flowgraphapp 0.1.1__py3-none-any.whl

flowgraph/update_check.py

@@ -0,0 +1,118 @@
+"""Courtesy update check — modelled on pip's self_outdated_check.
+
+- Queries https://pypi.org/pypi/flowgraphapp/json (no telemetry, decoupled from any
+  analytics) at most once per TTL, caching the result in a per-user statefile.
+- Fully non-blocking (background daemon thread) and crash-proof (all exceptions
+  swallowed) — never delays startup, never errors when offline.
+- Opt-out via FLOWGRAPH_NO_UPDATE_CHECK=1, the --no-update-check flag, or config.
+- Never auto-installs. Prints a calm one-line notice with the upgrade command,
+  pipx-aware. (Silent auto-update is a supply-chain risk — see docs/18 §updates.)
+"""
+
+from __future__ import annotations
+
+import json
+import os
+import sys
+import threading
+import time
+from typing import Callable, Optional
+
+from . import __version__
+from .config import cache_dir
+
+DIST_NAME = "flowgraphapp"
+PYPI_JSON_URL = f"https://pypi.org/pypi/{DIST_NAME}/json"
+TTL_SECONDS = 24 * 3600
+
+
+def opted_out() -> bool:
+    return os.environ.get("FLOWGRAPH_NO_UPDATE_CHECK", "").lower() in ("1", "true", "yes", "on")
+
+
+def installed_version() -> str:
+    try:
+        from importlib.metadata import version
+        return version(DIST_NAME)
+    except Exception:
+        return __version__
+
+
+def _state_file():
+    return cache_dir() / "update-check.json"
+
+
+def _read_cache() -> Optional[dict]:
+    try:
+        return json.loads(_state_file().read_text(encoding="utf-8"))
+    except Exception:
+        return None
+
+
+def _write_cache(latest: str) -> None:
+    try:
+        _state_file().write_text(
+            json.dumps({"last_check": time.time(), "latest": latest}), encoding="utf-8"
+        )
+    except Exception:
+        pass
+
+
+def _is_newer(latest: str, current: str) -> bool:
+    try:
+        from packaging.version import Version
+        return Version(latest) > Version(current)
+    except Exception:
+        # Conservative fallback: only flag on a clean numeric-tuple comparison.
+        def parts(v):
+            return tuple(int(x) for x in v.split(".") if x.isdigit())
+        try:
+            return parts(latest) > parts(current)
+        except Exception:
+            return False
+
+
+def _fetch_latest(timeout: float = 2.5) -> Optional[str]:
+    try:
+        import httpx
+        r = httpx.get(PYPI_JSON_URL, timeout=timeout, headers={"accept": "application/json"})
+        if r.status_code == 200:
+            return r.json()["info"]["version"]
+    except Exception:
+        return None
+    return None
+
+
+def _upgrade_command() -> str:
+    # pipx installs live in a dedicated venv; plain `pip install` inside it can break it.
+    if "PIPX_HOME" in os.environ or os.sep + "pipx" + os.sep in (sys.prefix or ""):
+        return f"pipx upgrade {DIST_NAME}"
+    return f"pip install -U {DIST_NAME}"
+
+
+def _run(emit: Callable[[str], None]) -> None:
+    try:
+        current = installed_version()
+        cache = _read_cache()
+        latest = None
+        if cache and (time.time() - cache.get("last_check", 0)) < TTL_SECONDS:
+            latest = cache.get("latest")
+        else:
+            latest = _fetch_latest()
+            if latest:
+                _write_cache(latest)
+        if latest and _is_newer(latest, current):
+            emit(
+                f"A new version of FlowGraph is available: {current} -> {latest}. "
+                f"Upgrade with: {_upgrade_command()}"
+            )
+    except Exception:
+        pass  # never let the courtesy check surface an error
+
+
+def check_in_background(emit: Optional[Callable[[str], None]] = None) -> None:
+    """Spawn a daemon thread to check + emit. No-op if opted out."""
+    if opted_out():
+        return
+    out = emit or (lambda msg: print(f"[flowgraph] {msg}", file=sys.stderr))
+    threading.Thread(target=_run, args=(out,), daemon=True).start()

flowgraphapp-0.1.1.dist-info/METADATA

@@ -0,0 +1,108 @@
+Metadata-Version: 2.4
+Name: flowgraphapp
+Version: 0.1.1
+Summary: FlowGraph — local-first knowledge-graph canvas + AI planner, run securely on your own machine.
+Project-URL: Homepage, https://flow-graph.com
+Author: Naveen
+License: FlowGraph — Proprietary License
+        Copyright (c) 2026 Naveen. All rights reserved.
+        
+        This software and its source code (the "Software") are the confidential and
+        proprietary property of the copyright holder. No license, right, or permission
+        is granted to any person to use, copy, modify, merge, publish, distribute,
+        sublicense, sell, or create derivative works of the Software, in whole or in
+        part, without the prior written consent of the copyright holder.
+        
+        Unauthorized copying, distribution, or use of the Software, via any medium, is
+        strictly prohibited.
+        
+        THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+        IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+        FOR A PARTICULAR PURPOSE, AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+        COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES, OR OTHER LIABILITY, WHETHER
+        IN AN ACTION OF CONTRACT, TORT, OR OTHERWISE, ARISING FROM, OUT OF, OR IN
+        CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+License-File: LICENSE
+Keywords: ai,canvas,graph,knowledge-graph,local-first,planner
+Classifier: Environment :: Web Environment
+Classifier: Framework :: FastAPI
+Classifier: Intended Audience :: End Users/Desktop
+Classifier: License :: Other/Proprietary License
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Topic :: Office/Business
+Requires-Python: >=3.9
+Requires-Dist: fastapi>=0.115
+Requires-Dist: httpx>=0.27
+Requires-Dist: keyring>=25.0
+Requires-Dist: packaging>=23.0
+Requires-Dist: platformdirs>=4.2
+Requires-Dist: typer>=0.12
+Requires-Dist: uvicorn[standard]>=0.30
+Provides-Extra: dev
+Requires-Dist: pytest-asyncio>=0.23; extra == 'dev'
+Requires-Dist: pytest>=8; extra == 'dev'
+Provides-Extra: local-embeddings
+Description-Content-Type: text/markdown
+
+# FlowGraph — local server (`flowgraphapp`)
+
+Run FlowGraph — the local-first knowledge-graph canvas + AI planner — on your own
+machine. Same app as [flow-graph.com](https://flow-graph.com), served from a hardened
+localhost server; your data stays in your browser, and (optionally) your AI key stays
+in your OS keychain instead of the browser.
+
+## Install
+
+**From PyPI** (once published):
+
+```bash
+pip install flowgraphapp      # or, isolated:  pipx install flowgraphapp
+flowgraph                     # serves http://127.0.0.1:8765 and opens your browser
+```
+
+**From source** (works today, before the PyPI release):
+
+```bash
+# 1. build the frontend once
+cd app && npm run build && cd ..
+# 2. install the local server (use a venv or pipx to keep it isolated)
+cd server && pip install .
+# 3. run it
+flowgraph
+```
+
+Stop with `Ctrl-C`. Options: `flowgraph --port 0` (auto-pick a free port),
+`--no-open` (don't open the browser), `flowgraph --help`.
+
+## Why local
+
+- **Offline / air-gapped** — no Cloudflare, no network required for the app itself.
+- **Privacy / data locality** — your graph lives in the browser's IndexedDB on this machine.
+- **On-device models** — point at Ollama / LM Studio for zero-key, zero-cost AI.
+- **No size ceiling** — not bound by hosting per-file limits as the app grows.
+
+## AI
+
+Local-model-first: if a local runtime (Ollama `:11434`, LM Studio `:1234`) is reachable,
+it's used with **no key**. Otherwise bring your own provider key — stored in the OS
+keychain, used server-side, **never sent to the browser**:
+
+```bash
+flowgraph keys set anthropic     # or openrouter / openai / google / deepseek
+flowgraph keys list              # shows source, never the key
+```
+
+## Security (safe by default)
+
+Binds **loopback only** (`127.0.0.1`); a per-session token is required (delivered via the
+terminal + a `0600` file; the auto-opened URL carries a one-time ticket, never the token).
+Host-header allow-listing blocks DNS-rebinding from websites you visit; Origin checks,
+strict CSP, and security headers apply to every route. Exposing beyond loopback
+(`--allow-lan`) requires TLS. See `docs/18-local-server.md` for the full threat model.
+
+## Updates
+
+`pip install -U flowgraphapp` (or `flowgraph upgrade`) updates the app and server together;
+your data is untouched. A calm one-line "update available" notice appears at startup —
+disable with `FLOWGRAPH_NO_UPDATE_CHECK=1`.

flowgraphapp-0.1.1.dist-info/RECORD

@@ -0,0 +1,25 @@
+flowgraph/__init__.py,sha256=Uhhd9AenUsWYKcisXTq-37rr0foMdM2UTbb5QlPxcsw,309
+flowgraph/ai_proxy.py,sha256=1ilSEhSZM9k_aolvoszk7UbfTKroRKtxASsnNIb43d8,5718
+flowgraph/cli.py,sha256=vMQhhBqWlzzQcrW6W7kOIf9yIR8T25syIn-_n4tRrhk,7247
+flowgraph/config.py,sha256=jNPbD9035vplcjxgnolSimz9lvW7Xs5E_On3DUG8LSw,4103
+flowgraph/keys.py,sha256=YzRN50vLrrGRDa4g5R8LKJXLn5-_O6gf3llREpfRxXc,3531
+flowgraph/providers.py,sha256=3gy0zZ1Trdty2Zf8Nohy0sretvE8DcWvFCJI02xQwoE,2854
+flowgraph/runtime_config.py,sha256=KHqCgKzXMEFIYubyEI2pOb6BhZCV88IGgmdYxM1PNcA,1125
+flowgraph/security.py,sha256=lcqKRysA5NoFHVg7gS2mbGrGM8XL15RReMHQYglyjZ0,11187
+flowgraph/server.py,sha256=qx457Egvvcix7h6vocsxZCeGubwtLeLfr3ybXJIAb-c,4169
+flowgraph/update_check.py,sha256=3wgVTHIwt6WMAQnQLxeh5NfVtBXakyZCAX5-PpFlETE,3762
+flowgraph/_static/_headers,sha256=cmOyww5lRS1Z8w2O6wiZjrpyxp33tc2CdqsibZb4hPs,928
+flowgraph/_static/favicon.svg,sha256=YbyaFh3lgkgojmkFQl1xgPBiTChlAHuX12P9rBIEOmY,9522
+flowgraph/_static/icons.svg,sha256=tF-lBhlc_N70BrqfDHezbdwafCJAQJJuxwq8L96nuTo,5031
+flowgraph/_static/index.html,sha256=kMrXQIA0FoEPmfZgZiaVFhXolAuDWRe0xzLYDhIp0Og,588
+flowgraph/_static/assets/JsonCodeEditor-CBMWkoPU.js,sha256=4DaslSm9-DGkLjwkW8nBx0KTE0gy1MliYTQCLlSdR7M,425248
+flowgraph/_static/assets/index-BE9FlCos.css,sha256=TGkndYbWTDsGCUT7slQAGKijdPm82ToRAwckK-K2710,101924
+flowgraph/_static/assets/index-SiLO3vOy.js,sha256=RAJlyg65El-9_Zzctnf8nQv4IOGW1g3Gnz0VDEhXRAU,2466100
+flowgraph/_static/assets/pdf-B_9Q7Dif.js,sha256=cQc6BUyoLXNJSXYcWQx5dyUR55AMx-8v4g1eLciX1JY,330039
+flowgraph/_static/assets/pdf.worker.min-0p99Cwul.js,sha256=T6e89-gp6ttTvgPHTEVUTIBt6muWufonUckbrRlqZDg,90
+flowgraph/_static/assets/pdf.worker.min-yatZIOMy.mjs,sha256=G6oYRMicgKWyeXyRbnWrKSVL5G2OnLU8tjZNeq2EvjY,1375838
+flowgraphapp-0.1.1.dist-info/METADATA,sha256=h1Kbc6BWahctVocp8vEIeMEuk3UdkMmn5Ej5a4X5OmA,4619
+flowgraphapp-0.1.1.dist-info/WHEEL,sha256=mffPy8wBnZQn2VnJUU5jE99KsxaSfiyMHV9Yt0aLVxs,87
+flowgraphapp-0.1.1.dist-info/entry_points.txt,sha256=Q5JhUIRD3j94Lg8tJFPeN6Rhn0roW3GzKF761hseDlU,49
+flowgraphapp-0.1.1.dist-info/licenses/LICENSE,sha256=JdzzOu6vvblaVZfl3KYyd6Qvbfm39m8EjV3xSL2J8Hw,1022
+flowgraphapp-0.1.1.dist-info/RECORD,,

flowgraphapp-0.1.1.dist-info/WHEEL

@@ -0,0 +1,4 @@
+Wheel-Version: 1.0
+Generator: hatchling 1.30.1
+Root-Is-Purelib: true
+Tag: py3-none-any

flowgraphapp-0.1.1.dist-info/entry_points.txt

@@ -0,0 +1,2 @@
+[console_scripts]
+flowgraph = flowgraph.cli:main

flowgraphapp-0.1.1.dist-info/licenses/LICENSE

@@ -0,0 +1,18 @@
+FlowGraph — Proprietary License
+Copyright (c) 2026 Naveen. All rights reserved.
+
+This software and its source code (the "Software") are the confidential and
+proprietary property of the copyright holder. No license, right, or permission
+is granted to any person to use, copy, modify, merge, publish, distribute,
+sublicense, sell, or create derivative works of the Software, in whole or in
+part, without the prior written consent of the copyright holder.
+
+Unauthorized copying, distribution, or use of the Software, via any medium, is
+strictly prohibited.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE, AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES, OR OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT, OR OTHERWISE, ARISING FROM, OUT OF, OR IN
+CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.