MetaList 0.4.1__tar.gz → 0.4.2__tar.gz

{metalist-0.4.1/metalist.egg-info → metalist-0.4.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: metalist
-Version: 0.4.1
+Version: 0.4.2
 Summary: A minimalist single-user note-taking app with SSR, fast in-memory tree operations, and efficient sync.
 Project-URL: Homepage, https://github.com/evolvingstuff/metalist
 Project-URL: Repository, https://github.com/evolvingstuff/metalist
@@ -106,7 +106,7 @@ The updater checks the installed version against the latest PyPI release first.
 
 Backups are saved to `~/MetaList/namespaces/<namespace>/backups/<namespace>-<timestamp>.metalist-backup.tar.gz`; the updater prints each verified path. Existing backups remain unchanged and are not pruned. If any backup fails, the update aborts with the current installation intact; run `metalist` to restart the stopped servers after resolving the failure.
 
-Only after all backups pass does the updater hand off to an external PowerShell process on Windows or `/bin/sh` on macOS/Linux so the installed environment can unlock. It installs the exact version reported by PyPI with a forced cache refresh, launches MetaList again, and reports the installed version (for example, `MetaList updated to v0.4.1.`). This protection requires an installed version containing the backup safeguard and applies to `metalist update`; direct pip/uv install commands do not run it.
+Only after all backups pass does the updater hand off to an external PowerShell process on Windows or `/bin/sh` on macOS/Linux so the installed environment can unlock. It installs the exact version reported by PyPI with a forced cache refresh, launches MetaList again, and reports the installed version (for example, `MetaList updated to v0.4.2.`). This protection requires an installed version containing the backup safeguard and applies to `metalist update`; direct pip/uv install commands do not run it.
 
 For pip, users can run `pip install metalist`. For a non-editable local install from this checkout, use `uv pip install .` or `pip install .` instead of the editable command below.
 
@@ -119,6 +119,8 @@ npm install
 ```
 
 ### Run
+
+Persistent data defaults to `~/MetaList`. Set `METALIST_DATA_DIRECTORY` to an absolute directory path before launch to use a separate data root, including namespaces, backups, certificates, logs, and runtime jobs. This is used by release tests to keep their disposable data separate from real notes.
 The installed entrypoint starts or restarts every known namespace, prints their URLs, and exits:
 ```bash
 metalist

{metalist-0.4.1 → metalist-0.4.2}/README.md

@@ -69,7 +69,7 @@ The updater checks the installed version against the latest PyPI release first.
 
 Backups are saved to `~/MetaList/namespaces/<namespace>/backups/<namespace>-<timestamp>.metalist-backup.tar.gz`; the updater prints each verified path. Existing backups remain unchanged and are not pruned. If any backup fails, the update aborts with the current installation intact; run `metalist` to restart the stopped servers after resolving the failure.
 
-Only after all backups pass does the updater hand off to an external PowerShell process on Windows or `/bin/sh` on macOS/Linux so the installed environment can unlock. It installs the exact version reported by PyPI with a forced cache refresh, launches MetaList again, and reports the installed version (for example, `MetaList updated to v0.4.1.`). This protection requires an installed version containing the backup safeguard and applies to `metalist update`; direct pip/uv install commands do not run it.
+Only after all backups pass does the updater hand off to an external PowerShell process on Windows or `/bin/sh` on macOS/Linux so the installed environment can unlock. It installs the exact version reported by PyPI with a forced cache refresh, launches MetaList again, and reports the installed version (for example, `MetaList updated to v0.4.2.`). This protection requires an installed version containing the backup safeguard and applies to `metalist update`; direct pip/uv install commands do not run it.
 
 For pip, users can run `pip install metalist`. For a non-editable local install from this checkout, use `uv pip install .` or `pip install .` instead of the editable command below.
 
@@ -82,6 +82,8 @@ npm install
 ```
 
 ### Run
+
+Persistent data defaults to `~/MetaList`. Set `METALIST_DATA_DIRECTORY` to an absolute directory path before launch to use a separate data root, including namespaces, backups, certificates, logs, and runtime jobs. This is used by release tests to keep their disposable data separate from real notes.
 The installed entrypoint starts or restarts every known namespace, prints their URLs, and exits:
 ```bash
 metalist

metalist-0.4.2/app/data_directory.py

@@ -0,0 +1,22 @@
+"""Resolve the persistent data root without importing application runtime state.
+
+METALIST_DATA_DIRECTORY accepts an absolute directory path. When omitted,
+MetaList uses the current user's ~/MetaList directory.
+"""
+
+from __future__ import annotations
+
+from collections.abc import Mapping
+from pathlib import Path
+
+
+def resolve_data_directory(*, environ: Mapping[str, str]) -> Path:
+    if "METALIST_DATA_DIRECTORY" not in environ:
+        return Path.home() / "MetaList"
+    configured_directory = environ["METALIST_DATA_DIRECTORY"]
+    if not isinstance(configured_directory, str) or configured_directory.strip() == "":
+        raise ValueError("METALIST_DATA_DIRECTORY must be a nonempty absolute path")
+    directory = Path(configured_directory)
+    if not directory.is_absolute():
+        raise ValueError("METALIST_DATA_DIRECTORY must be an absolute path")
+    return directory

{metalist-0.4.1 → metalist-0.4.2}/app/server_runtime.py

@@ -17,6 +17,7 @@ from cryptography import x509
 from cryptography.hazmat.primitives import hashes, serialization
 from cryptography.hazmat.primitives.asymmetric import rsa
 from cryptography.x509.oid import NameOID
+from app.data_directory import resolve_data_directory
 from app.db.schema import NAMESPACE_LAUNCH_PROFILE_TABLE
 from app.db.schema import initialize_schema
 from app.db.settings_sql import insert_default_settings
@@ -28,10 +29,12 @@ from app.security.shell_execution import SHELL_EXECUTION_ENV_NAME
 _LOOPBACK_BIND_HOSTS = frozenset({"127.0.0.1", "localhost", "0.0.0.0", "::1"})
 _DEFAULT_API_PREFIX = "/api2"
 _DEFAULT_V1_API_PREFIX = "/api"
-_DEFAULT_DATABASE_DIRECTORY = Path.home() / "MetaList"
+_DEFAULT_DATABASE_DIRECTORY = resolve_data_directory(environ=os.environ)
 _DEFAULT_CERT_PATH = _DEFAULT_DATABASE_DIRECTORY / "certs" / "metalist-cert.pem"
 _DEFAULT_KEY_PATH = _DEFAULT_DATABASE_DIRECTORY / "certs" / "metalist-key.pem"
 _DEFAULT_RUNTIME_DIRECTORY = Path(tempfile.gettempdir()) / "metalist-runtime"
+if "METALIST_DATA_DIRECTORY" in os.environ:
+    _DEFAULT_RUNTIME_DIRECTORY = _DEFAULT_DATABASE_DIRECTORY / "runtime"
 _DEFAULT_NAMESPACES_DIRECTORY_NAME = "namespaces"
 _DEFAULT_NAMESPACE_DELETE_JOBS_DIRECTORY_NAME = "namespace-delete-jobs"
 _DEFAULT_NAMESPACE_RENAME_JOBS_DIRECTORY_NAME = "namespace-rename-jobs"

{metalist-0.4.1 → metalist-0.4.2}/app/services/agent/skills/__init__.py

@@ -12,5 +12,4 @@ def load_skill(name: str) -> str:
     return skill.rstrip("\n")
 
 
-SEARCH_NOTES_SKILL = load_skill("search-notes.md")
 SCOPED_INVESTIGATION_SKILL = load_skill("scoped-investigation.md")

{metalist-0.4.1 → metalist-0.4.2}/app/static/config/command_palette_tags.json

@@ -1,6 +1,5 @@
 {
   "endpoints": [
-    {"id": "action.insert_diagram", "tags": ["diagram", "drawing", "widget", "insert"]},
     {
       "id": "pref.show_backlinks",
       "tags": ["backlinks", "links", "show", "hide", "toggle", "view", "notes"]

{metalist-0.4.1 → metalist-0.4.2}/app/static/js/modules/command-palette/command-palette-controller.js

@@ -98,7 +98,7 @@ import { persistUsageBeforeActivation } from './activation-auth-policy.js';
 import { waitForCommandAvailability } from './backup-command-availability.js';
 import { buildCommandPaletteEndpoints } from './endpoint-registry.js';
 import { PreferencesStore } from './preferences-store.js';
-import { loadCommandPaletteTagMap } from './tag-config-loader.js';
+import { loadCommandPaletteTagMap, validateCommandPaletteTagMappings } from './tag-config-loader.js';
 import { UsageStore } from './usage-store.js';
 import {
     DEFAULT_NOTE_LAYOUT_SETTINGS,
@@ -452,34 +452,8 @@ class CommandPaletteController {
     }
 
     _mergeAndValidateTags() {
-        if (!(this._tagMap instanceof Map)) {
-            throw new Error('Command palette tag map not loaded');
-        }
-
-        const endpointsById = new Map();
-        for (const endpoint of this._endpoints) {
-            if (!endpoint || typeof endpoint !== 'object') {
-                throw new Error('Command palette endpoint registry contains invalid endpoint');
-            }
-            if (typeof endpoint.id !== 'string' || endpoint.id.length === 0) {
-                throw new Error('Command palette endpoints must have id');
-            }
-            if (endpointsById.has(endpoint.id)) {
-                throw new Error(`Duplicate command palette endpoint id: ${endpoint.id}`);
-            }
-            endpointsById.set(endpoint.id, endpoint);
-        }
-
-        for (const id of this._tagMap.keys()) {
-            if (!endpointsById.has(id)) {
-                throw new Error(`Tag config references unknown endpoint id: ${id}`);
-            }
-        }
-
+        validateCommandPaletteTagMappings(this._endpoints, this._tagMap);
         for (const endpoint of this._endpoints) {
-            if (!this._tagMap.has(endpoint.id)) {
-                throw new Error(`Endpoint ${endpoint.id} has no tag mapping in config`);
-            }
             endpoint.tags = this._tagMap.get(endpoint.id);
         }
     }

{metalist-0.4.1 → metalist-0.4.2}/app/static/js/modules/command-palette/tag-config-loader.js

@@ -1,3 +1,38 @@
+export function validateCommandPaletteTagMappings(endpoints, tagMap) {
+    if (!(tagMap instanceof Map)) {
+        throw new Error('Command palette tag map not loaded');
+    }
+    if (!Array.isArray(endpoints)) {
+        throw new Error('Command palette endpoint registry must be an array');
+    }
+
+    const endpointsById = new Map();
+    for (const endpoint of endpoints) {
+        if (!endpoint || typeof endpoint !== 'object') {
+            throw new Error('Command palette endpoint registry contains invalid endpoint');
+        }
+        if (typeof endpoint.id !== 'string' || endpoint.id.length === 0) {
+            throw new Error('Command palette endpoints must have id');
+        }
+        if (endpointsById.has(endpoint.id)) {
+            throw new Error(`Duplicate command palette endpoint id: ${endpoint.id}`);
+        }
+        endpointsById.set(endpoint.id, endpoint);
+    }
+
+    for (const id of tagMap.keys()) {
+        if (!endpointsById.has(id)) {
+            throw new Error(`Tag config references unknown endpoint id: ${id}`);
+        }
+    }
+
+    for (const endpoint of endpoints) {
+        if (!tagMap.has(endpoint.id)) {
+            throw new Error(`Endpoint ${endpoint.id} has no tag mapping in config`);
+        }
+    }
+}
+
 export async function loadCommandPaletteTagMap() {
     const response = await fetch('/static/config/command_palette_tags.json', {
         method: 'GET',
@@ -51,4 +86,3 @@ export async function loadCommandPaletteTagMap() {
 
     return tagMap;
 }
-

{metalist-0.4.1 → metalist-0.4.2}/app/version.py

@@ -1,3 +1,3 @@
 """Single authoritative MetaList application version."""
 
-__version__ = "0.4.1"
+__version__ = "0.4.2"

{metalist-0.4.1 → metalist-0.4.2}/main.py

@@ -14,6 +14,7 @@ import ssl
 from http.server import BaseHTTPRequestHandler
 from http.server import ThreadingHTTPServer
 from pathlib import Path
+from socketserver import TCPServer
 
 from app.server_runtime import apply_main_cli_args_to_environ
 from app.server_runtime import ensure_default_tls_pair
@@ -44,9 +45,17 @@ from app.services.windows_process_control import find_listening_pids_for_port as
 from app.services.windows_process_control import is_process_running as is_windows_process_running
 from app.services.windows_process_control import stop_process as stop_windows_process
 
+
+class _HttpsProxyServer(ThreadingHTTPServer):
+    def server_bind(self) -> None:
+        # The proxy needs its bound address, not a potentially blocking reverse DNS lookup.
+        TCPServer.server_bind(self)
+        self.server_name, self.server_port = self.server_address[:2]
+
+
 @dataclass(frozen=True)
 class _StartedHttpsProxy:
-    server: ThreadingHTTPServer
+    server: _HttpsProxyServer
     thread: threading.Thread
 
 
@@ -634,7 +643,7 @@ def _start_https_proxy_server(
             return
 
     _evict_processes_listening_on_port(port=https_port)
-    server = ThreadingHTTPServer((host, https_port), ProxyHandler)
+    server = _HttpsProxyServer((host, https_port), ProxyHandler)
     server.daemon_threads = True
     context = ssl.SSLContext(ssl.PROTOCOL_TLS_SERVER)
     context.load_cert_chain(certfile=ssl_certfile, keyfile=ssl_keyfile)

{metalist-0.4.1 → metalist-0.4.2/metalist.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: metalist
-Version: 0.4.1
+Version: 0.4.2
 Summary: A minimalist single-user note-taking app with SSR, fast in-memory tree operations, and efficient sync.
 Project-URL: Homepage, https://github.com/evolvingstuff/metalist
 Project-URL: Repository, https://github.com/evolvingstuff/metalist
@@ -106,7 +106,7 @@ The updater checks the installed version against the latest PyPI release first.
 
 Backups are saved to `~/MetaList/namespaces/<namespace>/backups/<namespace>-<timestamp>.metalist-backup.tar.gz`; the updater prints each verified path. Existing backups remain unchanged and are not pruned. If any backup fails, the update aborts with the current installation intact; run `metalist` to restart the stopped servers after resolving the failure.
 
-Only after all backups pass does the updater hand off to an external PowerShell process on Windows or `/bin/sh` on macOS/Linux so the installed environment can unlock. It installs the exact version reported by PyPI with a forced cache refresh, launches MetaList again, and reports the installed version (for example, `MetaList updated to v0.4.1.`). This protection requires an installed version containing the backup safeguard and applies to `metalist update`; direct pip/uv install commands do not run it.
+Only after all backups pass does the updater hand off to an external PowerShell process on Windows or `/bin/sh` on macOS/Linux so the installed environment can unlock. It installs the exact version reported by PyPI with a forced cache refresh, launches MetaList again, and reports the installed version (for example, `MetaList updated to v0.4.2.`). This protection requires an installed version containing the backup safeguard and applies to `metalist update`; direct pip/uv install commands do not run it.
 
 For pip, users can run `pip install metalist`. For a non-editable local install from this checkout, use `uv pip install .` or `pip install .` instead of the editable command below.
 
@@ -119,6 +119,8 @@ npm install
 ```
 
 ### Run
+
+Persistent data defaults to `~/MetaList`. Set `METALIST_DATA_DIRECTORY` to an absolute directory path before launch to use a separate data root, including namespaces, backups, certificates, logs, and runtime jobs. This is used by release tests to keep their disposable data separate from real notes.
 The installed entrypoint starts or restarts every known namespace, prints their URLs, and exits:
 ```bash
 metalist

{metalist-0.4.1 → metalist-0.4.2}/metalist.egg-info/SOURCES.txt

@@ -5,6 +5,7 @@ main.py
 pyproject.toml
 app/__init__.py
 app/config.py
+app/data_directory.py
 app/encryption_audit.py
 app/main.py
 app/server_runtime.py
@@ -182,7 +183,6 @@ app/services/agent/prompts/system.md
 app/services/agent/prompts/tool-result.md
 app/services/agent/skills/__init__.py
 app/services/agent/skills/scoped-investigation.md
-app/services/agent/skills/search-notes.md
 app/static/note-html-policy.json
 app/static/config/command_palette_tags.json
 app/static/css/forms.css

metalist-0.4.1/app/services/agent/skills/search-notes.md

@@ -1,25 +0,0 @@
-# Search Notes
-
-This skill is active because the agent selected `search_notes`. Produce one
-focused MetaList query through the structured schema supplied by the inference
-layer. There are no result pages.
-
-The final user message is the current request. Use earlier conversation only when
-the current request explicitly depends on it. Never carry an unrelated earlier
-topic into a new query as either a positive or negative term.
-
-MetaList search syntax:
-
-- Unquoted terms match tags. `foo bar` requires both tags.
-- Quoted phrases match exact note text. `"lorem ipsum"` requires that phrase.
-- A leading minus excludes a tag or phrase.
-- Uppercase `OR` separates clauses.
-- Every clause must contain at least one positive term.
-
-For a broad topical request, cover tag and text forms in the first query:
-`foo OR "foo"` or `foo bar OR "foo bar"`. Prefer the narrowest query supported
-by the request.
-
-The tool returns one ordered, token-bounded payload containing full content for
-matching notes. It reports how many trailing result trees were omitted. Do not
-request another page. If omission materially limits the answer, say so.