Made Open

Roadmap

From the intelligent call router demo through federation, marketplace, governance, and beyond.

Roadmap

Made Open is a sovereign personal data platform with unified communications, AI intelligence, and privacy-first architecture. You own your data, your credentials, and your privacy. Here's what's built and where we're going.


What's Built

Communications

  • Unified inbox aggregating calls, SMS, email, video, and voicemail into a single cross-channel feed with read, archive, and snooze actions
  • Full phone system with multi-line support, programmable IVR trees, voicemail storage and transcription, call recording, and real-time call routing via rules
  • Complete email client with MS Graph integration, folder management, threading, drafts, send/receive, and attachment handling
  • Email AI — thread summarization, AI-composed replies, priority scoring, and follow-up detection; all AI output lands as message metadata in the unified model
  • Video meetings with participant tracking, agenda, notes, recording, and AI-generated summaries, action items, and sentiment analysis
  • SMS conversations with real-time threading via Twilio; synced into the unified messages model
  • Contact timeline — per-person interaction history across all channels (calls, SMS, email, meetings) with manual and AI-generated relationship notes
  • Outbound webhooks delivering platform events to external endpoints with automatic retry

AI & Intelligence

  • AI agent with multi-agent orchestration, streaming responses, and workflow decomposition (tools registered in apps/hub/src/services/tools/ToolsService.ts)
  • Post-call analysis — transcription (Whisper/Deepgram), summarization, sentiment scoring, and action item extraction; structured data before any notification fires
  • Email AI — compose from prompt, smart reply, thread summarize, automated triage and labelling
  • LightRAG knowledge graph with event-driven entity-relationship extraction from 30+ entity types and a built-in graph visualization UI
  • LLM Wiki — a persistent compiled knowledge base that incrementally builds and maintains interlinked pages from platform data (the Karpathy LLM Wiki pattern); auto-ingests on entity changes with rate limiting for cost control
  • RAG pipeline with pgvector embeddings written at ingest time; wiki pages get a reranking boost in retrieval
  • LLM routing — user-defined rules to route queries to OpenRouter cloud providers or a local Ollama instance based on data domain and query type
  • Audio intelligence — transcribe, analyse, and index audio files; voice command interpretation dispatched as jobs
  • Document intelligence — AI-powered OCR, classification, and extraction from uploaded documents
  • Hybrid search combining Meilisearch full-text with pgvector semantic similarity; saved searches with live SSE updates

Rules & Automation

  • WHEN/IF/THEN rules engine with a visual builder; evaluates on every inbound event
  • 11 condition operators (sync and async): person group, time-of-day, location, channel type, presence, active call, device connected, and more
  • 11 action types including send SMS, send email, route call, play IVR, create task, and trigger workflow
  • Delayed action scheduling — rules can fire actions at a future time via the unified scheduler
  • Unified scheduler supporting one-shot, cron, and iCal RRULE patterns backed by pg-boss; integrated with rules and workflows
  • Pre-built rule templates for common patterns; rule execution analytics

Privacy & Sovereignty

  • All 177 tables (across 53 migrations) with row-level security — your data is never accessible to other users
  • Credentials encrypted in Supabase Vault (pgsodium); plugins see only the fields they declare
  • Append-only audit log — no UPDATE, no DELETE, forever
  • PII auto-redaction before any cloud LLM call; per-provider consent controls
  • Data export in JSON, CSV, vCard, and iCal formats; import with validation
  • Privacy engine with field-level transformations (hash, round, generalize, suppress) before data leaves your sovereign environment
  • Data lineage tracking — field-level provenance across all sources
  • Duplicate detection and merge workflows with full merge history

Federation & Decentralization

  • ActivityPub for cross-instance communication and Mastodon interoperability
  • DID creation and resolutiondid:key (local) and did:web (hub-hosted) identities
  • Verifiable Credentials — issuance, verification, and selective disclosure; consent grants anchored to user DID
  • DIDComm encrypted messaging between hub instances
  • Zero-knowledge proofs — prove a reputation score threshold without revealing the exact value

Marketplace & Governance

  • Privacy-preserving data products — visual query builder over the knowledge graph with per-field privacy policy, packaging (CSV/JSON/Parquet), and listing creation
  • Federated marketplace discovery across instances via ActivityPub; relay aggregation for network-wide listings
  • Reputation system — VC-based scoring across 7 domains (marketplace, governance, resource sharing, data quality, content creation, technical contribution, community moderation) with exponential time decay and trust delegation
  • Resource coordination — Offer/Need/WillingToDo declarations with local-first matching, DIDComm negotiation, and VC issuance on completion
  • DAO governance with 5 voting systems: simple majority, supermajority, quadratic voting, consensus, and liquid democracy
  • Time banking with credit issuance, transfer, and redemption within communities
  • Marketplace arbitration — disputes routed to governance groups; smart contract escrow released per verdict
  • Plugin registry — community plugin catalog with ratings and installs

Infrastructure & Platform

  • Event-driven spine — NATS JetStream event bus; every state change is an immutable event; services never call each other directly
  • Plugin sandbox — V8 isolates via isolated-vm; complete heap isolation with enforced CPU and memory limits; plugins cannot access Node.js or process.env
  • Capability registry — add credentials and features activate instantly; remove them and they disappear
  • Performance — in-memory LRU cache, Prometheus-compatible metrics, per-endpoint rate limiting, circuit breakers for NATS/Meilisearch/OpenRouter
  • Multi-tenancy — organization accounts with tenant isolation and per-org usage metering
  • OAuth2 authorization server — app registration, token issuance, and API keys for third-party integrations
  • Billing — Stripe integration with subscriptions, checkout, and webhook handling
  • Feature flags — evaluation with targeting rules and rollout percentages
  • Security — JWT, RBAC, session management with revocation, and user behavior analytics
  • Real-time — Server-Sent Events with NATS bridge; activity feed; presence indicators
  • Event store — immutable append-only store with replay and time-travel queries
  • Web3 bridge — crypto wallet management; time credit bridging to on-chain tokens (Polygon/ETH)
  • Device OS control — send OS-level commands to connected devices (filesystem, process, clipboard, display, power, network, shell)
  • Agent worker — Claude agent sessions running directly on connected devices

Property & Inventory

  • Universal inventory tracking everything from real estate to individual items with full lifecycle: wishlist → purchase → active → maintenance → disposal
  • Nested location hierarchy (property → floor → room → closet)
  • Intent-driven disposition — mark an item to sell and a marketplace listing is created automatically
  • Recurring maintenance schedules with iCal RRULE support, integrated with the scheduler
  • Bulk import and AI-assisted extraction from documents and photos (data model supports video media refs for future AI video inventory)

Cross-Platform

  • Next.js web dashboard with 162 pages covering every capability area
  • Android app with Twilio Voice SDK, real-time location streaming, full sensor suite, offline support, and FCM push notifications
  • Windows desktop agent using Tauri (Rust) and a Playwright sidecar for browser automation tasks

What's Next

The items below are aspirational — they reference code and features that do not yet exist in the repository.

Near Term

  • Google Workspace integration — Gmail, Calendar, and Drive sync alongside MS Graph (aspirational)
  • WhatsApp channel — a WhatsApp channel plugin now exists at apps/hub/plugins/channels/whatsapp/ (Meta Cloud API); deeper unified-inbox integration and two-way threading still in progress
  • Real-time call transcription using Twilio Media Streams piped to Whisper for live in-call captions and notes (aspirational)
  • Visual IVR builder with drag-and-drop node editor for building call flows without code (aspirational)

Medium Term (aspirational)

  • iOS native app with full parity to the Android client
  • End-to-end encryption for messages between Made Open users
  • Plugin marketplace for community-published integrations with sandboxed review (note: a plugin_registry table and basic registry routes exist; public marketplace UX is the aspirational piece)
  • Advanced analytics dashboard for personal data trends and communication patterns

Long Term (aspirational)

  • Mesh networking between Made Open instances for resilient peer-to-peer data sync
  • Decentralized identity federation at scale — cross-hub discovery without central registries
  • Self-sovereign AI — train personal models on your own data, locally, without cloud exposure