# Phase 5: Final Todo — Remaining Tasks Classified

## Classification
- **Must Fix** — Blocks production deployment
- **Should Fix** — Important but not blocking
- **Future** — Enhancement for later
- **Optional** — Nice to have

## Must Fix (Before Production)

| # | Task | Priority | Reason | Recommended Action |
|---|---|---|---|---|
| 1 | Set WHATSAPP_APP_SECRET | Critical | Webhook signature verification disabled | Copy real app secret from Meta Developer portal to .env |
| 2 | Enable WHATSAPP_VERIFY_SIGNATURE | Critical | Unsigned webhooks accepted | Set to true after secret configured |
| 3 | ~~Set APP_DEBUG=false~~ | ~~High~~ | ✅ Already done | Was already fixed |
| 4 | Set APP_URL to production URL | High | Webhook URL and links will break | Update .env with real domain |

## Should Fix

| # | Task | Priority | Reason | Recommended Action |
|---|---|---|---|---|
| 1 | Configure queue worker auto-restart | High | Worker dies -> webhooks not processed | Use Supervisor (Linux) or task scheduler (Windows) |
| 2 | Document backup strategy | Medium | SQLite database needs regular backup | Schedule daily copy of database.sqlite |
| 3 | Run reverb:start for real-time | Medium | Echo listeners need WebSocket server | Add to deployment script or process manager |
| 4 | Configure SSL certificate | High | Required for webhook HTTPS | Let's Encrypt or production SSL cert |

## Future Improvements

| # | Task | Priority | Notes |
|---|---|---|---|
| 1 | Implement WhatsApp sendMedia | Medium | Upload stored files to WhatsApp Cloud API |
| 2 | Switch to Redis queue + Horizon | Medium | For production scalability and monitoring |
| 3 | Build Permissions management UI | Medium | Replace placeholder Permissions page |
| 4 | Editable Settings forms | Medium | Currently read-only status dashboard |
| 5 | Charts/graphs in reports | Low | Visual KPI trends |
| 6 | Custom date range picker for Reports | Low | Currently predefined periods only |
| 7 | Add My Profile route for employees | Low | Self-view not implemented |
| 8 | Dark/Light mode sync with Filament | Low | Works independently |
| 9 | Typing indicator | Low | Requires per-conversation WebSocket |

## Summary
- **Must Fix**: 3 items (app_secret + signature + app_url)
- **Should Fix**: 4 items (ops infrastructure)
- **Future**: 9 items (enhancements)
- **Total remaining**: 16 items