Roadmap
Real build status per suite. SOMA is in beta — some components are earlier-stage than others. Editorial labels from docs/02; commit counts from local git history as of 2026-07-30. Stars and release counts show — until the daily GitHub Actions aggregation job is wired.
Shipped
- ✓Footprint page — first published production baseline for soma-control: 5.152 MiB idle RSS, 0.282 s startup, measured on linux/arm64 (commit de4f858). Full methodology and reproduce-it script at soma.dev/en/footprint.
Now
What is actively being built
- →SOMA-Security
Graph engine, compliance rules, and CIEM analysis are shipped and tested against real cloud data. API, scanner, and frontend are in active development.
- →SOMA-AI
Multi-agent orchestration, RAG with pgvector, HITL approvals, and evaluations — 35+ route files and 31 migrations in active build-out. Architecturally complete; not yet production-ready.
- →SOMA-Insights dashboard embedding
The three Leptos WASM dashboards (observe, analytics, audit) have pre-built dist/ but are not yet embedded in server binaries. That embedding work is next for Insights.
Next
Planned — not promised
- ·Public repositories in order — all under Apache 2.0: SOMA-DevKit first (foundation libraries; soma-schema is already on crates.io), then SOMA-Control, then remaining suites as they mature.
- ·soma-iam auth integration across all suites — one identity layer for every dashboard and API.
- ·First hosted lean-services exploration: OTP/verification API.
- ·soma-ecosystem Docker image published to a public registry.
Later
Future work, no firm timeline
- ·Footprint baselines for remaining suites (SOMA-Insights, SOMA-Growth, …) — following the same methodology as the soma-control baseline.
- ·Comparison page (/vs): side-by-side with conventional stacks, sourced from vendor documentation.
- ·Cost page (/cost): cloud cost comparison using documented AWS on-demand rates.
- ·Full hosted lean-services track (see below).
- ·Additional locales (language TBD).
Hosted lean services
A second track is planned: small, focused managed APIs — OTP/verification, transactional email, outbound webhooks, cron, and audit-log-as-API — built on the same Rust substrate. The intent is low, predictable pricing sized for a startup. Pricing, when it exists, will be usage-based — per verification, per email, per invocation — not per seat. No launch date and no pricing yet. This is planned work, not a launched product.
Follow progress on GitHub →SOMA-Control
shippedIAM, secrets vault, feature flags, and licensing — one binary, one Postgres pool.
| Component | Status |
|---|---|
| soma-control (binary) | shipped |
| soma-iam (216 routes, 37 modules, 52 migrations) | shipped |
| soma-vault (envelope encryption, JSON Schema) | shipped |
| soma-flags (Redis pub/sub, segments, change-request) | shipped |
| soma-licensing (plans, usage meters, webhooks) | shipped |
| Dashboards — IAM / vault / flags / licensing | shipped |
| Client SDKs (TypeScript, Python, Go) | usable |
| Terraform provider + GitHub Action | usable |
| Deployment artifacts (Helm, Docker, AWS) | usable |
Core services are functionally complete and self-hostable. SDKs and Terraform provider lack test suites.
SOMA-Insights
shippedOTLP ingest into Postgres, AI-assisted RCA, and MCP interfaces for agent tooling.
| Component | Status |
|---|---|
| soma-observe (OTLP/HTTP + gRPC, alerts, MCP server) | shipped |
| soma-analytics (YAML metric models → SQL, MCP server) | shipped |
| soma-audit-server (hash-chained log, HMAC, seal/verify) | shipped |
| Dashboards — observe / analytics / audit | usable |
All three servers have production-grade implementations. Dashboards have pre-built dist/ but are not yet embedded in server binaries.
SOMA-Growth
usableTransactional notifications, social intelligence, and web extraction in one binary.
| Component | Status |
|---|---|
| soma-notify (76 routes, 19 migrations, Redis outbox) | usable |
| soma-social (LinkedIn/X/Medium/Substack, LLM layer) | usable |
| soma-extract (full-page crawl, LLM structured extraction) | wip |
| soma-growth-server (unified binary) | usable |
soma-notify is the most production-ready. soma-extract API surface is thin. Browser extension exists but is not a shipped product.
SOMA-AI
wipRust-native agent platform: multi-agent orchestration, RAG with pgvector, HITL, and MCP.
| Component | Status |
|---|---|
| soma-ai-server (35+ routes, 31 migrations, 31,167 LOC) | wip |
| soma-ai-runtime (orchestration + memory execution) | wip |
| soma-ai-sdk (typed Rust SDK, 4,350 LOC) | usable |
| Dashboard (17 pages: agents, evals, guardrails, workflows) | wip |
Architecturally ambitious and in active early build-out. Not yet production-ready.
SOMA-DevKit
shippedShared foundation: backend plumbing, migration runner, component library, audit trail, SDKs.
| Component | Status |
|---|---|
| soma-infra (14 feature-gated modules, 100% rustls) | shipped |
| soma-schema v0.4.0 (crates.io, drift detection) | shipped |
| soma-ui (growing catalog of typed Leptos components) | shipped |
| soma-audit (HMAC-SHA256 chain, Ed25519 seal/verify) | shipped |
| soma-sdks (crypto, IAM-SDK, flags-core, soma-sdk) | shipped |
All five libraries have real implementations. soma-ui is CSR-only today.
SOMA-Delights
usableBusiness-applications family: complete lean business platforms on the SOMA substrate.
| Component | Status |
|---|---|
| s-delights API (80+ routes, 108+ migrations, embedded WASM dashboard) | shipped |
| soma-cust-mobile (React Native / Expo 56, customer app) | usable |
| soma-driver-mobile (React Native / Expo 56, driver app) | usable |
First application: a delivery-operations platform, built end to end on SOMA. HRMS-class platforms are the reference frame for what belongs in this family.
SOMA-Ecosystem
shippedOne-command Docker distribution for the entire platform.
| Component | Status |
|---|---|
| soma-console (9 services + Postgres 17 + Redis 7 + Caddy 2) | shipped |
| soma-ecosystem all-in-one image (single docker run) | usable |
Compose stack and Dockerfile are complete. No published registry image yet — local build only.