Roadmap

Roadmap & Build Status

Maestro is built vertical-slice-first: a solid foundation, then one end-to-end flow working, with other modules filled in over successive rounds. This page summarizes what's shipped and what's next. (The authoritative running log lives in the repo's CLAUDE.md §16.)

Shipped

Round 1 — end-to-end flow

Auth (register/login/refresh, JWT), BYOK key management (AES-256-GCM), the full task flow (Orchestrator → Main → Subagent → optional Reviewer via Ollama/Qwen3), and live task/architect WebSocket streams. UI: auth pages, settings/api-keys, task launcher, architect live view.

Round 2 — module depth

RAG (per-user memory + document chunks injected into prompts, .txt/.md upload). LLM adapters: Ollama + OpenAI + Anthropic (real Messages API). Dashboard token/success/cost aggregation. Custom agent CRUD + tool assignment with security scanning. Marketplace publish (mandatory scan) + one-click install. Human-in-the-loop clarifying questions. Dev scripts for Windows + macOS/Linux.

Round 3 — subscriptions + quota

Three paid plans, no free tier/trial. Payment layer (PaymentProvider + MockPaymentProvider, Luhn/BIN card schema). Quota enforcement via the usage_records ledger. Token-accounting fixes (TokenMeter counts every LLM call; _run_task wrapped in try/finally). Billing UI.

Round 4 — legal, trust, right to erasure

Legal pages (terms, privacy KVKK+GDPR, security, acceptable-use, cookies) from a single registry. Honesty flags (BILLING_LIVE, KVKK pending). Cookie notice (no fake accept/reject; JWT in localStorage, zero tracking). GDPR/KVKK account deletion (30-day grace, self-serve undo, cron purge) + data export. Fixed two erasure defects (agent_logs user_id, Qdrant vectors).

Round 5 — deployment

Multi-stage Dockerfiles, single-origin docker-compose.prod.yml + Caddy, GHCR image publishing, tag-gated SSH deploy. Fixed three deployment defects (SSR fetch base, embedding endpoint auth, /docs collision). See Deployment.

Round 6 — rate limiting

Fixed the prod defect where all users shared one bucket behind Caddy. Identity is now user:{jwt_sub} or ip: (rightmost X-Forwarded-For). Explicit tier on every route (test-enforced). Redis Lua sliding-window backend + memory fallback + circuit breaker. See Security.

Round 7 — SEO infrastructure

Sitemap/robots/manifest/icons/OG images, canonical + OG on all marketing pages, JSON-LD, all runtime-resolved so the image stays domain-agnostic. See Frontend-Reference.

Email verification & transactional email

Provider layer (ConsoleEmailProvider + ResendProvider), single-use SHA-256-hashed tokens (migration 0008), four auth endpoints (verify/resend/forgot/reset), soft verification gate on POST /tasks + POST /api-keys, deletion lifecycle emails.

Observability

Frontend Sentry (runtime DSN, dynamic import → zero egress when off), server instrumentation.ts, request-id + structured access log, WebSocket error visibility, disciplined log levels. Backend Sentry + JSON logs + health probes were already present.

Pricing simplification (2026-07-12)

No free tier, no 14-day trial, no first-month discount. Prices set to $5 / $15 / $50 (starter / pro / scale); quotas 500K / 3M / 10M unchanged. Registration no longer creates a subscription → POST /tasks returns 402 without one. Migration 0009 removed trial/discount. See Billing-and-Quota.

Backend v2 (Rounds 8–13)

A large backend overhaul (design doc applied then removed; detail lives in code). Migration head 0011_model_prefs.

• 8 — Durable execution engine: Postgres checkpoints (task_runs/task_checkpoints/task_questions), lease + heartbeat + reconciliation sweep, usage upsert-max, new statuses (cancelled/awaiting_answer/completed_with_warnings).
• 9 — Distributed runtime: Redis EventBus + in-proc fallback, seq-ordered agent_logs, WS ?after_seq cursor, cross-worker HITL/cancel, --workers N.
• 10 — LLM Layer v2: AdapterCapabilities / ToolDef, structured_call, native tool-call loop, AGENT_DELTA streaming, TokenMeter v2, AdapterPool (per-role model), model routing.
• 11 — Dynamic agent registry: custom agents actually run (sandboxed persona), orchestrator merges routable custom agents.
• 12 — Observability: own trace infra (utils/tracing.py), TracedAdapter, trace_spans + TTL, trace + cost endpoints.
• 13 — Quality & intelligence: deterministic pre-review validators, weighted review_criteria, partial-failure → completed_with_warnings, effort scaling by complexity, hierarchical token budget, context compaction.

See Agent-Orchestration for how these land in the runtime.

Next

• OG-image smoke test inside the Docker image (standalone next/og font/WASM trace risk — next dev doesn't prove it).
• Turkish KVKK notice (structure is locale-ready; /privacy currently shows a "coming soon" note).
• Real payment processor. No real card must ever be entered against the mock provider. When live, BILLING_LIVE=true.
• Pre-purge reminder email (a user who never logs in currently gets no warning before the 30-day purge).
• Log/alert on repeated purge-sweep failures.
• Scheduler for subscription expiry (cancelled → inactive is currently computed lazily at request time).
• Marketplace ratings/scoring; using dynamic agents more deeply in the task flow.
• GraphQL (if needed), long-polling fallback, i18n infrastructure.
• WebSocket / task_service test coverage; multi-card support; invoice history.