Feature 3: abandoned-cart recovery (opt-in)

returning-customer memory: explicit recognition greeting

returning-customer memory (recognize + greet across sessions)

self-learning knowledge: AI-drafted answers for unresolved questions

enforce unique tenant resolution keys at every write (clean 409)

free proxy-equivalent cascade (Wayback/CORS/Google/Jina) for bot-blocked sites

hybrid knowledge retrieval (semantic+keyword) + jina reader fallback

read linked documents (Excel/PDF/Word incl. SharePoint shares) + xlrd

demos: 72h lifetime + batched purge (fix DB-full bloat)

embedded session-token heartbeat for the App Store embedded check

audit r2: rate-limit, transient-billing, uninstall webhook, billing dedupe

auto-crawl whole storefront into knowledge on connect

storefront widget: uploads/stream/handoff via signed App Proxy

audit fixes: cross-tenant routing, token re-mint, secret guards, DB uniqueness

App Proxy verifies with app shared secret (fixes widget 401)

deep-link direct to admin.shopify.com (no %2F) + embedded contract test

deep-link: injected app key + dynamic shop (generic, multi-tenant)

fix app-embed deep-link: use app api_key not extension uuid

theme-editor deep-link pre-activates the app embed

re-mint offline token via token exchange on each panel open

billing return stays embedded; no stale portal token

Install tab: native theme app embed for App-Store installs

portal differentiation (App-Store vs Stripe) + silent token self-heal + no-store

canonical App Bridge (meta tag) for embedded checks

expiring offline tokens + auto-refresh + App-Store auto-connect + billing UX

billing: dev-store test mode + surfaced error + polished trial banner

billing: Shopify subscription gate (14-day trial) separate from Stripe

fix(lang): pin the detected customer language explicitly (Spanish-heavy context was overriding plain mirror); None->mirror fallback

fix(policies): read public /policies/* pages (version- and scope-independent) instead of GraphQL shop fields

fix(policies): robust shop-policy query (drop subscriptionPolicy) + surface Shopify error reason

deploy: model-native language mirror + Shopify shop policies in the brain + cart-link fix + PDF ephemeral-disk persistence + /c hosted no-code page (migration 0025)

feat(mirror): gap report on demo page

feat(mirror): Gap Report /demo/gap

embedded App URL /shopify/app + oauth bounce

feat(shopify): embedded app (App Bridge + session token)

partners /r redirect-to-site + public_site_url config

feat: public Shopify App (OAuth+webhooks+billing) + SEO + partners program

i18n(portal): EN scopes step + read_shipping

fix(shipping): harden region match + no-match flag + time routing (b5ed306)

feat(shipping): get_shipping_cost + read_shipping scope (8ea8a1c)

fix(bot): business rules top-priority + card limit + escalate email-from-chat (c682408)

fix(bot): business rules top-priority + product cards not a sales-dump

llm: clean chain (Qwen gated off, Cloudflare off)

llm: Qwen id qwen-3-235b-a22b

llm: Qwen3-235B fallback (Cerebras free) + disable dead Cloudflare

fix: tenant own support_email into ToolContext (guard allow-list)

fix(bot): tenant-agnostic output guard (protects any client)

fix(bot): deterministic redirect/invent guards + tool enforcement + RAG floor

feat: admin sees client last-portal-access (engagement)

crawler: Shopify catalog+policies enrichment (richer demos, answers shipping/specs) + admin trial/paid visibility