Multi-Tenant Enterprise Operating System, Digital Intelligence & Agency Operations Platform.
Connects. Remembers. Analyzes.
English Documentation • 🇹🇷 Türkçe Dokümantasyon • 📖 Case Study
Note
ADA Co-OS (NexusADA) is an end-to-end multi-tenant corporate operating platform. It includes one-click Docker Compose self-hosting, Nginx reverse proxy, MySQL 8, Redis queues, Reverb WebSocket broadcasting, row-level data isolation, 3-tier RBAC, a multi-provider AI gateway, vector semantic memory, conditional workflow execution, payment webhooks (Iyzico, Stripe), SHA-256 digital signatures, transactional HTML mailers, interactive asset review canvas, and Critical Path Method (CPM) project scheduling.
flowchart TD
subgraph ClientAccess["🌐 Access Channels & Endpoints"]
WebAdmin["💻 Web Admin Portal (/admin)"]
Webmaster["🛡️ Webmaster Control Center (/platform)"]
ClientPortal["👥 Interactive Client Portal (/client)"]
DesktopApp["🖥️ NativePHP Electron Desktop App"]
RESTClients["📡 Sanctum Authenticated REST API (/api/v1)"]
Webhooks["💳 Stripe & Iyzico Payment Webhooks (/api/webhooks/*)"]
end
subgraph SecurityLayer["🔐 Security & Isolation Layer"]
TenantScope["Multi-Tenant Isolation (BelongsToTenant)"]
RBAC["3-Tier RBAC Engine (24 Roles / 54 Permissions)"]
TwoFactor["Google2FA Two-Factor Authentication"]
AuditTrail["OwenIt Audit Trail & Activity Logging"]
end
subgraph CoreEngines["⚡ Digital Intelligence & Execution Core"]
AIGateway["Multi-LLM Gateway (OpenAI, Claude, Gemini, Nvidia, Ollama)"]
VectorStore["Tenant-Scoped Semantic Vector Store & Cosine Search"]
ToolRegistry["Autonomous Agent Tool Execution (Tasks, CRM, Proposals)"]
WorkflowDAG["Conditional Workflow & Human Approval Gate Engine"]
PaymentEngine["Multi-Gateway Payment Engine (Iyzico, Stripe, Sandbox)"]
DigitalSign["Cryptographic SHA-256 E-Signature Verification"]
EmailIntel["IMAP Email Threading & Auto-Ticketing"]
BroadcastEngine["Laravel Reverb / WebSockets Real-Time Event Dispatcher"]
CloudStorage["S3 / R2 / MinIO Isolated Cloud Storage Engine"]
CPMEngine["Critical Path Method (CPM) & Resource Capacity Heatmap"]
end
subgraph ContainerLayer["🐳 Docker Self-Hosted Container Infrastructure"]
Nginx["Nginx Reverse Proxy & SSL Termination"]
AppFPM["PHP 8.4-FPM Optimized Container"]
QueueWorker["Background Redis Asynchronous Queue Worker"]
ReverbServer["Reverb Real-Time WebSocket Daemon (Port 8080)"]
MySQL["MySQL 8.4 Isolated Database Service"]
Redis["Redis In-Memory Cache & Session Broker"]
end
ClientAccess --> SecurityLayer
SecurityLayer --> CoreEngines
CoreEngines <--> ContainerLayer
- Complete Compose Stack: Automated orchestration with
docker-compose.ymldeploying PHP 8.4-FPM, Nginx, MySQL 8.4, Redis, background queue workers, and Laravel Reverb WebSockets. - Production Zero-Downtime Script: Automated rolling deployment script (
deploy.sh) handling migrations, config caching, and queue restarts.
- Universal Provider Routing: Pluggable AI gateway supporting OpenAI (GPT-4o), Anthropic (Claude 3.5 Sonnet), Google (Gemini 2.0), NVIDIA NIM, and local Ollama with deterministic mock fallbacks.
- Tenant-Scoped Vector Store: Computes vector embeddings and performs cosine similarity search across corporate memories (
VectorStore.php). - Autonomous Tool Calling: Autonomous execution registry for agentic actions (
create_task,create_proposal,lookup_client).
- Dynamic Branching: Evaluates record conditions (
>,<,==,contains,in) to steer business processes dynamically (ConditionEvaluator.php). - Human-in-the-Loop: Cryptographically signed approval gates for management sign-offs on budgets and proposals (
ApprovalGateService.php).
- Payment Processing: Unified payment provider architecture supporting Iyzico, Stripe, and sandbox test gateways (
PaymentService.php). - Automated Webhooks:
/api/webhooks/stripeand/api/webhooks/iyzicocontrollers verifying payloads and auto-reconciling invoices in real-time. - SHA-256 Digital Signatures: Generates verifiable audit certificates capturing signer identity, IP, user agent, timestamp, and SHA-256 HMAC integrity hashes (
DigitalSignatureService.php).
- Event Broadcasting: Event dispatcher broadcasting on tenant-scoped private WebSocket channels (
TaskUpdatedEvent,NotificationCreatedEvent). - Frontend Echo Client:
resources/js/echo.jswith instant UI live re-renders upon Kanban and task updates. - Transactional Mailers: Automated HTML notifications on invoice collections (
InvoicePaidNotification) and proposal deliveries (ProposalSentNotification).
-
Design Review Canvas (
AssetReviewer.php): Point-and-click pin placement on design deliverables, allowing clients to leave coordinate-based ($x, y$ ) threaded feedback.
- CPM Schedule Analysis: Forward and backward pass calculation identifying project duration, early/late dates, total float/slack, and critical path task chains (
CriticalPathEngine.php). - Workload Capacity Heatmap: Tracks daily workload hours per employee, flagging over-allocation (>8h/day) to prevent team burnout (
ResourceAllocationService.php).
Executive overview with financial KPIs, project Gantt timelines, active tasks, and team utilization.

| 📋 Interactive Task Kanban Board | 💼 Works & Business Pipeline |
|---|---|
![]() |
![]() |
| Status columns, priority tags, and direct task assignment. | Pipeline deal tracking, revenue metrics, and activity feeds. |
| 💼 Client Portal & Invoicing | 📅 Project Gantt Timeline |
|---|---|
![]() |
![]() |
| Self-service client portal, proposals & DomPDF reports. | Interactive timeline scheduling with day/week zoom. |
git clone https://github.com/adacreativeco/NexusADA.git
cd NexusADA
docker compose up -d --buildYour enterprise portal will be instantly live on http://localhost!
git clone https://github.com/adacreativeco/NexusADA.git
cd NexusADA
composer install
npm install && npm run build
cp .env.example .env
php artisan key:generate
php artisan migrate --seed
php artisan test
php artisan serveTip
Out of the box, .env.example is configured with SQLite (database/database.sqlite), allowing instant local setup without installing a MySQL server. For Docker or production environments, MySQL 8 and Redis configurations are fully provided.
| Role / Function | Password | Guard & Access | |
|---|---|---|---|
| Platform Admin (Webmaster) | admin@dhe.com |
password |
Full Platform & /platform Control |
| Agency Administrator | admin@adacreative.co |
password |
Tenant Webmaster & Operations |
| Project Manager (PM) | pm@dhe.com |
password |
Projects, Works, Gantt & Timelines |
| Developer | dev@dhe.com |
password |
Tasks, Kanban, Time Tracking |
| Designer | design@dhe.com |
password |
Tasks & Brand Assets |
Distributed under the Apache 2.0 License. See LICENSE for details.



