fixing bugs

TODO.md

@@ -0,0 +1,26 @@
+# Clio TODO
+
+## Audio Player Issues
+- [ ] Short audio files show wrong duration (e.g., shows 1 second instead of 13 seconds)
+  - Progress bar doesn't move for these
+  - Can't seek
+  - Need to investigate why audioDuration isn't being set correctly for short files
+
+- [ ] Hard to click on audio controls for small recordings
+  - Add proper prev/next buttons for navigation
+  - Make clickable area larger
+
+## URL Routing Issue
+- [ ] URL shows `#/detail` instead of `#/recording/{id}`
+  - Loses recording info on refresh
+  - Need to debug why buildHash isn't being called or URL isn't updating
+
+## Security (Completed)
+- [x] Add API key authentication to all endpoints
+- [x] UI prompts for API key and stores in localStorage
+- [x] Audio fetched via authenticated blob URL
+
+## Deployment
+- [x] Forgejo workflow for UI deployment
+- [x] Forgejo workflow for API deployment (needs sudo permission for restart)
+- [ ] Add sudoers rule for gitea-runner to restart phone-recorder