Webkassa iikoFront adapter 0.11.55-beta

Webkassa iikoFront adapter 0.11.55-beta

Summary

This beta fixes one-click updates that failed while replacing the installed
updater directory.

Fixed

• The launcher stages itself and the privileged updater in a unique Windows
  temporary directory before installation.
• The launcher releases the installed updater directory as its working
  directory before the terminal installer replaces it.
• UAC elevation, package validation, backup, sidecar restart and post-install
  health verification remain unchanged.

Operator-visible changes

The Установить action in Webkassa settings can now replace the updater
component together with the plugin. Finish all sales and cash operations before
confirming the update; iikoFront closes during installation and must be started
again afterwards.

Validation

• Gateway and Windows contract tests passed.
• PowerShell parser checks passed.
• Windows Release builds completed with 0 warnings and 0 errors.
• Installation on OPENCLAW-WORKER completed successfully.
• Installed version: 0.11.55-beta.
• Sidecar service: running/automatic.
• Local sidecar health: healthy, version 0.11.55-beta.

Package

• File: Resto.Front.Api.Webkassa.V9-0.11.55-beta-20260724-182512.zip
• Size: 406145 bytes
• SHA-256: a944311dec14675f2e4761d7ca13731e9e389df7c4e739510564d07649b13684

Known issues

• Stable manifest/signature verification is not available. Stable unattended
  rollout remains blocked until detached signature verification with a pinned
  public key is implemented.
• loginPasswordOnly is not confirmed for Webkassa API v4 production. Use
  apiKeyAndLoginPassword for supported pilot operation.

Rollback

The installer keeps the previous plugin folder under
C:\ProgramData\WebkassaIikoFrontAdapter\backups. Roll back only during a
controlled maintenance window and keep the sidecar service configuration and
protected data directories unchanged.

Webkassa iikoFront adapter 0.11.54-beta

Webkassa iikoFront adapter 0.11.54-beta

This beta adds the operator-facing one-click update flow prepared in
0.11.53-beta and fixes the Windows ACL problem found during its pilot
installation.

Added

• An Установить button in Webkassa settings when the trusted beta manifest
  reports a newer version.
• A separate UAC-elevated updater launcher that validates the manifest,
  package size and SHA-256 before closing iikoFront and installing the package.
• UPDATE-WEBKASSA.cmd as a manual fallback launcher.

Fixed

• Runtime ACLs no longer depend on the Windows administrator account that
  approved the installer or updater UAC prompt.
• All local Windows users receive read/execute access to the installed plugin,
  setup utility and updater.
• Plugin runtime directories use the language-independent BUILTIN\Users
  SID for Modify access, preventing Access denied when iikoFront runs under
  a different Windows account.

Security boundary

• Configuration changes still require UAC.
• Secrets, sidecar data, logs, backups and update packages remain writable only
  by Administrators or SYSTEM.
• The updater retains trusted-host HTTPS, manifest validation, package-size
  validation, SHA-256 validation, safe ZIP extraction, backup and rollback.

Validation

• Gateway contract tests passed.
• Repository diff checks passed.
• ZIP CRC and package layout were rechecked.
• VERSION, package metadata, Manifest.xml identity/API V9, package size and
  SHA-256 were independently rechecked before publication.
• The package contains both the UAC PowerShell launcher and the manual CMD
  fallback.

Package

Resto.Front.Api.Webkassa.V9-0.11.54-beta-20260716-001634.zip
size: 405750 bytes
sha256: a639e2a2c8e91db468a176eb1fc9dd23b8b9826322c38f1a63c8619eb1ea2ee8
minimum iikoFront: 9.5
iikoFront API: V9

Known issues

• Stable unattended update remains blocked: detached package-signature
  verification with a pinned public key is not available.
• loginPasswordOnly is not confirmed for Webkassa API v4 production; use
  apiKeyAndLoginPassword for the supported pilot configuration.

Update

Finish all sales and fiscal operations, open Webkassa settings and press
Установить. Confirm Windows UAC, wait for the updater to close iikoFront,
validate the package, create a backup and install the release. Start iikoFront
again after the updater reports success.

Rollback

Stop iikoFront and use the updater/installer rollback path to restore the
previous plugin-folder backup or reinstall 0.11.52-beta. Preserve
%ProgramData% configuration, DPAPI secrets, fiscal stores and queues; do not
delete operational data as part of rollback.

This is a beta prerelease for demo and pilot terminals. It does not publish or
promote the stable channel.

Webkassa iikoFront adapter 0.11.52-beta

Webkassa iikoFront adapter 0.11.52-beta

This beta combines the Webkassa reliability, protected-settings, receipt UI,
and update-notification work completed after 0.11.50-beta.

Added

• A complete deadline covering Webkassa response headers and response body.
• Controlled Code 505 failover to validated HTTPS domains returned through
  AlternativeDomainNames, without blind fiscal retries.
• Serialized unknown-result recovery before another fiscal write can overtake
  an unresolved operation.
• Configured/masked state, temporary reveal, and explicit edit actions for
  protected API key and password values.
• Authentication-mode Base URL defaults while retaining a validated editable
  Webkassa HTTPS origin.
• Печать фискального чека and QR фискального чека actions for closed and
  past orders.
• Current version and update status in Webkassa settings.
• One non-blocking update-manifest check per iikoFront process startup.

Fixed

• Unknown fiscal results are reconciled inside the per-cashbox queue before
  subsequent writes continue.
• Offline synchronization can recover a successful operation whose response
  was lost and stops the batch when the result remains uncertain.
• Existing DPAPI-protected values are preserved when the operator does not
  explicitly edit a secret.
• Manual receipt reprint no longer interrupts the operator with a modal success
  message. Failures remain visible.

Operator-visible changes

• Settings show whether Webkassa secrets are configured without exposing them.
• Closed and historical orders expose separate print and external-ticket QR
  actions under iikoFront additions.
• When a newer approved beta is available, iikoFront shows one non-blocking
  notification. Network or manifest errors never block cash operations.

Configuration and migration

• No database migration is required.
• Existing DPAPI configuration is retained.
• requestPolicy supports bounded recovery attempts/delay and a bounded number
  of Code 505 alternative hosts. Blind fiscal retries remain disabled.
• loginPasswordOnly is not confirmed for Webkassa API v4 production; use
  apiKeyAndLoginPassword for the supported pilot configuration.

Validation

• Gateway contract tests passed.
• Windows Release build/package and controlled test-terminal installation
  passed.
• Installed plugin version, healthy sidecar, protected settings UI, closed and
  past order print/QR actions, and non-blocking update behavior were checked.
• ZIP CRC, required files, safe paths, VERSION, Manifest.xml identity, package
  size, and SHA256 were independently rechecked before publication.

Package

Resto.Front.Api.Webkassa.V9-0.11.52-beta-20260715-083814.zip
size: 401983 bytes
sha256: 99e3e0e45ef062f39fa8bf1b79113057dec9f1b918d10d3d5185821e35f67bc7
minimum iikoFront: 9.5
iikoFront API: V9

Known issues

• The iiko-plugin.kz beta manifest can remain behind this GitHub pilot
  release until it is separately validated and explicitly published.
• Stable unattended update remains blocked: the stable manifest and end-to-end
  detached-signature verification are not available.
• loginPasswordOnly is not confirmed for Webkassa API v4 production.

Rollback

Stop iikoFront and use the separate updater/installer rollback path to restore
the previous plugin-folder backup or reinstall 0.11.50-beta. Preserve
%ProgramData% configuration, DPAPI secrets, fiscal stores, and queues; do not
delete operational data as part of rollback.

This is a beta prerelease for demo/pilot terminals. It is not a stable-channel
release and does not change the live iiko-plugin.kz manifests.

v0.11.50-beta

Summary

Beta hotfix for the protected Webkassa settings flow in iikoFront V9. This
release includes all audited fiscal and security corrections from
v0.11.49-beta.

Fixed

• Removed the unconditional “administrative Windows session” error shown when
  opening Webkassa settings from a normal iikoFront process.
• The iikoFront button now starts the graphical setup utility through Windows
  UAC.
• The installer deploys the setup utility to the protected application
  directory and records its exact path next to the plugin.
• Kept configuration and protected secret directories restricted to SYSTEM and
  Administrators; the normal iikoFront process does not receive write access.

Validation

• Gateway and Windows contract tests passed.
• Plugin, graphical setup utility, and Windows service Release builds completed
  with 0 warnings and 0 errors.
• SYSTEM installation completed; the sidecar remained healthy at
  0.11.50-beta.
• iikoFront loaded DLL file version 0.11.50.0 with module 21016318.
• The installed graphical settings editor opened in the active Windows session
  with the existing redacted configuration; secret fields remained blank.
• GitHub Actions passed for the settings-fix commit.
• Fiscal behavior is unchanged from the full v0.11.49-beta sale, return,
  MoneyOperation, X/Z, recovery, idempotency and receipt-print regression.
• Production Webkassa was not called.

Known Issues

• This is a beta pre-release, not a stable production release.
• loginPasswordOnly is not confirmed for Webkassa API v4; use
  apiKeyAndLoginPassword.
• LicenseModuleId=21016318 remains in use by owner decision.
• National Catalog/WebNKT features remain experimental and disabled by default.
• Stable updater signature verification is not implemented.

Artifact

Resto.Front.Api.Webkassa.V9-0.11.50-beta-20260714-181603.zip

Size: 368941 bytes

SHA256: d96eae286242b2799ef95668b77851577f57775a40c7389868d52777d4de29ea

v0.11.49-beta

Summary

Audited beta release of the Webkassa external fiscal register adapter for
iikoFront V9.

Fixed

• Enforced Webkassa's 50-character ExternalCheckNumber limit with stable
  SHA-256-derived identifiers.
• Corrected VAT, marking, payment aggregation, return-basis, recovery, and
  Webkassa API v4 mapping.
• Corrected iikoFront cumulative fiscal-turnover counters for refund/storno.
• Made cancellation idempotency stable across iikoFront restart by prioritizing
  OrderId + CancellingSaleNumber over transient ChequeTask.Id.
• Added durable MoneyOperation journaling and retry reconciliation.
• Hardened loopback IPC authentication, Windows ACLs, DPAPI boundaries,
  atomic storage, service recovery, updater validation, and support bundles.

Validation

• Gateway and Windows contract tests passed.
• Plugin, setup utility, and Windows service Release builds completed with
  0 warnings and 0 errors.
• SYSTEM install returned a running service and healthy 0.11.49-beta.
• iikoFront 9.5.7018.0 loaded DLL 0.11.49.0 with module 21016318.
• Active iikoFront UI sale, full cancellation, deletion-reason flow, pay-in,
  and Webkassa receipt print passed.
• Installed-sidecar sale/return/pay-in/pay-out/X/Z, service recovery, updater
  dry-run, receipt format, and durable retry checks passed.
• GitHub Actions passed for the published beta branch.
• Production Webkassa was not called; fiscal validation used the dev endpoint.

Known Issues

• This is a beta pre-release, not a stable production release.
• loginPasswordOnly is not confirmed for Webkassa API v4; use
  apiKeyAndLoginPassword.
• LicenseModuleId=21016318 is retained by owner decision, but final production
  assignment and target license coverage must still be confirmed.
• National Catalog/WebNKT features remain experimental and disabled by default.
• Stable updater signature verification is not implemented. SHA256 protects
  integrity but not a compromised download origin.
• The test terminal has no staff-managed iiko pay-out type, so UI pay-out was
  unavailable there; installed-sidecar pay-out and retry validation passed.

Artifact

Resto.Front.Api.Webkassa.V9-0.11.49-beta-20260714-132018.zip

Size: 367574 bytes

SHA256: f6084d7e67b57fedf1197b9ac7a87c5621bf06b7260434e51b0186bfd372fc43

v0.11.45-beta

Summary

Beta release for the iikoFront plugin identity rename and updater rollout.

Added

• Manifest-driven Windows updater for beta/stable update channels.
• Disabled Windows Scheduled Task installer for update checks.
• GitHub Release and updater documentation.
• Example beta/stable update manifests for iiko-plugin.kz.

Changed

• iikoFront plugin release identity renamed from Webkassa.IikoFrontAdapter.Spike to Resto.Front.Api.Webkassa.V9.
• Package ZIP/DLL/Manifest/plugin folder now use Resto.Front.Api.Webkassa.V9.
• Installer migrates the legacy Webkassa.IikoFrontAdapter.Spike plugin folder into backup before installing the new identity.
• Gateway/project root remains /home/shtefanov/projects/webkassa.

Validation

• Gateway npm test passed.
• Windows npm test passed.
• Windows build/package passed with 0 warnings and 0 errors.
• Updater dry-run passed.
• Updater install passed on the Windows terminal.
• Installed plugin: 0.11.45-beta, DLL 0.11.45.0.
• Sidecar /status: ok=true, version 0.11.45.
• Offline queue: pending=0, synced=1.
• GitHub Actions run 29253801217 was still in runner setup at publication time.

Known Issues

• iiko-plugin.kz update manifest is not published yet; the scheduled updater task was created disabled.
• This is a beta release, not stable.

Rollback

• Previous installed plugin folder was backed up under C:\ProgramData\WebkassaIikoFrontAdapter\backups.
• Roll back by restoring the previous plugin folder during a controlled maintenance window with iikoFront closed.

SHA256

d6fab62c7096fd2a578480ce0cbeab0fb3c33bcb35379e9d11cb1761ddf96408