A stack you can
verify.

The primary UI framework for the CRM and interactive applications.

Build tooling and local development for the admin panel SPA.

SSR and static generation for the agency website and product pages.

Public website localization: Russian and English versions on one domain, with language-specific SEO markup.

Strict typing for the CRM and backend; Nuxt applications remain on the compatible compiler release line.

State management for client applications and workflows.

Design system, responsive grid, and core UI components.

Native iOS and Android wrappers, secure storage, push notifications, and an installable web application.

The HereCRM desktop wrapper and a custom capability-bound system-input helper for attended remote access.

Modular API core, background workers, bots, and integrations.

HereCRM's primary relational database with tenant-bound Row Level Security.

Typed PostgreSQL schemas, queries, and migrations.

Queues, Pub/Sub, caching, and background process coordination. RabbitMQ is not used.

Realtime events for the CRM, messenger, notifications, and calls.

Privacy-first Telegram gateway to Claude Code, Codex, Gemini CLI, and Qwen Code, with account isolation and work session synchronization.

Managed apps, scopes, tools, and secure ChatGPT Apps connections.

Repositories, commits, tasks, AI sessions, and event delivery to the CRM.

Local transcription and structured AI analysis of phone calls without requiring the text to be sent to an external LLM. The analysis model was changed from Qwen3 1.7B to Qwen3 8B on July 24, 2026, following a factual accuracy QA audit of 50 calls.

Local speech synthesis for assistant replies without an external service or per-use synthesis fees. Piper applies stress and intonation automatically, so it voices six characters; the female voice was migrated from Silero to Vosk-TTS, the only tested system that raises pitch at the end of a question and assigns stress using its built-in dictionary. ChatTTS, XTTS-v2, Fish Speech, MMS, VoiceCraft, and F5-TTS_RUSSIAN were rejected for licensing reasons; Bark, CosyVoice2, and Chatterbox were rejected for their hardware requirements, as they run eight times slower than real time on a CPU. Synthesis takes 0.2–0.6 seconds per phrase with the model loaded in memory.

The primary operating system for the production server and isolated CI.

TLS termination, static sites, reverse proxying, and public client domains.

Scoped DNS management for the HereAgency zone and an optional bot challenge for the public AI demo; the challenge is enabled only when both the site key and secret key are configured.

HTTP/HTTPS CONNECT proxy on the US node without HTTPS decryption, with individual credentials, private usage statistics, and TLS ingress.

SOCKS5 proxy on the US node with username authentication and aggregate usage accounting that excludes traffic content.

TURN/STUN server: connects call participants directly even behind corporate NAT and firewalls.

Management of Node.js, Python, and infrastructure processes without containerizing the core.

Self-hosted Git server, change provenance, and development environment.

Local object storage for media, documents, and Telegram sessions.

Transit KMS, tenant data encryption, and managed secrets.

Point-in-time recovery, nightly backups, and regular restore drills.

Self-hosted error tracking without sending PII to external Sentry Cloud.

An isolated Linux/x64 VM for secure report builds and future runners.