V2 — Dependency Registry (Fighting Game, Unreal Engine 5)

Scope: Dependencies that V2 launch depends on — engine version, plugins, middleware, third-party SDKs, infrastructure services, platform SDKs, build tooling, and internal packages on the V2 critical path. Companion docs: V2/V2_features.md, V2/V2_TODOS.md, V2/V2_ARCHITECTURE.md. Date: 2026-05-12

Purpose#

This file is the V2-scoped dependency contract. For each dependency it answers three questions a reviewer needs before launch:

1. What is it — one sentence on the dependency itself.
2. Where does V2 use it — the V2 features or TODOS sections that need it.
3. How is it wired — version source, plugin path, target platform.

Pinned versions will live in V2/ue/V2.uproject, each plugin's *.uplugin, each *.Build.cs, and the per-platform configs in V2/ue/Config/ once §1 creates those artifacts. Until then, this document is the planning contract and must mark dependencies as current, planned, or external.

Package-state rule for agents:

• Current packages must match a repo package.json before wiring.
• Planned packages are actionable work: create or land the package before wiring V2 to it, unless an ADR says the feature must be gated.
• Historical / corrected package names are only mentioned to prevent reuse; do not implement against them.

Cross-Reference Convention#

Throughout the V2 docs, including this file, bare §N and §N.M references resolve to V2_TODOS.md (138 top-level sections, ~1000 subsections — the canonical backlog). Explicit doc prefixes are used where ambiguity matters:

• §80 → V2_TODOS.md §80.
• deps§57 → this file's §57 (Hardware Peripheral SDKs).
• arch§"<anchor>" → V2_ARCHITECTURE.md by section anchor.
• features§"<anchor>" → V2_features.md by section anchor.

Table of Contents#

1. Engine Version
2. First-Party UE Plugins
3. Third-Party UE Plugins
4. Audio Middleware
5. Animation & Mocap Pipeline
6. Physics, Cloth, Hair
7. Rendering & Post-Process
8. Networking & Rollback
9. Online Services Provider
10. Anti-Cheat
11. Platform SDKs
12. Build & Distributed Compile
13. Source Control
14. Data Authoring & ETL
15. Telemetry & Analytics
16. Cloud Backend Services
17. Anti-Spam, Moderation, ML
18. Localization & VO
19. Esports / Broadcast Toolkit
20. Testing Tooling
21. Marketing / Web Shell Stack
22. Live Service Operations
23. Security, Secrets, Code Signing
24. Internal V2 Modules & Plugins

1. Engine Version#

2. First-Party UE Plugins#

Enabled in V2.uproject Plugins list.

Disabled in DefaultEngine.ini [/Script/Engine.Engine] DisabledPlugins to keep editor cold-start ≤ 25s: anything not referenced by V2 modules.

3. Third-Party UE Plugins#

4. Audio Middleware#

Launch decision: MetaSounds + AudioModulation (engine-native). V2 ships the native UE audio path for launch because it keeps runtime logic in source, avoids external sound-bank cook dependencies, and reduces middleware licensing risk across PC / PS5 / XSX / Switch2.

No Wwise plugin is integrated for launch. Wwise requires a separate ADR, audio-director signoff, and per-platform Audiokinetic licensing approval before any Wwise-Unreal-Integration plugin can be enabled. The executable contract is AudioRuntimePolicy_V2_Contract.json at V2/ue/Content/V2/Audio/AudioRuntimePolicy_V2_Contract.json, enforced by V2/ue/Tools/check-v2-audio-runtime-policy.py.

5. Animation & Mocap Pipeline#

6. Physics, Cloth, Hair#

7. Rendering & Post-Process#

DLSS / FSR / XeSS plugin packages: NVIDIA DLSS Unreal Plugin, AMD FSR Unreal Plugin, Intel XeSS Unreal Plugin — each per-vendor license; ship the plugin per platform's GPU vendor support.

8. Networking & Rollback#

V2 implements rollback in-house rather than licensing GGPO middleware. The engine-native rollback path is in Source/V2Netcode/Private/Rollback/.

9. Online Services Provider#

Primary: Epic Online Services (EOS) via OnlineServicesEOS.

Platform-specific shims: Sony PSN / NP SDK, Microsoft Xbox Live, Nintendo NEX — each integrated through platform-specific Online Subsystem modules.

10. Anti-Cheat#

Cert-relevant: AC must be on at launch for cross-play. Server-side validation augments client AC.

11. Platform SDKs#

12. Build & Distributed Compile#

13. Source Control#

14. Data Authoring & ETL#

15. Telemetry & Analytics#

16. Cloud Backend Services#

Default cloud: AWS (us-east-1, eu-west-1, ap-northeast-1, sa-east-1 regions). Multi-region for matchmaking ping.

Multi-cloud option: GCP parallel deployment behind same gateway for provider failover. Decision per region.

17. Anti-Spam, Moderation, ML#

18. Localization & VO#

19. Esports / Broadcast Toolkit#

20. Testing Tooling#

21. Marketing / Web Shell Stack#

apps/oshun/web/src/app/v2/:

The former standalone apps/v2/web/ stack is retired. V2 web content must enter through the shared Oshun shell and the per-surface clients above.

22. Live Service Operations#

23. Security, Secrets, Code Signing#

24. Internal V2 Modules & Plugins#

25. Adaptive Controller Hardware & Accessibility Middleware#

26. Replay Storage, Ghost Data, Photo Cloud#

27. Battle Pass & Live Service Backend#

28. Streamer, Speedrun, Coach Mode#

29. Display Tech & Upscaler SDKs#

30. Esports / Tournament Integrations#

31. Twitch Drops, Creator Partnerships, Community#

32. Age Verification, COPPA / GDPR-K / Korea / China Compliance#

33. DRM, Anti-Piracy, Hotfix Backend#

34. Anti-Cheat & Integrity Extras#

35. Production: Mocap, VO, Music, IP / NIL / Licensing#

36. Companion App, Public API, Modding#

37. Esports / Tournament Integrations (extended)#

38. Reliability, Latency, Frame Pacing Tooling#

Native crash-capture decision: Sentry alone is the application-layer service but does not capture UE5 native crashes (C++ access violations, GPU hangs, console abort traps). V2 ships Crashpad in-engine (Sentry Native integration on Win/Mac/Linux/PS5/XSX/Switch2; Breakpad as PC-only fallback if Crashpad path is broken on a platform). The decision is "Crashpad + Sentry Native" as primary; Backtrace evaluated as alternative if Sentry Native's console support proves insufficient under PS5 / XSX / Switch2 cert. Owner: V2 engine team. Done when: native crash from each platform appears in Sentry / Backtrace dashboard with symbolicated stack within 60s of crash.

38.5 Media encoding (replay → MP4, highlight reel, photo mode)#

V2 ships an in-engine MoviePipeline path for replay → MP4 export, highlight reel auto-edit, and photo mode share. MoviePipeline emits image-sequence frames but does not bundle an MP4 muxer — V2 must ship an encoder.

Encoder decision: NVENC → AMF → VideoToolbox → Quick Sync → FFmpeg software in that priority order, selected at runtime. Per-platform pin in V2/ue/Config/<Platform>Engine.ini [/Script/V2VFX.EncoderPriority] section. License risk: FFmpeg LGPL build is fine for redistribution; the GPL build is forbidden under this license envelope and CI gate Tools/check-ffmpeg-license.sh fails the build if a GPL-tagged binary is linked. Owner: V2 VFX team + engine team. Done when: 60s replay exports as 1080p60 MP4 ≤ 25 MB on each shipping platform; CI job encoder-smoke-pr-gate covers all five encoders.

38.6 Payment processing (coaching marketplace, donations, non-store flows)#

Platform-store IAP (PSN / MS Store / eShop / Steam / Epic Store) handles all in-game cosmetic and Battle Pass purchases. Non-store flows — paid coaching marketplace, charity donation gateway, esports prize pool collection, companion-app subscription — require a separate processor.

Cert constraint: Console platforms (PS5 / XSX / Switch2) prohibit non-platform IAP for any feature that grants in-game items. Coaching, donation, and subscription are non-item flows and explicitly allowed under each platform's TRC; CI gate Tools/check-payment-cert.py asserts that no Stripe / Adyen / PayPal SDK call path can ever grant a gameplay item or cosmetic. Owner: V2 platform team + legal. Done when: Stripe Connect split-payout clears for a $5 coaching booking in each launch region; donation flow clears a $1 charity transaction; SCA / 3DS challenge handled in EU and India.

39. Compliance: GDPR / CCPA / DSA / DSAR / Data Sovereignty#

40. Esports Pro Circuit & Charity Partners#

41. Live Service Calendar & Re-Engagement#

42. ML Pipeline (Behavioral / Moderation / Adaptive AI)#

43. Internal V2 Plugins (continued)#

44. Customer Support, Community Ambassadors, Coaching#

45. Per-Platform Store Features & PPP Pricing#

46. Engineering Polish Tools#

47. Audio Production Deep#

48. AI Director / Adaptive Difficulty Stack#

49. Compliance Deep Extended#

50. Studio Wellness & Insurance#

51. Signature Event Mode Plugins#

52. Racing Component: Engine, Physics, Vehicle Licensing#

53. Racing Audio: Engine Notes, Exhaust, Tire, Surface, Music#

54. Racing VFX: Smoke, Sparks, Debris, Motion Blur#

55. Racing Online & Cross-Play#

56. Racing Mode GameFeaturePlugins#

57. Hardware Peripheral SDKs#

58. VR / AR Platform SDKs#

59. Vehicle Designer + Pit Crew + Heist Mode Plugins#

60. Roguelike / BR / Sports / Specialty Mode Plugins#

61. GPU Vendor Extensions + Streamer Tools + Companion Micro-Games#

62. Wagering Compliance & Per-Region Cultural Review#

63. Bring-Your-Own-Server (PC Dedicated)#

64. Karaoke + Mini-Game Suite + World Boss + AI Commentary#

65. Real-World Brand / Celebrity / Venue Integrations#

66. Per-Account Vault & Estate-Planning Infrastructure#

67. AI Services (Beyond Adaptive AI)#

The AI services V2 ships are composed from real Iris / Isis / Calliope / Nous / Psyche / Themis packages enumerated in §68. This section pins the external vendor surface area behind those internal packages, the EU AI Act risk class per service, and the cost-tier ceiling that governs go/no-go for live use at esports scale.

Esports cost-ceiling rule. Live LLM cost at esports / world-finals scale (thousands of concurrent matches with commentary) follows the accepted ADR at V2/docs/decisions/ai-inference-cost-model.md. The per-match-per-minute cost ceiling is recorded at V2/docs/cost/ai-commentary.md; when reached, @iris/failover routes to the local-LLM fallback automatically.

Banned services. No services using GPT-4o-vision are wired into the commentary loop because per-frame vision inference cost dwarfs the audio-only budget; if vision-aware commentary is needed for esports, it must be Psyche-mediated frame summaries fed back into the text-only LLM call rather than a direct vision call.

Cross-ref: real package details (@iris/conversation-providers-*, @iris/voice, @calliope/cinema, @isis/ai-video, @psyche/*, @nous/safety) live in §68.5–§68.7. This section pins the vendor-and-risk surface only.

68. Oshun Domain Dependencies#

V2 sits inside the Oshun monorepo and consumes named Oshun domain packages across three integration channels (Bellona-orchestrated content cook, event-bus + gRPC runtime services, and the apps/oshun/web / apps/oshun/mobile out-of-game shell). The table below enumerates every Oshun package on the V2 critical path. Versions track each library's package.json in the monorepo; no separate version pinning lives here. See V2_ARCHITECTURE.md § "Sister-Monorepo Integration Surface" for the full per-surface mapping and V2_TODOS.md § "Oshun Integration Skeleton" for actionable wiring tasks.

68.1 Bellona — Content cook + engine bridge#

68.2 Hathor — Narrative, NPC AI, worldbuilding#

68.3 Isis — Generative asset factory#

68.4 Aja — Motion capture, retargeting, pose#

68.5 Iris — Conversational AI, voice, translation#

68.6 Psyche — Avatar behavior, lipsync, AI Director#

68.6.1 Euterpe commentary audio bridge#

68.7 Shakti — Combat sport, martial arts, form analysis#

68.8 Maat — Live-ops, financial intelligence, balance#

The repo contains @maat/finance for V2 ledger authority and @maat/negotiation-intelligence; remaining V2 financial / live-ops packages below are planned until their package surfaces land.

68.9 Sophia — Knowledge, RAG, citations#

68.10 Nous — AI primitive toolkits#

Scope correction (third pass). Nous packages are primitive toolkits, not a hosting/serving layer. Upstream model hosting is done by the model providers themselves (Anthropic / OpenAI / Google / local) accessed via @iris/conversation-providers-*. Nous packages contribute the LLM-side reasoning primitives, vision/audio analysis primitives, training pipeline primitives, and safety primitives that V2 composes on top of that provider abstraction.

68.11 Themis — Governance, IP, dispute resolution#

68.12 Kuanyin — Moderation, restorative justice, performer protection#

68.13 Aphrodite — Age verification, consent, regional content rules#

68.14 Calliope, Euterpe, Uzume, Veritas — Creative & broadcast#

68.15 Aje, Lakshmi, Aglaea, Yemaya, Metis — Cross-cutting#

68.16 Shared — Foundation infrastructure#

68.17 Concordia substrate (Concordia library is planned-only)#

Correction from prior draft: libs/concordia/* does not exist; Concordia is a planned cross-domain mediation substrate (per DOMAINS.md:209). The substrate primitives V2 actually composes today are split across @nous/* and the existing Iris and Oshun integration shims. Treat the rows below as the substrate composition until the @concordia/* library lands.

V2 is the first deployment surface that composes these primitives end-to- end. Launch exposure is gated behind the @oshun/config features module via ENABLE_V2_CONCORDIA_SUBSTRATE, which defaults disabled until readiness signoff. The eventual @concordia/* library will collapse this composition; until then, V2 wires the substrate directly.

68.18 Apps shell#

68.19 Forthcoming (reciprocal Oshun work V2 forces)#

Each line below corresponds to a reciprocal task in the named domain's DOMAINS/<domain>/specifications.md so V2's needs are tracked in the Oshun roadmap, not in V2 alone.

1. BellonaUnrealRuntime runtime-shipped UE plugin (companion to existing BellonaUnrealEditor). Owner: Bellona Runtime Integrations. ETA: 2026-06-30.
2. Rollback-safe low-latency in-match commentary contract on @iris/conversation-orchestration. Determinism rule: commentary outputs are audio / subtitle only and never feed simulation state — the contract can be off-rollback because its outputs are gameplay-inert. Implemented by createMatchCommentaryStream and consumed by V2AICommentary. KO-trigger commentary uses the documented 800 ms latency budget and falls back to pre-recorded @calliope/persona-live lines keyed by (cueKind,ruleset,commentatorId,seed) if the Iris LLM round trip, persona TTS, or lipsync envelope is exceeded. The reserved components are Iris LLM round trip, persona TTS, lipsync, and safety margin. Owner: Iris.
3. AI Director behavior-hint channel. Determinism rule (correction from prior draft): behavior hints CANNOT be a generic "off-rollback channel" for live rollback matches — both peers must run identical CPU logic inside the rollback envelope. Two valid modes only: (a) offline / training uses Psyche live tendency hints freely through @v2/psyche-ai-director-hints and V2AdaptiveAI; (b) online rollback-with-CPU defense-in-depth matches bake a tendency-vector + seed into the deterministic match-start input stream, then run rollback-deterministic AI for the match. Live mid-match Psyche updates are queued and applied at the next match-start. Owner: Psyche.
4. Shakti per-player combat-style classification for AI Director matchups. @shakti/sota-critical detects boxer, kickboxer, striker, grappler, or submission-specialist from combat telemetry; V2 consumes the result via @v2/shakti-style-classification and V2AdaptiveAI as an off-rollback match-end or match-start snapshot hint. Owner: Shakti.
5. Racing ecosystem bridge for Galatea vehicle-as-articulated-body driver probes, Saraswati hybrid / electric powertrain modeling, and Maya deterministic track/open-world traversal readiness is implemented by @v2/racing-ecosystem-bridge over @galatea/kinematics, @galatea/whole-body-control, @saraswati/ev, @maya/genesis-terrain, and @maya/genesis-urban. The bridge emits cook-time manifests only and rejects live race-frame RPCs. Owner: Galatea + Saraswati + Maya.
6. Karaoke + rhythm-combat fusion is implemented by @v2/karaoke-rhythm-combat-bridge over @euterpe/genesis, @euterpe/accompany, @euterpe/protect, @calliope/sound-design, and @iris/voice. The bridge emits cook-time manifests for V2Mode_Karaoke, V2Mode_RhythmCombat, V2DynamicMusic, V2Audio, and the V2-owned pitch and rhythm scoring rubric; it rejects live rhythm-combat frame RPCs. Owner: Euterpe + Calliope + Iris.
7. Cooking simulator mini-game embedding is implemented by @v2/hestia-cooking-minigame-bridge over @hestia/ai-ml, @hestia/cooking, @hestia/education, @hestia/ingredients, and @hestia/pantry. The bridge emits hestia.recipe-as-mini-game-script cook-time manifests for V2Mode_Cooking; it rejects live cooking frame RPCs. Owner: Hestia + V2.
8. Aja → Bellona/unreal export with 60 Hz resampling and sub-frame alignment for source mocap; notify-segment authoring (hit-active, armor, cancel-window) remains in UE animation montage authoring, not the upstream pipeline. Owner: Aja + Bellona.
9. Per-fighter / per-region / per-license-window NIL ledger schema in a new @themis/likeness library (NOT @themis/identity, which is governance- identity scope). Reciprocal tracker: docs/domains/themis/deep-dive/specifications.md section 11.8. Owner: Themis.
10. Fighting-game live-service calendar shape (Crown Points pool, Pro Circuit calendar, balance ramp windows) is implemented by @maat/strategy and consumed through @v2/maat-live-service-calendar. Owner: Maat.
11. Rage-quit / competitive-salt cascade class on @kuanyin/precognition distinct from generic toxicity. Owner: Kuanyin.
12. Combat-sport ↔ fighting-game-ruleset bridge mapping real biomechanics onto MK / SF / Tekken / SC / DJ frame-data is implemented by @shakti/fighting-ruleset-bridge and consumed by @v2/shakti-ruleset-bridge as off-rollback V2BalanceImporter CSV rows, with explicit game-only reference cards where no real-sport antecedent exists. Owner: Shakti.
13. Substrate composition for Concordia-style flows until libs/concordia/* exists: anti-cheat appeals + tournament disputes + crew conflicts compose @nous/cooperative-bargaining + @nous/preference-inference + @nous/agreement-search + @nous/concordia-sealed-memory + @iris/concordia-assistant + @oshun/concordia-integration + @oshun/config + @kuanyin/concordia-restorative in @v2/concordia-substrate; ENABLE_V2_CONCORDIA_SUBSTRATE gates external launch exposure while internal off-rollback checks continue. Owner: Nous + Iris + Oshun integration + Kuanyin.
14. Fan-token gated faction governance opt-in on @aje/governance, consumed through @v2/aje-faction-governance and behind the fan_token_gated_gameplay per-platform cert-ban gate. Owner: Aje.
15. Originality Shields launch — @themis/music-shield, @themis/visual-shield, @themis/text-shield, @themis/video-shield, @themis/design-shield now feed @v2/themis-originality-shields; V2 UGC accept-gates block unless the required shields pass. Owner: Themis.
16. EU AI Act conformity surface for shipping AI services is implemented by @v2/eu-ai-act-surface, with @nous/safety hosting adaptive-ai-director.md, ai-commentary.md, anti-cheat-classifier-suite.md, and generation-pipelines.md Model Cards and @themis/accountability retaining the AI-system-of-record and conformity audit export for each surface. Adaptive AI additionally uses @psyche/action-safety classifier transparency and opt-out. _Owner: Psyche
    • Nous + Themis._
17. Regional content-rule engine for gore variants per region — accepted ADR creates shared @oshun/region-rules; Aphrodite supplies age / consent inputs. Owner: Oshun platform + Aphrodite.

End of V2_DEPENDENCIES.md. Companion docs: V2_TODOS.md · V2_features.md · V2_ARCHITECTURE.md.