> ## Documentation Index
> Fetch the complete documentation index at: https://docs.switchbord.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Roadmap

> Shipped features and upcoming delivery for the Switchbord WhatsApp operations platform.

## Shipped

These items are complete and live in the current release (v0.6.0).

| # | Feature                                                                                                                          | Ticket(s)           |
| - | -------------------------------------------------------------------------------------------------------------------------------- | ------------------- |
| ✅ | Public REST API v1                                                                                                               | BORD-84             |
| ✅ | Inbox MVP — dual-sidebar, conversation management                                                                                | —                   |
| ✅ | Rich media sends (image, video, document, audio)                                                                                 | BORD-86             |
| ✅ | Interactive messages (buttons, lists)                                                                                            | BORD-87             |
| ✅ | Broadcast engine                                                                                                                 | BORD-85             |
| ✅ | Margaret AI assistant                                                                                                            | BORD-121 – BORD-130 |
| ✅ | LLM provider management (OpenAI, Anthropic, OpenRouter, Ollama, vLLM)                                                            | —                   |
| ✅ | Multi-tenancy hardening — workspace isolation, RBAC, session revocation                                                          | BORD-149 – BORD-176 |
| ✅ | Security documentation (overview, multi-tenancy, auth, secrets, GDPR, compliance matrix)                                         | —                   |
| ✅ | OpenAPI spec + Scalar UI at `/spec`                                                                                              | BORD-177            |
| ✅ | Zustand draft persistence for outbox                                                                                             | —                   |
| ✅ | Visual template builder — 3-pane builder, 7 editors, phone-frame preview, submit-to-Meta pipeline                                | BORD-182, BORD-184  |
| ✅ | Graphical journey editor — React Flow canvas, 9 node types, validation, publish pipeline                                         | —                   |
| ✅ | Margaret agent execution (tool-use, multi-step)                                                                                  | BORD-140 – BORD-143 |
| ✅ | Auto-trigger agent — inbound-triggered AI drafts, accept/reject API, draft banner                                                | BORD-192            |
| ✅ | Consent ledger — consent\_events table, STOP/START keyword detection (en/it/pt/es), campaign opt-out gate, consent API endpoints | BORD-193            |
| ✅ | Command palette — ⌘K navigation, search, and actions                                                                             | BORD-204            |
| ✅ | Asset storage — asset\_files table, S3-compatible uploads, workspace-scoped                                                      | BORD-187            |
| ✅ | Account alerts — Meta account\_alerts webhook handler, operator UI panel                                                         | BORD-189            |
| ✅ | Audit logs — workspace-scoped audit\_logs table, writeAuditLog()                                                                 | BORD-158            |
| ✅ | GDPR data retention — data\_retention\_days per workspace, retention\_sweep job                                                  | BORD-165, BORD-167  |
| ✅ | API key generation — swb\_-prefixed keys, hashed at rest                                                                         | BORD-178            |
| ✅ | Guided wizard — first-run-to-first-message onboarding                                                                            | BORD-194            |
| ✅ | Design system primitives — design tokens, motion utilities, Skeleton component                                                   | —                   |
| ✅ | Brand updates — transparent wordmark, black-background favicon                                                                   | —                   |

## In Progress

| #  | Feature                                          | Ticket(s)         |
| -- | ------------------------------------------------ | ----------------- |
| 🔄 | Collaborative inbox (agent assignment, hand-off) | BORD-181          |
| 🔄 | WhatsApp Flows builder                           | BORD-99, BORD-107 |

## Upcoming / Backlog

* Webhook-scoped phone\_number\_id routing table (BORD-157)
* JWT workspace claims in Supabase auth (BORD-155)
* Edge middleware auth enforcement (BORD-156)
* Rate limiting per workspace (BORD-162)
* Column-level PII encryption (BORD-171)
* Incident detection and breach notification workflow (BORD-166)
* SBOM and dependency scanning (BORD-170)
* MFA enforcement via Supabase TOTP

## Pull request standard

Every feature PR must include:

* typed code
* tests
* docs
* runtime notes
* adversarial checks
* rollback note