Milestones
List view
Immich-style self-hosting polish: first-boot setup wizard, in-panel health/upgrade view, packaged upgrade ergonomics.
No due date•0/3 issues closedFirst-class device backup/restore + zero-knowledge per-user server export/import.
No due date•0/3 issues closedFirst-run account timing (no account until a server is connected) + local->server encrypted migration + account recovery.
No due date•0/3 issues closedFinish the opt-in, user-chosen server experience across CLI, iOS, and web (device onboarding, connect-to-server UX, docs).
No due date•0/3 issues closedSecurity & robustness foundations for the local-first, zero-knowledge model. Must precede a release. Covers at-rest encryption of the local store, account-auth key derivation, server bootstrap/CORS + deployable admin, tenant-scoped identifiers, and a threat-model/privacy refresh.
No due date•5/6 issues closedRoadmap deliverables (Phases 4–6) that shipped phase milestones closed without, and that were not otherwise captured in an issue: PDF report generation, plugin/extension architecture, the `ldgr devices` CLI surface for device onboarding, and advanced goal projections.
No due date•4/4 issues closedMake ldgr self-hostable in the Immich style (one-command docker-compose deploy, first-run admin onboarding, multi-user management, published container images, web admin panel) and adopt 1Password-style two-secret authentication for self-hosted accounts (master password + high-entropy Secret Key / account key feeding the SRP-6a verifier via two-secret key derivation, plus a printable Emergency Kit). Today the server is a single-secret SRP-6a blob relay with no roles, no registration policy, no compose/admin UI — so this pattern is not yet accommodated.
No due date•10/10 issues closedAdd a native macOS target to the existing SwiftUI app (apps/ios), sharing LdgrShared + the LdgrSwift/UniFFI bindings. There is currently no macOS target — only iOS/iPadOS/watchOS. Goal: a first-class macOS app (windowed NavigationSplitView UI, Touch ID + Keychain unlock, macOS UniFFI slices) that uses the same vault and cross-client sync as the other platforms.
No due date•5/5 issues closedWire the self-hosted ldgr-server (SRP-6a) transport into every client so CLI ⇄ iPhone ⇄ macOS ⇄ web actually sync. The server (#136) and per-platform sync UIs exist, but no client is connected to it: the CLI only has Dropbox/WebDAV transports, iOS uses a no-op MockSyncTransport, and web is local-only. Goal: a transaction added on one device appears on the others after sync, with conflicts surfaced for review.
No due date•19/19 issues closedImplement the two-layer market data caching architecture from ADR-007: client-side SQLite cache with TTL + Cloudflare Workers shared proxy at api.ldgr.dev/market/. Goal: scale to thousands of users without hitting free-tier rate limits on Yahoo Finance, CoinGecko, and ECB.
No due date•4/4 issues closedComprehensive public documentation of the ldgr vault binary format at three levels: user-friendly overview, intermediate guide, and expert-level specification. Includes diagrams, threat model, and test vectors. Goal: build trust with privacy-conscious users by making the security architecture transparent and independently verifiable.
No due date•6/6 issues closedApple Watch, widgets, and community ecosystem.
No due date•4/4 issues closedWeb app, sync server, loans, advanced features.
No due date•4/4 issues closedCross-device sync and native Apple apps.
No due date•9/9 issues closedRich market data TUI and budgeting module.
No due date•6/6 issues closedFull import pipeline, investment tracking, net worth.
No due date•10/10 issues closed