Genesis Travel CMS | Маркетплейс

AI-демо

Ключ покупки mp_live_* проверяет лицензию, домен и entitlement — он не авторизует AI-запросы. IuVeAI требует отдельный API-ключ kai_live_* из Settings → API Keys. Проверка AI выполняется независимо от валидации лицензии. Доступность AI зависит от активного IuVeAI API доступа клиента и провайдера.

Возможности

mp_live_* — purchase key for license activate/validate/entitlement only
kai_live_* — separate API key for IuVeAI chat/completions
Pairing UI → LifecycleManager → PairingService → https://www.iuve.eu/api
Secrets masked in admin; no keys exposed to public JavaScript

Примеры использования

After purchase

Download ZIP from My Purchases after payment
Install CMS and open Admin → Marketplace Pairing
Enter mp_live_* and activate production domain
Create kai_live_* in IuVeAI Settings → API Keys for AI

Черновик демо от AI. Скриншоты/видео могут быть заглушками до публикации.

Возможности

Туристический сайт — адаптивный публичный сайт: направления, туры, партнёрские предложения и формы заявок
Полный CRUD туров/направлений/партнёров — создание, редактирование, публикация, цены, SEO, изображения
CRM лидов — статусы, приоритеты, follow-up, timeline заметок и источник
Brand & Design — бренд, hero/OG media, цвета, контакты и SEO
Users & Security — пользователи админки, роли и смена пароля
System Health — PHP, расширения, storage, HTTPS, БД, версия и pairing-диагностика
Widget Runtime & Consent — переключатель Enabled/Disabled для каждого места вставки; категории согласия (Always active, Functional, Analytics, Marketing); статус ACTIVE / DISABLED / NOT CONFIGURED; вывод в HEAD, после открытия BODY, перед footer и перед закрытием BODY; Analytics/Marketing загружаются только после согласия посетителя
Production Cleanup — нет демо-туров/направлений/партнёров при ошибке БД; демо-контент опционален и отключён по умолчанию; удалены фейковые контакты; исправлена метка «Production v12»; реальные email-ссылки подтверждения/сброса и форма нового пароля
Guided Update Installation — Update Center показывает UPDATE AVAILABLE / READY TO INSTALL; жёлтое уведомление о политике безопасности; диалог подтверждения установки с резервной копией файлов и БД, проверкой цифровой подписи и SHA-256; IuVeAI Update Assistant (сводка, оценка времени установки, поддержка отката)
Admin Language Consistency — обновление переводов на языках в админке
Update Center Reliability — диагностика JSON; разделение «актуально»/ошибка; Sodium/OpenSSL preflight; install только при новом манифесте; пункт IuVe Control Center в сайдбаре
Telegram Distribution — авто/ручная отправка туров в канал/группу через Bot API; тест; backlog; изображения
RSS и фиды — общий RSS, горящие, рекомендуемые, Merchant / Travel XML Feed сохранены
Marketplace Product Pairing — фиксированные endpoints; mp_live_*; Clear Local без remote release
Self-hosted — PHP/MySQL; migration 012; upgrade/rollback; загрузки JPEG/PNG/WebP
Безопасность — CSRF, маскирование секретов, нормализация домена, validation cache, last-known-good

Системные требования

Сервер: Linux рекомендуется; Apache или Nginx; HTTPS обязателен; права на запись storage/ и uploads/
PHP 8.1+ (рекомендуется 8.2): PDO, PDO MySQL, JSON, cURL, mbstring, OpenSSL, fileinfo, sessions
БД: MySQL 8+ или совместимая MariaDB 10.4+; UTF8MB4 рекомендуется
Браузер: актуальные Chrome, Firefox, Edge или Safari
Установка: домен или поддомен; учётные данные БД; mp_live_*; опционально kai_live_*

Последняя версия

Последняя версия: 14.1.9
Размер архива: 9.2 MB
Дата выпуска: 2026-07-17
Поставщик: IuVe
Лицензия: IuVe License — one-time purchase
Развёртывание: Self-hosted PHP/MySQL on customer server
Обновления: Delivered via IuVe Marketplace when newer versions publish

Документация

Installation guide

Extract the ZIP to your site document root. Open /install.php and configure database and administrator. After install go to Admin → Marketplace Pairing: enter mp_live_* license key, activate normalized domain, validate license, check entitlement if needed, save kai_live_* and run Test AI.

Marketplace Product Pairing

Pairing is implemented inside the self-hosted CMS (not in iuve.eu seller admin). Canonical chain: Admin UI → MarketplacePairingLifecycleManager → MarketplacePairingService → IuVe Marketplace API (https://www.iuve.eu/api).

Architecture v1.0: /static/marketplace/docs/MARKETPLACE_PAIRING_ARCHITECTURE_V1.md
CMS operational task: /static/marketplace/docs/MARKETPLACE_PRODUCT_PAIRING_CMS_TASK.md
API pairing agent: /static/marketplace/docs/MARKETPLACE_CMS_IUVE_API_PAIRING_AGENT.md

Domain activation & license validation

Use mp_live_* from My Purchases. Activate normalized production domain before validate/entitlement.

IuVeAI API pairing

Create kai_live_* in Settings → API Keys. Configure in CMS pairing screen separately from mp_live_*.

Post-install security

Remove or protect /install.php after setup. Enforce HTTPS. Restrict admin access.

Upgrade, backup & rollback

Back up files and database before upgrades. Roll back by restoring backup and previous package version.

Troubleshooting

Use Admin → Marketplace Pairing diagnostics. Verify outbound HTTPS to https://www.iuve.eu/api.

Совместимость

Открыть отдельную страницу

Требования к окружению и интеграциям для самостоятельного развёртывания.

Компонент	Требование	Статус
PHP	8.1	Проверено
PHP	8.2	Проверено
PHP	8.3	Проверено
MySQL	8.x	Проверено
MariaDB	10.4+	Проверено
Apache	2.4+	Проверено
Nginx	1.18+	Проверено
LSAPI	LiteSpeed	Проверено
Hosting	Shared hosting	Проверено
Hosting	VPS / dedicated	Проверено
Browsers	Chrome, Firefox, Edge, Safari (current)	Проверено
Windows Server + IIS	—	Не сертифицировано
PostgreSQL	—	Не сертифицировано
PHP	8.0 or below	Не сертифицировано

История изменений

v14.1.9 — Genesis Travel CMS Production v14.1.9 — Update Center Stale-Cache Hardening 2026-07-17

Genesis Travel CMS v14.1.9 — Update Center Stale-Cache Hardening
Language translations update
Update Center: at install time the client now re-fetches and verifies a fresh update manifest immediately before installing; a stale manifest cache is refreshed automatically; false SIGNATURE_INVALID errors caused by a stale cache are eliminated; signature verification is not weakened — installation still requires a valid signature.
Re-fetch + verify at install: a fresh HTTP GET of the live manifest overwrites the update_manifest_json cache and the signature is verified on the FRESH manifest against the trusted key registry; on a network failure it falls back to the cache but still verifies the signature.
Auto-refresh stale cache: a manifest older than a short TTL, or whose version differs from the latest advertised version, is refreshed before preflight/install.
Preflight signature verification: Check Compatibility computes signature status on a fresh manifest and adds a Signature verified item, so the UI never shows READY based on a stale/bad cache.
Graceful bad-cache repair: an unverifiable cached manifest is auto-cleared and re-fetched instead of dead-ending on FAILED; verification is never bypassed.
Version bumped to 14.1.9; changelog, release notes and SHA-256 checksums updated; syntax verified across all PHP files.

v14.1.8 — Genesis Travel CMS Production v14.1.8 — IuVeAI API Alignment 2026-07-17

Genesis Travel CMS v14.1.8 — IuVeAI API Alignment
Language translations update
IuVeAI base address is now fixed to https://www.iuve.eu/api.
Chat endpoint corrected: /v1/chat/completions → /chat/completions.
Orchestrator endpoint corrected: /v1/orchestrator → /orchestrator.
Fixed the AI check in Marketplace Pairing.
Added strict validation: HTTPS only; www.iuve.eu only; mandatory /api/ prefix.
Improved IuVeAI error diagnostics without ever printing the API key.
Fixed the incorrect fallback message claiming the API was not connected.
With fallback disabled, a correct controlled 502 error is now returned.
Version bumped to 14.1.8; changelog, release notes and SHA-256 checksums updated; syntax verified across all 61 PHP files.

v14.1.7 — Genesis Travel CMS Production v14.1.7 — Update Notifications 2026-07-17

Genesis Travel CMS v14.1.7 — Update Notifications
Language translations update
Update notifications: dashboard banner and menu badge when a new version is available; cached check via Update Center/cron; notification once per version; optional administrator email and Telegram notifications; notification only — installation still passes signature verification.

v14.1.6 — Genesis Travel CMS Production v14.1.6 — Cron Configuration & Verification Fixes 2026-07-17

Genesis Travel CMS v14.1.6 — Cron Configuration & Verification Fixes
Language translations update
Full Cron configuration: new Cron Configuration section in IuVe Control Center → Diagnostics with automatic secure token generation, ready-to-use scheduler URL, interval choice (5/10/15/30/60 min), last run time + status + duration, states PASS / STALE / WAITING FOR FIRST RUN / NOT CONFIGURED, safe token rotation, a unified cron-health.php endpoint and cron run logging.
Signature Verification fix: removed uninformative "—" values, shows "Waiting for update check" before verification, recognizes different Marketplace manifest formats (key_id, signing_key_id, signature_algorithm, nested signing object, signature_meta, structured signature object), shows a clear warning on an incomplete manifest; installation is still blocked if the signature cannot be verified.
External Widgets & Code fix: display scope (Homepage only / All public pages), clear states ACTIVE / WAITING FOR CONSENT / DISABLED / NOT CONFIGURED, explains when code is hidden due to cookie consent, a button to open the homepage for testing, recommends Before Footer slot + Homepage only + correct consent category for a visual HTML block, and preserves unescaped HTML/CSS/JS output on the public side.
Update safety: version bumped to 14.1.6, RU + EN release notes, CHANGELOG.md updated, FILES_SHA256.txt rebuilt, PHP lint passed and ZIP integrity checked; database config, IuVe Identity, license, uploads, storage and all custom and existing data are protected on update.

v14.1.5 — Genesis Travel CMS Production v14.1.5 — Secure Update Trust 2026-07-16

Genesis Travel CMS v14.1.5 — Secure Update Trust
Language translations update
Secure Update Trust: trusted update key registry (Root Trust Key + Marketplace release signing keys), key_id in manifest, multi-key support, key revocation, signature verification log in IuVe Control Center.
Trusted update key registry (config/update_trust.php) shipped in the package so future installs/updates always carry the Marketplace public key and can never regress to an empty update key.
Update Center verifies each signed release against the trusted registry (active + validity window + algorithm), with backward-compatible fallback to the legacy single update_public_key.
Marketplace, IuVe Identity, licensing, RSS and Telegram Distribution were NOT changed

v14.1.4 — Genesis Travel CMS Production v14.1.4 — Widget Runtime & Production Cleanup 2026-07-16

Genesis Travel CMS v14.1.4 — Widget Runtime & Production Cleanup
Language translations update
Added explicit Enabled / Disabled toggle instead of unclear checkbox
Each embed placement now sets a consent category: Always active; Functional; Analytics; Marketing
Admin shows real state of each block: ACTIVE; DISABLED; NOT CONFIGURED
Code renders correctly in all four placements: HEAD; after BODY open; before footer; before BODY close
Added hint that Analytics and Marketing appear only after visitor consent
Removed automatic output of demo tours, destinations and partners on database error
Demo content on install is now optional and disabled by default
Removed fake contacts: travel@example.com; +373 00 000 000
Fixed stale "Production v12" label
Removed demo password-reset links on frontend
Added sending of verification/reset links via email
Added a real new-password form
Marketplace, Update Center, Telegram, RSS, IuVe Identity and licensing were NOT changed

v14.1.3 — Genesis Travel CMS Production v14.1.3 — Guided Update Installation 2026-07-16

Genesis Travel CMS v14.1.3 — Guided Update Installation
Language translations update
INSTALL_DISABLED no longer puts Update Center into FAILED state
When a version is found, shows UPDATE AVAILABLE
After successful preflight, shows READY TO INSTALL
Technical message replaced with a clear yellow security-policy notice
"Install Update" button active when a new version is available
Added install confirmation dialog with mandatory steps: file backup, database backup, digital signature verification, SHA-256 verification; dialog confirmation explicitly authorizes signed installation
Added IuVeAI Update Assistant block: update summary, estimated install time, rollback support info
Marketplace API, IuVe Identity, licensing, RSS, Telegram Distribution, and tour business logic were NOT changed

v14.1.2 — Genesis Travel CMS Production v14.1.2 — Admin Language Consistency 2026-07-16

Genesis Travel CMS v14.1.2 — Admin Language Consistency
Language translations update (Admin Language Consistency)

v14.1.1 — Genesis Travel CMS Production v14.1.1 — Update Center Reliability 2026-07-16

Genesis Travel CMS v14.1.1 — Update Center Reliability & IuVe Navigation
Added detailed invalid JSON diagnostics for Marketplace responses
Distinguished up-to-date state from actual update failures
Fixed preflight crypto capability check to accept Sodium or OpenSSL
Disabled install/preflight actions when no newer signed manifest is available
Added a dedicated highlighted IuVe Control Center item in the admin sidebar
Preserved Telegram Distribution, RSS feeds, Identity, Marketplace Pairing and IuVeAI

v14.1.0 — Genesis Travel CMS Production v14.1.0 — Telegram Distribution 2026-07-16

Genesis Travel CMS v14.1.0 — Telegram Distribution
Preserved RSS module: general published tours RSS, hot deals RSS, recommended tours RSS, Merchant / Travel XML Feed
Telegram Bot API: send newly published tour to Telegram channel or group
Auto-send when tour status changes to published; manual Telegram button near published tour
Send all previously unsent offers; test message for connection check; tour image support
Tour fields in Telegram post: name, destination, hotel, nights, departure city, meal plan, price, description, tour link
Log of successful and failed sends; duplicate publish protection; secured cron URL
Bot Token and Channel/Group ID configuration in Marketing & Feeds admin
Setup: create bot via BotFather → add bot to channel/group → grant publish rights (channels) → enter Bot Token + channel/group ID → Send Test Message → enable Automatically publish a tour
Identity + Marketplace Pairing retained; mp_live_* license vs kai_live_* AI keys remain separate

v14.0.1 — Genesis Travel CMS Production v14.0.1 2026-07-15

Marketplace download artifact restored at releases/marketplace-artifacts/genesis-travel-cms-v14.0.1.zip
Identity + Marketplace Pairing retained; mp_live_* license vs kai_live_* AI keys remain separate
Update Center–ready self-hosted package tip set to 14.0.1

v12.0.0 — Genesis Travel CMS Production v12 2026-07-14

Full CRUD for Tours, Destinations and Partners (replaces production stubs)
CRM leads with statuses, priorities, follow-up and note timeline
Brand & Design Center with media upload and SEO fields
Users & Security and System Health admin modules
MarketplacePairingService + MarketplacePairingLifecycleManager (canonical pairing chain)
Marketplace endpoints fixed via allowlist; removed from editable admin forms
Strict mp_live_* (license) vs kai_live_* (AI) separation; key masking; CSRF; audit
15-minute validation cache and last-known-good recovery
Safe JPEG/PNG/WebP uploads; adaptive admin shell
Migration 012_production_v12.sql and production upgrade/rollback docs

v1.0.2 — Marketplace paid product & Pairing v1.0.2 2026-07-14

Converted Marketplace product from free to paid
Set one-time price to €500
Connected existing Marketplace checkout and purchase flow
Added paid-entitlement download protection
Added mp_live_* license issuance after successful purchase
Updated Marketplace Product Pairing information
Clarified separation of mp_live_* and kai_live_*
Updated product details, requirements and compatibility
Improved pairing diagnostics and security documentation
Removed obsolete free-product wording