Roadmap and Contributions
Completed Milestones
- Engine and storage foundation β lifecycle orchestration, PostgreSQL/GORM, migrations, prefixed table naming, table ownership registry, options, workers, cache, and structured logging.
- Unified content system β content/meta models, registry-driven content types, fluent queries, request scopes, taxonomies, statuses, scheduled publishing, sorting, and theme-independent core types.
- Admin CMS β data-driven CRUD, Quill editor, media picker, server-side filtering and pagination, Screen Options, menus, redirects, cache, mail, themes, plugins, users, comments, settings, audit logs, and RBAC enforcement.
- Theme runtime β BaseTheme, config-driven rewrites and template mapping, page bundles, fallback hierarchy, common funcmap, semantic frontend hook slots, theme settings, logos, demo import, and hot switching.
- SEO and public URLs β canonical URLs, Open Graph, JSON-LD, favicon output, redirects, taxonomy archives, dynamic/static sitemap output, language-aware internal links, and per-content SEO extension hooks.
- Media pipeline β upload metadata, responsive JPEG/PNG variants, optional WebP output, preload/priority helpers, and historical variant rebuilds.
- Plugin runtime β actions and filters with removable handles, settings providers, protected route/middleware registration, router rebuilds, cache invalidation, plugin-owned tables, and clean runtime deactivation.
- Internationalization β core locale manager, admin language, language-aware cache and URLs, translatable theme/site options, content and menu translation, same-slug language variants, and sitemap hreflang transformers.
- Public accounts β provider-neutral users, linked identities, revocable sessions, registration policy, Google OIDC and EIP-4361 SIWE providers, and theme account helpers.
- Comments and profiles β authenticated comments, one direct reply level, moderation/RBAC, cache invalidation, admin pagination, and own-account profile contracts.
- Bundled operational plugins β multilingual management, SEO overrides, site-level code snippets, and self-hosted traffic analytics with retention and local GeoIP support.
- Agent/MCP Phases 0β3 β protocol-neutral Core Agent Registry and Executor, short-lived credentials, scope plus RBAC plus ownership, idempotency and audit, and a disabled/read-only-by-default dual-protocol MCP plugin with six read tools and six controlled write tools.
- Delivery tooling β web installer with live handler switch,
gopressautoload/build workflow, Swagger generation, site-scoped configuration, and generated public artifacts.
Planned
- Shortcode parser.
- Read/write database connection splitting.
- Prometheus metrics.
- Agent/MCP Phase 4 β OAuth 2.1 discovery, PKCE, refresh-token rotation, step-up scopes, OpenTelemetry, metrics, alerts, and audit retention.
- Agent/MCP Phase 5 β Resources, Prompts, Tasks, MCP Apps, subscriptions, registry publication, and third-party Tool governance.
- CI/CD pipeline hardening.
- Benchmark suite and performance tuning.
- Theme and plugin version migration hooks.
- Online theme marketplace and one-click installation.
Contributing
- Fork the repository.
- Create a focused feature branch.
- Add tests and documentation for the affected public contract.
- Commit focused changes and push the branch.
- Open a pull request with behavior, migration, security, and compatibility notes where applicable.
