Add Projects, Milestones, RAG auto-inject, push notifications, PWA, tag normalisation

## Projects & Milestones (Phases A + G)
- New models: Project, Milestone (Project → Milestone → Task hierarchy)
- notes table: project_id + milestone_id FKs; parent_id FK constraint activated
- Migrations: 0017 (projects), 0018 (push_subscriptions), 0019 (events), 0020 (milestones)
- Services: projects.py, milestones.py (CRUD + progress tracking)
- Routes: /api/projects + /api/projects/<id>/milestones
- LLM tools: create/list/get/update project; create/list milestone; project + milestone + parent_task params on note/task tools
- Frontend: ProjectListView (stacked milestone bars), ProjectView (milestone-grouped kanban), ProjectSelector, MilestoneSelector, NoteEditorView + TaskEditorView updated

## RAG Auto-injection (Phase B)
- Notes ≥0.60 cosine similarity auto-injected into system prompt (max 3, 800 chars each)
- excluded_note_ids param; ChatView "Auto-included" sidebar section

## Summarisation improvements (Phase C)
- Threshold 20→30, keep-recent 6→8, max_tokens 200→400
- Two-pass summarisation for histories >50 messages

## Browser push notifications (Phase E)
- PushSubscription model + migration; pywebpush dependency
- /api/push routes; VAPID config; fire-and-forget on generation complete
- Frontend: sw.js, push store, Settings toggle

## PWA manifest (Phase F)
- manifest.json, Apple meta tags, service worker registration in main.ts

## Tag normalisation
- All tags lowercased + deduplicated at backend (create_note/update_note) and frontend (TagInput sanitize)
- Note/Task types gain project_id + milestone_id fields; store signatures updated

## CalDAV
- Radicale embedded server reverted; back to user-configured external CalDAV

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

frontend/src/stores/chat.ts

@@ -123,6 +123,7 @@ export const useChatStore = defineStore("chat", () => {
     includeNoteIds?: number[],
     think = false,
     contextNoteTitle?: string,
+    excludeNoteIds?: number[],
   ) {
     if (!currentConversation.value) return;
 
@@ -169,6 +170,7 @@ export const useChatStore = defineStore("chat", () => {
           content,
           context_note_id: contextNoteId,
           include_note_ids: includeNoteIds?.length ? includeNoteIds : undefined,
+          excluded_note_ids: excludeNoteIds?.length ? excludeNoteIds : undefined,
           think,
         },
       );

frontend/src/stores/notes.ts

@@ -78,6 +78,7 @@ export const useNotesStore = defineStore("notes", () => {
     title: string;
     body: string;
     tags?: string[];
+    project_id?: number | null;
   }): Promise<Note> {
     try {
       return await apiPost<Note>("/api/notes", data);
@@ -89,7 +90,7 @@ export const useNotesStore = defineStore("notes", () => {
 
   async function updateNote(
     id: number,
-    data: Partial<Pick<Note, "title" | "body" | "tags">>
+    data: Partial<Pick<Note, "title" | "body" | "tags" | "project_id">>
   ): Promise<Note> {
     try {
       const note = await apiPut<Note>(`/api/notes/${id}`, data);

frontend/src/stores/push.ts

@@ -0,0 +1,108 @@
+import { defineStore } from 'pinia'
+import { ref } from 'vue'
+
+function urlBase64ToUint8Array(base64String: string): Uint8Array {
+  const padding = '='.repeat((4 - (base64String.length % 4)) % 4)
+  const base64 = (base64String + padding).replace(/-/g, '+').replace(/_/g, '/')
+  const rawData = window.atob(base64)
+  const outputArray = new Uint8Array(rawData.length)
+  for (let i = 0; i < rawData.length; ++i) {
+    outputArray[i] = rawData.charCodeAt(i)
+  }
+  return outputArray
+}
+
+export const usePushStore = defineStore('push', () => {
+  const isSupported = ref(
+    'serviceWorker' in navigator && 'PushManager' in window && 'Notification' in window
+  )
+  const permission = ref<NotificationPermission>(
+    'Notification' in window ? Notification.permission : 'denied'
+  )
+  const isSubscribed = ref(false)
+  const loading = ref(false)
+  const error = ref<string | null>(null)
+
+  async function checkSubscription(): Promise<void> {
+    if (!isSupported.value) return
+    try {
+      const reg = await navigator.serviceWorker.ready
+      const sub = await reg.pushManager.getSubscription()
+      isSubscribed.value = !!sub
+    } catch {
+      isSubscribed.value = false
+    }
+  }
+
+  async function subscribe(): Promise<void> {
+    if (!isSupported.value) {
+      error.value = 'Push notifications not supported in this browser'
+      return
+    }
+    loading.value = true
+    error.value = null
+    try {
+      // Request permission
+      permission.value = await Notification.requestPermission()
+      if (permission.value !== 'granted') {
+        error.value = 'Notification permission denied'
+        return
+      }
+
+      // Fetch VAPID public key
+      const resp = await fetch('/api/push/vapid-public-key')
+      if (!resp.ok) {
+        error.value = 'Push notifications not configured on server'
+        return
+      }
+      const { publicKey } = await resp.json()
+
+      // Register service worker
+      const reg = await navigator.serviceWorker.register('/sw.js')
+      await navigator.serviceWorker.ready
+
+      // Subscribe
+      const sub = await reg.pushManager.subscribe({
+        userVisibleOnly: true,
+        applicationServerKey: urlBase64ToUint8Array(publicKey),
+      })
+
+      // Save to server
+      const saveResp = await fetch('/api/push/subscribe', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify(sub.toJSON()),
+      })
+      if (!saveResp.ok) throw new Error('Failed to save subscription')
+      isSubscribed.value = true
+    } catch (e: unknown) {
+      error.value = e instanceof Error ? e.message : 'Failed to subscribe'
+    } finally {
+      loading.value = false
+    }
+  }
+
+  async function unsubscribe(): Promise<void> {
+    loading.value = true
+    error.value = null
+    try {
+      const reg = await navigator.serviceWorker.ready
+      const sub = await reg.pushManager.getSubscription()
+      if (sub) {
+        await fetch('/api/push/subscribe', {
+          method: 'DELETE',
+          headers: { 'Content-Type': 'application/json' },
+          body: JSON.stringify({ endpoint: sub.endpoint }),
+        })
+        await sub.unsubscribe()
+      }
+      isSubscribed.value = false
+    } catch (e: unknown) {
+      error.value = e instanceof Error ? e.message : 'Failed to unsubscribe'
+    } finally {
+      loading.value = false
+    }
+  }
+
+  return { isSupported, permission, isSubscribed, loading, error, checkSubscription, subscribe, unsubscribe }
+})

frontend/src/stores/tasks.ts

@@ -69,6 +69,9 @@ export const useTasksStore = defineStore("tasks", () => {
     status?: TaskStatus;
     priority?: TaskPriority;
     due_date?: string | null;
+    project_id?: number | null;
+    milestone_id?: number | null;
+    parent_id?: number | null;
   }): Promise<Task> {
     try {
       return await apiPost<Task>("/api/tasks", data);
@@ -81,7 +84,7 @@ export const useTasksStore = defineStore("tasks", () => {
   async function updateTask(
     id: number,
     data: Partial<
-      Pick<Task, "title" | "body" | "tags" | "status" | "priority" | "due_date">
+      Pick<Task, "title" | "body" | "tags" | "status" | "priority" | "due_date" | "project_id" | "milestone_id" | "parent_id">
     >
   ): Promise<Task> {
     try {