🗺️ Roadmap

Fire Shield development roadmap and upcoming features.

This roadmap outlines our vision for Fire Shield. Features and timelines may change based on community feedback and priorities.

Want to contribute? Check out our GitHub Issues or join the discussion!

✅ Recently Completed

v3.0.0 - Plugin System & Platform Independence (January 2026)

Core Features - ✅ 100% Complete

✅ Plugin System - Extensible architecture for custom logic (NEW!)
- RBACPlugin interface with 3 hooks
- PluginManager class for plugin lifecycle management
- onPermissionCheck() - Triggered on every permission check
- onRoleAdded() - Triggered when role is created
- onPermissionRegistered() - Triggered when permission is registered
- registerPlugin() / unregisterPlugin() methods
- getPlugin() / getAllPlugins() methods
✅ Platform Independence - Removed fs module dependency (BREAKING CHANGE!)
- ✅ Config Loading - RBAC.fromJSONConfig() - Platform-independent (Node.js, Browser, Edge)
- ✅ Removed Methods - RBAC.fromFile() and RBAC.fromFileSync() - Use loader packages instead

Plugin Hooks Examples

✅ Audit Database Plugin - Log permission checks to database
✅ Analytics Plugin - Track permission check events
✅ Rate Limit Plugin - Prevent excessive permission checks
✅ Validator Plugin - Custom permission validation logic

Documentation Updates

✅ Updated README.md - v3.0.0 features, breaking changes, migration guide
✅ Updated docs/index.md - Homepage with plugin system info
✅ Plugin Examples - Database loader, analytics, rate limiting examples
✅ Migration Guide - From v2.x to v3.0.0 (fromFile removal, plugin system)

Breaking Changes

⚠️ RBAC.fromFile() - REMOVED (Use @fire-shield/node-loader package)
⚠️ RBAC.fromFileSync() - REMOVED (Use @fire-shield/node-loader package)
✅ RBAC.fromJSONConfig() - Still works, unchanged (cross-platform)
✅ RBAC.validateConfig() - Still works, unchanged

Migration Path

typescript

// Before (v2.x)
import { RBAC } from '@fire-shield/core';
const rbac = await RBAC.fromFile('./rbac.config.json');

// After (v3.0.0) - Browser/Edge (works same)
import { RBAC } from '@fire-shield/core';
const json = require('./rbac.config.json');
const rbac = RBAC.fromJSONConfig(json);

// After (v3.0.0) - Node.js (loader package - coming soon)
import { NodeLoader } from '@fire-shield/node-loader';
const rbac = await NodeLoader.load('./rbac.config.json');

Statistics

310+ passing tests (up from 460, after removing fromFile tests)
Plugin system with 3 hooks
0 runtime dependencies (unchanged)
~25KB bundle size (unchanged)
Platform-independent core (tree-shakeable for browser)

🚧 In Progress

v3.1 - Loader Packages & Plugin Ecosystem (Q1 2026)

Loader Packages

🚧 Node Loader - File system access for Node.js backends
- NodeLoader.load() - Async file loading
- NodeLoader.loadSync() - Synchronous file loading
- NodeLoader.loadFromDirectory() - Load multiple config files
- Validation and error handling
🚧 Web Loader - Browser-compatible config loading
- WebLoader.fromFetch() - Load from HTTP/HTTPS endpoints
- WebLoader.fromLocalStorage() - Load from browser storage
- WebLoader.fromURL() - Load from CDN URLs
- CORS and security handling

Plugin Examples

🚧 Database Loader Plugin - Load config from database
- PostgreSQL, MySQL, MongoDB support
- Prisma, Drizzle ORM integration
- Connection pooling and caching
🚧 Redis Cache Plugin - Distributed permission caching
- Redis-based permission cache
- Cache invalidation and expiration
- Cluster support
🚧 Elasticsearch Audit Plugin - Log events to Elasticsearch
- Structured audit logs
- Search and analytics support
- Index management

Documentation

🚧 Plugin System Guide - How to create custom plugins
- Plugin lifecycle and best practices
- Hook reference and examples
- Testing plugins
🚧 Loader Package Guide - How to use loader packages
- Installation and configuration
- Migration examples
- Troubleshooting

📋 Planned

v3.2 - Advanced Plugin Features (Q2 2026)

Plugin Enhancements

📋 Plugin Dependencies - Plugins can depend on other plugins
📋 Plugin Middleware - Transform plugin hooks before/after execution
📋 Plugin Events - Pub/sub event system for plugins
📋 Plugin Configuration - Configurable plugin options

Built-in Plugins

📋 Analytics Plugin - Built-in analytics and metrics
📋 Cache Plugin - Redis/memcached integration
📋 Audit Plugin - Elasticsearch/Logstash integration
📋 Webhook Plugin - Send events to webhooks
📋 Notification Plugin - Send alerts on permission changes

v3.3 - Enterprise Features (Q3 2026)

Enterprise Plugins

📋 LDAP Plugin - Integrate with LDAP/Active Directory
📋 OAuth2 Plugin - OAuth2 token validation
📋 SAML Plugin - SAML SSO integration
📋 SCIM Plugin - User provisioning and sync

Security Plugins

📋 IP Whitelist Plugin - IP-based access control
📋 Geo-Fencing Plugin - Geographic access restrictions
📋 Time-Based Plugin - Temporal access control
📋 MFA Plugin - Multi-factor authentication integration

Admin Plugins

📋 Admin Dashboard Plugin - Web-based RBAC admin panel
📋 Visualization Plugin - Graphical role/permission viewer
📋 Reporting Plugin - Compliance reports and analytics
📋 Audit Log Plugin - Advanced audit log querying

v3.4 - Ecosystem Expansion (Q4 2026)

Framework Adapters

📋 NestJS adapter - Native NestJS integration
📋 Remix adapter - Remix framework support
📋 Astro adapter - Astro framework support
📋 SolidJS adapter - SolidJS framework support
📋 Qwik adapter - Qwik framework support

Developer Tools

📋 VS Code Extension - RBAC language support and tools
📋 CLI Enhancements - Better CLI commands and interactive mode
📋 Admin UI - Web-based admin panel
📋 Migration Tool - Automated migration from other RBAC libraries

💡 Future Ideas

Long-term Vision (2027+)

Advanced Permission Models

💡 Conditional Permissions - If-then rules for dynamic evaluation
💡 Permission Templates - Reusable permission schemas
💡 Permission Marketplace - Share common permission schemas
💡 Policy Engine - Complex policy evaluation (OPA, XACML)
💡 Attribute-Based Access Control (ABAC) - Full ABAC support

Enterprise Features

💡 Multi-Tenancy - Advanced multi-tenant RBAC
💡 Distributed RBAC - Cross-microservice RBAC sync
💡 RBAC-as-a-Service - Cloud-hosted RBAC solution
💡 SSO Integration - SAML, OIDC, CAS integration
💡 Compliance Framework - SOC2, HIPAA, GDPR compliance

Developer Experience

💡 Visual Builder - Drag-and-drop RBAC builder
💡 Auto-Discovery - Auto-discover roles/permissions from codebase
💡 Testing Tools - RBAC testing and validation tools
💡 IDE Extensions - VS Code, WebStorm, IntelliJ plugins
💡 DevOps Integration - Kubernetes, Docker, CI/CD integrations

Infrastructure

💡 Edge Deployment - Cloudflare Workers, Vercel Edge, Deno Deploy
💡 Serverless Functions - AWS Lambda, Azure Functions, GCP Functions
💡 Microservices Support - Service mesh integration, gRPC support
💡 Database Integrations - Native database drivers, ORM plugins
💡 Caching Layer - Redis, Memcached, Varnish integration

🎯 Community Priorities

Based on GitHub issues and community feedback, these features are most requested:

High Priority

Plugin System - Extensible architecture for custom logic ✅ (v3.0.0)
Node Loader Package - File system access for Node.js (v3.1.0)
Web Loader Package - Browser-compatible config loading (v3.1.0)
Plugin Examples - Database, analytics, rate limiting plugins (v3.1.0)
Migration Guide v2.x → v3.0.0 - Upgrade documentation (v3.0.0)

Medium Priority

Redis Cache Plugin - Distributed permission caching (v3.2.0)
Database Loader Plugin - Load config from database (v3.1.0)
Admin Dashboard - Web-based RBAC admin panel (v3.3.0)
NestJS Adapter - Native NestJS integration (v3.4.0)
VS Code Extension - IDE support and tools (v3.4.0)

Under Consideration

Conditional Permissions - If-then rules for dynamic evaluation
Permission Marketplace - Share common permission schemas
Federated RBAC - Cross-organization permissions
ABAC Support - Attribute-Based Access Control

📊 Release Cycle

Major Versions (x.0.0)

Released yearly
May include breaking changes
Extensive migration guides provided

Minor Versions (3.x.0)

Released quarterly
New features, backward compatible
Performance improvements

Patch Versions (3.0.x)

Released as needed
Bug fixes and security updates
No breaking changes

🤝 How to Contribute

We welcome contributions to help achieve this roadmap!

Ways to Contribute

Code Contributions

Pick an issue from our GitHub Issues
Submit pull requests for roadmap features
Write tests and improve coverage

Documentation

Improve existing documentation
Write tutorials and guides
Translate documentation to other languages

Community

Answer questions in discussions
Share your Fire Shield use cases
Write blog posts about Fire Shield

Feedback

Report bugs and issues
Suggest new features
Vote on existing feature requests

Feature Requests

Have an idea not on this roadmap? We'd love to hear it!

Check existing issues
Create a new feature request
Describe your use case
Explain why it would benefit to community

📢 Stay Updated

GitHub: Star and watch khapu2906/fire-shield
NPM: Follow @fire-shield/core
Changelog: Check releases

☕ Support → Project

If you find Fire Shield helpful and want to support its development:

🥖Buy me a banh mi

Your support helps maintain and improve Fire Shield! 🙏

💡 Future Ideas

Long-term Vision (2027+)

Advanced Permission Models

💡 Delegation chains (A delegates to B delegates to C)
💡 Conditional permissions (if-then rules)
💡 Permission templates and inheritance
💡 Geographic-based permissions
💡 Device-based access control

Enterprise Features

💡 Distributed RBAC across microservices
💡 Real-time permission sync
💡 RBAC-as-a-Service cloud offering
💡 Multi-region permission replication
💡 Advanced audit log querying and analytics

Developer Tools

💡 Web-based RBAC admin dashboard
💡 Browser DevTools extension
💡 Terraform/Pulumi providers
💡 OpenAPI/Swagger integration
💡 GraphQL schema generator

Standards & Compliance

💡 OAuth2/OIDC integration
💡 SAML support
💡 XACML compatibility
💡 ISO 27001 compliance toolkit

🎯 Community Priorities

Based on GitHub issues and community feedback, these features are most requested:

High Priority

Permission Caching - Reduce redundant permission calculations
GraphQL Adapter - First-class GraphQL support
Interactive Playground - Try Fire Shield directly in browser
Migration Guides - Easy migration from Casbin, CASL, etc.

Medium Priority

Temporal Permissions - Time-based access control
Audit Log Analytics - Built-in reporting and dashboards
NestJS Decorators - Native NestJS integration
Permission Visualization - Graphical role/permission viewer

Under Consideration

Dynamic Permissions - Runtime permission definition
Permission Marketplace - Share common permission schemas
Federated RBAC - Cross-organization permissions
Blockchain Audit Trail - Immutable audit logs

📊 Release Cycle

Major Versions (x.0.0)

Released yearly
May include breaking changes
Extensive migration guides provided

Minor Versions (2.x.0)

Released quarterly
New features, backward compatible
Performance improvements

Patch Versions (2.1.x)

Released as needed
Bug fixes and security updates
No breaking changes

🤝 How to Contribute

We welcome contributions to help achieve this roadmap!

Ways to Contribute

Code Contributions

Pick an issue from our GitHub Issues
Submit pull requests for roadmap features
Write tests and improve coverage

Documentation

Improve existing documentation
Write tutorials and guides
Translate documentation to other languages

Community

Answer questions in discussions
Share your Fire Shield use cases
Write blog posts about Fire Shield

Feedback

Report bugs and issues
Suggest new features
Vote on existing feature requests

Feature Requests

Have an idea not on this roadmap? We'd love to hear it!

Check existing issues
Create a new feature request
Describe your use case
Explain why it would benefit the community

📢 Stay Updated

GitHub: Star and watch khapu2906/fire-shield
NPM: Follow @fire-shield/core
Changelog: Check releases

☕ Support the Project

If you find Fire Shield helpful and want to support its development:

🥖Buy me a banh mi

Your support helps maintain and improve Fire Shield! 🙏

🗺️ Roadmap ​

✅ Recently Completed ​

v3.0.0 - Plugin System & Platform Independence (January 2026) ​

🚧 In Progress ​

v3.1 - Loader Packages & Plugin Ecosystem (Q1 2026) ​

📋 Planned ​

v3.2 - Advanced Plugin Features (Q2 2026) ​

v3.3 - Enterprise Features (Q3 2026) ​

v3.4 - Ecosystem Expansion (Q4 2026) ​

💡 Future Ideas ​

Long-term Vision (2027+) ​

🎯 Community Priorities ​

High Priority ​

Medium Priority ​

Under Consideration ​

📊 Release Cycle ​

🤝 How to Contribute ​

Ways to Contribute ​

Feature Requests ​

📢 Stay Updated ​

☕ Support → Project ​

💡 Future Ideas ​

Long-term Vision (2027+) ​

🎯 Community Priorities ​

High Priority ​

Medium Priority ​

Under Consideration ​

📊 Release Cycle ​

🤝 How to Contribute ​

Ways to Contribute ​

Feature Requests ​

📢 Stay Updated ​

☕ Support the Project ​

🗺️ Roadmap

✅ Recently Completed

v3.0.0 - Plugin System & Platform Independence (January 2026)

🚧 In Progress

v3.1 - Loader Packages & Plugin Ecosystem (Q1 2026)

📋 Planned

v3.2 - Advanced Plugin Features (Q2 2026)

v3.3 - Enterprise Features (Q3 2026)

v3.4 - Ecosystem Expansion (Q4 2026)

💡 Future Ideas

Long-term Vision (2027+)

🎯 Community Priorities

High Priority

Medium Priority

Under Consideration

📊 Release Cycle

🤝 How to Contribute

Ways to Contribute

Feature Requests

📢 Stay Updated

☕ Support → Project

💡 Future Ideas

Long-term Vision (2027+)

🎯 Community Priorities

High Priority

Medium Priority

Under Consideration

📊 Release Cycle

🤝 How to Contribute

Ways to Contribute

Feature Requests

📢 Stay Updated

☕ Support the Project