footprinter-cli 1.0.3__tar.gz → 1.0.5__tar.gz

{footprinter_cli-1.0.3 → footprinter_cli-1.0.5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.2
 Name: footprinter-cli
-Version: 1.0.3
+Version: 1.0.5
 Summary: A local context layer for your files, browser history, chats, and email — searchable, user-owned, MCP-served.
 Author: SwellCity Group
 License: MIT
@@ -20,6 +20,8 @@ Classifier: Operating System :: MacOS
 Classifier: Operating System :: POSIX :: Linux
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
 Classifier: Topic :: Database
 Classifier: Topic :: Text Processing :: Indexing
 Classifier: Topic :: Scientific/Engineering :: Information Analysis
@@ -59,67 +61,52 @@ Requires-Dist: httpx<1.0,>=0.27.0; extra == "dev"
 
 Your work lives across filesystems, browsers, inboxes, chat histories, and other tools. Footprinter indexes those sources into a single local store, organizes them into the projects and groupings you define, and serves the result to AI agents through a governed access layer. You control what the agent can see. Everything stays on your machine.
 
-## Prerequisites
-
-- **Python 3.11 or newer.** Stock macOS ships with Python 3.9, which won't work — install a newer Python from [python.org](https://www.python.org/downloads/) (recommended) or via `brew install python@3.11`.
-- **macOS 13+** or **Linux**.
-- **Full Disk Access on macOS** for browser history indexing. Grant it to your terminal app under *System Settings → Privacy & Security → Full Disk Access*. `fp setup` will guide you through this when needed.
-
 ## Install
 
-The fastest path on a clean machine is the install script — it ensures Python 3.11+ is present and installs `footprinter-cli`:
+Requires **Python 3.11+** and **macOS 13+** or **Linux**. The install script checks your Python version and handles the rest:
 
 ```bash
-# Base install (CLI + MCP + HTTP API)
 curl -fsSL https://raw.githubusercontent.com/harringjohn/footprinter-cli/main/scripts/release/install.sh | bash
-
-# Full install (adds semantic search + document parsing)
-curl -fsSL https://raw.githubusercontent.com/harringjohn/footprinter-cli/main/scripts/release/install-full.sh | bash
 ```
 
-If you prefer to manage the install yourself, use **pipx** (recommended) — it isolates Footprinter and sidesteps the macOS install caveats noted below:
+Or install with **pipx** directly:
 
 ```bash
-brew install pipx
-pipx ensurepath           # then restart your terminal
 pipx install footprinter-cli
-pipx install 'footprinter-cli[full]'   # with semantic + parse
-```
-
-> **macOS caveats for manual installs:**
-> - **zsh** treats `[...]` as a glob, so keep the single quotes around any bracketed extras specifier (e.g. `'footprinter-cli[full]'`). Without quotes you'll see `zsh: no matches found`.
-> - **System and Homebrew Python** ship with PEP 668 enabled, which blocks bare `pip install` outside a venv. Use pipx (above) instead.
-> - **python.org-distributed Python** doesn't enforce PEP 668, so a bare `pip install footprinter-cli` outside pipx or a venv may succeed but place `fp` in `/Library/Frameworks/Python.framework/Versions/<x.y>/bin`, which isn't on `PATH` by default. Use pipx (above) or the install script.
-
-Inside an existing venv, `pip` works as expected:
-
-```bash
-./venv/bin/pip install footprinter-cli
-./venv/bin/pip install 'footprinter-cli[full]'
 ```
 
-The base install includes the indexing pipeline, CLI, MCP server, HTTP API, and token encryption. Optional extras add more:
+Either method installs three commands: `fp` (the CLI and indexing pipeline), `fp-mcp` (the MCP server for AI agents), and `fp-api` (the HTTP API). Optional extras add more:
 
 | Extra | What it adds |
 |-------|-------------|
 | `[semantic]` | Semantic search via ChromaDB + ONNX embeddings |
 | `[parse]` | PDF, Word, Excel, PowerPoint content extraction |
-| `[full]` | All optional extras (semantic + parse) |
+| `[full]` | Both of the above |
 
-> **Privacy note:** The `[semantic]` extra installs ChromaDB. Footprinter initializes
-> the ChromaDB client with `anonymized_telemetry=False`, so no telemetry is sent
-> regardless of which version pip resolves. ChromaDB also removed product telemetry
-> entirely in version 1.5.4. See
-> [Chroma OSS overview](https://docs.trychroma.com/docs/overview/oss) for details.
+To install with extras: use the [full install script](https://raw.githubusercontent.com/harringjohn/footprinter-cli/main/scripts/release/install-full.sh), or `pipx install 'footprinter-cli[full]'`.
 
-### Uninstall
+<details>
+<summary>Troubleshooting & alternative install methods</summary>
+
+**Python version:** Stock macOS ships Python 3.9. Install 3.11+ from [python.org](https://www.python.org/downloads/) or `brew install python@3.11`.
+
+**macOS caveats:**
+- zsh treats `[...]` as a glob — quote extras specifiers: `'footprinter-cli[full]'`
+- System/Homebrew Python blocks bare `pip install` (PEP 668) — use pipx or a venv instead
+
+**Inside an existing venv:** `pip install footprinter-cli` works as expected.
+
+**Full Disk Access:** Required for browser history indexing on macOS. `fp setup` will prompt you when needed.
+
+**ChromaDB telemetry:** Footprinter sets `anonymized_telemetry=False`. ChromaDB also removed product telemetry in v1.5.4. See [Chroma OSS overview](https://docs.trychroma.com/docs/overview/oss).
 
-`fp uninstall` cleans up the MCP entry and user data first, then run the appropriate package uninstall:
+</details>
+
+### Uninstall
 
 ```bash
-fp uninstall                                    # remove MCP entry + user data
-pipx uninstall footprinter-cli                  # if you installed via pipx
-./venv/bin/pip uninstall footprinter-cli        # if you installed inside a venv
+fp uninstall                        # remove MCP entry + user data
+pipx uninstall footprinter-cli      # remove the package
 ```
 
 ## Quick Start
@@ -156,14 +143,12 @@ Once configured, Claude can search your files, browse projects, and find related
 | **Local files** | Path, type, size, timestamps, content hash |
 | **Browser history** | Safari and Chrome — URLs, titles, visit times |
 | **Chat exports** | Claude and ChatGPT conversation exports |
-| **Email** | Subject, sender, recipients, body, timestamps — ingested via [connector plugins](#connectors) |
+| **Email** | Subject, sender, recipients, body, timestamps |
 | **Documents** | PDF, Word, Excel, PowerPoint content (with `[parse]` extra) |
 | **Semantic embeddings** | Conceptual similarity across all sources (with `[semantic]` extra) |
 
 What lands in the database — and when — is controlled by the **content storage tier** you opt into. By default, Footprinter only indexes metadata; it does not read your file content until you explicitly enable it. See [Content Storage](https://github.com/harringjohn/footprinter-cli/blob/main/reference/content-storage.md) for the full breakdown.
 
-Additional sources are available through [connector plugins](#connectors).
-
 ## CLI Commands
 
 All commands use the `fp` entry point.
@@ -175,41 +160,21 @@ All commands use the `fp` entry point.
 | `fp status` | System health and data counts |
 | `fp search` | Search across all indexed sources |
 | `fp connect` | Manage optional integrations |
-| `fp mcp` | MCP server and access policies |
-| `fp api` | Start the HTTP API server |
+| `fp permission` | Manage access policies (visibility, permissions) |
 | `fp view` | Browse indexed data (files, folders, projects, clients, chats, emails, visits) |
-| `fp upsert` | Create/update records, assign relationships, or soft-delete via `--status removed` |
-| `fp data` | Export data, generate templates, or import metadata corrections |
+| `fp add` | Create new entity records or import from CSV |
+| `fp update` | Update existing records by ID — status, assignments, metadata |
 | `fp delete` | Hard-delete a super entity (irreversible) |
-| `fp vectorize` | Manage per-record vectorization control |
-| `fp doctor` | Post-install health check (Python version, install location, FDA, MCP wiring) |
+| `fp doctor` | Post-install health check (Python version, platform, FDA, MCP wiring) |
 | `fp uninstall` | Remove Footprinter — MCP entry, user data, package |
 
 Run `fp <command> --help` for full usage.
 
-## Connectors
-
-Connector plugins add external data sources like email, cloud storage, and third-party services. They install alongside Footprinter and register automatically:
-
-```bash
-pip install footprinter-<name>
-```
-
-First-party and community connectors are in development — check the repository for updates.
-
-Use `fp connect list` to see available connectors and their status.
-
 ## Architecture
 
 Single-process CLI with optional MCP server. SQLite database. No containers, no cloud, no accounts.
 
-Sources are scanned into SQLite with bidirectional links connecting local files to remote backups via content hash matching. Embeddings are generated at ingest time for semantic search. The MCP server exposes indexed data with two-layer access control (visibility + permissions) — you decide what agents can see.
-
-## Requirements
-
-- Python 3.11+
-- macOS 13+ or Linux
-- Full Disk Access on macOS (for browser history)
+Sources are scanned into SQLite with bidirectional links connecting local files to remote backups via content hash matching. Embeddings are generated at ingest time for semantic search. The MCP server exposes indexed data with two-layer access control (visibility + access) — you decide what agents can see.
 
 ## Documentation
 
@@ -223,13 +188,11 @@ Sources are scanned into SQLite with bidirectional links connecting local files
 
 Bug fixes, documentation, and tests welcome. For new features or architectural changes, [open an issue](https://github.com/harringjohn/footprinter-cli/issues) first to discuss the approach.
 
-Connector plugins use an internal API that isn't stable yet — we're not accepting connector contributions at this time.
-
 ### Development setup
 
 ```bash
 git clone https://github.com/harringjohn/footprinter-cli.git
-cd footprinter
+cd footprinter-cli
 python3 -m venv venv
 ./venv/bin/pip install -e ".[dev]"
 ```

{footprinter_cli-1.0.3 → footprinter_cli-1.0.5}/README.md

@@ -7,67 +7,52 @@
 
 Your work lives across filesystems, browsers, inboxes, chat histories, and other tools. Footprinter indexes those sources into a single local store, organizes them into the projects and groupings you define, and serves the result to AI agents through a governed access layer. You control what the agent can see. Everything stays on your machine.
 
-## Prerequisites
-
-- **Python 3.11 or newer.** Stock macOS ships with Python 3.9, which won't work — install a newer Python from [python.org](https://www.python.org/downloads/) (recommended) or via `brew install python@3.11`.
-- **macOS 13+** or **Linux**.
-- **Full Disk Access on macOS** for browser history indexing. Grant it to your terminal app under *System Settings → Privacy & Security → Full Disk Access*. `fp setup` will guide you through this when needed.
-
 ## Install
 
-The fastest path on a clean machine is the install script — it ensures Python 3.11+ is present and installs `footprinter-cli`:
+Requires **Python 3.11+** and **macOS 13+** or **Linux**. The install script checks your Python version and handles the rest:
 
 ```bash
-# Base install (CLI + MCP + HTTP API)
 curl -fsSL https://raw.githubusercontent.com/harringjohn/footprinter-cli/main/scripts/release/install.sh | bash
-
-# Full install (adds semantic search + document parsing)
-curl -fsSL https://raw.githubusercontent.com/harringjohn/footprinter-cli/main/scripts/release/install-full.sh | bash
 ```
 
-If you prefer to manage the install yourself, use **pipx** (recommended) — it isolates Footprinter and sidesteps the macOS install caveats noted below:
+Or install with **pipx** directly:
 
 ```bash
-brew install pipx
-pipx ensurepath           # then restart your terminal
 pipx install footprinter-cli
-pipx install 'footprinter-cli[full]'   # with semantic + parse
-```
-
-> **macOS caveats for manual installs:**
-> - **zsh** treats `[...]` as a glob, so keep the single quotes around any bracketed extras specifier (e.g. `'footprinter-cli[full]'`). Without quotes you'll see `zsh: no matches found`.
-> - **System and Homebrew Python** ship with PEP 668 enabled, which blocks bare `pip install` outside a venv. Use pipx (above) instead.
-> - **python.org-distributed Python** doesn't enforce PEP 668, so a bare `pip install footprinter-cli` outside pipx or a venv may succeed but place `fp` in `/Library/Frameworks/Python.framework/Versions/<x.y>/bin`, which isn't on `PATH` by default. Use pipx (above) or the install script.
-
-Inside an existing venv, `pip` works as expected:
-
-```bash
-./venv/bin/pip install footprinter-cli
-./venv/bin/pip install 'footprinter-cli[full]'
 ```
 
-The base install includes the indexing pipeline, CLI, MCP server, HTTP API, and token encryption. Optional extras add more:
+Either method installs three commands: `fp` (the CLI and indexing pipeline), `fp-mcp` (the MCP server for AI agents), and `fp-api` (the HTTP API). Optional extras add more:
 
 | Extra | What it adds |
 |-------|-------------|
 | `[semantic]` | Semantic search via ChromaDB + ONNX embeddings |
 | `[parse]` | PDF, Word, Excel, PowerPoint content extraction |
-| `[full]` | All optional extras (semantic + parse) |
+| `[full]` | Both of the above |
 
-> **Privacy note:** The `[semantic]` extra installs ChromaDB. Footprinter initializes
-> the ChromaDB client with `anonymized_telemetry=False`, so no telemetry is sent
-> regardless of which version pip resolves. ChromaDB also removed product telemetry
-> entirely in version 1.5.4. See
-> [Chroma OSS overview](https://docs.trychroma.com/docs/overview/oss) for details.
+To install with extras: use the [full install script](https://raw.githubusercontent.com/harringjohn/footprinter-cli/main/scripts/release/install-full.sh), or `pipx install 'footprinter-cli[full]'`.
 
-### Uninstall
+<details>
+<summary>Troubleshooting & alternative install methods</summary>
+
+**Python version:** Stock macOS ships Python 3.9. Install 3.11+ from [python.org](https://www.python.org/downloads/) or `brew install python@3.11`.
+
+**macOS caveats:**
+- zsh treats `[...]` as a glob — quote extras specifiers: `'footprinter-cli[full]'`
+- System/Homebrew Python blocks bare `pip install` (PEP 668) — use pipx or a venv instead
+
+**Inside an existing venv:** `pip install footprinter-cli` works as expected.
+
+**Full Disk Access:** Required for browser history indexing on macOS. `fp setup` will prompt you when needed.
+
+**ChromaDB telemetry:** Footprinter sets `anonymized_telemetry=False`. ChromaDB also removed product telemetry in v1.5.4. See [Chroma OSS overview](https://docs.trychroma.com/docs/overview/oss).
 
-`fp uninstall` cleans up the MCP entry and user data first, then run the appropriate package uninstall:
+</details>
+
+### Uninstall
 
 ```bash
-fp uninstall                                    # remove MCP entry + user data
-pipx uninstall footprinter-cli                  # if you installed via pipx
-./venv/bin/pip uninstall footprinter-cli        # if you installed inside a venv
+fp uninstall                        # remove MCP entry + user data
+pipx uninstall footprinter-cli      # remove the package
 ```
 
 ## Quick Start
@@ -104,14 +89,12 @@ Once configured, Claude can search your files, browse projects, and find related
 | **Local files** | Path, type, size, timestamps, content hash |
 | **Browser history** | Safari and Chrome — URLs, titles, visit times |
 | **Chat exports** | Claude and ChatGPT conversation exports |
-| **Email** | Subject, sender, recipients, body, timestamps — ingested via [connector plugins](#connectors) |
+| **Email** | Subject, sender, recipients, body, timestamps |
 | **Documents** | PDF, Word, Excel, PowerPoint content (with `[parse]` extra) |
 | **Semantic embeddings** | Conceptual similarity across all sources (with `[semantic]` extra) |
 
 What lands in the database — and when — is controlled by the **content storage tier** you opt into. By default, Footprinter only indexes metadata; it does not read your file content until you explicitly enable it. See [Content Storage](https://github.com/harringjohn/footprinter-cli/blob/main/reference/content-storage.md) for the full breakdown.
 
-Additional sources are available through [connector plugins](#connectors).
-
 ## CLI Commands
 
 All commands use the `fp` entry point.
@@ -123,41 +106,21 @@ All commands use the `fp` entry point.
 | `fp status` | System health and data counts |
 | `fp search` | Search across all indexed sources |
 | `fp connect` | Manage optional integrations |
-| `fp mcp` | MCP server and access policies |
-| `fp api` | Start the HTTP API server |
+| `fp permission` | Manage access policies (visibility, permissions) |
 | `fp view` | Browse indexed data (files, folders, projects, clients, chats, emails, visits) |
-| `fp upsert` | Create/update records, assign relationships, or soft-delete via `--status removed` |
-| `fp data` | Export data, generate templates, or import metadata corrections |
+| `fp add` | Create new entity records or import from CSV |
+| `fp update` | Update existing records by ID — status, assignments, metadata |
 | `fp delete` | Hard-delete a super entity (irreversible) |
-| `fp vectorize` | Manage per-record vectorization control |
-| `fp doctor` | Post-install health check (Python version, install location, FDA, MCP wiring) |
+| `fp doctor` | Post-install health check (Python version, platform, FDA, MCP wiring) |
 | `fp uninstall` | Remove Footprinter — MCP entry, user data, package |
 
 Run `fp <command> --help` for full usage.
 
-## Connectors
-
-Connector plugins add external data sources like email, cloud storage, and third-party services. They install alongside Footprinter and register automatically:
-
-```bash
-pip install footprinter-<name>
-```
-
-First-party and community connectors are in development — check the repository for updates.
-
-Use `fp connect list` to see available connectors and their status.
-
 ## Architecture
 
 Single-process CLI with optional MCP server. SQLite database. No containers, no cloud, no accounts.
 
-Sources are scanned into SQLite with bidirectional links connecting local files to remote backups via content hash matching. Embeddings are generated at ingest time for semantic search. The MCP server exposes indexed data with two-layer access control (visibility + permissions) — you decide what agents can see.
-
-## Requirements
-
-- Python 3.11+
-- macOS 13+ or Linux
-- Full Disk Access on macOS (for browser history)
+Sources are scanned into SQLite with bidirectional links connecting local files to remote backups via content hash matching. Embeddings are generated at ingest time for semantic search. The MCP server exposes indexed data with two-layer access control (visibility + access) — you decide what agents can see.
 
 ## Documentation
 
@@ -171,13 +134,11 @@ Sources are scanned into SQLite with bidirectional links connecting local files
 
 Bug fixes, documentation, and tests welcome. For new features or architectural changes, [open an issue](https://github.com/harringjohn/footprinter-cli/issues) first to discuss the approach.
 
-Connector plugins use an internal API that isn't stable yet — we're not accepting connector contributions at this time.
-
 ### Development setup
 
 ```bash
 git clone https://github.com/harringjohn/footprinter-cli.git
-cd footprinter
+cd footprinter-cli
 python3 -m venv venv
 ./venv/bin/pip install -e ".[dev]"
 ```

footprinter_cli-1.0.3/footprinter/access.py → footprinter_cli-1.0.5/footprinter/access_stamper.py

@@ -2,7 +2,7 @@
 
 Maps a policy scope (e.g. "global", "project:3", "folder:~/Work/") to affected
 entity rows, calls the existing batch resolve functions, and writes resolved
-values back to mcp_view / mcp_read columns.
+values back to visibility / access columns.
 """
 
 from __future__ import annotations
@@ -12,6 +12,7 @@ import sqlite3
 from collections.abc import Callable
 from typing import Any
 
+from footprinter.db.policies import is_folder_path_scope
 from footprinter.permissions import batch_resolve_permissions
 from footprinter.visibility import batch_resolve_visibility
 
@@ -44,8 +45,8 @@ def _is_inherit_source(source: str) -> bool:
 # ---------------------------------------------------------------------------
 # Each entry describes an entity type's table and capabilities.
 #   table:          SQL table name
-#   has_visibility: has mcp_view column
-#   has_permissions: has mcp_read column
+#   has_visibility: has visibility column
+#   has_permissions: has access column
 #   has_status:     has status column (filter WHERE status = 'listed')
 #   has_project_id: has project_id FK
 #   has_client_id:  has client_id FK
@@ -101,7 +102,7 @@ ENTITY_META: dict[str, dict[str, Any]] = {
         "has_project_id": False,
         "has_client_id": True,
         "has_account": False,
-        "path_column": "root_path",
+        "path_column": None,
     },
     "client": {
         "table": "clients",
@@ -113,10 +114,21 @@ ENTITY_META: dict[str, dict[str, Any]] = {
         "has_account": False,
         "path_column": None,
     },
+    "visit": {
+        "table": "visits",
+        "has_visibility": True,
+        "has_permissions": True,
+        "has_status": False,
+        "has_project_id": False,
+        "has_client_id": False,
+        "has_account": False,
+        "path_column": None,
+    },
 }
 
 # Reverse map: source scope suffix → entity type (e.g. "files" → "file")
 _SOURCE_TO_ENTITY = {meta["table"]: etype for etype, meta in ENTITY_META.items()}
+_SOURCE_TO_ENTITY["browser"] = "visit"
 
 
 # ---------------------------------------------------------------------------
@@ -170,28 +182,58 @@ def _get_ids_for_scope(conn: sqlite3.Connection, scope: str) -> dict[str, list[i
         return result
 
     if prefix == "folder":
-        # folder:{path} → files/folders with matching path prefix
-        path = os.path.expanduser(value)
-        # Escape LIKE metacharacters so literal %, _ in paths match correctly
-        escaped = path.replace("\\", "\\\\").replace("%", "\\%").replace("_", "\\_")
-        result = {}
-        for etype in ENTITY_META:
-            meta = ENTITY_META[etype]
-            path_col = meta["path_column"]
-            if path_col is None:
-                continue
-            table = meta["table"]
-            where = f"{path_col} LIKE ? ESCAPE '\\'"
-            if meta["has_status"]:
-                where += " AND status = 'listed'"
-            rows = conn.execute(
-                f"SELECT id FROM {table} WHERE {where}",
-                (escaped + "%",),
+        if is_folder_path_scope(scope):
+            # folder:{path} → files/folders with matching path prefix
+            path = os.path.expanduser(value)
+            # Escape LIKE metacharacters so literal %, _ in paths match correctly
+            escaped = path.replace("\\", "\\\\").replace("%", "\\%").replace("_", "\\_")
+            result = {}
+            for etype in ENTITY_META:
+                meta = ENTITY_META[etype]
+                path_col = meta["path_column"]
+                if path_col is None:
+                    continue
+                table = meta["table"]
+                where = f"{path_col} LIKE ? ESCAPE '\\'"
+                if meta["has_status"]:
+                    where += " AND status = 'listed'"
+                rows = conn.execute(
+                    f"SELECT id FROM {table} WHERE {where}",
+                    (escaped + "%",),
+                ).fetchall()
+                ids = [r["id"] for r in rows]
+                if ids:
+                    result[etype] = ids
+            return result
+        else:
+            # folder:{id} → folder + all descendants via parent_folder_id
+            folder_id = int(value)
+            descendants_cte = """
+                WITH RECURSIVE descendants(id) AS (
+                    SELECT id FROM folders WHERE id = ?
+                    UNION ALL
+                    SELECT folder.id FROM folders folder
+                    JOIN descendants descendant ON folder.parent_folder_id = descendant.id
+                )
+            """
+            cursor = conn.cursor()
+            cursor.execute(
+                f"{descendants_cte} SELECT id FROM descendants",
+                (folder_id,),
+            )
+            desc_ids = [row["id"] for row in cursor.fetchall()]
+            if not desc_ids:
+                return {}
+            result: dict[str, list[int]] = {"folder": desc_ids}
+            ph = ",".join("?" * len(desc_ids))
+            file_rows = conn.execute(
+                f"SELECT id FROM files WHERE folder_id IN ({ph}) AND status = 'listed'",
+                tuple(desc_ids),
             ).fetchall()
-            ids = [r["id"] for r in rows]
-            if ids:
-                result[etype] = ids
-        return result
+            file_ids = [r["id"] for r in file_rows]
+            if file_ids:
+                result["file"] = file_ids
+            return result
 
     if prefix == "project":
         project_id = int(value)
@@ -263,31 +305,34 @@ def _get_ids_for_scope(conn: sqlite3.Connection, scope: str) -> dict[str, list[i
 
 
 def _write_back_visibility(conn: sqlite3.Connection, entity_type: str, results: dict[int, tuple]) -> None:
-    """Batch UPDATE mcp_view from resolve results.
+    """Batch UPDATE visibility and visibility_source from resolve results.
 
     Entities whose visibility comes from the global policy or the hardcoded
-    baseline are written as ``'inherit'`` — the MCP layer resolves them at
-    query time.  Entities with a specific policy get the resolved value.
+    baseline are written as ``'inherit'`` with ``visibility_source = NULL``.
+    Entities with a specific policy get the resolved value and source scope.
     """
     table = ENTITY_META[entity_type]["table"]
     conn.executemany(
-        f"UPDATE {table} SET mcp_view = ? WHERE id = ?",
-        [("inherit" if _is_inherit_source(source) else state, eid) for eid, (state, source) in results.items()],
+        f"UPDATE {table} SET visibility = ?, visibility_source = ? WHERE id = ?",
+        [
+            ("inherit", None, eid) if _is_inherit_source(source) else (state, source, eid)
+            for eid, (state, source) in results.items()
+        ],
     )
 
 
 def _write_back_permissions(conn: sqlite3.Connection, entity_type: str, results: dict[int, tuple]) -> None:
-    """Batch UPDATE mcp_read from resolve results.
+    """Batch UPDATE access and access_source from resolve results.
 
     Entities whose permission comes from the global policy or the hardcoded
-    baseline are written as ``'inherit'`` — the MCP layer resolves them at
-    query time.  Entities with a specific policy get the resolved value.
+    baseline are written as ``'inherit'`` with ``access_source = NULL``.
+    Entities with a specific policy get the resolved value and source scope.
     """
     table = ENTITY_META[entity_type]["table"]
     conn.executemany(
-        f"UPDATE {table} SET mcp_read = ? WHERE id = ?",
+        f"UPDATE {table} SET access = ?, access_source = ? WHERE id = ?",
         [
-            ("inherit" if _is_inherit_source(source) else ("allow" if allowed else "deny"), eid)
+            ("inherit", None, eid) if _is_inherit_source(source) else ("allow" if allowed else "deny", source, eid)
             for eid, (allowed, source) in results.items()
         ],
     )

footprinter_cli-1.0.5/footprinter/api/__main__.py

@@ -0,0 +1,5 @@
+"""Allow running as: python -m footprinter.api"""
+
+from footprinter.api.server import cli
+
+cli()

footprinter_cli-1.0.5/footprinter/api/db.py

@@ -0,0 +1,38 @@
+"""Database connection for Footprinter HTTP API."""
+
+import sqlite3
+from contextlib import contextmanager
+from typing import Generator
+
+from footprinter.db_base import open_checked_connection
+
+
+@contextmanager
+def get_db() -> Generator[sqlite3.Connection, None, None]:
+    """Context manager for database connections.
+
+    Divergences from MCP's ``get_db()``:
+
+    - No ``PRAGMA query_only`` — the HTTP API uses Role.ADMIN and may need
+      write access for future endpoints.
+    - No ``handle_db_errors`` decorator — ``DatabaseNotInitializedError`` is
+      caught by a FastAPI exception handler registered in ``server.create_app()``.
+
+    Calls ``load_globals()`` to refresh the global visibility/permission
+    policy cache in ``access_service`` for the current request.
+    """
+    with open_checked_connection() as conn:
+        yield conn
+
+
+def get_conn():
+    """FastAPI dependency that yields a database connection.
+
+    Usage::
+
+        @router.get("/endpoint")
+        def handler(conn=Depends(get_conn)):
+            ...
+    """
+    with get_db() as conn:
+        yield conn

{footprinter_cli-1.0.3 → footprinter_cli-1.0.5}/footprinter/api/entities.py

@@ -137,7 +137,6 @@ def list_projects(
     include: Optional[str] = Query(None, description="Comma-separated includes"),
     status: Optional[str] = Query(None, description="Comma-separated status filter"),
     client: Optional[str] = None,
-    project_type: Optional[str] = None,
     limit: int = Query(50, ge=1, le=MAX_LIMIT),
     page: int = 1,
 ):
@@ -149,7 +148,6 @@ def list_projects(
         include=include_list,
         status=status_list,
         client=client,
-        project_type=project_type,
         limit=limit,
         page=page,
     )