Refactor case pages into two distinct routes

This commit separates the case detail page into two distinct routes:
`/web/cases/{case_id}` for the main case information and document, and
`/web/cases/{case_id}/recordings` for a dedicated view of audio files
and their transcripts.

This change improves the organization and clarity of the case viewing
experience by segmenting the related but distinct information into their
own UI sections.

server/src/routes/user_web.rs

@@ -15,6 +15,7 @@ use crate::auth::AuthenticatedWebUser;
 use crate::case_id::{CaseId, CaseIdPath};
 use crate::config::Config;
 use crate::error::AppError;
+use crate::routes::case_actions::read_document;
 use crate::routes::web::{RecordingView, scan_recordings};
 use crate::transcribe::recovery as transcribe_recovery;
 
@@ -145,6 +146,38 @@ struct CaseDetailTemplate {
     is_admin: bool,
 }
 
+#[derive(Template)]
+#[template(path = "case_page.html")]
+struct CasePageTemplate {
+    slug: String,
+    case_id: String,
+    case_id_short: String,
+    oneliner: Option<String>,
+    /// Rendered document HTML (already passed through `md_to_html`). `Some`
+    /// iff `document.md` exists at render time — template prioritises this
+    /// over status/analyzing placeholders.
+    document_html: Option<String>,
+    recordings_count: usize,
+    transcribed_count: usize,
+    can_analyze: bool,
+    llm_missing: bool,
+    analyzing: bool,
+    has_document: bool,
+    is_admin: bool,
+}
+
+#[derive(Template)]
+#[template(path = "case_recordings.html")]
+struct CaseRecordingsTemplate {
+    slug: String,
+    case_id: String,
+    case_id_short: String,
+    oneliner: Option<String>,
+    recordings: Vec<RecordingView>,
+    transcribe_busy: bool,
+    is_admin: bool,
+}
+
 /// Flags derived from filesystem state + config.
 /// `can_analyze` covers both first analysis and re-analysis — same precondition
 /// (all non-failed recordings transcribed, LLM configured, no analysis in
@@ -293,6 +326,120 @@ pub async fn handle_case_detail(
     .map_err(|e| AppError::Internal(format!("Template render failed: {e}")))
 }
 
+/// GET /web/cases/{case_id}
+///
+/// Canonical case page. Renders the document inline if present; otherwise
+/// shows status (analyzing / placeholder for empty / recordings-summary).
+/// Action buttons (Analyze/Reanalyze/Reset/Delete) live here, not on the
+/// recordings sub-page.
+pub async fn handle_case_page(
+    user: AuthenticatedWebUser,
+    State(config): State<Arc<Config>>,
+    State(pipeline): State<PipelineState>,
+    CaseIdPath(case_id): CaseIdPath,
+) -> Result<Html<String>, AppError> {
+    let user_root = config.data_path.join(&user.slug);
+    pipeline.heal_orphans_if_idle(&user_root, &user.slug).await;
+
+    let case_dir = locate_case_or_404(
+        &user_root,
+        &case_id,
+        &user.slug,
+        "case page (possible IDOR probe)",
+    )
+    .await?;
+    let case_id_str = case_id.to_string();
+    info!(slug = %user.slug, case_id = %case_id, "case page viewed");
+
+    // Read document first; if it's on disk we display it regardless of what
+    // the `analyzing` flag would otherwise say. Resolves the narrow race
+    // where the worker finishes between flag check and template render.
+    let document_html = read_document(&case_dir)
+        .await
+        .map(|md| crate::analyze::render::md_to_html(&md));
+
+    let recordings = scan_recordings(&case_dir).await;
+    let oneliner = tokio::fs::read_to_string(case_dir.join("oneliner.txt"))
+        .await
+        .ok()
+        .map(|s| s.trim().to_string())
+        .filter(|s| !s.is_empty());
+
+    let a_busy = pipeline.analyze_busy.0.load(Ordering::Acquire);
+    let flags = compute_flags(&case_dir, &recordings, config.llm_configured(), a_busy).await;
+
+    let recordings_count = recordings.len();
+    let transcribed_count = recordings.iter().filter(|r| r.transcript.is_some()).count();
+    let case_id_short = case_id_str.chars().take(8).collect();
+    let is_admin = user.is_admin();
+
+    CasePageTemplate {
+        slug: user.slug,
+        case_id: case_id_str,
+        case_id_short,
+        oneliner,
+        document_html,
+        recordings_count,
+        transcribed_count,
+        can_analyze: flags.can_analyze,
+        llm_missing: flags.llm_missing,
+        analyzing: flags.analyzing,
+        has_document: flags.has_document,
+        is_admin,
+    }
+    .render()
+    .map(Html)
+    .map_err(|e| AppError::Internal(format!("Template render failed: {e}")))
+}
+
+/// GET /web/cases/{case_id}/recordings
+///
+/// Read-only sub-page showing all `.m4a` + transcript pairs for the case.
+/// Useful for power-users/admins; not part of the day-to-day workflow.
+pub async fn handle_case_recordings(
+    user: AuthenticatedWebUser,
+    State(config): State<Arc<Config>>,
+    State(pipeline): State<PipelineState>,
+    CaseIdPath(case_id): CaseIdPath,
+) -> Result<Html<String>, AppError> {
+    let user_root = config.data_path.join(&user.slug);
+    pipeline.heal_orphans_if_idle(&user_root, &user.slug).await;
+
+    let case_dir = locate_case_or_404(
+        &user_root,
+        &case_id,
+        &user.slug,
+        "case recordings (possible IDOR probe)",
+    )
+    .await?;
+    let case_id_str = case_id.to_string();
+    info!(slug = %user.slug, case_id = %case_id, "case recordings viewed");
+
+    let recordings = scan_recordings(&case_dir).await;
+    let oneliner = tokio::fs::read_to_string(case_dir.join("oneliner.txt"))
+        .await
+        .ok()
+        .map(|s| s.trim().to_string())
+        .filter(|s| !s.is_empty());
+
+    let t_busy = pipeline.transcribe_busy.0.load(Ordering::Acquire);
+    let case_id_short = case_id_str.chars().take(8).collect();
+    let is_admin = user.is_admin();
+
+    CaseRecordingsTemplate {
+        slug: user.slug,
+        case_id: case_id_str,
+        case_id_short,
+        oneliner,
+        recordings,
+        transcribe_busy: t_busy,
+        is_admin,
+    }
+    .render()
+    .map(Html)
+    .map_err(|e| AppError::Internal(format!("Template render failed: {e}")))
+}
+
 /// Locate a case directory under `<user_root>/<case_id>/`. Returns `None`
 /// if the directory does not exist OR is soft-deleted (`.deleted` marker
 /// present). Both are treated as 404 / IDOR probe by callers.