manza 0.3.0

data/lib/manza/resources/webhook_endpoints.rb

@@ -0,0 +1,67 @@
+# frozen_string_literal: true
+
+module Manza
+  module Resources
+    # Webhook endpoint configuration.
+    class WebhookEndpoints < Base
+      # GET /api/webhook_endpoints
+      def list(limit: MAX_PER_PAGE, cursor: nil)
+        list_page("api/webhook_endpoints", limit: limit, cursor: cursor)
+      end
+
+      # GET /api/webhook_endpoints/:id
+      def get(id)
+        http_get(encode_path("api/webhook_endpoints", id))
+      end
+
+      # POST /api/webhook_endpoints
+      #
+      # @param url [String] the URL to deliver events to
+      # @param events [Array<String>] event names to subscribe to
+      # @param description [String, nil]
+      def create(url:, events:, description: nil)
+        http_post(
+          "api/webhook_endpoints",
+          body: { url: url, events: events, description: description }.compact
+        )
+      end
+
+      # PATCH /api/webhook_endpoints/:id
+      #
+      # Changing `url` on the endpoint enrolled as transfer authorizer
+      # raises {Manza::ValidationError}.
+      def update(id, **attributes)
+        http_patch(encode_path("api/webhook_endpoints", id), body: attributes)
+      end
+
+      # DELETE /api/webhook_endpoints/:id
+      #
+      # A soft delete (still 204).
+      def delete(id)
+        http_delete(encode_path("api/webhook_endpoints", id))
+      end
+
+      # POST /api/webhook_endpoints/:id/test
+      def test_endpoint(id)
+        http_post(encode_path("api/webhook_endpoints", id, "test"))
+      end
+
+      # POST /api/webhook_endpoints/:id/regenerate_secret
+      #
+      # Raises {Manza::ValidationError} on the enrolled transfer authorizer.
+      def regenerate_secret(id)
+        http_post(encode_path("api/webhook_endpoints", id, "regenerate_secret"))
+      end
+
+      # POST /api/webhook_endpoints/:id/enable
+      def enable(id)
+        http_post(encode_path("api/webhook_endpoints", id, "enable"))
+      end
+
+      # POST /api/webhook_endpoints/:id/disable
+      def disable(id)
+        http_post(encode_path("api/webhook_endpoints", id, "disable"))
+      end
+    end
+  end
+end

data/lib/manza/response.rb

@@ -0,0 +1,64 @@
+# frozen_string_literal: true
+
+module Manza
+  # Wraps a Faraday response with the few helpers callers actually
+  # want. Cheap value object — no parsing or normalization is done
+  # eagerly; `body`, `data`, `headers` all read straight through.
+  #
+  # The SDK's resource methods return one of these directly when the
+  # endpoint is a single-record fetch. List endpoints return a
+  # {Manza::Page} instead, which composes a Response.
+  class Response
+    attr_reader :raw, :request_id
+
+    def initialize(raw, request_id: nil)
+      @raw = raw
+      @request_id = request_id || raw.headers["x-request-id"]
+    end
+
+    def status
+      raw.status
+    end
+
+    def headers
+      raw.headers
+    end
+
+    def body
+      raw.body
+    end
+
+    def success?
+      status.between?(200, 299)
+    end
+
+    # Returns the response body without the `data` envelope when one
+    # is present. List endpoints wrap their items in `{"data": [...]}`
+    # — this returns the array. Single-record endpoints return the
+    # body as-is.
+    def data
+      return body unless body.is_a?(Hash)
+
+      body.key?("data") ? body["data"] : body
+    end
+
+    # The Manza-Version header echoed by the server, or the legacy
+    # Zazu-Version one. Useful for debugging migration mismatches.
+    def api_version
+      headers["manza-version"] || headers["zazu-version"]
+    end
+
+    def to_h
+      {
+        status:,
+        request_id:,
+        api_version:,
+        body:
+      }.compact
+    end
+
+    def inspect
+      "#<#{self.class.name} status=#{status} request_id=#{request_id.inspect}>"
+    end
+  end
+end

data/lib/manza/transfer_authorization.rb

@@ -0,0 +1,55 @@
+# frozen_string_literal: true
+
+require "openssl"
+
+module Manza
+  # Signs a machine-authorization challenge for an API-created transfer
+  # draft. Pure functions — no HTTP.
+  #
+  # The `payment.authorization_requested` webhook delivers the
+  # authorization id and a one-time nonce. Build the signature input
+  # from your *own* record of the transfer (not the webhook's
+  # `signature_input`, which is there only to compare against), sign
+  # it with the authorizer endpoint's signing secret, and pass the
+  # result to {Resources::TransferDrafts#authorize}:
+  #
+  #   input = Manza::TransferAuthorization.signature_input(
+  #     payment_id: draft["id"], nonce: nonce, amount: draft["amount"],
+  #     currency_code: draft["currency_code"], account_id: draft["account_id"],
+  #     payee: Manza::TransferAuthorization.payee_for(external_account_id: draft["external_account_id"]),
+  #     client_reference: draft["client_reference"]
+  #   )
+  #   signature = Manza::TransferAuthorization.sign(secret: signing_secret, signature_input: input)
+  #   manza.transfer_drafts.authorize(draft["id"], authorization_id: authorization_id, signature: signature)
+  module TransferAuthorization
+    SIGNATURE_VERSION = "manza.transfer-authorization.v1"
+
+    module_function
+
+    # `amount` must be the API's decimal string verbatim (e.g. "2500.0").
+    # `client_reference` is empty when the transfer has none.
+    def signature_input(payment_id:, nonce:, amount:, currency_code:, account_id:, payee:, client_reference: nil)
+      raise Manza::ArgumentError, "amount must be the API's decimal string (got #{amount.inspect})" unless amount.is_a?(String)
+
+      [
+        SIGNATURE_VERSION, payment_id, nonce, amount, currency_code, account_id, payee, client_reference.to_s
+      ].join("|")
+    end
+
+    # Hex HMAC-SHA256 of the signature input under the authorizer
+    # endpoint's signing secret.
+    def sign(secret:, signature_input:)
+      OpenSSL::HMAC.hexdigest("SHA256", secret, signature_input)
+    end
+
+    # The payee token: `ext:<id>` for a beneficiary's bank account,
+    # `own:<id>` for one of the entity's own accounts. Pass exactly one.
+    def payee_for(external_account_id: nil, destination_account_id: nil)
+      unless external_account_id.nil? ^ destination_account_id.nil?
+        raise Manza::ArgumentError, "pass exactly one of external_account_id or destination_account_id"
+      end
+
+      destination_account_id ? "own:#{destination_account_id}" : "ext:#{external_account_id}"
+    end
+  end
+end

data/lib/manza/version.rb

@@ -0,0 +1,5 @@
+# frozen_string_literal: true
+
+module Manza
+  VERSION = "0.3.0"
+end

data/lib/manza.rb

@@ -0,0 +1,35 @@
+# frozen_string_literal: true
+
+# Ruby SDK for the Manza API.
+#
+# Usage:
+#
+#   manza = Manza.new(api_key: ENV["MANZA_API_KEY"])
+#   manza.entity.get
+#   manza.accounts.list(limit: 50)
+#
+# See README.md for full documentation.
+module Manza
+  # Module-level shortcut. Equivalent to Manza::Client.new(...).
+  def self.new(**)
+    Client.new(**)
+  end
+end
+
+require_relative "manza/version"
+require_relative "manza/errors"
+require_relative "manza/response"
+require_relative "manza/page"
+require_relative "manza/transfer_authorization"
+require_relative "manza/resources/base"
+require_relative "manza/resources/accounts"
+require_relative "manza/resources/beneficiaries"
+require_relative "manza/resources/checkout_sessions"
+require_relative "manza/resources/customers"
+require_relative "manza/resources/entity"
+require_relative "manza/resources/invoices"
+require_relative "manza/resources/payee_trust_requests"
+require_relative "manza/resources/payment_links"
+require_relative "manza/resources/transfer_drafts"
+require_relative "manza/resources/webhook_endpoints"
+require_relative "manza/client"

metadata

@@ -0,0 +1,110 @@
+--- !ruby/object:Gem::Specification
+name: manza
+version: !ruby/object:Gem::Version
+  version: 0.3.0
+platform: ruby
+authors:
+- Manza
+bindir: bin
+cert_chain: []
+date: 1980-01-02 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: faraday
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+- !ruby/object:Gem::Dependency
+  name: faraday-retry
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+- !ruby/object:Gem::Dependency
+  name: httpx
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+description: Faraday-based Ruby SDK for the Manza payment platform API. Wraps accounts,
+  customers, invoices, payment links, transactions, and webhook endpoints. HTTPX adapter
+  for HTTP/2 + persistent connections.
+email:
+- hello@get-manza.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- CHANGELOG.md
+- LICENSE
+- README.md
+- lib/manza.rb
+- lib/manza/client.rb
+- lib/manza/errors.rb
+- lib/manza/page.rb
+- lib/manza/resources/accounts.rb
+- lib/manza/resources/base.rb
+- lib/manza/resources/beneficiaries.rb
+- lib/manza/resources/checkout_sessions.rb
+- lib/manza/resources/customers.rb
+- lib/manza/resources/entity.rb
+- lib/manza/resources/invoices.rb
+- lib/manza/resources/payee_trust_requests.rb
+- lib/manza/resources/payment_links.rb
+- lib/manza/resources/transfer_drafts.rb
+- lib/manza/resources/webhook_endpoints.rb
+- lib/manza/response.rb
+- lib/manza/transfer_authorization.rb
+- lib/manza/version.rb
+homepage: https://github.com/getmanza/manza-ruby
+licenses:
+- MIT
+metadata:
+  source_code_uri: https://github.com/getmanza/manza-ruby/tree/main
+  changelog_uri: https://github.com/getmanza/manza-ruby/blob/main/CHANGELOG.md
+  bug_tracker_uri: https://github.com/getmanza/manza-ruby/issues
+  documentation_uri: https://github.com/getmanza/manza-ruby#readme
+  rubygems_mfa_required: 'true'
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: 3.3.0
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 4.0.6
+specification_version: 4
+summary: Ruby SDK for the Manza API
+test_files: []