paymos 1.5.1 → 1.5.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '085824f8d197938805072bbe261b174157877f18edaff7602221a68ad1bbca52'
-  data.tar.gz: 60d04d4f82f6baee7aa3b23953eb603213304f5022a87ab5a5ad8d04b5d507c4
+  metadata.gz: 282678405698ca18531bb7b76da1926623c28453e9ab380a0315842766ca639a
+  data.tar.gz: a7ff8402c3967ce7b56de24d990130e615b13e5aacad93ef5750917184a0d5a9
 SHA512:
-  metadata.gz: 0f05fdb1aed2a83d2f9fdbac11ecd905eb8e013d3a2d84ffbfad02bff215412528fa8c2a3cd197492d6443d46e25b7d4389b362a3b6f00bfb504daf4a011d3de
-  data.tar.gz: e7147f721cbb9d0c7230d9bdcb785e809d67d497a6da3d663e67e81b9325d6d7abd6b6ecc71046379f6e2a0fa0fb1df2840db9249dcd700e5a15f3185bddc247
+  metadata.gz: 608a21f234c78e20514dae73d8fa2e685c8a50160743b23dc9a82d4c580f8ed4bce221eb6eefddc104844165f4e5f61776f220abfc940bad72121e179cb7a02c
+  data.tar.gz: 397e8461b1ccf44093b66042319346da16900d5b141d70353551cfe67d956693647b06718c75c7faba76db5cd595bd8d1c45ecaa242ab11940836c5d64aa0ec3

data/CHANGELOG.md

@@ -2,6 +2,15 @@
 
 ## [Unreleased]
 
+## [1.5.2] - 2026-11-02
+
+- wip: snapshot shared working tree before merging main
+- fix(merge): keep both sides for 126 conflicting files (union / semantic JSON merge); Balance.razor keeps ClickToCopy ID column
+- wip(refunds): merchant refund plugin work (CMS adapters, PHP SDK, tests) - unverified WIP snapshot
+
+- **403 is no longer reported as an authentication failure.** `Paymos::PermissionError` (subclasses `Paymos::AuthenticationError`, so existing `rescue` blocks keep working) now carries every 403.
+- **Base URL must use HTTPS.** Plain HTTP is accepted only against a loopback host, which is what a local integration test points at. The API secret signs every request, so a plaintext base URL put that credential on the wire.
+
 ## [1.5.1] - 2026-11-01
 
 - refactor(invoices): remove the multiple-payment toggle

data/README.md

@@ -67,6 +67,7 @@ outcome. Creation returns 201 and an identical replay returns 200; both yield a
 `Paymos::NotFoundError` (404). List periods use RFC 3339 timestamps, and
 `paymos.refunds.each` provides the same bounded cursor iteration as invoices.
 In sandbox, use `paymos.withdrawals.simulate_completion(refund.withdrawal_id)`,
+In sandbox, use `paymos.refunds.simulate(refund.withdrawal_id, status: 'completed')`,
 then read the refund again. Refunds have their own list and do not appear in the
 ordinary withdrawals list.
 

data/lib/paymos/client.rb

@@ -37,6 +37,7 @@ module Paymos
       @timeout = timeout
       @max_retries = max_retries
       @base_delay = base_delay
+      @refund_transport_is_default = !transport
       @transport = transport || method(:default_transport)
       @clock = clock
       @sleeper = sleeper
@@ -52,6 +53,7 @@ module Paymos
 
     def request(method, path, payload: nil, query: '')
       method = method.to_s.upcase
+      refund_transport = checked_refund_transport(method, path)
       body = payload.nil? ? '' : JSON.generate(payload)
       attempts = 0
 
@@ -65,7 +67,9 @@ module Paymos
             'Accept' => 'application/json',
             'User-Agent' => "paymos-ruby/#{VERSION}"
           }
-          response = @transport.call(method, "#{@base_url}#{path}#{query}", headers, body.empty? ? nil : body, @timeout)
+          response = (refund_transport || @transport).call(
+            method, "#{@base_url}#{path}#{query}", headers, body.empty? ? nil : body, @timeout
+          )
         rescue IOError, SystemCallError, Timeout::Error, SocketError => e
           if attempts < @max_retries && SAFE_METHODS.include?(method)
             wait(attempts, nil)
@@ -79,7 +83,7 @@ module Paymos
           raise Error, 'Paymos transport returned an invalid response'
         end
 
-        if attempts < @max_retries && retryable?(method, response.status)
+        if attempts < @max_retries && retryable_request?(method, path, response.status)
           wait(attempts, header(response.headers, 'retry-after'))
           attempts += 1
           next
@@ -136,6 +140,24 @@ module Paymos
                    headers: response.to_hash.transform_values(&:first))
     end
 
+    def refund_create?(method, path)
+      method == 'POST' && path == '/v1/refunds'
+    end
+
+    def checked_refund_transport(method, path)
+      return nil unless refund_create?(method, path)
+
+      transport = @transport
+      trusted = Paymos::Client.instance_method(:default_transport).bind(self)
+      return transport if @refund_transport_is_default && trusted == transport
+
+      raise ConfigurationError, 'Refund creation requires the standard Net::HTTP transport'
+    end
+
+    def retryable_request?(method, path, status)
+      !refund_create?(method, path) && retryable?(method, status)
+    end
+
     def retryable?(method, status)
       status == 429 || (status >= 500 && SAFE_METHODS.include?(method))
     end
@@ -298,6 +320,22 @@ module Paymos
   end
 
   class Refunds < Resource
+    UNSPECIFIED_STATUS = Object.new.freeze
+    private_constant :UNSPECIFIED_STATUS
+
+    def simulate(refund_id, positional_status = UNSPECIFIED_STATUS, status: UNSPECIFIED_STATUS)
+      if positional_status.equal?(UNSPECIFIED_STATUS) == status.equal?(UNSPECIFIED_STATUS)
+        raise ArgumentError, 'Provide exactly one refund simulation status'
+      end
+
+      status = positional_status unless positional_status.equal?(UNSPECIFIED_STATUS)
+      unless %w[completed failed cancelled].include?(status)
+        raise ArgumentError, 'A terminal refund simulation status is required'
+      end
+
+      Refund.from(@client.request('POST', "/v1/sandbox/refunds/#{segment(refund_id)}/simulate", payload: { status: }))
+    end
+
     def create(invoice_id:, mode:, external_order_id:)
       values = { invoice_id:, mode:, external_order_id: }
       missing = values.select { |_name, value| !value.is_a?(String) || value.strip.empty? }.keys
@@ -307,11 +345,6 @@ module Paymos
       Refund.from(@client.request('POST', '/v1/refunds', payload: values))
     end
 
-    def simulate(refund_id, status)
-      Refund.from(@client.request('POST', "/v1/sandbox/refunds/#{segment(refund_id)}/simulate",
-                                  payload: { status: }))
-    end
-
     def get(refund_id) = Refund.from(@client.request('GET', "/v1/refunds/#{segment(refund_id)}"))
 
     def list(limit: nil, cursor: nil, invoice_id: nil, status: nil, created_from: nil, created_to: nil)

data/lib/paymos/models.rb

@@ -133,9 +133,9 @@ module Paymos
   end
 
   class Refund < Model
-    fields :withdrawal_id, :invoice_id, :mode, :external_order_id, :status, :is_final, :is_test,
+    fields :type, :project_id, :withdrawal_id, :invoice_id, :mode, :external_order_id, :status, :is_final, :is_test,
            :amount, :fee, :currency, :network, :destination_address, :first_sender, :tx_hash,
-           :explorer_url, :created_at, :completed_at, :failed_at, :cancelled_at, :type, :project_id,
+           :explorer_url, :created_at, :completed_at, :failed_at, :cancelled_at,
            required: %i[withdrawal_id invoice_id mode external_order_id status is_final is_test amount
                         currency network destination_address first_sender created_at]
   end

data/lib/paymos/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Paymos
-  VERSION = '1.5.1'
+  VERSION = '1.5.2'
 end

data/sig/paymos.rbs

@@ -276,6 +276,7 @@ module Paymos
 
   class Refunds
     def simulate: (String refund_id, String status) -> Refund
+                | (String refund_id, status: String) -> Refund
     def create: (invoice_id: String, mode: "full" | "overpayment", external_order_id: String) -> Refund
     def get: (String refund_id) -> Refund
     def list: (?limit: Integer?, ?cursor: String?, ?invoice_id: String?, ?status: String | Array[String]?, ?created_from: String?, ?created_to: String?) -> Page[Refund]

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: paymos
 version: !ruby/object:Gem::Version
-  version: 1.5.1
+  version: 1.5.2
 platform: ruby
 authors:
 - Paymos Labs