📋 Roadmap — pending milestones

[mertbekci]

Living tracker for the roadmap defined in planning/milestones.yaml. Each milestone here links to its detailed task entries in planning/tasks.yaml. Source of truth lives in those files — this issue is the at-a-glance view.

Last refresh: v0.6.5 (2026-05-11).

Status legend

• ✅ done (in main)
• 🟡 in-progress / partial
• 🔵 planned
• ⚫ deferred to v1.5
• 🅿️ parking lot — design RFC needed

---

✅ Completed milestones (v0.1 → v0.6.5)

Core engine + UI

• M0 Scaffold + CI + planning docs
• M1 Vertical slice (HTTP engine + minimal UI)
• M2 Collections & file format (.sman primary, .req.yaml legacy)
• M2.5 UI polish pass (Postman light)
• M2.6 Tabs + curl import (now on @scrape-do/curl-parser since v0.6.4)
• electron-builder + tag-driven release workflow → v0.1.0 published
• Cross-platform shortcut layer (mod → ⌘ on macOS, Ctrl elsewhere)

Variables + auth

• M3.1 Environment variables + resolver
• M3.5 {{var}} HighlightedInput
• M3.6 Built-in dynamic variables ({{random}}, {{uuid}}, {{timestamp}}, {{timestampSec}}, {{isoDate}}, {{randomInt}})
• Collection & global variables, folder-level auth inheritance #30 Scoped variables + folder-level auth inheritance (Request > Folder > Collection > Environment > Global)
• M4 Auth helpers — Basic / Bearer / API Key / OAuth2 client creds / AWS SigV4
• M4 T043 + [feat] OAuth 2.0 and OpenID Connect Authentication Support #37 OAuth 2.0 authorization code flow + PKCE + OIDC discovery + JWT inspector + token placement (header / query / form body) + 30s-before-expiry refresh

Request surface

• M3.3 Params tab (URL ↔ params two-way)
• M3.4 Resizable + orientable split (top/bottom default since v0.6.0)
• M3.7 History MVP
• M3.8 Per-request Settings tab (proxy, timeout, redirect, TLS, HTTP version, raw-body, cookie jar)
• M3.9 Right-click context menus (URL encode/decode/base64 + stringify/destringify, selection-aware since v0.6.1)
• M3.10 Code export MVP (curl/fetch/python/go)
• M5 Proxy + Scrape.do native mode + rotating proxy
• M6 Cookie jar + HTTP/2
• Cookie Management UI — jar, inspect, edit, scraping-aware #23 Cookie manager UI — manual add, httpOnly mask + reveal, JSON + Netscape import/export

Scraping-first

• Scraping-first: rate limiting, UA presets, response fingerprint, rotating proxy #31 Per-request rate limit (fixed delay + jitter), UA preset picker (9 presets), anti-bot signal detection, rotating proxy strategy

Response viewer + Dev tools

• M8 partial Dark mode, JSON tree, response search, TTFB/download timings
• [feat] Loading animation while waiting for response #3 Loading animation while sending
• [bug] Response viewer mode resets to Raw on every send #4 Response mode persistence per tab
• [feat] JSON tree starts fully expanded #5 JSON tree starts fully expanded
• [feat] "Save response body" action with smart filename #7 Save response to file
• Virtual scroll history (100k+ entries)
• Large-response streaming (>5 MB → fullBodyBytes path, IPC-safe)
• [feat] Surface history storage path + retention controls in settings #10 Settings dialog with Storage / Network / Keyboard shortcuts tabs
• Dev Tools panel — request timeline, network logs, performance #28 Dev Tools panel — timing waterfall, sent URL/headers, redirect chain, TLS peer cert, remote address, script console

Editors + ergonomics

• M3.2 follow-up extended shortcuts
  • ⌘L URL bar focus → [feat] ⌘L / Ctrl+L to focus URL bar (Chrome-style) #1
  • ⌘D duplicate tab → [feat] Duplicate tab (⌘D) #8
  • ⌘K command palette → [feat] Linear-style command palette (⌘K) #9
  • ⌘1..9 switch tab by index
  • ⌘Shift+T reopen closed tab
  • ⌘R Insomnia-style parallel send (v0.6.2)
• [bug] ⌘A selects entire page instead of focused input/code panel #6 ⌘A scope leak (HighlightedInput + Code panel)
• [bug] Query params re-encoded when URL already contains encoded characters #2 Query param double encoding
• [bug] CMD + F shortcut not working for response body. #52 ⌘F in response body
• [feat] URL Parameter box improvements. #46 URL parameter box improvements
• [feat] Spotlight style URL/Collection Searching #47 Spotlight-style URL/Collection search
• [bug] Inline Variables Should Be Disabled by Default #54 Inline variables disabled by default
• [feat] JSON Body Formatter #60 JSON body formatter
• [bug] Disabled URL parameters are disappearing #66 Disabled URL parameters disappearing
• [feat] Bulk header edit #68 Bulk header edit
• [feat] Naming request as file path may should create folder(s) and put request there #69 Path-in-name save
• [bug] Load Test Thred/Request input rule improvement #70 / [bug] Load test concurrency / total inputs reject empty value, can't replace 1 with 200 #77 Load test number input UX
• [bug] Load test results — last row falls below the fold, no auto-focus #74 Load test auto-scroll
• [bug] Screenshot modal stays open when keyboard shortcuts fire (cmd+N etc.) #75 Screenshot modal vs global shortcuts
• [bug] Renaming a request from the sidebar does not update the open tab's name #76 Workspace rename keeps the open tab in sync
• [feat] Load test — option to save failed response bodies for inspection #78 Save failed response bodies
• [feat] Load test watched headers (workspace + per-run + click-to-add from response) #79 Watched response headers in load runs (workspace + per-run + click-to-add)
• [Feature] Optional SSL/TLS verification toggle (per-request + global setting) #80 TLS certificate verification toggle (per-request + global default)
• [feat] Restore all unsaved tabs when restart #71 / [bug] Tabs are disappearing when restart/close. #82 Restore unsaved tabs on restart (localStorage persisted)
• [feat] Show Change Log after every update #72 Post-update changelog popup
• [feat] Load Test'de thread sayısı da gözükse ne iyi olur #73 Load test concurrency / thread display
• [feat] URL hosting part does not support {{var}}s. #86 {{var}} in URL host segment
• [feat] Request body json formatting #87 Body JSON formatting (lenient parse + auto-fix + lint gutter, v0.6.4)
• [bug] url in the query will be rendered as "queries" #88 Nested URL exploded into params rows (v0.6.5)
• [feat] Variable resolution in request body + per-request raw-body toggle #83 Per-request raw-body toggle (skip variable substitution)
• [feat] Right-click string utilities on selected text (encode/decode/stringify/destringify) #84 Right-click string utilities (stringify/destringify + selection-aware)

Load + collection

• M11 MVP Load runner with validator + live metrics
• Collection Runner — sequential & parallel execution #21 Collection runner — sequential / parallel, concurrency, CSV iterations, JSON / CSV / HTML exports
• Per-iteration {{random}} / {{timestamp}} regen verified
• Failed-body ring buffer (1–1000, JSON export)

Streaming

• WebSocket client support #24 WebSocket client (reconnect, ping latency, per-connection proxy)
• SSE (Server-Sent Events) streaming support #25 SSE Events mode in response viewer
• SSE compressed-stream support (gzip / br / deflate, v0.6.5)

Scripting

• Pre-request & Post-response scripts #20 Pre-request + post-response scripts (vm sandbox, bru + req + res API, captured console, test() / expect().toBe())

Workspaces + git

• [feat] Multi-collection (multi-workspace) support #61 Multi-workspace Phase 1 (switcher dropdown, per-workspace UI snapshot, persisted open list)
• Git porcelain integration — branch / ahead / behind / status in the status bar

Import / export

• M9 partial OpenAPI / Swagger 2.0 importer (OpenAPI import (v3.x + v2/Swagger) #27)
• curl import (paste detection in URL bar)

Body editor

• v0.6.4 CodeMirror body editor with language syntax highlighting + {{var}} decoration + autocomplete + JSON lint gutter + lenient JSON beautify with auto-fix (JSON5 + missing-comma repair)
• v0.6.4 HTML preview renders external CSS/images via <base href> + relaxed CSP

Releases shipped

• v0.1.0 → v0.6.5. Tag-driven CI builds DMG / EXE / AppImage + Homebrew cask bump.

---

🟡 In-progress / partial

• [analysis] Auto-update mekanizması — mevcut yapıya entegrasyon ve aşamalı plan #35 Auto-update mechanism — Phase 1 shipped (4-hour GitHub Releases poll + dismissable banner + post-update changelog popup [feat] Show Change Log after every update #72). Phase 2 left:
  • Background download via electron-updater
  • One-click install + relaunch
  • Settings → Updates panel (toggle auto-check, "Check now" button, last-checked timestamp, release notes preview)
• i18n — infrastructure spike (i18next deps installed, EN baseline drafted). Pending:
  • 6 more locales: TR / ZH / JA / KO / HI / TH
  • Language switcher in Settings → Language tab
  • System-language auto-detect
  • Full component sweep (no untranslated strings)

---

🔵 Planned

• M7 Code export full
  • postman-code-generators integration (20+ langs)
  • CodeMirror read-only preview
  • Snippet language switcher polish
• M9 Import / Export
  • Postman v2.1 importer
  • Postman v2.1 exporter
  • Bruno .bru folder importer
  • Insomnia v4 JSON importer
  • HAR importer + exporter
  • One-click "Import from…" menu with format auto-detect
• M10 Packaging & release polish
  • Code signing (mac notarize + Win EV cert)
  • Onboarding / welcome screen
  • Internal rollout + feedback loop
• M11 follow-up Load runner v2
  • Latency-over-time line chart
  • Status histogram + percentile distribution chart
  • Result persistence (named runs)
  • Stop button improvement (graceful drain)
• [design] App logo, icon set + brand system #39 Brand / icon system + app logo (priority: high, blocked on design approval)
• Docs site follow-up (scrapeman-landing): 14 docs pages still need imagery, Hero hand-coded mock needs re-shoot post-v0.6.0 layout flip.
• Settings → Updates panel — surface the existing auto-updater state to the user (subset of [analysis] Auto-update mekanizması — mevcut yapıya entegrasyon ve aşamalı plan #35).

---

⚫ Deferred to v1.5

• [feat] grpc support #41 gRPC support — large effort, niche for the scraping use case. Revisit when WebSocket + SSE adoption matures.
• Request chaining via variable capture (no script sandbox)
• Response diff (between two runs or two history entries)
• Quick-look eye icon for env variables (peek resolved values)
• Comments on .req.yaml / .sman files
• Snippet library for common Scrape.do patterns
• GraphQL dedicated body editor (basic JSON body editor handles the common case today)

---

🅿️ Parking lot — design RFC needed

Items here stay open until concrete user demand surfaces a use case that genuinely doesn't fit as a built-in. Each is too high-blast-radius to design speculatively.

• [discuss] Plugin system for user-land selection transforms #85 — Plugin system for user-land selection transforms. Allow users to write small string-transform scripts that show up in the right-click menu. Open questions: sandbox model (extend the existing pre/post-request VM, or a stricter pure-string sandbox), distribution (per-workspace folder vs. user-level), API surface, trust model, name-collision rules. Bundled common transforms ([feat] Right-click string utilities on selected text (encode/decode/stringify/destringify) #84) landed in v0.6.1 — watch what users actually want, then come back to it.

---

Source files

• planning/milestones.yaml — milestone metadata
• planning/tasks.yaml — granular task breakdown
• planning/postman-parity.md — feature checklist vs Postman
• planning/session-state.md — current dev status
• planning/architecture.md — D1–D8 decisions
• CHANGELOG.md — every shipped version

How this issue stays in sync

Updated by hand on every Scrapeman release. The feedback_landing_sync memory rule also forces an audit of scrapeman-landing at the same time so the docs site doesn't drift.

A bot to autogenerate this from CHANGELOG.md + closed issues is on the M10 polish list.