Roadmap

This page tracks planned features and improvements for Street Framework. Items are grouped by release milestone. Priorities shift based on community feedback — open an issue or discussion to influence the roadmap.

v1.1 — Developer Experience

Target: Q3 2026

• street dev hot-reload — use node --watch instead of manual fs.watch for more reliable file change detection
• street generate middleware <name> — generate middleware boilerplate
• street generate gateway <name> — generate WebSocket gateway boilerplate
• street generate migration <name> — alias for street migrate:create
• Config validation — validate street.config.ts at startup and print actionable errors
• Better error messages — structured error output with file/line references for common mistakes (missing reflect-metadata, wrong tsconfig, etc.)
• street info — print project info, versions, and environment diagnostics

v1.2 — Database

Target: Q4 2026

• MySQL/MariaDB wire driver — native MySQL protocol implementation (no mysql2 dependency)
• SQLite support — via node:sqlite (Node 22+)
• Query builder — fluent, type-safe query builder that compiles to parameterized SQL
• Schema introspection — generate TypeScript types from an existing database schema
• Migration diffing — detect schema drift between migrations and current database state

v1.3 — Observability

Target: Q1 2027

• OpenTelemetry integration — traces, metrics, and logs via OTLP exporter
• Structured logging — built-in JSON logger with request correlation IDs
• Health check DSL — declarative health checks for database, cache, external services
• Prometheus metrics endpoint — expose /metrics in Prometheus text format
• Distributed tracing — W3C traceparent header propagation

v1.4 — Auth

Target: Q2 2027

• OAuth 2.0 / OIDC — built-in provider integrations (Google, GitHub, Microsoft)
• Refresh token rotation — automatic JWT refresh with sliding expiry
• API key authentication — header-based API key middleware with rate limiting per key
• RBAC helpers — role-based access control decorators (@RequireRole, @RequirePermission)
• Passkey / WebAuthn — FIDO2 authentication support

v2.0 — Architecture

Target: 2027

• HTTP/2 support — native node:http2 server with multiplexing
• gRPC support — Protocol Buffers + gRPC server via node:net
• Message queue integration — built-in adapters for Redis Streams, NATS, and RabbitMQ
• Microservice toolkit — service discovery, circuit breaker, retry policies
• Edge runtime — compatibility layer for Cloudflare Workers and Deno Deploy

Completed

v1.0 ✅

• HTTP server (node:http)
• Compiled-regex router with parameter extraction
• IoC container with constructor injection
• PostgreSQL wire protocol v3 (SCRAM-SHA-256, MD5, cleartext auth)
• Connection pool with bounded acquire queue
• Repository pattern with parameterized queries
• SQL migration runner with tracking table
• JWT (HMAC-SHA256, timingSafeEqual)
• Sessions (AES-256-GCM, random IV)
• Vault mode (scrypt + AES-256-GCM)
• Sliding-window rate limiter (BigInt nanosecond precision)
• XSS sanitizer (recursive deep sanitization)
• Security headers middleware
• CORS middleware
• WebSocket server (bounded, heartbeat, typed events)
• Server-Sent Events (heartbeat, backpressure)
• Streaming multipart file upload (≤128 KB heap)
• LRU cache (TTL, O(1) eviction)
• Telemetry tracker (ring buffer, P50/P99 latency)
• Cluster coordinator (node:cluster, IPC heartbeat, auto-restart)
• Webhook dispatcher (HMAC-SHA256, exponential backoff)
• OpenAPI 3.1 spec generation
• CLI: street create, street dev, street build, street start, street test
• CLI: street generate controller/service/repository
• CLI: street migrate:create, street migrate:run
• Docker multi-stage build
• GitHub Actions CI/CD with npm provenance publish

How to influence the roadmap

• Vote on existing issues with 👍
• Open a feature request at github.com/hassanmubiru/issues
• Start a discussion at github.com/hassanmubiru/discussions
• Contribute — see the Contributing Guide