JeyTech Order Transfer QR for WooCommerce

Fourth free plugin in the JeyTech pipeline. Adds a locally generated EPC / GiroCode QR and readable payment details to the confirmation page and customer on-hold email for BACS orders in EUR. It never confirms a payment or changes order status or stock.

Name checked before implementation on 27 September 2026: JeyTech Order Transfer QR for WooCommerce, slug jeytech-order-transfer-qr, namespace JeyTech\OrderTransferQR. No exact namesake found in Web searches or the 221 WordPress search results inspected. Both the proposed slug and order-transfer-qr return Plugin not found through the public API. See the name audit. Public availability is not a WordPress slug reservation.

Commands

WordPress, WooCommerce and PHP run in the existing WordPress Playground toolchain. Node.js is the development prerequisite; no local PHP server or Composer is required.

The ZIP excludes development scripts, tests, node_modules, screenshots, Git and build artifacts. It includes the complete readable encoder source and licenses. Translation sources stay in Git. The distributed ZIP contains no language catalogs and relies on WordPress.org language packs. The French demo/test blueprint installs the local catalog separately in wp-content/languages/plugins/; this does not publish or approve a WordPress.org pack.

The build rejects any languages/ directory or .po, .pot, .mo, .l10n.php entry in the distributable tree, including catalogs outside the excluded directory and mixed-case names. A rejected build exits before creating a ZIP and removes any previous build archive. Copy this guard when creating each new Free plugin. Verify clean and deliberately contaminated builds with python3 ../tools/wporg-release/verify-language-packaging.py --plugin jeytech-order-transfer-qr.

Verification on 28 September 2026: 15 passing scenarios, distributable files identical to the existing release and submitted ZIP preserved. Evidence.

Payment behavior

The merchant selects a WooCommerce bank account explicitly. Selection is keyed by name, IBAN and BIC, so reordering accounts does not redirect transfers. Editing those coordinates requires selecting the account again. The plugin respects per-order BACS account filters and omits the QR if final displayed bank fields would differ.

Only on-hold BACS orders in EUR qualify. Amounts are exact cents, between 0.01 and 999999999.99. Reference formats must contain {order_number}; final text is bounded to 140 characters and complete UTF-8 payloads to 331 bytes. An invalid or unsupported order does not receive a QR. Images are black/white PNG, correction M, with a four-module quiet zone and QR version at most 13.

Hosted email images use a signed admin-post.php URL. The signature binds order ID, order key, expiry and payload hash. It expires after 30 days and is rechecked against current settings/order data for every request. Tampered, expired, paid, cancelled or changed orders cannot return a PNG. No public QR files are written into uploads. Email proxies or recipients can retain copies, so these copies cannot be revoked.

The same WooCommerce payment-specific thank-you hook is used by classic and block order confirmation pages. Customer on-hold HTML emails get a hosted PNG and all readable payment details; plain-text emails keep the details without an image. The plugin sends no additional email and performs no bank or external QR request.

Review and next versions

Version 1.0.0 was submitted to WordPress.org on 28 September 2026 with jeytech, after Safety Data by Brand was approved and published. At submission, the developer portal confirmed Awaiting Review and the assigned short slug jeytech-order-transfer-qr; the initial automatic -for-woocommerce suffix was corrected immediately. The automated scan returned Pass, with a text-domain warning caused by that initial slug. The submitted ZIP was downloaded from the portal's Plugin Check blueprint and is byte-for-byte identical to the prepared archive. Evidence is recorded in the submission report and the updated name audit. Publish code and directory assets via SVN after approval.

Planned Pro functionality remains a separate future release. Apply the shared Pro release checklist: EN/FR guides, matching delivery-email links, language tests, private ZIP delivery and license checks. No Pro is sold or claimed available by this free release.

Verification, 28 September 2026

Recorded outputs are in dev/results/. Native WooCommerce HTML email rendering is verified on PHP 8.3. The PHP 7.4 WASM runtime cannot render the native WooCommerce mail template; plugin HTML/plain-text hooks and translations are tested on both versions. No test email is sent.

Six PNGs were independently decoded with ZXing-C++: accented and Greek text, exact amounts/references, and the 331-byte boundary. PNG chunk CRCs and the four-module white quiet zone are checked. bin/verify-qr.py repeats these checks with the optional development dependencies documented in the script. This proves the encoded bytes; no real banking app or transfer was used.

Browser checks use the packaged production files: EN/FR settings, nonce-protected saves, forged requests (403), revocation after reference changes and disabling, valid PNGs (200/no-store), classic and block confirmation pages, and native HTML email previews. Desktop 1440px and mobile 390px, no JavaScript errors. Successful native classic and Blocks checkouts were also submitted on a non-stock virtual demo product at EUR 19.90; stock preservation is asserted separately in the functional suites. Outgoing mail is intercepted in the demo MU helper only.

Run npm run build before the demo servers. node dev/capture-ui.mjs performs the UI checks and six real screenshots, node dev/checkout-ui.mjs checks the two checkout types, and node dev/assets-src/render.mjs renders the original HTML/SVG branding. Geist font source and OFL license are included in the development assets only. Directory assets are prepared in .wordpress-org/; they are excluded from the plugin ZIP and are uploaded separately to SVN after approval.

Review corrections, 28 September 2026

The review requested proof of JeyTech ownership and removal of translation catalogs from the distributed package. A separate TXT record wordpressorg-jeytech-verification is publicly visible at the root of jeytech.app, verified against both authoritative nameservers and Google Public DNS; the existing SPF record is preserved. The name, slug, author account and version 1.0.0 stay unchanged.

The corrected ZIP contains 53 files, SHA-256 4780d4ff88a6c7da110e92a0ee4374d46964616cb937213dcb7deca0c94e9daa. Catalogs and the custom translation fallback have been removed from production. Translation sources remain in Git and are mounted outside the plugin for development. WordPress loads external packs normally; French without a pack falls back to English. Both behaviors and English locale restoration pass on WordPress 6.6.2/PHP 7.4, without early-loading notices.

The corrected production files pass all 163 integration checks, all available Plugin Check static checks (zero errors/warnings), independent decoding of six QR PNGs, and EN/FR browser checks. Fresh screenshots match the six existing site images byte-for-byte. Native WooCommerce mail is captured locally without sending. The code has not been tested with a real banking app or transfer.

The corrected archive has been uploaded to the existing submission and downloaded from the portal's Plugin Check blueprint: byte-for-byte identical to the tested ZIP. See the correction and upload proof. A subsequent authenticated portal check on 28 September 2026 confirms Being Reviewed — We've got your email. This plugin is currently waiting on action from our plugins team. The reviewer has received the reply; this work did not send an email. See the current review status. SVN publication follows approval. French translations can be imported through Translate WordPress after publication; validation is still required for a public language pack.