Loading...

ROADMAP.md

DebugTools roadmap

This roadmap keeps utility tools as SEO entry points while prioritizing debugging workflows for logs, traces, APIs, auth, CI, mobile, Kubernetes, and production incidents. The live registry has 56 implemented tool routes: 18 stable local tools and 38 beta or experimental tools that work but need polish.

Current tool routes

live

API Workbench

/tools/api

Beta

Flagship REST client with collections, auth, environments, imports, and response inspection.

AI Debug Assistant

/tools/ai

Beta

Analyze errors, API responses, cURL notes, JSON issues, and stack traces with optional OpenAI BYOK support.

HTTP Status

/tools/http-status

Stable

Reference HTTP codes and response meanings while debugging requests.

HTTP Traffic Inspector

/tools/http-profiler

Beta

Inspect HAR exports for timing, redirects, failures, payload sizes, and slow requests.

Fetch Logger

/tools/fetch-logger

Beta

Live in-page panel that records every fetch request and response — try it live, then drop it into your own app.

Security Headers Inspector

/tools/security-headers

Beta

Score response headers, missing browser protections, and cookie security flags.

JSON Tools

/tools/json

Stable

Format, validate, repair, and inspect JSON payloads without sending data to a server.

JWT Decoder

/tools/jwt

Stable

Decode and inspect JSON Web Token claims during auth debugging.

Base64

/tools/base64

Stable

Encode and decode Base64 strings and files.

Hash Generator

/tools/hash

Stable

Generate SHA hashes locally in the browser.

Regex Tester

/tools/regex

Stable

Test regular expressions with live matches.

URL Encoder

/tools/url

Stable

Encode, decode, and inspect URLs and query strings.

Crash Beautifier

/tools/crash-beautifier

Stable

Clean up and inspect stack traces from mobile and web runtimes.

Stack Trace Explainer

/tools/stack-trace

Beta

Extract error type, root frame, app frames, dependencies, and likely cause from pasted stack traces.

Log Trace Rebuilder

/tools/log-trace

Beta

Group multiline logs by trace ID, request ID, correlation ID, severity, and related details.

Error Tracker

/tools/error-tracker

Beta

Fingerprint repeated errors into deduplicated triage groups with likely causes.

OpenTelemetry Trace Viewer

/tools/otel-trace-viewer

Beta

Summarize OTLP traces, spans, root spans, error spans, and slow operations.

Kubernetes Debug Helper

/tools/k8s-debug

Beta

Detect common pod failure signals and generate focused kubectl debug commands.

CI Debugger

/tools/ci-debugger

Beta

Inspect GitHub Actions workflows for jobs, steps, local act commands, and risky patterns.

SAML / OIDC Debugger

/tools/saml-oidc-debugger

Beta

Paste SAML responses, OIDC errors, redirect URLs, discovery JSON, callback logs, or token exchange notes to detect auth-flow breakage.

Certificate Chain Viewer

/tools/certificate-viewer

Beta

Paste PEM certificates, openssl output, TLS errors, or chain notes to spot expiry, SAN, issuer, and trust-chain problems.

Android Logcat Analyzer

/tools/android-logcat

Beta

Paste Android Logcat output to identify fatal exceptions, ANRs, native crashes, process restarts, and device clues.

React Native Debug Pack

/tools/react-native-debug

Beta

Analyze Metro logs, Hermes errors, bridge warnings, startup markers, and React Native stack traces.

Mobile Network Debug Checklist

/tools/mobile-network-debug

Beta

Turn device proxy, Chucker, OkHttp, Charles, Proxyman, and API failure notes into a repeatable mobile network debugging plan.

API Auth Config Tester

/tools/api-auth-config

Beta

Inspect API auth headers, signing inputs, scopes, environments, and credential wiring for common config mistakes.

OAuth Token Inspector

/tools/oauth-token-inspector

Beta

Inspect OAuth token clues, claims, scopes, expiry, refresh failures, issuer mismatch, and audience problems.

WebSocket Debugger

/tools/websocket-debug

Beta

Analyze WebSocket handshakes, close codes, auth headers, reconnect loops, ping/pong timing, and message samples.

Redirect Inspector

/tools/redirect-inspector

Beta

Inspect redirect chains, status codes, canonical loops, HTTPS upgrades, auth callbacks, and cache-control mistakes.

Cookie Security Inspector

/tools/cookie-security

Beta

Inspect Set-Cookie headers for SameSite, Secure, HttpOnly, domain/path scope, expiry, and auth-session risks.

CSP Parser

/tools/csp-parser

Beta

Parse Content Security Policy headers, blocked-resource reports, unsafe directives, and hardening recommendations.

Secret Scanner

/tools/secret-scanner

Beta

Scan pasted logs, env snippets, configs, and stack traces for likely tokens, keys, credentials, and redaction gaps.

Schema Validator

/tools/schema-validator

Beta

Validate JSON payloads and schema notes for type mismatches, missing required fields, enum errors, and API-contract drift.

SQL Explain

/tools/sql-explain

Beta

Explain query plans, indexes, joins, scans, sort steps, and likely SQL performance bottlenecks from pasted EXPLAIN output.

SQL Flow

/tools/sql-flow

Beta

Turn SQL statements and logs into execution flow, dependency, lock, transaction, and migration-risk notes.

Flamegraph Viewer

/tools/flamegraph-viewer

Beta

Analyze folded stacks, profiler summaries, hot paths, samples, and function-level performance evidence.

Perfetto Summary

/tools/perfetto-summary

Beta

Summarize Perfetto trace notes, thread activity, frame delays, binder calls, slices, and slow sections.

Heap / Memory Event Visualizer

/tools/heap-visualizer

Beta

Analyze allocation/free logs, heap growth, leak symptoms, GC pressure, OOM clues, and suspicious object lifecycle patterns.

Node Performance Analyzer

/tools/node-performance

Beta

Analyze Node.js event-loop lag, CPU profiles, heap pressure, async bottlenecks, and server timing evidence.

Python Profiler

/tools/python-profiler

Beta

Summarize Python profiler output, hot frames, blocking calls, asyncio stalls, import cost, and CPython stack snapshots.

Java Thread Dump

/tools/java-thread-dump

Beta

Parse Java thread dumps for blocked threads, deadlock clues, hot stacks, thread states, and JVM investigation notes.

JVM GC Log

/tools/jvm-gc-log

Beta

Analyze JVM GC logs for pause spikes, allocation pressure, heap tuning clues, promotion failures, and memory regressions.

Native Debug Session

/tools/native-debug-session

Beta

Parse GDB or LLDB transcripts into breakpoints, signals, frames, variables, commands, and next native-debugging actions.

Binary Inspector

/tools/binary-inspector

Beta

Inspect pasted hex or Base64 bytes, magic numbers, endian clues, file signatures, encoding mistakes, and binary payload notes.

Code Diff

/tools/code-diff

Stable

Compare snippets during review and debugging sessions.

Build Diff

/tools/build-diff

Stable

Compare build outputs and artifact changes.

Bundle Analyzer

/tools/bundle-analyzer

Experimental

Inspect bundle size and composition.

Startup Profiling

/tools/startup-profiling

Experimental

Visualize React Native startup timelines.

HTML Tools

/tools/html

Stable

Edit, format, preview, and export HTML.

CSS Tools

/tools/css

Stable

Minify, beautify, and validate CSS.

Markdown Preview

/tools/markdown

Stable

Write and preview Markdown content.

Color Picker

/tools/color

Stable

Pick, convert, and inspect color values.

Icon Finder

/tools/icons

Stable

Search icon libraries for UI assets.

Database Query

/tools/database

Beta

Run SQLite queries in a focused local workspace.

UUID Generator

/tools/uuid

Stable

Generate UUID v4 values in bulk.

Timestamp Converter

/tools/timestamp

Stable

Convert Unix, ISO, UTC, and local dates.

Password Generator

/tools/password-generator

Stable

Generate strong local passwords with length, symbol, ambiguity, copy, and strength controls.

Implemented roadmap routes

24 live
P0

SAML / OIDC Debugger

/tools/saml-oidc-debugger

Decode auth redirects, SAML responses, OIDC discovery, claims, scopes, callback URLs, nonce/state issues, and common identity-provider failures.

Certificate Chain Viewer

/tools/certificate-viewer

Inspect pasted PEM certificates, chains, issuers, subjects, SANs, expiry, fingerprints, and validation warnings.

Android Logcat Analyzer

/tools/android-logcat

Analyze Logcat, fatal exceptions, ANRs, process IDs, package names, device info, and root-cause candidates.

P1

React Native Debug Pack

/tools/react-native-debug

Combine Metro logs, Hermes errors, React Native stack traces, network notes, startup markers, and Flipper-alternative guidance.

Mobile Network Debug Checklist

/tools/mobile-network-debug

Generate setup steps for Charles, Proxyman, HTTP Toolkit, Requestly, Android Network Inspector, Chucker, OkHttp logging, and device proxy debugging.

API Auth Config Tester

/tools/api-auth-config

Generate and test API auth headers, tokens, sample credentials, request signing inputs, and endpoint-specific auth fixtures.

OAuth Token Inspector

/tools/oauth-token-inspector

Inspect access tokens, refresh-token notes, scopes, audiences, expiry, issuer mismatch, and common OAuth flow failures.

WebSocket Debugger

/tools/websocket-debug

Inspect WebSocket connection notes, close codes, handshake headers, message samples, auth failures, and reconnect loops.

Redirect Inspector

/tools/redirect-inspector

Analyze redirect chains, status codes, canonical loops, HTTPS upgrades, auth callbacks, and cache-control mistakes.

Cookie Security Inspector

/tools/cookie-security

Inspect Set-Cookie headers for SameSite, Secure, HttpOnly, domain/path scope, expiry, partitioning, and auth-session risks.

CSP Parser

/tools/csp-parser

Parse Content Security Policy headers, flag unsafe directives, explain blocked-resource reports, and suggest tighter policies.

Secret Scanner

/tools/secret-scanner

Scan pasted logs, env snippets, and config files for likely tokens, keys, credentials, and redaction gaps.

Schema Validator

/tools/schema-validator

Validate JSON payloads against schemas, explain mismatches, and produce API-contract debugging reports.

SQL Explain

/tools/sql-explain

Explain pasted query plans, indexes, joins, scans, and likely performance bottlenecks.

SQL Flow

/tools/sql-flow

Turn SQL statements and logs into execution flow, dependency, lock, and migration-risk notes.

P2

Flamegraph Viewer

/tools/flamegraph-viewer

View folded stacks or sampled profiles, identify hot paths, and produce performance-debugging notes.

Perfetto Summary

/tools/perfetto-summary

Summarize Perfetto trace exports into timeline highlights, slow sections, thread activity, and next checks.

Heap / Memory Event Visualizer

/tools/heap-visualizer

Visualize allocation/free event logs, heap growth, suspicious leaks, and memory lifecycle patterns.

Node Performance Analyzer

/tools/node-performance

Analyze Node.js timing, event-loop, memory, CPU, and async bottleneck evidence from pasted profiler output.

Python Profiler

/tools/python-profiler

Summarize sampling profiler output, hot frames, blocking calls, and CPython stack snapshots.

Java Thread Dump

/tools/java-thread-dump

Parse Java thread dumps for blocked threads, deadlock clues, hot stacks, thread states, and next JVM checks.

JVM GC Log

/tools/jvm-gc-log

Analyze GC logs for pause spikes, allocation pressure, heap tuning clues, and memory-regression evidence.

Native Debug Session

/tools/native-debug-session

Parse GDB or LLDB transcripts into breakpoints, signals, frames, variables, commands, and next actions.

Binary Inspector

/tools/binary-inspector

Inspect pasted hex or Base64 bytes, detect magic numbers, convert endian values, and surface file signatures.

Research sources

Shipped in the codebase

shipped
stack-trace, log-trace

Logs & Errors pillar

Stack Trace Explainer and Log Trace Rebuilder are implemented as local-first debugging workflows with parsing, highlighted evidence, root-cause hints, and fix checklists.

api, http-profiler, url, http-status

API / Network pillar

API Workbench and HAR Analyzer / HTTP Profiler are live, while smaller URL and HTTP status utilities stay available as SEO entry tools.

security-headers, jwt

Auth / Security pillar

Security Headers and JWT Decoder are live local tools for hardening response headers and inspecting token claims.

ci-debugger, k8s-debug, otel-trace-viewer

DevOps / Observability pillar

CI / GitHub Actions Debugger, Kubernetes Debug Helper, and OpenTelemetry Trace Viewer are implemented as lightweight paste/upload analyzers.

utility routes

SEO entry utilities

JSON, Base64, Hash, UUID, Timestamp, Regex, Code Diff, Build Diff, HTML, CSS, Markdown, Color, Icons, and Database tools remain available but no longer define the product edge.

tools/all

Tool catalog route

`/tools/all` lists the live registry and links to implemented tool routes. It is a catalog, not a standalone tool.

Beta or needs polish

beta
tools/security-headers

Security Headers + CORS polish

Security Headers is live, but the route should add deeper CORS-specific diagnosis for preflight failures, credentialed requests, wildcard origins, and cache behavior.

tools/api

API Workbench

REST requests, tabs, headers, auth helpers, environments, history, local collections, imports, API documentation generation, AI context export, safer cURL reproduction, private-mode cleanup, and optional authenticated collection sync are live. Cloud rename/update polish is still needed.

tools/bundle-analyzer

Bundle Analyzer

Parses pasted module-size lines and produces a summary, top modules, copy, and download output. It does not yet ingest native webpack stats JSON or analyzer HTML directly.

tools/startup-profiling

React Native startup profiling

Parses `[Performance] Name: 123ms` style logs into phase totals and a simple timeline. Broader log formats and imported trace support are not implemented yet.

Next work

next
workspace / teams

Workspace and team foundation

Define the organization, workspace, member, role, project, collection, and debug-report model before adding team controls to the API Workbench.

debug routes

Deepen implemented analyzers

The P0/P1/P2 routes now exist. Next work is improving parsers with richer imports, examples, exports, and route-specific test fixtures.

tools/lib + src/lib/tools

Shared logic extraction

Continue moving reusable parsing and transform logic out of client pages so browser tools, tests, exports, and a future CLI can share implementations.

tool tests

Route-level smoke coverage

Add focused tests for the catalog and high-risk tools so registry claims, route counts, samples, exports, and mobile layouts stay aligned with routed code.

CLI_ROADMAP.md

CLI foundation

Start with pipe-friendly commands for tools that already have shared or easily extractable logic: JSON, JWT, Base64, hash, regex, URL, diff, and HTTP status.

Backlog proposals

backlog
API / Network / API

OpenAPI Viewer

Preview Swagger/OpenAPI specs, endpoints, schemas, and examples.

API / Network / API

GraphQL Explorer

Run GraphQL queries with variables, headers, and schema introspection.

API / Network / Network

Webhook Inspector

Capture, replay, and debug webhook payloads from external services.

API / Network / API

cURL Converter

Convert cURL commands into fetch, Python, Go, and Postman-style requests.

API / Network / Network

HAR Viewer

Inspect browser network exports with request waterfalls and timing data.

API / Network / Network

DNS Lookup

Resolve A, AAAA, CNAME, MX, TXT, and NS records from a simple workbench.

Dev Utilities / Data

YAML/TOML Tools

Format, validate, and convert YAML, TOML, and JSON configuration files.

Dev Utilities / Data

SQL Formatter

Format SQL queries and highlight common syntax mistakes.

DevOps / Observability / Ops

Cron Parser

Explain schedules, preview next run times, and validate cron expressions.

DevOps / Observability / DevOps

Dockerfile Linter

Review Dockerfiles for ordering, caching, security, and image size issues.

DevOps / Observability / DevOps

Kubernetes YAML Validator

Validate manifests and surface common deployment configuration problems.

Dev Utilities / Frontend

Accessibility Checker

Inspect contrast, labels, landmark structure, and common WCAG issues.

Dev Utilities / Utilities

QR Code Studio

Generate QR codes for URLs, Wi-Fi, contact cards, and payload testing.