Adds configurable “Sale”/“New” badges to category/search listings and product pages, with an admin UI, manual assignments or indexed rules, and a GraphQL field to fetch active labels.
Breaks down the September 2026 MCLOUD-15053 patch: fixes rollback ACL, export path traversal, GraphQL customer scope, Instant Purchase address ownership, PayPal Express quote binding, admin VAT XSS, URL escaping, plus B2B UI ACL and validator changes. Covers version-specific differences (2.4.4–2.4.9; B2B 1.3.3–1.5.3) and notes you also need APSB26-146.
Three bash scripts to scan for IoCs and guide cleanup on servers, apply community mitigations via Composer patches and a hardening module, and remotely check GraphQL exposure. Includes DDEV/Warden support, cloud-friendly usage, and step-by-step confirmations.
Step-by-step detection and cleanup for the unauthenticated RCE, plus nginx/Apache rules to block active campaigns and a Composer module/patch that makes DI scanners CLI-only (works on 2.4.6–2.4.9).
Adds posts, categories, tags, authors, scheduled publishing, six storefront widgets, and SEO (meta, Open Graph, Twitter Cards, JSON-LD), plus RSS, sitemap, and a full GraphQL API with URL resolving. Works with Hyvä and Luma.
Developer-focused debug bar that records every request (AJAX, GraphQL, REST) into a redacted JSON profile, with sections for queries, timeline, blocks, observers, events, cache hit rates, plugins, and live Alpine/Magewire components. Includes access-key gating, CLI/MCP reports, and Hyvä/Luma support with minimal overhead.
Implements semantic search by embedding product text via an external AI server and storing vectors in OpenSearch k‑NN, with fallback to keyword search. Includes architecture, installation/configuration, system requirements, performance estimates, and support for Luma and headless GraphQL.
Provides configurable returns management with admin and customer flows, attachments, and real-time comment threads, including eligibility rules and email notifications. Exposes full REST and GraphQL APIs and ships Hyvä-ready templates.
Hosted toolkit for generating modules and READMEs, diffing configs, exploring GraphQL/REST APIs, browsing DB schema and events, tracking patches, and running code audits — zero setup and free to sign up.
Ready-to-use Claude Code skills to look up orders, check inventory, manage customers, update products, and run reports by calling your store’s REST and GraphQL APIs with curl. Includes quick-start installation, required env vars, example commands, and safety checks that ask for confirmation before write operations.