Campaign Status Filter — New Campaign Status column and filter in Adsets and Ads tabs. Quickly find all adsets/ads belonging to active, paused, or archived campaigns
Keitaro Analytics Integration — Database schema and sync pipeline for Keitaro tracker data. 15 new data models with composite unique constraints, multi-tenant isolation, and performance indexes. Real revenue tracking alongside Meta data
Knowledge Base — 75+ help articles created across Getting Started, Rules Engine, Dashboard Analytics, Account Management, Billing, Notifications, and Troubleshooting. Accessible through the in-app support widget
Custom Audience Targeting — Include/exclude custom audiences directly in the Campaign Creator. Fine-tune targeting without switching to Meta Ads Manager
✨ Improved
Drill-Down Persistence — Ads Manager now preserves your drill-down state when navigating between campaigns, adsets, and ads. No more losing your place
Data Table Selection — Fixed shift-click anchor reset when data changes, preventing wrong row selection during bulk operations
Authentication System — Migrated to a faster, more reliable authentication backend for improved login speed and session management
📦 Under the Hood
Dependency Updates — Vite 6 to 7, shadcn 3 to 4, Google AI SDK 1 to 3, p-limit 3 to 7, and 10+ other packages updated for performance and security
Dark Mode Foundation — Theme provider, toggle, and CSS variables ready for dark mode rollout
Ad Spy Module — Research competitor ads directly from AdRow. Search the Meta Ad Library by keyword, country, media type, and active status. Save ads to boards, preview creatives in a media lightbox with carousel navigation, and analyze performance patterns
AI Image Generator — Generate ad creatives with SeedDream v4.5/v5 via fal.ai. Three modes: Generate from scratch, Substitute elements, or Compose variations. Every generated image is automatically analyzed by Gemini 2.0 Flash with a 4-step pipeline (classification, quality, novelty, recommendations)
Copy Ads Flow — Spot a winning ad in Ad Spy? One click to send it to the Image Generator with automatic AI analysis. Go from competitor research to your own optimized creative in seconds
Google Drive Integration — Connect your Google Drive via OAuth. Browse, upload, and manage creative assets directly from AdRow. Folder picker, pinned folders with stats, and S3 storage backend with local filesystem fallback
AI Chat for Everyone — AI Chat is now available to all authenticated users, not just admins. Includes model selector (Claude, GPT-4, Gemini), file attachments, and chain-of-thought display
✨ Improved
Ad Spy Cards — Saved ads show full details: ad body, link preview, platform badges, active days, carousel navigation, and video preview with play-on-hover
Image Proxy — Expanded Facebook CDN domain whitelist for reliable creative previews across all ad formats
Masonry Layout — CSS columns layout for natural aspect ratios in creative galleries, replacing the rigid grid
AI Copilot — Strategy assistant that analyzes performance across all accounts, surfaces insights, identifies underperformers, and recommends optimization actions
Campaign Templates — Save winning campaign structures and reuse them. Targeting, budget, bid strategy, and placements all preserved
Multilanguage Campaigns — Create campaigns in multiple languages from a single launch. Language variants with their own creatives and landing pages
Creative Library — Upload and manage creative assets directly within AdRow. Video uploads up to 1GB supported
✨ Improved
Rule Builder UI — Redesigned for clarity with inline previews and pre-built templates for common automation patterns
Mobile Interface — Full mobile access to AI Chat, analytics, and Ads Manager. Same features optimized for mobile screens
SSRF Protection — All external URL fetches (image provider, bulk helpers) now use ssrfSafeFetch with strict timeouts and domain validation
Token Encryption — Meta API tokens encrypted at rest with AES-256. Refresh workers use encrypted storage exclusively
RBAC Enforcement — Billing endpoints (cancel, change-plan, extra-users) now require proper role authorization. Finance role removed from cross-tenant admin bypass
Tenant Isolation — Worker run status endpoints now enforce session-based data isolation. Added ownership checks on thumbnail/video URL signing
HMAC Verification — Public postback endpoints validate HMAC signatures. OAuth state comparison uses timing-safe equality
CORS Hardening — Wildcard origin rejected in non-local environments. Strict origin validation in production
Meta API Auth Migration — All Meta API calls migrated from URL query params to Bearer header authorization. Plaintext token fallback rejected in production
Input Validation — TypeBox schema validation hardened across all endpoints. Mass assignment prevention on user-modifiable objects
✨ Improved
TLS Verification — PostgreSQL connections now require TLS certificate verification in production
Credit System — Row-level locking (FOR UPDATE) on AI chat credit deduction prevents race conditions
Multi-Account Workspace — Connect hundreds of Meta ad accounts, fan pages, pixels, and catalogs across multiple Business Managers in one place
Bulk Campaign Launcher — Spreadsheet-style builder to configure targeting, budgets, and creatives, then deploy across every account at once
AI Chat Command Center — AI assistant with full context of your accounts and campaigns. Executes bulk edits, analyzes performance, and creates automation rules through conversation
Automation Engine — Rule-based automation with 20+ conditions (CPA, ROAS, CTR, spend). AND/OR logic, cooldown periods, and budget safeguards
Real-Time Telegram Alerts — Instant notifications for rule executions, account issues, and critical events. Daily and weekly digests
Cross-Account Reporting — Unified reports across all connected accounts with multi-currency conversion and 15-minute sync
Team Management & RBAC — 7-tier role hierarchy with session-based data isolation. One-click impersonation for owners
Real-Time Dashboard — Bird's-eye view of your entire operation: spend, conversions, CPA, ROAS. Updated every 15 minutes
🔗 Integrations
Meta Official OAuth — Secure connection via Meta's official API. AES-256 encrypted tokens. Auto-discovery of all assets