Milestones

Phase 1: CLI Foundation open #1

Project scaffold, auth, upload, download, ls, rm, local keystore, multi-account, token refresh

45/48 completed

closed #43 Add verbose flags for CLI debug output
closed #74 Update README with account management commands and --as flag
closed #75 Add account management commands and --as flag
closed #76 Update documentation for multi-account support and publicKey lexicon
closed #77 Add automatic public key publishing on login
closed #78 Add identity module with DID document resolution and pubkey fetching
closed #79 Add put_record, resolve_handle, and transport getter to XrpcClient
closed #80 Add publicKey lexicon and PublicKeyRecord struct
closed #81 Add migration from single-account flat files to per-account directories
closed #82 Refactor login command for multi-account account creation
closed #83 Add logout, set-default, and accounts commands
closed #84 Add per-account session and identity persistence
closed #85 Add multi-account config struct and per-account storage layout
closed #86 Add multi-account CLI support with --as flag
closed #87 Improve README with pronunciation guide and formatting polish
closed #88 Add AGPL-3.0 license
closed #89 Add README.md and CONTRIBUTING.md
open #90 Add tree command to display document hierarchy
open #91 Add glob pattern matching for document operations
open #92 Add shell autocompletion for commands and filenames
closed #93 Add filename resolution for rm command
closed #94 Add filename resolution for download command
closed #95 Add tests for ls command filtering and output formatting
closed #96 Add CLI tests for download overwrite and filename behavior
closed #97 Move upload logic into opake-core documents module
closed #99 Split documents module into separate files per operation
closed #100 Move document operations from CLI commands into opake-core
closed #101 Add automatic token refresh using refresh_jwt on expired sessions
closed #102 Add automatic token refresh using refresh_jwt on expired sessions
closed #103 Test ls and rm commands against live PDS
closed #104 Fix missing HTTP status checks in XRPC client
closed #105 Extract shared JSON persistence helpers for session and identity
closed #106 Update outdated dependencies (reqwest 0.13, toml)
closed #107 Test upload command against real PDS
closed #108 Fix WASM compilation for opake-core by enabling getrandom js feature
closed #109 Add password resolution tests for login command
closed #110 Add structured logging with env_logger
closed #111 Refactor CLI commands into separate modules under commands/
closed #112 Update login command to read password from stdin
closed #126 Add local keystore for session and key persistence
closed #127 Add document deletion via com.atproto.repo.deleteRecord
closed #128 Add document listing via com.atproto.repo.listRecords
closed #129 Add file download with client-side decryption
closed #130 Add file upload with client-side encryption
closed #131 Add asymmetric key wrapping (ECDH-ES+A256KW)
closed #132 Add AES-256-GCM content encryption and decryption
closed #133 Add PDS authentication via com.atproto.server.createSession
closed #134 Add CLI foundation with encrypt, upload, download, list, and delete

Phase 2: Sharing open #2

Public key discovery, DID resolution, share/revoke grants, cross-PDS download, inbox

18/18 completed

closed #61 Extract shared pagination helper for listing typed records from collections
closed #62 Capitalize documentation filenames in docs/ and lexicons/
closed #63 Add MermaidJS flow diagrams and restructure documentation
closed #64 Improve naming consistency and split documents/download.rs
closed #65 Update documentation for public key auto-publish and shared downloads
closed #66 Add grant-based cross-PDS download for shared files
closed #67 Black-box test the full sharing workflow across accounts
closed #68 Fix base64 padding mismatch when decoding PDS $bytes fields
closed #69 Auto-publish encryption public key on login
closed #70 Fix bugs found during black-box integration testing of sharing workflow
closed #71 Split client.rs into module directory for transport, xrpc, and DID resolution
closed #72 Replace raw [u8; 32] with X25519PublicKey/X25519PrivateKey type aliases
closed #73 Remove --permissions flag from share command
closed #121 Add shared command to list outgoing grants
closed #122 Add revoke command to delete grant records
closed #123 Add share command to grant document access to a DID
closed #124 Add DID resolution and public key extraction
closed #125 Add direct file sharing between DIDs

Phase 3: Keyrings open #3

Group key management, keyring CRUD, keyring-encrypted uploads, member add/remove with rotation

20/23 completed

open #44 Add owner authorization check to keyring membership operations
open #45 Add automatic key rotation when adding new keyring members
closed #46 Update docs to reflect keyring rotation history
open #47 Add hard keyring rotation with document re-encryption
closed #48 Add keyring rotation history to preserve member access to pre-rotation documents
closed #49 Fix ContentKey Debug impl to redact secret bytes
closed #50 Add black-box testing guide for cross-PDS keyring member download
closed #51 Add cross-PDS download for keyring members
closed #52 Add BIP-39 seed phrase key derivation flow documentation
closed #53 Add revision record type for collaborative document editing
closed #54 Update FLOWS.md and ARCHITECTURE.md for keyring operations
closed #55 Add upload/download support for keyring encryption
closed #56 Add keyring member management (add-member, remove-member)
closed #57 Add CLI keyring commands and local group key store
closed #58 Add keyrings core module with create and list operations
closed #59 Implement symmetric key wrapping primitives in crypto.rs
closed #60 Add keyring-based group sharing for multi-user access control
closed #114 Add upload with --keyring flag for group encryption
closed #115 Add keyring list command
closed #116 Add keyring remove-member command with key rotation
closed #117 Add keyring add-member command
closed #118 Add keyring create command with group key generation
closed #119 Add keyring-based group sharing

Phase 4: AppView + Web UI open #4

Axum indexer, firehose consumer, REST API, inbox command, web frontend

29/35 completed

closed #7 Add inbox CLI command for discovering shared grants via appview
closed #8 Add file permission hardening for sensitive config and key files
open #9 Add trust mode gate to AppView-dependent commands
open #10 Add ledger command for local grant management with PDS verification
open #11 Add config command with get and set subcommands
open #12 Add trust_mode config field with standard and zero-trust options
open #13 Add zero-trust mode with local grant ledger and config command
closed #14 Add inbox command to list incoming share grants
closed #15 Update black-box test plan to cover appview
closed #16 Update documentation to cover appview and recent changes
closed #17 Hoist anyhow to workspace dependencies
closed #18 Unify config path resolution across CLI and AppView
closed #19 Replace env var side effect with explicit config dir parameter
closed #20 Update appview CLI structure to match opake-cli command pattern
closed #21 Update toml dependency from 0.8 to 1.0
closed #22 Upgrade tower_governor from 0.6 to 0.8
closed #23 Upgrade appview reqwest from 0.12 to 0.13
closed #24 Consolidate shared dependencies to workspace level
closed #25 Audit workspace dependencies for consolidation and upgrades
closed #26 Remove bearer token authentication fallback from AppView
closed #27 Add AppView API and deployment documentation
closed #28 Add status subcommand to AppView
closed #29 Add health endpoint and shared AppState to AppView
closed #30 Add DID-scoped Ed25519 authentication to AppView API
closed #31 Add clap CLI framework to AppView with run/index/serve/status subcommands
closed #32 Add XDG_CONFIG_HOME support to CLI and AppView
closed #33 Add Ed25519 signing keypair to opake identity
closed #34 Add AppView production readiness: clap, DID auth, XDG, health, docs
closed #35 Add inbox command to CLI for querying AppView
closed #36 Add Jetstream subscription and grant/keyring indexer
closed #37 Add AppView REST API with inbox and keyrings endpoints
closed #38 Add AppView crate scaffold with config, error types, and SQLite database
closed #39 Add AppView indexer for inbox and keyring discovery
open #113 Add web UI with AppView and SPA
closed #120 Add inbox command to list incoming grants

Phase 5: Stretch open #5

Folder hierarchy, versioning, large file sidecar, additional record types

0/1 completed

open #98 Add folder record type and document.folder field

Meta: Tooling & Documentation open #6

Docs updates, module refactors, dependency audits, tooling migrations

14/14 completed

closed #1 Slim down chainlink prompt to reduce per-message token overhead
closed #2 Slim down project CLAUDE.md to remove doc duplication
closed #3 Fix duplicate changelog entry for inbox CLI command
closed #4 Update docs for security hardening and opake-derive crate
closed #5 Add tests for RedactedDebug derive macro
closed #6 Fix Identity and Session Debug impls to redact secrets
closed #40 Update docs to reflect module directory restructuring
closed #41 Improve code organization by splitting large files into modules
closed #42 Split large doc files to reduce context window consumption
closed #135 Migrate issue tracker from chainlink to crosslink
closed #136 Untrack .claude/ directory and document crosslink setup
closed #137 Migrate from chainlink to crosslink and slim project docs
closed #138 Add project milestones for implementation phases
closed #139 Close duplicate inbox issues superseded by #7

Generated 2026-03-03 02:53 UTC