Roadmap

CFactory is built in phases, tracked as epics in the CFactory repo and rolled up in the Factory program board.

Sequencing principle: spine first. CFactory is only as good as the pipeline it observes, so the cross-repo PARR spine is standardized before the cockpit goes deep.

Phase 0 — Standardize the spine (prerequisite, tracked in the Factory repo)

• Wire PFactory → AIFactory inbound handoff with provenance
• Adopt a shared correlation key (the GitHub issue number) end-to-end
• Normalize the completion-event envelope across all three services
• Resolve the PFactory/TFactory port collision (canonical map, UI/API: AIFactory 3100/3101, TFactory 3102/3103, PFactory 3104/3105, CFactory 3110/3111)

Phase 1 — Skeleton, correlation store & read-only cockpit (shipped ✅)

• Fork the shared Factory skeleton; ports 3110/3111; ~/.cfactory workspace ✅
• WorkItem correlation model + PostgreSQL persistence ✅
• Service adapters: PFactory, AIFactory, TFactory REST clients ✅
• WebSocket live subscriptions ✅
• Webhook ingress (POST /api/events) ✅
• Read-only pipeline board UI ✅

Phase 2 — Agentic pipeline copilot (shipped ✅)

• Claude Agent SDK copilot service
• Read tools: query WorkItems, summarise timelines, cost/latency rollups
• Anomaly detection: stuck phases, handback loops, gate failures, cost spikes
• Copilot chat panel + proactive insight cards

Phase 3 — Advise + confirm actions, audit & scoped keys (shipped ✅)

• Prepared-action model (propose_*)
• Action tools: approve gate, trigger handoff, kick handback
• Human-in-the-loop confirm UI + full audit log
• Scoped API keys with read/write enforcement

Phase 4 — Harden for hosted / multi-tenant (shipped ✅)

• Reuse AIFactory enterprise auth (SAML/SCIM, tenant isolation, HMAC audit)
• Docker image + Helm chart
• Multi-tenant configuration + operator docs

Phase 5 — Live agent terminals (shipped ✅)

• Backend discovery of active AIFactory agents (GET /api/live-agents) ✅
• Read-only server-side proxy of each agent’s rmux console (WS /api/live-agents/{key}/ws) — ANSI streamed to the browser, no upstream token ever exposed ✅
• xterm.js terminal tiles in Mission Control with a click-to-expand modal, plus loading / rmux-disabled / no-agents states ✅
• See Live agents for the data path and the read-only guarantee.

Phase 6 — Operate, not just observe (shipped ✅)

• Running tasks view — live progress across every sibling with All / Running / Failed / Done filters, per-task progress and current phase ✅
• Clickable task detail drawer — live process output plus the in-progress rmux terminal ✅
• Audit view — live completion-activity feed + a confirmed-actions log ✅
• Services panel — per-service health with editable upstream endpoints (repoint PFactory/AIFactory/TFactory without a redeploy) ✅
• Settle the canonical port map end-to-end (port remap) ✅
• Copilot defaults to Claude Opus 4.8 ✅

Phase 7 — Ship continuously (GitOps) (shipped ✅)

• Containerize the backend and the cockpit as separate images ✅
• Two-pod Helm chart + a devenv workflow for local iteration ✅
• CI: build and push sha-tagged images to GHCR on every push to main ✅
• CD: bump image tags in factory-gitops so ArgoCD redeploys the k3d cluster automatically ✅

Cross-cutting — Token & cost instrumentation (shipped ✅)

• All three stages now emit the RFC-0001 usage block on completion (AIFactory, PFactory and TFactory) ✅
• The Tokens & cost page totals real per-service, per-work-item spend ✅

Legend: ✅ done · everything else in flight or planned. Follow the issues for live status.