# Multithreaded — Todo

Done: All pre-beta phases. Active: None. Next: Platform integration.

v0.3.2. Audit grade A. 225 tests.

---

## Code Review Remediation — Remaining
- [ ] Transitive dep advisories: rand 0.8/0.9 (RUSTSEC-2026-0097), rsa (RUSTSEC-2023-0071), lru (RUSTSEC-2026-0002) — no direct fix available, monitor upstream
- [ ] Add partial index on `posts.removed_at` (`WHERE removed_at IS NOT NULL`) when data volume warrants it
- [ ] Add `tracing::warn!` to `MaybeUser` extractor on session read errors (currently silently returns None)

---

## Platform Integration (Post-Beta)

### Default Categories — Remaining
- [ ] Issues (git issue tracker replacement — see MNW G8-issues)
- [ ] Patches (inbound email patches — see MNW G7B-patches)
- [ ] Crashes (crash reports from DS2)
- [ ] Feedback (user feedback from DS3)

### Private Communities (Fan+)
- [ ] Community visibility flag (public/private)
- [ ] Membership gating: restrict join to Fan+ subscribers or item buyers
- [ ] Hidden from public listing, accessible only via direct link or MNW project page

### Notification Integration
- [ ] Push mentions, replies, endorsements, flags to MNW notifications API
- [ ] Read state synced with MNW notification center

---

## Deferred (Post-Beta)

- [ ] E2E encrypted live chat (OpenMLS integration, WebSocket gateway)
- [ ] Real-time thread updates via shared WebSocket gateway (shared with SyncKit realtime sync — single service)
- [ ] Community creation by users (currently admin-seeded only; MNW auto-provisioning handles project communities)
- [ ] Federation (ActivityPub or custom protocol)
- [ ] Subcategories / nested categories
- [ ] Similar thread detection on new thread creation
- [ ] Suggested/related threads at bottom of thread view
- [ ] Keyboard shortcuts beyond `/` for search

---

## Key Paths

| What | Where |
|------|-------|
| Time formatting | `crates/mt-core/src/time_format.rs` |
| DB queries | `crates/mt-db/src/queries.rs` |
| DB mutations | `crates/mt-db/src/mutations.rs` |
| Templates (Rust) | `src/templates/` |
| Templates (HTML) | `templates/` |
| Link previews | `src/link_preview.rs` |
| S3 storage | `src/storage.rs` |
| Route helpers | `src/routes/helpers.rs` |
| Routes | `src/routes/` (mod.rs, helpers.rs, forum/{mod,views,thread,posts,actions}.rs, moderation.rs, settings.rs, admin.rs, flagging.rs, tracking.rs, search.rs, uploads.rs) |
| Auth (OAuth) | `src/auth.rs` |
| CSRF | `src/csrf.rs` |
| Markdown | `docengine` crate (`Shared/docengine/`) — features: mentions, quotes |
| Config | `src/config.rs` |
| Seed data | `src/seed.rs` |
| Entry point | `src/main.rs` |
| Library root | `src/lib.rs` |
| Migrations | `migrations/` (001-021) |
| CSS | `static/style.css` |
| Deploy config | `deploy/` |
| Integration tests | `tests/` |
| Workspace config | `Cargo.toml` |