@openreceive/browser 0.4.10 → 0.4.12

package/dist/headless.d.ts

@@ -1,7 +1,7 @@
 import { AssetIndexEntry, PaymentWizardRoute } from '@openreceive/provider-data';
 export { PaymentWizardRoute, PaymentWizardRouteRequest, getPaymentWizardRoutes, loadPayTutorialImages, payTutorialImage } from '@openreceive/provider-data';
-import { P as PaymentIconId, a as ParseOpenReceiveOptionalIntegerOptions, b as PaymentMethod, R as ResolvedTheme, T as ThemePreference, c as PaymentMethodOption, d as TickingValueOptions, e as TickingValueController, f as TransientFeedbackOptions, g as TransientFeedbackController, C as CheckoutInvoiceSnapshot, U as UnixSeconds, S as SwapDisplayModel, h as CheckoutSnapshot, i as SwapDepositRisk, j as CheckoutState, k as TransactionDetailsInput, l as TransactionDetailRow, m as CreateCheckoutStateOptions, n as CheckoutStatusModelInput, o as CheckoutStatusModel, p as CheckoutPaymentMethod, B as BrowserLoggerOption, q as ThemeAttributeTarget, r as CheckoutElementAttributes, s as CheckoutElementAttributeOptions, t as CheckoutElementEventHandlers, u as CheckoutElementListeners, v as CreateCheckoutShellOptions, w as CheckoutShellElements, x as CheckoutShellOptions, y as CheckoutShellModel, z as CreateOpenReceiveThemeToggleElementOptions, A as ThemeToggleElementAttributeOptions, D as ThemeToggleElementAttributes, E as StoredThemeModelOptions, F as ThemeModel, G as ThemeModelOptions, H as ReadThemePreferenceOptions, I as ThemeControlTargets, J as ThemeStorageOptions, K as PaymentWizardControllerOptions, L as PaymentWizardController, M as PaymentWizardSelection, N as PaymentWizardModel, W as WizardRouteAssetDisplay, O as WizardRouteDisplay, Q as PaymentWizardSelectionAction } from './status-Cnx1Vv-w.js';
-export { V as BrowserLogContext, X as BrowserLogger, Y as BrowserRequestError, Z as CheckoutController, _ as CheckoutControllerOptions, $ as CheckoutPhase, a0 as CheckoutShellRootAttributes, a1 as CheckoutStatusRefresh, a2 as OPENRECEIVE_CHECKOUT_DATA_ATTRIBUTES, a3 as OPENRECEIVE_CHECKOUT_DATA_SELECTORS, a4 as OPENRECEIVE_CHECKOUT_ELEMENT_ATTRIBUTES, a5 as OPENRECEIVE_CHECKOUT_ELEMENT_EVENTS, a6 as OPENRECEIVE_CHECKOUT_ELEMENT_PARTS, a7 as OPENRECEIVE_CHECKOUT_ELEMENT_PART_SELECTORS, a8 as OPENRECEIVE_CHECKOUT_ELEMENT_SLOTS, a9 as OPENRECEIVE_CHECKOUT_ELEMENT_TAG_NAME, aa as OPENRECEIVE_COPY_FEEDBACK_MS, ab as OPENRECEIVE_DEFAULT_POLL_INTERVAL_MS, ac as OPENRECEIVE_DEFAULT_PREFIX, ad as OPENRECEIVE_PAYMENT_WIZARD_ATTRIBUTES, ae as OPENRECEIVE_PAYMENT_WIZARD_SELECTORS, af as OPENRECEIVE_PROVIDER_PREVIEW_LIMIT, ag as OPENRECEIVE_STYLE_ROOT_ATTRIBUTE, ah as OPENRECEIVE_STYLE_ROOT_SELECTOR, ai as OPENRECEIVE_THEME_STORAGE_KEY, aj as OPENRECEIVE_THEME_TOGGLE_ELEMENT_ATTRIBUTES, ak as OPENRECEIVE_THEME_TOGGLE_ELEMENT_EVENTS, al as OPENRECEIVE_THEME_TOGGLE_ELEMENT_PARTS, am as OPENRECEIVE_THEME_TOGGLE_ELEMENT_PART_SELECTORS, an as OPENRECEIVE_THEME_TOGGLE_ELEMENT_TAG_NAME, ao as QrEncoder, ap as QrSvgController, aq as QrSvgControllerOptions, ar as Status, as as SwapCopyRow, at as SwapRefundStaging, au as WizardProviderDisplay, av as assertDisplayInvoice, aw as copyInvoice, ax as createCheckoutActionEvent, ay as createCheckoutController, az as createCheckoutErrorEvent, aA as createCheckoutProviderCopyEvent, aB as createCheckoutStateEvent, aC as createQrPayloadSvg, aD as createQrSvg, aE as createQrSvgController, aF as createStatusFetcher, aG as createThemeChangeEvent, aH as currentCheckoutUrl, aI as deriveCheckoutStateLabels, aJ as deriveStatus, aK as enterCheckoutResumePath, aL as escapeHtml, aM as formatAmountCaption, aN as formatDepositAmount, aO as formatFiatAmount, aP as formatMsats, aQ as formatSwapLimit, aR as formatUnixTime, aS as openWallet, aT as paymentIconSvgs, aU as prepareCheckout, aV as requestCheckout } from './status-Cnx1Vv-w.js';
+import { P as PaymentIconId, a as ParseOpenReceiveOptionalIntegerOptions, b as PaymentMethod, R as ResolvedTheme, T as ThemePreference, c as PaymentMethodOption, d as TickingValueOptions, e as TickingValueController, f as TransientFeedbackOptions, g as TransientFeedbackController, C as CheckoutInvoiceSnapshot, U as UnixSeconds, S as SwapDisplayModel, h as CheckoutSnapshot, i as SwapDepositRisk, j as CheckoutState, k as TransactionDetailsInput, l as TransactionDetailRow, m as CreateCheckoutStateOptions, n as CheckoutStatusModelInput, o as CheckoutStatusModel, p as CheckoutPaymentMethod, B as BrowserLoggerOption, q as ThemeAttributeTarget, r as CheckoutElementAttributes, s as CheckoutElementAttributeOptions, t as CheckoutElementEventHandlers, u as CheckoutElementListeners, v as CreateCheckoutShellOptions, w as CheckoutShellElements, x as CheckoutShellOptions, y as CheckoutShellModel, z as CreateOpenReceiveThemeToggleElementOptions, A as ThemeToggleElementAttributeOptions, D as ThemeToggleElementAttributes, E as StoredThemeModelOptions, F as ThemeModel, G as ThemeModelOptions, H as ReadThemePreferenceOptions, I as ThemeControlTargets, J as ThemeStorageOptions, K as PaymentWizardControllerOptions, L as PaymentWizardController, M as PaymentWizardSelection, N as PaymentWizardModel, W as WizardRouteAssetDisplay, O as WizardRouteDisplay, Q as PaymentWizardSelectionAction } from './status-Q1CJqaYo.js';
+export { V as BrowserLogContext, X as BrowserLogger, Y as BrowserRequestError, Z as CheckoutController, _ as CheckoutControllerOptions, $ as CheckoutPhase, a0 as CheckoutShellRootAttributes, a1 as CheckoutStatusRefresh, a2 as OPENRECEIVE_CHECKOUT_DATA_ATTRIBUTES, a3 as OPENRECEIVE_CHECKOUT_DATA_SELECTORS, a4 as OPENRECEIVE_CHECKOUT_ELEMENT_ATTRIBUTES, a5 as OPENRECEIVE_CHECKOUT_ELEMENT_EVENTS, a6 as OPENRECEIVE_CHECKOUT_ELEMENT_PARTS, a7 as OPENRECEIVE_CHECKOUT_ELEMENT_PART_SELECTORS, a8 as OPENRECEIVE_CHECKOUT_ELEMENT_SLOTS, a9 as OPENRECEIVE_CHECKOUT_ELEMENT_TAG_NAME, aa as OPENRECEIVE_COPY_FEEDBACK_MS, ab as OPENRECEIVE_DEFAULT_POLL_INTERVAL_MS, ac as OPENRECEIVE_DEFAULT_PREFIX, ad as OPENRECEIVE_PAYMENT_WIZARD_ATTRIBUTES, ae as OPENRECEIVE_PAYMENT_WIZARD_SELECTORS, af as OPENRECEIVE_PROVIDER_PREVIEW_LIMIT, ag as OPENRECEIVE_STYLE_ROOT_ATTRIBUTE, ah as OPENRECEIVE_STYLE_ROOT_SELECTOR, ai as OPENRECEIVE_THEME_STORAGE_KEY, aj as OPENRECEIVE_THEME_TOGGLE_ELEMENT_ATTRIBUTES, ak as OPENRECEIVE_THEME_TOGGLE_ELEMENT_EVENTS, al as OPENRECEIVE_THEME_TOGGLE_ELEMENT_PARTS, am as OPENRECEIVE_THEME_TOGGLE_ELEMENT_PART_SELECTORS, an as OPENRECEIVE_THEME_TOGGLE_ELEMENT_TAG_NAME, ao as QrEncoder, ap as QrSvgController, aq as QrSvgControllerOptions, ar as Status, as as SwapCopyRow, at as SwapRefundStaging, au as WizardProviderDisplay, av as assertDisplayInvoice, aw as copyInvoice, ax as createCheckoutActionEvent, ay as createCheckoutController, az as createCheckoutErrorEvent, aA as createCheckoutProviderCopyEvent, aB as createCheckoutStateEvent, aC as createQrPayloadSvg, aD as createQrSvg, aE as createQrSvgController, aF as createStatusFetcher, aG as createThemeChangeEvent, aH as currentCheckoutUrl, aI as deriveCheckoutStateLabels, aJ as deriveStatus, aK as enterCheckoutResumePath, aL as escapeHtml, aM as formatAmountCaption, aN as formatDepositAmount, aO as formatFiatAmount, aP as formatMsats, aQ as formatSwapLimit, aR as formatUnixTime, aS as openWallet, aT as paymentIconSvgs, aU as prepareCheckout, aV as requestCheckout } from './status-Q1CJqaYo.js';
 import '@openreceive/core';
 
 /** Each packaged payment icon as a `data:image/svg+xml` URI, keyed by id. */
@@ -437,8 +437,14 @@ declare function createSwapDisplayModel(invoice: CheckoutInvoiceSnapshot, option
  * renderers used to keep a near-identical copy of this; a headless UI holding
  * its own snapshot store wants the same three rules.
  *
- * `dismissedInvoiceId` is the "back to Lightning" exit: a dismissed attempt is
- * invisible until a new start or a refund clears the dismissal.
+ * `dismissedInvoiceId` is the "back to Lightning" / "switch payment method"
+ * exit: while it is set, NO attempt is current until a new start or a refund
+ * clears it. The payer walked away from the swap they were looking at, and every
+ * older attempt in the snapshot is one they walked away from before that. The
+ * snapshot copy is the fallback only when nothing was dismissed (a resumed
+ * attempt this session never started). Falling back to "the first other swap"
+ * reopened the previous coin's deposit once an order had two attempts, and
+ * every further click re-dismissed the same one, so the exit stopped working.
  */
 declare function selectCurrentSwapInvoice(snapshot: CheckoutSnapshot | undefined, options?: {
     readonly started?: CheckoutInvoiceSnapshot | null;
@@ -747,13 +753,15 @@ interface CheckoutSessionOptions {
     snapshot(): CheckoutSnapshot | undefined;
     /** The order being paid, read at call time (the element's is an attribute). */
     reference(): string | undefined;
+    /** Endpoint is part of checkout identity; trailing slashes are equivalent. */
+    prefix?(): string | undefined;
     /**
      * Mint a Lightning invoice for this reference (POST `${prefix}/checkouts`).
      * The host closes over its own prefix, metadata and fetch. Answer `undefined`
      * to say "this host cannot mint" — React's payment wizard is such a host: it
      * asks its parent for Lightning through `onRequestLightning` instead.
      */
-    requestCheckout?(reference: string): Promise<CheckoutSnapshot> | undefined;
+    requestCheckout?(reference: string, signal?: AbortSignal): Promise<CheckoutSnapshot> | undefined;
     /** Publish a snapshot that now carries the Lightning attempt. */
     onSnapshot?(snapshot: CheckoutSnapshot): void;
     /**
@@ -785,6 +793,14 @@ interface CheckoutSession {
      * carries the accepted range the host renders in its unavailable panel.
      */
     readonly swapQuotes: Readonly<Record<string, CheckoutPaymentMethod>>;
+    /** Invalidate every outstanding action when identity changes. */
+    syncIdentity(): void;
+    reset(): void;
+    dispose(): void;
+    capture(): {
+        readonly signal: AbortSignal;
+        isCurrent(): boolean;
+    };
     ensureLightning(): Promise<void>;
     /**
      * Quote the pay-in asset, then start the swap when the quote confirms the
@@ -825,6 +841,7 @@ declare function createCheckoutShell(snapshot: CheckoutSnapshot, options?: Creat
  * URL input — no call in this module takes a route of its own.
  */
 interface SwapRequestOptions {
+    readonly signal?: AbortSignal;
     readonly fetch: typeof globalThis.fetch;
     readonly prefix: string;
     readonly logger?: BrowserLoggerOption;

package/dist/headless.js

@@ -119,7 +119,7 @@ import {
   swapOptionLimitSentence,
   swapPickerKey,
   updatePaymentWizardSelection
-} from "./chunk-FIAYCDZO.js";
+} from "./chunk-XDFN6BT3.js";
 
 // src/headless.ts
 import {
@@ -177,7 +177,43 @@ function createCheckoutSession(options) {
   let mintingLightning = false;
   let startingSwapAsset = null;
   let swapQuotes = {};
+  let generation = 0;
+  let abort = new AbortController();
+  const identityKey = () => JSON.stringify([
+    options.reference(),
+    (options.prefix?.() ?? options.swap?.prefix() ?? "").replace(/\/+$/, "")
+  ]);
+  let identity = identityKey();
+  function invalidateActions() {
+    abort.abort();
+    abort = new AbortController();
+    generation += 1;
+    mintingLightning = false;
+    startingSwapAsset = null;
+  }
+  function reset() {
+    invalidateActions();
+    identity = identityKey();
+    wizardError = void 0;
+    swapStartError = void 0;
+    lightningRequested = false;
+    mintingLightning = false;
+    startingSwapAsset = null;
+    swapQuotes = {};
+  }
+  function syncIdentity() {
+    if (identityKey() !== identity) reset();
+  }
+  function capture() {
+    syncIdentity();
+    const captured = generation;
+    return {
+      signal: abort.signal,
+      isCurrent: () => captured === generation && identityKey() === identity
+    };
+  }
   async function ensureLightning() {
+    const action = capture();
     if (mintingLightning) return;
     const reference = options.reference();
     if (reference === void 0 || reference.length === 0) return;
@@ -195,20 +231,25 @@ function createCheckoutSession(options) {
     wizardError = void 0;
     options.onChange();
     try {
-      const pending = options.requestCheckout?.(reference);
+      const pending = options.requestCheckout?.(reference, action.signal);
       if (pending === void 0) return;
       const checkout = await pending;
+      if (!action.isCurrent()) return;
       lightningRequested = true;
       options.onSnapshot?.(mergeMintedCheckout(checkout, options.snapshot()));
     } catch (error) {
+      if (!action.isCurrent()) return;
       wizardError = payerFacingMessage(error, MINT_FAILED);
       options.onError(error);
     } finally {
-      mintingLightning = false;
-      options.onChange();
+      if (action.isCurrent()) {
+        mintingLightning = false;
+        options.onChange();
+      }
     }
   }
   async function startSwap(payInAsset) {
+    const action = capture();
     if (startingSwapAsset !== null) return;
     const swap = options.swap;
     if (swap === void 0) {
@@ -239,9 +280,18 @@ function createCheckoutSession(options) {
     swapStartError = void 0;
     options.onChange();
     try {
-      const quote = await quoteSwapAsset(payInAsset, prefix, fetcher, reference, csrfHeader);
+      const quote = await quoteSwapAsset(
+        payInAsset,
+        prefix,
+        fetcher,
+        reference,
+        csrfHeader,
+        action
+      );
+      if (!action.isCurrent()) return;
       if (quote !== void 0 && quote.available === false) return;
       const started = await startSwapRequest({
+        signal: action.signal,
         fetch: fetcher,
         prefix,
         ...csrfHeader === void 0 ? {} : { csrfHeader },
@@ -249,12 +299,14 @@ function createCheckoutSession(options) {
         payInAsset,
         ...options.logger === void 0 ? {} : { logger: options.logger }
       });
+      if (!action.isCurrent()) return;
       selection.setStarted(started);
       selection.setDismissedInvoiceId(null);
       swap.onStarted?.(started);
       selection.setSelectedAsset(payInAsset);
       options.onChange();
     } catch (error) {
+      if (!action.isCurrent()) return;
       const landed = selection.started();
       if (landed?.swap?.pay_in_asset === payInAsset && landed.invoice_id !== selection.dismissedInvoiceId()) {
         selection.setSelectedAsset(payInAsset);
@@ -264,17 +316,22 @@ function createCheckoutSession(options) {
       selection.setSelectedAsset(payInAsset);
       failSwapStart(error);
     } finally {
-      startingSwapAsset = null;
+      if (action.isCurrent()) {
+        startingSwapAsset = null;
+        options.onChange();
+      }
     }
   }
-  async function quoteSwapAsset(payInAsset, prefix, fetcher, reference, csrfHeader) {
+  async function quoteSwapAsset(payInAsset, prefix, fetcher, reference, csrfHeader, action) {
     const body = await postJson({
+      signal: action.signal,
       fetch: fetcher,
       prefix,
       ...csrfHeader === void 0 ? {} : { csrfHeader },
       ...options.logger === void 0 ? {} : { logger: options.logger },
       body: { reference, action: "swap_quote", pay_in_asset: payInAsset }
     });
+    if (!action.isCurrent()) return void 0;
     const quote = normalizeSwapQuote(body);
     if (quote === void 0) return void 0;
     swapQuotes = { ...swapQuotes, [quote.pay_in_asset]: quote };
@@ -304,12 +361,17 @@ function createCheckoutSession(options) {
     get swapQuotes() {
       return swapQuotes;
     },
+    syncIdentity,
+    reset,
+    dispose: reset,
+    capture,
     ensureLightning,
     startSwap,
     resetLightningRequest() {
-      lightningRequested = false;
+      reset();
     },
     clearSwapStartError() {
+      invalidateActions();
       swapStartError = void 0;
     }
   };

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { aW as BrowserLogLevel } from './status-Cnx1Vv-w.js';
-export { aX as BrowserLogEntry, X as BrowserLogger, B as BrowserLoggerOption, Y as BrowserRequestError, Z as CheckoutController, _ as CheckoutControllerOptions, h as CheckoutSnapshot, j as CheckoutState, aY as CopyInvoiceOptions, aZ as GuestCheckoutResumeController, a_ as GuestCheckoutResumeOptions, a$ as OpenWalletOptions, b0 as PrepareCheckoutOptions, b1 as QrOptions, b2 as RequestCheckoutOptions, ar as Status, b3 as StatusInvoiceLike, U as UnixSeconds, aw as copyInvoice, ay as createCheckoutController, b4 as createGuestCheckoutResume, b5 as createGuestOrderFetcher, b6 as createLightningUri, b7 as createQrPngDataUrl, aD as createQrSvg, aJ as deriveStatus, aK as enterCheckoutResumePath, aS as openWallet, aU as prepareCheckout, aV as requestCheckout } from './status-Cnx1Vv-w.js';
+import { aW as BrowserLogLevel } from './status-Q1CJqaYo.js';
+export { aX as BrowserLogEntry, X as BrowserLogger, B as BrowserLoggerOption, Y as BrowserRequestError, Z as CheckoutController, _ as CheckoutControllerOptions, h as CheckoutSnapshot, j as CheckoutState, aY as CopyInvoiceOptions, aZ as GuestCheckoutResumeController, a_ as GuestCheckoutResumeOptions, a$ as OpenWalletOptions, b0 as PrepareCheckoutOptions, b1 as QrOptions, b2 as RequestCheckoutOptions, ar as Status, b3 as StatusInvoiceLike, U as UnixSeconds, aw as copyInvoice, ay as createCheckoutController, b4 as createGuestCheckoutResume, b5 as createGuestOrderFetcher, b6 as createLightningUri, b7 as createQrPngDataUrl, aD as createQrSvg, aJ as deriveStatus, aK as enterCheckoutResumePath, aS as openWallet, aU as prepareCheckout, aV as requestCheckout } from './status-Q1CJqaYo.js';
 import '@openreceive/provider-data';
 import '@openreceive/core';
 

package/dist/index.js

@@ -13,7 +13,7 @@ import {
   openWallet,
   prepareCheckout,
   requestCheckout
-} from "./chunk-FIAYCDZO.js";
+} from "./chunk-XDFN6BT3.js";
 export {
   BrowserRequestError,
   copyInvoice,

package/dist/{status-Cnx1Vv-w.d.ts → status-Q1CJqaYo.d.ts}

@@ -506,9 +506,7 @@ interface SwapDisplayModel {
     readonly networkWarningEmphasis: string;
     /**
      * Full plain-text network warning (accessible / non-HTML consumers). The
-     * lost-funds sentence is present only when `depositRisk` is not `pinned`; the
-     * "pay with one method only" sentence is on every rail, because double-paying
-     * is reachable on all of them.
+     * lost-funds sentence is present only when `depositRisk` is not `pinned`.
      */
     readonly networkWarning: string;
     readonly depositAddress: string;
@@ -820,8 +818,9 @@ interface RequestCheckoutOptions extends RequestCheckoutBaseOptions {
  * `prepareCheckout` posts only the order id — it locks the amount and lists
  * payment methods without minting — so there is no memo or metadata to carry.
  */
-type PrepareCheckoutOptions = Pick<RequestCheckoutBaseOptions, "prefix" | "reference" | "fetch" | "headers" | "csrfHeader">;
+type PrepareCheckoutOptions = Pick<RequestCheckoutBaseOptions, "prefix" | "reference" | "fetch" | "headers" | "csrfHeader" | "signal">;
 interface RequestCheckoutBaseOptions {
+    readonly signal?: AbortSignal;
     /**
      * Base path the shipped router is mounted at (e.g. `/openreceive`). The create and
      * prepare routes are derived from it — see {@link checkoutRoutes}. It is required

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openreceive/browser",
-  "version": "0.4.10",
+  "version": "0.4.12",
   "description": "Browser helpers and a headless UI engine for Bitcoin Lightning checkout and optional USDT, USDC, SOL and ETH swaps.",
   "keywords": [
     "bitcoin",
@@ -30,8 +30,8 @@
     "./styles.css": "./dist/styles.css"
   },
   "dependencies": {
-    "@openreceive/core": "0.4.10",
-    "@openreceive/provider-data": "0.4.10",
+    "@openreceive/core": "0.4.12",
+    "@openreceive/provider-data": "0.4.12",
     "qrcode": "^1.5.4"
   },
   "devDependencies": {

package/skills/integrate-openreceive/SKILL.md

@@ -34,9 +34,10 @@ code** (`NWC_URI`).
    - BTCPay Server: [references/btcpay.md](references/btcpay.md) — a plugin,
      configured in BTCPay's store UI or Greenfield API; no application code,
      no npm packages, no gem. The rest of this file is about the library.
-3. Follow its **Step 0** first: confirm `NWC_URI` is set in the server
-   environment before writing code. Never print the value; never invent a
-   placeholder.
+3. Follow its **Step 0** first: before writing code or searching the machine,
+   ask the user for the receive-only NWC code (then the swap URI), one question
+   per message, and store each pasted code in the project's env file yourself.
+   Never print the value; never invent a placeholder.
 
 Install, per adapter — Express: `npm install @openreceive/express @openreceive/react`;
 Fastify: `npm install @openreceive/fastify @openreceive/react`; Next.js:

package/skills/integrate-openreceive/references/btcpay.md

@@ -1,6 +1,6 @@
 # OpenReceive agent directions (BTCPay Server)
 
-These directions describe OpenReceive 0.4.10.
+These directions describe OpenReceive 0.4.12.
 
 Connect a BTCPay Server store to a receive-only NWC wallet with the OpenReceive
 plugin, and optionally let payers pay BTCPay invoices with USDT, USDC, ETH or
@@ -35,10 +35,12 @@ refund path on the same checkout screen.
 1. Confirm the BTCPay Server version is 2.4.4 or later (Server Settings →
    About, or `GET /api/v1/server/info`). The plugin declares that minimum and
    BTCPay refuses to load it below.
-2. Check whether the plugin is installed (Server Settings → Plugins, or the
-   store navigation shows an "OpenReceive" entry). If not, install it from the
-   BTCPay plugin directory (Server Settings → Plugins, search "OpenReceive"),
-   as the quickstart says; do not invent an installer command.
+2. Check whether the plugin is installed (the Plugins menu — the plug icon in
+   the top-right corner — under Installed Plugins, or the store navigation
+   shows an "OpenReceive" entry). If not, install it from the BTCPay plugin
+   directory (the same Plugins menu → Plugin Directory, search "openreceive",
+   then Install and Restart now), as the quickstart says; do not invent an
+   installer command.
 3. Check whether the store already has an OpenReceive connection:
    `GET /api/v1/stores/{storeId}/openreceive/settings` returns
    `lightningNodeIsOpenReceive`. If true, the wallet step is done — go to
@@ -119,6 +121,8 @@ enough; drop the `.md` for the same page a person would read.
 Questions, or a problem with the plugin itself:
 https://openreceive.org/contact
 
+- https://openreceive.org/guides/payment-safety-upgrade.md — coordinated upgrades and reviewed repair of existing attempts
+
 ---
 
 ## The quickstart, in full
@@ -131,15 +135,15 @@ passes. The page it comes from is https://openreceive.org/guides/quickstart-btcp
 Requires BTCPay Server ≥ 2.4.4.
 
 The OpenReceive plugin makes a receive-only NWC wallet the Lightning node of a
-BTCPay store. BTCPay mints every Lightning invoice in that wallet and records
-payments through its own settlement machinery. Optionally, payers can pay a
-BTCPay invoice with USDT, USDC, ETH or SOL through a Lightning Swap Connect
-provider; the swap settles into the same wallet. The store's internal node is
+BTCPay store. BTCPay creates every Lightning invoice in that wallet. It records
+payments the same way it records any other payment. You can also let payers pay
+a BTCPay invoice with USDT, USDC, ETH or SOL through a Lightning Swap Connect
+provider. The swap pays into the same wallet. The store's internal node is
 never used.
 
 This is not the Node or Rails library. There are no hooks, no
-`openreceive_payments` table and no OpenReceive HTTP routes: BTCPay's
-invoices, checkout, webhooks and Greenfield API are the host.
+`openreceive_payments` table and no OpenReceive HTTP routes. BTCPay's own
+invoices, checkout, webhooks and Greenfield API do that work.
 
 ### 1. Prerequisites
 
@@ -155,39 +159,66 @@ invoices, checkout, webhooks and Greenfield API are the host.
 
 ### 2. Install the plugin
 
-In BTCPay, open **Server Settings → Plugins**, search the plugin directory
-for **OpenReceive**, click **Install**, and restart BTCPay when prompted.
-BTCPay creates the plugin's one table (`openreceive_swaps`, schema
-`BTCPayServer.Plugins.OpenReceive`) in its own Postgres at startup; nothing
-else is created.
+Sign in as a **server administrator**. If someone else hosts your server, ask
+them to install the plugin for you.
+
+**1. Open the Plugins menu.** It is the plug icon in the top-right corner.
+
+**2. Click Plugin Directory.**
+
+**3. Search for `openreceive`** and click the **OpenReceive** result.
+
+**4. Click Install in BTCPay Server.** Confirm when prompted, then click
+**Restart now** and wait for BTCPay to come back.
+
+At startup, BTCPay creates the plugin's two tables in its own Postgres
+database: `openreceive_invoices` and `openreceive_swaps`, in the schema
+`BTCPayServer.Plugins.OpenReceive`. Nothing else is created.
 
 To build the plugin from source instead, follow
 [the .NET workspace README](https://github.com/OpenReceive/openreceive/blob/master/packages/dotnet/README.md).
 
 ### 3. Connect the wallet
 
-Follow the plugin README's illustrated walkthrough:
-[OpenReceive for BTCPay Server](https://github.com/OpenReceive/openreceive/blob/master/packages/dotnet/BTCPayServer.Plugins.OpenReceive/README.md).
-It opens the **OpenReceive** page in the store's sidebar, saves the
-receive-only NWC code, optionally saves the LSC code to turn swaps on, and
-creates a first test invoice. There is nothing else to configure: you never
-open BTCPay's Lightning node screen, and the plugin never reads the internal
-node.
+1. Select your store and open **OpenReceive** in its sidebar, under Wallets.
+2. Paste your receive-only NWC code. To see what the wallet supports first,
+   click **Test connection**.
+3. Click **Save NWC Code**.
+4. To turn swaps on, paste a Lightning Swap Connect code and click **Save swap
+   settings**.
 
-Saving fails closed if the wallet advertises a spend method such as
-`pay_invoice`. Mint a receive-only code instead; the override for a wallet
-that cannot is a deliberate, logged choice. Swaps raise the store's invoice
-expiration to 60 minutes when it is shorter, because a swap needs at least 45
-minutes of invoice life.
+The page then shows **Wallet connected**. If you set up a provider, it also
+shows **Swaps on**. There is nothing else to configure. You never open BTCPay's
+Lightning node screen, and the plugin never reads the internal node.
+
+Screenshots for each of those steps, and for creating a first test invoice,
+are in the plugin's
+[README](https://github.com/OpenReceive/openreceive/blob/master/packages/dotnet/BTCPayServer.Plugins.OpenReceive/README.md).
+
+The plugin refuses to save a code whose wallet advertises a spend method such
+as `pay_invoice`. Create a receive-only code instead. If your wallet cannot
+make one, there is an override, but using it is a deliberate choice and the
+plugin logs it.
+
+Turning swaps on raises the store's invoice expiration to 60 minutes if it is
+shorter. A swap needs the invoice to stay open for at least 45 minutes.
 
 ### 4. Check it
 
-**Run a health check** on the OpenReceive page runs every probe in place:
-the connection, the wallet preflight, payment notifications, the last wallet
-scan, the swap provider and its assets, the invoice expiration, and swaps
-that need a human. Each failing probe carries a fix link.
+Click **Run a health check** on the OpenReceive page. It runs every check
+right there:
+
+- the connection
+- the wallet preflight
+- payment notifications
+- the last wallet scan
+- the swap provider and its assets
+- the invoice expiration
+- swaps that need a human
+
+Each failing check comes with a link to the fix.
 
-Every setting, Greenfield route, swap state, log event and probe is in the
-[BTCPay plugin reference](https://openreceive.org/guides/btcpay-reference.md), including what is
-unsupported by design: every send-side feature, top-up invoices, and a bare
-`nostr+walletconnect://` string in BTCPay's Lightning node screen.
+The [BTCPay plugin reference](https://openreceive.org/guides/btcpay-reference.md) lists every setting,
+Greenfield route, swap state, log event and check. It also lists what the
+plugin does not support by design: every send-side feature, top-up invoices,
+and a bare `nostr+walletconnect://` string in BTCPay's Lightning node screen.