ROADMAP.md

Ref: main v0.0.5   Size: 849 B   History

# Roadmap

What shipped in each version is in the
[release notes](https://eitri.sh/docs/releases/); this is what's ahead.

## Candidates

- Connectors: browser clients (claude.ai among them) sign in to the MCP
  endpoint with OAuth rather than a pasted token—dynamic client registration
  on eitri-oidc, so a connector enrols itself
- Public gateway: route inbound traffic to guest services through eitri,
  building on published ports
- Hot-reload trusted CAs into running guests: a CA added to the tenant reaches
  guests that already exist—delivery over vsock or a host file mount that sshd
  reads per connection, so no recreation and no SSH bootstrap problem. Needs
  changing a tenant's trust set to demand more than a bearer PAT first, or a
  stolen token becomes access to every guest
- Live cloud-hypervisor handover for running guests