Skip to content
exist.io
Esc
↑↓navigate↵open⌘Jpreview
On this page

Roadmap

Completed milestones and future horizons for exist.io.

exist.io has progressed from an early design concept to a launch-ready, enterprise-grade Git forge and autonomous agent platform. This roadmap highlights what has been delivered in v0.2.0 and what lies ahead.

Completed milestones

1. Server daemon & storage foundation (Complete)

  • Standalone existd daemon with pure-Go SQLite WAL metadata storage and go-git/v6 packfiles.
  • Offline bootstrap command to initialize the database and root administrator credentials.
  • Graceful shutdown, Prometheus /metrics endpoint, and Kubernetes liveness probes (/healthz).

2. Dual Git Transports: Smart-HTTP & Pure-Go SSH (Complete)

  • Standard Git HTTP transport (info/refs, git-upload-pack, git-receive-pack) with bearer token authentication.
  • Embedded, zero-cgo Pure-Go SSH server on port 2222 (git clone ssh://git@<host>:2222/<owner>/<repo>.git).
  • Public key authentication with per-user keys and organization-wide SSH Certificate Authority trust.

3. Git LFS v1 CAS Engine & Object Locking (Complete)

  • Git Large File Storage v1 Batch HTTP protocol (/info/lfs/objects/batch).
  • Streaming binary uploads/downloads with cryptographic SHA-256 Content-Addressable Storage (CAS).
  • RFC-compliant binary file locking protocol (/info/lfs/locks) preventing unmergeable asset collisions.

4. Cryptographic Commit Signature Verification (Complete)

  • Native parsing of OpenSSH SIGSPEC binary signatures and GPG (RFC 4880) ASCII armor.
  • Real-time cryptographic validation against enrolled committer public keys.
  • Interactive signature verification inspection drawer in the web dashboard.

5. Enterprise Identity Federation & SCIM 2.0 (Complete)

  • RFC 7643 / RFC 7644 SCIM 2.0 user lifecycle synchronization endpoint at /scim/v2/Users.
  • Enterprise Single Sign-On (SSO) for OpenID Connect (OIDC) and SAML 2.0 identity providers.
  • Automated provisioning, role assignment, and immediate credential revocation upon employee departure.

6. Official Infrastructure as Code (IaC) (Complete)

  • Dedicated Terraform / OpenTofu provider in deploy/terraform-provider-exist managing namespaces, repos, rulesets, CIDRs, and SSH CAs.
  • Production Kubernetes Helm chart in deploy/helm/exist-enterprise with dual-port service, PVC persistence, cert-manager TLS, and Prometheus ServiceMonitor.

7. Pull Requests, Reviews & 3-Way Merge Engine (Complete)

  • Native 3-way merge and squash merge logic with conflict detection.
  • Pull request lifecycle management (open, closed, merged), review approval gates, and auto-merge queues.
  • Line-level review threads, general comments, emoji reactions, and label assignment.

8. Model Context Protocol (MCP) Server (Complete)

  • Native Model Context Protocol (MCP) server exposing 35 specialized tools over JSON-RPC 2.0 at /mcp and sandboxed /mcp/readonly.
  • Seamless integration with Claude Code, Cursor, Cline, and autonomous agent loops.

9. Space UI Living Dashboard & Environment Separation (Complete)

  • High-craft, craft-first frontend dashboard with zero-slop design.
  • Strict isolation between Production Mode (live backend APIs with authentic empty states) and Sandbox Demo Mode (isolated fixtures).
  • Live telemetry dashboard answering operator questions: cluster health, SQLite WAL sync, active Git streams, and Prometheus targets.

10. Autonomous Agent Reviewer & Capability Leases (Complete)

  • Automated pull request code reviewer (internal/agentreviewer) analyzing diffs, detecting leaked credentials, evaluating test coverage, and reporting check runs.
  • Ephemeral HMAC-SHA256 signed capability leases (pkg/agentlease) granting short-lived, ref-scoped permissions (refs/heads/agent/*) to autonomous agents.
  • Real-time agent activity stream ring buffer (internal/agentactivity) with live dashboard telemetry.

11. Pure-Go Semantic AST Symbol Search (Complete)

  • High-speed code symbol extraction using standard library go/parser and go/token, plus TypeScript/JavaScript and Python scanners.
  • Exposed via REST endpoint (GET /v1/origin/repos/{owner}/{repo}/symbols) and MCP tool search_symbols.

Future horizons

12. Multi-Region Active-Active Raft Replication

  • Raft-coordinated metadata consensus across geographically distributed nodes.
  • Distributed packfile sharding across MinIO / S3 buckets with local read caching.
  • Disaster recovery failover controller with continuous Litestream S3 sync.

Was this page helpful?