# Relicario Roadmap

> Living document — update alongside `STATUS.md` when milestones shift.
> "Up next" items have specs; "Medium-term" items may have specs; "Long-term" items are direction, not committed scope.

## Shipped

| Version | Highlights |
|---|---|
| v0.5.0 train *(on main, untagged)* | Security audit fixes, device auth, backup/restore, LastPass import, fullscreen UX phases 1+2A, vault-tab management surfaces revamp |
| v0.2.0 | Last tagged release — typed-item rewrite (Plans 1A/1B/1C-α/β₁/β₂) |

Also shipped on main since the v0.5.0 version bump:

- **Vault-tab management surfaces revamp** (2026-05-24 → 2026-05-30) — settings synced/local split with session-timeout UI, devices fingerprint + inline two-step revoke, trash per-item purge countdown, field-history visual polish, new item-history-index pane, `#history/<id>` route normalization. Shared `relative-time.ts` + `ssh-fingerprint.ts` utilities.  
  Spec: `docs/superpowers/specs/2026-05-23-vault-tab-management-surfaces-revamp-design.md`  
  Plan: `docs/superpowers/plans/2026-05-24-vault-tab-management-surfaces-revamp.md`

See `CHANGELOG.md` for full details and `STATUS.md` for the current commit list.

## Up next (v0.5.x)

These are specced and either in progress or immediately queued:

- **Vault lock screen logo** — small `<img>` insertion in the lock-screen render *(in progress, uncommitted)*
- **Phase 2B: form layout** — spacing, section headers, attachment previews in detail pane  
  Spec: `docs/superpowers/specs/2026-05-02-phase-2b-form-layout-design.md`  
  Plan: `docs/superpowers/plans/2026-05-02-phase-2b-polish-and-form-layout.md`
- **1C-γ: attachments + Document type** — attachment UI in popup + vault tab; Document item add/view/edit/extract  
  Specs: `docs/superpowers/specs/2026-04-24-relicario-extension-1c-gamma1-design.md`,  
         `docs/superpowers/specs/2026-04-26-relicario-extension-1c-gamma2-design.md`
- **v0.5.x UX polish** — recovery QR display in extension, password coloring refinements  
  Spec: `docs/superpowers/specs/2026-05-03-v0.5.x-ux-polish-and-recovery-qr-design.md`

## Medium-term

- **Phase 3: vault-tab shell** — fullscreen sidebar with nav sections, pane routing  
  Spec: `docs/superpowers/specs/2026-04-27-relicario-vault-tab-design.md`
- **Phase 4: command palette** — ⌘K global search + action dispatch across the vault tab
- **CLI restructure** — subcommand reorganisation, interactive TUI mode  
  Spec: `docs/superpowers/specs/2026-05-04-cli-restructure-design.md`
- **Extension restructure** — bundle / message-routing cleanup  
  Spec: `docs/superpowers/specs/2026-05-04-extension-restructure-design.md`
- **Security polish**  
  Spec: `docs/superpowers/specs/2026-05-04-security-polish-design.md`

## Long-term / backlog

- **Relay server** — encrypted WebSocket relay for multi-device sync without a shared git server  
  Spec: `docs/superpowers/specs/2026-05-02-relay-server-design.md`
- **Recovery QR** — QR code encoding of the reference-image secret for printed cold backup  
  Spec: `docs/superpowers/specs/2026-05-01-recovery-qr-design.md`
- **Mobile** — Rust core compiles to ARM; JNI wrapper for Android, Swift wrapper for iOS
- **Credential capture** — extension content-script form detection + autofill  
  Spec: `docs/superpowers/specs/2026-04-12-relicario-credential-capture-design.md`

## Non-goals (explicitly deferred or cancelled)

- **Reference-image rotation** — changing the image factor without re-embedding. Back-burner, not cancelled.
- **Per-entry subkeys** — no real-world benefit at family-vault scale; see design rationale in `docs/CRYPTO.md`.
- **libgit2 / gitoxide** — shell-out to `git` is intentional; see `crates/relicario-cli/ARCHITECTURE.md`.