Roadmap
Made Open is a sovereign personal data platform with unified communications, AI intelligence, and privacy-first architecture. You own your data, your credentials, and your privacy. Here's what's built and where we're going.
What's Built
Communications
- Unified inbox aggregating calls, SMS, email, video, and voicemail into a single cross-channel feed with read, archive, and snooze actions
- Full phone system with multi-line support, programmable IVR trees, voicemail storage and transcription, call recording, and real-time call routing via rules
- Complete email client with MS Graph integration, folder management, threading, drafts, send/receive, and attachment handling
- Email AI — thread summarization, AI-composed replies, priority scoring, and follow-up detection; all AI output lands as message metadata in the unified model
- Video meetings with participant tracking, agenda, notes, recording, and AI-generated summaries, action items, and sentiment analysis
- SMS conversations with real-time threading via Twilio; synced into the unified messages model
- Contact timeline — per-person interaction history across all channels (calls, SMS, email, meetings) with manual and AI-generated relationship notes
- Outbound webhooks delivering platform events to external endpoints with automatic retry
AI & Intelligence
- AI agent with multi-agent orchestration, streaming responses, and workflow decomposition (tools registered in
apps/hub/src/services/tools/ToolsService.ts) - Post-call analysis — transcription (Whisper/Deepgram), summarization, sentiment scoring, and action item extraction; structured data before any notification fires
- Email AI — compose from prompt, smart reply, thread summarize, automated triage and labelling
- LightRAG knowledge graph with event-driven entity-relationship extraction from 30+ entity types and a built-in graph visualization UI
- LLM Wiki — a persistent compiled knowledge base that incrementally builds and maintains interlinked pages from platform data (the Karpathy LLM Wiki pattern); auto-ingests on entity changes with rate limiting for cost control
- RAG pipeline with pgvector embeddings written at ingest time; wiki pages get a reranking boost in retrieval
- LLM routing — user-defined rules to route queries to OpenRouter cloud providers or a local Ollama instance based on data domain and query type
- Audio intelligence — transcribe, analyse, and index audio files; voice command interpretation dispatched as jobs
- Document intelligence — AI-powered OCR, classification, and extraction from uploaded documents
- Hybrid search combining Meilisearch full-text with pgvector semantic similarity; saved searches with live SSE updates
Rules & Automation
- WHEN/IF/THEN rules engine with a visual builder; evaluates on every inbound event
- 11 condition operators (sync and async): person group, time-of-day, location, channel type, presence, active call, device connected, and more
- 11 action types including send SMS, send email, route call, play IVR, create task, and trigger workflow
- Delayed action scheduling — rules can fire actions at a future time via the unified scheduler
- Unified scheduler supporting one-shot, cron, and iCal RRULE patterns backed by pg-boss; integrated with rules and workflows
- Pre-built rule templates for common patterns; rule execution analytics
Privacy & Sovereignty
- All 177 tables (across 53 migrations) with row-level security — your data is never accessible to other users
- Credentials encrypted in Supabase Vault (pgsodium); plugins see only the fields they declare
- Append-only audit log — no UPDATE, no DELETE, forever
- PII auto-redaction before any cloud LLM call; per-provider consent controls
- Data export in JSON, CSV, vCard, and iCal formats; import with validation
- Privacy engine with field-level transformations (hash, round, generalize, suppress) before data leaves your sovereign environment
- Data lineage tracking — field-level provenance across all sources
- Duplicate detection and merge workflows with full merge history
Federation & Decentralization
- ActivityPub for cross-instance communication and Mastodon interoperability
- DID creation and resolution —
did:key(local) anddid:web(hub-hosted) identities - Verifiable Credentials — issuance, verification, and selective disclosure; consent grants anchored to user DID
- DIDComm encrypted messaging between hub instances
- Zero-knowledge proofs — prove a reputation score threshold without revealing the exact value
Marketplace & Governance
- Privacy-preserving data products — visual query builder over the knowledge graph with per-field privacy policy, packaging (CSV/JSON/Parquet), and listing creation
- Federated marketplace discovery across instances via ActivityPub; relay aggregation for network-wide listings
- Reputation system — VC-based scoring across 7 domains (marketplace, governance, resource sharing, data quality, content creation, technical contribution, community moderation) with exponential time decay and trust delegation
- Resource coordination — Offer/Need/WillingToDo declarations with local-first matching, DIDComm negotiation, and VC issuance on completion
- DAO governance with 5 voting systems: simple majority, supermajority, quadratic voting, consensus, and liquid democracy
- Time banking with credit issuance, transfer, and redemption within communities
- Marketplace arbitration — disputes routed to governance groups; smart contract escrow released per verdict
- Plugin registry — community plugin catalog with ratings and installs
Infrastructure & Platform
- Event-driven spine — NATS JetStream event bus; every state change is an immutable event; services never call each other directly
- Plugin sandbox — V8 isolates via
isolated-vm; complete heap isolation with enforced CPU and memory limits; plugins cannot access Node.js orprocess.env - Capability registry — add credentials and features activate instantly; remove them and they disappear
- Performance — in-memory LRU cache, Prometheus-compatible metrics, per-endpoint rate limiting, circuit breakers for NATS/Meilisearch/OpenRouter
- Multi-tenancy — organization accounts with tenant isolation and per-org usage metering
- OAuth2 authorization server — app registration, token issuance, and API keys for third-party integrations
- Billing — Stripe integration with subscriptions, checkout, and webhook handling
- Feature flags — evaluation with targeting rules and rollout percentages
- Security — JWT, RBAC, session management with revocation, and user behavior analytics
- Real-time — Server-Sent Events with NATS bridge; activity feed; presence indicators
- Event store — immutable append-only store with replay and time-travel queries
- Web3 bridge — crypto wallet management; time credit bridging to on-chain tokens (Polygon/ETH)
- Device OS control — send OS-level commands to connected devices (filesystem, process, clipboard, display, power, network, shell)
- Agent worker — Claude agent sessions running directly on connected devices
Property & Inventory
- Universal inventory tracking everything from real estate to individual items with full lifecycle: wishlist → purchase → active → maintenance → disposal
- Nested location hierarchy (property → floor → room → closet)
- Intent-driven disposition — mark an item to sell and a marketplace listing is created automatically
- Recurring maintenance schedules with iCal RRULE support, integrated with the scheduler
- Bulk import and AI-assisted extraction from documents and photos (data model supports video media refs for future AI video inventory)
Cross-Platform
- Next.js web dashboard with 162 pages covering every capability area
- Android app with Twilio Voice SDK, real-time location streaming, full sensor suite, offline support, and FCM push notifications
- Windows desktop agent using Tauri (Rust) and a Playwright sidecar for browser automation tasks
What's Next
The items below are aspirational — they reference code and features that do not yet exist in the repository.
Near Term
- Google Workspace integration — Gmail, Calendar, and Drive sync alongside MS Graph (aspirational)
- WhatsApp channel — a WhatsApp channel plugin now exists at
apps/hub/plugins/channels/whatsapp/(Meta Cloud API); deeper unified-inbox integration and two-way threading still in progress - Real-time call transcription using Twilio Media Streams piped to Whisper for live in-call captions and notes (aspirational)
- Visual IVR builder with drag-and-drop node editor for building call flows without code (aspirational)
Medium Term (aspirational)
- iOS native app with full parity to the Android client
- End-to-end encryption for messages between Made Open users
- Plugin marketplace for community-published integrations with sandboxed review (note: a
plugin_registrytable and basic registry routes exist; public marketplace UX is the aspirational piece) - Advanced analytics dashboard for personal data trends and communication patterns
Long Term (aspirational)
- Mesh networking between Made Open instances for resilient peer-to-peer data sync
- Decentralized identity federation at scale — cross-hub discovery without central registries
- Self-sovereign AI — train personal models on your own data, locally, without cloud exposure