What's coming

No shared IntegrationAdapter interface — every provider reinvents credentials/provisioning/management

feat(admin): resurface setup wizard when a release adds setup

Add Dynamic DNS (DynDNS2 listener + domain UI)

Polish portal UX: toolkit chrome, toasts, and hub empties

Document CI/CD and improve pipeline feedback

Fix /apps App Market page crash

fix: receipt line items collide with invoice UUIDs

feat: App Market post-payment deploy wizard

Heal Enhance manage so live sites never land on Hosting not linked

Search owned domains and assets from the command palette

Bump typescript from 5.9.3 to 7.0.2

chore(deps): bump github/codeql-action from 3 to 4

chore(deps): bump fallow-rs/fallow from 2 to 3

Arx: follow-ups (Pro purchase test, extension page redesign, node rollout, ModSecurity plan, niletech leftovers)

Atelier: Stripe Connect for agency client payments (replace pasted keys) + live card test

Legacy cleanup follow-ups after removing WHMCS import and cPanel/WHM (614405ee)

Payments: switch on Stripe in OMA checkout with all relevant methods (cards, Apple/Google Pay, MobilePay, SEPA, saved cards)

Payments: PayPal for OMA checkout and for Atelier agencies

Crew Knowledge 2.0: hybrid retrieval, retrieval lab, knowledge map canvas

Lanetti agent core: enrolment, desired state, reconcile, signed updates

Agent control plane in OMA: tables, platform tools, staff + customer MCP, UI

App Market docker runtime + compose templates for first 5 apps

Cloud-init bootstrap in Hetzner VPS provisioning

Homelab Proxmox test harness for the agent lane

Bring your own server: install command, terms, management fee

Arx + Backsies modules in the Lanetti agent

Cloud connectors: Hetzner, DigitalOcean, AWS (customer accounts)

Server pages: roll out branded 404/5xx pages to app nodes (nilek first)

Server pages: wire the 503 maintenance page to restores, migrations and node work

Server pages + WP maintenance page: self-host fonts (no Google Fonts)

Server pages: add Swedish (FI/SV/EN switch like the WP maintenance page)

Pricing page: honest .fi price comparison against other registrars

Admin products: UI/UX improvement plan for plan create/list

Designer and builder: prompts, skills and DESIGN.md for concepts

Anti-template review step

Proof checks for bold and experimental pages: accessibility, performance, still version

Learning record: mode, concept and template score

Eval set for design modes and concepts

Evaluate and integrate our Ultimate Multisite fork (El-SaMa/wp-multisite-waas)

Custom domains: verify, point, certificate, switch, remove

White-label layer: no WordPress or vendor branding visible anywhere

Client roles and a trimmed admin

Lamoi Base theme (Astra fork) with TEKORI design tokens

Shop theme: WoodMart child (white-label), mapped to our store blueprints

Block pattern library = TEKORI's section library

Plugin catalogue: vetted and own plugins only

Update pipeline: staging first, smoke and visual checks, then production

Connector mu-plugin `lamoi-connector`: secure core

Connector operations: site, design, content, media, SEO, forms, users

Connector operations: WooCommerce shop setup and management

OMA MCP tools for Lamoi WaaS (staff and customer)

OMA: Lamoi WaaS products, provisioning, limits and lifecycle

TEKORI: WordPress output target on Lamoi WaaS

Backsies: multisite support (per-subsite backup and restore, network backup)

Migrator: subsite to its own hosting, and standalone site into the network

Security and abuse: Arx on the network, phishing on lamoi.fi, incident runbook

Performance and caching

Email from subsites: forms, password resets, WooCommerce orders

Monitoring and operations

Legal: Lamoi WaaS terms, DPA, acceptable use, shop templates

Site Insights for subsites

Sign-up and onboarding flow: from brief to live site

Epic: concept-led design (modes, concepts, kit, anti-template review)

Epic: Lamoi WaaS, white-label WordPress network built by TEKORI

Docs: Bizni post-MVP backlog

Auto-create GitHub issues from backlog / roadmap posts

Arx on the network: remaining gaps

Stripe / WooPayments: update business phone to 045 490 1114

Moira: check the NileTech playbook draft on the first real ticket

Staff ticket alerts: first browser test

niletech: delete backups from the 2026-10-13/14 changes

Mailbox: force password change at next login + notice

Data retention: nightly auto-cleanup (90 days logs, 2 years audit)

Arx: new sign-in alerts for mailboxes

niletech.fi: load under 1 second (plan + discussion)

niletech: nulled Fluent Forms Pro and Ninja Tables Pro (OYLITE / oykit.com)

Lanetti Tools: visitor country from a local IP database (no third-party lookups)

Bizni: scan public websites of businesses for security/email issues (lead opportunities)

Lanetti Tools: saved checks for signed-in OMA users (Sign in with Lanetti)

Lanetti Tools: opt-in "email me this report / help me fix it" on scanner results

Arx Site Check Pro: paid deeper scans and monitoring (design + pricing)

lanetti.fi: no DKIM key found on any common selector

Hosting nodes send no security headers (client sites grade F)

niletech.fi: Elementor one version behind, XML-RPC enabled

LaneDNS: /sitemap.xml and /robots.txt return 404 under nginx

LaneDNS: Finnish (and Swedish) version of the tools site

LaneDNS: more scanner tools (DNSSEC validation, MTA-STS policy, Is it down, IP location for any IP)

LaneDNS: clean up leftovers (orphan tool dirs, duplicate local stats, Safe Browsing key in OMA)

Operator QA: open Lanetti Tools Usage and Settings admin pages

Measure Lanetti Tools in Site Insights

QA: staff Uptime (/admin/uptime) needs a staff session in the headless click-through

Backsies: label snapshots that may contain malware (Arx)

Arx: 'Back up with Lanetti Backsies first' checkbox before malware cleanup (parked)

Arx: detect, clean and prevent webshell / htaccess-lock infections (lessons 2026-10-15)

Domain prices for non-.fi endings (only .fi can be bought today)

Lamoi toolkit follow-ups

Staging on the lamoi layout

Move old wildcard certs to acme.sh + dns_oma before expiry (*.up.lanetti.fi 11 Dec, *.pages.hollahoop.app 14 Dec)

Admin ticket view: SMS card with auto phone, template draft and Moira button

Mail import: support@ runs hang 120s on UID FETCH, then 'Connection not available'

Merge duplicate client accounts safely: La Suvi + kauneussaimaa.fi (needs oma.admin_merge_clients)

Lamoi plan entitlements: plugins, designs, AI credits and integrations per plan

LAFU Gift Cards Pro: link to edit the expiry reminder email text

LAFU Gift Cards (free + Pro): ship .pot translation templates

LAFU Gift Cards: more languages out of the box + WPML and Polylang support

CataSync feeds 1/6: connector 0.9.0 read endpoint /catalog

CataSync feeds 2/6: engine shop catalog snapshot (shop_items) + sync

CataSync feeds 3/6: engine named feeds, field repeater, presets, XML/CSV builder

CataSync feeds 4/6: OMA public feed URL, staff MCP tool, Feeds UI with field repeater

CataSync feeds 5/6: Google Merchant Center destination (Merchant API v1)

CataSync feeds 6/6: niletech go-live + stale Google Listings cleanup (operator OK)

CataSync feeds 7/7: Finnish price comparison sites onboarding (hinta.fi first)

Bump actions/checkout from 4 to 7

Bump actions/setup-node from 4 to 7

Bump playwright from 1.56.1 to 1.64.1

Reference: Leantime full feature list (PM benchmark, parked)

Document GitHub App + email env vars

Jira + Linear sync is inbound only

Placeholder integrations shown as cards (WhatsApp, voice, Teams, Slack DM, UserJot import)

Sonar: possible ReDoS + pseudo-random + complexity hot spots

Indie plugin developer wedge: WP plugin + npm SDK

Competitor gaps (Canny / Featurebase / Frill / Productlane)

Small polish: onboarding 'subdomain' label, de.json gaps

Huddle: SureFeedback parity (visual client feedback where it counts)

Auto API docs: connect OpenAPI / repo, AI-written reference + guides

Status page fed by OMA Uptime monitors

Docs: readers suggest edits (reviewed before publish)

Bump ioredis from 5.11.1 to 6.0.0

Huddle hardening: lessons from ProjectHuddle/SureFeedback history