backend gap analysis

Guide for backend gap analysis

Game Backend Gap Analysis

Date: 2026-01-21 (Revised after deep code research) Scope: Product Manager evaluation of loh-backend for gaps and missing functionality

Executive Summary

The backend has made significant progress with 78+ core modules, 22 API handlers, 55 DB migrations, and substantial security/anti-cheat infrastructure. However, several critical gaps remain that block launch readiness.

✅ What's Implemented (Strengths)

Core Game Systems

System	Status	Notes
Combat System	✅ Complete	Stances, Combo/Crit, Dodge/Parry, 0.4s tick
Skills (27)	✅ Complete	Dynamic XP curve, Level 108 cap, Prestige
Inventory/Bank	✅ Complete	Grid system, placeholders, atomic operations
Trading	✅ Complete	Player-to-player with escrow
Grand Exchange	✅ Complete	Matching engine, 2% tax, order book
Death System	✅ Complete	Item protection, graves
Drop Tables	✅ Complete	Nested tables, luck system, RDT/UDT
Prayers/Tapasya	✅ Complete	Drain system, meditation
Slayer	✅ Complete	Tasks, masters, streaks, points

Infrastructure

System	Status	Notes
GameState Architecture	✅ Complete	DashMap concurrency, session management
WebSocket Communication	✅ Complete	Real-time bidirectional
PostgreSQL Integration	✅ Complete	SQLx, migrations, connection pooling
Redis Caching	✅ Complete	Session cache, pub/sub ready
Zone Manager	✅ Complete	Multi-server grid orchestration
Tick Engine	✅ Complete	0.4s tick loop with batch processing
Persistence	✅ Complete	Write-behind with dirty-flag batching

Security & Integrity

System	Status	Notes
Heuristics Engine	✅ Complete	Robotic precision, macro detection
Shadow Banning	✅ Complete	Degrades drops without ban alerts
Behavior Monitor	✅ Complete	Fatigue tracking, honeypots
Dupe Detection	✅ Complete	5-min background scans
XP Rate Limiter	✅ Complete	Hard caps per skill
Trade Escrow	✅ Complete	Atomic swaps with locking
Inventory Nonces	✅ Complete	Replay attack prevention

Observability

System	Status	Notes
Prometheus Metrics	✅ Complete	cadvisor, node-exporter
Grafana Dashboards	✅ Complete	SRE panels
Alertmanager	✅ Complete	Email, PagerDuty routing
Load Test Client	✅ Complete	Bot roles, 2k CCU testing

🔴 Critical Gaps (P0 - Launch Blockers)

1. Payments Integration ✅ ~50% Complete (BLOCKED on incorporation)

Status: Core logic implemented, some HTTP routes missing, blocked on incorporation for real payment provider Location: logic-core/src/store/, api-game/src/api/shop_handlers.rs Impact: Cannot monetize until incorporation complete

✅ Implemented:

Migration 20260117020000_create_payment_tables.up.sql (orders, order_items, transactions tables)
CartManager with validate() method (price calculation, coupon validation, bulk discounts)
PaymentManager with complete_purchase() method
Shop endpoints: GET /shop/products, POST /shop/purchase
Stripe webhook: POST /webhooks/stripe
Documentation: docs/PAYMENT_API.md

❌ Remaining Gaps:

POST /cart/validate HTTP route (logic exists in CartManager, route not exposed)
POST /checkout/intent HTTP route (PaymentIntent creation)
POST /checkout/finalize HTTP route (order finalization)
GET /orders HTTP route (order history)
Chargeback webhook and debt system integration
Razorpay provider (Stripe only currently)
Receipt email dispatch

Reference: backend_contracts.md

2. Account System Incomplete

Status: Partial implementation Location: logic-core/src/auth/ Impact: Multi-profile support broken

Missing Components:

Full Master Account → N Game Profiles flow
Profile switching during session
Profile-level debt tracking (post-chargeback)
Account freezing/unfreezing logic
Password reset flow
Email verification

Designed but not implemented: backend_contracts.md#L169-L201

3. Growth Engine (Referrals/Affiliates) ✅ ~70% Complete

Status: Core logic implemented, HTTP routes missing Location: logic-core/src/growth.rs, tests/growth_integration.rs Impact: Logic exists but not exposed via API

✅ Implemented:

GrowthManager with referral code generation (generate_referral_code())
Signup attribution (apply_referral_code())
Qualification check (check_qualification() for 150 Total Level)
Affiliate tables: affiliate_earnings, affiliate_applications, affiliate_clicks
Reservation system (create_reservation())
Integration tests proving full flow works

❌ Remaining Gaps:

HTTP API routes not exposed (logic exists, needs handlers)
Admin approval UI in ops-tools
Gift code generation endpoint
Milestone reward auto-distribution

Reference: backend_contracts.md#L139-L163

4. Quest Backend Logic ✅ ~80% Complete

Status: Core system implemented, persistence layer wiring needed Location: logic-core/src/quests/ (manager.rs, events.rs, objectives.rs, definitions.rs, loader.rs) Impact: State machine works, needs DB persistence integration

✅ Implemented:

QuestManager with full state machine
QuestEvent enum (NpcKilled, ItemCollected, NpcTalked, LocationReached, SkillLeveled)
ObjectiveProgress tracking per step
PlayerQuestData struct with current_step, objectives_progress, timestamps
handle_event() for automatic objective progression
Migration 040_quest_progress.sql with quest_progress table
Quest requirement checks (skill levels, items, previous quests)
Quest point tracking

❌ Remaining Gaps:

Persistence layer: Save/load PlayerQuestData from quest_progress table
HTTP API handlers for quest operations (start, check, complete)
Reward distribution integration (XP orbs, items via inventory system)

5. Item Instance IDs (Dupe-Proofing)

Status: Deferred in backlog Location: pending_tasks.md#L215-L221 Impact: Cannot trace individual items for RWT detection

Missing Components:

UUID generation for non-stackable items
Schema overhaul for inventory/bank tables
Instance ID in trade logs

🟡 Significant Gaps (P1 - Post-Launch Issues)

6. World Content Systems

Feature	Status	Notes
Fairy Rings (Yaksha Portals)	🟡 Data only	No backend validation
Spirit Trees (Kalpavriksha)	🟡 Data only	No backend validation
Gliders (Vimana)	🟡 Data only	No backend validation
Canoes	🟡 Data only	No backend validation
Achievement Diaries	✅ Complete	Persistence and API implemented

Missing: Server-side coordinate validation for all travel networks.

Feature	Status	Notes
Friends List	✅ Complete	CRUD + status updates
Ignore List	✅ Complete
Private Messages	⚠️ Partial	No persistence
Clan System	⚠️ Partial	`clan.rs` exists, limited features
Party System	✅ Complete	Full party management

Missing:

Clan bank
Clan broadcasts
Clan ranks with permissions

8. Player Housing

Status: Stub only Location: logic-core/src/house_construction.rs (3KB) Impact: Major content gap

Missing Components:

Room placement logic
Furniture system
Portal network
Visitor permissions
House parties

9. Minigames

Status: Not implemented Impact: No group content variety

Missing:

Clan Wars (Gandharva War)
Warrior's Guild (Kshatriya Mandala)
Underworld Arena (Patala Loka)

Reference: pending_tasks.md#L175-L184

10. Economy NPCs (QoL)

Status: Not implemented Location: pending_tasks.md#L199-L208

Missing:

Yamaraja's Office (grave retrieval, gold sink)
Kingdom Management (passive income)
Price Checker (GE price lookup)
Parashurama (bank cleanup)
Kshetrapala (tool storage)

🟢 Backlog (P2 - Nice to Have)

Feature	Location	Notes
Lua Hot-Reloader	Deferred	`mlua` context reload
NavMesh Visualizer	Deferred	A* debug overlay
Packet Loss Simulator	Deferred	Debug tool
SQL Safety Net Execution	Blocked	Needs high-privilege audit
Thieving Content	Deferred	Rogue's Outfit

Schema Gaps

Based on migrations review, the following tables may be missing or incomplete:

Table	Status	Notes
`quests_progress`	❌ Missing	No migration found
`achievements`	❌ Missing	`regional_diaries.rs` has no backing table
`housing_rooms`	❌ Missing	House construction has no persistence
`housing_furniture`	❌ Missing
`affiliate_payouts`	❌ Missing	Growth engine not implemented
`referral_tracking`	❌ Missing

Recommendations

Immediate (Pre-Launch)

Complete Payments Integration - Unblock revenue
Implement Quest Backend - Core gameplay loop
Account Multi-Profile - Already designed, needs implementation
Item Instance IDs - Anti-RWT requirement

Short-Term (30 Days Post-Launch)

Growth Engine (Bandhu/Rajdoot)
Achievement Diary persistence
Housing Phase 1 (rooms + basic furniture)

Medium-Term (90 Days)

Minigames (Clan Wars first)
Full clan system
Private message persistence

API Coverage Check

Contract Endpoint	Implemented	Notes
`GET /products`	✅ Yes	`GET /shop/products` in Rust
`POST /shop/purchase`	✅ Yes	Creates PaymentIntent
`POST /webhooks/stripe`	✅ Yes	Handles payment success
`POST /cart/validate`	⚠️ Logic only	`CartManager.validate()` exists, route not exposed
`POST /checkout/intent`	❌ No
`POST /checkout/finalize`	❌ No
`GET /orders`	❌ No
`POST /store/reserve`	⚠️ Logic only	`GrowthManager.create_reservation()` exists
`POST /game/deliver_bond`	❌ No	Fulfillment
`/admin/*`	❌ No	Backoffice

Coverage: ~30% of e-commerce API from backend_contracts.md (up from 0%)

Summary

┌─────────────────────────────────────────────────────────────┐
│ BACKEND READINESS ASSESSMENT (Revised 2026-01-21)          │
├──────────────────┬──────────────────────────────────────────┤
│ Core Game Logic  │ █████████████████████████████ 95%        │
│ Security         │ ██████████████████████████── 85%         │
│ Infrastructure   │ ██████████████████████████ 90%           │
│ Payments         │ █████████████░░░░░░░░░░░░░ 50%           │
│ E-Commerce API   │ ████████░░░░░░░░░░░░░░░░░░ 30%           │
│ Growth Engine    │ ██████████████████░░░░░░░░ 70%           │
│ Quest Backend    │ ████████████████████░░░░░░ 80%           │
│ Housing          │ ░░░░░░░░░░░░░░░░░░░░░░░░░░ 5%            │
│ Minigames        │ ░░░░░░░░░░░░░░░░░░░░░░░░░░ 0%            │
└──────────────────┴──────────────────────────────────────────┘

Overall Backend Readiness: ~72% (up from 60%)

Critical Path to Launch: HTTP Route Wiring → Security Hardening → Incorporation

backend gap analysis

Game Backend Gap Analysis

Executive Summary

✅ What's Implemented (Strengths)

Core Game Systems

Infrastructure

Security & Integrity

Observability

🔴 Critical Gaps (P0 - Launch Blockers)

1. Payments Integration ✅ ~50% Complete (BLOCKED on incorporation)

2. Account System Incomplete

3. Growth Engine (Referrals/Affiliates) ✅ ~70% Complete

4. Quest Backend Logic ✅ ~80% Complete

5. Item Instance IDs (Dupe-Proofing)

🟡 Significant Gaps (P1 - Post-Launch Issues)

6. World Content Systems

7. Social Systems

8. Player Housing

9. Minigames

10. Economy NPCs (QoL)

🟢 Backlog (P2 - Nice to Have)

Schema Gaps

Recommendations

Immediate (Pre-Launch)

Short-Term (30 Days Post-Launch)

Medium-Term (90 Days)

API Coverage Check

Summary