=== HULO Checkout Guard Pro ===
Contributors: huloglobal
Tags: card holds, reconciliation, payment alerts, payments, security
Requires at least: 6.5
Tested up to: 7.1
Requires PHP: 8.1
Stable tag: 0.1.0
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Pro add-on for HULO Checkout Guard: automatic hold capture, Stripe reconciliation, a failed-payment log, alerts and a weekly report.

== Description ==

This add-on requires the free HULO Checkout Guard plugin. It works on any WordPress site, and with WooCommerce it adds the shop's bank-transfer and order features.

Every install starts with a 14-day evaluation: all features on, no card. After that, a licence keeps the Pro features. Without one, your settings and data are kept and the automation pauses.

* **Holds on autopilot:** for HULO Payments payments in manual-capture mode, and with WooCommerce for orders paid through HULO Payments.
  * Holds below a set amount are captured straight away.
  * Every other hold is captured 6 days after authorisation, before Stripe cancels it at 7.
  * Holds that Stripe has already cancelled are detected, logged and alerted.
* **Nightly Stripe reconciliation:** every PaymentIntent that took or holds money must belong to a paid payment or order. Money taken against an unpaid or missing one raises an "orphan" alert. A charge that differs from the recorded amount raises a "drift" alert. Stripe is read through HULO Payments' API with its own key; nothing else is needed.
* **Failed-payment log:** payments that fail after the payer has left (HULO Payments webhook failures, renewals).
* **Alerts:** Slack, Microsoft Teams, Discord, Telegram, a signed webhook or e-mail.
* **Weekly report:** this week's holds, held value, bank transfers, abuse refused and orphans, compared with last week.
* **With WooCommerce:**
  * bank-transfer expiry, with one reminder e-mail and a "payment not received" e-mail. Both are normal WooCommerce e-mails;
  * an amount-drift guard when an order on hold is edited.

== External services ==

* **HULO licence server** (`elite.charity/licence`): once a day. Sends the plugin id (`wordpress-checkout-guard`), the version, an anonymous site id and usage counts (numbers only), for the evaluation, the licence check and the revocation list. Pro also checks `huloglobal.com/wordpress-plugins/checkout-guard-pro/update.json` for updates. Terms and privacy: https://huloglobal.com/
* **Stripe API** (`api.stripe.com`): reached only through the HULO Payments plugin's Integration API and its Stripe key, from scheduled jobs and admin actions, never on a visitor's page load. Reads PaymentIntents for reconciliation and for the status of expired holds. Captures and releases are also made by HULO Payments. Nothing is sent when HULO Payments is not installed. Terms: https://stripe.com/legal · Privacy: https://stripe.com/privacy
* **Alert channels you configure** (Slack, Teams, Discord, Telegram, your webhook): receive the alert text. Nothing is sent until you enter a channel.

== Installation ==

1. Install and activate HULO Checkout Guard. For holds and reconciliation, also install HULO Payments. WooCommerce is optional.
2. Upload this add-on's zip under Plugins → Add New → Upload, and activate it.
3. The evaluation starts on its own. Subscribe from HULO → Checkout Guard, or paste a key.
4. A key can also be set in wp-config.php: `define('HULO_LICENCE_KEY_CHECKOUT_GUARD', '…');`

== Changelog ==

= 0.1.0 =
* First release.
