Data model / backend (migration 1720000000007):
- video_note as a first-class MediaRef kind — round video messages are
explicit, no filename heuristics; mime-validated, own push label.
- Delete for me (message_hidden tombstones) alongside delete-for-everyone;
group owners can moderate-delete any message in their groups.
- Clear history / delete chat per user (cleared_up_to_seq + hidden_at on
conversation_members); deleted chats return on new activity.
- Manual chat folders + per-folder pins (chat_folders, chat_folder_items,
chat_pins; folderId null = "All" tab). Every mutation returns and
broadcasts a full snapshot on the personal channel (folders.update),
syncing devices. New events: message.hidden, conversation.cleared,
conversation.hidden.
- Shared-media listing: GET /conversations/:id/media?tab=media|files|voice.
Web:
- Right-click context menus (shared ContextMenu/ConfirmDialog): messages get
a reactions row + copy/edit/delete; chats get pin/unpin per folder scope,
folder membership, clear, delete; folder tabs get rename/delete.
- Telegram-style editing in the composer (banner + prefill), hover toolbar
removed; delete dialog offers for-me / for-everyone per permissions.
- Folder tabs in the rail with per-folder pinned-first ordering.
- Profile panel (avatar, name, last seen, username, Message button) with
shared media tabs; back arrow on mobile.
- Settings page (avatar, display name edit, theme, log out); contacts as a
separate page; Telegram-style mobile bottom nav (Contacts|Chats|Settings)
with total-unread badge.
- Chat scroll: opens at newest (ResizeObserver keeps bottom pinned while
media loads), per-chat position memory, jump-to-newest button.
- Responsive single-pane layout under 900px.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01BFRyKxkKEjfAgpXygzoNiD
Notifications (web push now, Android FCM ready, iOS prepared):
- device_tokens / notification_settings / conversation_mutes (migration 006)
- REST: register/list/unregister devices, get/update settings (quiet hours,
timezone, enable), mute/unmute conversation, VAPID public key
- BullMQ queue: backend enqueues a job per new message; a dedicated stateless
`notifications` worker service drains it
- Delivery gating: skip sender, muted chats, disabled users, quiet hours, and
ONLINE users (they get the message live + an in-app toast) — offline → push
- Providers behind one interface: Web Push (VAPID/web-push) + FCM (firebase-admin,
HTTP v1; Android + iOS via the same path). Dead tokens (404/410/unregistered)
auto-retired; transient failures recorded
- Web: service worker (push display + tap-to-open the originating chat), push
registration/unregistration, in-app toast stack, deep-link via ?conversation=
In-app voice & video messages: MediaRecorder capture in the composer (mic/video),
live preview + timer, upload via the existing presigned-media path.
No emojis anywhere: replaced all glyphs with inline SVG icons (shared/ui) so the
UI renders identically across web/desktop/mobile; notification text is plain.
Chores: dedupe ioredis (BullMQ) + pin uuid>=11.1.1 (audit clean) via pnpm overrides;
reusable Centrifugo client factory for the worker.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01BFRyKxkKEjfAgpXygzoNiD
- Media (voice/video/image/file): private bucket, presigned PUT upload,
reference-only publish, membership-gated presigned GET for viewing
- Avatars: public bucket, presigned PUT + direct public URL, profile.update event
- messages.media_key + media_meta (migration 1720000000005_media)
- Explicit MinIO region on presigning client (avoids getBucketRegion network call)
- Event type values sourced from EventType constants (no raw string literals)
- Web: attach button, MediaView renderer, avatar upload in topbar
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01BFRyKxkKEjfAgpXygzoNiD
