Track Vault 966 product hardening and Watch Tonight roadmap

[cmsjade5000]

Goal

Coordinate the next Vault 966 improvement wave across product polish, Watch Tonight discovery, security hardening, live-service reliability, public contributor onboarding, and architecture cleanup.

Context

This parent issue tracks the work split into individual implementation issues. The child issues are intentionally scoped so each Codex thread/worktree or forked contributor PR can pursue one concrete outcome.

Workstreams

Library polish

• Expose mood filters in the Library filter dialog #184
• Surface Fliclist and preset chips in Library #185
• Make random picks honor the full selected filter set #186
• Fix Watchlist last-item empty state after removal #187
• Improve dialog focus behavior for filters and admin modals #188
• Simplify primary navigation semantics and mobile toggle behavior #189
• Make movie-card review flag action discoverable and keyboard accessible #190
• Add inline loading and error states around changing Library results #191

Discover / Watch Tonight

• Design and implement Discover as a Watch Tonight tool #192
• Expose semantic search as progressive enhancement #193

Security hardening for private home use and public self-hosters

• Add login throttling and cooldown protection #194
• Harden first-run setup POST protection #195
• Decide and implement production gating for docs and OpenAPI #196
• Tighten movie metadata validation and artwork URL policy #197
• Redact provider API keys from HTTP client logs #217

Operations and release safety

• Expand live-service verification beyond health and login #198
• Add SQLite bootstrap schema drift checks #199
• Align Codex verification wrapper with CI checks #200

Architecture cleanup

• Refactor source sync, review, and maintenance job modules around workflow boundaries #201

Contributor-friendly UX and accessibility

• Improve the login recovery state when credentials are not configured #212
• Add accessible labels and pressed state to Library filter controls #213
• Make the Vault Health section navigation work better on narrow screens #214
• Simplify primary navigation ARIA semantics #215

Public demo and onboarding

• Add a one-command synthetic demo seed for public UI exploration #216

Recommended first merge batch

• Add accessible labels and pressed state to Library filter controls #213: small, focused accessibility improvement in the Library filter dialog.
• Simplify primary navigation ARIA semantics #215: tiny semantic cleanup with low regression risk.
• Add a one-command synthetic demo seed for public UI exploration #216: improves contributor onboarding without touching private data.
• Add login throttling and cooldown protection #194: important self-hosting security hardening.
• Align Codex verification wrapper with CI checks #200: helps every subsequent branch ship with the same verification expectations as CI.
• Redact provider API keys from HTTP client logs #217: high-value privacy hardening for logs before more provider work lands.

Dependency Notes

• Expose mood filters in the Library filter dialog #184, Surface Fliclist and preset chips in Library #185, Make random picks honor the full selected filter set #186, and Add inline loading and error states around changing Library results #191 should land before or alongside Expose semantic search as progressive enhancement #193.
• Expose mood filters in the Library filter dialog #184, Surface Fliclist and preset chips in Library #185, Make random picks honor the full selected filter set #186, and Expose semantic search as progressive enhancement #193 should inform Design and implement Discover as a Watch Tonight tool #192 follow-up work.
• Add login throttling and cooldown protection #194, Harden first-run setup POST protection #195, Decide and implement production gating for docs and OpenAPI #196, Tighten movie metadata validation and artwork URL policy #197, and Redact provider API keys from HTTP client logs #217 form the public-self-hosting hardening track.
• Expand live-service verification beyond health and login #198, Add SQLite bootstrap schema drift checks #199, and Align Codex verification wrapper with CI checks #200 form the release-safety track.
• Add accessible labels and pressed state to Library filter controls #213, Make the Vault Health section navigation work better on narrow screens #214, and Simplify primary navigation ARIA semantics #215 can land independently and are good candidates for forked contributor PRs.
• Add a one-command synthetic demo seed for public UI exploration #216 should stay strictly synthetic-data-only and should not depend on live database access.
• Refactor source sync, review, and maintenance job modules around workflow boundaries #201 should wait until nearby feature/security work settles, or be split into smaller refactor PRs.

Thread and Contributor Guidance

Each child thread or forked PR should produce one of:

• A draft or ready PR linked to its issue, with tests and verification summarized.
• A final handoff comment explaining changed files, tests run, blockers, and whether live service verification passed.

Avoid merging broad overlapping changes without rebasing against earlier Library/security work. Public contributors do not need collaborator access or assignment; they can fork the repository and open a pull request that links the issue they are addressing.