Multi-Tenant Web-Store Platform (Shopify-style) with Templates + Headless API

Build a Multi-Tenant Web-Store Platform with Templates and Headless API

Scope of Work
• Multi-tenant store engine (one codebase, many stores) with strict tenant isolation
• Themeable storefronts: template picker, sections/blocks, logo/colors, homepage/product/collection pages
• Catalog: products (physical/digital/service), variants, inventory, discounts, coupons
• Checkout & payments (major processor), basic tax handling, shipping label integration
• Orders: receipts, refunds, exports, simple analytics
• Digital downloads: signed, expiring URLs, per-buyer license + download limits
• Headless: public REST/GraphQL + webhooks for custom front ends
• Admin console: tenant setup, staff roles, store & theme settings

Technical Requirements
• Data isolation (DB-level RLS), RBAC (Owner/Staff/Admin), audit logs
• Secure coding: CSRF/XSS/IDOR mitigations, rate limiting, webhook signature verification, idempotency keys
• CI/CD, Infrastructure as Code, environment configs, secrets management
• API documentation (OpenAPI + GraphQL schema), ERD, sequence diagrams
• Tests: unit + integration + basic load test with results

Backend Framework
• Preferred: TypeScript + NestJS (modular monolith), PostgreSQL (RLS), Redis (cache/queues)

Frontend Framework
• Preferred: Next.js + React + Tailwind (SSR/ISR) for admin and default storefront

Additional Information
• Confidential build — NDA & IP assignment required; not for portfolio use
• Deliverables include source code, IaC (e.g., Terraform), deployment docs
• Acceptance: no cross-tenant data access; tests pass; security checklist met