feat(release): prepare for next release

.dockerignore

@@ -65,3 +65,4 @@ website/.output/
 website/.tanstack/
 website/.wrangler/
 website/.env*
+.playwright-mcp

.env.example

@@ -1,10 +1,11 @@
 # Example notewise runtime configuration
 #
 # This project reads configuration from:
-#   ~/.notewise/config.env
+#   ~/.notewise/config.db (managed via `notewise setup`/`notewise config`)
 #
 # The repository root .env file is not read automatically by the application.
-# Copy the keys you need into ~/.notewise/config.env or export them from your shell.
+# Set the keys you need with `notewise config set KEY VALUE`, run `notewise
+# setup`, or export them from your shell.
 
 DEFAULT_MODEL=gemini/gemini-2.5-flash
 # Allow models missing from the bundled supported-model catalog (e.g. OpenRouter stealth endpoints).
@@ -50,9 +51,10 @@ GEMINI_API_KEY=your_gemini_api_key_here
 # JINA_API_KEY=your_jina_api_key_here
 
 # Custom OpenAI-compatible endpoint registry
-# Run `notewise setup` to add an endpoint, discover its models, and verify a selection.
-# Store every profile in one compact JSON array. This value contains credentials; use
-# placeholder values only in shared files and keep real values in ~/.notewise/config.env.
+# Manage saved endpoints with `notewise inference list|add|update|delete` -- each
+# is stored as its own row in ~/.notewise/config.db, not as an env var. The
+# CUSTOM_LLM_ENDPOINTS variable below only overrides the whole registry for one
+# process (a compact JSON array); use placeholder values only in shared files.
 # CUSTOM_LLM_ENDPOINTS='[{"name":"team-gateway","base_url":"https://gateway.example.com/v1","api_key":"example-team-token"},{"name":"lab-server","base_url":"https://lab.example.net/v1","api_key":"example-lab-token"}]'
 # Custom models are always named <name>/<model-id>.
 # DEFAULT_MODEL=team-gateway/your-model-id
@@ -70,4 +72,4 @@ GEMINI_API_KEY=your_gemini_api_key_here
 # Notes
 # - The current config loader supports the keys above.
 # - default_languages, chunk_size, and chunk_overlap are code defaults today,
-#   not config.env keys.
+#   not config.db keys.

.github/workflows/release.yml

@@ -104,7 +104,7 @@ jobs:
           uv run pyinstaller `
             --noconfirm `
             --clean `
-            --onefile `
+            --onedir `
             --name notewise `
             --collect-all litellm `
             --collect-all tiktoken `
@@ -119,17 +119,18 @@ jobs:
           $artifactName = "${{ matrix.artifact_name }}"
           $archiveExt = "${{ matrix.archive_ext }}"
           $archName = "${{ runner.arch }}".ToLowerInvariant()
-          $binaryName = if ("${{ runner.os }}" -eq "Windows") { "notewise.exe" } else { "notewise" }
           $archiveBase = "notewise-$releaseTag-$artifactName-$archName"
 
+          # PyInstaller --onedir emits dist/notewise/ containing the entry
+          # binary plus its _internal/ support files; the whole directory
+          # must ship together so the binary can find its dependencies.
           New-Item -ItemType Directory -Path release -Force | Out-Null
-          Copy-Item "dist/$binaryName" "release/$binaryName"
 
           if ($archiveExt -eq "zip") {
-            Compress-Archive -Path "release/$binaryName" -DestinationPath "release/$archiveBase.zip" -Force
+            Compress-Archive -Path "dist/notewise/*" -DestinationPath "release/$archiveBase.zip" -Force
           }
           else {
-            tar -czf "release/$archiveBase.tar.gz" -C release $binaryName
+            tar -czf "release/$archiveBase.tar.gz" -C "dist/notewise" .
           }
       - name: Upload binary artifact
         uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7

.gitignore

@@ -72,3 +72,4 @@ notewise.tape
 .beads/*.db
 .beads-credential-key
 .beads
+.playwright-mcp

.pre-commit-config.yaml

@@ -28,6 +28,7 @@ repos:
       - id: check-executables-have-shebangs # scripts without shebangs fail silently
       - id: check-shebang-scripts-are-executable # inverse: shebang ⟹ must be +x
       - id: check-added-large-files
+        exclude: ^src/notewise/ui/fonts/.*\.ttf$ # bundled Noto Sans PDF fonts
       - id: debug-statements
       - id: detect-private-key
       - id: end-of-file-fixer

AGENTS.md

@@ -37,6 +37,7 @@ src/notewise/
 ├── ui/oauth_flow.py    ← LiteLLM OAuth/device-flow login helpers
 ├── ui/setup_wizard.py  ← Interactive provider/config setup wizard
 ├── ui/litellm_models_snapshot.json ← Bundled text-only LiteLLM setup catalog
+├── ui/fonts/           ← Bundled Noto Sans TTFs used by pipeline/_documents.py PDF export
 └── youtube/            ← Transcript & metadata extraction; no LLM calls here
 ```
 

docs/config/configuration.mdx

@@ -1,28 +1,34 @@
 ---
 title: "Configuration"
 sidebarTitle: "Configuration"
-description: "Understand NoteWise config files, environment variables, defaults, and command overrides."
-keywords: ["notewise config", "config.env", "NOTEWISE_HOME", "DEFAULT_MODEL"]
+description: "Understand NoteWise config storage, environment variables, defaults, and command overrides."
+keywords: ["notewise config", "config.db", "NOTEWISE_HOME", "DEFAULT_MODEL"]
 ---
 
-NoteWise reads settings from code defaults, `config.env`, environment variables, and command flags.
+NoteWise reads settings from code defaults, `config.db`, environment variables, and command flags.
 
 ## State directory
 
 By default, state lives under `~/.notewise`.
 
 | File or folder                   | Purpose                                  |
 | -------------------------------- | ---------------------------------------- |
-| `~/.notewise/config.env`         | User config written by `notewise setup`. |
+| `~/.notewise/config.db`          | User config written by `notewise setup`/`config`. |
 | `~/.notewise/.notewise_cache.db` | SQLite cache and run history.            |
 | `~/.notewise/logs/`              | Session logs.                            |
 | `~/.notewise/oauth/`             | Default OAuth token storage.             |
 
 Set `NOTEWISE_HOME` to move this state root.
 
+<Note>
+  Older installs stored config in a `~/.notewise/config.env` text file. On the
+  first run after upgrading, NoteWise imports any existing `config.env` into
+  `config.db` and deletes the file — no manual migration needed.
+</Note>
+
 ## Practical precedence
 
-For a command run, command-line flags win. For `OUTPUT_DIR`, the value in `config.env` is used unless `--output` is passed. Other settings use environment variables, then `config.env`, then code defaults.
+For a command run, command-line flags win. For `OUTPUT_DIR`, the value in `config.db` is used unless `--output` is passed. Other settings use environment variables, then `config.db`, then code defaults.
 
 ```bash
 notewise process "https://youtu.be/VIDEO_ID" --model gemini/gemini-2.5-flash --output ./notes
@@ -44,13 +50,15 @@ cannot use LiteLLM provider prefixes. Base URLs must be absolute HTTPS URLs, exc
 explicit loopback endpoints may use HTTP. Setup accepts a URL with or without `/v1`
 and stores it with the `/v1` suffix.
 
-The registry is one compact JSON value in `~/.notewise/config.env`. Each object has
-`name`, `base_url`, and `api_key` fields. This safe two-profile example uses
-placeholder credentials:
+The registry is stored as one row per endpoint (`name`, `base_url`, `api_key`) in a
+dedicated table in `~/.notewise/config.db`, managed with `notewise inference
+list|add|update|delete`. You can also override the whole registry for one process
+with the `CUSTOM_LLM_ENDPOINTS` environment variable, a compact JSON array with the
+same fields — this safe two-profile example uses placeholder credentials:
 
-```dotenv
-CUSTOM_LLM_ENDPOINTS='[{"name":"team-gateway","base_url":"https://gateway.example.com/v1","api_key":"example-team-token"},{"name":"lab-server","base_url":"https://lab.example.net/v1","api_key":"example-lab-token"}]'
-DEFAULT_MODEL=team-gateway/your-model-id
+```bash
+export CUSTOM_LLM_ENDPOINTS='[{"name":"team-gateway","base_url":"https://gateway.example.com/v1","api_key":"example-team-token"},{"name":"lab-server","base_url":"https://lab.example.net/v1","api_key":"example-lab-token"}]'
+export DEFAULT_MODEL=team-gateway/your-model-id
 ```
 
 Custom models are always named `<name>/<model-id>`. When that name exactly matches
@@ -73,11 +81,11 @@ copies its credentials into ambient environment variables.
 | `YOUTUBE_COOKIE_FILE`         | unset                     | Default Netscape cookies file path. |
 | `ALLOW_UNLISTED_MODELS`       | `false`                   | Permit out-of-catalog models.       |
 
-Provider API keys and provider auth keys are also accepted in `config.env` when they are listed in source constants.
+Provider API keys and provider auth keys are also accepted in `config.db` (via `notewise config set KEY VALUE`) when they are listed in source constants. Omit `VALUE` for a sensitive key to be prompted for it with hidden input instead of typing it as a plain CLI argument.
 
 <Note>
   `chunk_size`, `chunk_overlap`, and `max_concurrent_chapters` are code-default
-  settings, not normal `config.env` keys.
+  settings, not normal `config.db` keys.
 </Note>
 
 ## Commands
@@ -87,8 +95,20 @@ notewise setup
 notewise setup --show
 notewise setup --force
 notewise config
+notewise config keys
+notewise config get DEFAULT_MODEL
+notewise config set DEFAULT_MODEL gemini/gemini-2.5-flash
+notewise config unset MAX_TOKENS
 notewise config-path
 notewise edit-config
 ```
 
-`notewise config` masks secrets before printing settings.
+`notewise config` (no arguments) masks secrets before printing all settings.
+`notewise config keys` lists every key `get`/`set`/`unset` accept, since the
+full set (provider API keys, provider auth keys, and core settings) isn't
+obvious up front. `notewise config get/set/unset` read or write one key at a
+time; `set` validates the new value immediately and reports an error without
+leaving the process in a broken state if it's invalid (e.g. `TEMPERATURE` out
+of range). `edit-config`
+opens the current settings as an editable env-style file in your `$EDITOR`, then
+re-saves whatever you leave in it — including removing lines you delete.

docs/config/oauth.mdx

@@ -5,7 +5,7 @@ description: "Sign in to ChatGPT or GitHub Copilot through LiteLLM OAuth/device-
 keywords: ["notewise auth login", "chatgpt", "github copilot", "oauth", "codex"]
 ---
 
-ChatGPT subscription and GitHub Copilot use LiteLLM OAuth/device-flow login. They do not use static API keys in `config.env`. User configuration is stored at `~/.notewise/config.env`; do not create a repo-root `.env` file for OAuth setup.
+ChatGPT subscription and GitHub Copilot use LiteLLM OAuth/device-flow login. They do not use static API keys in `config.db`. User configuration is stored at `~/.notewise/config.db`; do not create a repo-root `.env` file for OAuth setup.
 
 ## Login commands
 

docs/config/providers.mdx

@@ -57,6 +57,17 @@ The source default is `gemini/gemini-2.5-flash`.
 | Cloudflare        | `CLOUDFLARE_API_KEY` plus `CLOUDFLARE_ACCOUNT_ID` |
 | Databricks        | `DATABRICKS_API_KEY` plus `DATABRICKS_API_BASE`   |
 | Bedrock           | AWS credential chain                              |
+| AI21              | `AI21_API_KEY`                                    |
+| Cerebras          | `CEREBRAS_API_KEY`                                |
+| DashScope         | `DASHSCOPE_API_KEY`                               |
+| DeepInfra         | `DEEPINFRA_API_KEY`                                |
+| Hugging Face      | `HUGGINGFACE_API_KEY`                             |
+| Jina AI           | `JINA_API_KEY`                                    |
+| Novita AI         | `NOVITA_API_KEY`                                  |
+| NVIDIA NIM        | `NVIDIA_NIM_API_KEY`                              |
+| Replicate         | `REPLICATE_API_KEY`                               |
+| SambaNova         | `SAMBANOVA_API_KEY`                               |
+| Voyage AI         | `VOYAGE_API_KEY`                                  |
 
 <Warning>
   Never share API keys, OAuth tokens, cookies, raw prompts, or provider

docs/index.mdx

@@ -83,4 +83,4 @@ Most video summarizers hide the result in a web app. NoteWise is built for peopl
 
 ## Source-backed defaults
 
-These docs track NoteWise `1.5.0`. Source defaults are Python `>=3.11`, model `gemini/gemini-2.5-flash`, output directory `./output`, output format `md`, temperature `0.7`, max concurrent videos `5`, YouTube request limit `10/min`, chunk size `4000`, overlap `200`, and max concurrent chapters `3`.
+These docs track NoteWise `1.6.0`. Source defaults are Python `>=3.11`, model `gemini/gemini-2.5-flash`, output directory `./output`, output format `md`, temperature `0.7`, max concurrent videos `5`, YouTube request limit `10/min`, chunk size `4000`, overlap `200`, and max concurrent chapters `3`.

docs/llms-full.txt

@@ -2,7 +2,7 @@
 
 NoteWise is a Python CLI (`>=3.11`) that converts YouTube videos, playlists, and batch files into local study materials. It reads metadata and transcripts, sends content through a LiteLLM-backed model, and writes files the user controls: Markdown notes by default, with optional HTML, PDF, DOCX, quizzes, and transcript exports.
 
-Current documented version: `1.5.0`.
+Current documented version: `1.6.0`.
 
 Canonical public docs base: `https://notewise.click/docs`
 
@@ -122,7 +122,7 @@ Create config:
 notewise setup
 ```
 
-The setup wizard writes supported keys to `~/.notewise/config.env` unless `NOTEWISE_HOME` points somewhere else.
+The setup wizard writes supported keys to `~/.notewise/config.db` unless `NOTEWISE_HOME` points somewhere else.
 
 Process one public YouTube video:
 
@@ -298,20 +298,20 @@ Persist `/home/notewise/.notewise` if you want cache, logs, config, and OAuth to
 
 ## Configuration
 
-NoteWise reads settings from code defaults, `config.env`, environment variables, and command flags.
+NoteWise reads settings from code defaults, `config.db`, environment variables, and command flags.
 
 By default, state lives under `~/.notewise`.
 
 | File or folder | Purpose |
 | --- | --- |
-| `~/.notewise/config.env` | User config written by `notewise setup`. |
+| `~/.notewise/config.db` | User config written by `notewise setup`. |
 | `~/.notewise/.notewise_cache.db` | SQLite cache and run history. |
 | `~/.notewise/logs/` | Session logs. |
 | `~/.notewise/oauth/` | Default OAuth token storage. |
 
 Set `NOTEWISE_HOME` to move the state root.
 
-For a command run, command-line flags win. Then environment variables, then `config.env`, then code defaults.
+For a command run, command-line flags win. For `OUTPUT_DIR`, the value in `config.db` is used unless `--output` is passed. Other settings use environment variables, then `config.db`, then code defaults.
 
 ```bash
 notewise process "https://youtu.be/VIDEO_ID" --model gemini/gemini-2.5-flash --output ./notes
@@ -330,9 +330,9 @@ Common config keys:
 | `MAX_TOKENS` | unset | Optional LLM max output tokens. |
 | `YOUTUBE_COOKIE_FILE` | unset | Default Netscape cookies file path. |
 
-Provider API keys and provider auth keys are also accepted in `config.env` when they are listed in source constants.
+Provider API keys and provider auth keys are also accepted in `config.db` when they are listed in source constants.
 
-`chunk_size`, `chunk_overlap`, and `max_concurrent_chapters` are code-default settings, not normal `config.env` keys.
+`chunk_size`, `chunk_overlap`, and `max_concurrent_chapters` are code-default settings, not normal `config.db` keys.
 
 Saved custom endpoints use `<name>/<model-id>`. `notewise process --model <name>/<model-id>` automatically selects that profile's base URL and API key, then sends LiteLLM `openai/<model-id>`. Custom names cannot use LiteLLM provider prefixes; remote endpoints require HTTPS; and changing `--base-url` requires a new `--api-key` instead of reusing a saved credential. Manage profiles with `notewise inference list|add|update|delete`; never expose the secret-bearing `CUSTOM_LLM_ENDPOINTS` value.
 
@@ -387,14 +387,25 @@ Credential map:
 | Cloudflare | `CLOUDFLARE_API_KEY` plus `CLOUDFLARE_ACCOUNT_ID` |
 | Databricks | `DATABRICKS_API_KEY` plus `DATABRICKS_API_BASE` |
 | Bedrock | AWS credential chain |
+| AI21 | `AI21_API_KEY` |
+| Cerebras | `CEREBRAS_API_KEY` |
+| DashScope | `DASHSCOPE_API_KEY` |
+| DeepInfra | `DEEPINFRA_API_KEY` |
+| Hugging Face | `HUGGINGFACE_API_KEY` |
+| Jina AI | `JINA_API_KEY` |
+| Novita AI | `NOVITA_API_KEY` |
+| NVIDIA NIM | `NVIDIA_NIM_API_KEY` |
+| Replicate | `REPLICATE_API_KEY` |
+| SambaNova | `SAMBANOVA_API_KEY` |
+| Voyage AI | `VOYAGE_API_KEY` |
 
 Never share API keys, OAuth tokens, cookies, raw prompts, or provider payloads. Logs and error reports should stay redacted.
 
 When a model string has no explicit provider prefix, NoteWise can infer common key requirements from model names such as Gemini, GPT/OpenAI, Claude, Groq, Grok/xAI, Mistral, Cohere/Command, and DeepSeek.
 
 ## OAuth login
 
-ChatGPT subscription and GitHub Copilot use LiteLLM OAuth/device-flow login. They do not use static API keys in `config.env`. User configuration is stored at `~/.notewise/config.env`; do not create a repo-root `.env` file for OAuth setup.
+ChatGPT subscription and GitHub Copilot use LiteLLM OAuth/device-flow login. They do not use static API keys in `config.db`. User configuration is stored at `~/.notewise/config.db`; do not create a repo-root `.env` file for OAuth setup.
 
 Login commands:
 
@@ -599,7 +610,7 @@ Output formats:
 | --- | --- |
 | `md` | Raw Markdown notes. Default. |
 | `html` | Markdown rendered with built-in CSS. |
-| `pdf` | Uses `fpdf`; Latin-script text only. Unsupported Unicode falls back to Markdown. |
+| `pdf` | Uses `fpdf2` with a bundled Noto Sans font (Latin, Cyrillic, Greek, Vietnamese, Devanagari). Other scripts (e.g. Arabic, Hebrew, CJK), or any renderer failure, fall back to Markdown for that video instead of failing the run. |
 | `docx` | Uses `html2docx` and `python-docx`. |
 
 Example output layout:

docs/llms.txt

@@ -1,6 +1,6 @@
 # NoteWise docs for LLMs
 
-NoteWise is a Python CLI (`>=3.11`) that converts YouTube videos, playlists, and batch files into local study notes through LiteLLM providers. Current documented version: `1.5.0`.
+NoteWise is a Python CLI (`>=3.11`) that converts YouTube videos, playlists, and batch files into local study notes through LiteLLM providers. Current documented version: `1.6.0`.
 
 Canonical public docs base: `https://notewise.click/docs`
 
@@ -44,7 +44,7 @@ Important `process` flags:
 
 Config truth:
 
-- Config file: `~/.notewise/config.env`
+- Config file: `~/.notewise/config.db`
 - `NOTEWISE_HOME` changes the state root.
 - Practical precedence: CLI flags, then environment variables, then config file, then defaults.
 - Common keys: `DEFAULT_MODEL`, `CUSTOM_LLM_ENDPOINTS`, `OUTPUT_DIR`, `MAX_CONCURRENT_VIDEOS`, `YOUTUBE_REQUESTS_PER_MINUTE`, `TEMPERATURE`, `MAX_TOKENS`, `YOUTUBE_COOKIE_FILE`, provider API/auth keys.
@@ -70,6 +70,17 @@ Provider truth:
 - Cloudflare needs `CLOUDFLARE_API_KEY` and `CLOUDFLARE_ACCOUNT_ID`
 - Databricks needs `DATABRICKS_API_KEY` and `DATABRICKS_API_BASE`
 - Bedrock uses the AWS credential chain
+- AI21 `AI21_API_KEY`
+- Cerebras `CEREBRAS_API_KEY`
+- DashScope `DASHSCOPE_API_KEY`
+- DeepInfra `DEEPINFRA_API_KEY`
+- Hugging Face `HUGGINGFACE_API_KEY`
+- Jina AI `JINA_API_KEY`
+- Novita AI `NOVITA_API_KEY`
+- NVIDIA NIM `NVIDIA_NIM_API_KEY`
+- Replicate `REPLICATE_API_KEY`
+- SambaNova `SAMBANOVA_API_KEY`
+- Voyage AI `VOYAGE_API_KEY`
 
 OAuth truth:
 
@@ -83,7 +94,7 @@ Output truth:
 - Cache check happens before metadata/transcript unless `--force` is used.
 - Videos with YouTube chapters use chapter-aware generation.
 - Chapter videos default to bundled notes; per-chapter folders require `--chapter-directory-output`.
-- PDF uses fpdf and Latin-compatible text; unsupported Unicode falls back to Markdown.
+- PDF uses fpdf2 with a bundled Noto Sans font (Latin, Cyrillic, Greek, Vietnamese, Devanagari); other scripts or renderer failures fall back to Markdown.
 - `cache clear` deletes the SQLite DB and sidecars, not generated notes.
 - Logs are structlog key-value text, not JSON.