sync_replay_project/docs/ROADMAP.md

ROADMAP — sync_relay_project (backlog tracker)

This is the durable source of truth for what is built and what is next. Chat is ephemeral; this file + HANDOFF.md (root) + PROTOCOL.md / ARCHITECTURE.md carry state across sessions. Check an item off when it lands, same commit as the code. Proto bumps still require PROTOCOL.md same-commit.

Model: direct-serve (host opens ports, clients open nothing). The brief's old WSS host-upload tunnel is obsolete unless a VPS tier needs remote-host upload. Server = Relic, client WS = web_socket_channel. Protocol still v4.

Built (phases 0–4 + hardening — done, details in git history)

Scaffold + CI, mpv Range contract, sessions/tokens/media endpoint, sync engine + quorum, desktop shell (SyncClient, RoomDiff, media_kit, avatars, toasts+sheet, reconnect), presence hardening, frameless chrome, chat/idle fixes, chat double-row fix, avatar 256 KiB cap, Linux tarball packager + Discord upload card, updater v1 (--upgrade: manifest check, download, sha256, apply-over). WAN-tested 2-client. Counts at last green: core 42, server 41, desktop 17 + 7 updater.

Backlog (priority order, each one sitting-sized)

1. First real release: tool/release.sh (derives the version, no typing) → review → git push --follow-tags → CI (release.yml) builds the tarball, publishes the Forgejo release, and commits the manifest back. Verifies the whole --upgrade chain end to end. Manual fallback is tool/package_linux.sh + tool/release_publish.sh <tag>.
2. Jumpy seek: live repro with timeline log first, then fix the seek-land retry vs deadband/debounce fight.
3. EOF stall (bug, dogfood 09-12): playback stops just before the end and gates HELD ("waiting for X (3.9s)"). Suspect the buffered≥4s readiness gate is unsatisfiable near end of media.
4. Tiny buffer (bug, dogfood 09-12): 1–3 s observed; want ~2 min for a 1.4 GB / 24 min file (intro skip + surviving short drops). Investigate demuxer forward-queue props + 64 MB bufferSize, then raise.
5. Recovery controls: reload-current-media button + restart-player button for when playback wedges.
6. Link conveniences: Ctrl+V pastes clipboard into the media field; session link swaps update the remembered media (today only the connect screen persists); session shows the open link with an open-in-browser button.
7. Time UI: remaining time until end + scrubber preview (target time while scrubbing).
8. Shortcut parity pass with mpv / mpv.net.
9. Sounds swap-in: replace NoopSfxService (flutter_soloud preload, Kenney/ObsydianX/akx sources in HANDOFF §7); keep seek/pause/ resume cues muted or near-silent.
10. /health auth + stop broadcasting the full media URL (api_key leaks onto the wire).
11. File-join wart: welcome mediaUrl advertises 127.0.0.1, remote file joiners fail-open then self-heal on first room broadcast.
12. Cache-exhaustion long outage via tool/shaper.dart --kill-after.
13. Phase 5 chaos suite (host drop 5 s / 30 s, viewer stall, 20-seek storm) + OOM / stuck-room / drift-recovery assertions.
14. Windows zip in packaging + Discord card.
15. TLS/Caddy doc.
16. Chat history pane (schema exists, Activity log only for now).
17. Shaders: anime4k upscaling via mpv glsl-shaders + UI toggle.
18. Avatar caching + static serving (worth-it decision open): serve avatar bytes once over HTTP by hash instead of base64-in-every-room-broadcast.
19. Backfill LAN soak + 1.4 GB test details (record-only, user ran both 09-12).

Epics (multi-sitting, scheduled whole — not before the backlog

friction items above, except Jellyfin which is next feature)

• File relay (original brief, second half): links shipped, relay unbuilt. Split into sub-tasks when scheduled.
• Jellyfin native — NEXT feature.
• Updater expansion: in-app prompt, Windows helper (locked-exe dance), auto-restart after apply.
• Playlist (queue-add/queue-skip, shape reserved in PROTOCOL.md), sidecar subtitles, local-file fallback (viewer plays matching size+duration file locally, still synced), HttpSource (host pastes a direct-stream URL, server fetches + re-serves).

Deferred (needs explicit approval; transcode is never)

P2P/WebRTC, multi-session, Android. Transcode: NEVER (user decision 09-12 — not the age for it anymore).