Changelog — Konfirm

Update 19 July 2026 Latest

Built-in SMS — India only

~ Built-in Twilio SMS now supports India only (valid +91 mobiles, 10 digits starting with 6–9)
+ Settings → SMS hint: for any other country, connect your own MSG91 / Twilio API details
+ Pre-send validation rejects invalid / non-Indian numbers before calling Twilio (saves API credits)
~ Landing page, documentation, and tutorial updated to match

v1.4.0 July 2026

+ New Elite plan — unlimited COD confirmations ($9.99/mo or $99/yr)
~ Pro plan now includes 100 confirmations / month (was unlimited)
+ SMS/Email/WhatsApp message styles & languages (8 styles × 8 locales) — included on every plan, including Free
~ WhatsApp always uses Friendly & Simple Meta Utility template (konfirm_otp, 5 body vars); language follows General
~ Own SMS, SMTP, and WhatsApp Business available on every plan

v1.3.0 July 2026

+ Removed OTP entirely — SMS, Email, and WhatsApp all use one-tap Confirm/Cancel links
+ SMS and Email send a secure /verify/{token} link with Confirm/Cancel buttons
+ Thank-you page widget is now informational — directs customers to their message and auto-updates on confirm
+ Dashboard: Channel column replaces OTP column (WhatsApp / SMS / Email)
~ WhatsApp link sanitization — handles Meta template URL placeholder edge cases

v1.2.0 July 2026

+ WhatsApp confirmations via Meta Cloud API — built-in sender, no WABA setup required
+ One-tap Confirm/Cancel buttons on WhatsApp (no OTP typing — Meta template policy)
+ WhatsApp settings tab — enable/disable, test send, and bring-your-own WABA
+ Smart channel priority — Auto, WhatsApp first, Email first, or SMS first
+ Channel waterfall — tries enabled channels in order, falls back on failure, stops at first success
+ Monthly quota now counts only successful deliveries (failed sends don't eat your free 10)
+ Improved phone number normalization for Indian and international formats

v1.1.0 June 2026

+ Email confirmations now show masked contact address on OTP page (an***@gmail.com)
+ Thank-you page block now shows exactly where the verification code was sent
+ Email and SMS sends are now independent — one failing no longer blocks the other
+ Plans & Billing page added to the merchant dashboard
✓ Fixed: "From header missing" error when custom SMTP had no from address configured
✓ Fixed: Encrypted credentials (provider_api_key, smtp_password) now gracefully return null instead of crashing when encrypted with a different APP_KEY
✓ Fixed: Shopify embedded app infinite redirect loop due to incorrect SESSION_SECURE_COOKIE env var

v1.0.1 June 2026

✓ Fixed: Twilio credentials truncated when saving due to VARCHAR(255) column — widened to TEXT
✓ Fixed: 403 "Invalid session token" error when opening app in Shopify admin
✓ Removed Hello World debug extension block from checkout editor
✓ Pagination arrows on dashboard replaced with clean text buttons

v1.0.0 June 2026 Initial release