MetaList 0.10.0__tar.gz → 0.12.0__tar.gz

{metalist-0.10.0 → metalist-0.12.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: metalist
-Version: 0.10.0
+Version: 0.12.0
 Summary: A minimalist single-user note-taking app with SSR, fast in-memory tree operations, and efficient sync.
 Project-URL: Homepage, https://github.com/evolvingstuff/metalist
 Project-URL: Repository, https://github.com/evolvingstuff/metalist
@@ -49,6 +49,25 @@ A minimalist single-user note-taking app focused on server-side rendering (SSR),
 - Multi-tab search contexts with server-persisted scroll/search state (survives browser restarts)
 - Manual namespace backups/restores to a user-selected backup folder with retention controls
 
+## Changes in 0.12.0
+
+- AI chat is now a tool-using agent: in one answer it can look up MetaList help, read and search the notes in your view, open web pages, and open menus, instead of picking a single route up front. Answers cite notes and web pages with clickable references, including each item listed from a web page.
+- Nothing changes without your Yes: tag operations ask first with the exact change, and web addresses that carry words from your notes ask before opening. Summaries that fit in one pass start without a dialog, and summaries never block other edits while they run.
+- "How do I change…" questions open the menu that holds the setting; release notes are part of the help. AI prompts and skills are no longer editable, and a $ button shows or hides the spend estimate.
+- The AI is told only that a note is private, never which privacy setting hides it, and failed AI steps are explained in the chat.
+- Leaving edit mode keeps your place, with no highlight; a collapsed note you changed stays expanded. Clicking into a note keeps the clicked spot under the pointer, including in diagrams and formulas.
+- Dragging a note shows a ghost, a drop line and a direction cursor; the note lands where you dropped it without the page scrolling.
+- Searches that cannot be parsed are explained politely instead of failing.
+
+## Changes in 0.11.0
+
+- Large namespaces stay fast while scrolling: only a band of root notes around the viewport is loaded, the server remembers what each tab shows so the browser no longer sends note hashes, and rendered notes are cached.
+- Tag suggestions, searches with only exclusions (`-tag`), and the updated/content-volume sort orders respond much faster on large namespaces.
+- Accepting or removing tag proposals in bulk, renaming or deleting a tag, and undoing a large delete no longer rebuild every note's inherited tags.
+- Unlocking an encrypted namespace is faster, and the startup encryption audit no longer loads every attachment into memory.
+- Fixed undo of deleting a note whose children have several children, and "accept all" failing on tag bars with leading or trailing spaces.
+- Fixed crashes in the status check after returning to a tab and in scroll-position saving.
+
 ## Changes in 0.10.0
 
 - Excalidraw diagrams: add one from the note's right-click menu or the command palette, and double-click a diagram to edit it full screen. Diagrams autosave, show light and dark previews, resize like images, and each editing session is one undo step. The editor is bundled locally and needs no Node server.

{metalist-0.10.0 → metalist-0.12.0}/README.md

@@ -12,6 +12,25 @@ A minimalist single-user note-taking app focused on server-side rendering (SSR),
 - Multi-tab search contexts with server-persisted scroll/search state (survives browser restarts)
 - Manual namespace backups/restores to a user-selected backup folder with retention controls
 
+## Changes in 0.12.0
+
+- AI chat is now a tool-using agent: in one answer it can look up MetaList help, read and search the notes in your view, open web pages, and open menus, instead of picking a single route up front. Answers cite notes and web pages with clickable references, including each item listed from a web page.
+- Nothing changes without your Yes: tag operations ask first with the exact change, and web addresses that carry words from your notes ask before opening. Summaries that fit in one pass start without a dialog, and summaries never block other edits while they run.
+- "How do I change…" questions open the menu that holds the setting; release notes are part of the help. AI prompts and skills are no longer editable, and a $ button shows or hides the spend estimate.
+- The AI is told only that a note is private, never which privacy setting hides it, and failed AI steps are explained in the chat.
+- Leaving edit mode keeps your place, with no highlight; a collapsed note you changed stays expanded. Clicking into a note keeps the clicked spot under the pointer, including in diagrams and formulas.
+- Dragging a note shows a ghost, a drop line and a direction cursor; the note lands where you dropped it without the page scrolling.
+- Searches that cannot be parsed are explained politely instead of failing.
+
+## Changes in 0.11.0
+
+- Large namespaces stay fast while scrolling: only a band of root notes around the viewport is loaded, the server remembers what each tab shows so the browser no longer sends note hashes, and rendered notes are cached.
+- Tag suggestions, searches with only exclusions (`-tag`), and the updated/content-volume sort orders respond much faster on large namespaces.
+- Accepting or removing tag proposals in bulk, renaming or deleting a tag, and undoing a large delete no longer rebuild every note's inherited tags.
+- Unlocking an encrypted namespace is faster, and the startup encryption audit no longer loads every attachment into memory.
+- Fixed undo of deleting a note whose children have several children, and "accept all" failing on tag bars with leading or trailing spaces.
+- Fixed crashes in the status check after returning to a tab and in scroll-position saving.
+
 ## Changes in 0.10.0
 
 - Excalidraw diagrams: add one from the note's right-click menu or the command palette, and double-click a diagram to edit it full screen. Diagrams autosave, show light and dark previews, resize like images, and each editing session is one undo step. The editor is bundled locally and needs no Node server.

{metalist-0.10.0 → metalist-0.12.0}/app/api/middleware/auth.py

@@ -37,11 +37,6 @@ class AuthMiddleware(BaseHTTPMiddleware):
     )
     assert all(path.endswith("/") for path in PUBLIC_PREFIX_PATHS)
     
-    # Paths to suppress verbose logging for (frequent polling endpoints)
-    QUIET_PATHS = [
-        f"{API_PREFIX}/auth/status",
-    ]
-    
     # Background/automated paths that should NOT refresh tokens (not user activity)
     NO_TOKEN_REFRESH_PATHS = [
         f"{API_PREFIX}/auth/status",  # Polling service pings this for connectivity
@@ -75,20 +70,9 @@ class AuthMiddleware(BaseHTTPMiddleware):
             # Redirect all other requests to maintenance page
             return RedirectResponse(url="/maintenance", status_code=302)
         
-        # Check if this is a quiet path (suppress verbose logging)
-        is_quiet = any(path.startswith(quiet) for quiet in self.QUIET_PATHS)
-        
-        if not is_quiet:
-            print(f"Middleware checking path: {path}")
-        
         if self.is_public_path(path=path):
-            if not is_quiet:
-                print(f"Path {path} is explicitly public, skipping auth")
             return await call_next(request)
         
-        if not is_quiet:
-            print(f"Path {path} is NOT public, checking auth")
-        
         # Startup and recoverable password transitions publish this memory-owned flag.
         if path == f"{API_PREFIX}/auth/settings/password/create" and not is_encryption_required():
             return await call_next(request)

{metalist-0.10.0 → metalist-0.12.0}/app/api/note_requests.py

@@ -56,8 +56,9 @@ class ViewDiffRequest(TypedDict):
     search: Text | None
     tabId: Identifier
     undoContext: UndoContext
-    clientNoteUuidHashes: dict[Identifier, Text]
-    visibleRootAnchorId: Text | None
+    tabViewEmpty: bool
+    visibleTopRootId: Text | None
+    visibleBottomRootId: Text | None
     isUntaggedView: bool
 
 @with_config(ConfigDict(strict=True))
@@ -76,6 +77,7 @@ class UpdateTabSortModeRequest(TypedDict):
 @with_config(ConfigDict(strict=True))
 class CreateNewTabRequest(TypedDict):
     copyFromTabId: Identifier
+    clientId: Identifier
 
 @with_config(ConfigDict(strict=True))
 class DeleteTabRequest(TypedDict):

{metalist-0.10.0 → metalist-0.12.0}/app/api/routes/ai.py

@@ -33,21 +33,17 @@ from app.services.agent.openai_inference import OpenAIInferenceAdapter
 from app.services.agent.openai_inference import validate_openai_model
 from app.services.agent.openai_cost_tracking import OpenAICostSnapshot
 from app.services.agent.openai_cost_tracking import openai_cost_tracker
-from app.services.agent.permissions import AgentPermissionPolicy
 from app.services.agent.prompt_settings import AgentPromptSet
 from app.services.agent.skill_settings import AgentSkillSet
 from app.services.agent.retrieval_settings import AgentRetrievalSettings
 from app.services.agent.scope import ScopedSearchSnapshot
 from app.services.agent.prompt_settings import DEFAULT_AGENT_PROMPTS
-from app.services.agent.prompt_settings import resolve_agent_prompt_set
 from app.services.agent.retrieval_settings import resolve_agent_retrieval_settings
 from app.services.agent.scope import AgentScopeDescriptor
 from app.services.agent.scope import scoped_search_snapshot_factory
 from app.services.agent.runtime import AgentRuntime
 from app.services.agent.skill_settings import DEFAULT_AGENT_SKILLS
-from app.services.agent.skill_settings import resolve_agent_skill_set
 from app.services.agent.token_estimation import estimate_input_tokens
-from app.services.agent.tools import read_only_agent_tools
 from app.services.agent.trace import agent_trace_store
 from app.services.agent.menu_actions import MenuResult, menu_action_store
 from app.services.client_state_service import load_client_preferences
@@ -62,7 +58,7 @@ from app.services.agent.retrieval_settings import resolve_tagging_batch_tokens
 from app.services.agent.web_settings import AgentWebSettings
 from app.services.agent.web_settings import resolve_agent_web_settings
 from app.services.agent.web_evidence import web_evidence_store
-from app.services.agent.tagging import TAGGING_PROMPT_KEY, TAGGING_POLICY_KEY, DEFAULT_TAGGING_PROMPT
+from app.services.agent.tagging import TAGGING_POLICY_KEY
 from app.usecases.bulk_tag_proposals import apply_bulk_proposals, prepare_proposal_changes
 from app.services.bulk_operation import bulk_operation_guard
 from app.services.tab_state import tab_state_store
@@ -79,8 +75,6 @@ def _agent_runtime(*, inference: InferenceAdapter) -> AgentRuntime:
         context_builder=agent_context_builder,
         inference=inference,
         model_policy=SingleModelPolicy(),
-        permission_policy=AgentPermissionPolicy(),
-        tool_registry=read_only_agent_tools,
         trace_store=agent_trace_store,
         provider_label=inference.provider_label,
     )
@@ -136,23 +130,6 @@ class CloudPrivacyPreviewResponse(BaseModel):
     hidden_note_ids: list[str]
 
 
-class AiSkillDefaultResponse(BaseModel):
-    skill_id: str
-    title: str
-    description: str
-    trigger_action: str
-    preference_key: str
-    content: str
-    superseded_preference_keys: list[str]
-
-
-class AiPromptDefaultsResponse(BaseModel):
-    system_prompt: str
-    final_response_prompt: str
-    tool_result_prompt: str
-    skills: list[AiSkillDefaultResponse]
-
-
 class AiChatRequest(BaseModel):
     model_config = ConfigDict(extra="forbid")
 
@@ -384,32 +361,6 @@ def reset_openai_cost(
     return _openai_cost_response(openai_cost_tracker.snapshot())
 
 
-@router.get("/prompts/defaults", response_model=AiPromptDefaultsResponse)
-def get_ai_prompt_defaults(
-    response: Response,
-    token: Annotated[str, Depends(require_request_auth_token)],
-) -> AiPromptDefaultsResponse:
-    del token
-    response.headers["Cache-Control"] = "no-store"
-    return AiPromptDefaultsResponse(
-        system_prompt=DEFAULT_AGENT_PROMPTS.system_prompt,
-        final_response_prompt=DEFAULT_AGENT_PROMPTS.final_response_prompt,
-        tool_result_prompt=DEFAULT_AGENT_PROMPTS.tool_result_prompt,
-        skills=[
-            AiSkillDefaultResponse(
-                skill_id=skill.skill_id,
-                title=skill.title,
-                description=skill.description,
-                trigger_action=skill.trigger_action,
-                preference_key=skill.preference_key,
-                content=skill.content,
-                superseded_preference_keys=list(skill.superseded_preference_keys),
-            )
-            for skill in DEFAULT_AGENT_SKILLS.skills
-        ],
-    )
-
-
 @router.post(
     "/cloud-privacy/preview",
     response_model=CloudPrivacyPreviewResponse,
@@ -637,8 +588,8 @@ def stream_ai_chat(
         session_key=session_key,
     )
     preferences = load_client_preferences(token=token)
-    prompts = resolve_agent_prompt_set(preferences=preferences)
-    skills = resolve_agent_skill_set(preferences=preferences)
+    prompts = DEFAULT_AGENT_PROMPTS
+    skills = DEFAULT_AGENT_SKILLS
     retrieval_settings = resolve_agent_retrieval_settings(
         preferences=preferences,
         provider=payload.provider,
@@ -731,11 +682,11 @@ async def _stream_runtime_events(
                approx_input_tokens=initial_input_tokens, output_tokens_received=0, duration_ms=0.0)
     yield dict(type='action_status', action=action, status='completed', label=ready_label,
                approx_input_tokens=initial_input_tokens, output_tokens_received=0, duration_ms=0.0)
-    events = runtime.stream_scoped(session_key=session_key, base_url=base_url,
+    events = runtime.stream_agent(session_key=session_key, base_url=base_url,
             selected_model=payload.model, thinking_level=payload.thinking_level,
             canonical_messages=provider_messages, prompts=prompts, skills=skills,
             retrieval_settings=retrieval_settings, web_settings=web_settings,
-            frozen_scope=frozen_scope, tag_handler=tagging_run.stream)
+            frozen_scope=frozen_scope, tagging_run=tagging_run)
     try:
         async for event in events:
             yield event
@@ -771,6 +722,8 @@ class BulkAnswerRequest(BaseModel):
         "prefix_focus_both",
         "summarize_all",
         "use_prefix",
+        "yes",
+        "no",
     ]
 
 
@@ -820,6 +773,4 @@ def manage_bulk_proposals(payload: BulkManageRequest, token: Annotated[str, Depe
 @router.get("/proposals/settings")
 def get_tagging_settings(token: Annotated[str, Depends(require_request_auth_token)]):
     preferences = load_client_preferences(token=token)
-    return {"policy": preferences.get(TAGGING_POLICY_KEY, ""),
-            "prompt": preferences.get(TAGGING_PROMPT_KEY, DEFAULT_TAGGING_PROMPT),
-            "default_prompt": DEFAULT_TAGGING_PROMPT}
+    return {"policy": preferences.get(TAGGING_POLICY_KEY, "")}

{metalist-0.10.0 → metalist-0.12.0}/app/api/routes/auth.py

@@ -713,7 +713,8 @@ def auth_status(
         "version": VERSION,
         "database_user_version": database_user_version,
         "authenticated": token is not None,
-        "has_password": auth.has_password(),
+        # Same answer as AuthService.has_password(), from the row already read.
+        "has_password": settings is not None and bool(settings.encryption_enabled),
         "encryption_enabled": settings.encryption_enabled if settings else False,
         "encryption_algorithm": settings.encryption_algorithm if settings else None,
         "vault_version": settings.vault_version if settings else None,

{metalist-0.10.0 → metalist-0.12.0}/app/api/routes/notes.py

@@ -241,28 +241,25 @@ def view_diff(payload: ViewDiffRequest):
     search = payload["search"]
     tab_id = payload["tabId"]
     undo_context = payload["undoContext"]
-    client_note_uuid_hashes = payload["clientNoteUuidHashes"]
-    anchor_root_id = payload["visibleRootAnchorId"]
+    tab_view_empty = payload["tabViewEmpty"]
+    visible_top_root_id = payload["visibleTopRootId"]
+    visible_bottom_root_id = payload["visibleBottomRootId"]
     is_untagged_view = payload["isUntaggedView"]
     if not isinstance(is_untagged_view, bool):
         raise TypeError("isUntaggedView must be a boolean")
+    if not isinstance(tab_view_empty, bool):
+        raise TypeError("tabViewEmpty must be a boolean")
 
     sort_mode = _resolve_tab_sort_mode(tab_id)
-    if not isinstance(client_note_uuid_hashes, dict):
-        raise TypeError("clientNoteUuidHashes must be an object")
-
     normalized_search = search
     if isinstance(normalized_search, str) and normalized_search == "":
         normalized_search = None
     if normalized_search is not None:
         if not isinstance(normalized_search, str):
             raise HTTPException(status_code=400, detail="search must be a string or null")
-        capture = CapturedExceptionContext(InputRejected, boundary='app/api/routes/notes.py:view_diff:capture')
-        with capture:
-            parse_search_query(normalized_search)
-        if capture.captured_exception is not None:
-            exc = capture.captured_exception
-            raise HTTPException(status_code=400, detail=str(exc)) from exc
+        # Validated before anything changes; a search that does not parse is
+        # answered as rejected input (main.py), shown as a polite warning.
+        parse_search_query(normalized_search)
 
     maybe_reset_on_context(client_id, undo_context)
 
@@ -278,164 +275,63 @@ def view_diff(payload: ViewDiffRequest):
         if not note_store.has_note(normalized_editing_note_id):
             normalized_editing_note_id = None
 
-    # Known hashes plus a viewport anchor so the server can extend the window
-    client_hashes = {
-        k: v for k, v in client_note_uuid_hashes.items() if k
-    }
-    # Fallback: if client didn't provide an anchor, use the last known root from cached state
-    cache_key = {
-        "client_id": client_id,
-        "tab_id": tab_id,
-        "search": normalized_search,
-        "sort_mode": sort_mode,
-        "is_untagged_view": is_untagged_view,
-    }
-    cached_state = view_cache.get(**cache_key)
-    if not anchor_root_id and cached_state and client_hashes:
-        last_roots = list(cached_state.children_by_parent.get(None, []))
-        if last_roots:
-            anchor_root_id = last_roots[-1]
+    # The server keeps each tab's warm view (what that browser tab displays),
+    # so the browser sends only where it is. A tab with no warm view, or one
+    # whose browser shows nothing for it, gets its initial window.
+    warm_view = view_cache.get(client_id=client_id, tab_id=tab_id)
+    if tab_view_empty:
+        warm_view = None
+    client_known_note_ids: set[str] = set()
+    # The tab's previous root order: a sorted tab keeps the edited note's root there.
+    previous_root_ids: list[str] = []
+    if warm_view is not None:
+        client_known_note_ids = set(warm_view.hash_by_id)
+        if None in warm_view.children_by_parent:
+            previous_root_ids = warm_view.children_by_parent[None]
 
     state = build_view_state(
         editing_note_id=normalized_editing_note_id,
         search=normalized_search,
         sort_mode=sort_mode,
-        client_known_note_ids=set(client_hashes.keys()),
-        client_seen_root_ids=set(),
-        anchor_root_id=anchor_root_id,
+        client_known_note_ids=client_known_note_ids,
+        previous_root_ids=previous_root_ids,
+        visible_top_root_id=visible_top_root_id,
+        visible_bottom_root_id=visible_bottom_root_id,
         is_untagged_view=is_untagged_view,
     )
     update_uuid = get_current_sync_uuid()
     root_ids = list(state.children_by_parent.get(None, []))
-    root_count_total = state.metadata["rootCountTotal"]
-    search_root_count_total = state.metadata["searchRootCountTotal"]
-
-    client_note_ids = set(client_hashes.keys())
-    current_note_ids = set(state.hash_by_id.keys())
-    if cached_state is None:
-        cached_note_ids = set()
-    else:
-        cached_note_ids = set(cached_state.hash_by_id.keys())
-    extra_client_ids = _unknown_client_note_ids(
-        client_note_ids=client_note_ids,
-        current_note_ids=current_note_ids,
-        cached_note_ids=cached_note_ids,
-    )
-    force_full_snapshot = bool(extra_client_ids)
-    if force_full_snapshot:
-        logger.info(
-            "notes.view forcing full snapshot (client has unknown ids): extra_count=%s",
-            len(extra_client_ids),
-        )
-
-    client_has_state = bool(client_hashes)
-
-    if not cached_state or force_full_snapshot:
-        view_cache.set(state=state, **cache_key)
-        if force_full_snapshot:
-            filtered_notes = dict(state.payloads)
-        else:
-            filtered_notes = {
-                note_id: data
-                for note_id, data in state.payloads.items()
-                if client_hashes.get(note_id) != data.get("hash")
-            }
-
-        # Optimization: when the server cache is cold but the client already has a
-        # complete, matching hash map for the visible window, avoid resending the
-        # full structure + note payloads. This is common when a new tab is created
-        # by cloning the existing DOM.
-        if client_has_state and not filtered_notes and not force_full_snapshot:
-            response_snapshot = {
-                "diffOps": [],
-                "notes": {},
-                "locks": state.locks,
-                "rootIds": root_ids,
-                "lockDiffs": {},
-                "updateUUID": update_uuid,
-                "version": VERSION,
-                "currentClientId": client_id,
-                "searchQuery": search,
-                "sortMode": sort_mode,
-                "isUntaggedView": is_untagged_view,
-                "rootCountTotal": root_count_total,
-                "searchRootCountTotal": search_root_count_total,
-                "rootSortBuckets": state.metadata["rootSortBuckets"],
-                "editingNoteId": normalized_editing_note_id,
-            }
-            return {"snapshot": response_snapshot, "updateUUID": update_uuid}
-
-        response_snapshot = {
-            "structure": state.structure,
-            "notes": filtered_notes,
-            "locks": state.locks,
-            "rootIds": root_ids,
-            "updateUUID": update_uuid,
-            "version": VERSION,
-            "currentClientId": client_id,
-            "searchQuery": search,
-            "sortMode": sort_mode,
-            "isUntaggedView": is_untagged_view,
-            "rootCountTotal": root_count_total,
-            "searchRootCountTotal": search_root_count_total,
-            "rootSortBuckets": state.metadata["rootSortBuckets"],
-            "editingNoteId": normalized_editing_note_id,
-        }
-        return {"snapshot": response_snapshot, "updateUUID": update_uuid}
-
-    if not client_has_state:
-        view_cache.set(state=state, **cache_key)
-        filtered_notes = {
-            note_id: data
-            for note_id, data in state.payloads.items()
-            if client_hashes.get(note_id) != data.get("hash")
-        }
-        response_snapshot = {
-            "structure": state.structure,
-            "notes": filtered_notes,
-            "locks": state.locks,
-            "rootIds": root_ids,
-            "updateUUID": update_uuid,
-            "version": VERSION,
-            "currentClientId": client_id,
-            "searchQuery": search,
-            "sortMode": sort_mode,
-            "isUntaggedView": is_untagged_view,
-            "rootCountTotal": root_count_total,
-            "searchRootCountTotal": search_root_count_total,
-            "rootSortBuckets": state.metadata["rootSortBuckets"],
-            "editingNoteId": normalized_editing_note_id,
-        }
-        return {"snapshot": response_snapshot, "updateUUID": update_uuid}
-
-    diff_ops = generate_diff_ops(cached_state, state)
-    note_updates = {
-        note_id: payload
-        for note_id, payload in state.payloads.items()
-        if cached_state.hash_by_id.get(note_id) != payload["hash"]
-    }
-
-    view_cache.set(state=state, **cache_key)
-
-    lock_diff = _compute_lock_diff(cached_state.locks, state.locks)
-
+    view_cache.set(client_id=client_id, tab_id=tab_id, state=state)
     response_snapshot = {
-        "diffOps": diff_ops,
-        "notes": note_updates,
+        "notes": {},
         "locks": state.locks,
         "rootIds": root_ids,
-        "lockDiffs": lock_diff,
         "updateUUID": update_uuid,
         "version": VERSION,
         "currentClientId": client_id,
         "searchQuery": search,
         "sortMode": sort_mode,
         "isUntaggedView": is_untagged_view,
-        "rootCountTotal": root_count_total,
-        "searchRootCountTotal": search_root_count_total,
+        "rootCountTotal": state.metadata["rootCountTotal"],
+        "searchRootCountTotal": state.metadata["searchRootCountTotal"],
         "rootSortBuckets": state.metadata["rootSortBuckets"],
+        "rootWindowStart": state.metadata["rootWindowStart"],
+        "rootBandMargin": state.metadata["rootBandMargin"],
+        "rootSortKeyBeforeWindow": state.metadata["rootSortKeyBeforeWindow"],
         "editingNoteId": normalized_editing_note_id,
     }
+    if warm_view is None:
+        response_snapshot["structure"] = state.structure
+        response_snapshot["notes"] = dict(state.payloads)
+        return {"snapshot": response_snapshot, "updateUUID": update_uuid}
+
+    response_snapshot["diffOps"] = generate_diff_ops(warm_view, state)
+    response_snapshot["notes"] = {
+        note_id: note_payload
+        for note_id, note_payload in state.payloads.items()
+        if note_id not in warm_view.hash_by_id or warm_view.hash_by_id[note_id] != note_payload["hash"]
+    }
+    response_snapshot["lockDiffs"] = _compute_lock_diff(warm_view.locks, state.locks)
     return {"snapshot": response_snapshot, "updateUUID": update_uuid}
 
 
@@ -501,6 +397,11 @@ def create_new_tab(payload: CreateNewTabRequest) -> Dict[str, object]:
         response = tab_state_store.create_tab(copy_from_tab_id=copy_from_tab_id)
     if capture.captured_exception is not None:
         raise HTTPException(status_code=400, detail="Invalid or stale tab state") from capture.captured_exception
+    # The browser clones the source tab's DOM into the new tab, so the new tab
+    # starts from the source tab's warm view.
+    view_cache.copy_tab(
+        client_id=payload["clientId"], source_tab_id=copy_from_tab_id, target_tab_id=response["newTabId"],
+    )
     return response
 
 
@@ -790,16 +691,6 @@ def _compute_lock_diff(previous: Dict[str, str], current: Dict[str, str]) -> Dic
     return diff
 
 
-def _unknown_client_note_ids(
-    *,
-    client_note_ids: set[str],
-    current_note_ids: set[str],
-    cached_note_ids: set[str],
-) -> set[str]:
-    stale_deleted_ids = client_note_ids - current_note_ids
-    return stale_deleted_ids - cached_note_ids
-
-
 # Stub endpoints for the rest of the notes API (501 Not Implemented)
 
 def _not_impl(exc: Exception) -> None:

{metalist-0.10.0 → metalist-0.12.0}/app/api/routes/ontology.py

@@ -11,7 +11,6 @@ from app.api.transactions import transactional_route
 from app.services.search_index import search_index
 from app.services.note_store import store as note_store
 from app.services.sync import generate_new_uuid
-from app.services.view_cache import view_cache
 from app.services.tag_ontology import RegexAtom, TagAtom, TextAtom, parse_rules_text
 from app.services.ontology_rules_store import (
     build_direct_edge_rule_map,
@@ -155,7 +154,6 @@ def create_rule(request: Request, payload: RuleTextRequest) -> dict:
     rule_id, normalized = create_rule_line(text=text, token=token)
     if note_store.loaded:
         note_store.rebuild_search_index_tag_terms_for_notes(candidate_note_ids)
-        view_cache.clear()
         update_uuid = generate_new_uuid()
         return {"id": rule_id, "text": normalized, "updateUUID": update_uuid}
     return {"id": rule_id, "text": normalized}
@@ -193,7 +191,6 @@ def update_rule(request: Request, rule_id: int, payload: RuleTextRequest) -> dic
     updated_id, normalized = update_rule_line(rule_id=rule_id, text=text, token=token)
     if note_store.loaded:
         note_store.rebuild_search_index_tag_terms_for_notes(candidate_note_ids)
-        view_cache.clear()
         update_uuid = generate_new_uuid()
         return {"id": updated_id, "text": normalized, "updateUUID": update_uuid}
     return {"id": updated_id, "text": normalized}
@@ -224,7 +221,6 @@ def delete_rule(rule_id: int) -> dict:
     delete_rule_line(rule_id=rule_id)
     if note_store.loaded:
         note_store.rebuild_search_index_tag_terms_for_notes(candidate_note_ids)
-        view_cache.clear()
         update_uuid = generate_new_uuid()
         return {"ok": True, "updateUUID": update_uuid}
     return {"ok": True}

{metalist-0.10.0 → metalist-0.12.0}/app/api/transactions.py

@@ -125,6 +125,8 @@ def assert_mutation_routes_wrapped(app: FastAPI) -> None:
 def _check_bulk_guard(endpoint_name: str) -> None:
     if endpoint_name in _STORAGE_TRANSITIONS and bulk_operation_guard.active_mutations > 1:
         raise HTTPException(status_code=409, detail="Wait for the current request to finish before changing namespace storage.")
-    permitted = {"answer_bulk_question", "preview_cloud_privacy", "put_ai_debug_details"}
+    # Preferences never touch notes, and every operation reads them once when it
+    # starts, so saving them (e.g. the chat panel width) cannot disturb it.
+    permitted = {"answer_bulk_question", "preview_cloud_privacy", "put_ai_debug_details", "put_client_preferences"}
     if bulk_operation_guard.operation_id and endpoint_name not in permitted:
         raise HTTPException(status_code=409, detail="A bulk operation is running. Wait or cancel it before changing the app.")

{metalist-0.10.0 → metalist-0.12.0}/app/db/notes_sql.py

@@ -3,7 +3,6 @@
 from __future__ import annotations
 
 import sqlite3
-import time
 from datetime import datetime
 from typing import Iterable, Optional, Any
 
@@ -12,6 +11,9 @@ from .schema import NOTES_TABLE
 from app.services.hierarchy import validate_database_parent
 
 
+_DELETE_CHUNK_SIZE = 900
+
+
 def _conn(connection: GuardedConnection | sqlite3.Connection) -> sqlite3.Connection:
     raw_connection = getattr(connection, "raw_connection", None)
     if isinstance(raw_connection, sqlite3.Connection):
@@ -403,14 +405,13 @@ def delete_notes(
     identifiers = list(note_ids)
     if not identifiers:
         return
-    placeholders = ",".join(["?"] * len(identifiers))
-    sql = f"DELETE FROM {NOTES_TABLE} WHERE id IN ({placeholders})"
-    print('DEBUG CHECKPOINT 1')
-    t1 = time.perf_counter()
     conn = _conn(connection)
-    conn.execute(sql, tuple(identifiers))
-    t2 = time.perf_counter()
-    print(f'DEBUG CHECKPOINT 2 took {(t2-t1)} seconds')
+    # Chunk below SQLite's bound-variable limit (999 on older builds) so large
+    # subtree deletes do not fail; the caller's transaction keeps it atomic.
+    for start in range(0, len(identifiers), _DELETE_CHUNK_SIZE):
+        chunk = identifiers[start : start + _DELETE_CHUNK_SIZE]
+        placeholders = ",".join(["?"] * len(chunk))
+        conn.execute(f"DELETE FROM {NOTES_TABLE} WHERE id IN ({placeholders})", tuple(chunk))
 
 
 def fetch_note(

{metalist-0.10.0 → metalist-0.12.0}/app/encryption_audit.py

@@ -679,9 +679,18 @@ def _audit_payloads(
         needed_columns = {spec.value_column, spec.nonce_column, spec.tag_column}
         if not needed_columns.issubset(actual_columns):
             continue
+        value_expression = spec.value_column
+        if spec.storage_kind == "bytes":
+            # Binary checks need only the storage type: stand an empty BLOB in
+            # for each BLOB so file contents are never read into memory.
+            value_expression = (
+                f"CASE WHEN typeof({spec.value_column}) = 'blob' THEN zeroblob(0) "
+                f"ELSE {spec.value_column} END AS {spec.value_column}"
+            )
+        # Stream rows: payload tables can be far larger than memory should hold.
         rows = connection.execute(
-            f"SELECT {spec.value_column}, {spec.nonce_column}, {spec.tag_column} FROM {spec.table}"
-        ).fetchall()
+            f"SELECT {value_expression}, {spec.nonce_column}, {spec.tag_column} FROM {spec.table}"
+        )
         for row in rows:
             _audit_payload_row(
                 row=row,

{metalist-0.10.0 → metalist-0.12.0}/app/exception_boundaries.py

@@ -14,7 +14,9 @@ CAPTURE_BOUNDARIES = {
     'app/services/agent/web_fetch.py:_extract_pdf_content:pdf_capture': ('PyPdfError',),
     'app/services/agent/web_fetch.py:_decode_web_text:encoding_capture': ('LookupError',),
     'app/services/agent/web_fetch.py:handle_starttag:join_capture': ('ValueError',),
-    'app/services/agent/runtime.py:_open_web_action:evidence_capacity_capture': ('WebEvidenceCapacityError',),
+    'app/services/agent/web_actions.py:open_web_pages:evidence_capacity_capture': ('WebEvidenceCapacityError',),
+    # A model's tool call is untrusted input; rejected arguments are explained back to the model.
+    'app/services/agent/agent_tools.py:parse_tool_call:arguments_capture': ('ValidationError',),
     # In-app updates translate only external transport, installation eligibility and job lookup errors.
     'app/services/app_updates.py:check_for_update:eligibility': ('AppUpdateRejected',),
     'app/services/app_updates.py:job_path:validation': ('ValueError',),