365lotus-platform

365LOTUS Platform

One-command Next.js + Node.js gaming/casino/sportsbook platform scaffold. Live target: https://365lotus.cc. Repo: huggingface.co/Shaurya2020/365lotus-platform

This repo is not the website. It is the meta-tooling that builds, verifies, and deploys the website. The website itself is generated by the /start skill or tool/start.sh.

What you get

• /start Cursor skill — one command scaffolds the full platform into a target directory.
• tool/start.sh — CLI entrypoint (no Cursor needed).
• tool/scaffold.js — Node generator that emits the platform tree.
• tool/verify.sh — e2e smoke verifier (registration → login → deposit → place-bet → settle → withdraw).
• tool/deploy.sh — rsync + systemd deploy to 365lotus-cc.
• platform/ — the reference Next.js 14 (App Router) + Node.js Express platform with:
  • 95 admin routes (matches live /opt/lotus365-admin API; see API_EXTRACTION.md)
  • 18 player routes (register, login, wallet, deposit, withdraw, place-bet, statement, banners, news)
  • 5-role hierarchy: super_admin > super_master > master > agent > client
  • JWT + bcrypt + transaction password
  • exposure_lock wallet (balance flat on place, exposure locked, available = balance − exposure)
  • exposure_lock settlement (LOSE never credits; back win = +profit, lay win = +stake)
  • AES API envelope (CryptoJS passphrase U2FsdGVkX1, feature-flagged)
  • White-label table + Host resolver
  • SQLite WAL (37 tables, matches live schema)
  • Idempotency-Key on POST /bets
  • Rate-limited login, helmet, CORS whitelist
  • Audit log + ledger on every money move

Quick start

git clone https://huggingface.co/Shaurya2020/365lotus-platform
cd 365lotus-platform
./tool/start.sh ./my-site        # scaffolds the platform into ./my-site
cd my-site && npm install && npm run build && npm start

Or in Cursor: /start ./my-site.

Verify

./tool/verify.sh ./my-site      # runs e2e smoke against http://127.0.0.1:18080

Deploy (live 365lotus.cc)

./tool/deploy.sh ./my-site       # rsync + systemd restart on 365lotus-cc

Market-ready checklist

See MARKET_READY.md for the full research-backed checklist (licensing, KYC/AML, RG, payments, testing, GDPR, geolocation, RNG, audit). The scaffold implements the technical layer; the compliance layer (KYC vendor, payment processors, license) is wired as integration points but must be filled with your own vendors.

Live SoT

• Live: https://365lotus.cc → /var/www/365lotus.cc + /opt/lotus365-admin
• SSH: 365lotus-cc ([email protected], host srv1397941)
• API extraction: API_EXTRACTION.md in this repo (and at the workspace root on the deploy box)

Rules

• UI is free, stack is free, invariants are not free (wallet, settlement, exposure, hierarchy).
• Never ship secrets. AES envelope key + JWT secret live in env, never in git.
• Primary host is 365lotus.cc. Unknown WL hosts fail closed.

License

MIT (this scaffold). The live site retains its own license.