Built-in AI chat — ask "build me a WordPress site" and AI calls NK internal APIs to do it. Personal+.
Multi-Provider
- Anthropic Claude (claude-opus-4-7 / sonnet-4-6 / haiku-4-5)
- OpenAI GPT (gpt-4o / gpt-4-turbo)
- MiniMax (M3 32K)
- DeepSeek
BYO API key, token cost on you.
3 permission modes
- supervised (default) — prompt for Sensitive / Dangerous
- autopilot — only prompt for Dangerous
- readonly — only read-only tools allowed
2FA enforcement + audit
/user/ai/chat route requires admin + 2FA. Every admin_ai_agent handler calls require_admin_2fa_gate; failure returns STEP_UP_REQUIRED so frontend pops modal.
WordPress install playbook
AI auto-orchestrates: get site config → upsert waf_enabled=0 → tell user to visit install.php → user confirms → upsert waf_enabled=1 → report done.