Feuille de route publique

Ce que nous construisons

La feuille de route de l'édition communautaire, en direct de GitHub. Les objets se déplacent au fur et à mesure des navires de travail – rien ici n’est une promesse avec une date.

Voir sur GitHub

Maintenant

En cours sur Community Edition.

Plateforme#54
Federated admin login, MFA, and session revocation controls
Production administration needs modern identity options and visible session control beyond password-only login.
Plateforme#94
Safe custom JavaScript and third-party snippet injection
#73 shipped custom CSS in the page builder. Authors also need to add JavaScript — analytics snippets, chat widgets, structured-data blocks, small interactions — per page or…
Plateforme#105
WebAuthn passkey sign-in for administrators and users
#70 shipped TOTP and #54 covers federated login and session revocation. Passkeys (WebAuthn) are now the strongest widely-supported option: phishing-resistant, no shared secret,…
Contenu#143
Federated API parity for comment spam policy management
#109 shipped local heuristic spam scoring, admin-curated block/allow rules, and admin-curated spam-signal terms for public comments — but only through the cookie-authenticated…
Plateforme#146
Umbrella: Elsa Workflows connector and managed cloud
Use Justflows as the customer/workspace, configuration, billing, quota, and support layer for an Elsa Workflows cloud offering. This umbrella covers both: 1. Elsa Connector…
Plateforme#198
Security program: harden core and extension trust, build a Security Center, and verify recovery
Make Justflows CE secure by default and give operators a built-in Security Center with actionable checks, security events, integrity status, and recovery guidance. Essential…
Opérations#257
Network backup and restore for root site and all subsites
The current backup and restore workflow is scoped to the site selected in Admin. A multisite operator must back up and restore every subsite separately, and a root-site archive…
Plateforme#269
Run a scoped independent security review
Part of #198. Someone outside the development of the new security surface reviews it before broad availability. - Scope the review to the Security Center, extension trust, and…

Mis en file d'attente une fois la tranche actuelle atterrie.

Plus tard

A l'horizon, pas prévu.

Expédié

112

Déjà en édition communautaire.

Cette page lit le projet public Justflows GitHub. Les colonnes peuvent changer sans date de sortie.

Votre site gratuit est à une minute

Choisissez un nom et votre site est en ligne, prêt à être modifié. Sans carte bancaire, sans serveur, rien à installer.

Créer mon site gratuit Ajoutez une étoile sur GitHub

Ce que nous construisons

Maintenant

Federated admin login, MFA, and session revocation controls

Safe custom JavaScript and third-party snippet injection

WebAuthn passkey sign-in for administrators and users

Federated API parity for comment spam policy management

Umbrella: Elsa Workflows connector and managed cloud

Security program: harden core and extension trust, build a Security Center, and verify recovery

Network backup and restore for root site and all subsites

Run a scoped independent security review

Suivant

Editorial workflow with draft, review, approval, and publish states

Shop: support lifetime subscription discounts for limited signup offers

First-party Helpdesk plugin: multisite + Shop customer service, tickets, visibility, handover, secure uploads, support popup, subscription limits

Analytics network tag: decide consent on sites without a consent plugin

Load only the JavaScript and CSS each page needs (code splitting, per-page assets, hashed caching)

Workspace Subscription page: current plan, upgrades, usage, and root-site limit visibility

Elsa: agree supported API, authentication, tenancy, and hosting contract

Elsa connector: health sync, usage sync, diagnostics, and observability

Elsa connector: signed callbacks and webhook replay protection

Elsa cloud: build private provisioning API and environment state machine

Elsa cloud: provision shared multi-tenant pools for small plans

Elsa cloud: provision dedicated instances for larger plans

Elsa cloud: migrate customers from shared pools to dedicated instances

Elsa cloud: connect subscriptions, quotas, suspension, retention, and deletion

Elsa integration: security, isolation, disaster recovery, and production readiness

Elsa integration: define Justflows hook catalog and versioned event envelopes

Elsa integration: build hook-to-workflow mappings and durable delivery

Elsa integration: provision workspace-scoped service identities and capability consent

Elsa integration: publish official Justflows Elsa activity package

Elsa integration: end-to-end internal, external, and isolation test suite

Umbrella: Shop Stripe payment suite

Stripe: fees, balance transactions, and payout reconciliation

Stripe: optional Stripe Tax calculation and tax transactions

Stripe: Stripe Invoicing and Quotes for B2B orders

Stripe Connect for multisite: per-site connected accounts and platform fees

Stripe: admin setup, test mode, diagnostics, and agent tools

Stripe: test suite and merchant documentation

Sandbox unverified plugins and let only verified releases run outside it

Open the marketplace to third-party publishers safely

Add publisher accounts, namespaces, and plugin ownership

Add a review queue with reviewer roles and an audit trail

Sign marketplace releases only after approval, in a separate signing service

Accept plugin source through a GitHub App and a CLI

Build submissions in isolated throwaway environments

Run automated security checks on every submission

Roll out marketplace updates in stages

Let Justflows remotely disable confirmed malicious plugins

Monitor listed plugins and respond to publisher compromise

Pilot third-party publishing with invited publishers, then open it up

Plus tard

Multiple language selector designs and customization

Optional separate mobile and desktop cache variants

Configurable GDPR and PSD2/PSD3 readiness and compliance controls

Default privacy policy page generator and setting

Plugin and theme quality checker for authors

Shareable draft preview links

Maintenance mode and coming-soon page

First-party Related Content plugin

First-party Newsletter and subscriber management plugin

First-party Announcements and site-wide banners plugin

First-party Paid memberships and subscriptions plugin

First-party Documentation and knowledge-base theme

First-party Portfolio and agency theme

First-party Magazine and news theme

OpenLiteSpeed / LiteSpeed hosting and LSCache integration

First-party Content access control and gating plugin

First-party Ticketing and event tickets plugin

First-party Interactive maps plugin

Create new patterns

Create a Cpanel plugin

Stripe: Terminal for in-person payments

Stripe: Identity verification for customers

Stripe: evaluate remaining Stripe products (Issuing, Treasury, Capital, Financial Connections, Climate)

First-party Moneybird integration: full API suite and official-plugin compatibility

Allow closed-source paid plugins under a commercial agreement

Expédié

Persist custom content types and fields

Public content REST API and OpenAPI for headless use

Built-in SEO: titles, canonicals, sitemap, and robots.txt