v1.1.3
2026-04-22
01d474f177 commitsstart 2026-04-14
Total Files
753
Go LOC
45598
Test Coverage
25.7%

Platform Matrix

Go Agentgo-agent
Go 1.26.2
cmd/tucdesk-agent/main.go
API Serverapi
Go 1.26.2
cmd/tucdesk-api/main.go
Relay / Rendezvousrelay
Go 1.26.2
cmd/tucdesk-rendezvous/main.go
Terminal UItui
Go + Bubble Tea
cmd/tucdesk-tui/main.go
Web Dashboardweb-dashboard
Next.js 16 / TypeScript
dashboard/app
PWApwa
Next.js + Service Worker
dashboard/app
MCP Connectormcp
TypeScript
mcp/tucdesk-mcp/src/index.ts
Installerinstaller
Bash / PowerShell
tools/install.sh
iOS Appios
Swift / SwiftUI
mobile/ios/
Android Appandroid
Kotlin / Jetpack Compose
mobile/android/

Development Timeline

Web DashboardMCP Connector
InstalleriOS AppAndroid AppWeb DashboardMCP Connector
API ServerWeb DashboardInstaller
Terminal UIWeb DashboardPWAAndroid AppiOS AppInstaller
API ServerTerminal UIInstallerWeb Dashboard
API ServerMCP ConnectorGo AgentWeb DashboardTerminal UI
API ServerWeb DashboardRelay / Rendezvous
Go AgentRelay / RendezvousAPI Server

Roadmap

v1.2.0target 2026-06-01Fleet Command Layer (TUC-C)planned
tuc-cAPI Server
  • TUC-C language engine: lexer, parser, AST
  • Natural language to validated execution plan conversion
  • Fleet-wide parallel execution via POST /v1/fleet/run
  • Risk assessment gate (CRITICAL/HIGH/MEDIUM/LOW) before execution
  • Human confirmation gate required before fleet execution
  • Fleet tag system for grouping and targeting agents
v1.3.0target 2026-07-01TUC-OS Zero-Config Server Imageplanned
tuc-os
  • Alpine Linux base image with TucDesk agent pre-installed
  • Auto identity generation on first boot
  • Auto-registration with rendezvous server on startup
  • Cloud provider image upload: DigitalOcean, Hetzner, Vultr
  • OpenRC service for tucdesk agent with auto-start
v1.4.0target 2026-09-01Native iOS Appplanned
iOS App
  • SwiftUI native app for iOS 16+
  • All 8 TUI screens as native iOS views with SwiftTerm terminal
  • Face ID / Touch ID authentication
  • APNs push notifications for incoming session consent
  • Bonjour LAN discovery for local agent detection
v1.5.0target 2026-09-01Native Android Appplanned
Android App
  • Jetpack Compose native app for Android 10+
  • Material Design 3 with all 8 screens
  • Biometric authentication (fingerprint, face unlock)
  • Firebase Cloud Messaging push notifications
  • Network Service Discovery (NSD) for LAN agent detection
  • Play Store distribution
v2.0.0target 2026-12-01Enterprise Production Releaseplanned
all
  • SSO / SAML / OIDC enterprise integration
  • Multi-tenant data isolation and organization management
  • SOC 2 Type II certification
  • Signed binary releases with cosign and GoReleaser
  • Auto-update channel with staged rollout
  • High-availability clustering

Development Milestones

2026-04-14
Project Genesis

First ED25519 identity generated, first agent registered with rendezvous server

2026-04-15
First Cloud Deployment

PostgreSQL backend live, dashboard deployed to Vercel, Fly.io configs complete

2026-04-16
Policy Engine & Fleet Core

Policy ACL evaluation, operator identity verification, and Fleet Run system live

2026-04-17
CI/CD Pipeline Established

Full GitHub Actions pipeline: coverage gate, installer smoke tests, gap validation

2026-04-20
v1.0.0 — Full Release Infrastructure

Mobile packaging (Android/iOS), PWA, GoReleaser, and unified release workflow

2026-04-21
Auth & Email System Complete

Full registration, invite, OTP, password reset flows with email templates

2026-04-22
Multi-Platform Code Signing & CI Gate

macOS notarization, Windows signing, iOS TestFlight, WinGet — full distribution pipeline

Recent Changes

v1.1.2
2026-04-22
  • Unified release pipeline covering all package managers in one workflow
  • macOS code signing (Developer ID) and notarytool notarization for Gatekeeper
  • Windows signing, MSI EmbedCab fix, and Inno Setup wizard installer
  • iOS IPA with TestFlight upload via altool
  • CI gate: skipped jobs now explicitly fail the workflow — no silent passes
  • npm lock file sync check in CI and pre-commit hook
  • Flaky test fix: 8 retries with 500ms backoff in runCommandRetry
v1.1.1
2026-04-22
  • Dashboard TypeScript 6 compatibility (removed deprecated baseUrl from tsconfig)
  • Node.js upgraded from 20 to 24 across all CI workflows
  • Pre-commit hook enhanced with Go linting, dashboard checks, design-token regeneration

Performance Metrics

agentInstall
< 30 seconds via curl
peerIdDisplay
instant after install
sessionConnect
< 3 seconds P2P, < 8 seconds relay
auditWrite
< 10ms per entry
securityScan
< 2 seconds for all 72 checks
dashboardLoad
< 1 second initial load

Git Versioning Strategy

Branch Strategy
mainProduction releases only. Protected. Requires PR + passing CI.
developIntegration branch. All features merge here first.
feature/*One branch per feature. Merged to develop via PR.
release/*Release candidate branches. Cherry-picked to main.
hotfix/*Critical production fixes. Merged to both main and develop.
Commit Convention
Conventional Commits (feat, fix, chore, docs, test, security, refactor)
feat(tui): add 8-screen navigation with tab switching
fix(tunnel): resolve goroutine leak on session close
security(auth): enforce single-use jti in Redis
feat(api)!: rename /v1/platform to /v1/connect
Version Bump Rules
  • MAJOR: Breaking API or protocol change
  • MINOR: New feature, backward compatible
  • PATCH: Bug fix, security fix, no API change

Security Architecture

ED25519 cryptographic identity per agent — unforgeable peer authenticationAES-256-GCM encrypted sessions with X25519 ECDH key exchangeZero IP logging in relay — privacy by designTamper-proof signed audit trail — ED25519 signature per entryPolicy gate evaluated before any signal reaches the agent72 automated security checks across 8 categories with A–F scoringChallenge-response master password — never transmitted over the networkSingle-use JWT jti with Redis TTL — replay attacks impossibleOperator signed request verification with replay prevention
agentGo 1.26.2 — ED25519, X25519, AES-256-GCM, Bubble Tea TUI
apiGo 1.26.2 — JWT EdDSA, Redis rate limiting, Postgres + file backends
relayGo 1.26.2 — Redis registry, UDP TURN relay, signed registration
dashboardNext.js 16, TypeScript, Tailwind CSS, cookie auth bridge
mcpTypeScript, MCP SDK, 12 tools, Jest test suite

Upcoming Features