chore: status maintenance - multi-account and copyright compliance (#728)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 4.5 <[e-mail]>

.status_history/2025-12.md

···
 **documentation** (PR #514):
 - added lexicons overview documentation at `docs/lexicons/overview.md`
 - covers `fm.plyr.track`, `fm.plyr.like`, `fm.plyr.comment`, `fm.plyr.list`, `fm.plyr.actor.profile`
+
+---
+
+## Late December 2025 Work (Dec 17-31)
+
+### offline mode foundation (PRs #610-611, Dec 17)
+
+**experimental offline playback**:
+- storage layer using Cache API for audio bytes + IndexedDB for metadata
+- `GET /audio/{file_id}/url` backend endpoint returns direct R2 URLs for client-side caching
+- "auto-download liked" toggle in experimental settings section
+- Player checks for cached audio before streaming from R2
+
+---
+
+### UX polish (PRs #604-607, #613, #615, Dec 16-18)
+
+**login improvements** (PRs #604, #613):
+- login page now uses "internet handle" terminology for clarity
+- input normalization: strips `@` and `at://` prefixes automatically
+
+**artist page fixes** (PR #615):
+- track pagination on artist pages now works correctly
+- fixed mobile album card overflow
+
+**mobile + metadata** (PRs #605-607):
+- Open Graph tags added to tag detail pages for link previews
+- mobile modals now use full screen positioning
+- fixed `/tag/` routes in hasPageMetadata check
+
+---
+
+### beartype + moderation cleanup (PRs #617-619, Dec 19)
+
+**runtime type checking** (PR #619):
+- enabled beartype runtime type validation across the backend
+- catches type errors at runtime instead of silently passing bad data
+- test infrastructure improvements: session-scoped TestClient fixture (5x faster tests)
+
+**moderation cleanup** (PRs #617-618):
+- consolidated moderation code, addressing issues #541-543
+- `sync_copyright_resolutions` now runs automatically via docket Perpetual task
+- removed dead `init_db()` from lifespan (handled by alembic migrations)
+
+---
+
+### end-of-year sprint (PR #626, Dec 20)
+
+**focus**: two foundational systems with experimental implementations.
+
+| track | focus | status |
+|-------|-------|--------|
+| moderation | consolidate architecture, batch review, Claude vision | shipped |
+| atprotofans | supporter validation, content gating | shipped |
+
+**research docs**:
+- [moderation architecture overhaul](docs/research/2025-12-20-moderation-architecture-overhaul.md)
+- [atprotofans paywall integration](docs/research/2025-12-20-atprotofans-paywall-integration.md)
+
+---
+
+### rate limit moderation endpoint (PR #629, Dec 21)
+
+**incident response**: detected suspicious activity - 72 requests in 17 seconds from a single IP targeting `/moderation/sensitive-images`. added `10/minute` rate limit using existing slowapi infrastructure. this was the first real probe of our moderation endpoints, validating the decision to add rate limiting before it became a problem.
+
+---
+
+### supporter badges (PR #627, Dec 21-22)
+
+**phase 1 of atprotofans integration**:
+- supporter badge displays on artist pages when logged-in viewer supports the artist
+- calls atprotofans `validateSupporter` API directly from frontend (public endpoint)
+- badge only shows when viewer is authenticated and not viewing their own profile
+
+---
+
+### supporter-gated content (PR #637, Dec 22-23)
+
+**atprotofans paywall integration** - artists can now mark tracks as "supporters only":
+- tracks with `support_gate` require atprotofans validation before playback
+- non-supporters see lock icon and "become a supporter" CTA linking to atprotofans
+- artists can always play their own gated tracks
+
+**backend architecture**:
+- audio endpoint validates supporter status via atprotofans API before serving gated content
+- HEAD requests return 200/401/402 for pre-flight auth checks (avoids CORS issues with cross-origin redirects)
+- gated files stored in private R2 bucket, served via presigned URLs (SigV4 signatures)
+- `R2Storage.move_audio()` moves files between public/private buckets when toggling gate
+- background task handles bucket migration asynchronously
+- ATProto record syncs when toggling gate (updates `supportGate` field and `audioUrl` to point at our endpoint instead of R2)
+
+**frontend**:
+- `playback.svelte.ts` guards queue operations with gated checks BEFORE modifying state
+- clicking locked track shows toast with CTA - does NOT interrupt current playback
+- portal shows support gate toggle in track edit UI
+
+**key decision**: gated status is resolved server-side in track listings, not client-side. this means the lock icon appears instantly without additional API calls, and prevents information leakage about which tracks are gated vs which the user simply can't access.
+
+---
+
+### CSS design tokens (PRs #662-664, Dec 29-30)
+
+**design system foundations**:
+- border-radius tokens (`--radius-sm`, `--radius-md`, etc.)
+- typography scale tokens
+- consolidated form styles
+- documented in `docs/frontend/design-tokens.md`
+
+---
+
+### self-hosted redis (PRs #674-675, Dec 30)
+
+**replaced Upstash with self-hosted Redis on Fly.io** - ~$75/month → ~$4/month:
+- Upstash pay-as-you-go was charging per command (37M commands = $75) - discovered when reviewing December costs
+- docket's heartbeat mechanism is chatty by design, making pay-per-command pricing unsuitable
+- self-hosted Redis on 256MB Fly VMs costs fixed ~$2/month per environment
+- deployed `plyr-redis` (prod) and `plyr-redis-stg` (staging)
+- added CI workflow for redis deployments on merge
+
+**no state migration needed** - docket stores ephemeral task queue data, job progress lives in postgres.
+
+**incident (Dec 30)**: while optimizing redis overhead, a `heartbeat_interval=30s` change broke docket task execution. likes created Dec 29-30 were missing ATProto records. reverted in PR #669, documented in `docs/backend/background-tasks.md`. filed upstream: https://github.com/chrisguidry/docket/issues/267
+
+---
+
+### batch review system (PR #672, Dec 30)
+
+**moderation batch review UI** - mobile-friendly interface for reviewing flagged content:
+- filter by flag status, paginated results
+- auto-resolve flags for deleted tracks (PR #681)
+- full URL in DM notifications (PR #678)
+- required auth flow fix (PR #679) - review page was accessible without login
+
+---
+
+### top tracks homepage (PR #684, Dec 31)
+
+**homepage now shows top tracks** - quick access to popular content for new visitors.
+
+---
+
+### avatar sync on login (PR #685, Dec 31)
+
+**avatars now stay fresh** - previously set once at artist creation, causing stale/broken avatars throughout the app:
+- on login, avatar is refreshed from Bluesky and synced to both postgres and ATProto profile record
+- added `avatar` field to `fm.plyr.actor.profile` lexicon (optional, URI format)
+- one-time backfill script (`scripts/backfill_avatars.py`) refreshed 28 stale avatars in production
+
+---
+
+### automated image moderation (PRs #687-690, Dec 31)
+
+**Claude vision integration** for sensitive image detection:
+- images analyzed on upload via Claude Sonnet 4.5 (had to fix model ID - was using wrong identifier)
+- flagged images trigger DM notifications to admin
+- non-false-positive flags sent to batch review queue
+- complements the batch review system built earlier in the sprint
+
+---
+
+### header redesign (PR #691, Dec 31)
+
+**new header layout** with UserMenu dropdown and even spacing across the top bar.

STATUS.md

···
 
 ### December 2025
 
-#### header redesign (PR #691, Dec 31)
-
-**new header layout** with UserMenu dropdown and even spacing across the top bar.
-
----
-
-#### automated image moderation (PRs #687-690, Dec 31)
-
-**Claude vision integration** for sensitive image detection:
-- images analyzed on upload via Claude Sonnet 4.5 (had to fix model ID - was using wrong identifier)
-- flagged images trigger DM notifications to admin
-- non-false-positive flags sent to batch review queue
-- complements the batch review system built earlier in the sprint
-
----
-
-#### avatar sync on login (PR #685, Dec 31)
-
-**avatars now stay fresh** - previously set once at artist creation, causing stale/broken avatars throughout the app:
-- on login, avatar is refreshed from Bluesky and synced to both postgres and ATProto profile record
-- added `avatar` field to `fm.plyr.actor.profile` lexicon (optional, URI format)
-- one-time backfill script (`scripts/backfill_avatars.py`) refreshed 28 stale avatars in production
-
----
-
-#### top tracks homepage (PR #684, Dec 31)
-
-**homepage now shows top tracks** - quick access to popular content for new visitors.
-
----
-
-#### batch review system (PR #672, Dec 30)
-
-**moderation batch review UI** - mobile-friendly interface for reviewing flagged content:
-- filter by flag status, paginated results
-- auto-resolve flags for deleted tracks (PR #681)
-- full URL in DM notifications (PR #678)
-- required auth flow fix (PR #679) - review page was accessible without login
-
----
-
-#### CSS design tokens (PRs #662-664, Dec 29-30)
-
-**design system foundations**:
-- border-radius tokens (`--radius-sm`, `--radius-md`, etc.)
-- typography scale tokens
-- consolidated form styles
-- documented in `docs/frontend/design-tokens.md`
-
----
-
-#### self-hosted redis (PRs #674-675, Dec 30)
-
-**replaced Upstash with self-hosted Redis on Fly.io** - ~$75/month → ~$4/month:
-- Upstash pay-as-you-go was charging per command (37M commands = $75) - discovered when reviewing December costs
-- docket's heartbeat mechanism is chatty by design, making pay-per-command pricing unsuitable
-- self-hosted Redis on 256MB Fly VMs costs fixed ~$2/month per environment
-- deployed `plyr-redis` (prod) and `plyr-redis-stg` (staging)
-- added CI workflow for redis deployments on merge
-
-**no state migration needed** - docket stores ephemeral task queue data, job progress lives in postgres.
-
-**incident (Dec 30)**: while optimizing redis overhead, a `heartbeat_interval=30s` change broke docket task execution. likes created Dec 29-30 were missing ATProto records. reverted in PR #669, documented in `docs/backend/background-tasks.md`. filed upstream: https://github.com/chrisguidry/docket/issues/267
-
----
-
-#### supporter-gated content (PR #637, Dec 22-23)
-
-**atprotofans paywall integration** - artists can now mark tracks as "supporters only":
-- tracks with `support_gate` require atprotofans validation before playback
-- non-supporters see lock icon and "become a supporter" CTA linking to atprotofans
-- artists can always play their own gated tracks
-
-**backend architecture**:
-- audio endpoint validates supporter status via atprotofans API before serving gated content
-- HEAD requests return 200/401/402 for pre-flight auth checks (avoids CORS issues with cross-origin redirects)
-- gated files stored in private R2 bucket, served via presigned URLs (SigV4 signatures)
-- `R2Storage.move_audio()` moves files between public/private buckets when toggling gate
-- background task handles bucket migration asynchronously
-- ATProto record syncs when toggling gate (updates `supportGate` field and `audioUrl` to point at our endpoint instead of R2)
-
-**frontend**:
-- `playback.svelte.ts` guards queue operations with gated checks BEFORE modifying state
-- clicking locked track shows toast with CTA - does NOT interrupt current playback
-- portal shows support gate toggle in track edit UI
-
-**key decision**: gated status is resolved server-side in track listings, not client-side. this means the lock icon appears instantly without additional API calls, and prevents information leakage about which tracks are gated vs which the user simply can't access.
-
----
-
-#### supporter badges (PR #627, Dec 21-22)
-
-**phase 1 of atprotofans integration**:
-- supporter badge displays on artist pages when logged-in viewer supports the artist
-- calls atprotofans `validateSupporter` API directly from frontend (public endpoint)
-- badge only shows when viewer is authenticated and not viewing their own profile
-
----
-
-#### rate limit moderation endpoint (PR #629, Dec 21)
-
-**incident response**: detected suspicious activity - 72 requests in 17 seconds from a single IP targeting `/moderation/sensitive-images`. added `10/minute` rate limit using existing slowapi infrastructure. this was the first real probe of our moderation endpoints, validating the decision to add rate limiting before it became a problem.
-
----
-
-#### end-of-year sprint (PR #626, Dec 20)
-
-**focus**: two foundational systems with experimental implementations.
-
-| track | focus | status |
-|-------|-------|--------|
-| moderation | consolidate architecture, batch review, Claude vision | shipped |
-| atprotofans | supporter validation, content gating | shipped |
-
-**research docs**:
-- [moderation architecture overhaul](docs/research/2025-12-20-moderation-architecture-overhaul.md)
-- [atprotofans paywall integration](docs/research/2025-12-20-atprotofans-paywall-integration.md)
-
----
-
-#### beartype + moderation cleanup (PRs #617-619, Dec 19)
-
-**runtime type checking** (PR #619):
-- enabled beartype runtime type validation across the backend
-- catches type errors at runtime instead of silently passing bad data
-- test infrastructure improvements: session-scoped TestClient fixture (5x faster tests)
-
-**moderation cleanup** (PRs #617-618):
-- consolidated moderation code, addressing issues #541-543
-- `sync_copyright_resolutions` now runs automatically via docket Perpetual task
-- removed dead `init_db()` from lifespan (handled by alembic migrations)
-
----
-
-#### UX polish (PRs #604-607, #613, #615, Dec 16-18)
-
-**login improvements** (PRs #604, #613):
-- login page now uses "internet handle" terminology for clarity
-- input normalization: strips `@` and `at://` prefixes automatically
-
-**artist page fixes** (PR #615):
-- track pagination on artist pages now works correctly
-- fixed mobile album card overflow
-
-**mobile + metadata** (PRs #605-607):
-- Open Graph tags added to tag detail pages for link previews
-- mobile modals now use full screen positioning
-- fixed `/tag/` routes in hasPageMetadata check
-
----
-
-#### offline mode foundation (PRs #610-611, Dec 17)
-
-**experimental offline playback**:
-- storage layer using Cache API for audio bytes + IndexedDB for metadata
-- `GET /audio/{file_id}/url` backend endpoint returns direct R2 URLs for client-side caching
-- "auto-download liked" toggle in experimental settings section
-- Player checks for cached audio before streaming from R2
-
----
-
-### Earlier December 2025
-
 See `.status_history/2025-12.md` for detailed history including:
+- header redesign and UI polish (PRs #691-693, Dec 31)
+- automated image moderation with Claude vision (PRs #687-690, Dec 31)
+- avatar sync on login (PR #685, Dec 31)
+- top tracks homepage (PR #684, Dec 31)
+- batch review system (PR #672, Dec 30)
+- CSS design tokens (PRs #662-664, Dec 29-30)
+- self-hosted redis migration (PRs #674-675, Dec 30)
+- supporter-gated content (PR #637, Dec 22-23)
+- supporter badges (PR #627, Dec 21-22)
+- end-of-year sprint: moderation + atprotofans (PRs #617-629, Dec 19-21)
+- offline mode foundation (PRs #610-611, Dec 17)
+- UX polish and login improvements (PRs #604-615, Dec 16-18)
 - visual customization with custom backgrounds (PRs #595-596, Dec 16)
 - performance & moderation polish (PRs #586-593, Dec 14-15)
 - mobile UI polish & background task expansion (PRs #558-572, Dec 10-12)
···
 
 ---
 
-this is a living document. last updated 2026-01-05.
+this is a living document. last updated 2026-01-06.