python3 scripts/gen-roadmap.py     # writes ROADMAP.md
scripts/gen-roadmap                # convenience wrapper (same thing)
python3 scripts/gen-roadmap.py --check          # CI canary: fail if ROADMAP.md is stale
python3 scripts/gen-roadmap.py --check-github   # cross-check statuses vs live GitHub PR state,
                                                # spec links, and status sanity (add --strict
                                                # to fail on warnings; needs an authenticated gh)

graph TD
  subgraph sg_profiles_v2["Profiles v2 (per-profile tool views)"]
    profiles_v2["Profiles v2 (per-profile tool views)
MCP-33"]
    profiles_v2_indexes["Per-profile Bleve indexes (T1)
MCP-3240"]
    profiles_v2_set_profile["set_profile tool + session resolver + REST (T2)
MCP-3241"]
    profiles_v2_profile_pin["Per-agent-token profile_pin (T3)
MCP-3242"]
    profiles_v2_tray_switcher["Tray profile switcher Go + Swift (T5)
MCP-3244"]
  end
  subgraph sg_sandbox_isolation["Non-Docker sandbox isolation (Landlock)"]
    sandbox_isolation["Non-Docker sandbox isolation (Landlock)
MCP-34"]
    sandbox_spike["Landlock sandbox spike (MCP-34.1)
MCP-3232"]
    sandbox_mode_config["isolation.mode enum + resolver (MCP-34.2)
MCP-3233"]
    sandbox_launcher["Native sandbox launcher Landlock+rlimits (MCP-34.3)
MCP-3234"]
    sandbox_scanner_parity["Scanner-flow parity under sandbox (MCP-34.4)
MCP-3235"]
    sandbox_snap_docker_it["snap-docker integration tests + CI (MCP-34.5)
MCP-3236"]
  end
  subgraph sg_ts_code_exec_ga["TypeScript code-execution GA + cookbook"]
    ts_code_exec_ga["TypeScript code-execution GA + cookbook
MCP-38"]
    ts_code_exec_cookbook["Cookbook (10 TS recipes) + GA docs
MCP-38"]
  end
  subgraph sg_scanner_v2["Spec 076 deterministic offline tool-scanner"]
    scanner_v2["Spec 076 deterministic offline tool-scanner
MCP-3574"]
    scanner_v2_foundation["detect-engine foundation (T1)
MCP-3575"]
    scanner_v2_hard_checks["3 hard checks + scanner wiring (US1 MVP)
MCP-3576"]
    scanner_v2_soft_checks["3 soft checks + patterns confidence (US2)
MCP-3577"]
    scanner_v2_consensus["Consensus risk-score + report transparency (US4)
MCP-3578"]
    scanner_v2_eval_gate["Eval corpus + CI recall/FP gate (US3)
MCP-3579"]
    scanner_v2_docs["Tool-scanner detect-engine docs (T22)
MCP-3683"]
  end
  subgraph sg_windows_tray["Windows native tray app"]
    windows_tray["Windows native tray app
MCP-43"]
    windows_tray_funnel_qa["Windows first-run QA pass (downloads→actives 12:1 vs macOS 4:1 — find the funnel break before WebView2 work)"]
    windows_tray_window["WebView2 native window + profile submenu
MCP-43"]
  end
  subgraph sg_ux_audit["Web UI + macOS app UX audit"]
    ux_audit["Web UI + macOS app UX audit"]
    ux_audit_webui_sweep["Web UI heuristic + Playwright UX sweep"]
    ux_audit_macos_sweep["macOS tray app UX sweep (settings parity, flows)"]
  end
  subgraph sg_action_log_transparency["Action log / transparency — info at a glance"]
    action_log_transparency["Action log / transparency — info at a glance"]
    action_log_glance_view["At-a-glance action log view (top signals, health)"]
    action_log_retention_tie_in["Tie activity retention/size into the glance view"]
  end
  subgraph sg_analytics_dashboard["Analytics dashboard as default page"]
    analytics_dashboard["Analytics dashboard as default page"]
    analytics_token_drain_graphs["Per-server / per-tool token-drain graphs"]
    analytics_default_landing["Make dashboard the default landing page"]
  end
  subgraph sg_registries_search_add["Registries — easier search + add-server"]
    registries_search_add["Registries — easier search + add-server"]
    registries_search_ux["Improved registry search UX"]
    registries_official_protocol["Official registry protocol integration"]
  end
  subgraph sg_scanner_simplification["Scanner simplification (deterministic default, opt-in deep scan)"]
    scanner_simplification["Scanner simplification (deterministic default, opt-in deep scan)"]
    scanner_simpl_baseline["US1: deterministic offline baseline default + curated hard phrase_injection check (delete duplicate legacy rules)"]
    scanner_simpl_unified_report["US2: single merged report + cross-scanner consensus confidence"]
    scanner_simpl_deep_optin["US3: opt-in deep scan (off by default), never blocks/degrades baseline; config migration"]
    scanner_simpl_notifications["US4: collapse scan-notification storm into one debounced settled event (MCP-2207)"]
    scanner_simpl_deepscan_fixes["Deep-scan trust fixes: nil-Security gating bug (source fetch runs with deep scan off on default configs), FR-014 verdict inversion (Dangerous deep finding < Warning), surface silently-skipped Docker scanners (non-nil deep_scan descriptor + CLI hint on security enable)"]
  end
  subgraph sg_upgrade_nudge["Upgrade awareness & guided update"]
    upgrade_nudge["Upgrade awareness & guided update"]
    upgrade_nudge_status_log["US1 slice: update availability in mcpproxy status + deduped startup log"]
    upgrade_nudge_surfacing["US1 remainder: dismissible Web UI banner + update_check config block"]
    upgrade_nudge_channel["US2: channel-aware guided update command (brew/dmg/deb/rpm/docker/go-install detection, build-time channel marker)"]
    upgrade_nudge_quiet["US3: operator control + CI/offline quiet + no prerelease downgrade nudges"]
  end
  subgraph sg_connect_trust["Connect step trust: preview, visible backup, one-click undo"]
    connect_trust["Connect step trust: preview, visible backup, one-click undo"]
    connect_trust_preview["US1: preview API + wizard diff UI (exact entry, API-key masking)"]
    connect_trust_backup_visibility["US1: surface backup_path in Web UI + retention policy"]
    connect_trust_undo["US2: one-click undo/disconnect in wizard"]
    connect_trust_tcc_copy["US2: pre-emptive macOS TCC explanation in wizard"]
  end
  subgraph sg_telemetry_identity["Telemetry identity & data quality (machine_id + CI-filter hardening)"]
    telemetry_identity["Telemetry identity & data quality (machine_id + CI-filter hardening)"]
    telemetry_machineid_client["Hashed machine_id in heartbeat (schema v6)"]
    telemetry_machineid_worker["Worker migration: machine_id column + extraction (repo mcpproxy-telemetry)"]
    telemetry_machineid_dash["Dashboard identityExpr prefers machine_id; exclude %-dev versions from human cohort; fix launch_source 79% unknown (repo mcpproxy-dash)"]
    telemetry_snapshot_alerting["Alerting on external-downloads snapshot cron (34-day outage went unnoticed)"]
  end
  subgraph sg_release_qa_gate["Release qualification gate (auto-QA matrix blocks the tag)"]
    release_qa_gate["Release qualification gate (auto-QA matrix blocks the tag)"]
    release_qa_gate_matrix["T1: tag-blocking release-gate workflow: server-type matrix (stdio/http/sse/docker/oauth) + invariants (activity-log/request-id, token+telemetry counters, quarantine flow, reconnect, upgrade-in-place), publish jobs gated on the verdict, scan-eval unconditional on tags"]
    release_qa_gate_playwright["T2: wire the Playwright Web UI sweep into the gate (currently manual-trigger only)"]
    release_qa_gate_macos["T3: macOS app smoke on a macos runner, advisory until 3 consecutive passes (today zero CI automation for the tray app)"]
    release_qa_gate_consistency["T4: surface-state consistency check (tray/Web UI/CLI agree with core on server states)"]
  end
  subgraph sg_telemetry_v7_churn["Telemetry v7: honest funnel + churn instrumentation"]
    telemetry_v7_churn["Telemetry v7: honest funnel + churn instrumentation"]
    telemetry_v7_wizard_fix["T1: wizard metric fix - on dismiss record connect step as completed_external (not skipped) when the user already connected via another path"]
    telemetry_v7_funnel_fields["T2: funnel observability fields (wizard_shown, web_ui_opened counter, days_since_install, active_days_30d)"]
    telemetry_v7_prechurn_snapshot["T3: pre-churn snapshot (previous_shutdown clean|crash via BBolt flag, last_error_code) so the final heartbeat doubles as cause-of-death"]
    telemetry_v7_churn_events["T4: cross-repo churn_events materialization + dash Churn page with H1-H4 hypothesis signatures (repos mcpproxy-telemetry / mcpproxy-dash; tracked here for DAG visibility, out of scope of spec 080)"]
  end
  subgraph sg_tray_api_purity["Tray↔core decoupling: socket/REST API only, no config-file reads"]
    tray_api_purity["Tray↔core decoupling: socket/REST API only, no config-file reads"]
    tray_oauth_config_read["Go tray OAuth login path loads mcp_config.json directly (internal/tray/tray.go:~1734 config.LoadFromFile via GetConfigPath) — replace with REST (server config / OAuth endpoints), then remove GetConfigPath from the tray server interface if no consumers remain"]
  end
  subgraph sg_planning_hygiene["Planning/docs truth automation"]
    planning_hygiene["Planning/docs truth automation"]
    hygiene_roadmap_github_check["gen-roadmap --check-github: cross-check roadmap.yaml statuses vs gh PR state + dangling spec links"]
    hygiene_tasks_reconcile["CI rule: PR touching specs/<id> implementation paths must update tasks.md"]
    hygiene_docs_facts["Generate volatile CLAUDE.md/README facts (Go version, built-in tool list, sample config) from code with --check"]
    hygiene_quickstart_contract["Run top quickstart.md scenario per spec as contract test in test-api-e2e.sh"]
  end
  marketplace["Server marketplace
MCP-37"]
  siem["Audit SIEM integration
MCP-39"]
  paid_tier["Paid-tier MVP (billing / seats / license)
MCP-40"]
  sdk_v1_migration["SDK v1 migration"]
  sso["SSO (server edition)"]
  mcp_2026_upgrade["MCP protocol upgrade to 2026-07-28 revision"]
  security_gateway_cd["Security gateway Tracks C/D (per-arg least-privilege + signature provenance)"]
  discovery_eval_harness["Discovery-quality eval harness (Spec 065 second half)"]

  profiles_v2_indexes --> profiles_v2_set_profile
  profiles_v2_set_profile --> profiles_v2_profile_pin
  profiles_v2_set_profile --> profiles_v2_tray_switcher
  sandbox_spike --> sandbox_mode_config
  sandbox_mode_config --> sandbox_launcher
  sandbox_launcher --> sandbox_scanner_parity
  scanner_v2 --> sandbox_scanner_parity
  sandbox_scanner_parity --> sandbox_snap_docker_it
  scanner_v2_foundation --> scanner_v2_hard_checks
  scanner_v2_foundation --> scanner_v2_soft_checks
  scanner_v2_hard_checks --> scanner_v2_consensus
  scanner_v2_soft_checks --> scanner_v2_consensus
  scanner_v2_hard_checks --> scanner_v2_eval_gate
  scanner_v2_eval_gate --> scanner_v2_docs
  windows_tray_funnel_qa --> windows_tray_window
  ux_audit --> action_log_transparency
  action_log_glance_view --> action_log_retention_tie_in
  ux_audit --> analytics_dashboard
  analytics_token_drain_graphs --> analytics_default_landing
  ux_audit --> registries_search_add
  scanner_v2 --> scanner_simplification
  scanner_simpl_baseline --> scanner_simpl_unified_report
  scanner_simpl_baseline --> scanner_simpl_deep_optin
  scanner_simpl_unified_report --> scanner_simpl_deep_optin
  scanner_simpl_unified_report --> scanner_simpl_notifications
  scanner_simpl_deep_optin --> scanner_simpl_deepscan_fixes
  upgrade_nudge_status_log --> upgrade_nudge_surfacing
  upgrade_nudge_surfacing --> upgrade_nudge_channel
  upgrade_nudge_surfacing --> upgrade_nudge_quiet
  telemetry_machineid_client --> telemetry_machineid_worker
  telemetry_machineid_worker --> telemetry_machineid_dash
  release_qa_gate_matrix --> release_qa_gate_playwright
  release_qa_gate_matrix --> release_qa_gate_macos
  release_qa_gate_matrix --> release_qa_gate_consistency
  telemetry_v7_wizard_fix --> telemetry_v7_churn_events
  telemetry_v7_funnel_fields --> telemetry_v7_churn_events
  telemetry_v7_prechurn_snapshot --> telemetry_v7_churn_events
  telemetry_machineid_worker --> telemetry_v7_churn_events

  classDef done fill:#1f7a1f,stroke:#0d3d0d,color:#ffffff;
  classDef in_progress fill:#1f6feb,stroke:#0b3d91,color:#ffffff;
  classDef in_review fill:#9a6700,stroke:#5c3d00,color:#ffffff;
  classDef blocked fill:#a40e26,stroke:#5c0712,color:#ffffff;
  classDef todo fill:#6e7781,stroke:#3d4248,color:#ffffff;
  classDef parked fill:#30363d,stroke:#161b22,color:#9da7b3,stroke-dasharray:4 3;
  class profiles_v2,profiles_v2_indexes,profiles_v2_set_profile,profiles_v2_profile_pin,profiles_v2_tray_switcher,sandbox_isolation,sandbox_spike,sandbox_mode_config,sandbox_launcher,sandbox_scanner_parity,sandbox_snap_docker_it,ts_code_exec_ga,ts_code_exec_cookbook,scanner_v2,scanner_v2_foundation,scanner_v2_hard_checks,scanner_v2_soft_checks,scanner_v2_consensus,scanner_v2_eval_gate,scanner_v2_docs,registries_official_protocol,scanner_simplification,scanner_simpl_baseline,scanner_simpl_unified_report,scanner_simpl_deep_optin,scanner_simpl_notifications,scanner_simpl_deepscan_fixes,upgrade_nudge_status_log,upgrade_nudge_surfacing,connect_trust_preview,connect_trust_backup_visibility,connect_trust_undo,telemetry_machineid_client,hygiene_roadmap_github_check done;
  class upgrade_nudge,connect_trust,telemetry_identity in_progress;
  class windows_tray,windows_tray_window in_review;
  class mcp_2026_upgrade blocked;
  class windows_tray_funnel_qa,ux_audit,ux_audit_webui_sweep,ux_audit_macos_sweep,action_log_transparency,action_log_glance_view,action_log_retention_tie_in,analytics_dashboard,analytics_token_drain_graphs,analytics_default_landing,registries_search_add,registries_search_ux,upgrade_nudge_channel,upgrade_nudge_quiet,connect_trust_tcc_copy,telemetry_machineid_worker,telemetry_machineid_dash,telemetry_snapshot_alerting,release_qa_gate,release_qa_gate_matrix,release_qa_gate_playwright,release_qa_gate_macos,release_qa_gate_consistency,telemetry_v7_churn,telemetry_v7_wizard_fix,telemetry_v7_funnel_fields,telemetry_v7_prechurn_snapshot,telemetry_v7_churn_events,tray_api_purity,tray_oauth_config_read,planning_hygiene,hygiene_tasks_reconcile,hygiene_docs_facts,hygiene_quickstart_contract,security_gateway_cd,discovery_eval_harness todo;
  class marketplace,siem,paid_tier,sdk_v1_migration,sso parked;