Roadmap
Foundation — done
Section titled “Foundation — done”Repository, architecture, contracts, design system, CI, security, docs, web shell, local API, and desktop shell.
Phase 1 — first vertical slice — done
Section titled “Phase 1 — first vertical slice — done”Create trip → deterministic Blueprint → add/import reservation → readiness action → redacted brief.
Phase 2 — grounded intelligence — done
Section titled “Phase 2 — grounded intelligence — done”Consent-gated official advice (FCDO) and weather (Open-Meteo) with freshness labels; deterministic trip search; offline city packs (Overture + Wikivoyage, per-layer licenses, CI-built, downloaded per trip with consent); and BYOK AI assist — on-device Ollama plus OpenAI/Anthropic — with a redaction preview, an activity log, and keys kept only in the OS keychain.
Phase 3 — public beta — in progress
Section titled “Phase 3 — public beta — in progress”Shipped: an encrypted vault (keychain default, optional passphrase) with pre-update backups, a consent-gated map, an offline Today view, persona-weighted recommendations over downloaded packs, confirmation import from paste, HTML, email/.eml, and a picked or dragged-in file, a relaxed as-you-type in-trip search (partial-word, any-word matching, with suggestion chips and copy-to-reuse), editing and unarchiving trips with an archive show/hide toggle, a guided on-device AI setup that installs Ollama and pulls recommended models in-app, validated BYOK cloud keys (a “Validate & save” that checks the key before storing it), editable AI instructions (assist/preview plus the schema-locked lodging-date draft, each with reset-to-default), on-device lodging-date drafts routed through the normal review dialog, self-hosted fonts (no web-font CDN), a fully localized UI (message-catalog t(), locale-aware pluralization), an in-app updater — Rust-wrapped, minisign-verified, with checksums and build provenance — and the first verified offline PMTiles slice for Nashville. Remaining: OS-signed and notarized desktop installers (DMG/MSI), blocked on paid code-signing certificates and independent of the updater above; and expansion of the bounded offline-map pipeline to more city packs.
Licensed live inventory, encrypted synchronization, group collaboration, monitoring, and mobile experiences.