MetaList 0.13.0__tar.gz → 0.14.0__tar.gz

{metalist-0.13.0/metalist.egg-info → metalist-0.14.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: metalist
-Version: 0.13.0
+Version: 0.14.0
 Summary: A minimalist single-user note-taking app with SSR, fast in-memory tree operations, and efficient sync.
 Project-URL: Homepage, https://github.com/evolvingstuff/metalist
 Project-URL: Repository, https://github.com/evolvingstuff/metalist
@@ -23,6 +23,7 @@ Requires-Dist: pydantic==2.13.4
 Requires-Dist: pypdf==6.19.0
 Requires-Dist: python-dotenv==1.2.2
 Requires-Dist: python-multipart==0.0.32
+Requires-Dist: rich==14.3.4
 Requires-Dist: starlette==1.3.1
 Requires-Dist: tqdm==4.70.0
 Requires-Dist: tree-sitter==0.25.2
@@ -49,6 +50,15 @@ A minimalist single-user note-taking app focused on server-side rendering (SSR),
 - Multi-tab search contexts with server-persisted scroll/search state (survives browser restarts)
 - Manual namespace backups/restores to a user-selected backup folder with retention controls
 
+## Changes in 0.14.0
+
+- A new login screen: one dark screen with the MetaList logo. The namespace, password and OK fade in together; once the password is accepted, the loading progress slides in with the current step and the seconds elapsed. When the first login after an update backs up and upgrades the namespace, a note under OK says so. The Session locked page has the same look, and there is no white flash between them.
+- Web link titles: links to Reddit (including share links), YouTube, Vimeo, TikTok, Spotify and SoundCloud get their real titles. Lookups are paced per site, so a note full of links no longer trips a site's rate limit. Login, consent and site-name-only titles ("Sign in", "Reddit") show the link instead. The new command palette action Retry failed link titles asks every failed link again, with a progress dialog.
+- Quoted search also matches link titles and the URLs hidden behind link labels, and the AI sees those URLs too. Pasting into a quoted search inserts the text as copied.
+- `[[note id]]` is always a link, even in a note with a `[[ ]]` formatting tag.
+- The startup output in the terminal is easier to read: the version, a check mark per check, and each namespace's URLs lined up.
+- Fixed: clicking the AI chat's $ or eye button twice quickly crashed with "Redundant state change".
+
 ## Changes in 0.13.0
 
 - Dictation: text from speech-to-text tools such as Superwhisper, pasted into the search bar or any tag field, becomes your existing tags ("neural network" gives `neural-network`). Say "quote … end quote" for text, "minus" to exclude, "at" before meta tags such as `@todo`. In a note, the words after "start tags" go to its tag bar. The phrases are set in Dictation Settings, and one undo restores what was pasted.

{metalist-0.13.0 → metalist-0.14.0}/README.md

@@ -12,6 +12,15 @@ A minimalist single-user note-taking app focused on server-side rendering (SSR),
 - Multi-tab search contexts with server-persisted scroll/search state (survives browser restarts)
 - Manual namespace backups/restores to a user-selected backup folder with retention controls
 
+## Changes in 0.14.0
+
+- A new login screen: one dark screen with the MetaList logo. The namespace, password and OK fade in together; once the password is accepted, the loading progress slides in with the current step and the seconds elapsed. When the first login after an update backs up and upgrades the namespace, a note under OK says so. The Session locked page has the same look, and there is no white flash between them.
+- Web link titles: links to Reddit (including share links), YouTube, Vimeo, TikTok, Spotify and SoundCloud get their real titles. Lookups are paced per site, so a note full of links no longer trips a site's rate limit. Login, consent and site-name-only titles ("Sign in", "Reddit") show the link instead. The new command palette action Retry failed link titles asks every failed link again, with a progress dialog.
+- Quoted search also matches link titles and the URLs hidden behind link labels, and the AI sees those URLs too. Pasting into a quoted search inserts the text as copied.
+- `[[note id]]` is always a link, even in a note with a `[[ ]]` formatting tag.
+- The startup output in the terminal is easier to read: the version, a check mark per check, and each namespace's URLs lined up.
+- Fixed: clicking the AI chat's $ or eye button twice quickly crashed with "Redundant state change".
+
 ## Changes in 0.13.0
 
 - Dictation: text from speech-to-text tools such as Superwhisper, pasted into the search bar or any tag field, becomes your existing tags ("neural network" gives `neural-network`). Say "quote … end quote" for text, "minus" to exclude, "at" before meta tags such as `@todo`. In a note, the words after "start tags" go to its tag bar. The phrases are set in Dictation Settings, and one undo restores what was pasted.

{metalist-0.13.0 → metalist-0.14.0}/app/api/middleware/auth.py

@@ -41,6 +41,7 @@ class AuthMiddleware(BaseHTTPMiddleware):
     NO_TOKEN_REFRESH_PATHS = [
         f"{API_PREFIX}/auth/status",  # Polling service pings this for connectivity
         f"{API_PREFIX}/reminders/evaluate",  # Reminder polling is not user-initiated activity
+        f"{API_PREFIX}/notes/link-titles/retry",  # The retry dialog polls its progress
     ]
     
     # Note: /api/notes/* paths are NOT in this list - they require auth when password is set

{metalist-0.13.0 → metalist-0.14.0}/app/api/routes/auth.py

@@ -97,6 +97,7 @@ from app.services.client_state_service import save_client_preferences
 from app.services.client_state_service import save_command_palette_usage
 from app.services.openai_credentials import openai_credential_store
 from app.services.input_errors import NamespaceInputRejected
+from app.services.link_title_retry import stop_link_title_retry
 
 
 router = APIRouter(prefix="/auth", tags=["auth2"])
@@ -595,6 +596,9 @@ def logout(
     openai_credential_store.clear_session(session_key=session_key)
     token_service.revoke_token(token)
     shell_session_service.reset()
+    # Lock and login end a retry through the runtime generation; a passwordless
+    # logout does not change it, so stop the retry here.
+    stop_link_title_retry()
     view_cache.clear()
     reset_all_undo_state()
     reset_sync_state()
@@ -712,6 +716,8 @@ def auth_status(
     return {
         "version": VERSION,
         "database_user_version": database_user_version,
+        # The next login backs up and upgrades this database (the login screen says so).
+        "database_upgrade_pending": database_user_version < CURRENT_DATABASE_VERSION,
         "authenticated": token is not None,
         # Same answer as AuthService.has_password(), from the row already read.
         "has_password": settings is not None and bool(settings.encryption_enabled),

{metalist-0.13.0 → metalist-0.14.0}/app/api/routes/notes.py

@@ -68,6 +68,11 @@ from app.usecases.create_child import CmdCreateChild
 from app.usecases.create_file_preview_child import CmdCreateFilePreviewChild
 from app.usecases.update_content import CmdUpdateContent
 from app.usecases.prefetch_link_titles import CmdPrefetchLinkTitles
+from app.services.link_title_retry import (
+    link_title_retry_snapshot,
+    start_link_title_retry,
+    stop_link_title_retry,
+)
 from app.usecases.add_selected_text_tag import CmdAddSelectedTextTag
 from app.usecases.tag_proposals import (
     CmdAcceptTagProposal,
@@ -159,6 +164,26 @@ def prefetch_link_titles(request: Request, draft: LinkTitlePrefetchRequest) -> d
     return CmdPrefetchLinkTitles(content=draft.content, tags=draft.tags).execute()
 
 
+@router.get("/notes/link-titles/retry")
+def link_title_retry_progress(request: Request) -> dict[str, object]:
+    require_request_auth_token(request)
+    return link_title_retry_snapshot()
+
+
+@router.post("/notes/link-titles/retry")
+@transactional_route
+def start_link_title_retry_route(request: Request) -> dict[str, object]:
+    require_request_auth_token(request)
+    return start_link_title_retry()
+
+
+@router.post("/notes/link-titles/retry/stop")
+@transactional_route
+def stop_link_title_retry_route(request: Request) -> dict[str, object]:
+    require_request_auth_token(request)
+    return stop_link_title_retry()
+
+
 def _require_note_present(note_id: str, *, context: str) -> None:
     if not isinstance(context, str) or not context:
         raise ValueError("context must be a non-empty string")

{metalist-0.13.0 → metalist-0.14.0}/app/config.py

@@ -45,7 +45,6 @@ def _env_int(name: str, default: int) -> int:
 CRASH_SERVER_ON_FAIL = _env_flag("CRASH_SERVER_ON_FAIL", True)
 DEV_ENFORCE_INTEGRITY_CHECKS = _env_flag("DEV_ENFORCE_INTEGRITY_CHECKS", False)
 DISABLE_UNDO_SNAPSHOT = _env_flag("DISABLE_UNDO_SNAPSHOT", True)
-STARTUP_ANIMATION_ENABLED = _env_flag("STARTUP_ANIMATION_ENABLED", False)
 
 # Tag suggestions
 TAG_SUGGESTION_CONNECTORS = "-_/."

{metalist-0.13.0 → metalist-0.14.0}/app/encryption_audit.py

@@ -94,6 +94,20 @@ class EncryptionAuditReport:
     def startup_allowed(self) -> bool:
         return self.namespace_count > 0 and len(self.fatal_findings) == 0
 
+    def namespace_statuses(self) -> list[tuple[str, str]]:
+        """(namespace, PASS | MIGRATION REQUIRED | FAIL | SKIPPED (not encrypted)) per namespace."""
+        statuses: list[tuple[str, str]] = []
+        for result in self.results:
+            result_status = "SKIPPED (not encrypted)"
+            if result.is_encrypted:
+                result_status = "PASS"
+                if result.findings:
+                    result_status = "MIGRATION REQUIRED"
+                    if any(not finding.is_migration_deferred for finding in result.findings):
+                        result_status = "FAIL"
+            statuses.append((result.namespace, result_status))
+        return statuses
+
     def render_text(self) -> str:
         status = "FAIL"
         if self.passed:
@@ -110,15 +124,8 @@ class EncryptionAuditReport:
             ),
             f"Sensitive payloads checked: {self.checked_payload_count}",
         ]
-        for result in self.results:
-            result_status = "SKIPPED (not encrypted)"
-            if result.is_encrypted:
-                result_status = "PASS"
-                if result.findings:
-                    result_status = "MIGRATION REQUIRED"
-                    if any(not finding.is_migration_deferred for finding in result.findings):
-                        result_status = "FAIL"
-            lines.append(f"- {result.namespace}: {result_status}")
+        for namespace, result_status in self.namespace_statuses():
+            lines.append(f"- {namespace}: {result_status}")
         if self.findings:
             lines.append("Findings:")
             for finding in self.findings:

{metalist-0.13.0 → metalist-0.14.0}/app/exception_boundaries.py

@@ -26,6 +26,8 @@ CAPTURE_BOUNDARIES = {
     'app/api/routes/app_updates.py:update_status:lookup': ('AppUpdateRejected', 'FileNotFoundError'),
     # Release smoke polls only its own disposable HTTP listeners during an actual update.
     'scripts/smoke_self_update.py:_has_updated_namespace:probe_capture': ('HTTPError',),
+    # Release smoke cleanup: on Windows an exiting process refuses termination; the wait then checks it stopped.
+    'scripts/smoke_installed_package.py:_terminate_on_windows:exit_capture': ('ProcessLookupError', 'PermissionError'),
     # A child can exit between poll and terminate; hung children must be killed and reaped.
     'app/services/namespace_switcher.py:_stop_failed_namespace_launch:terminate_capture': ('ProcessLookupError',),
     'app/services/namespace_switcher.py:_stop_failed_namespace_launch:wait_capture': ('TimeoutExpired',),
@@ -125,6 +127,12 @@ CAPTURE_BOUNDARIES = {
     # Handle expected external I/O, provider, image or LaTeX parsing failure.
     'app/services/link_titles.py:fetch_link_title:target_capture': ('PublicHttpTargetRejected',),
     # Handle expected external I/O, provider, image or LaTeX parsing failure.
+    'app/services/link_titles.py:_fetch_oembed_title:target_capture': ('PublicHttpTargetRejected',),
+    # Handle expected external I/O, provider, image or LaTeX parsing failure.
+    'app/services/link_titles.py:_fetch_oembed_title:json_capture': ('JSONDecodeError', 'UnicodeDecodeError'),
+    # Handle expected external I/O, provider, image or LaTeX parsing failure.
+    'app/services/link_titles.py:_download_oembed:capture': ('TimeoutException', 'NetworkError', 'HTTPError', 'TimeoutException', 'NetworkError', 'ProtocolError'),
+    # Handle expected external I/O, provider, image or LaTeX parsing failure.
     'app/services/namespace_deletion_worker.py:_is_process_running:kill_capture': ('ProcessLookupError', 'PermissionError'),
     # Handle expected external I/O, provider, image or LaTeX parsing failure.
     'app/services/namespace_deletion_worker.py:_send_signal_if_running:signal_capture': ('ProcessLookupError',),

{metalist-0.13.0 → metalist-0.14.0}/app/main.py

@@ -16,7 +16,7 @@ from app.api.upload_limits import UploadLimitMiddleware
 from app.presentation.templates import get_templates
 from .api import dev
 from .api.middleware.auth import AuthMiddleware
-from app.config import ACTIVE_NAMESPACE, STARTUP_ANIMATION_ENABLED, VERSION
+from app.config import ACTIVE_NAMESPACE, VERSION
 from .db.session import begin_writer, enable_read_guard
 from .db.schema import initialize_schema
 from .db.migrations import CURRENT_DATABASE_VERSION
@@ -61,6 +61,7 @@ from app.services.diagnostics import track_request
 from app.services.diagnostics import write_encrypted_exception_trace
 from app.security.sensitive_logging import traceback_frame_summary
 from app.api.request_auth import clear_auth_cookie
+from app.presentation.login_page import login_is_certainly_needed
 from app.api.routes.notes import router as api2_router
 from app.api.routes.auth import router as api2_auth_router
 from app.api.routes.app_updates import router as api2_app_updates_router
@@ -463,7 +464,7 @@ async def home(request: Request, db: Annotated[SafeSession, Depends(get_db)]):
             asset_version=ASSET_VERSION,
             page_title=_resolve_page_title(base_title="MetaList"),
             needs_auth=True,
-            startup_animation_enabled=STARTUP_ANIMATION_ENABLED,
+            shows_login_at_once=login_is_certainly_needed(request),
         )
     return template.render(
         request=request,
@@ -472,10 +473,11 @@ async def home(request: Request, db: Annotated[SafeSession, Depends(get_db)]):
         asset_version=ASSET_VERSION,
         page_title=_resolve_page_title(base_title="MetaList"),
         needs_auth=False,
-        startup_animation_enabled=STARTUP_ANIMATION_ENABLED,
+        shows_login_at_once=False,
     )
 
 
+
 @app.get("/maintenance", response_class=HTMLResponse)
 async def maintenance_page(request: Request):
     """Maintenance mode page shown during bulk operations."""

metalist-0.14.0/app/presentation/login_page.py

@@ -0,0 +1,18 @@
+"""Whether the page opens straight on the login screen (docs/AI-SUMMARY.md, Login screen)."""
+
+from __future__ import annotations
+
+from starlette.requests import Request
+
+from app.api.request_auth import AUTH_COOKIE_NAME
+
+
+def login_is_certainly_needed(request: Request) -> bool:
+    """Whether a password namespace's page can open on the login screen at once,
+    with no white page before the browser checks its session: a re-login was asked
+    for (the Session locked page's Go to Login), or the browser has no session."""
+    if not isinstance(request, Request):
+        raise TypeError("request must be a Request")
+    if request.query_params.get("force_reauth") == "1":
+        return True
+    return request.cookies.get(AUTH_COOKIE_NAME) is None

{metalist-0.13.0 → metalist-0.14.0}/app/services/agent/skills/help-dictation.md

@@ -47,6 +47,8 @@ fixed rules, no AI, and it only reacts to pasting: typed text is never changed.
   exclusion phrase ("minus" by default) excludes the next term ("neural network
   minus python" gives `neural-network -python`), and a quoted phrase becomes a text
   search. "not" is an ordinary word unless it is set as the exclusion phrase.
+  With the cursor inside a quoted phrase (after `"`), a paste is not cleaned up:
+  it goes in exactly as copied, on one line, with quote marks escaped.
 - **Tag bar:** words matching no tag become new tags, lowercased unless they look
   like an acronym (`GPT`). Each word is its own tag unless the words together match
   one of the user's tags; a new multi-word tag has to be typed.

{metalist-0.13.0 → metalist-0.14.0}/app/services/agent/skills/help-formatting.md

@@ -41,11 +41,14 @@ Sources: docs/ui/content-formatting.md
 - Standalone bare URLs, pasted URL-only anchors, and Markdown URL-only links can render as compact cached title links (`title · domain`) when the server already has a successful title fetch for that URL. Custom link labels remain unchanged.
 - Compact note-reference previews reuse the same standalone URL rule, including collapsed embeds and expanded embed source links.
 - Unknown, failed, unsupported, or inline URLs render as raw URL links exactly as before. Failed standalone lookups can expose their status/retry timing through the browser's normal hover tooltip.
+- Lookups are polite to each site (the hostname without `www.`): one request to a site at a time, at least 2 seconds apart, so a note full of links to one site does not trip its rate limit. A site that answers HTTP 429 (too many requests) is left alone for its `Retry-After` time (1 minute to 6 hours; 10 minutes when it gives none), and lookups of its other links wait until then without being recorded as failures. The rate-limited link itself is retried after 10 minutes, 1 hour, 6 hours, 1 day, then weekly.
 - Title fetches are server-side background work; note rendering never waits on network I/O, and edit mode always shows the original stored URL. When background fetches complete, the server increments a link-title revision exposed by `/api2/auth/status`; the browser polling loop batches those changes and triggers a view refresh so newly resolved titles appear without a manual page reload.
 - While editing, the existing 500 ms inactivity check observes the current draft and requests title prefetch after it remains unchanged for at least 600 ms (typically 1–1.5 seconds after input). `POST /api2/notes/link-titles/prefetch` uses the same view-formatting eligibility and background fetch cache without saving the draft or replacing editor HTML. Identical drafts are requested once per editing session; typing and pasting restart the pause.
 - Leaving edit mode always completes a view refresh, including when another view request is in flight. Title revision refreshes defer while editing, then require a refresh so slower lookups appear automatically without disturbing typing.
-- Title extraction is generic HTML metadata parsing (`og:title`, `twitter:title`, `meta name=title`, `itemprop=name`, and `<title>`). It does not use domain-specific APIs.
-- Challenge/interstitial titles such as verification, browser-check, or access-denied pages are treated as `no_title` and cleared from existing cache rows on startup/login so they fall back to the raw URL instead of being displayed as valid page titles.
+- Links to Reddit, YouTube (including `youtu.be`), Vimeo, TikTok, Spotify and SoundCloud first ask the site's public oEmbed service, the preview service those sites provide, for the title. It gives the real post or video title where the page itself is blocked for automated requests or built by JavaScript. The request is paced like any request to that site. A link that forwards elsewhere (a Reddit share link such as `/r/…/s/…` forwards to its post) is also looked up at each address it forwards to. When the service has no usable answer (not a post or video, removed, private), the page is read as for any other site. X is not included: its oEmbed service returns no title.
+- Otherwise, title extraction is generic HTML metadata parsing (`og:title`, `twitter:title`, `meta name=title`, `itemprop=name`, and `<title>`).
+- A title that is only the site's name ("Reddit" for reddit.com, "YouTube", "BBC" for bbc.co.uk, or the domain itself) says nothing the domain does not; it is treated as no title, so the link shows its URL (Reddit's URLs name the subreddit and post). Reddit's generic page titles ("Reddit - Dive into anything") count as no title too. Saved ones are cleared at the next login.
+- Challenge/interstitial titles such as verification, browser-check, or access-denied pages are treated as `no_title` and cleared from existing cache rows on startup/login so they fall back to the raw URL instead of being displayed as valid page titles. So are login, consent and not-found pages, also when the site adds its name: a title is split at the site-name separators (`|`, `·`, `–`, `—`, and ` - ` with spaces) and is not a real title when a part is only a phrase such as "Sign in", "Log in", "Sign up" or "Page not found" ("Sign in - Google Accounts", "Log in | LinkedIn"), or when it contains "before you continue" (YouTube's consent page) or "log in or sign up". Titles that merely mention these words ("How to sign in to Gmail") are kept.
 - Existing rendered anchors are normalized to open in a new browser tab.
 - Clicking a rendered note link (including its title/domain spans) leaves the note in view mode; links do not initiate note dragging. Links inside the active editor keep normal editing behavior.
 - Internal hash-style anchors used by MetaList note-reference UI are left unchanged so in-app reference navigation still works.
@@ -56,7 +59,7 @@ Sources: docs/ui/content-formatting.md
   - Depth 1–3 is supported (e.g. `{{{...}}}`).
 - Wrappers in content are **only consumed/hidden** in view mode when there is a matching *scoped wrapper tag* in the tag bar.
 - If there is **no matching scoped wrapper tag**, wrappers are treated as literal text and remain visible even out of edit mode.
-- When a matching `[[...]]` scoped wrapper tag is active, that wrapper is treated as formatting syntax instead of a UUID link reference. `![[UUID]]` still renders as an embedded reference.
+- When a matching `[[...]]` scoped wrapper tag is active, `[[...]]` is formatting syntax, except that `[[UUID]]` containing exactly a note or file UUID is always a link. `![[UUID]]` still renders as an embedded reference.
 
 Scoped wrapper tags do not need to be meta tags:
 - Example: tag bar `[foo]` causes all `[...]` regions in the note to render without the brackets in view mode.

{metalist-0.13.0 → metalist-0.14.0}/app/services/agent/skills/help-menus.md

@@ -96,6 +96,7 @@ Opening or dismissing the command palette does not clear undo/redo. Global actio
 - `Attach file`: opens the native file picker, uploads the selected file, and inserts an embedded file reference token into the current note. If no note is active, it creates a new note first.
 - `Add Excalidraw diagram`: attaches a new, empty Excalidraw diagram to the current note (or a new note when none is active) and opens the full-screen diagram editor.
 - `Trim unused files`: deletes file rows whose UUIDs are no longer referenced anywhere in note content. This is the only automatic cleanup path for orphaned attachments.
+- `Retry failed link titles`: asks every web link whose title lookup failed (rate limited, refused, login or verification page, no title, timed out, page not found and other errors) again now. It opens a dialog saying how many links it would ask; nothing runs until its **Retry N links** button (or Enter). Unsupported links (such as PDFs) and private-network links are not retried. It uses the usual polite pacing: one request per site at a time, 2 seconds apart; a site that answers "too many requests" is skipped for the rest of the run and its links keep their normal retry schedule. The same dialog then shows progress: links asked, titles found, what still fails and why, and skipped sites. It does not block the app: closing the dialog (×, Escape or a click outside) leaves the retry running, and running the action again shows its progress instead of starting another. **Stop** drops the lookups not yet started; logging out, locking or logging in also stops it. Titles found appear in notes at the next view refresh.
 - `Prioritize tag to front (global)`: opens a warning modal with single-tag input and suggestions from all root notes. Applying it stably moves all matching root notes to the front of the global root order while preserving relative order inside the matching and non-matching groups. Cmd+Z cannot undo this action; the undo/redo queue is cleared.
 - `Prioritize tag to back (global)`: same as above, but stably moves all matching root notes to the back of the global root order.
 - `Alphabetize root notes A-Z (current view)`: after confirmation, permanently rearranges only root-level notes in the active search context by root-note content. Hidden roots and child notes are not reordered. Cmd+Z cannot undo this action; the undo/redo queue is cleared like a view-context switch.

{metalist-0.13.0 → metalist-0.14.0}/app/services/agent/skills/help-privacy.md

@@ -112,6 +112,14 @@ loudly; known old-version issues may require authenticated migration. This is a
 storage-contract check, not proof of every disk byte being encrypted or a scan
 of all logs/backups/swap. It does not authenticate ciphertext without the key.
 
+Logging in: the login screen shows the MetaList logo with the namespace dropdown,
+the password field and OK. A wrong password shows the reason under OK without
+leaving the form. After the password is accepted, a progress bar shows the
+current loading step and the seconds elapsed. When a database upgrade is due,
+"Backing up and upgrading this namespace…" appears under OK while it checks, and
+that login takes longer. "Session locked" means the session moved to another tab
+or device; Go to Login opens the login screen.
+
 The Add password, Change password, and Remove password menus open forms. Opening
 is not submitting. An encryption explanation alone does not request a form or a
 password change. Never ask for an actual password or API key in chat.

{metalist-0.13.0 → metalist-0.14.0}/app/services/agent/skills/help-references.md

@@ -16,7 +16,7 @@ Sources: docs/ui/references.md
 - Implemented reference syntaxes:
   - `![[UUID]]` = embedded mode
   - `[[UUID]]` = link mode
-- If the note has a matching `[[...]]` scoped wrapper tag (for example `[[@LaTeX]]`), `[[...]]` is parsed as content formatting instead of link mode. Use `![[UUID]]` for embedded references in that case, or use a different formatting wrapper delimiter.
+- `[[...]]` containing exactly a note or file UUID is always a link, even when the note has a matching `[[...]]` scoped wrapper tag (for example `[[@LaTeX]]`); other `[[...]]` text is formatted by that wrapper, and links nested inside it still render.
 - A UUID can resolve to:
   - a note
   - a file attachment

{metalist-0.13.0 → metalist-0.14.0}/app/services/agent/skills/help-releases.md

@@ -5,6 +5,15 @@ README. Changes made after the newest listed version are not described here.
 Compare with installed_version from the help lookup to tell the user whether
 they already have a release. Version info offers updates (see the data topic).
 
+## 0.14.0
+
+- A new login screen: one dark screen with the MetaList logo. The namespace, password and OK fade in together; once the password is accepted, the loading progress slides in with the current step and the seconds elapsed. When the first login after an update backs up and upgrades the namespace, a note under OK says so. The Session locked page has the same look, and there is no white flash between them.
+- Web link titles: links to Reddit (including share links), YouTube, Vimeo, TikTok, Spotify and SoundCloud get their real titles. Lookups are paced per site, so a note full of links no longer trips a site's rate limit. Login, consent and site-name-only titles ("Sign in", "Reddit") show the link instead. The new command palette action Retry failed link titles asks every failed link again, with a progress dialog.
+- Quoted search also matches link titles and the URLs hidden behind link labels, and the AI sees those URLs too. Pasting into a quoted search inserts the text as copied.
+- `[[note id]]` is always a link, even in a note with a `[[ ]]` formatting tag.
+- The startup output in the terminal is easier to read: the version, a check mark per check, and each namespace's URLs lined up.
+- Fixed: clicking the AI chat's $ or eye button twice quickly crashed with "Redundant state change".
+
 ## 0.13.0
 
 - Dictation: text from speech-to-text tools such as Superwhisper, pasted into the search bar or any tag field, becomes your existing tags ("neural network" gives `neural-network`). Say "quote … end quote" for text, "minus" to exclude, "at" before meta tags such as `@todo`. In a note, the words after "start tags" go to its tag bar. The phrases are set in Dictation Settings, and one undo restores what was pasted.

{metalist-0.13.0 → metalist-0.14.0}/app/services/agent/skills/help-search.md

@@ -162,6 +162,15 @@ Text matching is:
 - Case-insensitive (`casefold`).
 - Against **visible text**, extracted by stripping HTML (scripts/styles ignored).
 - Also against tag-bar `/* ... */` comment text (whitespace-normalized).
+- Also against the URL of a web link whose label hides it (for example a link
+  pasted from a web page that shows a video title): the note is searched as
+  "Video title (https://...)".
+- Also against the titles of web pages linked in the note: for each `http(s)` URL
+  in the note (written out, or hidden behind a link label), the page title
+  MetaList has already fetched and stored. Titles are fetched when a URL on its own
+  line is first displayed, so a note matches by title once its title has been
+  fetched; a title fetched later makes the note match from then on. Titles are not
+  available while the namespace is locked. The URL itself remains searchable.
 - A space at the edge of the quotes marks a word boundary on that side: `"fat "` needs
   the word to end there (a space, punctuation or the end of the text follows), so it
   matches "fat cat" and "fat." but not "father"; `" fat"` needs it to start there, so

{metalist-0.13.0 → metalist-0.14.0}/app/services/backlink_index.py

@@ -22,7 +22,7 @@ class BacklinkIndex:
     def upsert(self, note_id: str, content: str, tags: str) -> None:
         assert isinstance(note_id, str) and note_id
         counts = dict(Counter(
-            token.note_id for token in collect_active_reference_tokens(content, tags)
+            token.note_id for token in collect_active_reference_tokens(content)
             if token.note_id != note_id
         ))
         self.remove(note_id)

{metalist-0.13.0 → metalist-0.14.0}/app/services/content_formatting.py

@@ -38,7 +38,7 @@ from app.services.structured_note_renderers import (
 )
 from app.services.footnote_rendering import collect_footnotes, finish_footnotes
 from app.services.latex_rendering import render_latex_to_html
-from app.utils.text_utils import HTMLStripper, strip_html
+from app.utils.text_utils import HTMLStripper, LinkUrlKeepingStripper, strip_html
 from app.services.markdown_rendering import render_markdown_to_html
 from app.services.ontology_rules_store import get_ontology_if_ready
 from app.services.link_titles import display_domain_for_url
@@ -346,8 +346,8 @@ class MetaTagConfig:
     scoped_renderers: Mapping[Tuple[str, int], str]
 
 
-class _AgentNoteText(HTMLStripper):
-    """Preserve visible text and anchor destinations for cached-title lookup."""
+class _AgentNoteText(LinkUrlKeepingStripper):
+    """Visible text with the URLs link labels hide, and anchor destinations for cached-title lookup."""
 
     def __init__(self) -> None:
         super().__init__()
@@ -361,9 +361,15 @@ class _AgentNoteText(HTMLStripper):
                     self.anchor_urls.append(value)
 
 
+def find_plain_text_urls(text: str) -> list[str]:
+    """URLs written out in plain text, in order, without trailing punctuation."""
+    if not isinstance(text, str):
+        raise TypeError(f"text must be a string, got {type(text)}")
+    return [_split_trailing_url_punctuation(match.group(0))[0] for match in _PLAIN_URL_RE.finditer(text)]
+
+
 def _cached_agent_url_titles(text: str, anchor_urls: list[str], title_lookup: Callable[[str], str | None]) -> list[dict[str, str]]:
-    urls = [*anchor_urls, *(_split_trailing_url_punctuation(match.group(0))[0]
-                          for match in _PLAIN_URL_RE.finditer(text))]
+    urls = [*anchor_urls, *find_plain_text_urls(text)]
     seen = set()
     titles = []
     for url in urls:

{metalist-0.13.0 → metalist-0.14.0}/app/services/embedded_references.py

@@ -220,18 +220,15 @@ def replace_reference_token_mode_in_html(
     return updated_content, True
 
 
-def collect_active_reference_tokens(content_html: str, tags: str) -> List[ReferenceToken]:
-    """Exclude square scopes consumed as formatting, just as the renderer does."""
+def collect_active_reference_tokens(content_html: str) -> List[ReferenceToken]:
+    """The note references the renderer shows: every [[note id]] and ![[note id]].
+
+    A [[...]] holding exactly a note id is a link even in a note whose tag bar
+    has a [[...]] formatting wrapper (docs/ui/references.md).
+    """
     if "[[" not in content_html:
         return []
-    ignored_keys = _ignored_link_wrapper_keys_for_tags(tags)
-    return [
-        token for token in collect_reference_tokens_from_html(content_html)
-        if _ignored_scoped_square_wrapper_depth_at(
-            text=content_html, index=token.start,
-            ignored_link_wrapper_keys=ignored_keys, is_embed=token.is_embed,
-        ) == 0
-    ]
+    return collect_reference_tokens_from_html(content_html)
 
 
 def render_note_content_with_embeds(
@@ -458,7 +455,6 @@ def _replace_reference_tokens_in_html(
     parts = _HTML_TOKEN_SPLIT_RE.split(content_html)
     output: List[str] = []
     occurrence_index = 0
-    ignored_link_wrapper_keys = _ignored_link_wrapper_keys_for_tags(tags)
     for part in parts:
         if _is_html_segment(part):
             output.append(part)
@@ -469,7 +465,6 @@ def _replace_reference_tokens_in_html(
             context=context,
             ancestry=ancestry,
             occurrence_start=occurrence_index,
-            ignored_link_wrapper_keys=ignored_link_wrapper_keys,
             static_export=static_export,
             redact_passwords=redact_passwords,
             render_note_embeds_as_links=render_note_embeds_as_links,
@@ -486,7 +481,6 @@ def _replace_reference_tokens_in_text(
     context: EmbedRenderContext,
     ancestry: Tuple[str, ...],
     occurrence_start: int,
-    ignored_link_wrapper_keys: FrozenSet[Tuple[str, int]],
     static_export: bool,
     redact_passwords: bool,
     render_note_embeds_as_links: bool,
@@ -503,17 +497,6 @@ def _replace_reference_tokens_in_text(
             output.append(text[index:])
             break
 
-        ignored_wrapper_depth = _ignored_scoped_square_wrapper_depth_at(
-            text=text,
-            index=token_start,
-            ignored_link_wrapper_keys=ignored_link_wrapper_keys,
-            is_embed=is_embed,
-        )
-        if ignored_wrapper_depth > 0:
-            output.append(text[index : token_start + ignored_wrapper_depth])
-            index = token_start + ignored_wrapper_depth
-            continue
-
         output.append(text[index:token_start])
         end = text.find("]]", token_start + token_open_length)
         if end == -1:
@@ -524,8 +507,10 @@ def _replace_reference_tokens_in_text(
         reference_note_id = raw_id.strip()
 
         if not _is_valid_embed_note_id(reference_note_id):
-            output.append(text[token_start : end + 2])
-            index = end + 2
+            # Not a note id (a formatting wrapper or plain brackets): keep the opener
+            # and scan on, so a link nested inside, as in [[see [[id]] here]], still counts.
+            output.append(text[token_start : token_start + token_open_length])
+            index = token_start + token_open_length
             continue
 
         output.append(
@@ -578,8 +563,10 @@ def _collect_reference_tokens_in_text(
                 )
             )
             occurrence_index += 1
-
-        index = token_end_inner + 2
+            index = token_end_inner + 2
+        else:
+            # Same rule as rendering: only the opener is skipped, so nested links are found.
+            index = token_start + token_open_length
 
     return tokens
 
@@ -1213,37 +1200,6 @@ def _render_embedded_note_node(
     )
 
 
-def _ignored_link_wrapper_keys_for_tags(tags: str) -> FrozenSet[Tuple[str, int]]:
-    consumed_wrapper_keys = find_consumed_content_wrapper_keys(tags)
-    return frozenset(
-        key
-        for key in consumed_wrapper_keys
-        if key[0] == "[" and key[1] >= 2
-    )
-
-
-def _ignored_scoped_square_wrapper_depth_at(
-    *,
-    text: str,
-    index: int,
-    ignored_link_wrapper_keys: FrozenSet[Tuple[str, int]],
-    is_embed: bool,
-) -> int:
-    if is_embed:
-        return 0
-    for depth in sorted((key[1] for key in ignored_link_wrapper_keys), reverse=True):
-        opener = "[" * depth
-        if not text.startswith(opener, index):
-            continue
-        if index + depth < len(text) and text[index + depth] == "[":
-            continue
-        closer = "]" * depth
-        if text.find(closer, index + depth) == -1:
-            continue
-        return depth
-    return 0
-
-
 def _extract_first_line_preview(content_html: str) -> str:
     if not isinstance(content_html, str):
         raise TypeError("content_html must be a string")