Direction, not commitments.

• Player profile - core data and status management
• Player status change history
• Player segmentation and tagging

• GDPR export and erasure
• Age-gate / DOB enforcement

• AI-driven player insights and segment suggestions via MCP

• Admin authentication
• Roles and permissions matrix

-

-

• Omnibus wallet - deposits, withdrawals, auto-withdrawal rules
• Transaction history (wins, losses, multi-currency)
• PSP adapter port - operators bind their own payment provider
• Idempotency keys on the deposit/withdraw money path

• Crypto custody adapter interface - operators bring their own custody solution
• A production PSP reference implementation (only a mock ships today)

• Per-user vs. omnibus custody as a configurable choice

• KYC interface - plug in any external provider (a mock ships as the reference)
• Responsible gambling - limits, cooling-off, self-exclusion
• Audit log - append-only, sha256 hash-chained event logging
• Sealed tokens - a plugin cannot override a regulator-mandated service
• Geo rules - jurisdiction allow/deny at the edge of the API

• Sealed-token implementations (RG, AML/SAR, ledger, RNG)
• AML / SAR monitoring foundations
• Geo-deny baseline - OFAC / sanctions lists
• A production KYC vendor binding
• GDPR export and erasure
• Age-gate / DOB enforcement

• Jurisdiction-specific compliance rule packs

• Game catalogue, lobby categories and featured slots
• Game rounds - start/end, recorded against the wallet
• Game, RNG and aggregator adapter ports (mock implementations ship)

• A production game aggregator reference implementation
• Sportsbook adapter interface - operators bring their own odds and risk provider

• Promotions and bonus engine management

• Admin-console module - admin routes behind a single AdminGuard enforcement point
• Roles, permissions and admin invitations (IAM)

• A public reference backoffice UI, decoupled from any operator's brand
• Full module coverage in that reference UI (wallet, RG, KYC screens)

• White-label backoffice themes for studios and partners
• Multi-brand management from a single backoffice

• MCP server - manage Openora via natural language

• Configurable agent scope - operators control what agents can touch
• AI copilots surfaced in the backoffice UI

• Agent-assisted ops - fraud triage, support, compliance review
• AI-driven player insights and segment suggestions

• Public release readiness - no client refs, no secrets
• Drizzle migrations squashed to a clean baseline
• AGPLv3 + commercial license integrated
• Repository and backoffice pages cleanup

• Stable 1.0 release line with semver guarantees

-

• Published @openora/core on npm - consumers upgrade by bumping a version, no forking
• Single @openora/core package with domain subpaths
• Headless - no UI in core, frontend lives in the consumer
• oRPC + Hono API with Zod-first contracts
• Plugin host with last-wins adapter binding
• create:app scaffolds a downstream operator repo linked to core

-

• A durable broker driver (Kafka/Redpanda, NATS) as a drop-in swap
• Hot modules extractable to independent deployables
• Multi-brand / multi-tenant hardening for studios

• MCP dev server - list modules, routes, schemas, propose tables
• AGENTS.md per module - AI-first documentation
• Claude Code + GitHub Copilot parity via pnpm sync:agents
• Scaffolders - pnpm gen module | route | plugin | adapter | event | job-worker

-

• Agent-built verticals - promotions, loyalty, reporting end-to-end
• Richer scaffolders and playbooks per business domain

• Architecture docs - contract spine, plugin host, adapter seams
• Consumer / Operator Guide - how to extend without forking
• Quick Start - clone, install, run in under 15 minutes
• Reference adapter - mock KYC as a starting point

-

-

• OSS security review - secrets scan, dependency scan, repo audit
• No-drift CI check on all generated files
• pnpm verify (typecheck + boundary lint + unit) + integration in CI

• E2E test coverage for all money-path flows
• E2E test coverage for auth flows

-

-

• Production-ready PSP adapter contract with reference implementation
• Production-ready crypto custody adapter contract
• Game aggregator adapter contract with reference implementation
• Sportsbook adapter contract with reference implementation

• CRM and marketing platform adapter contract
• Notifications adapter contract (email, SMS, push)
• Analytics adapter contract

-

• Reusable Pulumi infra generator - ECS, RDS, Redis, ALB
• igaming-deployer agent wired into the consumer scaffolder

-

-

-

• Community plugin marketplace
• Adapter registry - PSP, KYC, aggregator, notifications, CRM