Merge branch 'main' into pr-764: Port LDAP auth fix to new kosync location

Author: crocodilestick

.github/copilot-instructions.md

@@ -186,6 +186,7 @@ Pluggable providers in `cps/metadata_provider/`:
 - `CWA_WATCH_MODE`: Force polling watcher (`poll`) or inotify (default)
 - `HARDCOVER_TOKEN`: API key for Hardcover metadata provider
 - `COOKIE_PREFIX`: Custom prefix for session cookies
+- `TRUSTED_PROXY_COUNT`: Number of proxies to trust for X-Forwarded-* headers (default: 1, use 2+ for CF Tunnel + reverse proxy)
 
 ## Common Pitfalls
 1. **Don't import SQLite on main thread**: Always use `init_db_thread()` in background tasks
@@ -195,6 +196,7 @@ Pluggable providers in `cps/metadata_provider/`:
 5. **WAL mode errors**: Usually means network share deployment without `NETWORK_SHARE_MODE=true`
 6. **Port binding**: Ports below 1024 need `cap_add: [NET_BIND_SERVICE]` in docker-compose
 7. **Calibre plugins**: Requires `customize.py.json` in `/config/.config/calibre/` to register
+8. **Session protection errors**: Behind multiple proxies? Set `TRUSTED_PROXY_COUNT` to match your proxy chain depth
 
 ## Version Management
 - **Installed version**: `/app/CWA_RELEASE` (baked at build time)

.github/workflows/tests.yml

@@ -33,10 +33,18 @@ jobs:
   fast-tests:
     name: Fast Tests (Smoke + Unit)
     runs-on: ubuntu-latest
+    env:
+      PYTHONDONTWRITEBYTECODE: '1'
 
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+
+      - name: Remove Python bytecode and pycache
+        run: |
+          echo "Removing any leftover .pyc and pycache"
+          find . -name '__pycache__' -type d -print -exec rm -rf {} +
+          find . -name '*.pyc' -type f -print -delete
       
       - name: Set up Python 3.13
         uses: actions/setup-python@v5
@@ -136,10 +144,15 @@ jobs:
           pip install -r requirements.txt
           pip install -r requirements-dev.txt
       
-      - name: Pull/cache Docker images
-        run: |
-          docker pull doubleuynn/calibre-web-automated:latest || true
-          docker pull python:3.13-slim || true
+      - name: Build Docker image
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          push: false
+          load: true
+          tags: crocodilestick/calibre-web-automated:latest
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
 
       - name: Run Docker integration tests
         run: |
@@ -151,6 +164,7 @@ jobs:
             --junitxml=integration-results.xml
         env:
           CWA_TEST_PORT: "8083"  # CI uses production default port
+          CWA_TEST_IMAGE: "crocodilestick/calibre-web-automated:latest"
         timeout-minutes: 30  # Kill if stuck
 
       - name: Upload test results

.gitignore

@@ -24,6 +24,8 @@ cwa-wiki/
 docs/
 .venv-activate.sh
 test_venv
+cwa.code-workspace
+
 
 
 # Test Scripts
@@ -80,6 +82,7 @@ htmlcov/
 .cache
 nosetests.xml
 coverage.xml
+coverage.md
 *.cover
 *.py,cover
 .hypothesis/
@@ -156,13 +159,14 @@ celerybeat.pid
 *.sage.py
 
 # Environments
-.env
+*.env
 .venv
 env/
 venv/
 ENV/
 env.bak/
 venv.bak/
+tmp/
 
 # Spyder project settings
 .spyderproject
@@ -193,4 +197,7 @@ cython_debug/
 #  be found at https://github.com/github/gitignore/blob/main/Global/JetBrains.gitignore
 #  and can be added to the global gitignore or merged into this file.  For a more nuclear
 #  option (not recommended) you can uncomment the following to ignore the entire idea folder.
-#.idea/
+#.idea/
+
+# Dev instance files for testing in the same folder
+instance/

CONTRIBUTORS

@@ -1,7 +1,6 @@
 CONTRIBUTORS
 
 This file is automatically generated. DO NOT EDIT MANUALLY.
-Generated on: 2025-10-29T11:15:51.677020Z
 
 Upstream project: https://github.com/janeczku/calibre-web
 Fork project (Calibre-Web Automated, since 2024): https://github.com/crocodilestick/calibre-web-automated
@@ -12,7 +11,7 @@ Copyright (C) 2018-2025 Calibre-Web contributors
 Copyright (C) 2024-2025 Calibre-Web Automated contributors
 # Upstream Contributors (janeczku/calibre-web)
 
-- OzzieIsaacs (anon) (2750 commits)
+- OzzieIsaacs (anon) (2758 commits)
 - Ozzie Isaacs (anon) (263 commits)
 - cbartondock (96 commits)
 - idalin (69 commits)
@@ -123,6 +122,7 @@ Copyright (C) 2024-2025 Calibre-Web Automated contributors
 - h1f0x (2 commits)
 - halkeye (2 commits)
 - hitsounds (2 commits)
+- holzerseb (2 commits)
 - issmirnov (2 commits)
 - jef (2 commits)
 - jfenske89 (2 commits)
@@ -133,6 +133,7 @@ Copyright (C) 2024-2025 Calibre-Web Automated contributors
 - nanu-c (2 commits)
 - norangebit (2 commits)
 - Northguy (2 commits)
+- o-F3L1X-o (2 commits)
 - peperunas (2 commits)
 - petersonev (2 commits)
 - rafarq (2 commits)
@@ -154,6 +155,7 @@ Copyright (C) 2024-2025 Calibre-Web Automated contributors
 - adocampo (1 commits)
 - aexvir (1 commits)
 - akushsky (1 commits)
+- alasano (1 commits)
 - Allram (1 commits)
 - altair (1 commits)
 - anatoliifetisov (1 commits)
@@ -254,6 +256,7 @@ Copyright (C) 2024-2025 Calibre-Web Automated contributors
 - nelsg2 (1 commits)
 - nferrari (1 commits)
 - NickWick13 (1 commits)
+- Nico31240 (1 commits)
 - oguzkilcan (1 commits)
 - overhacked (1 commits)
 - petervirtech (1 commits)
@@ -272,6 +275,8 @@ Copyright (C) 2024-2025 Calibre-Web Automated contributors
 - ruben-herold (1 commits)
 - ryanlong1004 (1 commits)
 - sartoshi-foot-dao (1 commits)
+- schnabelewobski (1 commits)
+- shsm0520 (1 commits)
 - skiman6010 (1 commits)
 - SpaceWhite (1 commits)
 - theopsall (1 commits)
@@ -288,7 +293,7 @@ Copyright (C) 2024-2025 Calibre-Web Automated contributors
 - whilenot-dev (1 commits)
 - Wolfenk (1 commits)
 - wolviex (1 commits)
-- Wouter Dijk (anon) (1 commits)
+- wouterdijk-cpu (1 commits)
 - WouterKoch (1 commits)
 - wuwei-12138 (1 commits)
 - xybydy (1 commits)
@@ -298,15 +303,16 @@ Copyright (C) 2024-2025 Calibre-Web Automated contributors
 - zhiyue (1 commits)
 # Fork Contributors (crocodilestick/calibre-web-automated)
 
-- crocodilestick (745 commits)
+- crocodilestick (789 commits)
 - jmarmstrong1207 (73 commits)
 - demitrix (30 commits)
-- sirwolfgang (22 commits)
+- sirwolfgang (29 commits)
 - Domoel (21 commits)
+- wolffshots (14 commits)
 - angelicadvocate (9 commits)
+- jgoguen (9 commits)
 - natabat (8 commits)
 - nstwfdev (8 commits)
-- jgoguen (7 commits)
 - alva-seal (6 commits)
 - smevawala (5 commits)
 - Aymendje (4 commits)
@@ -322,9 +328,11 @@ Copyright (C) 2024-2025 Calibre-Web Automated contributors
 - sethvoltz (2 commits)
 - Strubbl (2 commits)
 - tecosaur (2 commits)
+- TexGG (2 commits)
 - tseho (2 commits)
 - Valenth (2 commits)
 - a-eukarya (1 commits)
+- AlexSat (1 commits)
 - Andrej Kralj (anon) (1 commits)
 - bcrdncola (1 commits)
 - brunofin (1 commits)
@@ -348,6 +356,8 @@ Copyright (C) 2024-2025 Calibre-Web Automated contributors
 - jack1lee1995 (anon) (1 commits)
 - jspiers (1 commits)
 - kevpam (1 commits)
+- lazyusername (1 commits)
+- marauder37 (1 commits)
 - Marodeur80 (anon) (1 commits)
 - Matteo Benaroyo (anon) (1 commits)
 - morpheus65535 (1 commits)
@@ -362,6 +372,7 @@ Copyright (C) 2024-2025 Calibre-Web Automated contributors
 - spezzino (1 commits)
 - stadler-pascal (1 commits)
 - stefanop1 (1 commits)
+- tomried (1 commits)
 - Turmaxx (1 commits)
 - ugyes (1 commits)
 - werdeil (1 commits)