Implement WebDAV backup feature: add configuration options, API endpoints, and UI for managing database backups

.github/copilot-instructions.md

@@ -19,6 +19,7 @@ Faerro KB is a self-hosted voice-note inbox designed for an iPhone-installed web
 - Preserve the local-first capture and retry behavior when changing the PWA, API, or service worker. Prefer additive, recoverable data changes.
 - Follow the existing small stack: FastAPI, SQLite/FTS5, and the vanilla JavaScript PWA. Avoid new dependencies unless they solve a real need and can run on the user's infrastructure.
 - Keep changes scoped. Inspect the owning code path, add or update focused tests for behavior changes, and run the narrowest relevant checks available.
+- If tooling required for a relevant test or check is missing, tell the user which tool is needed and prompt them to install it on the local machine; do not silently skip the check.
 - Update README/UI documentation when behavior, deployment, security, backup, or platform limitations change. Do not claim a capability that iOS or browsers cannot guarantee.
 - Preserve user data and existing local changes. Do not perform destructive migrations or remove stored recordings without explicit confirmation and a recovery path.
 - At the end of each chat, check whether it introduced durable project requirements, decisions, workflows, or corrections missing from these instructions or a relevant skill. Update the narrowest relevant guidance file when the change is clearly reusable and within the user's authorized scope; otherwise note the gap and ask before expanding scope. Do not record transient task details or sensitive information.

.github/skills/faerro-kb-development/SKILL.md

@@ -26,5 +26,6 @@ Use this skill for feature work, bug fixes, and reviews in this repository. The
 
 - Add or update focused tests for changed behavior, especially queue acknowledgement, retries, and data-preserving transcript workflows.
 - Run the narrowest relevant test, compile, or lint check available, then document any important limitation or unverified check.
+- If tooling required for a relevant test or check is missing, tell the user which tool is needed and prompt them to install it locally instead of silently skipping the check.
 - Update `README.md` when setup, deployment, backups, privacy, or platform behavior changes.
 - Never claim that iOS guarantees background execution or that browser storage is permanent.

Dockerfile

@@ -8,6 +8,7 @@ RUN apt-get update \
 	&& pip install --no-cache-dir -r requirements.txt
 COPY app ./app
 COPY frontend ./frontend
+COPY ["audio test.wav", "./audio test.wav"]
 
 ENV DATA_DIR=/data
 EXPOSE 80

README.md

@@ -29,6 +29,7 @@ In Safari on iPhone, open the HTTPS address and use **Share > Add to Home Screen
 ## Capture and offline behavior
 
 - Recording data and its timestamp are committed to IndexedDB before upload is attempted.
+- Written-note drafts and queued text notes are stored in IndexedDB on the device. A draft is restored when the app is reopened, and queued text is removed only after the server confirms storage.
 - Microphone recordings use the audio format supported by the browser (commonly M4A/AAC on iPhone Safari or Opus/WebM elsewhere). You can also add an audio file from the device; both sources remain queued locally until the server confirms storage.
 - The server keeps each uploaded original and creates a mono PCM WAV copy at 16-bit / 22.05 kHz for transcription. FFmpeg performs this conversion locally in the container. After a non-empty transcript is stored, both audio files are deleted; failed or empty transcriptions keep the audio for recovery.
 - Uploads retry when the app opens, returns to the foreground, or the browser reports a connection. A recording is removed from the phone's queue only after the server confirms it was stored.
@@ -37,9 +38,9 @@ In Safari on iPhone, open the HTTPS address and use **Share > Add to Home Screen
 
 ## Local speech-to-text
 
-The API can use a local `whisper.cpp` server when `WHISPER_SERVER_URL` is configured. Audio is sent only to that local endpoint; with the variable unset, uploads remain stored as `awaiting_transcription` until a non-empty transcript is entered and saved. Saving that transcript deletes both server-side audio files.
+The API can use a local `onerahmet/openai-whisper-asr-webservice` server when `WHISPER_SERVER_URL` is configured. Set it to the service's `/asr` endpoint, including its listening port, for example `http://whisper:9000/asr` or `http://192.168.1.102:9000/asr`. Faerro KB sends the converted WAV as the `audio_file` multipart field with `task=transcribe` and `output=json`; audio is sent only to that local endpoint. At startup, the API also sends the bundled `audio test.wav` to the endpoint as a connection test before resuming queued jobs. Logs report the HTTP result, detected language, segment count, and elapsed time, but never log the transcript. With the variable unset, uploads remain stored as `awaiting_transcription` until a non-empty transcript is entered and saved. When the API starts with a successful Whisper test, it resumes awaiting, interrupted, and failed transcription jobs whose audio is still stored. Restart/recreate the API container after changing this environment variable; configuration is read at startup. Saving a non-empty transcript deletes both server-side audio files.
 
-For NVIDIA GPU transcription, run a CUDA-enabled `whisper.cpp` server with a model on the same machine, then set `WHISPER_SERVER_URL` to its local inference endpoint, for example `http://whisper:8080/inference`. Use a model that fits the RTX 3070's VRAM; start with `small` or a quantized `medium` model and measure with your audio/language. Do not expose the transcription server outside the private Docker network. See the [whisper.cpp NVIDIA instructions](https://github.com/ggml-org/whisper.cpp#nvidia-gpu-support) for CUDA builds.
+Run the ASR web service with a model that fits the available hardware, then set `WHISPER_SERVER_URL` to its `/asr` endpoint. Keep the transcription server private to the Docker network and do not expose it publicly.
 
 The transcript remains in SQLite after the audio files are deleted. A future local correction model can propose punctuation and name fixes without replacing the stored transcription. Proper-name matching and offline geolocation data are not enabled yet.
 
@@ -47,6 +48,12 @@ The transcript remains in SQLite after the audio files are deleted. A future loc
 
 Docker persists SQLite metadata in `./data/voice-kb.sqlite3` and audio awaiting transcription in `./data/audio/`. After a non-empty transcript is saved, its audio files are removed. Back up the whole `./data` directory while the service is stopped or use a SQLite-aware backup procedure. Model files should also be stored locally and backed up separately if needed.
 
+Faerro KB can upload a consistent SQLite snapshot to a Nextcloud or other WebDAV folder whenever a transcript is saved. Open **Backup settings** in the app and enter the folder's WebDAV URL, username, and an app password. The destination file is `faerro-kb.sqlite3`; the folder must already exist. For Nextcloud, the URL commonly starts with `https://<host>/remote.php/dav/files/<username>/`. Use HTTPS and an app password rather than your account password.
+
+Alternatively, set `BACKUP_WEBDAV_URL`, `BACKUP_WEBDAV_USERNAME`, and `BACKUP_WEBDAV_PASSWORD` in `.env`. A non-empty `BACKUP_WEBDAV_URL` makes those settings environment-managed and read-only in the UI. When configured in the UI, credentials are stored on the server in `./data/webdav-backup.json` with owner-only file permissions; include the data directory in your own local backups if you need to preserve that configuration.
+
+The API records pending backup work in SQLite and retries it at startup or after a later transcript save; a failed upload does not undo the saved transcript. The settings dialog shows failures and offers a retry. WebDAV `PUT` replaces the complete database file: WebDAV does not provide safe incremental SQLite page syncing. Configure Nextcloud file versioning separately if you want server-side historical versions. This feature backs up the database only, not audio files, and does not replace a backup of the full `./data` directory. The app has no login layer, so keep it behind your VPN/firewall; anyone who can reach it can alter backup settings, as well as access the notes API.
+
 ## Development
 
 ```sh

app/main.py

@@ -1,12 +1,16 @@
 import asyncio
+import json
+import logging
 import os
 import re
 import sqlite3
 import subprocess
 import tempfile
+import time
 import uuid
 from datetime import datetime, timezone
 from pathlib import Path
+from urllib.parse import urlsplit
 
 import httpx
 from fastapi import BackgroundTasks, FastAPI, File, Form, HTTPException, UploadFile
@@ -16,8 +20,18 @@ from fastapi.staticfiles import StaticFiles
 DATA_DIR = Path(os.environ.get("DATA_DIR", "./data"))
 AUDIO_DIR = DATA_DIR / "audio"
 DB_PATH = DATA_DIR / "faerro-kb.sqlite3"
+BACKUP_SETTINGS_PATH = DATA_DIR / "webdav-backup.json"
 WHISPER_SERVER_URL = os.environ.get("WHISPER_SERVER_URL", "").strip()
+BACKUP_WEBDAV_URL = os.environ.get("BACKUP_WEBDAV_URL", "").strip()
+BACKUP_WEBDAV_USERNAME = os.environ.get("BACKUP_WEBDAV_USERNAME", "")
+BACKUP_WEBDAV_PASSWORD = os.environ.get("BACKUP_WEBDAV_PASSWORD", "")
 FRONTEND_DIR = Path(__file__).resolve().parent.parent / "frontend"
+WHISPER_TEST_AUDIO_PATH = Path(__file__).resolve().parent.parent / "audio test.wav"
+TRANSCRIPTION_TASKS: set[asyncio.Task[None]] = set()
+BACKUP_TASK: asyncio.Task[None] | None = None
+BACKUP_LOCK = asyncio.Lock()
+logger = logging.getLogger(__name__)
+logging.getLogger("httpx").setLevel(logging.WARNING)
 
 DATA_DIR.mkdir(parents=True, exist_ok=True)
 AUDIO_DIR.mkdir(parents=True, exist_ok=True)
@@ -47,6 +61,15 @@ def initialize_db() -> None:
             """CREATE VIRTUAL TABLE IF NOT EXISTS note_search
                USING fts5(note_id UNINDEXED, transcript)"""
         )
+        connection.execute(
+            """CREATE TABLE IF NOT EXISTS backup_state (
+                id INTEGER PRIMARY KEY CHECK (id = 1),
+                revision INTEGER NOT NULL DEFAULT 0,
+                completed_revision INTEGER NOT NULL DEFAULT 0,
+                last_error TEXT
+            )"""
+        )
+        connection.execute("INSERT OR IGNORE INTO backup_state (id) VALUES (1)")
         columns = {row[1] for row in connection.execute("PRAGMA table_info(notes)")}
         if "original_audio_path" not in columns:
             connection.execute("ALTER TABLE notes ADD COLUMN original_audio_path TEXT")
@@ -80,6 +103,145 @@ def update_transcript(note_id: str, transcript: str, status: str) -> None:
                 "INSERT INTO note_search (note_id, transcript) VALUES (?, ?)",
                 (note_id, transcript.strip()),
             )
+        if result.rowcount and status != "transcription_failed":
+            connection.execute("UPDATE backup_state SET revision = revision + 1 WHERE id = 1")
+    if result.rowcount and status != "transcription_failed":
+        schedule_backup()
+
+
+def get_backup_settings() -> dict[str, str]:
+    if BACKUP_WEBDAV_URL:
+        return {
+            "url": BACKUP_WEBDAV_URL,
+            "username": BACKUP_WEBDAV_USERNAME,
+            "password": BACKUP_WEBDAV_PASSWORD,
+        }
+    try:
+        settings = json.loads(BACKUP_SETTINGS_PATH.read_text(encoding="utf-8"))
+    except (OSError, json.JSONDecodeError):
+        settings = {}
+    return {
+        "url": settings.get("url", ""),
+        "username": settings.get("username", ""),
+        "password": settings.get("password", ""),
+    }
+
+
+def save_backup_settings(settings: dict[str, str]) -> None:
+    temporary_path = BACKUP_SETTINGS_PATH.with_suffix(".tmp")
+    temporary_path.write_text(json.dumps(settings), encoding="utf-8")
+    temporary_path.chmod(0o600)
+    temporary_path.replace(BACKUP_SETTINGS_PATH)
+
+
+def backup_state() -> dict[str, object]:
+    with connect_db() as connection:
+        row = connection.execute(
+            "SELECT revision, completed_revision, last_error FROM backup_state WHERE id = 1"
+        ).fetchone()
+    settings = get_backup_settings()
+    return {
+        "enabled": bool(settings["url"]),
+        "managed_by_environment": bool(BACKUP_WEBDAV_URL),
+        "url": settings["url"],
+        "username": settings["username"],
+        "password_set": bool(settings["password"]),
+        "revision": row["revision"],
+        "completed_revision": row["completed_revision"],
+        "pending": row["revision"] > row["completed_revision"],
+        "last_error": row["last_error"],
+    }
+
+
+def schedule_backup() -> None:
+    global BACKUP_TASK
+    if BACKUP_TASK and not BACKUP_TASK.done():
+        return
+    try:
+        loop = asyncio.get_running_loop()
+    except RuntimeError:
+        return
+    BACKUP_TASK = loop.create_task(run_backup())
+
+
+async def file_chunks(path: Path):
+    with path.open("rb") as backup_file:
+        while chunk := await asyncio.to_thread(backup_file.read, 1024 * 1024):
+            yield chunk
+
+
+async def create_database_snapshot(path: Path) -> None:
+    def copy_database() -> None:
+        source = sqlite3.connect(DB_PATH)
+        destination = sqlite3.connect(path)
+        try:
+            source.backup(destination)
+        finally:
+            destination.close()
+            source.close()
+
+    await asyncio.to_thread(copy_database)
+
+
+def webdav_file_url(folder_url: str) -> str:
+    parsed = urlsplit(folder_url)
+    if parsed.scheme not in {"http", "https"} or not parsed.netloc or parsed.query or parsed.fragment:
+        raise ValueError("Enter a valid WebDAV folder URL")
+    if parsed.username or parsed.password:
+        raise ValueError("Put WebDAV credentials in the username and password fields")
+    return folder_url.rstrip("/") + "/faerro-kb.sqlite3"
+
+
+async def run_backup() -> None:
+    async with BACKUP_LOCK:
+        while True:
+            settings = get_backup_settings()
+            if not settings["url"]:
+                return
+            with connect_db() as connection:
+                state = connection.execute(
+                    "SELECT revision, completed_revision FROM backup_state WHERE id = 1"
+                ).fetchone()
+            if state["revision"] <= state["completed_revision"]:
+                return
+            revision = state["revision"]
+            snapshot_path = None
+            try:
+                target_url = webdav_file_url(settings["url"])
+                with tempfile.NamedTemporaryFile(suffix=".sqlite3", dir=DATA_DIR, delete=False) as snapshot:
+                    snapshot_path = Path(snapshot.name)
+                await create_database_snapshot(snapshot_path)
+                with sqlite3.connect(snapshot_path) as snapshot_connection:
+                    snapshot_connection.execute(
+                        "UPDATE backup_state SET completed_revision = ?, last_error = NULL WHERE id = 1",
+                        (revision,),
+                    )
+                auth = (settings["username"], settings["password"]) if settings["username"] else None
+                async with httpx.AsyncClient(timeout=120, auth=auth) as client:
+                    response = await client.put(target_url, content=file_chunks(snapshot_path))
+                    response.raise_for_status()
+                with connect_db() as connection:
+                    connection.execute(
+                        "UPDATE backup_state SET completed_revision = ?, last_error = NULL WHERE id = 1",
+                        (revision,),
+                    )
+            except httpx.HTTPStatusError as error:
+                error_message = f"WebDAV returned HTTP {error.response.status_code}"
+                with connect_db() as connection:
+                    connection.execute("UPDATE backup_state SET last_error = ? WHERE id = 1", (error_message,))
+                logger.warning("WebDAV database backup failed: HTTP %s", error.response.status_code)
+                return
+            except Exception as error:
+                error_message = "WebDAV backup failed; check the folder URL and credentials"
+                if isinstance(error, ValueError):
+                    error_message = str(error)
+                with connect_db() as connection:
+                    connection.execute("UPDATE backup_state SET last_error = ? WHERE id = 1", (error_message,))
+                logger.warning("WebDAV database backup failed: %s", type(error).__name__)
+                return
+            finally:
+                if snapshot_path:
+                    snapshot_path.unlink(missing_ok=True)
 
 
 def remove_transcribed_audio(note_id: str) -> None:
@@ -107,8 +269,8 @@ async def transcribe_note(note_id: str, audio_path: Path) -> None:
             with audio_path.open("rb") as audio_file:
                 response = await client.post(
                     WHISPER_SERVER_URL,
-                    files={"file": (audio_path.name, audio_file, "application/octet-stream")},
-                    data={"response_format": "json"},
+                    params={"task": "transcribe", "output": "json"},
+                    files={"audio_file": (audio_path.name, audio_file, "application/octet-stream")},
                 )
             response.raise_for_status()
             transcript = response.json().get("text", "").strip()
@@ -120,11 +282,157 @@ async def transcribe_note(note_id: str, audio_path: Path) -> None:
         remove_transcribed_audio(note_id)
 
 
+async def test_whisper_connection() -> bool:
+    if not WHISPER_SERVER_URL:
+        logger.warning("Whisper startup test skipped: WHISPER_SERVER_URL is not configured")
+        return False
+    if not WHISPER_TEST_AUDIO_PATH.is_file():
+        logger.error("Whisper startup test failed: bundled test audio is missing")
+        return False
+
+    started_at = time.monotonic()
+    try:
+        async with httpx.AsyncClient(timeout=httpx.Timeout(120, connect=5)) as client:
+            with WHISPER_TEST_AUDIO_PATH.open("rb") as audio_file:
+                response = await client.post(
+                    WHISPER_SERVER_URL,
+                    params={"encode": "true", "task": "transcribe", "output": "json"},
+                    files={"audio_file": (WHISPER_TEST_AUDIO_PATH.name, audio_file, "audio/wav")},
+                )
+            response.raise_for_status()
+            result = response.json()
+        transcript = result.get("text") if isinstance(result, dict) else None
+        if not isinstance(transcript, str) or not transcript.strip():
+            logger.error(
+                "Whisper startup test failed: HTTP %s returned no transcript (%.1fs)",
+                response.status_code,
+                time.monotonic() - started_at,
+            )
+            return False
+        language = result.get("language", "unknown")
+        if not isinstance(language, str) or not re.fullmatch(r"[A-Za-z-]{1,12}", language):
+            language = "unknown"
+        segments = result.get("segments", [])
+        segment_count = len(segments) if isinstance(segments, list) else 0
+        logger.info(
+            "Whisper startup test passed: HTTP %s, language=%s, segments=%d, elapsed=%.1fs",
+            response.status_code,
+            language,
+            segment_count,
+            time.monotonic() - started_at,
+        )
+        return True
+    except httpx.HTTPStatusError as error:
+        logger.error("Whisper startup test failed: HTTP %s", error.response.status_code)
+    except Exception as error:
+        logger.error("Whisper startup test failed: %s", type(error).__name__)
+    return False
+
+
+@app.on_event("startup")
+async def resume_pending_transcriptions() -> None:
+    if BACKUP_WEBDAV_URL:
+        with connect_db() as connection:
+            connection.execute(
+                "UPDATE backup_state SET revision = 1 WHERE id = 1 AND revision = 0 AND completed_revision = 0"
+            )
+    schedule_backup()
+    with connect_db() as connection:
+        connection.execute(
+            "UPDATE notes SET status = 'awaiting_transcription' WHERE status = 'transcribing'"
+        )
+    if not await test_whisper_connection():
+        return
+    with connect_db() as connection:
+        notes = connection.execute(
+            """SELECT id, audio_path FROM notes
+               WHERE status IN ('awaiting_transcription', 'transcribing', 'transcription_failed')"""
+        ).fetchall()
+    for note in notes:
+        audio_path = Path(note["audio_path"])
+        if audio_path.is_file():
+            with connect_db() as connection:
+                connection.execute(
+                    "UPDATE notes SET status = 'transcribing' WHERE id = ?",
+                    (note["id"],),
+                )
+            task = asyncio.create_task(transcribe_note(note["id"], audio_path))
+            TRANSCRIPTION_TASKS.add(task)
+            task.add_done_callback(TRANSCRIPTION_TASKS.discard)
+        else:
+            with connect_db() as connection:
+                connection.execute(
+                    "UPDATE notes SET status = 'transcription_failed' WHERE id = ?",
+                    (note["id"],),
+                )
+
+
 @app.get("/api/health")
 def health() -> dict[str, str]:
     return {"status": "ok"}
 
 
+@app.get("/api/backup")
+def get_backup_status() -> dict[str, object]:
+    return backup_state()
+
+
+@app.put("/api/backup/config")
+def configure_backup(payload: dict[str, str]) -> dict[str, object]:
+    if BACKUP_WEBDAV_URL:
+        raise HTTPException(status_code=409, detail="WebDAV backup is managed by environment variables")
+    url = payload.get("url", "").strip()
+    username = payload.get("username", "").strip()
+    current = get_backup_settings()
+    password = "" if payload.get("clear_password") == "true" else current["password"]
+    if payload.get("password"):
+        password = payload["password"]
+    if url:
+        try:
+            webdav_file_url(url)
+        except ValueError as error:
+            raise HTTPException(status_code=400, detail=str(error)) from error
+    save_backup_settings({"url": url, "username": username, "password": password})
+    if url:
+        with connect_db() as connection:
+            connection.execute("UPDATE backup_state SET revision = revision + 1 WHERE id = 1")
+    schedule_backup()
+    return backup_state()
+
+
+@app.post("/api/backup/test")
+async def test_backup_connection() -> dict[str, str]:
+    settings = get_backup_settings()
+    if not settings["url"]:
+        raise HTTPException(status_code=400, detail="Configure a WebDAV folder first")
+    try:
+        folder_url = settings["url"].rstrip("/")
+        webdav_file_url(folder_url)
+        test_url = f"{folder_url}/faerro-kb-test-{uuid.uuid4().hex}"
+        auth = (settings["username"], settings["password"]) if settings["username"] else None
+        async with httpx.AsyncClient(timeout=30, auth=auth) as client:
+            response = await client.put(test_url, content=b"Faerro KB WebDAV test")
+            response.raise_for_status()
+            response = await client.delete(test_url)
+            response.raise_for_status()
+        return {"status": "ok", "message": "WebDAV write and delete test passed."}
+    except httpx.HTTPStatusError as error:
+        raise HTTPException(
+            status_code=502,
+            detail=f"WebDAV returned HTTP {error.response.status_code} during the test",
+        ) from error
+    except Exception as error:
+        raise HTTPException(status_code=502, detail="Could not connect to the WebDAV folder") from error
+
+
+@app.post("/api/backup/retry", status_code=202)
+def retry_backup() -> dict[str, object]:
+    if not get_backup_settings()["url"]:
+        raise HTTPException(status_code=400, detail="Configure a WebDAV folder first")
+    schedule_backup()
+    return backup_state()
+
+
 @app.post("/api/notes", status_code=201)
 async def create_note(
     background_tasks: BackgroundTasks,
@@ -199,6 +507,36 @@ async def create_note(
     return {"id": note_id, "status": status}
 
 
+@app.post("/api/text-notes", status_code=201)
+def create_text_note(payload: dict[str, str]) -> dict[str, str]:
+    text = payload.get("text", "").strip()
+    if not text:
+        raise HTTPException(status_code=400, detail="Note text is required")
+    try:
+        note_id = str(uuid.UUID(payload.get("id", "")))
+    except ValueError as error:
+        raise HTTPException(status_code=400, detail="Invalid note ID") from error
+    try:
+        parsed_date = datetime.fromisoformat(payload.get("created_at", "").replace("Z", "+00:00"))
+        if parsed_date.tzinfo is None:
+            parsed_date = parsed_date.replace(tzinfo=timezone.utc)
+        created_at = parsed_date.astimezone(timezone.utc).isoformat()
+    except ValueError:
+        created_at = datetime.now(timezone.utc).isoformat()
+
+    with connect_db() as connection:
+        existing = connection.execute("SELECT status FROM notes WHERE id = ?", (note_id,)).fetchone()
+        if existing:
+            return {"id": note_id, "status": existing["status"]}
+        connection.execute(
+            """INSERT INTO notes (id, created_at, filename, audio_path, transcript, status)
+               VALUES (?, ?, ?, '', ?, 'written')""",
+            (note_id, created_at, "Written note", text),
+        )
+        connection.execute("INSERT INTO note_search (note_id, transcript) VALUES (?, ?)", (note_id, text))
+    return {"id": note_id, "status": "written"}
+
+
 @app.get("/api/notes")
 def list_notes(q: str = "", status: str = "") -> list[dict[str, str]]:
     with connect_db() as connection:
@@ -252,16 +590,17 @@ def delete_note(note_id: str) -> dict[str, str]:
 
 
 @app.put("/api/notes/{note_id}/transcript")
-def save_transcript(note_id: str, payload: dict[str, str]) -> dict[str, str]:
+async def save_transcript(note_id: str, payload: dict[str, str]) -> dict[str, str]:
     transcript = payload.get("transcript", "").strip()
     with connect_db() as connection:
-        exists = connection.execute("SELECT 1 FROM notes WHERE id = ?", (note_id,)).fetchone()
-    if not exists:
+        note = connection.execute("SELECT status FROM notes WHERE id = ?", (note_id,)).fetchone()
+    if not note:
         raise HTTPException(status_code=404, detail="Note not found")
-    update_transcript(note_id, transcript, "transcribed" if transcript else "awaiting_transcription")
-    if transcript:
+    status = "written" if note["status"] == "written" else "transcribed" if transcript else "awaiting_transcription"
+    update_transcript(note_id, transcript, status)
+    if transcript and note["status"] != "written":
         remove_transcribed_audio(note_id)
-    return {"id": note_id, "status": "transcribed" if transcript else "awaiting_transcription"}
+    return {"id": note_id, "status": status}
 
 
 app.mount("/", StaticFiles(directory=FRONTEND_DIR, html=True), name="frontend")

docker-compose.yml

@@ -6,6 +6,9 @@ services:
     environment:
       DATA_DIR: /data
       WHISPER_SERVER_URL: ${WHISPER_SERVER_URL:-}
+      BACKUP_WEBDAV_URL: ${BACKUP_WEBDAV_URL:-}
+      BACKUP_WEBDAV_USERNAME: ${BACKUP_WEBDAV_USERNAME:-}
+      BACKUP_WEBDAV_PASSWORD: ${BACKUP_WEBDAV_PASSWORD:-}
     volumes:
       - ./data:/data
     restart: unless-stopped

frontend/app.js

@@ -1,10 +1,14 @@
 const DB_NAME = 'faerro-kb-local';
 const STORE_NAME = 'recordings';
+const TEXT_STORE_NAME = 'text-notes';
+const DRAFT_ID = 'current-draft';
 const MAX_RECORDING_MS = 30 * 60 * 1000;
 const elements = Object.fromEntries([
   'record-button', 'record-title', 'record-help', 'record-time', 'record-meter-fill', 'audio-level', 'audio-level-fill', 'capture-message', 'audio-file-input',
   'queue-list', 'queue-empty', 'queue-count', 'sync-button', 'archive-list', 'archive-empty',
-  'network-state', 'storage-status',
+  'network-state', 'storage-status', 'voice-mode', 'write-mode', 'voice-panel', 'write-panel', 'written-note', 'draft-status', 'save-written-note',
+  'settings-button', 'settings-dialog', 'backup-form', 'backup-fields', 'backup-url', 'backup-username', 'backup-password',
+  'clear-backup-password', 'close-settings', 'test-backup', 'backup-status', 'retry-backup',
 ].map((id) => [id, document.getElementById(id)]));
 
 let databasePromise;
@@ -16,12 +20,18 @@ let recordingChunks = [];
 let recordingStartedAt = 0;
 let recordingTimer;
 let syncing = false;
+let draftSaveTimer;
+let transcriptionPoll;
 
 function openDatabase() {
   if (databasePromise) return databasePromise;
   databasePromise = new Promise((resolve, reject) => {
-    const request = indexedDB.open(DB_NAME, 1);
-    request.onupgradeneeded = () => request.result.createObjectStore(STORE_NAME, { keyPath: 'id' });
+    const request = indexedDB.open(DB_NAME, 2);
+    request.onupgradeneeded = () => {
+      const db = request.result;
+      if (!db.objectStoreNames.contains(STORE_NAME)) db.createObjectStore(STORE_NAME, { keyPath: 'id' });
+      if (!db.objectStoreNames.contains(TEXT_STORE_NAME)) db.createObjectStore(TEXT_STORE_NAME, { keyPath: 'id' });
+    };
     request.onsuccess = () => resolve(request.result);
     request.onerror = () => reject(request.error);
   });
@@ -44,6 +54,92 @@ const getQueued = () => queueTransaction('readonly', (store) => store.getAll());
 const putQueued = (recording) => queueTransaction('readwrite', (store) => store.put(recording));
 const deleteQueued = (id) => queueTransaction('readwrite', (store) => store.delete(id));
 
+async function textTransaction(mode, operation) {
+  const db = await openDatabase();
+  return new Promise((resolve, reject) => {
+    const transaction = db.transaction(TEXT_STORE_NAME, mode);
+    const request = operation(transaction.objectStore(TEXT_STORE_NAME));
+    transaction.oncomplete = () => resolve(request?.result);
+    transaction.onerror = () => reject(transaction.error);
+    transaction.onabort = () => reject(transaction.error);
+  });
+}
+
+const getTextRecords = () => textTransaction('readonly', (store) => store.getAll());
+const putTextRecord = (record) => textTransaction('readwrite', (store) => store.put(record));
+const deleteTextRecord = (id) => textTransaction('readwrite', (store) => store.delete(id));
+
+function setCaptureMode(mode) {
+  const writing = mode === 'write';
+  elements['voice-mode'].classList.toggle('active', !writing);
+  elements['write-mode'].classList.toggle('active', writing);
+  elements['voice-mode'].setAttribute('aria-selected', String(!writing));
+  elements['write-mode'].setAttribute('aria-selected', String(writing));
+  elements['voice-panel'].hidden = writing;
+  elements['write-panel'].hidden = !writing;
+}
+
+async function saveDraft() {
+  const text = elements['written-note'].value;
+  try {
+    await putTextRecord({ id: DRAFT_ID, text, updatedAt: Date.now() });
+    elements['draft-status'].textContent = 'Draft saved on this device.';
+    elements['save-written-note'].disabled = !text.trim();
+  } catch {
+    elements['draft-status'].textContent = 'Could not save draft in browser storage. Keep this page open.';
+    elements['save-written-note'].disabled = !text.trim();
+  }
+}
+
+function scheduleDraftSave() {
+  elements['save-written-note'].disabled = !elements['written-note'].value.trim();
+  elements['draft-status'].textContent = 'Saving draft…';
+  clearTimeout(draftSaveTimer);
+  draftSaveTimer = window.setTimeout(saveDraft, 250);
+}
+
+async function queueWrittenNote() {
+  const text = elements['written-note'].value.trim();
+  if (!text || elements['save-written-note'].disabled) return;
+  clearTimeout(draftSaveTimer);
+  const createdAt = new Date().toISOString();
+  const note = { id: crypto.randomUUID(), text, createdAt, createdAtMs: Date.now(), filename: 'Written note' };
+  try {
+    const db = await openDatabase();
+    await new Promise((resolve, reject) => {
+      const transaction = db.transaction(TEXT_STORE_NAME, 'readwrite');
+      const store = transaction.objectStore(TEXT_STORE_NAME);
+      store.put(note);
+      store.delete(DRAFT_ID);
+      transaction.oncomplete = resolve;
+      transaction.onerror = () => reject(transaction.error);
+      transaction.onabort = () => reject(transaction.error);
+    });
+    elements['written-note'].value = '';
+    elements['draft-status'].textContent = navigator.onLine ? 'Saved on this device. Sending to the server…' : 'Saved on this device. It will send when you reconnect.';
+    elements['save-written-note'].disabled = true;
+    await renderQueue();
+    await syncQueue();
+  } catch {
+    elements['draft-status'].textContent = 'Could not queue this note. Your draft is still here; try again.';
+  }
+}
+
+async function restoreDraft() {
+  try {
+    const records = await getTextRecords();
+    const draft = records.find((record) => record.id === DRAFT_ID);
+    if (draft?.text) {
+      elements['written-note'].value = draft.text;
+      elements['draft-status'].textContent = 'Draft restored from this device.';
+      elements['save-written-note'].disabled = false;
+      setCaptureMode('write');
+    }
+  } catch {
+    elements['draft-status'].textContent = 'Browser storage is unavailable. This draft may not survive leaving the page.';
+  }
+}
+
 function setMessage(message, isError = false, isSuccess = false) {
   elements['capture-message'].textContent = message;
   elements['capture-message'].style.color = isError ? 'var(--coral)' : '';
@@ -60,6 +156,94 @@ function updateNetwork() {
   }
 }
 
+async function refreshBackupStatus() {
+  try {
+    const response = await fetch('/api/backup');
+    if (!response.ok) throw new Error('Backup status unavailable');
+    const backup = await response.json();
+    elements['backup-fields'].disabled = backup.managed_by_environment;
+    const managedNotice = backup.managed_by_environment ? 'Settings are managed by environment variables. ' : '';
+    if (backup.last_error) {
+      elements['backup-status'].textContent = `${managedNotice}Backup issue: ${backup.last_error}`;
+    } else if (backup.pending && backup.enabled) {
+      elements['backup-status'].textContent = `${managedNotice}A database snapshot is waiting to upload.`;
+    } else if (backup.pending) {
+      elements['backup-status'].textContent = 'Backup is waiting; configure a WebDAV folder to upload it.';
+    } else if (backup.managed_by_environment) {
+      elements['backup-status'].textContent = `${managedNotice}Latest database snapshot is current.`;
+    } else if (backup.enabled) {
+      elements['backup-status'].textContent = 'WebDAV backup is enabled. Latest database snapshot is current.';
+    } else {
+      elements['backup-status'].textContent = 'WebDAV backup is not configured.';
+    }
+    elements['retry-backup'].hidden = !backup.enabled || !backup.pending;
+    if (!backup.managed_by_environment) {
+      elements['backup-url'].value = backup.url;
+      elements['backup-username'].value = backup.username;
+    }
+    return backup;
+  } catch {
+    elements['backup-status'].textContent = 'Could not load backup status.';
+    return null;
+  }
+}
+
+async function saveBackupConfiguration() {
+  const response = await fetch('/api/backup/config', {
+    method: 'PUT',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify({
+      url: elements['backup-url'].value.trim(),
+      username: elements['backup-username'].value.trim(),
+      password: elements['backup-password'].value,
+      clear_password: String(elements['clear-backup-password'].checked),
+    }),
+  });
+  const result = await response.json();
+  if (!response.ok) throw new Error(result.detail || 'Could not save backup settings.');
+  elements['backup-password'].value = '';
+  elements['clear-backup-password'].checked = false;
+  await refreshBackupStatus();
+}
+
+elements['settings-button'].addEventListener('click', () => {
+  elements['settings-dialog'].showModal();
+  refreshBackupStatus();
+});
+elements['close-settings'].addEventListener('click', () => elements['settings-dialog'].close());
+elements['backup-form'].addEventListener('submit', async (event) => {
+  event.preventDefault();
+  elements['backup-status'].textContent = 'Saving settings…';
+  try {
+    await saveBackupConfiguration();
+  } catch (error) {
+    elements['backup-status'].textContent = error.message;
+  }
+});
+elements['test-backup'].addEventListener('click', async () => {
+  elements['backup-status'].textContent = 'Testing WebDAV…';
+  try {
+    await saveBackupConfiguration();
+    const response = await fetch('/api/backup/test', { method: 'POST' });
+    const result = await response.json();
+    if (!response.ok) throw new Error(result.detail || 'WebDAV test failed.');
+    elements['backup-status'].textContent = result.message;
+  } catch (error) {
+    elements['backup-status'].textContent = error.message;
+  }
+});
+elements['retry-backup'].addEventListener('click', async () => {
+  elements['backup-status'].textContent = 'Queuing backup retry…';
+  try {
+    const response = await fetch('/api/backup/retry', { method: 'POST' });
+    const result = await response.json();
+    if (!response.ok) throw new Error(result.detail || 'Could not retry backup.');
+    await refreshBackupStatus();
+  } catch (error) {
+    elements['backup-status'].textContent = error.message;
+  }
+});
+
 function formatDuration(milliseconds) {
   const seconds = Math.floor(milliseconds / 1000);
   return `${String(Math.floor(seconds / 60)).padStart(2, '0')}:${String(seconds % 60).padStart(2, '0')}`;
@@ -231,12 +415,28 @@ async function syncQueue() {
         const response = await fetch('/api/notes', { method: 'POST', body: form });
         if (!response.ok) throw new Error(`Upload failed: ${response.status}`);
         await deleteQueued(recording.id);
-        setMessage('✓', false, true);
+        setMessage('Upload complete', false, true);
       } catch {
         setMessage('Upload paused. Your recording is still saved on this device.');
         break;
       }
     }
+    const textNotes = (await getTextRecords()).filter((record) => record.id !== DRAFT_ID).sort((a, b) => a.createdAtMs - b.createdAtMs);
+    for (const note of textNotes) {
+      try {
+        const response = await fetch('/api/text-notes', {
+          method: 'POST',
+          headers: { 'Content-Type': 'application/json' },
+          body: JSON.stringify({ id: note.id, text: note.text, created_at: note.createdAt }),
+        });
+        if (!response.ok) throw new Error(`Save failed: ${response.status}`);
+        await deleteTextRecord(note.id);
+        elements['draft-status'].textContent = 'Note saved on the server.';
+      } catch {
+        elements['draft-status'].textContent = 'Upload paused. Your note is still saved on this device.';
+        break;
+      }
+    }
   } finally {
     syncing = false;
     elements['sync-button'].disabled = false;
@@ -250,7 +450,9 @@ function prettyDate(value) {
 }
 
 async function renderQueue() {
-  const recordings = (await getQueued()).sort((a, b) => b.createdAtMs - a.createdAtMs);
+  const audioRecords = await getQueued();
+  const textRecords = (await getTextRecords()).filter((record) => record.id !== DRAFT_ID);
+  const recordings = [...audioRecords, ...textRecords].sort((a, b) => b.createdAtMs - a.createdAtMs);
   elements['queue-list'].replaceChildren();
   elements['queue-count'].textContent = recordings.length;
   elements['queue-empty'].hidden = recordings.length > 0;
@@ -259,7 +461,8 @@ async function renderQueue() {
     item.className = 'queue-item';
     const icon = document.createElement('span');
     icon.className = 'queue-icon';
-    icon.textContent = '◖';
+    const isTextNote = 'text' in recording;
+    icon.textContent = isTextNote ? 'T' : '◖';
     const body = document.createElement('div');
     body.className = 'item-body';
     const top = document.createElement('div');
@@ -279,7 +482,8 @@ async function renderQueue() {
       if (syncing) return;
       remove.disabled = true;
       try {
-        await deleteQueued(recording.id);
+        if (isTextNote) await deleteTextRecord(recording.id);
+        else await deleteQueued(recording.id);
         await renderQueue();
       } catch {
         setMessage('Could not remove the queued recording.', true);
@@ -306,8 +510,18 @@ function createDeleteButton(label) {
 function renderArchive(notes) {
   elements['archive-list'].replaceChildren();
   elements['archive-empty'].hidden = notes.length > 0;
-  if (!navigator.onLine) elements['archive-empty'].textContent = 'Reconnect to view notes awaiting transcription.';
-  else elements['archive-empty'].textContent = 'No notes awaiting transcription.';
+  if (!navigator.onLine) elements['archive-empty'].textContent = 'Reconnect to view saved notes.';
+  else elements['archive-empty'].textContent = 'No saved notes yet.';
+  if (notes.some((note) => note.status === 'transcribing')) {
+    if (!transcriptionPoll) {
+      transcriptionPoll = window.setInterval(() => {
+        if (navigator.onLine && document.visibilityState === 'visible') loadAwaitingNotes();
+      }, 5000);
+    }
+  } else {
+    clearInterval(transcriptionPoll);
+    transcriptionPoll = undefined;
+  }
   for (const note of notes) {
     const item = document.createElement('article');
     item.className = 'archive-item';
@@ -319,15 +533,16 @@ function renderArchive(notes) {
     const name = document.createElement('div');
     name.className = 'item-name';
     name.textContent = note.filename;
+    const isWrittenNote = note.status === 'written';
     const transcript = document.createElement('textarea');
     transcript.className = 'archive-transcript';
-    transcript.placeholder = note.status === 'transcribing' ? 'Transcription in progress…' : 'Transcript not available yet. Add or correct it here.';
+    transcript.placeholder = isWrittenNote ? 'Write or edit your note…' : note.status === 'transcribing' ? 'Transcription in progress…' : 'Transcript not available yet. Add or correct it here.';
     transcript.value = note.transcript;
-    transcript.setAttribute('aria-label', `Transcript for ${note.filename}`);
+    transcript.setAttribute('aria-label', `${isWrittenNote ? 'Note' : 'Transcript'} for ${note.filename}`);
     const save = document.createElement('button');
     save.className = 'save-transcript';
     save.type = 'button';
-    save.textContent = 'SAVE TRANSCRIPT';
+    save.textContent = isWrittenNote ? 'SAVE NOTE' : 'SAVE TRANSCRIPT';
     save.addEventListener('click', async () => {
       save.disabled = true;
       try {
@@ -344,7 +559,20 @@ function renderArchive(notes) {
     });
     const status = document.createElement('div');
     status.className = 'archive-status';
-    status.textContent = 'AWAITING TRANSCRIPTION';
+    status.textContent = isWrittenNote ? 'WRITTEN NOTE' : note.status === 'transcribing' ? 'TRANSCRIBING' : note.status === 'transcribed' ? 'TRANSCRIPT SAVED' : note.status === 'transcription_failed' ? 'TRANSCRIPTION FAILED; AUDIO RETAINED' : note.status === 'empty_transcript' ? 'NO SPEECH DETECTED; AUDIO RETAINED' : 'AWAITING TRANSCRIPTION';
+    if (note.status === 'transcribing') {
+      const progress = document.createElement('div');
+      progress.className = 'transcription-progress';
+      progress.setAttribute('role', 'progressbar');
+      progress.setAttribute('aria-label', 'Transcription in progress');
+      progress.setAttribute('aria-valuemin', '0');
+      progress.setAttribute('aria-valuemax', '100');
+      progress.setAttribute('aria-valuetext', 'In progress');
+      progress.append(document.createElement('span'));
+      body.append(name, transcript, save, status, progress);
+    } else {
+      body.append(name, transcript, save, status);
+    }
     const remove = createDeleteButton(`Delete note ${note.filename}`);
     remove.addEventListener('click', async () => {
       remove.disabled = true;
@@ -357,7 +585,6 @@ function renderArchive(notes) {
         setMessage('Could not delete this note. Please try again.', true);
       }
     });
-    body.append(name, transcript, save, status);
     item.append(date, body, remove);
     elements['archive-list'].append(item);
   }
@@ -369,9 +596,17 @@ async function loadAwaitingNotes() {
     return;
   }
   try {
-    const response = await fetch('/api/notes?status=awaiting_transcription');
-    if (!response.ok) throw new Error('Archive unavailable');
-    renderArchive(await response.json());
+    const responses = await Promise.all([
+      fetch('/api/notes?status=awaiting_transcription'),
+      fetch('/api/notes?status=written'),
+      fetch('/api/notes?status=transcribing'),
+      fetch('/api/notes?status=transcription_failed'),
+      fetch('/api/notes?status=empty_transcript'),
+    ]);
+    if (responses.some((response) => !response.ok)) throw new Error('Archive unavailable');
+    const notes = (await Promise.all(responses.map((response) => response.json()))).flat();
+    notes.sort((a, b) => new Date(b.created_at) - new Date(a.created_at));
+    renderArchive(notes);
   } catch {
     elements['archive-list'].replaceChildren();
     elements['archive-empty'].hidden = false;
@@ -380,6 +615,14 @@ async function loadAwaitingNotes() {
 }
 
 elements['record-button'].addEventListener('click', () => mediaRecorder?.state === 'recording' ? stopRecording() : startRecording());
+elements['voice-mode'].addEventListener('click', () => setCaptureMode('voice'));
+elements['write-mode'].addEventListener('click', () => setCaptureMode('write'));
+elements['written-note'].addEventListener('input', scheduleDraftSave);
+elements['save-written-note'].addEventListener('click', queueWrittenNote);
+window.addEventListener('pagehide', () => {
+  clearTimeout(draftSaveTimer);
+  saveDraft();
+});
 elements['audio-file-input'].addEventListener('change', async (event) => {
   for (const file of event.target.files) await queueAudioFile(file);
   event.target.value = '';
@@ -393,5 +636,6 @@ document.addEventListener('visibilitychange', () => { if (document.visibilitySta
 
 updateNetwork();
 renderQueue().then(syncQueue).catch(() => setMessage('Browser storage is unavailable. Check Safari storage settings.', true));
+restoreDraft();
 loadAwaitingNotes();
 if ('serviceWorker' in navigator) navigator.serviceWorker.register('/sw.js').catch(() => {});

frontend/index.html

@@ -14,11 +14,44 @@
   <body>
     <header class="topbar">
       <a class="brand" href="/" aria-label="Faerro KB"><span class="brand-mark">KB</span><span>Faerro <b>KB</b></span></a>
+      <div class="topbar-actions">
+        <button id="settings-button" class="icon-button settings-button" type="button" title="Backup settings" aria-label="Backup settings">⚙</button>
         <span id="network-state" class="network-state"><i></i> Checking</span>
+      </div>
     </header>
 
+    <dialog id="settings-dialog" class="settings-dialog" aria-labelledby="settings-title">
+      <form id="backup-form" method="dialog">
+        <div class="dialog-heading">
+          <h2 id="settings-title">Database backup</h2>
+          <button id="close-settings" class="icon-button dialog-close" type="button" title="Close settings" aria-label="Close settings">×</button>
+        </div>
+        <p class="settings-copy">A consistent SQLite snapshot is uploaded after each saved transcript. WebDAV receives the full database file each time.</p>
+        <fieldset id="backup-fields">
+          <label for="backup-url">WebDAV folder URL</label>
+          <input id="backup-url" name="url" type="url" placeholder="https://cloud.example/remote.php/dav/files/name/Faerro" autocomplete="url" />
+          <label for="backup-username">Username</label>
+          <input id="backup-username" name="username" type="text" autocomplete="username" />
+          <label for="backup-password">App password</label>
+          <input id="backup-password" name="password" type="password" autocomplete="new-password" placeholder="Leave blank to keep the saved password" />
+          <label class="clear-password"><input id="clear-backup-password" type="checkbox" /> Remove saved password</label>
+          <div class="settings-actions">
+            <button class="save-written-note" type="submit">Save settings</button>
+            <button id="test-backup" class="secondary-button" type="button">Test WebDAV</button>
+          </div>
+        </fieldset>
+        <p id="backup-status" class="backup-status" role="status">Loading backup status…</p>
+        <button id="retry-backup" class="secondary-button retry-backup" type="button" hidden>Retry backup</button>
+      </form>
+    </dialog>
+
     <main>
       <section class="capture" aria-labelledby="capture-title">
+        <div class="capture-modes" role="tablist" aria-label="Note type">
+          <button id="voice-mode" class="capture-mode active" type="button" role="tab" aria-selected="true" aria-controls="voice-panel">Voice</button>
+          <button id="write-mode" class="capture-mode" type="button" role="tab" aria-selected="false" aria-controls="write-panel">Write</button>
+        </div>
+        <div id="voice-panel" role="tabpanel" aria-labelledby="voice-mode">
         <div class="recorder-row">
           <button id="record-button" class="record-button" type="button" aria-label="Start recording">
             <span class="record-dot"></span>
@@ -35,10 +68,18 @@
         <div class="audio-upload-row">
           <label class="audio-upload-button" for="audio-file-input">↑ Upload audio</label>
           <input id="audio-file-input" type="file" accept="audio/*,.mp3,.m4a,.aac,.ogg,.opus,.flac,.wav" multiple />
-          <span>Files stay on this device until the server confirms storage.</span>
         </div>
         <div class="record-meter"><span id="record-meter-fill"></span></div>
         <div id="capture-message" class="capture-message" role="status"></div>
+        </div>
+        <div id="write-panel" class="write-panel" role="tabpanel" aria-labelledby="write-mode" hidden>
+          <label class="write-label" for="written-note">Write a note</label>
+          <textarea id="written-note" class="written-note" placeholder="What’s on your mind?" rows="7"></textarea>
+          <div class="write-actions">
+            <span id="draft-status" class="draft-status" role="status">Draft stays on this device until you save it.</span>
+            <button id="save-written-note" class="save-written-note" type="button" disabled>Save note</button>
+          </div>
+        </div>
       </section>
 
       <section class="queue-section" aria-labelledby="queue-title">
@@ -52,7 +93,7 @@
 
       <section class="archive-section" aria-labelledby="archive-title">
         <div class="section-heading archive-heading">
-          <div><span class="section-kicker">SERVER STORED</span><h2 id="archive-title">Awaiting transcription</h2></div>
+          <div><span class="section-kicker">SERVER STORED</span><h2 id="archive-title">Saved notes</h2></div>
         </div>
         <div id="archive-list" class="archive-list"></div>
         <p id="archive-empty" class="empty-state">Notes awaiting transcription will appear here.</p>

frontend/styles.css

@@ -16,6 +16,7 @@
 * { box-sizing: border-box; }
 body { margin: 0; background: var(--paper); color: var(--ink); font-family: var(--sans); }
 .topbar { height: 68px; padding: 0 max(24px, calc((100vw - 1040px) / 2)); border-bottom: 1px solid var(--line); display: flex; align-items: center; justify-content: space-between; }
+.topbar-actions { display: flex; align-items: center; gap: 18px; }
 .brand { display: flex; align-items: center; gap: 10px; text-decoration: none; color: var(--ink); font-size: 15px; font-weight: 600; }
 .brand b { color: var(--moss); }
 .brand-mark { width: 28px; height: 28px; flex: 0 0 auto; border-radius: 50%; background: var(--moss-dark); color: #fff; display: grid; place-items: center; font: 500 15px var(--serif); }
@@ -24,6 +25,17 @@ body { margin: 0; background: var(--paper); color: var(--ink); font-family: var(
 .network-state.online i { background: #57986b; }
 main { max-width: 1040px; margin: auto; padding: 0 24px; }
 .capture { padding: 54px 0 40px; border-bottom: 1px solid var(--line); background-image: radial-gradient(#c7c9bf 0.55px, transparent 0.55px); background-size: 9px 9px; background-position: right 22px top 28px; background-repeat: no-repeat; }
+.capture-modes { display: flex; width: fit-content; margin: 0 auto 24px; border-bottom: 1px solid var(--line); }
+.capture-mode { min-width: 108px; min-height: 40px; border: 0; border-bottom: 2px solid transparent; padding: 0 16px; color: var(--muted); background: transparent; font: 12px var(--mono); cursor: pointer; }
+.capture-mode.active { border-bottom-color: var(--moss); color: var(--moss-dark); }
+.write-panel { max-width: 590px; margin: auto; }
+.write-label { display: block; margin: 0 0 10px; font: 500 20px var(--serif); }
+.written-note { display: block; width: 100%; min-height: 190px; resize: vertical; border: 1px solid var(--line); padding: 14px; color: var(--ink); background: #fffefa; font: 14px/1.6 var(--sans); }
+.written-note:focus { outline: 2px solid var(--moss); outline-offset: 2px; }
+.write-actions { display: flex; align-items: center; justify-content: space-between; gap: 16px; margin-top: 12px; }
+.draft-status { color: var(--muted); font-size: 11px; }
+.save-written-note { min-height: 40px; flex: 0 0 auto; border: 1px solid var(--moss-dark); padding: 0 16px; color: white; background: var(--moss-dark); font: 12px var(--mono); cursor: pointer; }
+.save-written-note:disabled { opacity: .45; cursor: default; }
 .section-kicker { display: flex; justify-content: space-between; color: var(--muted); font: 10px var(--mono); letter-spacing: 0; }
 h1 { margin: 24px 0 11px; font: 500 clamp(42px, 7vw, 72px)/0.99 var(--serif); letter-spacing: 0; }
 h1 em { color: var(--moss); font-weight: 500; }
@@ -43,9 +55,10 @@ h1 em { color: var(--moss); font-weight: 500; }
 #record-time { color: var(--muted); font: 12px var(--mono); font-variant-numeric: tabular-nums; }
 .record-meter { height: 2px; max-width: 590px; margin-inline: auto; background: #e4e3dc; }
 .record-meter span { display: block; height: 100%; width: 0; background: var(--coral); transition: width .25s linear; }
-.capture-message { height: 20px; max-width: 590px; margin-inline: auto; padding-top: 6px; color: var(--muted); font-size: 11px; text-align: center; }
-.capture-message.upload-confirmed { color: forestgreen; font-size: 16px; }
-.audio-upload-row { max-width: 590px; margin: 14px auto 0; display: flex; align-items: center; justify-content: center; gap: 12px; }
+.capture-message { min-height: 20px; max-width: 590px; margin: 8px auto 0; padding-top: 6px; color: var(--muted); font-size: 11px; text-align: center; }
+.capture-message.upload-confirmed { display: flex; align-items: center; justify-content: center; gap: 8px; width: 100%; color: forestgreen; font-size: 16px; }
+.capture-message.upload-confirmed::after { content: '✓'; color: forestgreen; font-size: 1.05em; line-height: 1; }
+.audio-upload-row { max-width: 590px; margin: 10px auto 10 px; display: flex; align-items: center; justify-content: center; gap: 12px; }
 .audio-upload-button { display: inline-flex; min-height: 36px; align-items: center; gap: 7px; border: 1px solid var(--line); padding: 0 12px; color: var(--moss-dark); background: #fffefa; font-size: 12px; cursor: pointer; }
 .audio-upload-button:hover { border-color: var(--moss); }
 #audio-file-input { position: absolute; width: 1px; height: 1px; overflow: hidden; clip: rect(0, 0, 0, 0); white-space: nowrap; clip-path: inset(50%); }
@@ -56,6 +69,23 @@ h1 em { color: var(--moss); font-weight: 500; }
 h2 { margin: 8px 0 0; font: 500 25px/1.1 var(--serif); }
 #queue-count { display: inline-grid; place-items: center; width: 23px; height: 23px; margin-left: 5px; border-radius: 50%; background: #e6e7df; color: var(--moss-dark); font: 11px var(--mono); vertical-align: 3px; }
 .icon-button { position: absolute; right: 0; width: 38px; height: 38px; border: 1px solid var(--line); background: transparent; color: var(--moss-dark); font-size: 22px; cursor: pointer; }
+.settings-button { position: static; flex: 0 0 auto; font-size: 18px; }
+.settings-dialog { width: min(520px, calc(100% - 32px)); max-height: min(720px, calc(100% - 32px)); border: 1px solid var(--line); padding: 24px; color: var(--ink); background: var(--paper); }
+.settings-dialog::backdrop { background: rgb(32 39 36 / 45%); }
+.dialog-heading { display: flex; align-items: center; justify-content: space-between; gap: 16px; }
+.dialog-heading h2 { margin: 0; }
+.dialog-close { position: static; flex: 0 0 auto; font-size: 24px; }
+.settings-copy { margin: 16px 0; color: #606b63; font-size: 12px; line-height: 1.5; }
+#backup-fields { display: grid; gap: 8px; margin: 0; border: 0; padding: 0; }
+#backup-fields:disabled { opacity: .62; }
+#backup-fields > label { margin-top: 6px; font: 10px var(--mono); color: var(--muted); }
+#backup-fields > input { width: 100%; min-width: 0; height: 40px; border: 1px solid var(--line); padding: 0 10px; color: var(--ink); background: #fffefa; font: 12px var(--sans); }
+#backup-fields > input:focus { outline: 2px solid var(--moss); outline-offset: 1px; }
+.clear-password { display: flex; align-items: center; gap: 8px; }
+.settings-actions { display: flex; flex-wrap: wrap; gap: 9px; margin-top: 8px; }
+.secondary-button { min-height: 40px; border: 1px solid var(--line); padding: 0 13px; color: var(--moss-dark); background: transparent; font: 11px var(--mono); cursor: pointer; }
+.backup-status { min-height: 20px; margin: 16px 0 0; color: var(--muted); font-size: 11px; line-height: 1.5; overflow-wrap: anywhere; }
+.retry-backup { margin-top: 8px; }
 .icon-button:disabled { opacity: .4; cursor: wait; }
 .queue-list, .archive-list { list-style: none; margin: 16px 0 0; padding: 0; }
 .queue-item, .archive-item { display: flex; align-items: flex-start; gap: 15px; padding: 14px 0; border-top: 1px solid #e3e4dd; animation: reveal .35s ease both; }
@@ -75,20 +105,28 @@ h2 { margin: 8px 0 0; font: 500 25px/1.1 var(--serif); }
 .archive-transcript:focus { border-bottom-color: var(--moss); }
 .save-transcript { margin-top: 7px; border: 0; padding: 0; color: var(--moss-dark); background: transparent; font: 11px var(--mono); cursor: pointer; }
 .archive-status { color: var(--muted); font: 10px var(--mono); margin-top: 7px; }
+.transcription-progress { width: min(240px, 100%); height: 3px; margin-top: 9px; overflow: hidden; background: #e4e3dc; }
+.transcription-progress span { display: block; width: 34%; height: 100%; background: var(--moss); animation: transcription-progress 1.4s ease-in-out infinite; }
 footer { max-width: 1040px; margin: auto; padding: 18px 24px calc(18px + env(safe-area-inset-bottom)); display: flex; justify-content: space-between; gap: 20px; color: var(--muted); font: 9px var(--mono); }
 @keyframes reveal { from { opacity: 0; transform: translateY(5px); } to { opacity: 1; transform: translateY(0); } }
+@keyframes transcription-progress { from { transform: translateX(-110%); } to { transform: translateX(300%); } }
 @media (max-width: 600px) {
   .topbar { height: 58px; padding: 0 18px; }
+  .topbar-actions { gap: 10px; }
   main { padding: 0 18px; }
   .capture { padding: 38px 0 30px; background-position: right 8px top 25px; }
+  .capture-mode { min-width: 100px; }
+  .write-actions { align-items: flex-start; }
   h1 { font-size: 48px; }
   .recorder-row { gap: 12px; padding-right: 12px; }
   .record-button { width: 46px; height: 46px; }
   .record-copy strong { font-size: 12px; }
   .record-copy span { font-size: 10px; }
-  .audio-upload-row { align-items: flex-start; flex-direction: column; }
+  .audio-upload-row { align-items: center; flex-direction: column; }
+  .audio-upload-row > span { text-align: center; }
   h2 { font-size: 23px; }
   .archive-date { width: 60px; font-size: 9px; }
   footer { padding-left: 18px; padding-right: 18px; font-size: 8px; }
+  .settings-dialog { padding: 18px; }
 }
 @media (prefers-reduced-motion: reduce) { *, *::before, *::after { animation-duration: .01ms !important; transition-duration: .01ms !important; } }

frontend/sw.js

@@ -1,4 +1,4 @@
-const CACHE_NAME = 'faerro-kb-shell-v2';
+const CACHE_NAME = 'faerro-kb-shell-v4';
 const APP_SHELL = ['/', '/styles.css', '/app.js', '/manifest.webmanifest', '/favicon.svg'];
 
 self.addEventListener('install', (event) => {

scripts/publish-image.sh

@@ -1,7 +1,8 @@
 #!/usr/bin/env bash
 set -euo pipefail
 
-image="gitea.faerro.it/andrea/faerro-kb"
+domain="registry.gitea.faerro.it"
+image="$domain/andrea/faerro-kb"
 repo_root="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
 bump="patch"
 
@@ -102,7 +103,7 @@ if [[ -n "$registry_username" || -n "$registry_token" ]]; then
     echo "Set both GITEA_USERNAME and GITEA_TOKEN in .env to log in automatically." >&2
     exit 1
   fi
-  if ! printf '%s' "$registry_token" | docker login --username "$registry_username" --password-stdin gitea.faerro.it; then
+  if ! printf '%s' "$registry_token" | docker login --username "$registry_username" --password-stdin "$domain"; then
     unset registry_token
     exit 1
   fi