# Roadmap
Current version: **v1.1.0**
## Completed
### catenary-mcp (v0.6.x) — MCP Bridge ✓
LSP tools exposed via MCP. Feature complete.
<details>
<summary>Development History</summary>
#### Phase 1: Configuration Logic
- [x] Add `config` and `dirs` dependencies
- [x] Define `Config` struct (using `serde`)
- [x] Implement config loading from `XDG_CONFIG_HOME` or `--config` flag
#### Phase 2: Lazy Architecture
- [x] Create `ClientManager` struct
- [x] Move `spawn` and `initialize` logic from `main.rs` into
`ClientManager::get_or_spawn`
- [x] Update `LspBridgeHandler` to use `ClientManager`
#### Phase 3: Cleanup & Optimization
- [x] Update `document_cleanup_task` to communicate with `ClientManager`
- [x] Implement server shutdown logic when no documents are open for that
language
#### Phase 4: Context Awareness ("Smart Wait")
- [x] **Progress Tracking:** Monitor LSP `$/progress` notifications to detect
"Indexing" states
- [x] **Smart Blocking:** Block/Queue requests while the server is initializing
or indexing
- [x] **Internal Retry:** Retry internally if a server returns `null` shortly
after spawn
- [x] **Status Tool:** Add `status` tool to report server states
#### Phase 4.5: Observability & CD
- [x] **Session Monitoring:** Add `catenary list` and `catenary monitor`
commands
- [x] **Event Broadcasting:** Broadcast tool calls, results, and raw MCP
messages
- [x] **CI/CD:** Add GitHub Actions for automated testing, release builds, and
crates.io publishing
#### Phase 5: High-Level Tools ("Catenary Intelligence")
- [x] **Auto-Fix:** Add `apply_quickfix` tool (chains `codeAction` +
`workspaceEdit` application)
- [x] **Codebase Map:** Add `codebase_map` to generate a high-level
semantic tree of the project (synthesized from file walk +
`documentSymbol`)
- [x] **Relative Path Support:** Resolve relative paths in tool arguments
against the current working directory
</details>
### Phase 6: Multi-Workspace Support ✓
Single Catenary instance multiplexing across multiple workspace roots.
- [x] Accept multiple `--root` paths
- [x] Pass all roots as `workspace_folders` to each LSP server
- [x] Multi-root search across roots
- [x] Multi-root `codebase_map` (walks all roots, prefixes entries in multi-root mode)
- [x] `add_root()` plumbing (appends root, sends `didChangeWorkspaceFolders`)
- [x] Expose `add_root` mid-session via MCP `roots/list`
### Phase 6.5: Hardening ✓
- [x] Remove `apply_workspace_edit` — `rename`, `apply_quickfix`, and
`formatting` return proposed edits only; MCP client applies them
(see [LSP Fault Model](lsp-fault-model.md#4-workspace-edit-failures))
- [x] Error attribution — prefix all LSP-originated errors with server
language: `[rust] request timed out`
- [x] Pass `initializationOptions` from config to LSP server
- [x] `search` — unified search tool replacing `find_symbol`
### Phase 7: Complete Agent Toolkit ✓
Full toolset to replace CLI built-in tools.
**File I/O:**
- [x] `read_file` — Read file contents + return diagnostics
- [x] `write_file` — Write file + return diagnostics
- [x] `edit_file` — Edit file + return diagnostics
- [x] `list_directory` — List directory contents
**Shell Execution:**
- [x] `run` tool with allowlist enforcement
- [x] `allowed = ["*"]` opt-in for unrestricted shell
- [x] Dynamic language detection — language-specific commands activate when
matching files exist in the workspace
- [x] Tool description updates dynamically to show current allowlist
- [x] Emit `tools/list_changed` when allowlist changes (e.g., workspace added)
- [x] Error messages on denied commands include the current allowlist
**Security:**
- [x] Path validation against workspace roots (read and write)
- [x] Symlink traversal protection (`canonicalize()` + root check)
- [x] Config file self-modification protection (`.catenary.toml`,
`~/.config/catenary/config.toml`)
- [x] Direct command execution (no shell injection)
- [x] Output size limits (100KB per stream) and timeout enforcement
### Phase 8: Reliability & Polish ✓
- [x] **Eager server startup** — detect workspace languages at startup and
spawn configured servers immediately (on-demand for undetected languages)
- [x] **Always-on readiness wait** — all LSP tools wait for server readiness
automatically (removed `smart_wait` config toggle and
`wait_for_reanalysis` parameter)
- [x] **`workspace/configuration` support** — respond to server configuration
requests with empty defaults instead of `MethodNotFound`
- [x] **Search rework** — `search` returns LSP workspace symbols plus a
ripgrep file heatmap (match count + line range per file), replacing
the previous fallback chain
- [x] **Diagnostic resilience** — explicit warnings when an LSP server is
dead or unresponsive instead of silently returning empty results
- [x] **`denied` subcommands** — block specific command+subcommand pairs
in the `run` tool (e.g., `"git grep"`), takes priority over allowlist
including `["*"]`
### CLI Integration Research ✓
Validated approach: use existing CLI tools (Claude Code, Gemini CLI) with
built-in tools disabled, replaced by catenary-mcp.
<details>
<summary>Findings</summary>
**Why not a custom CLI?** Subscription plans ($20/month Pro tier) are tied to
official CLI tools. A custom CLI requires pay-per-token API access — wrong
billing model for individual developers.
**Validated configurations:**
- **Gemini CLI:** `tools.core` allowlist (blocklist doesn't work)
- **Claude Code:** `permissions.deny` + must block `Task` to prevent sub-agent
escape
See [CLI Integration](cli-integration.md) for full details.
</details>
---
## Known Vulnerabilities
See [LSP Fault Model](lsp-fault-model.md) and
[Adversarial Testing](adversarial-testing.md) for full details.
- **~~Symlink traversal.~~** Resolved in Phase 7. File I/O tools use
`canonicalize()` + workspace root validation. `list_directory` uses
`symlink_metadata()` to avoid following symlinks.
- **Unbounded LSP data.** Diagnostic caches grow without limit. Hover
responses, symbol trees, and workspace edit previews have no size caps.
A malicious or buggy LSP server can cause unbounded memory growth.
- **~~`apply_workspace_edit` trusts LSP URIs.~~** Resolved in Phase 6.5.
`apply_workspace_edit` removed. All edit tools now return proposed
edits as text; the MCP client applies them.
---
## Low Priority
- [ ] **Batch Operations:** Query hover/definition/references for multiple
positions in a single call
- [ ] **References with Context:** Include surrounding lines (e.g., `-C 3`) in
reference results
- [ ] **Multi-file Diagnostics:** Check diagnostics across multiple files in
one call
---
## Abandoned
### catenary-cli — Custom Agent Runtime
Originally planned to build a custom CLI to control the model agent loop.
Abandoned because subscription plans are tied to official CLI tools.
See [Archive: CLI Design](archive/cli-design.md) for the original design.