Changelog

All notable changes to react-access-engine are documented here.

v1.0.0

Latest

Added

  • RBAC with wildcard permissions (*, namespace:*)
  • ABAC policy engine with declarative conditions and custom operators
  • Feature flags with role targeting, plan gating, environment scoping, rollouts, and dependencies
  • A/B experiments with deterministic SSR-safe assignment
  • Plan/subscription gating with hierarchical tier comparison
  • Remote config loader with stale-while-revalidate caching and signature verification
  • Plugin system with audit logger, analytics, and operator plugins
  • Debug engine with event recording and real-time subscriptions
  • DevTools overlay package (react-access-engine-devtools)
  • Full TypeScript inference helpers
  • SSR-safe architecture (Next.js App Router compatible)
  • 10 React components: AccessProvider, Can, Feature, AccessGate, PermissionGuard, FeatureToggle, Experiment, and more
  • 9 React hooks: useAccess, usePermission, useRole, useFeature, usePolicy, useExperiment, usePlan, useRemoteConfig, useAccessDebug
  • 202 tests passing with comprehensive coverage

v0.1.0

Added

  • Initial project scaffolding with pnpm monorepo + TurboRepo
  • Core RBAC engine with role and permission checking
  • Basic feature flag engine
  • AccessProvider and Can component