Merge pull request 'fix(plugin): keep always-on rules alive across compaction (0.1.11)' (#76) from dev into main

Always-on rules were on-demand, not always-present: Tier-1 static context only
tells the agent to call list_always_on_rules(), and Tier-2 dynamic fetch is dark
(token doesn't reach the hook subprocess). On compaction the fetched rules get
summarized away while the harness's own built-in git instruction ("branch first")
survives in the base prompt — so post-compact the generic git instinct wins and
rule #1 ("dev is home") is missed.

- scribe_static_context.md: new "Operator rules govern consequential actions"
  bullet — before any git branch/commit/push or hard-to-reverse action, loaded
  rules beat generic harness/default habits; re-pull rules if not loaded or
  summarized by a compaction. Tier 1 = always fires, keyless, re-fires on compact.
- scribe_session_context.sh: compaction banner now re-pulls list_always_on_rules(),
  not just enter_project().
- plugin.json: 0.1.10 → 0.1.11 so autoUpdate ships the plugin/ change (#1040).

Generic and instance-agnostic per rules #115/#119 — no operator-specific rule
text hardcoded. Refs issue #1197.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01E4bNefPFAz7esmMZMZmkzL

.claude-plugin/marketplace.json

@@ -0,0 +1,12 @@
+{
+  "name": "scribe-plugin",
+  "owner": { "name": "Bryan Van Deusen" },
+  "description": "Scribe ships its own Claude Code plugin from this repo, versioned in lockstep with the app + the /api/plugin/context contract.",
+  "plugins": [
+    {
+      "name": "scribe",
+      "source": "./plugin",
+      "description": "Scribe second brain: MCP tools + session-start push channel + universal process-skills."
+    }
+  ]
+}

.env.example

@@ -1,4 +1,4 @@
 POSTGRES_USER=fabled
 POSTGRES_PASSWORD=fabled
-POSTGRES_DB=fabledassistant
+POSTGRES_DB=scribe
 SECRET_KEY=dev-secret-change-me

.forgejo/workflows/ci.yml

@@ -1,13 +1,31 @@
 # CI runs first; build only proceeds if all checks pass.
 #
-# Push to dev:       typecheck + lint + test → build :dev + :<sha>
-# Tag v* (release):  typecheck + lint + test → build :latest + :<sha> + :<version>
-# Pull request:      typecheck + lint + test only (no build)
+# Push to dev:        typecheck + lint + test + build :dev + :<sha>
+# Push to main:       typecheck + lint + test + build :latest + :<sha>
+# Tag v* (release):   typecheck + lint + test + build :latest + :<version> + :<sha>
+#
+# Both dev and main are gated AND built. dev pushes move :dev; main pushes move
+# :latest — main IS the production line, so :latest tracks main's tip and there
+# is no separate :main tag. Every push also gets an immutable :<sha> (the
+# rollback point). A v* release tag additionally publishes the dated :<version>;
+# since main already moved :latest, the release tag's distinct job is that
+# :<version> marker (it refreshes :latest too, harmlessly).
+#
+# Successive pushes to the SAME ref supersede each other (see concurrency
+# below), so rapid pushes don't stack identical work; dev and main runs are
+# independent refs and never cancel one another.
 #
 # To cut a release:
 #   Create a release via the Forgejo UI on main with a v* tag name.
 #   The tag push triggers this workflow; build job pushes :latest + :<version>.
 #
+# PRs aren't triggered on purpose — this is a solo dev→main flow, so
+# gating on branch push is already enough.
+#
+# NOTE on the `if:` guards below: Forgejo Actions does not consistently
+# honor `on.push.branches` as a filter, so every job repeats the ref check
+# explicitly — permitting dev, main, and v* tags, rejecting anything else.
+#
 # Required secrets (repo → Settings → Secrets → Actions):
 #   REGISTRY_USER   — your Forgejo username
 #   REGISTRY_TOKEN  — Forgejo PAT with write:packages scope
@@ -15,7 +33,7 @@ name: CI & Build
 
 on:
   push:
-    branches: [dev]
+    branches: [dev, main]
     tags: ["v*"]
     paths:
       - "src/**"
@@ -26,31 +44,52 @@ on:
       - "alembic.ini"
       - "Dockerfile"
       - "assets/**"
+      - "fable-mcp/**"
       - ".forgejo/workflows/ci.yml"
-  pull_request:
-    paths:
-      - "src/**"
-      - "frontend/**"
-      - "tests/**"
-      - "pyproject.toml"
-      - ".forgejo/workflows/ci.yml"
+  # Manual trigger from the Forgejo Actions UI. Useful when an image has
+  # been built but the deployment didn't pick it up, or when re-running
+  # against the same source produces different upstream behaviour
+  # (e.g. a transient HF download flake during the voice-bundle step).
+  workflow_dispatch: {}
+
+# Cancel older runs on the same branch when a newer push lands. Tag runs
+# get their own group implicitly (refs/tags/v1.2.3 ≠ refs/heads/dev) and
+# are never cancelled, so a release build can't kill itself mid-flight.
+concurrency:
+  group: ci-${{ github.ref }}
+  cancel-in-progress: ${{ !startsWith(github.ref, 'refs/tags/') }}
+
+# Least-privilege default. Jobs that need more (build pushes to the
+# registry) upgrade explicitly.
+permissions:
+  contents: read
 
 env:
   REGISTRY: git.fabledsword.com
-  IMAGE: git.fabledsword.com/bvandeusen/fabledassistant
+  IMAGE: git.fabledsword.com/bvandeusen/fabledscribe
 
 jobs:
   typecheck:
     name: TypeScript typecheck
-    runs-on: py3.12-node22
+    # Gate dev, main, and v* tags; reject any other ref (see header note).
+    if: github.ref == 'refs/heads/dev' || github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/v')
+    runs-on: python-ci
+    container:
+      image: git.fabledsword.com/bvandeusen/ci-python:3.14
     steps:
       - uses: actions/checkout@v6
 
-      - uses: actions/setup-node@v6
+      - name: Cache npm download cache
+        uses: actions/cache@v4
+        # Non-fatal: a transient cache-backend hiccup must NOT fail the whole
+        # typecheck job (it was skipping install + type check and reporting red
+        # on backend-only pushes — see issue task #828). On cache miss/error the
+        # job just installs without the cache.
+        continue-on-error: true
         with:
-          node-version: "22"
-          cache: "npm"
-          cache-dependency-path: frontend/package-lock.json
+          path: ~/.npm
+          key: npm-cache-${{ hashFiles('frontend/package-lock.json') }}
+          restore-keys: npm-cache-
 
       - name: Install dependencies
         run: npm ci
@@ -62,69 +101,175 @@ jobs:
 
   lint:
     name: Python lint
-    runs-on: py3.12-node22
+    if: github.ref == 'refs/heads/dev' || github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/v')
+    runs-on: python-ci
+    container:
+      image: git.fabledsword.com/bvandeusen/ci-python:3.14
     steps:
       - uses: actions/checkout@v6
 
-      - name: Install ruff
-        run: pip install --break-system-packages ruff
-
+      # ruff is pre-installed in the ci-python image — no install
+      # step needed, lint runs in ~2s.
       - name: Lint
         run: ruff check src/
 
   test:
     name: Python tests
-    runs-on: py3.12-node22
+    if: github.ref == 'refs/heads/dev' || github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/v')
+    runs-on: python-ci
+    container:
+      image: git.fabledsword.com/bvandeusen/ci-python:3.14
     steps:
       - uses: actions/checkout@v6
 
-      # Python 3.12 is pre-installed in the runner-base image (py3.12-node22).
-      - name: Cache pip wheels
-        uses: actions/cache@v3
+      - name: Cache uv packages
+        uses: actions/cache@v4
         with:
-          path: ~/.cache/pip
-          key: pip-${{ hashFiles('pyproject.toml') }}
-          restore-keys: pip-
+          path: ~/.cache/uv
+          key: uv-${{ hashFiles('pyproject.toml') }}
+          restore-keys: uv-
 
       - name: Create virtual environment
-        run: python3.12 -m venv /opt/venv
+        run: uv venv /opt/venv
 
       - name: Install package with dev deps
         run: |
-          /opt/venv/bin/pip install --upgrade pip setuptools wheel
-          /opt/venv/bin/pip install --no-build-isolation http-ece
-          /opt/venv/bin/pip install -e ".[dev]"
+          # http-ece doesn't declare setuptools as a build dep, and uv
+          # creates bare venvs without it. Install setuptools first so
+          # --no-build-isolation can find it.
+          uv pip install --python /opt/venv/bin/python setuptools wheel
+          uv pip install --python /opt/venv/bin/python --no-build-isolation http-ece
+          uv pip install --python /opt/venv/bin/python -e ".[dev]"
 
       - name: Run tests
-        run: /opt/venv/bin/python -m pytest tests/ -v
+        # Integration tests (real Postgres) run in the `integration` job below.
+        run: /opt/venv/bin/python -m pytest tests/ -q -m "not integration"
+
+  # Real-Postgres lane (family rule 6). Exercises the async SQLAlchemy connection
+  # path the unit stubs can't reach — the un-awaited execution_options regression
+  # that made every VACUUM report 0/6 lived here. Like `test`, it runs for
+  # visibility and does NOT gate the build.
+  #
+  # Job key stays separator-free ("integration"): act_runner derives the service-
+  # container name from the (truncated) job display name and the discovery step
+  # filters `docker ps` by it. Service hostnames aren't routable on this runner,
+  # so the step resolves the Postgres container's bridge IP. No `name:` on purpose.
+  integration:
+    if: github.ref == 'refs/heads/dev' || github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/v')
+    runs-on: python-ci
+    container:
+      image: git.fabledsword.com/bvandeusen/ci-python:3.14
+    env:
+      # Config + the module engine read these at import time. DATABASE_URL itself
+      # is built from the discovered service IP in the run step.
+      SECRET_KEY: ci_integration_placeholder
+    services:
+      postgres:
+        # pgvector image so `alembic upgrade head` can run migration 0067
+        # (CREATE EXTENSION vector). PG17 — matches the prod/quickstart image.
+        image: pgvector/pgvector:pg17
+        env:
+          POSTGRES_USER: scribe
+          POSTGRES_PASSWORD: ci_integration
+          POSTGRES_DB: scribe_test
+        options: >-
+          --health-cmd "pg_isready -U scribe"
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 10
+    steps:
+      - uses: actions/checkout@v6
+      - name: Create virtual environment
+        run: uv venv /opt/venv
+      - name: Install package with dev deps
+        run: |
+          uv pip install --python /opt/venv/bin/python setuptools wheel
+          uv pip install --python /opt/venv/bin/python --no-build-isolation http-ece
+          uv pip install --python /opt/venv/bin/python -e ".[dev]"
+      - name: Integration suite (resolve service IP, migrate, test)
+        run: |
+          set -eux
+          echo "=== container landscape (diagnostic for the name filter) ==="
+          docker ps -a --format '{{.ID}} {{.Image}} -> {{.Names}}'
+          PG=$(docker ps --filter "name=integration" --filter "ancestor=pgvector/pgvector:pg17" -q | head -n1)
+          test -n "$PG"
+          PG_IP=$(docker inspect -f '{{range .NetworkSettings.Networks}}{{.IPAddress}}{{end}}' "$PG")
+          test -n "$PG_IP"
+          export DATABASE_URL="postgresql+asyncpg://scribe:ci_integration@${PG_IP}:5432/scribe_test"
+          # Wait for Postgres to accept connections (busybox sh — the runner
+          # default — has no bash /dev/tcp, so use Python).
+          /opt/venv/bin/python - "$PG_IP" <<'PY'
+          import socket, sys, time
+          for _ in range(30):
+              try:
+                  socket.create_connection((sys.argv[1], 5432), timeout=2).close()
+                  break
+              except OSError:
+                  time.sleep(1)
+          else:
+              sys.exit("postgres did not become reachable")
+          PY
+          # Real migrations build the schema; the maintenance tests then run
+          # VACUUM (ANALYZE) and read pg_stat_user_tables against it.
+          /opt/venv/bin/alembic upgrade head
+          /opt/venv/bin/python -m pytest tests/ -v -m integration
 
   build:
     name: Build & push image
     needs: [typecheck, lint, test]
-    # Build on dev branch pushes and version tag pushes only.
-    # main branch pushes run CI for safety but do not build —
-    # the release tag (v*) is the sole trigger for a production image.
-    if: |
-      github.event_name == 'push' &&
-      (github.ref == 'refs/heads/dev' || startsWith(github.ref, 'refs/tags/'))
-    runs-on: py3.12-node22
+    # Build on dev, main, and v* tag pushes. dev → :dev, main → :latest,
+    # tag → :latest + :<version>; every build also gets an immutable :<sha>.
+    if: github.ref == 'refs/heads/dev' || github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/v')
+    runs-on: python-ci
+    container:
+      image: git.fabledsword.com/bvandeusen/ci-python:3.14
+    permissions:
+      contents: read
+      packages: write
     steps:
       - uses: actions/checkout@v6
 
       - name: Generate image tags and version
         id: tags
+        # POSIX `case` instead of bash `[[ ]]` because act_runner invokes
+        # `sh -e` (dash on the ci-python:3.14 image, which has no bash on
+        # the default PATH for /bin/sh). Previous `[[ ]]` form failed
+        # silently — only the SHA tag got appended, so :dev / :latest
+        # never updated in the registry and the deployed stack kept
+        # pulling stale images. Verified via `[[: not found` lines in
+        # the runner log on commit 2a374d9.
         run: |
           TAGS="${{ env.IMAGE }}:${{ github.sha }}"
           BUILD_VERSION="dev"
-          if [[ "${{ github.ref }}" == "refs/heads/dev" ]]; then
-            TAGS="$TAGS,${{ env.IMAGE }}:dev"
-          elif [[ "${{ github.ref }}" == refs/tags/* ]]; then
-            TAGS="$TAGS,${{ env.IMAGE }}:latest,${{ env.IMAGE }}:${{ github.ref_name }}"
-            BUILD_VERSION="${{ github.ref_name }}"
-          fi
+          case "${{ github.ref }}" in
+            refs/heads/dev)
+              TAGS="$TAGS,${{ env.IMAGE }}:dev"
+              ;;
+            refs/heads/main)
+              # main IS the production line: publish :latest (plus the :<sha>
+              # set above). No separate :main tag.
+              TAGS="$TAGS,${{ env.IMAGE }}:latest"
+              BUILD_VERSION="main"
+              ;;
+            refs/tags/*)
+              TAGS="$TAGS,${{ env.IMAGE }}:latest,${{ env.IMAGE }}:${{ github.ref_name }}"
+              BUILD_VERSION="${{ github.ref_name }}"
+              ;;
+          esac
           echo "value=$TAGS" >> $GITHUB_OUTPUT
           echo "build_version=$BUILD_VERSION" >> $GITHUB_OUTPUT
 
+      - name: Free disk space
+        # Self-hosted runner housekeeping. Two-step cleanup:
+        # 1. Prune dangling containers/images globally (stops the runner
+        #    from accumulating cruft from past failed builds).
+        # 2. Trim the BuildKit layer cache to a 5GB ceiling so the pip
+        #    mount cache survives but old intermediate layers don't
+        #    accumulate indefinitely.
+        run: |
+          docker system prune -af || true
+          docker builder prune --keep-storage 5g -f || true
+
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v4
 
@@ -140,7 +285,13 @@ jobs:
         with:
           context: .
           push: true
+          provenance: false
           tags: ${{ steps.tags.outputs.value }}
           build-args: BUILD_VERSION=${{ steps.tags.outputs.build_version }}
+          # Registry-backed layer cache. Pull from :cache to prime
+          # BuildKit, push updated layers back to :cache so the next
+          # build starts warm even if the runner's local cache was
+          # pruned. `mode=max` exports all intermediate layers, not
+          # just the final image, which is what gives the ~80% speedup.
           cache-from: type=registry,ref=${{ env.IMAGE }}:cache
-          cache-to: type=registry,ref=${{ env.IMAGE }}:cache,mode=max
+          cache-to: type=registry,ref=${{ env.IMAGE }}:cache,mode=max,ignore-error=true

.gitignore

@@ -23,6 +23,8 @@ settings.local.json
 # Claude Code
 .claude/
 docs/superpowers/
+docs/plans/
+docs/specs/
 
 # Environment
 .env
@@ -34,3 +36,4 @@ docker-compose.override.yml
 *.log
 .DS_Store
 .superpowers/
+.mcp.json

.remember/tmp/save-session.pid

@@ -0,0 +1 @@
+1425947

Dockerfile

@@ -1,20 +1,23 @@
+# syntax=docker/dockerfile:1
 # Stage 1: Build Vue frontend
 FROM node:22-alpine AS build-frontend
 WORKDIR /build
 COPY frontend/package.json frontend/package-lock.json* ./
-RUN npm install -g npm@latest --quiet && npm install
+RUN npm ci --quiet
 COPY frontend/ .
 RUN npm run build
 
 # Stage 2: Python runtime
-FROM python:3.12-slim AS runtime
+# Tracks CI image (ci-python:3.14) so test results stay representative.
+FROM python:3.14-slim AS runtime
 WORKDIR /app
 
 COPY pyproject.toml .
 COPY src/ src/
-RUN pip install --no-cache-dir .
+RUN --mount=type=cache,target=/root/.cache/pip \
+    pip install .
 
-COPY --from=build-frontend /build/dist/ src/fabledassistant/static/
+COPY --from=build-frontend /build/dist/ src/scribe/static/
 COPY alembic.ini .
 COPY alembic/ alembic/
 
@@ -27,4 +30,4 @@ ARG BUILD_VERSION=dev
 ENV APP_VERSION=$BUILD_VERSION
 
 EXPOSE 5000
-CMD ["sh", "-c", "alembic upgrade head && hypercorn 'fabledassistant.app:create_app()' --bind 0.0.0.0:5000 --keep-alive 600"]
+CMD ["sh", "-c", "alembic upgrade head && hypercorn 'scribe.app:create_app()' --bind 0.0.0.0:5000 --keep-alive 600"]

README.md

@@ -1,211 +1,41 @@
-# Fabled Assistant
+# Fabled Scribe
 
 A self-hosted second brain and project management application with integrated LLM capabilities. Write, organise, and act on your notes and tasks with the help of a local AI assistant — all running on your own hardware.
 
-## What It Does
+## Features
 
-**Notes with inline formatting** — Write in Markdown with a live-preview editor (Tiptap/ProseMirror). Headings, bold, italic, lists, code blocks, and task checklists render inline. A slash-command menu (`/`) inserts common blocks without leaving the keyboard.
+Notes and tasks with a Markdown editor, sub-tasks, milestones, and kanban project workspaces. AI chat with streaming responses, RAG over your notes, and tool use (web search, calendar, weather). A daily briefing that digests your tasks, RSS feeds, and weather on a schedule. Knowledge graph, per-user/group sharing, PWA with push notifications, and an MCP server for external AI clients.
 
-**Task tracking** — Notes convert freely to tasks (and back). Tasks carry status (`todo` → `in_progress` → `done`), priority, due date, sub-tasks, milestone assignment, and work logs with time tracking.
+## Quick Start
 
-**Projects and milestones** — Group related notes and tasks into projects. Milestones give projects a timeline and show completion progress. A kanban-style project view groups tasks by milestone.
+**Prerequisites:** Docker and Docker Compose. 8 GB+ RAM recommended for LLM inference.
 
-**Project Workspace** — `/workspace/:projectId` opens a three-panel environment (tasks / chat / notes) locked to a project. The AI assistant creates and updates content directly in the workspace; new notes auto-load in the editor and the task list refreshes automatically.
-
-**Wikilinks and backlinks** — Link notes with `[[Title]]` syntax. Click a wikilink to navigate to (or create) the referenced note. Each note shows what links to it. The editor suggests existing note titles as candidate links.
-
-**Tag organisation** — Tags are first-class columns (stored as a PostgreSQL array, not extracted from body text). Tag autocomplete, tag-based filtering, and a force-directed graph view show how notes cluster.
-
-**Knowledge graph** — `/graph` renders all notes, tasks, and tags as a D3 force-directed graph. Tag nodes cluster notes that share tags; project hub nodes (invisible) attract project members. Click any node to open a slide-in peek panel.
-
-**AI chat** — Full conversation history with SSE streaming. The assistant automatically retrieves semantically relevant notes (RAG) and injects them as context. Attach specific notes by paperclip for focused discussions. Useful replies can be saved directly as notes.
-
-**AI writing assistant** — Select a passage in the editor, give an instruction ("make this more concise", "add examples"), and stream a diff-style suggestion you can accept or reject.
-
-**Web research** — The assistant can search the web (SearXNG), fetch pages, and synthesise findings. Research results are saved as notes. A lightweight `search_web` tool answers quick questions inline.
-
-**Collaboration and sharing** — Share any project or note with other users or groups. Three permission levels: `viewer`, `editor`, `admin`. A "Shared with me" page lists all incoming shares. In-app notifications (with push) alert recipients when items are shared or when they are added to a group.
-
-**Groups** — Admins can create platform-wide groups, assign users roles (`member` / `owner`), and share resources with the group in one action.
-
-**In-app notifications** — A bell icon in the nav shows unread notification count with a 60-second polling interval. Clicking a notification navigates to the relevant resource and marks it read.
-
-**CalDAV calendar** — Connect an external CalDAV server (Nextcloud, Radicale, etc.) and have the assistant create, list, search, update, and delete calendar events via natural language.
-
-**Push notifications** — Web Push (VAPID) notifies you when AI generation completes, even in another tab. Configurable per-user from the Notifications settings tab.
-
-**PWA** — Installable as a desktop or mobile app. Service worker caches the shell; push is handled by `public/sw.js`.
-
-**Data export and backup** — Export your data as a Markdown ZIP (with YAML frontmatter) or a JSON array from the Data settings tab. Admins can export/restore full application backups (version 2 includes projects, milestones, task logs, AI drafts, note versions, push subscriptions) with proper ID remapping on restore.
-
-**OAuth / OIDC login** — Supports PKCE-based OIDC in addition to local username/password auth. `LOCAL_AUTH_ENABLED` can disable local login entirely for SSO-only deployments.
-
-**Multi-user with isolation** — All data is scoped to the owning user. Access to shared resources is resolved through `services/access.py` using the permission rank system. The first registered user becomes admin.
-
-**Daily Briefing** — A scheduled, dialogue-based morning briefing accessible at `/briefing`. The assistant compiles your tasks, calendar events, projects, weather forecast (Open-Meteo), and RSS feed digest at 4am, then checks in at 8am, 12pm, and 4pm. You can reply interactively — the briefing is a real conversation, not a widget. The assistant learns your preferences over time via a profile note it maintains. Configure locations, work schedule, RSS feeds, and active slots from Settings → Briefing.
-
-**Dark and light themes** — Defaults to dark (slate-indigo palette). One-click toggle in the header.
-
-**Keyboard shortcuts** — `g`+`h/n/t/p/c/g` navigate sections; `n` new note; `t` new task; `?` shows the shortcut panel. Full list available in-app.
-
----
-
-## Getting Started
-
-### Prerequisites
-
-- [Docker](https://docs.docker.com/get-docker/) and Docker Compose
-- A machine with enough RAM to run an LLM (8 GB+ recommended for smaller models like `llama3.2`)
-
-### Quick Start
-
-1. Clone the repository:
-   ```bash
-   git clone https://github.com/your-username/fabledassistant.git
-   cd fabledassistant
-   ```
-
-2. Start the application:
-   ```bash
-   docker compose up --build
-   ```
-
-3. Open `http://localhost:5000` in your browser.
-
-4. Register the first user account — this account becomes the admin.
-
-5. Go to **Settings → General** to pull an LLM model (`llama3.2` at 2 GB is a good starting point).
-
-### Day-to-Day Usage
-
-- **Create a note** from the Notes page. Use Markdown — formatting renders live.
-- **Link notes** by typing `[[` for a wikilink autocomplete dropdown.
-- **Tag your notes** — add tags in the sidebar tag input; autocomplete suggests existing tags.
-- **Use the AI writing assistant** — select text in the editor, write an instruction, stream a suggestion.
-- **Chat with the AI** — the assistant finds relevant notes automatically. Attach specific notes for focused context.
-- **Convert notes ↔ tasks** from the viewer toolbar.
-- **Open a project workspace** from the project page — chat, tasks, and note editor in one view.
-- **Share a project or note** — click Share in the project/note/task viewer toolbar, search for users or pick a group.
-- **Manage groups** (admins) — Settings → Groups tab.
-- **Backup your data** — Settings → Data tab for personal export; admin section for full application backup.
-
----
-
-## Configuration
-
-Configuration is via environment variables. See `docker-compose.yml` for defaults.
-
-| Variable | Default | Description |
-|----------|---------|-------------|
-| `DATABASE_URL` | `postgresql+asyncpg://...` | PostgreSQL connection string |
-| `SECRET_KEY` | (required) | Session signing key |
-| `OLLAMA_BASE_URL` | `http://ollama:11434` | Ollama API endpoint |
-| `DEFAULT_MODEL` | `llama3.1` | LLM model to warm on startup |
-| `EMBEDDING_MODEL` | `nomic-embed-text` | Model used for semantic search / RAG |
-| `SECURE_COOKIES` | `false` | Set `true` behind TLS |
-| `LOG_LEVEL` | `INFO` | Logging verbosity |
-| `OIDC_ISSUER` | — | OIDC issuer URL for SSO login |
-| `OIDC_CLIENT_ID` | — | OIDC client ID |
-| `OIDC_CLIENT_SECRET` | — | OIDC client secret |
-| `LOCAL_AUTH_ENABLED` | `true` | Set `false` to disable local login |
-| `SEARXNG_URL` | — | SearXNG base URL for web search |
-| `BASE_URL` | — | Public URL (used in email links and OIDC redirect) |
-
-For production, `docker-compose.prod.yml` supports Docker secrets (`SECRET_KEY_FILE`, `DATABASE_URL_FILE`) and includes network isolation, health checks, and resource limits.
-
----
-
-## Production Deployment
-
-### Reverse Proxy (Required)
-
-Fabled Assistant does **not** handle SSL/TLS. Run it behind a reverse proxy:
-
-- **Nginx**, **Traefik**, or **Caddy** in front of the app container
-- Terminate TLS at the proxy; forward to port 5000
-- **Do not expose port 5000 directly to the internet**
-- **Rate-limit auth endpoints** — recommended: ≤5 req/min per IP on `/api/auth/login` and `/api/auth/register`
-- **Set CSP headers** — recommended: `default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'`
-
-### Security Checklist
-
-- **Strong `SECRET_KEY`** — generate with `python -c "import secrets; print(secrets.token_hex(32))"` or use Docker secrets via `SECRET_KEY_FILE`
-- **Registration** — auto-closes after the first user (admin). Re-enable from Settings → Users or send invite links.
-- **Session invalidation** — changing or resetting a password bumps `session_version`, evicting all other active sessions.
-- **Keep Ollama on an internal network** — both compose files keep it off the host network.
-
----
-
-## Technical Overview
-
-### Stack
-
-| Layer | Technology |
-|-------|------------|
-| Frontend | Vue 3, TypeScript, Vite, Pinia, Vue Router |
-| Editor | Tiptap (ProseMirror) with custom slash-command extension |
-| Backend | Python 3.12, Quart (async ASGI) |
-| Database | PostgreSQL 16, SQLAlchemy 2.0 async, Alembic |
-| LLM | Ollama (local) — any OpenAI-compatible API |
-| Search | SearXNG (optional, self-hosted) |
-| Push | Web Push / VAPID (pywebpush 2.x) |
-| Deployment | Docker Compose |
-
-### Architecture
-
-The app runs as a single container serving the Vue SPA and REST API (`/api/`). The frontend is built by Vite during the Docker image build and served as static files by Quart.
-
-LLM interactions stream via Server-Sent Events (SSE). Chat generation runs in background `asyncio` tasks with an in-memory event buffer supporting client reconnection without data loss. An abort mechanism lets users cancel in-flight generations.
-
-Semantic search (RAG) uses `nomic-embed-text` via Ollama to generate embeddings stored in PostgreSQL. Notes above 0.60 cosine similarity are auto-injected into the system prompt; notes between 0.45–0.60 appear as sidebar suggestions.
-
-Permission resolution is centralised in `services/access.py`. All resource access goes through `get_project_permission` / `get_note_permission`, which check ownership, direct shares, group membership shares, and note→project inheritance in order, returning the highest applicable permission.
-
-### Database
-
-PostgreSQL with SQLAlchemy 2.0 async. Tasks are notes with non-null `status` (unified `Note` model). Tags are stored as a `ARRAY[text]` column. Migrations run automatically on startup via Alembic.
-
-### Project Structure
-
-```
-fabledassistant/
-├── docker-compose.yml           # Development stack
-├── docker-compose.prod.yml      # Production stack (Docker Swarm)
-├── Dockerfile                   # Multi-stage build (Node → Python)
-├── alembic/                     # Database migrations
-├── src/fabledassistant/
-│   ├── app.py                   # Quart app factory + blueprint registration
-│   ├── models/                  # SQLAlchemy models
-│   ├── routes/                  # API blueprints
-│   ├── services/                # Business logic (access, sharing, groups, …)
-│   └── static/                  # Built frontend (generated at build time)
-└── frontend/
-    └── src/
-        ├── views/               # Page-level components
-        ├── components/          # Reusable UI components
-        ├── composables/         # Vue composables (autosave, shortcuts, …)
-        ├── stores/              # Pinia stores (auth, chat, notes, notifications, …)
-        └── api/                 # Typed API client (client.ts)
-```
-
-### Development
-
-All development is done via Docker. No local dependency installation required.
+Download [`docker-compose.quickstart.yml`](docker-compose.quickstart.yml) from this repo, then:
 
 ```bash
-# Start the dev stack (hot-reload not included — rebuild on changes)
-docker compose up --build
+# Optional but recommended — set a secret key
+export SECRET_KEY=your-random-secret-here
 
-# Reset the database
-docker compose down -v && docker compose up --build
-
-# Lint, format, typecheck, test (runs inside Docker via Makefile)
-make check
+docker compose -f docker-compose.quickstart.yml up -d
 ```
 
-CI runs on Forgejo Actions with a custom runner image (`py3.12-node22`) that has Python 3.12 and Node 22 pre-installed. Pushes to `dev` build a `:dev` image; merges to `main` build `:latest`.
+Open `http://localhost:5000`. The first user to register becomes admin. Go to **Settings → General** to pull an LLM model — `qwen3:8b` or `llama3.1:8b` are good starting points.
 
----
+> **GPU:** Ollama runs CPU-only by default. See the comments in `docker-compose.quickstart.yml` to enable NVIDIA GPU passthrough.
+
+> **Development:** To build from source, see [Development](docs/development.md).
+
+## Documentation
+
+| Doc | Contents |
+|-----|----------|
+| [Architecture](docs/architecture.md) | Stack, design decisions, data models, key services |
+| [Configuration](docs/configuration.md) | Environment variables, Docker Compose, production setup, security |
+| [Features](docs/features.md) | Detailed feature breakdown and keyboard shortcuts |
+| [Development](docs/development.md) | Dev workflow, CI/CD, migrations, release process |
+| [API Keys & MCP](docs/api-keys-and-mcp.md) | API key management and Fable MCP install guide |
+| [SSO / OAuth](docs/sso-oauth.md) | OIDC setup for Authentik, Keycloak, and other providers |
+| [API Reference](docs/api-reference.md) | All REST API endpoints |
 
 ## License
 

alembic/env.py

@@ -4,8 +4,8 @@ from logging.config import fileConfig
 from alembic import context
 from sqlalchemy.ext.asyncio import create_async_engine
 
-from fabledassistant.config import Config
-from fabledassistant.models import Base
+from scribe.config import Config
+from scribe.models import Base
 
 config = context.config
 if config.config_file_name is not None:

alembic/versions/0027_add_api_keys.py

@@ -0,0 +1,34 @@
+"""add api_keys table
+
+Revision ID: 0027
+Revises: 0026
+Create Date: 2026-03-23
+"""
+from alembic import op
+import sqlalchemy as sa
+
+revision = "0027"
+down_revision = "0026"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.create_table(
+        "api_keys",
+        sa.Column("id", sa.Integer(), primary_key=True),
+        sa.Column("user_id", sa.Integer(), sa.ForeignKey("users.id", ondelete="CASCADE"), nullable=False),
+        sa.Column("name", sa.Text(), nullable=False),
+        sa.Column("key_hash", sa.Text(), nullable=False, unique=True),
+        sa.Column("key_prefix", sa.Text(), nullable=False),
+        sa.Column("scope", sa.Text(), nullable=False),
+        sa.Column("last_used_at", sa.DateTime(timezone=True), nullable=True),
+        sa.Column("revoked_at", sa.DateTime(timezone=True), nullable=True),
+        sa.Column("created_at", sa.DateTime(timezone=True), server_default=sa.func.now(), nullable=False),
+    )
+    op.create_index("ix_api_keys_user_id", "api_keys", ["user_id"])
+    op.create_index("ix_api_keys_key_hash", "api_keys", ["key_hash"])
+
+
+def downgrade() -> None:
+    op.drop_table("api_keys")

alembic/versions/0028_add_briefing_improvements.py

@@ -0,0 +1,55 @@
+"""Add briefing improvements: rss_items topics/classified_at, messages metadata,
+   rss_item_reactions, briefing_task_snapshot."""
+
+from alembic import op
+
+revision = "0028"
+down_revision = "0027"
+
+
+def upgrade() -> None:
+    op.execute("""
+        ALTER TABLE rss_items
+            ADD COLUMN IF NOT EXISTS topics TEXT[] DEFAULT '{}',
+            ADD COLUMN IF NOT EXISTS classified_at TIMESTAMPTZ
+    """)
+    op.execute("""
+        ALTER TABLE messages
+            ADD COLUMN IF NOT EXISTS metadata JSONB
+    """)
+    op.execute("""
+        CREATE TABLE IF NOT EXISTS rss_item_reactions (
+            id          SERIAL PRIMARY KEY,
+            user_id     INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+            rss_item_id INTEGER NOT NULL REFERENCES rss_items(id) ON DELETE CASCADE,
+            reaction    TEXT NOT NULL CHECK (reaction IN ('up', 'down')),
+            created_at  TIMESTAMPTZ DEFAULT NOW(),
+            UNIQUE (user_id, rss_item_id)
+        )
+    """)
+    op.execute(
+        "CREATE INDEX IF NOT EXISTS ix_rss_item_reactions_user_id "
+        "ON rss_item_reactions(user_id)"
+    )
+    op.execute("""
+        CREATE TABLE IF NOT EXISTS briefing_task_snapshot (
+            id            SERIAL PRIMARY KEY,
+            user_id       INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+            task_id       INTEGER NOT NULL REFERENCES notes(id) ON DELETE CASCADE,
+            snapshot_hash TEXT NOT NULL,
+            last_briefed  TIMESTAMPTZ DEFAULT NOW(),
+            UNIQUE (user_id, task_id)
+        )
+    """)
+    op.execute(
+        "CREATE INDEX IF NOT EXISTS ix_briefing_task_snapshot_user_id "
+        "ON briefing_task_snapshot(user_id)"
+    )
+
+
+def downgrade() -> None:
+    op.execute("DROP TABLE IF EXISTS briefing_task_snapshot")
+    op.execute("DROP TABLE IF EXISTS rss_item_reactions")
+    op.execute("ALTER TABLE messages DROP COLUMN IF EXISTS metadata")
+    op.execute("ALTER TABLE rss_items DROP COLUMN IF EXISTS classified_at")
+    op.execute("ALTER TABLE rss_items DROP COLUMN IF EXISTS topics")

alembic/versions/0029_add_calendar_columns.py

@@ -0,0 +1,19 @@
+"""Add caldav_uid and color columns to events table."""
+
+from alembic import op
+
+revision = "0029"
+down_revision = "0028"
+
+
+def upgrade() -> None:
+    op.execute("""
+        ALTER TABLE events
+            ADD COLUMN IF NOT EXISTS caldav_uid TEXT DEFAULT '',
+            ADD COLUMN IF NOT EXISTS color TEXT DEFAULT ''
+    """)
+
+
+def downgrade() -> None:
+    op.execute("ALTER TABLE events DROP COLUMN IF EXISTS color")
+    op.execute("ALTER TABLE events DROP COLUMN IF EXISTS caldav_uid")

alembic/versions/0030_rag_scoping.py

@@ -0,0 +1,23 @@
+"""Add rag_project_id to conversations; auto_summary columns to projects."""
+
+from alembic import op
+
+revision = "0030"
+down_revision = "0029"
+
+
+def upgrade() -> None:
+    op.execute("""
+        ALTER TABLE conversations
+            ADD COLUMN IF NOT EXISTS rag_project_id INTEGER DEFAULT NULL
+    """)
+    op.execute("""
+        ALTER TABLE projects
+            ADD COLUMN IF NOT EXISTS auto_summary TEXT DEFAULT NULL,
+            ADD COLUMN IF NOT EXISTS summary_updated_at TIMESTAMPTZ DEFAULT NULL
+    """)
+
+
+def downgrade() -> None:
+    op.execute("ALTER TABLE conversations DROP COLUMN IF EXISTS rag_project_id")
+    op.execute("ALTER TABLE projects DROP COLUMN IF EXISTS auto_summary, DROP COLUMN IF EXISTS summary_updated_at")

alembic/versions/0031_add_cancelled_task_status.py

@@ -0,0 +1,21 @@
+"""Add 'cancelled' task status.
+
+The status column is plain TEXT (not a PostgreSQL enum type), so no DDL
+change is required — the application layer already accepts the new value.
+"""
+
+from alembic import op
+
+revision = "0031"
+down_revision = "0030"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    # No-op: status is stored as TEXT; the new value is valid without DDL changes.
+    pass
+
+
+def downgrade() -> None:
+    pass

alembic/versions/0032_add_task_timestamps.py

@@ -0,0 +1,19 @@
+"""Add started_at and completed_at to notes."""
+
+from alembic import op
+import sqlalchemy as sa
+
+revision = "0032"
+down_revision = "0031"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.add_column("notes", sa.Column("started_at", sa.DateTime(timezone=True), nullable=True))
+    op.add_column("notes", sa.Column("completed_at", sa.DateTime(timezone=True), nullable=True))
+
+
+def downgrade() -> None:
+    op.drop_column("notes", "completed_at")
+    op.drop_column("notes", "started_at")

alembic/versions/0033_add_task_recurrence.py

@@ -0,0 +1,30 @@
+"""Add recurrence_rule and recurrence_next_spawn_at to notes."""
+
+from alembic import op
+import sqlalchemy as sa
+from sqlalchemy.dialects.postgresql import JSONB
+
+revision = "0033"
+down_revision = "0032"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.add_column("notes", sa.Column("recurrence_rule", JSONB(), nullable=True))
+    op.add_column(
+        "notes",
+        sa.Column("recurrence_next_spawn_at", sa.DateTime(timezone=True), nullable=True),
+    )
+    op.create_index(
+        "ix_notes_recurrence_next_spawn_at",
+        "notes",
+        ["recurrence_next_spawn_at"],
+        postgresql_where=sa.text("recurrence_next_spawn_at IS NOT NULL"),
+    )
+
+
+def downgrade() -> None:
+    op.drop_index("ix_notes_recurrence_next_spawn_at", table_name="notes")
+    op.drop_column("notes", "recurrence_next_spawn_at")
+    op.drop_column("notes", "recurrence_rule")

alembic/versions/0034_add_user_profiles.py

@@ -0,0 +1,53 @@
+"""Add user_profiles table for structured per-user preferences."""
+
+import sqlalchemy as sa
+from alembic import op
+from sqlalchemy.dialects.postgresql import ARRAY, JSONB
+
+revision = "0034"
+down_revision = "0033"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.create_table(
+        "user_profiles",
+        sa.Column("id", sa.Integer(), primary_key=True),
+        sa.Column(
+            "user_id",
+            sa.Integer(),
+            sa.ForeignKey("users.id", ondelete="CASCADE"),
+            nullable=False,
+            unique=True,
+        ),
+        sa.Column("display_name", sa.Text(), nullable=True),
+        sa.Column("job_title", sa.Text(), nullable=True),
+        sa.Column("industry", sa.Text(), nullable=True),
+        sa.Column("expertise_level", sa.Text(), nullable=True),
+        sa.Column("response_style", sa.Text(), nullable=True),
+        sa.Column("tone", sa.Text(), nullable=True),
+        sa.Column("interests", ARRAY(sa.Text()), nullable=True),
+        sa.Column("work_schedule", JSONB(), nullable=True),
+        sa.Column("learned_summary", sa.Text(), nullable=True),
+        sa.Column("observations_raw", JSONB(), nullable=True),
+        sa.Column("observations_updated_at", sa.DateTime(timezone=True), nullable=True),
+        sa.Column(
+            "created_at",
+            sa.DateTime(timezone=True),
+            server_default=sa.func.now(),
+            nullable=False,
+        ),
+        sa.Column(
+            "updated_at",
+            sa.DateTime(timezone=True),
+            server_default=sa.func.now(),
+            nullable=False,
+        ),
+    )
+    op.create_index("ix_user_profiles_user_id", "user_profiles", ["user_id"], unique=True)
+
+
+def downgrade() -> None:
+    op.drop_index("ix_user_profiles_user_id", table_name="user_profiles")
+    op.drop_table("user_profiles")

alembic/versions/0035_add_rss_item_embeddings.py

@@ -0,0 +1,28 @@
+"""Add rss_item_embeddings table for semantic news search."""
+
+import sqlalchemy as sa
+from alembic import op
+from sqlalchemy.dialects.postgresql import JSONB
+
+revision = "0035"
+down_revision = "0034"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.create_table(
+        "rss_item_embeddings",
+        sa.Column("rss_item_id", sa.Integer(), sa.ForeignKey("rss_items.id", ondelete="CASCADE"), primary_key=True),
+        sa.Column("user_id", sa.Integer(), nullable=False),
+        sa.Column("embedding", JSONB(), nullable=False),
+        sa.Column("updated_at", sa.DateTime(timezone=True), nullable=False, server_default=sa.func.now()),
+    )
+    op.create_index("ix_rss_item_embeddings_user_id", "rss_item_embeddings", ["user_id"])
+    op.create_index("ix_rss_item_embeddings_rss_item_id", "rss_item_embeddings", ["rss_item_id"])
+
+
+def downgrade() -> None:
+    op.drop_index("ix_rss_item_embeddings_rss_item_id", table_name="rss_item_embeddings")
+    op.drop_index("ix_rss_item_embeddings_user_id", table_name="rss_item_embeddings")
+    op.drop_table("rss_item_embeddings")

alembic/versions/0036_add_note_type_and_metadata.py

@@ -0,0 +1,28 @@
+"""Add note_type and metadata columns to notes table for entity types."""
+
+import sqlalchemy as sa
+from alembic import op
+from sqlalchemy.dialects.postgresql import JSONB
+
+revision = "0036"
+down_revision = "0035"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.add_column(
+        "notes",
+        sa.Column("note_type", sa.Text(), nullable=False, server_default="note"),
+    )
+    op.add_column(
+        "notes",
+        sa.Column("metadata", JSONB(), nullable=True),
+    )
+    op.create_index("ix_notes_note_type", "notes", ["note_type"])
+
+
+def downgrade() -> None:
+    op.drop_index("ix_notes_note_type", table_name="notes")
+    op.drop_column("notes", "metadata")
+    op.drop_column("notes", "note_type")

alembic/versions/0037_add_event_reminders.py

@@ -0,0 +1,29 @@
+"""Add reminder_minutes and reminder_sent_at to events.
+
+Revision ID: 0037
+Revises: 0036
+Create Date: 2026-04-04
+"""
+
+from __future__ import annotations
+
+import sqlalchemy as sa
+from alembic import op
+
+revision = "0037"
+down_revision = "0036"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.add_column("events", sa.Column("reminder_minutes", sa.Integer(), nullable=True))
+    op.add_column(
+        "events",
+        sa.Column("reminder_sent_at", sa.DateTime(timezone=True), nullable=True),
+    )
+
+
+def downgrade() -> None:
+    op.drop_column("events", "reminder_sent_at")
+    op.drop_column("events", "reminder_minutes")

alembic/versions/0038_add_rss_item_full_content.py

@@ -0,0 +1,34 @@
+"""Add content_full and context_prepared caches to rss_items.
+
+Revision ID: 0038
+Revises: 0037
+Create Date: 2026-04-13
+"""
+
+from __future__ import annotations
+
+import sqlalchemy as sa
+from alembic import op
+
+revision = "0038"
+down_revision = "0037"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.add_column("rss_items", sa.Column("content_full", sa.Text(), nullable=True))
+    op.add_column(
+        "rss_items",
+        sa.Column("context_prepared", sa.Text(), nullable=True),
+    )
+    op.add_column(
+        "rss_items",
+        sa.Column("content_fetched_at", sa.DateTime(timezone=True), nullable=True),
+    )
+
+
+def downgrade() -> None:
+    op.drop_column("rss_items", "content_fetched_at")
+    op.drop_column("rss_items", "context_prepared")
+    op.drop_column("rss_items", "content_full")

alembic/versions/0039_add_rss_item_discussion_note.py

@@ -0,0 +1,38 @@
+"""Link rss_items to their discussion-summary note.
+
+Revision ID: 0039
+Revises: 0038
+Create Date: 2026-04-14
+"""
+
+from __future__ import annotations
+
+import sqlalchemy as sa
+from alembic import op
+
+revision = "0039"
+down_revision = "0038"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.add_column(
+        "rss_items",
+        sa.Column("discussion_note_id", sa.BigInteger(), nullable=True),
+    )
+    op.create_foreign_key(
+        "fk_rss_items_discussion_note_id",
+        "rss_items",
+        "notes",
+        ["discussion_note_id"],
+        ["id"],
+        ondelete="SET NULL",
+    )
+
+
+def downgrade() -> None:
+    op.drop_constraint(
+        "fk_rss_items_discussion_note_id", "rss_items", type_="foreignkey"
+    )
+    op.drop_column("rss_items", "discussion_note_id")

alembic/versions/0040_rename_briefing_date_drop_briefing_data.py

@@ -0,0 +1,26 @@
+"""rename briefing_date to day_date and drop existing briefing conversations
+
+Revision ID: 0040
+Revises: 0039
+Create Date: 2026-04-25
+
+This is a hard-cut migration accompanying the Journal feature. The user
+has accepted destruction of existing briefing data per the design spec.
+"""
+from alembic import op
+
+
+revision = "0040"
+down_revision = "0039"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.execute("DELETE FROM conversations WHERE conversation_type = 'briefing'")
+    op.alter_column("conversations", "briefing_date", new_column_name="day_date")
+    op.execute("DELETE FROM settings WHERE key = 'briefing_config'")
+
+
+def downgrade() -> None:
+    op.alter_column("conversations", "day_date", new_column_name="briefing_date")

alembic/versions/0041_add_moments.py

@@ -0,0 +1,128 @@
+"""add moments + junction tables + moment embeddings
+
+Revision ID: 0041
+Revises: 0040
+Create Date: 2026-04-25
+
+People, Places, Tasks, and Notes all live in the `notes` table (distinguished
+by note_type and is_task). The four junction tables FK to notes(id) but stay
+separate so per-link-kind queries don't require a discriminator filter.
+"""
+from alembic import op
+import sqlalchemy as sa
+from sqlalchemy.dialects.postgresql import ARRAY, JSONB
+
+
+revision = "0041"
+down_revision = "0040"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.create_table(
+        "moments",
+        sa.Column("id", sa.Integer, primary_key=True),
+        sa.Column(
+            "user_id",
+            sa.Integer,
+            sa.ForeignKey("users.id", ondelete="CASCADE"),
+            nullable=False,
+        ),
+        sa.Column(
+            "conversation_id",
+            sa.Integer,
+            sa.ForeignKey("conversations.id", ondelete="SET NULL"),
+            nullable=True,
+        ),
+        sa.Column(
+            "source_message_id",
+            sa.Integer,
+            sa.ForeignKey("messages.id", ondelete="SET NULL"),
+            nullable=True,
+        ),
+        sa.Column("day_date", sa.Date, nullable=False),
+        sa.Column("occurred_at", sa.DateTime(timezone=True), nullable=False),
+        sa.Column(
+            "recorded_at",
+            sa.DateTime(timezone=True),
+            nullable=False,
+            server_default=sa.text("now()"),
+        ),
+        sa.Column("content", sa.Text, nullable=False),
+        sa.Column("raw_excerpt", sa.Text, nullable=True),
+        sa.Column(
+            "tags",
+            ARRAY(sa.Text),
+            nullable=False,
+            server_default=sa.text("'{}'::text[]"),
+        ),
+        sa.Column(
+            "pinned",
+            sa.Boolean,
+            nullable=False,
+            server_default=sa.text("false"),
+        ),
+    )
+    op.create_index("ix_moments_user_day", "moments", ["user_id", "day_date"])
+    op.create_index("ix_moments_user_occurred", "moments", ["user_id", "occurred_at"])
+
+    # Four junction tables, all FK to notes(id). Separate (vs. one merged
+    # table with a discriminator) so per-kind queries don't need a filter.
+    for table_name, fk_col in [
+        ("moment_people", "person_id"),
+        ("moment_places", "place_id"),
+        ("moment_tasks", "task_id"),
+        ("moment_notes", "note_id"),
+    ]:
+        op.create_table(
+            table_name,
+            sa.Column(
+                "moment_id",
+                sa.Integer,
+                sa.ForeignKey("moments.id", ondelete="CASCADE"),
+                primary_key=True,
+            ),
+            sa.Column(
+                fk_col,
+                sa.Integer,
+                sa.ForeignKey("notes.id", ondelete="CASCADE"),
+                primary_key=True,
+            ),
+        )
+        op.create_index(f"ix_{table_name}_{fk_col}", table_name, [fk_col])
+
+    op.create_table(
+        "moment_embeddings",
+        sa.Column(
+            "moment_id",
+            sa.Integer,
+            sa.ForeignKey("moments.id", ondelete="CASCADE"),
+            primary_key=True,
+        ),
+        sa.Column("user_id", sa.Integer, nullable=False),
+        sa.Column("embedding", JSONB, nullable=False),
+        sa.Column(
+            "updated_at",
+            sa.DateTime(timezone=True),
+            nullable=False,
+            server_default=sa.text("now()"),
+        ),
+    )
+    op.create_index("ix_moment_embeddings_user", "moment_embeddings", ["user_id"])
+
+
+def downgrade() -> None:
+    op.drop_index("ix_moment_embeddings_user", table_name="moment_embeddings")
+    op.drop_table("moment_embeddings")
+    for table_name, fk_col in [
+        ("moment_notes", "note_id"),
+        ("moment_tasks", "task_id"),
+        ("moment_places", "place_id"),
+        ("moment_people", "person_id"),
+    ]:
+        op.drop_index(f"ix_{table_name}_{fk_col}", table_name=table_name)
+        op.drop_table(table_name)
+    op.drop_index("ix_moments_user_occurred", table_name="moments")
+    op.drop_index("ix_moments_user_day", table_name="moments")
+    op.drop_table("moments")

alembic/versions/0042_drop_rss.py

@@ -0,0 +1,36 @@
+"""drop RSS infrastructure (tables + leftover briefing settings)
+
+Revision ID: 0042
+Revises: 0041
+Create Date: 2026-04-26
+
+Hard-cut removal of the RSS feature. Drops rss_feeds, rss_items,
+rss_item_reactions, rss_item_embeddings, and clears the leftover
+briefing-era settings rows that referenced RSS topic preferences.
+"""
+from alembic import op
+
+
+revision = "0042"
+down_revision = "0041"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    # Drop in dependency order — children first.
+    op.execute("DROP TABLE IF EXISTS rss_item_embeddings CASCADE")
+    op.execute("DROP TABLE IF EXISTS rss_item_reactions CASCADE")
+    op.execute("DROP TABLE IF EXISTS rss_items CASCADE")
+    op.execute("DROP TABLE IF EXISTS rss_feeds CASCADE")
+    op.execute(
+        "DELETE FROM settings WHERE key IN "
+        "('rss_enabled', 'briefing_include_topics', 'briefing_exclude_topics')"
+    )
+
+
+def downgrade() -> None:
+    # No downgrade — this is a destructive cleanup. The original RSS tables
+    # would have to be recreated by replaying migrations 0026, 0028, 0035,
+    # 0038, 0039 manually (and the data would not come back).
+    raise NotImplementedError("RSS feature is permanently removed in 0042")

alembic/versions/0043_event_duration_replaces_end_dt.py

@@ -0,0 +1,73 @@
+"""replace events.end_dt with duration_minutes (Fable #160)
+
+Revision ID: 0043
+Revises: 0042
+Create Date: 2026-04-29
+
+Structural fix for the "end before start" bug class observed on prod
+2026-04-29: an event landed with end_dt 32 days before start_dt due
+to a tool-call mishap, then disappeared from upcoming-list filters.
+Storing duration instead of end_dt makes the invalid state
+inexpressible at the schema level (duration_minutes >= 0).
+
+Backfill rules:
+  - end_dt valid (end_dt > start_dt) → duration_minutes = total minutes
+  - end_dt == start_dt → duration_minutes = 0 (zero-duration point)
+  - end_dt NULL OR end_dt < start_dt → duration_minutes = NULL (corrupt
+    or open-ended; treated as a point event from here on)
+
+Existing API consumers continue to receive `end_dt` in responses — the
+field is now derived from `start_dt + duration_minutes` in
+``Event.to_dict()`` rather than stored.
+"""
+from alembic import op
+import sqlalchemy as sa
+
+
+revision = "0043"
+down_revision = "0042"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.add_column(
+        "events",
+        sa.Column("duration_minutes", sa.Integer(), nullable=True),
+    )
+    op.create_check_constraint(
+        "events_duration_minutes_non_negative",
+        "events",
+        "duration_minutes IS NULL OR duration_minutes >= 0",
+    )
+    # Backfill: convert valid end_dt into a minute count; leave NULL for
+    # corrupt or absent end_dt. Bad rows (end_dt <= start_dt) collapse
+    # cleanly to point events instead of forcing a recovery guess.
+    op.execute(
+        """
+        UPDATE events
+        SET duration_minutes = CAST(
+            EXTRACT(EPOCH FROM (end_dt - start_dt)) / 60 AS INTEGER
+        )
+        WHERE end_dt IS NOT NULL AND end_dt >= start_dt
+        """
+    )
+    op.drop_column("events", "end_dt")
+
+
+def downgrade() -> None:
+    op.add_column(
+        "events",
+        sa.Column("end_dt", sa.DateTime(timezone=True), nullable=True),
+    )
+    # Restore end_dt = start_dt + duration_minutes minutes for rows that
+    # had a duration. NULL duration → NULL end_dt (point event).
+    op.execute(
+        """
+        UPDATE events
+        SET end_dt = start_dt + (duration_minutes || ' minutes')::interval
+        WHERE duration_minutes IS NOT NULL
+        """
+    )
+    op.drop_constraint("events_duration_minutes_non_negative", "events")
+    op.drop_column("events", "duration_minutes")

alembic/versions/0044_add_note_description_and_consolidated_at.py

@@ -0,0 +1,48 @@
+"""add note.description and note.consolidated_at
+
+Revision ID: 0044
+Revises: 0043
+Create Date: 2026-05-13
+
+Adds two columns to the ``notes`` table to support the task-as-durable-record
+design (spec 2026-05-13):
+
+- ``description``: user-stated goal / initial context. Meaningful when
+  ``is_task=true``; left NULL on knowledge notes.
+- ``consolidated_at``: timestamp of the most recent auto-summary pass. NULL
+  until the first consolidation runs.
+
+Backfill: for existing tasks we copy ``body`` into ``description`` so the
+user's original goal text is preserved when ``body`` is later overwritten by
+the auto-summary pipeline. The brief duplication window between
+``body`` and ``description`` is harmless and resolves on the first
+consolidation pass.
+"""
+from alembic import op
+import sqlalchemy as sa
+
+
+revision = "0044"
+down_revision = "0043"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.add_column("notes", sa.Column("description", sa.Text(), nullable=True))
+    op.add_column(
+        "notes",
+        sa.Column("consolidated_at", sa.DateTime(timezone=True), nullable=True),
+    )
+    # is_task is a Python property (status IS NOT NULL); there's no DB column
+    # of that name. Backfill description from body for everything that
+    # qualifies as a task at the model layer.
+    op.execute(
+        "UPDATE notes SET description = body "
+        "WHERE status IS NOT NULL AND body IS NOT NULL"
+    )
+
+
+def downgrade() -> None:
+    op.drop_column("notes", "consolidated_at")
+    op.drop_column("notes", "description")

alembic/versions/0045_add_note_version_pin_columns.py

@@ -0,0 +1,35 @@
+"""add pin_kind and pin_label to note_versions
+
+Revision ID: 0045
+Revises: 0044
+Create Date: 2026-05-13
+
+Two additive columns on note_versions to support tiered retention:
+
+- pin_kind: NULL (rolling autosave), 'auto' (system-declared via stability
+  scan), 'manual' (user-declared with optional commit-note label).
+- pin_label: NULL for rolling. Auto-generated for 'auto'; user-supplied
+  for 'manual' (may be NULL).
+
+No backfill — every existing row stays rolling. The auto-pin scan
+(services/version_pinning_scheduler.py, daily 03:00 UTC) will catch up on
+the first scheduled run after deploy.
+"""
+from alembic import op
+import sqlalchemy as sa
+
+
+revision = "0045"
+down_revision = "0044"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.add_column("note_versions", sa.Column("pin_kind", sa.Text(), nullable=True))
+    op.add_column("note_versions", sa.Column("pin_label", sa.Text(), nullable=True))
+
+
+def downgrade() -> None:
+    op.drop_column("note_versions", "pin_label")
+    op.drop_column("note_versions", "pin_kind")

alembic/versions/0046_add_generation_tool_log.py

@@ -0,0 +1,103 @@
+"""generation_tool_log: per-turn tool-call telemetry
+
+Revision ID: 0046
+Revises: 0045
+Create Date: 2026-05-21
+
+Captures one row per assistant turn, recording which tools the model
+could have used, which it attempted, which fired successfully, and
+which failed (with error details). The empirical surface for
+evaluating model swaps and answering "does model X actually fire
+record_moment when it should?" without relying on anecdote.
+"""
+from alembic import op
+import sqlalchemy as sa
+from sqlalchemy.dialects.postgresql import ARRAY, JSONB
+
+
+revision = "0046"
+down_revision = "0045"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.create_table(
+        "generation_tool_log",
+        sa.Column("id", sa.Integer, primary_key=True),
+        sa.Column(
+            "user_id",
+            sa.Integer,
+            sa.ForeignKey("users.id", ondelete="CASCADE"),
+            nullable=False,
+        ),
+        sa.Column(
+            "conv_id",
+            sa.Integer,
+            sa.ForeignKey("conversations.id", ondelete="CASCADE"),
+            nullable=False,
+        ),
+        # SET NULL (not CASCADE) so the telemetry row survives if the
+        # underlying assistant message is later deleted — we want to keep
+        # the per-turn outcome record for retrospective analysis.
+        sa.Column(
+            "assistant_message_id",
+            sa.Integer,
+            sa.ForeignKey("messages.id", ondelete="SET NULL"),
+            nullable=True,
+        ),
+        sa.Column("model", sa.Text, nullable=False),
+        sa.Column("think_enabled", sa.Boolean, nullable=False),
+        sa.Column(
+            "tools_available",
+            ARRAY(sa.Text),
+            nullable=False,
+            server_default=sa.text("'{}'::text[]"),
+        ),
+        sa.Column(
+            "tools_attempted",
+            ARRAY(sa.Text),
+            nullable=False,
+            server_default=sa.text("'{}'::text[]"),
+        ),
+        sa.Column(
+            "tools_succeeded",
+            ARRAY(sa.Text),
+            nullable=False,
+            server_default=sa.text("'{}'::text[]"),
+        ),
+        # JSONB array of {name, error} objects so failed-tool details are
+        # queryable without a separate failure table.
+        sa.Column(
+            "tools_failed",
+            JSONB,
+            nullable=False,
+            server_default=sa.text("'[]'::jsonb"),
+        ),
+        sa.Column(
+            "created_at",
+            sa.DateTime(timezone=True),
+            nullable=False,
+            server_default=sa.text("now()"),
+        ),
+    )
+    # Common query: "recent tool outcomes for this user, filterable by model."
+    op.create_index(
+        "ix_generation_tool_log_user_created",
+        "generation_tool_log",
+        ["user_id", sa.text("created_at DESC")],
+    )
+    # Per-conversation lookup for the journal page's own retrospection.
+    op.create_index(
+        "ix_generation_tool_log_conv",
+        "generation_tool_log",
+        ["conv_id"],
+    )
+
+
+def downgrade() -> None:
+    op.drop_index("ix_generation_tool_log_conv", table_name="generation_tool_log")
+    op.drop_index(
+        "ix_generation_tool_log_user_created", table_name="generation_tool_log"
+    )
+    op.drop_table("generation_tool_log")

alembic/versions/0047_reset_voice_tts_settings.py

@@ -0,0 +1,38 @@
+"""reset voice_tts_voice and voice_tts_blend settings for piper migration
+
+Revision ID: 0047
+Revises: 0046
+Create Date: 2026-05-22
+
+The TTS backend swapped from kokoro to piper. Kokoro voice IDs
+(`af_heart`, `am_adam`, etc.) don't map to piper voice files
+(`en_US-amy-medium`, etc.) and there's no sensible auto-translation.
+Clear the stored voice selection so every user falls back to the piper
+default the next time they synthesize.
+
+`voice_tts_blend` goes away entirely — piper has no voice-blending
+equivalent. The TTS service accepts the field for backward compat but
+ignores it; clearing the rows makes the DB match reality.
+
+Both settings re-default cleanly on read, so this migration just deletes
+the rows without backfilling anything.
+"""
+from alembic import op
+
+
+revision = "0047"
+down_revision = "0046"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.execute(
+        "DELETE FROM settings WHERE key IN ('voice_tts_voice', 'voice_tts_blend')"
+    )
+
+
+def downgrade() -> None:
+    # No-op. The deleted settings just re-default on read; restoring the
+    # kokoro IDs wouldn't help anyway since kokoro is gone.
+    pass

alembic/versions/0048_conversation_last_curator_run.py

@@ -0,0 +1,47 @@
+"""conversations.last_curator_run_at — tracks scheduler progress per-conversation
+
+Revision ID: 0048
+Revises: 0047
+Create Date: 2026-05-22
+
+Phase 2 of the conversation+curator architecture (Fable #172). The
+scheduler runs every 15 minutes and processes any journal conversation
+with messages newer than its `last_curator_run_at` timestamp. NULL
+means "never run; process all of today on first sweep."
+"""
+from alembic import op
+import sqlalchemy as sa
+
+
+revision = "0048"
+down_revision = "0047"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.add_column(
+        "conversations",
+        sa.Column(
+            "last_curator_run_at",
+            sa.DateTime(timezone=True),
+            nullable=True,
+        ),
+    )
+    # Indexed because the scheduler's selection query is
+    # WHERE conversation_type='journal' AND (last_curator_run_at IS NULL OR ...)
+    # which benefits from a partial index narrowed to journal rows.
+    op.create_index(
+        "ix_conversations_journal_last_curator",
+        "conversations",
+        ["last_curator_run_at"],
+        postgresql_where=sa.text("conversation_type = 'journal'"),
+    )
+
+
+def downgrade() -> None:
+    op.drop_index(
+        "ix_conversations_journal_last_curator",
+        table_name="conversations",
+    )
+    op.drop_column("conversations", "last_curator_run_at")

alembic/versions/0049_conversation_curator_summary.py

@@ -0,0 +1,36 @@
+"""conversations.curator_summary — feeds curator output back to the chat model
+
+Revision ID: 0049
+Revises: 0048
+Create Date: 2026-05-22
+
+Phase 3 of the conversation+curator architecture (Fable #172). The
+curator's final summary line (≤ 240 chars) is persisted here so the
+NEXT chat turn can include it in the system prompt. This is the
+feedback loop that closes the architecture — without it, the chat
+model has no awareness of what the curator extracted, and conversations
+risk circling back to topics already captured.
+
+NULL means "no curator pass has produced a summary yet." The chat
+pipeline reads this column when building the journal system prompt;
+missing column = no injection, no failure.
+"""
+from alembic import op
+import sqlalchemy as sa
+
+
+revision = "0049"
+down_revision = "0048"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.add_column(
+        "conversations",
+        sa.Column("curator_summary", sa.Text, nullable=True),
+    )
+
+
+def downgrade() -> None:
+    op.drop_column("conversations", "curator_summary")

alembic/versions/0050_drop_think_enabled_setting.py

@@ -0,0 +1,27 @@
+"""drop stored think_enabled rows — setting was removed
+
+Revision ID: 0050
+Revises: 0049
+Create Date: 2026-05-23
+
+The `think_enabled` user setting was retired with the chat+curator
+architecture: chat has tools=[] and curator hardcodes think=False, so
+the toggle was dead weight. Any rows already in `settings` for that
+key are now unread by the app; this migration clears them.
+"""
+from alembic import op
+
+
+revision = "0050"
+down_revision = "0049"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.execute("DELETE FROM settings WHERE key = 'think_enabled'")
+
+
+def downgrade() -> None:
+    # No-op. The setting is dead; restoring NULL rows wouldn't help.
+    pass

alembic/versions/0051_pending_curator_actions.py

@@ -0,0 +1,98 @@
+"""pending_curator_actions — curator-proposed mutations awaiting user approval
+
+Revision ID: 0051
+Revises: 0050
+Create Date: 2026-05-23
+
+Architecture: the curator runs unattended and can be confidently wrong.
+Additive operations (create_*, record_moment, log_work, save_person)
+land directly because adds are easily undone. Mutating operations
+(update_*, delete_*) are proposed to this table instead — the user
+sees them in a "Needs Review" panel and approves or rejects each one.
+
+A proposed action stores:
+  - The action type (`update_task`, `delete_note`, etc.) — drives which
+    handler gets re-executed on approval.
+  - The target id + type for display ("update task 42", "delete note 17").
+  - The proposed arguments (`payload`) — what the curator wanted to do.
+  - A snapshot of the target's state at proposal time (`current_snapshot`)
+    — so the review UI can render a real before/after diff even if other
+    work modified the entity since.
+  - The status (`pending` / `approved` / `rejected`) and review timestamp.
+
+Approval replays the original tool call via execute_tool with
+authority="user" so the request bypasses the curator interceptor and
+just runs.
+"""
+from alembic import op
+import sqlalchemy as sa
+from sqlalchemy.dialects.postgresql import JSONB
+
+
+revision = "0051"
+down_revision = "0050"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.create_table(
+        "pending_curator_actions",
+        sa.Column("id", sa.Integer, primary_key=True),
+        sa.Column(
+            "user_id",
+            sa.Integer,
+            sa.ForeignKey("users.id", ondelete="CASCADE"),
+            nullable=False,
+        ),
+        sa.Column(
+            "conv_id",
+            sa.Integer,
+            sa.ForeignKey("conversations.id", ondelete="SET NULL"),
+            nullable=True,
+        ),
+        sa.Column("action_type", sa.Text, nullable=False),
+        sa.Column("target_type", sa.Text, nullable=True),
+        sa.Column("target_id", sa.Integer, nullable=True),
+        sa.Column("target_label", sa.Text, nullable=True),
+        sa.Column("payload", JSONB, nullable=False, server_default=sa.text("'{}'::jsonb")),
+        sa.Column(
+            "current_snapshot",
+            JSONB,
+            nullable=False,
+            server_default=sa.text("'{}'::jsonb"),
+        ),
+        sa.Column(
+            "status",
+            sa.Text,
+            nullable=False,
+            server_default=sa.text("'pending'"),
+        ),
+        sa.Column(
+            "created_at",
+            sa.DateTime(timezone=True),
+            nullable=False,
+            server_default=sa.text("now()"),
+        ),
+        sa.Column("reviewed_at", sa.DateTime(timezone=True), nullable=True),
+        sa.CheckConstraint(
+            "status IN ('pending', 'approved', 'rejected')",
+            name="pending_curator_actions_status_check",
+        ),
+    )
+    # Pending-only index — the Needs Review panel fetches "user's pending"
+    # constantly, history rows just accumulate.
+    op.create_index(
+        "ix_pending_curator_actions_user_pending",
+        "pending_curator_actions",
+        ["user_id", sa.text("created_at DESC")],
+        postgresql_where=sa.text("status = 'pending'"),
+    )
+
+
+def downgrade() -> None:
+    op.drop_index(
+        "ix_pending_curator_actions_user_pending",
+        table_name="pending_curator_actions",
+    )
+    op.drop_table("pending_curator_actions")

alembic/versions/0052_clear_note_embeddings_for_fastembed.py

@@ -0,0 +1,33 @@
+"""clear note_embeddings for fastembed swap
+
+Revision ID: 0052
+Revises: 0051
+Create Date: 2026-05-26
+
+Embeddings stored in `note_embeddings.embedding` (JSONB) were generated by
+Ollama's nomic-embed-text model (768-dim). The fastembed swap uses
+BAAI/bge-small-en-v1.5 (384-dim). Mixed-dim vectors would break the
+Python-side cosine similarity (length mismatch), so we wipe the table.
+
+The startup hook `services.embeddings.backfill_note_embeddings` regenerates
+everything at the new dimension on next boot. There's no column-type change
+because the column is JSONB — dimensionless on the storage side.
+
+Downgrade is the same operation: a fresh deployment of the prior code would
+backfill with the old model. No data is lost that the next boot won't restore.
+"""
+from alembic import op
+
+
+revision = "0052"
+down_revision = "0051"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.execute("DELETE FROM note_embeddings")
+
+
+def downgrade() -> None:
+    op.execute("DELETE FROM note_embeddings")

alembic/versions/0053_drop_chat_journal_push_curator_tables.py

@@ -0,0 +1,82 @@
+"""drop chat / journal / push / curator / weather tables
+
+Revision ID: 0053
+Revises: 0052
+Create Date: 2026-05-27
+
+Phase 9 of the MCP-first pivot. The Python models for these tables were
+deleted in Phase 8 (commit 91bafb6); this migration drops the orphan
+SQL tables and cleans up dead per-user setting rows.
+
+Hard-cutover: existing rows in these tables are discarded. The
+accompanying spec at docs/superpowers/specs/2026-05-26-mcp-first-pivot-design.md
+explicitly accepted this loss.
+"""
+from alembic import op
+
+
+revision = "0053"
+down_revision = "0052"
+branch_labels = None
+depends_on = None
+
+
+# Order: junction tables first so the parent tables don't trip FK drops
+# even with CASCADE — keeps the migration readable.
+_DEAD_TABLES = [
+    # Moments + junction tables (journal entity links)
+    "moment_notes",
+    "moment_tasks",
+    "moment_places",
+    "moment_people",
+    "moment_embeddings",
+    "moments",
+    # Chat / generation telemetry
+    "generation_tool_log",
+    "messages",
+    "conversations",
+    # Curator approval queue
+    "pending_curator_actions",
+    # Push notifications
+    "push_subscriptions",
+    # Weather cache (journal-prep background fetcher)
+    "weather_cache",
+    # Legacy RSS-item embeddings (pre-MCP pivot, briefly experimented with)
+    "rss_item_embeddings",
+]
+
+
+# Specific setting keys to drop. Anything matching the LIKE patterns in
+# upgrade() is also nuked; the explicit list catches one-off keys that
+# don't fit the namespaced patterns.
+_DEAD_SETTING_KEYS = [
+    "default_model",
+    "background_model",
+    "assistant_name",
+    "auto_consolidate_tasks",
+    "chat_retention_days",
+    "think_enabled",
+    "rag_default_scope",
+]
+
+
+def upgrade() -> None:
+    for table in _DEAD_TABLES:
+        op.execute(f"DROP TABLE IF EXISTS {table} CASCADE")
+
+    keys_csv = ",".join(f"'{k}'" for k in _DEAD_SETTING_KEYS)
+    op.execute(
+        "DELETE FROM settings WHERE "
+        "key LIKE 'voice_%' OR "
+        "key LIKE 'journal_%' OR "
+        "key LIKE 'briefing_%' OR "
+        "key LIKE 'curator_%' OR "
+        f"key IN ({keys_csv})"
+    )
+
+
+def downgrade() -> None:
+    raise NotImplementedError(
+        "No downgrade — hard cutover per the MCP-first pivot spec. "
+        "Rolling back is not supported at the database layer."
+    )

alembic/versions/0054_drop_image_cache.py

@@ -0,0 +1,26 @@
+"""drop image_cache table
+
+Revision ID: 0054
+Revises: 0053
+Create Date: 2026-05-27
+
+The image cache was wired into the LLM image-search tool (removed in Phase 8).
+With no producer or consumer left, the table is dropped here.
+"""
+from alembic import op
+
+
+revision = "0054"
+down_revision = "0053"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.execute("DROP TABLE IF EXISTS image_cache CASCADE")
+
+
+def downgrade() -> None:
+    raise NotImplementedError(
+        "No downgrade — hard cutover per the MCP-first pivot spec."
+    )

alembic/versions/0055_rulebook_tables.py

@@ -0,0 +1,153 @@
+"""rulebook tables: rulebooks, rulebook_topics, rules, project_rulebook_subscriptions
+
+Revision ID: 0055
+Revises: 0054
+Create Date: 2026-05-27
+
+Adds the Scribe Rulebook hierarchy as a fourth top-level entity, sibling
+to Project. Rules carry a structural (statement, why, how_to_apply)
+triple. Projects subscribe to Rulebooks (many-to-many). See the design
+doc at docs/superpowers/specs/2026-05-27-scribe-rulebook-design.md.
+"""
+from alembic import op
+import sqlalchemy as sa
+
+
+revision = "0055"
+down_revision = "0054"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.create_table(
+        "rulebooks",
+        sa.Column("id", sa.BigInteger, primary_key=True),
+        sa.Column(
+            "owner_user_id",
+            sa.BigInteger,
+            sa.ForeignKey("users.id", ondelete="CASCADE"),
+            nullable=False,
+        ),
+        sa.Column("title", sa.Text, nullable=False),
+        sa.Column("description", sa.Text),
+        sa.Column(
+            "created_at",
+            sa.DateTime(timezone=True),
+            nullable=False,
+            server_default=sa.text("now()"),
+        ),
+        sa.Column(
+            "updated_at",
+            sa.DateTime(timezone=True),
+            nullable=False,
+            server_default=sa.text("now()"),
+        ),
+    )
+    op.create_index("ix_rulebooks_owner", "rulebooks", ["owner_user_id"])
+
+    op.create_table(
+        "rulebook_topics",
+        sa.Column("id", sa.BigInteger, primary_key=True),
+        sa.Column(
+            "rulebook_id",
+            sa.BigInteger,
+            sa.ForeignKey("rulebooks.id", ondelete="CASCADE"),
+            nullable=False,
+        ),
+        sa.Column("title", sa.Text, nullable=False),
+        sa.Column("description", sa.Text),
+        sa.Column(
+            "order_index", sa.Integer, nullable=False, server_default="0",
+        ),
+        sa.Column(
+            "created_at",
+            sa.DateTime(timezone=True),
+            nullable=False,
+            server_default=sa.text("now()"),
+        ),
+        sa.Column(
+            "updated_at",
+            sa.DateTime(timezone=True),
+            nullable=False,
+            server_default=sa.text("now()"),
+        ),
+        sa.UniqueConstraint("rulebook_id", "title", name="uq_topic_per_rulebook"),
+    )
+    op.create_index(
+        "ix_rulebook_topics_rulebook", "rulebook_topics", ["rulebook_id"],
+    )
+
+    op.create_table(
+        "rules",
+        sa.Column("id", sa.BigInteger, primary_key=True),
+        sa.Column(
+            "topic_id",
+            sa.BigInteger,
+            sa.ForeignKey("rulebook_topics.id", ondelete="CASCADE"),
+            nullable=False,
+        ),
+        sa.Column("title", sa.Text, nullable=False),
+        sa.Column("statement", sa.Text, nullable=False),
+        sa.Column("why", sa.Text),
+        sa.Column("how_to_apply", sa.Text),
+        sa.Column(
+            "order_index", sa.Integer, nullable=False, server_default="0",
+        ),
+        sa.Column(
+            "created_at",
+            sa.DateTime(timezone=True),
+            nullable=False,
+            server_default=sa.text("now()"),
+        ),
+        sa.Column(
+            "updated_at",
+            sa.DateTime(timezone=True),
+            nullable=False,
+            server_default=sa.text("now()"),
+        ),
+        sa.UniqueConstraint("topic_id", "title", name="uq_rule_per_topic"),
+    )
+    op.create_index("ix_rules_topic", "rules", ["topic_id"])
+
+    op.create_table(
+        "project_rulebook_subscriptions",
+        sa.Column(
+            "project_id",
+            sa.BigInteger,
+            sa.ForeignKey("projects.id", ondelete="CASCADE"),
+            nullable=False,
+        ),
+        sa.Column(
+            "rulebook_id",
+            sa.BigInteger,
+            sa.ForeignKey("rulebooks.id", ondelete="CASCADE"),
+            nullable=False,
+        ),
+        sa.Column(
+            "created_at",
+            sa.DateTime(timezone=True),
+            nullable=False,
+            server_default=sa.text("now()"),
+        ),
+        sa.PrimaryKeyConstraint("project_id", "rulebook_id"),
+    )
+    op.create_index(
+        "ix_project_rulebook_subs_rulebook",
+        "project_rulebook_subscriptions",
+        ["rulebook_id"],
+    )
+
+
+def downgrade() -> None:
+    op.drop_index(
+        "ix_project_rulebook_subs_rulebook",
+        table_name="project_rulebook_subscriptions",
+    )
+    op.drop_table("project_rulebook_subscriptions")
+    op.drop_index("ix_rules_topic", table_name="rules")
+    op.drop_table("rules")
+    op.drop_index("ix_rulebook_topics_rulebook", table_name="rulebook_topics")
+    op.drop_table("rulebook_topics")
+    op.drop_index("ix_rulebooks_owner", table_name="rulebooks")
+    op.drop_table("rulebooks")

alembic/versions/0056_task_kind.py

@@ -0,0 +1,35 @@
+"""task_kind column on notes: distinguishes plan-tasks from work-tasks
+
+Revision ID: 0056
+Revises: 0055
+Create Date: 2026-05-28
+
+A plan is a Task (a note with non-null status) marked task_kind='plan'.
+The CHECK constraint lands in the same migration as the value set, per the
+'new CHECK-enum values need a same-change migration' rule.
+"""
+from alembic import op
+import sqlalchemy as sa
+
+
+revision = "0056"
+down_revision = "0055"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.add_column(
+        "notes",
+        sa.Column(
+            "task_kind", sa.Text(), nullable=False, server_default="work",
+        ),
+    )
+    op.create_check_constraint(
+        "notes_task_kind_check", "notes", "task_kind IN ('work','plan')",
+    )
+
+
+def downgrade() -> None:
+    op.drop_constraint("notes_task_kind_check", "notes", type_="check")
+    op.drop_column("notes", "task_kind")

alembic/versions/0057_soft_delete.py

@@ -0,0 +1,38 @@
+"""soft-delete: deleted_at + deleted_batch_id on 7 tables
+
+Revision ID: 0057
+Revises: 0056
+Create Date: 2026-05-28
+
+Recoverable deletes: each soft-deletable table gains a nullable deleted_at
+timestamp (NULL = live) and a deleted_batch_id (text UUID) stamped per delete
+operation so a cascaded delete restores as a unit. A daily cron purges rows
+past the retention window.
+"""
+from alembic import op
+import sqlalchemy as sa
+
+
+revision = "0057"
+down_revision = "0056"
+branch_labels = None
+depends_on = None
+
+_TABLES = (
+    "notes", "events", "projects", "milestones",
+    "rulebooks", "rulebook_topics", "rules",
+)
+
+
+def upgrade() -> None:
+    for t in _TABLES:
+        op.add_column(t, sa.Column("deleted_at", sa.DateTime(timezone=True), nullable=True))
+        op.add_column(t, sa.Column("deleted_batch_id", sa.Text(), nullable=True))
+        op.create_index(f"ix_{t}_deleted_at", t, ["deleted_at"])
+
+
+def downgrade() -> None:
+    for t in reversed(_TABLES):
+        op.drop_index(f"ix_{t}_deleted_at", table_name=t)
+        op.drop_column(t, "deleted_batch_id")
+        op.drop_column(t, "deleted_at")

alembic/versions/0058_rulebook_always_on.py

@@ -0,0 +1,39 @@
+"""rulebook always_on flag
+
+Revision ID: 0058
+Revises: 0057
+Create Date: 2026-06-01
+
+Adds a boolean `always_on` to the `rulebooks` table. Rules from rulebooks
+flagged always_on are loaded at session start by the new
+`list_always_on_rules` MCP tool — they apply regardless of which project
+(if any) is in scope. Seeds the FabledSword family rulebook to always_on
+because that's the cross-project standards rulebook by design.
+"""
+from alembic import op
+import sqlalchemy as sa
+
+
+revision = "0058"
+down_revision = "0057"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.add_column(
+        "rulebooks",
+        sa.Column(
+            "always_on",
+            sa.Boolean(),
+            nullable=False,
+            server_default=sa.text("false"),
+        ),
+    )
+    op.execute(
+        "UPDATE rulebooks SET always_on = TRUE WHERE title = 'FabledSword family'"
+    )
+
+
+def downgrade() -> None:
+    op.drop_column("rulebooks", "always_on")

alembic/versions/0059_rule_project_scope.py

@@ -0,0 +1,49 @@
+"""project-scoped rules
+
+Revision ID: 0059
+Revises: 0058
+Create Date: 2026-06-01
+
+Rules can now belong to either a rulebook topic (cross-project standard) or
+a single project (project-scoped). Adds `rules.project_id`, makes `topic_id`
+nullable, and adds a CHECK constraint enforcing exactly-one. The previous
+unique constraint on (topic_id, title) still applies because PostgreSQL
+treats NULL as distinct — two project-scoped rules with the same title and
+NULL topic_id remain unique.
+"""
+from alembic import op
+import sqlalchemy as sa
+
+
+revision = "0059"
+down_revision = "0058"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.add_column(
+        "rules",
+        sa.Column(
+            "project_id",
+            sa.BigInteger(),
+            sa.ForeignKey("projects.id", ondelete="CASCADE"),
+            nullable=True,
+        ),
+    )
+    op.alter_column("rules", "topic_id", nullable=True)
+    op.create_index("ix_rules_project_id", "rules", ["project_id"])
+    op.create_check_constraint(
+        "ck_rule_topic_xor_project",
+        "rules",
+        "(topic_id IS NULL) <> (project_id IS NULL)",
+    )
+
+
+def downgrade() -> None:
+    op.drop_constraint("ck_rule_topic_xor_project", "rules", type_="check")
+    op.drop_index("ix_rules_project_id", table_name="rules")
+    # Any rule with NULL topic_id will block re-tightening. Operator must
+    # migrate or delete project-scoped rules before downgrading.
+    op.alter_column("rules", "topic_id", nullable=False)
+    op.drop_column("rules", "project_id")

alembic/versions/0060_project_rule_suppressions.py

@@ -0,0 +1,73 @@
+"""project rule + topic suppressions
+
+Revision ID: 0060
+Revises: 0059
+Create Date: 2026-06-01
+
+Lets a project mute specific rules or whole topics from rulebooks it
+subscribes to, without unsubscribing the rulebook. Two pure many-to-many
+association tables; FKs CASCADE so removing a project / rule / topic
+cleans the suppression rows automatically.
+"""
+from alembic import op
+import sqlalchemy as sa
+
+
+revision = "0060"
+down_revision = "0059"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.create_table(
+        "project_rule_suppressions",
+        sa.Column(
+            "project_id",
+            sa.BigInteger(),
+            sa.ForeignKey("projects.id", ondelete="CASCADE"),
+            primary_key=True,
+            nullable=False,
+        ),
+        sa.Column(
+            "rule_id",
+            sa.BigInteger(),
+            sa.ForeignKey("rules.id", ondelete="CASCADE"),
+            primary_key=True,
+            nullable=False,
+        ),
+        sa.Column(
+            "created_at",
+            sa.DateTime(timezone=True),
+            server_default=sa.text("now()"),
+            nullable=False,
+        ),
+    )
+    op.create_table(
+        "project_topic_suppressions",
+        sa.Column(
+            "project_id",
+            sa.BigInteger(),
+            sa.ForeignKey("projects.id", ondelete="CASCADE"),
+            primary_key=True,
+            nullable=False,
+        ),
+        sa.Column(
+            "topic_id",
+            sa.BigInteger(),
+            sa.ForeignKey("rulebook_topics.id", ondelete="CASCADE"),
+            primary_key=True,
+            nullable=False,
+        ),
+        sa.Column(
+            "created_at",
+            sa.DateTime(timezone=True),
+            server_default=sa.text("now()"),
+            nullable=False,
+        ),
+    )
+
+
+def downgrade() -> None:
+    op.drop_table("project_topic_suppressions")
+    op.drop_table("project_rule_suppressions")

alembic/versions/0061_partial_unique_topic_rule_titles.py

@@ -0,0 +1,49 @@
+"""partial-unique topic/rule titles (ignore soft-deleted rows)
+
+Revision ID: 0061
+Revises: 0060
+Create Date: 2026-06-02
+
+Topics and rules are soft-deleted (SoftDeleteMixin), but uq_topic_per_rulebook
+and uq_rule_per_topic were plain UNIQUE constraints. Trashing a topic/rule
+named "X" then creating a new "X" — or restoring into a reused title slot —
+collided with the dead row and raised an unhandled 500. Replace the full
+UNIQUE constraints with partial unique indexes that only consider live
+(deleted_at IS NULL) rows.
+"""
+from alembic import op
+import sqlalchemy as sa
+
+
+revision = "0061"
+down_revision = "0060"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.drop_constraint("uq_topic_per_rulebook", "rulebook_topics", type_="unique")
+    op.create_index(
+        "uq_topic_per_rulebook",
+        "rulebook_topics",
+        ["rulebook_id", "title"],
+        unique=True,
+        postgresql_where=sa.text("deleted_at IS NULL"),
+    )
+    op.drop_constraint("uq_rule_per_topic", "rules", type_="unique")
+    op.create_index(
+        "uq_rule_per_topic",
+        "rules",
+        ["topic_id", "title"],
+        unique=True,
+        postgresql_where=sa.text("deleted_at IS NULL"),
+    )
+
+
+def downgrade() -> None:
+    op.drop_index("uq_rule_per_topic", table_name="rules")
+    op.create_unique_constraint("uq_rule_per_topic", "rules", ["topic_id", "title"])
+    op.drop_index("uq_topic_per_rulebook", table_name="rulebook_topics")
+    op.create_unique_constraint(
+        "uq_topic_per_rulebook", "rulebook_topics", ["rulebook_id", "title"]
+    )

alembic/versions/0062_drop_userprofile_curator_columns.py

@@ -0,0 +1,41 @@
+"""drop dead UserProfile curator columns
+
+Revision ID: 0062
+Revises: 0061
+Create Date: 2026-06-02
+
+learned_summary, observations_raw, and observations_updated_at were written by
+the curator/LLM-profile machinery removed in the Phase-8 MCP pivot. Nothing has
+populated them since; the profile API returned permanently-empty fields. Drop
+the columns.
+"""
+from alembic import op
+import sqlalchemy as sa
+from sqlalchemy.dialects import postgresql
+
+
+revision = "0062"
+down_revision = "0061"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.drop_column("user_profiles", "learned_summary")
+    op.drop_column("user_profiles", "observations_raw")
+    op.drop_column("user_profiles", "observations_updated_at")
+
+
+def downgrade() -> None:
+    op.add_column(
+        "user_profiles",
+        sa.Column("observations_updated_at", sa.DateTime(timezone=True), nullable=True),
+    )
+    op.add_column(
+        "user_profiles",
+        sa.Column("observations_raw", postgresql.JSONB(), nullable=True),
+    )
+    op.add_column(
+        "user_profiles",
+        sa.Column("learned_summary", sa.Text(), nullable=True),
+    )

alembic/versions/0063_drop_project_auto_summary.py

@@ -0,0 +1,34 @@
+"""drop dead Project.auto_summary columns
+
+Revision ID: 0063
+Revises: 0062
+Create Date: 2026-06-03
+
+auto_summary + summary_updated_at were written by generate_project_summary
+(Ollama), removed in the MCP pivot. Nothing has populated them since; the
+field was stale-or-NULL. Drop the columns.
+"""
+from alembic import op
+import sqlalchemy as sa
+
+
+revision = "0063"
+down_revision = "0062"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.drop_column("projects", "auto_summary")
+    op.drop_column("projects", "summary_updated_at")
+
+
+def downgrade() -> None:
+    op.add_column(
+        "projects",
+        sa.Column("summary_updated_at", sa.DateTime(timezone=True), nullable=True),
+    )
+    op.add_column(
+        "projects",
+        sa.Column("auto_summary", sa.Text(), nullable=True),
+    )

alembic/versions/0064_repo_bindings.py

@@ -0,0 +1,58 @@
+"""repo -> project bindings
+
+Revision ID: 0064
+Revises: 0063
+Create Date: 2026-06-10
+
+Maps a git repository (by its normalized remote, `repo_key`) to the Scribe
+project it represents, so the SessionStart hook can resolve the active project
+from the working repo instead of a project id pinned in plugin config. FKs
+CASCADE so deleting a user or project removes the stale binding automatically.
+"""
+from alembic import op
+import sqlalchemy as sa
+
+
+revision = "0064"
+down_revision = "0063"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.create_table(
+        "repo_bindings",
+        sa.Column("id", sa.BigInteger(), primary_key=True, autoincrement=True),
+        sa.Column(
+            "user_id",
+            sa.BigInteger(),
+            sa.ForeignKey("users.id", ondelete="CASCADE"),
+            nullable=False,
+        ),
+        sa.Column(
+            "project_id",
+            sa.BigInteger(),
+            sa.ForeignKey("projects.id", ondelete="CASCADE"),
+            nullable=False,
+        ),
+        sa.Column("repo_key", sa.Text(), nullable=False),
+        sa.Column(
+            "created_at",
+            sa.DateTime(timezone=True),
+            server_default=sa.text("now()"),
+            nullable=False,
+        ),
+        sa.Column(
+            "updated_at",
+            sa.DateTime(timezone=True),
+            server_default=sa.text("now()"),
+            nullable=False,
+        ),
+        sa.UniqueConstraint("user_id", "repo_key", name="uq_repo_bindings_user_repo"),
+    )
+    op.create_index("ix_repo_bindings_user_id", "repo_bindings", ["user_id"])
+
+
+def downgrade() -> None:
+    op.drop_index("ix_repo_bindings_user_id", table_name="repo_bindings")
+    op.drop_table("repo_bindings")

alembic/versions/0065_issues_and_systems.py

@@ -0,0 +1,103 @@
+"""issues + systems: task_kind=issue, systems, record_systems, arose_from_id
+
+Revision ID: 0065
+Revises: 0064
+Create Date: 2026-06-14
+
+Adds the corrective-work 'issue' task_kind (same-change CHECK expand per the
+'new CHECK-enum values need a same-change migration' rule), a per-project
+self-describing System entity, a many-to-many record<->system join (any
+note/task/issue), and an issue->originating-task provenance FK.
+"""
+from alembic import op
+import sqlalchemy as sa
+
+
+revision = "0065"
+down_revision = "0064"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    # 1. task_kind gains 'issue' (corrective work). DROP+ADD the CHECK in the
+    #    same change that introduces the value.
+    op.drop_constraint("notes_task_kind_check", "notes", type_="check")
+    op.create_check_constraint(
+        "notes_task_kind_check", "notes", "task_kind IN ('work','plan','issue')",
+    )
+
+    # 2. Provenance: an issue can point back at the task/feature it arose from.
+    #    Distinct from parent_id (sub-task hierarchy).
+    op.add_column("notes", sa.Column("arose_from_id", sa.Integer(), nullable=True))
+    op.create_foreign_key(
+        "fk_notes_arose_from_id", "notes", "notes",
+        ["arose_from_id"], ["id"], ondelete="SET NULL",
+    )
+    op.create_index("ix_notes_arose_from_id", "notes", ["arose_from_id"])
+
+    # 3. systems: per-project, reusable, self-describing subsystem/area.
+    op.create_table(
+        "systems",
+        sa.Column("id", sa.Integer(), primary_key=True),
+        sa.Column(
+            "user_id", sa.Integer(),
+            sa.ForeignKey("users.id", ondelete="CASCADE"), nullable=False,
+        ),
+        sa.Column(
+            "project_id", sa.Integer(),
+            sa.ForeignKey("projects.id", ondelete="CASCADE"), nullable=False,
+        ),
+        sa.Column("name", sa.Text(), nullable=False, server_default=""),
+        sa.Column("description", sa.Text(), nullable=True),
+        sa.Column("color", sa.Text(), nullable=True),
+        sa.Column("status", sa.Text(), nullable=False, server_default="active"),
+        sa.Column("order_index", sa.Integer(), nullable=False, server_default="0"),
+        sa.Column(
+            "created_at", sa.DateTime(timezone=True), nullable=False,
+            server_default=sa.text("now()"),
+        ),
+        sa.Column(
+            "updated_at", sa.DateTime(timezone=True), nullable=False,
+            server_default=sa.text("now()"),
+        ),
+        sa.Column("deleted_at", sa.DateTime(timezone=True), nullable=True),
+        sa.Column("deleted_batch_id", sa.Text(), nullable=True),
+    )
+    op.create_index("ix_systems_project_id", "systems", ["project_id"])
+    op.create_check_constraint(
+        "systems_status_check", "systems", "status IN ('active','archived')",
+    )
+
+    # 4. record_systems: M2M join — any note/task/issue <-> system.
+    op.create_table(
+        "record_systems",
+        sa.Column("id", sa.Integer(), primary_key=True),
+        sa.Column(
+            "note_id", sa.Integer(),
+            sa.ForeignKey("notes.id", ondelete="CASCADE"), nullable=False,
+        ),
+        sa.Column(
+            "system_id", sa.Integer(),
+            sa.ForeignKey("systems.id", ondelete="CASCADE"), nullable=False,
+        ),
+        sa.Column(
+            "created_at", sa.DateTime(timezone=True), nullable=False,
+            server_default=sa.text("now()"),
+        ),
+        sa.UniqueConstraint("note_id", "system_id", name="uq_record_systems_note_system"),
+    )
+    op.create_index("ix_record_systems_note_id", "record_systems", ["note_id"])
+    op.create_index("ix_record_systems_system_id", "record_systems", ["system_id"])
+
+
+def downgrade() -> None:
+    op.drop_table("record_systems")
+    op.drop_table("systems")
+    op.drop_index("ix_notes_arose_from_id", table_name="notes")
+    op.drop_constraint("fk_notes_arose_from_id", "notes", type_="foreignkey")
+    op.drop_column("notes", "arose_from_id")
+    op.drop_constraint("notes_task_kind_check", "notes", type_="check")
+    op.create_check_constraint(
+        "notes_task_kind_check", "notes", "task_kind IN ('work','plan')",
+    )

alembic/versions/0066_milestone_body.py

@@ -0,0 +1,32 @@
+"""milestone-as-plan-container: milestones.body holds the plan/design
+
+Revision ID: 0066
+Revises: 0065
+Create Date: 2026-06-14
+
+T3 of plan #819. The milestone becomes the plan container: its `body` holds
+the design/intent/purpose (markdown), `description` stays the one-liner, and
+individual steps live as first-class child tasks (milestone_id) instead of
+checkboxes crammed into a kind=plan task body. start_planning is reworked to
+create a milestone instead of a kind=plan task (hard retirement going forward;
+the 'plan' task_kind enum value stays valid so the historical plan-tasks are
+left readable in place — no body-shredding backfill).
+
+Schema change is just one nullable column; no data migration.
+"""
+from alembic import op
+import sqlalchemy as sa
+
+
+revision = "0066"
+down_revision = "0065"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.add_column("milestones", sa.Column("body", sa.Text(), nullable=True))
+
+
+def downgrade() -> None:
+    op.drop_column("milestones", "body")

alembic/versions/0067_pgvector_note_embeddings.py

@@ -0,0 +1,73 @@
+"""pgvector: note_embeddings.embedding JSONB -> vector(384) + HNSW index
+
+Revision ID: 0067
+Revises: 0066
+Create Date: 2026-06-22
+
+Moves semantic search off the full-table Python cosine scan onto a native
+pgvector column so ranking + top-k run as an indexed `ORDER BY embedding <=> :q
+LIMIT k` in Postgres (see services/embeddings.semantic_search_notes).
+
+Requires a Postgres image that bundles the `vector` extension — the stack moved
+from postgres:16-alpine to pgvector/pgvector:pg16 in the same change (compose +
+CI). `CREATE EXTENSION IF NOT EXISTS vector` below is the in-db half.
+
+Embeddings are DERIVED data (regenerated from note text by
+backfill_note_embeddings at startup), so this migration is free to drop any row
+it can't cleanly convert: only rows whose stored JSONB array is exactly 384-dim
+are carried over (guarding against stale vectors from an earlier model — the
+same mixed-dim hazard _cosine_similarity defended against). Dropped rows are
+re-embedded on next boot.
+"""
+from alembic import op
+
+
+revision = "0067"
+down_revision = "0066"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.execute("CREATE EXTENSION IF NOT EXISTS vector")
+
+    # New native-vector column, populated only from cleanly-convertible rows.
+    # A JSONB array like [0.1, 0.2, ...] renders to text that is exactly
+    # pgvector's input literal, so (embedding::text)::vector is a direct cast.
+    op.execute("ALTER TABLE note_embeddings ADD COLUMN embedding_vec vector(384)")
+    op.execute(
+        """
+        UPDATE note_embeddings
+           SET embedding_vec = (embedding::text)::vector
+         WHERE jsonb_array_length(embedding) = 384
+        """
+    )
+    # Stale-dim rows (couldn't convert) are derived data — drop and let the
+    # startup backfill regenerate them at the current dimension.
+    op.execute("DELETE FROM note_embeddings WHERE embedding_vec IS NULL")
+
+    op.execute("ALTER TABLE note_embeddings ALTER COLUMN embedding_vec SET NOT NULL")
+    op.execute("ALTER TABLE note_embeddings DROP COLUMN embedding")
+    op.execute("ALTER TABLE note_embeddings RENAME COLUMN embedding_vec TO embedding")
+
+    # HNSW index for cosine distance — matches Vector.cosine_distance (`<=>`).
+    op.execute(
+        """
+        CREATE INDEX ix_note_embeddings_embedding_hnsw
+            ON note_embeddings
+         USING hnsw (embedding vector_cosine_ops)
+        """
+    )
+
+
+def downgrade() -> None:
+    # Back to JSONB. pgvector renders a vector to a text literal that is a valid
+    # JSON array, so the reverse cast is symmetric. The `vector` extension is
+    # intentionally left installed (other objects may depend on it; dropping an
+    # extension is the riskier, rarely-wanted direction).
+    op.execute("DROP INDEX IF EXISTS ix_note_embeddings_embedding_hnsw")
+    op.execute("ALTER TABLE note_embeddings ADD COLUMN embedding_json jsonb")
+    op.execute("UPDATE note_embeddings SET embedding_json = (embedding::text)::jsonb")
+    op.execute("ALTER TABLE note_embeddings ALTER COLUMN embedding_json SET NOT NULL")
+    op.execute("ALTER TABLE note_embeddings DROP COLUMN embedding")
+    op.execute("ALTER TABLE note_embeddings RENAME COLUMN embedding_json TO embedding")

alembic/versions/0068_retrieval_logs.py

@@ -0,0 +1,60 @@
+"""retrieval_logs: per-call semantic-retrieval telemetry for KB-injection tuning
+
+Revision ID: 0068
+Revises: 0067
+Create Date: 2026-06-22
+
+One row per semantic-retrieval call (MCP search tool, REST search route, and —
+once it lands — the title-first auto-inject path). Captures the effective query
+params and the score distribution of the results so the similarity threshold
+and top-k can be tuned from real usage. FK-free on user_id (mirrors app_logs):
+telemetry should outlive the row it describes.
+"""
+from alembic import op
+import sqlalchemy as sa
+from sqlalchemy.dialects.postgresql import JSONB
+
+
+revision = "0068"
+down_revision = "0067"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.create_table(
+        "retrieval_logs",
+        sa.Column("id", sa.Integer(), primary_key=True),
+        sa.Column(
+            "created_at", sa.DateTime(timezone=True), nullable=False,
+            server_default=sa.text("now()"),
+        ),
+        sa.Column("user_id", sa.Integer(), nullable=True),
+        sa.Column("source", sa.Text(), nullable=False),
+        sa.Column("query", sa.Text(), nullable=True),
+        sa.Column("threshold", sa.Float(), nullable=True),
+        sa.Column("limit_n", sa.Integer(), nullable=True),
+        sa.Column("project_id", sa.Integer(), nullable=True),
+        sa.Column("is_task", sa.Boolean(), nullable=True),
+        sa.Column("result_count", sa.Integer(), nullable=False, server_default="0"),
+        sa.Column("top_score", sa.Float(), nullable=True),
+        sa.Column("min_score", sa.Float(), nullable=True),
+        sa.Column("result_ids", JSONB(), nullable=False, server_default=sa.text("'[]'::jsonb")),
+        sa.Column("duration_ms", sa.Float(), nullable=True),
+    )
+    op.create_index("ix_retrieval_logs_created_at", "retrieval_logs", ["created_at"])
+    op.create_index("ix_retrieval_logs_user_id", "retrieval_logs", ["user_id"])
+    op.create_index("ix_retrieval_logs_source", "retrieval_logs", ["source"])
+    op.create_index(
+        "ix_retrieval_logs_source_created_at",
+        "retrieval_logs",
+        ["source", sa.text("created_at DESC")],
+    )
+
+
+def downgrade() -> None:
+    op.drop_index("ix_retrieval_logs_source_created_at", table_name="retrieval_logs")
+    op.drop_index("ix_retrieval_logs_source", table_name="retrieval_logs")
+    op.drop_index("ix_retrieval_logs_user_id", table_name="retrieval_logs")
+    op.drop_index("ix_retrieval_logs_created_at", table_name="retrieval_logs")
+    op.drop_table("retrieval_logs")

ci-requirements.md

@@ -0,0 +1,49 @@
+# CI Requirements — FabledScribe
+
+> Spec lives in [`docs/process.md`](https://git.fabledsword.com/bvandeusen/CI-runner/src/branch/main/docs/process.md)
+> in the CI-Runner repo.
+
+## Runtime image
+
+```
+git.fabledsword.com/bvandeusen/ci-python:3.14
+```
+
+Used by all four jobs in `.forgejo/workflows/ci.yml`: typecheck (Vue/TS),
+lint (ruff), test (pytest), build (docker buildx).
+
+## Image deps used
+
+- python 3.14
+- node 24 (used for `npm ci` + `vue-tsc` in the typecheck job, and as the
+  frontend builder stage inside the production `Dockerfile`)
+- ruff (lint job runs `ruff check src/` with zero install overhead)
+- docker CLI + buildx (build job pushes the production image to the
+  Forgejo registry)
+
+## Per-job tool installs
+
+Anything CI installs at job time that isn't in the image. Promotion
+candidates if more than one project needs them.
+
+- `uv` — installed inline in the test job (`curl -LsSf
+  https://astral.sh/uv/install.sh | sh`). **Temporary**: belongs in the
+  ci-python image so every consumer doesn't re-install on cold start.
+  Tracked at [CI-Runner](https://git.fabledsword.com/bvandeusen/CI-runner).
+- `http-ece` is `--no-build-isolation`-installed before the editable
+  package install because http-ece doesn't declare `setuptools` as a
+  build dep and uv creates bare venvs without it. Not promotion-worthy
+  (one project, one wheel).
+
+## Notes
+
+- Production runtime image (`Dockerfile`) also tracks Python 3.14 — the
+  CI image and runtime image stay aligned by design so test results are
+  representative.
+- Build wall time: dominated by `pytest` (full async test suite). Cold
+  ci-python pulls add ~30s; not a blocker.
+- Registry-backed BuildKit layer cache (`type=registry,ref=…:cache,mode=max`)
+  gives ~80% speedup on warm builds — see the build job comment.
+- `pyproject.toml` pins `requires-python = ">=3.14"` to match the CI +
+  runtime target; lockfile (`uv.lock`) is committed and resolves against
+  Python 3.14.

docker-compose.prod.yml

@@ -1,16 +1,14 @@
 services:
   app:
-    image: git.fabledsword.com/bvandeusen/fabledassistant:latest
+    image: git.fabledsword.com/bvandeusen/fabledscribe:latest
     environment:
-      DATABASE_URL: "postgresql+asyncpg://fabled:${DB_PASSWORD}@db:5432/fabledassistant"
+      DATABASE_URL: "postgresql+asyncpg://scribe:${DB_PASSWORD}@db:5432/scribe"
       SECRET_KEY: "${SECRET_KEY}"
-      OLLAMA_URL: "http://ollama:11434"
-      OLLAMA_MODEL: "${OLLAMA_MODEL:-llama3.1}"
       LOG_LEVEL: "${LOG_LEVEL:-INFO}"
       TRUST_PROXY_HEADERS: "true"
       SECURE_COOKIES: "true"
     networks:
-      - fabledassistant_backend
+      - scribe_backend
     healthcheck:
       test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://localhost:5000/api/health')"]
       interval: 30s
@@ -23,59 +21,39 @@ services:
         max_attempts: 5
 
   db:
-    image: postgres:16-alpine
+    # pgvector image (Debian/glibc, PG17) — bundles the `vector` extension that
+    # migration 0067 enables. Moved off postgres:16-alpine via logical
+    # dump/restore (which doubles as the PG16->PG17 major upgrade); see the
+    # TRANSITION runbook in the PR.
+    image: pgvector/pgvector:pg17
+    stop_grace_period: 120s
     volumes:
       - pgdata:/var/lib/postgresql/data
     environment:
-      POSTGRES_USER: fabled
+      POSTGRES_USER: scribe
       POSTGRES_PASSWORD: "${DB_PASSWORD}"
-      POSTGRES_DB: fabledassistant
+      POSTGRES_DB: scribe
     networks:
-      - fabledassistant_backend
+      - scribe_backend
+    # Lenient by design: a transient host exec/healthcheck stall (incident:
+    # runc setns failures -> "unhealthy" -> SIGKILL -> crash loop) must never
+    # escalate to killing the DB. Health here only gates app startup order.
     healthcheck:
-      test: ["CMD-SHELL", "pg_isready -U fabled"]
-      interval: 10s
-      timeout: 5s
-      retries: 5
-    deploy:
-      restart_policy:
-        condition: on-failure
-        max_attempts: 5
-
-  ollama:
-    image: ollama/ollama
-    volumes:
-      - ollama_models:/root/.ollama
-    networks:
-      - fabledassistant_backend
-    environment:
-      OLLAMA_MAX_LOADED_MODELS: "2"
-      OLLAMA_KEEP_ALIVE: "30m"
-      OLLAMA_FLASH_ATTENTION: "1"
-    healthcheck:
-      test: ["CMD-SHELL", "ollama list || exit 1"]
+      test: ["CMD-SHELL", "pg_isready -U scribe"]
       interval: 30s
       timeout: 10s
-      retries: 5
-      start_period: 30s
+      retries: 10
+      start_period: 180s
     deploy:
-      placement:
-        constraints:
-          - node.role == worker
-      resources:
-        reservations:
-          devices:
-            - driver: nvidia
-              count: all
-              capabilities: [gpu]
       restart_policy:
         condition: on-failure
-        max_attempts: 5
+        delay: 10s
+        max_attempts: 0
+        window: 120s
 
 volumes:
   pgdata:
-  ollama_models:
 
 networks:
-  fabledassistant_backend:
+  scribe_backend:
     driver: overlay

docker-compose.quickstart.yml

@@ -0,0 +1,59 @@
+# Fabled Scribe — Quick Start
+#
+# No build required. Pulls the latest pre-built image from the registry.
+#
+# Usage:
+#   1. Download this file
+#   2. docker compose -f docker-compose.quickstart.yml up -d
+#   3. Open http://localhost:5000 — the first account registered becomes admin
+#   4. Go to Settings → MCP Access and connect Claude (Code or Desktop) via the
+#      bearer-token URL shown there.
+#
+# Set SECRET_KEY via environment variable or a .env file alongside this file:
+#   SECRET_KEY=your-random-secret-here
+
+services:
+  app:
+    image: git.fabledsword.com/bvandeusen/fabledscribe:latest
+    ports:
+      - "5000:5000"
+    environment:
+      DATABASE_URL: "postgresql+asyncpg://scribe:scribe@db:5432/scribe"
+      SECRET_KEY: "${SECRET_KEY:-change-me-in-production}"
+      LOG_LEVEL: "${LOG_LEVEL:-INFO}"
+    volumes:
+      - app_data:/data
+    depends_on:
+      db:
+        condition: service_healthy
+    restart: unless-stopped
+    healthcheck:
+      test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://localhost:5000/api/health')"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 30s
+
+  db:
+    # pgvector image (PG17) — bundles the `vector` extension (migration 0067).
+    image: pgvector/pgvector:pg17
+    stop_grace_period: 120s
+    volumes:
+      - pgdata:/var/lib/postgresql/data
+    environment:
+      POSTGRES_USER: scribe
+      POSTGRES_PASSWORD: scribe
+      POSTGRES_DB: scribe
+    # Lenient by design: a transient host exec/healthcheck stall must never
+    # escalate to killing the DB. Health here only gates app startup order.
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U scribe"]
+      interval: 30s
+      timeout: 10s
+      retries: 10
+      start_period: 180s
+    restart: unless-stopped
+
+volumes:
+  app_data:
+  pgdata:

docker-compose.yml

@@ -6,25 +6,16 @@ services:
     depends_on:
       db:
         condition: service_healthy
-      ollama:
-        condition: service_started
     volumes:
       - app_data:/data
       # To use a bind mount instead (gives direct host access to all app data):
       # - ./data:/data
     environment:
-      DATABASE_URL: "postgresql+asyncpg://${POSTGRES_USER:-fabled}:${POSTGRES_PASSWORD:-fabled}@db:5432/${POSTGRES_DB:-fabledassistant}"
-      OLLAMA_URL: "http://ollama:11434"
-      OLLAMA_MODEL: "${OLLAMA_MODEL:-llama3.1}"
+      DATABASE_URL: "postgresql+asyncpg://${POSTGRES_USER:-scribe}:${POSTGRES_PASSWORD:-scribe}@db:5432/${POSTGRES_DB:-scribe}"
       SECRET_KEY: "${SECRET_KEY:-dev-secret-change-me}"
-      # Uncomment and set to enable web research and image search via SearXNG:
+      # Uncomment if you have a SearXNG instance you want to surface in the
+      # Integrations tab as a configured web-search backend:
       # SEARXNG_URL: "http://searxng:8080"
-      # IMAGE_CACHE_DIR: /data/images  # default, change if using a different mount path
-      # IMAGE_MAX_BYTES: "5242880"     # 5 MB per image, adjust if needed
-      # Push notifications (VAPID keys - generate with: python -c "from py_vapid import Vapid01; v=Vapid01(); v.generate_keys(); print(v.private_key, v.public_key)")
-      VAPID_PRIVATE_KEY: "${VAPID_PRIVATE_KEY:-}"
-      VAPID_PUBLIC_KEY: "${VAPID_PUBLIC_KEY:-}"
-      VAPID_CLAIMS_SUB: "${VAPID_CLAIMS_SUB:-mailto:admin@fabledassistant.local}"
     healthcheck:
       test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://localhost:5000/api/health')"]
       interval: 10s
@@ -34,36 +25,23 @@ services:
 
   db:
     image: postgres:16-alpine
+    stop_grace_period: 120s
+    restart: unless-stopped
     volumes:
       - pgdata:/var/lib/postgresql/data
     environment:
-      POSTGRES_USER: ${POSTGRES_USER:-fabled}
-      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-fabled}
-      POSTGRES_DB: ${POSTGRES_DB:-fabledassistant}
+      POSTGRES_USER: ${POSTGRES_USER:-scribe}
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-scribe}
+      POSTGRES_DB: ${POSTGRES_DB:-scribe}
+    # Lenient by design: a transient host exec/healthcheck stall must never
+    # escalate to killing the DB. Health here only gates app startup order.
     healthcheck:
-      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-fabled}"]
-      interval: 5s
-      timeout: 5s
-      retries: 5
-
-  ollama:
-    image: ollama/ollama
-    volumes:
-      - ollama_models:/root/.ollama
-    environment:
-      OLLAMA_MAX_LOADED_MODELS: "2"
-      OLLAMA_NUM_PARALLEL: "2"
-      OLLAMA_KEEP_ALIVE: "30m"
-      OLLAMA_FLASH_ATTENTION: "1"
-    deploy:
-      resources:
-        reservations:
-          devices:
-            - driver: nvidia
-              count: all
-              capabilities: [gpu]
+      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-scribe}"]
+      interval: 30s
+      timeout: 10s
+      retries: 10
+      start_period: 180s
 
 volumes:
   pgdata:
-  ollama_models:
   app_data:

docs/2026-03-23-fable-mcp-design.md

@@ -0,0 +1,271 @@
+# Fable MCP — Design Spec
+
+**Date:** 2026-03-23
+**Status:** Approved
+**Author:** bvandeusen + Claude
+
+---
+
+## Overview
+
+A Python MCP (Model Context Protocol) server that lets Claude directly interface with a running Fabled Assistant instance. The goal is two-fold: Claude's stronger reasoning handles planning, documentation, and analysis while Fable remains the authoritative store for notes, tasks, projects, and milestones; and direct API access enables process improvement by letting Claude observe and operate on real data rather than working from descriptions.
+
+The work is split into two sub-projects:
+
+1. **Fable API Key Feature** — additions to the main `scribe` project to support bearer token authentication
+2. **Fable MCP Server** — a new standalone Python package at `fable-mcp/` in the same repo root
+
+A third sub-project (Forgejo MCP for CI/CD automation) is planned as a follow-on after the Fable MCP is working.
+
+---
+
+## Sub-project 1: Fable API Key Feature
+
+### Motivation
+
+All existing Fable routes use session-based authentication (`session["user_id"]`). The MCP server runs as a local process and cannot maintain a browser session, so a stateless bearer token mechanism is required. API keys are user-scoped and carry a read/write permission level.
+
+### Database
+
+New table `api_keys` via migration `0027_add_api_keys.py`:
+- `down_revision = "0026"` (the briefing tables migration)
+- `revision = "0027"`
+
+| Column | Type | Notes |
+|--------|------|-------|
+| `id` | Integer PK | |
+| `user_id` | Integer FK → users | CASCADE delete |
+| `name` | Text | Human-readable label |
+| `key_hash` | Text | SHA-256 of the full key, used for lookup |
+| `key_prefix` | Text | First 8 chars (e.g. `fmcp_ab12`), shown in UI |
+| `scope` | Text | `"read"` or `"write"` |
+| `last_used_at` | Timestamp | Nullable, updated on each authenticated request |
+| `created_at` | Timestamp | |
+| `revoked_at` | Timestamp | Nullable — soft delete |
+
+Full keys are generated as `fmcp_<32 random url-safe chars>`, returned once at creation, never stored. Only the SHA-256 hash is persisted.
+
+### Auth Middleware (`auth.py`)
+
+`_check_auth` is updated to check the `Authorization: Bearer <token>` header before falling back to session auth:
+
+1. If header present: hash the token, look up in `api_keys` where `revoked_at IS NULL`
+2. If found: update `last_used_at`, set `g.user` and `g.api_key`
+3. Scope enforcement: if `g.api_key.scope == "read"` and `request.method` is not `GET`, return 403
+4. If header absent: existing session logic runs unchanged
+
+Session auth is untouched — no regression risk for the web UI.
+
+**Admin routes and API keys:** Routes decorated with `admin_required` check `user.role == "admin"` after auth resolves. API keys authenticate as the key owner — so a write-scoped key for a non-admin user will fail admin-protected routes with 403 (role check, not scope check). This is intentional: API keys cannot elevate privilege beyond the user's role.
+
+### Routes (`/api/api-keys`)
+
+New blueprint `api_keys_bp`, registered in `app.py`:
+
+- `GET /api/api-keys` — list caller's keys (prefix, name, scope, last_used_at, created_at — never the hash or full key)
+- `POST /api/api-keys` — create key; body: `{name, scope}`. Returns full key in response **once only**
+- `DELETE /api/api-keys/:id` — revoke by setting `revoked_at = now()`
+
+### Settings UI
+
+New "API Keys" tab in `SettingsView.vue` (added to `VALID_TABS`):
+
+- Create form: name input + read/write radio/toggle + "Generate Key" button
+- After creation: one-time modal displaying the full key with a copy button and a warning that it will not be shown again
+- Keys table: columns for name, scope badge, prefix, last used, revoke button
+- Revoke shows inline confirmation before calling DELETE
+
+### New Search Endpoint
+
+`GET /api/search?q=<query>&content_type=note|task|all&limit=N`
+
+Calls the existing `semantic_search_notes()` service (already in `services/embeddings.py`). The `content_type` parameter maps to the service's `is_task` argument:
+- `content_type=note` → `is_task=False`
+- `content_type=task` → `is_task=True`
+- `content_type=all` (default) → `is_task=None`
+
+Returns:
+
+```json
+{
+  "results": [
+    {"id": 1, "title": "...", "body": "...", "is_task": false, "similarity": 0.87, "tags": [...]}
+  ],
+  "total": 5
+}
+```
+
+This endpoint is needed by the MCP's `search.py` tool module. It reuses existing infrastructure with no new ML work.
+
+### Conversation Type: `"mcp"`
+
+A new conversation type `"mcp"` is added alongside `"chat"` and `"briefing"`. This requires changes in two places in the main app:
+
+**`services/chat.py`** — `create_conversation(user_id, title, model)` gains an optional `conversation_type: str = "chat"` parameter, passed through to the `Conversation` constructor.
+
+**`routes/chat.py`** — `POST /api/chat/conversations` accepts an optional `conversation_type` body field (defaults to `"chat"`), passed to `create_conversation`. `GET /api/chat/conversations` continues to default-filter to `conversation_type="chat"` (excluding `"mcp"` and `"briefing"`); pass `?type=mcp` to retrieve MCP conversations.
+
+**Retention:** `cleanup_old_conversations` in `routes/chat.py` currently deletes conversations regardless of type. It must be updated to exclude `conversation_type="mcp"` from the sweep, so MCP audit-trail conversations are not automatically pruned.
+
+MCP conversations:
+- Are created with a caller-supplied name (e.g., `"MCP Session 2026-03-23"`) or auto-named
+- Are excluded from the default chat list
+- Are accessible via `GET /api/chat/conversations?type=mcp` for inspection
+- Appear in the Fable UI if explicitly navigated to, providing an audit trail of MCP-driven interactions
+
+### Chat SSE Wire Format
+
+The MCP's `chat.py` tool must consume the existing SSE stream. The relevant endpoints and event schema:
+
+- **Create conversation:** `POST /api/chat/conversations` → `{id, title, ...}`
+- **Post message + start generation:** `POST /api/chat/conversations/:id/messages` → `{message_id, ...}`; then connect to:
+- **Stream:** `GET /api/chat/conversations/:id/stream` (SSE)
+
+SSE event format (each line is `data: <json>`):
+- `{"type": "token", "content": "..."}` — streaming token
+- `{"type": "tool_call", "name": "...", "result": {...}}` — tool fired
+- `{"type": "done", "content": "...", "tools_used": [...]}` — generation complete; this is the termination event
+
+The MCP tool reads tokens until it receives `type: "done"`, then returns `response` (full content) and `tools_used` (list of tool names).
+
+---
+
+## Sub-project 2: Fable MCP Server
+
+### Location
+
+`fable-mcp/` at the repository root, alongside `src/`, `frontend/`, `alembic/`. It is **not** part of the main Docker build and has no import relationship with `scribe`. It will be extracted to its own Forgejo repo once stable.
+
+### Package Structure
+
+```
+fable-mcp/
+  pyproject.toml            # entry point: fable-mcp = "fable_mcp.server:main"
+  README.md
+  .env.example              # FABLE_URL=http://localhost:8080, FABLE_API_KEY=fmcp_...
+  fable_mcp/
+    __init__.py
+    server.py               # FastMCP instance, imports + registers all tool modules
+    client.py               # FableClient: async httpx wrapper, env var config, FableAPIError
+    tools/
+      __init__.py
+      notes.py              # list_notes, get_note, create_note, update_note, delete_note
+      tasks.py              # list_tasks, get_task, create_task, update_task, delete_task,
+                            #   patch_task_status, add_task_log
+      projects.py           # list_projects, get_project, create_project, update_project,
+                            #   delete_project, get_project_summary
+      milestones.py         # list_milestones, get_milestone, create_milestone,
+                            #   update_milestone, delete_milestone
+      search.py             # semantic_search — calls GET /api/search
+      chat.py               # send_message — creates/continues conversation, returns response
+```
+
+### Dependencies
+
+```toml
+[project]
+dependencies = [
+  "mcp[cli]>=1.0",
+  "httpx>=0.27",
+  "python-dotenv>=1.0",
+]
+```
+
+### `client.py`
+
+`FableClient` is an async context manager wrapping `httpx.AsyncClient`. It reads `FABLE_URL` and `FABLE_API_KEY` from environment variables (with `python-dotenv` fallback to `.env`). All methods are `async def` and return parsed dicts. A `FableAPIError(status_code, message)` exception is raised for any non-2xx response.
+
+A module-level singleton `_client: FableClient` is initialized at server startup and shared across all tool modules.
+
+### `server.py`
+
+Uses `mcp[cli]`'s `FastMCP` class. Imports all tool modules, which register their tools via decorators against the shared `FastMCP` instance. Entry point `main()` calls `mcp.run()` (stdio transport).
+
+### Tool Modules
+
+Each module imports `_client` from `client.py` and defines tools as `async def` functions decorated with `@mcp.tool()`. Tool docstrings serve as the MCP tool descriptions visible to Claude.
+
+**`notes.py`** tools:
+- `list_notes(query, tags, project_id, limit, offset)`
+- `get_note(note_id)`
+- `create_note(title, body, tags, project_id)`
+- `update_note(note_id, title, body, tags, project_id)`
+- `delete_note(note_id)`
+
+**`tasks.py`** tools:
+- `list_tasks(query, project_id, milestone_id, status, priority, limit, offset)`
+- `get_task(task_id)`
+- `create_task(title, body, project_id, milestone_id, priority, status)`
+- `update_task(task_id, title, body, project_id, milestone_id, priority, status)`
+- `delete_task(task_id)`
+- `patch_task_status(task_id, status)`
+- `add_task_log(task_id, content)`
+
+**`projects.py`** tools:
+- `list_projects()`
+- `get_project(project_id)` — includes milestone summary
+- `create_project(title, description, goal, color)`
+- `update_project(project_id, title, description, goal, status, color)`
+- `delete_project(project_id)`
+
+**`milestones.py`** tools:
+- `list_milestones(project_id, status)`
+- `get_milestone(project_id, milestone_id)`
+- `create_milestone(project_id, title, description, order_index)`
+- `update_milestone(project_id, milestone_id, title, description, status, order_index)`
+- `delete_milestone(project_id, milestone_id)`
+
+**`search.py`** tools:
+- `semantic_search(query, content_type, limit)` — `content_type` is `"note"`, `"task"`, or `"all"` (avoids shadowing Python's `type` builtin). Calls `GET /api/search`, returns ranked results with similarity scores.
+
+**`chat.py`** tools:
+- `send_message(message, conversation_name)`:
+  - Looks up or creates a Fable conversation with the given name and `conversation_type="mcp"`
+  - Posts the message via `POST /api/chat/conversations/:id/messages`
+  - Consumes SSE stream from `GET /api/chat/conversations/:id/stream` until `type: "done"`
+  - Returns: `{response: str, tools_used: [str], conversation_id: int}`
+  - MCP conversations are excluded from the normal chat UI list
+
+### Error Handling
+
+`FableAPIError` is caught at each tool boundary and returned as a descriptive string rather than propagating as an exception. This ensures Claude receives a readable error message (e.g., `"Fable API error 403: Read-only key cannot perform write operations."`) rather than a stack trace. Network errors (`httpx.RequestError`) are similarly caught and surfaced as strings.
+
+Scope enforcement lives entirely in Fable's auth middleware — the MCP does not duplicate it.
+
+### Claude Code Registration
+
+After `pip install -e fable-mcp/` (or `uv tool install ./fable-mcp`), add to `~/.claude/settings.json`:
+
+```json
+{
+  "mcpServers": {
+    "fable": {
+      "command": "fable-mcp",
+      "env": {
+        "FABLE_URL": "http://localhost:8080",
+        "FABLE_API_KEY": "fmcp_your_key_here"
+      }
+    }
+  }
+}
+```
+
+Claude Code spawns the process over stdio automatically. No Docker, no daemon.
+
+---
+
+## Build & Repo Plan
+
+1. Implement and test within `scribe/fable-mcp/`
+2. Once stable, extract to a new Forgejo repo (`bvandeusen/fable-mcp`)
+3. Forgejo MCP (Gitea MCP) added as a second MCP server to automate build/push/config workflows — separate spec when ready
+
+---
+
+## Out of Scope (v1)
+
+- MCP resources (browsable URI tree) — tools cover all use cases in Claude Code
+- Forgejo MCP — follow-on spec
+- Rate limiting on API key endpoints
+- Key expiry / TTL
+- Per-resource scope (e.g., key restricted to one project)

docs/2026-03-29-voice-s2s-design.md

@@ -0,0 +1,200 @@
+# Speech-to-Speech (S2S) Design Spec
+
+**Branch:** `feature/voice-s2s`
+**Date:** 2026-03-29
+**Status:** Approved for implementation
+
+---
+
+## Decisions
+
+- **STT:** faster-whisper (in-process Python, model size configurable via `STT_MODEL` env var)
+- **TTS:** Kokoro TTS (in-process Python, voice/speed/style configurable per-user)
+- **Input mode:** Push-to-talk (Phase 1); VAD deferred
+- **No browser STT/TTS fallbacks** — self-hosted only, data stays on-server
+- **No Android app** — web only for this implementation
+
+---
+
+## New Env Vars (`config.py`)
+
+| Var | Default | Description |
+|---|---|---|
+| `VOICE_ENABLED` | `false` | Feature flag — opt-in |
+| `STT_BACKEND` | `faster-whisper` | Only supported value currently |
+| `STT_MODEL` | `base.en` | `tiny.en` / `base.en` / `small.en` / `medium.en` |
+| `TTS_BACKEND` | `kokoro` | Only supported value currently |
+
+---
+
+## Per-User Settings (stored in `settings` table)
+
+| Key | Default | Description |
+|---|---|---|
+| `voice_tts_voice` | `af_heart` | Kokoro voice ID |
+| `voice_tts_speed` | `1.0` | Speech rate, 0.7–1.3 |
+| `voice_speech_style` | `conversational` | `conversational` / `concise` / `detailed` |
+
+---
+
+## New Backend Files
+
+### `src/scribe/services/stt.py`
+Lazy singleton `WhisperModel` loader. Public API:
+- `load_stt_model()` — called at startup via `asyncio.create_task`
+- `transcribe(audio_bytes, mime_type) -> str` — runs in `run_in_executor`; writes bytes to `NamedTemporaryFile`, returns concatenated segment text
+- `stt_available() -> bool`
+
+### `src/scribe/services/tts.py`
+Lazy singleton `KPipeline` loader. Public API:
+- `load_tts_model()` — called at startup
+- `synthesise(text, voice, speed) -> bytes` — runs in `run_in_executor`; returns WAV bytes (24kHz, 16-bit mono)
+- `list_voices() -> list[dict]` — returns static list of known Kokoro voice IDs + labels
+- `tts_available() -> bool`
+
+### `src/scribe/routes/voice.py`
+Blueprint at `/api/voice`, all routes `@login_required`.
+
+| Endpoint | Method | Description |
+|---|---|---|
+| `/api/voice/status` | GET | STT/TTS availability; `enabled` false if `VOICE_ENABLED=false` |
+| `/api/voice/voices` | GET | List available Kokoro voices |
+| `/api/voice/transcribe` | POST | multipart `audio` field → `{"transcript": "...", "duration_ms": 123}` |
+| `/api/voice/synthesise` | POST | `{"text", "voice", "speed"}` → WAV bytes |
+
+---
+
+## Modified Backend Files
+
+### `src/scribe/app.py`
+- Register `voice_bp` blueprint
+- In `startup()`: `asyncio.create_task(load_stt_model())` + `asyncio.create_task(load_tts_model())` when `VOICE_ENABLED`
+
+### `src/scribe/config.py`
+- Add 4 new env var attributes
+- Add validation in `validate()`
+
+### `src/scribe/services/llm.py`
+- Add `voice_mode: bool = False` and `voice_speech_style: str = "conversational"` to `build_context()`
+- When `voice_mode=True`, prepend: *"Respond naturally as if speaking aloud. No markdown, bullet points, headers, or code blocks. Complete sentences only."*
+- Append style modifier based on `voice_speech_style`
+
+### `src/scribe/services/generation_task.py`
+- Add `voice_mode: bool = False` to `run_generation()`
+- Read `voice_speech_style` from settings when voice_mode; pass both to `build_context()`
+
+### `src/scribe/routes/chat.py`
+- Allow `"voice"` in `conversation_type` whitelist
+
+### `src/scribe/services/chat.py`
+- Exclude `conversation_type == "voice"` from auto-cleanup retention
+
+---
+
+## New Frontend Files
+
+### `frontend/src/composables/useVoiceRecorder.ts`
+Wraps `MediaRecorder`. Exports: `recording`, `error`, `isSupported`, `startRecording()`, `stopRecording() -> Promise<Blob>`.
+
+### `frontend/src/composables/useVoiceAudio.ts`
+Wraps `AudioContext`. Exports: `playing`, `isSupported`, `play(blob)`, `stop()`.
+
+### `frontend/src/components/VoiceOverlay.vue`
+Floating PTT button (fixed bottom-right). Creates/reuses a `"voice"` conversation. Full flow: record → transcribe → send → stream → synthesise → play. Space bar hotkey (from `App.vue`). Mounted globally in `App.vue`.
+
+---
+
+## Modified Frontend Files
+
+### `frontend/src/api/client.ts`
+Add: `transcribeAudio(blob)`, `synthesiseSpeech(text, voice?, speed?)`, `getVoiceStatus()`, `getVoiceList()`
+
+### `frontend/src/views/BriefingView.vue`
+- "Listen" button: reads latest assistant message aloud via TTS
+- Mic button in input bar: PTT → transcribe → auto-fill input → send
+- Auto-TTS on assistant response when in listen mode
+
+### `frontend/src/views/SettingsView.vue`
+- New "Voice" tab: voice dropdown, speed slider, speech style radio
+- Loads from `/api/settings`, saves via `PUT /api/settings`
+
+### `frontend/src/App.vue`
+- Mount `<VoiceOverlay />`
+- Space bar → `"voice:ptt-toggle"` custom event
+
+---
+
+## Audio Format
+
+| Direction | Format | Rationale |
+|---|---|---|
+| Browser → Server | WebM/Opus | Native `MediaRecorder` output; no re-encoding |
+| Server → Browser | WAV (24kHz, 16-bit mono) | Kokoro native; no re-encoding; `decodeAudioData` compatible |
+
+---
+
+## Dependencies to Add (`pyproject.toml`)
+
+```toml
+[project.optional-dependencies]
+voice = [
+    "faster-whisper>=1.0",
+    "kokoro>=0.9",
+    "soundfile>=0.12",
+]
+```
+
+Install unconditionally in Docker (activated by `VOICE_ENABLED` at runtime):
+```dockerfile
+RUN pip install faster-whisper kokoro soundfile
+```
+
+---
+
+## Database Migration
+
+No schema changes required. `conversation_type` is unconstrained TEXT. Voice settings use existing key-value `settings` table. Optional no-op migration `0034_voice_conversation_type.py` for audit trail.
+
+---
+
+## Implementation Phases
+
+### Phase 1 — Backend services + routes
+1. Add env vars to `config.py`
+2. Create `services/stt.py` (faster-whisper)
+3. Create `services/tts.py` (Kokoro)
+4. Create `routes/voice.py` (4 endpoints)
+5. Wire model loading into `app.py` startup
+6. Add `voice_mode` to `build_context()` + `run_generation()`
+7. Allow `"voice"` conversation type in chat route + cleanup exclusion
+
+### Phase 2 — BriefingView listen + voice follow-up
+1. Create `useVoiceRecorder.ts`
+2. Create `useVoiceAudio.ts`
+3. Add voice API functions to `client.ts`
+4. Add "Listen" button + mic button to `BriefingView.vue`
+
+### Phase 3 — VoiceOverlay for general voice chat
+1. Create `VoiceOverlay.vue`
+2. Mount in `App.vue` + Space bar hotkey
+
+### Phase 4 — Settings UI
+1. Add "Voice" tab to `SettingsView.vue`
+
+---
+
+## Kokoro Voice Reference
+
+| ID | Character |
+|---|---|
+| `af_heart` | American female, warm (recommended default) |
+| `af_bella` | American female, expressive |
+| `af_nicole` | American female, breathy/intimate |
+| `af_sarah` | American female, clear |
+| `af_sky` | American female, bright |
+| `am_adam` | American male, neutral |
+| `am_michael` | American male, deeper |
+| `bf_emma` | British female |
+| `bf_isabella` | British female, formal |
+| `bm_george` | British male |
+| `bm_lewis` | British male, casual |

docs/2026-04-10-agentic-briefing-design.md

@@ -0,0 +1,216 @@
+# Agentic Briefing — Design Spec
+
+**Date:** 2026-04-10
+**Status:** Proposed
+**Author:** bvandeusen + Claude
+
+---
+
+## Problem
+
+The current briefing pipeline hallucinates calendar events, tasks, and news items that do not exist in the user's actual data. Observed examples from production:
+
+- A morning briefing asserting "your dentist appointment is still in progress" when no such event existed
+- An 8am check-in mentioning "a quick meeting at 10:30 AM" with no backing calendar entry
+- A midday check-in inventing "a team huddle at 2:30 PM" and "the Q2 budget draft due by Friday"
+- The model calling `search_images` in response to a clarifying question about a fabricated meeting
+
+These are not bugs in data retrieval — the data gathering code (`_gather_internal`, `_gather_external`) returns correct values. They are a structural consequence of how the briefing context is assembled.
+
+## Root cause — the "no receipt" problem
+
+The current `run_compilation` pipeline does this:
+
+1. Python code gathers data (tasks, events, weather, news) from the database
+2. Python formats the data into a structured text blob as the user-role message: `TODAY'S EVENTS: ...`, `DUE TODAY: ...`, etc.
+3. The LLM is called **once** with `[system_prompt, user_prompt]` and produces prose
+4. Only the prose reply is written to the conversation. **The underlying data is never persisted in the conversation history.**
+
+When the user later chats in the briefing conversation, the chat endpoint loads the full conversation history — which contains the model's *prose* from earlier but not the data that prose was derived from. The model's own prior output becomes the only source of "truth" available for follow-up questions. If that prose asserted a fact (real or hallucinated), the model has no way to distinguish it from ground truth when generating the next reply, and it will double down.
+
+Compounding factors:
+
+- **Empty sections are silently omitted.** If `calendar_events` is empty, the user prompt contains no `TODAY'S EVENTS:` line at all. The model has no explicit "zero events" signal — combined with an imperative system prompt ("note calendar events and tasks"), it interprets the silence as "I should mention some" and fabricates.
+- **Scheduled slot injections append synthetic turns.** `run_slot_injection` writes a fake `[Midday briefing update]` user message and the assistant reply into the persistent conversation. By evening, the chat history contains three separate briefings, each potentially with errors, all treated as equal-weight context on follow-up.
+- **The `search_images` tool is available during briefing chat**, with a negative-instruction description ("Not for factual questions"). Small and mid-sized models frequently ignore negative guidance in tool descriptions and call the tool anyway.
+
+## Solution — agentic briefing (the receipt model)
+
+Replace the one-shot synthesis with a tool-call loop. The briefing is no longer "a text blob synthesized from pre-gathered data." It is **a scheduled agent run**: the LLM is given a system prompt, a curated set of read-only data tools, and a trigger ("generate the morning briefing"). The model must call tools to see what exists. Every tool call and tool result becomes part of the conversation history, where it lives as a permanent, structured receipt.
+
+### Why this fixes the hallucination
+
+When the model calls `list_events(today) → []`, that empty array is now a persistent message in the conversation. On a follow-up question like "what meeting?", the chat endpoint loads the conversation and the model sees its own tool result from the morning showing no events. Answering "you had a meeting at 10:30" would require the model to directly contradict a tool result sitting two messages back — something LLMs are much more reliable at avoiding than contradicting their own prior prose.
+
+In short: **the model cannot fabricate what has a visible receipt proving it does not exist.**
+
+### What the model sees — before vs after
+
+**Before** — the model sees one structured blob and produces prose. The blob is discarded.
+
+```
+[system] You are a personal assistant... weave together what matters...
+[user]   Date: 2026-04-10
+         WEATHER: Home — partly cloudy, 8–16°C
+         DUE TODAY: Fix briefing hallucinations
+         OVERDUE (2 tasks): ...
+[assistant] Morning! Looks like a quiet day with two overdue items...
+```
+
+**After** — the model is given tools and iterates to ground truth.
+
+```
+[system] You are the user's personal assistant giving their morning briefing.
+         Use tools to see what's relevant. Only mention things you learned from
+         tool calls. If a tool returns nothing, say so honestly.
+[user]   Generate the morning briefing.
+[assistant] tool_call: list_tasks(filter="due_today")
+[tool]   [{"id": 81, "title": "Fix briefing hallucinations", ...}]
+[assistant] tool_call: list_tasks(filter="overdue")
+[tool]   [{"id": 42, ...}, {"id": 43, ...}]
+[assistant] tool_call: list_events(today)
+[tool]   []
+[assistant] tool_call: get_weather(location="home")
+[tool]   {"description": "partly cloudy", "temp_min": 8, "temp_max": 16}
+[assistant] tool_call: get_rss_items(max=8)
+[tool]   [...]
+[assistant] Morning! Partly cloudy today, 8 to 16 — nothing on the calendar
+         so it's a clean run at the desk. Two things to keep in mind...
+```
+
+The conversation now contains verifiable receipts: `list_events(today)` returned `[]`, and that result sits in context forever (until pruned). Follow-up questions operate against those receipts.
+
+## Architecture
+
+### Existing infrastructure (reused, not rebuilt)
+
+The codebase already has the agentic primitives — they're used for regular chat:
+
+- **`llm.py::stream_chat_with_tools`** — the streaming tool-use loop that talks to Ollama with a `tools` parameter and yields tool-call chunks
+- **`generation_task.py::_stream_with_retry`** — wraps `stream_chat_with_tools` with retry-on-500 behavior for cold-model races
+- **`tools.py`** — defines 40+ tool schemas and an execution dispatcher
+
+The briefing bypasses all of this and calls a one-shot `_llm_synthesise` helper. The refactor is mainly "route briefings through the same pipeline regular chat already uses."
+
+### New modules
+
+**`briefing_tools.py`** — a small wrapper exposing a curated read-only subset of `tools.py` for briefing runs. This is an **explicit allowlist**, not a blocklist, so newly-added tools must be opted in:
+
+| Tool | Purpose |
+|---|---|
+| `list_tasks` (with filter args) | See what's actionable today, overdue, high priority |
+| `list_events` (today / upcoming) | Know what's on the calendar |
+| `get_weather` | Current/forecast weather |
+| `get_rss_items` | Pull news themes filtered by user preferences |
+| `list_projects` | Understand project context |
+| `search_projects` | Surface active project summaries |
+| `list_notes` (recent) | Capture follow-ups from yesterday |
+
+**Explicitly omitted** from the briefing tool set:
+
+- `search_images`, `search_web`, `research_topic`, `read_article` — external search is not a briefing concern, and `search_images` is the source of the "Peter Kyle Science Secretary" image-search bug
+- All `create_*`, `update_*`, `delete_*` — briefings are read-only; a scheduled background job must not decide to mutate the user's data on its own
+- `set_rag_scope`, `calculate` — not relevant to briefing content
+
+### New briefing function
+
+**`briefing_pipeline.py::run_agentic_briefing(user_id, slot, model, conversation_id)`** replaces `run_compilation`'s body (and eventually `run_slot_injection`). Internally:
+
+1. Build a slot-specific system prompt (see below)
+2. Load the curated briefing tools from `briefing_tools.py`
+3. Seed messages with `[system, user]` where the user message is a simple trigger like `"Generate the morning briefing."`
+4. Enter a tool-call loop (max 8 iterations):
+   - Call `stream_chat_with_tools`
+   - If the model returns `tool_calls`, execute them via the existing dispatcher, append tool results, continue
+   - If the model returns a final assistant message with no pending tool calls, break
+5. Return `(final_prose, full_message_list, metadata)`
+
+The full message list is important: it's written to the conversation along with the final prose, so the tool-call receipts become part of the persistent record.
+
+### Slot-specific system prompts
+
+Compilation (full morning briefing):
+
+```
+You are the user's personal assistant giving their full morning briefing.
+Use the tools available to see what's actually relevant today — tasks due,
+overdue items, events on the calendar, weather, news themes, project state
+— and weave it into a warm, natural-sounding summary.
+
+Rules:
+- Call tools to see the data. Never assert facts you didn't learn from a tool.
+- If a tool returns nothing (no events today, no overdue tasks), say so
+  honestly. Don't fabricate items to fill space.
+- Write flowing prose. No markdown, no headers, no bullet points.
+- Aim for 6–10 sentences. Skip topics that have nothing interesting.
+- Close on one or two concrete, actionable suggestions.
+
+User profile (for tone and preferences):
+{profile_body}
+```
+
+Check-ins (midday, afternoon):
+
+```
+You are the user's personal assistant giving a brief {slot} check-in.
+Use tools to see what's changed since this morning. Focus on progress
+and what's still unaddressed.
+
+Rules:
+- Call tools to see current state. Never assert facts without tool results.
+- If nothing meaningful has changed, say so briefly — don't invent progress.
+- 3–5 sentences, natural prose, no markdown.
+```
+
+### Conversation hygiene — removing the fake user messages
+
+The current scheduler appends two fake messages on every slot injection:
+
+```python
+await post_message(conv.id, "user", f"[{slot.title()} briefing update]")
+await post_message(conv.id, "assistant", text)
+```
+
+Under the agentic model, we drop the fake `"user"` message entirely. Slot updates become plain assistant messages tagged with `metadata.briefing_slot = "midday"`. The chat endpoint's message loader is updated to filter these when building the LLM context on follow-ups, so a user chatting in the briefing conversation doesn't see three earlier briefings smashed into their history. The UI continues to show them as visible timeline entries.
+
+(This is the Option A filter from the earlier discussion — a small, surgical change compared to migrating briefings to a separate sidecar table. Sidecar storage remains a possible future step.)
+
+### Ollama setup compatibility
+
+The existing Ollama deployment uses non-parallel mode across two GPUs, with a concern about context duplication between cards. This is the correct setup for agentic briefings:
+
+- Each tool-call iteration shares the same KV cache on the same GPU, so appending tool results is cheap
+- There is no race where a second iteration could land on a different card with a different cache state
+- The trade-off is serialization: a briefing in progress will block a concurrent user chat request until it finishes, but scheduled briefings are rare enough (4× per day) that this is acceptable
+
+If GPU contention becomes a problem later, the right lever is pinning specific models to specific GPUs (e.g., background tasks on GPU 1, interactive models on GPU 0) — not enabling parallelism.
+
+## Cost & trade-offs
+
+- **Latency:** a briefing now makes 5–7 inference calls (one per tool-call decision plus the final prose) instead of 1. On a local Ollama with a 7B model, expect 15–40s per briefing vs the current 5–10s. Acceptable for a background job; if it becomes painful at the user-facing check-in slots, investigate letting the model batch independent tool calls in a single turn (Ollama supports this).
+- **Model requirements:** the default model must be reliable at tool calling. `qwen2.5:7b`, `llama3.1:8b`, `mistral-small-3:24b`, and similar handle it well. Models in the ≤3B class typically fail — they either emit no tool calls and return empty prose, or hallucinate invalid tool arguments. If a user's `default_model` is too small, agentic mode should fall back to legacy mode with a log warning.
+- **Context growth:** tool results bloat the conversation. At 8 tool calls per compilation × 4 slots per day, a daily briefing conversation can reach 20-30 KB of JSON-heavy history. Fine for a day; aged briefings should be archived/rolled up after 7 days.
+- **Tool subset drift:** someone adds a new mutating tool to `tools.py` and forgets to update the briefing allowlist. Mitigated by the allowlist model — the default for new tools is "not exposed to briefings."
+- **Infinite loop safety:** a buggy model could tool-call forever. Hard cap at 8 iterations, log a warning if hit, return whatever prose was last produced (or a fallback message).
+
+## Migration path
+
+Ship incrementally, each step independently reversible:
+
+**PR 1 — Agentic compilation behind a feature flag.** Add `briefing_tools.py`, add `run_agentic_briefing`, add a per-user setting `briefing_mode: "legacy" | "agentic"` (default legacy). Route only the 4am compilation through the new path when the flag is set. Keep slot-injection on the legacy path. Enable the flag on the author's account first, validate output quality over several days, then flip the default for all users. No DB migration required — the setting lives in the existing `settings` table.
+
+**PR 2 — Agentic slot injections + conversation hygiene.** Migrate midday/afternoon check-ins to the same pipeline. Remove the fake `[Midday briefing update]` user-role message; slot updates become plain assistant messages tagged with `metadata.briefing_slot`. Add a chat-message-loader filter that excludes slot-tagged messages from the LLM context on follow-ups (they remain visible in the UI).
+
+**PR 3 — UI polish.** Collapsed tool-call status row in the briefing card ("✓ checked calendar · ✓ looked at tasks · ✓ pulled weather"), expanding to show tool results on click. Tool-result cards (weather, news, task list) rendered inline where useful.
+
+**PR 4 (optional) — Sidecar storage for briefing snapshots.** If the chat-filter approach in PR 2 feels too hacky, migrate briefings out of the conversations table and into a dedicated `briefing_snapshots` table. Frontend renders them as pinned timeline cards separate from chat. Larger refactor; defer until PR 1–3 prove the approach works.
+
+## Secondary win — tightening the main chat system prompt
+
+The regular chat is already agentic (it uses `stream_chat_with_tools`), but its system prompt does not explicitly require the model to ground factual claims in tool results. The prompt discipline introduced for briefings — *"Never assert facts you didn't learn from a tool. If a tool returns nothing, say so honestly."* — is worth applying to the main chat system prompt in a follow-up PR. The mechanism already works; only the framing needs tightening.
+
+## Out of scope
+
+- The Android Flutter client's failure to render `search_images` tool-result cards. This is a separate rendering gap in the mobile app and does not affect the server-side fix. Tracked separately.
+- Re-evaluating the Ollama parallelism setting. The current non-parallel config is correct for this work.
+- Replacing the background model for title/summary/observation extraction. That model's role is unrelated to briefings.

docs/api-keys-and-mcp.md

@@ -0,0 +1,99 @@
+# API Keys and Scribe MCP
+
+## API Keys
+
+API keys let external tools access your Fable data without a browser session. Each key is scoped to a single user — it can only access data that user owns or has been shared with them.
+
+### Scopes
+
+| Scope | Permissions |
+|-------|-------------|
+| `read` | GET endpoints only — list, search, fetch content |
+| `write` | Full read + create, update, delete |
+
+Admin-level operations (log access, user management) require a `write`-scoped key from an admin account.
+
+### Creating a Key
+
+1. Go to **Settings → API Keys**
+2. Enter a name (e.g. "Claude MCP", "Home Server")
+3. Choose scope
+4. Click **Generate Key**
+5. Copy the key immediately — it is shown only once (the token is `fmcp_`-prefixed)
+
+Paste the key into the `Authorization: Bearer <key>` header of your MCP client
+config (see **Scribe MCP Server** below).
+
+### Revoking a Key
+
+Click **Revoke** next to the key in the API Keys table and confirm. Revoked keys are deleted immediately.
+
+---
+
+## Scribe MCP Server
+
+Scribe exposes itself as a set of MCP tools that Claude (and other MCP clients)
+can use to read and write your notes, tasks, projects, rulebooks, and more. The
+server is **built into the app** — it is mounted as a streamable-HTTP endpoint
+at **`/mcp`** on the running Scribe instance (`src/scribe/mcp/server.py`). There
+is nothing to install: no wheel, no separate package, no CLI. You connect a
+client straight to the URL with a Bearer token.
+
+### Authentication
+
+Authenticate with an API key generated from **Settings → API Keys** (see above),
+sent as `Authorization: Bearer fmcp_<key>`. A `read`-scoped key may call only the
+read tools (`get_*`, `list_*`, `search`, `enter_project`); any write/delete tool
+is rejected with `403`. A `write`-scoped key may call everything.
+
+### Claude Code (Project-scoped)
+
+Add a `.mcp.json` at the project root. The server `type` is `http` and the URL is
+your instance's `/mcp` endpoint:
+
+```json
+{
+  "mcpServers": {
+    "scribe": {
+      "type": "http",
+      "url": "https://your-scribe-instance.example.com/mcp",
+      "headers": {
+        "Authorization": "Bearer fmcp_your-api-key"
+      }
+    }
+  }
+}
+```
+
+Note: `.mcp.json` contains an API key and should be added to `.gitignore`.
+
+### Claude Code (Global)
+
+The same `mcpServers` block can live in `~/.claude.json` to make the server
+available across all projects. A project-scoped `.mcp.json` takes precedence over
+the global entry when both define the same server name — useful for pointing a
+specific project at a dev instance or an admin key.
+
+### Available Tools
+
+The tool surface is large (~70 tools) and evolves with the app, so the live
+registration in **`src/scribe/mcp/tools/`** is the source of truth rather than a
+table here. The tools are grouped by family:
+
+| Family | Examples | Purpose |
+|--------|----------|---------|
+| Notes | `create_note`, `get_note`, `update_note`, `delete_note`, `list_notes` | Free-form knowledge |
+| Tasks | `create_task`, `update_task`, `add_task_log`, `start_planning` | Actionable work + plans |
+| Projects / Milestones | `enter_project`, `get_project`, `create_milestone`, … | Containers and outcomes |
+| Search / Recall | `search`, `get_recent`, `list_tags` | Semantic + structured recall |
+| Typed entities | `create_person`, `create_place`, `create_list`, … | Structured records |
+| Events | `create_event`, `list_events`, `update_event`, … | Calendar |
+| Rulebooks | `list_always_on_rules`, `list_rules`, `create_rule`, `create_project_rule`, `subscribe_project_to_rulebook`, … | Engineering/workflow rules |
+| Processes | `list_processes`, `get_process`, `create_process` | Saved prompts/workflows |
+| Trash | `list_trash`, `restore`, `purge_trash` | Recoverable deletes |
+| Admin | `get_app_logs` (write/admin key) | Diagnostics |
+
+Server-level usage guidance — when to reach for each entity, the
+recall-before-acting reflex, and the rulebook conventions — is delivered to the
+client automatically via the MCP server's `instructions` block (defined in
+`src/scribe/mcp/server.py`).

docs/api-reference.md

@@ -0,0 +1,242 @@
+# API Reference
+
+All endpoints require login (session cookie or `Authorization: Bearer <api-key>`) unless marked **(public)**.
+
+## Health
+
+| Method | Path | Description |
+|--------|------|-------------|
+| GET | `/api/health` | Health check **(public)** |
+
+## Auth
+
+| Method | Path | Description |
+|--------|------|-------------|
+| GET | `/api/auth/status` | `{has_users, registration_open, oauth_enabled, local_auth_enabled}` **(public)** |
+| POST | `/api/auth/register` | Register new user (first user becomes admin; 403 if registration closed or local auth disabled) |
+| POST | `/api/auth/login` | Login with username/password (403 if local auth disabled) |
+| POST | `/api/auth/logout` | Clear session |
+| GET | `/api/auth/me` | Current user info (includes `has_password: bool`) |
+| PUT | `/api/auth/password` | Change password `{current_password, new_password}` |
+| PUT | `/api/auth/email` | Change email `{email, password?}` (password required only for local-auth users) |
+| POST | `/api/auth/invalidate-sessions` | Bump `session_version` — evicts all other sessions, keeps current alive |
+| POST | `/api/auth/forgot-password` | Send password reset email `{email}` |
+| POST | `/api/auth/reset-password` | Reset password with token `{token, new_password}` |
+| GET | `/api/auth/oauth/login` | Initiate OIDC PKCE flow → redirect to provider |
+| GET | `/api/auth/oauth/callback` | OIDC callback — exchange code, find/create user, redirect to `/` |
+| GET | `/api/auth/invitation/:token` | Validate invitation token **(public)** |
+| POST | `/api/auth/register-with-invite` | Register with token `{token, username, password}` **(public)** |
+
+## Notes
+
+| Method | Path | Description |
+|--------|------|-------------|
+| GET | `/api/notes` | List notes. Params: `q`, `tag`, `sort`, `order`, `limit`, `offset`, `project_id`, `milestone_id`, `parent_id`, `type` (`note`/`task`/`all`) |
+| POST | `/api/notes` | Create note `{title, body, tags?, status?, priority?, due_date?, project_id?, milestone_id?, parent_id?}` |
+| GET | `/api/notes/tags` | All tags (param: `q` for filter) |
+| POST | `/api/notes/suggest-tags` | LLM tag suggestions `{title, body, current_tags?}` → `{suggested_tags}` |
+| POST | `/api/notes/link-suggestions` | Detect note titles as plain text in body `{body, project_id, exclude_note_id}` → `[{note_id, title, count}]` |
+| GET | `/api/notes/by-title` | Resolve note by exact title (param: `title`) |
+| POST | `/api/notes/resolve-title` | Get-or-create note by title `{title}` (wikilink click) |
+| GET | `/api/notes/:id` | Get single note |
+| PUT | `/api/notes/:id` | Full update |
+| PATCH | `/api/notes/:id` | Partial update (same fields as PUT) |
+| DELETE | `/api/notes/:id` | Delete note |
+| POST | `/api/notes/:id/convert-to-task` | Set `status='todo'`, `priority='none'` |
+| POST | `/api/notes/:id/convert-to-note` | Clear `status`, `priority`, `due_date` |
+| POST | `/api/notes/:id/append-tag` | Add tag `{tag}` → updated note |
+| GET | `/api/notes/:id/backlinks` | Notes/tasks with `[[Title]]` references to this note |
+| GET | `/api/notes/:id/versions` | List note version history |
+| GET | `/api/notes/:id/versions/:vid` | Get a specific version |
+| GET | `/api/notes/:id/draft` | Get current AI draft |
+| PUT | `/api/notes/:id/draft` | Save AI draft |
+| DELETE | `/api/notes/:id/draft` | Delete AI draft |
+| POST | `/api/notes/assist` | Launch AI assist generation → 202 `{body, target_section?, instruction, whole_doc?}` |
+| GET | `/api/notes/assist/stream` | SSE stream for assist (Last-Event-ID reconnect; events: `chunk`, `done`, `error`) |
+
+## Tasks
+
+| Method | Path | Description |
+|--------|------|-------------|
+| GET | `/api/tasks` | List tasks. Params: `q`, `tag`, `status`, `priority`, `due_before`, `due_after`, `sort`, `order`, `limit`, `offset` |
+| POST | `/api/tasks` | Create task (accepts `project` name string → resolved to `project_id`) |
+| GET | `/api/tasks/:id` | Get task (includes `parent_title`) |
+| PUT | `/api/tasks/:id` | Full update |
+| PATCH | `/api/tasks/:id/status` | Quick status update `{status}` |
+| DELETE | `/api/tasks/:id` | Delete task |
+| GET | `/api/tasks/:id/logs` | List work logs |
+| POST | `/api/tasks/:id/logs` | Create log `{content, duration_minutes?}` |
+| PATCH | `/api/tasks/:id/logs/:log_id` | Update log |
+| DELETE | `/api/tasks/:id/logs/:log_id` | Delete log |
+
+## Projects & Milestones
+
+| Method | Path | Description |
+|--------|------|-------------|
+| GET | `/api/projects` | List projects (owned + shared) |
+| POST | `/api/projects` | Create project |
+| GET | `/api/projects/:id` | Get project with `milestone_summary` |
+| PATCH | `/api/projects/:id` | Update project |
+| DELETE | `/api/projects/:id` | Delete project |
+| GET | `/api/projects/:id/notes` | Notes + tasks in this project |
+| GET | `/api/projects/:id/milestones` | List milestones |
+| POST | `/api/projects/:id/milestones` | Create milestone |
+| PATCH | `/api/projects/:id/milestones/:mid` | Update milestone |
+| DELETE | `/api/projects/:id/milestones/:mid` | Delete milestone |
+
+## Sharing
+
+| Method | Path | Description |
+|--------|------|-------------|
+| GET | `/api/projects/:id/shares` | List project shares |
+| POST | `/api/projects/:id/shares` | Create project share `{user_id?, group_id?, permission}` |
+| PATCH | `/api/projects/:id/shares/:sid` | Update permission |
+| DELETE | `/api/projects/:id/shares/:sid` | Remove share |
+| GET | `/api/notes/:id/shares` | List note shares |
+| POST | `/api/notes/:id/shares` | Create note share |
+| PATCH | `/api/notes/:id/shares/:sid` | Update permission |
+| DELETE | `/api/notes/:id/shares/:sid` | Remove share |
+| GET | `/api/shared-with-me` | All resources shared with the current user |
+
+## Groups
+
+| Method | Path | Description |
+|--------|------|-------------|
+| GET | `/api/groups` | List all groups (admin only) |
+| POST | `/api/groups` | Create group `{name, description?}` |
+| PATCH | `/api/groups/:id` | Update group |
+| DELETE | `/api/groups/:id` | Delete group |
+| GET | `/api/groups/:id/members` | List members |
+| POST | `/api/groups/:id/members` | Add member `{user_id, role}` |
+| PATCH | `/api/groups/:id/members/:uid` | Update member role |
+| DELETE | `/api/groups/:id/members/:uid` | Remove member |
+
+## Chat
+
+| Method | Path | Description |
+|--------|------|-------------|
+| GET | `/api/chat/conversations` | List conversations (params: `limit`, `offset`) |
+| POST | `/api/chat/conversations` | Create conversation `{title?, model?}` |
+| POST | `/api/chat/conversations/bulk-delete` | Delete multiple conversations `{ids: number[]}` |
+| GET | `/api/chat/conversations/:id` | Get conversation with all messages |
+| PATCH | `/api/chat/conversations/:id` | Update title or model |
+| DELETE | `/api/chat/conversations/:id` | Delete conversation (cascades to messages) |
+| POST | `/api/chat/conversations/:id/messages` | Start generation → 202. Body: `{content, context_note_id?, include_note_ids?, rag_project_id?, workspace_project_id?, think?}` |
+| GET | `/api/chat/conversations/:id/generation/stream` | SSE stream (Last-Event-ID reconnect; events: `context`, `chunk`, `tool_call`, `status`, `done`, `error`) |
+| POST | `/api/chat/conversations/:id/generation/cancel` | Cancel active generation |
+| POST | `/api/chat/messages/:id/save-as-note` | Save assistant message as note |
+| POST | `/api/chat/conversations/:id/summarize` | Summarize conversation → note |
+| GET | `/api/chat/status` | Ollama availability + model state `{ollama, model, default_model}` |
+| GET | `/api/chat/models` | List installed Ollama models (includes `loaded: bool`, `modified_at`) |
+| POST | `/api/chat/models/pull` | Pull model (SSE NDJSON progress) `{model}` |
+| POST | `/api/chat/models/delete` | Delete model `{model}` |
+| GET | `/api/chat/ps` | Currently loaded (hot) models |
+| POST | `/api/chat/warm` | Pre-load model into VRAM `{model}` → 202 |
+
+## Quick Capture
+
+| Method | Path | Description |
+|--------|------|-------------|
+| POST | `/api/quick-capture` | Classify + create item from natural language `{text}` → `{success, type, message, data}` |
+
+## Search
+
+| Method | Path | Description |
+|--------|------|-------------|
+| GET | `/api/search` | Semantic + keyword search across notes and tasks. Params: `q`, `type` (`note`/`task`/`all`), `limit` |
+
+## Journal
+
+| Method | Path | Description |
+|--------|------|-------------|
+| GET | `/api/journal/config` | Get journal configuration (locations, temp_unit, prep schedule) |
+| PUT | `/api/journal/config` | Save journal configuration; live-reschedules the prep job |
+| GET | `/api/journal/today` | Get/create today's journal conversation + messages |
+| GET | `/api/journal/day/:iso` | Get a specific day's journal conversation (read-only) |
+| GET | `/api/journal/days` | List dates with journal content, newest first |
+| POST | `/api/journal/trigger-prep` | Force-regenerate today's prep (or `{date}` for a specific day) |
+| GET | `/api/journal/weather` | Cached weather rows; auto-refreshes stale rows in the background |
+| GET | `/api/journal/weather/current` | Live current conditions for the primary configured location |
+| POST | `/api/journal/weather/refresh` | Manual refresh of all configured locations |
+| POST | `/api/journal/weather/geocode` | Geocode place name `{query}` → `{lat, lon, label}` |
+| POST | `/api/journal/moments/:id/update` | Update a recorded moment |
+| DELETE | `/api/journal/moments/:id` | Delete a moment |
+
+## Settings
+
+| Method | Path | Description |
+|--------|------|-------------|
+| GET | `/api/settings` | All settings as `{key: value}` |
+| PUT | `/api/settings` | Update settings `{key: value, ...}` |
+| GET | `/api/settings/models` | Installed models + defaults |
+| GET | `/api/settings/search` | Proxy SearXNG search (params: `q`) |
+
+## API Keys
+
+| Method | Path | Description |
+|--------|------|-------------|
+| GET | `/api/api-keys` | List user's API keys |
+| POST | `/api/api-keys` | Create key `{name, scope}` → `{key, ...}` (key shown once) |
+| DELETE | `/api/api-keys/:id` | Revoke key |
+
+## Scribe MCP
+
+The MCP tool surface is served at `POST /mcp` (streamable HTTP, Bearer auth) by
+the in-app server in `src/scribe/mcp/`. It is not a REST surface — see
+[API Keys and Scribe MCP](api-keys-and-mcp.md) for client configuration.
+
+## Notifications
+
+| Method | Path | Description |
+|--------|------|-------------|
+| GET | `/api/notifications` | List notifications |
+| GET | `/api/notifications/count` | Unread count |
+| POST | `/api/notifications/:id/read` | Mark read |
+| POST | `/api/notifications/read-all` | Mark all read |
+
+## Push
+
+| Method | Path | Description |
+|--------|------|-------------|
+| GET | `/api/push/vapid-public-key` | VAPID public key for subscription |
+| POST | `/api/push/subscribe` | Register push subscription |
+| DELETE | `/api/push/subscribe` | Unregister push subscription |
+
+## Images
+
+| Method | Path | Description |
+|--------|------|-------------|
+| GET | `/api/images/:id` | Serve cached image **(no auth required — IDs are opaque SHA-256)** |
+
+## Users
+
+| Method | Path | Description |
+|--------|------|-------------|
+| GET | `/api/users/search` | Search users by username/email prefix (param: `q`, min 2 chars, excludes self) |
+
+## Export
+
+| Method | Path | Description |
+|--------|------|-------------|
+| GET | `/api/export` | Export data. Params: `format=markdown` (ZIP with `.md` + YAML frontmatter) or `format=json` |
+
+## Admin
+
+| Method | Path | Description |
+|--------|------|-------------|
+| GET | `/api/admin/backup` | Export backup (`?scope=user` for own data; full requires admin) |
+| POST | `/api/admin/restore` | Restore from JSON backup |
+| GET | `/api/admin/users` | List all users |
+| DELETE | `/api/admin/users/:id` | Delete user (cannot delete self) |
+| GET | `/api/admin/registration` | Get registration open/closed state |
+| PUT | `/api/admin/registration` | Toggle registration `{open: bool}` |
+| POST | `/api/admin/invitations` | Create invitation `{email}` → sends email |
+| GET | `/api/admin/invitations` | List pending invitations |
+| DELETE | `/api/admin/invitations/:id` | Revoke invitation |
+| GET | `/api/admin/logs` | Log entries. Params: `category`, `user_id`, `search`, `date_from`, `date_to`, `limit`, `offset` |
+| GET | `/api/admin/logs/stats` | Log category counts |
+| GET | `/api/admin/base-url` | Get base URL setting |
+| PUT | `/api/admin/base-url` | Set base URL `{base_url}` |
+| GET | `/api/admin/smtp` | Get SMTP config (password masked) |
+| PUT | `/api/admin/smtp` | Save SMTP config |
+| POST | `/api/admin/smtp/test` | Send test email `{recipient}` |

docs/architecture.md

@@ -0,0 +1,380 @@
+# Architecture
+
+## Stack
+
+| Layer | Technology | Notes |
+|-------|-----------|-------|
+| Frontend | Vue 3 + TypeScript + Vite + Pinia + Vue Router | SPA served from the same container as the API |
+| Editor | Tiptap (ProseMirror) with custom slash-command extension | |
+| Backend | Python 3.12, Quart (async ASGI) | Serves both API and built frontend static files |
+| Database | PostgreSQL 16, SQLAlchemy 2.0 async, Alembic | asyncpg driver |
+| LLM | Ollama (local) | Any OpenAI-compatible API also works |
+| Search | SearXNG (optional, self-hosted) | Web search + image search |
+| Push | Web Push / VAPID (pywebpush 2.x) | |
+| Deployment | Docker Compose | Single-container app + separate DB + LLM service |
+
+## High-Level Component Diagram
+
+```
+┌─────────────────────────────────────────────┐
+│              Docker Compose                  │
+│                                              │
+│  ┌──────────────────────┐   ┌────────────┐  │
+│  │  scribe     │   │  ollama    │  │
+│  │  ┌────────────────┐  │   │            │  │
+│  │  │  Quart Server  │  │   │  LLM API   │  │
+│  │  │  ┌──────────┐  │  │   │            │  │
+│  │  │  │ Vue SPA  │  │  │   └────────────┘  │
+│  │  │  │ (static) │  │  │         ▲         │
+│  │  │  └──────────┘  │  │         │         │
+│  │  │  ┌──────────┐  │  │    HTTP/REST      │
+│  │  │  │ /api/*   │──┼──┼─────────┘         │
+│  │  │  └──────────┘  │  │                   │
+│  │  │       │        │  │  ┌────────────┐   │
+│  │  │       ▼        │  │  │ PostgreSQL │   │
+│  │  │  ┌──────────┐  │  │  │    16      │   │
+│  │  │  │ asyncpg  │──┼──┼──▶            │   │
+│  │  │  └──────────┘  │  │  └────────────┘   │
+│  │  └────────────────┘  │                   │
+│  └──────────────────────┘                   │
+└─────────────────────────────────────────────┘
+```
+
+## Project Structure
+
+```
+scribe/
+├── docker-compose.yml           # Development stack
+├── docker-compose.prod.yml      # Production stack (Docker Swarm)
+├── Dockerfile                   # Multi-stage build (Node → Python)
+├── alembic/                     # Database migrations
+│   └── versions/                # Migration files (idempotent raw SQL)
+├── src/scribe/
+│   ├── app.py                   # Quart app factory + blueprint registration
+│   ├── config.py                # Config class (reads env vars)
+│   ├── auth.py                  # login_required decorator, session checks
+│   ├── models/                  # SQLAlchemy models
+│   ├── mcp/                      # In-app MCP server (FastMCP, mounted at /mcp)
+│   │   ├── server.py            # FastMCP instance + instructions + Quart mount
+│   │   └── tools/               # Tool modules (notes, tasks, projects, rulebooks, …)
+│   ├── routes/                  # API blueprints (one file per resource)
+│   ├── services/                # Business logic (access, llm, tools, sharing, …)
+│   └── static/                  # Built Vue SPA (generated at Docker build time)
+└── frontend/
+    └── src/
+        ├── views/               # Page-level Vue components
+        ├── components/          # Reusable UI components
+        ├── composables/         # Vue composables (autosave, shortcuts, …)
+        ├── stores/              # Pinia stores (auth, chat, notes, notifications, …)
+        └── api/                 # Typed API client (client.ts)
+```
+
+## Key Design Decisions
+
+**Single container for frontend + API.** Quart serves the Vue.js production build as static files and exposes the REST API under `/api/`. The SPA is built by Vite during the Docker image build.
+
+**SPA routing via 404 handler.** `app.py` uses `@app.errorhandler(404)` (not a catch-all route) to serve static files or fall back to `index.html`. API routes (`/api/*`) always return JSON 404. This avoids a catch-all `/<path:path>` route intercepting API GETs.
+
+**Unified note/task model.** A task is just a note with task attributes enabled. `status IS NOT NULL` means it's a task. "Convert to task" sets `status='todo'`; "convert to note" clears `status`, `priority`, `due_date`. No separate table, no cascade complexity.
+
+**First-class tag column.** Tags live in a `tags ARRAY[text]` column and are explicitly set by the client — not auto-extracted from body text. Hierarchical tags (`project/webapp`) supported via SQL `unnest + LIKE` prefix matching.
+
+**Background generation architecture.** LLM streaming runs in a detached `asyncio.Task` that writes into an in-memory `GenerationBuffer`. SSE clients tail the buffer and can reconnect mid-stream without data loss. Buffer has a `cancel_event` for user-initiated stop. Completed buffers are cleaned up after 60s grace period. Periodic DB flushes every 5s preserve partial content. Both chat and AI Assist use this architecture.
+
+**SSE over WebSockets for LLM streaming.** SSE clients connect via `GET /api/chat/conversations/:id/generation/stream` with `Last-Event-ID` reconnection support. Frontend uses `fetch()` + `ReadableStream`.
+
+**Context building is server-side.** Backend fetches URL content and searches notes. Frontend sends the message text + optional context note IDs. `build_context()` returns `(messages, context_meta)`; metadata includes auto-found note IDs/titles sent to frontend via a `context` SSE event before streaming begins.
+
+**No blocking long-running operations.** Any slow operation (model pulls, LLM calls, URL fetching) must never block app startup or freeze the UI. Backend uses SSE streaming for incremental responses. Model pulls stream NDJSON progress to the frontend.
+
+**SSRF protection.** `services/llm.py` blocks requests to loopback, private, link-local, reserved, and multicast addresses before fetching. `follow_redirects=False` prevents redirect-based bypasses.
+
+**Session cookie security.** `HttpOnly` and `SameSite=Lax` always set. `Secure` flag controlled by `SECURE_COOKIES` env var.
+
+**Rate limiting.** In-memory sliding-window rate limiter (`rate_limit.py`) applied to auth endpoints: login (10/60s), register (5/300s), forgot-password (5/300s), reset-password (10/60s). Keys are per-IP. `TRUST_PROXY_HEADERS` env var enables `X-Forwarded-For` / `X-Real-IP` when behind a reverse proxy.
+
+**Idempotent migrations.** All Alembic migrations use raw SQL with `CREATE TABLE IF NOT EXISTS`, `CREATE INDEX IF NOT EXISTS`, and `DO $$ BEGIN CREATE TYPE ... EXCEPTION WHEN duplicate_object` to allow safe re-runs.
+
+## Data Model
+
+### Users
+
+| Column | Type | Notes |
+|--------|------|-------|
+| `id` | int PK | |
+| `username` | text UNIQUE NOT NULL | |
+| `email` | text nullable | |
+| `password_hash` | text nullable | NULL for OAuth-only accounts |
+| `oauth_sub` | text UNIQUE nullable | OIDC subject identifier |
+| `role` | text NOT NULL DEFAULT 'user' | First user auto-assigned 'admin' |
+| `session_version` | int NOT NULL DEFAULT 1 | Bumped on password change to evict sessions |
+| `created_at` | timestamptz | |
+
+### Notes (unified — includes tasks)
+
+| Column | Type | Notes |
+|--------|------|-------|
+| `id` | int PK | |
+| `title` | text | |
+| `body` | text | Markdown |
+| `tags` | ARRAY[text] | GIN indexed; explicitly set by client |
+| `parent_id` | int FK self nullable | Sub-tasks / sub-notes |
+| `user_id` | int FK users nullable | CASCADE |
+| `project_id` | int FK projects nullable | |
+| `milestone_id` | int FK milestones nullable | |
+| `status` | text nullable | `todo`/`in_progress`/`done` — non-null = task |
+| `priority` | text nullable | `none`/`low`/`medium`/`high` |
+| `due_date` | date nullable | |
+| `created_at`, `updated_at` | timestamptz | |
+
+Indexes: GIN on `tags`, B-tree on `status`, B-tree on `title`.
+
+### Settings
+
+Composite PK `(user_id, key)`. Per-user key-value store. CRUD via `services/settings.py`. Used for: `default_model`, `assistant_name`, `journal_config` (JSON: locations, temp_unit, prep schedule), `user_timezone`, `voice_*`, etc.
+
+### Conversations / Messages
+
+`conversations`: `id`, `title`, `model`, `user_id`, `conversation_type` (`chat`/`journal`/`mcp`), `day_date` (YYYY-MM-DD for journal conversations), `rag_project_id` (nullable int — RAG scope: NULL=orphan-only, -1=all, positive=project), `created_at`, `updated_at`.
+`messages`: `id`, `conversation_id` FK CASCADE, `role` (`user`/`assistant`), `content`, `status` (`done`/`generating`), `created_at`.
+
+Title auto-generated by LLM on first exchange, re-generated every 10th message.
+
+### Projects / Milestones
+
+`projects`: `id`, `user_id`, `title`, `description`, `goal`, `status` (`active`/`completed`/`archived`), `color`, `auto_summary` (nullable text — LLM-generated summary for `search_projects` scoring), `summary_updated_at` (nullable timestamptz), timestamps.
+`milestones`: `id`, `user_id`, `project_id` FK CASCADE, `title`, `description`, `status`, `order_index`, timestamps.
+
+### Sharing & Access
+
+`project_shares`, `note_shares`: each has `shared_with_user_id` OR `shared_with_group_id` (exclusive), `permission` (`viewer`/`editor`/`admin`), `invited_by`.
+
+`groups`, `group_memberships`: platform-wide groups with `member`/`owner` roles.
+
+Permission resolution is centralised in `services/access.py`. `get_project_permission(uid, project_id)` checks ownership → direct share → group-based share → note→project inheritance, returning the highest applicable permission.
+
+### Journal-Related Tables
+
+`weather_cache`: per-user, per-`location_key` cache. Columns: `user_id`, `location_key` (`home`/`work`/etc.), `location_label`, `forecast_json` (Open-Meteo response), `previous_json` (last forecast, used to detect changes), `fetched_at`. Lat/lon are *not* stored on the cache row — they live in the user's `journal_config.locations.{home|work}` setting and are used at refresh time.
+
+### API Keys
+
+`api_keys`: `id`, `user_id` FK CASCADE, `prefix` (first 8 chars, displayed in UI), `key_hash` (SHA-256 of full key — full key never stored), `name`, `scope` (`read`/`write`), `created_at`, `last_used_at`.
+
+### App Logs
+
+`category` (`audit`/`usage`/`error`), `user_id` FK nullable (SET NULL on delete), `username` (denormalised), `action`, `endpoint`, `method`, `status_code`, `duration_ms`, `error_type`, `error_message`, `traceback`, `details` JSONB.
+
+## Detailed File Reference
+
+### Backend (`src/scribe/`)
+
+| File | Responsibility |
+|------|---------------|
+| `app.py` | Quart app factory; SPA via 404 handler; JSON 404/500 for API; request logging; security headers in `after_request` |
+| `auth.py` | `login_required`, `admin_required`, `get_current_user_id` — shared `_check_auth()` helper; accepts session cookie or `Authorization: Bearer <key>` |
+| `config.py` | All config from env vars + Docker secret file support (`_read_secret`); `SECURE_COOKIES`, `TRUST_PROXY_HEADERS`, `OLLAMA_NUM_CTX`; `oidc_enabled()`, `searxng_enabled()` classmethods |
+| `rate_limit.py` | In-memory sliding-window rate limiter (`asyncio.Lock` + `defaultdict`); `is_rate_limited(key, max, window)` |
+| `models/note.py` | Unified Note model (notes + tasks) |
+| `models/user.py` | `id`, `username`, `email`, `password_hash` (nullable — NULL for OAuth-only), `oauth_sub` (unique nullable), `role`, `session_version` |
+| `models/conversation.py` | `Conversation` + `Message` models |
+| `models/app_log.py` | `AppLog` with `category`, denormalised `username`, `details` JSONB |
+| `models/api_key.py` | `ApiKey`: `id`, `user_id`, `prefix`, `key_hash` (SHA-256), `name`, `scope` (`read`/`write`), `created_at`, `last_used_at` |
+| `models/event.py` | Internal events store (`Event` model: `id`, `user_id`, `title`, `description`, `start_dt`, `end_dt`, `all_day`, `location`, `caldav_uid` nullable, `color`, timestamps) |
+| `routes/api.py` | `/api` blueprint; `GET /api/health` (public) |
+| `routes/auth.py` | Register, login, logout, me, password/email change, password reset, invite registration, OAuth login+callback; rate limiting; `LOCAL_AUTH_ENABLED` guards |
+| `routes/admin.py` | Backup, restore, user management, registration toggle, invitations, base URL, SMTP (admin only) |
+| `routes/chat.py` | Conversations CRUD; SSE generation stream; model pull/delete/list/warm |
+| `routes/notes.py` | Notes CRUD + wikilinks + backlinks + assist + link suggestions + version history + drafts |
+| `routes/tasks.py` | Tasks CRUD; `POST` accepts `project` name string (resolved to `project_id`) |
+| `routes/task_logs.py` | Task work log CRUD (`GET/POST/DELETE /api/tasks/:id/logs`) |
+| `routes/projects.py` | Projects CRUD + summary endpoint |
+| `routes/milestones.py` | Milestones CRUD under `/api/projects/:id/milestones` |
+| `routes/settings.py` | Per-user settings key-value (`GET/PUT /api/settings/:key`) |
+| `routes/journal.py` | Journal config CRUD; today/day/days conversation accessors; weather endpoints (cached/current/refresh/geocode); moments CRUD; trigger-prep |
+| `routes/groups.py` | Group CRUD + membership management (admin) |
+| `routes/shares.py` | Share project/note with user or group; revoke; list incoming shares |
+| `routes/in_app_notifications.py` | In-app notification list + mark-read + count |
+| `routes/push.py` | Web Push subscription subscribe/unsubscribe; VAPID public key |
+| `routes/users.py` | User profile; admin user list + delete |
+| `routes/images.py` | Serve cached images at `/api/images/<id>` |
+| `routes/export.py` | `GET /api/export` — personal Markdown ZIP or JSON array download |
+| `routes/api_keys.py` | API key CRUD (`GET/POST/DELETE /api/api-keys`) |
+| `mcp/server.py` | Mounts the in-app FastMCP server at `/mcp` (streamable HTTP, Bearer auth) |
+| `routes/quick_capture.py` | `POST /api/quick-capture` — single-shot natural language item creation |
+| `routes/search.py` | `GET /api/search` — semantic + keyword hybrid search |
+| `services/auth.py` | `create_user`, `authenticate`, user lookups, password reset tokens, invitation tokens |
+| `services/oauth.py` | OIDC discovery (cached), PKCE auth URL, code exchange, `find_or_create_oauth_user` |
+| `services/api_keys.py` | `generate_key()`, `create_api_key()`, `list_api_keys()`, `revoke_api_key()`, `lookup_key()` (SHA-256 hash lookup) |
+| `services/llm.py` | `build_context()`, RAG injection, history summarisation, `stream_chat_with_tools()`, URL fetching, SSRF guard |
+| `services/generation_task.py` | `run_generation()` — full chat pipeline: intent routing, tool loop, SSE fan-out, push notification; `run_assist_generation()` |
+| ~~`services/intent.py`~~ | Removed — intent routing eliminated; the main model handles all tool routing directly |
+| `services/tools/` | LLM tool package — decorator-based registry (`_registry.py`), shared helpers (`_helpers.py`), and one module per domain: `notes.py` (create/update/delete/search/list/read), `tasks.py` (list/log_work), `entities.py` (save_person/save_place/lists), `projects.py`, `calendar.py`, `web.py`, `rag.py`, `profile.py`, `rss.py`, `weather.py`, `utility.py` (calculate). `execute_tool()` and `get_tools_for_user()` are the public API. |
+| `services/projects.py` | Project CRUD + `generate_project_summary()` (Ollama, fire-and-forget) + `backfill_project_summaries()` (startup) |
+| `services/embeddings.py` | `upsert_note_embedding()`, `semantic_search_notes(orphan_only=False)` (pgvector cosine similarity) |
+| `services/generation_buffer.py` | In-memory SSE event buffer; `cancel_event`; 60s cleanup; supports both chat (int keys) and assist (string keys) |
+| `services/notes.py` | Note CRUD, wikilink resolution, backlink queries, tag management |
+| `services/note_versions.py` | Version snapshot on save; restore-from-version; diff metadata |
+| `services/note_drafts.py` | Per-user per-note draft persistence (AI Assist pending state) |
+| `services/settings.py` | `get_setting()`, `set_setting()`, `get_all_settings()` — key-value per user |
+| `services/tag_suggestions.py` | `/api/notes/suggest-tags` — LLM-generated tag suggestions for note body |
+| `services/access.py` | Permission resolution for all shared resources |
+| `services/sharing.py` | Create/revoke shares; list shares; `get_shared_with_me()` |
+| `services/groups.py` | Group CRUD; membership management |
+| `services/notifications.py` | Create/read/mark-read in-app notifications |
+| `services/task_logs.py` | Append/list/delete work log entries on tasks |
+| `services/journal_prep.py` | Deterministic data gather (tasks/events/weather/projects/recent moments/open threads) → LLM prose opener; persisted as the first assistant message of today's journal Conversation |
+| `services/journal_pipeline.py` | System-prompt builder for journal conversations; calls `build_profile_context()` so the LLM sees the user's profile + learned summary |
+| `services/journal_scheduler.py` | APScheduler `BackgroundScheduler`; per-user prep job; live-reschedule via `update_user_schedule()`; catch-up logic for missed runs |
+| `services/journal_search.py`, `services/moments.py` | Moment recording + search across journal history |
+| `services/user_profile.py` | `build_profile_context()` consolidates profile + observations + learned_summary into a system-prompt block |
+| `services/research.py` | SearXNG research pipeline: sub-queries → parallel fetch → outline → section synthesis → executive summary → index note with linked section notes |
+| `services/events.py` | Internal events CRUD: `list_events`, `create_event`, `update_event`, `delete_event`, `get_event`; source of truth for all event LLM tools |
+| `routes/events.py` | `/api/events` — event CRUD routes |
+| `services/caldav.py` | Optional CalDAV sync — user-configured external server; syncs to/from internal store via `caldav_uid` FK; `is_caldav_configured()` guards tool activation |
+| `services/calendar_sync.py` | Dead code — Radicale sync service; was trialled and removed |
+| `services/images.py` | `fetch_and_store_image()` — SHA-256 dedup, content-type validation, 5 MB cap |
+| `services/backup.py` | `export_full_backup()`, `export_user_backup()`, `restore_full_backup()` (version 2 with ID maps) |
+| `services/push.py` | VAPID key auto-generation; `send_push_notification()` fire-and-forget; 410 Gone cleanup |
+| `services/logging.py` | `log_audit`, `log_usage`, `log_error`, `start_log_retention_loop` (hourly cleanup) |
+| `services/email.py` | SMTP email sending for password reset; reads `SMTP_*` env vars |
+| `services/weather.py` | Nominatim geocoding + Open-Meteo forecast + per-user DB cache |
+| `services/rss.py` | feedparser fetch; per-feed DB cache; prune-to-100 items |
+| `services/assist.py` | `build_assist_messages()` — section/whole-doc modes; project context injection |
+
+### Frontend (`frontend/src/`)
+
+| File | Responsibility |
+|------|---------------|
+| `App.vue` | App shell (`100dvh` flex column); global keyboard shortcuts (`g`+key nav, `n/t/c/e///?`); starts status polling + loads settings on mount |
+| `api/client.ts` | `ApiError`, `apiGet/Post/Put/Patch/Delete`, `apiSSEStream` (fetch + ReadableStream), auto 401→login redirect |
+| `stores/auth.ts` | User, `isAuthenticated`, `isAdmin`, `oauthEnabled`, `localAuthEnabled`, login/register/logout/checkAuth |
+| `stores/chat.ts` | Conversation CRUD; `sendMessage()` SSE streaming; `reconnectIfGenerating()`; message queue (localStorage); `streamingStatus` |
+| `stores/notes.ts` | CRUD + tag filter; `resolveTitle`; `convertToTask/Note`; `fetchBacklinks`; `fetchAllTags` |
+| `stores/tasks.ts` | CRUD + status/priority filter; `patchStatus` |
+| `stores/settings.ts` | `assistantName`, `defaultModel`, `installedModels`; `pullModel()`, `deleteModel()` |
+| `stores/push.ts` | `isSupported`, `permission`, `isSubscribed`, `subscribe/unsubscribe` |
+| `stores/notifications.ts` | `count`, `items`, `fetchCount`, `fetchAll`, `markRead`, `markAll` |
+| `views/HomeView.vue` | Chat-first dashboard; 6 task sections (Overdue → Other); 8 recent notes; inline streaming response |
+| `views/ChatView.vue` | `/chat` — SSE streaming; context sidebar (Suggested/In Context); note picker; scope chip (RAG project scope pill above input); message queue; bulk delete |
+| `views/CalendarView.vue` | `/calendar` — FullCalendar v6 month/week/day views; click to create event; click event to open EventSlideOver |
+| `components/EventSlideOver.vue` | Reusable slide-over for event create/edit/delete; used in ToolCallCard, HomeView, CalendarView |
+| `views/WorkspaceView.vue` | `/workspace/:id` — 3-panel (tasks/chat/notes); SSE tool-call watcher; conv persisted to localStorage |
+| `views/GraphView.vue` | `/graph` — D3 force-directed; tag/note/project-hub nodes; physics panel; peek panel |
+| `views/ProjectView.vue` | Kanban grouped by milestone; advance buttons; milestone management |
+| `views/SettingsView.vue` | Tabbed settings (11 tabs); tab state in localStorage |
+| `views/NoteEditorView.vue` | Tiptap editor; 2-column layout; AI assist panel; diff view; version history; autosave |
+| `views/TaskEditorView.vue` | Tiptap editor; 2-column layout; AI assist panel; task log section; sub-tasks |
+| `components/ToolCallCard.vue` | Tool call results; `requires_confirmation` inline confirm/deny; direct POST on "Create anyway" |
+| `components/ChatMessage.vue` | Message bubble; markdown rendering; tool call cards; "Save as Note" |
+| `components/TagInput.vue` | Chip-based tag input; Enter/comma to confirm; autocomplete from `/api/notes/tags` |
+| `components/TiptapEditor.vue` | Tiptap wrapper; markdown↔HTML round-trip; selection change emit; WikilinkDecoration; TagDecoration |
+| `components/ShareDialog.vue` | `<Teleport>` modal; user tab + group tab; current shares list |
+| `components/WorkspaceTaskPanel.vue` | Milestone-grouped task list; detail slide-over |
+| `components/WorkspaceNoteEditor.vue` | List ↔ TipTap editor with autosave |
+| `composables/useAssist.ts` | AI assist: section parsing, SSE streaming, accept/reject, LCS diff, persistent draft |
+| `composables/useAutoSave.ts` | Interval-based autosave (5 min) with dirty/saving guards |
+| `composables/useEditorGuards.ts` | Ctrl+S, `beforeunload` warning, route-leave confirm |
+| `composables/useTagSuggestions.ts` | `/api/notes/suggest-tags` call + suggestion state |
+| `composables/useListKeyboardNavigation.ts` | j/k/Enter list navigation; focus-in-input guard |
+| `extensions/WikilinkDecoration.ts` | ProseMirror decoration plugin highlighting `[[wikilinks]]` |
+| `extensions/TagDecoration.ts` | ProseMirror decoration plugin highlighting `#tags` |
+| `extensions/WikilinkSuggestion.ts` | `@tiptap/suggestion` extension for `[[` autocomplete |
+
+## Key Services
+
+| Service | Responsibility |
+|---------|---------------|
+| `services/access.py` | Permission resolution for all shared resources |
+| `services/llm.py` | `build_context()`, RAG injection, history summarisation |
+| `services/generation_task.py` | SSE streaming, tool-call loop, GenerationBuffer management |
+| `services/tools/` | LLM tool implementations (38 tools across 11 modules); decorator-based registry |
+| `services/embeddings.py` | `upsert_note_embedding()`, `semantic_search_notes()` |
+| `services/journal_prep.py` | Data gather → LLM prose opener; persisted into today's journal conversation |
+| `services/journal_scheduler.py` | APScheduler integration, per-user prep job, catch-up for missed runs |
+| `services/backup.py` | Full and per-user backup export/restore (version 2 format) |
+| `services/weather.py` | Nominatim geocoding + Open-Meteo forecast fetch + DB cache |
+| `services/rss.py` | feedparser-based fetch, per-feed DB cache, prune-to-100 |
+
+## Authentication
+
+**Session cookies** — `HttpOnly`, `SameSite=Lax`, optionally `Secure` (`SECURE_COOKIES` env var). Session includes `session_version`; mismatch with DB value (after password change) results in 401 and session clear.
+
+**Bearer token / API keys** — `Authorization: Bearer <key>` accepted by `_check_auth()` as an alternative to session cookies. The raw key is SHA-256 hashed and looked up via `services/api_keys.py`. Keys with `scope=read` are rejected on non-safe methods (`POST`/`PATCH`/`DELETE`). Used by Fable MCP and any external API consumers.
+
+**Local auth + OIDC/OAuth (PKCE)** — `services/oauth.py` handles discovery and `find_or_create_oauth_user`. On OAuth login: checks existing `oauth_sub` → matching email → creates new user.
+
+See [sso-oauth.md](sso-oauth.md) for provider-specific setup instructions.
+
+## LLM Pipeline Internals
+
+### Tool Routing
+
+No separate intent router — the main model handles all tool routing directly via Ollama's structured tool-calling output. The model receives the full tool schema list and decides whether to call a tool or respond conversationally. Extended reasoning (`think=True`) is always on for qwen3-class models: content-based gating was tried but exposed tool-call template fragility on short tool-intent prompts.
+
+### Tool Loop
+
+Multi-round tool loop (max 5 rounds). All implementations in `services/tools/` (decorator-based registry); `execute_tool(user_id, tool_name, arguments, conv_id=None, workspace_project_id=None)` is the dispatcher. `conv_id` and `workspace_project_id` are threaded in from `run_generation()` so tools like `set_rag_scope` can write to the current conversation.
+
+**Unified `create_note` tool** — creates both notes and tasks. Setting `status` (e.g. `"todo"`) creates a task; omitting it creates a knowledge note. All task fields (due_date, priority, milestone, parent_task, recurrence_rule) are available on the single tool.
+
+**Duplicate protection on `create_note`:**
+1. Exact title match (case-insensitive) → hard block, redirect to `update_note`
+2. Fuzzy title match (SequenceMatcher ≥ 82%; punctuation stripped before candidate search) → hard block
+3. Semantic content similarity (threshold 0.90, body ≥ 80 chars) → soft block with `requires_confirmation: true`
+
+**Project resolution** (`_helpers.resolve_project`): 4-step lookup — (1) exact DB match, (2) `query in title` substring, (3) `title in query` reverse substring, (4) SequenceMatcher ≥ 0.55.
+
+### Context Window and Summarisation
+
+`OLLAMA_NUM_CTX` (default 16384) controls the context window for all generation calls. Intent classification always uses `num_ctx=4096` to reduce VRAM pressure.
+
+History summarisation threshold: 30 messages. Keeps 8 recent messages. Summary max 400 tokens.
+
+### Web Research Pipeline
+
+`services/research.py` implements a full autonomous research pipeline:
+1. Intent model generates 5 focused sub-queries
+2. All 5 SearXNG queries run in parallel (200ms stagger to avoid rate limiter)
+3. Up to 15 unique URLs fetched in parallel
+4. LLM generates an outline (2–8 sections with title + focus)
+5. Each section synthesised in parallel from relevant sources
+6. Executive summary generated from all section content
+7. Index note created with executive summary + links to section notes; section notes linked back via `parent_id`
+8. Falls back to single-note synthesis if outline generation fails
+
+SearXNG tip: add the app server IP to `botdetection.ip_lists.pass_ip` in SearXNG `settings.yml` to bypass the rate limiter for trusted backend requests.
+
+### Image Cache
+
+`search_images` tool fetches images server-side via SearXNG, stores them on disk (SHA-256 dedup, content-type validation, 5 MB cap), and serves from `/api/images/<id>`. The user's browser never contacts the original image host.
+
+Config: `IMAGE_CACHE_DIR` (default `/data/images`), `IMAGE_MAX_BYTES` (default 5 MB).
+
+## RAG Pipeline
+
+1. `semantic_search_notes()` — cosine similarity via pgvector, threshold configurable per call; accepts `orphan_only` and `project_id` scope flags.
+2. Notes ≥ 0.60 similarity auto-injected into system prompt (up to 3, 800 chars each).
+3. Notes 0.45–0.60 surfaced in chat sidebar as "Suggested" (user clicks to include).
+4. Explicitly included notes delivered full-body.
+5. `excluded_note_ids` prevents the current note from being injected as its own context.
+
+### RAG Scope (three-value system)
+
+`conversations.rag_project_id` controls which notes are eligible for retrieval:
+
+| Value | Behaviour |
+|-------|-----------|
+| `NULL` (default) | Orphan notes only — notes with `project_id IS NULL` |
+| `-1` | All notes — opt-in to global search |
+| Positive int | That project's notes only |
+
+`build_context()` derives `orphan_only` + `effective_project_id` from this value before calling both the semantic and keyword search paths.
+
+**Scope tools** — Two LLM tools let the model discover and switch scope mid-conversation:
+- `search_projects` — SequenceMatcher scoring over title + description + `auto_summary`; returns top 5 matching projects.
+- `set_rag_scope` — persists the new `rag_project_id` to DB immediately; blocked in workspace view; causes the SSE `done` event to include `new_rag_scope` + `new_rag_scope_label` so the frontend chip updates reactively.
+
+**Project summaries** — `generate_project_summary()` calls Ollama (fire-and-forget) and stores the result in `projects.auto_summary`. Triggered on project update and note saves (debounced 1h). `backfill_project_summaries()` runs at startup.
+
+Embedding model: `nomic-embed-text` via Ollama. Backfill runs 30s after startup (background task).

docs/configuration.md

@@ -0,0 +1,149 @@
+# Configuration
+
+Configuration is via environment variables. The `docker-compose.yml` file sets defaults for local development; override them in a `.env` file (gitignored).
+
+## Environment Variables
+
+### Core
+
+| Variable | Default | Description |
+|----------|---------|-------------|
+| `DATABASE_URL` | `postgresql+asyncpg://fabled:fabled@db/scribe` | PostgreSQL async connection string |
+| `SECRET_KEY` | `dev-secret-change-me` | Session signing key — **change this in production** |
+| `SECRET_KEY_FILE` | — | Path to a Docker secret file containing the key (alternative to `SECRET_KEY`) |
+| `LOG_LEVEL` | `INFO` | Logging verbosity (`DEBUG`, `INFO`, `WARNING`, `ERROR`) |
+| `SECURE_COOKIES` | `false` | Set `true` when running behind TLS |
+| `BASE_URL` | — | Public URL (e.g. `https://notes.example.com`) — required for OIDC redirect URIs and email links |
+
+### LLM / Ollama
+
+| Variable | Default | Description |
+|----------|---------|-------------|
+| `OLLAMA_URL` | `http://ollama:11434` | Ollama API base URL |
+| `OLLAMA_MODEL` | `llama3.2` | Default LLM model (used as fallback; per-user setting overrides this) |
+| `EMBEDDING_MODEL` | `nomic-embed-text` | Model used for semantic search / RAG embeddings |
+| `OLLAMA_NUM_CTX` | `16384` | Context window size passed to Ollama for all generation calls |
+
+### Authentication / OIDC
+
+| Variable | Default | Description |
+|----------|---------|-------------|
+| `LOCAL_AUTH_ENABLED` | `true` | Set `false` to disable local username/password login (SSO-only mode) |
+| `OIDC_ISSUER` | — | OIDC issuer URL (e.g. `https://auth.example.com/application/o/fabled/`) |
+| `OIDC_CLIENT_ID` | — | OIDC client ID |
+| `OIDC_CLIENT_SECRET` | — | OIDC client secret |
+| `OIDC_CLIENT_SECRET_FILE` | — | Docker secret file alternative to `OIDC_CLIENT_SECRET` |
+| `OIDC_SCOPES` | `openid profile email` | Space-separated OIDC scopes to request |
+
+See [sso-oauth.md](sso-oauth.md) for provider-specific setup.
+
+### Security / Proxy
+
+| Variable | Default | Description |
+|----------|---------|-------------|
+| `TRUST_PROXY_HEADERS` | `false` | Set `true` when behind a trusted reverse proxy to read real IP from `X-Forwarded-For` / `X-Real-IP` |
+
+### Web Search / Images
+
+| Variable | Default | Description |
+|----------|---------|-------------|
+| `SEARXNG_URL` | — | SearXNG base URL for web search and image search tools |
+| `IMAGE_CACHE_DIR` | `/data/images` | Directory for cached search images |
+| `IMAGE_MAX_BYTES` | `5242880` (5 MB) | Maximum size for cached images |
+
+### Data / Logging
+
+| Variable | Default | Description |
+|----------|---------|-------------|
+| `LOG_RETENTION_DAYS` | `90` | Days to keep app logs before automatic pruning |
+| `DATA_DIR` | `/data` | Root directory for persistent data (VAPID keys, backups) |
+
+## Docker Compose Setup
+
+### Development (`docker-compose.yml`)
+
+```bash
+# Copy the example env file
+cp .env.example .env
+# Edit .env to set a real SECRET_KEY
+
+# Start the stack
+docker compose up --build
+
+# App available at http://localhost:5000
+```
+
+The first user to register becomes admin. Registration auto-closes after that (re-enable from Settings → Users).
+
+### Production (`docker-compose.prod.yml`)
+
+The production compose file adds:
+- Docker Secrets for `SECRET_KEY_FILE` and `DATABASE_URL_FILE`
+- Network isolation (internal bridge for DB + Ollama; only the app is externally accessible)
+- Health checks and resource limits
+
+```bash
+# Create Docker secrets
+echo "$(python3 -c 'import secrets; print(secrets.token_hex(32))')" | docker secret create fabled_secret_key -
+echo "postgresql+asyncpg://fabled:strongpassword@db/scribe" | docker secret create fabled_db_url -
+
+# Deploy
+docker stack deploy -c docker-compose.prod.yml fabled
+```
+
+## Production Deployment
+
+### Reverse Proxy (Required)
+
+Fabled Assistant does **not** handle SSL/TLS. Run it behind a reverse proxy:
+
+- **Nginx**, **Traefik**, or **Caddy** in front of the app container
+- Terminate TLS at the proxy; forward to port 5000
+- **Do not expose port 5000 directly to the internet**
+- Rate-limit auth endpoints: ≤ 5 req/min per IP on `/api/auth/login` and `/api/auth/register`
+
+Example Nginx location block:
+```nginx
+location / {
+    proxy_pass http://127.0.0.1:5000;
+    proxy_set_header Host $host;
+    proxy_set_header X-Real-IP $remote_addr;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+
+    # Required for SSE streaming
+    proxy_buffering off;
+    proxy_read_timeout 600s;
+    proxy_send_timeout 600s;
+}
+```
+
+If using `TRUST_PROXY_HEADERS=true`, ensure your proxy strips any client-supplied `X-Forwarded-For` headers before adding its own.
+
+### Security Checklist
+
+- **Strong `SECRET_KEY`** — generate with:
+  ```bash
+  python3 -c "import secrets; print(secrets.token_hex(32))"
+  ```
+  Or use Docker Secrets via `SECRET_KEY_FILE`.
+- **`SECURE_COOKIES=true`** — must be set when running behind TLS.
+- **`BASE_URL`** — set to your public URL; required for OIDC redirects and email links.
+- **Registration** — auto-closes after the first user (admin). Re-enable from Settings → Users or send invite links.
+- **Session invalidation** — changing or resetting a password bumps `session_version`, evicting all other active sessions. Button also available in Settings → Account.
+- **Keep Ollama on an internal network** — both compose files keep Ollama off the host network. Never expose the Ollama port publicly.
+- **Default SECRET_KEY warning** — the app logs a `WARNING` on startup if the default dev key is in use.
+
+## Model Management
+
+Models are managed through Settings → General → Model Management in the web UI. You can:
+- Pull new models by name (streams progress via SSE)
+- View installed models with size and loaded/unloaded state
+- Delete unused models
+
+The app auto-warms user-preferred models on startup (only models already installed — never auto-pulls). The embedding model (`nomic-embed-text`) is auto-pulled on startup if missing.
+
+Recommended models for 2× 8 GB GPU:
+- **`qwen3:8b`** — strong reasoning + tools, fits in 8 GB, supports thinking mode
+- **`qwen2.5:7b`** — fast, tool-capable, smaller context
+- **`llama3.1:8b`** — reliable baseline, widely tested with tools

docs/design-system.md

@@ -0,0 +1,573 @@
+# FabledSword Design System
+
+A house-style design system for the FabledSword family of self-hosted applications. FabledSword is the umbrella identity; individual apps share a common visual language but each carries its own signature accent color.
+
+## Brand model
+
+FabledSword is a **house style**, not a single brand. Apps share:
+
+- Typography
+- Surfaces and dark-mode foundation
+- Component shapes (pills, cards, buttons)
+- Spacing system
+- Semantic colors (success, warning, error, info)
+- Action button colors (moss primary, bronze secondary)
+- Voice and tone
+
+Each public app has its own **signature accent** used for: the wordmark, the app icon, active nav state, "you are here" indicators, cursor/selection color, and key brand moments. Accents do **not** appear on action buttons — those stay system-wide.
+
+## Aesthetic direction
+
+Modern mythic with heraldic restraint. Tech-forward execution, but the visual language borrows from manuscripts, heraldry, and forged objects rather than from gaming or fantasy iconography. Dark-mode-first because that's where these apps live.
+
+The reference points: a well-printed book, a well-kept armory, a steward's ledger. Not: a fantasy novel cover, a tabletop RPG character sheet, a Renaissance Faire poster.
+
+---
+
+## Color system
+
+### Universal surfaces (dark mode foundation)
+
+| Token | Hex | Usage |
+|---|---|---|
+| Obsidian | `#14171A` | Page background, deepest surface |
+| Iron | `#1E2228` | Card surfaces, raised elements |
+| Slate | `#2C313A` | Hovered surfaces, secondary elevation |
+| Pewter | `#3F4651` | Borders, dividers, ghost button outlines |
+
+### Universal text and parchment
+
+| Token | Hex | Usage |
+|---|---|---|
+| Parchment | `#E8E4D8` | Primary text on dark surfaces |
+| Vellum | `#C2BFB4` | Secondary text, captions |
+| Ash | `#9C9A92` | Tertiary text, hints, metadata |
+
+Parchment is intentionally not pure white — it's slightly warm to feel like aged paper. Pure white (#FFFFFF) is never used as text color.
+
+### Universal action colors
+
+| Token | Hex | Usage |
+|---|---|---|
+| Moss | `#4A5D3F` | Primary action buttons (Save, Submit, Confirm) |
+| Bronze | `#8B7355` | Secondary action buttons (Cancel-but-not-destructive, alternate paths) |
+| Pewter | `#3F4651` | Tertiary/ghost buttons |
+
+**Critical rule:** Action button colors are universal across all apps. A Save button in Scribe and a Save button in Minstrel look identical. Per-app accents do not appear on buttons.
+
+### Semantic colors
+
+| Token | Hex | Usage |
+|---|---|---|
+| Success | `#4A5D3F` | Success states (same as Moss — they're aligned by design) |
+| Warning | `#8B6F1E` | Warnings, caution states |
+| Error | `#C04A1F` | Error messages, validation failures |
+| Info | `#3D5A6E` | Informational callouts |
+| Destructive | `#6B2118` | Destructive action buttons (Delete, Remove, irreversible) |
+
+**Why error and destructive are different:** Error is the orange-red used in alerts and validation messages. Destructive (oxblood) is reserved for buttons that perform irreversible actions — it carries more weight precisely because it's used sparingly. Pair destructive buttons with an icon (trash, X) so color is reinforcement, not the only signal.
+
+### Per-app signature accents
+
+| App | Hex | Mood |
+|---|---|---|
+| Fabled Scribe | `#5B4A8A` | Dusty violet — ink, manuscripts |
+| Minstrel | `#4A6B5C` | Forest teal — music, performance |
+| Fabled Forge | `#8B5A2B` | Forge bronze — creation, craft |
+| Roundtable | `#4A5D7E` | Slate blue — stewardship, infrastructure |
+| FabledSword (umbrella) | `#6B2118` | Oxblood — house identity, ceremonial use only |
+
+**Accent usage rules:**
+- The accent appears on the app's wordmark and icon.
+- The accent indicates active/current state in nav (the selected page, the active tab).
+- The accent is the cursor color and text-selection color in long-form surfaces (Scribe notes, Forge story drafts).
+- The accent does NOT appear on primary or secondary action buttons.
+- The accent does NOT appear in body text or chrome.
+- One accent per app. Don't mix accents within a single app.
+
+### Color contrast
+
+All text-on-surface combinations meet WCAG AA at minimum. Parchment on Obsidian is the maximum-contrast pairing; Vellum on Iron is the lowest-contrast pairing still considered acceptable for body text. Ash is for hints only — never load-bearing information.
+
+---
+
+## Typography
+
+### Type families
+
+| Family | Role | Source |
+|---|---|---|
+| Fraunces | Display, headings, wordmarks | Google Fonts |
+| Inter | Body, UI, labels | Google Fonts |
+| JetBrains Mono | Code, terminal output, monospaced data | Google Fonts |
+
+### Why this pairing
+
+Fraunces is a contemporary serif with personality — it has the warmth and authority of a book serif without feeling like costume. It signals "this is considered" without signaling "this is a fantasy product." Inter is the workhorse — neutral, ubiquitous, designed for screens, doesn't compete with the serif. JetBrains Mono is the natural choice for any developer-adjacent product and supports ligatures.
+
+### Type scale
+
+| Token | Size | Weight | Family | Usage |
+|---|---|---|---|---|
+| Display | 40px | 500 | Fraunces | App wordmark, hero text |
+| H1 | 32px | 500 | Fraunces | Page titles |
+| H2 | 24px | 500 | Fraunces | Section headings |
+| H3 | 18px | 500 | Inter | Subsection headings, card titles |
+| Body | 15px | 400 | Inter | Paragraphs, default text |
+| Body small | 13px | 400 | Inter | Captions, metadata |
+| Label | 12px | 500 | Inter | Buttons, form labels, badges |
+| Code | 13px | 400 | JetBrains Mono | Inline code, code blocks |
+| Tiny | 11px | 500 | Inter | Micro-labels (`UPPERCASE LETTERSPACED`) |
+
+### Typography rules
+
+- **Sentence case everywhere.** Never Title Case for headings, never ALL CAPS except for the Tiny micro-label style.
+- **Two weights only:** 400 regular and 500 medium. Never 600 or 700 — they read heavy in dark mode.
+- **Fraunces only at 18px and above.** Below that it loses too much detail and feels fragile. For h3 and below, use Inter.
+- **Line height** 1.5 for body, 1.3 for headings, 1.7 for long-form reading surfaces (Scribe notes, Forge drafts).
+- **Letter-spacing** at default for everything except the Tiny micro-label, which gets `0.08em` letter-spacing and uppercase styling.
+
+---
+
+## Spacing and layout
+
+### Spacing scale (px)
+
+`4, 8, 12, 16, 20, 24, 32, 48, 64, 96`
+
+Use rem units for vertical rhythm in long-form content (paragraph spacing). Use px for component-internal spacing (padding, gaps).
+
+### Border radius
+
+| Token | Size | Usage |
+|---|---|---|
+| Small | 4px | Pills, tags, code spans |
+| Medium | 8px | Buttons, inputs, small cards |
+| Large | 12px | Cards, panels, modals |
+| Extra large | 16px | Hero containers, major surfaces |
+
+### Borders
+
+- Default border: `0.5px solid Pewter` (#3F4651)
+- Hovered/emphasized border: `0.5px solid Vellum` at 30% opacity
+- Featured/active border: `2px solid [accent]` (only for emphasizing a selected card or active tab)
+
+The 0.5px default is deliberate — it reads as a hairline at most pixel densities and avoids the heavy "boxed-in" feeling that 1px+ borders create on dark backgrounds.
+
+---
+
+## Components
+
+### Buttons
+
+| Variant | Background | Text | Border |
+|---|---|---|---|
+| Primary | Moss `#4A5D3F` | Parchment | None |
+| Secondary | Bronze `#8B7355` | Parchment | None |
+| Ghost | Transparent | Parchment | 0.5px Pewter |
+| Destructive | Oxblood `#6B2118` | Parchment | None — pair with icon |
+
+Padding: `8px 16px` for default, `6px 12px` for compact, `10px 20px` for prominent. Border-radius: 8px. Font: Inter 12px/500 with default letter-spacing.
+
+### Pills and tags
+
+Used for tags, hashtags, code spans, status badges. Background is the accent color at ~15% opacity, text is the accent at full strength. Border-radius 4px, padding `2px 8px`, Inter 11px/500.
+
+In Scribe specifically, hashtags and tags use the dusty violet accent. In Minstrel, they'd use forest teal. The pattern is shared; the color follows the app.
+
+### Cards
+
+- Background: Iron (#1E2228)
+- Border: 0.5px Pewter
+- Border-radius: 12px
+- Padding: 20px
+
+For featured/selected cards, swap to a 2px solid accent border. Don't change the background.
+
+### Inputs
+
+- Background: Obsidian (#14171A) — darker than the page surface to feel "inset"
+- Border: 0.5px Pewter
+- Border-radius: 8px
+- Padding: 8px 12px
+- Focus state: 2px solid accent ring (using `box-shadow: 0 0 0 2px [accent]` to avoid layout shift)
+
+### Code blocks
+
+- Background: Obsidian (#14171A)
+- Border: 0.5px Pewter
+- Border-radius: 8px
+- Padding: 12px 16px
+- Font: JetBrains Mono 13px/400
+- Inline code: same family, with 4px-radius pill background using the app accent at 15% opacity
+
+---
+
+## The FabledSword lockup
+
+A small, persistent FS mark appears in the navigation chrome of every app — the way an Apple logo persists across macOS apps. This is the only place oxblood appears in normal app usage.
+
+**Specification:**
+- 16-20px height in nav contexts
+- Oxblood (#6B2118) on dark surfaces
+- Positioned in the bottom-left of nav rails or top-left when there's no rail
+- Hover/click reveals a small menu: link to other apps in the family, link to FabledSword.com, version info
+
+The lockup itself is a small heraldic mark — a stylized FS monogram — *not* a literal sword icon. We're avoiding sword imagery in app chrome because it would clash with the restrained, modern-mythic aesthetic. The wordmark "FabledSword" appears only on the umbrella site and in About/Settings dialogs.
+
+---
+
+## Voice and tone
+
+The FabledSword voice is **understated mythic** — it borrows the register of stewardship, craft, and considered making, but never tips into roleplay or affectation.
+
+### Do
+
+- Use plain language for everything functional. ("Save", "Cancel", "Add note")
+- Reserve flavored language for moments where the user is *waiting* or *failing* — loading states, empty states, error pages, 404s.
+- Borrow vocabulary from craft and stewardship: "draft", "ledger", "kept", "set aside", "to come", "in progress", "abandoned".
+- Be brief. The mythic register is undermined by verbosity.
+
+### Don't
+
+- Don't use thee/thou/thy or pseudo-archaic spelling.
+- Don't address the user as "traveler", "wanderer", "adventurer", or any RPG-adjacent epithet.
+- Don't use sword/blade/forge metaphors in error messages. ("Your save was forged successfully" — no.)
+- Don't make the user feel like they're playing a game when they're just trying to use software.
+
+### Examples
+
+| Context | Plain | FabledSword voice |
+|---|---|---|
+| Empty list | "No items yet" | "Nothing kept here yet." |
+| 404 | "Page not found" | "This page is not in the ledger." |
+| Loading | "Loading..." | "Fetching..." (just keep it plain — the mythic note is reserved for moments with more space) |
+| Save success | "Saved!" | "Saved." (plain — success doesn't need flavor) |
+| Save error | "Error saving" | "Couldn't save. The change has been kept locally — try again in a moment." |
+| Delete confirm | "Delete this?" | "Remove this from the ledger? This can't be undone." |
+
+The pattern: action-adjacent language stays plain; absence/failure/waiting gets the flavor.
+
+---
+
+## Iconography
+
+### Style
+
+- Stroke-based, 1.5px stroke weight at 24px, 1px at 16px
+- Rounded line caps and joins
+- 24px or 16px grid
+- Outline style by default; filled style only for active/selected states
+
+Use **Lucide** (https://lucide.dev) as the base icon set — it matches this style exactly and is open-source. Only commission custom icons for app-specific concepts that Lucide doesn't cover.
+
+### Don't
+
+- No filled icons in default UI (reserve for active states)
+- No icon styles that mix stroke and fill chaotically
+- No literal medieval imagery (swords, scrolls with curls, banners) in functional UI
+- No emoji as icons
+
+---
+
+## Per-app application
+
+### Fabled Scribe (#5B4A8A — dusty violet)
+
+A second-brain notes and task management tool. The accent appears in: the wordmark, hashtags and tag pills, the active nav item, text selection color, and the cursor in the editor. Notes are presented on Iron-surfaced cards with generous reading line-height. The hashtag system uses Scribe's accent for visual continuity.
+
+### Minstrel (#4A6B5C — forest teal)
+
+Self-hosted music. The accent appears on: now-playing indicators, active track highlights, the wordmark, equalizer/visualization elements. Album art dominates visually, so the accent should appear in chrome and metadata, never overlapping cover imagery.
+
+### Fabled Forge (#8B5A2B — forge bronze)
+
+Story-building and worldbuilding tool. The accent appears on: the wordmark, character/location/object markers in story trees, the editor cursor, "kept/canon" indicators distinguishing finalized story elements from drafts. This app benefits from Fraunces being used more aggressively — for entity titles, chapter headings, etc.
+
+### Roundtable (#4A5D7E — slate blue)
+
+Home server management. The accent appears on: the wordmark, healthy/online status indicators, the active dashboard panel border. Status colors here are critical — green for healthy, amber for warning, red (the orange-red error tone, not oxblood) for failed. The accent itself indicates "this is the panel I'm currently looking at."
+
+**Naming note:** "Roundtable" leans the wrong direction — its connotation is *equal participants in discussion* rather than *one steward managing a domain*. Consider "Steward" or "Castellan" if you revisit naming. Castellan in particular is good — it specifically means "the officer in charge of a castle."
+
+---
+
+## Implementation notes
+
+### CSS custom properties
+
+```css
+:root {
+  /* Surfaces */
+  --fs-obsidian: #14171A;
+  --fs-iron: #1E2228;
+  --fs-slate: #2C313A;
+  --fs-pewter: #3F4651;
+
+  /* Text */
+  --fs-parchment: #E8E4D8;
+  --fs-vellum: #C2BFB4;
+  --fs-ash: #9C9A92;
+
+  /* Action */
+  --fs-moss: #4A5D3F;
+  --fs-bronze: #8B7355;
+
+  /* Semantic */
+  --fs-warning: #8B6F1E;
+  --fs-error: #C04A1F;
+  --fs-info: #3D5A6E;
+  --fs-oxblood: #6B2118;
+
+  /* Typography */
+  --fs-font-display: 'Fraunces', Georgia, serif;
+  --fs-font-body: 'Inter', system-ui, sans-serif;
+  --fs-font-mono: 'JetBrains Mono', ui-monospace, monospace;
+
+  /* Layout */
+  --fs-radius-sm: 4px;
+  --fs-radius-md: 8px;
+  --fs-radius-lg: 12px;
+  --fs-radius-xl: 16px;
+}
+
+/* Per-app accent — set ONE of these on the root for each app */
+[data-app="scribe"]    { --fs-accent: #5B4A8A; }
+[data-app="minstrel"]  { --fs-accent: #4A6B5C; }
+[data-app="forge"]     { --fs-accent: #8B5A2B; }
+[data-app="roundtable"]{ --fs-accent: #4A5D7E; }
+```
+
+### Tailwind integration
+
+If using Tailwind, extend the theme with these tokens rather than relying on default colors. The default Tailwind palette will fight this system — you'll get drift back toward bright defaults if you don't lock down the palette explicitly.
+
+---
+
+## What this kit deliberately does NOT include
+
+- **Logo files.** The lockup design is described conceptually but the actual mark needs to be drawn. Hire a designer or use Claude Design to iterate on a heraldic FS monogram.
+- **Marketing site design.** This kit is for application UI. The umbrella marketing site (FabledSword.com) can use this system but will need additional patterns (hero layouts, feature grids, etc.).
+- **Email templates.** Different constraints, different problem.
+- **Print collateral.** Not in scope.
+- **Mobile native app patterns.** This is web-first. iOS/Android conventions would override several choices here (button shapes, navigation patterns).
+
+---
+
+*Last updated: April 25, 2026. Iterate as the family of apps grows.*
+
+---
+
+# Scribe-specific decisions in progress
+
+> This section tracks decisions made while adapting the FabledSword baseline above for Scribe specifically. Items here are *in progress* — once they feel solid, they get folded into the main body of the document (either as Scribe-specific extensions in the per-app section, or as updates to the universal rules where Scribe's needs reveal a gap in the baseline).
+
+*Iteration started: 2026-04-26. Foundation pass shipped 2026-04-27 in `7a9a8b7` (palette, fonts, light mode, action tokens, hardcoded indigo cleanup, warm-gold deprecation). Surface phase shipped 2026-04-27 across `93a3beb` → `3c1ec40` (Lucide migration, Hybrid-rule button reclassification per surface, long-form line-height, two-weights-only). The system is now applied end-to-end; this section will fold into the main body once the result has had time to settle in real use.*
+
+## Decisions made so far
+
+### Accent footprint — Hybrid rule (not Strict)
+
+The doc baseline says the per-app accent only appears on wordmark, active nav, cursor, and text selection — never on action buttons. Scribe currently uses indigo on essentially every interactive surface (CTAs, scrollbars, glows, borders, focus rings). Hard-cutting to the doc baseline would lose too much identity in one swing.
+
+**Hybrid rule:** the accent reserves a slightly larger footprint than the doc baseline, but still much smaller than today.
+
+- **Accent (dusty violet) lives on:** wordmark; active nav; cursor and text selection in editor surfaces; tags/pills/wikilinks; in-progress task badge; focus rings; **brand-moment CTAs** — chat Send, "Create note" empty-state CTA, journal Send, "Start journaling" empty-state.
+- **Moss (sage-green primary) lives on:** Save / Submit / Confirm in forms and modals; generic affirmative actions where the button just means "do this thing" with no brand pretense.
+- **Bronze (secondary):** Cancel-but-not-destructive, alternative paths.
+- **Oxblood (destructive):** Delete / Remove (paired with an icon).
+- **Pewter ghost:** tertiary actions, "later", "skip", "see also".
+
+**Rule of thumb:** if the user is engaging with a *Scribe-feature moment* (sending a chat, opening a fresh note, jumping into the journal), accent. If they're just *operating the software* (saving an edit, confirming a dialog), Moss.
+
+### Light mode — warm parchment, matched aesthetic
+
+The doc is dark-only. Scribe today supports both light and dark, and we keep both. The light mode is derived to *match* the dark mode aesthetic rather than defaulting to system white-and-ink.
+
+- Page background: in the `#F5F1E8` warm cream family (specific values TBD)
+- Cards: near-white but slightly tinted
+- Text: deep ink `#14171A` (mirroring Obsidian)
+- Accent: same dusty violet `#5B4A8A` (works on both themes)
+
+The metaphor stays consistent across themes: ink on aged paper (light) ↔ parchment text on graphite (dark). Light mode is *not* the system standard look.
+
+**Known downside:** warm parchment backgrounds can fight with embedded color content. Mitigation: code blocks get a slight cool wash in light mode specifically, to keep syntax highlighting readable.
+
+### Status and priority palette — extend the doc's semantic set
+
+The doc's semantic colors (Success / Warning / Error / Info / Destructive) are leaner than what Scribe needs for task management. Rather than running a parallel palette, Scribe extends the doc by mapping its status/priority tokens onto doc primitives where they fit and defining new app-level tokens for the rest.
+
+**Status (task lifecycle):**
+
+| Token | Color | Source | Logic |
+|---|---|---|---|
+| `status-todo` | Pewter `#3F4651` | doc | Neutral, "not started yet" |
+| `status-in-progress` | dusty violet `#5B4A8A` | accent | Active = brand moment per Hybrid |
+| `status-done` | Moss `#4A5D3F` | doc Success | Affirmative completion |
+| `status-cancelled` | Ash `#9C9A92` | doc | Faded, "let go" |
+| `status-paused` | Warning `#8B6F1E` | doc | Stalled, needs attention — replaces the old warm gold treatment |
+
+**Priority (loudness scale):**
+
+| Token | Color | Source | Logic |
+|---|---|---|---|
+| `priority-low` | Info `#3D5A6E` | doc | Cool, FYI — quietest end of the spectrum |
+| `priority-medium` | Warning `#8B6F1E` | doc | Golden, mid-attention |
+| `priority-high` | Error `#C04A1F` | doc | Terracotta, urgent |
+| `priority-none` | Vellum/Ash | doc | No signal |
+
+The priority row reads as a clean cool→warm gradient (slate blue → golden brown → terracotta), which matches the semantic loudness — coherence the current ad-hoc palette doesn't have.
+
+**Other functional tokens:**
+
+| Token | Color | Logic |
+|---|---|---|
+| `wikilink` | dusty violet | Editorial brand moment per Hybrid |
+| `overdue` | Error `#C04A1F` | Same as priority-high — overdue IS a priority signal |
+| `toast-success` | Moss | doc semantic |
+| `toast-error` | Error | doc semantic |
+| `toast-info` | Info | doc semantic |
+| `tag-bg` / `tag-text` | accent at 15% / accent | Per doc pill recipe |
+
+Each token gets a `*-bg` companion at low alpha (matching the existing pattern in `theme.css`).
+
+**Removed:** the warm gold accent (`--color-accent-warm: #b8860b`). Its two jobs split:
+
+- Dates and timestamps (knowledge cards, event details, chat) → use `text-secondary` instead. Dates are metadata, not a brand surface; muted is the correct register.
+- Paused project status → use the new `status-paused` (Warning `#8B6F1E`) row above. Same golden-brown family, semantically aligned.
+
+### Typography — adopt the doc's stack and scale
+
+Adopt the doc's type stack and scale verbatim, with one deferred verification (long-form line-height in practice).
+
+- **Body font: Inter.** Replaces Scribe's current system-stack body font. Doc-defined; no Scribe-specific divergence.
+- **Type scale:** as in the doc table — Display 40 / H1 32 / H2 24 / H3 18 / Body 15 / Body small 13 / Label 12 / Code 13 / Tiny 11.
+- **Two weights only:** 400 regular, 500 medium. No 600/700 (reads heavy in dark mode and against the muted palette).
+- **Family rules:** Fraunces at 18px+ only (Display, H1, H2). H3 and below = Inter. Code = JetBrains Mono.
+- **Line height:** 1.5 body, 1.3 headings, **1.7 for long-form reading surfaces** (notes, journal entries).
+- **Sentence case for everything**, except the Tiny micro-label style which gets uppercase + 0.08em letter-spacing.
+
+Mechanical rollout — value swaps in `theme.css` plus loading Inter and JetBrains Mono from Google Fonts (Fraunces is already loaded).
+
+### Light mode — concrete palette
+
+Fills in the warm-parchment direction picked earlier. Treat these as starting values; tune in practice.
+
+| Token | Hex | Role |
+|---|---|---|
+| Page bg | `#F5F1E8` | Warm cream — the "paper" |
+| Card bg | `#FBF8F0` | Near-white, slightly warm — raised surfaces |
+| Inset bg (inputs, code) | `#EFEAE0` | Slightly darker than page, "inset" feeling |
+| Text primary | `#14171A` | Deep ink — Obsidian inverted |
+| Text secondary | `#5A5852` | Warm mid-grey |
+| Text muted | `#9A9890` | Warm light grey for hints/metadata |
+| Border default | `#D9D6CE` | Warm light pewter, hairline weight |
+
+**Code-block exception:** in light mode specifically, code blocks use a slight cool wash (e.g. `#EBEDF0`) instead of the warm inset bg, so syntax highlighting reads cleanly. This is the mitigation for the "warm bg fights colored content" downside.
+
+The accent (`#5B4A8A` dusty violet), Moss, Bronze, Oxblood, and the semantic color set are **identical across themes** — only the surface and text palettes flip.
+
+### Chat-bubble codification — keep the Illuminated Transcript pattern
+
+The existing chat-bubble pattern (informally called "Illuminated Transcript") gets written into the design system as a documented chat component. Other apps in the family that add a chat surface inherit the pattern; Scribe's existing implementation continues to work with only color shifts.
+
+**User bubble (whisper):**
+- Background: transparent
+- Border: 0.5px Pewter (was: indigo-tinted)
+- Text color: secondary (Vellum dark / `#5A5852` light)
+- Right-aligned, rounded except bottom-right (subtle "from-me" tail)
+
+**Assistant bubble (lit):**
+- Background: card surface (Iron dark / `#FBF8F0` light)
+- Border: none on top/right/bottom; **2px solid accent (dusty violet) on left edge only**
+- Box-shadow: accent-tinted glow + standard depth shadow (formula: `0 4px 28px rgba(<accent>, 0.14), 0 2px 8px rgba(0,0,0,0.4)` in dark; lower alphas in light)
+- Text color: primary (Parchment dark / Obsidian-inverted light)
+- Left-aligned, rounded except bottom-left
+
+The 2px-accent left edge is the "illumination" — like an illuminated capital in a manuscript. The shadow is the lift. Together they make the assistant bubble read as the *primary* voice, while the user bubble is the *margin note*.
+
+**Inline tool-call cards (`ToolCallCard`)** rendered inside an assistant bubble do NOT get their own border (per the border philosophy — the bubble already contains them). They use a slight surface tint to differentiate.
+
+### Iconography — adopt Lucide, enforce a scale
+
+Scribe currently hand-inlines SVG paths in 16+ Vue files, with 5 different stroke weights and 8+ different sizes. The visual style is already outline + rounded caps + `currentColor` stroke (matches the doc's intent), but there's no shared source and no scale discipline.
+
+**Migration policy:**
+
+1. **Install `lucide-vue-next`** as the icon source. Replace hand-inlined SVGs with imported components. Single source of truth.
+2. **Strict size scale: 16px and 24px only.** Today's mix of 12/13/14/15/17/18/20 collapses to those two. 16 for inline-with-text and small affordances; 24 for nav and primary actions.
+3. **Stroke weight per the doc: 1.5 at 24px, 1 at 16px.** Lighter than the current default of 2 — reads more refined, matches the muted palette philosophy. Overrides Lucide's default.
+4. **Outline by default; filled only for active/selected state.** Introduces a new affordance Scribe doesn't currently use — bookmark/pin/star icons can switch outline → filled to indicate active state. Reserve filled style strictly for this.
+5. **No emoji in chrome.** Replace the 3 files' emoji usage in UI labels/buttons/badges/empty states with Lucide equivalents. Emoji remain fine in *user content* (note bodies, chat messages the user typed).
+
+Work cost: ~30-60 individual icon swaps across the 16 files. Mechanical; doesn't require redesign of any component.
+
+### Voice and tone — adopt principles, defer formal audit
+
+The doc's voice register applies to Scribe (understated mythic — plain for functional UI, flavored for empty/error/loading states). No formal sweep of every UI string yet.
+
+**Approach:** apply the voice opportunistically as components are touched in the polish pass — when redesigning a settings tab, an empty state, or an error toast, rewrite the copy at the same time using the doc's register and examples table as the guide. A standalone audit pass is deferred unless drift becomes visible.
+
+### Border philosophy — structural, not decorative
+
+The doc treats borders as *structural* (Pewter neutral hairlines that say "boundary"), not decorative (Scribe today uses indigo-tinted borders that say "branded edge"). That principle suggests removing borders in places where surface tint and spacing already communicate separation.
+
+**Borders to remove:**
+
+- List rows (NotesListView, TasksListView, conversation history) — surface contrast + spacing should separate rows; current border reads as "boxed-in"
+- Inline `ToolCallCard` inside chat bubbles — the bubble is already a container; an extra border feels like double-wrapping
+- Filter chips and search-bar pills with a background tint — background does the work
+- Empty-state callouts with dashed/bordered "nothing here yet" boxes — tinted background reads cleaner
+
+**Borders to keep (genuinely structural):**
+
+- Standalone card containers (Notes viewer, Task viewer, the new daily prep card)
+- Modal / dialog edges
+- Code blocks (separates content type, not just space)
+- Focus rings (accessibility)
+- Major section dividers within a panel
+
+Border weight is not load-bearing for Scribe — happy to use the doc's 0.5px hairline default; the *placement* discipline matters more than the weight.
+
+## Open threads (next iterations)
+
+### Foundation pass — shipped 2026-04-27 (`7a9a8b7`)
+
+Mechanical token + font + light-mode rewrite of `frontend/src/assets/theme.css`, plus a sweep of hardcoded indigo and `--color-accent-warm` references across ~14 component files. Action tokens (`--color-action-primary` Moss, `--color-action-secondary` Bronze, `--color-action-destructive` Oxblood, `--color-action-ghost-border` Pewter) are defined but not yet applied — buttons still flow through `--color-primary` and read as dusty-violet gradients in the meantime, by design. Spec lives at `docs/superpowers/specs/2026-04-27-design-system-polish-foundation-design.md` (gitignored, local-only).
+
+### Surface phase — shipped 2026-04-27 (`93a3beb` → `3c1ec40`)
+
+Bundled as Hybrid (option C from the brainstorm): Lucide cross-cutting first, then surface-by-surface for the judgment work. Spec lives at `docs/superpowers/specs/2026-04-27-design-system-polish-surface-design.md` (gitignored, local-only). Seven PRs landed on `dev`:
+
+| PR | Commit | Surface | Notes |
+|---|---|---|---|
+| 1 | `93a3beb` | Lucide cross-cutting | 60 hand-inlined SVGs across 15 files → `lucide-vue-next`. Every chrome icon at 16 or 24. Emoji-as-icons (`✕`, `✓`, `🎤`, `📎`, `↻`, `↑`, `&times;`, `☀`/`☾`) swept across the chrome. AppLogo wordmark and the GraphView D3 mount kept as the legitimate exceptions. |
+| 2 | `3d916d7` | Journal | Buttons audited; `↻` weather refresh → Lucide `RotateCcw`; assistant bubble line-height bumped; redundant `.journal-title` font-family dropped; dead `.news-section` CSS removed. |
+| 3 | `4192a64` | Chat | `.message-content` long-form 1.7 line-height on assistant bubbles; ToolCallCard outer border removed (bubble already contains it; error state moved to a left-edge accent); bulk-delete recolored to Oxblood with Trash2 icon; `.bulk-link` accent → muted text. |
+| 4 | `efb3534` | Knowledge cluster | `.prose` line-height bumped to 1.7 globally so all reading surfaces inherit. Save → Moss; Delete → Oxblood + Trash2; Edit / Advance → Moss; Convert / Share → Bronze. |
+| 5 | `ff498ce` | Project + Workspace | Project save panel → Moss; milestone confirm/cancel → Moss/Bronze; modal-btn-danger and per-row delete affordances → Oxblood; "Open Workspace" stays accent (project-surface brand moment). |
+| 6 | `541e2ed` | Settings | Densest button surface — every `.btn-save`, `.btn-primary`, `.btn-secondary`, `.btn-danger`, `.btn-danger-outline`, `.btn-toggle-open` reclassified per Hybrid; missing `.btn-danger` style block added (was unstyled before). |
+| 7 | `3c1ec40` | Edge surfaces | Calendar `New Event` → Moss; EventSlideOver Save/Cancel/Delete reclassified; HomeView hero CTA stays accent (brand moment); two-weights-only sweep across Header/Home/Calendar/Graph. |
+
+**Cross-cutting changes folded in as the work touched files:**
+
+- Long-form 1.7 line-height on `.prose` (PR 4) — applies to Note viewer, Task viewer, chat assistant bubbles, anywhere markdown renders into a reading surface.
+- Two-weights-only (400 + 500) — every `font-weight: 600` and `700` snapped to `500` across all surface PRs.
+- Hardcoded `--color-danger` in destructive button contexts → `--color-action-destructive` (Oxblood). `--color-danger` (Error terracotta) preserved for validation/error messages, per the doc's distinction between Error and Destructive.
+- Adjacent `&times;` / `✕` / unicode-arrow emoji swept opportunistically as files were touched (PRs 5, 7).
+
+### Out of scope — deferred indefinitely
+
+Items deliberately not addressed in this round; revisit when a real need surfaces:
+
+- Lucide stroke-weight overrides (doc spec: 1.5 at 24, 1 at 16; current: Lucide default 2). Touched components if they read too heavy in practice.
+- Filled-as-active icon state — no current affordance uses it; introduce when bookmark/pin/star toggles are added.
+- Type-scale / spacing-scale CSS variables — components keep literal values.
+- Token rename to `--fs-*` namespace — Scribe is the only FabledSword app sharing this codebase.
+- FabledSword lockup placement — waiting on the actual heraldic mark to be drawn.
+- Standalone voice/tone audit across every UI string — opportunistic-only; full sweep deferred unless drift becomes visible.
+- A handful of editor utility buttons (`.btn-suggest-tags`, `.btn-link-all`, AI assist generate/proofread/accept/reject set, etc.) — currently ghost-styled and visually compliant; revisited only if they read off in practice.
+
+### Open threads
+
+*New threads will accumulate here as gaps surface in real use.*

docs/development.md

@@ -0,0 +1,179 @@
+# Development
+
+## Workflow
+
+All development is Docker-based. Do not install Python or Node dependencies locally.
+
+```bash
+# Start the full stack (app + PostgreSQL + Ollama)
+docker compose up --build
+
+# Rebuild after backend changes (frontend changes require rebuild too)
+docker compose up --build app
+
+# Reset everything (wipes database)
+docker compose down -v && docker compose up --build
+
+# Run checks (lint, format, typecheck, tests)
+make check
+
+# Individual checks
+make lint        # ruff check src/
+make fmt         # ruff format src/
+make typecheck   # vue-tsc --noEmit
+make test        # pytest tests/
+```
+
+## Frontend Hot Reload
+
+The Docker setup does not include Vite's hot-reload dev server. After frontend changes, rebuild the image. For faster iteration during active frontend work, you can run Vite locally:
+
+```bash
+cd frontend
+npm install
+npm run dev   # Vite dev server at http://localhost:5173
+```
+
+Point the Vite dev server at the backend by setting `VITE_API_BASE_URL=http://localhost:5000` (or configure `vite.config.ts` proxy).
+
+## Database Migrations
+
+Alembic migrations run automatically on container startup (`alembic upgrade head` in the `CMD`).
+
+To create a new migration:
+```bash
+# Inside the running app container
+docker compose exec app alembic revision -m "description_of_change"
+# Edit the generated file in alembic/versions/
+```
+
+Migration conventions:
+- Use raw SQL with `IF NOT EXISTS` guards for idempotency
+- Use `DO $$ BEGIN CREATE TYPE … EXCEPTION WHEN duplicate_object THEN NULL; END $$` for enum types
+- Number migrations sequentially (e.g. `0027_add_something.py`)
+- Always provide both `upgrade()` and `downgrade()`
+
+## CI/CD
+
+### Pipeline
+
+CI runs on Forgejo Actions, consuming the shared
+[`ci-python:3.14`](https://git.fabledsword.com/bvandeusen/CI-runner) image
+via `container.image` (Python 3.14 + Node 24 + ruff + uv + Docker CLI):
+
+| Trigger | Jobs | Docker tags pushed |
+|---------|------|--------------------|
+| Push to `dev` | typecheck + lint + test → build | `:dev`, `:<sha>` |
+| Tag `v*` on `main` | typecheck + lint + test → build | `:latest`, `:<version>`, `:<sha>` |
+| Push to `main` | typecheck + lint + test | (no build) |
+
+### Release Process
+
+1. Work on `dev` branch — CI validates on every push
+2. When ready, open a PR from `dev` → `main` in Forgejo
+3. Merge the PR
+4. Create a release via the Forgejo UI on `main` with a `v*` tag (e.g. `v26.03.23.1` — CalVer: `YY.MM.DD.N`)
+5. The tag push triggers CI → build job pushes `:latest` + `:<version>` Docker images
+6. After merging to main, sync dev back:
+   ```bash
+   git checkout dev && git merge main && git push origin dev
+   ```
+
+### Runner
+
+CI jobs schedule against the `python-ci` runner label and run inside the
+shared `git.fabledsword.com/bvandeusen/ci-python:3.14` image (see
+`ci-requirements.md` for what this project relies on from the image).
+The runner deployment lives outside this repo; image bumps happen in
+[CI-Runner](https://git.fabledsword.com/bvandeusen/CI-runner) via Renovate.
+
+`infra/runner-compose.yml` + `infra/act-runner-config.yml` document the
+runner-host deployment shape; the source of truth is the deployed
+config on the runner host.
+
+### Docker Registry
+
+Images pushed to: `git.fabledsword.com/bvandeusen/scribe`
+Cache tag: `:cache` (reduces build time ~80%)
+
+Required secrets (repo → Settings → Secrets → Actions):
+- `REGISTRY_USER` — Forgejo username
+- `REGISTRY_TOKEN` — Forgejo PAT with `write:packages` scope
+
+## Migration Chain
+
+Current migration sequence (all idempotent raw SQL):
+
+```
+0001 create_notes_table
+0002 create_tasks_table
+0003 task_note_companion (data migration)
+0004 merge_tasks_into_notes
+0005 add_chat_tables
+0006 add_settings_table
+0007 add_title_and_updated_at_indexes
+0008 add_users_and_user_id
+0009 add_message_status
+0010 add_app_logs_table
+0011 add_password_reset_tokens
+0012 add_invitation_tokens
+0013 add_tool_calls_to_messages
+0014 add_note_embeddings
+0015 add_oauth_fields
+0016 add_image_cache
+0017 add_projects
+0018 add_push_subscriptions
+0019 add_events              (dead code — internal CalDAV/Radicale table; Radicale was removed)
+0020 add_milestones
+0021 add_task_logs
+0022 add_note_versions_and_drafts
+0023 add_tags_to_note_versions
+0024 add_session_version
+0025 add_sharing_and_notifications
+0026 add_briefing_tables
+0027 add_api_keys
+```
+
+**Important:** Do NOT use `op.create_table()` or `sa.Enum()` — SQLAlchemy's event system can fire `CREATE TYPE` even with `create_type=False`, causing failures on re-run. Always use raw SQL with `IF NOT EXISTS` / `DO $$ BEGIN ... EXCEPTION WHEN duplicate_object` guards.
+
+## Project Conventions
+
+### Backend
+
+- Services: `async with async_session() as session:` — import from `scribe.models`
+- No `scribe.database` module
+- Blueprint per resource: `routes/notes.py`, `routes/tasks.py`, etc.
+- All business logic in `services/`; routes are thin wrappers
+- Permission checks via `services/access.py` — never inline ownership checks in routes
+
+### Frontend
+
+- API calls via `frontend/src/api/client.ts` typed helpers (`apiGet`, `apiPost`, `apiPatch`, `apiDelete`)
+- Pinia stores for shared state; local `ref()` for component-only state
+- Composables in `composables/` for reusable behaviour (autosave, keyboard nav, tag suggestions, …)
+- Views are page-level components in `views/`; reusable UI in `components/`
+
+### Commit Style
+
+```
+type(scope): short description
+
+Longer body if needed.
+
+Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
+```
+
+Types: `feat`, `fix`, `refactor`, `docs`, `chore`, `test`
+Scopes: feature area (e.g. `chat`, `journal`, `mcp`, `notes`)
+
+## Testing
+
+```bash
+# Run all tests
+make test
+
+# Run specific test file
+docker compose exec app /opt/venv/bin/pytest tests/test_auth.py -v
+```
+
+Tests are in `tests/`. They run against a real PostgreSQL instance in CI (not mocked). Keep tests integration-style where possible — mock failures have historically masked real migration bugs.

docs/features.md

@@ -0,0 +1,155 @@
+# Features
+
+## Notes
+
+Write in Markdown with a live-preview editor (Tiptap/ProseMirror). Headings, bold, italic, lists, code blocks, and task checklists render inline. A slash-command menu (`/`) inserts common blocks.
+
+**Wikilinks** — Link notes with `[[Title]]` or `[[Title|Display Text]]` syntax. Clicking a wikilink navigates to (or auto-creates) the referenced note. The editor suggests existing note titles as candidate links while typing `[[`. Backlinks appear in the note viewer sidebar.
+
+**Tags** — First-class `ARRAY[text]` column. Tag autocomplete in the editor sidebar suggests existing tags. Hierarchical tags (`project/webapp`) supported — filtering by `project` matches all `project/*` children. Tags are browsable via the knowledge graph.
+
+**Version history** — Every body edit snapshots a version (up to 20 per note). Browse and restore from the editor's History panel. Diff view shows changes against the current body.
+
+**AI writing assist** — Select a passage or work on the full document. Give an instruction ("make this more concise", "add examples"). The assistant streams a proposal; a diff view shows changes to accept or reject. Drafts persist across page loads.
+
+**Link suggestions** — The editor detects note titles appearing as plain text in the body and suggests converting them to wikilinks.
+
+## Tasks
+
+Tasks carry status (`todo` → `in_progress` → `done`), priority (`none`/`low`/`medium`/`high`), due date, milestone assignment, and a parent task (sub-tasks).
+
+**Task work logs** — Append progress log entries to a task with optional duration. Time tracking is visible in the task editor sidebar.
+
+**Sub-tasks** — Any task can have child tasks via `parent_id`. The task viewer shows sub-tasks inline.
+
+**Convert freely** — Convert a note to a task (sets `status=todo`) or a task back to a note from the viewer toolbar.
+
+## Projects and Milestones
+
+**Projects** — Group related notes and tasks. Each project has a title, description, goal, status (`active`/`completed`/`archived`), and a colour.
+
+**Milestones** — Ordered stages within a project. Tasks are assigned to milestones. Milestone completion percentage shown on the project page.
+
+**Kanban view** — `/projects/:id` groups tasks by milestone in a kanban-style column layout with status-advance buttons directly on cards (→ advance, ✓ complete).
+
+**Project Workspace** — `/workspace/:projectId` opens a three-panel environment (tasks / chat / notes) locked to a project. The AI assistant creates and updates content directly in the workspace; new notes auto-load in the editor and the task list refreshes automatically after tool calls.
+
+## Knowledge Graph
+
+`/graph` renders all notes, tasks, and tags as a D3 force-directed graph. Tag nodes cluster notes that share tags; invisible project hub nodes attract project members. Physics controls: repulsion, link distance, link strength, hub pull, gravity. Click any node to open a slide-in peek panel. Click a tag node to filter the notes list.
+
+## AI Chat
+
+Full conversation history with SSE streaming. Features:
+- **RAG** — Semantically relevant notes (≥ 0.60 cosine similarity) auto-injected as context. Notes 0.45–0.60 shown in sidebar as "Suggested."
+- **Attach notes** — Paperclip icon to include specific notes in context.
+- **RAG scope chip** — Pill above the input bar shows the current note scope. Click to switch: "Orphan notes only" (default — project notes stay out of general chat), any active project, or "All notes." Scope is persisted per conversation. The AI can also call `search_projects` and `set_rag_scope` mid-conversation to switch scope automatically; the chip pulses when this happens.
+- **Tool calls** — The assistant can create/update notes, tasks, projects, milestones, search the web, check weather, read RSS, query calendar events, and more. Tool calls display inline with confirm/deny for creates.
+- **Thinking mode** — Toggle extended reasoning for complex questions.
+- **Abort** — Stop button cancels in-flight generation.
+- **Message queue** — Messages sent while generation is in progress are queued and drained sequentially.
+- **Save to note** — Save any assistant reply directly as a note.
+- **Bulk delete** — Select and delete multiple conversations.
+- **Retention** — Conversations auto-pruned after configurable days (default 90).
+
+## Daily Journal
+
+`/journal` is a conversational daily surface — each day is a chat-style conversation seeded with an LLM-generated daily prep as the first assistant message. The prep pulls together today's tasks, calendar events, weather, recent moments, and active projects in flowing prose, then invites the user to continue the conversation throughout the day.
+
+**Schedule** — Daily prep generates at a configurable time (default 5:00am). The "day rollover hour" controls when the journal switches to a new day (default 4am — late-night entries 1–3am still count as the previous day). Scheduler catches up missed runs on startup.
+
+**Right rail** — The journal view shows current weather conditions and upcoming events for the next two weeks alongside the conversation. Both surfaces draw from the same data the prep references.
+
+**Configuration** — Settings → Profile:
+- *Locations* section: home and work place-name inputs (geocoded on blur via Nominatim) and a temperature unit toggle (C/F)
+- *Journal* section: prep auto-generate toggle, prep generation time, day rollover hour
+- *About You* / *Interests* / *Work Schedule* / *Response Preferences* feed personalization into the prep's system prompt
+
+**Weather** — Location-based forecast via Open-Meteo. Up to two named locations (home, work). Cached rows auto-refresh in the background when the journal page loads.
+
+**What the assistant has learned** — The assistant maintains a per-user observation log + consolidated summary, generated from journal and chat conversations. The summary is included in the journal's system prompt so the daily prep can reference what it knows about you over time.
+
+## Web Research
+
+The assistant can search the web (SearXNG) and fetch pages, synthesising findings into a structured multi-note research output: an index note with an executive summary and links to focused section notes. Each section covers a distinct aspect of the topic with cited sources. Falls back to a single note when outline generation fails. A lightweight `search_web` tool answers quick questions inline without saving. Requires `SEARXNG_URL` to be configured.
+
+## Calendar
+
+`/calendar` shows a full FullCalendar view (month, week, day). Click an empty slot to create an event; click an existing event to edit or delete it via a slide-over panel.
+
+**Internal events store** — Events are stored in the app database (`events` table), making them available without any external calendar. Fields: title, description, start/end datetime, all-day toggle, location, colour.
+
+**AI tools** — `create_event`, `list_events`, `search_events`, `update_event`, `delete_event` all operate on the internal store. Tool-call result cards in chat are clickable and open the same EventSlideOver for editing.
+
+**HomeView widget** — The dashboard shows today's and the next 7 days' events as clickable cards above the hero project.
+
+**CalDAV sync (optional)** — Connect an external CalDAV server (Nextcloud, Radicale, etc.) in Settings → Integrations. Events sync bidirectionally via a `caldav_uid` field.
+
+## Sharing and Collaboration
+
+**Share** — Share any project or note/task with users or groups at `viewer`/`editor`/`admin` permission levels. Share button in the viewer/project toolbar opens a dialog.
+
+**Groups** — Admins create platform-wide groups and assign users `member`/`owner` roles. Share a resource with a group in one action.
+
+**Shared with me** — `/shared` lists all incoming shared projects and notes with permission badges.
+
+**Notifications** — Bell icon in nav shows unread count (60s polling). Notifications generated for: project shared, note shared, added to group. Click navigates to the resource.
+
+**Push notifications** — Web Push (VAPID) notifies when AI generation completes, even in another tab. Works over HTTPS only. Configurable per-user.
+
+## Quick Capture
+
+Quick capture from the Android app routes to the intent classifier. It creates notes, tasks, or projects based on content — using the user's configured model, not the hardcoded default.
+
+## Data Export and Backup
+
+- **Personal export** — Settings → Data: download all notes/tasks as a Markdown ZIP (with YAML frontmatter) or JSON array.
+- **Admin backup** — Full application backup (version 2): includes projects, milestones, task logs, AI drafts, note versions, push subscriptions. ID remapping on restore for cross-instance migration.
+
+## PWA
+
+Installable as a desktop or mobile app. Service worker caches the shell; push notifications are suppressed when the relevant tab is already focused. Works over HTTPS only in Firefox.
+
+## Settings
+
+Settings are tabbed:
+
+| Tab | Contents |
+|-----|----------|
+| General | Assistant name, default model, model management (pull/delete) |
+| Account | Email change, password change, session invalidation |
+| Notifications | Push notification subscription, journal prep push toggle |
+| Profile | About you, response preferences, interests, work schedule, locations + temperature unit, journal prep schedule, learned observations |
+| Integrations | CalDAV configuration, SearXNG status |
+| Data | Personal export, backup/restore (admin) |
+| API Keys | Create/revoke API keys, Fable MCP download and install |
+| Config (admin) | Base URL, SMTP, OIDC settings |
+| Users (admin) | User list, invite links, registration toggle |
+| Logs (admin) | Error, audit, and usage logs with search |
+| Groups (admin) | Create/manage groups and membership |
+
+## Roadmap
+
+- Email integration (read/send via IMAP/SMTP tools in chat)
+- Session invalidation on user deletion
+
+## Keyboard Shortcuts
+
+| Key | Action |
+|-----|--------|
+| `g` + `h` | Go to Home |
+| `g` + `n` | Go to Notes |
+| `g` + `t` | Go to Tasks |
+| `g` + `p` | Go to Projects |
+| `g` + `c` | Go to Chat |
+| `g` (bare) | Go to Graph |
+| `n` | New note |
+| `t` | New task |
+| `c` | Focus chat input |
+| `e` | Edit current item |
+| `/` | Search |
+| `?` | Show shortcuts panel |
+| `j` / `k` | Navigate list items |
+| `Enter` | Open selected item |
+| `Escape` | Close panel / blur / go home (progressive) |
+| `Ctrl+S` | Save in editor |

docs/plans/2026-03-11-backup-rewrite.md

@@ -1,538 +0,0 @@
-# Backup Service Rewrite Plan
-
-> **For agentic workers:** REQUIRED: Use superpowers:subagent-driven-development (if subagents available) or superpowers:executing-plans to implement this plan. Steps use checkbox (`- [ ]`) syntax for tracking.
-
-**Goal:** Rewrite `services/backup.py` so that full and user backup/restore correctly includes every model added since the original implementation (projects, milestones, task logs, drafts, versions), with correct FK re-mapping on restore.
-
-**Architecture:** Bump backup JSON format to version 2. Export is additive — all new tables exported. Restore builds an ID map for each table and patches FK references in the correct dependency order. V1 backups continue to restore via the existing code path.
-
-**Tech Stack:** Python/SQLAlchemy 2.0 async, no new dependencies.
-
-**Spec:** `docs/superpowers/specs/2026-03-11-backup-rewrite-design.md`
-
-**Dependency note:** This plan can be split into Part A (pre-sharing models) and Part B (sharing models). Part A is independent and should be done first.
-
----
-
-## Task 1: Extend export — full backup
-
-**Files:**
-- Modify: `src/fabledassistant/services/backup.py`
-
-- [ ] **Step 1: Read the current `export_full_backup()` function**
-
-Understand what is currently exported: users, notes (partial fields), conversations+messages, settings.
-
-- [ ] **Step 2: Rewrite `export_full_backup()` to version 2**
-
-Add all missing models to the import list at the top of `backup.py`:
-```python
-from fabledassistant.models.project import Project
-from fabledassistant.models.milestone import Milestone
-from fabledassistant.models.task_log import TaskLog
-from fabledassistant.models.note_draft import NoteDraft
-from fabledassistant.models.note_version import NoteVersion
-from fabledassistant.models.push_subscription import PushSubscription
-```
-
-Rewrite `export_full_backup()`:
-```python
-async def export_full_backup() -> dict:
-    async with async_session() as session:
-        users = (await session.execute(select(User))).scalars().all()
-        projects = (await session.execute(select(Project))).scalars().all()
-        milestones = (await session.execute(select(Milestone))).scalars().all()
-        notes = (await session.execute(select(Note))).scalars().all()
-        task_logs = (await session.execute(select(TaskLog))).scalars().all()
-        note_drafts = (await session.execute(select(NoteDraft))).scalars().all()
-        note_versions = (await session.execute(select(NoteVersion).order_by(NoteVersion.note_id, NoteVersion.version_number))).scalars().all()
-        conversations = (await session.execute(
-            select(Conversation).options(selectinload(Conversation.messages))
-        )).scalars().all()
-        settings = (await session.execute(select(Setting))).scalars().all()
-        push_subs = (await session.execute(select(PushSubscription))).scalars().all()
-
-        return {
-            "version": 2,
-            "scope": "full",
-            "exported_at": datetime.now(timezone.utc).isoformat(),
-            "_security_notice": (
-                "This backup contains hashed passwords and push subscription keys. "
-                "Store it securely and restrict access."
-            ),
-            "users": [
-                {
-                    "id": u.id,
-                    "username": u.username,
-                    "email": u.email,
-                    "password_hash": u.password_hash,
-                    "oauth_sub": u.oauth_sub,
-                    "role": u.role,
-                    "session_version": u.session_version,
-                    "created_at": u.created_at.isoformat(),
-                }
-                for u in users
-            ],
-            "projects": [
-                {
-                    "id": p.id,
-                    "user_id": p.user_id,
-                    "title": p.title,
-                    "description": p.description,
-                    "goal": p.goal,
-                    "status": p.status,
-                    "color": p.color,
-                    "created_at": p.created_at.isoformat(),
-                    "updated_at": p.updated_at.isoformat(),
-                }
-                for p in projects
-            ],
-            "milestones": [
-                {
-                    "id": m.id,
-                    "user_id": m.user_id,
-                    "project_id": m.project_id,
-                    "title": m.title,
-                    "description": m.description,
-                    "status": m.status,
-                    "order_index": m.order_index,
-                    "created_at": m.created_at.isoformat(),
-                    "updated_at": m.updated_at.isoformat(),
-                }
-                for m in milestones
-            ],
-            "notes": [
-                {
-                    "id": n.id,
-                    "user_id": n.user_id,
-                    "title": n.title,
-                    "body": n.body,
-                    "tags": n.tags or [],
-                    "parent_id": n.parent_id,
-                    "project_id": n.project_id,
-                    "milestone_id": n.milestone_id,
-                    "is_task": n.is_task,
-                    "status": n.status,
-                    "priority": n.priority,
-                    "due_date": n.due_date.isoformat() if n.due_date else None,
-                    "is_starred": getattr(n, "is_starred", False),
-                    "is_pinned": getattr(n, "is_pinned", False),
-                    "created_at": n.created_at.isoformat(),
-                    "updated_at": n.updated_at.isoformat(),
-                }
-                for n in notes
-            ],
-            "task_logs": [
-                {
-                    "id": tl.id,
-                    "user_id": tl.user_id,
-                    "note_id": tl.note_id,
-                    "description": tl.description,
-                    "duration_minutes": tl.duration_minutes,
-                    "logged_at": tl.logged_at.isoformat() if tl.logged_at else None,
-                    "created_at": tl.created_at.isoformat(),
-                }
-                for tl in task_logs
-            ],
-            "note_drafts": [
-                {
-                    "id": nd.id,
-                    "user_id": nd.user_id,
-                    "note_id": nd.note_id,
-                    "title": nd.title,
-                    "body": nd.body,
-                    "saved_at": nd.saved_at.isoformat() if nd.saved_at else None,
-                }
-                for nd in note_drafts
-            ],
-            "note_versions": [
-                {
-                    "id": nv.id,
-                    "user_id": nv.user_id,
-                    "note_id": nv.note_id,
-                    "title": nv.title,
-                    "body": nv.body,
-                    "version_number": nv.version_number,
-                    "created_at": nv.created_at.isoformat(),
-                }
-                for nv in note_versions
-            ],
-            "conversations": [
-                {
-                    "id": c.id,
-                    "user_id": c.user_id,
-                    "title": c.title,
-                    "created_at": c.created_at.isoformat(),
-                    "updated_at": c.updated_at.isoformat(),
-                    "messages": [
-                        {
-                            "id": m.id,
-                            "role": m.role,
-                            "content": m.content,
-                            "context_note_id": m.context_note_id,
-                            "created_at": m.created_at.isoformat(),
-                        }
-                        for m in c.messages
-                    ],
-                }
-                for c in conversations
-            ],
-            "settings": [
-                {"user_id": s.user_id, "key": s.key, "value": s.value}
-                for s in settings
-            ],
-            "push_subscriptions": [
-                {
-                    "user_id": ps.user_id,
-                    "endpoint": ps.endpoint,
-                    "p256dh": ps.p256dh,
-                    "auth": ps.auth,
-                    "created_at": ps.created_at.isoformat(),
-                }
-                for ps in push_subs
-            ],
-        }
-```
-
-Check what exact field names exist on each model before assuming. Use `getattr(obj, "field", default)` for fields that may not exist on older DB versions.
-
-- [ ] **Step 3: Commit**
-
-```bash
-git add src/fabledassistant/services/backup.py
-git commit -m "feat(backup): v2 full export with projects, milestones, task_logs, drafts, versions"
-```
-
----
-
-## Task 2: Extend export — user backup
-
-**Files:**
-- Modify: `src/fabledassistant/services/backup.py`
-
-- [ ] **Step 1: Rewrite `export_user_backup(user_id)`**
-
-Same structure as full backup but filtered to `WHERE user_id = uid`. Apply same field additions. Omit sensitive fields (password_hash, oauth_sub) from user self-export.
-
-```python
-async def export_user_backup(user_id: int) -> dict:
-    async with async_session() as session:
-        user = await session.get(User, user_id)
-        projects = (await session.execute(select(Project).where(Project.user_id == user_id))).scalars().all()
-        milestones = (await session.execute(select(Milestone).where(Milestone.user_id == user_id))).scalars().all()
-        notes = (await session.execute(select(Note).where(Note.user_id == user_id))).scalars().all()
-        task_logs = (await session.execute(select(TaskLog).where(TaskLog.user_id == user_id))).scalars().all()
-        note_drafts = (await session.execute(select(NoteDraft).where(NoteDraft.user_id == user_id))).scalars().all()
-        note_versions = (await session.execute(
-            select(NoteVersion).where(NoteVersion.user_id == user_id)
-            .order_by(NoteVersion.note_id, NoteVersion.version_number)
-        )).scalars().all()
-        conversations = (await session.execute(
-            select(Conversation).options(selectinload(Conversation.messages))
-            .where(Conversation.user_id == user_id)
-        )).scalars().all()
-        settings = (await session.execute(select(Setting).where(Setting.user_id == user_id))).scalars().all()
-
-        return {
-            "version": 2,
-            "scope": "user",
-            "exported_at": datetime.now(timezone.utc).isoformat(),
-            "user": {
-                "id": user.id,
-                "username": user.username,
-                "email": user.email,
-                "role": user.role,
-                "created_at": user.created_at.isoformat(),
-            } if user else None,
-            "projects": [...],   # same as full but user-filtered
-            "milestones": [...],
-            "notes": [...],
-            "task_logs": [...],
-            "note_drafts": [...],
-            "note_versions": [...],
-            "conversations": [...],
-            "settings": [...],
-        }
-```
-
-- [ ] **Step 2: Commit**
-
-```bash
-git add src/fabledassistant/services/backup.py
-git commit -m "feat(backup): v2 user backup with all models"
-```
-
----
-
-## Task 3: Rewrite restore for v2
-
-**Files:**
-- Modify: `src/fabledassistant/services/backup.py`
-
-- [ ] **Step 1: Add version dispatch to `restore_full_backup`**
-
-```python
-async def restore_full_backup(data: dict) -> dict:
-    version = data.get("version", 1)
-    if version == 1:
-        return await _restore_v1(data)
-    return await _restore_v2(data)
-```
-
-Move existing restore code into `_restore_v1(data)` with no changes.
-
-- [ ] **Step 2: Implement `_restore_v2(data)` with full FK re-mapping**
-
-Restore order (respects FK dependencies):
-1. Users → build `user_id_map`
-2. Projects (fk: user_id) → build `project_id_map`
-3. Milestones (fk: user_id, project_id) → build `milestone_id_map`
-4. Notes — first pass: insert without `parent_id` (fk: user_id, project_id, milestone_id) → build `note_id_map`
-5. Notes — second pass: patch `parent_id` using `note_id_map`
-6. TaskLogs (fk: user_id, note_id via note_id_map)
-7. NoteDrafts (fk: user_id, note_id via note_id_map)
-8. NoteVersions (fk: user_id, note_id via note_id_map) — export only, no restore by default (skip unless flag set)
-9. Conversations (fk: user_id) → Messages (fk: conversation_id, context_note_id via note_id_map)
-10. Settings (fk: user_id)
-
-```python
-async def _restore_v2(data: dict) -> dict:
-    from datetime import date, datetime, timezone
-
-    stats = {
-        "users": 0, "projects": 0, "milestones": 0, "notes": 0,
-        "task_logs": 0, "note_drafts": 0, "conversations": 0,
-        "messages": 0, "settings": 0
-    }
-
-    async with async_session() as session:
-        user_id_map: dict[int, int] = {}
-        project_id_map: dict[int, int] = {}
-        milestone_id_map: dict[int, int] = {}
-        note_id_map: dict[int, int] = {}
-
-        # 1. Users
-        for u_data in data.get("users", []):
-            old_id = u_data["id"]
-            user = User(
-                username=u_data["username"],
-                email=u_data.get("email"),
-                password_hash=u_data.get("password_hash"),
-                oauth_sub=u_data.get("oauth_sub"),
-                role=u_data.get("role", "user"),
-                session_version=u_data.get("session_version", 1),
-                created_at=datetime.fromisoformat(u_data["created_at"]) if u_data.get("created_at") else datetime.now(timezone.utc),
-            )
-            session.add(user)
-            await session.flush()
-            user_id_map[old_id] = user.id
-            stats["users"] += 1
-
-        # 2. Projects
-        for p_data in data.get("projects", []):
-            mapped_uid = user_id_map.get(p_data.get("user_id", 0))
-            if mapped_uid is None:
-                continue
-            proj = Project(
-                user_id=mapped_uid,
-                title=p_data.get("title", ""),
-                description=p_data.get("description"),
-                goal=p_data.get("goal"),
-                status=p_data.get("status", "active"),
-                color=p_data.get("color"),
-                created_at=datetime.fromisoformat(p_data["created_at"]) if p_data.get("created_at") else datetime.now(timezone.utc),
-                updated_at=datetime.fromisoformat(p_data["updated_at"]) if p_data.get("updated_at") else datetime.now(timezone.utc),
-            )
-            session.add(proj)
-            await session.flush()
-            project_id_map[p_data["id"]] = proj.id
-            stats["projects"] += 1
-
-        # 3. Milestones
-        for m_data in data.get("milestones", []):
-            mapped_uid = user_id_map.get(m_data.get("user_id", 0))
-            mapped_pid = project_id_map.get(m_data.get("project_id", 0))
-            if mapped_uid is None:
-                continue
-            ms = Milestone(
-                user_id=mapped_uid,
-                project_id=mapped_pid,
-                title=m_data.get("title", ""),
-                description=m_data.get("description"),
-                status=m_data.get("status", "open"),
-                order_index=m_data.get("order_index", 0),
-                created_at=datetime.fromisoformat(m_data["created_at"]) if m_data.get("created_at") else datetime.now(timezone.utc),
-                updated_at=datetime.fromisoformat(m_data["updated_at"]) if m_data.get("updated_at") else datetime.now(timezone.utc),
-            )
-            session.add(ms)
-            await session.flush()
-            milestone_id_map[m_data["id"]] = ms.id
-            stats["milestones"] += 1
-
-        # 4. Notes — first pass (no parent_id)
-        note_objects: list[tuple[int, int]] = []  # (old_parent_id, new_note_id)
-        for n_data in data.get("notes", []):
-            mapped_uid = user_id_map.get(n_data.get("user_id", 0))
-            if mapped_uid is None:
-                continue
-            due = None
-            if n_data.get("due_date"):
-                due = date.fromisoformat(n_data["due_date"])
-            note = Note(
-                user_id=mapped_uid,
-                title=n_data.get("title", ""),
-                body=n_data.get("body", ""),
-                tags=n_data.get("tags", []),
-                parent_id=None,  # patched in second pass
-                project_id=project_id_map.get(n_data.get("project_id")) if n_data.get("project_id") else None,
-                milestone_id=milestone_id_map.get(n_data.get("milestone_id")) if n_data.get("milestone_id") else None,
-                is_task=n_data.get("is_task", False),
-                status=n_data.get("status"),
-                priority=n_data.get("priority"),
-                due_date=due,
-                created_at=datetime.fromisoformat(n_data["created_at"]) if n_data.get("created_at") else datetime.now(timezone.utc),
-                updated_at=datetime.fromisoformat(n_data["updated_at"]) if n_data.get("updated_at") else datetime.now(timezone.utc),
-            )
-            session.add(note)
-            await session.flush()
-            note_id_map[n_data["id"]] = note.id
-            if n_data.get("parent_id"):
-                note_objects.append((n_data["parent_id"], note.id))
-            stats["notes"] += 1
-
-        # 5. Notes — second pass: patch parent_id
-        for old_parent_id, new_note_id in note_objects:
-            new_parent_id = note_id_map.get(old_parent_id)
-            if new_parent_id:
-                note_row = await session.get(Note, new_note_id)
-                if note_row:
-                    note_row.parent_id = new_parent_id
-
-        # 6. TaskLogs
-        for tl_data in data.get("task_logs", []):
-            mapped_uid = user_id_map.get(tl_data.get("user_id", 0))
-            mapped_nid = note_id_map.get(tl_data.get("note_id", 0))
-            if mapped_uid is None or mapped_nid is None:
-                continue
-            from fabledassistant.models.task_log import TaskLog
-            tl = TaskLog(
-                user_id=mapped_uid,
-                note_id=mapped_nid,
-                description=tl_data.get("description", ""),
-                duration_minutes=tl_data.get("duration_minutes"),
-                logged_at=datetime.fromisoformat(tl_data["logged_at"]) if tl_data.get("logged_at") else None,
-                created_at=datetime.fromisoformat(tl_data["created_at"]) if tl_data.get("created_at") else datetime.now(timezone.utc),
-            )
-            session.add(tl)
-            stats["task_logs"] += 1
-
-        # 7. NoteDrafts
-        for nd_data in data.get("note_drafts", []):
-            mapped_uid = user_id_map.get(nd_data.get("user_id", 0))
-            mapped_nid = note_id_map.get(nd_data.get("note_id", 0))
-            if mapped_uid is None or mapped_nid is None:
-                continue
-            from fabledassistant.models.note_draft import NoteDraft
-            nd = NoteDraft(
-                user_id=mapped_uid,
-                note_id=mapped_nid,
-                title=nd_data.get("title", ""),
-                body=nd_data.get("body", ""),
-                saved_at=datetime.fromisoformat(nd_data["saved_at"]) if nd_data.get("saved_at") else None,
-            )
-            session.add(nd)
-            stats["note_drafts"] += 1
-
-        # 8. Conversations + Messages
-        for c_data in data.get("conversations", []):
-            mapped_uid = user_id_map.get(c_data.get("user_id", 0))
-            if mapped_uid is None:
-                continue
-            conv = Conversation(
-                user_id=mapped_uid,
-                title=c_data.get("title", ""),
-                created_at=datetime.fromisoformat(c_data["created_at"]) if c_data.get("created_at") else datetime.now(timezone.utc),
-                updated_at=datetime.fromisoformat(c_data["updated_at"]) if c_data.get("updated_at") else datetime.now(timezone.utc),
-            )
-            session.add(conv)
-            await session.flush()
-            stats["conversations"] += 1
-            for m_data in c_data.get("messages", []):
-                msg = Message(
-                    conversation_id=conv.id,
-                    role=m_data["role"],
-                    content=m_data.get("content", ""),
-                    context_note_id=note_id_map.get(m_data["context_note_id"]) if m_data.get("context_note_id") else None,
-                    created_at=datetime.fromisoformat(m_data["created_at"]) if m_data.get("created_at") else datetime.now(timezone.utc),
-                )
-                session.add(msg)
-                stats["messages"] += 1
-
-        # 9. Settings
-        for s_data in data.get("settings", []):
-            mapped_uid = user_id_map.get(s_data.get("user_id", 0))
-            if mapped_uid is None:
-                continue
-            setting = Setting(user_id=mapped_uid, key=s_data["key"], value=s_data.get("value", ""))
-            session.add(setting)
-            stats["settings"] += 1
-
-        await session.commit()
-
-    logger.info("Restored v2 backup: %s", stats)
-    return stats
-```
-
-- [ ] **Step 3: Add missing imports at top of file**
-
-```python
-from datetime import datetime, timezone
-from fabledassistant.models.project import Project
-from fabledassistant.models.milestone import Milestone
-```
-
-- [ ] **Step 4: Test restore round-trip**
-
-```bash
-# Export
-curl -s -b cookies.txt "http://localhost:5000/api/admin/backup?scope=full" -o /tmp/backup_v2.json
-# Inspect structure
-python3 -c "import json; d=json.load(open('/tmp/backup_v2.json')); print(list(d.keys()))"
-# Expected keys: version, scope, exported_at, users, projects, milestones, notes, task_logs, ...
-```
-
-- [ ] **Step 5: Typecheck**
-
-```bash
-docker compose exec app python -m py_compile src/fabledassistant/services/backup.py
-```
-Expected: No errors.
-
-- [ ] **Step 6: Commit**
-
-```bash
-git add src/fabledassistant/services/backup.py
-git commit -m "feat(backup): v2 restore with full FK re-mapping; v1 restore preserved"
-```
-
----
-
-## Task 4: Verification
-
-- [ ] **Step 1: Full round-trip test**
-
-1. Export full backup as admin
-2. Verify JSON has `"version": 2` and all expected top-level keys
-3. Verify notes have `project_id`, `milestone_id`, `is_task` fields
-4. Verify `task_logs` array has entries (create a task log entry first if needed)
-5. Restore backup to a clean test instance (or verify restore code path runs without error in dry-run)
-
-- [ ] **Step 2: V1 backward compat test**
-
-Take an old v1 backup JSON (or construct one without the `version` key) and run restore. Verify it takes the v1 path and doesn't error.
-
-- [ ] **Step 3: Commit final verification note**
-
-```bash
-git commit --allow-empty -m "chore(backup): v2 backup rewrite verified"
-```

docs/sso-oauth.md

@@ -1,10 +1,8 @@
-# OAuth / OIDC SSO Setup (Authentik)
+# OAuth / OIDC SSO Setup
 
 Fabled Assistant supports single sign-on via any OpenID Connect provider.
 This guide covers Authentik, but the same pattern works with Keycloak, Authelia, Zitadel, etc.
 
----
-
 ## 1. Create the provider in Authentik
 
 1. Log in to the Authentik admin UI.
@@ -22,8 +20,6 @@ This guide covers Authentik, but the same pattern works with Keycloak, Authelia,
    https://auth.example.com/application/o/fabled-assistant/
    ```
 
----
-
 ## 2. Configure Fabled Assistant
 
 Add the following environment variables to the `app` service in `docker-compose.yml`:
@@ -44,12 +40,11 @@ services:
       # Disable local username/password login once SSO is working
       # LOCAL_AUTH_ENABLED: "false"
 
-      # Make sure BASE_URL matches the redirect URI you registered in Authentik
+      # Make sure BASE_URL matches the redirect URI you registered
       BASE_URL: "https://your-fabled-domain"
 ```
 
-> **Docker Secrets alternative:** Instead of `OIDC_CLIENT_SECRET`, you can use
-> `OIDC_CLIENT_SECRET_FILE` pointing to a Docker secret file.
+> **Docker Secrets alternative:** Use `OIDC_CLIENT_SECRET_FILE` pointing to a Docker secret file instead of `OIDC_CLIENT_SECRET`.
 
 Rebuild and restart:
 
@@ -57,53 +52,44 @@ Rebuild and restart:
 docker compose up --build -d
 ```
 
----
-
 ## 3. Verify
 
 1. Open `/api/auth/status` — it should return:
    ```json
    { "oauth_enabled": true, "local_auth_enabled": true, ... }
    ```
-2. Go to the login page — you should see a **"Login with Authentik"** button.
-3. Click it → you are redirected to Authentik → authenticate → redirected back to Fabled → logged in.
+2. Go to the login page — you should see a **"Login with [Provider]"** button.
+3. Click it → redirected to provider → authenticate → redirected back → logged in.
 4. Check `/api/auth/me` to confirm your user record.
 
----
-
-## 4. Account linking
+## 4. Account Linking
 
 When a user logs in via OAuth for the first time, Fabled checks in this order:
 
 1. **Existing OAuth sub** — returns that user immediately.
-2. **Matching email** — if a local account already exists with the same email address, the OAuth identity is linked to it automatically. The user retains all their notes and tasks.
-3. **New user** — a fresh account is created. The username defaults to the `preferred_username` claim from the provider; if taken, `_2`, `_3`, etc. is appended.
+2. **Matching email** — if a local account already exists with the same email, the OAuth identity is linked to it automatically. The user retains all their notes and tasks.
+3. **New user** — a fresh account is created. Username defaults to `preferred_username` from the provider; if taken, `_2`, `_3`, etc. is appended.
 
----
+## 5. Disable Local Login (Optional)
 
-## 5. Disable local login (optional)
-
-Once everyone is using SSO you can hide the username/password form:
+Once everyone is using SSO:
 
 ```yaml
 LOCAL_AUTH_ENABLED: "false"
 ```
 
-The backend will reject any `POST /api/auth/login` or `POST /api/auth/register` request with a `403`. The login page will only show the SSO button.
+The backend will reject any `POST /api/auth/login` or `POST /api/auth/register` request with a 403. The login page will only show the SSO button.
 
 > **Warning:** Make sure at least one account has been linked via OAuth before disabling local login, or you will be locked out.
 
----
+## 6. Other Providers
 
-## 6. Other providers
+| Provider | Issuer URL format |
+|----------|------------------|
+| Authentik | `https://auth.example.com/application/o/<app-slug>/` |
+| Keycloak | `https://keycloak.example.com/realms/<realm>` |
+| Authelia | `https://auth.example.com` |
+| Zitadel | `https://your-instance.zitadel.cloud` |
+| Google | `https://accounts.google.com` |
 
-| Provider   | Issuer URL format                                        |
-|------------|----------------------------------------------------------|
-| Authentik  | `https://auth.example.com/application/o/<app-slug>/`    |
-| Keycloak   | `https://keycloak.example.com/realms/<realm>`           |
-| Authelia   | `https://auth.example.com`                              |
-| Zitadel    | `https://your-instance.zitadel.cloud`                   |
-| Google     | `https://accounts.google.com`                           |
-
-The OIDC discovery endpoint (`<issuer>/.well-known/openid-configuration`) must be
-publicly reachable from the Fabled container (server-to-server call).
+The OIDC discovery endpoint (`<issuer>/.well-known/openid-configuration`) must be publicly reachable from the Fabled container (server-to-server call at login time).

frontend/index.html

@@ -9,8 +9,8 @@
     <meta name="mobile-web-app-capable" content="yes">
     <meta name="apple-mobile-web-app-capable" content="yes">
     <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent">
-    <meta name="apple-mobile-web-app-title" content="Fabled">
-    <title>Fabled Assistant</title>
+    <meta name="apple-mobile-web-app-title" content="Scribe">
+    <title>Fabled Scribe</title>
   </head>
   <body>
     <div id="app"></div>

frontend/package.json

@@ -1,5 +1,5 @@
 {
-  "name": "fabledassistant-frontend",
+  "name": "scribe-frontend",
   "private": true,
   "version": "0.1.0",
   "type": "module",
@@ -9,6 +9,12 @@
     "preview": "vite preview"
   },
   "dependencies": {
+    "@fullcalendar/core": "^6.1.20",
+    "@fullcalendar/daygrid": "^6.1.20",
+    "@fullcalendar/interaction": "^6.1.20",
+    "@fullcalendar/timegrid": "^6.1.20",
+    "@fullcalendar/vue3": "^6.1.20",
+    "@ricky0123/vad-web": "^0.0.30",
     "@tiptap/core": "^3.0.0",
     "@tiptap/extension-link": "^3.0.0",
     "@tiptap/extension-list": "^3.0.0",
@@ -19,6 +25,7 @@
     "@tiptap/vue-3": "^3.0.0",
     "d3": "^7",
     "dompurify": "^3.1.0",
+    "lucide-vue-next": "^0.469.0",
     "marked": "^17.0.0",
     "pinia": "^3.0.0",
     "vue": "3.5.30",
@@ -30,6 +37,7 @@
     "@vitejs/plugin-vue": "^6.0.0",
     "typescript": "~5.9.0",
     "vite": "^7.0.0",
+    "vite-plugin-static-copy": "^4.0.1",
     "vue-tsc": "^3.0.0"
   }
 }

frontend/public/manifest.json

@@ -1,6 +1,6 @@
 {
-  "name": "Fabled Assistant",
-  "short_name": "Fabled",
+  "name": "Fabled Scribe",
+  "short_name": "Scribe",
   "description": "Your self-hosted second brain with AI assistance",
   "start_url": "/",
   "display": "standalone",

frontend/public/sw.js

@@ -1,45 +1,11 @@
-// Service Worker for push notifications and PWA support
-self.addEventListener('push', event => {
-  if (!event.data) return;
-  const data = event.data.json();
-  const notifUrl = data.url || '/';
+// Service Worker — PWA installability shell only.
+//
+// The push and notificationclick listeners were removed alongside the chat
+// generation pipeline (they only fired when the internal LLM finished a
+// response). The empty fetch handler is preserved as the installability
+// surface required for "Add to Home Screen" in some browsers; offline
+// caching is intentionally not implemented yet.
 
-  event.waitUntil(
-    clients.matchAll({ type: 'window', includeUncontrolled: true }).then(clientList => {
-      // Suppress notification if the user already has the relevant page focused
-      for (const client of clientList) {
-        if (client.visibilityState === 'visible' && client.url.includes(notifUrl)) {
-          return;
-        }
-      }
-      return self.registration.showNotification(data.title || 'Fabled Assistant', {
-        body: data.body || '',
-        icon: '/favicon.ico',
-        badge: '/favicon.ico',
-        data: { url: notifUrl },
-      });
-    })
-  );
-});
-
-self.addEventListener('notificationclick', event => {
-  event.notification.close();
-  event.waitUntil(
-    clients.matchAll({ type: 'window', includeUncontrolled: true }).then(clientList => {
-      const url = event.notification.data.url;
-      for (const client of clientList) {
-        if (client.url.includes(url) && 'focus' in client) {
-          return client.focus();
-        }
-      }
-      if (clients.openWindow) {
-        return clients.openWindow(url);
-      }
-    })
-  );
-});
-
-// PWA: serve cached assets for offline support (minimal)
-self.addEventListener('fetch', event => {
+self.addEventListener('fetch', () => {
   // Pass-through — no offline caching in v1
 });

frontend/src/App.vue

@@ -6,26 +6,25 @@ import ToastNotification from "@/components/ToastNotification.vue";
 import { useTheme } from "@/composables/useTheme";
 import { useShortcuts } from "@/composables/useShortcuts";
 import { useAuthStore } from "@/stores/auth";
-import { useChatStore } from "@/stores/chat";
 import { useSettingsStore } from "@/stores/settings";
-import { apiGet } from "@/api/client";
+import { apiGet, apiPut } from "@/api/client";
 
 useTheme();
 
 const router = useRouter();
 const appVersion = ref("dev");
 const authStore = useAuthStore();
-const chatStore = useChatStore();
 const settingsStore = useSettingsStore();
 const { showShortcuts, toggleShortcuts, closeShortcuts } = useShortcuts();
 
 function startAppServices() {
-  chatStore.startStatusPolling();
   settingsStore.fetchSettings();
+  // Sync browser timezone to the server on every login/page load.
+  apiPut("/api/settings", { user_timezone: Intl.DateTimeFormat().resolvedOptions().timeZone }).catch(() => {});
 }
 
 function stopAppServices() {
-  chatStore.stopStatusPolling();
+  // no-op for now; kept as a hook for future per-session teardown
 }
 
 function isInputActive(): boolean {
@@ -78,10 +77,12 @@ function onGlobalKeydown(e: KeyboardEvent) {
     switch (e.key) {
       case "h": router.push("/"); break;
       case "n": router.push("/notes"); break;
-      case "t": router.push("/tasks"); break;
+      case "t": router.push("/"); break;
       case "p": router.push("/projects"); break;
-      case "c": router.push("/chat"); break;
+      case "r": router.push("/rules"); break;
       case "g": router.push("/graph"); break;
+      case "l": router.push("/calendar"); break;
+      case "x": router.push("/trash"); break;
     }
     return;
   }
@@ -109,13 +110,6 @@ function onGlobalKeydown(e: KeyboardEvent) {
       e.preventDefault();
       document.dispatchEvent(new CustomEvent("shortcut:focus-search"));
       break;
-    case "c":
-      if (router.currentRoute.value.name === "home") {
-        document.dispatchEvent(new CustomEvent("shortcut:focus-chat"));
-      } else {
-        router.push("/chat");
-      }
-      break;
   }
 }
 
@@ -188,7 +182,7 @@ onUnmounted(() => {
                 <kbd class="shortcut-key">g</kbd>
                 <span class="shortcut-key-sep">+</span>
                 <kbd class="shortcut-key">t</kbd>
-                <span class="shortcut-desc">Tasks</span>
+                <span class="shortcut-desc">Knowledge (tasks)</span>
               </div>
               <div class="shortcut-row">
                 <kbd class="shortcut-key">g</kbd>
@@ -199,8 +193,14 @@ onUnmounted(() => {
               <div class="shortcut-row">
                 <kbd class="shortcut-key">g</kbd>
                 <span class="shortcut-key-sep">+</span>
-                <kbd class="shortcut-key">c</kbd>
-                <span class="shortcut-desc">Chat</span>
+                <kbd class="shortcut-key">l</kbd>
+                <span class="shortcut-desc">Calendar</span>
+              </div>
+              <div class="shortcut-row">
+                <kbd class="shortcut-key">g</kbd>
+                <span class="shortcut-key-sep">+</span>
+                <kbd class="shortcut-key">x</kbd>
+                <span class="shortcut-desc">Trash</span>
               </div>
               <div class="shortcut-row">
                 <kbd class="shortcut-key">Esc</kbd>
@@ -243,23 +243,6 @@ onUnmounted(() => {
                 <span class="shortcut-desc">Edit current item (viewer)</span>
               </div>
             </div>
-            <div class="shortcuts-section">
-              <div class="shortcuts-section-title">Chat</div>
-              <div class="shortcut-row">
-                <kbd class="shortcut-key">c</kbd>
-                <span class="shortcut-desc">Focus chat (home) / go to chat</span>
-              </div>
-              <div class="shortcut-row">
-                <kbd class="shortcut-key">Enter</kbd>
-                <span class="shortcut-desc">Send message</span>
-              </div>
-              <div class="shortcut-row">
-                <kbd class="shortcut-key">Shift</kbd>
-                <span class="shortcut-key-sep">+</span>
-                <kbd class="shortcut-key">Enter</kbd>
-                <span class="shortcut-desc">New line</span>
-              </div>
-            </div>
           </div>
         </div>
       </div>
@@ -304,7 +287,7 @@ onUnmounted(() => {
   min-height: 0;
   overflow-y: auto;
 }
-.app-content:has(.workspace-root) {
+.app-content:has(.knowledge-root) {
   overflow: hidden;
 }
 

frontend/src/api/client.ts

@@ -123,7 +123,6 @@ export interface NotificationEntry {
 export interface UserSearchResult {
   id: number
   username: string
-  email: string | null
 }
 
 // --- User search ---
@@ -300,126 +299,6 @@ export function apiSSEStream(
   return { close: () => controller.abort(), done };
 }
 
-// ---------------------------------------------------------------------------
-// Briefing
-// ---------------------------------------------------------------------------
-
-export interface BriefingLocation {
-  label: string;
-  address: string;
-  lat?: number;
-  lon?: number;
-}
-
-export interface BriefingSlots {
-  compilation: boolean;
-  morning: boolean;
-  midday: boolean;
-  afternoon: boolean;
-}
-
-export interface BriefingConfig {
-  enabled: boolean;
-  locations: {
-    home?: BriefingLocation;
-    work?: BriefingLocation;
-  };
-  use_caldav_event_locations: boolean;
-  work_days: number[];
-  slots: BriefingSlots;
-  notifications: boolean;
-  temp_unit: 'C' | 'F';
-  timezone: string;
-}
-
-export interface BriefingFeed {
-  id: number;
-  title: string;
-  url: string;
-  category: string | null;
-  last_fetched_at: string | null;
-}
-
-export interface BriefingConversation {
-  id: number;
-  title: string;
-  briefing_date: string | null;
-  message_count: number;
-  created_at: string;
-}
-
-export interface BriefingMessage {
-  id: number;
-  role: 'user' | 'assistant' | 'system';
-  content: string;
-  created_at: string;
-}
-
-const DEFAULT_BRIEFING_CONFIG: BriefingConfig = {
-  enabled: false,
-  locations: {},
-  use_caldav_event_locations: false,
-  work_days: [1, 2, 3, 4, 5],
-  slots: { compilation: true, morning: true, midday: false, afternoon: false },
-  notifications: true,
-  temp_unit: 'C',
-  timezone: '',
-};
-
-export async function getBriefingConfig(): Promise<BriefingConfig> {
-  try {
-    const data = await apiGet<BriefingConfig>('/api/briefing/config');
-    return { ...DEFAULT_BRIEFING_CONFIG, ...data };
-  } catch {
-    return { ...DEFAULT_BRIEFING_CONFIG };
-  }
-}
-
-export async function saveBriefingConfig(config: BriefingConfig): Promise<void> {
-  await apiPut('/api/briefing/config', config);
-}
-
-export async function getBriefingFeeds(): Promise<BriefingFeed[]> {
-  const data = await apiGet<BriefingFeed[]>('/api/briefing/feeds');
-  return data;
-}
-
-export async function createBriefingFeed(url: string): Promise<BriefingFeed> {
-  const data = await apiPost<{ id: number; url: string; title: string; category: string | null }>('/api/briefing/feeds', { url });
-  return { ...data, last_fetched_at: null };
-}
-
-export async function deleteBriefingFeed(id: number): Promise<void> {
-  await apiDelete(`/api/briefing/feeds/${id}`);
-}
-
-export async function getBriefingConversations(): Promise<BriefingConversation[]> {
-  const data = await apiGet<{ conversations: BriefingConversation[] }>('/api/briefing/conversations');
-  return data.conversations;
-}
-
-export async function getBriefingToday(): Promise<{ id: number; title: string; messages: BriefingMessage[] }> {
-  return apiGet('/api/briefing/conversations/today');
-}
-
-export async function getBriefingConvMessages(id: number): Promise<BriefingMessage[]> {
-  const data = await apiGet<{ messages: BriefingMessage[] }>(`/api/briefing/conversations/${id}/messages`);
-  return data.messages;
-}
-
-export async function triggerBriefingSlot(slot: string): Promise<void> {
-  await apiPost('/api/briefing/trigger', { slot });
-}
-
-export async function geocodeAddress(address: string): Promise<{ lat: number; lon: number; display_name: string } | null> {
-  try {
-    const r = await apiPost<{ lat: number; lon: number; label: string }>('/api/briefing/weather/geocode', { query: address });
-    return { lat: r.lat, lon: r.lon, display_name: r.label };
-  } catch {
-    return null;
-  }
-}
-
 export async function apiStreamPost(
   path: string,
   body: unknown,
@@ -494,3 +373,122 @@ export async function apiStreamPost(
     }
   }
 }
+
+// ---------------------------------------------------------------------------
+// Calendar events
+// ---------------------------------------------------------------------------
+
+export interface EventEntry {
+  id: number;
+  uid: string;
+  title: string;
+  start_dt: string;
+  end_dt: string | null;
+  all_day: boolean;
+  description: string;
+  location: string;
+  color: string;
+  recurrence: string | null;
+  caldav_uid: string;
+  project_id: number | null;
+  user_id: number;
+  created_at: string | null;
+  updated_at: string | null;
+}
+
+export interface EventCreatePayload {
+  title: string;
+  start_dt: string;
+  end_dt?: string;
+  all_day?: boolean;
+  description?: string;
+  location?: string;
+  color?: string;
+  recurrence?: string;
+  project_id?: number;
+}
+
+export interface EventUpdatePayload {
+  title?: string;
+  start_dt?: string;
+  end_dt?: string;
+  all_day?: boolean;
+  description?: string;
+  location?: string;
+  color?: string;
+  recurrence?: string | null;
+  project_id?: number;
+}
+
+export async function listEvents(from: string, to: string): Promise<EventEntry[]> {
+  return apiGet<EventEntry[]>(`/api/events?from=${encodeURIComponent(from)}&to=${encodeURIComponent(to)}`);
+}
+
+export async function createEvent(payload: EventCreatePayload): Promise<EventEntry> {
+  return apiPost<EventEntry>('/api/events', payload);
+}
+
+export async function getEvent(id: number): Promise<EventEntry> {
+  return apiGet<EventEntry>(`/api/events/${id}`);
+}
+
+export async function updateEvent(id: number, payload: EventUpdatePayload): Promise<EventEntry> {
+  return apiPatch<EventEntry>(`/api/events/${id}`, payload);
+}
+
+export async function deleteEvent(id: number): Promise<void> {
+  return apiDelete(`/api/events/${id}`);
+}
+
+// ─── API Keys ─────────────────────────────────────────────────────────────────
+
+export interface ApiKeyEntry {
+  id: number
+  name: string
+  scope: string
+  key_prefix: string
+  last_used_at: string | null
+}
+
+export const listApiKeys = () =>
+  apiGet<{ api_keys: ApiKeyEntry[] }>('/api/api-keys').then(r => r.api_keys)
+
+export const createApiKey = (name: string, scope: 'read' | 'write') =>
+  apiPost<{ key: string; api_key: ApiKeyEntry }>('/api/api-keys', { name, scope })
+
+export const revokeApiKey = (id: number) => apiDelete(`/api/api-keys/${id}`)
+
+// ── User Profile ─────────────────────────────────────────────────────────────
+
+export interface UserProfile {
+  display_name: string
+  job_title: string
+  industry: string
+  expertise_level: 'novice' | 'intermediate' | 'expert'
+  response_style: 'concise' | 'balanced' | 'detailed'
+  tone: 'casual' | 'professional' | 'technical'
+  interests: string[]
+  work_schedule: { days?: string[]; start?: string; end?: string }
+}
+
+export const getProfile = () => apiGet<UserProfile>('/api/profile')
+export const updateProfile = (data: Partial<UserProfile>) =>
+  apiPut<UserProfile>('/api/profile', data)
+
+
+// ── Note Versions (pinning) ──────────────────────────────────────────────────
+
+import type { NoteVersion } from '../types/task'
+
+/** Mark a note version as manually pinned, optionally with a commit-note
+ *  label. Re-calling with a different label updates the label. */
+export const pinNoteVersion = (noteId: number, versionId: number, label?: string | null) =>
+  apiPost<NoteVersion>(
+    `/api/notes/${noteId}/versions/${versionId}/pin`,
+    { label: label ?? null },
+  )
+
+/** Downgrade a manually-pinned version back to rolling. Does NOT delete
+ *  the row — older rows may be FIFO-pruned by the next autosave. */
+export const unpinNoteVersion = (noteId: number, versionId: number) =>
+  apiDelete(`/api/notes/${noteId}/versions/${versionId}/pin`)

frontend/src/api/rulebooks.ts

@@ -0,0 +1,183 @@
+import { apiGet, apiPost, apiPatch, apiDelete } from "@/api/client";
+
+export interface Rulebook {
+  id: number;
+  owner_user_id: number;
+  title: string;
+  description: string;
+  always_on: boolean;
+  created_at: string | null;
+  updated_at: string | null;
+}
+
+export interface RulebookTopic {
+  id: number;
+  rulebook_id: number;
+  title: string;
+  description: string;
+  order_index: number;
+  created_at: string | null;
+  updated_at: string | null;
+}
+
+export interface Rule {
+  id: number;
+  topic_id: number | null;
+  project_id: number | null;
+  title: string;
+  statement: string;
+  why: string;
+  how_to_apply: string;
+  order_index: number;
+  created_at: string | null;
+  updated_at: string | null;
+}
+
+export interface RuleHeader {
+  id: number;
+  title: string;
+  statement: string;
+  topic_id: number | null;
+}
+
+export interface ApplicableRules {
+  rules: {
+    id: number;
+    title: string;
+    statement: string;
+    topic_id: number;
+    topic_title: string;
+    rulebook_id: number;
+    rulebook_title: string;
+  }[];
+  project_rules: {
+    id: number;
+    title: string;
+    statement: string;
+  }[];
+  suppressed_rules: {
+    id: number;
+    title: string;
+    topic_id: number;
+    topic_title: string;
+    rulebook_id: number;
+    rulebook_title: string;
+  }[];
+  suppressed_topics: {
+    id: number;
+    title: string;
+    rulebook_id: number;
+    rulebook_title: string;
+  }[];
+  truncated: boolean;
+  subscribed_rulebooks: { id: number; title: string }[];
+}
+
+// ── Rulebooks ───────────────────────────────────────────────────────
+
+export async function listRulebooks(): Promise<Rulebook[]> {
+  const data = await apiGet<{ rulebooks: Rulebook[] }>("/api/rulebooks");
+  return data.rulebooks;
+}
+
+export async function getRulebook(id: number): Promise<Rulebook & { topics: RulebookTopic[] }> {
+  return apiGet(`/api/rulebooks/${id}`);
+}
+
+export async function createRulebook(data: { title: string; description?: string }): Promise<Rulebook> {
+  return apiPost("/api/rulebooks", data);
+}
+
+export async function updateRulebook(id: number, data: Partial<{ title: string; description: string; always_on: boolean }>): Promise<Rulebook> {
+  return apiPatch(`/api/rulebooks/${id}`, data);
+}
+
+export async function deleteRulebook(id: number): Promise<void> {
+  return apiDelete(`/api/rulebooks/${id}`);
+}
+
+// ── Topics ─────────────────────────────────────────────────────────
+
+export async function listTopics(rulebookId: number): Promise<RulebookTopic[]> {
+  const data = await apiGet<{ topics: RulebookTopic[] }>(`/api/rulebooks/${rulebookId}/topics`);
+  return data.topics;
+}
+
+export async function createTopic(rulebookId: number, data: { title: string; description?: string; order_index?: number }): Promise<RulebookTopic> {
+  return apiPost(`/api/rulebooks/${rulebookId}/topics`, data);
+}
+
+export async function updateTopic(id: number, data: Partial<{ title: string; description: string; order_index: number }>): Promise<RulebookTopic> {
+  return apiPatch(`/api/rulebook-topics/${id}`, data);
+}
+
+export async function deleteTopic(id: number): Promise<void> {
+  return apiDelete(`/api/rulebook-topics/${id}`);
+}
+
+// ── Rules ──────────────────────────────────────────────────────────
+
+export async function listRules(filters: { rulebook_id?: number; topic_id?: number; project_id?: number } = {}): Promise<Rule[]> {
+  const params = new URLSearchParams();
+  if (filters.rulebook_id) params.set("rulebook_id", String(filters.rulebook_id));
+  if (filters.topic_id) params.set("topic_id", String(filters.topic_id));
+  if (filters.project_id) params.set("project_id", String(filters.project_id));
+  const qs = params.toString();
+  const data = await apiGet<{ rules: Rule[] }>(`/api/rules${qs ? `?${qs}` : ""}`);
+  return data.rules;
+}
+
+export async function getRule(id: number): Promise<Rule> {
+  return apiGet(`/api/rules/${id}`);
+}
+
+export async function createRule(topicId: number, data: { title: string; statement: string; why?: string; how_to_apply?: string; order_index?: number }): Promise<Rule> {
+  return apiPost(`/api/rulebook-topics/${topicId}/rules`, data);
+}
+
+export async function updateRule(id: number, data: Partial<{ title: string; statement: string; why: string; how_to_apply: string; order_index: number }>): Promise<Rule> {
+  return apiPatch(`/api/rules/${id}`, data);
+}
+
+export async function deleteRule(id: number): Promise<void> {
+  return apiDelete(`/api/rules/${id}`);
+}
+
+// ── Subscriptions ──────────────────────────────────────────────────
+
+export async function subscribeProject(projectId: number, rulebookId: number): Promise<void> {
+  await apiPost(`/api/projects/${projectId}/rulebook-subscriptions`, { rulebook_id: rulebookId });
+}
+
+export async function unsubscribeProject(projectId: number, rulebookId: number): Promise<void> {
+  return apiDelete(`/api/projects/${projectId}/rulebook-subscriptions/${rulebookId}`);
+}
+
+export async function getProjectApplicableRules(projectId: number): Promise<ApplicableRules> {
+  return apiGet(`/api/projects/${projectId}/rules`);
+}
+
+export async function createProjectRule(
+  projectId: number,
+  data: { statement: string; title?: string; why?: string; how_to_apply?: string },
+): Promise<Rule> {
+  return apiPost(`/api/projects/${projectId}/rules`, data);
+}
+
+// ── Suppressions ───────────────────────────────────────────────────
+
+export async function suppressRuleForProject(projectId: number, ruleId: number): Promise<void> {
+  await apiPost(`/api/projects/${projectId}/suppressions/rules/${ruleId}`, {});
+}
+
+export async function unsuppressRuleForProject(projectId: number, ruleId: number): Promise<void> {
+  return apiDelete(`/api/projects/${projectId}/suppressions/rules/${ruleId}`);
+}
+
+export async function suppressTopicForProject(projectId: number, topicId: number): Promise<void> {
+  await apiPost(`/api/projects/${projectId}/suppressions/topics/${topicId}`, {});
+}
+
+export async function unsuppressTopicForProject(projectId: number, topicId: number): Promise<void> {
+  return apiDelete(`/api/projects/${projectId}/suppressions/topics/${topicId}`);
+}

frontend/src/api/systems.ts

@@ -0,0 +1,64 @@
+import { apiGet, apiPost, apiPatch, apiDelete } from "@/api/client";
+
+export interface System {
+  id: number;
+  project_id: number;
+  name: string;
+  description: string;
+  color: string | null;
+  status: "active" | "archived";
+  order_index: number;
+  open_issue_count: number;
+  created_at: string | null;
+  updated_at: string | null;
+}
+
+export async function listSystems(projectId: number): Promise<System[]> {
+  const data = await apiGet<{ systems: System[] }>(`/api/projects/${projectId}/systems`);
+  return data.systems;
+}
+
+export async function createSystem(
+  projectId: number,
+  data: { name: string; description?: string; color?: string },
+): Promise<System> {
+  return apiPost(`/api/projects/${projectId}/systems`, data);
+}
+
+export async function updateSystem(
+  projectId: number,
+  systemId: number,
+  data: Partial<{
+    name: string;
+    description: string;
+    color: string | null;
+    status: "active" | "archived";
+    order_index: number;
+  }>,
+): Promise<System> {
+  return apiPatch(`/api/projects/${projectId}/systems/${systemId}`, data);
+}
+
+export async function deleteSystem(projectId: number, systemId: number): Promise<void> {
+  return apiDelete(`/api/projects/${projectId}/systems/${systemId}`);
+}
+
+// Lightweight issue shape returned by the project-issues list endpoint.
+export interface TaskLike {
+  id: number;
+  title: string;
+  status: string;
+  priority: string;
+  systems?: System[];
+  updated_at?: string | null;
+}
+
+export async function getProjectIssues(
+  projectId: number,
+  openOnly = true,
+): Promise<TaskLike[]> {
+  const data = await apiGet<{ issues: TaskLike[] }>(
+    `/api/projects/${projectId}/issues?open_only=${openOnly}`,
+  );
+  return data.issues;
+}

frontend/src/api/trash.ts

@@ -0,0 +1,28 @@
+import { apiGet, apiPost, apiDelete } from "@/api/client";
+
+export interface TrashItem {
+  type: string;
+  id: number;
+  title: string;
+}
+
+export interface TrashBatch {
+  batch_id: string;
+  deleted_at: string | null;
+  summary: string;
+  count: number;
+  items: TrashItem[];
+}
+
+export async function listTrash(): Promise<TrashBatch[]> {
+  const data = await apiGet<{ batches: TrashBatch[] }>("/api/trash");
+  return data.batches;
+}
+
+export async function restoreBatch(batchId: string): Promise<void> {
+  await apiPost(`/api/trash/${batchId}/restore`, {});
+}
+
+export async function purgeBatch(batchId: string): Promise<void> {
+  return apiDelete(`/api/trash/${batchId}`);
+}

frontend/src/assets/editor-shared.css

@@ -50,34 +50,42 @@
   border-color: var(--color-primary);
   color: var(--color-primary);
 }
+/* Save: Moss action-primary per the Hybrid rule. Saving is "operating
+   the software" — not a brand moment. Accent gradient is reserved for
+   Send / empty-state CTAs. */
 .btn-save {
   padding: 0.45rem 1.1rem;
-  background: linear-gradient(135deg, #6366f1, #4f46e5);
+  background: var(--color-action-primary);
   color: #fff;
   border: none;
   border-radius: var(--radius-sm);
   cursor: pointer;
-  font-weight: 600;
+  font-weight: 500;
   font-size: 0.875rem;
-  box-shadow: 0 2px 8px rgba(99, 102, 241, 0.28);
-  transition: box-shadow 0.15s, opacity 0.15s;
+  transition: background 0.15s, opacity 0.15s;
 }
 .btn-save:hover:not(:disabled) {
-  box-shadow: 0 4px 14px rgba(99, 102, 241, 0.42);
-  opacity: 0.95;
+  background: var(--color-action-primary-hover);
 }
 .btn-save:disabled {
   opacity: 0.55;
   cursor: default;
 }
+/* Delete: Oxblood action-destructive per Hybrid rule. Should be paired
+   with a Trash icon at the call site to reinforce intent. */
 .btn-delete {
   padding: 0.45rem 1rem;
-  background: var(--color-danger);
+  background: var(--color-action-destructive);
   color: #fff;
   border: none;
   border-radius: var(--radius-sm);
   cursor: pointer;
+  display: inline-flex;
+  align-items: center;
+  gap: 0.35rem;
+  font-weight: 500;
 }
+.btn-delete:hover { background: var(--color-action-destructive-hover); }
 .btn-assist-toggle {
   margin-left: auto;
   padding: 0.4rem 0.9rem;
@@ -99,7 +107,7 @@
   border-bottom: 1.5px solid var(--color-border);
   border-radius: 0;
   font-size: 1.5rem;
-  font-weight: 700;
+  font-weight: 500;
   font-family: "Fraunces", Georgia, serif;
   background: transparent;
   color: var(--color-text);
@@ -112,7 +120,6 @@
 }
 .title-input::placeholder {
   color: var(--color-text-muted);
-  font-style: italic;
   font-weight: 400;
 }
 .editor-tabs {
@@ -225,7 +232,7 @@
 .assist-panel-title {
   flex: 1;
   font-size: 0.8rem;
-  font-weight: 700;
+  font-weight: 500;
   color: var(--color-text-secondary);
   text-transform: uppercase;
   letter-spacing: 0.05em;
@@ -269,7 +276,7 @@
 /* Section list */
 .assist-sections-label {
   font-size: 0.72rem;
-  font-weight: 700;
+  font-weight: 500;
   text-transform: uppercase;
   letter-spacing: 0.04em;
   color: var(--color-text-muted);
@@ -362,7 +369,6 @@
 .assist-streaming-label {
   font-size: 0.8rem;
   color: var(--color-text-secondary);
-  font-style: italic;
   overflow: hidden;
   text-overflow: ellipsis;
   white-space: nowrap;
@@ -391,7 +397,6 @@
   padding: 0.5rem 0.75rem;
   font-size: 0.8rem;
   color: var(--color-text-muted);
-  font-style: italic;
   text-align: center;
 }
 
@@ -411,7 +416,7 @@
   align-items: center;
   justify-content: space-between;
   font-size: 0.8rem;
-  font-weight: 600;
+  font-weight: 500;
   color: var(--color-text-secondary);
 }
 .btn-toggle-view {
@@ -454,7 +459,7 @@
   width: 1rem;
   text-align: center;
   user-select: none;
-  font-weight: 700;
+  font-weight: 500;
 }
 .diff-text {
   flex: 1;
@@ -464,7 +469,6 @@
 .diff-empty {
   padding: 0.5rem;
   color: var(--color-text-muted);
-  font-style: italic;
   font-size: 0.82rem;
 }
 .assist-actions {
@@ -562,7 +566,7 @@
   border: none;
   border-bottom: 1px solid var(--color-border);
   font-size: 0.85rem;
-  font-weight: 600;
+  font-weight: 500;
   color: var(--color-text-secondary);
   cursor: pointer;
   text-align: left;
@@ -581,7 +585,7 @@
 }
 .sb-label {
   font-size: 0.78rem;
-  font-weight: 600;
+  font-weight: 500;
   color: var(--color-text-secondary);
   text-transform: uppercase;
   letter-spacing: 0.04em;

frontend/src/assets/prose.css

@@ -1,5 +1,8 @@
 .prose {
-  line-height: 1.6;
+  /* Long-form reading line-height per the design system —
+     reading surfaces (notes, tasks, journal, assistant bubbles) want 1.7
+     so prose breathes like a book, not a UI snippet. */
+  line-height: 1.7;
 }
 
 .prose h1 {
@@ -180,6 +183,34 @@
   color: var(--color-text-muted);
 }
 
+/* Interactive checkboxes — marked output in the list-note viewer */
+.prose--checklist ul {
+  list-style: none;
+  padding-left: 0.25rem;
+}
+.prose--checklist li {
+  display: flex;
+  align-items: baseline;
+  gap: 0.5rem;
+  margin-bottom: 0.25rem;
+}
+.prose--checklist li input[type="checkbox"] {
+  flex-shrink: 0;
+  accent-color: var(--color-primary);
+  cursor: pointer;
+  width: 0.95em;
+  height: 0.95em;
+  margin: 0;
+}
+.prose--checklist li:has(input[type="checkbox"]:checked) > p,
+.prose--checklist li:has(input[type="checkbox"]:checked) {
+  text-decoration: line-through;
+  color: var(--color-text-muted);
+}
+.prose--checklist li:has(input[type="checkbox"]:checked) input[type="checkbox"] {
+  text-decoration: none; /* don't strike through the checkbox itself */
+}
+
 /* Tiptap editor */
 .tiptap-editor .ProseMirror {
   outline: none;

frontend/src/assets/theme.css

@@ -1,100 +1,147 @@
-@import url('https://fonts.googleapis.com/css2?family=Fraunces:ital,opsz,wght@0,9..144,300..900;1,9..144,300..900&display=swap');
+@import url('https://fonts.googleapis.com/css2?family=Fraunces:ital,opsz,wght@0,9..144,300..900;1,9..144,300..900&family=Inter:ital,wght@0,400;0,500;1,400&family=JetBrains+Mono:ital,wght@0,400;1,400&display=swap');
 
 :root {
-  --color-bg: #f5f5fb;
-  --color-bg-secondary: #ededf5;
-  --color-bg-card: #ffffff;
-  --color-text: #1a1a1a;
-  --color-text-secondary: #666666;
-  --color-text-muted: #999999;
-  --color-border: #dddde8;
-  --color-input-border: #c8c8d8;
-  --color-primary: #6366f1;
-  --color-danger: #d93025;
-  --color-tag-bg: #ede9fe;
-  --color-tag-text: #4f46e5;
+  /* Light mode — warm parchment palette */
+  --color-bg: #F5F1E8;
+  --color-bg-secondary: #FBF8F0;
+  --color-bg-card: #FBF8F0;
+  --color-surface: #EFEAE0;
+  --color-text: #14171A;
+  --color-text-secondary: #5A5852;
+  --color-text-muted: #9A9890;
+  --color-border: #D9D6CE;
+  --color-input-border: #D9D6CE;
+  --color-primary: #5B4A8A;
+  --color-danger: #C04A1F;
+  --color-tag-bg: rgba(91, 74, 138, 0.12);
+  --color-tag-text: #5B4A8A;
   --color-shadow: rgba(0, 0, 0, 0.08);
-  --color-toast-success: #34a853;
-  --color-toast-error: #d93025;
-  --color-status-todo: #5f6368;
-  --color-status-todo-bg: #e8eaed;
-  --color-status-in-progress: #6366f1;
-  --color-status-in-progress-bg: #ede9fe;
-  --color-status-done: #34a853;
-  --color-status-done-bg: #e6f4ea;
-  --color-priority-low: #5f9ea0;
-  --color-priority-low-bg: #e0f2f1;
-  --color-priority-medium: #f9a825;
-  --color-priority-medium-bg: #fff8e1;
-  --color-priority-high: #d93025;
-  --color-priority-high-bg: #fce8e6;
-  --color-wikilink: #7b1fa2;
-  --color-wikilink-bg: #f3e5f5;
-  --color-overdue: #d93025;
-  --color-code-bg: #f0f0f8;
-  --color-code-inline-bg: #eaeaf4;
-  --color-table-stripe: #f4f4fb;
-  --color-success: #22c55e;
-  --color-warning: #eab308;
-  --color-input-bar-bg: #eaeaf3;
-  --color-input-bar-text: #1a1a1a;
-  --color-input-bar-placeholder: rgba(0, 0, 0, 0.4);
+  --color-toast-success: #4A5D3F;
+  --color-toast-error: #C04A1F;
+  --color-status-todo: #3F4651;
+  --color-status-todo-bg: rgba(63, 70, 81, 0.10);
+  --color-status-in-progress: #5B4A8A;
+  --color-status-in-progress-bg: rgba(91, 74, 138, 0.12);
+  --color-status-done: #4A5D3F;
+  --color-status-done-bg: rgba(74, 93, 63, 0.12);
+  --color-priority-low: #3D5A6E;
+  --color-priority-low-bg: rgba(61, 90, 110, 0.12);
+  --color-priority-medium: #8B6F1E;
+  --color-priority-medium-bg: rgba(139, 111, 30, 0.12);
+  --color-priority-high: #C04A1F;
+  --color-priority-high-bg: rgba(192, 74, 31, 0.12);
+  --color-wikilink: #5B4A8A;
+  --color-wikilink-bg: rgba(91, 74, 138, 0.12);
+  --color-overdue: #C04A1F;
+  --color-code-bg: #EBEDF0;
+  --color-code-inline-bg: #EBEDF0;
+  --color-table-stripe: rgba(20, 23, 26, 0.025);
+  --color-success: #4A5D3F;
+  --color-warning: #8B6F1E;
+  --color-input-bar-bg: #EFEAE0;
+  --color-input-bar-text: #14171A;
+  --color-input-bar-placeholder: rgba(20, 23, 26, 0.4);
   --color-overlay: rgba(0, 0, 0, 0.45);
-  --color-bubble-user-bg: rgba(0, 0, 0, 0.04);
-  --color-bubble-user-border: rgba(0, 0, 0, 0.10);
-  --color-bubble-user-text: #3a3a4a;
-  --color-bubble-asst-shadow: 0 2px 16px rgba(99, 102, 241, 0.10), 0 1px 4px rgba(0, 0, 0, 0.06);
+  --color-bubble-user-bg: transparent;
+  --color-bubble-user-border: #D9D6CE;
+  --color-bubble-user-text: #5A5852;
+  --color-bubble-asst-shadow: 0 2px 14px rgba(91, 74, 138, 0.06), 0 1px 4px rgba(0, 0, 0, 0.05);
+  --color-primary-solid: #5B4A8A;
+  --color-primary-deep: #3F3560;
+  --gradient-cta: linear-gradient(135deg, var(--color-primary-solid), var(--color-primary-deep));
+  --glow-cta: 0 2px 10px rgba(91, 74, 138, 0.35);
+  --glow-cta-hover: 0 4px 20px rgba(91, 74, 138, 0.55);
+  --glow-soft: 0 0 16px rgba(91, 74, 138, 0.35);
+  --color-primary-faint: rgba(91, 74, 138, 0.08);
+  --color-primary-tint: rgba(91, 74, 138, 0.12);
+  --color-primary-wash: rgba(91, 74, 138, 0.20);
+
+  /* Action color set — Hybrid rule: action buttons use these, accent reserved for brand moments */
+  --color-action-primary: #4A5D3F;
+  --color-action-primary-hover: #5A6F4D;
+  --color-action-secondary: #8B7355;
+  --color-action-secondary-hover: #A0876A;
+  --color-action-destructive: #6B2118;
+  --color-action-destructive-hover: #7E2A1F;
+  --color-action-ghost-border: #3F4651;
+
   --radius-sm: 6px;
   --radius-md: 12px;
   --radius-lg: 18px;
   --radius-pill: 9999px;
-  --focus-ring: 0 0 0 2px color-mix(in srgb, var(--color-primary) 40%, transparent);
+  --focus-ring: 0 0 0 2px rgba(91, 74, 138, 0.5);
+  /* Layout */
+  --page-max-width: 1200px;
+  --page-padding-x: 1rem;
+  --sidebar-width: 260px;
+  --chat-reading-width: min(1200px, 100%);
+  --chat-context-sidebar-width: 220px;
 }
 
 [data-theme="dark"] {
-  --color-bg: #111113;
-  --color-bg-secondary: #18181f;
-  --color-bg-card: #1e1e27;
-  --color-text: #e4e4f0;
-  --color-text-secondary: #8888a8;
-  --color-text-muted: #52526a;
-  --color-border: rgba(99, 102, 241, 0.10);
-  --color-input-border: rgba(99, 102, 241, 0.22);
-  --color-primary: #818cf8;
-  --color-danger: #f44336;
-  --color-tag-bg: #2a2a45;
-  --color-tag-text: #a5b4fc;
+  /* Dark mode — Obsidian / Iron / Pewter */
+  --color-bg: #14171A;
+  --color-bg-secondary: #1E2228;
+  --color-bg-card: #1E2228;
+  --color-surface: #2C313A;
+  --color-text: #E8E4D8;
+  --color-text-secondary: #C2BFB4;
+  --color-text-muted: #9C9A92;
+  --color-border: #3F4651;
+  --color-input-border: #3F4651;
+  --color-primary: #5B4A8A;
+  --color-danger: #C04A1F;
+  --color-tag-bg: rgba(91, 74, 138, 0.15);
+  --color-tag-text: #5B4A8A;
   --color-shadow: rgba(0, 0, 0, 0.4);
-  --color-toast-success: #4caf50;
-  --color-toast-error: #f44336;
-  --color-status-todo: #9aa0a6;
-  --color-status-todo-bg: #2a2a35;
-  --color-status-in-progress: #818cf8;
-  --color-status-in-progress-bg: #2a2a45;
-  --color-status-done: #4caf50;
-  --color-status-done-bg: #1b3a20;
-  --color-priority-low: #80cbc4;
-  --color-priority-low-bg: #1a3a38;
-  --color-priority-medium: #fdd835;
-  --color-priority-medium-bg: #3a3520;
-  --color-priority-high: #f44336;
-  --color-priority-high-bg: #3a1a1a;
-  --color-wikilink: #c4b5fd;
-  --color-wikilink-bg: #2a1a45;
-  --color-overdue: #f44336;
-  --color-code-bg: #16161d;
-  --color-code-inline-bg: #1e1e2d;
-  --color-table-stripe: #16161e;
-  --color-success: #4ade80;
-  --color-warning: #facc15;
-  --color-input-bar-bg: #1e1e27;
-  --color-input-bar-text: #e4e4f0;
-  --color-input-bar-placeholder: rgba(228, 228, 240, 0.35);
+  --color-toast-success: #4A5D3F;
+  --color-toast-error: #C04A1F;
+  --color-status-todo: #3F4651;
+  --color-status-todo-bg: rgba(63, 70, 81, 0.18);
+  --color-status-in-progress: #5B4A8A;
+  --color-status-in-progress-bg: rgba(91, 74, 138, 0.18);
+  --color-status-done: #4A5D3F;
+  --color-status-done-bg: rgba(74, 93, 63, 0.18);
+  --color-priority-low: #3D5A6E;
+  --color-priority-low-bg: rgba(61, 90, 110, 0.18);
+  --color-priority-medium: #8B6F1E;
+  --color-priority-medium-bg: rgba(139, 111, 30, 0.18);
+  --color-priority-high: #C04A1F;
+  --color-priority-high-bg: rgba(192, 74, 31, 0.18);
+  --color-wikilink: #5B4A8A;
+  --color-wikilink-bg: rgba(91, 74, 138, 0.18);
+  --color-overdue: #C04A1F;
+  --color-code-bg: #14171A;
+  --color-code-inline-bg: #1E2228;
+  --color-table-stripe: rgba(255, 255, 255, 0.025);
+  --color-success: #4A5D3F;
+  --color-warning: #8B6F1E;
+  --color-input-bar-bg: #1E2228;
+  --color-input-bar-text: #E8E4D8;
+  --color-input-bar-placeholder: rgba(232, 228, 216, 0.35);
   --color-overlay: rgba(0, 0, 0, 0.65);
-  --color-bubble-user-bg: rgba(255, 255, 255, 0.04);
-  --color-bubble-user-border: rgba(255, 255, 255, 0.10);
-  --color-bubble-user-text: #b0b0c8;
-  --color-bubble-asst-shadow: 0 4px 28px rgba(99, 102, 241, 0.14), 0 2px 8px rgba(0, 0, 0, 0.4);
+  --color-bubble-user-bg: transparent;
+  --color-bubble-user-border: #3F4651;
+  --color-bubble-user-text: #C2BFB4;
+  --color-bubble-asst-shadow: 0 4px 28px rgba(91, 74, 138, 0.14), 0 2px 8px rgba(0, 0, 0, 0.4);
+  --color-primary-solid: #5B4A8A;
+  --color-primary-deep: #3F3560;
+  --gradient-cta: linear-gradient(135deg, var(--color-primary-solid), var(--color-primary-deep));
+  --glow-cta: 0 2px 12px rgba(91, 74, 138, 0.45);
+  --glow-cta-hover: 0 4px 24px rgba(91, 74, 138, 0.65);
+  --glow-soft: 0 0 18px rgba(91, 74, 138, 0.4);
+  --color-primary-faint: rgba(91, 74, 138, 0.10);
+  --color-primary-tint: rgba(91, 74, 138, 0.14);
+  --color-primary-wash: rgba(91, 74, 138, 0.22);
+
+  /* Action color set — identical across themes */
+  --color-action-primary: #4A5D3F;
+  --color-action-primary-hover: #5A6F4D;
+  --color-action-secondary: #8B7355;
+  --color-action-secondary-hover: #A0876A;
+  --color-action-destructive: #6B2118;
+  --color-action-destructive-hover: #7E2A1F;
+  --color-action-ghost-border: #3F4651;
 }
 
 *,
@@ -107,15 +154,34 @@ body {
   margin: 0;
   background: var(--color-bg);
   color: var(--color-text);
-  font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto,
-    Oxygen, Ubuntu, Cantarell, "Helvetica Neue", Arial, sans-serif;
+  font-family: 'Inter', system-ui, -apple-system, BlinkMacSystemFont,
+    "Segoe UI", Roboto, sans-serif;
+  font-feature-settings: "cv11";
   line-height: 1.5;
   transition: background-color 0.2s, color 0.2s;
 }
 
-h1, h2, h3 {
+h1, h2 {
   font-family: 'Fraunces', Georgia, serif;
   font-optical-sizing: auto;
+  font-weight: 500;
+  line-height: 1.3;
+}
+
+h3 {
+  font-family: 'Inter', system-ui, sans-serif;
+  font-weight: 500;
+  line-height: 1.3;
+}
+
+code, pre, kbd, samp {
+  font-family: 'JetBrains Mono', ui-monospace, "SF Mono", Menlo, Consolas, monospace;
+  font-feature-settings: "liga", "calt";
+}
+
+::selection {
+  background: rgba(91, 74, 138, 0.3);
+  color: var(--color-text);
 }
 
 input:focus-visible,
@@ -153,7 +219,7 @@ button:not(:disabled):active,
   }
 }
 
-/* Thin indigo-tinted scrollbars */
+/* Neutral hairline scrollbars — chrome is structural, not branded */
 ::-webkit-scrollbar {
   width: 4px;
   height: 4px;
@@ -162,11 +228,11 @@ button:not(:disabled):active,
   background: transparent;
 }
 ::-webkit-scrollbar-thumb {
-  background: rgba(99, 102, 241, 0.25);
+  background: var(--color-border);
   border-radius: 9999px;
 }
 ::-webkit-scrollbar-thumb:hover {
-  background: rgba(99, 102, 241, 0.45);
+  background: var(--color-text-muted);
 }
 
 /* Floating inline assist button (teleported to body, cannot be scoped) */

frontend/src/components/AppHeader.vue

@@ -4,48 +4,20 @@ import { useRouter, useRoute } from "vue-router";
 import { useTheme } from "@/composables/useTheme";
 import { useShortcuts } from "@/composables/useShortcuts";
 import { useAuthStore } from "@/stores/auth";
-import { useChatStore } from "@/stores/chat";
 import AppLogo from "@/components/AppLogo.vue";
 import NotificationBell from "@/components/NotificationBell.vue";
+import { Sun, Moon, Settings, Trash2 } from "lucide-vue-next";
 
 const { theme, toggleTheme } = useTheme();
 const { toggleShortcuts } = useShortcuts();
 const authStore = useAuthStore();
-const chatStore = useChatStore();
 const router = useRouter();
 const route = useRoute();
 
-const isChatActive = computed(() => route.path.startsWith("/chat"));
+const isKnowledgeActive = computed(() => route.path === "/knowledge");
 
 const mobileMenuOpen = ref(false);
 
-const statusShortLabel = computed(() => {
-  if (chatStore.ollamaStatus === "unavailable") return "Offline";
-  if (chatStore.ollamaStatus === "checking") return "Checking";
-  if (chatStore.modelStatus === "not_found") return "No model";
-  if (chatStore.modelStatus === "cold") return "Cold";
-  if (chatStore.modelStatus === "loaded") return "Ready";
-  return "Checking";
-});
-
-const statusLabel = computed(() => {
-  if (chatStore.ollamaStatus === "unavailable") return "Ollama unavailable";
-  if (chatStore.ollamaStatus === "checking") return "Checking...";
-  if (chatStore.modelStatus === "not_found") return "Model not installed";
-  if (chatStore.modelStatus === "cold") return "Model cold — first response may be slow";
-  if (chatStore.modelStatus === "loaded") return "Model loaded · ready";
-  return "Checking...";
-});
-
-const statusClass = computed(() => {
-  if (chatStore.ollamaStatus === "unavailable") return "status-red";
-  if (chatStore.ollamaStatus === "checking") return "status-gray";
-  if (chatStore.modelStatus === "not_found") return "status-orange";
-  if (chatStore.modelStatus === "cold") return "status-yellow";
-  if (chatStore.modelStatus === "loaded") return "status-green";
-  return "status-gray";
-});
-
 function toggleMobileMenu() {
   mobileMenuOpen.value = !mobileMenuOpen.value;
 }
@@ -67,41 +39,39 @@ router.afterEach(() => {
       <!-- Left: brand -->
       <router-link to="/" class="nav-brand">
         <AppLogo :size="34" />
-        Fabled Assistant
+        <span class="brand-text">Scribe</span>
       </router-link>
 
       <!-- Center: primary navigation (desktop) -->
       <div class="nav-center">
-        <router-link to="/notes" class="nav-link">Notes</router-link>
-        <router-link to="/projects" class="nav-link">Projects</router-link>
-        <router-link to="/tasks" class="nav-link">Tasks</router-link>
-        <router-link to="/chat" :class="['nav-link', { 'router-link-active': isChatActive }]">Chat</router-link>
-        <router-link to="/graph" class="nav-link">Graph</router-link>
-        <router-link to="/briefing" class="nav-link">Briefing</router-link>
-        <router-link to="/shared" class="nav-link">Shared</router-link>
+        <div class="nav-pill-bar">
+          <router-link to="/dashboard" class="nav-link">Dashboard</router-link>
+          <router-link to="/knowledge" class="nav-link" :class="{ 'router-link-active': isKnowledgeActive }">Browse</router-link>
+          <router-link to="/calendar" class="nav-link">Calendar</router-link>
+          <router-link to="/projects" class="nav-link">Projects</router-link>
+          <router-link to="/rules" class="nav-link">Rulebooks</router-link>
+        </div>
       </div>
 
-      <!-- Right: status + utilities + gear + user -->
+      <!-- Right: utilities + gear + user -->
       <div class="nav-right">
-        <span class="status-indicator" :class="statusClass" :title="statusLabel">
-          <span class="status-dot"></span>
-          <span class="status-text">{{ statusShortLabel }}</span>
-        </span>
-
         <NotificationBell />
 
         <button class="btn-icon" @click="toggleShortcuts" title="Keyboard shortcuts (?)">?</button>
 
         <button class="btn-icon" @click="toggleTheme" :title="`Switch to ${theme === 'dark' ? 'light' : 'dark'} mode`">
-          {{ theme === "dark" ? "\u2600" : "\u263E" }}
+          <Sun v-if="theme === 'dark'" :size="16" />
+          <Moon v-else :size="16" />
         </button>
 
+        <!-- Trash link -->
+        <router-link to="/trash" class="btn-icon" aria-label="Trash" title="Trash">
+          <Trash2 :size="16" />
+        </router-link>
+
         <!-- Settings link -->
         <router-link to="/settings" class="btn-icon" aria-label="Settings" title="Settings">
-          <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
-            <circle cx="12" cy="12" r="3"/>
-            <path d="M19.4 15a1.65 1.65 0 0 0 .33 1.82l.06.06a2 2 0 0 1-2.83 2.83l-.06-.06a1.65 1.65 0 0 0-1.82-.33 1.65 1.65 0 0 0-1 1.51V21a2 2 0 0 1-4 0v-.09A1.65 1.65 0 0 0 9 19.4a1.65 1.65 0 0 0-1.82.33l-.06.06a2 2 0 0 1-2.83-2.83l.06-.06A1.65 1.65 0 0 0 4.68 15a1.65 1.65 0 0 0-1.51-1H3a2 2 0 0 1 0-4h.09A1.65 1.65 0 0 0 4.6 9a1.65 1.65 0 0 0-.33-1.82l-.06-.06a2 2 0 0 1 2.83-2.83l.06.06A1.65 1.65 0 0 0 9 4.68a1.65 1.65 0 0 0 1-1.51V3a2 2 0 0 1 4 0v.09a1.65 1.65 0 0 0 1 1.51 1.65 1.65 0 0 0 1.82-.33l.06-.06a2 2 0 0 1 2.83 2.83l-.06.06A1.65 1.65 0 0 0 19.4 9a1.65 1.65 0 0 0 1.51 1H21a2 2 0 0 1 0 4h-.09a1.65 1.65 0 0 0-1.51 1z"/>
-          </svg>
+          <Settings :size="16" />
         </router-link>
 
         <div class="user-info">
@@ -121,23 +91,20 @@ router.afterEach(() => {
 
     <!-- Mobile dropdown -->
     <div v-if="mobileMenuOpen" class="mobile-menu">
-      <router-link to="/notes" class="nav-link">Notes</router-link>
+      <router-link to="/dashboard" class="nav-link">Dashboard</router-link>
+      <router-link to="/knowledge" class="nav-link" :class="{ 'router-link-active': isKnowledgeActive }">Browse</router-link>
+      <router-link to="/calendar" class="nav-link">Calendar</router-link>
       <router-link to="/projects" class="nav-link">Projects</router-link>
-      <router-link to="/tasks" class="nav-link">Tasks</router-link>
-      <router-link to="/chat" :class="['nav-link', { 'router-link-active': isChatActive }]">Chat</router-link>
-      <router-link to="/graph" class="nav-link">Graph</router-link>
-      <router-link to="/briefing" class="nav-link">Briefing</router-link>
+      <router-link to="/rules" class="nav-link">Rulebooks</router-link>
       <router-link to="/shared" class="nav-link">Shared</router-link>
       <div class="mobile-divider"></div>
+      <router-link to="/trash" class="nav-link">Trash</router-link>
       <router-link to="/settings" class="nav-link">Settings</router-link>
       <div class="mobile-divider"></div>
       <div class="mobile-actions">
-        <span class="status-indicator" :class="statusClass" :title="statusLabel">
-          <span class="status-dot"></span>
-          <span class="status-text">{{ statusShortLabel }}</span>
-        </span>
         <button class="btn-icon" @click="toggleShortcuts">?</button>
-        <button class="btn-icon" @click="toggleTheme">{{ theme === "dark" ? "\u2600" : "\u263E" }}</button>
+        <button class="btn-icon" @click="toggleTheme"><Sun v-if="theme === 'dark'" :size="16" />
+          <Moon v-else :size="16" /></button>
       </div>
       <div class="mobile-user">
         <span class="username">{{ authStore.user?.username }}</span>
@@ -150,40 +117,50 @@ router.afterEach(() => {
 
 <style scoped>
 .app-header {
-  background: var(--color-bg-secondary);
+  background: linear-gradient(180deg, var(--color-surface), var(--color-bg));
+  border-bottom: 1px solid rgba(91, 74, 138, 0.18);
   position: relative;
 }
 .nav {
-  padding: 0.75rem 1.5rem;
+  padding: 0.6rem 1.5rem;
   display: flex;
   align-items: center;
   justify-content: space-between;
   position: relative;
 }
 
-/* Left */
+/* Left — brand */
 .nav-brand {
   display: flex;
   align-items: center;
-  gap: 0.4rem;
-  font-family: 'Fraunces', Georgia, serif;
-  font-optical-sizing: auto;
-  font-weight: 600;
-  font-size: 1.15rem;
-  letter-spacing: -0.01em;
-  color: var(--color-primary);
+  gap: 0.45rem;
   text-decoration: none;
   flex-shrink: 0;
 }
+.brand-text {
+  font-family: 'Fraunces', Georgia, serif;
+  font-optical-sizing: auto;
+  font-weight: 500;
+  font-size: 1rem;
+  letter-spacing: -0.01em;
+  color: #c4b0f0;
+}
 
-/* Center — absolutely positioned so it's truly centered regardless of side widths */
+/* Center — pill bar */
 .nav-center {
   position: absolute;
   left: 50%;
   transform: translateX(-50%);
   display: flex;
   align-items: center;
-  gap: 0.1rem;
+}
+.nav-pill-bar {
+  display: flex;
+  align-items: center;
+  gap: 2px;
+  background: var(--color-primary-faint);
+  border-radius: 10px;
+  padding: 3px;
 }
 
 /* Right */
@@ -197,20 +174,20 @@ router.afterEach(() => {
 .nav-link {
   color: var(--color-text-secondary);
   text-decoration: none;
-  font-size: 0.9rem;
-  padding: 0.3rem 0.6rem;
-  border-radius: var(--radius-sm);
+  font-size: 0.82rem;
+  padding: 0.3rem 0.75rem;
+  border-radius: 8px;
   transition: background 0.15s, color 0.15s;
 }
 .nav-link:hover {
-  color: var(--color-primary);
-  background: color-mix(in srgb, var(--color-primary) 8%, transparent);
+  color: var(--color-text);
+  background: var(--color-primary-tint);
 }
 .nav-link.router-link-active {
-  color: var(--color-primary);
-  font-weight: 600;
-  box-shadow: inset 0 -2px 0 var(--color-primary);
-  border-radius: 0;
+  color: var(--color-primary-solid);
+  font-weight: 500;
+  background: rgba(91, 74, 138, 0.25);
+  box-shadow: 0 0 16px rgba(91, 74, 138, 0.3);
 }
 
 /* Status indicator */
@@ -232,15 +209,23 @@ router.afterEach(() => {
   font-weight: 500;
   color: var(--color-text-muted);
 }
-.status-green .status-dot  { background: var(--color-success, #2ecc71); }
-.status-yellow .status-dot { background: var(--color-warning, #f59e0b); animation: pulse-dot 2s infinite; }
+/* Status dots are indicator lights, not semantic-palette buttons —
+   they want to read as vital (Moss/Warning/Error are too muted for
+   a "ready" indicator). Hardcoded bright values; the rest of the
+   system still uses the semantic tokens. */
+.status-green .status-dot  { background: #4ade80; animation: status-pulse 2.5s ease-in-out infinite; }
+.status-yellow .status-dot { background: #facc15; animation: pulse-dot 2s infinite; }
 .status-orange .status-dot { background: #f97316; }
-.status-red .status-dot    { background: var(--color-danger, #e74c3c); }
+.status-red .status-dot    { background: #ef4444; }
 .status-gray .status-dot   { background: var(--color-text-muted); animation: pulse-dot 2s infinite; }
 @keyframes pulse-dot {
   0%, 100% { opacity: 1; }
   50% { opacity: 0.3; }
 }
+@keyframes status-pulse {
+  0%, 100% { box-shadow: 0 0 4px rgba(74, 222, 128, 0.4); }
+  50% { box-shadow: 0 0 10px rgba(74, 222, 128, 0.6); }
+}
 
 /* Icon buttons (?, theme, gear) */
 .btn-icon {
@@ -279,7 +264,7 @@ router.afterEach(() => {
 }
 .admin-badge {
   font-size: 0.65rem;
-  font-weight: 700;
+  font-weight: 500;
   text-transform: uppercase;
   letter-spacing: 0.05em;
   color: var(--color-primary);
@@ -367,6 +352,11 @@ router.afterEach(() => {
     min-height: 44px;
     display: flex;
     align-items: center;
+    border-radius: 8px;
+  }
+  .mobile-menu .nav-link.router-link-active {
+    background: var(--color-primary-wash);
+    box-shadow: none;
   }
   .mobile-user .btn-logout {
     min-height: 36px;

frontend/src/components/AppLogo.vue

@@ -11,6 +11,12 @@ defineProps<{ size?: number }>();
     :height="size ?? 24"
     aria-hidden="true"
   >
+    <defs>
+      <linearGradient id="logo-gradient" x1="0" y1="0" x2="1" y2="1">
+        <stop offset="0%" stop-color="var(--color-primary-solid)" />
+        <stop offset="100%" stop-color="var(--color-primary-deep)" />
+      </linearGradient>
+    </defs>
     <!-- Book body -->
     <path class="logo-book" d="M4 7 C4 7 8 5 16 6 C24 5 28 7 28 7 L28 26 C28 26 24 24 16 25 C8 24 4 26 4 26 Z" stroke-width="0.5"/>
     <!-- Book spine -->
@@ -37,7 +43,7 @@ defineProps<{ size?: number }>();
 
 <style scoped>
 .logo-book {
-  fill: var(--color-primary);
+  fill: url(#logo-gradient);
   stroke: color-mix(in srgb, var(--color-primary) 70%, transparent);
 }
 .logo-spine {

frontend/src/components/BriefingSetupWizard.vue

@@ -1,414 +0,0 @@
-<script setup lang="ts">
-import { ref, reactive } from 'vue'
-import {
-  saveBriefingConfig,
-  geocodeAddress,
-  createBriefingFeed,
-  type BriefingConfig,
-} from '@/api/client'
-
-const emit = defineEmits<{ done: [] }>()
-
-const step = ref(1)
-const TOTAL_STEPS = 4
-
-const config = reactive<BriefingConfig>({
-  enabled: true,
-  locations: {},
-  use_caldav_event_locations: false,
-  work_days: [1, 2, 3, 4, 5],
-  slots: { compilation: true, morning: true, midday: false, afternoon: false },
-  notifications: true,
-  temp_unit: 'C',
-  timezone: '',
-})
-
-// Step 2 — locations
-const homeAddress = ref('')
-const workAddress = ref('')
-const geocodingHome = ref(false)
-const geocodingWork = ref(false)
-const homeConfirmed = ref<string | null>(null)
-const workConfirmed = ref<string | null>(null)
-const homeError = ref('')
-const workError = ref('')
-
-async function lookupHome() {
-  if (!homeAddress.value.trim()) return
-  geocodingHome.value = true
-  homeError.value = ''
-  try {
-    const r = await geocodeAddress(homeAddress.value.trim())
-    if (r) {
-      config.locations.home = { label: 'Home', address: homeAddress.value.trim(), lat: r.lat, lon: r.lon }
-      homeConfirmed.value = r.display_name
-    } else {
-      homeError.value = 'Location not found'
-    }
-  } finally {
-    geocodingHome.value = false
-  }
-}
-
-async function lookupWork() {
-  if (!workAddress.value.trim()) return
-  geocodingWork.value = true
-  workError.value = ''
-  try {
-    const r = await geocodeAddress(workAddress.value.trim())
-    if (r) {
-      config.locations.work = { label: 'Work', address: workAddress.value.trim(), lat: r.lat, lon: r.lon }
-      workConfirmed.value = r.display_name
-    } else {
-      workError.value = 'Location not found'
-    }
-  } finally {
-    geocodingWork.value = false
-  }
-}
-
-// Step 3 — work days
-function toggleDay(d: number) {
-  const idx = config.work_days.indexOf(d)
-  if (idx === -1) config.work_days.push(d)
-  else config.work_days.splice(idx, 1)
-  config.work_days.sort()
-}
-
-// Step 4 — RSS feeds
-const newFeedUrl = ref('')
-const pendingFeeds = ref<Array<{ url: string }>>([])
-
-function addPendingFeed() {
-  if (!newFeedUrl.value.trim()) return
-  pendingFeeds.value.push({ url: newFeedUrl.value.trim() })
-  newFeedUrl.value = ''
-}
-function removePendingFeed(i: number) { pendingFeeds.value.splice(i, 1) }
-
-// Finish
-const finishing = ref(false)
-async function finish() {
-  finishing.value = true
-  try {
-    await saveBriefingConfig(config)
-    for (const f of pendingFeeds.value) {
-      try { await createBriefingFeed(f.url) } catch { /* best-effort */ }
-    }
-    emit('done')
-  } finally {
-    finishing.value = false
-  }
-}
-</script>
-
-<template>
-  <Teleport to="body">
-    <div class="wizard-overlay">
-      <div class="wizard-card" role="dialog" aria-label="Briefing Setup">
-        <!-- Progress bar -->
-        <div class="wizard-progress">
-          <div class="wizard-progress-fill" :style="{ width: `${(step / TOTAL_STEPS) * 100}%` }"></div>
-        </div>
-        <div class="wizard-step-label">Step {{ step }} of {{ TOTAL_STEPS }}</div>
-
-        <!-- Step 1: Welcome -->
-        <div v-if="step === 1" class="wizard-body">
-          <h2 class="wizard-title">Good morning.</h2>
-          <p class="wizard-text">
-            The Briefing is a daily conversation that summarises your day — tasks, calendar,
-            weather, and news — and checks in a few times throughout the day.
-          </p>
-          <p class="wizard-text">
-            It learns from your responses over time and adapts to your schedule.
-            Let's take a minute to set it up.
-          </p>
-          <div class="wizard-actions">
-            <button class="btn-wizard-primary" @click="step = 2">Get started</button>
-          </div>
-        </div>
-
-        <!-- Step 2: Locations -->
-        <div v-else-if="step === 2" class="wizard-body">
-          <h2 class="wizard-title">Where are you?</h2>
-          <p class="wizard-text">
-            Enter your home and work addresses. The briefing uses these to fetch weather
-            for the right places. You can skip either one.
-          </p>
-
-          <div class="wizard-field">
-            <label class="wizard-label">Home address</label>
-            <div class="wizard-input-row">
-              <input v-model="homeAddress" class="wizard-input" placeholder="e.g. 123 Main St, Springfield" @keydown.enter="lookupHome" />
-              <button class="btn-wizard-secondary" @click="lookupHome" :disabled="geocodingHome">
-                {{ geocodingHome ? '…' : 'Look up' }}
-              </button>
-            </div>
-            <div v-if="homeConfirmed" class="wizard-confirmed">✓ {{ homeConfirmed }}</div>
-            <div v-if="homeError" class="wizard-error">{{ homeError }}</div>
-          </div>
-
-          <div class="wizard-field">
-            <label class="wizard-label">Work address</label>
-            <div class="wizard-input-row">
-              <input v-model="workAddress" class="wizard-input" placeholder="e.g. 456 Office Ave, Portland" @keydown.enter="lookupWork" />
-              <button class="btn-wizard-secondary" @click="lookupWork" :disabled="geocodingWork">
-                {{ geocodingWork ? '…' : 'Look up' }}
-              </button>
-            </div>
-            <div v-if="workConfirmed" class="wizard-confirmed">✓ {{ workConfirmed }}</div>
-            <div v-if="workError" class="wizard-error">{{ workError }}</div>
-          </div>
-
-          <div class="wizard-actions">
-            <button class="btn-wizard-ghost" @click="step = 1">Back</button>
-            <button class="btn-wizard-primary" @click="step = 3">Continue</button>
-          </div>
-        </div>
-
-        <!-- Step 3: Work schedule -->
-        <div v-else-if="step === 3" class="wizard-body">
-          <h2 class="wizard-title">When do you go to the office?</h2>
-          <p class="wizard-text">
-            The 8am slot is labelled "you're at the office" on days you have marked as office days.
-            Toggle any days you typically commute.
-          </p>
-
-          <div class="wizard-days">
-            <button
-              v-for="(day, idx) in ['Sun', 'Mon', 'Tue', 'Wed', 'Thu', 'Fri', 'Sat']"
-              :key="idx"
-              :class="['wizard-day-btn', { active: config.work_days.includes(idx) }]"
-              @click="toggleDay(idx)"
-              type="button"
-            >{{ day }}</button>
-          </div>
-
-          <div class="wizard-actions">
-            <button class="btn-wizard-ghost" @click="step = 2">Back</button>
-            <button class="btn-wizard-primary" @click="step = 4">Continue</button>
-          </div>
-        </div>
-
-        <!-- Step 4: RSS feeds -->
-        <div v-else-if="step === 4" class="wizard-body">
-          <h2 class="wizard-title">What do you follow?</h2>
-          <p class="wizard-text">
-            Add RSS or Atom feeds and the briefing will summarise recent items each morning.
-            You can add or remove feeds any time in Settings.
-          </p>
-
-          <div v-if="pendingFeeds.length" class="wizard-feeds-list">
-            <div v-for="(f, i) in pendingFeeds" :key="i" class="wizard-feed-row">
-              <span class="wizard-feed-url">{{ f.url }}</span>
-              <button class="btn-wizard-remove" @click="removePendingFeed(i)">✕</button>
-            </div>
-          </div>
-
-          <div class="wizard-add-feed">
-            <input v-model="newFeedUrl" class="wizard-input" placeholder="https://…/feed.xml" style="flex: 1" />
-            <button class="btn-wizard-secondary" @click="addPendingFeed" :disabled="!newFeedUrl.trim()">Add</button>
-          </div>
-
-          <div class="wizard-actions" style="margin-top: 1.5rem">
-            <button class="btn-wizard-ghost" @click="step = 3">Back</button>
-            <button class="btn-wizard-ghost" @click="finish" :disabled="finishing">Skip</button>
-            <button class="btn-wizard-primary" @click="finish" :disabled="finishing">
-              {{ finishing ? 'Setting up…' : 'Enable Briefing' }}
-            </button>
-          </div>
-        </div>
-      </div>
-    </div>
-  </Teleport>
-</template>
-
-<style scoped>
-.wizard-overlay {
-  position: fixed;
-  inset: 0;
-  background: rgba(0, 0, 0, 0.6);
-  display: flex;
-  align-items: center;
-  justify-content: center;
-  z-index: 2000;
-}
-.wizard-card {
-  background: var(--color-bg-card);
-  border: 1px solid var(--color-border);
-  border-radius: var(--radius-lg, 18px);
-  width: 520px;
-  max-width: 94vw;
-  box-shadow: 0 24px 64px rgba(0, 0, 0, 0.4);
-  overflow: hidden;
-}
-.wizard-progress {
-  height: 3px;
-  background: var(--color-border);
-}
-.wizard-progress-fill {
-  height: 100%;
-  background: linear-gradient(90deg, #6366f1, #4f46e5);
-  transition: width 0.3s ease;
-}
-.wizard-step-label {
-  font-size: 0.72rem;
-  color: var(--color-text-muted);
-  text-align: right;
-  padding: 0.5rem 1.5rem 0;
-}
-.wizard-body {
-  padding: 1.5rem 2rem 2rem;
-}
-.wizard-title {
-  font-family: 'Fraunces', Georgia, serif;
-  font-size: 1.4rem;
-  font-weight: 700;
-  margin: 0 0 0.75rem;
-  color: var(--color-text);
-}
-.wizard-text {
-  font-size: 0.9rem;
-  color: var(--color-text-muted);
-  line-height: 1.6;
-  margin: 0 0 0.75rem;
-}
-.wizard-field {
-  margin-bottom: 1rem;
-}
-.wizard-label {
-  font-size: 0.82rem;
-  font-weight: 600;
-  color: var(--color-text-muted);
-  display: block;
-  margin-bottom: 0.3rem;
-}
-.wizard-input-row {
-  display: flex;
-  gap: 0.5rem;
-}
-.wizard-input {
-  flex: 1;
-  padding: 0.5rem 0.7rem;
-  border: 1px solid var(--color-border);
-  border-radius: 6px;
-  background: var(--color-bg-card);
-  color: var(--color-text);
-  font-size: 0.9rem;
-  outline: none;
-  font-family: inherit;
-}
-.wizard-input:focus { border-color: var(--color-primary); }
-.wizard-confirmed {
-  font-size: 0.78rem;
-  color: var(--color-success, #22c55e);
-  margin-top: 0.25rem;
-}
-.wizard-error {
-  font-size: 0.78rem;
-  color: var(--color-danger, #ef4444);
-  margin-top: 0.25rem;
-}
-.wizard-days {
-  display: flex;
-  gap: 0.4rem;
-  flex-wrap: wrap;
-  margin: 1rem 0 1.5rem;
-}
-.wizard-day-btn {
-  padding: 0.4rem 0.8rem;
-  border: 1px solid var(--color-border);
-  border-radius: 6px;
-  background: var(--color-bg-card);
-  color: var(--color-text-muted);
-  font-size: 0.85rem;
-  cursor: pointer;
-  transition: all 0.15s;
-  font-family: inherit;
-}
-.wizard-day-btn.active {
-  background: var(--color-primary);
-  border-color: var(--color-primary);
-  color: #fff;
-}
-.wizard-feeds-list {
-  margin-bottom: 0.75rem;
-  display: flex;
-  flex-direction: column;
-  gap: 0.3rem;
-}
-.wizard-feed-row {
-  display: flex;
-  align-items: center;
-  gap: 0.5rem;
-  padding: 0.35rem 0.6rem;
-  background: var(--color-bg-secondary);
-  border-radius: 6px;
-}
-.wizard-feed-url {
-  flex: 1;
-  font-size: 0.82rem;
-  color: var(--color-text-muted);
-  overflow: hidden;
-  text-overflow: ellipsis;
-  white-space: nowrap;
-}
-.btn-wizard-remove {
-  background: none;
-  border: none;
-  color: var(--color-text-muted);
-  cursor: pointer;
-  font-size: 0.8rem;
-  padding: 0.15rem 0.3rem;
-  border-radius: 4px;
-}
-.btn-wizard-remove:hover { color: var(--color-danger, #ef4444); }
-.wizard-add-feed {
-  display: flex;
-  gap: 0.5rem;
-  flex-wrap: wrap;
-}
-.wizard-actions {
-  display: flex;
-  gap: 0.5rem;
-  justify-content: flex-end;
-  margin-top: 1.5rem;
-}
-.btn-wizard-primary {
-  padding: 0.5rem 1.25rem;
-  background: linear-gradient(135deg, #6366f1, #4f46e5);
-  color: #fff;
-  border: none;
-  border-radius: 8px;
-  font-size: 0.9rem;
-  font-weight: 600;
-  cursor: pointer;
-  transition: opacity 0.15s;
-  font-family: inherit;
-}
-.btn-wizard-primary:disabled { opacity: 0.5; cursor: not-allowed; }
-.btn-wizard-secondary {
-  padding: 0.5rem 0.9rem;
-  border: 1px solid var(--color-border);
-  border-radius: 6px;
-  background: var(--color-bg-card);
-  color: var(--color-text);
-  font-size: 0.85rem;
-  cursor: pointer;
-  white-space: nowrap;
-  font-family: inherit;
-}
-.btn-wizard-secondary:disabled { opacity: 0.5; cursor: not-allowed; }
-.btn-wizard-ghost {
-  padding: 0.5rem 1rem;
-  border: none;
-  background: none;
-  color: var(--color-text-muted);
-  font-size: 0.85rem;
-  cursor: pointer;
-  border-radius: 6px;
-  font-family: inherit;
-}
-.btn-wizard-ghost:hover { background: var(--color-bg-secondary); }
-.btn-wizard-ghost:disabled { opacity: 0.5; cursor: not-allowed; }
-</style>

frontend/src/components/ChatMessage.vue

@@ -1,284 +0,0 @@
-<script setup lang="ts">
-import { computed } from "vue";
-import { renderMarkdown } from "@/utils/markdown";
-import { useSettingsStore } from "@/stores/settings";
-import ToolCallCard from "@/components/ToolCallCard.vue";
-import type { Message } from "@/types/chat";
-
-const settingsStore = useSettingsStore();
-
-const props = defineProps<{
-  message: Message;
-  isStreaming?: boolean;
-}>();
-
-const emit = defineEmits<{
-  saveAsNote: [messageId: number];
-}>();
-
-const rendered = computed(() => renderMarkdown(props.message.content));
-
-const formattedTime = computed(() => {
-  if (!props.message.created_at) return "";
-  const date = new Date(props.message.created_at);
-  return date.toLocaleTimeString([], { hour: "numeric", minute: "2-digit" });
-});
-
-const roleLabel = computed(() => {
-  switch (props.message.role) {
-    case "user":
-      return "You";
-    case "assistant":
-      return settingsStore.assistantName;
-    default:
-      return props.message.role;
-  }
-});
-
-function formatMs(ms: number | null | undefined): string {
-  if (ms == null) return "";
-  if (ms < 1000) return `${ms}ms`;
-  return `${(ms / 1000).toFixed(1)}s`;
-}
-
-const timingParts = computed((): string[] => {
-  const t = props.message.timing;
-  if (!t) return [];
-  const parts: string[] = [];
-  if (t.total_ms != null) parts.push(`${formatMs(t.total_ms)} total`);
-  if (t.ttft_ms != null) parts.push(`first token ${formatMs(t.ttft_ms)}`);
-  if (t.intent_ms != null) parts.push(`analyzed ${formatMs(t.intent_ms)}`);
-  for (const tool of t.tools ?? []) {
-    parts.push(`${tool.name.replace(/_/g, " ")} ${formatMs(tool.ms)}`);
-  }
-  if (t.generation_ms != null) parts.push(`generated ${formatMs(t.generation_ms)}`);
-  return parts;
-});
-</script>
-
-<template>
-  <div class="chat-message" :class="`role-${message.role}`">
-    <div class="message-group">
-      <div class="message-bubble">
-        <div class="message-header">
-          <span class="role-label">{{ roleLabel }}</span>
-          <div class="message-actions" v-if="message.role === 'assistant' && !isStreaming">
-            <button class="btn-save" @click="emit('saveAsNote', message.id)" title="Save as note">
-              Save as Note
-            </button>
-          </div>
-        </div>
-        <details v-if="message.thinking" class="thinking-block">
-          <summary class="thinking-summary">Reasoning</summary>
-          <pre class="thinking-text">{{ message.thinking }}</pre>
-        </details>
-        <div class="message-content prose" v-html="rendered"></div>
-        <div v-if="message.tool_calls?.length" class="tool-calls">
-          <ToolCallCard
-            v-for="(tc, i) in message.tool_calls"
-            :key="i"
-            :tool-call="tc"
-          />
-        </div>
-        <div
-          v-if="message.context_note_id"
-          class="context-badge"
-        >
-          <router-link :to="`/notes/${message.context_note_id}`">
-            {{ message.context_note_title || `Note #${message.context_note_id}` }}
-          </router-link>
-        </div>
-      </div>
-      <span v-if="formattedTime" class="message-timestamp">{{ formattedTime }}</span>
-      <div v-if="timingParts.length" class="message-timing">
-        <span class="timing-icon">⏱</span>
-        <span v-for="(part, i) in timingParts" :key="i" class="timing-part">
-          <span v-if="i > 0" class="timing-sep">·</span>{{ part }}
-        </span>
-      </div>
-    </div>
-  </div>
-</template>
-
-<style scoped>
-.chat-message {
-  display: flex;
-  margin-bottom: 0.75rem;
-}
-.role-user {
-  justify-content: flex-end;
-}
-.role-assistant {
-  justify-content: flex-start;
-}
-
-.message-group {
-  max-width: 80%;
-}
-
-.message-bubble {
-  padding: 0.75rem 1rem;
-  border-radius: 18px;
-}
-
-/* User prompts: recessed, muted — margin notes */
-.role-user .message-bubble {
-  background: var(--color-bubble-user-bg);
-  border: 1px solid var(--color-bubble-user-border);
-  color: var(--color-bubble-user-text);
-  border-bottom-right-radius: 4px;
-}
-
-/* Assistant responses: elevated, lit — the primary text */
-.role-assistant .message-bubble {
-  background: var(--color-bg-card);
-  border-left: 2px solid var(--color-primary);
-  box-shadow: var(--color-bubble-asst-shadow);
-  border-bottom-left-radius: 4px;
-}
-
-.message-header {
-  display: flex;
-  align-items: center;
-  justify-content: space-between;
-  margin-bottom: 0.25rem;
-}
-.role-label {
-  font-size: 0.75rem;
-  font-weight: 600;
-  text-transform: uppercase;
-  letter-spacing: 0.03em;
-}
-.role-user .role-label {
-  color: var(--color-text-muted);
-  opacity: 0.6;
-}
-.role-assistant .role-label {
-  color: var(--color-primary);
-  font-family: 'Fraunces', Georgia, serif;
-  font-optical-sizing: auto;
-  font-style: italic;
-  font-size: 0.8rem;
-  text-transform: none;
-  letter-spacing: 0;
-}
-
-.thinking-block {
-  margin-bottom: 0.5rem;
-  border-left: 2px solid rgba(129, 140, 248, 0.35);
-  border-radius: 0 var(--radius-sm) var(--radius-sm) 0;
-  overflow: hidden;
-}
-.thinking-summary {
-  padding: 0.25rem 0.5rem;
-  font-size: 0.72rem;
-  font-weight: 600;
-  text-transform: uppercase;
-  letter-spacing: 0.04em;
-  color: var(--color-text-muted);
-  cursor: pointer;
-  user-select: none;
-  list-style: none;
-  display: flex;
-  align-items: center;
-  gap: 0.3rem;
-  background: var(--color-bg-secondary);
-}
-.thinking-summary::-webkit-details-marker { display: none; }
-.thinking-summary::before {
-  content: "▶";
-  font-size: 0.6rem;
-  transition: transform 0.15s;
-}
-details[open] .thinking-summary::before {
-  transform: rotate(90deg);
-}
-.thinking-text {
-  margin: 0;
-  padding: 0.5rem;
-  font-size: 0.8rem;
-  line-height: 1.5;
-  color: var(--color-text-secondary);
-  white-space: pre-wrap;
-  word-break: break-word;
-  max-height: 300px;
-  overflow-y: auto;
-  background: var(--color-bg-secondary);
-}
-.message-content {
-  font-size: 0.95rem;
-  line-height: 1.55;
-  word-break: break-word;
-}
-.message-content :deep(p:last-child) {
-  margin-bottom: 0;
-}
-
-
-.message-actions {
-  display: flex;
-  gap: 0.5rem;
-}
-.btn-save {
-  font-size: 0.7rem;
-  padding: 0.1rem 0.4rem;
-  background: transparent;
-  border: 1px solid var(--color-border);
-  border-radius: var(--radius-sm);
-  color: var(--color-text-secondary);
-  cursor: pointer;
-}
-.btn-save:hover {
-  background: var(--color-primary);
-  color: #fff;
-  border-color: var(--color-primary);
-}
-.tool-calls {
-  display: flex;
-  flex-wrap: wrap;
-  gap: 0.3rem;
-  margin-top: 0.4rem;
-}
-.context-badge {
-  margin-top: 0.4rem;
-  font-size: 0.75rem;
-}
-.context-badge a {
-  color: var(--color-primary);
-  text-decoration: none;
-}
-.role-user .context-badge a {
-  color: rgba(255, 255, 255, 0.8);
-}
-.context-badge a:hover {
-  text-decoration: underline;
-}
-
-.message-timestamp {
-  display: block;
-  font-size: 0.7rem;
-  color: var(--color-text-muted);
-  margin-top: 0.15rem;
-  padding: 0 0.5rem;
-}
-.message-timing {
-  display: flex;
-  flex-wrap: wrap;
-  align-items: center;
-  gap: 0.2rem;
-  padding: 0.1rem 0.5rem 0;
-  font-size: 0.68rem;
-  color: var(--color-text-muted);
-  opacity: 0.7;
-}
-.timing-icon {
-  font-size: 0.65rem;
-}
-.timing-part {
-  white-space: nowrap;
-}
-.timing-sep {
-  margin-right: 0.2rem;
-  opacity: 0.5;
-}
-</style>

frontend/src/components/ChatPanel.vue

@@ -1,664 +0,0 @@
-<script setup lang="ts">
-import { ref, computed, watch, nextTick } from "vue";
-import { useChatStore } from "@/stores/chat";
-import { useSettingsStore } from "@/stores/settings";
-import { apiGet } from "@/api/client";
-import { renderMarkdown } from "@/utils/markdown";
-import ChatMessage from "@/components/ChatMessage.vue";
-import type { Note } from "@/types/note";
-
-const props = defineProps<{
-  contextNoteId?: number | null;
-}>();
-
-const emit = defineEmits<{
-  close: [];
-}>();
-
-const store = useChatStore();
-const settingsStore = useSettingsStore();
-const messageInput = ref("");
-const messagesEl = ref<HTMLElement | null>(null);
-const inputEl = ref<HTMLTextAreaElement | null>(null);
-
-// Note picker state
-const attachedNote = ref<{ id: number; title: string } | null>(null);
-const showNotePicker = ref(false);
-const noteSearchQuery = ref("");
-const noteSearchResults = ref<{ id: number; title: string }[]>([]);
-const noteSearchLoading = ref(false);
-let noteSearchTimer: ReturnType<typeof setTimeout> | null = null;
-
-
-const streamingRendered = computed(() => {
-  if (!store.streamingContent) return "";
-  return renderMarkdown(store.streamingContent);
-});
-
-watch(
-  () => store.streamingContent,
-  () => scrollToBottom()
-);
-
-function scrollToBottom() {
-  nextTick(() => {
-    if (messagesEl.value) {
-      messagesEl.value.scrollTop = messagesEl.value.scrollHeight;
-    }
-  });
-}
-
-async function sendMessage() {
-  const content = messageInput.value.trim();
-  if (!content || store.streaming) return;
-
-  // Auto-create conversation if none active
-  if (!store.currentConversation) {
-    const conv = await store.createConversation();
-    await store.fetchConversation(conv.id);
-  }
-
-  const contextNoteId = attachedNote.value?.id ?? props.contextNoteId;
-  attachedNote.value = null;
-  messageInput.value = "";
-  resetTextareaHeight();
-  scrollToBottom();
-  await store.sendMessage(content, contextNoteId);
-  scrollToBottom();
-}
-
-async function handleSaveAsNote(messageId: number) {
-  try {
-    await store.saveMessageAsNote(messageId);
-    const { useToastStore } = await import("@/stores/toast");
-    useToastStore().show("Saved as note");
-  } catch {
-    const { useToastStore } = await import("@/stores/toast");
-    useToastStore().show("Failed to save as note", "error");
-  }
-}
-
-function autoResize() {
-  const el = inputEl.value;
-  if (!el) return;
-  el.style.height = "auto";
-  el.style.height = Math.min(el.scrollHeight, 150) + "px";
-}
-
-function resetTextareaHeight() {
-  const el = inputEl.value;
-  if (!el) return;
-  el.style.height = "auto";
-}
-
-function onInputKeydown(e: KeyboardEvent) {
-  if (e.key === "Enter" && !e.shiftKey) {
-    e.preventDefault();
-    sendMessage();
-  }
-}
-
-// Note picker
-function toggleNotePicker() {
-  showNotePicker.value = !showNotePicker.value;
-  if (showNotePicker.value) {
-    noteSearchQuery.value = "";
-    noteSearchResults.value = [];
-    nextTick(() => {
-      const el = document.querySelector(".panel-note-picker-search") as HTMLInputElement;
-      el?.focus();
-    });
-  }
-}
-
-function onNoteSearchInput() {
-  if (noteSearchTimer) clearTimeout(noteSearchTimer);
-  noteSearchTimer = setTimeout(async () => {
-    const q = noteSearchQuery.value.trim();
-    if (!q) {
-      noteSearchResults.value = [];
-      return;
-    }
-    noteSearchLoading.value = true;
-    try {
-      const data = await apiGet<{ notes: Note[] }>(
-        `/api/notes?q=${encodeURIComponent(q)}&all=true&limit=5`
-      );
-      noteSearchResults.value = data.notes.map((n) => ({ id: n.id, title: n.title }));
-    } catch {
-      noteSearchResults.value = [];
-    } finally {
-      noteSearchLoading.value = false;
-    }
-  }, 250);
-}
-
-function selectNote(note: { id: number; title: string }) {
-  attachedNote.value = note;
-  showNotePicker.value = false;
-}
-
-function removeAttachedNote() {
-  attachedNote.value = null;
-}
-
-function promoteAutoNote(note: { id: number; title: string }) {
-  attachedNote.value = note;
-}
-</script>
-
-<template>
-  <div class="chat-panel-overlay" @click.self="emit('close')">
-    <aside class="chat-panel">
-      <div class="panel-header">
-        <h3>Chat</h3>
-        <span v-if="contextNoteId" class="context-indicator">
-          Note #{{ contextNoteId }}
-        </span>
-        <button class="btn-close" aria-label="Close chat panel" @click="emit('close')">&times;</button>
-      </div>
-
-      <div ref="messagesEl" class="panel-messages">
-        <div class="messages-inner">
-          <template v-if="store.currentConversation">
-            <ChatMessage
-              v-for="msg in store.currentConversation.messages"
-              :key="msg.id"
-              :message="msg"
-              @save-as-note="handleSaveAsNote"
-            />
-          </template>
-
-          <!-- Context pills -->
-          <div
-            v-if="store.lastContextMeta?.auto_notes?.length && (store.streaming || store.currentConversation?.messages.length)"
-            class="context-pills"
-          >
-            <span class="context-pills-label">Context:</span>
-            <span
-              v-for="note in store.lastContextMeta.auto_notes"
-              :key="note.id"
-              class="context-pill"
-            >
-              <router-link :to="`/notes/${note.id}`" class="context-pill-link" @click="emit('close')">
-                {{ note.title }}
-              </router-link>
-              <button
-                class="context-pill-btn promote"
-                @click="promoteAutoNote(note)"
-                title="Attach for next message"
-              >+</button>
-            </span>
-          </div>
-
-          <!-- Streaming bubble -->
-          <div v-if="store.streaming" class="chat-message role-assistant">
-            <div class="streaming-bubble">
-              <div class="message-header">
-                <span class="role-label">{{ settingsStore.assistantName }}</span>
-              </div>
-              <details
-                v-if="store.streamingThinking"
-                class="thinking-block"
-                :open="!store.streamingContent"
-              >
-                <summary class="thinking-summary">Reasoning</summary>
-                <pre class="thinking-text">{{ store.streamingThinking }}</pre>
-              </details>
-              <div class="message-content prose" v-html="streamingRendered"></div>
-              <span v-if="!store.streamingThinking" class="typing-indicator"></span>
-            </div>
-          </div>
-
-          <p
-            v-if="!store.currentConversation?.messages.length && !store.streaming"
-            class="empty-msg"
-          >
-            Start chatting...
-          </p>
-        </div>
-      </div>
-
-      <div class="panel-input-wrapper">
-        <!-- Attached note pill -->
-        <div v-if="attachedNote" class="attached-note">
-          <span class="attached-note-pill">
-            {{ attachedNote.title }}
-            <button class="attached-note-remove" aria-label="Remove attached note" @click="removeAttachedNote">&times;</button>
-          </span>
-        </div>
-
-        <div class="panel-input">
-          <!-- Note picker -->
-          <div class="note-picker-wrapper">
-            <button
-              class="btn-attach"
-              @click="toggleNotePicker"
-              :disabled="store.streaming || !store.chatReady"
-              title="Attach a note"
-            >
-              <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
-                <path d="M21.44 11.05l-9.19 9.19a6 6 0 01-8.49-8.49l9.19-9.19a4 4 0 015.66 5.66l-9.2 9.19a2 2 0 01-2.83-2.83l8.49-8.48"/>
-              </svg>
-            </button>
-            <div v-if="showNotePicker" class="note-picker-dropdown">
-              <input
-                class="panel-note-picker-search"
-                v-model="noteSearchQuery"
-                @input="onNoteSearchInput"
-                placeholder="Search notes..."
-              />
-              <div class="note-picker-results">
-                <div
-                  v-for="note in noteSearchResults"
-                  :key="note.id"
-                  class="note-picker-item"
-                  @click="selectNote(note)"
-                >
-                  {{ note.title || "Untitled" }}
-                </div>
-                <div v-if="noteSearchLoading" class="note-picker-empty">Searching...</div>
-                <div v-else-if="noteSearchQuery && !noteSearchResults.length" class="note-picker-empty">
-                  No notes found
-                </div>
-              </div>
-            </div>
-          </div>
-
-          <textarea
-            ref="inputEl"
-            v-model="messageInput"
-            @keydown="onInputKeydown"
-            @input="autoResize"
-            :placeholder="store.chatReady ? 'Type a message...' : 'Chat unavailable'"
-            :disabled="store.streaming || !store.chatReady"
-            rows="1"
-          ></textarea>
-          <button
-            class="btn-send"
-            @click="sendMessage"
-            :disabled="!messageInput.trim() || store.streaming || !store.chatReady"
-          >
-            &uarr;
-          </button>
-        </div>
-      </div>
-    </aside>
-  </div>
-</template>
-
-<style scoped>
-.chat-panel-overlay {
-  position: fixed;
-  inset: 0;
-  background: var(--color-overlay);
-  z-index: 100;
-  display: flex;
-  justify-content: flex-end;
-}
-
-.chat-panel {
-  width: 400px;
-  max-width: 100vw;
-  height: 100%;
-  background: var(--color-bg);
-  display: flex;
-  flex-direction: column;
-  box-shadow: -2px 0 8px rgba(0, 0, 0, 0.15);
-}
-
-.panel-header {
-  display: flex;
-  align-items: center;
-  gap: 0.5rem;
-  padding: 0.75rem 1rem;
-  border-bottom: 1px solid var(--color-border);
-}
-.panel-header h3 {
-  margin: 0;
-  font-size: 1rem;
-  flex: 1;
-}
-.context-indicator {
-  font-size: 0.8rem;
-  color: var(--color-primary);
-  background: var(--color-bg-secondary);
-  padding: 0.15rem 0.5rem;
-  border-radius: var(--radius-sm);
-}
-.btn-close {
-  background: none;
-  border: none;
-  font-size: 1.5rem;
-  cursor: pointer;
-  color: var(--color-text-muted);
-  line-height: 1;
-  padding: 0 0.25rem;
-}
-.btn-close:hover {
-  color: var(--color-text);
-}
-
-.panel-messages {
-  flex: 1;
-  overflow-y: auto;
-  padding: 0.75rem;
-  display: flex;
-  flex-direction: column;
-}
-.messages-inner {
-  margin-top: auto;
-}
-
-/* Streaming bubble — matches ChatMessage assistant style */
-.chat-message {
-  display: flex;
-  margin-bottom: 0.75rem;
-}
-.role-assistant {
-  justify-content: flex-start;
-}
-.streaming-bubble {
-  max-width: 90%;
-  padding: 0.75rem 1rem;
-  border-radius: 16px;
-  border-bottom-left-radius: 4px;
-  background: var(--color-bg-card);
-  border: 1px solid var(--color-border);
-}
-.streaming-bubble .message-header {
-  display: flex;
-  align-items: center;
-  margin-bottom: 0.25rem;
-}
-.streaming-bubble .role-label {
-  font-size: 0.75rem;
-  font-weight: 600;
-  color: var(--color-text-muted);
-  text-transform: uppercase;
-  letter-spacing: 0.03em;
-}
-.streaming-bubble .message-content {
-  font-size: 0.95rem;
-  line-height: 1.55;
-  word-break: break-word;
-}
-.thinking-block {
-  margin-bottom: 0.5rem;
-  border: 1px solid var(--color-border);
-  border-radius: var(--radius-sm);
-  overflow: hidden;
-}
-.thinking-summary {
-  padding: 0.25rem 0.5rem;
-  font-size: 0.72rem;
-  font-weight: 600;
-  text-transform: uppercase;
-  letter-spacing: 0.04em;
-  color: var(--color-text-muted);
-  cursor: pointer;
-  user-select: none;
-  list-style: none;
-  display: flex;
-  align-items: center;
-  gap: 0.3rem;
-  background: var(--color-bg-secondary);
-}
-.thinking-summary::-webkit-details-marker { display: none; }
-.thinking-summary::before {
-  content: "▶";
-  font-size: 0.6rem;
-  transition: transform 0.15s;
-}
-details[open] .thinking-summary::before {
-  transform: rotate(90deg);
-}
-.thinking-text {
-  margin: 0;
-  padding: 0.5rem;
-  font-size: 0.8rem;
-  line-height: 1.5;
-  color: var(--color-text-secondary);
-  white-space: pre-wrap;
-  word-break: break-word;
-  max-height: 300px;
-  overflow-y: auto;
-  background: var(--color-bg-secondary);
-  border-top: 1px solid var(--color-border);
-}
-.typing-indicator {
-  display: inline-block;
-  width: 6px;
-  height: 6px;
-  border-radius: 50%;
-  background: var(--color-primary);
-  animation: blink 1s infinite;
-  margin-left: 4px;
-  vertical-align: middle;
-}
-@keyframes blink {
-  0%, 100% { opacity: 0.3; }
-  50% { opacity: 1; }
-}
-
-/* Context pills */
-.context-pills {
-  display: flex;
-  flex-wrap: wrap;
-  align-items: center;
-  gap: 0.25rem;
-  padding: 0.35rem 0;
-}
-.context-pills-label {
-  font-size: 0.7rem;
-  color: var(--color-text-muted);
-  font-weight: 600;
-  text-transform: uppercase;
-  letter-spacing: 0.03em;
-}
-.context-pill {
-  display: inline-flex;
-  align-items: center;
-  gap: 0.1rem;
-  background: var(--color-bg-secondary);
-  border: 1px solid var(--color-border);
-  border-radius: 10px;
-  padding: 0.1rem 0.25rem 0.1rem 0.4rem;
-  font-size: 0.75rem;
-}
-.context-pill-link {
-  color: var(--color-primary);
-  text-decoration: none;
-  max-width: 120px;
-  overflow: hidden;
-  text-overflow: ellipsis;
-  white-space: nowrap;
-}
-.context-pill-link:hover {
-  text-decoration: underline;
-}
-.context-pill-btn {
-  background: none;
-  border: none;
-  cursor: pointer;
-  font-size: 0.8rem;
-  line-height: 1;
-  padding: 0 0.1rem;
-  color: var(--color-text-muted);
-  border-radius: 50%;
-  width: 16px;
-  height: 16px;
-  display: flex;
-  align-items: center;
-  justify-content: center;
-}
-.context-pill-btn:hover {
-  background: var(--color-border);
-}
-.context-pill-btn.promote:hover {
-  color: var(--color-primary);
-}
-
-/* Input wrapper */
-.panel-input-wrapper {
-  margin: 0 0.5rem 0.5rem;
-}
-
-/* Attached note */
-.attached-note {
-  padding: 0.2rem 0.5rem;
-}
-.attached-note-pill {
-  display: inline-flex;
-  align-items: center;
-  gap: 0.2rem;
-  background: var(--color-primary);
-  color: #fff;
-  border-radius: 10px;
-  padding: 0.15rem 0.4rem;
-  font-size: 0.75rem;
-}
-.attached-note-remove {
-  background: none;
-  border: none;
-  color: rgba(255, 255, 255, 0.7);
-  cursor: pointer;
-  font-size: 0.9rem;
-  line-height: 1;
-  padding: 0 0.1rem;
-}
-.attached-note-remove:hover {
-  color: #fff;
-}
-
-/* Floating input */
-.panel-input {
-  display: flex;
-  align-items: center;
-  gap: 0.5rem;
-  padding: 0.5rem 0.5rem 0.5rem 0.75rem;
-  background: var(--color-input-bar-bg);
-  border-radius: 16px;
-  box-shadow: 0 2px 8px var(--color-shadow);
-}
-
-/* Note picker */
-.note-picker-wrapper {
-  position: relative;
-}
-.btn-attach {
-  background: none;
-  border: none;
-  cursor: pointer;
-  color: var(--color-input-bar-text);
-  opacity: 0.6;
-  padding: 0.2rem;
-  display: flex;
-  align-items: center;
-  justify-content: center;
-}
-.btn-attach:hover {
-  opacity: 1;
-}
-.btn-attach:disabled {
-  opacity: 0.3;
-  cursor: default;
-}
-.note-picker-dropdown {
-  position: absolute;
-  bottom: calc(100% + 8px);
-  left: 0;
-  width: 260px;
-  background: var(--color-bg-card);
-  border: 1px solid var(--color-border);
-  border-radius: var(--radius-md);
-  box-shadow: 0 4px 16px var(--color-shadow);
-  z-index: 10;
-  overflow: hidden;
-}
-.panel-note-picker-search {
-  width: 100%;
-  padding: 0.45rem 0.65rem;
-  border: none;
-  border-bottom: 1px solid var(--color-border);
-  background: transparent;
-  color: var(--color-text);
-  font-size: 0.85rem;
-  outline: none;
-  font-family: inherit;
-  box-sizing: border-box;
-}
-.note-picker-results {
-  max-height: 180px;
-  overflow-y: auto;
-}
-.note-picker-item {
-  padding: 0.4rem 0.65rem;
-  cursor: pointer;
-  font-size: 0.85rem;
-  overflow: hidden;
-  text-overflow: ellipsis;
-  white-space: nowrap;
-}
-.note-picker-item:hover {
-  background: var(--color-bg-secondary);
-}
-.note-picker-empty {
-  padding: 0.4rem 0.65rem;
-  color: var(--color-text-muted);
-  font-size: 0.8rem;
-}
-.panel-input textarea {
-  flex: 1;
-  resize: none;
-  padding: 0.35rem 0.5rem;
-  border: none;
-  border-radius: 10px;
-  font-family: inherit;
-  font-size: 0.9rem;
-  background: transparent;
-  color: var(--color-input-bar-text);
-  outline: none;
-  max-height: 150px;
-  overflow-y: auto;
-}
-.panel-input textarea::placeholder {
-  color: var(--color-input-bar-placeholder);
-}
-.panel-input textarea:disabled {
-  opacity: 0.5;
-}
-.btn-send {
-  width: 30px;
-  min-width: 30px;
-  height: 30px;
-  padding: 0;
-  display: flex;
-  align-items: center;
-  justify-content: center;
-  background: var(--color-primary);
-  color: #fff;
-  border: none;
-  border-radius: 50%;
-  cursor: pointer;
-  font-size: 1rem;
-  flex-shrink: 0;
-}
-.btn-send:disabled {
-  opacity: 0.35;
-  cursor: default;
-}
-
-.empty-msg {
-  color: var(--color-text-muted);
-  font-size: 0.9rem;
-  text-align: center;
-  padding: 2rem 1rem;
-}
-
-@media (max-width: 480px) {
-  .chat-panel {
-    width: 100vw;
-  }
-}
-</style>

frontend/src/components/DashboardChatInput.vue

@@ -1,351 +0,0 @@
-<script setup lang="ts">
-import { ref, nextTick } from "vue";
-import { apiGet } from "@/api/client";
-import { useChatStore } from "@/stores/chat";
-import type { Note } from "@/types/note";
-
-const emit = defineEmits<{
-  submit: [payload: { content: string; contextNoteId?: number }];
-}>();
-
-const store = useChatStore();
-
-const messageInput = ref("");
-const inputEl = ref<HTMLTextAreaElement | null>(null);
-
-// Note picker state
-const attachedNote = ref<{ id: number; title: string } | null>(null);
-const showNotePicker = ref(false);
-const noteSearchQuery = ref("");
-const noteSearchResults = ref<{ id: number; title: string }[]>([]);
-const noteSearchLoading = ref(false);
-let noteSearchTimer: ReturnType<typeof setTimeout> | null = null;
-
-function onSubmit() {
-  const content = messageInput.value.trim();
-  if (!content) return;
-  emit("submit", {
-    content,
-    contextNoteId: attachedNote.value?.id,
-  });
-  messageInput.value = "";
-  attachedNote.value = null;
-  resetTextareaHeight();
-}
-
-function onInputKeydown(e: KeyboardEvent) {
-  if (e.key === "Enter" && !e.shiftKey) {
-    e.preventDefault();
-    onSubmit();
-  }
-}
-
-function autoResize() {
-  const el = inputEl.value;
-  if (!el) return;
-  el.style.height = "auto";
-  el.style.height = Math.min(el.scrollHeight, 120) + "px";
-}
-
-function resetTextareaHeight() {
-  const el = inputEl.value;
-  if (!el) return;
-  el.style.height = "auto";
-}
-
-// Note picker
-function toggleNotePicker() {
-  showNotePicker.value = !showNotePicker.value;
-  if (showNotePicker.value) {
-    noteSearchQuery.value = "";
-    noteSearchResults.value = [];
-    nextTick(() => {
-      const el = document.querySelector(
-        ".dashboard-chat .note-picker-search"
-      ) as HTMLInputElement;
-      el?.focus();
-    });
-  }
-}
-
-function onNoteSearchInput() {
-  if (noteSearchTimer) clearTimeout(noteSearchTimer);
-  noteSearchTimer = setTimeout(async () => {
-    const q = noteSearchQuery.value.trim();
-    if (!q) {
-      noteSearchResults.value = [];
-      return;
-    }
-    noteSearchLoading.value = true;
-    try {
-      const data = await apiGet<{ notes: Note[] }>(
-        `/api/notes?q=${encodeURIComponent(q)}&all=true&limit=5`
-      );
-      noteSearchResults.value = data.notes.map((n) => ({
-        id: n.id,
-        title: n.title,
-      }));
-    } catch {
-      noteSearchResults.value = [];
-    } finally {
-      noteSearchLoading.value = false;
-    }
-  }, 250);
-}
-
-function selectNote(note: { id: number; title: string }) {
-  attachedNote.value = note;
-  showNotePicker.value = false;
-}
-
-function removeAttachedNote() {
-  attachedNote.value = null;
-}
-
-function focus() {
-  inputEl.value?.focus();
-}
-
-defineExpose({ focus });
-</script>
-
-<template>
-  <div class="dashboard-chat">
-    <!-- Attached note pill -->
-    <div v-if="attachedNote" class="attached-note">
-      <span class="attached-note-pill">
-        {{ attachedNote.title }}
-        <button class="attached-note-remove" aria-label="Remove attached note" @click="removeAttachedNote">
-          &times;
-        </button>
-      </span>
-    </div>
-
-    <div class="chat-input-bar">
-      <div class="note-picker-wrapper">
-        <button
-          class="btn-attach"
-          @click="toggleNotePicker"
-          :disabled="!store.chatReady"
-          title="Attach a note"
-        >
-          <svg
-            width="18"
-            height="18"
-            viewBox="0 0 24 24"
-            fill="none"
-            stroke="currentColor"
-            stroke-width="2"
-            stroke-linecap="round"
-            stroke-linejoin="round"
-          >
-            <path
-              d="M21.44 11.05l-9.19 9.19a6 6 0 01-8.49-8.49l9.19-9.19a4 4 0 015.66 5.66l-9.2 9.19a2 2 0 01-2.83-2.83l8.49-8.48"
-            />
-          </svg>
-        </button>
-
-        <div v-if="showNotePicker" class="note-picker-dropdown">
-          <input
-            class="note-picker-search"
-            v-model="noteSearchQuery"
-            @input="onNoteSearchInput"
-            placeholder="Search notes..."
-          />
-          <div class="note-picker-results">
-            <div
-              v-for="note in noteSearchResults"
-              :key="note.id"
-              class="note-picker-item"
-              @click="selectNote(note)"
-            >
-              {{ note.title || "Untitled" }}
-            </div>
-            <div v-if="noteSearchLoading" class="note-picker-empty">
-              Searching...
-            </div>
-            <div
-              v-else-if="noteSearchQuery && !noteSearchResults.length"
-              class="note-picker-empty"
-            >
-              No notes found
-            </div>
-          </div>
-        </div>
-      </div>
-
-      <textarea
-        ref="inputEl"
-        v-model="messageInput"
-        @keydown="onInputKeydown"
-        @input="autoResize"
-        :placeholder="
-          !store.chatReady ? 'Chat unavailable'
-          : store.streaming ? 'Type to queue… (Enter to queue)'
-          : 'Start a new chat… (Enter to send)'
-        "
-        :disabled="!store.chatReady"
-        rows="1"
-      ></textarea>
-
-      <button
-        class="btn-send"
-        @click="onSubmit"
-        :disabled="!messageInput.trim() || !store.chatReady"
-      >
-        &uarr;
-      </button>
-    </div>
-  </div>
-</template>
-
-<style scoped>
-.dashboard-chat {
-  margin-top: 0.75rem;
-}
-
-.attached-note {
-  padding: 0.25rem 0;
-}
-.attached-note-pill {
-  display: inline-flex;
-  align-items: center;
-  gap: 0.25rem;
-  background: var(--color-primary);
-  color: #fff;
-  border-radius: 12px;
-  padding: 0.2rem 0.5rem;
-  font-size: 0.8rem;
-}
-.attached-note-remove {
-  background: none;
-  border: none;
-  color: rgba(255, 255, 255, 0.7);
-  cursor: pointer;
-  font-size: 1rem;
-  line-height: 1;
-  padding: 0 0.15rem;
-}
-.attached-note-remove:hover {
-  color: #fff;
-}
-
-.chat-input-bar {
-  display: flex;
-  align-items: center;
-  gap: 0.5rem;
-  padding: 0.5rem 0.5rem 0.5rem 0.75rem;
-  background: var(--color-input-bar-bg);
-  border-radius: 20px;
-  box-shadow: 0 2px 12px var(--color-shadow);
-}
-
-.chat-input-bar textarea {
-  flex: 1;
-  resize: none;
-  padding: 0.4rem 0.5rem;
-  border: none;
-  border-radius: 12px;
-  font-family: inherit;
-  font-size: 0.95rem;
-  background: transparent;
-  color: var(--color-input-bar-text);
-  outline: none;
-  max-height: 120px;
-  overflow-y: auto;
-}
-.chat-input-bar textarea::placeholder {
-  color: var(--color-input-bar-placeholder);
-}
-.chat-input-bar textarea:disabled {
-  opacity: 0.5;
-}
-
-/* Note picker */
-.note-picker-wrapper {
-  position: relative;
-}
-.btn-attach {
-  background: none;
-  border: none;
-  cursor: pointer;
-  color: var(--color-input-bar-text);
-  opacity: 0.6;
-  padding: 0.25rem;
-  display: flex;
-  align-items: center;
-  justify-content: center;
-}
-.btn-attach:hover {
-  opacity: 1;
-}
-.btn-attach:disabled {
-  opacity: 0.3;
-  cursor: default;
-}
-.note-picker-dropdown {
-  position: absolute;
-  bottom: calc(100% + 8px);
-  left: 0;
-  width: 280px;
-  background: var(--color-bg-card);
-  border: 1px solid var(--color-border);
-  border-radius: var(--radius-md);
-  box-shadow: 0 4px 16px var(--color-shadow);
-  z-index: 10;
-  overflow: hidden;
-}
-.note-picker-search {
-  width: 100%;
-  padding: 0.5rem 0.75rem;
-  border: none;
-  border-bottom: 1px solid var(--color-border);
-  background: transparent;
-  color: var(--color-text);
-  font-size: 0.9rem;
-  outline: none;
-  font-family: inherit;
-  box-sizing: border-box;
-}
-.note-picker-results {
-  max-height: 200px;
-  overflow-y: auto;
-}
-.note-picker-item {
-  padding: 0.5rem 0.75rem;
-  cursor: pointer;
-  font-size: 0.9rem;
-  overflow: hidden;
-  text-overflow: ellipsis;
-  white-space: nowrap;
-}
-.note-picker-item:hover {
-  background: var(--color-bg-secondary);
-}
-.note-picker-empty {
-  padding: 0.5rem 0.75rem;
-  color: var(--color-text-muted);
-  font-size: 0.85rem;
-}
-
-.btn-send {
-  width: 34px;
-  min-width: 34px;
-  height: 34px;
-  padding: 0;
-  display: flex;
-  align-items: center;
-  justify-content: center;
-  background: var(--color-primary);
-  color: #fff;
-  border: none;
-  border-radius: 50%;
-  cursor: pointer;
-  font-size: 1.1rem;
-  flex-shrink: 0;
-}
-.btn-send:disabled {
-  opacity: 0.35;
-  cursor: default;
-}
-</style>

frontend/src/components/DiffView.vue

@@ -124,7 +124,6 @@ function markerFor(type: DiffLine['type']): string {
   padding: 0.75rem;
   font-size: 0.85rem;
   color: var(--color-text-muted);
-  font-style: italic;
 }
 
 .diff-line {
@@ -153,7 +152,6 @@ function markerFor(type: DiffLine['type']): string {
 .diff-collapse {
   color: var(--color-text-muted);
   opacity: 0.6;
-  font-style: italic;
   border-top: 1px dashed var(--color-border);
   border-bottom: 1px dashed var(--color-border);
   padding-top: 0.2rem;

frontend/src/components/EventSlideOver.vue

@@ -0,0 +1,677 @@
+<script setup lang="ts">
+import { Trash2, X } from "lucide-vue-next";
+import { ref, computed, watch, onMounted, onUnmounted } from "vue";
+import { createEvent, updateEvent, deleteEvent, type EventEntry, type EventCreatePayload, type EventUpdatePayload } from "@/api/client";
+import ProjectSelector from "@/components/ProjectSelector.vue";
+import { useToastStore } from "@/stores/toast";
+
+const props = defineProps<{
+  // null = create mode; EventEntry = edit mode
+  event: EventEntry | null;
+  // pre-filled date string for create mode (YYYY-MM-DD or ISO)
+  initialDate?: string;
+}>();
+
+const emit = defineEmits<{
+  (e: "close"): void;
+  (e: "created", event: EventEntry): void;
+  (e: "updated", event: EventEntry): void;
+  (e: "deleted", id: number): void;
+}>();
+
+const toast = useToastStore();
+
+const isEditMode = computed(() => !!props.event);
+const saving = ref(false);
+const deleting = ref(false);
+const deleteConfirm = ref(false);
+
+// Form fields
+const title = ref("");
+const startDate = ref("");
+const startTime = ref("");
+const endDate = ref("");
+const endTime = ref("");
+const allDay = ref(false);
+const description = ref("");
+const location = ref("");
+const color = ref("");
+const projectId = ref<number | null>(null);
+const recurrence = ref<string>("");
+
+// Preset RRULE strings. The select binds to `recurrencePreset`, which writes
+// through to `recurrence`. CalDAV-imported rules with extra parts
+// (e.g. `FREQ=WEEKLY;BYDAY=MO,WE,FR`) fall through to "custom" and the raw
+// string is shown read-only below the select.
+const RECURRENCE_PRESETS: Record<string, string> = {
+  none: "",
+  daily: "FREQ=DAILY",
+  weekly: "FREQ=WEEKLY",
+  monthly: "FREQ=MONTHLY",
+  yearly: "FREQ=YEARLY",
+};
+
+const recurrencePreset = computed<string>({
+  get() {
+    const r = (recurrence.value || "").trim();
+    if (!r) return "none";
+    for (const [key, val] of Object.entries(RECURRENCE_PRESETS)) {
+      if (val && val === r) return key;
+    }
+    return "custom";
+  },
+  set(key: string) {
+    if (key === "custom") return; // no-op; can't pick custom from dropdown
+    recurrence.value = RECURRENCE_PRESETS[key] ?? "";
+  },
+});
+
+const isCustomRecurrence = computed(() => recurrencePreset.value === "custom");
+
+function dateFromIso(iso: string): string {
+  const d = new Date(iso);
+  if (isNaN(d.getTime())) return iso.slice(0, 10);
+  const y = d.getFullYear();
+  const m = String(d.getMonth() + 1).padStart(2, "0");
+  const day = String(d.getDate()).padStart(2, "0");
+  return `${y}-${m}-${day}`;
+}
+
+function timeFromIso(iso: string): string {
+  if (!iso.includes("T")) return "09:00";
+  const d = new Date(iso);
+  if (isNaN(d.getTime())) return iso.slice(11, 16);
+  return `${String(d.getHours()).padStart(2, "0")}:${String(d.getMinutes()).padStart(2, "0")}`;
+}
+
+function toIso(date: string, time: string): string {
+  if (!time) return `${date}T00:00:00`;
+  // Include local timezone offset so the server stores the correct UTC time
+  const local = new Date(`${date}T${time}:00`);
+  const off = -local.getTimezoneOffset();
+  const sign = off >= 0 ? "+" : "-";
+  const h = String(Math.floor(Math.abs(off) / 60)).padStart(2, "0");
+  const min = String(Math.abs(off) % 60).padStart(2, "0");
+  return `${date}T${time}:00${sign}${h}:${min}`;
+}
+
+// ── Time helpers ──────────────────────────────────────────────────────────────
+
+/** Round up to next 30-minute boundary */
+function nextRoundedTime(): string {
+  const now = new Date();
+  let h = now.getHours();
+  let m = now.getMinutes();
+  if (m <= 30) { m = 30; }
+  else { m = 0; h = (h + 1) % 24; }
+  return `${String(h).padStart(2, "0")}:${String(m).padStart(2, "0")}`;
+}
+
+/** Add hours to a time string (HH:MM), returns HH:MM */
+function addHours(time: string, hours: number): string {
+  const [h, m] = time.split(":").map(Number);
+  const totalMin = h * 60 + m + hours * 60;
+  const nh = Math.floor(totalMin / 60) % 24;
+  const nm = totalMin % 60;
+  return `${String(nh).padStart(2, "0")}:${String(nm).padStart(2, "0")}`;
+}
+
+/** Duration in minutes between two time strings */
+function durationMin(start: string, end: string): number {
+  const [sh, sm] = start.split(":").map(Number);
+  const [eh, em] = end.split(":").map(Number);
+  return (eh * 60 + em) - (sh * 60 + sm);
+}
+
+/** True if a date+time is in the past */
+const isPastEvent = computed(() => {
+  if (allDay.value || !startDate.value || !startTime.value) return false;
+  const dt = new Date(`${startDate.value}T${startTime.value}:00`);
+  return dt.getTime() < Date.now();
+});
+
+// Track duration so end moves with start
+let _lastDurationMin = 60;
+
+function resetForm() {
+  if (props.event) {
+    title.value = props.event.title;
+    allDay.value = props.event.all_day;
+    startDate.value = props.event.all_day ? props.event.start_dt.slice(0, 10) : dateFromIso(props.event.start_dt);
+    startTime.value = props.event.all_day ? "" : timeFromIso(props.event.start_dt);
+    endDate.value = props.event.end_dt ? (props.event.all_day ? props.event.end_dt.slice(0, 10) : dateFromIso(props.event.end_dt)) : startDate.value;
+    endTime.value = props.event.end_dt && !props.event.all_day ? timeFromIso(props.event.end_dt) : addHours(startTime.value || "09:00", 1);
+    description.value = props.event.description || "";
+    location.value = props.event.location || "";
+    color.value = props.event.color || "";
+    projectId.value = props.event.project_id;
+    recurrence.value = props.event.recurrence || "";
+    _lastDurationMin = !allDay.value && startTime.value && endTime.value ? durationMin(startTime.value, endTime.value) : 60;
+    if (_lastDurationMin <= 0) _lastDurationMin = 60;
+  } else {
+    title.value = "";
+    allDay.value = false;
+    const base = props.initialDate ? dateFromIso(props.initialDate) : new Date().toISOString().slice(0, 10);
+    const roundedStart = nextRoundedTime();
+    startDate.value = base;
+    startTime.value = roundedStart;
+    endDate.value = base;
+    endTime.value = addHours(roundedStart, 1);
+    description.value = "";
+    location.value = "";
+    color.value = "";
+    projectId.value = null;
+    recurrence.value = "";
+    _lastDurationMin = 60;
+  }
+  deleteConfirm.value = false;
+}
+
+// When start time changes, move end time to preserve duration
+watch(startTime, (newStart) => {
+  if (allDay.value || !newStart) return;
+  endTime.value = addHours(newStart, _lastDurationMin / 60);
+});
+
+// When start date changes, move end date to match (preserve same-day or multi-day gap)
+watch(startDate, (newDate) => {
+  if (!newDate) return;
+  endDate.value = newDate;
+});
+
+// When end time changes manually, update the tracked duration (but guard against end < start)
+watch(endTime, (newEnd) => {
+  if (allDay.value || !newEnd || !startTime.value) return;
+  const dur = durationMin(startTime.value, newEnd);
+  if (dur <= 0) {
+    // Snap back to start + 1 hour
+    endTime.value = addHours(startTime.value, 1);
+    _lastDurationMin = 60;
+  } else {
+    _lastDurationMin = dur;
+  }
+});
+
+// All-day toggle: clear/restore times
+watch(allDay, (isAllDay) => {
+  if (isAllDay) {
+    startTime.value = "";
+    endTime.value = "";
+  } else {
+    const rounded = nextRoundedTime();
+    startTime.value = rounded;
+    endTime.value = addHours(rounded, 1);
+    _lastDurationMin = 60;
+  }
+});
+
+watch(() => props.event, resetForm, { immediate: true });
+watch(() => props.initialDate, resetForm);
+
+function handleKeydown(e: KeyboardEvent) {
+  if (e.key === "Escape") {
+    if (deleteConfirm.value) {
+      // Esc cancels the delete-confirm rather than closing the modal —
+      // gives the user a clear way out of the destructive prompt.
+      deleteConfirm.value = false;
+      return;
+    }
+    attemptClose();
+  }
+}
+
+onMounted(() => document.addEventListener("keydown", handleKeydown));
+onUnmounted(() => document.removeEventListener("keydown", handleKeydown));
+
+// ── Close / save flow ─────────────────────────────────────────────────────────
+//
+// All exit paths (X button, Esc, backdrop click) funnel through `attemptClose`.
+// The Save button is gone — explicit-commit is replaced with auto-save-on-close.
+//
+// Validity-aware behavior:
+//   - Form valid → save (PATCH for edit, POST for create), then close.
+//   - Form invalid in EDIT mode → discard the in-memory change and close.
+//     A toast tells the user what happened so they don't think their edit
+//     silently landed.
+//   - Form invalid in CREATE mode → close silently (nothing existed to begin
+//     with; no need to call this out).
+
+function isFormValid(): { valid: boolean; reason?: string } {
+  if (!title.value.trim()) {
+    return { valid: false, reason: "Title required" };
+  }
+  if (!startDate.value) {
+    return { valid: false, reason: "Start date required" };
+  }
+  if (!allDay.value && !startTime.value) {
+    return { valid: false, reason: "Start time required" };
+  }
+  return { valid: true };
+}
+
+let _closing = false;
+
+async function attemptClose() {
+  if (_closing) return;
+  _closing = true;
+  try {
+    const validity = isFormValid();
+    if (!validity.valid) {
+      if (isEditMode.value) {
+        toast.show(`${validity.reason} — change discarded`, "warning");
+      }
+      // Create mode + invalid: silent close. Nothing was committed.
+      emit("close");
+      return;
+    }
+    await save();
+    emit("close");
+  } finally {
+    _closing = false;
+  }
+}
+
+async function save() {
+  const start_dt = allDay.value ? `${startDate.value}T00:00:00` : toIso(startDate.value, startTime.value);
+  const end_dt = endDate.value
+    ? (allDay.value ? `${endDate.value}T00:00:00` : toIso(endDate.value, endTime.value))
+    : undefined;
+
+  saving.value = true;
+  try {
+    if (isEditMode.value && props.event) {
+      const payload: EventUpdatePayload = {
+        title: title.value.trim(),
+        start_dt,
+        end_dt,
+        all_day: allDay.value,
+        description: description.value,
+        location: location.value,
+        color: color.value,
+        project_id: projectId.value ?? undefined,
+        recurrence: recurrence.value || null,
+      };
+      const updated = await updateEvent(props.event.id, payload);
+      emit("updated", updated);
+    } else {
+      const payload: EventCreatePayload = {
+        title: title.value.trim(),
+        start_dt,
+        end_dt,
+        all_day: allDay.value,
+        description: description.value,
+        location: location.value,
+        color: color.value,
+        project_id: projectId.value ?? undefined,
+        recurrence: recurrence.value || undefined,
+      };
+      const created = await createEvent(payload);
+      emit("created", created);
+    }
+  } catch {
+    toast.show("Failed to save event", "error");
+  } finally {
+    saving.value = false;
+  }
+}
+
+async function doDelete() {
+  if (!props.event) return;
+  deleting.value = true;
+  try {
+    await deleteEvent(props.event.id);
+    toast.show("Event deleted", "success");
+    emit("deleted", props.event.id);
+  } catch {
+    toast.show("Failed to delete event", "error");
+    deleting.value = false;
+  }
+}
+</script>
+
+<template>
+  <Teleport to="body">
+    <div class="modal-backdrop" @click.self="attemptClose">
+      <div class="modal-panel" role="dialog" aria-modal="true">
+        <!-- Header: trash + close (or inline delete-confirm) -->
+        <div class="modal-header">
+          <template v-if="!deleteConfirm">
+            <h2 class="modal-title">{{ isEditMode ? "Edit Event" : "New Event" }}</h2>
+            <div class="header-actions">
+              <button
+                v-if="isEditMode"
+                class="header-btn header-btn-danger"
+                @click="deleteConfirm = true"
+                title="Delete event"
+                aria-label="Delete event"
+              ><Trash2 :size="16" /></button>
+              <button
+                class="header-btn"
+                @click="attemptClose"
+                title="Close"
+                aria-label="Close"
+              ><X :size="16" /></button>
+            </div>
+          </template>
+          <template v-else>
+            <span class="delete-confirm-prompt">Delete this event?</span>
+            <div class="header-actions">
+              <button
+                type="button"
+                class="btn-danger"
+                :disabled="deleting"
+                @click="doDelete"
+              >{{ deleting ? "Deleting…" : "Yes, delete" }}</button>
+              <button
+                type="button"
+                class="btn-confirm-cancel"
+                @click="deleteConfirm = false"
+              >No</button>
+            </div>
+          </template>
+        </div>
+
+        <!-- Body: form (scrolls if it gets long) -->
+        <form class="modal-form" @submit.prevent="attemptClose">
+          <!-- Title -->
+          <div class="form-field">
+            <label class="form-label">Title <span class="required">*</span></label>
+            <input v-model="title" class="form-input" placeholder="Event title" autofocus />
+          </div>
+
+          <!-- All-day toggle -->
+          <div class="form-field form-field-row">
+            <label class="form-label form-label-inline">All day</label>
+            <button
+              type="button"
+              :class="['toggle-btn', { active: allDay }]"
+              @click="allDay = !allDay"
+            >{{ allDay ? "Yes" : "No" }}</button>
+          </div>
+
+          <!-- Start -->
+          <div class="form-field">
+            <label class="form-label">Start <span class="required">*</span></label>
+            <div class="dt-row">
+              <input v-model="startDate" type="date" class="form-input dt-date" required />
+              <input v-if="!allDay" v-model="startTime" type="time" class="form-input dt-time" required />
+            </div>
+            <p v-if="isPastEvent" class="form-past-hint">This event is in the past</p>
+          </div>
+
+          <!-- End -->
+          <div class="form-field">
+            <label class="form-label">End</label>
+            <div class="dt-row">
+              <input v-model="endDate" type="date" class="form-input dt-date" :min="startDate" />
+              <input v-if="!allDay" v-model="endTime" type="time" class="form-input dt-time" />
+            </div>
+          </div>
+
+          <!-- Recurrence -->
+          <div class="form-field">
+            <label class="form-label">Repeat</label>
+            <select v-model="recurrencePreset" class="form-input">
+              <option value="none">Does not repeat</option>
+              <option value="daily">Daily</option>
+              <option value="weekly">Weekly</option>
+              <option value="monthly">Monthly</option>
+              <option value="yearly">Yearly</option>
+              <option v-if="isCustomRecurrence" value="custom" disabled>Custom</option>
+            </select>
+            <p v-if="isCustomRecurrence" class="recurrence-custom-hint">
+              Custom rule: <code>{{ recurrence }}</code>
+              <br />
+              <span class="form-hint">Picking a preset will replace this rule.</span>
+            </p>
+          </div>
+
+          <!-- Location -->
+          <div class="form-field">
+            <label class="form-label">Location <span class="form-hint">(optional)</span></label>
+            <input v-model="location" class="form-input" placeholder="Location" />
+          </div>
+
+          <!-- Description -->
+          <div class="form-field">
+            <label class="form-label">Description <span class="form-hint">(optional)</span></label>
+            <textarea v-model="description" class="form-input form-textarea" placeholder="Description" rows="3" />
+          </div>
+
+          <!-- Color -->
+          <div class="form-field form-field-row">
+            <label class="form-label form-label-inline">Color</label>
+            <div class="color-row">
+              <input v-model="color" type="color" class="color-picker" title="Pick event color" />
+              <input v-model="color" class="form-input color-hex" placeholder="#5B4A8A" />
+              <button v-if="color" type="button" class="btn-clear-color" @click="color = ''"><X :size="16" /></button>
+            </div>
+          </div>
+
+          <!-- Project -->
+          <div class="form-field">
+            <label class="form-label">Project <span class="form-hint">(optional)</span></label>
+            <ProjectSelector v-model="projectId" />
+          </div>
+
+          <!-- A hidden submit so Enter inside text inputs triggers attemptClose,
+               matching the no-explicit-Save-button intent: Enter commits. -->
+          <button type="submit" class="hidden-submit" :disabled="saving" tabindex="-1" aria-hidden="true" />
+        </form>
+      </div>
+    </div>
+  </Teleport>
+</template>
+
+<style scoped>
+.modal-backdrop {
+  position: fixed;
+  inset: 0;
+  background: rgba(0, 0, 0, 0.55);
+  z-index: 200;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  padding: 1.25rem;
+}
+
+.modal-panel {
+  background: var(--color-surface, #1a1b1e);
+  border: 1px solid var(--color-border, #2a2b30);
+  border-radius: 12px;
+  width: min(480px, 100%);
+  max-height: calc(100vh - 2.5rem);
+  display: flex;
+  flex-direction: column;
+  box-shadow: 0 16px 40px rgba(0, 0, 0, 0.5);
+  overflow: hidden;
+}
+
+.modal-header {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 0.75rem;
+  padding: 0.85rem 1rem 0.85rem 1.5rem;
+  border-bottom: 1px solid var(--color-border, #2a2b30);
+  background: var(--color-surface, #1a1b1e);
+  min-height: 3rem;
+}
+
+.modal-title {
+  font-size: 1.05rem;
+  font-weight: 500;
+  margin: 0;
+  color: var(--color-text, #e8e9f0);
+}
+
+.header-actions {
+  display: flex;
+  align-items: center;
+  gap: 0.25rem;
+}
+
+.header-btn {
+  background: none;
+  border: none;
+  color: var(--color-text-muted, #888);
+  cursor: pointer;
+  padding: 0.4rem;
+  border-radius: 6px;
+  line-height: 1;
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  transition: background 0.15s, color 0.15s;
+}
+.header-btn:hover {
+  background: var(--color-hover, rgba(255,255,255,0.06));
+  color: var(--color-text, #e8e9f0);
+}
+
+/* Trash in header: subtle until hover, then Oxblood. Lower visual weight
+   than Save would have been — destructive actions shouldn't loom. */
+.header-btn-danger:hover {
+  background: var(--color-action-destructive);
+  color: #fff;
+}
+
+/* Inline delete-confirm prompt replaces the title row */
+.delete-confirm-prompt {
+  font-size: 0.95rem;
+  color: var(--color-text, #e8e9f0);
+  font-weight: 500;
+}
+
+/* Form scrolls inside the panel when content overflows */
+.modal-form {
+  padding: 1.25rem 1.5rem 1.5rem;
+  display: flex;
+  flex-direction: column;
+  gap: 1.1rem;
+  overflow-y: auto;
+}
+
+.form-field { display: flex; flex-direction: column; gap: 0.35rem; }
+.form-field-row { flex-direction: row; align-items: center; gap: 0.75rem; }
+
+.form-label {
+  font-size: 0.78rem;
+  font-weight: 500;
+  color: var(--color-text-muted, #888);
+  text-transform: uppercase;
+  letter-spacing: 0.04em;
+}
+.form-label-inline { flex-shrink: 0; margin: 0; }
+.form-hint { font-weight: 400; text-transform: none; letter-spacing: 0; opacity: 0.7; }
+
+.required { color: #f87171; }
+
+.form-input {
+  background: var(--color-input-bg, #111113);
+  border: 1px solid var(--color-border, #2a2b30);
+  color: var(--color-text, #e8e9f0);
+  border-radius: 6px;
+  padding: 0.5rem 0.65rem;
+  font-size: 0.9rem;
+  width: 100%;
+  box-sizing: border-box;
+  transition: border-color 0.15s;
+}
+.form-input:focus { outline: none; border-color: var(--color-primary); }
+
+.form-textarea { resize: vertical; min-height: 5rem; font-family: inherit; }
+
+.dt-row { display: flex; gap: 0.5rem; }
+.dt-date { flex: 1; }
+.dt-time { width: 7.5rem; flex-shrink: 0; }
+.form-past-hint {
+  margin: 4px 0 0;
+  font-size: 0.75rem;
+  color: var(--color-text-secondary);
+}
+
+.recurrence-custom-hint {
+  margin: 4px 0 0;
+  font-size: 0.75rem;
+  color: var(--color-text-secondary);
+  line-height: 1.4;
+}
+.recurrence-custom-hint code {
+  background: var(--color-input-bg, #111113);
+  border: 1px solid var(--color-border, #2a2b30);
+  border-radius: 4px;
+  padding: 1px 5px;
+  font-family: var(--font-mono, ui-monospace, monospace);
+  font-size: 0.72rem;
+  color: var(--color-text, #e8e9f0);
+}
+
+.toggle-btn {
+  background: var(--color-input-bg, #111113);
+  border: 1px solid var(--color-border, #2a2b30);
+  color: var(--color-text-muted, #888);
+  border-radius: 6px;
+  padding: 0.3rem 0.9rem;
+  font-size: 0.85rem;
+  cursor: pointer;
+  transition: all 0.15s;
+}
+.toggle-btn.active {
+  background: var(--color-primary);
+  border-color: var(--color-primary);
+  color: #fff;
+}
+
+.color-row { display: flex; align-items: center; gap: 0.5rem; flex: 1; }
+.color-picker { width: 2.4rem; height: 2.2rem; border: none; padding: 0; border-radius: 4px; cursor: pointer; flex-shrink: 0; }
+.color-hex { flex: 1; }
+.btn-clear-color {
+  background: none;
+  border: none;
+  color: var(--color-text-muted, #888);
+  cursor: pointer;
+  padding: 0.2rem 0.3rem;
+  font-size: 0.85rem;
+}
+
+/* Confirm-delete buttons (only shown during the inline confirm flow) */
+.btn-danger {
+  background: var(--color-action-destructive);
+  color: #fff;
+  border: none;
+  border-radius: 6px;
+  padding: 0.4rem 0.85rem;
+  font-size: 0.85rem;
+  font-weight: 500;
+  cursor: pointer;
+  transition: background 0.15s;
+}
+.btn-danger:hover:not(:disabled) { background: var(--color-action-destructive-hover); }
+.btn-danger:disabled { opacity: 0.5; cursor: not-allowed; }
+
+.btn-confirm-cancel {
+  background: var(--color-action-secondary);
+  border: none;
+  color: #fff;
+  border-radius: 6px;
+  padding: 0.4rem 0.85rem;
+  font-size: 0.85rem;
+  cursor: pointer;
+  transition: background 0.15s;
+}
+.btn-confirm-cancel:hover { background: var(--color-action-secondary-hover); }
+
+/* Hidden submit lets Enter-in-text-input trigger the same close-with-save
+   path as X / Esc / backdrop. No visible Save button needed. */
+.hidden-submit {
+  position: absolute;
+  width: 1px;
+  height: 1px;
+  padding: 0;
+  margin: -1px;
+  overflow: hidden;
+  clip: rect(0,0,0,0);
+  border: 0;
+}
+</style>

frontend/src/components/HistoryPanel.vue

@@ -1,6 +1,6 @@
 <script setup lang="ts">
 import { ref, computed, onMounted } from "vue";
-import { apiGet } from "@/api/client";
+import { apiGet, pinNoteVersion, unpinNoteVersion } from "@/api/client";
 import DiffView from "@/components/DiffView.vue";
 import type { DiffLine } from "@/composables/useAssist";
 
@@ -10,6 +10,8 @@ interface NoteVersion {
   title: string;
   tags: string[];
   body?: string;
+  pin_kind: "auto" | "manual" | null;
+  pin_label: string | null;
   created_at: string;
 }
 
@@ -105,6 +107,69 @@ function restore() {
   emit('restore', selectedVersion.value.body, selectedVersion.value.tags ?? []);
 }
 
+// ── Pin / unpin / edit-label state ──────────────────────────────────────────
+
+const editingLabel = ref(false);
+const draftLabel = ref("");
+const pinSaving = ref(false);
+
+function startEditLabel() {
+  if (!selectedVersion.value) return;
+  draftLabel.value = selectedVersion.value.pin_label ?? "";
+  editingLabel.value = true;
+}
+
+function cancelEditLabel() {
+  editingLabel.value = false;
+  draftLabel.value = "";
+}
+
+async function savePin() {
+  if (!selectedVersion.value || pinSaving.value) return;
+  pinSaving.value = true;
+  try {
+    const updated = await pinNoteVersion(
+      props.noteId, selectedVersion.value.id, draftLabel.value || null,
+    );
+    // Reflect server state in the local list + selected version.
+    const idx = versions.value.findIndex(v => v.id === updated.id);
+    if (idx >= 0) {
+      versions.value[idx].pin_kind = updated.pin_kind;
+      versions.value[idx].pin_label = updated.pin_label;
+    }
+    if (selectedVersion.value) {
+      selectedVersion.value.pin_kind = updated.pin_kind;
+      selectedVersion.value.pin_label = updated.pin_label;
+    }
+    editingLabel.value = false;
+  } catch {
+    // silent — leaving the form open lets the user retry
+  } finally {
+    pinSaving.value = false;
+  }
+}
+
+async function unpinSelected() {
+  if (!selectedVersion.value || pinSaving.value) return;
+  pinSaving.value = true;
+  try {
+    await unpinNoteVersion(props.noteId, selectedVersion.value.id);
+    const idx = versions.value.findIndex(v => v.id === selectedVersion.value!.id);
+    if (idx >= 0) {
+      versions.value[idx].pin_kind = null;
+      versions.value[idx].pin_label = null;
+    }
+    if (selectedVersion.value) {
+      selectedVersion.value.pin_kind = null;
+      selectedVersion.value.pin_label = null;
+    }
+  } catch {
+    // silent
+  } finally {
+    pinSaving.value = false;
+  }
+}
+
 onMounted(loadVersions);
 </script>
 
@@ -128,7 +193,25 @@ onMounted(loadVersions);
               :class="['history-item', { selected: selectedVersion?.id === v.id }]"
               @click="selectVersionItem(v)"
             >
-              <div class="history-item-title">{{ v.title || 'Untitled' }}</div>
+              <div class="history-item-title">
+                <span
+                  v-if="v.pin_kind === 'manual'"
+                  class="pin-badge pin-badge-manual"
+                  :title="v.pin_label || 'Pinned'"
+                  aria-label="manually pinned"
+                >●</span>
+                <span
+                  v-else-if="v.pin_kind === 'auto'"
+                  class="pin-badge pin-badge-auto"
+                  :title="v.pin_label || 'Auto-pinned (stable)'"
+                  aria-label="auto-pinned"
+                >◐</span>
+                {{ v.title || 'Untitled' }}
+              </div>
+              <div
+                v-if="v.pin_kind === 'manual' && v.pin_label"
+                class="history-item-label"
+              >{{ v.pin_label }}</div>
               <div class="history-item-date">{{ formatDate(v.created_at) }}</div>
             </div>
           </div>
@@ -137,7 +220,62 @@ onMounted(loadVersions);
           <div class="history-diff">
             <div v-if="loadingDetail" class="history-empty">Loading version...</div>
             <div v-else-if="!selectedVersion" class="history-empty">Select a version to compare.</div>
-            <DiffView v-else :diff="diff" />
+            <template v-else>
+              <div class="version-pin-controls">
+                <!-- Label editor -->
+                <div v-if="editingLabel" class="pin-label-form">
+                  <input
+                    v-model="draftLabel"
+                    maxlength="500"
+                    type="text"
+                    class="pin-label-input"
+                    placeholder="Optional label (e.g. 'post-network-refresh runbook')"
+                  />
+                  <button class="btn-pin-save" :disabled="pinSaving" @click="savePin">
+                    {{ pinSaving ? "Saving…" : "Save" }}
+                  </button>
+                  <button class="btn-pin-cancel" @click="cancelEditLabel">Cancel</button>
+                </div>
+
+                <!-- Default: kind-aware action row -->
+                <div v-else class="pin-actions">
+                  <span v-if="selectedVersion.pin_kind === 'manual'" class="pin-state">
+                    <span class="pin-badge pin-badge-manual">●</span>
+                    Manually pinned{{ selectedVersion.pin_label ? `: ${selectedVersion.pin_label}` : '' }}
+                  </span>
+                  <span v-else-if="selectedVersion.pin_kind === 'auto'" class="pin-state">
+                    <span class="pin-badge pin-badge-auto">◐</span>
+                    Auto-pinned{{ selectedVersion.pin_label ? `: ${selectedVersion.pin_label}` : '' }}
+                  </span>
+
+                  <button
+                    v-if="selectedVersion.pin_kind === null"
+                    class="btn-pin"
+                    :disabled="pinSaving"
+                    @click="startEditLabel"
+                  >Pin version</button>
+                  <button
+                    v-else-if="selectedVersion.pin_kind === 'manual'"
+                    class="btn-pin-edit"
+                    :disabled="pinSaving"
+                    @click="startEditLabel"
+                  >Edit label</button>
+                  <button
+                    v-else
+                    class="btn-pin"
+                    :disabled="pinSaving"
+                    @click="startEditLabel"
+                  >Pin permanently</button>
+                  <button
+                    v-if="selectedVersion.pin_kind === 'manual'"
+                    class="btn-unpin"
+                    :disabled="pinSaving"
+                    @click="unpinSelected"
+                  >Unpin</button>
+                </div>
+              </div>
+              <DiffView :diff="diff" />
+            </template>
           </div>
         </div>
 
@@ -244,7 +382,6 @@ onMounted(loadVersions);
   padding: 1rem;
   font-size: 0.85rem;
   color: var(--color-text-muted);
-  font-style: italic;
 }
 
 .history-footer {
@@ -269,4 +406,101 @@ onMounted(loadVersions);
   opacity: 0.5;
   cursor: default;
 }
+
+/* ── Pin badges + label rendering ───────────────────────────────────────── */
+.pin-badge {
+  display: inline-block;
+  width: 0.7rem;
+  text-align: center;
+  margin-right: 0.35rem;
+  font-size: 0.85em;
+  line-height: 1;
+}
+.pin-badge-manual { color: var(--color-primary, #6366f1); }
+.pin-badge-auto { color: var(--color-text-muted, rgba(255, 255, 255, 0.5)); }
+
+.history-item-label {
+  font-size: 0.72rem;
+  color: var(--color-primary, #6366f1);
+  font-style: italic;
+  margin-top: 0.15rem;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+/* ── Pin controls above the diff ────────────────────────────────────────── */
+.version-pin-controls {
+  padding: 0.4rem 0.5rem 0.5rem;
+  border-bottom: 1px solid var(--color-border);
+  font-size: 0.82rem;
+}
+.pin-actions {
+  display: flex;
+  align-items: center;
+  gap: 0.5rem;
+  flex-wrap: wrap;
+}
+.pin-state {
+  font-style: italic;
+  color: var(--color-text-muted, rgba(255, 255, 255, 0.6));
+  flex: 1;
+  min-width: 0;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+.btn-pin, .btn-pin-edit, .btn-unpin {
+  padding: 0.25rem 0.7rem;
+  font-size: 0.78rem;
+  background: transparent;
+  color: inherit;
+  border: 1px solid var(--color-border, rgba(255, 255, 255, 0.12));
+  border-radius: 999px;
+  cursor: pointer;
+}
+.btn-pin:hover:not(:disabled), .btn-pin-edit:hover:not(:disabled) {
+  background: rgba(99, 102, 241, 0.12);
+  border-color: var(--color-primary, #6366f1);
+}
+.btn-unpin:hover:not(:disabled) {
+  background: rgba(239, 68, 68, 0.10);
+  border-color: rgba(239, 68, 68, 0.5);
+}
+.pin-label-form {
+  display: flex;
+  gap: 0.4rem;
+  align-items: center;
+}
+.pin-label-input {
+  flex: 1;
+  padding: 0.3rem 0.5rem;
+  font-size: 0.85rem;
+  background: var(--color-input-bg, rgba(255, 255, 255, 0.03));
+  border: 1px solid var(--color-border, rgba(255, 255, 255, 0.12));
+  border-radius: var(--radius-sm, 4px);
+  color: inherit;
+}
+.pin-label-input:focus {
+  outline: none;
+  border-color: var(--color-primary, #6366f1);
+}
+.btn-pin-save, .btn-pin-cancel {
+  padding: 0.3rem 0.7rem;
+  font-size: 0.78rem;
+  background: transparent;
+  color: inherit;
+  border: 1px solid var(--color-border, rgba(255, 255, 255, 0.12));
+  border-radius: var(--radius-sm, 4px);
+  cursor: pointer;
+}
+.btn-pin-save:hover:not(:disabled) {
+  background: rgba(99, 102, 241, 0.12);
+  border-color: var(--color-primary, #6366f1);
+}
+.btn-pin-save:disabled, .btn-pin-cancel:disabled,
+.btn-pin:disabled, .btn-pin-edit:disabled, .btn-unpin:disabled {
+  opacity: 0.5;
+  cursor: progress;
+}
 </style>

frontend/src/components/InlineAssistPanel.vue

@@ -94,10 +94,10 @@ const markers: Record<DiffLine["type"], string> = {
 
 /* ── Streaming ── */
 .iap-streaming {
-  border-color: var(--color-primary, #6366f1);
+  border-color: var(--color-primary);
 }
 .iap-streaming .iap-header {
-  background: color-mix(in srgb, var(--color-primary, #6366f1) 8%, var(--color-bg-secondary));
+  background: color-mix(in srgb, var(--color-primary) 8%, var(--color-bg-secondary));
 }
 
 .iap-pulse {
@@ -105,7 +105,7 @@ const markers: Record<DiffLine["type"], string> = {
   width: 8px;
   height: 8px;
   border-radius: 50%;
-  background: var(--color-primary, #6366f1);
+  background: var(--color-primary);
   flex-shrink: 0;
   animation: iap-pulse 1.2s ease-in-out infinite;
 }
@@ -151,7 +151,6 @@ const markers: Record<DiffLine["type"], string> = {
   padding: 0.75rem;
   font-size: 0.85rem;
   color: var(--color-text-muted);
-  font-style: italic;
 }
 
 /* ── Review ── */
@@ -172,8 +171,8 @@ const markers: Record<DiffLine["type"], string> = {
   font-family: inherit;
 }
 .iap-btn-toggle:hover {
-  border-color: var(--color-primary, #6366f1);
-  color: var(--color-primary, #6366f1);
+  border-color: var(--color-primary);
+  color: var(--color-primary);
 }
 
 .iap-actions {

frontend/src/components/MarkdownToolbar.vue

@@ -1,24 +1,40 @@
 <script setup lang="ts">
 import type { Editor } from "@tiptap/vue-3";
+import {
+  Bold,
+  Italic,
+  Strikethrough,
+  Heading1,
+  Heading2,
+  Heading3,
+  List,
+  ListOrdered,
+  ListChecks,
+  Code,
+  SquareCode,
+  Quote,
+  Link as LinkIcon,
+  Brackets,
+} from "lucide-vue-next";
+import type { Component } from "vue";
 
 const props = defineProps<{ editor: Editor | null }>();
 
-// SVG icons — Material Design paths (24x24) or custom SVG
-const ICONS: Record<string, string> = {
-  bold: `<svg viewBox="0 0 24 24" width="15" height="15" fill="currentColor"><path d="M15.6 10.79c.97-.67 1.65-1.77 1.65-2.79 0-2.26-1.75-4-4-4H7v14h7.04c2.09 0 3.71-1.7 3.71-3.79 0-1.52-.86-2.82-2.15-3.42zM10 6.5h3c.83 0 1.5.67 1.5 1.5s-.67 1.5-1.5 1.5h-3v-3zm3.5 9H10v-3h3.5c.83 0 1.5.67 1.5 1.5s-.67 1.5-1.5 1.5z"/></svg>`,
-  italic: `<svg viewBox="0 0 24 24" width="15" height="15" fill="currentColor"><path d="M10 4v3h2.21l-3.42 8H6v3h8v-3h-2.21l3.42-8H18V4z"/></svg>`,
-  strike: `<svg viewBox="0 0 24 24" width="15" height="15" fill="currentColor"><path d="M10 19h4v-3h-4v3zM5 4v3h5v3h4V7h5V4H5zM3 14h18v-2H3v2z"/></svg>`,
-  h1: `<svg viewBox="0 0 24 24" width="15" height="15"><text x="1" y="17" font-family="sans-serif" font-weight="800" font-size="16" fill="currentColor">H</text><text x="14" y="17" font-family="sans-serif" font-weight="700" font-size="11" fill="currentColor">1</text></svg>`,
-  h2: `<svg viewBox="0 0 24 24" width="15" height="15"><text x="1" y="17" font-family="sans-serif" font-weight="800" font-size="16" fill="currentColor">H</text><text x="14" y="17" font-family="sans-serif" font-weight="700" font-size="11" fill="currentColor">2</text></svg>`,
-  h3: `<svg viewBox="0 0 24 24" width="15" height="15"><text x="1" y="17" font-family="sans-serif" font-weight="800" font-size="16" fill="currentColor">H</text><text x="14" y="17" font-family="sans-serif" font-weight="700" font-size="11" fill="currentColor">3</text></svg>`,
-  ul: `<svg viewBox="0 0 24 24" width="15" height="15" fill="currentColor"><path d="M4 10.5c-.83 0-1.5.67-1.5 1.5s.67 1.5 1.5 1.5 1.5-.67 1.5-1.5-.67-1.5-1.5-1.5zm0-6c-.83 0-1.5.67-1.5 1.5S3.17 7.5 4 7.5 5.5 6.83 5.5 6 4.83 4.5 4 4.5zm0 12c-.83 0-1.5.68-1.5 1.5s.68 1.5 1.5 1.5 1.5-.68 1.5-1.5-.67-1.5-1.5-1.5zM7 19h14v-2H7v2zm0-6h14v-2H7v2zm0-8v2h14V5H7z"/></svg>`,
-  ol: `<svg viewBox="0 0 24 24" width="15" height="15" fill="currentColor"><path d="M2 17h2v.5H3v1h1v.5H2v1h3v-4H2zm1-9h1V4H2v1h1zm-1 3h1.8L2 13.1v.9h3v-1H3.2L5 10.9V10H2zm5-3h13V6H7v2zm0 4h13v-2H7v2zm0 4h13v-2H7v2z"/></svg>`,
-  task: `<svg viewBox="0 0 24 24" width="15" height="15" fill="currentColor"><path d="M19 3H5c-1.1 0-2 .9-2 2v14c0 1.1.9 2 2 2h14c1.1 0 2-.9 2-2V5c0-1.1-.9-2-2-2zm-9 14l-5-5 1.41-1.41L10 14.17l7.59-7.59L19 8l-9 9z"/></svg>`,
-  code: `<svg viewBox="0 0 24 24" width="15" height="15" fill="currentColor"><path d="M9.4 16.6L4.8 12l4.6-4.6L8 6l-6 6 6 6 1.4-1.4zm5.2 0l4.6-4.6-4.6-4.6L16 6l6 6-6 6-1.4-1.4z"/></svg>`,
-  codeblock: `<svg viewBox="0 0 24 24" width="15" height="15" fill="currentColor"><path d="M20 3H4v10c0 2.21 1.79 4 4 4h6c2.21 0 4-1.79 4-4v-3h2c1.11 0 2-.89 2-2V5c0-1.11-.89-2-2-2zm0 5h-2V5h2v3zM4 19h16v2H4z"/></svg>`,
-  quote: `<svg viewBox="0 0 24 24" width="15" height="15" fill="currentColor"><path d="M6 17h3l2-4V7H5v6h3zm8 0h3l2-4V7h-6v6h3z"/></svg>`,
-  link: `<svg viewBox="0 0 24 24" width="15" height="15" fill="currentColor"><path d="M3.9 12c0-1.71 1.39-3.1 3.1-3.1h4V7H7c-2.76 0-5 2.24-5 5s2.24 5 5 5h4v-1.9H7c-1.71 0-3.1-1.39-3.1-3.1zM8 13h8v-2H8v2zm9-6h-4v1.9h4c1.71 0 3.1 1.39 3.1 3.1s-1.39 3.1-3.1 3.1h-4V17h4c2.76 0 5-2.24 5-5s-2.24-5-5-5z"/></svg>`,
-  wikilink: `<svg viewBox="0 0 24 24" width="15" height="15" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M8 3H5a2 2 0 0 0-2 2v14a2 2 0 0 0 2 2h3"/><path d="M16 3h3a2 2 0 0 1 2 2v14a2 2 0 0 1-2 2h-3"/></svg>`,
+const ICONS: Record<string, Component> = {
+  bold: Bold,
+  italic: Italic,
+  strike: Strikethrough,
+  h1: Heading1,
+  h2: Heading2,
+  h3: Heading3,
+  ul: List,
+  ol: ListOrdered,
+  task: ListChecks,
+  code: Code,
+  codeblock: SquareCode,
+  quote: Quote,
+  link: LinkIcon,
+  wikilink: Brackets,
 };
 
 const groups = [
@@ -78,9 +94,10 @@ const groups = [
           :class="['md-btn', { active: btn.isActive() }]"
           :title="btn.title"
           type="button"
+          tabindex="-1"
           @mousedown.prevent="btn.command()"
         >
-          <span class="btn-icon" v-html="ICONS[btn.id]" />
+          <component :is="ICONS[btn.id]" class="btn-icon" :size="16" />
         </button>
       </div>
       <span v-if="gi < groups.length - 1" class="toolbar-sep" aria-hidden="true" />

frontend/src/components/NoteCard.vue

@@ -64,11 +64,11 @@ function goEdit() {
   text-decoration: none;
   color: inherit;
   background: var(--color-bg-card);
-  box-shadow: 0 1px 4px rgba(0, 0, 0, 0.06), 0 0 0 1px rgba(99, 102, 241, 0.06);
+  box-shadow: 0 1px 4px rgba(0, 0, 0, 0.06), 0 0 0 1px rgba(91, 74, 138, 0.06);
   transition: box-shadow 0.2s, transform 0.18s ease;
 }
 .note-card:hover {
-  box-shadow: 0 4px 16px rgba(0, 0, 0, 0.10), 0 0 0 1px rgba(99, 102, 241, 0.14);
+  box-shadow: 0 4px 16px rgba(0, 0, 0, 0.10), 0 0 0 1px rgba(91, 74, 138, 0.14);
   transform: translateY(-2px);
 }
 
@@ -89,7 +89,7 @@ function goEdit() {
 }
 .note-card.compact:hover {
   box-shadow: none;
-  background: rgba(99, 102, 241, 0.04);
+  background: rgba(91, 74, 138, 0.04);
   transform: none;
 }
 .note-title-compact {

frontend/src/components/NotificationBell.vue

@@ -2,6 +2,7 @@
 import { ref, onMounted, onUnmounted } from 'vue'
 import { useNotificationsStore } from '@/stores/notifications'
 import NotificationsPanel from './NotificationsPanel.vue'
+import { Bell } from 'lucide-vue-next'
 
 const store = useNotificationsStore()
 const open = ref(false)
@@ -45,10 +46,7 @@ onUnmounted(() => {
       aria-label="Notifications"
       :title="`${store.count} unread notification${store.count !== 1 ? 's' : ''}`"
     >
-      <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true">
-        <path d="M18 8A6 6 0 0 0 6 8c0 7-3 9-3 9h18s-3-2-3-9"/>
-        <path d="M13.73 21a2 2 0 0 1-3.46 0"/>
-      </svg>
+      <Bell :size="16" aria-hidden="true" />
       <span v-if="store.count > 0" class="bell-badge" aria-live="polite">{{ store.count > 99 ? '99+' : store.count }}</span>
     </button>
     <NotificationsPanel v-if="open" @close="close" />

frontend/src/components/NotificationsPanel.vue

@@ -1,4 +1,5 @@
 <script setup lang="ts">
+import { X } from "lucide-vue-next";
 import { onMounted } from 'vue'
 import { useRouter } from 'vue-router'
 import { useNotificationsStore } from '@/stores/notifications'
@@ -12,6 +13,23 @@ const typeIcon: Record<string, string> = {
   project_shared: '📁',
   note_shared: '📝',
   group_added: '👥',
+  event_reminder: '⏰',
+}
+
+function notifMessage(n: { type: string; payload: Record<string, unknown> }): string {
+  const p = n.payload
+  switch (n.type) {
+    case 'project_shared':
+      return ` shared "${p.project_title}" with you as ${p.permission}`
+    case 'note_shared':
+      return ` shared "${p.note_title}" with you as ${p.permission}`
+    case 'group_added':
+      return ` added you to "${p.group_name}" as ${p.role}`
+    case 'event_reminder':
+      return `Reminder: "${p.title}" is coming up`
+    default:
+      return ''
+  }
 }
 
 async function handleClick(notif: { id: number; payload: Record<string, unknown> }) {
@@ -48,15 +66,11 @@ onMounted(() => store.fetchAll())
         <div class="notif-body">
           <p class="notif-msg">
             <strong v-if="n.payload.invited_by">{{ n.payload.invited_by }}</strong>
-            {{ n.type === 'project_shared'
-                ? ` shared "${n.payload.project_title}" with you as ${n.payload.permission}`
-                : n.type === 'note_shared'
-                  ? ` shared "${n.payload.note_title}" with you as ${n.payload.permission}`
-                  : ` added you to "${n.payload.group_name}" as ${n.payload.role}` }}
+            {{ notifMessage(n) }}
           </p>
           <span class="notif-time">{{ relativeTime(n.created_at) }}</span>
         </div>
-        <button class="btn-notif-close" @click.stop="store.markRead(n.id)" aria-label="Dismiss">✕</button>
+        <button class="btn-notif-close" @click.stop="store.markRead(n.id)" aria-label="Dismiss"><X :size="16" /></button>
       </li>
     </ul>
     <div v-else class="notif-empty">No unread notifications</div>
@@ -151,6 +165,5 @@ onMounted(() => store.fetchAll())
   text-align: center;
   color: var(--color-muted);
   font-size: 0.88rem;
-  font-style: italic;
 }
 </style>

frontend/src/components/RecurrenceEditor.vue

@@ -0,0 +1,171 @@
+<script setup lang="ts">
+import { ref, watch, computed } from "vue";
+
+const props = defineProps<{
+  modelValue: Record<string, unknown> | null;
+}>();
+
+const emit = defineEmits<{
+  (e: "update:modelValue", val: Record<string, unknown> | null): void;
+}>();
+
+type RecurrenceType = "none" | "interval" | "calendar";
+type IntervalUnit = "day" | "week" | "month" | "year";
+type CalendarUnit = "month" | "year";
+
+const rType = ref<RecurrenceType>("none");
+const intervalEvery = ref(1);
+const intervalUnit = ref<IntervalUnit>("week");
+const calendarUnit = ref<CalendarUnit>("month");
+const calendarDay = ref(1);
+const calendarMonth = ref(1);
+
+function ruleFromState(): Record<string, unknown> | null {
+  if (rType.value === "none") return null;
+  if (rType.value === "interval") {
+    return { type: "interval", every: intervalEvery.value, unit: intervalUnit.value };
+  }
+  // calendar
+  const rule: Record<string, unknown> = {
+    type: "calendar",
+    unit: calendarUnit.value,
+    day_of_month: calendarDay.value,
+  };
+  if (calendarUnit.value === "year") {
+    rule.month = calendarMonth.value;
+  }
+  return rule;
+}
+
+function loadFromRule(rule: Record<string, unknown> | null) {
+  if (!rule) {
+    rType.value = "none";
+    return;
+  }
+  const t = rule.type as string;
+  if (t === "interval") {
+    rType.value = "interval";
+    intervalEvery.value = (rule.every as number) ?? 1;
+    intervalUnit.value = (rule.unit as IntervalUnit) ?? "week";
+  } else if (t === "calendar") {
+    rType.value = "calendar";
+    calendarUnit.value = (rule.unit as CalendarUnit) ?? "month";
+    calendarDay.value = (rule.day_of_month as number) ?? 1;
+    calendarMonth.value = (rule.month as number) ?? 1;
+  } else {
+    rType.value = "none";
+  }
+}
+
+// Load initial value
+loadFromRule(props.modelValue);
+
+// Watch for external changes (e.g., task loaded)
+watch(() => props.modelValue, (val) => {
+  loadFromRule(val);
+}, { deep: true });
+
+// Emit on any state change
+function onChange() {
+  emit("update:modelValue", ruleFromState());
+}
+
+const monthNames = [
+  "January","February","March","April","May","June",
+  "July","August","September","October","November","December",
+];
+
+const calendarDayMax = computed(() =>
+  calendarUnit.value === "month" ? 28 : 28
+);
+</script>
+
+<template>
+  <div class="rec-editor">
+    <select v-model="rType" class="sb-select" @change="onChange">
+      <option value="none">No recurrence</option>
+      <option value="interval">Every N days/weeks/months</option>
+      <option value="calendar">On a calendar date</option>
+    </select>
+
+    <div v-if="rType === 'interval'" class="rec-row">
+      <span class="rec-label">Every</span>
+      <input
+        v-model.number="intervalEvery"
+        type="number"
+        min="1"
+        max="365"
+        class="rec-num-input"
+        @input="onChange"
+      />
+      <select v-model="intervalUnit" class="sb-select rec-unit" @change="onChange">
+        <option value="day">day(s)</option>
+        <option value="week">week(s)</option>
+        <option value="month">month(s)</option>
+        <option value="year">year(s)</option>
+      </select>
+    </div>
+
+    <div v-if="rType === 'calendar'" class="rec-row rec-col">
+      <div class="rec-row">
+        <span class="rec-label">Unit</span>
+        <select v-model="calendarUnit" class="sb-select" @change="onChange">
+          <option value="month">Monthly</option>
+          <option value="year">Yearly</option>
+        </select>
+      </div>
+      <div class="rec-row">
+        <span class="rec-label">Day</span>
+        <input
+          v-model.number="calendarDay"
+          type="number"
+          min="1"
+          :max="calendarDayMax"
+          class="rec-num-input"
+          @input="onChange"
+        />
+      </div>
+      <div v-if="calendarUnit === 'year'" class="rec-row">
+        <span class="rec-label">Month</span>
+        <select v-model.number="calendarMonth" class="sb-select" @change="onChange">
+          <option v-for="(name, i) in monthNames" :key="i + 1" :value="i + 1">{{ name }}</option>
+        </select>
+      </div>
+    </div>
+  </div>
+</template>
+
+<style scoped>
+.rec-editor {
+  display: flex;
+  flex-direction: column;
+  gap: 0.4rem;
+}
+.rec-row {
+  display: flex;
+  align-items: center;
+  gap: 0.4rem;
+  flex-wrap: wrap;
+}
+.rec-col {
+  flex-direction: column;
+  align-items: flex-start;
+}
+.rec-label {
+  font-size: 0.78rem;
+  color: var(--color-text-muted);
+  min-width: 2.5rem;
+}
+.rec-num-input {
+  width: 4rem;
+  padding: 0.25rem 0.4rem;
+  border: 1px solid var(--color-input-border, var(--color-border));
+  border-radius: var(--radius-sm);
+  background: var(--color-bg);
+  color: var(--color-text);
+  font-size: 0.85rem;
+  font-family: inherit;
+}
+.rec-num-input:focus { outline: none; border-color: var(--color-primary); }
+.rec-unit { min-width: 6rem; }
+</style>

frontend/src/components/ShareDialog.vue

@@ -1,4 +1,5 @@
 <script setup lang="ts">
+import { X } from "lucide-vue-next";
 import { ref, onMounted } from 'vue'
 import {
   searchUsers,
@@ -116,7 +117,7 @@ onMounted(async () => {
       <div class="share-dialog" role="dialog" :aria-label="`Share ${resourceTitle}`">
         <header class="share-header">
           <h2 class="share-title">Share "{{ resourceTitle }}"</h2>
-          <button class="btn-close" @click="emit('close')" aria-label="Close">✕</button>
+          <button class="btn-close" @click="emit('close')" aria-label="Close"><X :size="16" /></button>
         </header>
 
         <!-- Add share form -->
@@ -138,7 +139,6 @@ onMounted(async () => {
               <ul v-if="userResults.length" class="user-results">
                 <li v-for="u in userResults" :key="u.id" @click="selectUser(u)" class="user-result-item">
                   <span class="user-result-name">{{ u.username }}</span>
-                  <span class="user-result-email">{{ u.email }}</span>
                 </li>
               </ul>
             </div>
@@ -184,7 +184,7 @@ onMounted(async () => {
                 <option value="editor">Editor</option>
                 <option value="admin">Admin</option>
               </select>
-              <button class="btn-remove-share" @click="removeShare(share)" aria-label="Remove">✕</button>
+              <button class="btn-remove-share" @click="removeShare(share)" aria-label="Remove"><X :size="16" /></button>
             </li>
             <li v-if="!shares.length" class="shares-empty">Not shared with anyone yet</li>
           </ul>
@@ -338,7 +338,7 @@ onMounted(async () => {
 
 .btn-add-share {
   padding: 0.45rem 1rem;
-  background: linear-gradient(135deg, #6366f1, #4f46e5);
+  background: var(--gradient-cta);
   color: #fff;
   border: none;
   border-radius: 6px;
@@ -410,7 +410,6 @@ onMounted(async () => {
 .shares-empty {
   color: var(--color-text-muted);
   font-size: 0.85rem;
-  font-style: italic;
   text-align: center;
   padding: 0.75rem;
 }

frontend/src/components/StatusBadge.vue

@@ -12,6 +12,7 @@ const labels: Record<TaskStatus, string> = {
   todo: "Todo",
   in_progress: "In Progress",
   done: "Done",
+  cancelled: "Cancelled",
 };
 </script>
 
@@ -48,6 +49,10 @@ const labels: Record<TaskStatus, string> = {
   background: color-mix(in srgb, var(--color-status-done-bg) 78%, var(--color-status-done) 22%);
   color: color-mix(in srgb, var(--color-status-done) 85%, #000 15%);
 }
+.status-cancelled {
+  background: color-mix(in srgb, var(--color-bg-secondary) 78%, var(--color-text-muted) 22%);
+  color: var(--color-text-muted);
+}
 .clickable {
   cursor: pointer;
 }

frontend/src/components/SystemsSection.vue

@@ -0,0 +1,560 @@
+<script setup lang="ts">
+import { ref, computed, onMounted, watch } from "vue";
+import { useSystemsStore } from "@/stores/systems";
+import { useToastStore } from "@/stores/toast";
+import { getProjectIssues } from "@/api/systems";
+import type { System, TaskLike } from "@/api/systems";
+import { Pencil, Trash2, Archive, ArchiveRestore } from "lucide-vue-next";
+
+const props = defineProps<{ projectId: number }>();
+
+const store = useSystemsStore();
+const toast = useToastStore();
+
+const error = ref<string | null>(null);
+const showArchived = ref(false);
+const issues = ref<TaskLike[]>([]);
+
+// Create state
+const showCreate = ref(false);
+const newName = ref("");
+const newDescription = ref("");
+const creating = ref(false);
+
+// Edit state
+const editingId = ref<number | null>(null);
+const editName = ref("");
+const editDescription = ref("");
+const savingEdit = ref(false);
+
+// Delete confirmation
+const deletingSystem = ref<System | null>(null);
+
+const systems = computed<System[]>(() => store.systemsByProject[props.projectId] ?? []);
+const activeSystems = computed(() => systems.value.filter((s) => s.status === "active"));
+const archivedSystems = computed(() => systems.value.filter((s) => s.status === "archived"));
+const visibleSystems = computed(() =>
+  showArchived.value ? systems.value : activeSystems.value,
+);
+
+async function load() {
+  error.value = null;
+  try {
+    await store.fetchSystems(props.projectId);
+  } catch {
+    error.value = "Failed to load systems.";
+  }
+  try {
+    issues.value = await getProjectIssues(props.projectId);
+  } catch {
+    issues.value = [];
+  }
+}
+
+onMounted(load);
+watch(() => props.projectId, load);
+
+function openCreate() {
+  showCreate.value = true;
+  newName.value = "";
+  newDescription.value = "";
+}
+
+function cancelCreate() {
+  showCreate.value = false;
+  newName.value = "";
+  newDescription.value = "";
+}
+
+async function submitCreate() {
+  const name = newName.value.trim();
+  if (!name || creating.value) return;
+  creating.value = true;
+  try {
+    await store.createSystem(props.projectId, {
+      name,
+      description: newDescription.value.trim() || undefined,
+    });
+    cancelCreate();
+    toast.show("System created");
+  } catch {
+    toast.show("Failed to create system", "error");
+  } finally {
+    creating.value = false;
+  }
+}
+
+function startEdit(system: System) {
+  editingId.value = system.id;
+  editName.value = system.name;
+  editDescription.value = system.description;
+}
+
+function cancelEdit() {
+  editingId.value = null;
+}
+
+async function submitEdit(system: System) {
+  const name = editName.value.trim();
+  if (!name || savingEdit.value) return;
+  savingEdit.value = true;
+  try {
+    await store.updateSystem(props.projectId, system.id, {
+      name,
+      description: editDescription.value.trim(),
+    });
+    editingId.value = null;
+    toast.show("System updated");
+  } catch {
+    toast.show("Failed to update system", "error");
+  } finally {
+    savingEdit.value = false;
+  }
+}
+
+async function archive(system: System) {
+  try {
+    await store.archiveSystem(props.projectId, system.id);
+    toast.show("System archived");
+  } catch {
+    toast.show("Failed to archive system", "error");
+  }
+}
+
+async function unarchive(system: System) {
+  try {
+    await store.unarchiveSystem(props.projectId, system.id);
+    toast.show("System restored");
+  } catch {
+    toast.show("Failed to restore system", "error");
+  }
+}
+
+async function confirmDelete() {
+  const system = deletingSystem.value;
+  if (!system) return;
+  deletingSystem.value = null;
+  try {
+    await store.deleteSystem(props.projectId, system.id);
+    toast.show("System deleted");
+  } catch {
+    toast.show("Failed to delete system", "error");
+  }
+}
+</script>
+
+<template>
+  <div class="systems-section">
+    <!-- Open issues -->
+    <div v-if="issues.length" class="open-issues">
+      <div class="open-issues-label">⚠ Open issues ({{ issues.length }})</div>
+      <ul class="issue-list">
+        <li v-for="issue in issues" :key="issue.id" class="issue-item">
+          <router-link :to="`/tasks/${issue.id}`" class="issue-link">
+            <span class="issue-mark" :class="`imk-${issue.status}`">{{ issue.status === 'in_progress' ? '▸' : '○' }}</span>
+            <span class="issue-name">{{ issue.title }}</span>
+            <span v-if="issue.systems && issue.systems.length" class="issue-systems">
+              <span v-for="s in issue.systems" :key="s.id" class="issue-sys-chip">{{ s.name }}</span>
+            </span>
+          </router-link>
+        </li>
+      </ul>
+    </div>
+
+    <!-- Toolbar -->
+    <div class="systems-toolbar">
+      <button v-if="!showCreate" class="btn-add-system" @click="openCreate">
+        + System
+      </button>
+      <label v-if="archivedSystems.length" class="archived-toggle">
+        <input v-model="showArchived" type="checkbox" class="archived-checkbox" />
+        Show archived ({{ archivedSystems.length }})
+      </label>
+    </div>
+
+    <!-- Create form -->
+    <form v-if="showCreate" class="system-form" @submit.prevent="submitCreate">
+      <input
+        v-model="newName"
+        class="system-input"
+        placeholder="System name"
+        aria-label="System name"
+        autofocus
+        @keydown.escape="cancelCreate"
+      />
+      <textarea
+        v-model="newDescription"
+        class="system-textarea"
+        rows="2"
+        placeholder="What is this subsystem responsible for? (optional)"
+        aria-label="System description"
+      ></textarea>
+      <div class="system-form-actions">
+        <button type="submit" class="btn-confirm" :disabled="!newName.trim() || creating">
+          {{ creating ? "Creating…" : "Create" }}
+        </button>
+        <button type="button" class="btn-cancel" @click="cancelCreate">Cancel</button>
+      </div>
+    </form>
+
+    <!-- Loading -->
+    <div v-if="store.loading && !systems.length" class="systems-skeleton" aria-label="Loading systems">
+      <div class="skel-row"></div>
+      <div class="skel-row skel-row--short"></div>
+      <div class="skel-row"></div>
+    </div>
+
+    <!-- Error -->
+    <p v-else-if="error" class="error-msg">{{ error }}</p>
+
+    <!-- Empty -->
+    <div v-else-if="!visibleSystems.length" class="systems-empty">
+      <p class="empty-title">No systems yet</p>
+      <p class="empty-sub">Define a reusable subsystem or area to organize issues against.</p>
+      <button v-if="!showCreate" class="btn-confirm" @click="openCreate">+ Create a system</button>
+    </div>
+
+    <!-- List -->
+    <ul v-else class="systems-list">
+      <li
+        v-for="system in visibleSystems"
+        :key="system.id"
+        class="system-card"
+        :class="{ 'system-card--archived': system.status === 'archived' }"
+      >
+        <!-- Inline edit -->
+        <template v-if="editingId === system.id">
+          <form class="system-form system-form--inline" @submit.prevent="submitEdit(system)">
+            <input
+              v-model="editName"
+              class="system-input"
+              placeholder="System name"
+              aria-label="System name"
+              autofocus
+              @keydown.escape="cancelEdit"
+            />
+            <textarea
+              v-model="editDescription"
+              class="system-textarea"
+              rows="2"
+              placeholder="Description (optional)"
+              aria-label="System description"
+            ></textarea>
+            <div class="system-form-actions">
+              <button type="submit" class="btn-confirm" :disabled="!editName.trim() || savingEdit">
+                {{ savingEdit ? "Saving…" : "Save" }}
+              </button>
+              <button type="button" class="btn-cancel" @click="cancelEdit">Cancel</button>
+            </div>
+          </form>
+        </template>
+
+        <!-- Display -->
+        <template v-else>
+          <span
+            class="system-swatch"
+            :style="{ background: system.color || 'var(--color-text-muted)' }"
+            aria-hidden="true"
+          ></span>
+          <div class="system-body">
+            <div class="system-name-row">
+              <span class="system-name">{{ system.name }}</span>
+              <span
+                class="issue-badge"
+                :title="`${system.open_issue_count} open issue(s)`"
+              >{{ system.open_issue_count }} open</span>
+              <span v-if="system.status === 'archived'" class="archived-badge">Archived</span>
+            </div>
+            <p v-if="system.description" class="system-description">{{ system.description }}</p>
+          </div>
+          <div class="system-actions">
+            <button class="action-btn" title="Edit" aria-label="Edit system" @click="startEdit(system)">
+              <Pencil :size="16" />
+            </button>
+            <button
+              v-if="system.status === 'active'"
+              class="action-btn"
+              title="Archive"
+              aria-label="Archive system"
+              @click="archive(system)"
+            >
+              <Archive :size="16" />
+            </button>
+            <button
+              v-else
+              class="action-btn"
+              title="Restore"
+              aria-label="Restore system"
+              @click="unarchive(system)"
+            >
+              <ArchiveRestore :size="16" />
+            </button>
+            <button
+              class="action-btn action-delete"
+              title="Delete"
+              aria-label="Delete system"
+              @click="deletingSystem = system"
+            >
+              <Trash2 :size="16" />
+            </button>
+          </div>
+        </template>
+      </li>
+    </ul>
+
+    <!-- Delete confirmation -->
+    <teleport to="body">
+      <div v-if="deletingSystem" class="modal-overlay" @click.self="deletingSystem = null">
+        <div class="modal-card">
+          <h3 class="modal-title">Delete System</h3>
+          <p class="modal-message">
+            Delete <strong>{{ deletingSystem.name }}</strong>? This cannot be undone.
+          </p>
+          <div class="modal-actions">
+            <button class="modal-btn" @click="deletingSystem = null">Cancel</button>
+            <button class="modal-btn modal-btn-danger" @click="confirmDelete">Delete</button>
+          </div>
+        </div>
+      </div>
+    </teleport>
+  </div>
+</template>
+
+<style scoped>
+.systems-section { display: flex; flex-direction: column; gap: 0.75rem; }
+
+/* ── Open issues ──────────────────────────────────────────────── */
+.open-issues { display: flex; flex-direction: column; gap: 0.35rem; }
+.open-issues-label { font-size: 0.72rem; font-weight: 700; letter-spacing: 0.06em; text-transform: uppercase; color: var(--color-text-muted); }
+.issue-list { list-style: none; margin: 0; padding: 0; display: flex; flex-direction: column; gap: 0.2rem; }
+.issue-link { display: flex; align-items: center; gap: 0.5rem; padding: 0.35rem 0.5rem; border-radius: var(--radius-sm); text-decoration: none; color: var(--color-text); font-size: 0.85rem; }
+.issue-link:hover { background: var(--color-bg-secondary); }
+.issue-mark { color: var(--color-text-muted); flex-shrink: 0; }
+.issue-mark.imk-in_progress { color: var(--color-primary); }
+.issue-name { flex: 1; min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.issue-systems { display: flex; gap: 0.25rem; flex-shrink: 0; flex-wrap: wrap; }
+.issue-sys-chip { font-size: 0.66rem; color: var(--color-text-secondary); background: var(--color-bg-secondary); border-radius: 999px; padding: 0.05rem 0.4rem; }
+
+/* ── Toolbar ──────────────────────────────────────────────────── */
+.systems-toolbar { display: flex; align-items: center; justify-content: space-between; gap: 0.75rem; }
+.btn-add-system {
+  background: none;
+  border: 1px dashed var(--color-border);
+  color: var(--color-text-secondary);
+  padding: 0.28rem 0.65rem;
+  border-radius: var(--radius-sm);
+  cursor: pointer;
+  font-size: 0.78rem;
+  font-family: inherit;
+}
+.btn-add-system:hover { border-color: var(--color-primary); color: var(--color-primary); }
+.btn-add-system:focus-visible { outline: none; border-color: var(--color-primary); color: var(--color-primary); }
+
+.archived-toggle {
+  display: inline-flex;
+  align-items: center;
+  gap: 0.4rem;
+  font-size: 0.78rem;
+  color: var(--color-text-muted);
+  cursor: pointer;
+  user-select: none;
+}
+.archived-checkbox { accent-color: var(--color-primary); cursor: pointer; }
+
+/* ── Create / edit form ───────────────────────────────────────── */
+.system-form {
+  display: flex;
+  flex-direction: column;
+  gap: 0.5rem;
+  padding: 0.75rem;
+  background: var(--color-bg-card);
+  border: 1px solid var(--color-border);
+  border-radius: var(--radius-md);
+}
+.system-form--inline { padding: 0; background: none; border: none; flex: 1; }
+.system-input, .system-textarea {
+  padding: 0.4rem 0.6rem;
+  border: 1px solid var(--color-border);
+  border-radius: var(--radius-sm);
+  background: var(--color-bg);
+  color: var(--color-text);
+  font-size: 0.875rem;
+  font-family: inherit;
+  box-sizing: border-box;
+  width: 100%;
+}
+.system-input:focus, .system-textarea:focus { outline: none; border-color: var(--color-primary); }
+.system-textarea { resize: vertical; }
+
+.system-form-actions { display: flex; gap: 0.4rem; }
+.btn-confirm {
+  padding: 0.35rem 0.8rem;
+  background: var(--color-action-primary);
+  color: #fff;
+  border: none;
+  border-radius: var(--radius-sm);
+  cursor: pointer;
+  font-size: 0.82rem;
+  font-family: inherit;
+  transition: background 0.15s;
+}
+.btn-confirm:hover:not(:disabled) { background: var(--color-action-primary-hover); }
+.btn-confirm:focus-visible { outline: 2px solid var(--color-primary); outline-offset: 2px; }
+.btn-confirm:disabled { opacity: 0.5; cursor: default; }
+.btn-cancel {
+  padding: 0.35rem 0.8rem;
+  background: var(--color-action-secondary);
+  border: none;
+  color: #fff;
+  border-radius: var(--radius-sm);
+  cursor: pointer;
+  font-size: 0.82rem;
+  font-family: inherit;
+  transition: background 0.15s;
+}
+.btn-cancel:hover { background: var(--color-action-secondary-hover); }
+.btn-cancel:focus-visible { outline: 2px solid var(--color-primary); outline-offset: 2px; }
+
+/* ── List ─────────────────────────────────────────────────────── */
+.systems-list { list-style: none; margin: 0; padding: 0; display: flex; flex-direction: column; gap: 0.4rem; }
+.system-card {
+  display: flex;
+  align-items: flex-start;
+  gap: 0.65rem;
+  padding: 0.65rem 0.85rem;
+  background: var(--color-bg-card);
+  border: 1px solid var(--color-border);
+  border-radius: var(--radius-md);
+  box-shadow: 0 1px 3px rgba(0,0,0,0.04);
+  transition: border-color 0.12s, box-shadow 0.15s;
+}
+.system-card:hover {
+  border-color: color-mix(in srgb, var(--color-primary) 50%, var(--color-border));
+  box-shadow: 0 3px 10px rgba(0,0,0,0.07);
+}
+.system-card--archived { opacity: 0.6; }
+
+.system-swatch {
+  width: 10px;
+  height: 10px;
+  border-radius: 50%;
+  flex-shrink: 0;
+  margin-top: 0.3rem;
+}
+.system-body { flex: 1; min-width: 0; }
+.system-name-row { display: flex; align-items: center; gap: 0.5rem; flex-wrap: wrap; }
+.system-name { font-weight: 500; color: var(--color-text); word-break: break-word; }
+.issue-badge {
+  font-size: 0.7rem;
+  font-weight: 500;
+  background: color-mix(in srgb, var(--color-primary) 12%, transparent);
+  border: 1px solid color-mix(in srgb, var(--color-primary) 30%, transparent);
+  color: var(--color-primary);
+  border-radius: 999px;
+  padding: 0.05rem 0.45rem;
+  flex-shrink: 0;
+}
+.archived-badge {
+  font-size: 0.65rem;
+  font-weight: 500;
+  text-transform: uppercase;
+  letter-spacing: 0.04em;
+  color: var(--color-text-muted);
+  background: color-mix(in srgb, var(--color-text-muted) 12%, transparent);
+  border-radius: 999px;
+  padding: 0.05rem 0.45rem;
+}
+.system-description {
+  margin: 0.25rem 0 0;
+  font-size: 0.82rem;
+  color: var(--color-text-secondary);
+  line-height: 1.4;
+  word-break: break-word;
+}
+
+.system-actions { display: flex; gap: 0.15rem; flex-shrink: 0; opacity: 0; transition: opacity 0.15s; }
+.system-card:hover .system-actions,
+.system-card:focus-within .system-actions { opacity: 1; }
+.action-btn {
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  background: none;
+  border: none;
+  cursor: pointer;
+  color: var(--color-text-muted);
+  width: 26px;
+  height: 26px;
+  border-radius: var(--radius-sm);
+  transition: background 0.12s, color 0.12s;
+}
+.action-btn:hover { background: var(--color-bg-secondary); color: var(--color-text); }
+.action-btn:focus-visible { outline: 2px solid var(--color-primary); outline-offset: 1px; opacity: 1; }
+.action-delete:hover { color: var(--color-danger, #e74c3c); }
+
+/* ── Empty ────────────────────────────────────────────────────── */
+.systems-empty {
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  gap: 0.4rem;
+  padding: 2rem 1rem;
+  text-align: center;
+  border: 1px dashed var(--color-border);
+  border-radius: var(--radius-md);
+}
+.empty-title { margin: 0; font-weight: 500; color: var(--color-text); }
+.empty-sub { margin: 0 0 0.5rem; font-size: 0.82rem; color: var(--color-text-muted); max-width: 32ch; }
+
+.error-msg { color: var(--color-danger); font-size: 0.9rem; }
+
+/* ── Skeleton ─────────────────────────────────────────────────── */
+@keyframes skel-shine { to { background-position: 200% center; } }
+.systems-skeleton { display: flex; flex-direction: column; gap: 0.4rem; }
+.skel-row {
+  height: 3rem;
+  border-radius: var(--radius-md);
+  background: linear-gradient(
+    90deg,
+    var(--color-bg-secondary) 25%,
+    color-mix(in srgb, var(--color-text-muted) 16%, var(--color-bg-secondary)) 50%,
+    var(--color-bg-secondary) 75%
+  );
+  background-size: 200% 100%;
+  animation: skel-shine 1.5s ease infinite;
+}
+.skel-row--short { width: 65%; }
+
+/* ── Modal ────────────────────────────────────────────────────── */
+.modal-overlay {
+  position: fixed; inset: 0;
+  background: var(--color-overlay, rgba(0,0,0,0.45));
+  display: flex; align-items: center; justify-content: center;
+  z-index: 200;
+}
+.modal-card {
+  background: var(--color-bg-card);
+  border: 1px solid var(--color-border);
+  border-radius: var(--radius-md);
+  padding: 1.5rem;
+  width: 100%;
+  max-width: 400px;
+  box-shadow: 0 8px 32px var(--color-shadow);
+}
+.modal-title { margin: 0 0 0.75rem; font-size: 1.05rem; }
+.modal-message { font-size: 0.9rem; color: var(--color-text-secondary); margin: 0 0 1.25rem; line-height: 1.5; }
+.modal-actions { display: flex; justify-content: flex-end; gap: 0.5rem; }
+.modal-btn {
+  padding: 0.4rem 0.9rem;
+  border: 1px solid var(--color-border);
+  background: var(--color-bg-secondary);
+  color: var(--color-text);
+  border-radius: var(--radius-sm);
+  cursor: pointer;
+  font-size: 0.875rem;
+  font-family: inherit;
+}
+.modal-btn:hover { background: var(--color-bg); }
+.modal-btn-danger { background: var(--color-action-destructive); border-color: var(--color-action-destructive); color: #fff; }
+.modal-btn-danger:hover { background: var(--color-action-destructive-hover); border-color: var(--color-action-destructive-hover); }
+</style>

frontend/src/components/TagPill.vue

@@ -40,7 +40,7 @@ defineEmits<{
 }
 .tag-pill:hover {
   color: var(--color-primary);
-  background: rgba(99, 102, 241, 0.08);
+  background: var(--color-primary-tint);
 }
 .dismiss {
   background: none;