Command Document
Product Roadmap
Rendered as a real command-center page. Source notes remain in the repo for agents, but navigation uses pages and real files.
NyrA Product Roadmap Truth
Generated: 2026-06-17T22:59:21.484Z
This is the blunt roadmap for NyrA Swarm Little Buddy. It intentionally separates "testable internal alpha" from "sellable product." Version numbers do not count as progress unless the build removes a user-visible blocker and the evidence proves it.
Current Verdict
- Product verdict: Internal alpha prototype. Not ready to sell.
- Current version: 0.1.0-alpha.76
- Release gate: INTERNAL_ALPHA_ONLY, 41% ready
- Money/deploy gate: NO_GO_LIVE_MONEY, 4% ready
- Deployability blockers: 26 P0, 1 P1
- Handoffs: 17 user, 9 secret-store, 0 ready for Codex review
- Hosted alpha: HOSTED_ALPHA_READY at https://olympics-answers-defence-necklace.trycloudflare.com
- Hosted alpha boundary: temporary trycloudflare tunnel; token bundled: yes
- Hosted swarm providers: 4/4 ready (OpenAI: gpt-5.2; Anthropic: claude-sonnet-4-6; Gemini: gemini-2.5-flash; Grok/xAI: grok-4.3)
- Latest concrete app fix: Alpha76 fixes the Android phone-proof blind spot: automatic self-test upload now retries in-session after a failed attempt instead of using a one-shot flag.
- Physical phone proof: PHONE_SELF_TEST_NEEDS_REVIEW
- Cloud deploy preflight: BLOCKED_ON_CLOUD_HANDOFFS
- Current model benchmark winner: grok
Hard No-Go Rules
- Do not sell while deployability status is NO_GO_LIVE_MONEY.
- Do not call it paid beta while release status is INTERNAL_ALPHA_ONLY.
- Do not ship Android to customers while the APK points at a trycloudflare tunnel or bundles a shared alpha token.
- Do not market phone control as working until physical phone self-test evidence exists.
- Do not build more payment/marketing surface until the app usability recovery checklist is green.
- Do not treat provider availability as swarm success unless the UI and logs prove routing and fallback behavior.
Next Build Must Be Engineering Only
No more marketing, legal polish, Stripe polish, or version churn until these app-level issues are green:
- No version bump unless it removes a user-visible app blocker.
- Android first launch reaches the buddy/chat experience without black blank screens.
- Only one bot is visible at a time unless the user intentionally opens foreground chat from the floating buddy.
- Foreground Activity and WebView remain transparent behind the NyrA figure.
- Hide Bot, Show Bot, Close, Settings, Voice, typed chat, and update controls work on phone.
- Mic permission denial leaves typed chat online and shows a clear fix path.
- Accessibility/Phone Control setup explains restricted settings and verifies connection.
- Main chat surface shows Captain/Crew swarm provider state without burying it in Settings.
- OpenAI, Claude, Gemini, and Grok readiness is represented honestly; missing providers are not faked.
- Physical phone self-test can upload a redacted support log that Codex can ingest.
Immediate Queue
| Owner | Task | Evidence |
|---|---|---|
| Codex | Run the next build as an engineering-only usability recovery release: Android UX, transparency, hide/show, mic, phone control, visible swarm state. | Code patch plus emulator/desktop smoke evidence and focused tests. |
| User + Codex | Get one physical phone self-test support log uploaded and ingested. | mobile-phone-self-test-evidence.json status PHONE_SELF_TEST_PASSED. |
| User + Codex | Deploy stable Cloudflare mobile bridge and R2 APK hosting. | mobileBridge.workerUrl, androidApkR2Key, providerSecretStatus, secretStatus, r2 buckets saved and verified. |
| Codex | Rebuild Android only after stable bridge evidence exists, then remove bundled alpha-token dependency. | release/current/android/manifest.json shows stable bridge and tokenBundled=false for paid beta. |
| User | Support inbox roundtrip and legal/accountant review. | supportInboxConfirmed=Yes and attorneyReviewStatus=Approved. |
Milestone Roadmap
| Phase | Name | Priority | Owner | Status | Deliverable | AcceptanceEvidence | Blocks |
|---|---|---|---|---|---|---|---|
| 0 | Truth reset | P0 | Codex | In progress | Stop version-only churn. Keep this roadmap, deployability, and release gates as the source of truth. | NYRA_PRODUCT_ROADMAP.md, nyra-product-roadmap.json, deployability-snapshot.json, release-candidate-preflight.json. | All future paid launch work. |
| 1 | App usability recovery build | P0 | Codex | Next | Android and desktop feel like one buddy: transparent surface, no duplicate bots, reliable hide/show, honest mic flow, visible swarm state, and typed chat that works. | Emulator smoke screenshots, desktop smoke, npx tsc --noEmit, test:surface-parity, test:mobile-runtime-bridge-status, test:nyra-swarm-council. | Physical phone proof and paid beta readiness. |
| 2 | Phone control reliability | P0 | Codex + user phone evidence | Next | NyrA can open apps, tap text, type, Back/Home/Recents, screen-look, and report when Android restricted settings block Accessibility. | Physical phone self-test support log, test:android-phone-control, test:mobile-phone-self-test, phone control screenshots. | The core promise that NyrA can actually do things on the phone. |
| 3 | Stable mobile bridge | P0 | User + Codex | Blocked on Cloudflare/API secret handoff | bridge.porterlabz.com Worker with R2 APK hosting, support-log storage, provider secrets, update manifest, ticketed APK download, and no bundled shared alpha token. | cloud:mobile-bridge:bootstrap verified, cloud:mobile-bridge:check, stable Worker URL saved, R2 object key saved, Android rebuilt against stable bridge. | Remote phone testing, update button, customer builds. |
| 4 | Desktop parity | P0 | Codex | Queued after phone UX recovery | Desktop app can see screen, click, type, continue tasks, expose swarm state, send diagnostics, and behave consistently with phone. | test:computer-use, test:computer-use:screen, test:computer-use:actions, test:high-impact-runtime, rendered desktop smoke screenshots. | Claiming same capability on phone and desktop. |
| 5 | Release trust and support | P0 | User + Codex | Blocked on signing/support/legal handoffs | Signed or store-trusted installer, support inbox roundtrip, legal review, privacy/terms/eula, support diagnostics with redaction review. | release:candidate:preflight has no P0 release blockers, support roundtrip confirmed, policy readiness approved, signing evidence captured. | Any paid beta install. |
| 6 | Money path | P0 | User + Codex | Blocked until product works | Stripe products/prices, hosted billing Worker, webhook, Customer Portal, license entitlement checks, test-mode rehearsal, then live-money preflight. | billing live rehearsal passed, payment launch pack cleared, deployability P0 blockers = 0. | Taking payments. |
| 7 | Marketing and launch assets | P1 | Codex | Hold until app UX is real | Screenshots, demo video, launch site, email/social/ad assets that match the shipping app. | Visuals final approved, demo video recorded against the shipping build, launch site connected to live checkout only after gates clear. | Public launch. |
What This Means
The right next release is not "more docs" or "more payment setup." The right next release is a phone and desktop engineering build that makes NyrA feel like the buddy agent: visible, responsive, transparent, controllable, honest about provider state, and able to upload proof logs.
Paid launch starts only after the app works, the stable bridge is deployed, phone proof exists, release trust is solved, support/legal are confirmed, and deployability has no P0 blockers.