release.sh writes updates/manifest.json at release time (predictable asset URL) — no CI commit-back, no push-token problem, no detached checkout dance. release_publish.sh is create-release + upload only. Manifest sha256 now optional; updater skips verification with a note when absent (HTTPS + gzip CRC cover the realistic cases). Fixed the repo-URL sed keeping a .git suffix (caught by a worktree dry run). Updater tests: 8 (sha-less manifest flow added).
4.2 KiB
ROADMAP — sync_relay_project (backlog tracker)
This is the durable source of truth for what is built and what is next.
Chat is ephemeral; this file + HANDOFF.md (root) + PROTOCOL.md /
ARCHITECTURE.md carry state across sessions. Check an item off when it
lands, same commit as the code. Proto bumps still require PROTOCOL.md
same-commit.
Model: direct-serve (host opens ports, clients open nothing). The brief's old WSS host-upload tunnel is obsolete unless a VPS tier needs remote-host upload. Server = Relic, client WS = web_socket_channel. Protocol still v4.
Built (phases 0–4 + hardening — done, details in git history)
Scaffold + CI, mpv Range contract, sessions/tokens/media endpoint,
sync engine + quorum, desktop shell (SyncClient, RoomDiff, media_kit,
avatars, toasts+sheet, reconnect), presence hardening, frameless
chrome, chat/idle fixes, chat double-row fix, avatar 256 KiB cap,
Linux tarball packager + Discord upload card, updater v1
(--upgrade: manifest check, download, sha256, apply-over).
WAN-tested 2-client. Counts at last green: core 42, server 41,
desktop 17 + 7 updater.
Backlog (priority order, each one sitting-sized)
- First real release:
tool/release.sh(derives the version, writes the manifest, no typing) → review →git push --follow-tags→ CI (release.yml) builds the tarball and publishes the Forgejo release. Verifies the whole--upgradechain end to end. Manual fallback istool/package_linux.sh+tool/release_publish.sh <tag>. - Jumpy seek: live repro with timeline log first, then fix the seek-land retry vs deadband/debounce fight.
- EOF stall (bug, dogfood 09-12): playback stops just before the end and gates HELD ("waiting for X (3.9s)"). Suspect the buffered≥4s readiness gate is unsatisfiable near end of media.
- Tiny buffer (bug, dogfood 09-12): 1–3 s observed; want ~2 min
for a 1.4 GB / 24 min file (intro skip + surviving short
drops). Investigate demuxer forward-queue props + 64 MB
bufferSize, then raise. - Recovery controls: reload-current-media button + restart-player button for when playback wedges.
- Link conveniences: Ctrl+V pastes clipboard into the media field; session link swaps update the remembered media (today only the connect screen persists); session shows the open link with an open-in-browser button.
- Time UI: remaining time until end + scrubber preview (target time while scrubbing).
- Shortcut parity pass with mpv / mpv.net.
- Sounds swap-in: replace
NoopSfxService(flutter_soloud preload, Kenney/ObsydianX/akx sources in HANDOFF §7); keep seek/pause/ resume cues muted or near-silent. /healthauth + stop broadcasting the full media URL (api_key leaks onto the wire).- File-join wart: welcome mediaUrl advertises 127.0.0.1, remote file joiners fail-open then self-heal on first room broadcast.
- Cache-exhaustion long outage via
tool/shaper.dart --kill-after. - Phase 5 chaos suite (host drop 5 s / 30 s, viewer stall, 20-seek storm) + OOM / stuck-room / drift-recovery assertions.
- Windows zip in packaging + Discord card.
- TLS/Caddy doc.
- Chat history pane (schema exists, Activity log only for now).
- Shaders: anime4k upscaling via mpv glsl-shaders + UI toggle.
- Avatar caching + static serving (worth-it decision open): serve avatar bytes once over HTTP by hash instead of base64-in-every-room-broadcast.
- Backfill LAN soak + 1.4 GB test details (record-only, user ran both 09-12).
Epics (multi-sitting, scheduled whole — not before the backlog
friction items above, except Jellyfin which is next feature)
- File relay (original brief, second half): links shipped, relay unbuilt. Split into sub-tasks when scheduled.
- Jellyfin native — NEXT feature.
- Updater expansion: in-app prompt, Windows helper (locked-exe dance), auto-restart after apply.
- Playlist (
queue-add/queue-skip, shape reserved in PROTOCOL.md), sidecar subtitles, local-file fallback (viewer plays matching size+duration file locally, still synced),HttpSource(host pastes a direct-stream URL, server fetches + re-serves).
Deferred (needs explicit approval; transcode is never)
P2P/WebRTC, multi-session, Android. Transcode: NEVER (user decision 09-12 — not the age for it anymore).