Conn2Flow
An open-source PHP platform for building and operating digital products with AI — and an Agent Management System (AMS) for the agents that help you do it.
🇺🇸 English · 🇧🇷 Português · Website · Platform · Conn2Flow Pro
What it is
Conn2Flow started as a CMS. Today it is the base on which sites, stores, subscription products, customer portals and documentation are built, deployed and updated — by people and by AI agents working under the same rules.
Three things make it different from a CMS with an AI plugin:
- Everything is a resource. Pages, layouts, components, templates, variables, AI prompts and modes live as files in the repository, are compiled, and are synchronised to the database. What an agent writes is reviewable in a diff before it reaches production.
- One automation contract. The
c2f CLI (50+ commands) is what a developer runs by hand and what an agent dispatches. The /_api/ endpoints expose the same operations to remote clients, behind personal access tokens.
- Governance is part of the product. Work is specified, executed and reviewed through versioned artefacts in
memory/, with a catalogue of skills shared by five agent tools. Autonomy has explicit, auditable limits.
That last point is what we call an Agent Management System: not a place to run autonomous agents for their own sake, but the controls a mature CMS already gives human editors — identity, permission, scope, validation and an audit trail — extended to AI-assisted work.
What is inside
| Area | What you get |
|---|
| Content | Visual HTML editor with a live editing bar, pages, layouts, components, templates, variables, menus, galleries, forms, publications with searchable indexes, SEO metadata, sitemap |
| Agents and AI | AI library with modes and prompts as resources, an AI assistant in the editor, skill catalogue for Claude Code, Codex, Cursor, Gemini and GitHub Copilot, Memory Driven Development (MDD) workflow |
| API | /_api/ endpoints for authentication, OAuth, projects, system updates and modules, with scoped, revocable personal access tokens |
| CLI | c2f: resources, CSS, assets, database, projects, deploy, updates with rollback, documentation, Docker, page inspection |
| Delivery | Project pipeline, deploy lock, per-layer manifest, snapshot, health check and automatic rollback, file-conflict resolution in the panel, the API and the CLI |
| Front end | Tailwind CSS v4 compiled per resource, alongside Fomantic UI; third-party assets served from disk, with build-time minification |
| Security | CSRF protection with silent token renewal, 2FA, session management, access lockout with a stated deadline, reCAPTCHA and Turnstile, restricted-access mode |
| Payments | Stripe (Payment Element, subscriptions, webhooks) and PayPal libraries |
| Extensibility | 30+ core modules, 40+ libraries, hooks, widgets, plugins, multi-language, projects that override the core without forking it |
How people and agents work on it
intent smallest slice evidence
┌──────────────┐ ┌───────────────────┐ ┌────────────────┐
│ Architect │ ─────▶ │ Executor │ ────▶ │ Reviewer │
│ specs, reqs │ │ code, tests, docs │ │ findings first │
└──────────────┘ └───────────────────┘ └────────────────┘
▲ │ │
└──────── human in the loop: approves, redirects ────┘
memory/ holds the requests, batches, decisions and validation records. It is the single source of truth for what was asked and what was proven..claude/, .codex/, .cursor/, .gemini/ and .github/ carry the same skills, so every agent tool starts with the same knowledge of the product.- Three autonomy levels — supervised, monitored and headless — decide how far an agent goes before a human looks.
- Agents reach a running installation the way a user does: through the CLI, or through the API with a token that can be scoped and revoked.
The process is a rule of the project, not a guarantee enforced by the PHP runtime. Read the vision and AI security for what is implemented.
Quick start
Install on a server (PHP 8.1+, MySQL or MariaDB, Apache or Nginx):
# Finds the latest installer release, whatever its version
TAG=$(curl -s "https://api.github.com/repos/otavioserra/conn2flow/releases?per_page=100" | grep -o '"tag_name": *"instalador-v[^"]*"' | head -1 | cut -d'"' -f4)
curl -L -o instalador.zip "https://github.com/otavioserra/conn2flow/releases/download/$TAG/instalador.zip"
unzip instalador.zip -d /path/to/webroot
Prefer a button? The Start building page always links to the latest installer.
Open the site in the browser and follow the four steps: requirements, database, paths and keys, administrator account. Details in the installation guide.
Develop locally:
git clone https://github.com/otavioserra/conn2flow.git
cd conn2flow
./c2f help # every command, with aliases
./c2f manager:update-all # core → resources → files → database
composer test # PHPUnit
npm run test # Vitest
The Docker stack and the VS Code tasks are described in the development environment guide.
Documentation
The documentation is Markdown, versioned with the code, checked against it and rebuilt by c2f docs:build. Every page records the commit it was verified at.
Full index: ai-workspace/en/docs/.
Repository map
| Folder | Contents |
|---|
gestor/ | The core: router, libraries, modules, resources, migrations |
gestor-instalador/ | The web installer |
cli/ | The c2f command line |
ai-workspace/ | Documentation in English and Portuguese, and automation scripts |
memory/ | Requests, batches, decisions and validation records |
dev-environment/ | The Docker development stack |
dev-plugins/ | Plugin templates and tooling |
tests/ | PHPUnit, Vitest and Playwright suites |
Ecosystem
- conn2flow.com — the project site, built on Conn2Flow itself. See the platform overview.
- Conn2Flow Pro — managed hosting and plans for those who want the platform without running the servers.
- Conn2Flow AI Workspace — the framework that carries the skills and the governance to every repository built on the core.
- Conn2Flow Dev Tools — the VS Code extension: a panel to pick the MDD scope and the target project, run the pipeline, rebuild CSS, publish releases and read diagnostics, without leaving the editor. Guide.
- Conn2Flow Nexus — an AI gateway in development. It is a direction, not a dependency: nothing in this repository requires it.
Status
Current release: v3.0.2. Recent work, in the order it landed:
- Admin panel rebuilt in Tailwind CSS v4, module by module
- Dashboard widget area and the free board, with board pages and ready-made templates
- Safe and automatic system updates: deploy lock, snapshot, health check, automatic rollback
- File-conflict resolution, one decision per file, in the panel, the API and the CLI
- AI provider layer for Gemini, Claude, OpenAI and compatible APIs
- Home page and layout per user profile
Details per version in What's new.
Contributing and license
Bugs and proposals are welcome in GitHub Issues. Before a pull request, read how the documentation and the memory/ workflow are kept, so the change arrives with its evidence.
Released under the MIT License.
