MetaList 0.7.0__tar.gz → 0.7.1__tar.gz

{metalist-0.7.0 → metalist-0.7.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: metalist
-Version: 0.7.0
+Version: 0.7.1
 Summary: A minimalist single-user note-taking app with SSR, fast in-memory tree operations, and efficient sync.
 Project-URL: Homepage, https://github.com/evolvingstuff/metalist
 Project-URL: Repository, https://github.com/evolvingstuff/metalist
@@ -213,6 +213,18 @@ METALIST_HOST=192.168.1.20 metalist
 ```
 On a fresh machine, that first launch also creates the default TLS cert pair automatically. Then open either `http://192.168.1.20:8000` or `https://192.168.1.20:8443` from the other machine.
 
+Starting with 0.7.1, an explicit `METALIST_HOST` or `METALIST_ALLOWED_HOSTS`
+configuration is saved in `~/MetaList/network-settings.json` (under
+`METALIST_DATA_DIRECTORY` when overridden). Subsequent source launches, plain
+`metalist` launches, and updates reuse it. Environment values override and update
+the corresponding saved settings. This file stores only the bind address and
+allowed hosts; namespace ports remain in their launch profiles, and shell access
+still requires `--enable-shell` on each launch. Invalid settings stop startup
+with an error. Fresh installations continue to bind to localhost by default.
+To switch back to local-only access, run `METALIST_HOST=127.0.0.1 metalist` once.
+Older installed versions do not read this file; keep supplying their LAN settings
+until upgrading to 0.7.1 or later.
+
 To keep `@shell` available on the host laptop while allowing another laptop to
 use normal MetaList features, bind both interfaces and explicitly allow the LAN
 address:

{metalist-0.7.0 → metalist-0.7.1}/README.md

@@ -177,6 +177,18 @@ METALIST_HOST=192.168.1.20 metalist
 ```
 On a fresh machine, that first launch also creates the default TLS cert pair automatically. Then open either `http://192.168.1.20:8000` or `https://192.168.1.20:8443` from the other machine.
 
+Starting with 0.7.1, an explicit `METALIST_HOST` or `METALIST_ALLOWED_HOSTS`
+configuration is saved in `~/MetaList/network-settings.json` (under
+`METALIST_DATA_DIRECTORY` when overridden). Subsequent source launches, plain
+`metalist` launches, and updates reuse it. Environment values override and update
+the corresponding saved settings. This file stores only the bind address and
+allowed hosts; namespace ports remain in their launch profiles, and shell access
+still requires `--enable-shell` on each launch. Invalid settings stop startup
+with an error. Fresh installations continue to bind to localhost by default.
+To switch back to local-only access, run `METALIST_HOST=127.0.0.1 metalist` once.
+Older installed versions do not read this file; keep supplying their LAN settings
+until upgrading to 0.7.1 or later.
+
 To keep `@shell` available on the host laptop while allowing another laptop to
 use normal MetaList features, bind both interfaces and explicitly allow the LAN
 address:

{metalist-0.7.0 → metalist-0.7.1}/app/exception_boundaries.py

@@ -78,9 +78,9 @@ CAPTURE_BOUNDARIES = {
     # Translate explicitly validated domain input/resource rejection.
     'app/main.py:namespace_renamed_page:job_record_capture': ('NamespaceInputRejected', 'FileNotFoundError'),
     # Parse external host, URL, IP or date input at the named boundary.
-    'app/security/request_boundary.py:_normalize_configured_hostname:normalize_capture': ('ValueError',),
+    'app/security/request_hosts.py:_normalize_configured_hostname:normalize_capture': ('ValueError',),
     # Parse external host, URL, IP or date input at the named boundary.
-    'app/security/request_boundary.py:_normalize_hostname:ip_capture': ('ValueError',),
+    'app/security/request_hosts.py:_normalize_hostname:ip_capture': ('ValueError',),
     # Parse external host, URL, IP or date input at the named boundary.
     'app/security/request_boundary.py:_parse_host_header:parse_capture': ('ValueError',),
     # Parse external host, URL, IP or date input at the named boundary.

metalist-0.7.1/app/network_settings.py

@@ -0,0 +1,61 @@
+"""Machine network preferences shared by source and installed entrypoints.
+
+Only an explicit bind address/allowed-host configuration opts into persistence.
+Namespace ports, shell capability, credentials, and backups are not stored here.
+"""
+from __future__ import annotations
+
+from collections.abc import MutableMapping
+import json
+import os
+from pathlib import Path
+from uuid import uuid4
+
+from app.data_directory import resolve_data_directory
+from app.security.request_hosts import resolve_allowed_request_hosts
+
+
+_NETWORK_ENVIRONMENT_KEYS = frozenset({'METALIST_HOST', 'METALIST_ALLOWED_HOSTS'})
+
+
+def _validate_network_environment(environment: object) -> dict[str, str]:
+    if not isinstance(environment, dict) or not environment.keys() <= _NETWORK_ENVIRONMENT_KEYS:
+        raise RuntimeError('Network settings must contain only bind-address and allowed-host preferences')
+    if any(not isinstance(value, str) for value in environment.values()):
+        raise RuntimeError('Network settings values must be strings')
+    resolve_allowed_request_hosts(environ=environment)
+    return dict(environment)
+
+
+def _read_network_settings(path: Path) -> dict[str, str]:
+    if not path.exists():
+        return {}
+    payload = json.loads(path.read_text(encoding='utf-8'))
+    if (not isinstance(payload, dict) or set(payload) != {'version', 'environment'}
+            or type(payload['version']) is not int or payload['version'] != 1):
+        raise RuntimeError(f'Invalid network settings file: {path}')
+    return _validate_network_environment(payload['environment'])
+
+
+def _write_network_settings(path: Path, environment: dict[str, str]) -> None:
+    assert path.name == 'network-settings.json'
+    path.parent.mkdir(parents=True, exist_ok=True)
+    temporary = path.with_name(f'.network-settings-{uuid4().hex}.tmp')
+    try:
+        with temporary.open('x', encoding='utf-8') as stream:
+            json.dump({'version': 1, 'environment': environment}, stream, indent=2)
+            stream.write('\n')
+        os.replace(temporary, path)
+    finally:
+        temporary.unlink(missing_ok=True)
+
+
+def apply_network_settings(*, environ: MutableMapping[str, str], persist: bool) -> None:
+    path = resolve_data_directory(environ=environ) / 'network-settings.json'
+    saved = _read_network_settings(path)
+    configured = {key: environ[key] for key in _NETWORK_ENVIRONMENT_KEYS if key in environ}
+    effective = _validate_network_environment(saved | configured)
+    if persist and effective != saved:
+        _write_network_settings(path, effective)
+        print(f'[startup] Saved network settings: {path}', flush=True)
+    environ.update(effective)

{metalist-0.7.0 → metalist-0.7.1}/app/security/request_boundary.py

@@ -1,9 +1,6 @@
 from __future__ import annotations
 
-from collections.abc import Mapping
 from dataclasses import dataclass
-import ipaddress
-import re
 from urllib.parse import urlsplit
 
 from fastapi import Request
@@ -12,14 +9,10 @@ from starlette.middleware.base import BaseHTTPMiddleware
 
 from app.api.request_auth import AUTH_COOKIE_NAME
 from app.services.exception_capture import CapturedExceptionContext
+from app.security.request_hosts import _normalize_hostname, resolve_allowed_request_hosts
 
 
-_LOOPBACK_REQUEST_HOSTS = frozenset({"127.0.0.1", "::1", "localhost"})
-_WILDCARD_BIND_HOSTS = frozenset({"0.0.0.0", "::"})
 _SAFE_METHODS = frozenset({"GET", "HEAD", "OPTIONS"})
-_DNS_HOSTNAME_PATTERN = re.compile(
-    r"^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*$"
-)
 
 
 @dataclass(frozen=True)
@@ -28,72 +21,6 @@ class RequestBoundaryRejection:
     detail: str
 
 
-def _normalize_hostname(*, hostname: str, context: str) -> str:
-    normalized = hostname.strip().casefold().rstrip(".")
-    if normalized == "":
-        raise ValueError(f"{context} hostname must not be empty")
-
-    ip_capture = CapturedExceptionContext(ValueError, boundary='app/security/request_boundary.py:_normalize_hostname:ip_capture')
-    parsed_ip: ipaddress._BaseAddress | None = None
-    with ip_capture:
-        parsed_ip = ipaddress.ip_address(normalized)
-    if ip_capture.captured_exception is None:
-        if parsed_ip is None:
-            raise RuntimeError("IP parser returned no address")
-        return parsed_ip.compressed.casefold()
-
-    if _DNS_HOSTNAME_PATTERN.fullmatch(normalized) is None:
-        raise ValueError(f"{context} contains an invalid hostname: {hostname!r}")
-    return normalized
-
-
-def _normalize_configured_hostname(*, raw_value: str) -> str:
-    value = raw_value.strip()
-    if value == "":
-        raise RuntimeError("METALIST_ALLOWED_HOSTS contains an empty entry")
-    if value == "*":
-        raise RuntimeError("METALIST_ALLOWED_HOSTS must not contain '*'")
-    if "://" in value or "/" in value or "@" in value:
-        raise RuntimeError(
-            "METALIST_ALLOWED_HOSTS entries must be hostnames without schemes, ports, or paths"
-        )
-
-    unbracketed_value = value
-    if value.startswith("[") and value.endswith("]"):
-        unbracketed_value = value[1:-1]
-    normalize_capture = CapturedExceptionContext(ValueError, boundary='app/security/request_boundary.py:_normalize_configured_hostname:normalize_capture')
-    normalized_hostname: str | None = None
-    with normalize_capture:
-        normalized_hostname = _normalize_hostname(
-            hostname=unbracketed_value,
-            context="METALIST_ALLOWED_HOSTS",
-        )
-    if normalize_capture.captured_exception is not None:
-        exc = normalize_capture.captured_exception
-        raise RuntimeError(str(exc)) from exc
-    if normalized_hostname is None:
-        raise RuntimeError("METALIST_ALLOWED_HOSTS parser returned no hostname")
-    return normalized_hostname
-
-
-def resolve_allowed_request_hosts(*, environ: Mapping[str, str]) -> frozenset[str]:
-    allowed_hosts = set(_LOOPBACK_REQUEST_HOSTS)
-    bind_host = environ.get("METALIST_HOST", "127.0.0.1").strip()
-    if bind_host == "":
-        raise RuntimeError("METALIST_HOST must not be empty")
-    normalized_bind_host = _normalize_configured_hostname(raw_value=bind_host)
-    if normalized_bind_host not in _WILDCARD_BIND_HOSTS:
-        allowed_hosts.add(normalized_bind_host)
-
-    configured_hosts = environ.get("METALIST_ALLOWED_HOSTS")
-    if configured_hosts is not None:
-        if configured_hosts.strip() == "":
-            raise RuntimeError("METALIST_ALLOWED_HOSTS must not be empty when set")
-        for raw_host in configured_hosts.split(","):
-            allowed_hosts.add(_normalize_configured_hostname(raw_value=raw_host))
-    return frozenset(allowed_hosts)
-
-
 def _parse_host_header(host_header: str) -> tuple[str, int | None] | None:
     raw_host = host_header.strip()
     if raw_host == "":

metalist-0.7.1/app/security/request_hosts.py

@@ -0,0 +1,83 @@
+"""Host validation shared by early launch settings and HTTP request checks."""
+from __future__ import annotations
+
+from collections.abc import Mapping
+import ipaddress
+import re
+
+from app.services.exception_capture import CapturedExceptionContext
+
+
+_LOOPBACK_REQUEST_HOSTS = frozenset({"127.0.0.1", "::1", "localhost"})
+_WILDCARD_BIND_HOSTS = frozenset({"0.0.0.0", "::"})
+_DNS_HOSTNAME_PATTERN = re.compile(
+    r"^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*$"
+)
+
+
+def _normalize_hostname(*, hostname: str, context: str) -> str:
+    normalized = hostname.strip().casefold().rstrip(".")
+    if normalized == "":
+        raise ValueError(f"{context} hostname must not be empty")
+
+    ip_capture = CapturedExceptionContext(ValueError, boundary='app/security/request_hosts.py:_normalize_hostname:ip_capture')
+    parsed_ip: ipaddress._BaseAddress | None = None
+    with ip_capture:
+        parsed_ip = ipaddress.ip_address(normalized)
+    if ip_capture.captured_exception is None:
+        if parsed_ip is None:
+            raise RuntimeError("IP parser returned no address")
+        return parsed_ip.compressed.casefold()
+
+    if _DNS_HOSTNAME_PATTERN.fullmatch(normalized) is None:
+        raise ValueError(f"{context} contains an invalid hostname: {hostname!r}")
+    return normalized
+
+
+def _normalize_configured_hostname(*, raw_value: str) -> str:
+    value = raw_value.strip()
+    if value == "":
+        raise RuntimeError("METALIST_ALLOWED_HOSTS contains an empty entry")
+    if value == "*":
+        raise RuntimeError("METALIST_ALLOWED_HOSTS must not contain '*'")
+    if "://" in value or "/" in value or "@" in value:
+        raise RuntimeError(
+            "METALIST_ALLOWED_HOSTS entries must be hostnames without schemes, ports, or paths"
+        )
+
+    unbracketed_value = value
+    if value.startswith("[") and value.endswith("]"):
+        unbracketed_value = value[1:-1]
+    normalize_capture = CapturedExceptionContext(ValueError, boundary='app/security/request_hosts.py:_normalize_configured_hostname:normalize_capture')
+    normalized_hostname: str | None = None
+    with normalize_capture:
+        normalized_hostname = _normalize_hostname(
+            hostname=unbracketed_value,
+            context="METALIST_ALLOWED_HOSTS",
+        )
+    if normalize_capture.captured_exception is not None:
+        exc = normalize_capture.captured_exception
+        raise RuntimeError(str(exc)) from exc
+    if normalized_hostname is None:
+        raise RuntimeError("METALIST_ALLOWED_HOSTS parser returned no hostname")
+    return normalized_hostname
+
+
+def resolve_allowed_request_hosts(*, environ: Mapping[str, str]) -> frozenset[str]:
+    allowed_hosts = set(_LOOPBACK_REQUEST_HOSTS)
+    bind_host = environ.get("METALIST_HOST", "127.0.0.1").strip()
+    if bind_host == "":
+        raise RuntimeError("METALIST_HOST must not be empty")
+    normalized_bind_host = _normalize_configured_hostname(raw_value=bind_host)
+    if normalized_bind_host not in _WILDCARD_BIND_HOSTS:
+        allowed_hosts.add(normalized_bind_host)
+
+    configured_hosts = environ.get("METALIST_ALLOWED_HOSTS")
+    if configured_hosts is not None:
+        if configured_hosts.strip() == "":
+            raise RuntimeError("METALIST_ALLOWED_HOSTS must not be empty when set")
+        for raw_host in configured_hosts.split(","):
+            allowed_hosts.add(_normalize_configured_hostname(raw_value=raw_host))
+    return frozenset(allowed_hosts)
+
+

{metalist-0.7.0 → metalist-0.7.1}/app/static/css/main.css

@@ -5565,6 +5565,11 @@ body.pref-show-ai-chat .chat-toggle-button {
 }
 
 /* Loading state styling */
+#version-info-modal:has([data-update-pending="true"]),
+#version-info-modal:has([data-update-pending="true"]) * {
+    cursor: wait !important;
+}
+
 body.loading {
     cursor: wait !important;
 }

{metalist-0.7.0 → metalist-0.7.1}/app/static/js/modules/modals/version-info-modal.js

@@ -124,6 +124,10 @@ export class VersionInfoModal extends BaseModal {
         const loading = state.loading === true;
         const error = typeof state.error === 'string' ? state.error : '';
         const info = state.info;
+        let isUpdating = state.updatePending;
+        if (state.updateJob !== null && !['complete', 'failed'].includes(state.updateJob.status)) {
+            isUpdating = true;
+        }
 
         let bodyHtml = '<p class="version-info-status">Loading version info...</p>';
         if (!loading && info !== null) {
@@ -137,7 +141,7 @@ export class VersionInfoModal extends BaseModal {
             <div class="modal-content version-info-modal-content">
                 <h3>Version Info</h3>
                 ${bodyHtml}
-                <section class="version-update-section" aria-live="polite">
+                <section class="version-update-section" aria-live="polite" data-update-pending="${isUpdating}">
                     <p>${escapeHtml(state.updateMessage)}</p>
                     ${this.buildUpdateControls(state)}
                 </section>

{metalist-0.7.0 → metalist-0.7.1}/app/version.py

@@ -1,3 +1,3 @@
 """Single authoritative MetaList application version."""
 
-__version__ = "0.7.0"
+__version__ = "0.7.1"

{metalist-0.7.0 → metalist-0.7.1}/main.py

@@ -25,6 +25,7 @@ from app.server_runtime import resolve_database_runtime_config
 from app.server_runtime import resolve_local_browser_host
 from app.server_runtime import resolve_main_server_config
 from app.server_runtime import resolve_namespaces_directory
+from app.server_runtime import resolve_test_mode
 from app.server_runtime import save_namespace_launch_profile
 from app.db.live_recovery import recover_pending_namespaces
 from app.encryption_audit import audit_all_namespaces
@@ -40,6 +41,7 @@ from app.services.namespace_switcher import ORCHESTRATED_CHILD_ENV_NAME
 from app.services.namespace_switcher import open_or_launch_all_namespaces
 from app.services.self_update import schedule_self_update
 from app.version import __version__
+from app.network_settings import apply_network_settings
 from app.security.shell_execution import enable_shell_execution_for_launch
 from app.security.shell_execution import is_shell_execution_enabled
 from app.services.windows_process_control import find_listening_pids_for_port as find_windows_listening_pids_for_port
@@ -600,6 +602,8 @@ def _start_https_proxy_server(
 def main(argv: list[str]) -> None:
     # Configure logging to filter noisy polling endpoints
     logging.getLogger("uvicorn.access").addFilter(FilterCheckUpdates())
+    if not resolve_test_mode(environ=os.environ, argv=argv):
+        apply_network_settings(environ=os.environ, persist=True)
     _record_self_executable_for_namespace_launch()
     _run_startup_sanity_gates(repo_root=Path(__file__).resolve().parent)
     _run_startup_encryption_audit(
@@ -644,6 +648,7 @@ def cli() -> None:
     if len(argv) != 0 and argv[0] == "update":
         if argv != ["update"]:
             raise RuntimeError("Usage: metalist update")
+        apply_network_settings(environ=os.environ, persist=True)
         metalist_executable = _resolve_current_entrypoint()
         if metalist_executable is None:
             raise RuntimeError("Could not resolve the installed MetaList executable")
@@ -661,6 +666,8 @@ def cli() -> None:
 
 def run_namespace_server(argv: list[str]) -> None:
     logging.getLogger("uvicorn.access").addFilter(FilterCheckUpdates())
+    if not resolve_test_mode(environ=os.environ, argv=argv):
+        apply_network_settings(environ=os.environ, persist=True)
     _run_startup_encryption_audit(
         namespaces_directory=resolve_namespaces_directory(),
     )
@@ -670,6 +677,8 @@ def run_namespace_server(argv: list[str]) -> None:
 
 def run_orchestrated_namespace_server(argv: list[str]) -> None:
     logging.getLogger("uvicorn.access").addFilter(FilterCheckUpdates())
+    if not resolve_test_mode(environ=os.environ, argv=argv):
+        apply_network_settings(environ=os.environ, persist=False)
     apply_main_cli_args_to_environ(argv=argv, environ=os.environ)
     _run_namespace_server_for_current_env(argv=argv)
 

{metalist-0.7.0 → metalist-0.7.1}/metalist.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: metalist
-Version: 0.7.0
+Version: 0.7.1
 Summary: A minimalist single-user note-taking app with SSR, fast in-memory tree operations, and efficient sync.
 Project-URL: Homepage, https://github.com/evolvingstuff/metalist
 Project-URL: Repository, https://github.com/evolvingstuff/metalist
@@ -213,6 +213,18 @@ METALIST_HOST=192.168.1.20 metalist
 ```
 On a fresh machine, that first launch also creates the default TLS cert pair automatically. Then open either `http://192.168.1.20:8000` or `https://192.168.1.20:8443` from the other machine.
 
+Starting with 0.7.1, an explicit `METALIST_HOST` or `METALIST_ALLOWED_HOSTS`
+configuration is saved in `~/MetaList/network-settings.json` (under
+`METALIST_DATA_DIRECTORY` when overridden). Subsequent source launches, plain
+`metalist` launches, and updates reuse it. Environment values override and update
+the corresponding saved settings. This file stores only the bind address and
+allowed hosts; namespace ports remain in their launch profiles, and shell access
+still requires `--enable-shell` on each launch. Invalid settings stop startup
+with an error. Fresh installations continue to bind to localhost by default.
+To switch back to local-only access, run `METALIST_HOST=127.0.0.1 metalist` once.
+Older installed versions do not read this file; keep supplying their LAN settings
+until upgrading to 0.7.1 or later.
+
 To keep `@shell` available on the host laptop while allowing another laptop to
 use normal MetaList features, bind both interfaces and explicitly allow the LAN
 address:

{metalist-0.7.0 → metalist-0.7.1}/metalist.egg-info/SOURCES.txt

@@ -10,6 +10,7 @@ app/encryption_audit.py
 app/exception_boundaries.py
 app/https_proxy.py
 app/main.py
+app/network_settings.py
 app/server_runtime.py
 app/startup_environment.py
 app/startup_js_sanity.py
@@ -72,6 +73,7 @@ app/security/encryption.py
 app/security/http_headers.py
 app/security/note_html.py
 app/security/request_boundary.py
+app/security/request_hosts.py
 app/security/sensitive_cache.py
 app/security/sensitive_logging.py
 app/security/shell_execution.py