v7.8 — AI-First CMS Platform

The CMS That
Thinks While
You Build

A next-generation website management system built on a lightweight PHP framework. Natural language commands, real-time voice control via Gemini Live, and AI that inherits your rules — never breaks them.

4-Layer CachePage · DB · SC · AI
WebAuthnPasskey Security
REST APIHeadless Ready
PWAInstallable App
AI Webmaster Console — Live Session
AI› How can I help you today?
You› Create a service page for a digital marketing agency
✦ Generating content structure…
✦ Applying responsive Bootstrap layout…
✦ Setting H1–H6 heading hierarchy…
✦ Writing meta title & description…
✦ Updating sitemap.xml…
✓ Hero✓ Services ✓ Process✓ CTA ✓ SEO Score: 98

You› Make the hero bolder. Keep brand voice.
✦ Rewriting hero section…
✓ Done — Readability 72 → 91

You› Schedule social post Monday 9am
✦ Facebook · Twitter · LinkedIn…
✓ Post scheduled for Monday 09:00

You› How is traffic trending this week?
Voice Active (VAD)
Gemini Live
4-Layer
Caching Architecture
v7.8
Latest Release
WebAuthn
Passkey Security
REST API
Headless CMS Ready
PWA
Installable on Any Device
AI-First Core

Intelligence Built Into Every Layer

This isn't a legacy CMS with AI bolted on. Every edit, publish, and SEO action is orchestrated by a thinking AI operator that works within your rules — never outside them.

🤖

Smart Content Generation

Create pages, blogs, FAQs, and landing sections via natural language. The AI understands your business type, audience, and goals to generate relevant, on-brand content immediately.

🧠

Context-Aware Editing

Update existing content without breaking SEO or structure. AI rewrites, expands, or simplifies text while preserving your brand voice and H1–H6 heading hierarchy throughout.

🎯

SEO That Thinks Ahead

Auto-generated titles, meta descriptions, Schema.org markup, sitemap.xml management, robots.txt, and internal linking suggestions — all optimized per page intent automatically.

Split-View Editor

High-performance bi-directional sync with draggable panel resizing and independent scrolling. Includes a Base64 Transfer Bridge to bypass server firewalls without friction.

🖼️

Advanced Media Library

AJAX uploads with progress bars, automatic WebP conversion, dynamic thumbnail generation, bulk optimization, nested folder support, drag-and-drop, and EXIF metadata stripping for security.

📊

Advanced Analytics

Real-time traffic monitoring, browser & device demographics, and AI-driven recommendations based on visitor trends. GA4 integration via direct Measurement ID — no plugin required.

Voice & AI Configuration

Gemini Live — Your AI Webmaster

Real-time voice communication with natural turn-taking and Voice Activity Detection. Three configurable AI personas — each with its own scope, tone, and authority level.

VAD Parameter Reference

Fine-tune exactly how the AI listens. Every parameter is independently configurable from System Settings.

ParameterDefaultDescription
threshold0.05Lower (0.01) catches whispers. Higher (0.1+) ignores background hum and noise.
silence_ms1000msDelay before AI responds after you stop talking. Increase for slow speakers; decrease for rapid-fire commands.
min_speech_ms200msNoise gate — discards clicks or mic pops shorter than this duration before processing.

Gemini Model Configuration

Configurable models with customizable voices using the core v2.0 Voice Engine.

Model: gemini-2.5-flash-nativeActive
Voice Threshold0.05
Silence Pause1000ms
Min Speech Gate200ms
🖥️

Assistant Console

Admin-facing commands. Full system authority — page creation, settings, caching, and AI configuration.

💬

Visitor Chatbot

Front-facing persona with limited, safe scope. Answers visitor questions using your published content only.

📝

Content Strategy Engine

SEO and editorial-focused persona. Generates, rewrites, and optimizes content based on keyword intent and analytics.

User & Access Control — v7.8

Designed for Real Teams

AJAX-first architecture throughout. Server-side DataTables for instant searching, AJAX CRUD without page refreshes, and WebAuthn Passkey management — all in a single panel.

🔐
Admin / Technical Role
Full system authority
  • Manage AI behavior, system rules & safety guardrails
  • Configure & revoke WebAuthn passkeys per device (iPhone, Android, Desktop)
  • Control layouts, components & conditional JS asset loading
  • Inject custom CSS, GA4 Measurement ID & header/footer tracking scripts
  • Enable Maintenance Mode with IP whitelist (comma-separated) for developer access
  • Manage CORS domain whitelist, rate limits & REST API keys
  • Approve, lock, or version-control critical content
👤
Content / Business User
Zero code required
  • Create & edit pages using natural language or Gemini Live voice commands
  • Upload images with auto WebP conversion, thumbnails & bulk optimization
  • Ask AI to redesign sections, expand content, or adjust tone
  • Build contact forms with drag-and-drop Visual Form Builder + Google Sheets sync
  • Schedule social posts to Facebook, Twitter & LinkedIn with AI rewrite support
  • View real-time analytics, AI audience recommendations & traffic trends
  • Manage portfolio items with Isotope filtering & carousel gallery views
How It Works

Build Pages the Smart Way

AI Prompts, System Executes. Describe what you want — the platform handles content, layout, SEO, and publishing automatically.

01

Describe Your Goal

Type or speak your request. The AI understands business context, audience, and intent — no templates, no forms to fill.

02

AI Builds the Structure

Content generated, Bootstrap/Tailwind layout applied, H1–H6 headings structured, SEO metadata and Schema.org markup written — all automatically.

03

Review in Split-View Editor

Live bi-directional preview. Tweak via code or visually. Changes sync in real time. The Base64 Bridge bypasses server firewall restrictions.

04

Publish & Auto-Optimize

On publish, all four cache layers warm automatically. Sitemap updates, schema injects, and social posts schedule — without clicking anything extra.

05

Iterate with AI

"Make the hero bolder." "Add an FAQ section." "Rewrite for a younger audience." The AI edits within your rules — never against them.

  Live AI Session
Create a service page for a digital marketing agency with modern layout
Generating Digital Marketing Agency page…
✓ Hero Section✓ Services Grid ✓ Process Steps✓ Testimonials ✓ CTA Block✓ Schema markup ✓ Meta written✓ Sitemap updated
Update hero — more bold and urgent
Hero rewritten. Brand voice maintained.
Readability: 72 → 91  ·  SEO score: 98/100
Schedule social post for Monday 9am
✓ Scheduled · Facebook · Twitter · LinkedIn
Monday 09:00 · AI-rewritten per platform
How is traffic trending this week?
Performance & Caching

Near-Instant Load Times, Even Under Heavy Load

A 4-layer caching architecture minimises server load and maximises speed. Caches auto-clear when content updates — or flush all at once via Settings › Cache Management.

📄

Page Cache

Static HTML delivery straight from cache. Near-instant load times on every visit, regardless of database activity or concurrent users.

🗄️

DB Cache

Query result storage eliminates redundant database calls. Scales to thousands of concurrent visitors without degradation.

⚙️

SC Cache

Shortcode rendering is cached independently. Complex output like {portfolio} renders once and serves instantly thereafter.

🤖

AI Cache

AI response persistence means repeated operations return instantly. Reduces API costs and latency simultaneously with configurable TTL.

The Asset Deferral Engine conditionally loads heavy libraries like DataTables and Chart.js only on pages that require them. This prevents bloat and ensures the fastest possible initial render (LCP) sitewide — with zero manual configuration needed.
REST API — Headless CMS

Decouple Frontend from Backend

Power mobile apps, React/Vue frontends, and third-party integrations via a robust versioned REST API. v1 is maintained for a minimum of 24 months with no breaking changes.

MethodEndpointUse CaseAuth
GET/api/v1/menusNavigation structureOptional*
GET/api/v1/settingsPublic site configOptional*
GET/api/v1/pagesList content pagesRequired
GET/api/v1/portfolioList portfolio projectsRequired
POST/api/v1/forms/{id}/submitHeadless form submitRequired

*Optional when Public Access Mode is enabled in API Settings.

Secure access enforced via X-API-Key header. CORS domain whitelist and per-minute rate limiting protect your server from abuse. Manage keys via Settings › REST API Config.
Public APIRead-Only
Menus & Settings. Safe for client-side use with no API key. Enable via Public Access Mode for headless React/Vue frontends.
Authenticated APIWrite Access
Full content CRUD via X-API-Key header. CORS whitelist restricts origins. Rate limiting prevents server abuse. Keys rotate via Settings.
Internal AIServer-Side Only
No public endpoints. AI actions run server-side through strictly validated logic. Cannot be invoked externally under any circumstances.
Plugin Ecosystem

Everything Built In. Nothing You Don't Need.

Marketplace-ready plugins with standard plugin.json manifests for version control and dependency management. Conditional loading ensures libraries fire only on pages that need them.

Portfolio Manager
Active
Isotope-based smooth frontend filtering, multi-category junction-table architecture, and unified carousel UI combining featured images and gallery sliders.
{portfolio} {portfolio cat_id="5"}
Visual Form Builder
Active
Drag-and-drop builder for complex forms. Database submission tracking, SMTP email alerts, and Google Sheets sync built in out of the box.
{visual_form id="1"}
Visual Designer
Active
Frontend editing suite for layout modifications with live style preview and responsive design adjustment — accessible directly from any page while logged in as admin.
SEO Optimizer
Installed
Sitemap.xml, robots.txt, dynamic meta tag generation, and automated Schema.org markup. Centralized search engine visibility management suite.
Ticket System Pro
v2.0 Updated
Mobile-first QR scanning with Verify Only and Entry modes. Audio feedback (granted/used/invalid), localized frame detection, and smooth scanning animations.
Social Auto-Post
Installed
One-click sharing to Facebook, Twitter, and LinkedIn. Scheduled posting with AI rewrite support for per-platform customized share templates.
Advanced Analytics
Installed
Real-time traffic monitoring, browser & device demographics, and AI-driven recommendations based on user behaviour trends and conversion data.
Lazy Loader Engine
Installed
Automatically delays images and scripts outside the viewport to improve initial page load speed (LCP) and SEO ranking on heavy media pages.
Visual Designer Pro
Active
Direct frontend element editing, live style preview, and responsive design adjustment — all without touching a single line of code at any step.
Security & AI Guardrails

Full Control. Zero Compromise.

SQL injection prevention, XSS sanitization, path validation, and AI safety guardrails are built into the core — not added as afterthoughts or plugins.

  • SQL Injection Prevention

    PDO prepared statements used throughout all common and custom modules. Database queries are never constructed from raw user input at any layer.

  • XSS Sanitization

    All user output is automatically sanitized via high-performance filters on every render. No manual escaping required by content editors or developers.

  • Path Validation

    Media library operations use strict path resolution checks. Directory traversal attacks are blocked at the framework level before reaching application code.

  • WebAuthn Passkey Hub

    Register and revoke device-specific passkeys (iPhone, Android, Desktop) from the User Edit panel via AJAX. Revocation requires manage_users permission.

  • Maintenance Mode

    Lock the frontend instantly. IP-based whitelist (comma-separated) lets developers continue working while visitors see a professional maintenance splash page.

  • Admin Best Practices

    Clear AI logs regularly, rotate Gemini API keys periodically, and review Failed Login reports in the activity monitor to stay ahead of threats.

AI Safety Guardrails
Hard limits on what the AI can and cannot do — enforced by design, not policy.
No Raw SQL. The AI cannot execute direct database queries under any circumstances. All data access goes through strictly validated controllers only.
Immutable Core. Core system files are locked from AI modifications. No prompt can instruct the AI to overwrite or modify framework files.
Validated Inputs Only. Every AI-triggered action passes through strict controller validation before any execution occurs on the server.
Admin-Scoped Permissions. The AI inherits the permission set of the logged-in admin. It cannot escalate its own access level beyond what the user holds.
Progressive Web App

Your Site, Installed on Any Device

Built-in PWA engine generates manifest.json automatically from your settings. Upload custom 192×192 and 512×512 icons for a premium home screen experience across all platforms.

  • 📲

    Installable on Any Device

    Prompt visitors to "Add to Home Screen" on iOS, Android, and desktop browsers for direct app-like access — no app store submission required.

  • ⚙️

    Auto-Generated Manifest

    manifest.json is generated automatically using your app name, short name, and theme colors from System Settings — zero extra configuration required.

  • 🎨

    Custom Icon Management

    Upload 192×192 and 512×512 branded icons directly via the settings panel for a premium independent look on every home screen and app switcher.

  • 📶

    Offline Awareness

    Basic service worker implementation caches the core site shell, giving users a consistent experience even with intermittent or lost connectivity.

Installable Web App

Your CMS-powered site appears as a standalone, chrome-free app on every device — full branding, no browser UI.

iOS Safari Android Chrome Desktop
Ideal For

Built for Teams That Want Control, Not Limitations

Not tied to third-party platforms. Fully customizable, extendable, and built for long-term growth — on your infrastructure, with your data, under your rules.

🏢

IT Companies & Agencies

Deploy for clients with full white-label control, custom AI personas, and role-based access for every team member across multiple sites.

🚀

Startups & SaaS Platforms

Move fast with AI-generated content while maintaining a scalable, headless-ready architecture that grows alongside your product.

🌐

NGOs & Organizations

Empower non-technical staff to manage complex websites independently — no developer needed for everyday content operations.

🎓

Educational Institutions

Multi-user management with strict role controls. Content workflows, event ticketing, and student-facing forms all built in from day one.

📱

Headless / React / Vue Teams

Use the versioned REST API to power any frontend framework. Public Access Mode enables safe client-side fetching without authentication overhead.

🏗️

Data-Sovereignty Businesses

Full control over hosting and data. No shared infrastructure, no third-party dependencies. Just your server and your rules — always.

Ready to Start?

Let AI Handle the
Complexity. You Focus
on Growth.

Experience the future of website management. Book a personalized demo and watch the AI Webmaster build, edit, and optimize a real page — live, in front of you, via voice or text.

AI Assistant
Online & Ready
Live Call
Ready to hear you
Waiting for speech...