kintsugi_sdk 5.5.14 → 5.6.1

data/lib/kintsugi_sdk/taxestimation.rb

@@ -39,8 +39,10 @@ module KintsugiSDK
     end
 
 
-    sig { params(request: Models::Ops::EstimateTaxV1TaxEstimatePostRequest, timeout_ms: T.nilable(Integer)).returns(Models::Shared::TransactionEstimateResponse) }
-    def estimate_tax(request:, timeout_ms: nil)
+
+
+    sig { params(request: Models::Ops::EstimateTaxV1TaxEstimatePostRequest, timeout_ms: T.nilable(Integer), http_headers: T.nilable(T::Hash[T.any(String, Symbol), String])).returns(Models::Shared::PageTransactionEstimateResponse) }
+    def estimate_tax(request:, timeout_ms: nil, http_headers: nil)
       # estimate_tax - Estimate Tax
       # The Estimate Tax API calculates the estimated tax for a specific
       #     transaction based on the provided details, including organization nexus,
@@ -54,7 +56,7 @@ module KintsugiSDK
       headers['content-type'] = req_content_type
       raise StandardError, 'request body is required' if data.nil? && form.nil?
 
-      if form
+      if form && !form.empty?
         body = Utils.encode_form(form)
       elsif Utils.match_content_type(req_content_type, 'application/x-www-form-urlencoded')
         body = URI.encode_www_form(T.cast(data, T::Hash[Symbol, Object]))
@@ -69,14 +71,14 @@ module KintsugiSDK
 
       timeout = (timeout_ms.to_f / 1000) unless timeout_ms.nil?
       timeout ||= @sdk_configuration.timeout
-      
+
 
       connection = @sdk_configuration.client
 
       hook_ctx = SDKHooks::HookContext.new(
         config: @sdk_configuration,
         base_url: base_url,
-        oauth2_scopes: [],
+        oauth2_scopes: nil,
         operation_id: 'estimate_tax_v1_tax_estimate_post',
         security_source: @sdk_configuration.security_source
       )
@@ -84,7 +86,7 @@ module KintsugiSDK
       error = T.let(nil, T.nilable(StandardError))
       http_response = T.let(nil, T.nilable(Faraday::Response))
       
-      
+
       begin
         http_response = T.must(connection).post(url) do |req|
           req.body = body
@@ -92,6 +94,9 @@ module KintsugiSDK
           req.options.timeout = timeout unless timeout.nil?
           req.params = query_params
           Utils.configure_request_security(req, security)
+          http_headers&.each do |key, value|
+            req.headers[key.to_s] = value
+          end
 
           @sdk_configuration.hooks.before_request(
             hook_ctx: SDKHooks::BeforeRequestHookContext.new(
@@ -119,13 +124,13 @@ module KintsugiSDK
             response: http_response
           )
         end
-        
+
         if http_response.nil?
           raise error if !error.nil?
           raise 'no response'
         end
       end
-      
+
       content_type = http_response.headers.fetch('Content-Type', 'application/octet-stream')
       if Utils.match_status_code(http_response.status, ['200'])
         if Utils.match_content_type(content_type, 'application/json')
@@ -136,7 +141,7 @@ module KintsugiSDK
             response: http_response
           )
           response_data = http_response.env.response_body
-          obj = Crystalline.unmarshal_json(JSON.parse(response_data), Models::Shared::TransactionEstimateResponse)
+          obj = Crystalline.unmarshal_json(JSON.parse(response_data), Models::Shared::PageTransactionEstimateResponse)
 
           return obj
         else
@@ -193,5 +198,5 @@ module KintsugiSDK
 
       end
     end
-  end
+end
 end

data/lib/kintsugi_sdk/transactions.rb

@@ -39,8 +39,10 @@ module KintsugiSDK
     end
 
 
-    sig { params(request: Models::Ops::GetTransactionsV1TransactionsGetRequest, timeout_ms: T.nilable(Integer)).returns(Models::Shared::PageTransactionRead) }
-    def list(request:, timeout_ms: nil)
+
+
+    sig { params(request: Models::Ops::GetTransactionsV1TransactionsGetRequest, timeout_ms: T.nilable(Integer), http_headers: T.nilable(T::Hash[T.any(String, Symbol), String])).returns(Models::Shared::PageTransactionRead) }
+    def list(request:, timeout_ms: nil, http_headers: nil)
       # list - Get Transactions
       # The Get Transactions API retrieves a list of transactions with
       #     optional filtering, sorting, and pagination.
@@ -57,14 +59,14 @@ module KintsugiSDK
 
       timeout = (timeout_ms.to_f / 1000) unless timeout_ms.nil?
       timeout ||= @sdk_configuration.timeout
-      
+
 
       connection = @sdk_configuration.client
 
       hook_ctx = SDKHooks::HookContext.new(
         config: @sdk_configuration,
         base_url: base_url,
-        oauth2_scopes: [],
+        oauth2_scopes: nil,
         operation_id: 'get_transactions_v1_transactions_get',
         security_source: @sdk_configuration.security_source
       )
@@ -72,13 +74,16 @@ module KintsugiSDK
       error = T.let(nil, T.nilable(StandardError))
       http_response = T.let(nil, T.nilable(Faraday::Response))
       
-      
+
       begin
         http_response = T.must(connection).get(url) do |req|
           req.headers.merge!(headers)
           req.options.timeout = timeout unless timeout.nil?
           req.params = query_params
           Utils.configure_request_security(req, security)
+          http_headers&.each do |key, value|
+            req.headers[key.to_s] = value
+          end
 
           @sdk_configuration.hooks.before_request(
             hook_ctx: SDKHooks::BeforeRequestHookContext.new(
@@ -106,13 +111,13 @@ module KintsugiSDK
             response: http_response
           )
         end
-        
+
         if http_response.nil?
           raise error if !error.nil?
           raise 'no response'
         end
       end
-      
+
       content_type = http_response.headers.fetch('Content-Type', 'application/octet-stream')
       if Utils.match_status_code(http_response.status, ['200'])
         if Utils.match_content_type(content_type, 'application/json')
@@ -182,8 +187,8 @@ module KintsugiSDK
     end
 
 
-    sig { params(request: Models::Shared::TransactionPublicRequest, timeout_ms: T.nilable(Integer)).returns(Models::Shared::TransactionRead) }
-    def create(request:, timeout_ms: nil)
+    sig { params(request: Models::Shared::TransactionPublicRequest, timeout_ms: T.nilable(Integer), http_headers: T.nilable(T::Hash[T.any(String, Symbol), String])).returns(Models::Shared::TransactionRead) }
+    def create(request:, timeout_ms: nil, http_headers: nil)
       # create - Create Transaction
       # Create a transaction.
       url, params = @sdk_configuration.get_server_details
@@ -195,7 +200,7 @@ module KintsugiSDK
       headers['content-type'] = req_content_type
       raise StandardError, 'request body is required' if data.nil? && form.nil?
 
-      if form
+      if form && !form.empty?
         body = Utils.encode_form(form)
       elsif Utils.match_content_type(req_content_type, 'application/x-www-form-urlencoded')
         body = URI.encode_www_form(T.cast(data, T::Hash[Symbol, Object]))
@@ -209,14 +214,14 @@ module KintsugiSDK
 
       timeout = (timeout_ms.to_f / 1000) unless timeout_ms.nil?
       timeout ||= @sdk_configuration.timeout
-      
+
 
       connection = @sdk_configuration.client
 
       hook_ctx = SDKHooks::HookContext.new(
         config: @sdk_configuration,
         base_url: base_url,
-        oauth2_scopes: [],
+        oauth2_scopes: nil,
         operation_id: 'create_transaction_v1_transactions_post',
         security_source: @sdk_configuration.security_source
       )
@@ -224,13 +229,16 @@ module KintsugiSDK
       error = T.let(nil, T.nilable(StandardError))
       http_response = T.let(nil, T.nilable(Faraday::Response))
       
-      
+
       begin
         http_response = T.must(connection).post(url) do |req|
           req.body = body
           req.headers.merge!(headers)
           req.options.timeout = timeout unless timeout.nil?
           Utils.configure_request_security(req, security)
+          http_headers&.each do |key, value|
+            req.headers[key.to_s] = value
+          end
 
           @sdk_configuration.hooks.before_request(
             hook_ctx: SDKHooks::BeforeRequestHookContext.new(
@@ -258,13 +266,13 @@ module KintsugiSDK
             response: http_response
           )
         end
-        
+
         if http_response.nil?
           raise error if !error.nil?
           raise 'no response'
         end
       end
-      
+
       content_type = http_response.headers.fetch('Content-Type', 'application/octet-stream')
       if Utils.match_status_code(http_response.status, ['202'])
         if Utils.match_content_type(content_type, 'application/json')
@@ -334,8 +342,8 @@ module KintsugiSDK
     end
 
 
-    sig { params(request: Models::Ops::GetTransactionByExternalIdRequest, timeout_ms: T.nilable(Integer)).returns(Models::Shared::TransactionRead) }
-    def get_by_external_id(request:, timeout_ms: nil)
+    sig { params(request: Models::Ops::GetTransactionByExternalIdRequest, timeout_ms: T.nilable(Integer), http_headers: T.nilable(T::Hash[T.any(String, Symbol), String])).returns(Models::Shared::TransactionRead) }
+    def get_by_external_id(request:, timeout_ms: nil, http_headers: nil)
       # get_by_external_id - Get Transaction By External Id
       # Retrieves a specific transaction based on its external ID.
       #     This allows users to fetch transaction details using an identifier from an external system.
@@ -356,14 +364,14 @@ module KintsugiSDK
 
       timeout = (timeout_ms.to_f / 1000) unless timeout_ms.nil?
       timeout ||= @sdk_configuration.timeout
-      
+
 
       connection = @sdk_configuration.client
 
       hook_ctx = SDKHooks::HookContext.new(
         config: @sdk_configuration,
         base_url: base_url,
-        oauth2_scopes: [],
+        oauth2_scopes: nil,
         operation_id: 'getTransactionByExternalId',
         security_source: @sdk_configuration.security_source
       )
@@ -371,12 +379,15 @@ module KintsugiSDK
       error = T.let(nil, T.nilable(StandardError))
       http_response = T.let(nil, T.nilable(Faraday::Response))
       
-      
+
       begin
         http_response = T.must(connection).get(url) do |req|
           req.headers.merge!(headers)
           req.options.timeout = timeout unless timeout.nil?
           Utils.configure_request_security(req, security)
+          http_headers&.each do |key, value|
+            req.headers[key.to_s] = value
+          end
 
           @sdk_configuration.hooks.before_request(
             hook_ctx: SDKHooks::BeforeRequestHookContext.new(
@@ -404,13 +415,13 @@ module KintsugiSDK
             response: http_response
           )
         end
-        
+
         if http_response.nil?
           raise error if !error.nil?
           raise 'no response'
         end
       end
-      
+
       content_type = http_response.headers.fetch('Content-Type', 'application/octet-stream')
       if Utils.match_status_code(http_response.status, ['200'])
         if Utils.match_content_type(content_type, 'application/json')
@@ -480,8 +491,8 @@ module KintsugiSDK
     end
 
 
-    sig { params(request: Models::Ops::UpdateTransactionV1TransactionsTransactionIdPutRequest, timeout_ms: T.nilable(Integer)).returns(Models::Shared::TransactionRead) }
-    def update(request:, timeout_ms: nil)
+    sig { params(request: Models::Ops::UpdateTransactionV1TransactionsTransactionIdPutRequest, timeout_ms: T.nilable(Integer), http_headers: T.nilable(T::Hash[T.any(String, Symbol), String])).returns(Models::Shared::TransactionRead) }
+    def update(request:, timeout_ms: nil, http_headers: nil)
       # update - Update Transaction
       # Update a specific transaction by its ID.
       url, params = @sdk_configuration.get_server_details
@@ -498,7 +509,7 @@ module KintsugiSDK
       headers['content-type'] = req_content_type
       raise StandardError, 'request body is required' if data.nil? && form.nil?
 
-      if form
+      if form && !form.empty?
         body = Utils.encode_form(form)
       elsif Utils.match_content_type(req_content_type, 'application/x-www-form-urlencoded')
         body = URI.encode_www_form(T.cast(data, T::Hash[Symbol, Object]))
@@ -512,14 +523,14 @@ module KintsugiSDK
 
       timeout = (timeout_ms.to_f / 1000) unless timeout_ms.nil?
       timeout ||= @sdk_configuration.timeout
-      
+
 
       connection = @sdk_configuration.client
 
       hook_ctx = SDKHooks::HookContext.new(
         config: @sdk_configuration,
         base_url: base_url,
-        oauth2_scopes: [],
+        oauth2_scopes: nil,
         operation_id: 'update_transaction_v1_transactions__transaction_id__put',
         security_source: @sdk_configuration.security_source
       )
@@ -527,13 +538,16 @@ module KintsugiSDK
       error = T.let(nil, T.nilable(StandardError))
       http_response = T.let(nil, T.nilable(Faraday::Response))
       
-      
+
       begin
         http_response = T.must(connection).put(url) do |req|
           req.body = body
           req.headers.merge!(headers)
           req.options.timeout = timeout unless timeout.nil?
           Utils.configure_request_security(req, security)
+          http_headers&.each do |key, value|
+            req.headers[key.to_s] = value
+          end
 
           @sdk_configuration.hooks.before_request(
             hook_ctx: SDKHooks::BeforeRequestHookContext.new(
@@ -561,13 +575,13 @@ module KintsugiSDK
             response: http_response
           )
         end
-        
+
         if http_response.nil?
           raise error if !error.nil?
           raise 'no response'
         end
       end
-      
+
       content_type = http_response.headers.fetch('Content-Type', 'application/octet-stream')
       if Utils.match_status_code(http_response.status, ['200'])
         if Utils.match_content_type(content_type, 'application/json')
@@ -609,8 +623,8 @@ module KintsugiSDK
     end
 
 
-    sig { params(request: Models::Ops::GetTransactionByIdV1TransactionsTransactionIdGetRequest, timeout_ms: T.nilable(Integer)).returns(Models::Shared::TransactionRead) }
-    def get_by_id(request:, timeout_ms: nil)
+    sig { params(request: Models::Ops::GetTransactionByIdV1TransactionsTransactionIdGetRequest, timeout_ms: T.nilable(Integer), http_headers: T.nilable(T::Hash[T.any(String, Symbol), String])).returns(Models::Shared::TransactionRead) }
+    def get_by_id(request:, timeout_ms: nil, http_headers: nil)
       # get_by_id - Get Transaction By Id
       # The Get Transaction By Id API retrieves detailed information
       #     about a specific transaction by providing its unique transaction ID.
@@ -631,14 +645,14 @@ module KintsugiSDK
 
       timeout = (timeout_ms.to_f / 1000) unless timeout_ms.nil?
       timeout ||= @sdk_configuration.timeout
-      
+
 
       connection = @sdk_configuration.client
 
       hook_ctx = SDKHooks::HookContext.new(
         config: @sdk_configuration,
         base_url: base_url,
-        oauth2_scopes: [],
+        oauth2_scopes: nil,
         operation_id: 'get_transaction_by_id_v1_transactions__transaction_id__get',
         security_source: @sdk_configuration.security_source
       )
@@ -646,12 +660,15 @@ module KintsugiSDK
       error = T.let(nil, T.nilable(StandardError))
       http_response = T.let(nil, T.nilable(Faraday::Response))
       
-      
+
       begin
         http_response = T.must(connection).get(url) do |req|
           req.headers.merge!(headers)
           req.options.timeout = timeout unless timeout.nil?
           Utils.configure_request_security(req, security)
+          http_headers&.each do |key, value|
+            req.headers[key.to_s] = value
+          end
 
           @sdk_configuration.hooks.before_request(
             hook_ctx: SDKHooks::BeforeRequestHookContext.new(
@@ -679,13 +696,13 @@ module KintsugiSDK
             response: http_response
           )
         end
-        
+
         if http_response.nil?
           raise error if !error.nil?
           raise 'no response'
         end
       end
-      
+
       content_type = http_response.headers.fetch('Content-Type', 'application/octet-stream')
       if Utils.match_status_code(http_response.status, ['200'])
         if Utils.match_content_type(content_type, 'application/json')
@@ -755,8 +772,8 @@ module KintsugiSDK
     end
 
 
-    sig { params(request: Models::Ops::GetTransactionsByFilingRequest, timeout_ms: T.nilable(Integer)).returns(T::Array[Models::Shared::TransactionRead]) }
-    def get_by_filing_id(request:, timeout_ms: nil)
+    sig { params(request: Models::Ops::GetTransactionsByFilingRequest, timeout_ms: T.nilable(Integer), http_headers: T.nilable(T::Hash[T.any(String, Symbol), String])).returns(T::Array[Models::Shared::TransactionRead]) }
+    def get_by_filing_id(request:, timeout_ms: nil, http_headers: nil)
       # get_by_filing_id - Get Transactions By Filing Id
       # Retrieve transactions by filing ID.
       url, params = @sdk_configuration.get_server_details
@@ -776,14 +793,14 @@ module KintsugiSDK
 
       timeout = (timeout_ms.to_f / 1000) unless timeout_ms.nil?
       timeout ||= @sdk_configuration.timeout
-      
+
 
       connection = @sdk_configuration.client
 
       hook_ctx = SDKHooks::HookContext.new(
         config: @sdk_configuration,
         base_url: base_url,
-        oauth2_scopes: [],
+        oauth2_scopes: nil,
         operation_id: 'getTransactionsByFiling',
         security_source: @sdk_configuration.security_source
       )
@@ -791,12 +808,15 @@ module KintsugiSDK
       error = T.let(nil, T.nilable(StandardError))
       http_response = T.let(nil, T.nilable(Faraday::Response))
       
-      
+
       begin
         http_response = T.must(connection).get(url) do |req|
           req.headers.merge!(headers)
           req.options.timeout = timeout unless timeout.nil?
           Utils.configure_request_security(req, security)
+          http_headers&.each do |key, value|
+            req.headers[key.to_s] = value
+          end
 
           @sdk_configuration.hooks.before_request(
             hook_ctx: SDKHooks::BeforeRequestHookContext.new(
@@ -824,13 +844,13 @@ module KintsugiSDK
             response: http_response
           )
         end
-        
+
         if http_response.nil?
           raise error if !error.nil?
           raise 'no response'
         end
       end
-      
+
       content_type = http_response.headers.fetch('Content-Type', 'application/octet-stream')
       if Utils.match_status_code(http_response.status, ['200'])
         if Utils.match_content_type(content_type, 'application/json')
@@ -898,5 +918,5 @@ module KintsugiSDK
 
       end
     end
-  end
+end
 end

data/lib/kintsugi_sdk/utils/forms.rb

@@ -104,7 +104,7 @@ module KintsugiSDK
               end
               raise StandardError, 'invalid multipart/form-data file' if T.unsafe(file_name) == '' || T.unsafe(content).nil?
 
-              form.append([field_name, [file_name, content]])
+              form.append(["#{field_name}[]", [file_name, content]])
             end
           else
             # Handle single file

data/lib/kintsugi_sdk/utils/query_params.rb

@@ -3,7 +3,6 @@
 # typed: true
 # frozen_string_literal: true
 
-require 'cgi'
 require 'date'
 require 'base64'
 require 'sorbet-runtime'
@@ -17,7 +16,10 @@ module KintsugiSDK
       parsed_params = T.let({}, T::Hash[T.any(String, Symbol), T::Array[String]])
       if !url_override.nil?
         parsed_url = URI.parse url_override
-        parsed_params = CGI.parse parsed_url.query
+        URI.decode_www_form(parsed_url.query.to_s).each do |key, value|
+          parsed_params[key] ||= []
+          T.must(parsed_params[key]) << value
+        end
       end
       params = T.let({}, T::Hash[T.any(String, Symbol), T::Array[String]])
       T.unsafe(clazz).fields.each do |f|

data/lib/kintsugi_sdk/utils/request_bodies.rb

@@ -29,8 +29,6 @@ module KintsugiSDK
 
       return serialize_content_type(SERIALIZATION_METHOD_TO_CONTENT_TYPE[serialization_method], request) if !request.respond_to?(:fields) || !request.respond_to?(request_field_name)
 
-      request_val = request.send(request_field_name)
-
       request_metadata = T.let(nil, T.nilable(T::Array[T::Array[T.any(T::Array[T.nilable(String)], String)]]))
       T.unsafe(request).fields.each do |f|
         if f.name == request_field_name
@@ -38,7 +36,14 @@ module KintsugiSDK
           break
         end
       end
-      raise StandardError, 'invalid request type' if request_metadata.nil?
+      if request_metadata.nil?
+        # Field name collision: model has a field matching request_field_name but without :request metadata.
+        # Serialize the entire object as the request body.
+        return serialize_content_type(SERIALIZATION_METHOD_TO_CONTENT_TYPE[serialization_method], request)
+      end
+
+      request_val = request.send(request_field_name)
+      return ['', nil, nil] if request_val.nil?
 
       serialize_content_type(
         request_metadata.fetch(:media_type, 'application/octet-stream'), request_val
@@ -50,9 +55,9 @@ module KintsugiSDK
         .returns([String, Object, T.nilable(T::Array[T::Array[T.any(T::Array[T.nilable(String)], String)]])])
     end
     def self.serialize_content_type(media_type, request)
-      return media_type, ::Crystalline.to_json(request), nil if media_type.match('(application|text)\/.*?\+*json.*')
-      return serialize_multipart_form(media_type, request) if media_type.match('multipart\/.*')
-      return media_type, serialize_form_data(request), nil if media_type.match('application\/x-www-form-urlencoded.*')
+      return media_type, ::Crystalline.to_json(request), nil if media_type.match('^(application|text)\/([^+]+\+)*json.*')
+      return serialize_multipart_form(media_type, request) if media_type.match('^multipart\/.*')
+      return media_type, serialize_form_data(request), nil if media_type.match('^application\/x-www-form-urlencoded.*')
       return media_type, request, nil if request.is_a?(String) || request.is_a?(Array)
 
       raise StandardError, "invalid request body type #{request.class} for mediaType #{media_type}"

data/lib/kintsugi_sdk/utils/retries.rb

@@ -80,12 +80,15 @@ module KintsugiSDK
         if @strategy == 'backoff' && @backoff
           retry_options[:backoff_factor] = @backoff.exponent unless @backoff.exponent.nil?
           retry_options[:interval] = (@backoff.initial_interval.to_f / 1000) unless @backoff.initial_interval.nil?
-          retry_options[:max_interval] = @backoff.max_interval unless @backoff.max_interval.nil?
+          retry_options[:max_interval] = (@backoff.max_interval.to_f / 1000) unless @backoff.max_interval.nil?
 
           unless @backoff.max_elapsed_time.nil?
             stop_time = initial_time + (@backoff.max_elapsed_time.to_f / 1000)
             retry_options[:retry_if] = ->(_env, _exc) { Time.now < stop_time }
           end
+
+          retry_options[:rate_limit_retry_header] = 'retry-after-ms'
+          retry_options[:header_parser_block] = ->(value) { value.to_f / 1000 }
         end
 
         retry_options

data/lib/kintsugi_sdk/utils/security.rb

@@ -12,31 +12,52 @@ module KintsugiSDK
   module Utils
     extend T::Sig
 
-    sig { params(req: Faraday::Request, security: Object).void }
-    def self.configure_request_security(req, security)
+    sig { params(req: Faraday::Request, security: Object, allowed_fields: T.nilable(T::Array[Symbol])).void }
+    def self.configure_request_security(req, security, allowed_fields = nil)
       return if security.nil?
-      T.unsafe(security).fields.each do |sec_field|
+
+      sec_fields = if allowed_fields.nil?
+        T.unsafe(security).fields
+      else
+        allowed_fields.filter_map { |name| T.unsafe(security).fields.find { |f| f.name == name } }
+      end
+
+      sec_fields.each do |sec_field|
         value = security.send(sec_field.name)
         next if value.nil?
 
         metadata = sec_field.metadata[:security]
         next if metadata.nil?
 
-        _parse_security_option(req, value) if metadata[:option]
+        if metadata[:option]
+          _parse_security_option(req, value)
+          break unless metadata[:composite]
+        end
+
+        next unless metadata[:scheme]
 
-        if metadata[:scheme]
-          # Special case for basic auth which could be a flattened struct
-          if metadata[:sub_type] == 'basic' && !value.respond_to?(:fields)
-            _parse_security_scheme(req, metadata, security)
-          else
-            _parse_security_scheme(req, metadata, value)
-          end
+        # Special case for basic auth which could be a flattened struct
+        if metadata[:sub_type] == 'basic' && !value.respond_to?(:fields)
+          _parse_security_scheme(req, metadata, security)
+        else
+          _parse_security_scheme(req, metadata, value)
         end
+        break unless metadata[:composite]
       end
     end
 
     sig { params(req: Faraday::Request, option: Object).void }
     def self._parse_security_option(req, option)
+      # Check if this option uses basic auth (needs the whole object, not individual fields)
+      first_field = T.unsafe(option).fields.first
+      if first_field
+        first_meta = first_field.metadata[:security]
+        if first_meta && first_meta[:type] == 'http' && first_meta[:sub_type] == 'basic'
+          _parse_security_scheme(req, first_meta, option)
+          return
+        end
+      end
+
       T.unsafe(option).fields.each do |opt_field|
         metadata = opt_field.metadata[:security]
         next if metadata.nil? || !metadata.include?(:scheme)

data/lib/kintsugi_sdk/utils/url.rb

@@ -24,7 +24,7 @@ module KintsugiSDK
         if serialization != ''
           serialized_params = _get_serialized_params(param_metadata, f_name, param)
           serialized_params.each do |k, v|
-            path = path.sub("{#{k}}", v.join(', '))
+            path = path.gsub("{#{k}}", v.join(', '))
           end
         else
           if param.is_a? Array
@@ -32,7 +32,7 @@ module KintsugiSDK
             param.each do |pp_val|
               pp_vals.append(pp_val.to_s)
             end
-            path = path.sub("{#{param_metadata.fetch(:field_name, f.name)}}", pp_vals.join(','))
+            path = path.gsub("{#{param_metadata.fetch(:field_name, f.name)}}", pp_vals.join(','))
           elsif param.is_a? Hash
             pp_vals = []
             param.each do |pp_key, pp_val|
@@ -44,7 +44,7 @@ module KintsugiSDK
                 pp_vals.append("#{pp_key},#{value}")
               end
             end
-            path = path.sub("{#{param_metadata.fetch(:field_name, f.name)}}", pp_vals.join(','))
+            path = path.gsub("{#{param_metadata.fetch(:field_name, f.name)}}", pp_vals.join(','))
           elsif param.class.include?(::Crystalline::MetadataFields)
             pp_vals = []
             attrs = T.unsafe(param).fields.filter { |field| field.name && param.respond_to?(field.name.to_sym) }.map(&:name)
@@ -72,9 +72,9 @@ module KintsugiSDK
                 pp_vals.append("#{parm_name},#{param_field_val}")
               end
             end
-            path = path.sub("{#{param_metadata.fetch(:field_name, f.name)}}", pp_vals.join(','))
+            path = path.gsub("{#{param_metadata.fetch(:field_name, f.name)}}", pp_vals.join(','))
           else
-            path = path.sub("{#{param_metadata.fetch(:field_name, f.name)}}", param.to_s)
+            path = path.gsub("{#{param_metadata.fetch(:field_name, f.name)}}", _encode_path_param(val_to_string(param)))
           end
         end
       end
@@ -82,6 +82,12 @@ module KintsugiSDK
       server_url.delete_suffix('/') + path
     end
 
+    # Percent-encode characters that are invalid in URI path segments
+    sig { params(value: String).returns(String) }
+    def self._encode_path_param(value)
+      value.gsub(/[<>{}\[\]|\\^`\s?#%]/) { |c| format('%%%02X', c.ord) }
+    end
+
     sig { params(url_with_params: String, params: T::Hash[Symbol, T.any(String, T::Enum)]).returns(String) }
     def self.template_url(url_with_params, params)
       params.each do |key, value|