ErreD EU Order Withdrawal for WooCommerce

Changelog

0.5.4

• Admin: the WooCommerce menu entries and the requests-page heading now default to English
  (“Order Withdrawal”, “Order Withdrawal: settings”); Italian sites keep the previous
  «Recesso digitale» labels via the bundled it_IT translation.

0.5.3

• Uninstall: only the withdrawal page auto-created by the plugin is removed. The page is now
  identified by a created-by-plugin marker (and must still host the withdrawal shortcode), so a
  pre-existing page the merchant selected in settings is never deleted.

0.5.2

• The withdrawal function is now a single «recedere dal contratto qui» button shown below the order
  details, available to both guest-checkout customers (order-received page) and logged-in members
  (My Account order view); the previous duplicate button is gone and the link no longer reports
  “this withdrawal link is not valid or has expired”.
• Confirmation step: removed the (unnecessary) product thumbnail and gave the «conferma recesso»
  button a proper, accessible button style that no longer depends on the theme.
• Admin: unconfirmed (abandoned) declarations no longer appear in the requests list or its counts,
  and a consumer who closed the page before confirming can start a fresh request.
• Admin: the menu badge counts all open requests awaiting action (confirmed and acknowledged) and
  uses the standard WooCommerce/WordPress menu-counter styling.

0.5.1

• Packaging: the distribution now bundles the full, human-readable JS/CSS source (assets/) and
  the build manifests (package.json, package-lock.json) alongside the compiled build/
  assets, and the readme documents how to rebuild them and links the public development repository.
• Dependency: the bundled Dompdf library is updated from 3.0.0 to 3.1.5.
• Hardening: the admin receipt download link now carries a nonce that the download endpoint
  verifies for the admin path (the consumer link continues to use its signed, rate-limited token).
• Hardening: saving a product’s withdrawal status now verifies the WooCommerce editor nonce and
  the edit_product capability explicitly.

0.5.0

• New “Withdrawal” column on the WooCommerce orders screen (HPOS and the legacy list) showing each
  order’s current withdrawal decision as a colour-coded badge.
• The request detail panel now sets the decision through a single “Set status” dropdown (Pending,
  Accepted, Rejected, Completed) with a “Save status” button next to “Regenerate receipt”. The reason
  field appears only when rejecting (and stays required); the orders column updates to match.
• Hardening: the contract reference stored for a withdrawal is now always derived server-side from
  the order number, ignoring any client-supplied value on the REST create endpoint.
• Hardening: the receipt download endpoint now validates the stored path against an exact directory
  boundary, preventing a similarly named sibling directory from being treated as the protected store.
• Packaging: reproducible production builds (installed from composer.lock) and a direct-access guard
  added to the generated PHP asset files in the distribution.

0.4.0

• Product/category “Withdrawal status” now offers the specific art. 59 / Directive classifications
  (standard, digital content art. 16(m), service started early art. 14(4)(a), dated accommodation /
  transport art. 16(l), other art. 16 exception) instead of a plain allow/exclude, and each maps to
  the right eligibility outcome. Statuses saved by earlier versions keep working.
• A one-time welcome notice after activation links straight to the settings and the auto-created
  withdrawal page.
• Reorganised the settings screen into clear sections (General, Withdrawal deadline, Article 16
  exclusions, Checkout consents, Model withdrawal form, Excluded products notice, Withdrawal link
  visibility, Data), added a notification email and a withdrawal-page selector, a “show model form”
  toggle and an optional trader phone number.
• The Annex I.B model withdrawal form was redesigned to match the statutory layout (header block with
  the trader’s details, fillable lines, source attribution and an optional printable view).

0.3.1

• Fix: an in-place update now reliably adds the v4 optional columns — the installed schema version is
  only advanced once the columns actually exist, so the requests admin list and the withdrawal form no
  longer break until a manual re-activation.
• Hardening: the withdrawal declaration never white-screens — a transient persistence failure degrades
  to a friendly message instead of a fatal error (the legally-required function stays usable).

0.3.0

• Art. 59 configuration: per-product and per-category “Right of withdrawal” status (allow / exclude /
  inherit) in the product and category editors, plus an opt-in “excluded from withdrawal” notice on
  the product page.
• Checkout consents: optional, configurable digital-content (art. 16(m)) and service-start
  (art. 14(4)(a)) consents, recorded on the order with timestamps and an order note.
• Annex I.B model withdrawal form (printable), populated with configurable trader contact details,
  shown below the public form and via the [recesso_digitale_modulo] shortcode.
• Order notes mirror the withdrawal lifecycle; new customer emails on accept/refund/complete and an
  admin notification (multiple recipients) when a withdrawal is confirmed.
• Admin: Accept / Mark completed / Mark refunded actions, an at-a-glance stats summary and a CSV
  export of requests.
• GDPR: personal-data exporter and eraser (anonymises personal data while retaining the legal
  acknowledgement) and a suggested privacy-policy snippet.
• Optional refund IBAN and reason fields on the declaration (carried into the durable receipt),
  honeypot anti-spam, an optional persistent footer link, an optional strict deadline-enforcement
  mode with grace days, and a wpml-config.xml for WPML/Polylang.

0.2.0

• Redesigned the consumer withdrawal page: products are chosen with checkboxes, each shown with its
  thumbnail, and a per-product quantity selector appears only when more than one unit was purchased.
• The durable-medium acknowledgement email now lists every selected product with its quantity, along
  with the confirmation email and the declaration timestamp, matching the PDF receipt.
• The two-step confirmation («conferma recesso») and the completion screen now itemise exactly which
  products and quantities are being withdrawn.
• Internal: item resolution unified in one shared component used by the receipt, email and on-screen
  summaries; the tamper-evident receipt hash is unchanged.

0.1.0

• Initial development release.
• Security-first, HPOS-native withdrawal channel: continuously available function, two-step
  server-rendered declaration/confirmation flow, signed rate-limited guest access.
• Durable medium: acknowledgement email plus a protected, tamper-evident PDF receipt with a
  write-once legal timestamp (dies a quo), generated asynchronously via Action Scheduler.
• Conservative, configurable, fail-closed eligibility engine (window, start trigger, art. 59
  exclusions) with filters for integrators.
• React admin: list, status filter, free-text search, audit timeline, receipt view/regenerate,
  process actions, and a menu badge for requests awaiting action.
• Optional WooCommerce Subscriptions adapter (withdrawal cancels the subscription).
• Merchant-decides model: the 14-day period is advisory (shown to the merchant), the withdrawal
  function stays available, and the merchant accepts or rejects each request. Rejection requires a
  reason, recorded in the audit trail and emailed to the consumer.
• Accessibility to WCAG 2.2 AA (axe-verified) and a complete it_IT translation.