MetaList 0.3.9__tar.gz → 0.3.11__tar.gz

{metalist-0.3.9/metalist.egg-info → metalist-0.3.11}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: metalist
-Version: 0.3.9
+Version: 0.3.11
 Summary: A minimalist single-user note-taking app with SSR, fast in-memory tree operations, and efficient sync.
 Project-URL: Homepage, https://github.com/evolvingstuff/metalist
 Project-URL: Repository, https://github.com/evolvingstuff/metalist
@@ -35,7 +35,7 @@ A minimalist single-user note-taking app focused on server-side rendering (SSR),
 - Rich text editing (ContentEditable) with image support
 - Drag-and-drop note reordering
 - Real-time content saving
-- Keyboard shortcuts (press `?` in the app)
+- Keyboard shortcuts / cheatsheet (press `?` in the app)
 - Linked-list ordering model for efficient reorders
 - Optional password protection + encryption at rest (AES-GCM)
 - Multi-tab search contexts with server-persisted scroll/search state (survives browser restarts)
@@ -119,12 +119,10 @@ Useful env flags:
 - `METALIST_HOST=0.0.0.0` (default): bind the main app to a different interface such as `127.0.0.1`
 - `METALIST_PORT=8000` (default): bind the main app to a different port
 - `METALIST_HTTPS_PORT=8443`: override the HTTPS port when TLS is enabled
-- `MCP_AGENT_WEB_PORT=8765` (default): bind the MCP sidecar web UI to a different port
 - `METALIST_TLS_CERT=/path/to/fullchain.pem` + `METALIST_TLS_KEY=/path/to/privkey.pem`: override TLS paths
 - `METALIST_AUTO_GENERATE_TLS=0`: disable automatic creation of the default self-signed TLS pair
 - default TLS paths: `~/MetaList/certs/metalist-cert.pem` and `~/MetaList/certs/metalist-key.pem`
 - `METALIST_FORWARDED_ALLOW_IPS=127.0.0.1,::1` (default): trust proxy headers only from those reverse-proxy IPs
-- `MCP_AGENT_PUBLIC_ORIGIN=https://notes.example.com:8765`: public origin for the MCP sidecar redirect when it is exposed behind HTTPS or a separate hostname/port
 
 ### Remote Access / HTTPS
 Plain LAN or VPN HTTP works with a normal PyCharm run:
@@ -135,7 +133,7 @@ On a fresh machine, that first launch also creates the default TLS cert pair aut
 
 Namespaced launch example:
 ```bash
-metalist --namespace work --port 8001 --mcp-port 8766
+metalist --namespace work --port 8001
 ```
 This starts a separate process backed by `~/MetaList/namespaces/work/work.metalist.db` on `http://127.0.0.1:8001`.
 Its backup snapshots live under `~/MetaList/namespaces/work/backups/` with filenames like `work-<timestamp>.metalist-backup.tar.gz`. New backups are versioned `.tar.gz` workspace archives; legacy `.bak` backups remain restorable.
@@ -144,7 +142,7 @@ After you launch a namespace once with explicit ports, MetaList remembers them i
 ```bash
 metalist work
 ```
-and MetaList will reuse the saved HTTP / HTTPS / MCP sidecar ports for `work`. The same applies to the default namespace: `metalist` will reuse the saved default-namespace profile.
+and MetaList will reuse the saved HTTP / HTTPS ports for `work`. The same applies to the default namespace: `metalist` will reuse the saved default-namespace profile.
 
 Equivalent explicit launch, if you want it:
 ```bash
@@ -182,63 +180,6 @@ METALIST_FORWARDED_ALLOW_IPS=127.0.0.1,::1 \
 metalist
 ```
 
-If you do not need the MCP sidecar remotely, disable it:
-```bash
-MCP_AGENT_WEB_ENABLED=0 metalist
-```
-
-### MCP (Phase 1 Read-Only)
-MCP is available automatically when you run:
-```bash
-metalist
-```
-
-`metalist` also auto-starts the agent web app sidecar and prints:
-- `Agent web app: http://127.0.0.1:8765`
-- The sidecar default MCP URL follows the resolved MetaList HTTP port for the current process.
-- Use `--mcp-port` when you want multiple MetaList instances to auto-start sidecars without colliding on `8765`.
-- On startup, local Ollama (`127.0.0.1`) is reset by default so a fresh runner is used.
-- Sidecar Ollama auto-start uses `OLLAMA_CONTEXT_LENGTH=16384` by default.
-
-Manual web mode (optional):
-```bash
-metalist-mcp web --port 8765
-```
-Then open `http://127.0.0.1:8765`.
-
-Run direct MCP CLI calls:
-```bash
-metalist-mcp cli tools/list
-metalist-mcp cli tools/call health_check '{}'
-```
-
-Compatibility shortcut (still works):
-```bash
-python mcp_client.py tools/list
-```
-
-Disable auto sidecar if needed:
-```bash
-MCP_AGENT_WEB_ENABLED=0 metalist
-```
-
-Control Ollama startup behavior:
-```bash
-# disable Ollama reset-on-start (default is enabled)
-MCP_AGENT_RESET_OLLAMA_ON_START=0 metalist
-
-# override auto-start context length (default 16384)
-MCP_AGENT_OLLAMA_CONTEXT_LENGTH=32768 metalist
-```
-
-Optional: direct stdio transport (advanced/manual):
-```bash
-python -m app.mcp
-```
-
-Tool catalog and schemas:
-- `docs/mcp_tools.md`
-
 ### Legacy Import
 `convert-from-legacy.py` replaces the SQLite database referenced by `app.config.DATABASE_URL`, clears its files/sounds sidecar, and imports notes from a legacy JSON export.
 
@@ -254,7 +195,7 @@ Target a namespaced database during import:
 convert-from-legacy.py --namespace work --input /path/to/legacy-export.json
 ```
 
-If `--namespace`, `--port`, `--https-port`, or `--mcp-port` are omitted, the import script prompts for them and saves the resulting launch profile inside the target namespace DB. That means a one-time import into `work` can immediately seed later shorthand launches like `metalist work`.
+If `--namespace`, `--port`, or `--https-port` are omitted, the import script prompts for them and saves the resulting launch profile inside the target namespace DB. That means a one-time import into `work` can immediately seed later shorthand launches like `metalist work`.
 
 ### Publishing
 For the real user-facing install flow:

{metalist-0.3.9 → metalist-0.3.11}/README.md

@@ -6,7 +6,7 @@ A minimalist single-user note-taking app focused on server-side rendering (SSR),
 - Rich text editing (ContentEditable) with image support
 - Drag-and-drop note reordering
 - Real-time content saving
-- Keyboard shortcuts (press `?` in the app)
+- Keyboard shortcuts / cheatsheet (press `?` in the app)
 - Linked-list ordering model for efficient reorders
 - Optional password protection + encryption at rest (AES-GCM)
 - Multi-tab search contexts with server-persisted scroll/search state (survives browser restarts)
@@ -90,12 +90,10 @@ Useful env flags:
 - `METALIST_HOST=0.0.0.0` (default): bind the main app to a different interface such as `127.0.0.1`
 - `METALIST_PORT=8000` (default): bind the main app to a different port
 - `METALIST_HTTPS_PORT=8443`: override the HTTPS port when TLS is enabled
-- `MCP_AGENT_WEB_PORT=8765` (default): bind the MCP sidecar web UI to a different port
 - `METALIST_TLS_CERT=/path/to/fullchain.pem` + `METALIST_TLS_KEY=/path/to/privkey.pem`: override TLS paths
 - `METALIST_AUTO_GENERATE_TLS=0`: disable automatic creation of the default self-signed TLS pair
 - default TLS paths: `~/MetaList/certs/metalist-cert.pem` and `~/MetaList/certs/metalist-key.pem`
 - `METALIST_FORWARDED_ALLOW_IPS=127.0.0.1,::1` (default): trust proxy headers only from those reverse-proxy IPs
-- `MCP_AGENT_PUBLIC_ORIGIN=https://notes.example.com:8765`: public origin for the MCP sidecar redirect when it is exposed behind HTTPS or a separate hostname/port
 
 ### Remote Access / HTTPS
 Plain LAN or VPN HTTP works with a normal PyCharm run:
@@ -106,7 +104,7 @@ On a fresh machine, that first launch also creates the default TLS cert pair aut
 
 Namespaced launch example:
 ```bash
-metalist --namespace work --port 8001 --mcp-port 8766
+metalist --namespace work --port 8001
 ```
 This starts a separate process backed by `~/MetaList/namespaces/work/work.metalist.db` on `http://127.0.0.1:8001`.
 Its backup snapshots live under `~/MetaList/namespaces/work/backups/` with filenames like `work-<timestamp>.metalist-backup.tar.gz`. New backups are versioned `.tar.gz` workspace archives; legacy `.bak` backups remain restorable.
@@ -115,7 +113,7 @@ After you launch a namespace once with explicit ports, MetaList remembers them i
 ```bash
 metalist work
 ```
-and MetaList will reuse the saved HTTP / HTTPS / MCP sidecar ports for `work`. The same applies to the default namespace: `metalist` will reuse the saved default-namespace profile.
+and MetaList will reuse the saved HTTP / HTTPS ports for `work`. The same applies to the default namespace: `metalist` will reuse the saved default-namespace profile.
 
 Equivalent explicit launch, if you want it:
 ```bash
@@ -153,63 +151,6 @@ METALIST_FORWARDED_ALLOW_IPS=127.0.0.1,::1 \
 metalist
 ```
 
-If you do not need the MCP sidecar remotely, disable it:
-```bash
-MCP_AGENT_WEB_ENABLED=0 metalist
-```
-
-### MCP (Phase 1 Read-Only)
-MCP is available automatically when you run:
-```bash
-metalist
-```
-
-`metalist` also auto-starts the agent web app sidecar and prints:
-- `Agent web app: http://127.0.0.1:8765`
-- The sidecar default MCP URL follows the resolved MetaList HTTP port for the current process.
-- Use `--mcp-port` when you want multiple MetaList instances to auto-start sidecars without colliding on `8765`.
-- On startup, local Ollama (`127.0.0.1`) is reset by default so a fresh runner is used.
-- Sidecar Ollama auto-start uses `OLLAMA_CONTEXT_LENGTH=16384` by default.
-
-Manual web mode (optional):
-```bash
-metalist-mcp web --port 8765
-```
-Then open `http://127.0.0.1:8765`.
-
-Run direct MCP CLI calls:
-```bash
-metalist-mcp cli tools/list
-metalist-mcp cli tools/call health_check '{}'
-```
-
-Compatibility shortcut (still works):
-```bash
-python mcp_client.py tools/list
-```
-
-Disable auto sidecar if needed:
-```bash
-MCP_AGENT_WEB_ENABLED=0 metalist
-```
-
-Control Ollama startup behavior:
-```bash
-# disable Ollama reset-on-start (default is enabled)
-MCP_AGENT_RESET_OLLAMA_ON_START=0 metalist
-
-# override auto-start context length (default 16384)
-MCP_AGENT_OLLAMA_CONTEXT_LENGTH=32768 metalist
-```
-
-Optional: direct stdio transport (advanced/manual):
-```bash
-python -m app.mcp
-```
-
-Tool catalog and schemas:
-- `docs/mcp_tools.md`
-
 ### Legacy Import
 `convert-from-legacy.py` replaces the SQLite database referenced by `app.config.DATABASE_URL`, clears its files/sounds sidecar, and imports notes from a legacy JSON export.
 
@@ -225,7 +166,7 @@ Target a namespaced database during import:
 convert-from-legacy.py --namespace work --input /path/to/legacy-export.json
 ```
 
-If `--namespace`, `--port`, `--https-port`, or `--mcp-port` are omitted, the import script prompts for them and saves the resulting launch profile inside the target namespace DB. That means a one-time import into `work` can immediately seed later shorthand launches like `metalist work`.
+If `--namespace`, `--port`, or `--https-port` are omitted, the import script prompts for them and saves the resulting launch profile inside the target namespace DB. That means a one-time import into `work` can immediately seed later shorthand launches like `metalist work`.
 
 ### Publishing
 For the real user-facing install flow:

{metalist-0.3.9 → metalist-0.3.11}/app/api/middleware/auth.py

@@ -7,6 +7,7 @@ from app.api.request_auth import read_request_auth_token
 from app.services.tokens import token_service
 from app.services.auth_service import AuthService
 from app.services.maintenance_mode import maintenance_service
+from app.services.runtime_lock import purge_decrypted_runtime_state
 from app.models.database import SafeSession
 from app.config import API_PREFIX, TEST_MODE
 
@@ -21,9 +22,6 @@ class AuthMiddleware(BaseHTTPMiddleware):
         f"{API_PREFIX}/auth/session",
         f"{API_PREFIX}/auth/namespaces/delete-jobs/",
         f"{API_PREFIX}/auth/namespaces/rename-jobs/",
-        f"{API_PREFIX}/mcp",
-        "/mcp-client-v2",
-        "/mcp-client",
         "/namespace-deleted",
         "/namespace-renamed",
         "/static/",  # CSS/JS files needed for login page
@@ -51,6 +49,9 @@ class AuthMiddleware(BaseHTTPMiddleware):
         """Check authentication for protected routes."""
         path = request.url.path
 
+        if not token_service.has_active_tokens():
+            purge_decrypted_runtime_state()
+
         # Block any v1 API usage with an explicit 410 Gone (no DB access)
         if path.startswith('/api') and not (path.startswith(API_PREFIX) or path == API_PREFIX):
             ref = request.headers.get('referer', '-')

{metalist-0.3.9 → metalist-0.3.11}/app/api/routes/auth.py

@@ -52,6 +52,7 @@ from app.services.namespace_switcher import save_namespace_port_profiles
 from app.services.namespace_deletion_jobs import load_namespace_deletion_job
 from app.services.namespace_rename_jobs import load_namespace_rename_job
 from app.server_runtime import NamespaceLaunchProfile
+from app.server_runtime import load_all_namespace_launch_profiles
 from app.server_runtime import resolve_namespace_directory
 from app.server_runtime import resolve_namespaced_database_path
 from app.server_runtime import validate_namespace
@@ -67,6 +68,7 @@ from app.services.link_titles import link_title_store
 from app.services.reminders import reminder_store
 from app.services.search_history import search_history_store
 from app.services.sound_storage import sound_store
+from app.services.runtime_lock import purge_decrypted_runtime_state
 from app.services.hydration_state import hydration_state
 from app.services.file_registry import file_registry
 from app.services.file_storage import bootstrap_file_registry
@@ -681,8 +683,9 @@ def logout(
     token: Annotated[str, Depends(_require_auth)],
 ):
     token_service.revoke_token(token)
-    clear_all_locks()
-    clear_encryption_key()
+    if not purge_decrypted_runtime_state():
+        clear_all_locks()
+        clear_encryption_key()
     clear_auth_cookie(response=response)
     return {"message": "Logout successful"}
 
@@ -882,7 +885,6 @@ def open_namespace(
     namespace = _require_string_field(body, "namespace")
     port = _require_int_field(body, "port")
     https_port = _optional_int_field(body, "https_port")
-    mcp_port = _require_int_field(body, "mcp_port")
     launch_capture = CapturedExceptionContext(
         RuntimeError,
         ValueError,
@@ -897,7 +899,6 @@ def open_namespace(
             namespace=namespace,
             port=port,
             https_port=https_port,
-            mcp_port=mcp_port,
         )
     if launch_capture.captured_exception is not None:
         exc = launch_capture.captured_exception
@@ -912,7 +913,6 @@ def open_namespace(
             "namespace": result.saved_profile.namespace,
             "port": result.saved_profile.port,
             "https_port": result.saved_profile.https_port,
-            "mcp_port": result.saved_profile.mcp_port,
         },
         "saved_for_next_launch": result.saved_for_next_launch,
         "message": result.message,
@@ -927,6 +927,10 @@ def save_namespace_ports(
 ):
     body = _require_body_object(payload)
     raw_profiles = _require_list_field(body, "profiles")
+    saved_profiles = {
+        profile.namespace: profile
+        for profile in load_all_namespace_launch_profiles()
+    }
     requested_profiles: list[NamespaceLaunchProfile] = []
     for raw_profile in raw_profiles:
         if not isinstance(raw_profile, dict):
@@ -934,13 +938,16 @@ def save_namespace_ports(
         namespace = _require_string_field(raw_profile, "namespace")
         port = _require_int_field(raw_profile, "port")
         https_port = _optional_int_field(raw_profile, "https_port")
-        mcp_port = _require_int_field(raw_profile, "mcp_port")
+        saved_profile = saved_profiles.get(namespace)
+        legacy_mcp_port = None
+        if saved_profile is not None:
+            legacy_mcp_port = saved_profile.mcp_port
         requested_profiles.append(
             NamespaceLaunchProfile(
                 namespace=namespace,
                 port=port,
                 https_port=https_port,
-                mcp_port=mcp_port,
+                mcp_port=legacy_mcp_port,
             )
         )
 
@@ -968,7 +975,6 @@ def save_namespace_ports(
                 "namespace": profile.namespace,
                 "port": profile.port,
                 "https_port": profile.https_port,
-                "mcp_port": profile.mcp_port,
             }
             for profile in result.saved_profiles
         ],

{metalist-0.3.9 → metalist-0.3.11}/app/api/routes/backups.py

@@ -33,7 +33,6 @@ from app.services.backup_service import (
 )
 from app.server_runtime import NamespaceLaunchProfile
 from app.server_runtime import _DEFAULT_HTTP_PORT
-from app.server_runtime import _DEFAULT_MCP_AGENT_WEB_PORT
 from app.server_runtime import load_all_namespace_launch_profiles
 from app.server_runtime import load_namespace_launch_profile
 from app.server_runtime import resolve_namespace_directory
@@ -113,13 +112,11 @@ class BackupRestoreRequest(BaseModel):
 class BackupRestoreLaunchProfileRequest(BaseModel):
     port: int
     https_port: int | None
-    mcp_port: int
 
 
 class BackupRestoreLaunchProfileResponse(BaseModel):
     port: int
     https_port: int | None
-    mcp_port: int
 
 
 class BackupRestorePreflightResponse(BaseModel):
@@ -193,13 +190,16 @@ def _serialize_settings_response(settings: dict[str, object]) -> BackupSettingsR
             raise RuntimeError("backup settings selected_namespaces entries must be strings")
         normalized_selected_namespaces.append(validate_namespace(namespace=selected_namespace))
     available_namespaces = _list_available_namespaces()
-    for selected_namespace in normalized_selected_namespaces:
-        if selected_namespace not in available_namespaces:
-            available_namespaces.append(selected_namespace)
+    available_namespace_set = set(available_namespaces)
+    existing_selected_namespaces = [
+        namespace
+        for namespace in normalized_selected_namespaces
+        if namespace in available_namespace_set
+    ]
     return BackupSettingsResponse(
         folder_path=folder_path,
-        selected_namespaces=normalized_selected_namespaces,
-        available_namespaces=_order_namespaces(namespaces=available_namespaces),
+        selected_namespaces=_order_namespaces(namespaces=existing_selected_namespaces),
+        available_namespaces=available_namespaces,
         retention_count=int(settings["retention_count"]),
     )
 
@@ -269,14 +269,18 @@ def _order_namespaces(*, namespaces: list[str]) -> list[str]:
 
 
 def _list_available_namespaces() -> list[str]:
-    discovered_namespaces = [ACTIVE_NAMESPACE]
+    discovered_namespaces: list[str] = []
     namespaces_directory = resolve_namespaces_directory()
     if namespaces_directory.exists():
         if not namespaces_directory.is_dir():
             raise RuntimeError(f"namespaces directory is not a directory: {namespaces_directory}")
         for child in namespaces_directory.iterdir():
-            if child.is_dir():
-                discovered_namespaces.append(child.name)
+            if not child.is_dir():
+                continue
+            namespace = validate_namespace(namespace=child.name)
+            database_path = resolve_namespaced_database_path(namespace=namespace)
+            if database_path.is_file():
+                discovered_namespaces.append(namespace)
     return _order_namespaces(namespaces=discovered_namespaces)
 
 
@@ -298,6 +302,21 @@ def _require_existing_selected_namespaces(*, selected_namespaces: list[str]) ->
     return normalized_selected_namespaces
 
 
+def _filter_deleted_selected_namespaces(*, selected_namespaces: list[str]) -> list[str]:
+    normalized_selected_namespaces = _normalize_selected_namespaces(selected_namespaces=selected_namespaces)
+    existing_selected_namespaces: list[str] = []
+    for namespace in normalized_selected_namespaces:
+        database_path = resolve_namespaced_database_path(namespace=namespace)
+        if database_path.is_file():
+            existing_selected_namespaces.append(namespace)
+    if len(existing_selected_namespaces) == 0:
+        raise HTTPException(
+            status_code=400,
+            detail="None of the selected backup namespaces still exist",
+        )
+    return existing_selected_namespaces
+
+
 def _run_native_folder_picker_command(*, command: list[str]) -> str | None:
     if not isinstance(command, list) or len(command) == 0:
         raise TypeError("command must be a non-empty list")
@@ -400,7 +419,6 @@ def _backup_profile_ports(*, profile: BackupLaunchProfile) -> list[tuple[str, in
     service_pairs = [
         ("HTTP", profile.port),
         ("HTTPS", profile.https_port),
-        ("MCP", profile.mcp_port),
     ]
     ports: list[tuple[str, int]] = []
     for service, port in service_pairs:
@@ -414,7 +432,6 @@ def _runtime_profile_ports(*, profile: NamespaceLaunchProfile) -> list[tuple[str
     service_pairs = [
         ("HTTP", profile.port),
         ("HTTPS", profile.https_port),
-        ("MCP", profile.mcp_port),
     ]
     ports: list[tuple[str, int]] = []
     for service, port in service_pairs:
@@ -674,15 +691,9 @@ def _suggest_import_launch_profile(
     elif restored_profile.https_port is None:
         https_port = None
 
-    if restored_profile is None or restored_profile.mcp_port is None:
-        mcp_start = _DEFAULT_MCP_AGENT_WEB_PORT
-    else:
-        mcp_start = restored_profile.mcp_port
-    mcp_port = _next_available_port(start_port=mcp_start, occupied_ports=occupied_ports)
     return BackupRestoreLaunchProfileResponse(
         port=port,
         https_port=https_port,
-        mcp_port=mcp_port,
     )
 
 
@@ -692,12 +703,11 @@ def _response_profile_from_backup_profile(
 ) -> BackupRestoreLaunchProfileResponse | None:
     if profile is None:
         return None
-    if profile.port is None or profile.mcp_port is None:
+    if profile.port is None:
         return None
     return BackupRestoreLaunchProfileResponse(
         port=profile.port,
         https_port=profile.https_port,
-        mcp_port=profile.mcp_port,
     )
 
 
@@ -707,8 +717,6 @@ def _required_existing_target_launch_profile(*, target_namespace: str) -> Backup
         raise RuntimeError(f"Existing target namespace has no saved launch profile: {target_namespace}")
     if profile.port is None:
         raise RuntimeError(f"Existing target namespace has no saved HTTP port: {target_namespace}")
-    if profile.mcp_port is None:
-        raise RuntimeError(f"Existing target namespace has no saved MCP port: {target_namespace}")
     return BackupLaunchProfile(
         namespace=target_namespace,
         port=profile.port,
@@ -739,7 +747,7 @@ def _resolve_same_name_restore_launch_profile(
         namespace=target_namespace,
         port=suggested_profile.port,
         https_port=suggested_profile.https_port,
-        mcp_port=suggested_profile.mcp_port,
+        mcp_port=None,
     )
 
 
@@ -752,7 +760,7 @@ def _backup_profile_from_request(
         namespace=namespace,
         port=profile.port,
         https_port=profile.https_port,
-        mcp_port=profile.mcp_port,
+        mcp_port=None,
     )
 
 
@@ -873,7 +881,7 @@ def run_backup(token: Annotated[str, Depends(_require_auth)]):
         raise RuntimeError("backup settings selected_namespaces must be a list")
     if not isinstance(retention_count, int) or retention_count <= 0:
         raise RuntimeError("backup settings retention_count must be a positive integer")
-    normalized_selected_namespaces = _require_existing_selected_namespaces(
+    normalized_selected_namespaces = _filter_deleted_selected_namespaces(
         selected_namespaces=selected_namespaces,
     )
 

{metalist-0.3.9 → metalist-0.3.11}/app/api/routes/notes.py

@@ -19,6 +19,7 @@ from app.usecases.create_note import CmdCreateNote
 from app.usecases.create_sibling import CmdCreateSibling
 from app.usecases.create_child import CmdCreateChild
 from app.usecases.update_content import CmdUpdateContent
+from app.usecases.add_selected_text_tag import CmdAddSelectedTextTag
 from app.usecases.delete_subtree import CmdDeleteSubtree
 from app.usecases.move import CmdMove
 from app.usecases.move_to_top import CmdMoveToTop
@@ -40,6 +41,7 @@ from app.usecases.paste_child import CmdPasteChild
 from app.usecases.split_note import CmdSplitNote
 from app.usecases.toggle_reference_mode import CmdToggleReferenceMode
 from app.usecases.unformat_content import CmdUnformatContent
+from app.usecases.resize_image import CmdResizeImage
 from app.usecases.undo import CmdUndo
 from app.usecases.redo import CmdRedo
 from app.usecases.record_edit_mode import CmdRecordEditMode
@@ -67,6 +69,7 @@ from app.services.search_index import search_index
 from app.services.tag_suggestions import suggest_tags_for_note
 from app.services.undo_state import reset_undo_stack
 from app.usecases.prioritize import list_prioritize_tag_suggestions
+from app.services.selected_text_tag import SelectedTextTagValidationError
 from app.api.request_auth import require_request_auth_token
 
 
@@ -773,6 +776,36 @@ def save_note(request: Request, note_id: str, body: dict):
     return cmd.execute()
 
 
+@router.post("/notes/{note_id}/add-selected-text-tag")
+@transactional_route
+def add_selected_text_tag(request: Request, note_id: str, body: dict):
+    selected_text = body["selectedText"]
+    if not isinstance(selected_text, str):
+        raise TypeError("selectedText must be a string")
+
+    token = _require_bearer_token(request)
+    viewport = _require_viewport(body)
+    _require_note_present(note_id, context="notes.add-selected-text-tag")
+    command = CmdAddSelectedTextTag(
+        note_id=note_id,
+        selected_text=selected_text,
+        token=token,
+        client_id=body["clientId"],
+        undo_context=body["undoContext"],
+        viewport=viewport,
+    )
+    capture = CapturedExceptionContext(SelectedTextTagValidationError)
+    response = None
+    with capture:
+        response = command.execute()
+    if capture.captured_exception is not None:
+        exc = capture.captured_exception
+        raise HTTPException(status_code=400, detail=str(exc)) from exc
+    if response is None:
+        raise RuntimeError("CmdAddSelectedTextTag returned no response")
+    return response
+
+
 @router.post("/notes/{note_id}/split")
 @transactional_route
 def split_note(request: Request, note_id: str, body: dict):
@@ -828,6 +861,26 @@ def unformat_note_content(request: Request, note_id: str, body: dict):
     return cmd.execute()
 
 
+@router.post("/notes/{note_id}/resize-image")
+@transactional_route
+def resize_note_image(request: Request, note_id: str, body: dict):
+    client_id = body["clientId"]
+    viewport = _require_viewport(body)
+    token = _require_bearer_token(request)
+    _require_note_present(note_id, context="notes.resize-image")
+    cmd = CmdResizeImage(
+        note_id=note_id,
+        source_kind=body["sourceKind"],
+        occurrence_index=body["occurrenceIndex"],
+        action=body["action"],
+        token=token,
+        client_id=client_id,
+        undo_context=body["undoContext"],
+        viewport=viewport,
+    )
+    return cmd.execute()
+
+
 @router.post("/notes/{note_id}/run-shell")
 @transactional_route
 def run_shell_endpoint(note_id: str, body: dict) -> Dict[str, object]: