mcp-recipes 1.3.1 → 3.0.0

package/CHANGELOG.md

@@ -1,5 +1,59 @@
 # Changelog
 
+## 3.0.0
+
+- **`compare_recipes` now answers with up to five versions where it answered
+  with two.** A caller rendering the whole of its answer sees more of it, and
+  its `differences` list grows with the number of sources. The new optional
+  `sources` argument narrows it back to whichever traditions a question is
+  actually about, and the tool asks every source when it is left out.
+- **A bare number is no longer read as a Marmiton identifier.** Two of the
+  sources address a recipe by digits alone, so `get_recipe` answers `44078`
+  with `invalid_input` naming both readings rather than confidently returning
+  one site's recipe. Every id `search_recipes` hands back already carries its
+  source, so this reaches only a caller who wrote a bare number by hand.
+- **Three sources are added:** Ptitchef and Supertoinette in French, BBC Good
+  Food in English, beside Marmiton and the Wikibooks Cookbook. Each is named by
+  an id of its own, `ptitchef`, `supertoinette` and `goodfood`, and every tool
+  that took a source id takes them.
+- **A recipe a source keeps for its subscribers is named as one.** BBC Good
+  Food publishes such a recipe's title, times, rating and nutrition and holds
+  back its ingredients and its method. The answer says which parts were held
+  back and why, and links the page, rather than reporting a list this server
+  failed to read. Asking to rescale one says there is nothing to rescale, in
+  place of the sentence about a page that states no servings, which would be
+  false: the page states what it serves.
+- **A method published as one block of prose is reported as one**, so a
+  paragraph is not read as the first step of several.
+- **A resting time published apart is carried under its own name.** It is in no
+  other time in the answer, and it is never added to another source's cooking
+  time.
+- **A search every source answered and none holds anything for keeps saying so**
+  however many sources report. That sentence separates a wording nothing matched
+  from a search that failed, and it used to be dropped once several sources each
+  reported holding nothing.
+- A difficulty and a cost are deliberately not carried. Every source writes a
+  difficulty in a word of its own and none publishes a scale for it, so it sits
+  on no axis two versions could be compared along. A cost is a price in euros on
+  one source and a rank inside its own list on another.
+- The privacy policy names the hosts this server actually contacts. A Cookbook
+  page is read through `api.wikimedia.org` and only linked as `en.wikibooks.org`,
+  which the host table stated the other way round.
+
+## 2.0.0
+
+- **This server now needs node 24 or later.** Node 20 reached its end of
+  support on 2026-04-30 and node 22 is no longer what this code is built and
+  typed against. That is what makes this a major version: an install on an
+  older node is refused rather than left to fail somewhere later.
+- **Every refusal of an argument opens with `invalid_input`.** A value outside
+  its bounds, of the wrong type, or outside the set an argument reads used to
+  come back in the validator's own words, with no code to branch on.
+- **A container image is published for each version**, on ghcr, for amd64 and
+  arm64. The readme carries the configuration that runs it.
+- The published package carries its changelog, and the entry point it declares
+  for the package root now publishes its types.
+
 All notable changes to this project are documented here. The format follows
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and the versions follow
 [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

package/PRIVACY.md

@@ -0,0 +1,168 @@
+# Privacy
+
+This server collects nothing about you, and sends nothing to its author.
+
+_[Version française](#confidentialité)_
+
+---
+
+## What this server is
+
+`mcp-recipes` is a read-only client for five recipe sites: [Marmiton](https://www.marmiton.org), the [Wikibooks Cookbook](https://en.wikibooks.org/wiki/Cookbook:Table_of_Contents), [Ptitchef](https://www.ptitchef.com), [BBC Good Food](https://www.bbcgoodfood.com) and [Supertoinette](https://www.supertoinette.com). It runs on your
+own machine, as a process your MCP host starts, and it speaks over stdio. It
+listens on no port.
+
+It needs no API key and no account, so there is no credential for it to hold and none for it to send.
+
+## What leaves your machine, and where it goes
+
+**5 hosts are contacted**, and nothing else.
+
+| Host                    | What is read there                                                                               |
+| ----------------------- | ------------------------------------------------------------------------------------------------ |
+| `www.marmiton.org`      | the site's pages                                                                                 |
+| `api.wikimedia.org`     | the Wikimedia gateway that serves the Cookbook's pages                                           |
+| `www.ptitchef.com`      | the site's pages                                                                                 |
+| `www.bbcgoodfood.com`   | a JSON route the site's own front end uses, for a search; the recipe's page itself, for a recipe |
+| `www.supertoinette.com` | the site's pages                                                                                 |
+
+A Cookbook page is linked as `en.wikibooks.org`, which is where a reader opens
+it. That host is never contacted by this server: the pages themselves are read
+through the Wikimedia gateway above.
+
+What a request carries:
+
+| What                   | Why it is there                                                                                                                   |
+| ---------------------- | --------------------------------------------------------------------------------------------------------------------------------- |
+| The question you asked | A search term or an identifier reaches the site as you wrote it.                                                                  |
+| A `User-Agent`         | `mcp-recipes/<version> (+https://github.com/smeet666/mcp-recipes)`, so the site can reach a person about the traffic it receives. |
+| Your IP address        | Sent by your network to any host you contact, as with any web request.                                                            |
+
+Your requests reach the five sites above. What is done with them there is governed by each site's own privacy policy, which this project does not control.
+
+## What is kept, and for how long
+
+**Answers are held in memory only, and only while the server runs.** The cache is
+a table in the process: it holds what was read so that reading the same page
+twice costs one request instead of two. Closing the server empties it.
+
+**Nothing is written to disk.** The server creates no file, no database and no
+log file.
+
+## What is never collected
+
+- No analytics, no telemetry, no usage counter.
+- Nothing is sent to the author of this project or to any third party.
+- No account, no profile, no identifier is created for you.
+- Your questions are not stored, forwarded, or used to train anything.
+
+## Logs
+
+The server writes diagnostics to **stderr**, where your MCP host decides what
+becomes of them. `RECIPES_LOG_LEVEL` governs how much is written and defaults to `error`. These lines stay on your machine.
+
+## The settings that change any of this
+
+| Variable               | What it changes                                                                                                  |
+| ---------------------- | ---------------------------------------------------------------------------------------------------------------- |
+| `RECIPES_USER_AGENT`   | Adds your own identifier in front of this project's, which stays appended so the site can always reach a person. |
+| `RECIPES_CACHE_TTL_MS` | How long an answer is held in memory. `0` turns the cache off.                                                   |
+| `RECIPES_LOG_LEVEL`    | How much is written to stderr.                                                                                   |
+
+## Children
+
+This server is a tool for developers and it is not directed at children.
+
+## Changes
+
+A change to this policy travels in a release, and the changelog names it.
+
+## Contact
+
+Open an issue on [the repository](https://github.com/smeet666/mcp-recipes/issues). For something exploitable,
+follow [SECURITY.md](./SECURITY.md) instead.
+
+---
+
+# Confidentialité
+
+Ce serveur ne collecte rien sur vous et n'envoie rien à son auteur.
+
+## Ce qu'est ce serveur
+
+`mcp-recipes` est un client en lecture seule pour cinq sites de recettes : [Marmiton](https://www.marmiton.org), le [Cookbook des Wikibooks](https://en.wikibooks.org/wiki/Cookbook:Table_of_Contents), [Ptitchef](https://www.ptitchef.com), [BBC Good Food](https://www.bbcgoodfood.com) et [Supertoinette](https://www.supertoinette.com). Il
+tourne sur votre machine, comme un processus que votre hôte MCP démarre, et il
+parle en stdio. Il n'écoute sur aucun port.
+
+Il ne demande ni clé d'API ni compte, donc il ne détient aucun identifiant et n'en envoie aucun.
+
+## Ce qui quitte votre machine, et où cela va
+
+**5 hôtes sont joints**, et rien d'autre.
+
+| Hôte                    | Ce qui y est lu                                                                                             |
+| ----------------------- | ----------------------------------------------------------------------------------------------------------- |
+| `www.marmiton.org`      | les pages du site                                                                                           |
+| `api.wikimedia.org`     | la passerelle Wikimedia qui sert les pages du Cookbook                                                      |
+| `www.ptitchef.com`      | les pages du site                                                                                           |
+| `www.bbcgoodfood.com`   | une route JSON qu'emploie l'interface du site, pour une recherche ; la page de la recette, pour une recette |
+| `www.supertoinette.com` | les pages du site                                                                                           |
+
+Une page du Cookbook est liée sous `en.wikibooks.org`, où un lecteur l'ouvre. Ce
+serveur ne joint jamais cet hôte : les pages elles-mêmes sont lues par la
+passerelle Wikimedia ci-dessus.
+
+Ce qu'une requête emporte :
+
+| Quoi              | Pourquoi                                                                                                                                          |
+| ----------------- | ------------------------------------------------------------------------------------------------------------------------------------------------- |
+| La question posée | Un terme de recherche ou un identifiant atteint le site tel que vous l'avez écrit.                                                                |
+| Un `User-Agent`   | `mcp-recipes/<version> (+https://github.com/smeet666/mcp-recipes)`, pour que le site puisse joindre une personne au sujet du trafic qu'il reçoit. |
+| Votre adresse IP  | Transmise par votre réseau à tout hôte que vous joignez, comme pour n'importe quelle requête web.                                                 |
+
+Vos requêtes atteignent les cinq sites ci-dessus. Ce qui en est fait là-bas relève de la politique de confidentialité propre à chaque site, que ce projet ne contrôle pas.
+
+## Ce qui est conservé, et combien de temps
+
+**Les réponses sont gardées en mémoire seulement, et seulement pendant que le
+serveur tourne.** Le cache est une table dans le processus : il retient ce qui a
+été lu pour que lire deux fois la même page coûte une requête plutôt que deux.
+Fermer le serveur le vide.
+
+**Rien n'est écrit sur le disque.** Le serveur ne crée aucun fichier, aucune base
+et aucun journal.
+
+## Ce qui n'est jamais collecté
+
+- Aucune analyse d'audience, aucune télémétrie, aucun compteur d'usage.
+- Rien n'est envoyé à l'auteur de ce projet ni à un tiers.
+- Aucun compte, aucun profil, aucun identifiant n'est créé pour vous.
+- Vos questions ne sont ni stockées, ni transmises, ni utilisées pour entraîner
+  quoi que ce soit.
+
+## Les journaux
+
+Le serveur écrit ses diagnostics sur **stderr**, où votre hôte MCP décide de ce
+qu'ils deviennent. `RECIPES_LOG_LEVEL` règle leur quantité et vaut `error` par défaut. Ces lignes restent sur votre machine.
+
+## Les réglages qui changent tout cela
+
+| Variable               | Ce qu'elle change                                                                                                        |
+| ---------------------- | ------------------------------------------------------------------------------------------------------------------------ |
+| `RECIPES_USER_AGENT`   | Ajoute votre identifiant devant celui du projet, qui reste accolé pour que le site puisse toujours joindre une personne. |
+| `RECIPES_CACHE_TTL_MS` | Combien de temps une réponse est gardée en mémoire. `0` éteint le cache.                                                 |
+| `RECIPES_LOG_LEVEL`    | La quantité écrite sur stderr.                                                                                           |
+
+## Les enfants
+
+Ce serveur est un outil pour développeurs et ne s'adresse pas aux enfants.
+
+## Les évolutions
+
+Une modification de cette politique voyage dans une version, et le changelog la
+nomme.
+
+## Contact
+
+Ouvrez une issue sur [le dépôt](https://github.com/smeet666/mcp-recipes/issues). Pour quelque chose
+d'exploitable, suivez plutôt [SECURITY.md](./SECURITY.md).