v1.1.0 — non-custodial refunds, multi-node, state machine
Added
- Non-custodial refunds (claim-link): buyer supplies a receive address, merchant pays by hand and marks it sent. Configurable expiry (snapshotted), one-click reissue, network-aware validation, and a reopen on a later refund so extra money is never stranded.
- Payments report + CSV export (owed / received / overpaid / confirmations / state / refund status), formula-injection safe.
- Resilient multi-node: comma-separated nodes fail over; height cross-checked (min across responders) so a lagging/lying node can only delay settlement, never accelerate it.
- CI on PHP 7.4 / 8.1 / 8.3.
Fixed (money path)
- Completion + proof paths used a non-existent WP function for their lock — replaced with a real atomic mutex.
- A watch order is no longer created unscannable when the node is briefly unreachable (checkout fails cleanly).
- Wrong-network refund address rejected; mempool double-spend never credited.
Default node stays stagenet by design — test on stagenet before going live. Full suite green (~957k checks).