---
title: Roadmap
description: Completed milestones and future horizons for exist.io.
---

exist.io has progressed from an early design concept to a launch-ready, enterprise-grade Git forge and autonomous agent platform. This roadmap highlights what has been delivered in `v0.2.0` and what lies ahead.

## Completed milestones

### 1. Server daemon & storage foundation (Complete)
- Standalone `existd` daemon with pure-Go SQLite WAL metadata storage and `go-git/v6` packfiles.
- Offline `bootstrap` command to initialize the database and root administrator credentials.
- Graceful shutdown, Prometheus `/metrics` endpoint, and Kubernetes liveness probes (`/healthz`).

### 2. Dual Git Transports: Smart-HTTP & Pure-Go SSH (Complete)
- Standard Git HTTP transport (`info/refs`, `git-upload-pack`, `git-receive-pack`) with bearer token authentication.
- Embedded, zero-cgo Pure-Go SSH server on port `2222` (`git clone ssh://git@<host>:2222/<owner>/<repo>.git`).
- Public key authentication with per-user keys and organization-wide SSH Certificate Authority trust.

### 3. Git LFS v1 CAS Engine & Object Locking (Complete)
- Git Large File Storage v1 Batch HTTP protocol (`/info/lfs/objects/batch`).
- Streaming binary uploads/downloads with cryptographic SHA-256 Content-Addressable Storage (CAS).
- RFC-compliant binary file locking protocol (`/info/lfs/locks`) preventing unmergeable asset collisions.

### 4. Cryptographic Commit Signature Verification (Complete)
- Native parsing of OpenSSH SIGSPEC binary signatures and GPG (RFC 4880) ASCII armor.
- Real-time cryptographic validation against enrolled committer public keys.
- Interactive signature verification inspection drawer in the web dashboard.

### 5. Enterprise Identity Federation & SCIM 2.0 (Complete)
- RFC 7643 / RFC 7644 SCIM 2.0 user lifecycle synchronization endpoint at `/scim/v2/Users`.
- Enterprise Single Sign-On (SSO) for OpenID Connect (OIDC) and SAML 2.0 identity providers.
- Automated provisioning, role assignment, and immediate credential revocation upon employee departure.

### 6. Official Infrastructure as Code (IaC) (Complete)
- Dedicated Terraform / OpenTofu provider in `deploy/terraform-provider-exist` managing namespaces, repos, rulesets, CIDRs, and SSH CAs.
- Production Kubernetes Helm chart in `deploy/helm/exist-enterprise` with dual-port service, PVC persistence, cert-manager TLS, and Prometheus ServiceMonitor.

### 7. Pull Requests, Reviews & 3-Way Merge Engine (Complete)
- Native 3-way merge and squash merge logic with conflict detection.
- Pull request lifecycle management (`open`, `closed`, `merged`), review approval gates, and auto-merge queues.
- Line-level review threads, general comments, emoji reactions, and label assignment.

### 8. Model Context Protocol (MCP) Server (Complete)
- Native Model Context Protocol (MCP) server exposing 35 specialized tools over JSON-RPC 2.0 at `/mcp` and sandboxed `/mcp/readonly`.
- Seamless integration with Claude Code, Cursor, Cline, and autonomous agent loops.

### 9. Space UI Living Dashboard & Environment Separation (Complete)
- High-craft, craft-first frontend dashboard with zero-slop design.
- Strict isolation between **Production Mode** (live backend APIs with authentic empty states) and **Sandbox Demo Mode** (isolated fixtures).
- Live telemetry dashboard answering operator questions: cluster health, SQLite WAL sync, active Git streams, and Prometheus targets.

### 10. Autonomous Agent Reviewer & Capability Leases (Complete)
- Automated pull request code reviewer (`internal/agentreviewer`) analyzing diffs, detecting leaked credentials, evaluating test coverage, and reporting check runs.
- Ephemeral HMAC-SHA256 signed capability leases (`pkg/agentlease`) granting short-lived, ref-scoped permissions (`refs/heads/agent/*`) to autonomous agents.
- Real-time agent activity stream ring buffer (`internal/agentactivity`) with live dashboard telemetry.

### 11. Pure-Go Semantic AST Symbol Search (Complete)
- High-speed code symbol extraction using standard library `go/parser` and `go/token`, plus TypeScript/JavaScript and Python scanners.
- Exposed via REST endpoint (`GET /v1/origin/repos/{owner}/{repo}/symbols`) and MCP tool `search_symbols`.

---

## Future horizons

### 12. Multi-Region Active-Active Raft Replication
- Raft-coordinated metadata consensus across geographically distributed nodes.
- Distributed packfile sharding across MinIO / S3 buckets with local read caching.
- Disaster recovery failover controller with continuous Litestream S3 sync.