Merge pull request 'Release v26.04.18.1 — Offline-aware launch' (#28) from dev into main

Previously, if the backend was unreachable at launch, the splash screen
routed to the login screen. The server URL remained persisted in
SharedPreferences but visually appeared lost, frustrating any user who
isn't the service operator.

- New AuthStatus.offline distinguishes network failures (NetworkException)
  from HTTP 401 in AuthNotifier.verify().
- Persist has_ever_logged_in flag on first successful verify/login.
- Offline + ever-logged-in lands on the briefing with a sticky offline
  banner (retry button) instead of being punted to login.
- OfflineBanner widget is Tier-2-ready so we can surface "last sync X min
  ago" once real caching lands (Fable task #147).

lib/app.dart

@@ -35,6 +35,7 @@ import 'screens/splash/splash_screen.dart';
 import 'screens/tasks/task_edit_screen.dart';
 import 'screens/calendar/calendar_screen.dart';
 import 'providers/voice_provider.dart';
+import 'widgets/offline_banner.dart';
 import 'widgets/voice_mic_button.dart';
 
 // ChangeNotifier that fires when auth or server URL changes,
@@ -44,6 +45,7 @@ class _RouterNotifier extends ChangeNotifier {
   _RouterNotifier(Ref ref) {
     ref.listen(authProvider, (_, _) => notifyListeners());
     ref.listen(serverUrlProvider, (_, _) => notifyListeners());
+    ref.listen(hasEverLoggedInProvider, (_, _) => notifyListeners());
   }
 }
 
@@ -57,6 +59,7 @@ final routerProvider = Provider<GoRouter>((ref) {
       final location = state.matchedLocation;
       final serverUrl = ref.read(serverUrlProvider);
       final authStatus = ref.read(authProvider);
+      final hasEverLoggedIn = ref.read(hasEverLoggedInProvider);
 
       if (serverUrl == null || serverUrl.isEmpty) {
         if (location != Routes.setup) return Routes.setup;
@@ -70,6 +73,16 @@ final routerProvider = Provider<GoRouter>((ref) {
         return null;
       }
 
+      // Offline and never logged in on this device — can't prove identity,
+      // so gate behind login. Offline + ever-logged-in falls through to
+      // normal navigation with the offline banner surfacing in _Shell.
+      if (authStatus == AuthStatus.offline && !hasEverLoggedIn) {
+        if (location != Routes.login && location != Routes.setup) {
+          return Routes.login;
+        }
+        return null;
+      }
+
       return null;
     },
     routes: [
@@ -186,15 +199,19 @@ class _Shell extends ConsumerStatefulWidget {
 }
 
 class _ShellState extends ConsumerState<_Shell> with WidgetsBindingObserver {
-  static const _tabs = [
+  static const _baseTabs = [
     Routes.briefing,
     Routes.knowledge,
     Routes.conversations,
     Routes.projects,
-    Routes.news,
-    Routes.calendar,
   ];
 
+  List<String> _tabs(bool rssEnabled) => [
+        ..._baseTabs,
+        if (rssEnabled) Routes.news,
+        Routes.calendar,
+      ];
+
   // Minimum gap between app-resume refreshes to avoid hammering the server.
   static const _resumeCooldown = Duration(seconds: 30);
   DateTime? _lastResumeRefresh;
@@ -205,6 +222,8 @@ class _ShellState extends ConsumerState<_Shell> with WidgetsBindingObserver {
     super.initState();
     WidgetsBinding.instance.addObserver(this);
     WidgetsBinding.instance.addPostFrameCallback((_) {
+      // Clean up any leftover APKs from previous update cycles.
+      ref.read(updateProvider.notifier).cleanup();
       // Silent update check — only if we haven't already checked this session.
       final repoUrl = ref.read(forgejoRepoUrlProvider);
       if (repoUrl != null && repoUrl.isNotEmpty) {
@@ -249,19 +268,18 @@ class _ShellState extends ConsumerState<_Shell> with WidgetsBindingObserver {
     ref.invalidate(briefingProvider);
   }
 
-  /// Refresh only the provider backing the given shell tab index.
-  void _refreshTab(int index) {
-    switch (index) {
-      case 0:
-        ref.invalidate(briefingProvider);
-      case 1:
-        ref.read(knowledgeProvider.notifier).refresh();
-      case 2:
-        ref.read(conversationsProvider.notifier).refresh();
-      case 4:
-        ref.read(newsProvider.notifier).refresh();
-      case 5:
-        ref.read(calendarProvider.notifier).refresh();
+  /// Refresh only the provider backing the given shell tab route.
+  void _refreshTab(String route) {
+    if (route == Routes.briefing) {
+      ref.invalidate(briefingProvider);
+    } else if (route == Routes.knowledge) {
+      ref.read(knowledgeProvider.notifier).refresh();
+    } else if (route == Routes.conversations) {
+      ref.read(conversationsProvider.notifier).refresh();
+    } else if (route == Routes.news) {
+      ref.read(newsProvider.notifier).refresh();
+    } else if (route == Routes.calendar) {
+      ref.read(calendarProvider.notifier).refresh();
     }
   }
 
@@ -274,9 +292,9 @@ class _ShellState extends ConsumerState<_Shell> with WidgetsBindingObserver {
     }
   }
 
-  int _tabIndex(String location) {
-    for (var i = 0; i < _tabs.length; i++) {
-      if (location.startsWith(_tabs[i])) return i;
+  int _tabIndex(String location, List<String> tabs) {
+    for (var i = 0; i < tabs.length; i++) {
+      if (location.startsWith(tabs[i])) return i;
     }
     return 0;
   }
@@ -296,14 +314,15 @@ class _ShellState extends ConsumerState<_Shell> with WidgetsBindingObserver {
                 context.push(Routes.projects);
               },
             ),
-            ListTile(
-              leading: const Icon(Icons.newspaper_outlined),
-              title: const Text('News'),
-              onTap: () {
-                Navigator.pop(context);
-                context.push(Routes.news);
-              },
-            ),
+            if (ref.read(rssEnabledProvider))
+              ListTile(
+                leading: const Icon(Icons.newspaper_outlined),
+                title: const Text('News'),
+                onTap: () {
+                  Navigator.pop(context);
+                  context.push(Routes.news);
+                },
+              ),
             ListTile(
               leading: const Icon(Icons.calendar_month_outlined),
               title: const Text('Calendar'),
@@ -318,66 +337,15 @@ class _ShellState extends ConsumerState<_Shell> with WidgetsBindingObserver {
     );
   }
 
-  void _showUpdateDialog(UpdateState update) {
-    showDialog<void>(
-      context: context,
-      builder: (dialogContext) => Consumer(
-        builder: (context, ref, _) {
-          final state = ref.watch(updateProvider);
-          final isDownloading = state.status == UpdateStatus.downloading;
-          return AlertDialog(
-            title: const Text('Update available'),
-            content: Column(
-              mainAxisSize: MainAxisSize.min,
-              crossAxisAlignment: CrossAxisAlignment.start,
-              children: [
-                Text('Version ${state.latestVersion ?? '?'} is ready to install.'),
-                if (state.currentVersion != null)
-                  Text(
-                    'Installed: v${state.currentVersion}',
-                    style: Theme.of(context).textTheme.bodySmall,
-                  ),
-                if (isDownloading) ...[
-                  const SizedBox(height: 16),
-                  LinearProgressIndicator(
-                    value: state.downloadProgress > 0
-                        ? state.downloadProgress
-                        : null,
-                  ),
-                  const SizedBox(height: 4),
-                  Text(
-                    'Downloading… '
-                    '${(state.downloadProgress * 100).toStringAsFixed(0)}%',
-                    style: Theme.of(context).textTheme.bodySmall,
-                  ),
-                ],
-                if (state.status == UpdateStatus.error &&
-                    state.errorMessage != null) ...[
-                  const SizedBox(height: 12),
-                  Text(
-                    state.errorMessage!,
-                    style: Theme.of(context).textTheme.bodySmall?.copyWith(
-                          color: Theme.of(context).colorScheme.error,
-                        ),
-                  ),
-                ],
-              ],
-            ),
-            actions: [
-              TextButton(
-                onPressed: () => Navigator.pop(dialogContext),
-                child: const Text('Later'),
-              ),
-              if (!isDownloading && state.downloadUrl != null)
-                FilledButton(
-                  onPressed: () => ref
-                      .read(updateProvider.notifier)
-                      .downloadAndInstall(),
-                  child: const Text('Download & Install'),
-                ),
-            ],
-          );
-        },
+  void _showUpdateSnackbar(UpdateState update) {
+    ScaffoldMessenger.of(context).showSnackBar(
+      SnackBar(
+        content: Text('v${update.latestVersion} ready to install'),
+        duration: const Duration(seconds: 6),
+        action: SnackBarAction(
+          label: 'Install',
+          onPressed: () => ref.read(updateProvider.notifier).install(),
+        ),
       ),
     );
   }
@@ -386,18 +354,21 @@ class _ShellState extends ConsumerState<_Shell> with WidgetsBindingObserver {
   Widget build(BuildContext context) {
     // Show update dialog once when a new version is detected.
     ref.listen(updateProvider, (prev, next) {
-      if (next.status == UpdateStatus.available &&
-          prev?.status != UpdateStatus.available) {
+      if (next.status == UpdateStatus.readyToInstall &&
+          prev?.status != UpdateStatus.readyToInstall) {
         WidgetsBinding.instance
-            .addPostFrameCallback((_) => _showUpdateDialog(next));
+            .addPostFrameCallback((_) => _showUpdateSnackbar(next));
       }
     });
+    final rssEnabled = ref.watch(rssEnabledProvider);
+    final tabs = _tabs(rssEnabled);
     final location = GoRouterState.of(context).matchedLocation;
-    final index = _tabIndex(location);
+    final index = _tabIndex(location, tabs);
 
     // Refresh the incoming tab's data when switching between shell tabs.
     if (_prevTabIndex != null && _prevTabIndex != index) {
-      WidgetsBinding.instance.addPostFrameCallback((_) => _refreshTab(index));
+      final route = index < tabs.length ? tabs[index] : tabs[0];
+      WidgetsBinding.instance.addPostFrameCallback((_) => _refreshTab(route));
     }
     _prevTabIndex = index;
 
@@ -409,41 +380,43 @@ class _ShellState extends ConsumerState<_Shell> with WidgetsBindingObserver {
         body: SafeArea(
           child: Column(
             children: [
+              const OfflineBanner(),
               const _QuickCaptureBar(),
               Expanded(
                 child: Row(
                   children: [
                     NavigationRail(
                       selectedIndex: index,
-                      onDestinationSelected: (i) => context.go(_tabs[i]),
+                      onDestinationSelected: (i) => context.go(tabs[i]),
                       labelType: NavigationRailLabelType.all,
-                      destinations: const [
-                        NavigationRailDestination(
+                      destinations: [
+                        const NavigationRailDestination(
                           icon: Icon(Icons.wb_sunny_outlined),
                           selectedIcon: Icon(Icons.wb_sunny),
                           label: Text('Briefing'),
                         ),
-                        NavigationRailDestination(
+                        const NavigationRailDestination(
                           icon: Icon(Icons.menu_book_outlined),
                           selectedIcon: Icon(Icons.menu_book),
                           label: Text('Knowledge'),
                         ),
-                        NavigationRailDestination(
+                        const NavigationRailDestination(
                           icon: Icon(Icons.chat_bubble_outline),
                           selectedIcon: Icon(Icons.chat_bubble),
                           label: Text('Chat'),
                         ),
-                        NavigationRailDestination(
+                        const NavigationRailDestination(
                           icon: Icon(Icons.folder_outlined),
                           selectedIcon: Icon(Icons.folder),
                           label: Text('Projects'),
                         ),
-                        NavigationRailDestination(
-                          icon: Icon(Icons.newspaper_outlined),
-                          selectedIcon: Icon(Icons.newspaper),
-                          label: Text('News'),
-                        ),
-                        NavigationRailDestination(
+                        if (ref.watch(rssEnabledProvider))
+                          const NavigationRailDestination(
+                            icon: Icon(Icons.newspaper_outlined),
+                            selectedIcon: Icon(Icons.newspaper),
+                            label: Text('News'),
+                          ),
+                        const NavigationRailDestination(
                           icon: Icon(Icons.calendar_month_outlined),
                           selectedIcon: Icon(Icons.calendar_month),
                           label: Text('Calendar'),
@@ -464,6 +437,7 @@ class _ShellState extends ConsumerState<_Shell> with WidgetsBindingObserver {
     return Scaffold(
       body: Column(
         children: [
+          const OfflineBanner(),
           const _QuickCaptureBar(),
           Expanded(
             child: MediaQuery.removePadding(
@@ -480,7 +454,7 @@ class _ShellState extends ConsumerState<_Shell> with WidgetsBindingObserver {
           if (i == 3) {
             _showMoreSheet(context);
           } else {
-            context.go(_tabs[i]);
+            context.go(tabs[i]);
           }
         },
         destinations: const [
@@ -529,7 +503,6 @@ class _QuickCaptureBarState extends ConsumerState<_QuickCaptureBar> {
   @override
   void dispose() {
     _controller.dispose();
-    ref.read(voiceProvider.notifier).exitVoiceMode();
     super.dispose();
   }
 

lib/data/api/settings_api.dart

@@ -10,4 +10,13 @@ class SettingsApi {
       data: {'user_timezone': ianaTimezone},
     );
   }
+
+  Future<Map<String, dynamic>> getAll() async {
+    final response = await _dio.get<Map<String, dynamic>>('/api/settings');
+    return response.data ?? {};
+  }
+
+  Future<void> update(Map<String, String> updates) async {
+    await _dio.put<void>('/api/settings', data: updates);
+  }
 }

lib/data/api/voice_api.dart

@@ -40,7 +40,7 @@ class VoiceApi {
     }
   }
 
-  /// POST WebM/Opus audio bytes and return the transcript string.
+  /// POST audio bytes (WAV) and return the transcript string.
   /// [context] is optional recent conversation text passed as initial_prompt
   /// to Whisper, reducing mishearings of domain-specific words.
   /// Returns empty string on empty or error response.
@@ -49,8 +49,8 @@ class VoiceApi {
       final fields = <String, dynamic>{
         'audio': MultipartFile.fromBytes(
           audioBytes,
-          filename: 'audio.m4a',
-          contentType: DioMediaType('audio', 'mp4'),
+          filename: 'audio.wav',
+          contentType: DioMediaType('audio', 'wav'),
         ),
         if (context != null && context.isNotEmpty) 'context': context,
       };

lib/providers/auth_provider.dart

@@ -1,8 +1,10 @@
 import 'package:flutter_riverpod/flutter_riverpod.dart';
 
+import '../core/exceptions.dart';
 import 'api_client_provider.dart';
+import 'settings_provider.dart';
 
-enum AuthStatus { unknown, authenticated, unauthenticated }
+enum AuthStatus { unknown, authenticated, unauthenticated, offline }
 
 final authProvider = NotifierProvider<AuthNotifier, AuthStatus>(AuthNotifier.new);
 
@@ -14,7 +16,12 @@ class AuthNotifier extends Notifier<AuthStatus> {
     try {
       final repo = ref.read(authRepositoryProvider);
       final ok = await repo.verify();
+      if (ok) {
+        await ref.read(hasEverLoggedInProvider.notifier).markLoggedIn();
+      }
       state = ok ? AuthStatus.authenticated : AuthStatus.unauthenticated;
+    } on NetworkException {
+      state = AuthStatus.offline;
     } catch (_) {
       state = AuthStatus.unauthenticated;
     }
@@ -23,6 +30,7 @@ class AuthNotifier extends Notifier<AuthStatus> {
   Future<void> login(String username, String password) async {
     final repo = ref.read(authRepositoryProvider);
     await repo.login(username, password);
+    await ref.read(hasEverLoggedInProvider.notifier).markLoggedIn();
     state = AuthStatus.authenticated;
   }
 

lib/providers/settings_provider.dart

@@ -2,9 +2,12 @@ import 'package:flutter/material.dart';
 import 'package:flutter_riverpod/flutter_riverpod.dart';
 import 'package:shared_preferences/shared_preferences.dart';
 
+import 'api_client_provider.dart';
+
 const _kServerUrl = 'server_url';
 const _kThemeMode = 'theme_mode';
 const _kForgejoRepoUrl = 'forgejo_repo_url';
+const _kHasEverLoggedIn = 'has_ever_logged_in';
 
 final sharedPreferencesProvider = Provider<SharedPreferences>((ref) {
   throw UnimplementedError('Override in ProviderScope');
@@ -82,3 +85,57 @@ class ServerUrlNotifier extends Notifier<String?> {
     state = null;
   }
 }
+
+/// Tracks whether this install has ever completed a successful login.
+/// Used so offline users who've logged in before land on the briefing (with a
+/// banner) instead of being dumped onto the login screen as if freshly installed.
+final hasEverLoggedInProvider =
+    NotifierProvider<HasEverLoggedInNotifier, bool>(HasEverLoggedInNotifier.new);
+
+class HasEverLoggedInNotifier extends Notifier<bool> {
+  @override
+  bool build() {
+    final prefs = ref.watch(sharedPreferencesProvider);
+    return prefs.getBool(_kHasEverLoggedIn) ?? false;
+  }
+
+  Future<void> markLoggedIn() async {
+    if (state) return;
+    await ref.read(sharedPreferencesProvider).setBool(_kHasEverLoggedIn, true);
+    state = true;
+  }
+
+  Future<void> clear() async {
+    await ref.read(sharedPreferencesProvider).remove(_kHasEverLoggedIn);
+    state = false;
+  }
+}
+
+final serverSettingsProvider =
+    AsyncNotifierProvider<ServerSettingsNotifier, Map<String, dynamic>>(
+        ServerSettingsNotifier.new);
+
+class ServerSettingsNotifier extends AsyncNotifier<Map<String, dynamic>> {
+  @override
+  Future<Map<String, dynamic>> build() async {
+    try {
+      return await ref.read(settingsApiProvider).getAll();
+    } catch (_) {
+      return {};
+    }
+  }
+
+  bool get rssEnabled {
+    final data = state.value ?? {};
+    return data['rss_enabled']?.toString().toLowerCase() == 'true';
+  }
+
+  Future<void> refresh() async {
+    state = AsyncData(await ref.read(settingsApiProvider).getAll());
+  }
+}
+
+final rssEnabledProvider = Provider<bool>((ref) {
+  final settings = ref.watch(serverSettingsProvider).value ?? {};
+  return settings['rss_enabled']?.toString().toLowerCase() == 'true';
+});

lib/providers/update_provider.dart

@@ -1,3 +1,5 @@
+import 'dart:io';
+
 import 'package:dio/dio.dart';
 import 'package:flutter_riverpod/flutter_riverpod.dart';
 import 'package:open_file/open_file.dart';
@@ -5,7 +7,14 @@ import 'package:package_info_plus/package_info_plus.dart';
 import 'package:path_provider/path_provider.dart';
 import 'package:permission_handler/permission_handler.dart';
 
-enum UpdateStatus { idle, checking, available, downloading, upToDate, error }
+enum UpdateStatus {
+  idle,
+  checking,
+  downloading,
+  readyToInstall,
+  upToDate,
+  error,
+}
 
 class UpdateState {
   final UpdateStatus status;
@@ -14,6 +23,7 @@ class UpdateState {
   final String? downloadUrl;
   final double downloadProgress;
   final String? errorMessage;
+  final String? apkPath;
 
   const UpdateState({
     this.status = UpdateStatus.idle,
@@ -22,6 +32,7 @@ class UpdateState {
     this.downloadUrl,
     this.downloadProgress = 0.0,
     this.errorMessage,
+    this.apkPath,
   });
 
   UpdateState copyWith({
@@ -31,6 +42,7 @@ class UpdateState {
     String? downloadUrl,
     double? downloadProgress,
     String? errorMessage,
+    String? apkPath,
   }) =>
       UpdateState(
         status: status ?? this.status,
@@ -39,6 +51,7 @@ class UpdateState {
         downloadUrl: downloadUrl ?? this.downloadUrl,
         downloadProgress: downloadProgress ?? this.downloadProgress,
         errorMessage: errorMessage ?? this.errorMessage,
+        apkPath: apkPath ?? this.apkPath,
       );
 }
 
@@ -46,20 +59,15 @@ class UpdateNotifier extends Notifier<UpdateState> {
   @override
   UpdateState build() => const UpdateState();
 
-  /// [repoUrl] is the Forgejo repo page URL, e.g.
-  /// "https://git.example.com/user/fabled_app"
   Future<void> check(String repoUrl) async {
     state = state.copyWith(status: UpdateStatus.checking);
     try {
       final packageInfo = await PackageInfo.fromPlatform();
-      // Combine versionName + buildNumber to match the YY.MM.DD.N tag format.
       final currentVersion =
           '${packageInfo.version}.${packageInfo.buildNumber}';
 
-      // Parse repo URL → Forgejo API endpoint
       final uri = Uri.parse(repoUrl);
-      final parts =
-          uri.pathSegments.where((s) => s.isNotEmpty).toList();
+      final parts = uri.pathSegments.where((s) => s.isNotEmpty).toList();
       if (parts.length < 2) throw 'Invalid repository URL (need /owner/repo)';
       final apiUrl =
           '${uri.scheme}://${uri.authority}/api/v1/repos/${parts[0]}/${parts[1]}/releases/latest';
@@ -70,20 +78,20 @@ class UpdateNotifier extends Notifier<UpdateState> {
           tagName.startsWith('v') ? tagName.substring(1) : tagName;
 
       if (_isNewer(latestVersion, currentVersion)) {
-        final assets =
-            (response.data['assets'] as List<dynamic>? ?? [])
-                .cast<Map<String, dynamic>>();
+        final assets = (response.data['assets'] as List<dynamic>? ?? [])
+            .cast<Map<String, dynamic>>();
         final apk = assets.firstWhere(
           (a) => (a['name'] as String? ?? '').endsWith('.apk'),
           orElse: () => {},
         );
         if (apk.isNotEmpty) {
+          final downloadUrl = apk['browser_download_url'] as String?;
           state = state.copyWith(
-            status: UpdateStatus.available,
             currentVersion: currentVersion,
             latestVersion: latestVersion,
-            downloadUrl: apk['browser_download_url'] as String?,
+            downloadUrl: downloadUrl,
           );
+          await _downloadInBackground();
           return;
         }
       }
@@ -101,11 +109,52 @@ class UpdateNotifier extends Notifier<UpdateState> {
     }
   }
 
-  Future<void> downloadAndInstall() async {
+  Future<void> _downloadInBackground() async {
     if (state.downloadUrl == null) return;
+    state = state.copyWith(status: UpdateStatus.downloading, downloadProgress: 0);
+
+    try {
+      final dir = await _apkDir();
+      await _cleanupApks(dir);
+
+      final path = '${dir.path}/fabled_${state.latestVersion}.apk';
+
+      await Dio().download(
+        state.downloadUrl!,
+        path,
+        onReceiveProgress: (received, total) {
+          if (total > 0) {
+            state = state.copyWith(downloadProgress: received / total);
+          }
+        },
+      );
+
+      final file = File(path);
+      if (!await file.exists() || await file.length() == 0) {
+        state = state.copyWith(
+          status: UpdateStatus.error,
+          errorMessage: 'Download failed — file is empty',
+        );
+        return;
+      }
+
+      state = state.copyWith(
+        status: UpdateStatus.readyToInstall,
+        apkPath: path,
+        downloadProgress: 1.0,
+      );
+    } catch (e) {
+      state = state.copyWith(
+        status: UpdateStatus.error,
+        errorMessage: e.toString(),
+      );
+    }
+  }
+
+  Future<void> install() async {
+    final path = state.apkPath;
+    if (path == null) return;
 
-    // Android 8+ requires explicit per-app "Install unknown apps" approval
-    // beyond the manifest declaration. Check and redirect to Settings if needed.
     final installPermission = await Permission.requestInstallPackages.status;
     if (!installPermission.isGranted) {
       final result = await Permission.requestInstallPackages.request();
@@ -119,30 +168,13 @@ class UpdateNotifier extends Notifier<UpdateState> {
       }
     }
 
-    state = state.copyWith(status: UpdateStatus.downloading, downloadProgress: 0);
-
     try {
-      final dir = await getExternalStorageDirectory() ??
-          await getTemporaryDirectory();
-      final path = '${dir.path}/fabled_update.apk';
-
-      await Dio().download(
-        state.downloadUrl!,
-        path,
-        onReceiveProgress: (received, total) {
-          if (total > 0) {
-            state = state.copyWith(downloadProgress: received / total);
-          }
-        },
-      );
-
       final result = await OpenFile.open(
         path,
         type: 'application/vnd.android.package-archive',
       );
 
       if (result.type == ResultType.done) {
-        // Installer launched — reset to idle so the dialog closes naturally.
         state = const UpdateState();
       } else {
         state = state.copyWith(
@@ -158,8 +190,30 @@ class UpdateNotifier extends Notifier<UpdateState> {
     }
   }
 
+  /// Remove any previously cached APKs.
+  Future<void> cleanup() async {
+    final dir = await _apkDir();
+    await _cleanupApks(dir);
+  }
+
   void dismiss() => state = const UpdateState();
 
+  Future<Directory> _apkDir() async {
+    return await getExternalStorageDirectory() ??
+        await getTemporaryDirectory();
+  }
+
+  Future<void> _cleanupApks(Directory dir) async {
+    try {
+      final entries = dir.listSync();
+      for (final entry in entries) {
+        if (entry is File && entry.path.endsWith('.apk')) {
+          await entry.delete();
+        }
+      }
+    } catch (_) {}
+  }
+
   bool _isNewer(String latest, String current) {
     try {
       final l = latest.split('.').map(int.parse).toList();

lib/providers/voice_provider.dart

@@ -1,13 +1,14 @@
 import 'dart:async';
 import 'dart:collection';
 import 'dart:io';
+import 'dart:math';
 import 'dart:typed_data';
 
 import 'package:flutter_riverpod/flutter_riverpod.dart';
 import 'package:just_audio/just_audio.dart';
 import 'package:path_provider/path_provider.dart';
 import 'package:permission_handler/permission_handler.dart';
-import 'package:record/record.dart';
+import 'package:vad/vad.dart';
 
 import 'api_client_provider.dart';
 
@@ -51,6 +52,53 @@ String stripMarkdownForTts(String text) {
       .trim();
 }
 
+/// Encode float PCM samples (-1..1) as a 16-bit mono WAV at 16 kHz.
+Uint8List encodeWav(List<double> samples, {int sampleRate = 16000}) {
+  final numSamples = samples.length;
+  final dataSize = numSamples * 2;
+  final fileSize = 44 + dataSize;
+  final buf = ByteData(fileSize);
+
+  // RIFF header
+  buf.setUint8(0, 0x52); // R
+  buf.setUint8(1, 0x49); // I
+  buf.setUint8(2, 0x46); // F
+  buf.setUint8(3, 0x46); // F
+  buf.setUint32(4, fileSize - 8, Endian.little);
+  buf.setUint8(8, 0x57); // W
+  buf.setUint8(9, 0x41); // A
+  buf.setUint8(10, 0x56); // V
+  buf.setUint8(11, 0x45); // E
+
+  // fmt chunk
+  buf.setUint8(12, 0x66); // f
+  buf.setUint8(13, 0x6D); // m
+  buf.setUint8(14, 0x74); // t
+  buf.setUint8(15, 0x20); // (space)
+  buf.setUint32(16, 16, Endian.little); // chunk size
+  buf.setUint16(20, 1, Endian.little); // PCM format
+  buf.setUint16(22, 1, Endian.little); // mono
+  buf.setUint32(24, sampleRate, Endian.little);
+  buf.setUint32(28, sampleRate * 2, Endian.little); // byte rate
+  buf.setUint16(32, 2, Endian.little); // block align
+  buf.setUint16(34, 16, Endian.little); // bits per sample
+
+  // data chunk
+  buf.setUint8(36, 0x64); // d
+  buf.setUint8(37, 0x61); // a
+  buf.setUint8(38, 0x74); // t
+  buf.setUint8(39, 0x61); // a
+  buf.setUint32(40, dataSize, Endian.little);
+
+  for (var i = 0; i < numSamples; i++) {
+    final clamped = samples[i].clamp(-1.0, 1.0);
+    final int16 = (clamped * 32767).round().clamp(-32768, 32767);
+    buf.setInt16(44 + i * 2, int16, Endian.little);
+  }
+
+  return buf.buffer.asUint8List();
+}
+
 // ── State ─────────────────────────────────────────────────────────────────────
 
 enum VoiceMode { idle, recording, transcribing, playing }
@@ -59,9 +107,7 @@ class VoiceState {
   final VoiceMode mode;
   final bool voiceModeActive;
   final bool available;
-  /// Normalized mic amplitude 0.0–1.0 while recording. Drives the live
-  /// pulse on VoiceMicButton so the user has obvious feedback that audio
-  /// is actually being picked up.
+  /// Normalized mic amplitude 0.0–1.0 while recording.
   final double amplitude;
 
   const VoiceState({
@@ -88,35 +134,25 @@ class VoiceState {
 // ── Provider ──────────────────────────────────────────────────────────────────
 
 final voiceProvider =
-    NotifierProvider<VoiceNotifier, VoiceState>(VoiceNotifier.new);
+    NotifierProvider.autoDispose<VoiceNotifier, VoiceState>(VoiceNotifier.new);
 
 // ── Notifier ──────────────────────────────────────────────────────────────────
 
 class VoiceNotifier extends Notifier<VoiceState> {
-  // Audio I/O
-  AudioRecorder? _recorder;
+  // Audio playback
   AudioPlayer? _player;
-  StreamSubscription<Amplitude>? _amplitudeSubscription;
 
-  // Recording / silence detection
-  //
-  // Silence threshold is dynamic: we track the session peak dBFS and treat
-  // "silent" as "current level is at least _dropFromPeakDb below peak."
-  // This auto-calibrates to whatever mic + room the user is on rather than
-  // assuming a fixed ambient level. Until the peak climbs above
-  // _dynamicArmDb we fall back to a conservative static threshold so a
-  // quiet room doesn't spin forever. A grace period at the start of the
-  // recording gives the user time to begin speaking before silence checks
-  // arm.
-  int _recordingStartMs = 0;
-  int _silenceMs = 0;
-  double _peakDb = -100.0;
-  static const _fallbackThresholdDb = -35.0;
-  static const _dropFromPeakDb = 15.0;
-  static const _dynamicArmDb = -20.0;
-  static const _graceMs = 1500;
-  static const _silenceDurationMs = 2000;
-  static const _minRecordingMs = 300;
+  // VAD — sole owner of the microphone
+  VadHandler? _vadHandler;
+  StreamSubscription<void>? _vadSpeechStartSub;
+  StreamSubscription<List<double>>? _vadSpeechEndSub;
+  StreamSubscription<({double isSpeech, double notSpeech, List<double> frame})>?
+      _vadFrameSub;
+  StreamSubscription<String>? _vadErrorSub;
+  bool _speechDetected = false;
+  int _speechStartMs = 0;
+  static const _vadGraceMs = 1500;
+  bool _disposed = false;
 
   // Voice mode callbacks
   Future<void> Function(String transcript)? _onTranscript;
@@ -128,11 +164,10 @@ class VoiceNotifier extends Notifier<VoiceState> {
   int _lastSeenLength = 0;
   bool _streamComplete = false;
 
-  // Last complete assistant response — passed to Whisper as initial_prompt
-  // to reduce STT mishearings of domain-specific words.
+  // Whisper context hint
   String _lastAssistantContent = '';
 
-  // Empty transcript counter — show feedback after consecutive blanks
+  // Empty transcript counter
   int _emptyTranscriptCount = 0;
 
   // TTS playback queue
@@ -143,52 +178,51 @@ class VoiceNotifier extends Notifier<VoiceState> {
 
   @override
   VoiceState build() {
+    _disposed = false;
     _player = AudioPlayer();
     ref.onDispose(() {
-      _amplitudeSubscription?.cancel();
-      _recorder?.dispose();
+      _disposed = true;
+      _cancelSubscriptions();
+      _vadHandler?.dispose();
+      _vadHandler = null;
       _player?.dispose();
+      _player = null;
     });
     return const VoiceState();
   }
 
   // ── Public API ──────────────────────────────────────────────────────────────
 
-  /// Enter voice mode. Checks server availability and mic permission first.
-  /// [onTranscript] is called with the transcript when a recording completes.
-  /// [enableTts] — if true, TTS plays when [feedContent] is called.
-  /// [onError] — called with a human-readable message on failure.
   Future<void> enterVoiceMode({
     required Future<void> Function(String transcript) onTranscript,
     bool enableTts = false,
     required void Function(String message) onError,
   }) async {
     if (state.voiceModeActive) {
+      if (state.mode == VoiceMode.recording && !_speechDetected) {
+        onError('No speech detected');
+      }
       exitVoiceMode();
       return;
     }
 
-    // Check server availability — STT is required, TTS is optional.
     try {
       final status = await ref.read(voiceRepositoryProvider).checkStatus();
       if (!status.enabled || !status.stt) {
         onError('Speech-to-text not available on this server');
         return;
       }
-      // Downgrade to STT-only when TTS is unavailable
       if (!status.tts) enableTts = false;
     } catch (_) {
       onError('Could not reach voice service');
       return;
     }
 
-    // Check microphone permission
     var permStatus = await Permission.microphone.request();
     if (permStatus == PermissionStatus.permanentlyDenied) {
       onError('Microphone blocked — opening settings');
       final opened = await openAppSettings();
       if (!opened) return;
-      // Re-check after user returns from settings
       permStatus = await Permission.microphone.status;
     }
     if (!permStatus.isGranted) {
@@ -206,25 +240,11 @@ class VoiceNotifier extends Notifier<VoiceState> {
     await _startListening();
   }
 
-  /// Exit voice mode, stop all recording and TTS.
   void exitVoiceMode() {
-    _amplitudeSubscription?.cancel();
-    _amplitudeSubscription = null;
-    _recorder?.stop();
-    _player?.stop();
-    _ttsQueue.clear();
-    _ttsPlaying = false;
-    _sentenceBuffer = '';
-    _lastSeenLength = 0;
-    _streamComplete = false;
-    _onTranscript = null;
-    _onError = null;
-    state = const VoiceState();
+    _cleanup();
+    if (!_disposed) state = const VoiceState();
   }
 
-  /// Feed streaming assistant content for TTS synthesis.
-  /// Call from screens with the full [fullContent] string on each update.
-  /// Set [isComplete] to true when the stream has finished.
   void feedContent(String fullContent, {required bool isComplete}) {
     if (!state.voiceModeActive || !_enableTts) return;
 
@@ -243,116 +263,131 @@ class VoiceNotifier extends Notifier<VoiceState> {
     }
   }
 
+  // ── Internal helpers ────────────────────────────────────────────────────────
+
+  void _cleanup() {
+    _cancelSubscriptions();
+    final handler = _vadHandler;
+    _vadHandler = null;
+    handler?.dispose();
+    _player?.stop();
+    _ttsQueue.clear();
+    _ttsPlaying = false;
+    _sentenceBuffer = '';
+    _lastSeenLength = 0;
+    _streamComplete = false;
+    _speechDetected = false;
+    _onTranscript = null;
+    _onError = null;
+  }
+
+  void _cancelSubscriptions() {
+    _vadSpeechStartSub?.cancel();
+    _vadSpeechStartSub = null;
+    _vadSpeechEndSub?.cancel();
+    _vadSpeechEndSub = null;
+    _vadFrameSub?.cancel();
+    _vadFrameSub = null;
+    _vadErrorSub?.cancel();
+    _vadErrorSub = null;
+  }
+
   // ── Internal recording ──────────────────────────────────────────────────────
 
   Future<void> _startListening() async {
-    if (!state.voiceModeActive) return;
+    if (_disposed || !state.voiceModeActive) return;
 
-    _silenceMs = 0;
-    _peakDb = -100.0;
-    _recordingStartMs = DateTime.now().millisecondsSinceEpoch;
-    state = state.copyWith(mode: VoiceMode.recording);
-
-    final dir = _tempDir ?? await getTemporaryDirectory();
-    final path =
-        '${dir.path}/voice_rec_${DateTime.now().millisecondsSinceEpoch}.m4a';
+    _speechDetected = false;
+    _speechStartMs = 0;
 
     try {
-      // Recreate the recorder each session — the record package can leave
-      // the native AudioRecord in a bad state after stop/error cycles,
-      // and a stale instance is the most common cause of "could not start".
-      _recorder?.dispose();
-      _recorder = AudioRecorder();
+      await _stopVad();
+      _vadHandler = VadHandler.create();
 
-      if (!await _recorder!.hasPermission()) {
-        _onError?.call('Microphone permission was revoked');
-        exitVoiceMode();
-        return;
+      _vadSpeechStartSub = _vadHandler!.onSpeechStart.listen((_) {
+        if (_disposed || !state.voiceModeActive) return;
+        if (!_speechDetected) {
+          _speechDetected = true;
+          _speechStartMs = DateTime.now().millisecondsSinceEpoch;
+        }
+      });
+
+      _vadSpeechEndSub = _vadHandler!.onSpeechEnd.listen((audioSamples) {
+        if (_disposed || !state.voiceModeActive) return;
+        final now = DateTime.now().millisecondsSinceEpoch;
+        final sinceStart = _speechStartMs > 0 ? now - _speechStartMs : 0;
+        if (_speechDetected && sinceStart >= _vadGraceMs) {
+          _stopVad();
+          _handleSpeechEnd(audioSamples);
+        }
+      });
+
+      _vadFrameSub = _vadHandler!.onFrameProcessed.listen((event) {
+        if (_disposed || !state.voiceModeActive) return;
+        final frame = event.frame;
+        if (frame.isEmpty) return;
+        double sumSq = 0;
+        for (final s in frame) {
+          sumSq += s * s;
+        }
+        final rms = sqrt(sumSq / frame.length);
+        final norm = (rms * 4.0).clamp(0.0, 1.0);
+        if ((norm - state.amplitude).abs() > 0.02) {
+          state = state.copyWith(amplitude: norm);
+        }
+      });
+
+      _vadErrorSub = _vadHandler!.onError.listen((msg) {
+        if (_disposed) return;
+        _onError?.call('VAD error: $msg');
+      });
+
+      await _vadHandler!.startListening(model: 'v5');
+
+      // Only show recording UI after the mic is actually open.
+      if (!_disposed && state.voiceModeActive) {
+        state = state.copyWith(mode: VoiceMode.recording, amplitude: 0.0);
       }
-
-      await _recorder!.start(
-        const RecordConfig(encoder: AudioEncoder.aacLc, sampleRate: 16000),
-        path: path,
-      );
-
-      _amplitudeSubscription?.cancel();
-      _amplitudeSubscription = _recorder!
-          .onAmplitudeChanged(const Duration(milliseconds: 200))
-          .listen(_onAmplitude);
     } catch (e) {
       _onError?.call('Microphone error: $e');
-      exitVoiceMode();
+      _cleanup();
+      if (!_disposed) state = const VoiceState();
     }
   }
 
-  void _onAmplitude(Amplitude event) {
-    if (!state.voiceModeActive) return;
-
-    final db = event.current;
-    final validDb = !(db.isNaN || db.isInfinite);
-
-    // Normalize dB to 0..1 for the pulse animation. -60dB is dead-quiet,
-    // 0dB is peak; we clamp and bias so the button visibly breathes even
-    // on soft speech without exploding on loud input.
-    if (validDb) {
-      final norm = ((db + 60.0) / 60.0).clamp(0.0, 1.0);
-      if ((norm - state.amplitude).abs() > 0.02) {
-        state = state.copyWith(amplitude: norm);
-      }
-      if (db > _peakDb) _peakDb = db;
-    }
-
-    final elapsed =
-        DateTime.now().millisecondsSinceEpoch - _recordingStartMs;
-    // Grace period at the start — let the user begin speaking before we
-    // start silence-counting. Also suppresses any false triggers while
-    // the native recorder is still warming up.
-    if (elapsed < _graceMs) return;
-    if (elapsed < _minRecordingMs) return;
-
-    // Dynamic threshold once we've seen real speech; static fallback
-    // before that so a dead-silent session doesn't spin forever.
-    final threshold =
-        _peakDb > _dynamicArmDb ? _peakDb - _dropFromPeakDb : _fallbackThresholdDb;
-    final isSilent = !validDb || db < threshold;
-
-    if (isSilent) {
-      _silenceMs += 200;
-      if (_silenceMs >= _silenceDurationMs) {
-        _amplitudeSubscription?.cancel();
-        _amplitudeSubscription = null;
-        _handleSilence();
-      }
-    } else {
-      _silenceMs = 0;
+  Future<void> _stopVad() async {
+    _cancelSubscriptions();
+    if (_vadHandler != null) {
+      final handler = _vadHandler!;
+      _vadHandler = null;
+      await handler.dispose();
     }
   }
 
-  Future<void> _handleSilence() async {
-    if (!state.voiceModeActive) return;
+  Future<void> _handleSpeechEnd(List<double> audioSamples) async {
+    if (_disposed || !state.voiceModeActive) return;
     state = state.copyWith(mode: VoiceMode.transcribing);
 
-    final path = await _recorder!.stop();
-    if (path == null || !state.voiceModeActive) return;
-
     try {
-      final bytes = await File(path).readAsBytes();
-      await File(path).delete().catchError((_) => File(path));
+      final wavBytes = encodeWav(audioSamples);
 
-      if (!state.voiceModeActive) return;
+      if (_disposed || !state.voiceModeActive) return;
 
       final transcript = await ref.read(voiceRepositoryProvider).transcribe(
-            bytes,
-            context: _lastAssistantContent.isNotEmpty ? _lastAssistantContent : null,
+            wavBytes,
+            context:
+                _lastAssistantContent.isNotEmpty ? _lastAssistantContent : null,
           );
 
-      if (!state.voiceModeActive) return;
+      if (_disposed || !state.voiceModeActive) return;
 
       if (transcript.isEmpty) {
         _emptyTranscriptCount++;
         if (_emptyTranscriptCount >= 3) {
           _onError?.call('No speech detected — tap the mic to try again');
-          exitVoiceMode();
+          _cleanup();
+          if (!_disposed) state = const VoiceState();
+
           return;
         }
         await _startListening();
@@ -360,24 +395,25 @@ class VoiceNotifier extends Notifier<VoiceState> {
       }
       _emptyTranscriptCount = 0;
 
-      // Reset TTS state for this new turn
       _sentenceBuffer = '';
       _lastSeenLength = 0;
       _streamComplete = false;
 
-      if (_enableTts) {
+      if (_enableTts && !_disposed) {
         state = state.copyWith(mode: VoiceMode.playing);
       }
 
       await _onTranscript?.call(transcript);
 
-      // If TTS is not enabled, loop immediately
-      if (!_enableTts && state.voiceModeActive) {
-        await _startListening();
+      // In STT-only mode (no TTS), return to idle after transcript is sent.
+      // The user taps the mic again to record another message.
+      if (!_enableTts && !_disposed && state.voiceModeActive) {
+        state = state.copyWith(mode: VoiceMode.idle);
       }
     } catch (e) {
       _onError?.call('Voice error: transcription failed');
-      exitVoiceMode();
+      _cleanup();
+      if (!_disposed) state = const VoiceState();
     }
   }
 
@@ -405,7 +441,7 @@ class VoiceNotifier extends Notifier<VoiceState> {
     try {
       final wavBytes =
           await ref.read(voiceRepositoryProvider).synthesise(text);
-      if (!state.voiceModeActive) return;
+      if (_disposed || !state.voiceModeActive) return;
       _ttsQueue.add(wavBytes);
       if (!_ttsPlaying) _drainTtsQueue();
     } catch (_) {
@@ -444,6 +480,7 @@ class VoiceNotifier extends Notifier<VoiceState> {
   }
 
   void _checkRestartListening() {
+    if (_disposed) return;
     if (_streamComplete &&
         _ttsQueue.isEmpty &&
         !_ttsPlaying &&

lib/screens/briefing/briefing_screen.dart

@@ -11,6 +11,7 @@ import '../../widgets/chat_message_bubble.dart';
 import '../../widgets/weather_card.dart';
 import '../../widgets/news_card.dart';
 import 'briefing_history_screen.dart';
+import '../../providers/settings_provider.dart';
 import '../../providers/voice_provider.dart';
 import '../../widgets/voice_mic_button.dart';
 
@@ -76,7 +77,6 @@ class _BriefingScreenState extends ConsumerState<BriefingScreen>
     WidgetsBinding.instance.removeObserver(this);
     _controller.dispose();
     _scrollController.dispose();
-    ref.read(voiceProvider.notifier).exitVoiceMode();
     super.dispose();
   }
 
@@ -314,6 +314,7 @@ class _BriefingScreenState extends ConsumerState<BriefingScreen>
                               reactions: _reactions,
                               onReaction: _handleReaction,
                               onDiscuss: _handleDiscuss,
+                              rssEnabled: ref.watch(rssEnabledProvider),
                             );
                           },
                         ),
@@ -429,6 +430,7 @@ class _BriefingMessageItem extends StatelessWidget {
   final Map<int, String?> reactions;
   final void Function(int itemId, String reaction) onReaction;
   final void Function(int convId, int itemId) onDiscuss;
+  final bool rssEnabled;
 
   const _BriefingMessageItem({
     required this.message,
@@ -436,6 +438,7 @@ class _BriefingMessageItem extends StatelessWidget {
     required this.reactions,
     required this.onReaction,
     required this.onDiscuss,
+    this.rssEnabled = false,
   });
 
   @override
@@ -447,11 +450,12 @@ class _BriefingMessageItem extends StatelessWidget {
     final bool hasWeatherKey = isAssistant && meta != null && meta.containsKey('weather');
     final weatherData = hasWeatherKey ? meta['weather'] as Map<String, dynamic>? : null;
 
-    // RSS news cards — cap at 3
-    final rssItemsRaw = isAssistant && meta != null
-        ? (meta['rss_items'] as List<dynamic>?)?.cast<Map<String, dynamic>>() ?? []
-        : <Map<String, dynamic>>[];
-    final rssItems = rssItemsRaw.map(RssItemMeta.fromJson).take(3).toList();
+    // RSS news cards — cap at 3 (only when RSS is enabled)
+    final rssItems = <RssItemMeta>[];
+    if (rssEnabled && isAssistant && meta != null) {
+      final raw = (meta['rss_items'] as List<dynamic>?)?.cast<Map<String, dynamic>>() ?? [];
+      rssItems.addAll(raw.map(RssItemMeta.fromJson).take(3));
+    }
 
     return Column(
       crossAxisAlignment: CrossAxisAlignment.stretch,

lib/screens/chat/chat_screen.dart

@@ -68,8 +68,6 @@ class _ChatScreenState extends ConsumerState<ChatScreen>
     WidgetsBinding.instance.removeObserver(this);
     _controller.dispose();
     _scrollController.dispose();
-    // Exit voice mode if the user navigates away mid-session.
-    ref.read(voiceProvider.notifier).exitVoiceMode();
     super.dispose();
   }
 

lib/screens/settings/settings_screen.dart

@@ -92,7 +92,7 @@ class SettingsScreen extends ConsumerWidget {
                     child: const Text('Check'),
                   ),
           ),
-          if (update.status == UpdateStatus.available ||
+          if (update.status == UpdateStatus.readyToInstall ||
               update.status == UpdateStatus.downloading)
             _UpdateTile(update: update),
           if (update.status == UpdateStatus.error)
@@ -131,7 +131,7 @@ class SettingsScreen extends ConsumerWidget {
     if (update.status == UpdateStatus.upToDate) {
       return Text('v$current — up to date');
     }
-    if (update.status == UpdateStatus.available ||
+    if (update.status == UpdateStatus.readyToInstall ||
         update.status == UpdateStatus.downloading) {
       return Text('v$current installed');
     }
@@ -202,12 +202,12 @@ class _UpdateTile extends ConsumerWidget {
                     '${(update.downloadProgress * 100).toStringAsFixed(0)}%'),
               ],
             )
-          : const Text('Tap to download and install'),
+          : const Text('Ready to install'),
       trailing: isDownloading
           ? null
           : FilledButton(
               onPressed: () =>
-                  ref.read(updateProvider.notifier).downloadAndInstall(),
+                  ref.read(updateProvider.notifier).install(),
               child: const Text('Install'),
             ),
     );

lib/screens/splash/splash_screen.dart

@@ -29,8 +29,13 @@ class _SplashScreenState extends ConsumerState<SplashScreen> {
     await ref.read(authProvider.notifier).verify();
     if (!mounted) return;
     final status = ref.read(authProvider);
+    final hasEverLoggedIn = ref.read(hasEverLoggedInProvider);
     if (status == AuthStatus.authenticated) {
       context.go(Routes.briefing);
+    } else if (status == AuthStatus.offline && hasEverLoggedIn) {
+      // Server unreachable but this user has logged in before — land them on
+      // the briefing with the offline banner rather than the login screen.
+      context.go(Routes.briefing);
     } else {
       context.go(Routes.login);
     }

lib/widgets/chat_message_bubble.dart

@@ -1,12 +1,17 @@
 import 'dart:math' show min;
+import 'dart:typed_data';
 
+import 'package:dio/dio.dart';
 import 'package:flutter/material.dart';
 import 'package:flutter_markdown_plus/flutter_markdown_plus.dart';
+import 'package:flutter_riverpod/flutter_riverpod.dart';
 
 import '../data/models/message.dart';
+import '../providers/api_client_provider.dart';
+import '../providers/settings_provider.dart';
 import 'tool_call_chip.dart';
 
-class ChatMessageBubble extends StatelessWidget {
+class ChatMessageBubble extends ConsumerWidget {
   final Message message;
   final String streamingStatus;
   const ChatMessageBubble({
@@ -16,9 +21,11 @@ class ChatMessageBubble extends StatelessWidget {
   });
 
   @override
-  Widget build(BuildContext context) {
+  Widget build(BuildContext context, WidgetRef ref) {
     final isUser = message.role == MessageRole.user;
     final scheme = Theme.of(context).colorScheme;
+    final serverUrl = ref.watch(serverUrlProvider) ?? '';
+    final dio = ref.watch(dioProvider);
     final isGenerating = message.status == 'generating';
     final toolCalls = message.toolCalls ?? const [];
 
@@ -116,6 +123,14 @@ class ChatMessageBubble extends StatelessWidget {
                     if (message.content.isNotEmpty)
                       MarkdownBody(
                         data: message.content,
+                        imageBuilder: (uri, title, alt) {
+                          return _AuthImage(
+                            uri: uri,
+                            alt: alt,
+                            serverUrl: serverUrl,
+                            dio: dio,
+                          );
+                        },
                         styleSheet: MarkdownStyleSheet(
                           p: TextStyle(
                             color: isUser
@@ -161,3 +176,69 @@ class ChatMessageBubble extends StatelessWidget {
     );
   }
 }
+
+class _AuthImage extends StatefulWidget {
+  final Uri uri;
+  final String? alt;
+  final String serverUrl;
+  final Dio dio;
+
+  const _AuthImage({
+    required this.uri,
+    this.alt,
+    required this.serverUrl,
+    required this.dio,
+  });
+
+  @override
+  State<_AuthImage> createState() => _AuthImageState();
+}
+
+class _AuthImageState extends State<_AuthImage> {
+  late Future<Uint8List> _future;
+
+  @override
+  void initState() {
+    super.initState();
+    _future = _fetchImage();
+  }
+
+  Future<Uint8List> _fetchImage() async {
+    var url = widget.uri.toString();
+    if (url.startsWith('/')) {
+      url = '${widget.serverUrl}$url';
+    }
+    final response = await widget.dio.get<List<int>>(
+      url,
+      options: Options(responseType: ResponseType.bytes),
+    );
+    return Uint8List.fromList(response.data!);
+  }
+
+  @override
+  Widget build(BuildContext context) {
+    return FutureBuilder<Uint8List>(
+      future: _future,
+      builder: (context, snapshot) {
+        if (snapshot.connectionState == ConnectionState.waiting) {
+          return const SizedBox(
+            height: 100,
+            child: Center(child: CircularProgressIndicator(strokeWidth: 2)),
+          );
+        }
+        if (snapshot.hasError || !snapshot.hasData) {
+          return Text(widget.alt ?? 'Image failed to load');
+        }
+        return ClipRRect(
+          borderRadius: BorderRadius.circular(8),
+          child: Image.memory(
+            snapshot.data!,
+            fit: BoxFit.contain,
+            errorBuilder: (_, _, _) =>
+                Text(widget.alt ?? 'Image failed to load'),
+          ),
+        );
+      },
+    );
+  }
+}

lib/widgets/offline_banner.dart

@@ -0,0 +1,72 @@
+import 'package:flutter/material.dart';
+import 'package:flutter_riverpod/flutter_riverpod.dart';
+
+import '../providers/auth_provider.dart';
+
+/// Sticky banner shown when the backend is unreachable. Surfaces a retry
+/// action and reserves space for future "last sync X min ago" messaging once
+/// Tier 2 offline caching lands.
+class OfflineBanner extends ConsumerStatefulWidget {
+  const OfflineBanner({super.key});
+
+  @override
+  ConsumerState<OfflineBanner> createState() => _OfflineBannerState();
+}
+
+class _OfflineBannerState extends ConsumerState<OfflineBanner> {
+  bool _retrying = false;
+
+  Future<void> _retry() async {
+    if (_retrying) return;
+    setState(() => _retrying = true);
+    try {
+      await ref.read(authProvider.notifier).verify();
+    } finally {
+      if (mounted) setState(() => _retrying = false);
+    }
+  }
+
+  @override
+  Widget build(BuildContext context) {
+    final status = ref.watch(authProvider);
+    if (status != AuthStatus.offline) return const SizedBox.shrink();
+
+    final scheme = Theme.of(context).colorScheme;
+    return Material(
+      color: scheme.errorContainer,
+      child: SafeArea(
+        bottom: false,
+        child: Padding(
+          padding: const EdgeInsets.symmetric(horizontal: 12, vertical: 8),
+          child: Row(
+            children: [
+              Icon(Icons.cloud_off_outlined,
+                  size: 18, color: scheme.onErrorContainer),
+              const SizedBox(width: 8),
+              Expanded(
+                child: Text(
+                  'Offline — showing cached data.',
+                  style: TextStyle(color: scheme.onErrorContainer),
+                ),
+              ),
+              TextButton(
+                onPressed: _retrying ? null : _retry,
+                style: TextButton.styleFrom(
+                  foregroundColor: scheme.onErrorContainer,
+                  padding: const EdgeInsets.symmetric(horizontal: 12),
+                ),
+                child: _retrying
+                    ? const SizedBox(
+                        width: 14,
+                        height: 14,
+                        child: CircularProgressIndicator(strokeWidth: 2),
+                      )
+                    : const Text('Retry'),
+              ),
+            ],
+          ),
+        ),
+      ),
+    );
+  }
+}

linux/flutter/generated_plugins.cmake

@@ -10,6 +10,7 @@ list(APPEND FLUTTER_PLUGIN_LIST
 )
 
 list(APPEND FLUTTER_FFI_PLUGIN_LIST
+  vad
 )
 
 set(PLUGIN_BUNDLED_LIBRARIES)

macos/Flutter/GeneratedPluginRegistrant.swift

@@ -11,7 +11,7 @@ import flutter_timezone
 import just_audio
 import open_file_mac
 import package_info_plus
-import record_darwin
+import record_macos
 import shared_preferences_foundation
 import url_launcher_macos
 
@@ -22,7 +22,7 @@ func RegisterGeneratedPlugins(registry: FlutterPluginRegistry) {
   JustAudioPlugin.register(with: registry.registrar(forPlugin: "JustAudioPlugin"))
   OpenFilePlugin.register(with: registry.registrar(forPlugin: "OpenFilePlugin"))
   FPPPackageInfoPlusPlugin.register(with: registry.registrar(forPlugin: "FPPPackageInfoPlusPlugin"))
-  RecordPlugin.register(with: registry.registrar(forPlugin: "RecordPlugin"))
+  RecordMacOsPlugin.register(with: registry.registrar(forPlugin: "RecordMacOsPlugin"))
   SharedPreferencesPlugin.register(with: registry.registrar(forPlugin: "SharedPreferencesPlugin"))
   UrlLauncherPlugin.register(with: registry.registrar(forPlugin: "UrlLauncherPlugin"))
 }

pubspec.lock

@@ -804,10 +804,10 @@ packages:
     dependency: "direct main"
     description:
       name: record
-      sha256: "2e3d56d196abcd69f1046339b75e5f3855b2406fc087e5991f6703f188aa03a6"
+      sha256: d5b6b334f3ab02460db6544e08583c942dbf23e3504bf1e14fd4cbe3d9409277
       url: "https://pub.dev"
     source: hosted
-    version: "5.2.1"
+    version: "6.2.0"
   record_android:
     dependency: transitive
     description:
@@ -816,22 +816,30 @@ packages:
       url: "https://pub.dev"
     source: hosted
     version: "1.5.1"
-  record_darwin:
+  record_ios:
     dependency: transitive
     description:
-      name: record_darwin
-      sha256: e487eccb19d82a9a39cd0126945cfc47b9986e0df211734e2788c95e3f63c82c
+      name: record_ios
+      sha256: "8df7c136131bd05efc19256af29b2ba6ccc000ccc2c80d4b6b6d7a8d21a3b5a9"
       url: "https://pub.dev"
     source: hosted
-    version: "1.2.2"
+    version: "1.2.0"
   record_linux:
-    dependency: "direct overridden"
+    dependency: transitive
     description:
       name: record_linux
       sha256: c31a35cc158cd666fc6395f7f56fc054f31685571684be6b97670a27649ce5c7
       url: "https://pub.dev"
     source: hosted
     version: "1.3.0"
+  record_macos:
+    dependency: transitive
+    description:
+      name: record_macos
+      sha256: "084902e63fc9c0c224c29203d6c75f0bdf9b6a40536c9d916393c8f4c4256488"
+      url: "https://pub.dev"
+    source: hosted
+    version: "1.2.1"
   record_platform_interface:
     dependency: transitive
     description:
@@ -1165,6 +1173,14 @@ packages:
       url: "https://pub.dev"
     source: hosted
     version: "4.5.3"
+  vad:
+    dependency: "direct main"
+    description:
+      name: vad
+      sha256: ef6c8b12c5af7a6a519ff5684f074b8a2ac00c434705f544af379ea77bccd258
+      url: "https://pub.dev"
+    source: hosted
+    version: "0.0.7+1"
   vector_math:
     dependency: transitive
     description:

pubspec.yaml

@@ -28,13 +28,11 @@ dependencies:
   google_fonts: ^8.0.2
   flutter_timezone: ^5.0.2
   url_launcher: ^6.3.1
-  record: ^5.0.0
+  record: ^6.2.0
+  vad: ^0.0.7
   just_audio: ^0.9.39
   table_calendar: ^3.1.2
 
-dependency_overrides:
-  record_linux: ^1.3.0
-
 dev_dependencies:
   flutter_test:
     sdk: flutter

windows/flutter/generated_plugins.cmake

@@ -11,6 +11,7 @@ list(APPEND FLUTTER_PLUGIN_LIST
 )
 
 list(APPEND FLUTTER_FFI_PLUGIN_LIST
+  vad
 )
 
 set(PLUGIN_BUNDLED_LIBRARIES)