Fulify API (v4): a dedicated domain, hardening & performance

A wave of improvements to the new API — a cleaner base URL, safer writes, and faster bulk operations.

API

Dedicated API domain — The API now lives on its own subdomain: https://api.fulify.io/v1. The app UI is served separately, so API traffic and app traffic no longer share a host.
Faster bulk writes — The upsert path now processes large batches (up to 500 products) with bounded concurrency instead of one-at-a-time, so big imports finish noticeably quicker.
Deep-page pagination — Added an opaque keyset cursor (?after=) so paging deep into a large catalog stays fast instead of slowing down page by page.
Faster product list — A composite database index backs the list query for quicker responses on large catalogs.

Atomic writes — Each product's fields, categories, and variants are written in a single transaction — an item either fully applies or fully rolls back, never half-saved.
Organization-validated references — Brand, category, tax, customs, and shipping references are checked to belong to your organization before a write, so a payload can't reach another org's data.
Stronger input handling — Rich text is run through an allowlist sanitizer, fields with fixed choices are enum-validated, request bodies are size-capped as they stream, and outbound URLs are guarded — with database errors never leaked back in responses.
Case-insensitive SKU matching — ABC-123 now upserts onto a stored abc-123 instead of colliding, so re-imports match reliably.
Rate limiting — Per-key limits are enforced with a shared store (so they hold across instances); the write limit was raised to 300/min for real-world headroom.

Create without a type — Fixed an edge case where creating a product without an explicit type could fail.
API Keys dialog — Labels, focus handling, and keyboard navigation in the Create-key dialog were fixed for screen-reader and keyboard users.
Keyboard image reordering & alt text — Product images can be reordered from the keyboard, with clearer focus rings and alt-text labels.
Small UI fixes — Buttons no longer wrap their labels, and modal inputs no longer lose focus after each keystroke.