Skip to content

ROADMAP.md

Latest commit

 

History

History
132 lines (106 loc) · 5.38 KB

ROADMAP.md

File metadata and controls

132 lines (106 loc) · 5.38 KB
Raw

Roadmap — Finchippay-Solution

This document tracks what's shipped, what's in progress, and what's planned.

✅ v1.0 — Foundation (Shipped)

  • Freighter wallet connection (non-custodial)
  • Send XLM or any Stellar asset
  • Paginated transaction history with filters
  • Next.js 14 frontend with Tailwind CSS
  • Express backend with Horizon proxy, auth, rate limiting
  • Docker Compose local dev environment
  • GitHub Actions CI (frontend + backend + contracts + Playwright)

✅ v1.1 — Smart Contract (Shipped)

  • FinchippayContract Soroban WASM contract
  • Tips with on-chain aggregate stats
  • Immutable payment receipts
  • Time-locked escrow (create / claim / cancel)
  • Streaming payments (open / claim / top-up / close)
  • N-of-M multi-sig payment proposals (auto-execute at threshold)
  • Batch fan-out sends
  • Full test suite (15+ tests, checked arithmetic, TTL management)

✅ v1.2 — Platform Features (Shipped)

  • SEP-0002 federation (username → Stellar address)
  • SEP-0010 JWT auth
  • Analytics dashboard (volume charts, top recipients, activity by day)
  • Recurring payment schedules (client-side)
  • Batch payment form
  • Payment link generator + QR codes
  • Creator tipping dashboard + /tip/:username pages
  • AI payment assistant
  • Address book with federation resolution
  • Stellar DEX trading interface
  • PWA manifest + service worker offline support
  • Storybook component library
  • Sentry error tracking (secret key redaction)
  • Webhook delivery with HMAC-SHA256 signatures
  • Turrets txFunction deployment and monitoring

🔄 v1.3 — Hardening (In Progress)

  • Emergency pause mechanism (circuit breaker) on the Soroban contract
  • Contract upgradability (upgrade(new_wasm_hash)) with version tracking
  • Deposit/timelock upper bounds to prevent griefing and permanent lock-up
  • Cumulative top-up cap enforcement in streaming payments
  • Cross-dialect migrations (SQLite + PostgreSQL) (#027)
  • JWT_SECRET fallback removed — hard error on missing config
  • Frontend eslint-disable cleanup with documented rationales
  • Console.* replaced with structured logger across all components
  • Contract AMM/yield escrow TODOs linked to GitHub issue tracker
  • Legacy rescue_tokens removed; the time-delayed emergency withdrawal flow is the sole funds-rescue path (#678)
  • Stellar SDK v16 upgrade in frontend package.json
  • Coverage thresholds raised to 80% lines / 70% branches
  • Third-party security audit of FinchippayContract
  • Migrate tips/username storage from in-memory to SQLite/PostgreSQL
  • Refresh token rotation for SEP-0010 sessions
  • Soroban RPC abstraction layer in the frontend
  • Stream pause / resume (contract extension)
  • Integration tests for streaming and multi-sig UI flows

📋 v2.0 — Mainnet Readiness

  • Bug bounty program details documented in SECURITY.md
  • Audit preparation roadmap with auditor shortlist
  • Community channels expanded (Discord planned, GitHub Discussions active)
  • Benchmark regression detection added to CI pipeline
  • Formal security audit of FinchippayContract
  • Mainnet contract deployment + verification
  • Contract event migration: publish() → #[contractevent] macro
  • USDC and other SAC token support throughout the UI
  • Multi-network switching (testnet ↔ mainnet) per-session
  • Fiat on-ramp integration (MoneyGram, Stellar Anchor)
  • Mobile-responsive PWA improvements
  • Multi-language SDKs (Python, Go, Rust) with generated bindings
  • Push notification webhooks via web-push

💡 Ideas / Community Requests

  • Multi-language i18n support (English, Spanish, French) ✅
  • RTL language support (Arabic, Hebrew) — noted as future work
  • Milestone-based escrow releases
  • Subscription/recurring payments via Soroban streams
  • DAO treasury multi-sig management UI
  • CSV export of payment history
  • NFT receipt display in wallet dashboard

Have an idea? Open an issue or see CONTRIBUTING.md.

📋 v1.4 — Quality & Stability (Current)

  • Cross-dialect migration support (SQLite + PostgreSQL)
  • Error code documentation drift checks in CI
  • Code quality improvements (unused imports removed, logger deduplication)
  • Stellar SDK Renovate updates re-enabled for automated version tracking
  • Contract version in Cargo.toml aligned with on-chain CONTRACT_VERSION
  • VAPID keys made optional in non-production environments
  • Health test suite fixed (missing braces, ESLint globals)
  • Better CONTRACT_ID error messaging with requireContractId helper
  • JWT_SECRET fallback default removed — hard error when missing
  • Console.* calls replaced with structured logger in ErrorBoundary, TransactionActions
  • AMM integration TODOs linked to GitHub issue tracker with detailed roadmap
  • Stellar SDK v16 upgrade in frontend dependencies
  • Coverage thresholds raised to 80% lines / 70% branches / 75% functions
  • Benchmark regression detection added to CI pipeline
  • Contract event migration: publish() → #[contractevent] macro
  • AMM/DeFi integration (yield_escrow TODOs)
  • Third-party security audit
  • Increase test coverage to 80%+ across all components

Last updated: August 11, 2026