API Changelog

Full production-ready release. Complete multi-tenant architecture from ground up.

• ✅ Multi-tenancy — PostgreSQL schema-per-tenant with X-Tenant-ID header
• ✅ Auth — JWT access + HTTP-only refresh cookie + TOTP 2FA
• ✅ Products — Full CRUD, soft delete, restore, image upload, SEO fields, JSONB meta
• ✅ Variants — Per-variant SKU/barcode/size/color/stock/price_delta
• ✅ Inventory — Stock adjust, bulk adjust, low-stock alerts
• ✅ Orders — Atomic checkout with SELECT FOR UPDATE, product snapshot, tracking timeline
• ✅ Delivery — County-based zone lookup, fee estimation, per-km calculation
• ✅ Coupons — percentage/flat, expiry, per-user limits, coupon_uses tracking
• ✅ M-Pesa — STK Push + real callback with order update + stkquery
• ✅ Paystack — Initiate + HMAC webhook + verify fallback
• ✅ Invoices — Auto-generated branded PDF (pdfkit) on order creation
• ✅ Reviews — Verified-purchase check, admin approval workflow
• ✅ Wishlist — Add/list/remove per customer
• ✅ Notifications — SMTP with per-event templates, notification log
• ✅ Analytics — Revenue, top products, new customers, orders by status, delivery by county, coupon performance
• ✅ RBAC — Custom roles with JSONB permissions, staff invite/assign
• ✅ Settings — Logo/favicon upload, SMTP test, branding snapshot on invoices
• ✅ Platform API — Tenant provisioning, licence management, global product templates (secret)