# BACKLOG

Status reflects 2026-08-06 code scan + implementation batches.

## Playout & Delivery

- [x] Implement FFmpeg + MediaMTX/SRS continuous HLS playout from playlist
- [x] Implement immutable HLS segment naming for cache-friendly delivery
- [x] Upload HLS segments to Cloudflare R2 via S3-compatible API
- [x] Implement emergency slate fallback on playout failure
- [x] Auto-restart loop for FFmpeg/MediaMTX on failure

## Video Normalization

- [x] Implement video normalization pipeline (H.264/AAC, 30 fps, 2 s keyframes)
- [x] Implement ffprobe verification gate rejecting non-conforming files
- [x] Enforce normalization check before upload acceptance in admin UI

## Chat Service

- [x] Implement WebSocket chat backend (Go) with room fan-out
- [x] Implement private DM channel routing
- [x] Implement Redis presence tracking for chat
- [ ] Implement Redis pub/sub for multi-instance chat
- [x] Implement Redis rate limiting (INCR + EXPIRE windowing, >10/10s throttle)
- [x] Implement chat message persistence (SQLite v1, PostgreSQL migration path)
- [x] Implement moderation commands (/mod, /mute, /ban) in backend
- [x] Implement moderation audit log persistence
- [x] Implement graceful degradation when Redis unavailable (core chat remains up)

## Frontend — Viewer SPA

- [x] Build static SPA with hls.js player integration
- [x] Build chat sidebar UI (public rooms + private DMs)
- [x] Implement schedule metadata display synced with playlist timeline
- [x] Implement responsive/mobile-friendly viewer layout

## Frontend — Admin Interfaces

- [x] Build admin login page with session authentication
- [x] Build admin dashboard overview page
- [x] Build video upload interface with chunked upload support
- [x] Build playlist management interface (drag-to-reorder, validation warnings)
- [x] Build schedule override/management interface (CRUD + conflict detection)
- [x] Build user management interface (mute/unmute/ban/unban actions)
- [x] Build moderation dashboard (chat log, inline mod actions, CSV export)
- [x] Build analytics dashboard (time range selector)
- [x] Build system configuration/status page (config editor, restart buttons)

## Infrastructure — nginx

- [x] Configure nginx reverse proxy with auth_request for admin paths
- [x] Configure nginx HLS path with CORS headers + OPTIONS preflight
- [x] Configure nginx WebSocket upgrade forwarding for /ws
- [x] Configure nginx health endpoints (/health JSON, stub_status)

## Infrastructure — Docker

- [x] Create Dockerfiles for playout, chat, nginx services
- [x] Create docker-compose.yml for all services (11 containers)
- [x] Create docker-compose.prod.yml override for production

## Infrastructure — CI/CD (Gitea Actions)

- [x] Implement CI workflow (lint, build, vet, push images)
- [x] Implement CD workflow (pull, deploy, health checks — IP-agnostic)
- [x] Generate .env from Gitea secrets in CD workflow
- [x] Seed Prometheus config + alerts into named volume during deploy
- [x] Implement health check validation with retry in CD pipeline

## Cloudflare Configuration

- [ ] Configure DNS for linearvoid.tv apex and www redirect (manual)
- [ ] Configure media.linearvoid.tv for split-domain HLS delivery (manual)
- [ ] Create R2 bucket (manual)
- [ ] Configure Cache Rules: .ts/.m4s + .m3u8 (manual)
- [ ] Configure Cloudflare Pages (manual)
- [ ] Enable Tiered Cache, WAF, rate limiting (manual)
- [x] Implement Worker for immutable cache headers on segment paths
- [ ] Enforce HTTPS/WSS, redirect HTTP → HTTPS (manual)

## Monitoring & Observability

- [x] Set up Prometheus with chat/playout/nginx/redis/postgres/node scrape targets
- [x] Add nginx-exporter, redis-exporter, postgres-exporter, node-exporter
- [x] Import Grafana app + operational dashboards
- [x] Define Prometheus alerting rules (8 rules: ChatDown, PlayoutDown, RedisDown, etc.)
- [ ] Set up UptimeRobot external monitoring

## Security

- [x] Implement admin cookie-session auth (HttpOnly, SameSite=Strict, Secure when TLS)
- [x] Implement server-side session expiration
- [ ] Enforce HTTPS/WSS at edge and origin
- [x] Implement rate limiting for chat messages (Redis windowing)
- [x] Implement WebSocket connection rate limiting (5/IP/60s)
- [x] Implement admin login rate limiting (5/IP/5min)

## Data & Storage

- [x] Set up PostgreSQL/SQLite for chat history and moderation data
- [x] Set up Redis with append-only persistence + maxmemory policy
- [x] Implement daily Postgres backups to R2 (14-day retention)
- [x] Implement weekly full backup snapshots (8-week retention)
- [x] Implement backup integrity verification (restore test)
- [ ] Document and rehearse recovery runbook (quarterly drill)

## Scaling & Performance

- [ ] Optimize segment immutability and manifest TTL for cache efficiency
- [ ] Measure playback TTFB from multiple US regions
- [ ] Load-test WebSocket connections
- [ ] Benchmark admin API p95 latency
- [ ] Track cache hit ratio and R2 ops in production
- [ ] Capacity trigger monitoring
- [ ] Plan Phase 2 service separation
- [ ] Plan Phase 3 multi-origin resilience

## Documentation

- [x] Document API contracts in API.md
- [ ] Document deployment runbook in DEPLOYMENT.md
- [ ] Document monitoring setup in MONITORING.md
- [ ] Document security model in SECURITY.md
- [x] Create incident runbook (docs/incident-runbook.md)
- [ ] Write Level 2/3 building block views