YS Helcim via FluentCart

YS Helcim via FluentCart 1.1.0

A production-hardening release for both payment methods. Every payment and refund path was rebuilt around a durable operation journal, verified end-to-end with real test-account transactions, and independently reviewed.

Highlights

• Closing the payment window no longer strands the checkout. The pay button re-enables immediately, and pressing it again resumes the same secure payment session — the same order can never be charged twice, even across browser tabs, crashes, or page reloads.
• Google Pay can now be controlled from the payment settings (follow the Helcim account, force on, or off), and the checkout button wording follows suit.
• Remote-first refunds: a refund is recorded locally only after Helcim confirms it, with persistent idempotency keys. Unsettled (open-batch) full refunds automatically use reverse.
• Fail-closed reconciliation: uncertain payment outcomes are quarantined and re-verified against Helcim — a real charge can never be silently lost, and an unproven charge is never assumed.
• Webhook and scheduled recovery with provider/local state integrity checks.
• English-first admin UI with a complete Traditional Chinese (zh_TW) translation.

Upgrading from 1.0.0

No settings changes are required. Existing credentials, orders, and refunds are untouched; the operation journal tables are created automatically.

Verification

• Source commit: `10847a86f6d476e15667a823d8bd240e49255c3d`
• Artifact SHA-256: `f67b1a4c7ca8970badd494c1584ac0dfc506377d940ffa39e7cf3ece3f69182f`
• Package: 100 files, clean source, manifest schema v2
• PHP: 1270 tests, 7202 assertions, 0 failures
• JavaScript: 54 tests, 0 failures
• Translation catalogs: 392/392 preserved, fallback 0
• Runtime parity, PHP lint, mtime, and symlink deployment gates all passed

The payment runtime is byte-identical to the independently reviewed 1.1.0-rc.17 anchor; the final tag changes only release metadata and generated translation catalog headers.