Commit4aee345unknown_key
docs(roadmap): platform strategy review 2026-05-20 — Part 1 status + 20 killer moves
docs(roadmap): platform strategy review 2026-05-20 — Part 1 status + 20 killer moves External spec review landed today. Captures what shipped tonight (PR pagination, OAuth scope check, GateTest timing audit, credential security audit), what's in flight (webhook retry queue), and grades the 20 long-tail competitive moves by feasibility-from-here so the strategic items don't fall through the cracks.
1 file changed+47−14aee345595c26cfda597039188d5c24fae28fb58
1 changed file+47−1
ModifiedROADMAP.md+47−1View fileUnifiedSplit
@@ -1,6 +1,6 @@
11# Gluecron Roadmap & Checklist
22
3**Living document. Last updated: 2026-05-17. Edit as items move.**
3**Living document. Last updated: 2026-05-20. Edit as items move.**
44
55This is the single source of truth for what's done, what's in flight, what's
66critical for the next demo, and what's queued for after. If it's not on this
@@ -215,6 +215,52 @@ Ordered by **leverage per hour**. The first 3 are the differentiators that compe
215215
216216---
217217
218## 📜 Platform Strategy Review — 2026-05-20 (external)
219
220External spec review landed 2026-05-20. Two parts: tonight's fixes and a long-tail "20 killer moves" list. Track here so nothing falls through.
221
222### Part 1 — Spec corrections (tonight)
223
224- [x] **PR list pagination** — added `?limit` (default 30, max 100) + `?offset` to `GET /api/v2/repos/:owner/:repo/pulls` (commit `8c09fb9`)
225- [ ] **Webhook retries + dead-letter** — in flight (agent on worktree). Exponential backoff (30s, 2m, 10m, 1h, 6h), max 6 attempts, status='dead' after that, new `webhook_deliveries` table
226- [x] **OAuth admin scope** — verified `admin` is not in `SUPPORTED_SCOPES` (src/lib/oauth.ts:18-28). Third-party OAuth apps cannot acquire it; admin scope is PAT-only over session cookies
227- [x] **GateTest timing** — verified runs as fire-and-forget post-receive (src/hooks/post-receive.ts:81-90). Never blocks the push, just notifies and updates commit status async
228- [x] **Git credential security** — verified the codebase never exposes URL-embedded tokens to users (`src/lib/import-helper.ts:81-90` scrubs them from error output before display). Public integration spec updated to recommend git credential helper / Basic Auth password flow instead of URL-embed
229
230### Part 2 — "20 killer moves" — graded by feasibility-from-here
231
232Slotted into existing tiers above where overlapping, listed here when new.
233
234**Native AI & agentic autonomy** (most strategic, partially built)
2351. [ ] Deterministic agent runtimes — sandbox+repl in repo. Builds on existing workflow runner. **~12-16 hrs**
2362. [ ] Push-time vector indexing — wire embeddings into `post-receive.ts`. Anthropic embeddings + pgvector. **~6-8 hrs**
2373. [ ] Multi-file AST graph for MCP — extend the 15 MCP tools to expose structural deps. **~8-10 hrs**
2384. [ ] Autonomous PR decoupling — new `ai/*` branch type that autopilot owns end-to-end. Pieces exist. **~6-8 hrs**
2395. [ ] AI-driven taint patcher — extends `ai-review.ts`: when GateTest flags, Claude proposes the patch + opens a PR. **~4-6 hrs**
240
241**High-performance self-hosting & independence**
2426. [ ] Single-binary deploy — Bun's `bun build --compile`. Already feasible. **~2-3 hrs**
2437. [ ] Multi-master replication — schema-level. Hard. **~weeks**
2448. [ ] S3-backed git objects — git LFS-style with object storage. **~10-15 hrs**
2459. [ ] Outbound-only tunnel — Cloudflare Tunnel template. **~2-3 hrs**
24610. [ ] SSO on every tier — OIDC works; SAML + AD missing. **~6-8 hrs**
247
248**Advanced CI/CD & security**
24911. [ ] Local-runnable Actions — `gluecron act run` CLI mirroring runner image. **~6-8 hrs**
25012. [ ] SLSA-style signed artifacts — sigstore + provenance attestation. **~4-6 hrs**
25113. [ ] Sub-ms pre-receive secrets — true pre-receive, regex+entropy only (no taint). **~3-4 hrs**
25214. [ ] Impact-aware CI scaling — runner pool by changeset size. **~6-8 hrs**
25315. [ ] Compliance ledger export — `audit_log` exists. CSV/JSON export endpoint + retention policy. **~3-4 hrs**
254
255**Developer experience & extensibility**
25616. [ ] Realtime collaborative PRs — already Tier 3 #7 above
25717. [ ] NNTP / IMAP / mailing-list bridge — wild but cheap. RFC-3977 NNTP server. **~10-12 hrs**
25818. [ ] Programmable webhook pipelines — runs user JS/Wasm before delivery. Builds on the new retry queue. **~8-10 hrs**
25919. [ ] Feature-flag controller — track flag state on merge. **~6-8 hrs**
26020. [ ] Semantic code search — embeddings powered. Builds on #2 (push-time vector index). **~4-6 hrs**
261
262---
263
218264## 📊 Latest commits on main (auto-updated, top of `git log`)
219265
220266Run `git log --oneline -15` to see what's actually shipped. The HEAD SHA the live server is running can be confirmed at `https://gluecron.com/version`.
221267