MetaList 0.2.1__tar.gz → 0.3.1__tar.gz

{metalist-0.2.1/metalist.egg-info → metalist-0.3.1}/PKG-INFO

@@ -1,31 +1,29 @@
 Metadata-Version: 2.4
 Name: metalist
-Version: 0.2.1
+Version: 0.3.1
 Summary: A minimalist single-user note-taking app with SSR, fast in-memory tree operations, and efficient sync.
 Project-URL: Homepage, https://github.com/evolvingstuff/metalist
 Project-URL: Repository, https://github.com/evolvingstuff/metalist
 Project-URL: Issues, https://github.com/evolvingstuff/metalist/issues
 Requires-Python: <3.14,>=3.10
 Description-Content-Type: text/markdown
-Requires-Dist: argon2-cffi==25.1.0
-Requires-Dist: cryptography==50.0.0
-Requires-Dist: fastapi==0.141.1
-Requires-Dist: httpx==0.28.1
+Requires-Dist: argon2-cffi==23.1.0
+Requires-Dist: cryptography==42.0.5
+Requires-Dist: fastapi==0.110.0
 Requires-Dist: latex2mathml==3.81.0
-Requires-Dist: loguru==0.7.3
-Requires-Dist: Mako==1.3.12
-Requires-Dist: mutagen==1.48.1
-Requires-Dist: pydantic==2.13.4
-Requires-Dist: python-multipart==0.0.32
-Requires-Dist: starlette==1.3.1
-Requires-Dist: tqdm==4.70.0
+Requires-Dist: loguru==0.7.2
+Requires-Dist: Mako==1.3.2
+Requires-Dist: mutagen==1.47.0
+Requires-Dist: pydantic==2.9.2
+Requires-Dist: python-multipart==0.0.9
+Requires-Dist: starlette==0.36.3
 Requires-Dist: tree-sitter==0.25.2
 Requires-Dist: tree-sitter-javascript==0.25.0
-Requires-Dist: uvicorn==0.52.0
+Requires-Dist: uvicorn==0.27.1
 Provides-Extra: dev
-Requires-Dist: hypothesis==6.164.0; extra == "dev"
-Requires-Dist: pytest==9.1.1; extra == "dev"
-Requires-Dist: pytest-cov==7.1.0; extra == "dev"
+Requires-Dist: hypothesis==6.112.0; extra == "dev"
+Requires-Dist: pytest==8.0.0; extra == "dev"
+Requires-Dist: pytest-cov==4.1.0; extra == "dev"
 
 # MetaList
 
@@ -263,7 +261,7 @@ This repo now packages itself under the PyPI distribution name `metalist`. Curre
 
 Recommended release path:
 1. In the existing PyPI project `metalist`, configure GitHub Trusted Publishing for `evolvingstuff/metalist` and the workflow file `.github/workflows/publish-pypi.yml`.
-2. Push a tag such as `v0.2.1`.
+2. Push a tag such as `v0.3.1`.
 3. After the GitHub Actions workflow completes, users can run it with `uvx metalist`, install it persistently with `uv tool install metalist`, or install it with `pip install metalist`.
 
 If `--input` is omitted, a file picker opens (when `tkinter` is available).

{metalist-0.2.1 → metalist-0.3.1}/README.md

@@ -234,7 +234,7 @@ This repo now packages itself under the PyPI distribution name `metalist`. Curre
 
 Recommended release path:
 1. In the existing PyPI project `metalist`, configure GitHub Trusted Publishing for `evolvingstuff/metalist` and the workflow file `.github/workflows/publish-pypi.yml`.
-2. Push a tag such as `v0.2.1`.
+2. Push a tag such as `v0.3.1`.
 3. After the GitHub Actions workflow completes, users can run it with `uvx metalist`, install it persistently with `uv tool install metalist`, or install it with `pip install metalist`.
 
 If `--input` is omitted, a file picker opens (when `tkinter` is available).

{metalist-0.2.1 → metalist-0.3.1}/app/api/routes/auth.py

@@ -408,16 +408,7 @@ def _verify_namespace_password(*, namespace: str, password: str) -> None:
         raise HTTPException(status_code=401, detail="Invalid password")
 
 
-def _run_hydration(*, rebuild_required: bool) -> None:
-    hydration_state.set_phase(
-        phase="database_check",
-        message="Database is up to date",
-        total=1,
-    )
-    hydration_state.update(1)
-    if not rebuild_required:
-        hydration_state.finish()
-        return
+def _run_hydration() -> None:
     session = SafeSession()
     try:
         prefetched_rows = populate_cache_from_db(session)
@@ -440,7 +431,7 @@ def _on_hydration_done(future: Future) -> None:
         hydration_state.fail(str(error))
 
 
-def _start_hydration(*, first_load: bool, rebuild_required: bool) -> None:
+def _start_hydration(first_load: bool) -> None:
     global _hydration_future
     with _hydration_lock:
         if _hydration_future is not None and not _hydration_future.done():
@@ -449,10 +440,7 @@ def _start_hydration(*, first_load: bool, rebuild_required: bool) -> None:
             first_load=first_load,
             message="Preparing encrypted data",
         )
-        _hydration_future = _hydration_executor.submit(
-            _run_hydration,
-            rebuild_required=rebuild_required,
-        )
+        _hydration_future = _hydration_executor.submit(_run_hydration)
         _hydration_future.add_done_callback(_on_hydration_done)
 
 
@@ -461,7 +449,7 @@ def _build_hydration_status() -> HydrationStatusResponse:
     if not auth_cache_state.cache_refresh_needed() and snapshot["status"] == "idle":
         snapshot["status"] = "ready"
         snapshot["phase"] = "complete"
-        snapshot["message"] = "Workspace ready"
+        snapshot["message"] = "Hydration complete"
         snapshot["overall_percent"] = 100
     return HydrationStatusResponse(**snapshot)
 
@@ -636,7 +624,6 @@ def login(
         raise HTTPException(status_code=401, detail="Invalid password")
 
     dek = auth.unwrap_dek_for_password(payload.password)
-    auth.run_authenticated_database_migrations(dek=dek)
 
     set_session_dek(dek)
     ensure_rules_decrypted_and_compiled(token="")
@@ -645,13 +632,17 @@ def login(
     reminder_store.ensure_decrypted(token="")
     search_history_store.ensure_decrypted(token="")
 
+    needs_hydration = auth_cache_state.cache_refresh_needed()
+    if not note_store.loaded:
+        needs_hydration = True
+
     token = token_service.create_token(_client_info(request), tab_id, dek=dek)
     set_auth_cookie(request=request, response=response, token=token)
     login_rate_limiter.record_success(rate_limit_key)
     clear_all_locks()
     return LoginResponse(
         message="Login successful",
-        hydration_required=True,
+        hydration_required=needs_hydration,
     )
 
 
@@ -755,11 +746,6 @@ def auth_status(
     database_user_version = database_user_version_row[0]
     if not isinstance(database_user_version, int) or database_user_version < 0:
         raise RuntimeError(f"Invalid database user_version: {database_user_version!r}")
-    client_preferences: dict[str, str] = {}
-    if not bool(settings and settings.encryption_enabled):
-        client_preferences = load_client_preferences(token="")
-    elif token is not None:
-        client_preferences = load_client_preferences(token=token)
     return {
         "version": VERSION,
         "database_user_version": database_user_version,
@@ -774,13 +760,14 @@ def auth_status(
         "cache_ready": not auth_cache_state.cache_refresh_needed(),
         "namespace": ACTIVE_NAMESPACE,
         "link_title_revision": link_title_store.get_revision(),
-        "client_preferences": client_preferences,
+        "client_preferences": load_client_preferences(),
     }
 
 
 @router.get("/client-state", response_model=ClientStateResponse)
 def get_client_state(token: Annotated[str, Depends(_require_auth)]):
-    payload = load_client_state(token=token)
+    del token
+    payload = load_client_state()
     return ClientStateResponse(**payload)
 
 
@@ -790,7 +777,8 @@ def put_client_preferences(
     payload: ClientPreferencesUpdateRequest,
     token: Annotated[str, Depends(_require_auth)],
 ):
-    normalized = save_client_preferences(preferences=payload.preferences, token=token)
+    del token
+    normalized = save_client_preferences(preferences=payload.preferences)
     return ClientPreferencesResponse(preferences=normalized)
 
 
@@ -800,10 +788,8 @@ def put_command_palette_usage(
     payload: CommandPaletteUsageUpdateRequest,
     token: Annotated[str, Depends(_require_auth)],
 ):
-    normalized = save_command_palette_usage(
-        usage_state=payload.command_palette_usage,
-        token=token,
-    )
+    del token
+    normalized = save_command_palette_usage(usage_state=payload.command_palette_usage)
     return CommandPaletteUsageResponse(command_palette_usage=normalized)
 
 
@@ -1081,10 +1067,8 @@ def hydrate_cache(
     if not note_store.loaded:
         needs_hydration = True
 
-    _start_hydration(
-        first_load=auth_cache_state.cache_refresh_needed(),
-        rebuild_required=needs_hydration,
-    )
+    if needs_hydration:
+        _start_hydration(first_load=auth_cache_state.cache_refresh_needed())
 
     return _build_hydration_status()
 

{metalist-0.2.1 → metalist-0.3.1}/app/config.py

@@ -5,9 +5,8 @@ from app.server_runtime import resolve_api_prefix
 from app.server_runtime import resolve_database_runtime_config
 from app.server_runtime import resolve_default_database_path
 from app.server_runtime import resolve_v1_api_prefix
-from app.version import __version__
 
-VERSION = __version__
+VERSION = "0.3.0"
 
 
 def _env_flag(name: str, default: bool) -> bool:

{metalist-0.2.1 → metalist-0.3.1}/app/db/schema.py

@@ -64,14 +64,7 @@ CREATE TABLE IF NOT EXISTS {APP_SETTINGS_TABLE} (
     backup_settings_encryption_nonce BLOB,
     backup_settings_encryption_tag BLOB,
     client_preferences_json TEXT,
-    client_preferences_encryption_nonce BLOB,
-    client_preferences_encryption_tag BLOB,
     command_palette_usage_json TEXT,
-    command_palette_usage_encryption_nonce BLOB,
-    command_palette_usage_encryption_tag BLOB,
-    tag_prefix_settings_json TEXT,
-    tag_prefix_settings_encryption_nonce BLOB,
-    tag_prefix_settings_encryption_tag BLOB,
     session_timeout_minutes INTEGER,
     created_at TEXT NOT NULL,
     updated_at TEXT NOT NULL
@@ -217,14 +210,7 @@ def initialize_schema(connection: Connection) -> None:
             "backup_settings_encryption_nonce": "BLOB",
             "backup_settings_encryption_tag": "BLOB",
             "client_preferences_json": "TEXT",
-            "client_preferences_encryption_nonce": "BLOB",
-            "client_preferences_encryption_tag": "BLOB",
             "command_palette_usage_json": "TEXT",
-            "command_palette_usage_encryption_nonce": "BLOB",
-            "command_palette_usage_encryption_tag": "BLOB",
-            "tag_prefix_settings_json": "TEXT",
-            "tag_prefix_settings_encryption_nonce": "BLOB",
-            "tag_prefix_settings_encryption_tag": "BLOB",
             "session_timeout_minutes": "INTEGER",
         },
     )

{metalist-0.2.1 → metalist-0.3.1}/app/db/settings_sql.py

@@ -51,22 +51,7 @@ def fetch_settings(connection: GuardedConnection | sqlite3.Connection) -> Option
         "backup_settings_encryption_nonce": row["backup_settings_encryption_nonce"],
         "backup_settings_encryption_tag": row["backup_settings_encryption_tag"],
         "client_preferences_json": row["client_preferences_json"],
-        "client_preferences_encryption_nonce": row["client_preferences_encryption_nonce"],
-        "client_preferences_encryption_tag": row["client_preferences_encryption_tag"],
         "command_palette_usage_json": row["command_palette_usage_json"],
-        "command_palette_usage_encryption_nonce": row[
-            "command_palette_usage_encryption_nonce"
-        ],
-        "command_palette_usage_encryption_tag": row[
-            "command_palette_usage_encryption_tag"
-        ],
-        "tag_prefix_settings_json": row["tag_prefix_settings_json"],
-        "tag_prefix_settings_encryption_nonce": row[
-            "tag_prefix_settings_encryption_nonce"
-        ],
-        "tag_prefix_settings_encryption_tag": row[
-            "tag_prefix_settings_encryption_tag"
-        ],
         "session_timeout_minutes": row["session_timeout_minutes"],
         "created_at": datetime.fromisoformat(row["created_at"]),
         "updated_at": datetime.fromisoformat(row["updated_at"]),
@@ -183,8 +168,6 @@ def update_client_preferences_json(
     connection: GuardedConnection | sqlite3.Connection,
     *,
     client_preferences_json: str,
-    client_preferences_encryption_nonce: bytes | None,
-    client_preferences_encryption_tag: bytes | None,
 ) -> None:
     if not isinstance(client_preferences_json, str):
         raise TypeError("client_preferences_json must be a string")
@@ -194,15 +177,11 @@ def update_client_preferences_json(
         f"""
         UPDATE {APP_SETTINGS_TABLE}
         SET client_preferences_json = ?,
-            client_preferences_encryption_nonce = ?,
-            client_preferences_encryption_tag = ?,
             updated_at = ?
         WHERE id = 1
         """,
         (
             client_preferences_json,
-            client_preferences_encryption_nonce,
-            client_preferences_encryption_tag,
             _serialize_datetime(datetime.now(timezone.utc)),
         ),
     )
@@ -212,8 +191,6 @@ def update_command_palette_usage_json(
     connection: GuardedConnection | sqlite3.Connection,
     *,
     command_palette_usage_json: str,
-    command_palette_usage_encryption_nonce: bytes | None,
-    command_palette_usage_encryption_tag: bytes | None,
 ) -> None:
     if not isinstance(command_palette_usage_json, str):
         raise TypeError("command_palette_usage_json must be a string")
@@ -223,44 +200,11 @@ def update_command_palette_usage_json(
         f"""
         UPDATE {APP_SETTINGS_TABLE}
         SET command_palette_usage_json = ?,
-            command_palette_usage_encryption_nonce = ?,
-            command_palette_usage_encryption_tag = ?,
             updated_at = ?
         WHERE id = 1
         """,
         (
             command_palette_usage_json,
-            command_palette_usage_encryption_nonce,
-            command_palette_usage_encryption_tag,
-            _serialize_datetime(datetime.now(timezone.utc)),
-        ),
-    )
-
-
-def update_tag_prefix_settings_json(
-    connection: GuardedConnection | sqlite3.Connection,
-    *,
-    tag_prefix_settings_json: str,
-    tag_prefix_settings_encryption_nonce: bytes | None,
-    tag_prefix_settings_encryption_tag: bytes | None,
-) -> None:
-    if not isinstance(tag_prefix_settings_json, str):
-        raise TypeError("tag_prefix_settings_json must be a string")
-
-    conn = _conn(connection)
-    conn.execute(
-        f"""
-        UPDATE {APP_SETTINGS_TABLE}
-        SET tag_prefix_settings_json = ?,
-            tag_prefix_settings_encryption_nonce = ?,
-            tag_prefix_settings_encryption_tag = ?,
-            updated_at = ?
-        WHERE id = 1
-        """,
-        (
-            tag_prefix_settings_json,
-            tag_prefix_settings_encryption_nonce,
-            tag_prefix_settings_encryption_tag,
             _serialize_datetime(datetime.now(timezone.utc)),
         ),
     )

{metalist-0.2.1 → metalist-0.3.1}/app/main.py

@@ -10,9 +10,6 @@ from .api.middleware.auth import AuthMiddleware
 from app.config import ACTIVE_NAMESPACE, STARTUP_ANIMATION_ENABLED, VERSION
 from .db.session import begin_writer, enable_read_guard
 from .db.schema import initialize_schema
-from .db.migrations import CURRENT_DATABASE_VERSION
-from .db.migrations import read_database_version
-from .db.migrations import run_database_migrations
 from .db.notes_sql import clear_encryption_metadata_for_empty_notes
 from .db.settings_sql import fetch_settings, insert_default_settings
 from .api.deps import get_db
@@ -156,21 +153,6 @@ with begin_writer() as connection:
     settings = fetch_settings(connection)
     if not settings:
         insert_default_settings(connection)
-        settings = fetch_settings(connection)
-    if settings is None:
-        raise RuntimeError("App settings missing after schema initialization")
-    database_version = read_database_version(connection.raw_connection)
-    if database_version > CURRENT_DATABASE_VERSION:
-        raise RuntimeError(
-            f"Database version {database_version} is newer than supported version "
-            f"{CURRENT_DATABASE_VERSION}"
-        )
-    if not bool(settings["encryption_enabled"]):
-        run_database_migrations(
-            connection=connection.raw_connection,
-            encryption_enabled=False,
-            encryption_service=None,
-        )
     bootstrap_ontology_rules_store(connection=connection)
     tab_state_store.bootstrap(connection=connection)
     link_title_store.bootstrap(connection=connection)

{metalist-0.2.1 → metalist-0.3.1}/app/services/auth_service.py

@@ -19,10 +19,6 @@ from app.config import (
     VAULT_VERSION,
 )
 from app.db.session import begin_writer
-from app.db.migrations import CURRENT_DATABASE_VERSION
-from app.db.migrations import MigrationResult
-from app.db.migrations import read_database_version
-from app.db.migrations import run_database_migrations
 from app.db.notes_sql import fetch_all_for_cache
 from app.db.notes_sql import update_note_fields_preserving_updated_at
 from app.db.ontology_rules_sql import fetch_all_rules as fetch_all_ontology_rules
@@ -48,8 +44,6 @@ from app.services.encryption import EncryptionService
 from app.services.maintenance_mode import maintenance_service
 from app.services.note_store import store as note_store
 from app.services.tab_state import tab_state_store
-from app.services.backup_service import create_timestamped_backup
-from app.services.client_state_service import rewrite_client_state_storage
 from app.security.encryption import set_encryption_required
 
 
@@ -203,39 +197,6 @@ class AuthService:
             kek,
         )
 
-    def run_authenticated_database_migrations(self, *, dek: bytes) -> MigrationResult:
-        if not isinstance(dek, bytes) or len(dek) == 0:
-            raise ValueError("Database migrations require a non-empty DEK")
-        connection = self.db.connection()
-        initial_version = read_database_version(connection)
-        if initial_version > CURRENT_DATABASE_VERSION:
-            raise RuntimeError(
-                f"Database version {initial_version} is newer than supported version "
-                f"{CURRENT_DATABASE_VERSION}"
-            )
-        if initial_version == CURRENT_DATABASE_VERSION:
-            return MigrationResult(
-                initial_version=initial_version,
-                final_version=initial_version,
-                applied_versions=(),
-                rewritten_payload_count=0,
-            )
-        maintenance_service.enter_maintenance("Upgrading namespace database")
-        try:
-            create_timestamped_backup()
-            migration_encryption = EncryptionService()
-            migration_encryption.dek = dek
-            with SafeSession.allow_reads("auth:database_migrations"):
-                with connection:
-                    migration_result = run_database_migrations(
-                        connection=connection,
-                        encryption_enabled=True,
-                        encryption_service=migration_encryption,
-                    )
-            return migration_result
-        finally:
-            maintenance_service.exit_maintenance()
-
     def set_password(self, password: str, time_cost: int) -> Tuple[bool, str]:
         """Enable password protection by encrypting all existing content."""
         if self.has_password():
@@ -418,11 +379,6 @@ class AuthService:
                     encryption_service=self.encryption,
                     force_plaintext=False,
                 )
-                rewrite_client_state_storage(
-                    connection=connection,
-                    encryption_service=self.encryption,
-                    force_plaintext=False,
-                )
         finally:
             maintenance_service.exit_maintenance()
 
@@ -697,11 +653,6 @@ class AuthService:
                     encryption_service=None,
                     force_plaintext=True,
                 )
-                rewrite_client_state_storage(
-                    connection=connection,
-                    encryption_service=self.encryption,
-                    force_plaintext=True,
-                )
                 clear_password_settings(connection)
             self.encryption.clear_keys()
         finally: