Changelog

• Fixed Form Theme Customizer colors now apply to forms whose block turns the theme on while the form or global setting has it off.
• Fixed The submit button hover shadow follows your button color instead of staying blue.
• Fixed Skip-to-submit links for long forms, the empty message gap above themed forms, and notice spacing in the customizer preview.
• Improved Front-end scripts load deferred, and the generated theme stylesheet is minified.
• Added CFDS, GTDS, Tabler and WordPress presets, plus 13 new design options covering field background, buttons, type, width and depth.

Requires FluentCart. Invoices and the other store modules require FluentCart 1.6.4 or later. The agent skills need the free Site Agent plugin (https://gauravtiwari.org/product/site-agent/); Site Agent 0.4 or later serves them to connected agents without an extra install.

• Fixed an issued deposit or balance invoice showed its order's share as "Items subtotal" in the admin view, for example USD 720.00 under items totalling USD 2,400.00. It now shows the invoice total, the deposit or deposit paid, any tax in this payment, and the amount due, the same as the customer's page.
• The AI agent skills panel on Invoices → Automation now covers the /store skill alongside /invoice and /quote, including its gtfc-store name in Site Agent.
• The Recurring invoices list gives each column a sensible width, wraps customer emails at the @ sign instead of mid-word, and fits a phone screen without scrolling sideways.
• The "Invoices with a due date", "Ends" and "Each new invoice" headings now line up with the controls below them, and the quote proposal reminder field has room above it.

Requires FluentCart. Invoices and the other store modules require FluentCart 1.6.4 or later. The agent skills need the free Site Agent plugin (https://gauravtiwari.org/product/site-agent/); Site Agent 0.4 or later serves them to connected agents without an extra install.

• Recurring invoices. Open an issued invoice and choose Repeat this invoice to bill the customer every 1 to 12 weeks, months or years, starting on a date you pick and ending never, after a number of invoices, or on a date. Each period creates a new invoice with its own number and payment link, then emails it or saves it as a draft for you to review. Invoices → Recurring lists every schedule; pause, resume or stop them there. A schedule on the 31st uses the last day of shorter months, and a site that missed its scheduled tasks creates one invoice and logs the skipped periods.
• Deposits. Ask for a percentage or fixed amount first on digital and service invoices and quote proposals. When the deposit is paid, a balance invoice for the rest is issued and emailed automatically. Deposit and balance add up to the full total and tax exactly.
• Reminders timed from the due date. Email settings takes up to four reminders before, on, or after the due date, with a new overdue message for those after it. Turn reminders off for a single invoice in its editor. Issued invoices list the reminders still queued. Quote proposals can send one reminder before they expire.
• Fixed with automatic reminders on, only one unpaid invoice at a time received its reminder, and back-in-stock emails for several products could queue only the first product. Action Scheduler's unique flag ignores the job's arguments, so jobs are now unique per invoice and per product option.
• New /store agent skill and gtfc_agent() commands: store.summary, order.list, order.get, stock_alert.list, stock_alert.send, product.details.get, product.details.set, page_access.pages, page_access.add and page_access.remove, plus invoice.schedule, invoice.unschedule and invoice.schedules. Changes support dry_run first. The bundled script runs any command with gtfc.py call.
• The {due_date} email placeholder now uses your site's date format.
• Dark mode fixes for FluentCart's dark theme. The Product details card on the product editor now has dark text boxes, checkboxes, dividers and a readable Add a detail link and Save button instead of white boxes on a dark card.
• The Invoices and Quotes screens, the Checkout Builder layout picker and the Conditional module badge follow dark mode too, including the product search results, status pill, activity log and invoice layout picker.
• The checkout details table in FluentCart's order view no longer shows dark grey labels on a dark background. It takes the page's text colour, so it reads well in light mode, dark mode and emails.

• Avoids redundant warming requests and defers cold preloads safely near the worker deadline.
• Retains redacted transport diagnostics for failed preload jobs.
• Compacts Cloudflare expressions and enforces the size limit without dropping private-page protections.
• Explicit Markdown and format requests bypass the HTML page cache before WordPress loads.
• Managed Cloudflare and generated server rules protect negotiated representations and Authorization headers.
• Documents complete origin and edge invalidation after manual deployments.
• Preload requests bypass Cloudflare and LiteSpeed lookup to rebuild stale origin pages.
• Restores padding in Cloudflare purge status and queue-upgrade cards.

• Fixed Video facades request YouTube's 1280 × 720 thumbnail instead of the 480 × 360 image. The image fills the default 16:9 frame without theme image rules changing its height. Videos without an HD thumbnail fall back to the available image.
• Fixed YouTube players send the embedding site's origin using an explicit referrer policy. Editor previews use a normal document on the site because the editor's blob canvas cannot send an HTTP referrer, which causes Error 153. Previews load eagerly; autoplay and click-to-play embeds also carry the policy.
• Fixed Email Form control styles are scoped to the form, so the shared .acf-input class no longer adds padding, borders or backgrounds to ACF inspector fields.
• Fixed Site-specific editor stylesheets saved by Block Manager regenerate after a plugin update so stale inspector styles do not survive in the uploads directory.
• Fixed Shorts, live, privacy-enhanced YouTube URLs, and Vimeo player/channel/group URLs render correctly. Vimeo unlisted privacy hashes and YouTube share timestamps are preserved; missing controls settings keep controls enabled, and Vimeo honors the controls switch.
• Fixed Videos inserted by AJAX initialize correctly, and lazy loading leaves other plugins' videos alone. Invalid provider URLs show an explanatory editor placeholder.
• Fixed Email Form labels follow custom input IDs. Boolean attributes retain their state in ACF's editor preview, including hidden form and star-rating messages, inactive tab panels, required inputs, and video playback settings.
• Fixed Editor stylesheets are written atomically, recently generated bundles are retained during overlapping requests, and missing or stale settings bundles are rebuilt.
• Changed Video facade and lazy-load behavior is loaded through the block's conditional viewScript asset instead of an inline script. Players have accessible titles and intrinsic widescreen dimensions.
• Changed Release tags are checked against version metadata, generated assets and tests before packaging. Development dependencies are excluded from the upload ZIP.

Requires FluentCart. Invoices and the other store modules require FluentCart 1.6.4 or later. The agent skills need the free Site Agent plugin (https://gauravtiwari.org/product/site-agent/); Site Agent 0.4 or later serves them to connected agents without an extra install.

• The invoice and quote skills now work straight through a Site Agent MCP connection, in Claude, ChatGPT, Cursor and other MCP clients, with no Python script or local credentials. The agent runs each step with Site Agent's PHP tool.
• With Site Agent 0.4 or later, the skills appear in Site Agent's own skill list as gtfc-invoice and gtfc-quote whenever Custom Invoices and Request a Quote are on, so a connected agent finds them without a download.
• Invoices → Automation links to Site Agent, which is free, explains that agents connected through Site Agent 0.4 or later need no extra install, and still recommends adding the skills for everyday use.
• The bundled script also accepts Site Agent's authenticated URL as a single SITE_AGENT_MCP_URL setting. INSTALL.md in each skill ZIP covers OAuth, Application Passwords and the authenticated URL.

• New AI agent support through Site Agent, a free plugin that connects agents such as Claude, ChatGPT and Cursor to your site. With Site Agent 0.4 or later, a connected agent gets the GT Link Manager skill automatically: it can find, create and update links, set country rules, organize categories and read analytics, using the same checks as the REST API.
• New gtlm_agent() for integrations. It returns every link with the branded short link as url and the destination as target_url, the same shape as link lists. Permanent deletion and analytics changes stay in the dashboard.
• New an AI agents page in the GT Links menu shows what a connected agent can do and how to connect one.
• Improved settings are grouped into cards.

• AI agents through Site Agent
• With Site Agent 0.4 or later (free), any connected agent, such as Claude, ChatGPT or Cursor, gets the Page Blocks skill automatically. It can create draft pages from sections, list and edit the sections on a page, and create, update and render library blocks.
• gt_pb_agent() for integrations. Section markup is always written through WordPress's block serializer, so HTML, CSS and JavaScript with quotes, -- or <script> stay intact.
• Changes to published pages are staged as an autosave unless publishing is requested, and stale reads are refused. Agents cannot turn on PHP execution.
• A new AI agents page in the Page Blocks menu shows what a connected agent can do and how to connect one. The AI Integration settings link to it.

• New WordPress multisite, subfolder and subdomain. Each site keeps its own settings, compiled configuration, and page cache under cache/gt-performance/sites/<id>/, and the shared drop-in picks the site from the host and path before WordPress loads. Network admin screen and wp gt-performance network status|purge|map|defaults.
• New stored compressed copies. Each cached page keeps a gzip copy, and a Brotli copy when PHP has the brotli extension; the drop-in sends the one the browser accepts. Turn it off with "Store compressed copies".
• New "Let LiteSpeed cache pages". On LiteSpeed and OpenLiteSpeed the server keeps and serves the pages GT Performance would cache, tagged per site and URL and purged on every change, with _lscache_vary for signed-in visitors and shoppers. GT Performance steps aside while the LiteSpeed Cache plugin is active.
• New optional server rules (wp gt-performance server-rules add|remove|status|nginx). Apache serves stored pages, compressed copies included, without PHP; Nginx gets a copy-ready snippet; on LiteSpeed the rules switch on the cache lookup and drop campaign parameters such as utm_source from its key. Rules are rewritten when settings change and removed on deactivation.
• Fixed after a plugin update, republishing the drop-in compiled the cache rules before the store integrations had registered, so cart and session cookies of WooCommerce, Easy Digital Downloads, and FluentCart could be missing from the drop-in's rules until settings were next saved. The drop-in now republishes after every module is loaded, and a compile that missed them repeats on the next request.
• Bypass paths written for the site root, such as /wp-admin/ or /account/, also cover the same paths below a subfolder site.

• Fixed OAuth sign-in failed with "Sorry, you are not allowed to access this page" in clients that add their parameters to the authorization address with a second ?, such as Grok. The authorization endpoint is now /wp-json/site-agent/v1/oauth/authorize, which has no query string and forwards to the consent screen.
• The old consent address repairs such requests, so clients that saved it earlier also connect.

• OAuth connections are on by default. Sites that never changed the setting get them as soon as Site Agent is enabled; a site that turned them off keeps its choice.
• Tools → Site Agent leads with connecting through OAuth and moves Application Passwords to a "not recommended" section with a warning. It also warns when OAuth is off, when URL authentication is on, and when Application Passwords made tool calls in the last 30 days.
• site-context reports how the connection authenticated. For an Application Password or an authenticated URL it carries a warning that agents pass on, asking the user to reconnect with OAuth.
• Tools → Site Agent lists the plugins that give agents their own skill (GT Extensions for FluentCart, GT Page Blocks Builder and GT Link Manager) and shows which are active on the site.
• Fixed list-skills showed plugin skill descriptions with their YAML quotes.

• New opt-in OAuth 2.1 connections. Turn on "OAuth connections" in Tools → Site Agent, then add the endpoint to an OAuth-capable client (Claude, ChatGPT and others) with no credentials. The client finds the sign-in through the endpoint's 401 response, registers itself, and sends you to a WordPress consent screen where you allow or deny it and pick the tool groups it may use. PKCE (S256) is required.
• OAuth clients get one-hour access tokens and rotating refresh tokens that end after 30 days without use. Only token hashes are stored, tokens authenticate only the MCP endpoint, reusing a rotated refresh token ends the connection, and connections stop when the approving account loses administrator rights. Revoke connections in Tools → Site Agent; audit history shows OAuth calls with the client name.
• Site Agent uses its own issuer, /wp-json/site-agent/v1/oauth, so it never takes over the site-root OAuth discovery documents that another plugin's OAuth server may serve (Rank Math's MCP server does). Each registered client is stored separately.
• Plugins can add read-only skills to list-skills and get-skill with the site_agent_skills filter. GT Extensions for FluentCart 2.8.3 uses it for its gtfc-invoice and gtfc-quote skills.
• Application Passwords in a header or the authenticated URL keep working unchanged.