Messenger/docs/core-checklist-status.md

Core Checklist Status (Web + API)

Legend:

• DONE - implemented and works in current web flow.
• PARTIAL - implemented partly, limited UX/coverage, or needs hardening.
• TODO - not implemented yet.

Modules

1. Account - PARTIAL (email auth, JWT, refresh, logout, reset; integration tests now cover resend-verification token replacement and full password-reset login flow; sessions exist, full UX still improving)
2. User Profile - DONE (username, name, avatar, bio, update)
3. User Status - PARTIAL (online/last seen/offline; web now formats just now/today/yesterday/recently, backend-side presence heuristics still limited)
4. Contacts - PARTIAL (list/search/add/remove/block/unblock; add by email flow covered by integration tests including success/not found/blocked conflict; web now surfaces specific add-by-email errors (not found vs blocked); UX moved to menu)
5. Chat List - DONE (all/pinned/archive/sort/unread; saved-messages delete behavior covered: clear history without deleting chat)
6. Chat Types - DONE (private/group/channel)
7. Chat Creation - DONE (private/group/channel)
8. Messages (base) - DONE (send/read/edit/delete/delete for all; 7-day edit window enforced and covered by integration tests; group UI shows sender names over bubbles + sender avatars on incoming message clusters)
9. Message Types - PARTIAL (text/photo/video/docs/audio/voice/circle; GIF/stickers via dedicated system missing)
10. Reply/Quote/Threads - PARTIAL (reply + quote-like UI + thread panel with nested replies, no dedicated full thread navigation yet)
11. Forwarding - DONE (single + bulk + without author)
12. Pinning - DONE (message/chat pin-unpin)
13. Reactions - DONE
14. Delivery Status - DONE (sent/delivered/read + reconnect reconciliation after backend restarts)
15. Typing Realtime - DONE (typing start/stop + recording voice start/stop + recording video start/stop in circle-video send flow)
16. Media & Attachments - DONE (upload/preview/download/gallery; sticker/GIF inline media no longer opens photo viewer on click)
17. Voice Messages - PARTIAL (record/send/play/seek + global speed 1x/1.5x/2x; recorder uses improved mime priority for better duration metadata; backend media allowlist includes audio/mp4/audio/x-m4a; audio store tracks duration via durationchange/seekable fallback; websocket send/recorder stop race on fast chat switch is guarded; UX still being polished)
18. Circle Video Messages - PARTIAL (send/play present, recording UX basic)
19. Stickers - PARTIAL (web sticker picker with preset pack + favorites)
20. GIF - PARTIAL (web GIF picker with Tenor search + preset fallback + favorites)
21. Message History/Search - DONE (history/pagination/chat+global search)
22. Text Formatting - PARTIAL (bold/italic/underline/spoiler/mono/links + strikethrough + quote/code block; toolbar still evolving)
23. Groups - PARTIAL (create/add/remove/invite link; join-by-invite and invite permissions covered by integration tests; advanced moderation partial)
24. Roles - DONE (owner/admin/member)
25. Admin Rights - PARTIAL (delete/pin/edit info + explicit ban API for groups/channels; integration tests cover channel member read-only, channel admin full-delete, channel message delete-for-all permissions, group profile edit permissions, and owner-only role management rules; remaining UX moderation tools limited)
26. Channels - PARTIAL (create/post/edit/delete/subscribe/unsubscribe; UX edge-cases still polishing)
27. Channel Types - DONE (public/private)
28. Notifications - PARTIAL (browser notifications + mute/settings; chat mute is propagated in chat list payload, honored by web realtime notifications with mention override, and mute toggle now syncs instantly in chat store; backend now emits chat_updated after notification mute/unmute for cross-tab consistency; no mobile push infra)
29. Archive - DONE
30. Blacklist - DONE
31. Privacy - PARTIAL (avatar/last-seen/group-invites + PM policy everyone|contacts|nobody; group-invite nobody is available in API and web settings; integration tests cover PM policy matrix (everyone/contacts/nobody), group-invite policy matrix (everyone/contacts/nobody), private chat counterpart visibility for nobody/contacts/everyone, and avatar visibility matrix in search for everyone/contacts/nobody, remaining UX/matrix hardening)
32. Security - PARTIAL (sessions + revoke + 2FA base + access-session visibility; integration tests cover single-session revoke and revoke-all invalidation/force-disconnect; 2FA setup now blocked after enable to prevent secret re-issuance; one-time recovery codes added and covered for normalization/lifecycle (remaining_codes decrement + one-time usage); web auth panel supports recovery-code login; settings now warns when recovery codes are empty and provides copy/download actions for freshly generated codes)
33. Realtime Events - DONE (connect/disconnect/send/receive/typing/read/delivered/online/offline + chat/message updates + chat_deleted)
34. Sync - PARTIAL (cross-device via backend state + realtime; reconciliation improved for loaded chats/messages, chat-info panel hot-refreshes on chat_updated, delete/leave updates realtime subscriptions, full-chat delete emits chat_deleted, and per-user chat state mutations (archive/unarchive/pin/unpin/mute) now emit chat_updated)
35. Additional - PARTIAL (drafts/link preview partial/autoload media basic)

Current Focus to reach ~80%

1. Complete security/privacy UX (sessions revoke behavior, TOTP QR flow, privacy matrix).
2. Finish channel/group moderation parity (ban permissions, member action polish).
3. Finalize media messaging UX parity (voice/circle controls, unified attachment behaviors).
4. Keep realtime strict consistency for all mutations (already improved for edit/delete).
5. Raise test coverage for auth/chats/messages/realtime critical paths.