Roadmap
Demand-gated — we build what people actually need. Track progress on GitHub Issues.
v0.1.5 — Initial Release
- #90 Basic diff review with OpenAI — ✓ Done
- #89 JSON response repair & unicode handling — ✓ Done
- #90 CLI interface with review command — ✓ Done
v0.1.6 — Custom Prompts & Path Injection
- #95 Enhanced default system prompts — ✓ Done
- #94 Custom system prompt via .cora.yaml config — ✓ Done
- #93 Inject valid file paths into system prompt — ✓ Done
- #92 JSON object response format (opt-in) — ✓ Done
v0.1.7 — Deterministic & Reliable
- #98 Deterministic reviews — temperature=0 — ✓ Done
- #97 Non-deterministic output bug fix — ✓ Done
- #99 HTTP timeout + connection pooling — ✓ Done
- #100 Diff-hash caching for repeat reviews — ✓ Done
- #101 Configurable max_tokens — ✓ Done
v0.2.0 — Multi-Provider & SARIF
- #106 BYOK — Anthropic, Groq, Ollama support — ✓ Done
- #106 SARIF output format — ✓ Done
- #106 Branch review mode — ✓ Done
- #106 Output footer watermark — ✓ Done
v0.3 — Progress & CI Hardening
- #140 Static analysis context injection (reduce false positives) — ✓ Done
- #108 --progress flag for machine-readable output — ✓ Done
- #102 Composite action crash fix (KeyError) — ✓ Done
- #88 Config validate command — ✓ Done
v0.4 — Deterministic Engine Pipeline
- #116 Deterministic rule engine — 12 built-in rules — ✓ Done
- #115 File bundling — parallel per-bundle review — ✓ Done
- #114 AST-based cross-file dependency extraction — ✓ Done
- #159 Hunk header regex panic fix + 5MB diff support — ✓ Done
v0.4.5 — Config Architecture
- #209 Config redesign — auth.toml for secrets, config.yaml for settings — ✓ Done
- #203 Auth login auto-detect provider env vars — ✓ Done
- #189
cora config showeffective resolved config — ✓ Done - #182 Env var override visibility — ✓ Done
- #185 Deterministic rules exclude
rules/— ✓ Done - #186 Truncated JSON repair tests — ✓ Done
v0.4.6 — Polish & Docs
- #162 README overhaul — market-facing copy — ✓ Done
- #204 Deterministic secrets pre-scan — ✓ Done
- #195 Diff parser hardening Phase 1 — ✓ Done
v0.5 — Agent & Quality
- #205 Quality gate — CI pass/fail thresholds — ✓ Done
- #234 Static security scanner — 11 patterns — ✓ Done
- #233 Language-specific analyzers (Dart, Svelte, TS, Go, Rust, Python) — ✓ Done
- #207 MCP server — expose rules to AI agents — ✓ Done
- #238 Quality profiles bug fix — path resolution, fail-fast, dedup — ✓ Done
- #188 Auto-chunking for large diffs — ✓ Done
- #206 Tech debt metrics — review history — ✓ Done
- #232 Uteke memory integration — recall + learn — ✓ Done
- #262
cora commit— review + auto commit message + quality gate — ✓ Done
v0.6 — Code Intelligence
The foundation layer for structural code understanding — persistent symbol index, semantic search, and deep Uteke integration.
- #264
cora index— Symbol index & SQLite persistence — ✓ Done - #265
cora explore— Structural + semantic code search — ✓ Done - #235 Cora + Uteke cross-product integration bundle — ✓ Done
- #284 MCP Phase 1 — Code Intelligence tools (5 tools) — ✓ Done
- #285 MCP Phase 2 — Review + Debt tools (2 tools) — ✓ Done
- #286 MCP Phase 3 — Context enrichment tools (2 tools) — ✓ Done
Also in v0.6
- #47 GitHub Marketplace action — ✓ Done
- #196 VitePress docs site — ✓ Done
- #161
cora gain— local stats + viral sharing — ✓ Done - #160 Landing page redesign — ✓ Done
v0.7 — Multi-Language & Code Graph
Query layer built on top of the v0.6 index — call graph traversal, test impact analysis, broader language support, and real-time sync.
- #266
cora callers/cora impact— Call graph query commands — ✓ Done - #267
cora affected— Find tests affected by changes — ✓ Done - #268 Language expansion — 6 → 15+ language support — ✓ Done
- #269 Auto-sync file watcher daemon — ✓ Done