OrderKrab for WooCommerce

Endringslogg

1.5.0

• Added inventory sync endpoints for OrderKrab warehouse customers. GET /wp-json/orderkrab/v1/inventory/levels returns a paginated feed of products and variations with their stock fields (including global_unique_id on WooCommerce 9.2+), and POST /wp-json/orderkrab/v1/inventory/adjustments applies batched relative stock adjustments atomically, with per-adjustment idempotency keys so a retried request can never move stock twice. Both endpoints use the same HMAC signature as the existing OrderKrab endpoints.
• Stock changes (including order-driven reductions) are now reported to OrderKrab as debounced, batched events via Action Scheduler. Delivery is best-effort by design: failures are retried once per cycle and anything missed is corrected by OrderKrab’s nightly reconciliation. Can be disabled with the orderkrab_wc_stock_events_enabled filter.
• Added a small database table (orderkrab_inventory_adjustments) that records applied adjustment idempotency keys; it is created on update and removed on uninstall.

1.4.0

• Added a return portal embed, the WooCommerce counterpart of the OrderKrab Shopify return portal block. A new OrderKrab → Returns tab holds the portal token (generated in OrderKrab admin → Returns → Settings), max width, iframe height, default language (auto = match site language, WPML/Polylang aware), and seven optional portal theme colors.
• The portal can be placed on any page with the «OrderKrab Return Portal» Gutenberg block or the [orderkrab_return_portal] shortcode; both share one renderer, and height, max width, and language can be overridden per placement (e.g. [orderkrab_return_portal height="1100" lang="lt"]).
• The embed reproduces the Shopify block’s behavior: same iframe URL contract (shop_jwt, lang, color query parameters), forgiving URL handling (missing scheme, trailing slash), and a fit script that centers the iframe in the viewport at max width regardless of the theme’s content column. Front-end assets load only on pages that actually render the portal.
• When no portal token is configured, the page shows a setup notice to store managers only — visitors see nothing.
• The OrderKrab admin menu now uses the OrderKrab logo mark as its icon instead of a generic dashicon (recolored automatically by WordPress to match the admin color scheme). The return portal block uses the same mark in the editor.
• The Return portal URL field is read-only by default, matching the API Base URL field’s protection against accidental edits.
• Added a return-creation endpoint (POST /wp-json/orderkrab/v1/orders/{id}/return, HMAC-signed like the other OrderKrab endpoints). When a return is approved in OrderKrab, the plugin records it on the order (meta + order note) and emails the customer the return shipping label with a download button and tracking link.
• The label email is a real WooCommerce email — «Return label (OrderKrab)» under WooCommerce → Settings → Emails — so it uses the store’s email branding and from-address, the subject/heading/additional content are editable, it can be disabled, and its templates can be overridden in the theme like any WooCommerce email.
• The return endpoint is idempotent per return request, so OrderKrab-side retries never email the customer the same label twice; if the email is disabled or fails, the order note says so and includes the label URL for manual handling, and OrderKrab admin shows the request as not customer-notified.

1.3.0

• Added a bulk order status endpoint (POST /wp-json/orderkrab/v1/orders/status/batch) so OrderKrab can update up to 50 orders per request instead of one request per order. Batches are processed within a time budget and any orders not reached are returned as unprocessed for the caller to re-send; item updates are idempotent, so re-sending is safe and produces no duplicate order notes.
• The bulk endpoint reports per-order results and leaves orders that are already cancelled, refunded, or trashed untouched (skipped_final_status).
• Outgoing requests to the OrderKrab API now include an X-Orderkrab-Plugin-Version header so the platform can detect per-store plugin capabilities.

1.2.6

• The API Base URL field on the Connection tab is now read-only by default. The default production endpoint (https://api.orderkrab.com) is shown but cannot be edited through the normal UI, protecting store owners from accidentally pointing the plugin at a different host.

1.2.5

• Added an orientation card and prominent «Open OrderKrab admin» button at the top of the Connection tab so store owners can reach the OrderKrab dashboard (admin.orderkrab.com) where fulfillment is actually managed.

1.2.4

• Fixed: «Connect to OrderKrab» still failed in 1.2.3 because wc_rest_generate_keys() is not actually a public WooCommerce function in all installations. The plugin now falls back to inserting the WooCommerce REST API key row directly when WooCommerce’s helper is unavailable, mirroring how WC’s own admin UI generates keys internally.
• The fallback no longer introspects the WooCommerce API keys table with SHOW COLUMNS — it writes only the core columns and lets the database default any optional fields.

1.2.3

• Fixed: «WooCommerce REST helper unavailable» error when clicking Connect to OrderKrab. The plugin now loads wc-rest-functions.php on demand via WooCommerce’s own WC()->plugin_path() getter (or WC_ABSPATH as a fallback). WooCommerce only auto-includes this file during REST API requests, not on every admin request, so a manual require_once is needed before calling wc_rest_generate_keys() from an admin context.

1.2.2

• Removed code that filtered another plugin’s admin notices, per WordPress.org Guideline 11.
• Added an uninstall.php handler that removes the integration user, the WooCommerce REST API key row, and all plugin options when the plugin is deleted.
• Added a per-IP transient rate limit to the public /orderkrab/v1/shipping-points REST endpoint to protect against abuse of the merchant’s upstream API.
• Replaced inline file_get_contents() SVG output in the parcel locker search with <img> tags pointing at the bundled asset URLs, in line with WordPress’s escape-on-output rule.
• Wrapper, style, and method-id attributes in the parcel locker search are now built and escaped at the point of output rather than passed through pre-baked attribute strings.
• Removed the manual WooCommerce REST API key fallback (and its SHOW COLUMNS introspection queries). With WooCommerce now declared as a hard dependency, wc_rest_generate_keys() is always available.
• Removed the diagnostic error_log() call that ran when WooCommerce REST helpers were unavailable.
• Excluded screenshots from the production ZIP; they live in the WordPress.org /assets/ SVN folder instead.

1.2.1

• Declared WooCommerce as a formal plugin dependency via the Requires Plugins header.
• Removed an unreliable hardcoded fallback to WP_PLUGIN_DIR . 'woocommerce/' when locating WooCommerce REST helper files; the plugin now relies on WooCommerce’s own getters and WC_ABSPATH constant.
• Renamed the main plugin file to match the plugin slug (orderkrab-for-woocommerce.php).
• Excluded the development-only wp-stubs.php shim from the published build.

1.2.0

• Activated the batch order sync (hourly reconciliation of pending/on-hold/processing orders).
• Refactored admin assets to use wp_enqueue_style / wp_enqueue_script / wp_add_inline_style / wp_localize_script instead of inline <style> and <script> blocks.
• Fixed: API access tokens are now preserved verbatim instead of being passed through sanitize_text_field(), which could silently corrupt valid tokens.
• Modernized register_setting() registration with explicit type and sanitize_callback keys.
• Removed the call to load_plugin_textdomain(). WordPress automatically loads translations for plugins hosted in the directory since WordPress 4.6.
• Added defined( 'ABSPATH' ) guard to template files that execute code on inclusion.
• Removed the self-hosted plugin updater. Updates are now delivered through the WordPress.org plugin directory.
• Removed the test-weight-logic.php development test harness from the published plugin.

1.1.5

• Previous internally distributed release.