causly-server

P2: later

Larger features and long-running verification. Not planned for 1.5.4 or 1.6. Revisit after the launch based on what users ask for.

Status: [ ] open, [~] in progress, [x] done, [-] dropped.

Decision (7 Nov 2026): only P2-08 and the read-only switch of P2-09 are worth doing. The rest is dropped or waits until users ask.

---

P2-01 Local transcription engine [ ]

meeting_transcribe uploads audio to Groq. Add an optional local engine (Whisper through a local binary or whisper.cpp) so audio never leaves the machine. Needs a decision on model download size and a clear “first run downloads N MB” message. Only if users ask.

P2-02 Real macOS verification [-]

Dropped: no Mac available. CI covers macOS.

P2-03 Nightly live smoke tests [-]

Dropped: needs dedicated test accounts and upkeep for little gain.

P2-04 BoundaryAttest to production grade [-]

Dropped: no use for it now. It stays a proof of concept.

P2-05 Sync between machines [-]

Dropped. If it ever comes back, it belongs to the hosted product, not the open-source server.

P2-06 Soak and performance testing [-]

Dropped for now.

P2-07 Fuzzing [ ]

Property-based and mutation tests for the argument parsers, the redactor, the path guard and the URL guard. Run in CI on a schedule. Only if users ask. Path and shell-argument fuzz tests already exist (P0-10).

P2-08 Supply-chain extras [x]

• Signed git tags: documented in the release steps (git tag -s, git tag -v) in development.md.
• SBOM: the publish workflow generates a CycloneDX file (npm sbom) and attaches it to the GitHub release. npm run sbom makes one by hand.
• License check: npm run check:licenses (scripts/check-licenses.mjs) fails on a production dependency with no license or one outside the allowlist. Runs in CI and in the publish workflow. Test: tests/licenseCheck.test.js.
• Revoking a bad release: documented in development.md (npm deprecate, advisory, changelog note, registry entry).

Docs updated. development.md (Releasing, License check, Revoking a bad release).

P2-09 Enterprise features [~]

• Read-only mode [x]: CAUSLY_READ_ONLY=true keeps only READ tools (plus load_toolset). Others are not registered, hidden from search_tools, refused by use_tool and refused by the approval gate even with confirm: true or a policy that allows them. Test: tests/readOnly.test.js. Docs updated. security.md, configuration.md.
• Policy file with an allowlist and denylist of tools per project [ ]
• Audit log export (JSON lines to a file or a syslog target) [ ]
• Per-project workspace profiles [ ]

The three open bullets wait until users ask.

P2-10 More directory listings [-]

Dropped: the remaining directories charge a fee or have their queues closed. The official MCP Registry and Glama are done.

P2-11 Keyword volume [-]

Dropped: new feature, not needed.

P2-12 Outreach channels [-]

Out of scope: LinkedIn, X and WhatsApp (terms of service and account risk). Email goes through Gmail.

Out of scope

Azure, GCP and AWS SDK tools. Terraform covers provisioning. Stripe and Discord packs exist in the code but are not documented or promoted.

This site is open source. Improve this page.