these are the names that exist" half of an error. */
-function catalogueList() {
-    return [...ALL_TOOLS].sort().join(', ');
-}
-/**
- * Reads `CALIBRE_WEB_ALLOW_TOOLS` / `CALIBRE_WEB_DENY_TOOLS` and works out which
- * tools survive.
- *
- * Every entry has to match at least one tool in the catalogue. An entry that
- * matches nothing is fatal rather than ignored, because the failure it produces
- * otherwise — a tool quietly missing from `tools/list` — is invisible: nobody
- * looks for the cause of an absence in an environment variable.
- */
-export function buildToolFilter(config) {
-    const allow = entriesOf(config.allowTools);
-    const deny = entriesOf(config.denyTools);
-    if (allow === undefined && deny === undefined) {
-        return { active: false, selected: new Set() };
-    }
-    let selected;
-    if (allow === undefined) {
-        selected = new Set(ALL_TOOLS);
-    }
-    else {
-        selected = new Set();
-        for (const entry of allow) {
-            if (entry === PRESET) {
-                for (const tool of ESSENTIAL_TOOLS)
-                    selected.add(tool);
-                continue;
-            }
-            const matches = expand(entry, 'CALIBRE_WEB_ALLOW_TOOLS');
-            if (matches.length === 0) {
-                throw new ToolFilterError(`CALIBRE_WEB_ALLOW_TOOLS: no tool matches "${entry}". ` +
-                    `Valid tools: ${catalogueList()}. "${PRESET}" selects the curated preset.`);
-            }
-            for (const tool of matches)
-                selected.add(tool);
-        }
-    }
-    for (const entry of deny ?? []) {
-        const matches = expand(entry, 'CALIBRE_WEB_DENY_TOOLS');
-        if (matches.length === 0) {
-            throw new ToolFilterError(`CALIBRE_WEB_DENY_TOOLS: no tool matches "${entry}". Valid tools: ${catalogueList()}.`);
-        }
-        for (const tool of matches)
-            selected.delete(tool);
-    }
-    if (selected.size === 0) {
-        throw new ToolFilterError('CALIBRE_WEB_ALLOW_TOOLS/CALIBRE_WEB_DENY_TOOLS leave no tools registered — the ' +
-            'server would start with an empty tool list.');
-    }
-    return { active: true, selected };
-}
-/**
- * Makes `server` register only the tools the filter selected.
- *
- * The tool is registered and then removed again rather than skipped. Skipping
- * looks cheaper and breaks one case: the SDK installs its `tools/list` handler
- * from inside the registration path, so a server whose every tool was skipped
- * would answer `tools/list` with "method not found" instead of an empty list.
- * `remove()` deletes the entry from the SDK's tool map outright, which makes a
- * filtered tool answer `Tool X not found`. `disable()` would be wrong: it hides
- * the tool from `tools/list` but still answers a call with "disabled", which is
- * the advertising-a-refusal this server avoids everywhere else.
- */
-export function installToolFilter(server, filter) {
-    if (!filter.active)
-        return;
-    const register = server.registerTool.bind(server);
-    // An object literal rather than a plain function so the method picks up the
-    // SDK's generic signature by contextual typing — the call sites keep their
-    // typed handler arguments and nothing needs a cast.
-    const wrapper = {
-        registerTool(name, config, cb) {
-            const tool = register(name, config, cb);
-            if (!filter.selected.has(name))
-                tool.remove();
-            return tool;
-        },
-    };
-    server.registerTool = wrapper.registerTool;
-}
-//# sourceMappingURL=tool-filter.js.map

package/dist/tool-filter.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"tool-filter.js","sourceRoot":"","sources":["../src/tool-filter.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAElE;;;;;;GAMG;AACH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AASD,wFAAwF;AACxF,MAAM,MAAM,GAAG,WAAW,CAAC;AAE3B;;;;;;;;GAQG;AACH,SAAS,SAAS,CAAC,GAAuB;IACxC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,OAAO,GAAG,GAAG;SAChB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SAC1C,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvC,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAED;;;;;;GAMG;AACH,SAAS,MAAM,CAAC,KAAa,EAAE,QAAgB;IAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC;QAChB,IAAI,IAAI,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,eAAe,CACvB,GAAG,QAAQ,MAAM,KAAK,iDAAiD;gBACrE,sEAAsE;gBACtE,6BAA6B,CAChC,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAClC,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;AACpD,CAAC;AAED,qFAAqF;AACrF,SAAS,aAAa;IACpB,OAAO,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,MAG/B;IACC,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACzC,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9C,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;IAChD,CAAC;IAED,IAAI,QAAqB,CAAC;IAC1B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,QAAQ,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;QAC7B,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;YAC1B,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;gBACrB,KAAK,MAAM,IAAI,IAAI,eAAe;oBAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACvD,SAAS;YACX,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,yBAAyB,CAAC,CAAC;YACzD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,eAAe,CACvB,6CAA6C,KAAK,KAAK;oBACrD,gBAAgB,aAAa,EAAE,MAAM,MAAM,+BAA+B,CAC7E,CAAC;YACJ,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,OAAO;gBAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;QACxD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,eAAe,CACvB,4CAA4C,KAAK,mBAAmB,aAAa,EAAE,GAAG,CACvF,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO;YAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,eAAe,CACvB,iFAAiF;YAC/E,6CAA6C,CAChD,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AACpC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAiB,EAAE,MAAkB;IACrE,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO;IAC3B,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClD,4EAA4E;IAC5E,2EAA2E;IAC3E,oDAAoD;IACpD,MAAM,OAAO,GAAoC;QAC/C,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAC3B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;YACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YAC9C,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;IACF,MAAM,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;AAC7C,CAAC"}