diff --git a/CLAUDE.md b/CLAUDE.md
index 6d9023439..b75f75632 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -42,7 +42,7 @@ Django app served by Granian (ASGI). Key subsystems:
   Bookmark, Identifier. SQLite with WAL mode.
 - **`views/`** — DRF ViewSets organized by feature: `browser/` (comic listings),
   `reader/` (page serving), `admin/` (CRUD), `opds/` (syndication).
-- **`urls/`** — API at `/api/v3/`. Sub-routers: `/auth/`, `/c/` (reader),
+- **`urls/`** — API at `/api/v4/`. Sub-routers: `/auth/`, `/c/` (reader),
   `/<collection>/` (browser), `/admin/`.
 - **`serializers/`** — DRF serializers for browser, reader, and admin responses.
 - **`librarian/`** — Multiprocessing background daemon with dedicated threads:
@@ -66,7 +66,7 @@ Vue 3 + Vite + Vuetify 4 SPA.
 
 - **`src/stores/`** — Pinia stores: `browser`, `reader`, `auth`, `metadata`,
   `socket`, `admin`.
-- **`src/api/v3/`** — HTTP client (xior) with automatic CSRF token injection.
+- **`src/api/v4/`** — HTTP client (xior) with automatic CSRF token injection.
 - **`src/components/`** — Organized by view: `browser/`, `reader/`, `admin/`,
   `metadata/`, `settings/`.
 - **`src/plugins/`** — Vue Router, Vuetify, drag-scroll.
diff --git a/NEWS.md b/NEWS.md
index 96adfa131..e89b6ba48 100644
--- a/NEWS.md
+++ b/NEWS.md
@@ -6,6 +6,19 @@ width: 128px;
 border-radius: 128px;
 " />
 
+## v2.2.4
+
+- Features
+    - Metron Cloud online tagging uses an API key, generated on your
+      metron.cloud account page (comicbox 4.7.1). Saved usernames and passwords
+      keep working until you save a key, which replaces them.
+    - The custom URL fields for Metron Cloud and Comic Vine are removed. The
+      Metron one never did anything — mokkari hardcodes the metron.cloud
+      endpoint. Any saved URLs are discarded on upgrade.
+    - The interactive Swagger API docs are back, at `/api/v4/`. They went away
+      in v2.0.0 with the v3 API; only the raw OpenAPI schema at `/api/v4/schema`
+      remained. Admin login required, as before.
+
 ## v2.2.3
 
 - Features
diff --git a/codex/failed_login_log.py b/codex/failed_login_log.py
index da5f0202d..1811cc1db 100644
--- a/codex/failed_login_log.py
+++ b/codex/failed_login_log.py
@@ -8,7 +8,7 @@
 separate file. The main stdout / codex.log sinks apply the inverse filter
 (:func:`not_failed_login_filter`) so the IP-bearing line **only** lands in the
 dedicated log — Django's own request logger still records the bare
-``"Unauthorized: /api/v3/auth/login/"`` at WARNING so the failure is visible
+``"Unauthorized: /api/v4/auth/login/"`` at WARNING so the failure is visible
 in the main log, just without the client IP. Concentrating IPs in one place
 makes the privacy story easier to reason about (one file to chmod, one file
 to forward to a SIEM, one file to retain on a different schedule).
diff --git a/codex/librarian/onlinetag/credential_validator.py b/codex/librarian/onlinetag/credential_validator.py
index d9bf13973..4b539289c 100644
--- a/codex/librarian/onlinetag/credential_validator.py
+++ b/codex/librarian/onlinetag/credential_validator.py
@@ -86,14 +86,18 @@ def _extract_rate_limits(status: RateLimitStatus) -> RateLimitInfo | None:
 
 
 def _validate_metron(creds: OnlineCredentials) -> ValidationResult:
-    if not (creds.metron_user and creds.metron_password):
-        return ValidationResult(ok=False, error="Username and password required.")
+    if not (creds.metron_key or (creds.metron_user and creds.metron_password)):
+        return ValidationResult(ok=False, error="API key required.")
     from mokkari.exceptions import ApiError, AuthenticationError
     from mokkari.session import Session
 
+    # ``or None`` is load bearing: mokkari sends a Bearer header whenever
+    # api_token is not None, so an empty string would defeat the legacy
+    # username & password fallback.
     session = Session(
         username=creds.metron_user,
         passwd=creds.metron_password,
+        api_token=creds.metron_key or None,
         cache=None,
         user_agent="codex-credential-check",
     )
@@ -133,8 +137,6 @@ def _validate_comicvine(creds: OnlineCredentials) -> ValidationResult:
             "cache_expiry": DO_NOT_CACHE,
             "ratelimit_path": tmp_path / "ratelimits.sqlite",
         }
-        if creds.comicvine_url:
-            kwargs["base_url"] = creds.comicvine_url
         cv = Comicvine(**kwargs)
         try:
             cv.list_publishers(params={"limit": "1"}, max_results=1)
diff --git a/codex/librarian/onlinetag/explicit_id.py b/codex/librarian/onlinetag/explicit_id.py
index 9fd00676b..0d3d30f87 100644
--- a/codex/librarian/onlinetag/explicit_id.py
+++ b/codex/librarian/onlinetag/explicit_id.py
@@ -42,14 +42,11 @@ def _build_auth_source(
     """Map codex credentials onto comicbox's per-source auth for one source."""
     if source == "metron":
         return OnlineSourceCredentials(
+            key=credentials.metron_key,
             user=credentials.metron_user,
             password=credentials.metron_password,
-            url=credentials.metron_url,
         )
-    return OnlineSourceCredentials(
-        key=credentials.comicvine_key,
-        url=credentials.comicvine_url,
-    )
+    return OnlineSourceCredentials(key=credentials.comicvine_key)
 
 
 def build_explicit_id_config(
diff --git a/codex/librarian/onlinetag/session_manager.py b/codex/librarian/onlinetag/session_manager.py
index a8a8c92ed..7830a4bb5 100644
--- a/codex/librarian/onlinetag/session_manager.py
+++ b/codex/librarian/onlinetag/session_manager.py
@@ -105,21 +105,27 @@ def _build_credentials(self) -> OnlineCredentials | None:
             defaults = ComicboxTaggingDefaults.objects.get(pk=1)
         except ComicboxTaggingDefaults.DoesNotExist:
             return None
-        if not defaults.metron_user and not defaults.comicvine_key:
+        if (
+            not defaults.metron_key
+            and not defaults.metron_user
+            and not defaults.comicvine_key
+        ):
             return None
         return OnlineCredentials(
+            metron_key=defaults.metron_key or "",
             metron_user=defaults.metron_user or "",
             metron_password=defaults.metron_password or "",
-            metron_url=defaults.metron_url or "",
             comicvine_key=defaults.comicvine_key or "",
-            comicvine_url=defaults.comicvine_url or "",
         )
 
     @staticmethod
     def _source_has_credentials(credentials: OnlineCredentials, source: str) -> bool:
         """Whether ``credentials`` actually carries auth for ``source``."""
         if source == "metron":
-            return bool(credentials.metron_user and credentials.metron_password)
+            return bool(
+                credentials.metron_key
+                or (credentials.metron_user and credentials.metron_password)
+            )
         if source == "comicvine":
             return bool(credentials.comicvine_key)
         return False
diff --git a/codex/librarian/telemeter/admin_stats.py b/codex/librarian/telemeter/admin_stats.py
index 51482fd2e..e4a17b2b5 100644
--- a/codex/librarian/telemeter/admin_stats.py
+++ b/codex/librarian/telemeter/admin_stats.py
@@ -143,7 +143,7 @@ def _default_sources(defaults: ComicboxTaggingDefaults) -> dict[str, int]:
 
 
 def get_tagging_stats() -> dict[str, Any]:
-    """Report the online tagging defaults. Never the credentials or urls."""
+    """Report the online tagging defaults. Never the credentials."""
     defaults = ComicboxTaggingDefaults.objects.first()
     if not defaults:
         return {}
@@ -157,11 +157,9 @@ def get_tagging_stats() -> dict[str, Any]:
         "default_sources": _default_sources(defaults),
         "default_format_count": len(formats) if isinstance(formats, list) else 0,
         "has_metron_credentials": bool(
-            defaults.metron_user and defaults.metron_password
+            defaults.metron_key or (defaults.metron_user and defaults.metron_password)
         ),
         "has_comicvine_credentials": bool(defaults.comicvine_key),
-        "metron_url_set": bool(defaults.metron_url),
-        "comicvine_url_set": bool(defaults.comicvine_url),
     }
 
 
diff --git a/codex/migrations/0050_comicboxtaggingdefaults_metron_key.py b/codex/migrations/0050_comicboxtaggingdefaults_metron_key.py
new file mode 100644
index 000000000..d6c8d1507
--- /dev/null
+++ b/codex/migrations/0050_comicboxtaggingdefaults_metron_key.py
@@ -0,0 +1,23 @@
+"""Generated by Django 6.0.6 on 2026-07-28 12:00."""
+
+from django.db import migrations
+
+import codex.models.fields
+
+
+class Migration(migrations.Migration):
+    """Add metron_key API token to ComicboxTaggingDefaults."""
+
+    dependencies = [
+        ("codex", "0049_reprints"),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name="comicboxtaggingdefaults",
+            name="metron_key",
+            field=codex.models.fields.EncryptedCharField(
+                blank=True, default="", max_length=512
+            ),
+        ),
+    ]
diff --git a/codex/migrations/0051_remove_comicboxtaggingdefaults_urls.py b/codex/migrations/0051_remove_comicboxtaggingdefaults_urls.py
new file mode 100644
index 000000000..aceb060d3
--- /dev/null
+++ b/codex/migrations/0051_remove_comicboxtaggingdefaults_urls.py
@@ -0,0 +1,30 @@
+"""Generated by Django 6.0.7 on 2026-07-29 06:10."""
+
+from django.db import migrations
+
+
+class Migration(migrations.Migration):
+    """
+    Remove the custom Metron & Comic Vine URL overrides.
+
+    The Metron override was always a no-op: mokkari hardcodes its API
+    endpoint, and comicbox's metron source warns that the url is ignored.
+    The Comic Vine override worked but serves no purpose for this app.
+    comicbox still defines the fields on its credentials dataclass; codex
+    just stops passing them.
+    """
+
+    dependencies = [
+        ("codex", "0050_comicboxtaggingdefaults_metron_key"),
+    ]
+
+    operations = [
+        migrations.RemoveField(
+            model_name="comicboxtaggingdefaults",
+            name="comicvine_url",
+        ),
+        migrations.RemoveField(
+            model_name="comicboxtaggingdefaults",
+            name="metron_url",
+        ),
+    ]
diff --git a/codex/models/admin.py b/codex/models/admin.py
index ca05f4363..3e8c4d0ae 100644
--- a/codex/models/admin.py
+++ b/codex/models/admin.py
@@ -116,11 +116,14 @@ class PromptsModeChoices(TextChoices):
     # of enabled sources. Admin default; overridable per scan.
     merge_all_sources = BooleanField(default=False)
 
+    # metron_user & metron_password are legacy. Metron authenticates with an
+    # API token now, and the admin UI only accepts one. Existing logins keep
+    # working (metron.cloud and comicbox still accept them) until an API key
+    # is saved, which clears them. mokkari prefers the token when both exist.
+    metron_key = EncryptedCharField()
     metron_user = EncryptedCharField()
     metron_password = EncryptedCharField()
-    metron_url = URLField(max_length=256, blank=True, default="")
     comicvine_key = EncryptedCharField()
-    comicvine_url = URLField(max_length=256, blank=True, default="")
 
     # Active session id + pending prompts used to live here. They are
     # transient operational state — they only matter while a tagging
diff --git a/codex/serializers/admin/stats.py b/codex/serializers/admin/stats.py
index 44139664b..a34f4075e 100644
--- a/codex/serializers/admin/stats.py
+++ b/codex/serializers/admin/stats.py
@@ -171,7 +171,7 @@ class StatsTaggingSerializer(Serializer):
     """
     Online Tagging Defaults.
 
-    Credentials and service urls report only whether they are configured.
+    Credentials report only whether they are configured.
     """
 
     default_match_mode = CharField(required=False, read_only=True)
@@ -183,8 +183,6 @@ class StatsTaggingSerializer(Serializer):
     default_format_count = IntegerField(required=False, read_only=True)
     has_metron_credentials = BooleanField(required=False, read_only=True)
     has_comicvine_credentials = BooleanField(required=False, read_only=True)
-    metron_url_set = BooleanField(required=False, read_only=True)
-    comicvine_url_set = BooleanField(required=False, read_only=True)
 
 
 class StatsAuthSerializer(Serializer):
diff --git a/codex/serializers/admin/tagging.py b/codex/serializers/admin/tagging.py
index 122c9aca6..22da2edbb 100644
--- a/codex/serializers/admin/tagging.py
+++ b/codex/serializers/admin/tagging.py
@@ -1,5 +1,7 @@
 """Comicbox tagging serializers."""
 
+from typing import override
+
 from comicbox.formats.base.online import SOURCE_NAMES
 from rest_framework.fields import SerializerMethodField
 from rest_framework.serializers import (
@@ -102,11 +104,8 @@ class TaggingValidateRequestSerializer(Serializer):
     source = ChoiceField(
         choices=tuple(sorted(KNOWN_SOURCES)), required=False, allow_blank=True
     )
-    metron_user = CharField(required=False, allow_blank=True)
-    metron_password = CharField(required=False, allow_blank=True)
-    metron_url = CharField(required=False, allow_blank=True)
+    metron_key = CharField(required=False, allow_blank=True)
     comicvine_key = CharField(required=False, allow_blank=True)
-    comicvine_url = CharField(required=False, allow_blank=True)
 
 
 class TaggingRateLimitWindowSerializer(Serializer):
@@ -142,26 +141,19 @@ class TaggingValidateResponseSerializer(Serializer):
 class ComicboxTaggingDefaultsSerializer(BaseModelSerializer):
     """Serializer for ComicboxTaggingDefaults singleton."""
 
-    metron_user = CharField(write_only=True, required=False, allow_blank=True)
-    metron_password = CharField(write_only=True, required=False, allow_blank=True)
+    metron_key = CharField(write_only=True, required=False, allow_blank=True)
     comicvine_key = CharField(write_only=True, required=False, allow_blank=True)
 
-    metron_user_set = SerializerMethodField()
-    metron_password_set = SerializerMethodField()
+    metron_key_set = SerializerMethodField()
     comicvine_key_set = SerializerMethodField()
 
     has_metron_credentials = SerializerMethodField()
     has_comicvine_credentials = SerializerMethodField()
 
     @staticmethod
-    def get_metron_user_set(obj) -> bool:
-        """Whether a Metron username has been configured."""
-        return bool(obj.metron_user)
-
-    @staticmethod
-    def get_metron_password_set(obj) -> bool:
-        """Whether a Metron password has been configured."""
-        return bool(obj.metron_password)
+    def get_metron_key_set(obj) -> bool:
+        """Whether a Metron API key has been configured."""
+        return bool(obj.metron_key)
 
     @staticmethod
     def get_comicvine_key_set(obj) -> bool:
@@ -170,8 +162,12 @@ def get_comicvine_key_set(obj) -> bool:
 
     @staticmethod
     def get_has_metron_credentials(obj) -> bool:
-        """Whether both Metron username and password are set."""
-        return bool(obj.metron_user and obj.metron_password)
+        """
+        Whether Metron can authenticate: an API key or a legacy login.
+
+        Mirrors comicbox's ``MetronOnlineSource.is_configured``.
+        """
+        return bool(obj.metron_key or (obj.metron_user and obj.metron_password))
 
     @staticmethod
     def get_has_comicvine_credentials(obj) -> bool:
@@ -183,6 +179,20 @@ def validate_default_sources(value: list) -> list:
         """Require known source names; preserve the priority order."""
         return _validate_ordered_sources(value)
 
+    @override
+    def update(self, instance, validated_data):
+        """
+        Retire the legacy username & password whenever the API key is written.
+
+        The key is the only Metron credential the UI offers now, so saving one
+        (or clearing it) drops the old login rather than leaving a stale
+        fallback that mokkari would silently ignore anyway.
+        """
+        if "metron_key" in validated_data:
+            validated_data["metron_user"] = ""
+            validated_data["metron_password"] = ""
+        return super().update(instance, validated_data)
+
     class Meta(BaseModelSerializer.Meta):
         """Specify model and fields."""
 
@@ -195,20 +205,15 @@ class Meta(BaseModelSerializer.Meta):
             "default_prompts_mode",
             "default_sources",
             "merge_all_sources",
-            "metron_user",
-            "metron_password",
-            "metron_url",
+            "metron_key",
             "comicvine_key",
-            "comicvine_url",
-            "metron_user_set",
-            "metron_password_set",
+            "metron_key_set",
             "comicvine_key_set",
             "has_metron_credentials",
             "has_comicvine_credentials",
         )
         read_only_fields = (
-            "metron_user_set",
-            "metron_password_set",
+            "metron_key_set",
             "comicvine_key_set",
             "has_metron_credentials",
             "has_comicvine_credentials",
diff --git a/codex/settings/__init__.py b/codex/settings/__init__.py
index 1b161d39f..b847ac4e1 100644
--- a/codex/settings/__init__.py
+++ b/codex/settings/__init__.py
@@ -15,7 +15,7 @@
 from os import cpu_count, environ
 from pathlib import Path
 from types import MappingProxyType
-from typing import NamedTuple
+from typing import Final, NamedTuple
 
 from comicbox.config import get_config
 from comicbox.config.settings import ComicboxSettings
@@ -397,21 +397,22 @@ class FeatureFlags(NamedTuple):
 )
 
 # drf-spectacular's Swagger UI pulls assets from jsdelivr.
-_SWAGGER_SECURE_CSP: Mapping[str, tuple[str, ...]] = MappingProxyType(
+# ``script-src-elem`` must repeat the bundles because the pdfs-dist
+# overlay declares that directive — without it pdfs-dist masks the
+# ``script-src`` fallback and every CDN <script> is blocked.
+_API_DOCS_JSDELIVR: Final = "https://cdn.jsdelivr.net/npm"
+_SWAGGER_UI_DIST: Final = f"{_API_DOCS_JSDELIVR}/swagger-ui-dist@latest"
+_API_DOCS_SCRIPTS: Final = (
+    f"{_SWAGGER_UI_DIST}/swagger-ui-bundle.js",
+    f"{_SWAGGER_UI_DIST}/swagger-ui-standalone-preset.js",
+)
+_API_DOCS_SECURE_CSP: Mapping[str, tuple[str, ...]] = MappingProxyType(
     {
-        "script-src": (
-            "https://cdn.jsdelivr.net/npm/swagger-ui-dist@latest/swagger-ui-bundle.js",
-            "https://cdn.jsdelivr.net/npm/swagger-ui-dist@latest/swagger-ui-standalone-preset.js",
-        ),
-        "style-src": (
-            "https://cdn.jsdelivr.net/npm/swagger-ui-dist@latest/swagger-ui.css",
-        ),
-        "img-src": (
-            "https://cdn.jsdelivr.net/npm/swagger-ui-dist@latest/favicon-32x32.png",
-        ),
-        "connect-src": (
-            "https://cdn.jsdelivr.net/npm/swagger-ui-dist@latest/swagger-ui.css.map",
-        ),
+        "script-src": _API_DOCS_SCRIPTS,
+        "script-src-elem": _API_DOCS_SCRIPTS,
+        "style-src": (f"{_SWAGGER_UI_DIST}/swagger-ui.css",),
+        "img-src": (f"{_SWAGGER_UI_DIST}/favicon-32x32.png",),
+        "connect-src": (f"{_SWAGGER_UI_DIST}/swagger-ui.css.map",),
     }
 )
 
@@ -465,7 +466,7 @@ def _get_secure_csp(features: FeatureFlags) -> dict[str, list[str]]:
         _PDFJS_SECURE_CSP,
     ]
     if features.swagger:
-        overlays.append(_SWAGGER_SECURE_CSP)
+        overlays.append(_API_DOCS_SECURE_CSP)
     if features.vite_hmr:
         overlays.append(_VITE_HMR_SECURE_CSP)
     if features.schema_graph:
diff --git a/codex/urls/api/v4/__init__.py b/codex/urls/api/v4/__init__.py
index 9caa08b3e..9e28e9b41 100644
--- a/codex/urls/api/v4/__init__.py
+++ b/codex/urls/api/v4/__init__.py
@@ -7,8 +7,12 @@
 """
 
 from django.urls import include, path
-from drf_spectacular.views import SpectacularAPIView
+from drf_spectacular.views import (
+    SpectacularAPIView,
+    SpectacularSwaggerSplitView,
+)
 
+from codex.settings import FEATURES
 from codex.views.browser.cover import cover_dispatch_by_source
 from codex.views.browser.mtime import MtimeView
 from codex.views.opds.urls import OPDSURLsView
@@ -16,7 +20,21 @@
 from codex.views.version import VersionView
 
 app_name = "v4"
-urlpatterns = [
+urlpatterns = []
+if FEATURES.swagger:
+    # Interactive docs for the schema served at ``schema`` below. The
+    # split Swagger view separates its init javascript into a second
+    # same-origin request so no inline <script> needs a nonce.
+    # ``_API_DOCS_SECURE_CSP`` in codex.settings allows the CDN assets
+    # it loads.
+    urlpatterns += [
+        path(
+            "",
+            SpectacularSwaggerSplitView.as_view(url_name="api:v4:schema"),
+            name="swagger",
+        ),
+    ]
+urlpatterns += [
     path("admin/", include("codex.urls.api.v4.admin")),
     path("auth/", include("codex.urls.api.v4.auth")),
     path("browse/", include("codex.urls.api.v4.browse")),
diff --git a/codex/user_data/restore.py b/codex/user_data/restore.py
index 37255575f..99084d456 100644
--- a/codex/user_data/restore.py
+++ b/codex/user_data/restore.py
@@ -370,21 +370,26 @@ def _build_tagging_defaults(row) -> dict[str, Any]:
     coalesced: dict[str, Any] = {
         "default_match_mode": "auto",
         "default_prompts_mode": "ask",
+        "metron_key": "",
         "metron_user": "",
         "metron_password": "",
-        "metron_url": "",
         "comicvine_key": "",
-        "comicvine_url": "",
     }
+    # ``sqlite3.Row`` raises on a missing column, so skip what a sidecar
+    # predating a column doesn't carry (e.g. metron_key) and let the model
+    # default stand.
+    cols = set(row.keys())
     defaults: dict[str, Any] = {
-        key: row[key] or fallback for key, fallback in coalesced.items()
+        key: row[key] or fallback for key, fallback in coalesced.items() if key in cols
     }
     defaults["default_formats"] = json.loads(row["default_formats"] or "[]")
     defaults["default_sources"] = json.loads(row["default_sources"] or "[]")
     defaults["delete_original"] = bool(row["delete_original"])
-    # ``active_session_id`` / ``active_prompts`` used to be on this row; they
-    # moved to the Django cache as transient state. Older sidecar backups still
-    # carry the columns — they are silently ignored on restore.
+    # ``active_session_id`` / ``active_prompts`` used to be on this row before
+    # they moved to the Django cache as transient state, and ``metron_url`` /
+    # ``comicvine_url`` before the custom URL overrides were removed. Older
+    # sidecar backups still carry those columns — since this comprehension
+    # walks ``coalesced`` rather than the row, they are silently ignored.
     return defaults
 
 
diff --git a/codex/user_data/schema.sql b/codex/user_data/schema.sql
index 6b47b1348..35c680d1d 100644
--- a/codex/user_data/schema.sql
+++ b/codex/user_data/schema.sql
@@ -172,11 +172,10 @@ CREATE TABLE IF NOT EXISTS tagging_defaults (
     default_match_mode TEXT NOT NULL DEFAULT 'auto',
     default_prompts_mode TEXT NOT NULL DEFAULT 'ask',
     default_sources TEXT NOT NULL DEFAULT '[]',
+    metron_key TEXT NOT NULL DEFAULT '',
     metron_user TEXT NOT NULL DEFAULT '',
     metron_password TEXT NOT NULL DEFAULT '',
-    metron_url TEXT NOT NULL DEFAULT '',
     comicvine_key TEXT NOT NULL DEFAULT '',
-    comicvine_url TEXT NOT NULL DEFAULT '',
     updated_at TEXT
 );
 
diff --git a/codex/user_data/serializers.py b/codex/user_data/serializers.py
index 2e56b846e..2f78ae89b 100644
--- a/codex/user_data/serializers.py
+++ b/codex/user_data/serializers.py
@@ -377,11 +377,10 @@ def serialize_tagging_defaults(
             "default_sources": json.dumps(
                 defaults.default_sources, separators=(",", ":")
             ),
+            "metron_key": defaults.metron_key or "",
             "metron_user": defaults.metron_user or "",
             "metron_password": defaults.metron_password or "",
-            "metron_url": defaults.metron_url or "",
             "comicvine_key": defaults.comicvine_key or "",
-            "comicvine_url": defaults.comicvine_url or "",
             "updated_at": _datetime_str(getattr(defaults, "updated_at", None)),
         },
     )
diff --git a/codex/views/admin/tagging_validate.py b/codex/views/admin/tagging_validate.py
index dc83b6202..7fb4aeb56 100644
--- a/codex/views/admin/tagging_validate.py
+++ b/codex/views/admin/tagging_validate.py
@@ -18,12 +18,14 @@
 )
 from codex.views.admin.auth import AdminAPIView
 
+# metron_user & metron_password have no request field anymore — the form only
+# offers an API key — but they stay here so a legacy login already in the
+# database is still what gets tested when no key is set.
 _CREDENTIAL_FIELDS = (
+    "metron_key",
     "metron_user",
     "metron_password",
-    "metron_url",
     "comicvine_key",
-    "comicvine_url",
 )
 
 
diff --git a/codex/views/admin/tagwrite.py b/codex/views/admin/tagwrite.py
index 1f25aebd9..3b7c84a3a 100644
--- a/codex/views/admin/tagwrite.py
+++ b/codex/views/admin/tagwrite.py
@@ -124,7 +124,7 @@ def _configured_sources(defaults: ComicboxTaggingDefaults | None) -> frozenset[s
         if not defaults:
             return frozenset()
         sources = set()
-        if defaults.metron_user and defaults.metron_password:
+        if defaults.metron_key or (defaults.metron_user and defaults.metron_password):
             sources.add("metron")
         if defaults.comicvine_key:
             sources.add("comicvine")
diff --git a/frontend/bun.lock b/frontend/bun.lock
index cc4b7b983..ec6ccf1ee 100644
--- a/frontend/bun.lock
+++ b/frontend/bun.lock
@@ -6,7 +6,7 @@
       "name": "codex",
       "dependencies": {
         "@unhead/vue": "^3.2.3",
-        "@vueuse/core": "^14.3.0",
+        "@vueuse/core": "^14.4.0",
         "dequal": "^2.0.3",
         "eslint-import-resolver-oxc": "^0.15.0",
         "pinia": "^4.0.2",
@@ -22,7 +22,7 @@
         "@mdi/font": "^7.4.47",
         "@mdi/js": "^7.4.47",
         "@pinia/testing": "^2.0.1",
-        "@types/node": "^26.1.1",
+        "@types/node": "^26.1.2",
         "@unhead/bundler": "^3.2.3",
         "@vitejs/plugin-vue": "^6.0.8",
         "@vue/test-utils": "^2.4.11",
@@ -328,7 +328,7 @@
 
     "@types/json-schema": ["@types/json-schema@7.0.15", "", {}, "sha512-5+fP8P8MFNC+AyZCDxrB2pkZFPGzqQWUzpSeuuVLvm8VMcorNYavBqoFcxK8bQz4Qsbn4oUEEem4wDLfcysGHA=="],
 
-    "@types/node": ["@types/node@26.1.1", "", { "dependencies": { "undici-types": "~8.3.0" } }, "sha512-nxAkRSVkN1Y0JC1W8ky/fTfkGsMmcrRsbx+3XoZE+rMOX71kLYTV7fLXpqud1GpbpP5TuffXFqfX7fH2GgZREw=="],
+    "@types/node": ["@types/node@26.1.2", "", { "dependencies": { "undici-types": "~8.3.0" } }, "sha512-Vu4a5UFA9rIIFJ7rB/Vaafh9lrCQszopTCx6KjFboXTGQbPNasehVR5TEiithSDGyd1DEiUByggTZsg8jukeIg=="],
 
     "@types/web-bluetooth": ["@types/web-bluetooth@0.0.21", "", {}, "sha512-oIQLCGWtcFZy2JW77j9k8nHzAOpqMHLQejDA48XXMWH6tjCQHz5RCFz1bzsmROyL6PUm+LLnUiI4BCn221inxA=="],
 
@@ -400,11 +400,11 @@
 
     "@vuetify/loader-shared": ["@vuetify/loader-shared@2.1.2", "", { "dependencies": { "upath": "^2.0.1" }, "peerDependencies": { "vue": "^3.0.0", "vuetify": ">=3" } }, "sha512-X+1jBLmXHkpQEnC0vyOb4rtX2QSkBiFhaFXz8yhQqN2A4vQ6k2nChxN4Ol7VAY5KoqMdFoRMnmNdp/1qYXDQig=="],
 
-    "@vueuse/core": ["@vueuse/core@14.3.0", "", { "dependencies": { "@types/web-bluetooth": "^0.0.21", "@vueuse/metadata": "14.3.0", "@vueuse/shared": "14.3.0" }, "peerDependencies": { "vue": "^3.5.0" } }, "sha512-aHfz47g0ZhMtTVHmIzMVpJy8ePhhOy68GY5bv110+5DVtZ+W7BsOx+m61UNQqfrWyPztIHIanWa3E2tib3NFIw=="],
+    "@vueuse/core": ["@vueuse/core@14.4.0", "", { "dependencies": { "@types/web-bluetooth": "^0.0.21", "@vueuse/metadata": "14.4.0", "@vueuse/shared": "14.4.0" }, "peerDependencies": { "vue": "^3.5.0" } }, "sha512-X4WHz1HlCzCBoYXesUkifzzWBAcZgXG8Fi5iNPQg/epdzOB3gu8Fawj3hvuwYR1nGcXGnvxwYYcUC/71++svtQ=="],
 
-    "@vueuse/metadata": ["@vueuse/metadata@14.3.0", "", {}, "sha512-BwxmbAzwAVF50+MW57GXOUEV61nFBGnlBvrTqj49PqWJu3uw7hdu72ztXeZ33RdZtDY6kO+bfCAE1PCn88Tktw=="],
+    "@vueuse/metadata": ["@vueuse/metadata@14.4.0", "", {}, "sha512-swx/255R6JyHZFJhx845iz5CRWDZdCfvkZOpACWc5+c5WHcG24mv8gUT1WIdFQaHt6dq79rvILd9QnCWiyVm9g=="],
 
-    "@vueuse/shared": ["@vueuse/shared@14.3.0", "", { "peerDependencies": { "vue": "^3.5.0" } }, "sha512-bZpge9eSXwa4ToSiqJ7j6KRwhAsneMFoSz3LMWKQDkqimm3D/tbFlrklrs/IOqC8tEcYmXQZJ6N0UrjhBirVCg=="],
+    "@vueuse/shared": ["@vueuse/shared@14.4.0", "", { "peerDependencies": { "vue": "^3.5.0" } }, "sha512-JRgY90Sz8DDtPMsaDflvPMp9xYk69JZAmbuDvAquUVXKr2gEjqtzGNTTthLfckH0BzBqvnu31gb4a8TGLRe79g=="],
 
     "abbrev": ["abbrev@2.0.0", "", {}, "sha512-6/mh1E2u2YgEsCHdY0Yx5oW+61gZU+1vXaoiHHrpKeuRNNgFvS+/jrwHiQhB5apAf5oB7UB7E19ol2R2LKH8hQ=="],
 
@@ -958,6 +958,8 @@
 
     "@rolldown/binding-wasm32-wasi/@emnapi/runtime": ["@emnapi/runtime@1.11.1", "", { "dependencies": { "tslib": "^2.4.0" } }, "sha512-vgj7R3y3Wgx24IQaGPA/R6YFXLHVMOZ0uVEyIQPaWs+rd1AzfEMXlAC22FYwO1XkKR6NPsq7mUandH8oIRdZFw=="],
 
+    "@types/ws/@types/node": ["@types/node@26.1.1", "", { "dependencies": { "undici-types": "~8.3.0" } }, "sha512-nxAkRSVkN1Y0JC1W8ky/fTfkGsMmcrRsbx+3XoZE+rMOX71kLYTV7fLXpqud1GpbpP5TuffXFqfX7fH2GgZREw=="],
+
     "@vitejs/devtools-kit/nostics": ["nostics@1.2.0", "", {}, "sha512-FGqEfhQjrvo1lL8KFifdTQiNwwQHJxC1jtYE1Rc54qF/jxONUNL+kC9gS1krX8Q65PgrQ5fCqH/I4NhWBvdSqg=="],
 
     "@vitest/mocker/magic-string": ["magic-string@0.30.21", "", { "dependencies": { "@jridgewell/sourcemap-codec": "^1.5.5" } }, "sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ=="],
@@ -992,6 +994,8 @@
 
     "ast-walker-scope/@babel/types": ["@babel/types@7.29.7", "", { "dependencies": { "@babel/helper-string-parser": "^7.29.7", "@babel/helper-validator-identifier": "^7.29.7" } }, "sha512-4zBIxpPzowiZpusoFkyGVwakdRJUyuH5PxQ/PrqghfdFWWasvnCdPfQXHrenDai+gyLARulZjZowCOj6fjT4pA=="],
 
+    "buffer-image-size/@types/node": ["@types/node@26.1.1", "", { "dependencies": { "undici-types": "~8.3.0" } }, "sha512-nxAkRSVkN1Y0JC1W8ky/fTfkGsMmcrRsbx+3XoZE+rMOX71kLYTV7fLXpqud1GpbpP5TuffXFqfX7fH2GgZREw=="],
+
     "cross-spawn/path-key": ["path-key@3.1.1", "", {}, "sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q=="],
 
     "devframe/nostics": ["nostics@1.2.0", "", {}, "sha512-FGqEfhQjrvo1lL8KFifdTQiNwwQHJxC1jtYE1Rc54qF/jxONUNL+kC9gS1krX8Q65PgrQ5fCqH/I4NhWBvdSqg=="],
@@ -1004,6 +1008,8 @@
 
     "glob/minimatch": ["minimatch@9.0.9", "", { "dependencies": { "brace-expansion": "^2.0.2" } }, "sha512-OBwBN9AL4dqmETlpS2zasx+vTeWclWzkblfZk7KTA5j3jeOONz/tRCnZomUyvNg83wL5Zv9Ss6HMJXAgL8R2Yg=="],
 
+    "happy-dom/@types/node": ["@types/node@26.1.1", "", { "dependencies": { "undici-types": "~8.3.0" } }, "sha512-nxAkRSVkN1Y0JC1W8ky/fTfkGsMmcrRsbx+3XoZE+rMOX71kLYTV7fLXpqud1GpbpP5TuffXFqfX7fH2GgZREw=="],
+
     "magic-regexp/magic-string": ["magic-string@0.30.21", "", { "dependencies": { "@jridgewell/sourcemap-codec": "^1.5.5" } }, "sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ=="],
 
     "magic-string-ast/magic-string": ["magic-string@0.30.21", "", { "dependencies": { "@jridgewell/sourcemap-codec": "^1.5.5" } }, "sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ=="],
diff --git a/frontend/package.json b/frontend/package.json
index 7182b7503..2e455b262 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -1,6 +1,6 @@
 {
   "name": "codex",
-  "version": "2.2.3",
+  "version": "2.2.4",
   "private": true,
   "description": "ui for codex api",
   "type": "module",
@@ -17,7 +17,7 @@
   },
   "dependencies": {
     "@unhead/vue": "^3.2.3",
-    "@vueuse/core": "^14.3.0",
+    "@vueuse/core": "^14.4.0",
     "dequal": "^2.0.3",
     "eslint-import-resolver-oxc": "^0.15.0",
     "pinia": "^4.0.2",
@@ -33,7 +33,7 @@
     "@mdi/font": "^7.4.47",
     "@mdi/js": "^7.4.47",
     "@pinia/testing": "^2.0.1",
-    "@types/node": "^26.1.1",
+    "@types/node": "^26.1.2",
     "@unhead/bundler": "^3.2.3",
     "@vitejs/plugin-vue": "^6.0.8",
     "@vue/test-utils": "^2.4.11",
diff --git a/frontend/src/components/admin/tabs/stats-tab.vue b/frontend/src/components/admin/tabs/stats-tab.vue
index c146881d3..a301c164d 100644
--- a/frontend/src/components/admin/tabs/stats-tab.vue
+++ b/frontend/src/components/admin/tabs/stats-tab.vue
@@ -103,8 +103,6 @@ const TAGGING_LABELS = Object.freeze({
   defaultFormatCount: "Write Formats",
   hasMetronCredentials: "Metron Credentials",
   hasComicvineCredentials: "Comic Vine Credentials",
-  metronUrlSet: "Custom Metron URL",
-  comicvineUrlSet: "Custom Comic Vine URL",
 });
 const AUTH_LABELS = Object.freeze({
   oidcEnabled: "Single Sign On",
diff --git a/frontend/src/components/admin/tabs/tagging-tab.vue b/frontend/src/components/admin/tabs/tagging-tab.vue
index 0da95a034..3d878cca1 100644
--- a/frontend/src/components/admin/tabs/tagging-tab.vue
+++ b/frontend/src/components/admin/tabs/tagging-tab.vue
@@ -159,55 +159,33 @@
                   <v-expansion-panel-text>
                     <v-form class="adminFieldColumn" @submit.prevent>
                       <v-text-field
-                        v-model="metronUser"
-                        label="Username"
-                        autocomplete="off"
-                        hide-details="auto"
-                        density="compact"
-                        :placeholder="
-                          defaults.metronUserSet
-                            ? 'New Username'
-                            : 'Enter username'
-                        "
-                      />
-                      <v-text-field
-                        v-model="metronPassword"
-                        label="Password"
+                        v-model="metronKey"
+                        label="API Key"
                         type="password"
                         autocomplete="new-password"
                         hide-details="auto"
                         density="compact"
                         :placeholder="
-                          defaults.metronPasswordSet
-                            ? 'New Password'
-                            : 'Enter password'
+                          defaults.metronKeySet
+                            ? 'New API Key'
+                            : 'Enter API key'
                         "
                       />
                       <p class="adminHint">
-                        Get a username and password from
+                        Generate an API key at
                         <a
-                          href="https://metron.cloud/accounts/signup/"
+                          href="https://metron.cloud/accounts/tokens/"
                           target="_blank"
-                          >Metron Cloud<v-icon size="small">{{
+                          >Metron Cloud API Tokens<v-icon size="small">{{
                             mdiOpenInNew
                           }}</v-icon></a
                         >
                       </p>
-                      <v-text-field
-                        v-model="metronUrlLocal"
-                        label="Custom URL (optional)"
-                        autocomplete="off"
-                        hide-details="auto"
-                        density="compact"
-                        :placeholder="defaults.metronUrl || 'Default'"
-                      />
                       <div class="adminInlineActions">
                         <v-btn
                           variant="tonal"
                           size="small"
-                          :disabled="
-                            !metronUser && !metronPassword && !metronUrlLocal
-                          "
+                          :disabled="!metronKey"
                           @click="saveMetronCredentials"
                         >
                           Save Metron Cloud Credentials
@@ -225,7 +203,7 @@
                           v-if="defaults.hasMetronCredentials"
                           button-text="Clear Credentials"
                           title-text="Clear Metron Cloud Credentials"
-                          text="Remove the saved Metron Cloud username, password, and custom URL?"
+                          text="Remove the saved Metron Cloud credentials?"
                           confirm-text="Clear"
                           variant="text"
                           size="small"
@@ -330,19 +308,11 @@
                           }}</v-icon></a
                         >
                       </p>
-                      <v-text-field
-                        v-model="comicvineUrlLocal"
-                        label="Custom URL (optional)"
-                        autocomplete="off"
-                        hide-details="auto"
-                        density="compact"
-                        :placeholder="defaults.comicvineUrl || 'Default'"
-                      />
                       <div class="adminInlineActions">
                         <v-btn
                           variant="tonal"
                           size="small"
-                          :disabled="!comicvineKey && !comicvineUrlLocal"
+                          :disabled="!comicvineKey"
                           @click="saveComicvineCredentials"
                         >
                           Save Comic Vine Credentials
@@ -360,7 +330,7 @@
                           v-if="defaults.hasComicvineCredentials"
                           button-text="Clear API Key"
                           title-text="Clear Comic Vine API Key"
-                          text="Remove the saved Comic Vine API key and custom URL?"
+                          text="Remove the saved Comic Vine API key?"
                           confirm-text="Clear"
                           variant="text"
                           size="small"
@@ -469,11 +439,8 @@ export default {
       draft: pickFields(undefined),
       saving: false,
       pendingSave: false,
-      metronUser: "",
-      metronPassword: "",
-      metronUrlLocal: "",
+      metronKey: "",
       comicvineKey: "",
-      comicvineUrlLocal: "",
       validating: { metron: false, comicvine: false },
       validationResult: { metron: undefined, comicvine: undefined },
     };
@@ -508,12 +475,12 @@ export default {
         this.setSourceEnabled("comicvine", value);
       },
     },
+    // Testing falls back to whatever is stored, which for an install that
+    // predates API keys is still a username & password.
     canTestMetron() {
-      const formHasUser = Boolean(this.metronUser);
-      const formHasPassword = Boolean(this.metronPassword);
-      const storedUser = Boolean(this.defaults?.metronUserSet);
-      const storedPassword = Boolean(this.defaults?.metronPasswordSet);
-      return (formHasUser || storedUser) && (formHasPassword || storedPassword);
+      return (
+        Boolean(this.metronKey) || Boolean(this.defaults?.hasMetronCredentials)
+      );
     },
     canTestComicvine() {
       return (
@@ -613,15 +580,11 @@ export default {
     },
     async saveMetronCredentials() {
       const data = {};
-      if (this.metronUser) data.metronUser = this.metronUser;
-      if (this.metronPassword) data.metronPassword = this.metronPassword;
-      if (this.metronUrlLocal) data.metronUrl = this.metronUrlLocal;
+      if (this.metronKey) data.metronKey = this.metronKey;
       this.validationResult.metron = undefined;
       const hadCredentials = Boolean(this.defaults?.hasMetronCredentials);
       await this.updateTaggingDefaults(data);
-      this.metronUser = "";
-      this.metronPassword = "";
-      this.metronUrlLocal = "";
+      this.metronKey = "";
       // Configuring a brand-new source enables it automatically; re-saving
       // credentials respects the existing checkbox state.
       if (!hadCredentials && this.defaults?.hasMetronCredentials) {
@@ -631,42 +594,31 @@ export default {
     async saveComicvineCredentials() {
       const data = {};
       if (this.comicvineKey) data.comicvineKey = this.comicvineKey;
-      if (this.comicvineUrlLocal) data.comicvineUrl = this.comicvineUrlLocal;
       this.validationResult.comicvine = undefined;
       const hadCredentials = Boolean(this.defaults?.hasComicvineCredentials);
       await this.updateTaggingDefaults(data);
       this.comicvineKey = "";
-      this.comicvineUrlLocal = "";
       if (!hadCredentials && this.defaults?.hasComicvineCredentials) {
         this.setSourceEnabled("comicvine", true);
       }
     },
     clearMetronCredentials() {
       this.validationResult.metron = undefined;
-      this.updateTaggingDefaults({
-        metronUser: "",
-        metronPassword: "",
-        metronUrl: "",
-      });
+      // A blank key also retires any legacy username & password server side.
+      this.updateTaggingDefaults({ metronKey: "" });
     },
     clearComicvineCredentials() {
       this.validationResult.comicvine = undefined;
-      this.updateTaggingDefaults({
-        comicvineKey: "",
-        comicvineUrl: "",
-      });
+      this.updateTaggingDefaults({ comicvineKey: "" });
     },
     async testMetronCredentials() {
       const payload = { source: "metron" };
-      if (this.metronUser) payload.metronUser = this.metronUser;
-      if (this.metronPassword) payload.metronPassword = this.metronPassword;
-      if (this.metronUrlLocal) payload.metronUrl = this.metronUrlLocal;
+      if (this.metronKey) payload.metronKey = this.metronKey;
       await this._runValidation("metron", payload);
     },
     async testComicvineCredentials() {
       const payload = { source: "comicvine" };
       if (this.comicvineKey) payload.comicvineKey = this.comicvineKey;
-      if (this.comicvineUrlLocal) payload.comicvineUrl = this.comicvineUrlLocal;
       await this._runValidation("comicvine", payload);
     },
     async _runValidation(source, payload) {
diff --git a/frontend/tests/unit/rename-toggle.test.js b/frontend/tests/unit/rename-toggle.test.js
index a57953621..78a4c3b5d 100644
--- a/frontend/tests/unit/rename-toggle.test.js
+++ b/frontend/tests/unit/rename-toggle.test.js
@@ -309,11 +309,8 @@ const BASE_DEFAULTS = {
   defaultSources: [],
   hasMetronCredentials: false,
   hasComicvineCredentials: false,
-  metronUserSet: false,
-  metronPasswordSet: false,
-  metronUrl: "",
+  metronKeySet: false,
   comicvineKeySet: false,
-  comicvineUrl: "",
 };
 
 describe("AdminTaggingTab — rename default", () => {
diff --git a/frontend/tests/unit/stats-tab.test.js b/frontend/tests/unit/stats-tab.test.js
index 79f2434f8..b6c6b5c08 100644
--- a/frontend/tests/unit/stats-tab.test.js
+++ b/frontend/tests/unit/stats-tab.test.js
@@ -86,7 +86,6 @@ const STATS = {
     defaultSources: { metron: 1, comicvine: 1 },
     hasMetronCredentials: true,
     hasComicvineCredentials: false,
-    metronUrlSet: false,
   },
   auth: {
     oidcEnabled: false,
diff --git a/frontend/tests/unit/tagging-tab.test.js b/frontend/tests/unit/tagging-tab.test.js
index baea97c37..173012ced 100644
--- a/frontend/tests/unit/tagging-tab.test.js
+++ b/frontend/tests/unit/tagging-tab.test.js
@@ -39,11 +39,8 @@ const BASE_DEFAULTS = {
   defaultSources: [],
   hasMetronCredentials: false,
   hasComicvineCredentials: false,
-  metronUserSet: false,
-  metronPasswordSet: false,
-  metronUrl: "",
+  metronKeySet: false,
   comicvineKeySet: false,
-  comicvineUrl: "",
 };
 
 const SOURCE_TIP =
@@ -148,8 +145,7 @@ describe("AdminTaggingTab — Online Sources enable checkboxes", () => {
       };
     });
 
-    vm.metronUser = "user";
-    vm.metronPassword = "pass";
+    vm.metronKey = "token";
     await vm.saveMetronCredentials();
     await vm.$nextTick();
     expect(vm.draft.defaultSources).toContain("metron");
@@ -167,8 +163,7 @@ describe("AdminTaggingTab — Online Sources enable checkboxes", () => {
     const vm = wrapper.vm;
     const store = useAdminStore();
 
-    vm.metronUser = "user";
-    vm.metronPassword = "pass";
+    vm.metronKey = "token";
     await vm.saveMetronCredentials();
     await vm.$nextTick();
     expect(vm.draft.defaultSources).not.toContain("metron");
@@ -181,14 +176,68 @@ describe("AdminTaggingTab — Online Sources enable checkboxes", () => {
     const wrapper = mountTab();
     const vm = wrapper.vm;
 
-    vm.metronUser = "user";
-    // No password — the server would reject; defaults keep no credentials.
+    // The server rejected the key; defaults keep no credentials.
+    vm.metronKey = "bad";
     await vm.saveMetronCredentials();
     await vm.$nextTick();
     expect(vm.draft.defaultSources).not.toContain("metron");
     expect(vm.metronEnabled).toBe(false);
   });
 
+  test("no custom URL field is offered for either source", async () => {
+    // mokkari hardcodes the metron.cloud endpoint, so the override never
+    // did anything; the Comic Vine twin went with it.
+    const wrapper = mountTab({
+      hasMetronCredentials: true,
+      hasComicvineCredentials: true,
+    });
+
+    // The credential fields live in collapsed expansion panels, so expand
+    // both before asserting — otherwise nothing is rendered to look at.
+    for (const title of wrapper.findAll(".v-expansion-panel-title")) {
+      await title.trigger("click");
+    }
+    await new Promise((resolve) => setTimeout(resolve, 0));
+
+    expect(wrapper.text()).toContain("Save Metron Cloud Credentials");
+    expect(wrapper.text()).toContain("Save Comic Vine Credentials");
+    expect(wrapper.text()).not.toContain("Custom URL");
+  });
+
+  test("saving sends only the API key, never a username or password", async () => {
+    const wrapper = mountTab();
+    const vm = wrapper.vm;
+    const store = useAdminStore();
+
+    vm.metronKey = "token";
+    await vm.saveMetronCredentials();
+    expect(store.updateTaggingDefaults).toHaveBeenCalledWith({
+      metronKey: "token",
+    });
+    // The field is cleared so a saved key is never left sitting in the form.
+    expect(vm.metronKey).toBe("");
+  });
+
+  test("clearing sends a blank key, which also retires a legacy login", async () => {
+    const wrapper = mountTab({ hasMetronCredentials: true });
+    const vm = wrapper.vm;
+    const store = useAdminStore();
+
+    vm.clearMetronCredentials();
+    expect(store.updateTaggingDefaults).toHaveBeenCalledWith({
+      metronKey: "",
+    });
+  });
+
+  test("an install with only a legacy login can still be tested", () => {
+    // No key typed and metronKeySet false, but credentials exist server side.
+    const vm = mountTab({ hasMetronCredentials: true, metronKeySet: false }).vm;
+    expect(vm.canTestMetron).toBe(true);
+
+    const unconfigured = mountTab({ hasMetronCredentials: false }).vm;
+    expect(unconfigured.canTestMetron).toBe(false);
+  });
+
   test("toggling one source leaves the other untouched", async () => {
     const wrapper = mountTab({
       hasMetronCredentials: true,
diff --git a/pyproject.toml b/pyproject.toml
index d826bb306..1daabd590 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -15,7 +15,7 @@ dependencies = [
   "adrf~=0.1.12",
   "bidict~=0.23",
   "channels~=4.2",
-  "comicbox[pdf]~=4.6.1",
+  "comicbox[pdf]~=4.7.1",
   "cryptography>=48.0.0",
   "dateparser~=1.2",
   "django-allauth[socialaccount]~=65.13",
@@ -49,7 +49,7 @@ readme = "README.md"
 requires-python = ">=3.12"
 license = "GPL-3.0-only"
 name = "codex"
-version = "2.2.3"
+version = "2.2.4"
 [[project.authors]]
 name = "AJ Slater"
 email = "aj@slater.net"
diff --git a/tests/test_admin_singleton_settings.py b/tests/test_admin_singleton_settings.py
index 64fec4eaa..5627d80f7 100644
--- a/tests/test_admin_singleton_settings.py
+++ b/tests/test_admin_singleton_settings.py
@@ -90,6 +90,73 @@ def test_tagging_defaults_preserves_source_order(self) -> None:
         assert resp.status_code == HTTPStatus.OK, resp.content
         assert resp.json()["data"]["defaultSources"] == ["comicvine", "metron"]
 
+    def test_metron_key_retires_a_legacy_login(self) -> None:
+        """Saving an API key drops the username & password it replaces."""
+        from codex.models import ComicboxTaggingDefaults
+
+        ComicboxTaggingDefaults.objects.filter(pk=1).update(
+            metron_user="stored_user",
+            metron_password="stored_pw",  # noqa: S106
+        )
+        resp = _put_envelope(
+            self.client, "/api/v4/admin/tagging-defaults", {"metronKey": "token"}
+        )
+        assert resp.status_code == HTTPStatus.OK, resp.content
+        body = resp.json()["data"]
+        assert body["metronKeySet"] is True
+        assert body["hasMetronCredentials"] is True
+        # Write-only: the key itself never comes back out.
+        assert "metronKey" not in body
+        defaults = ComicboxTaggingDefaults.objects.get(pk=1)
+        assert defaults.metron_key == "token"
+        assert defaults.metron_user == ""
+        assert defaults.metron_password == ""
+
+    def test_clearing_the_metron_key_clears_a_legacy_login_too(self) -> None:
+        from codex.models import ComicboxTaggingDefaults
+
+        ComicboxTaggingDefaults.objects.filter(pk=1).update(
+            metron_key="token",
+            metron_user="stored_user",
+            metron_password="stored_pw",  # noqa: S106
+        )
+        resp = _put_envelope(
+            self.client,
+            "/api/v4/admin/tagging-defaults",
+            {"metronKey": ""},
+        )
+        assert resp.status_code == HTTPStatus.OK, resp.content
+        assert resp.json()["data"]["hasMetronCredentials"] is False
+        defaults = ComicboxTaggingDefaults.objects.get(pk=1)
+        assert defaults.metron_key == ""
+        assert defaults.metron_user == ""
+        assert defaults.metron_password == ""
+
+    def test_legacy_login_survives_a_put_that_omits_the_key(self) -> None:
+        """Any settings save that omits the key keeps a stored login."""
+        from codex.models import ComicboxTaggingDefaults
+
+        ComicboxTaggingDefaults.objects.filter(pk=1).update(
+            metron_user="stored_user",
+            metron_password="stored_pw",  # noqa: S106
+        )
+        resp = _put_envelope(
+            self.client,
+            "/api/v4/admin/tagging-defaults",
+            {"renameFiles": True},
+        )
+        assert resp.status_code == HTTPStatus.OK, resp.content
+        body = resp.json()["data"]
+        assert body["metronKeySet"] is False
+        # A pre-API-key install still reads as configured.
+        assert body["hasMetronCredentials"] is True
+        defaults = ComicboxTaggingDefaults.objects.get(pk=1)
+        # The save itself landed...
+        assert defaults.rename_files is True
+        # ...and the legacy login survived it.
+        assert defaults.metron_user == "stored_user"
+        assert defaults.metron_password == "stored_pw"  # noqa: S105
+
     def test_tagging_defaults_rejects_unknown_source(self) -> None:
         """An unknown source name is a 400, not a silently-stored junk value."""
         resp = _put_envelope(
diff --git a/tests/test_api_docs_urls.py b/tests/test_api_docs_urls.py
new file mode 100644
index 000000000..b65cd90bc
--- /dev/null
+++ b/tests/test_api_docs_urls.py
@@ -0,0 +1,73 @@
+"""Tests for the drf-spectacular schema & interactive docs routes."""
+
+from typing import Final, override
+
+from django.contrib.auth.models import User
+from django.test import TestCase
+
+from codex.settings import SECURE_CSP
+
+_SCHEMA_URL: Final = "/api/v4/schema"
+_SWAGGER_URL: Final = "/api/v4/"
+_HTTP_OK: Final = 200
+_HTTP_FORBIDDEN: Final = 403
+
+
+class APIDocsPermissionTests(TestCase):
+    """The schema and the Swagger UI are admin only."""
+
+    def test_anonymous_denied(self) -> None:
+        for url in (_SCHEMA_URL, _SWAGGER_URL):
+            assert self.client.get(url).status_code == _HTTP_FORBIDDEN
+
+    def test_non_staff_denied(self) -> None:
+        self.client.force_login(User.objects.create_user("reader"))
+        for url in (_SCHEMA_URL, _SWAGGER_URL):
+            assert self.client.get(url).status_code == _HTTP_FORBIDDEN
+
+
+class APIDocsUITests(TestCase):
+    """The Swagger UI renders and points at the schema route."""
+
+    @override
+    def setUp(self) -> None:
+        self.client.force_login(User.objects.create_superuser("admin", "", "admin"))
+
+    def test_schema_json(self) -> None:
+        response = self.client.get(_SCHEMA_URL, {"format": "json"})
+        assert response.status_code == _HTTP_OK
+        schema = response.json()
+        assert schema["info"]["title"] == "Codex API"
+        # The Swagger UI route itself is excluded from the schema.
+        assert _SWAGGER_URL not in schema["paths"]
+
+    def test_swagger_html_and_split_script(self) -> None:
+        response = self.client.get(_SWAGGER_URL)
+        assert response.status_code == _HTTP_OK
+        html = response.content.decode()
+        assert "swagger-ui" in html
+        # Split view: the init javascript is a second same-origin
+        # request, never an inline <script>.
+        assert f"{_SWAGGER_URL}?script=" in html
+
+        script = self.client.get(_SWAGGER_URL, {"script": ""})
+        assert script.status_code == _HTTP_OK
+        assert script["Content-Type"].startswith("application/javascript")
+        assert _SCHEMA_URL in script.content.decode()
+
+
+class APIDocsCSPTests(TestCase):
+    """Every CDN asset the docs templates request is allowed."""
+
+    def test_docs_scripts_in_script_src_elem(self) -> None:
+        # script-src-elem is declared by the pdfs-dist overlay, so it
+        # masks script-src for element loads and must list the bundles.
+        for directive in ("script-src", "script-src-elem"):
+            sources = SECURE_CSP[directive]
+            assert any("swagger-ui-bundle.js" in source for source in sources)
+            assert any(
+                "swagger-ui-standalone-preset.js" in source for source in sources
+            )
+
+    def test_swagger_css_allowed(self) -> None:
+        assert any("swagger-ui.css" in source for source in SECURE_CSP["style-src"])
diff --git a/tests/test_bookmark_filter_isolation.py b/tests/test_bookmark_filter_isolation.py
index e4cffa54e..4d2d47c62 100644
--- a/tests/test_bookmark_filter_isolation.py
+++ b/tests/test_bookmark_filter_isolation.py
@@ -62,7 +62,11 @@ def _build_view(*, user, session_key, choice):
     """
     view = BrowserFilterBookmarkView.__new__(BrowserFilterBookmarkView)
     view.init_bookmark_filter()
-    view.request = SimpleNamespace(  # pyright: ignore[reportAttributeAccessIssue]
+    # A duck-typed stand-in for the Request the mixin declares: the filter
+    # code only ever reads ``.user`` and ``.session``. Both checkers are
+    # silenced rather than cast through ``object``, which reads worse and
+    # would still not make the stub a Request.
+    view.request = SimpleNamespace(  # pyright: ignore[reportAttributeAccessIssue] # ty: ignore[invalid-assignment]
         user=user,
         session=SimpleNamespace(session_key=session_key),
     )
diff --git a/tests/test_credential_validator.py b/tests/test_credential_validator.py
index a876902e3..ba0ea1cf8 100644
--- a/tests/test_credential_validator.py
+++ b/tests/test_credential_validator.py
@@ -17,12 +17,14 @@
 
 
 def _full_creds() -> OnlineCredentials:
+    return OnlineCredentials(metron_key="token", comicvine_key="key")
+
+
+def _legacy_creds() -> OnlineCredentials:
+    """Build credentials for an install predating Metron's API keys."""
     return OnlineCredentials(
         metron_user="user",
         metron_password="pw",  # noqa: S106
-        metron_url="",
-        comicvine_key="key",
-        comicvine_url="",
     )
 
 
@@ -44,6 +46,42 @@ def test_metron_success(self) -> None:
             results = validate_credentials(_full_creds(), {"metron"})
         assert results == {"metron": ValidationResult(ok=True)}
         instance.publishers_list.assert_called_once_with({"page": 1})
+        assert mocked.call_args.kwargs["api_token"] == "token"  # noqa: S105
+
+    def test_metron_legacy_login_still_validates(self) -> None:
+        """A stored username & password authenticates when no API key is set."""
+        from mokkari.session import RateLimitStatus
+
+        with patch("mokkari.session.Session") as mocked:
+            instance = MagicMock()
+            instance.publishers_list.return_value = []
+            instance.rate_limit_status = RateLimitStatus()
+            mocked.return_value = instance
+            results = validate_credentials(_legacy_creds(), {"metron"})
+        assert results == {"metron": ValidationResult(ok=True)}
+        kwargs = mocked.call_args.kwargs
+        # None, not "" — mokkari sends a Bearer header for any non-None token,
+        # which would shut off the username & password fallback.
+        assert kwargs["api_token"] is None
+        assert kwargs["username"] == "user"
+
+    def test_metron_key_wins_over_legacy_login(self) -> None:
+        """Both stored: the token is what mokkari gets told to prefer."""
+        from mokkari.session import RateLimitStatus
+
+        creds = OnlineCredentials(
+            metron_key="token",
+            metron_user="user",
+            metron_password="pw",  # noqa: S106
+        )
+        with patch("mokkari.session.Session") as mocked:
+            instance = MagicMock()
+            instance.publishers_list.return_value = []
+            instance.rate_limit_status = RateLimitStatus()
+            mocked.return_value = instance
+            results = validate_credentials(creds, {"metron"})
+        assert results["metron"].ok is True
+        assert mocked.call_args.kwargs["api_token"] == "token"  # noqa: S105
 
     def test_metron_success_reports_rate_limits(self) -> None:
         """The validation response's live account limits ride along, sans reset."""
@@ -97,10 +135,16 @@ def test_metron_api_error(self) -> None:
         assert results["metron"] == ValidationResult(ok=False, error="boom")
 
     def test_metron_missing_creds(self) -> None:
-        creds = OnlineCredentials(metron_user="", metron_password="")
+        creds = OnlineCredentials(metron_key="", metron_user="", metron_password="")
+        results = validate_credentials(creds, {"metron"})
+        assert results["metron"].ok is False
+        assert "api key required" in (results["metron"].error or "").lower()
+
+    def test_metron_half_a_legacy_login_is_not_enough(self) -> None:
+        creds = OnlineCredentials(metron_user="user", metron_password="")
         results = validate_credentials(creds, {"metron"})
         assert results["metron"].ok is False
-        assert "required" in (results["metron"].error or "").lower()
+        assert "api key required" in (results["metron"].error or "").lower()
 
     def test_comicvine_success(self) -> None:
         with patch("simyan.comicvine.Comicvine") as mocked:
@@ -158,10 +202,12 @@ def test_unknown_source_silently_skipped(self) -> None:
         assert results == {}
 
 
-# Sanity: catch accidental drift between the field set the view forwards
-# and the dataclass on the comicbox side.
+# Sanity: catch accidental drift in the comicbox dataclass. The url fields
+# are still defined there; codex no longer forwards them since the custom
+# URL overrides were removed (mokkari ignores its url entirely).
 _EXPECTED_CRED_FIELDS: Final = frozenset(
     {
+        "metron_key",
         "metron_user",
         "metron_password",
         "metron_url",
@@ -172,5 +218,5 @@ def test_unknown_source_silently_skipped(self) -> None:
 
 
 def test_online_credentials_fields_stable() -> None:
-    """OnlineCredentials field names match what the view forwards into it."""
+    """OnlineCredentials field names match what comicbox defines."""
     assert frozenset(OnlineCredentials.__dataclass_fields__) == _EXPECTED_CRED_FIELDS
diff --git a/tests/test_onlinetag_session_manager.py b/tests/test_onlinetag_session_manager.py
index 84ee6fb84..00729a352 100644
--- a/tests/test_onlinetag_session_manager.py
+++ b/tests/test_onlinetag_session_manager.py
@@ -164,7 +164,7 @@ def setUp(self) -> None:
         _FakeSession.last_kwargs = {}
         ComicboxTaggingDefaults.objects.update_or_create(
             pk=1,
-            defaults={"metron_user": "u", "metron_password": "p"},
+            defaults={"metron_key": "t"},
         )
         self.queue = _FakeQueue()  # pyright: ignore[reportUninitializedInstanceVariable]
         self.manager = OnlineTagSessionManager(  # pyright: ignore[reportUninitializedInstanceVariable]
@@ -323,6 +323,7 @@ def test_prefetch_keeps_comic_in_status_out_of_search_and_resume(self) -> None:
         )
         credentials = self.manager._build_credentials()  # noqa: SLF001
         assert credentials is not None  # configured in setUp
+        assert credentials.metron_key == "t"
         task = BulkOnlineTagTask(
             comic_pks=frozenset({comic.pk}),
             session_id="s",
@@ -803,3 +804,36 @@ def test_unmatched_scan_result_is_not_batched(self) -> None:
         )
         TagPassRunner._store_result_tags(state, matched, batch, flush_writes=True)  # noqa: SLF001
         assert batch == {1: {"series": "New"}}
+
+    def test_metron_credentials_accept_a_key_or_a_legacy_login(self) -> None:
+        """Both auth styles configure Metron; comicbox raises on neither."""
+        manager = self.manager
+        ComicboxTaggingDefaults.objects.update_or_create(
+            pk=1,
+            defaults={"metron_key": "", "metron_user": "u", "metron_password": "p"},
+        )
+        legacy = manager._build_credentials()  # noqa: SLF001
+        assert legacy is not None
+        assert legacy.metron_user == "u"
+        assert manager._source_has_credentials(legacy, "metron") is True  # noqa: SLF001
+
+        ComicboxTaggingDefaults.objects.update_or_create(
+            pk=1,
+            defaults={"metron_key": "t", "metron_user": "", "metron_password": ""},
+        )
+        keyed = manager._build_credentials()  # noqa: SLF001
+        assert keyed is not None
+        assert keyed.metron_key == "t"
+        assert manager._source_has_credentials(keyed, "metron") is True  # noqa: SLF001
+
+    def test_no_metron_credentials_at_all_is_unconfigured(self) -> None:
+        ComicboxTaggingDefaults.objects.update_or_create(
+            pk=1,
+            defaults={
+                "metron_key": "",
+                "metron_user": "",
+                "metron_password": "",
+                "comicvine_key": "",
+            },
+        )
+        assert self.manager._build_credentials() is None  # noqa: SLF001
diff --git a/tests/test_snapshot_diff.py b/tests/test_snapshot_diff.py
index e8c2bca85..c348be76e 100644
--- a/tests/test_snapshot_diff.py
+++ b/tests/test_snapshot_diff.py
@@ -3,6 +3,8 @@
 import os
 from logging import getLogger
 
+from django.db.models import Model
+
 from codex.librarian.fs.poller.snapshot import Snapshot
 from codex.librarian.fs.poller.snapshot_diff import SnapshotDiff
 from codex.models import Comic, Folder
@@ -19,7 +21,7 @@ def _stat(*, mode: int, ino: int, size: int, mtime: float = 1.0) -> os.stat_resu
 def _snapshot(
     entries: dict[str, os.stat_result],
     *,
-    models: dict[str, type] | None = None,
+    models: dict[str, type[Model]] | None = None,
 ) -> Snapshot:
     """
     Build a Snapshot from a path→stat map, bypassing disk/db.
diff --git a/tests/test_tag_by_id.py b/tests/test_tag_by_id.py
index 71cf5bfd0..f7a999d6b 100644
--- a/tests/test_tag_by_id.py
+++ b/tests/test_tag_by_id.py
@@ -135,22 +135,26 @@ def test_result_has_requested_id_missing(self) -> None:
         assert _result_has_requested_id({}, "metron", 123) is False
 
     def test_build_explicit_id_config_sets_ids(self) -> None:
-        creds = OnlineCredentials(metron_user="u", metron_password="p")  # noqa: S106
+        creds = OnlineCredentials(metron_key="t")
         settings = build_explicit_id_config("metron", 123, creds)
         assert settings.online.lookup.enabled is True
         assert dict(settings.online.lookup.ids) == {"metron": 123}
         assert settings.online.lookup.sources == ("metron",)
         assert settings.online.lookup.first_wins is True
-        assert "metron" in settings.online.auth.sources
+        assert settings.online.auth.sources["metron"].key == "t"
+
+    def test_build_explicit_id_config_passes_legacy_login(self) -> None:
+        """A pre-API-key install still authenticates by explicit id."""
+        creds = OnlineCredentials(metron_user="u", metron_password="p")  # noqa: S106
+        settings = build_explicit_id_config("metron", 123, creds)
+        auth = settings.online.auth.sources["metron"]
+        assert auth.user == "u"
+        assert auth.password == "p"  # noqa: S105
 
     def test_build_explicit_id_config_merge(self) -> None:
         # Merge: both sources pinned by explicit id (primary first), first_wins
         # off, auth for both. comicbox runs every id-pinned source and merges.
-        creds = OnlineCredentials(
-            metron_user="u",
-            metron_password="p",  # noqa: S106
-            comicvine_key="k",
-        )
+        creds = OnlineCredentials(metron_key="t", comicvine_key="k")
         settings = build_explicit_id_config(
             "metron", 123, creds, extra_ids=(("comicvine", 456),)
         )
@@ -209,7 +213,7 @@ def setUp(self) -> None:
         caches["tagging"].clear()
         ComicboxTaggingDefaults.objects.update_or_create(
             pk=1,
-            defaults={"metron_user": "u", "metron_password": "p"},
+            defaults={"metron_key": "t"},
         )
         self.queue = _FakeQueue()  # pyright: ignore[reportUninitializedInstanceVariable]
         self.manager = OnlineTagSessionManager(  # pyright: ignore[reportUninitializedInstanceVariable]
@@ -300,7 +304,7 @@ def setUp(self) -> None:
         self.client.force_login(_make_admin())
         ComicboxTaggingDefaults.objects.update_or_create(
             pk=1,
-            defaults={"metron_user": "u", "metron_password": "p"},
+            defaults={"metron_key": "t"},
         )
 
     def _post(self, identifier: str, source: str | None = None):
@@ -318,11 +322,31 @@ def _post(self, identifier: str, source: str | None = None):
     def test_no_credentials_returns_400(self) -> None:
         ComicboxTaggingDefaults.objects.update_or_create(
             pk=1,
-            defaults={"metron_user": "", "metron_password": "", "comicvine_key": ""},
+            defaults={
+                "metron_key": "",
+                "metron_user": "",
+                "metron_password": "",
+                "comicvine_key": "",
+            },
         )
         response = self._post("metron:1")
         assert response.status_code == HTTPStatus.BAD_REQUEST
 
+    def test_legacy_login_still_counts_as_configured(self) -> None:
+        """An install predating API keys can still tag by id."""
+        ComicboxTaggingDefaults.objects.update_or_create(
+            pk=1,
+            defaults={"metron_key": "", "metron_user": "u", "metron_password": "p"},
+        )
+        with (
+            patch.object(
+                AdminTagByIdView, "resolve_comic_pks", return_value=frozenset({_PK})
+            ),
+            patch(_VIEW_QUEUE_TARGET),
+        ):
+            response = self._post(f"metron:{_ISSUE_ID}")
+        assert response.status_code == HTTPStatus.ACCEPTED
+
     def test_unparseable_identifier_returns_400(self) -> None:
         response = self._post("not-an-id")
         assert response.status_code == HTTPStatus.BAD_REQUEST
@@ -355,8 +379,7 @@ def test_merge_two_ids_enqueues_extra_ids(self) -> None:
         ComicboxTaggingDefaults.objects.update_or_create(
             pk=1,
             defaults={
-                "metron_user": "u",
-                "metron_password": "p",
+                "metron_key": "t",
                 "comicvine_key": "k",
                 "default_sources": ["metron", "comicvine"],
                 "merge_all_sources": True,
diff --git a/tests/test_tagging_rename_wiring.py b/tests/test_tagging_rename_wiring.py
index a057a2468..7a5f7327c 100644
--- a/tests/test_tagging_rename_wiring.py
+++ b/tests/test_tagging_rename_wiring.py
@@ -272,7 +272,7 @@ def setUp(self) -> None:
         caches["default"].clear()
         caches["tagging"].clear()
         ComicboxTaggingDefaults.objects.update_or_create(
-            pk=1, defaults={"metron_user": "u", "metron_password": "p"}
+            pk=1, defaults={"metron_key": "t"}
         )
         self.queue = _FakeQueue()  # pyright: ignore[reportUninitializedInstanceVariable]
         self.manager = OnlineTagSessionManager(  # pyright: ignore[reportUninitializedInstanceVariable]
diff --git a/tests/test_tagging_validate_endpoint.py b/tests/test_tagging_validate_endpoint.py
index b908cccb7..27df7cf49 100644
--- a/tests/test_tagging_validate_endpoint.py
+++ b/tests/test_tagging_validate_endpoint.py
@@ -63,8 +63,7 @@ def setUp(self) -> None:
         self.client = Client()
         self.client.force_login(self.admin)
         ComicboxTaggingDefaults.objects.filter(pk=1).update(
-            metron_user="stored_user",
-            metron_password="stored_pw",  # noqa: S106
+            metron_key="stored_token",
             comicvine_key="stored_key",
         )
 
@@ -73,17 +72,12 @@ def test_uses_form_overrides_when_provided(self) -> None:
             mocked.return_value = {"metron": ValidationResult(ok=True)}
             response = self.client.post(
                 _URL,
-                data={
-                    "source": "metron",
-                    "metron_user": "form_user",
-                    "metron_password": "form_pw",
-                },
+                data={"source": "metron", "metron_key": "form_token"},
                 content_type="application/json",
             )
         assert response.status_code == _HTTP_OK
         creds = mocked.call_args.args[0]
-        assert creds.metron_user == "form_user"
-        assert creds.metron_password == "form_pw"  # noqa: S105
+        assert creds.metron_key == "form_token"
         assert mocked.call_args.args[1] == {"metron"}
 
     def test_falls_back_to_stored_when_form_blank(self) -> None:
@@ -96,6 +90,48 @@ def test_falls_back_to_stored_when_form_blank(self) -> None:
             )
         assert response.status_code == _HTTP_OK
         creds = mocked.call_args.args[0]
+        assert creds.metron_key == "stored_token"
+
+    def test_legacy_login_still_reaches_the_validator(self) -> None:
+        """An install with only a pre-API-key login tests those credentials."""
+        ComicboxTaggingDefaults.objects.filter(pk=1).update(
+            metron_key="",
+            metron_user="stored_user",
+            metron_password="stored_pw",  # noqa: S106
+        )
+        with patch("codex.views.admin.tagging_validate.validate_credentials") as mocked:
+            mocked.return_value = {"metron": ValidationResult(ok=True)}
+            response = self.client.post(
+                _URL,
+                data={"source": "metron"},
+                content_type="application/json",
+            )
+        assert response.status_code == _HTTP_OK
+        creds = mocked.call_args.args[0]
+        assert creds.metron_key == ""
+        assert creds.metron_user == "stored_user"
+        assert creds.metron_password == "stored_pw"  # noqa: S105
+
+    def test_legacy_credential_fields_are_not_accepted_from_the_form(self) -> None:
+        """The form has no username or password anymore; posting them is inert."""
+        ComicboxTaggingDefaults.objects.filter(pk=1).update(
+            metron_key="",
+            metron_user="stored_user",
+            metron_password="stored_pw",  # noqa: S106
+        )
+        with patch("codex.views.admin.tagging_validate.validate_credentials") as mocked:
+            mocked.return_value = {"metron": ValidationResult(ok=True)}
+            response = self.client.post(
+                _URL,
+                data={
+                    "source": "metron",
+                    "metron_user": "form_user",
+                    "metron_password": "form_pw",
+                },
+                content_type="application/json",
+            )
+        assert response.status_code == _HTTP_OK
+        creds = mocked.call_args.args[0]
         assert creds.metron_user == "stored_user"
         assert creds.metron_password == "stored_pw"  # noqa: S105
 
diff --git a/tests/test_telemeter_privacy.py b/tests/test_telemeter_privacy.py
index 6a775b696..5f4562073 100644
--- a/tests/test_telemeter_privacy.py
+++ b/tests/test_telemeter_privacy.py
@@ -127,11 +127,10 @@ def _seed_secrets(cls) -> None:
         """Put a sentinel in every admin-authored string codex stores."""
         cls._set_singleton(
             ComicboxTaggingDefaults,
+            metron_key=f"{SENTINEL}-metron-key",
             metron_user=f"{SENTINEL}-metron-user",
             metron_password=f"{SENTINEL}-metron-password",
-            metron_url=f"https://{SENTINEL}-metron.example.com",
             comicvine_key=f"{SENTINEL}-comicvine-key",
-            comicvine_url=f"https://{SENTINEL}-comicvine.example.com",
             default_sources=["metron", f"{SENTINEL}-source"],
         )
         cls._set_singleton(
diff --git a/tests/test_user_data_dump.py b/tests/test_user_data_dump.py
index 3d7562e47..7691cdc5c 100644
--- a/tests/test_user_data_dump.py
+++ b/tests/test_user_data_dump.py
@@ -81,6 +81,29 @@ def test_dump_round_trip_admin_flag(self) -> None:
         timestamps = {r["key"]: r for r in self.store.fetchall("timestamps")}
         assert timestamps["VR"]["value"] == "1.2.3"
 
+    def test_dump_round_trip_tagging_defaults(self) -> None:
+        """
+        Every serialized tagging column exists in the sidecar schema.
+
+        The upsert builds its INSERT column list from the serializer dict, so
+        a column the schema is missing fails the write — and ``_dump_queryset``
+        only logs that, leaving the table silently empty.
+        """
+        from codex.models.admin import ComicboxTaggingDefaults
+
+        ComicboxTaggingDefaults.objects.filter(pk=1).update(
+            metron_key="token",
+            comicvine_key="key",
+        )
+
+        counts = dump_user_data()
+        assert counts["tagging_defaults"] == 1
+
+        rows = self.store.fetchall("tagging_defaults")
+        assert len(rows) == 1
+        assert rows[0]["metron_key"] == "token"
+        assert rows[0]["comicvine_key"] == "key"
+
     def test_dump_settings_browser_show_flags(self) -> None:
         """show.{publishers,imprints,series,volumes} → show_{p,i,s,v} columns."""
         user = User.objects.create_user(username="alice", password=_TEST_PASSWORD)
diff --git a/tests/test_user_data_restore.py b/tests/test_user_data_restore.py
index ce2abb4f6..7a9068c68 100644
--- a/tests/test_user_data_restore.py
+++ b/tests/test_user_data_restore.py
@@ -355,3 +355,48 @@ def test_filter_restore_reads_legacy_column(self) -> None:
         _restore_one_filter(row, browser, RestoreReport())
         filters = SettingsBrowserFilters.objects.get(browser=browser)
         assert filters.community_rating == [4.5]
+
+
+class TaggingDefaultsRestoreTests(TestCase):
+    """A sidecar predating metron_key must still restore."""
+
+    @staticmethod
+    def _row(**overrides) -> dict:
+        row = {
+            "default_match_mode": "auto",
+            "default_prompts_mode": "ask",
+            "default_formats": '["COMIC_INFO"]',
+            "default_sources": '["metron"]',
+            "delete_original": 0,
+            "metron_key": "token",
+            "metron_user": "",
+            "metron_password": "",
+            "comicvine_key": "",
+        }
+        row.update(overrides)
+        return row
+
+    def test_metron_key_round_trips(self) -> None:
+        from codex.user_data.restore import _build_tagging_defaults
+
+        defaults = _build_tagging_defaults(self._row())
+        assert defaults["metron_key"] == "token"
+
+    def test_sidecar_without_metron_key_restores(self) -> None:
+        """The column is simply absent in older backups; the default stands."""
+        from codex.user_data.restore import _build_tagging_defaults
+
+        row = self._row()
+        del row["metron_key"]
+        defaults = _build_tagging_defaults(row)
+        assert "metron_key" not in defaults
+        assert defaults["default_match_mode"] == "auto"
+
+    def test_legacy_login_round_trips(self) -> None:
+        from codex.user_data.restore import _build_tagging_defaults
+
+        defaults = _build_tagging_defaults(
+            self._row(metron_key="", metron_user="u", metron_password="p")  # noqa: S106
+        )
+        assert defaults["metron_user"] == "u"
+        assert defaults["metron_password"] == "p"  # noqa: S105
diff --git a/uv.lock b/uv.lock
index ca8d5f7b2..e3da8a562 100644
--- a/uv.lock
+++ b/uv.lock
@@ -22,11 +22,11 @@ wheels = [
 
 [[package]]
 name = "annotated-doc"
-version = "0.0.4"
+version = "0.0.5"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/57/ba/046ceea27344560984e26a590f90bc7f4a75b06701f653222458922b558c/annotated_doc-0.0.4.tar.gz", hash = "sha256:fbcda96e87e9c92ad167c2e53839e57503ecfda18804ea28102353485033faa4", size = 7288, upload-time = "2025-11-10T22:07:42.062Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/5a/8e/38aa427ed5402449e226975b649c5dc73ccadfefeb95e6aecb8f8ea4b6b6/annotated_doc-0.0.5.tar.gz", hash = "sha256:c7e58ce09192557605d8bbd92836d7e1d520ac9580096042c0bfd197efacf1bb", size = 10758, upload-time = "2026-07-28T13:50:58.129Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/1e/d3/26bf1008eb3d2daa8ef4cacc7f3bfdc11818d111f7e2d0201bc6e3b49d45/annotated_doc-0.0.4-py3-none-any.whl", hash = "sha256:571ac1dc6991c450b25a9c2d84a3705e2ae7a53467b5d111c24fa8baabbed320", size = 5303, upload-time = "2025-11-10T22:07:40.673Z" },
+    { url = "https://files.pythonhosted.org/packages/3e/30/e900b21425a860e195f32e37657aa1f7c7f2b1bfb26f03ca209b90933c06/annotated_doc-0.0.5-py3-none-any.whl", hash = "sha256:117bac03a25ede5df5440e855b32d556049ca169ead221505badf432fed4b101", size = 5302, upload-time = "2026-07-28T13:50:57.239Z" },
 ]
 
 [[package]]
@@ -567,7 +567,7 @@ wheels = [
 
 [[package]]
 name = "codex"
-version = "2.2.3"
+version = "2.2.4"
 source = { editable = "." }
 dependencies = [
     { name = "adrf" },
@@ -653,7 +653,7 @@ requires-dist = [
     { name = "adrf", specifier = "~=0.1.12" },
     { name = "bidict", specifier = "~=0.23" },
     { name = "channels", specifier = "~=4.2" },
-    { name = "comicbox", extras = ["pdf"], specifier = "~=4.6.1" },
+    { name = "comicbox", extras = ["pdf"], specifier = "~=4.7.1" },
     { name = "cryptography", specifier = ">=48.0.0" },
     { name = "dateparser", specifier = "~=1.2" },
     { name = "django", specifier = "~=6.0" },
@@ -739,7 +739,7 @@ wheels = [
 
 [[package]]
 name = "comicbox"
-version = "4.6.1"
+version = "4.7.1"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "bidict" },
@@ -776,9 +776,9 @@ dependencies = [
     { name = "xmltodict" },
     { name = "zipremove" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/6e/05/1c2369de5b000c963fa119c2515d3fd1c64e55fa518eca2b691a86315c26/comicbox-4.6.1.tar.gz", hash = "sha256:4a4f50df0143c21853356a8defa767335434d870da6cdc6c56fef9a77c1f8c87", size = 1015362, upload-time = "2026-07-26T21:26:50.629Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/44/15/b1dcfc4aa93829f13bd71fc440e8432fea7eb01fc6fc02001faa1dea5d8f/comicbox-4.7.1.tar.gz", hash = "sha256:eda90b247d1961b32ece8b878a9ce1204a39d609d56b21eac337d5e7d727b45a", size = 1018345, upload-time = "2026-07-29T05:33:53.615Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/cf/24/6acdbbc6c3ef7bb9023bbeb586d442649218f72177e3013b26a0b1dadc3e/comicbox-4.6.1-py3-none-any.whl", hash = "sha256:8d4c288f775063858620679dd0e4b61291ef14180fbc24767adf5b15684208f7", size = 342787, upload-time = "2026-07-26T21:26:49.016Z" },
+    { url = "https://files.pythonhosted.org/packages/77/1a/579af5c6853adcd48e177717dd7ff24b273cf34e45d9e8269e88cb5fcd4e/comicbox-4.7.1-py3-none-any.whl", hash = "sha256:cac0906bcc0a8f393a09db5b1590091c120dde2ed349856965a7c87816fdb8e6", size = 343779, upload-time = "2026-07-29T05:33:52.472Z" },
 ]
 
 [package.optional-dependencies]
@@ -1227,7 +1227,7 @@ wheels = [
 
 [[package]]
 name = "djlint"
-version = "1.42.3"
+version = "1.43.1"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "click" },
@@ -1238,45 +1238,45 @@ dependencies = [
     { name = "pyyaml" },
     { name = "regex" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/bf/43/ecd8cf81a5bf2f9a402e6149dfbe0528c1786307fda873fa326c4ba5fe2b/djlint-1.42.3.tar.gz", hash = "sha256:dc4866567a8dc550ae35d4eadd99a8bf1a7ff239e2d3b7210e6dda38a0373fc6", size = 76006, upload-time = "2026-07-23T22:28:29.539Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/a7/ce/dbb7d2b408991dc0ee034950a7cba229969a8928e48f756019ce1e917799/djlint-1.42.3-cp312-cp312-macosx_10_13_x86_64.whl", hash = "sha256:b1784f9a3fbe0c66b691391deb1d1883810b7e64d76a77036d951389a1646d52", size = 775585, upload-time = "2026-07-23T22:27:43.36Z" },
-    { url = "https://files.pythonhosted.org/packages/71/de/55215b465ec38fd71f7469fdce910cc3b0361b9b7f5e727e743fbb8ad080/djlint-1.42.3-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:6bf32d3187c3e0382245047a8f2c853abf37b7a368fa4e017a0ee00bc6fc8386", size = 727203, upload-time = "2026-07-23T22:27:44.566Z" },
-    { url = "https://files.pythonhosted.org/packages/a0/d7/67da9e52532a2d034deaeb9ac53041399442a5d9e5d58949061cf713f63f/djlint-1.42.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:76169baa0dd81efb54909973d3c9cc8cc5175bafd3c954942f0eb651a7bd9a93", size = 770808, upload-time = "2026-07-23T22:27:45.865Z" },
-    { url = "https://files.pythonhosted.org/packages/6a/a2/e166f444b6352db6203d5a052f311443df52009a3165da043b6a1ddc1244/djlint-1.42.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:a5b4ad7aa4d853fbeee43b0ddee9b9cf10d70516f4c86752d75ee811eb2a8a1d", size = 808227, upload-time = "2026-07-23T22:27:47.123Z" },
-    { url = "https://files.pythonhosted.org/packages/14/cc/1d0cd580b9ea18834ce151609688a3d978a28fc5be21a62ac11ca7e075f7/djlint-1.42.3-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:e52507462b377ade6956e573d974b214188d13f77641b1bddc97adad807442b7", size = 778973, upload-time = "2026-07-23T22:27:48.16Z" },
-    { url = "https://files.pythonhosted.org/packages/57/fe/b09e05565f5bbe968ff310a401b89df3e8747df6a786f91043102ee6f804/djlint-1.42.3-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:e551c3e7427fdefebbe75ac5f869ecc44b5f5971c4a7f3ce7c81a03479c06a11", size = 822043, upload-time = "2026-07-23T22:27:49.392Z" },
-    { url = "https://files.pythonhosted.org/packages/37/49/18d1c22a8c2f5af57d7201361b19e95485ac9d8338f8b4006a8660919f38/djlint-1.42.3-cp312-cp312-win32.whl", hash = "sha256:054fb9a8e29243f1e391c9ad312dcce38b2ef87d449f1a5e1cd7c5ac28a6ffa8", size = 591592, upload-time = "2026-07-23T22:27:50.941Z" },
-    { url = "https://files.pythonhosted.org/packages/93/df/753cc6db26e179b4d4afeaa68b219b4e3744590fe23b8075a0724f1805a0/djlint-1.42.3-cp312-cp312-win_amd64.whl", hash = "sha256:e0273707c014413d470bf350a690c75e26404aaf491d92fbcfda5fb9f33be1d1", size = 669957, upload-time = "2026-07-23T22:27:52.221Z" },
-    { url = "https://files.pythonhosted.org/packages/39/f4/c4cb0c6fb915832e0bb4bc3c0d7a3b41f0625c80116f0b8fe3583b4dd7ee/djlint-1.42.3-cp312-cp312-win_arm64.whl", hash = "sha256:1be6787d9ae9c44d31174af6c3caa0da9e7b193acafc6dc1f474f18fdf0d1d57", size = 589056, upload-time = "2026-07-23T22:27:53.26Z" },
-    { url = "https://files.pythonhosted.org/packages/19/3a/275f51ac2adbb8f70d6952e16ebad3f8615005952d275eeb7e3b9b57ef2e/djlint-1.42.3-cp313-cp313-macosx_10_13_x86_64.whl", hash = "sha256:8cbb30c4647adaf2503c4f90ca77496255a62aa9446919c6f443b9ab9972d91e", size = 768199, upload-time = "2026-07-23T22:27:54.824Z" },
-    { url = "https://files.pythonhosted.org/packages/21/9a/87fcce4b688907a47b253e58cbbdaeea2d785d0ac57af240e51029e7f63d/djlint-1.42.3-cp313-cp313-macosx_11_0_arm64.whl", hash = "sha256:fa6fcba3695d5ad9ddf3c3af159078870f683915dca01eabe0e1e6ad7dc31efa", size = 721205, upload-time = "2026-07-23T22:27:56.052Z" },
-    { url = "https://files.pythonhosted.org/packages/70/bd/9ed7b5c76dd7aaf3ef7fc67ffca9de96594ce102d77f8ba2510cf34f9cfd/djlint-1.42.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:3a6e7fcddba0c6d3744b1b11ebd4194fef74016903d9443f188da1492d0e5580", size = 767398, upload-time = "2026-07-23T22:27:57.373Z" },
-    { url = "https://files.pythonhosted.org/packages/5a/7e/84a601c88f81f755924e182f16579616bb0677bf23b04c2abcd1995dadd9/djlint-1.42.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:73944b60371fbce657f9586f9a7b282e03b4b0e5a46a58be5f355571b4b45a88", size = 805458, upload-time = "2026-07-23T22:27:58.636Z" },
-    { url = "https://files.pythonhosted.org/packages/26/7f/b9840f3baf95671522e3c886a79fb4bf7981634d009a21d7cdeb544d436d/djlint-1.42.3-cp313-cp313-musllinux_1_2_aarch64.whl", hash = "sha256:3321ff3261179880c3ce68fd2f3055af0d9b01f6d881941f0c5f651c3f190e29", size = 775420, upload-time = "2026-07-23T22:27:59.94Z" },
-    { url = "https://files.pythonhosted.org/packages/a3/8a/f65584f53068456054a2382d9ba09f2d85b7bd79e55c386fe68131c94ddc/djlint-1.42.3-cp313-cp313-musllinux_1_2_x86_64.whl", hash = "sha256:9f8cbe53c0e10b1e908b6712e6a581fc106192aa2226db66edc511fa3b8b1254", size = 819544, upload-time = "2026-07-23T22:28:01.048Z" },
-    { url = "https://files.pythonhosted.org/packages/38/25/c9d71ed454734d8d6e1850c331bbeac939a5fff271c522eabc7f1b8f53f6/djlint-1.42.3-cp313-cp313-win32.whl", hash = "sha256:c7ee56e3b9fde0c567cc1d5144dd87d2e8af9e8a308c70f9c034a4d82e732a3f", size = 592263, upload-time = "2026-07-23T22:28:02.326Z" },
-    { url = "https://files.pythonhosted.org/packages/83/ca/3fd6bcfb6384152068788961bf47458305891e9a085ee56a395c521f6e6e/djlint-1.42.3-cp313-cp313-win_amd64.whl", hash = "sha256:4141cd571463f84ca85a6f7cbd9bb0b8d5bf35e16edbf903026f20112d22b5a1", size = 671086, upload-time = "2026-07-23T22:28:03.567Z" },
-    { url = "https://files.pythonhosted.org/packages/fc/15/130bbac552f9c32934a912d27dc3df9b387a7deb11e01f4f1ad9549a82b5/djlint-1.42.3-cp313-cp313-win_arm64.whl", hash = "sha256:39c25036ae568431ed2fe3d1d3465c07bc37a31459f84ebedeb1ddf9f3cc63cc", size = 589788, upload-time = "2026-07-23T22:28:04.683Z" },
-    { url = "https://files.pythonhosted.org/packages/87/cd/e06953444084d721c4c3fb80e74a1636e46288b6a42a8c3d703c53fde079/djlint-1.42.3-cp314-cp314-macosx_10_15_x86_64.whl", hash = "sha256:8c29dc0a810d16e0dca26f984b9b7a6e7a095a54e386a24f159b82f18fa23fcd", size = 765598, upload-time = "2026-07-23T22:28:06.188Z" },
-    { url = "https://files.pythonhosted.org/packages/12/69/5da314e4e06d1c705687985a35dd50a442c2f9d4bebea327e88f486cd4a0/djlint-1.42.3-cp314-cp314-macosx_11_0_arm64.whl", hash = "sha256:d61baa6955bec28a4ce518420f3589e2a7cae8312e89315142ca0dea876ec40c", size = 720912, upload-time = "2026-07-23T22:28:07.516Z" },
-    { url = "https://files.pythonhosted.org/packages/f2/41/09bc26293d1fd2589409ab6753af73a0eb87c8108865870177c00753519f/djlint-1.42.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:e824dcc420d866b79204dab2ff7da9c8fe32ec30c2c64a540ae69a63d120a341", size = 773677, upload-time = "2026-07-23T22:28:08.62Z" },
-    { url = "https://files.pythonhosted.org/packages/9d/88/36bcb81e2aebd17d63aef02143755e9db795ec33b398c1dd0f3f233317c5/djlint-1.42.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:f1664f73a42224dae67036f781219192117137886ada096b76c22cd5349b2799", size = 804343, upload-time = "2026-07-23T22:28:09.753Z" },
-    { url = "https://files.pythonhosted.org/packages/ee/e3/3b64306eaa9f80a19171e6b93eec4483df0bc7a9ef775ce3befd6270114e/djlint-1.42.3-cp314-cp314-musllinux_1_2_aarch64.whl", hash = "sha256:046326ae0d1ea65ee814d3b2d9d3246402383cfb3f5341246a3d397a09807ee0", size = 783367, upload-time = "2026-07-23T22:28:11.036Z" },
-    { url = "https://files.pythonhosted.org/packages/56/6e/ec2ad282bc3bd6d596516361a068dd4c5f71288b9790701f6f420bc2d1a3/djlint-1.42.3-cp314-cp314-musllinux_1_2_x86_64.whl", hash = "sha256:5238c652c560240627eeeaa2a77bf16768f420e347c6a44820f31bb7016e49ff", size = 819118, upload-time = "2026-07-23T22:28:12.573Z" },
-    { url = "https://files.pythonhosted.org/packages/c2/90/a8d98da776b4f60932434294a15c02f1b700e666388bed25551f216ca113/djlint-1.42.3-cp314-cp314-win32.whl", hash = "sha256:75f0c391aeff3a297c8efa5fba1f865ac07c75ea872385f0b42c934c99042cfe", size = 599249, upload-time = "2026-07-23T22:28:13.929Z" },
-    { url = "https://files.pythonhosted.org/packages/ea/30/4dab3c5d5774697d5ec76af03725a8679d8f57e6dfa0168efad5efe46ec9/djlint-1.42.3-cp314-cp314-win_amd64.whl", hash = "sha256:68f2457fc3d7dc0cafa821641de04a2562cfcda4a5d717c79a95f3c2a57f61e3", size = 680932, upload-time = "2026-07-23T22:28:15.179Z" },
-    { url = "https://files.pythonhosted.org/packages/43/50/cd3b279bc831353b50bcb142e6a1d50c470d39e231853e9a7775abb9d820/djlint-1.42.3-cp314-cp314-win_arm64.whl", hash = "sha256:1deeb2b476b54ce92cd8f8fbcffe1a0a583c3bc0dc785f6cd72790de803f6ed1", size = 601806, upload-time = "2026-07-23T22:28:16.268Z" },
-    { url = "https://files.pythonhosted.org/packages/33/fb/38129ef12d6fb5b6a6d29a33353efb97e6428bbfa4f65b81b8b26b761cb0/djlint-1.42.3-cp314-cp314t-macosx_10_15_x86_64.whl", hash = "sha256:a640520af1f3abbf59185777a1c4a06399c4efcb8313817f553d23f6b9ec2a65", size = 829110, upload-time = "2026-07-23T22:28:17.513Z" },
-    { url = "https://files.pythonhosted.org/packages/af/c0/e8d04e72fd96d15cb8ccc8fec597c1ad8e134961d27db95417ab4b433a1b/djlint-1.42.3-cp314-cp314t-macosx_11_0_arm64.whl", hash = "sha256:424fbe794f78203b3c15b5f65f23101c2918b423f98b74c8ceac4771fa3c7d0f", size = 779677, upload-time = "2026-07-23T22:28:18.828Z" },
-    { url = "https://files.pythonhosted.org/packages/21/2c/bf3d7e913f28b5f8ca137c8eaeb7b9b59d62fcdaf9134e37110f981d775d/djlint-1.42.3-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:59aafc8f9dc7fd8ad35a3b175a6e529603eda08ce8c27f60c5dc1b69ddfc8669", size = 806137, upload-time = "2026-07-23T22:28:20.095Z" },
-    { url = "https://files.pythonhosted.org/packages/ae/c9/a956fcbb6d6e7a0442ee5bfd6e05467b3600ec3edd86aeb725e7ced9ab01/djlint-1.42.3-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:8b01649f44a37f983c0e126d4d2c9363cfd8c09a2f38a31ddd92feb931c87f40", size = 837069, upload-time = "2026-07-23T22:28:21.401Z" },
-    { url = "https://files.pythonhosted.org/packages/2a/aa/9fd611d8abf1cba95492240fdf278ddf9bd7096bad85a52e568e3b005983/djlint-1.42.3-cp314-cp314t-musllinux_1_2_aarch64.whl", hash = "sha256:670288faa44f8747cdcc581ae0067451e5b7bc7e69274444dc70381ca11af311", size = 814451, upload-time = "2026-07-23T22:28:22.602Z" },
-    { url = "https://files.pythonhosted.org/packages/d2/03/3b33c446a1246a8c9db646844d0ed1cafa80fe5da6087a81f317d09df7f9/djlint-1.42.3-cp314-cp314t-musllinux_1_2_x86_64.whl", hash = "sha256:b018e947430b670b7a45bee385b84419620510baf5e1472af392e2cc819216e4", size = 849998, upload-time = "2026-07-23T22:28:23.747Z" },
-    { url = "https://files.pythonhosted.org/packages/cc/4d/f8e87429cfe879b37232b82edcc6104a3987910b3e1ee9947312502e369e/djlint-1.42.3-cp314-cp314t-win32.whl", hash = "sha256:7c98b69db6ef212fed2236387d15abe4ba8b39f0b7f11d70e8cc6d9299f1da1a", size = 631406, upload-time = "2026-07-23T22:28:24.924Z" },
-    { url = "https://files.pythonhosted.org/packages/b5/69/fa4e252405706c0294d2608ee3598c8496e57e4e48c6e9cee89ddb4ca3ad/djlint-1.42.3-cp314-cp314t-win_amd64.whl", hash = "sha256:04639fdf15656d5375935c0372f407df94299f1e3689d9851d5e003c16171070", size = 708533, upload-time = "2026-07-23T22:28:26.229Z" },
-    { url = "https://files.pythonhosted.org/packages/7f/ce/0f24464c990e380983ff2c98c3f1c4f9d6944421e1e9dac9c54bec45cbb9/djlint-1.42.3-cp314-cp314t-win_arm64.whl", hash = "sha256:5ad3265370b33e9c83463bcfeab01693a0bb1b8b7dacaf2afd0e64a3106ffb22", size = 628941, upload-time = "2026-07-23T22:28:27.477Z" },
-    { url = "https://files.pythonhosted.org/packages/8d/bd/fd677efba1e0933c5a4c908254a42c1acc4f9fc424f866f10b856a615c55/djlint-1.42.3-py3-none-any.whl", hash = "sha256:9f21c0168a7f9426f383090a21ee8fd825801c6c25c9b10723a8abf66255ae8a", size = 89413, upload-time = "2026-07-23T22:28:28.592Z" },
+sdist = { url = "https://files.pythonhosted.org/packages/e9/91/78be6c3a7d60c5d1c3c473fdc74bad878e3580ef22349329d8d4b15e4df9/djlint-1.43.1.tar.gz", hash = "sha256:25e6e12f01eaddc8fc40d841e6a1611b6cfda041e885f1494cf5eae71efb987c", size = 79144, upload-time = "2026-07-28T12:12:41.529Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/0b/00/60f314835d5d246d1af56aaed20d4f16c84c2067edb06fb1af1ff3d5c1b8/djlint-1.43.1-cp312-cp312-macosx_10_13_x86_64.whl", hash = "sha256:abcc445fd68f534456bb88f8ac35fd7638aa7f490a81323a9627bcd6cdf1a0cc", size = 797104, upload-time = "2026-07-28T12:11:52.025Z" },
+    { url = "https://files.pythonhosted.org/packages/16/92/87c352041006e14ccaa90596b1625b6941451a1de23c57054dcf39c8db5d/djlint-1.43.1-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:14401d0611d26c20303fcdeae12cf6b09eb55870a1211dea3266c3e0e90af3cf", size = 744656, upload-time = "2026-07-28T12:11:53.431Z" },
+    { url = "https://files.pythonhosted.org/packages/e5/68/d326b9a6e708f13265e051bb5983ec8644d91f7b77c69f1b0dc4e58a2183/djlint-1.43.1-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:0137f0114386c3d0ffa5e505d75c1c74b22a9a6a1a2e2b4dd6945cd5efcf9bc4", size = 784196, upload-time = "2026-07-28T12:11:54.844Z" },
+    { url = "https://files.pythonhosted.org/packages/b1/b6/abcea8866aae81d82876fafeadbb48d422ce55c2c17610c50e4798ad5bf1/djlint-1.43.1-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:6fdc73dece61a61aa9e30e97927f18cf040f85adb48d5bfc5ff5bfede44342dc", size = 825057, upload-time = "2026-07-28T12:11:55.994Z" },
+    { url = "https://files.pythonhosted.org/packages/86/5f/ad4d29882a6752866f7ce38485b0214d08be86bf2c45c6a1f99f01b05b03/djlint-1.43.1-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:afe99dbe9553f47876ab9fc36c6419f40d35b12f3b1738e6f59375218fa292e1", size = 796247, upload-time = "2026-07-28T12:11:57.318Z" },
+    { url = "https://files.pythonhosted.org/packages/6e/f6/c41b559441a2e69dcf0b42d3b9575bb0a0f19a0a1500f4ee53cbcc1d8870/djlint-1.43.1-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:111db2fdd5cf315f6c31844f50a26cae0eba38e55fbeb6a6687e1c4a2866131c", size = 838273, upload-time = "2026-07-28T12:11:58.607Z" },
+    { url = "https://files.pythonhosted.org/packages/7a/2f/feceb7f480a5c991ee3918c62cc5ab9799100769f0ec1c2f64fa2c4d2290/djlint-1.43.1-cp312-cp312-win32.whl", hash = "sha256:b20a5f684da860da0c1d92b3f2abb2d834d715c5c1d85a2d529ec805e93c73b5", size = 603539, upload-time = "2026-07-28T12:11:59.909Z" },
+    { url = "https://files.pythonhosted.org/packages/82/13/aebfb866b7a458fe05475326e878579fd25900561a6397805edbdae7c95c/djlint-1.43.1-cp312-cp312-win_amd64.whl", hash = "sha256:440af8edfaa437b0f855caa0378c32028038a9c54d6c40cb5f4a8bb941d3b23b", size = 681396, upload-time = "2026-07-28T12:12:01.223Z" },
+    { url = "https://files.pythonhosted.org/packages/b3/4e/30e0572f8456691093dcbae50a57d71cca34cf9da005279a780dfab96439/djlint-1.43.1-cp312-cp312-win_arm64.whl", hash = "sha256:0fb2ee99176a645246844868a10c6de69c4bb644e530cbfd5e050e0a08da3649", size = 600239, upload-time = "2026-07-28T12:12:02.585Z" },
+    { url = "https://files.pythonhosted.org/packages/28/4f/8af18ad463da7ad79af61dda8de93615471e336e2d29b4f9ae9c8a164db3/djlint-1.43.1-cp313-cp313-macosx_10_13_x86_64.whl", hash = "sha256:e12abfd8c1dc33cdab18dbca21398a75fd99088ed1025716327fca38ed1ea2d8", size = 785761, upload-time = "2026-07-28T12:12:04.15Z" },
+    { url = "https://files.pythonhosted.org/packages/6a/89/a40480cdcb943cf1a017af972cdd54975ecb5e4b2a41b6a80432069bee42/djlint-1.43.1-cp313-cp313-macosx_11_0_arm64.whl", hash = "sha256:614eec9813eb405742daac9322d32647d2ac457e9ed89d6171ee2fa26b8cb14d", size = 736802, upload-time = "2026-07-28T12:12:05.392Z" },
+    { url = "https://files.pythonhosted.org/packages/f3/81/9b3bbe528d2880c14b96a4f9ed7ee0f229bb7129f8e1787c792911f78265/djlint-1.43.1-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:903feda8d4f500dbba3a94aaa0a1565d884d8a144ef0c21e194496cc7970975c", size = 780969, upload-time = "2026-07-28T12:12:06.806Z" },
+    { url = "https://files.pythonhosted.org/packages/e7/49/5d942d9090edadf174dde87e41f46abe4293ba1012c83a33704da4edcebd/djlint-1.43.1-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:6940d366f933c3db58ce58ab1f12668062934f0e93c6c0737d113b29479ab65c", size = 823191, upload-time = "2026-07-28T12:12:08.212Z" },
+    { url = "https://files.pythonhosted.org/packages/22/8d/68d8870e5514070467441e8c4fdce2be1b220ba54dfb0e582f48f0036bde/djlint-1.43.1-cp313-cp313-musllinux_1_2_aarch64.whl", hash = "sha256:95084e1c175e270c65e4a4d7c6b4f0ae75810bbf02509e59c10bbcce456d89ef", size = 793340, upload-time = "2026-07-28T12:12:09.68Z" },
+    { url = "https://files.pythonhosted.org/packages/73/55/6114e7a5b8c9ff361450d6854f603617389fd121355e9b23dd9ec18c37ef/djlint-1.43.1-cp313-cp313-musllinux_1_2_x86_64.whl", hash = "sha256:00e28ec5cb6ecca1e8d3d1ee5af6cfd2d4dc78f686e232516759cdbdccb39313", size = 835743, upload-time = "2026-07-28T12:12:10.998Z" },
+    { url = "https://files.pythonhosted.org/packages/40/d8/aaf36b55d708a24b3873471db16a4e096fca8e532c478aa3e121579e04a1/djlint-1.43.1-cp313-cp313-win32.whl", hash = "sha256:0fa0a5adf5427535c6c2fb243aef4ed31cdbda6bbca82cf1e3ac3b04afe44a92", size = 604170, upload-time = "2026-07-28T12:12:12.314Z" },
+    { url = "https://files.pythonhosted.org/packages/03/e7/ebc903c76fd72b0075ff9323a051d2281a79c08494895a8840cc5d8ec7ef/djlint-1.43.1-cp313-cp313-win_amd64.whl", hash = "sha256:c14a0a0a2d84217406f0fabd7c6012c2766019589b03b10174ac9f7fa5f4e80a", size = 682685, upload-time = "2026-07-28T12:12:13.644Z" },
+    { url = "https://files.pythonhosted.org/packages/81/29/020acd1096de20f9b57104aa49f231c8162e8fa42615a85760ed54d07399/djlint-1.43.1-cp313-cp313-win_arm64.whl", hash = "sha256:6fe7b8fc390ec1d7ae72416f91d9492b70c30bc4866d93d81c207c85135ba226", size = 600635, upload-time = "2026-07-28T12:12:14.97Z" },
+    { url = "https://files.pythonhosted.org/packages/e0/e5/d058a05767276aef83be6aa9c66eec41300eec4f92d679d26341c2dcf28a/djlint-1.43.1-cp314-cp314-macosx_10_15_x86_64.whl", hash = "sha256:5054f815045ee90f5ca876d6d828f1ae0e4421049c0ef1ed2b02b7f555c149cb", size = 781942, upload-time = "2026-07-28T12:12:16.609Z" },
+    { url = "https://files.pythonhosted.org/packages/6c/9f/b03383a2bc8e4d42b46d01bd9ebba561e953e751162147ff9a97bdd5f28d/djlint-1.43.1-cp314-cp314-macosx_11_0_arm64.whl", hash = "sha256:1aace39bc4c85cbb819219ce713b78bb11f0e64f17be474e2b0ff29939cc09ac", size = 736940, upload-time = "2026-07-28T12:12:17.817Z" },
+    { url = "https://files.pythonhosted.org/packages/10/c3/d85da23ed84e6dd460536eae7b6758ed3b93e0f1417710994da63a90a7cc/djlint-1.43.1-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:736177e5e670f8fc15c955e62a64bbfdfffbe5eda2735d15099948eeca15908c", size = 789966, upload-time = "2026-07-28T12:12:19.168Z" },
+    { url = "https://files.pythonhosted.org/packages/f4/47/1d39759c37ffcc7880fd50bd83e3c82d1e95cf389fc723d8e5c60475ff15/djlint-1.43.1-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:98a1b1af926551f7df7246c98bdf2a433f70ea24bc7668aa65f11cc118f32531", size = 822194, upload-time = "2026-07-28T12:12:20.561Z" },
+    { url = "https://files.pythonhosted.org/packages/b6/7c/783740134f1f475fbb13cb8be1c9254903b7907682c8f508b9f82b892f83/djlint-1.43.1-cp314-cp314-musllinux_1_2_aarch64.whl", hash = "sha256:58a3eca0d4b226cc17c54d4f2e6ad989fc5fe62590bcefbef9d84e7408b258b0", size = 799954, upload-time = "2026-07-28T12:12:21.795Z" },
+    { url = "https://files.pythonhosted.org/packages/e7/18/d34bd637814f2ad55af56babd6a1ede08ee50ed8fdf52c394a0ab6afbe49/djlint-1.43.1-cp314-cp314-musllinux_1_2_x86_64.whl", hash = "sha256:b7550d10b8e339fddcd636ee4aa4b857815a50cfa8941640974d45ef99ed3a09", size = 835237, upload-time = "2026-07-28T12:12:23.135Z" },
+    { url = "https://files.pythonhosted.org/packages/2f/81/617d25684cffca3076093ea2dcc0bf5097201a0ed140ade807eab89513ad/djlint-1.43.1-cp314-cp314-win32.whl", hash = "sha256:87724d68d14d0ceaa603a5c589e8880a924e8ffaa2e100c203f03fb907714912", size = 611210, upload-time = "2026-07-28T12:12:24.487Z" },
+    { url = "https://files.pythonhosted.org/packages/58/a9/a98e8da1d73e4d6fff2be97c991c40f06cdf3fc095c823464083f2841c8f/djlint-1.43.1-cp314-cp314-win_amd64.whl", hash = "sha256:a6449da1c8740872f8e2900ad8cde55c8af4642b4cb0ee45d09dfe4a01a661f1", size = 694678, upload-time = "2026-07-28T12:12:25.617Z" },
+    { url = "https://files.pythonhosted.org/packages/f6/10/8b6c911bee63c55a883acc9aff6b97e35d4832b124aa8d58402167d567b3/djlint-1.43.1-cp314-cp314-win_arm64.whl", hash = "sha256:dee34b1f287fbc61c5072aed186809cb8f4bb91e87f224864eb4cf2dab251ef7", size = 613601, upload-time = "2026-07-28T12:12:26.887Z" },
+    { url = "https://files.pythonhosted.org/packages/e8/e4/eb946ce7a1e4ac1082c874968cf2a4b4f469f7751cb50c868cddf89fc5c1/djlint-1.43.1-cp314-cp314t-macosx_10_15_x86_64.whl", hash = "sha256:b52eb2ef47675968da65e62a5eb02e5fd5587a62f3d3e34a4b1d22f715e7586e", size = 845911, upload-time = "2026-07-28T12:12:28.45Z" },
+    { url = "https://files.pythonhosted.org/packages/09/9e/114ac7a2f58dab2536d4fbee23fd1836587d3f725be5f137e5598449992e/djlint-1.43.1-cp314-cp314t-macosx_11_0_arm64.whl", hash = "sha256:22b1fe742e64ad160e78c10c6a6dd2f27db3bbdbda79f1dcb3aeaeef4cd8f9ac", size = 794607, upload-time = "2026-07-28T12:12:29.726Z" },
+    { url = "https://files.pythonhosted.org/packages/af/8b/2ea8e76302b7a1970ac3a9d9285c6842bf646c7bfd59c5bc9a0ba7b5a2fb/djlint-1.43.1-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:db54d6ea7f59f0e841140599dd401f2cb6166552d5f03e05335ab47a9876b6e5", size = 823071, upload-time = "2026-07-28T12:12:31.046Z" },
+    { url = "https://files.pythonhosted.org/packages/77/07/02bd6e4c0dd9034d7f8bcf8d12984c9e69c814a1e5411a4a35000739e8ac/djlint-1.43.1-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:3b0e49567814edd16ed22153ed0c8e85f3ba32121e7951ce39a16b642b322a0b", size = 856617, upload-time = "2026-07-28T12:12:32.268Z" },
+    { url = "https://files.pythonhosted.org/packages/35/f9/1dbc1bd3bffed8bd0ab1700768d3bbf60ccb54d6300f07aaaf405d8ab3a5/djlint-1.43.1-cp314-cp314t-musllinux_1_2_aarch64.whl", hash = "sha256:089eec2ad6ee64d102719aa88d5d63187b4ed4ef2d009665d6af7bf569efc53d", size = 832617, upload-time = "2026-07-28T12:12:33.544Z" },
+    { url = "https://files.pythonhosted.org/packages/f8/05/4294567ac0a522a17d5cd579360d31e35371dd86eab8e8d06653eecf3451/djlint-1.43.1-cp314-cp314t-musllinux_1_2_x86_64.whl", hash = "sha256:a8abea595854009b04980f8aa825ad1de46e18eba1942a5f1ba7823457b0b9a0", size = 868736, upload-time = "2026-07-28T12:12:35.057Z" },
+    { url = "https://files.pythonhosted.org/packages/50/74/6391d63f6f00113704c6111b0a2cda9e43e4db1c8d3b5500a6721e59651e/djlint-1.43.1-cp314-cp314t-win32.whl", hash = "sha256:ab979974bf603e454f601fc3be9629c63c79de827bcddf8062bab38494fd57ff", size = 645077, upload-time = "2026-07-28T12:12:36.278Z" },
+    { url = "https://files.pythonhosted.org/packages/48/49/b76ba6bd4b4dce830692cb3a7a35e8ff0088b8ea92b8235b6be7c40f91e4/djlint-1.43.1-cp314-cp314t-win_amd64.whl", hash = "sha256:e9261fc5013120be6083be2f19e4749a2e1bbc5c5de630022cb6a02a9c9364bf", size = 722866, upload-time = "2026-07-28T12:12:37.658Z" },
+    { url = "https://files.pythonhosted.org/packages/74/21/9d3841df8efabeab89671c42f80dcef86caec1e13b4bd7e5ef485d04597d/djlint-1.43.1-cp314-cp314t-win_arm64.whl", hash = "sha256:122c374cd3c8a42614aeb212a4860d82c06bf3fe883b7f5074e018052709057e", size = 641584, upload-time = "2026-07-28T12:12:39.056Z" },
+    { url = "https://files.pythonhosted.org/packages/15/5d/ba1038cb76184bb8b91bdbf127e3fec43b3ec2dea2e5d7c74090b9d8d7a8/djlint-1.43.1-py3-none-any.whl", hash = "sha256:7d5f44c6d22fba3b6c172233954c8323086576a37777927c4e7d99af2016ae2d", size = 92688, upload-time = "2026-07-28T12:12:40.443Z" },
 ]
 
 [[package]]
@@ -2175,15 +2175,15 @@ wheels = [
 
 [[package]]
 name = "mokkari"
-version = "4.3.0"
+version = "4.4.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "pydantic" },
     { name = "requests" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/56/f5/b61a9ea4a145cb9b4a52906332ed6817dd46e744024fdd5115c251ff0f68/mokkari-4.3.0.tar.gz", hash = "sha256:339e664f0b250c98eadecaeced698ad812ba702c90a55687e6df2a80ee6c9672", size = 78743, upload-time = "2026-07-25T12:16:27.065Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/e7/82/9bbbb7951a881ad7ac6f9442c73d240c232a7533696123b635e2cd93926d/mokkari-4.4.0.tar.gz", hash = "sha256:f3454f2eb54eb7029143877e9f1b4602c94e9e6ec63f75aec3785f393a84c6d5", size = 79632, upload-time = "2026-07-28T11:49:52.111Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/03/db/a20299019eef6a77c77520f83bb3ae6d53fd852c48f5ade97fee2a7cd77e/mokkari-4.3.0-py3-none-any.whl", hash = "sha256:7a3b75844a4668e5524305353ebc11df2c9bc5a63b497013603e1098de89d2f3", size = 59257, upload-time = "2026-07-25T12:16:25.996Z" },
+    { url = "https://files.pythonhosted.org/packages/16/3a/5edb310abe19998ff6b83491ca8582fd121b5cba8fc56410e237dcdbfbea/mokkari-4.4.0-py3-none-any.whl", hash = "sha256:da2cefedd46ebc473ae2a6109c8ef4173196d7af424dcb6dfe4de1601e21384c", size = 59712, upload-time = "2026-07-28T11:49:51.062Z" },
 ]
 
 [[package]]
@@ -2486,7 +2486,7 @@ wheels = [
 
 [[package]]
 name = "picopt"
-version = "6.6.2"
+version = "6.7.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "confuse" },
@@ -2499,6 +2499,7 @@ dependencies = [
     { name = "piexif" },
     { name = "pikepdf" },
     { name = "pillow" },
+    { name = "pillow-jxl-plugin" },
     { name = "py7zr" },
     { name = "python-dateutil" },
     { name = "rarfile" },
@@ -2508,9 +2509,9 @@ dependencies = [
     { name = "treestamps" },
     { name = "typing-extensions" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/50/b5/511aa39d20eef398d249715575832fbc99c9a30304ec3c95673b05ebc830/picopt-6.6.2.tar.gz", hash = "sha256:db6725fa7acc343f2ec68083bd8ef38d47e781fdd2d2236a5d17c35c3292b9cf", size = 10379632, upload-time = "2026-07-09T23:58:41.306Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/a3/86/e685ddecd9d10fa248a240bbb7dc9cfd2a47ee0ec2d253200e6c8185a747/picopt-6.7.0.tar.gz", hash = "sha256:7c0bd915d9ea47c6e5422d2156995dbccdd2dd122f6bc9a2671088b5772ddb8e", size = 10570287, upload-time = "2026-07-29T03:26:45.781Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/e1/10/a735e53ee81704e1acd297087fb505364d63bc87c1fc628f7be7616b681b/picopt-6.6.2-py3-none-any.whl", hash = "sha256:824344887d8d68d7e887c9b46daff7a94647b23e8835425e0fc43f5ba9cb2f69", size = 135347, upload-time = "2026-07-09T23:58:39.165Z" },
+    { url = "https://files.pythonhosted.org/packages/06/54/cd50faa120ee7b65684c60be70b9653a1a2b40893a395da51cff4f14688c/picopt-6.7.0-py3-none-any.whl", hash = "sha256:e163693db14ab4a69f26d0b139175ed4583d9c835a512a14cc6b5bd7ad6a1516", size = 145246, upload-time = "2026-07-29T03:26:43.723Z" },
 ]
 
 [[package]]
@@ -2634,6 +2635,54 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/3d/68/1f3066acedf37673694a7141381d8f811ae97f30d34413d236abe7d489f1/pillow-12.3.0-cp315-cp315t-win_arm64.whl", hash = "sha256:06ff022112bc9cbf83b60f8e028d94ad87b60621706487e65f673de61610ab59", size = 2567491, upload-time = "2026-07-01T11:56:23.506Z" },
 ]
 
+[[package]]
+name = "pillow-jxl-plugin"
+version = "1.3.8"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "packaging" },
+    { name = "pillow" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/02/75/810608d489c2d453e16a0866de5edea2bedd728e8830da22a1ec633f3b80/pillow_jxl_plugin-1.3.8.tar.gz", hash = "sha256:4430fd7757899742079c548a7d2537d6d63cf0f1d323180095bc0f6f03d9d4fa", size = 1602233, upload-time = "2026-07-17T03:23:50.387Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/78/bb/093aced52ebaafcd050eb21ab07ddcab7efffaa687e264f64d3f0423a4ba/pillow_jxl_plugin-1.3.8-cp312-cp312-macosx_10_12_x86_64.whl", hash = "sha256:7f6fd0fa12dd0d98bb55df6bbfff7ad913e4ea27306fbdf5e8543fe1fa40772c", size = 2361426, upload-time = "2026-07-17T03:22:56.906Z" },
+    { url = "https://files.pythonhosted.org/packages/8e/9f/f272fd205ab511475b135772e85bcaa71e5f3d081e6604b08e6e1d3982a6/pillow_jxl_plugin-1.3.8-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:01b632dbca07b59f7d6e106dad3ac8391e9ffdab1f94f2068a3e8edff1bbd180", size = 2660368, upload-time = "2026-07-17T03:22:48.663Z" },
+    { url = "https://files.pythonhosted.org/packages/74/1a/3445d2b4f6d6e4e26f10e9ccd75b60a14295b2d8eb280f0b1bd0bd7caac3/pillow_jxl_plugin-1.3.8-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:6459d131af2cbccab20742f6fe43a3022b021dcd1ee20b05f99b1fb54d0ec525", size = 2788244, upload-time = "2026-07-17T03:22:21.809Z" },
+    { url = "https://files.pythonhosted.org/packages/26/f2/3855e83fd1e4043bd7ab286d3f0ca434fbf935598fae57f1af2777620891/pillow_jxl_plugin-1.3.8-cp312-cp312-manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:a9b9a546ac71757f53f0ca2b14ea8f99c33b70e298a7873477f4548e2d83f817", size = 2500550, upload-time = "2026-07-17T03:22:30.993Z" },
+    { url = "https://files.pythonhosted.org/packages/f0/13/d9befae0e705474e550b16c90bb6d33c3f07837af63a0e8ce4c84fb546fb/pillow_jxl_plugin-1.3.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:dd2afd5153e2a7ef230a3e48a679a9e1cb3e59032f79c78bb2f78010a4e9bfc1", size = 2504336, upload-time = "2026-07-17T03:22:40.143Z" },
+    { url = "https://files.pythonhosted.org/packages/52/2c/3e671c8dd84f6ed4e47d588df1dc15aae61b0df0302f4bfff7b5c743045b/pillow_jxl_plugin-1.3.8-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:9b987fb202dd1c71d7f6e103363afd1128d347ffcf540d8416c257c8f1041ff3", size = 9727025, upload-time = "2026-07-17T03:23:06.554Z" },
+    { url = "https://files.pythonhosted.org/packages/27/89/a63b75d9c05deb0017ff51ddf3674cef19dbfe9c2fb74117d7e4a66b9a93/pillow_jxl_plugin-1.3.8-cp312-cp312-musllinux_1_2_armv7l.whl", hash = "sha256:c05cf62a992f48434a6b876fe010e5cae12bd54039854ce9ae0f05c13a58c7ad", size = 8386443, upload-time = "2026-07-17T03:23:19.195Z" },
+    { url = "https://files.pythonhosted.org/packages/c7/4f/b6ead8f5a50103e2c6b264a6d4778b8fcd08006c957b2ad0bccbbb306e97/pillow_jxl_plugin-1.3.8-cp312-cp312-musllinux_1_2_i686.whl", hash = "sha256:0392e5349b67522130ecff9d8dca4713e4c84662a310d2170291b229965e8fd1", size = 9032022, upload-time = "2026-07-17T03:23:30.993Z" },
+    { url = "https://files.pythonhosted.org/packages/ea/53/b9aa7c156427ad4d94d8c90bd87cb502e7d6326d2689c309aa574baf1ab7/pillow_jxl_plugin-1.3.8-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:88b06a4e5fc0d882b188824990b6571e201ad775d22a09487c8d5ab8aed9c3b7", size = 9233286, upload-time = "2026-07-17T03:23:42.022Z" },
+    { url = "https://files.pythonhosted.org/packages/32/e3/b25194909cfef9081f6a1f0e40e699e95ea96b211cae30bbf0f965d6b450/pillow_jxl_plugin-1.3.8-cp312-cp312-win32.whl", hash = "sha256:3345a45a09ba3149001c3e9a1b6991be8aab72c33097c0633e414a254cd283fa", size = 4552597, upload-time = "2026-07-17T03:24:08.129Z" },
+    { url = "https://files.pythonhosted.org/packages/c3/c9/01efd23cb4827f8a1731e1a7652023a06375e933f85e3169e0761d916d6f/pillow_jxl_plugin-1.3.8-cp312-cp312-win_amd64.whl", hash = "sha256:5b1c0d7a0c7e451014b288f0504545bff0f543f2ee1581af628e01e885b75f50", size = 4937252, upload-time = "2026-07-17T03:24:00.294Z" },
+    { url = "https://files.pythonhosted.org/packages/db/ef/b3aee5725df66399f529c41d97f71893e2b38f665c9278a99519112f03f3/pillow_jxl_plugin-1.3.8-cp312-cp312-win_arm64.whl", hash = "sha256:230a1d086ef5b66055e0dbc9837914becf1d1ca58d45d1404660de0a11fb63c3", size = 2330507, upload-time = "2026-07-17T03:23:53.22Z" },
+    { url = "https://files.pythonhosted.org/packages/b9/10/18bb2d6ed82184e2427f7501a17c1b413eb50bdcd4ebb42bbfb187bb4290/pillow_jxl_plugin-1.3.8-cp313-cp313-macosx_10_12_x86_64.whl", hash = "sha256:fe24e957016dcb0c2ec35f72ff3bb8ae78a9468b282f0d423485556de492975c", size = 2361184, upload-time = "2026-07-17T03:22:58.376Z" },
+    { url = "https://files.pythonhosted.org/packages/89/3e/5e1156e5c5b402d84ef924153e046ba937ac46e8b14decb3ab6e01a6f40e/pillow_jxl_plugin-1.3.8-cp313-cp313-macosx_11_0_arm64.whl", hash = "sha256:d648ef965002bee0c98dbf144b9b3c994146856fa4d3c54008b75dda10f69915", size = 2659163, upload-time = "2026-07-17T03:22:50.003Z" },
+    { url = "https://files.pythonhosted.org/packages/e9/fe/e610196142343f80c98502fd204f28e901a1101db6988be6ccc40c0e8ca0/pillow_jxl_plugin-1.3.8-cp313-cp313-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:34685b27d01e55aabb09d9436d4ddb1f446e8805da82ffd6448c07bbf563354c", size = 2787568, upload-time = "2026-07-17T03:22:23.469Z" },
+    { url = "https://files.pythonhosted.org/packages/6e/18/a862b140f82be55ce62c681b63c38bf61c962f0c27e32797ebebc0d47548/pillow_jxl_plugin-1.3.8-cp313-cp313-manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:288eb07090c91891ee0dc782786d937af8e53a117835606d7982c29e31072b90", size = 2499957, upload-time = "2026-07-17T03:22:32.414Z" },
+    { url = "https://files.pythonhosted.org/packages/59/29/d430cd5f82c08d2950e292d195081e9dd4e2a038a7e1722d79ba7c6e7ed9/pillow_jxl_plugin-1.3.8-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:9b39ac44cbe5a98b8a364ed98a16c8c1e197ee997e32731be4be727c55e629e4", size = 2504367, upload-time = "2026-07-17T03:22:41.501Z" },
+    { url = "https://files.pythonhosted.org/packages/f4/68/6806df96fdd625943c795beca932ac033c255a323b63b051903df96935b6/pillow_jxl_plugin-1.3.8-cp313-cp313-musllinux_1_2_aarch64.whl", hash = "sha256:0e1550f30768a0aa3f756da10b7807f6fac7fd2e5a18991eb8e00ec5908089d8", size = 9726010, upload-time = "2026-07-17T03:23:08.579Z" },
+    { url = "https://files.pythonhosted.org/packages/12/df/d12f42d6e31bb47e2002fcba2db9d92aad19dc3db9ae7d4b2b76152e268a/pillow_jxl_plugin-1.3.8-cp313-cp313-musllinux_1_2_armv7l.whl", hash = "sha256:b13f860c280d9d5770f49a1909926f15c6e26e50935da52ecb78700f7c377857", size = 8386305, upload-time = "2026-07-17T03:23:20.983Z" },
+    { url = "https://files.pythonhosted.org/packages/92/ee/4dc11ad5a90aa6d2eeae6eb0be2376cde0c365423036a078746b3476eca2/pillow_jxl_plugin-1.3.8-cp313-cp313-musllinux_1_2_i686.whl", hash = "sha256:273908ffb85f68a2374b0934700939c572f32b355c9d128d4e3b6924e72ef274", size = 9031514, upload-time = "2026-07-17T03:23:32.948Z" },
+    { url = "https://files.pythonhosted.org/packages/ae/76/b3125f13c9551862ad3ae7137d86959cde159b759083f3e7b5e720525fd0/pillow_jxl_plugin-1.3.8-cp313-cp313-musllinux_1_2_x86_64.whl", hash = "sha256:2be721646718af722f2ca5c1d6b06bf056a61a0db355cf944df53c3723119d4b", size = 9233009, upload-time = "2026-07-17T03:23:44.276Z" },
+    { url = "https://files.pythonhosted.org/packages/13/16/1aa669ae22a6c36810a925bbbfb1f4521df1d0402180052331b39ef8dee0/pillow_jxl_plugin-1.3.8-cp313-cp313-win32.whl", hash = "sha256:a2716f1367ed9647da36ce15882a12b4d424892cb5a03ab4b0783039d701c7c2", size = 4551381, upload-time = "2026-07-17T03:24:09.552Z" },
+    { url = "https://files.pythonhosted.org/packages/0e/e7/823f58aaea0d969f876f593a39c85c39fefe1b8ee9ca10a6ffbafe1a254a/pillow_jxl_plugin-1.3.8-cp313-cp313-win_amd64.whl", hash = "sha256:2388374b3493df9add4ef3d97cc70d6a5f51ed188dfe10d2b83ebc55e82e48d4", size = 4936720, upload-time = "2026-07-17T03:24:01.9Z" },
+    { url = "https://files.pythonhosted.org/packages/3e/12/e04b73832d1b8af3c5c4646127949a362f9ca3d30f42b05156ca5ffc61ea/pillow_jxl_plugin-1.3.8-cp313-cp313-win_arm64.whl", hash = "sha256:48d13d81d1c4933e5d42dd09366a9827583808be0a2fe842abd7358653c7d92f", size = 2330087, upload-time = "2026-07-17T03:23:54.604Z" },
+    { url = "https://files.pythonhosted.org/packages/66/30/c37d161345302ebda07f29d8230b15ba83b43c586f14fec98d088b18e982/pillow_jxl_plugin-1.3.8-cp314-cp314-macosx_10_12_x86_64.whl", hash = "sha256:30b72accb8505a46b05f709871da40f09975aea3a6b6f3cb1d646ff0a9aaba5e", size = 2362140, upload-time = "2026-07-17T03:22:59.694Z" },
+    { url = "https://files.pythonhosted.org/packages/a7/be/01613af0307c31e77aced40bdf9cf3d25ce1333b3e99bb85575bdcbfeca5/pillow_jxl_plugin-1.3.8-cp314-cp314-macosx_11_0_arm64.whl", hash = "sha256:b5bbc933487207e634802f21990c365b6e61473cea34f6621420f4eda8ffd1df", size = 2660381, upload-time = "2026-07-17T03:22:51.351Z" },
+    { url = "https://files.pythonhosted.org/packages/c5/8b/89636d315a31eb805681e60e569fe38d5eef3d09f13b1b6f576574387942/pillow_jxl_plugin-1.3.8-cp314-cp314-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:c1d06fd4eb038f431db27f1ab2e483fd6967bafb21a7757e1bd5f76b6fd93649", size = 2787875, upload-time = "2026-07-17T03:22:24.736Z" },
+    { url = "https://files.pythonhosted.org/packages/2b/e0/7b9bdc388d89773a5f9ae74ff0be3b06080ef1a60be57b5897d929012622/pillow_jxl_plugin-1.3.8-cp314-cp314-manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:f65361ce18db59e8949c60599bfa46b7de187e28917fc39b5d816ab4b81cb16d", size = 2500834, upload-time = "2026-07-17T03:22:33.928Z" },
+    { url = "https://files.pythonhosted.org/packages/24/25/0903ba5a4c8d948df9217e48182ff7d872098ddf86fe512402569f4041cc/pillow_jxl_plugin-1.3.8-cp314-cp314-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:70b881a40737c647a24270b73cd3f506dd16d634202e5214cb492f9270bd1b02", size = 2504805, upload-time = "2026-07-17T03:22:42.911Z" },
+    { url = "https://files.pythonhosted.org/packages/4b/ef/77a15b2f3227854d4ef2563250ea57b03538ed962f406f1248c9caf045aa/pillow_jxl_plugin-1.3.8-cp314-cp314-musllinux_1_2_aarch64.whl", hash = "sha256:d4049e48f09947a38047fc5d70817c6dffa90ffb5f14585c8c00e8b534d17c9b", size = 9725768, upload-time = "2026-07-17T03:23:10.845Z" },
+    { url = "https://files.pythonhosted.org/packages/c6/95/486fc1fabd1e6cb8b520dce9898b51f2e29e991ba54e632381fe7f287300/pillow_jxl_plugin-1.3.8-cp314-cp314-musllinux_1_2_armv7l.whl", hash = "sha256:6ce20ef0887efb6dace5245f714f94b4f070ef39a1ec45161b35879c48faf30a", size = 8386447, upload-time = "2026-07-17T03:23:22.87Z" },
+    { url = "https://files.pythonhosted.org/packages/05/28/7979927eb5dc79e40b31e4e07d074057722656743d324182f4a68056c2a9/pillow_jxl_plugin-1.3.8-cp314-cp314-musllinux_1_2_i686.whl", hash = "sha256:845e61add39272ca8545f4a0e6ead977ebb7e89fa017014bb8e17273a7a09c6c", size = 9032664, upload-time = "2026-07-17T03:23:34.78Z" },
+    { url = "https://files.pythonhosted.org/packages/92/b7/f606ed6fcb5fd9e177ce2b15a613a405ac22ceafc2c03bb3f58cd500ca04/pillow_jxl_plugin-1.3.8-cp314-cp314-musllinux_1_2_x86_64.whl", hash = "sha256:915b8fee6a97aaf5486d0d625f26faae2e9f0d9b5892f1076f5a29b8103125a4", size = 9233868, upload-time = "2026-07-17T03:23:46.277Z" },
+    { url = "https://files.pythonhosted.org/packages/a4/6d/d10a4426fc3b394d2222cb694774451e67ab052df2e15a488dfac22be561/pillow_jxl_plugin-1.3.8-cp314-cp314-win32.whl", hash = "sha256:d63d1c3566a8c9ebdd1ec6b75da816b9475d95c4f69656827d6d3957d2594ecb", size = 4554691, upload-time = "2026-07-17T03:24:11.39Z" },
+    { url = "https://files.pythonhosted.org/packages/47/77/0f0297c265f1743784b6d1df719e62e49dabd1d9ede8efb0a9ba93174293/pillow_jxl_plugin-1.3.8-cp314-cp314-win_amd64.whl", hash = "sha256:6b23c83aabf4615b92ae609293d8597ca1a8d14d01ab16c703bb3a3df359796b", size = 4939714, upload-time = "2026-07-17T03:24:03.288Z" },
+    { url = "https://files.pythonhosted.org/packages/ca/cf/2db398fb1a41c46fd382bad96ee90283589eaed0ec2c50cfe4afda3df72c/pillow_jxl_plugin-1.3.8-cp314-cp314-win_arm64.whl", hash = "sha256:60c36bec3d8d4ef23cf2aed0f792213f999312dd3d8cd5225ae1494c430e16f6", size = 2330667, upload-time = "2026-07-17T03:23:55.913Z" },
+]
+
 [[package]]
 name = "platformdirs"
 version = "4.11.0"
@@ -4058,27 +4107,27 @@ wheels = [
 
 [[package]]
 name = "ty"
-version = "0.0.63"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/ba/ce/cbeaa5c7576fec643609dfbf200d59493523b1cc0481d4e7a5effcbf0630/ty-0.0.63.tar.gz", hash = "sha256:c2f66439393b3acac69306c117d4ae44638ce5fffa4a20c21046e85bd473359f", size = 6280695, upload-time = "2026-07-23T11:41:39.845Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/1a/e4/d17a8e113ab15c692fe6fb9c422112d4bee7e829d80ced35826b45d98d98/ty-0.0.63-py3-none-linux_armv6l.whl", hash = "sha256:9a4ef7782e3af314fb63d006bec5ac3025bd70fee774b4dcfb5e44e8564f1994", size = 12056302, upload-time = "2026-07-23T11:41:03.5Z" },
-    { url = "https://files.pythonhosted.org/packages/be/0b/357234c815dc4bfcc88c3f860aa0983fe4228c8aa2a5bb16c35ee08a94af/ty-0.0.63-py3-none-macosx_10_12_x86_64.whl", hash = "sha256:01eab0ab70d51ad10298aa2d4b058b387a1fe93e5ee52d2a1ee23e9c69ba8354", size = 11737674, upload-time = "2026-07-23T11:41:05.862Z" },
-    { url = "https://files.pythonhosted.org/packages/1c/13/193d9aeeb6774690351cff9fafabd3ae9b54cc225d125e07fa004ce23bdc/ty-0.0.63-py3-none-macosx_11_0_arm64.whl", hash = "sha256:a671b61eaad16178389e05b9c108c9cb75ae8d84968fe55906484f55d6268338", size = 11264191, upload-time = "2026-07-23T11:41:07.963Z" },
-    { url = "https://files.pythonhosted.org/packages/4f/b7/c5843e16759a2b25fc8a7197473474038e585ac9fdaa6fa16aeb6384bf6a/ty-0.0.63-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:b255cc83d95c51bb9ee4931303fdbece8cb1d6d7c655eb77a3f2c8f349fb64d6", size = 11818890, upload-time = "2026-07-23T11:41:09.885Z" },
-    { url = "https://files.pythonhosted.org/packages/06/20/adf83ae1fc570d9bb449605e1eeeaa523ad2329ca838a636698b5c135d11/ty-0.0.63-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:0da1e8183aa4f893421a173904478021498f542ee41273660538da6649a9631c", size = 11853141, upload-time = "2026-07-23T11:41:12.151Z" },
-    { url = "https://files.pythonhosted.org/packages/ea/90/f8effd846e3ee13486ea08257c13094d58b9f188c5641bf609d6a7d5c09f/ty-0.0.63-py3-none-manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:128f38eb5a67199e3811426386f7ec96f41251ddf45e04ddc0bcbb29d4853245", size = 12545184, upload-time = "2026-07-23T11:41:14.4Z" },
-    { url = "https://files.pythonhosted.org/packages/b8/76/aac3a30d40431eb1d329acea016b248f5b6255e30ef3d28e19447e344be2/ty-0.0.63-py3-none-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:bedf34aff8b0557f2a7119b314a68a9c9e58c1d21554d0e2748f2c5fe6a1f638", size = 13062375, upload-time = "2026-07-23T11:41:16.441Z" },
-    { url = "https://files.pythonhosted.org/packages/62/3d/0158733932893e17f6008dadd74c8d7aed422fefc66e47fe77888014fe8c/ty-0.0.63-py3-none-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:7328d63c34587606dce02935a25404f54cd0161bfe413b8f7fc21d174aead612", size = 12619461, upload-time = "2026-07-23T11:41:18.538Z" },
-    { url = "https://files.pythonhosted.org/packages/f5/be/e280ad095b050778f16f493d49a073fa5f6d8f301d3e2e59be6a672ba05c/ty-0.0.63-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:504c4457f3a62afe836c1f26a2c9a12549299095f9cc4146778558df51a7515c", size = 12376402, upload-time = "2026-07-23T11:41:20.482Z" },
-    { url = "https://files.pythonhosted.org/packages/57/57/619788bf335cb86b090470b557ae1eed33613dc24e12142505d32b462e58/ty-0.0.63-py3-none-manylinux_2_31_riscv64.whl", hash = "sha256:7394ed39424b027c89d5f0c818871c791e33958b88f5bb13e14bd4a12a3ca631", size = 12671377, upload-time = "2026-07-23T11:41:22.489Z" },
-    { url = "https://files.pythonhosted.org/packages/07/a2/0aff2cdd3c98e2c4729337542b8da0ce1980790e1600e0c4a717a1f46293/ty-0.0.63-py3-none-musllinux_1_2_aarch64.whl", hash = "sha256:94c3f155230490f8fb505911655e940c630c25cc0c35a76690cb413254fb4437", size = 11768090, upload-time = "2026-07-23T11:41:24.558Z" },
-    { url = "https://files.pythonhosted.org/packages/43/4a/cdb5f1d26154144dfee08e1bd671daf827238170f7cee9dad43990bb2016/ty-0.0.63-py3-none-musllinux_1_2_armv7l.whl", hash = "sha256:c16e1d8b4f0ae99106d5f13a894034a202baf6cdab61e2bb1a239de82904f839", size = 11867747, upload-time = "2026-07-23T11:41:26.794Z" },
-    { url = "https://files.pythonhosted.org/packages/7e/26/ecc09ecb70bc9fbfdf42fa57ff29568f173e8200df575a0d72dc2b8486f9/ty-0.0.63-py3-none-musllinux_1_2_i686.whl", hash = "sha256:b66293dad89eaed4b9fbf3b661614dbeb85b59ba037178a3f9a0adedf264da5c", size = 12120000, upload-time = "2026-07-23T11:41:28.731Z" },
-    { url = "https://files.pythonhosted.org/packages/14/07/862822f9c2c397785b69b25cf79b4dfc3c0d55684b9adf11ac194450f8e1/ty-0.0.63-py3-none-musllinux_1_2_x86_64.whl", hash = "sha256:8b29cc832e2ec73502c97dd7325d6ae0e085b34a33529a0f785192317d9862fc", size = 12477862, upload-time = "2026-07-23T11:41:30.847Z" },
-    { url = "https://files.pythonhosted.org/packages/d0/c2/50b08b641578d6f48e8aa28a91d0de32c91aa24dd926ed199e8afd2d37ea/ty-0.0.63-py3-none-win32.whl", hash = "sha256:f0a8fbfd1f990c0c5d85cce018d438969ac79e49247e2192c9745394bb7d17ab", size = 11433155, upload-time = "2026-07-23T11:41:33.28Z" },
-    { url = "https://files.pythonhosted.org/packages/92/2d/d422a5568f0d1f317186be22241288dc6e08b71dc24aca223f22038ac2d2/ty-0.0.63-py3-none-win_amd64.whl", hash = "sha256:2aa2370bdd6f42e9f37518c812379bef70b9162f9e5aad511495229b0b71cb93", size = 12450036, upload-time = "2026-07-23T11:41:35.559Z" },
-    { url = "https://files.pythonhosted.org/packages/35/97/2c9748e28ead0650c7ad3e5f74f178832ceabd7cb5c272a882f29eb32ee4/ty-0.0.63-py3-none-win_arm64.whl", hash = "sha256:95ac1a62162c3c7ac204731e95ebf766d62a46a7bfa238a6acbe923fcb772cb1", size = 11826243, upload-time = "2026-07-23T11:41:37.749Z" },
+version = "0.0.64"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/8e/aa/14c9965d3b173105692473897cc89c34cd91241368b2044e43167e1c17ff/ty-0.0.64.tar.gz", hash = "sha256:d12ddbb05f15158bb518af619378b385486450def95fb06f8ab98037febe9f2c", size = 6350966, upload-time = "2026-07-27T18:32:45.403Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/ae/4c/c54937e4ff3fa7b34a99ea3387ec766bf0ad98dc8df8d792e89b388e658e/ty-0.0.64-py3-none-linux_armv6l.whl", hash = "sha256:3830a6675ab43635ced1c4c557f380ac4a49e9414e03975e4e4e8db644c64944", size = 12118357, upload-time = "2026-07-27T18:32:08.702Z" },
+    { url = "https://files.pythonhosted.org/packages/ce/aa/a839ee2bc78e943d079e6abe199a97b4eeffb7e5c9a57326d69de452186a/ty-0.0.64-py3-none-macosx_10_12_x86_64.whl", hash = "sha256:3ff07d7bc32a2135f58afe57393789a32ea2fed1a66216129a8e535e76043903", size = 11790882, upload-time = "2026-07-27T18:32:10.997Z" },
+    { url = "https://files.pythonhosted.org/packages/4c/de/19f14357888a7198438926303753cf749428e3d62e8980ff1e9a72a78402/ty-0.0.64-py3-none-macosx_11_0_arm64.whl", hash = "sha256:4f6d1c7f897cca05d12bacbf1435150d5ffa496099515aa6ed303c8b29e1d0bb", size = 11317394, upload-time = "2026-07-27T18:32:13.162Z" },
+    { url = "https://files.pythonhosted.org/packages/08/2f/f54462300535ab99b551eda733177be2eef5dbc2997d3fdb357c4ddd760a/ty-0.0.64-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:138d6c37ad4bf8583aa7a9b29d90954151d7856f9910a03eae3eb34b34c57215", size = 11863042, upload-time = "2026-07-27T18:32:15.307Z" },
+    { url = "https://files.pythonhosted.org/packages/5e/95/dbecf745520ebe8bd7b02fc55eee6441c9be312ebf6addce605eb52740dd/ty-0.0.64-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:1ed9719d1b7b66fb8efe073d860208a44c40af1f6cd5c2364aa9b323a1e579b4", size = 11910730, upload-time = "2026-07-27T18:32:17.467Z" },
+    { url = "https://files.pythonhosted.org/packages/3b/26/12cfd40028e51ceed7b3cb645281c61c02eb64ff9fb0c09231d65c30ff25/ty-0.0.64-py3-none-manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:d68b23e5169e2137b5f1de7169ab0cebecab6c8eda374c34c1f6394308f58242", size = 12631936, upload-time = "2026-07-27T18:32:19.533Z" },
+    { url = "https://files.pythonhosted.org/packages/a0/d0/65ffc2b0a686347193c6f98e9421a7fc2a96fc3cd0b1001cf7cf284baff9/ty-0.0.64-py3-none-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:f41cb07d89d32626fcaf3ed4d262778fcb28b2628b6ed1e172cd7b18820668d8", size = 13171049, upload-time = "2026-07-27T18:32:22.026Z" },
+    { url = "https://files.pythonhosted.org/packages/f6/a4/975a5961842dcd6fa60f0770a102c0bba7509da909ab652919bfcdcd4fc7/ty-0.0.64-py3-none-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:5f24e1504ab9e212f92356b82fe088fdeb3a39f9a2f4ff25e505d2e1d0db9056", size = 12826438, upload-time = "2026-07-27T18:32:24.178Z" },
+    { url = "https://files.pythonhosted.org/packages/af/ef/dfb9b7f9bcc032d3b540b0d1f55f532a336e2fb41b1bd539c05ae81a151a/ty-0.0.64-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:86db830cb914bb33bb8247b66ccea58de4496c2391bd42658aba744b439f3290", size = 12440880, upload-time = "2026-07-27T18:32:26.341Z" },
+    { url = "https://files.pythonhosted.org/packages/ee/d0/bedac20505e8a8f5501ad73d7d15d8e421a563fef59993909a23036929a4/ty-0.0.64-py3-none-manylinux_2_31_riscv64.whl", hash = "sha256:652ee3d6d03bea76cd2fe8949c78bb5970394ebd7c5fd270e9518c0dee1b931d", size = 12782439, upload-time = "2026-07-27T18:32:28.642Z" },
+    { url = "https://files.pythonhosted.org/packages/79/d5/795733f13ceff1378f08b3de0c49d0f518df220ed856b0dfac869f3b7c81/ty-0.0.64-py3-none-musllinux_1_2_aarch64.whl", hash = "sha256:4838768295774a86e95f9ec5633e739d016adbbb69dcbdc62f3549578a11f624", size = 11814821, upload-time = "2026-07-27T18:32:30.632Z" },
+    { url = "https://files.pythonhosted.org/packages/52/3e/9d99cd1e1831003434f508ed9f258a56543194afc3bbe051eba2545fa676/ty-0.0.64-py3-none-musllinux_1_2_armv7l.whl", hash = "sha256:5a3d700669868599edf39ce5125196682f15a8880cc8c669bc2a83b99984d99b", size = 11928678, upload-time = "2026-07-27T18:32:32.888Z" },
+    { url = "https://files.pythonhosted.org/packages/b8/3d/448f49a3503fb119a34348a5714bb92001f252fadbbb12d645f2e744b557/ty-0.0.64-py3-none-musllinux_1_2_i686.whl", hash = "sha256:b161f0a82a8e2f2432db3bf7702b4d3924fa9486ba0014f6710a160fc157df0d", size = 12202249, upload-time = "2026-07-27T18:32:34.905Z" },
+    { url = "https://files.pythonhosted.org/packages/dd/9b/75768e562cec990d189dc05807ae72890b20ffbd1e1f43597bb98db63c60/ty-0.0.64-py3-none-musllinux_1_2_x86_64.whl", hash = "sha256:39b9dd42908df47c2dc57dda87e656fab97097ffd2618474bbdea986af0d6a9d", size = 12548817, upload-time = "2026-07-27T18:32:36.995Z" },
+    { url = "https://files.pythonhosted.org/packages/34/89/44cc276ea6ca0245495014758ffeadde1798fb0b5840c9cf36d8d2ed3250/ty-0.0.64-py3-none-win32.whl", hash = "sha256:d0676ab0e0935795e5843baa28dd5e366dc343d7c0945a996df9eab8e0644885", size = 11545474, upload-time = "2026-07-27T18:32:39.389Z" },
+    { url = "https://files.pythonhosted.org/packages/01/7e/d1c8a871a38d17c8f168b9a6975f6247f7660f8334e517656a5e4b4a4858/ty-0.0.64-py3-none-win_amd64.whl", hash = "sha256:dcb9bd31f54097e362b776c26ab4564d4564cdd1355cb883481167a26c03cc3f", size = 12542987, upload-time = "2026-07-27T18:32:41.412Z" },
+    { url = "https://files.pythonhosted.org/packages/35/4d/6d18640d0204cacd69abbaca95ad6a34c6d7e9169e9051d0117b17b827ec/ty-0.0.64-py3-none-win_arm64.whl", hash = "sha256:82cc34c1ad9a8feb6059aef193bebcecc656e548f6fab3d518bcd8b57d198d39", size = 11899263, upload-time = "2026-07-27T18:32:43.366Z" },
 ]
 
 [[package]]