Changelog

Two features that put merchants in control of their deliverability and brand identity: configure your own email provider and attach a custom domain with automatic SSL — all from the admin panel.

Bring Your Own Email

• Provider support — Connect any SMTP server, SendGrid, Resend, Mailgun, or Amazon SES from Settings → Email
• Test Connection — A verification email is sent to your address before credentials are saved, so misconfigured providers are caught immediately
• Encryption at rest — All credentials are encrypted with AES-256-GCM using a platform-managed key; no plain-text secrets in the database
• Onboarding step — Email configuration is now step 4 of the 6-step new-merchant wizard
• Payment guard — Stripe and PayPal activation is blocked until email_configured = true, ensuring transactional emails work before your first sale
• Graceful failure — Order confirmation emails sent through your provider are non-blocking; delivery errors are logged but never fail the order

Custom Domains

• DNS wizard — The domain setup page shows exact DNS records: an A record pointing to Gcore Anycast 81.28.12.12, or a CNAME to shops.cartly.pro
• Auto-verify — The DNS verification button checks propagation in real time; on success, the domain is immediately registered as a Gcore CDN secondary hostname
• Edge SSL — Let's Encrypt certificates are provisioned automatically at the Gcore edge within seconds of domain verification — no certbot, no manual renewal
• Subdomain auto-registration — Every new shop gets a yourstore.cartly.pro subdomain registered at signup via an exponential-backoff retry loop (5 attempts, ~30 s window)
• Origin hidden — All storefront traffic flows through Gcore Anycast; the origin IP is never exposed to DNS or end users

Infrastructure

• The entire Cartly platform now runs behind Gcore CDN (resource 965866). Wildcard DNS *.cartly.pro points to Gcore Anycast 81.28.12.12, giving every merchant shop automatic edge caching and DDoS protection with zero configuration
• Platform transactional email migrated to Zoho Mail (smtp.zoho.com:465)

• Metaobjects available in Liquid templates as metaobjects.TYPE.entries
• GraphQL: admin_only definitions return empty on storefront
• Dynamic field type resolution from definition schema
• Redis version counter cache invalidation + Gcore CDN purge on mutations
• Safety limits: 50 entries per type, 250 total in Liquid context

AI Translations

• Field-level translation buttons inline with every translatable field
• 15 languages supported, including 6 built-in storefront locales
• AI Generate mode for SEO-optimized content creation
• Billing limits per plan with chars_exceeded error handling

Tags Management

• TagInput with autocomplete from existing tags and count badges
• TagManager dialog: rename, merge, delete tags across all products
• Tag-based collection filtering

Platform AI

• Gemini API key and model selection for platform admins
• AI usage dashboard with call breakdown and token metrics
• Dynamic provider: settings take effect without service restart

Checkout Extensibility

• Rule-based engine for discount, shipping, payment, and validation customization
• Visual RuleBuilder and ActionBuilder in admin panel
• WASM runtime (wazero) for advanced custom logic
• Checkout Branding editor with CSS variable injection
• 8 Extension Points for third-party app UI injection
• 52 E2E tests + 34 Go unit tests

Phase 1: Self-Serve Returns (RMA)

• Customers can submit return requests from order detail page
• Temporal RMAWorkflow with Approve/Reject signals
• Automated refund processing on approval

Phase 2: Passwordless Login

• OTP via email and SMS (Twilio, AWS SNS adapters)
• Magic Link login (signed, 15-minute expiry)
• Smooth tab UI on login page

Phase 3: Customer Headless API

• SAT/CAT-authenticated endpoints for profile, addresses, wishlist, returns
• App Session Token delegation for embedded apps

Phase 4: Portal Extension Points

• 6 extension slots in customer portal (header, footer, sidebar, account, order, return)
• Apps register Liquid/iframe/remote blocks per slot

Phase 5: B2B Company Hierarchy

• Company, Location, Membership entities with full CRUD
• Role-based access control (admin, buyer, viewer)
• Per-location budget limits with Temporal budget-reset workflow

Phase 6: Enterprise SSO (OIDC)

• OIDC flow: init → provider → callback → auto-membership
• Encrypted client secrets in DB
• Supports Google Workspace, Azure AD, Okta, custom OIDC

Inventory Locations

• Create and manage multiple warehouses, retail stores, and fulfillment centers
• Per-location stock tracking with available/reserved/incoming fields
• Location type badge (warehouse/retail/dropship)

Stock Management

• Set inventory levels per variant × location
• Transfer stock between locations via API and admin UI
• Low-stock alerts with configurable threshold
• Automatic legacy sync: variant.inventory mirrors sum of all locations

Fulfillment

• Location picker in fulfillment modal (when >1 active locations)
• Pass location_id to POST /admin/orders/:id/fulfill
• Background cleanup: expired reservations released every 5 minutes

Developer Portal

• 5 new guide pages — Headless API v1, Cross-Border Markets, GitHub Theme Sync, Custom Data (Metafields/Metaobjects), App Extensions
• Help Center — new article: Selling in Multiple Currencies

Storefront

• Liquid theme engine — full Shopify-compatible Liquid rendering (layouts, sections, snippets, templates)
• 5 built-in themes — Minimal, Canvas, Mono, Flow, Bold with unique CSS variables and dark mode

Admin

• Markets detail page — fixed crash when countries field is null
• Marketplace — "Installed" badge prevents duplicate installs
• Custom domain management + impersonate without password (platform admin)
• Number inputs — empty string now treated as 0 instead of NaN

Testing

• 53 Playwright E2E tests across 4 spec files — all green
• Coverage: Markets admin, Storefront API (SAT), Cart CRUD, Customer auth, GitHub Theme Sync, Translations

Liquid Theme Engine

• Shopify-compatible Liquid rendering — full template engine powered by theme_files JSONB storage, supporting layouts, sections, snippets, and templates
• Section schemas — JSON-driven section settings with live preview support

5 Marketplace Themes

• Minimal — Clean editorial aesthetic for fashion and lifestyle brands
• Canvas — Rich visual storytelling for luxury and artisan products
• Mono — Sleek monochrome design for tech and gadget stores
• Flow — Soft organic layout for wellness and beauty brands
• Bold — High-energy urban design for streetwear and sneaker drops

Monaco Code Editor

• Full in-browser IDE for editing theme files with Liquid syntax highlighting
• Access to layouts, sections, snippets, templates, assets, and config

AJAX Cart & Variant Selector

• Slide-out drawer cart with quantity updates — no page reload required
• Live variant switching with price, image, and availability updates

Predictive Search

• Live search suggestions for products, collections, and articles as you type

Asset Serving

• Theme CSS/JS served from /shops/:id/theme/assets/:filename with proper cache headers

Custom Domain Routing

• Merchant custom domains mapped to storefronts with automatic SSL provisioning via certbot

Real-Time Status Page

• Live status dashboard at /status
• Health monitor for DB, Redis, Typesense, Temporal, S3, Stripe, SMTP
• 90-day uptime heatmap
• Incident management

Help Center

• 40+ articles in 10 categories at /help
• Search, sidebar nav, breadcrumbs

Compliance

• Cookie Policy, AUP, SLA, Security, DPA

Improvements

• Grouped footer, nav CMS editor, analytics governance, marketplace fixes

App Store (apps.cartly.pro)

• Launched Cartly App Store — a marketplace for apps, themes, and integrations
• Browse by type: Apps, Themes, Integrations
• Category filtering and full-text search powered by Typesense
• Listing detail pages with reviews, screenshots, and feature lists
• CSS-rendered theme preview cards with color swatches
• SEO-optimized with JSON-LD (WebSite, SoftwareApplication), Open Graph, and canonical URLs

Public API — App Store (no auth required)

• GET /appstore/listings — Browse listings with pagination, type and category filters
• GET /appstore/listings/:slug — Listing detail with current release and review summary
• GET /appstore/listings/:slug/reviews — Paginated reviews for a listing
• GET /appstore/categories — Categories with listing counts
• GET /appstore/featured — Featured listings (up to 12)
• GET /appstore/search?q= — Full-text search across all listings

Admin API — Marketplace Management

• POST /admin/marketplace/publish — Create a new marketplace listing
• POST /admin/marketplace/:id/submit-update — Submit new release version
• POST /admin/marketplace/:id/unpublish — Deactivate a listing
• GET /admin/marketplace/my-listings — Your shop's published listings
• GET /admin/marketplace/browse — Browse all available listings
• POST /admin/marketplace/install/:id — Install listing (creates connector, theme, or OAuth flow)
• POST /admin/marketplace/uninstall/:id — Remove installed listing
• GET /admin/marketplace/installed — Installed listings for your shop
• POST /admin/marketplace/review/:id — Submit a review (1–5 stars)
• GET /admin/marketplace/updates — Check for available updates
• POST /admin/marketplace/apply-update/:id — Apply update to installed app

Platform API — Moderation

• GET /platform/marketplace/queue — Releases pending moderation
• POST /platform/marketplace/releases/:id/approve — Approve a release
• POST /platform/marketplace/releases/:id/reject — Reject a release
• POST /platform/marketplace/releases/:id/sandbox-install — Sandbox testing
• GET /platform/marketplace/stats — Marketplace statistics

• Multi-tenant e-commerce platform with isolated shop environments
• Visual page builder with drag-and-drop sections
• Stripe payment integration with zero lost orders guarantee
• GraphQL Storefront API for headless commerce
• Typesense-powered full-text search with typo tolerance
• Built-in blog and SEO tools
• OAuth 2.0 app marketplace with App Bridge protocol
• Temporal-powered workflows for checkout, imports, and billing
• Platform admin panel with shop management and analytics
• Email campaign system with SMTP, templates, and sequences