Fast, typed, and AI-native under real constraints
This is what powers Tidalux: modern PHP, Claude-assisted workflows, UK-first hosting, and delivery patterns that survive shared hosting without cutting corners on security or money handling.
Marketing pages
Fast
UK edge, LiteSpeed
WaveAI first token
Quick
warm cache
Portal auth chain
Snappy
gate to dashboard
Queue drain tick
60s
cron interval
The engine room behind every Tidalux surface
Books, client portals, WaveAI widgets and this marketing site share one discipline: compile assets locally, push code, drain queues on a schedule, and keep AI spend inside knobs you can actually turn.
- Sub-200ms marketing pages on UK edge
- Claude calls gated by cost-mode and caps
- Money as integers, journals that must balance
- No npm, no SSH, no post-deploy surprises
Live stack trace (simplified)
Operational patterns from production, not a diagram for a pitch deck.
Runtime layer
Modern PHP with Laravel 13, Livewire and Alpine. Typed, testable, deployable without a build farm.
PHP 8.4
Tap to expand
PHP 8.4
Tap to expand
Strict types, enums and performance headroom without chasing every framework fad.
Laravel 13
Tap to expand
Laravel 13
Tap to expand
Routing, auth, queues and Blade - the backbone of Books, portals and marketing.
Livewire 3 + Alpine
Tap to expand
Livewire 3 + Alpine
Tap to expand
Reactive UI without shipping a separate SPA build chain to shared hosting.
Next.js & React
Tap to expand
Next.js & React
Tap to expand
Where App Router and component libraries earn their keep on client-facing products.
Data layer
MariaDB with parameterised queries, soft deletes and money stored as integers. No float surprises.
MariaDB
Tap to expand
MariaDB
Tap to expand
utf8mb4 throughout, JSON where it helps, CHECK constraints where they matter.
Eloquent + scopes
Tap to expand
Eloquent + scopes
Tap to expand
Thin models, business logic in services, audit trails on financial writes.
BIGINT money
Tap to expand
BIGINT money
Tap to expand
Pence in the database, Money value objects in code, tabular figures in the UI.
Drizzle + tRPC
Tap to expand
Drizzle + tRPC
Tap to expand
Typed data access and APIs on Node products where the stack calls for it.
AI layer
Claude through a cost-mode dial, retrieval-grounded WaveAI, abuse guardrails and human escalation.
Anthropic Claude
Tap to expand
Anthropic Claude
Tap to expand
Primary model family for drafting, classification and WaveAI replies.
Cost-mode dial
Tap to expand
Cost-mode dial
Tap to expand
minimal, flow, rise, surge - spend caps and prompt caching baked in.
WaveAI retrieval
Tap to expand
WaveAI retrieval
Tap to expand
Answers tied to supplied content; thin knowledge bases trigger honest handoff.
Abuse guard
Tap to expand
Abuse guard
Tap to expand
Rate limits, pattern checks and escalation before models burn budget.
Edge layer
LiteSpeed, TLS, CDN assets and monitoring that keep public pages fast without vanity infra.
UK hosting
Tap to expand
UK hosting
Tap to expand
Managed hosting and cloud tiers sized to the workload.
LiteSpeed + TLS
Tap to expand
LiteSpeed + TLS
Tap to expand
HTTP/2, sensible caching headers and certificates renewed on schedule.
CDN assets
Tap to expand
CDN assets
Tap to expand
Logos and brand images via config-driven CDN URLs, not hardcoded paths.
WaveCheck
Tap to expand
WaveCheck
Tap to expand
Free site scans, OSA readiness checks and monitoring with alerts that reach a human.
Security layer
Gate, multi-stage auth, CSRF everywhere, rate limits on sensitive paths and no public stack traces.
Gate + auth chain
Tap to expand
Gate + auth chain
Tap to expand
Passphrase gate, password, PIN and TOTP before internal routes open.
CSRF + validation
Tap to expand
CSRF + validation
Tap to expand
Every form protected; user input validated and escaped in Blade.
Attachment serving
Tap to expand
Attachment serving
Tap to expand
Files outside public/, streamed through authenticated controllers.
Login attempt logging
Tap to expand
Login attempt logging
Tap to expand
Every auth stage logged, throttled and reviewed without storing secrets.
Delivery layer
Commit vendor and compiled CSS locally, push to managed hosting, drain queues via cron. No SSH theatre.
Git deploy
Tap to expand
Git deploy
Tap to expand
Dev locally, commit including vendor/, hosting pulls. No composer on server.
Tailwind CLI
Tap to expand
Tailwind CLI
Tap to expand
Standalone binary compiles app.css locally - no npm on production.
Queue drain pattern
Tap to expand
Queue drain pattern
Tap to expand
PDF, OCR, webhooks and email via per-minute artisan sweeps, not daemons.
DomPDF + Proton SMTP
Tap to expand
DomPDF + Proton SMTP
Tap to expand
Invoice PDFs and queued mail with HTML and plain-text alternatives.
Sophisticated AI, zero SaaS theatre
WaveAI, internal assistants and support suggestions share the same guardrails: bounded spend, grounded retrieval, and humans who can answer for every decision that matters.
WaveAI on your site
One script tag, branded widget, retrieval from your pages and FAQs. Visitors get quick answers; you get a clean handoff path.
Explore WaveAICost-mode dial
Operations declare minimum tiers. Below the current mode, features degrade to rules-only instead of throwing errors or burning budget.
How we use AIAbuse guard + escalation
Pattern checks, rate limits and human review before AI spend spikes. Support tickets get AI suggestions, not AI-only replies.
Support centreCost-mode dial
minimal
flow
rise
surge
Every Claude call honours the active mode. Operations below the tier return null and callers degrade gracefully.
Why we build this way
Not a competitor hit piece. Just the choices we would make again if we were starting from scratch tomorrow.
Boring where boring wins
MariaDB, Laravel and git deploy are not flashy on a slide. They are dependable for a decade.
AI with boundaries
Models assist; they do not replace judgement, legal review or access control you can explain to a client.
No lock-in theatre
Your data stays exportable, your domains stay yours, and we document what runs where.
Shared hosting, serious engineering
Constraints force discipline: compiled assets committed, queues drained, no mystery post-deploy scripts.
Curious how your site compares?
Run a capped Lighthouse snapshot. Fair use, human verification, no account required.
Same stack, your product
WaveAI for visitor questions, honest pricing for hosting, and a support team that built the platform.