v4.5.0 - Payment Sent state, instant verification, intent settlement reporting

Added

• "Payment Sent" state on the thank-you page. With REAL8 Wallet v4.7.10+, the wallet appends the Stellar tx hash to the return URL; the thank-you page then shows "Payment Sent, confirming on the Stellar network" instead of the pay-now instructions. English and Spanish.
• Immediate verification on arrival. Forced Horizon check ~1 s after landing with a tx hash, then 8 s polling. Confirmation typically lands in seconds instead of up to a minute.
• Settlement reported to the payment-intent API (POST /payment-intents/{id}/paid, HMAC, requires api.real8.org v1.7.6+), so revisited pay links show "paid".

Fixed

• Manual-check feedback messages no longer fire for automatic background checks.

v4.4.0 - Token amount lock + underpayment tolerance cap

Security

• Lock REAL8 token amount on first quote (M-wp-1). Abandoned checkouts no longer requote at the current REAL8/USD rate on return. The first quote is stored and reused for the same order and token for 24 hours (filter: real8_payment_hard_lock_seconds), so merchants no longer lose value when the price drops during a long-abandoned checkout.
• Cap underpayment tolerance at 5% (M-wp-2). The tolerance ceiling is now enforced server-side in the admin field, on settings save, and on every read. Existing installations above 5% are clamped on the next admin save or payment verification.

Also included since v4.3.1

This is the first published release after v4.3.1 and bundles the unreleased 4.3.x versions:

• 4.3.7 (security): removed the hardcoded REAL8_PAYMENT_INTENT_SECRET fallback that was committed to the public repository. Action required on upgrade: add define('REAL8_PAYMENT_INTENT_SECRET', '<64-hex-secret>'); to wp-config.php, matching PAYMENT_INTENT_SECRET in the api.real8.org .env. Without it, intent signing fails closed and checkout falls back to on-page payment instructions.
• 4.3.6: REAL8 equivalents shown on subscription recurring totals at checkout.
• 4.3.5: removed REAL8 amount from the order button; fixed bold styling on the checkout total.
• 4.3.3: fixed duplicate REAL8 price in cart and subtotal columns.
• 4.3.2: fixed duplicate REAL8 price on subscription product pages.

v4.3.1 - Zero-config payment intents

Changed

• Payment intents now work automatically — no merchant configuration needed
• HMAC secret built into the plugin; activates on install/update
• Removed the manual Payment Intent Secret setting

Merchants just update the plugin and the wallet payment flow is active.

v4.3.0 - Payment Intent Architecture

Added

• Payment Intent architecture - Checkout creates a payment intent via api.real8.org and redirects to app.real8.org/pay/{intent_id} for native wallet payment experience
• Smart landing page - PWA: shows payment dialog directly. Browser: shows "Open in REAL8 Wallet" + QR code
• Return URL handoff - After payment, wallet redirects back to store automatically
• Intent expiration - Payment links expire based on configured timeout
• HMAC authentication - Secured plugin-to-API communication
• Graceful fallback - Falls back to on-page payment instructions if API unreachable

Setup

1. Update the plugin
2. Go to WooCommerce > Settings > Payments > REAL8 Payments
3. Enter the Payment Intent Secret (same value configured on api.real8.org)
4. Save — checkout will now redirect to the REAL8 Wallet app

v4.2.2 - Fix underpayment tolerance

Fixed

• Underpayment tolerance too low - Existing installations with tolerance below 0.5% are auto-migrated to 0.5% on upgrade (was blocking legitimate orders)

v4.2.1 - Frontend polish & $REAL8 ticker

Changed

• $REAL8 ticker everywhere (product pages, cart, order details, payment instructions)
• Place Order button shows EUR + $REAL8 equivalent
• Cart total shows $REAL8 equivalent alongside fiat price
• Payment box full width on order-received page
• "REAL8 Total:" replaces old "Monto en Stellar:" label

Fixed

• QR code now renders (CDN URL was returning 404)
• Pay/Cancel buttons spaced apart with white text
• "Thank you" message hidden for pending REAL8 payments

Removed

• Redundant "Send Payment To:" heading on payment page

v4.2.0 - Reliable update checker via api.real8.org

Changed

• Update checker uses api.real8.org instead of GitHub API directly — eliminates rate limit issues on shared hosting
• Force-check works reliably - "Check again" on WP Updates clears update cache

v4.1.3 - Force-check fix

Fixed

• Force-check now works - "Check again" on WP Updates page now clears the plugin's own update cache, ensuring fresh GitHub API check

v4.1.2 - Changelog formatting & cache fix

Fixed

• Changelog formatting - Plugin details popup now renders markdown as proper HTML instead of raw <pre> block
• Stale update cache - Updater clears cached data when installed version catches up, fixing missed update detection after manual uploads

v4.1.1 - Settings migration fix

Fixed

• Existing installations now auto-migrate old "Pay with Stellar" titles and multi-token descriptions to "Pay with REAL8" on upgrade
• Previously, changing defaults in code did not update already-saved settings in the database