Messenger/docs/core-checklist-status.md

Core Checklist Status (Web + API)

Legend:

• DONE - implemented and works in current web flow.
• PARTIAL - implemented partly, limited UX/coverage, or needs hardening.
• TODO - not implemented yet.

Modules

1. Account - DONE (email auth, JWT, refresh, logout, reset, sessions; web handles /verify-email?token=... links with auth-page feedback; integration tests cover resend-verification replacement, password-reset login flow, and check-email status transitions)
2. User Profile - DONE (username, name, avatar, bio, update)
3. User Status - DONE (online/last seen/recently/offline; web formats just now/today/yesterday/recently and uses Telegram-like fallback last seen recently when precise last-seen is unavailable)
4. Contacts - DONE (list/search/add/remove/block/unblock; add by email flow covered by integration tests including success/not found/blocked conflict; web surfaces specific add-by-email errors and Contacts panel includes inline Block/Unblock actions)
5. Chat List - DONE (all/pinned/archive/sort/unread; saved-messages delete behavior covered: clear history without deleting chat; regression test covers GET /chats/{saved_id} detail response)
6. Chat Types - DONE (private/group/channel)
7. Chat Creation - DONE (private/group/channel)
8. Messages (base) - DONE (send/read/edit/delete/delete for all; 7-day edit window enforced and covered by integration tests; group UI shows sender names over bubbles + sender avatars on incoming message clusters)
9. Message Types - DONE (text/photo/video/docs/audio/voice/circle + GIF/stickers in web pickers)
10. Reply/Quote/Threads - DONE (reply + quote-like UI + thread panel with nested replies and direct Jump in chat navigation)
11. Forwarding - DONE (single + bulk + without author)
12. Pinning - DONE (message/chat pin-unpin)
13. Reactions - DONE
14. Delivery Status - DONE (sent/delivered/read + reconnect reconciliation after backend restarts)
15. Typing Realtime - DONE (web: typing start/stop + recording voice start/stop; recording_video_* remains for mobile circle-video clients)
16. Media & Attachments - DONE (upload/preview/download/gallery; sticker/GIF inline media no longer opens photo viewer on click; Chat Info and message context menus now have consistent Open/Download/Copy behavior with menu auto-close and download toasts)
17. Voice Messages - DONE (record/send/play/seek + global speed 1x/1.5x/2x; improved recorder mime handling and duration fallbacks)
18. Circle Video Messages - DONE (web supports viewing/receiving; composing/sending remains mobile-only by product scope)
19. Stickers - DONE (web sticker picker with preset pack, favorites, and sticker search)
20. GIF - DONE (web GIF picker with provider search, preset fallback, and favorites)
21. Message History/Search - DONE (history/pagination/chat+global search)
22. Text Formatting - DONE (bold/italic/underline/spoiler/mono/links + strikethrough + quote/code block; web composer supports keyboard shortcuts Ctrl/Cmd+B/I/U/K, Ctrl/Cmd+Shift+X, `Ctrl/Cmd+Shift+``)
23. Groups - DONE (create/add/remove/invite link with role-aware moderation flows in web Chat Info and covered invite/join behavior)
24. Roles - DONE (owner/admin/member)
25. Admin Rights - DONE (delete/pin/edit info + ban/unban/member role management with role-gated UI and APIs for groups/channels; member role no longer sees participants lists in group/channel chat info)
26. Channels - DONE (create/post/edit/delete/subscribe/unsubscribe with role-aware channel behavior and invite-link flows)
27. Channel Types - DONE (public/private)
28. Notifications - DONE (browser notifications + mute/settings/sound; mention override for muted chats, realtime sync for mute state, notification click deep-link (/?chat=..&message=..) restores chat/message focus after auth)
29. Archive - DONE
30. Blacklist - DONE
31. Privacy - DONE (avatar/last-seen/group-invites + PM policy everyone|contacts|nobody; API + web settings support all matrix values; integration tests cover PM policy matrix, group-invite policy matrix, private chat counterpart visibility nobody/contacts/everyone, and avatar visibility in search everyone/contacts/nobody)
32. Security - DONE (sessions + revoke + 2FA + access-session visibility; integration tests cover single-session revoke, revoke-all invalidation/force-disconnect, 2FA setup guard, recovery-code normalization/lifecycle, and disable-2FA cleanup; web auth supports recovery-code login; settings provides recovery-code warning/copy/download)
33. Realtime Events - DONE (connect/disconnect/send/receive/typing/read/delivered/online/offline + chat/message updates + chat_deleted)
34. Sync - DONE (cross-device via backend state + realtime; reconciliation for loaded chats/messages; chat_updated covers profile/membership/delete-for-self/archive/unarchive/pin/unpin/mute/clear and create-chat fanout to members; full-chat delete emits chat_deleted; web Chat Info also has 15s polling fallback to self-heal missed realtime updates; integration tests cover user-scoped archive/pin, member-side visibility after create, and user-scoped clear behavior; chat list and migration 0026_deduplicate_saved_chats handle historical duplicate Saved Messages)
35. Additional - DONE (drafts, inline link preview cards, and basic media autoload behavior in web)

Current Focus beyond P1

1. Finalize media messaging UX parity (voice/circle controls, unified attachment behaviors).
2. Expand message types ecosystem (GIF/stickers/thread UX + formatting polish).
3. Continue raising test coverage for realtime/media edge cases.
4. Keep hardening and regression-testing DONE areas while expanding polish.