> Current WooCommerce release: 1.2.2. The sections below retain earlier validation history; see the final WordPress.org preparation section for installed-platform evidence. # Validation · release 1.2.0 This release is source-delivered. No plugin has been installed into a real customer store or charged a production payment during this work. Local checks: - 17 Node integration tests: USD parsing, HTTPS/checkout URL restrictions, HMAC freshness/raw-body integrity, invoice/order matching, authorization/CORS, immutable catalog pricing, idempotent checkout and outbox, database reopen, Kajabi exact contact/offer retries, Shopify approval/mTLS/tenant guards and session-resolution decisions. HTTP and external provider responses use fixtures. - 1 API compatibility test exercises the downloaded Node SDK against Coinvay's actual gateway handler, real migrated SQLite schema and scoped API keys: create, idempotent retry, read and cross-merchant denial. This test runs in the Coinvay repository and is not a production transaction. - PHP 8.5 WASM executes the client/order suite (24 assertions), WooCommerce gateway with WordPress/WooCommerce stubs (13 assertions), and WHMCS service with database/API stubs (9 assertions). The PHP order suite uses a real SQLite database. Stub tests exercise module behavior, not the real platform's hooks, provisioning, database locks or checkout rendering. - PHP syntax parsing for all included PHP sources; JavaScript syntax and React Native TSX transpilation checks; Coinvay application TypeScript, panel-navigation regression checks and production build. - Browser checks cover desktop/mobile homepage cards, their routes, animation pause, integration/download page and the normal login pages without an administrator-login link. No third-party API credentials, OAuth installation, store provisioning, device build, marketplace submission, Shopify approval, live Kajabi grant, real-chain payment or refund was performed. Each platform README includes required staging checks before enabling the gateway. Minimum platform/PHP versions are intended targets; the exact versions running in your store require acceptance testing. Shopify's package is explicitly a developer adapter. A full native Payments App still needs approved extension scaffolding, OAuth/onboarding, buyer return UI, refund/reject/cancel lifecycle, platform review and store testing. It is not an installable ZIP for Shopify. Custom PHP/JavaScript/mobile applications must supply their own authentication/order system and idempotent fulfillment worker. The Kajabi package includes an offer-grant worker. Enable real cron/background runners; downloading a package does not configure your hosting or merchant credentials. To repeat standalone source tests from the master ZIP root: node --test tests/integrations.test.mjs php tests/integrations-php.php php tests/integrations-woo.php php tests/integrations-whmcs.php Use Node 22.13+ and PHP 8.1+ with PDO SQLite. The master test files use Node ESM (.mjs); no package installation is needed for Node tests. ## Logo package update · 1.0.1 · October 27, 2026 After the supplied Coinvay artwork was integrated, all 18 JavaScript/backend integration checks passed. All eight ZIPs passed CRC checks and contained the new animated SVG, static SVG and PNG assets without macOS resource metadata. SVGs parsed and static variants contained no animation elements. The retired legacy brand generator validated the current assets without modifying them. PHP execution was not repeated for this visual update because no local PHP binary was available; the earlier PHP evidence above applies to the earlier validation run. Check WooCommerce/WHMCS rendering on your staging installation before updating a live store. ## Currency pricing update · 1.1.0 · October 27, 2026 The server API now accepts the supported fiat currency registry, preserves the original order total and locks a USD total using a fetched Coinbase reference rate. WooCommerce/WHMCS automatic currency forwarding, PHP/JavaScript order-store upgrades and SDKs validate both original and USD totals. Existing USD records default to USD without repricing. Current validation: 176 application Node tests passed before the final provider-format fix; targeted currency tests were rerun afterwards. PHP 8.5 WASM: PHP order/client 32 assertions; WooCommerce stub 20; WHMCS service stub 11; all included PHP sources parsed. The new multi-currency fixtures include wrong original/USD totals, changed currency and duplicate fulfillment. A local Cloudflare runtime fetched an actual EUR rate and rendered EUR 100.00 as its locked USD invoice/checkout total. No live store plugin installation or real payment was performed. Full final verification is recorded in the release bundle’s VALIDATION.md. ## Store account connection · 1.2.0 · October 27, 2026 The complete application suite passed 186 Node tests (0 failed). The account-connection checks cover explicit interactive approval, authorization-code/PKCE/state/expiry, exact origin binding, encrypted credential storage, replay/concurrent exchanges, plan key quotas, store isolation, idempotency across stores, branding snapshots/image validation, administrator-session/CSRF controls, verified settlement, per-store HMAC delivery and disconnect. After the final local-disconnect guard, the affected connection/integration tests were rerun. No production account was connected or charged during this validation. PHP 8.5.10 through the official WordPress PHP-WASM CLI: client/order 32 assertions, WooCommerce gateway stubs 20, WHMCS service stubs 11, shared authorization/encryption helper 15 and WooCommerce connection controls 16. All 26 integration PHP sources parse. WordPress/WHMCS permission and runtime tests use stubs, not installed customer platforms. Node uses actual local SQLite and the migrated Coinvay gateway handler with fixture HTTP/chain responses. TypeScript and the production build are checked for this release. Browser inspection covered the actual Coinvay authorization review page in the existing dark theme; no browser approval/grant was clicked. Customer-platform installation and authentication, staging order fulfillment, HTTPS callback delivery, backup recovery, Shopify approval and mobile device builds remain the operator/developer's acceptance steps. Read CONNECT.md before setup. Additional repeatable checks from the source repository: node --test tests/store-connect.test.mjs tests/integrations-connection.test.mjs php tests/integrations-connect.php php tests/integrations-woo-connect.php php tests/integrations-php-syntax.php The two Node gateway connection suites depend on the full application/migrations and are included in the complete source delivery. The standalone integration master ZIP includes the platform and shared PHP tests plus integrations.test.mjs. ## WordPress.org preparation · WooCommerce 1.2.2 · October 27, 2026 The package was installed on the owner's existing WordPress 7.1.3 site. The Installed Plugins row shows Settings beside Deactivate; clicking Settings opens the Coinvay payment gateway configuration. Existing gateway settings were not changed and no payment was executed. Official WordPress.org Plugin Check (PCP) 2.1.0 ran against the installed 1.2.2 ZIP with General, Plugin Repo, Security, Performance and Accessibility enabled, errors and warnings included, and AI analysis disabled. Final result: **0 errors, 10 warnings**. See WORDPRESS-REVIEW.md for the authorization-state and database-query explanations, and wordpress-review/plugin-check-1.2.2.txt for the actual findings. These are manual-review exceptions, not a claim of directory approval or a comprehensive security certification. The first attempt for each native check returned a checker server error; a retry completed. Local Playground attempts failed due to runtime compatibility; they are not counted as passes. The WordPress.org readme validator returned only optional notes for screenshots and donation links. The ZIP includes a standard readme.txt, compatible MIT licensing and external-service/data disclosures. Development Markdown documents are omitted from the installable WooCommerce ZIP. WordPress bundles generate native HTTP transports from shared SDK code; standalone PHP/WHMCS retain their own transport implementation. PHP 8.5.10 WASM: WooCommerce gateway stubs 20 assertions, WooCommerce connection controls 16, shared connection/encryption helper 15, generated WordPress default HTTP transport 12. All 26 integration PHP sources parse. The transport test exercises successful requests, TLS/no-redirect/response-size boundaries, failed HTTP/network/JSON handling, and PKCE preservation without an injected transport. The Settings callback was also checked for destination, ordering, existing action preservation and capability restrictions. The new PHP test can be repeated with: php tests/integrations-woo-transport.php Submission remains subject to the owner's acceptance of WordPress.org's declarations and manual directory review. Successful payment fulfillment on the actual store remains a separate acceptance step; installation and checker results do not certify production payment fulfillment.