rail0-sdk 1.2.0 → 1.3.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 60c25c2843d57ee49df3b17267e56a612f56701d61e48430786b1c6435987eb9
-  data.tar.gz: d8ef2d01d59b1a775f116753608bba6ab90d0d868a360040c0bc8fdc64f64de0
+  metadata.gz: 23d06a854473333eb6779af7bcec4ea5d370ab9c24106cef8a1db9809ca29803
+  data.tar.gz: b6a28727e25233378a5c39feceb00f7a638d44590a8f9f01f356e1e6e0d35f91
 SHA512:
-  metadata.gz: e7e6441337f7daf05f4e55ba22d94a380755f5775fd203b0699e8f16029fc493c88e9863a81e2d1559e71c383db7b79330503cd724c2219dd0a1b169badfac81
-  data.tar.gz: 943a28ce8740139e30e4966ce1021b9a85271789418a2274d505a6457733a09e8cc84c3c8f435ff34962dec3ed7e5beded3fc0f7cec131de626d8e5d6535fc5d
+  metadata.gz: fdb399b1895e43ef062221da06357db402bb59fc746a36d6a21499d9ac82625723db5dc454cb8c46cb1e77e4889d05b00f8497da9d858a0e8f470e286c29f4a4
+  data.tar.gz: 7f329e33476a42b6d3304c3a1978dab10425740a460d2f6a066660ce9f67e24399c81d783372d65172b5247e670362970f82ddbf16e7fb7d5c7a5172e8fb9e8b

data/README.md

@@ -237,13 +237,30 @@ logging — it says exactly which sessions died, which `revoked_all: true` canno
 ## Catalog (public)
 
 ```ruby
-client.chains.list                                    # GET /blockchains (each chain's :contract is the active RAIL0 deployment)
+client.chains.list                                    # GET /blockchains (each chain's :contract is the active RAIL0 deployment, :settlement its measured confirm time)
 client.chains.list(network_type: "testnet", symbol: "ETH")
 client.tokens.list                                    # GET /tokens — every token, retired ones included
 client.tokens.list(chain_id: 84532, symbol: "USDC")
 client.tokens.list(active: true)                      # what a NEW payment may use
 ```
 
+Each chain's `settlement` is how long an operation on it has taken to confirm **on this
+gateway**, end to end (the chain's finality lag plus the gateway/indexer pipeline):
+`{ p50_seconds:, p90_seconds:, sample_size:, window_days: }`, percentiles of broadcast →
+confirmation over the trailing `window_days`, in whole seconds rounded up. It is always
+present, but the percentiles are `nil` below the gateway's minimum sample (20), so size a
+polling deadline from it with a fixed fallback:
+
+```ruby
+FALLBACK = 15 * 60 # seconds
+chain    = client.chains.list.find { |c| c[:chain_id] == 84532 }
+p90      = chain.dig(:settlement, :p90_seconds)
+deadline = Process.clock_gettime(Process::CLOCK_MONOTONIC) + (p90 ? [3 * p90, FALLBACK].max : FALLBACK)
+```
+
+It is a trailing-window measurement (a capacity figure, cached by the gateway for 10
+minutes), not a promise, so treat it as a hint and never as a timeout that fails a payment.
+
 `tokens.list` without `active:` is the **historical** catalogue — a payment references its
 token forever, so a retired one must still resolve. A checkout picker should pass
 `active: true`: `payments.create` answers 422 `unknown_token` for a retired token.
@@ -362,8 +379,10 @@ client.payments.create(params, idempotency_key: nil)  # or keyword fields
 # "idempotency_key_reused" (422) instead of returning the first payment.
 client.payments.get(id)
 client.payments.list(status: "authorized", disputed: false, chain_id: 84532, sort: "-created_at")
+client.payments.list(status: %w[authorized expired])  # any of several states → ?status=authorized,expired
 client.payments.list(operation: "refund")            # payments with at least one refund transaction
 client.payments.transactions(id, operation: "capture")
+client.payments.transactions(id, status: %w[submitting submitted])  # on its way to the chain
 # `operation` on both takes Payments::TRANSACTION_OPERATIONS — dispute and close_dispute included.
 client.payments.redrive(id, transaction_id)           # re-enqueue a stuck broadcast
 # Offer `redrive` on the row's `redrivable` flag — the same predicate the gateway guards
@@ -387,10 +406,29 @@ client.disputes.list(status: "closed", sort: "-opened_at")
 `payments.list`/`transactions`/`disputes` and `disputes.list` return a paginated
 `{ data:, meta: { page:, per_page:, total: } }` envelope.
 
-Every payment row carries `chain_id`, list rows included. You need it to display
-an amount: `amount` is in base units and the token's decimals resolve from
-`token` **plus** its chain — an address alone identifies a token only within one
-chain — so a listing never needs a `get(id)` per row to render totals.
+`status:` on `payments.list` and `payments.transactions` takes one value or an Array; an
+Array is sent comma-separated and matches **any** of the listed states. An empty Array is
+dropped like `nil` (no filter). An unknown value raises `Rail0::ApiError` 400
+`validation_failed`, naming it. Any query filter given an Array is sent the same way.
+
+Every payment row carries `chain_id` and `decimals`, list rows included (and the payment
+embedded in `disputes.list`). Amounts (`amount`, `capturable_amount`, `refundable_amount`)
+are in base units: divide by `10**decimals` to render them, with no `tokens.list` join and no
+`get(id)` per row. `decimals` is `nil` only when the gateway cannot resolve the token (a
+contract it has not loaded, a token deleted outright). Fall back to `tokens.list` then,
+matching on `token` **plus** `chain_id`, since an address alone identifies a token only
+within one chain.
+
+```ruby
+BigDecimal(row[:amount]) / (10**row[:decimals])  # "100000000", 6 → 100.0
+```
+
+Every payment row also carries `in_flight`: `true` while one of its transactions is on its
+way to the chain, meaning `submitting`, `submitted`, or `pending` holding its signed
+transaction (the `redrivable` rows). A `pending` row still waiting for its signature does not
+count, nor do `confirmed`/`failed` rows. While it is true the balances are about to move, so
+disable further actions on the payment. It comes on list rows too, which embed no
+transactions, so a bulk action can skip busy rows without a `get(id)` each.
 
 ### Refund (two-phase EIP-3009)
 
@@ -462,6 +500,25 @@ client.webhooks.redeliver(id, callback_id)  # 202 { status: "queued" } — repla
 client.webhooks.delete(id)           # 204
 ```
 
+Every delivery's `payment` object carries `capturable_amount` (base units) and
+`authorization_expiry` (epoch seconds), whatever the topic. That is what makes
+`payments.authorization_expiring` actionable. The gateway sends it **once per payment**, a
+configurable notice (24h by default) before `authorization_expiry`, for a payment that can
+still be captured (`authorized`, `partially_captured`, `partially_refunded`) and still holds
+escrow. It is the last chance to capture; `payments.expired` says the chance has gone. Its
+`transaction` is `null`, and the time left is `authorization_expiry` minus the event's
+`emitted_at` (ISO-8601). There is no separate field for it because it would be stale on
+every retry:
+
+```ruby
+event = JSON.parse(raw, symbolize_names: true)
+if event[:topic] == "payments.authorization_expiring"
+  payment   = event[:payment]
+  secs_left = payment[:authorization_expiry] - Time.iso8601(event[:emitted_at]).to_i
+  # capture payment[:capturable_amount] (base units) within secs_left, or let it expire
+end
+```
+
 `redeliver` replays a recorded delivery's exact payload — the same event id, so a receiver
 that already processed it deduplicates — under a fresh signature. It is the way back for
 events lost while the circuit breaker was open. Delivery is async and the dispatcher drops
@@ -713,6 +770,17 @@ RAIL0 itself:
 A failed transaction carries the same triple as `error_code`, `error_title` and
 `error_detail`, whether it reverted on-chain or was refused before broadcast.
 
+### Ids in request paths
+
+Every id (and operation name) a method interpolates into a request path is
+percent-encoded as ONE path segment, so a value carrying `/`, `?`, `#`, a space or
+non-ASCII characters can never address a different route than the method names
+(`payments.get("../webhooks/x")` requests `/payments/..%2Fwebhooks%2Fx`, not
+`/webhooks/x`). The ids the gateway hands out — UUIDs, `0x` hex — are unchanged by it.
+A value that is `nil`, empty, `"."` or `".."` is never a valid id, and would still
+re-target the request once encoded, so the method raises `ArgumentError` before
+sending anything.
+
 ## Configuration
 
 ```ruby
@@ -797,7 +865,7 @@ lib/rail0/
     accounts.rb        the caller's own account profile, read and update (JWT)
     webhooks.rb        webhook subscription management (JWT)
     analytics.rb       account-scoped payment analytics (JWT)
-    query.rb           shared query-string helper
+    query.rb           shared query-string and path-segment helpers
 ```
 
 ## Development

data/lib/rail0/resources/accounts.rb

@@ -1,5 +1,7 @@
 # frozen_string_literal: true
 
+require_relative "query"
+
 module Rail0
   module Resources
     # The merchant account itself (requires JWT).
@@ -17,6 +19,8 @@ module Rail0
     # {Resources::Wallets}; buyer-facing discovery of what a merchant accepts lives on
     # {Resources::PaymentMethods}.
     class Accounts
+      include Query
+
       attr_reader :http
 
       def initialize(http)
@@ -29,7 +33,7 @@ module Rail0
       # @return [Hash] `id`, `name`, `email`, `created_at`, `updated_at`. `email` is part of
       #   the response because only the account's owner, or an operator, can read it.
       def get(account_id)
-        http.get("/accounts/#{account_id}")
+        http.get("/accounts/#{segment(account_id)}")
       end
 
       # Update the account's own profile (PATCH /accounts/:account_id).
@@ -55,7 +59,7 @@ module Rail0
         body[:email] = email unless email.nil?
         raise ArgumentError, "at least one of name or email is required" if body.empty?
 
-        http.patch("/accounts/#{account_id}", body)
+        http.patch("/accounts/#{segment(account_id)}", body)
       end
     end
   end

data/lib/rail0/resources/chains.rb

@@ -22,7 +22,13 @@ module Rail0
       #   required_confirmations, finality_tag (the settlement rule: the tag where the
       #   chain serves one, the count only where it does not), and contract — the chain's
       #   active RAIL0 deployment as `{ address:, version:, deployed_at: }` (what holds
-      #   the money; nullable in principle, present in practice)
+      #   the money; nullable in principle, present in practice), and settlement — how long
+      #   an operation on the chain has taken to confirm ON THIS GATEWAY, as
+      #   `{ p50_seconds:, p90_seconds:, sample_size:, window_days: }`: broadcast-to-confirmation
+      #   percentiles (whole seconds, rounded up) over the trailing `window_days`. Always
+      #   present; the percentiles are nil below the gateway's minimum sample (20), so check
+      #   `sample_size` and keep a fixed fallback. A wait-deadline hint (e.g. 3 × p90_seconds,
+      #   floored at your fallback), not a guarantee.
       def list(network_type: nil, symbol: nil)
         http.get("/blockchains#{build_query(network_type: network_type, symbol: symbol)}")
       end

data/lib/rail0/resources/payments.rb

@@ -32,7 +32,9 @@ module Rail0
 
       # List payments for the authenticated wallet (requires JWT). Returns
       # payments where the caller is the payer or payee.
-      # @param status [String, nil] Filter by payment status.
+      # @param status [String, Array<String>, nil] Filter by payment status: one state, or
+      #   an Array matching ANY of them (sent comma-separated, `status=authorized,expired`).
+      #   An unknown value is 400 `validation_failed` naming it.
       # @param mode [String, nil] Filter by mode ("authorize" or "charge").
       # @param payer [String, nil] Filter by payer address.
       # @param payee [String, nil] Filter by payee address.
@@ -52,7 +54,12 @@ module Rail0
       # @param sort [String, nil] Comma-separated sort fields; prefix with - for desc.
       # @param page [Integer, nil] Page number (1-based; 1..1,000,000, 400 outside).
       # @param per_page [Integer, nil] Items per page (max 100).
-      # @return [Hash] { data: Array<Hash>, meta: { page:, per_page:, total: } }
+      # @return [Hash] { data: Array<Hash>, meta: { page:, per_page:, total: } }. Each row
+      #   carries, besides the payment fields, `chain_id`, `decimals` (Integer, or nil when
+      #   the gateway can't resolve the token — fall back to {Tokens#list} then) to render the
+      #   base-unit amounts without a token lookup, and `in_flight` (Boolean: a transaction is
+      #   `submitting`, `submitted`, or `pending` holding its signed transaction — disable
+      #   further actions on the row while true).
       def list(status: nil, mode: nil, payer: nil, payee: nil, token: nil, rail0_id: nil,
                chain_id: nil, disputed: nil, operation: nil, min_amount: nil, max_amount: nil,
                created_from: nil, created_to: nil, sort: nil, page: nil, per_page: nil)
@@ -88,23 +95,26 @@ module Rail0
 
       # Fetch current payment state (DB status + live on-chain amounts + transactions).
       # @param id [String] Payment UUID or rail0_id.
-      # @return [Hash]
+      # @return [Hash] The payment with its embedded transactions, including `decimals`
+      #   (Integer or nil — divide `amount`, `capturable_amount` and `refundable_amount` by
+      #   10**decimals to render them) and `in_flight` (Boolean — see {list}).
       def get(id)
-        http.get("/payments/#{id}")
+        http.get("/payments/#{segment(id)}")
       end
 
       # List on-chain transactions for a payment.
       # @param id [String] Payment UUID or rail0_id.
       # @param operation [String, nil] Filter by operation (see {TRANSACTION_OPERATIONS} —
       #   dispute and close_dispute included).
-      # @param status [String, nil] Filter by transaction status.
+      # @param status [String, Array<String>, nil] Filter by transaction status: one, or an
+      #   Array matching any of them (`%w[submitting submitted]` = on its way to the chain).
       # @param sort [String, nil] Comma-separated sort fields; prefix with - for desc.
       # @param page [Integer, nil] Page number (1-based; 1..1,000,000, 400 outside).
       # @param per_page [Integer, nil] Items per page (max 100).
       # @return [Hash] { data: Array<Hash>, meta: { page:, per_page:, total: } }
       def transactions(id, operation: nil, status: nil, sort: nil, page: nil, per_page: nil)
         query = build_query(operation: operation, status: status, sort: sort, page: page, per_page: per_page)
-        http.get_list("/payments/#{id}/transactions#{query}")
+        http.get_list("/payments/#{segment(id)}/transactions#{query}")
       end
 
       # Fetch ONE of a payment's transactions
@@ -120,7 +130,7 @@ module Rail0
       # @param transaction_id [String] Transaction UUID.
       # @return [Hash]
       def get_transaction(id, transaction_id)
-        http.get("/payments/#{id}/transactions/#{transaction_id}")
+        http.get("/payments/#{segment(id)}/transactions/#{segment(transaction_id)}")
       end
 
       # Re-enqueue a stuck broadcast
@@ -143,7 +153,7 @@ module Rail0
       # @param transaction_id [String] The transaction row to redrive.
       # @return [Hash] The transaction, re-enqueued.
       def redrive(id, transaction_id)
-        http.post("/payments/#{id}/transactions/#{transaction_id}/redrive", {})
+        http.post("/payments/#{segment(id)}/transactions/#{segment(transaction_id)}/redrive", {})
       end
 
       # Submit the payer's EIP-712 signature (PUT /payments/{id}/sign).
@@ -151,7 +161,7 @@ module Rail0
       # @param params [Hash] { signature: "0x…" } (65-byte 0x-prefixed hex).
       # @return [Hash]
       def sign(id, params)
-        http.put("/payments/#{id}/sign", params)
+        http.put("/payments/#{segment(id)}/sign", params)
       end
 
       # List a payment's dispute open/close history.
@@ -163,7 +173,7 @@ module Rail0
       # @return [Hash] { data: Array<Hash>, meta: { page:, per_page:, total: } }
       def disputes(id, status: nil, sort: nil, page: nil, per_page: nil)
         query = build_query(status: status, sort: sort, page: page, per_page: per_page)
-        http.get_list("/payments/#{id}/disputes#{query}")
+        http.get_list("/payments/#{segment(id)}/disputes#{query}")
       end
 
       # Build the unsigned transaction for an operation
@@ -183,7 +193,7 @@ module Rail0
       # with different terms is refused 422 +idempotency_key_reused+. Scoped to this
       # payment. (rail0-gateway#331)
       def prepare(id, operation, body = nil, idempotency_key: nil)
-        http.post("/payments/#{id}/#{operation}/prepare", body,
+        http.post("/payments/#{segment(id)}/#{segment(operation)}/prepare", body,
                   headers: idempotency_headers(idempotency_key))
       end
 
@@ -193,7 +203,7 @@ module Rail0
       # @param params [Hash] { signed_transaction: "0x…" }.
       # @return [Hash]
       def submit(id, operation, params)
-        http.post("/payments/#{id}/#{operation}", params)
+        http.post("/payments/#{segment(id)}/#{segment(operation)}", params)
       end
 
       # Record a transaction the caller broadcast themselves (MetaMask/wallet flow)
@@ -203,7 +213,7 @@ module Rail0
       # @param params [Hash] { transaction_hash: "0x…" }.
       # @return [Hash]
       def submit_by_hash(id, operation, params)
-        http.post("/payments/#{id}/#{operation}/submitted", params)
+        http.post("/payments/#{segment(id)}/#{segment(operation)}/submitted", params)
       end
 
       # Phase 1 — build the unsigned authorize() transaction (escrow hold).
@@ -292,7 +302,7 @@ module Rail0
       # @param params [Hash] { signed_transaction: "0x…" }.
       # @return [Hash]
       def dispute(id, params)
-        http.post("/payments/#{id}/dispute", params)
+        http.post("/payments/#{segment(id)}/dispute", params)
       end
 
       # Phase 1 — build the unsigned closeDispute() transaction (payer only).
@@ -308,7 +318,7 @@ module Rail0
       # @param params [Hash] { signed_transaction: "0x…" }.
       # @return [Hash]
       def close_dispute(id, params)
-        http.post("/payments/#{id}/dispute/close", params)
+        http.post("/payments/#{segment(id)}/dispute/close", params)
       end
 
       # The payer's counterpart to {#submit_by_hash}, which covers only the operations
@@ -326,7 +336,7 @@ module Rail0
       # @param params [Hash] { transaction_hash: "0x…" }.
       # @return [Hash]
       def dispute_submit_by_hash(id, params)
-        http.post("/payments/#{id}/dispute/submitted", params)
+        http.post("/payments/#{segment(id)}/dispute/submitted", params)
       end
 
       # Report an already-broadcast close-dispute transaction by hash (payer only); HTTP 202.
@@ -334,14 +344,17 @@ module Rail0
       # @param params [Hash] { transaction_hash: "0x…" }.
       # @return [Hash]
       def close_dispute_submit_by_hash(id, params)
-        http.post("/payments/#{id}/dispute/close/submitted", params)
+        http.post("/payments/#{segment(id)}/dispute/close/submitted", params)
       end
 
       private
 
+      # +path+ is one of this class's own literals ("dispute/prepare",
+      # "dispute/close/prepare"), never caller input, so it is interpolated as-is:
+      # its `/` is meant to separate segments. Only +id+ goes through {#segment}.
       def prepare_dispute(path, id, reason, idempotency_key: nil)
         body = reason ? { reason: reason } : {}
-        http.post("/payments/#{id}/#{path}", body,
+        http.post("/payments/#{segment(id)}/#{path}", body,
                   headers: idempotency_headers(idempotency_key))
       end
 

data/lib/rail0/resources/query.rb

@@ -1,19 +1,83 @@
 # frozen_string_literal: true
 
 require "cgi"
+require "erb"
 
 module Rail0
   module Resources
-    # Shared query-string builder for resource classes. Included so every
-    # resource turns keyword filters into a URL query the same way: nil values
-    # are dropped, and booleans/integers are stringified.
+    # Shared URL builders for resource classes. Included so every resource turns
+    # keyword filters into a URL query the same way (nil values are dropped,
+    # booleans/integers are stringified) and escapes every caller-supplied path
+    # segment the same way ({#segment}).
     module Query
+      # Segments that would not stay put once interpolated: "." and ".." are dot
+      # segments that a URL normaliser (a proxy, a CDN, the server's router) may
+      # resolve away, and an empty one collapses the path onto its parent.
+      UNSAFE_SEGMENTS = ["", ".", ".."].freeze
+      private_constant :UNSAFE_SEGMENTS
+
       private
 
+      # Escapes ONE caller-supplied value for interpolation into a request path:
+      #
+      #   http.get("/payments/#{segment(id)}/transactions/#{segment(transaction_id)}")
+      #
+      # Paths used to be plain interpolation, so an id was pasted in raw: one
+      # containing `/`, `?`, `#` or `..` addressed a different route than the method
+      # named — `payments.get("../webhooks/x")` was a GET on /webhooks/x with the
+      # caller's token. The ids this SDK is handed normally come from the gateway, but
+      # a caller that forwards one from a URL (a proxy route, a CLI argument) passes
+      # along whatever it was given.
+      #
+      # ERB::Util.url_encode percent-encodes everything outside the RFC 3986
+      # unreserved set (A-Z a-z 0-9 - . _ ~), UTF-8 byte by byte, with a space as
+      # %20 — the path-correct form (CGI.escape, used for queries, would turn a
+      # space into `+`, which in a path is a literal plus). For the values legitimately
+      # passed (UUIDs, 0x hex, operation names, integer ids) it changes nothing. This
+      # matches rail0-ts's `path` tag, which uses encodeURIComponent.
+      #
+      # A value that is exactly "", "." or ".." raises ArgumentError instead: encoding
+      # leaves the dots as they are (they are unreserved), so the segment would still
+      # be a dot segment, and an empty one silently re-targets the parent route
+      # (`payments.get("")` would list payments). None of them is a valid id, so
+      # failing before the request is the only honest answer.
+      #
+      # @param value [#to_s] The id (or other caller-supplied value) to interpolate.
+      # @return [String] The percent-encoded segment.
+      # @raise [ArgumentError] If the value is nil, empty, "." or "..".
+      def segment(value)
+        str = value.to_s
+        if value.nil? || UNSAFE_SEGMENTS.include?(str)
+          raise ArgumentError, "invalid path segment #{value.inspect}: an id must not be nil, empty, \".\" or \"..\""
+        end
+
+        ERB::Util.url_encode(str)
+      end
+
+      # Builds "?k=v&…" from keyword filters, or "" when every value is nil.
+      #
+      # An Array value becomes ONE comma-separated pair (`status: %w[a b]` →
+      # `status=a,b`): the gateway's multi-value filters (e.g. `status` on
+      # GET /payments, #367) take the comma form. Each element is escaped on its
+      # own and the separating comma is left literal, so a comma can never leak
+      # in from an element. nil elements are dropped; an Array left empty drops
+      # the whole pair, the same as nil, rather than sending a blank `status=`
+      # the gateway would reject with 400.
       def build_query(**params)
-        pairs = params.compact.map { |k, v| "#{k}=#{CGI.escape(v.to_s)}" }
+        pairs = params.filter_map do |k, v|
+          value = query_value(v)
+          "#{k}=#{value}" unless value.nil?
+        end
         pairs.empty? ? "" : "?#{pairs.join('&')}"
       end
+
+      def query_value(value)
+        return nil if value.nil?
+        return CGI.escape(value.to_s) unless value.is_a?(Array)
+
+        items = value.compact
+        items.map { |item| CGI.escape(item.to_s) }.join(",") unless items.empty?
+      end
     end
   end
 end

data/lib/rail0/resources/wallets.rb

@@ -38,7 +38,7 @@ module Rail0
         query = build_query(chain_id: chain_id, token_symbol: token_symbol, active: active,
                             default: default, token_active: token_active,
                             sort: sort, page: page, per_page: per_page)
-        http.get_list("/accounts/#{account_id}/wallets#{query}")
+        http.get_list("/accounts/#{segment(account_id)}/wallets#{query}")
       end
 
       # Fetch a single wallet by its id or 0x address.
@@ -46,7 +46,7 @@ module Rail0
       # @param id_or_address [String] Wallet UUID or 0x address.
       # @return [Hash] id, address, label, active
       def get(account_id, id_or_address)
-        http.get("/accounts/#{account_id}/wallets/#{id_or_address}")
+        http.get(wallet_path(account_id, id_or_address))
       end
 
       # Add a wallet to the account.
@@ -74,7 +74,7 @@ module Rail0
       def create(account_id, address:, message:, signature:, label: nil)
         body = { address: address, message: message, signature: signature }
         body[:label] = label unless label.nil?
-        http.post("/accounts/#{account_id}/wallets", body)
+        http.post("/accounts/#{segment(account_id)}/wallets", body)
       end
 
       # Update a wallet's label and/or active status.
@@ -87,7 +87,7 @@ module Rail0
         body = {}
         body[:label]  = label  unless label.nil?
         body[:active] = active unless active.nil?
-        http.patch("/accounts/#{account_id}/wallets/#{id_or_address}", body)
+        http.patch(wallet_path(account_id, id_or_address), body)
       end
 
       # Soft-delete (deactivate) a wallet. Returns HTTP 204.
@@ -95,7 +95,7 @@ module Rail0
       # @param id_or_address [String] Wallet UUID or 0x address.
       # @return [nil]
       def delete(account_id, id_or_address)
-        http.delete("/accounts/#{account_id}/wallets/#{id_or_address}")
+        http.delete(wallet_path(account_id, id_or_address))
       end
 
       # Read a wallet's live on-chain balances across the configured chains. Each
@@ -109,7 +109,7 @@ module Rail0
       # @return [Hash] wallet_id, address, balances
       def balances(account_id, id_or_address, chain_id: nil, token_symbol: nil)
         query = build_query(chain_id: chain_id, token_symbol: token_symbol)
-        http.get("/accounts/#{account_id}/wallets/#{id_or_address}/balances#{query}")
+        http.get("#{wallet_path(account_id, id_or_address)}/balances#{query}")
       end
 
       # ── Token holdings ────────────────────────────────────────────────────────
@@ -133,7 +133,7 @@ module Rail0
       def add_token(account_id, id_or_address, chain_id:, token:, default: nil)
         body = { chain_id: chain_id, token: token }
         body[:default] = default unless default.nil?
-        http.post("/accounts/#{account_id}/wallets/#{id_or_address}/tokens", body)
+        http.post("#{wallet_path(account_id, id_or_address)}/tokens", body)
       end
 
       # Stop accepting a token on this wallet (soft delete). Returns HTTP 204.
@@ -150,13 +150,13 @@ module Rail0
       #
       # @return [nil]
       def remove_token(account_id, id_or_address, token_id)
-        http.delete("/accounts/#{account_id}/wallets/#{id_or_address}/tokens/#{token_id}")
+        http.delete("#{wallet_path(account_id, id_or_address)}/tokens/#{segment(token_id)}")
       end
 
       # Re-enable an existing token holding.
       # @return [Hash] the token holding
       def enable_token(account_id, id_or_address, token_id)
-        http.patch("/accounts/#{account_id}/wallets/#{id_or_address}/tokens/#{token_id}/enable")
+        http.patch("#{wallet_path(account_id, id_or_address)}/tokens/#{segment(token_id)}/enable")
       end
 
       # Disable an existing token holding without forgetting it — the holding (and
@@ -166,7 +166,15 @@ module Rail0
       # active default holding — promote another token to default first.
       # @return [Hash] the token holding
       def disable_token(account_id, id_or_address, token_id)
-        http.patch("/accounts/#{account_id}/wallets/#{id_or_address}/tokens/#{token_id}/disable")
+        http.patch("#{wallet_path(account_id, id_or_address)}/tokens/#{segment(token_id)}/disable")
+      end
+
+      private
+
+      # "/accounts/{account_id}/wallets/{id_or_address}" with both ids escaped by
+      # {Query#segment} — the prefix every single-wallet route shares.
+      def wallet_path(account_id, id_or_address)
+        "/accounts/#{segment(account_id)}/wallets/#{segment(id_or_address)}"
       end
     end
   end

data/lib/rail0/resources/webhooks.rb

@@ -25,6 +25,7 @@ module Rail0
         payments.voided
         payments.released
         payments.refunded
+        payments.authorization_expiring
         payments.expired
         payments.failed
         payments.disputed
@@ -70,7 +71,7 @@ module Rail0
       # @param id [String] Webhook UUID.
       # @return [Hash]
       def get(id)
-        http.get("/webhooks/#{id}")
+        http.get("/webhooks/#{segment(id)}")
       end
 
       # Update a webhook's name, callback_url, and/or topics.
@@ -86,35 +87,35 @@ module Rail0
         body[:name]         = name          unless name.nil?
         body[:callback_url] = callback_url  unless callback_url.nil?
         body[:topics]       = Array(topics) unless topics.nil?
-        http.patch("/webhooks/#{id}", body)
+        http.patch("/webhooks/#{segment(id)}", body)
       end
 
       # Re-enable a disabled webhook.
       # @param id [String] Webhook UUID.
       # @return [Hash]
       def enable(id)
-        http.put("/webhooks/#{id}/enable")
+        http.put("/webhooks/#{segment(id)}/enable")
       end
 
       # Disable a webhook (stops deliveries without deleting it).
       # @param id [String] Webhook UUID.
       # @return [Hash]
       def disable(id)
-        http.put("/webhooks/#{id}/disable")
+        http.put("/webhooks/#{segment(id)}/disable")
       end
 
       # Generate a new shared secret, returned once on the response.
       # @param id [String] Webhook UUID.
       # @return [Hash] webhook record including the new shared_secret
       def rotate_secret(id)
-        http.put("/webhooks/#{id}/rotate_secret")
+        http.put("/webhooks/#{segment(id)}/rotate_secret")
       end
 
       # Reset the delivery circuit breaker and re-enable the webhook.
       # @param id [String] Webhook UUID.
       # @return [Hash]
       def reset_circuit(id)
-        http.put("/webhooks/#{id}/reset_circuit")
+        http.put("/webhooks/#{segment(id)}/reset_circuit")
       end
 
       # List delivery attempts for a webhook.
@@ -137,7 +138,7 @@ module Rail0
         query = build_query(status: status, topic: topic, payment_id: payment_id,
                             response_code: response_code, since: since, until: until_time,
                             sort: sort, page: page, per_page: per_page)
-        http.get_list("/webhooks/#{id}/event_callbacks#{query}")
+        http.get_list("/webhooks/#{segment(id)}/event_callbacks#{query}")
       end
 
       # Re-deliver one recorded delivery's exact payload
@@ -160,14 +161,14 @@ module Rail0
       # @param callback_id [String] The event callback's UUID (from {event_callbacks}).
       # @return [Hash] `{ status: "queued" }` (HTTP 202).
       def redeliver(id, callback_id)
-        http.post("/webhooks/#{id}/event_callbacks/#{callback_id}/redeliver", {})
+        http.post("/webhooks/#{segment(id)}/event_callbacks/#{segment(callback_id)}/redeliver", {})
       end
 
       # Delete a webhook. Returns HTTP 204.
       # @param id [String] Webhook UUID.
       # @return [nil]
       def delete(id)
-        http.delete("/webhooks/#{id}")
+        http.delete("/webhooks/#{segment(id)}")
       end
     end
   end

data/lib/rail0/types.rb

@@ -133,6 +133,22 @@ module Rail0
       :required_confirmations,  # Integer — Confirmations this gateway waits for before treating a transaction as settled. The FALLBACK rule: where the chain serves a finality tag (see finality_tag) that tag governs instead, so a client showing this number on such a chain is describing a rule that is not in force.
       :finality_tag,            # String — The block tag the chain calls settled (`safe`, `finalized`), when it serves one — and what the gateway actually gates on. Null where the chain serves none, in which case required_confirmations is counted.
       :contract,                # ChainContract
+      :settlement,              # BlockchainSettlement
+      keyword_init: true
+    )
+
+    # How long an operation on this chain has taken to settle ON THIS GATEWAY: percentiles of broadcast
+    # (`submitted_at`) to confirmation (`confirmed_at`) over the confirmed transactions of the trailing
+    # `window_days`. End-to-end — the chain's finality lag plus the gateway/indexer pipeline — so it is
+    # what a client actually waits for, not the chain's finality. A measurement, not a guarantee: use it
+    # as a wait-deadline hint (e.g. a small multiple of `p90_seconds`) and keep a fixed fallback for
+    # when it is null. Deliberately a long-window capacity figure, not a live alarm (#289). Always
+    # present; the percentiles are null when `sample_size` is below the gateway's minimum (20).
+    BlockchainSettlement = Struct.new(
+      :p50_seconds,  # Integer — Median settlement time, whole seconds rounded up. Null below the minimum sample.
+      :p90_seconds,  # Integer — 90th-percentile settlement time, whole seconds rounded up — the figure to size a deadline from. Null below the minimum sample.
+      :sample_size,  # Integer — Confirmed transactions measured in the window (0 when none).
+      :window_days,  # Integer — The trailing window the figures cover, in days.
       keyword_init: true
     )
 
@@ -188,7 +204,8 @@ module Rail0
       keyword_init: true
     )
 
-    # Base persisted payment fields, plus the `chain_id` of the payment's deployment.
+    # Base persisted payment fields, plus the `chain_id` of the payment's deployment, its token's
+    # `decimals`, and whether a transaction is `in_flight`.
     Payment = Struct.new(
       :id,                    # String
       :contract_id,           # String
@@ -203,11 +220,13 @@ module Rail0
       :payer,                 # String
       :payee,                 # String
       :token,                 # String
+      :decimals,              # Decimals of the payment's token: divide `amount`, `capturable_amount` and `refundable_amount` (base units) by 10^decimals to render them, with no GET /tokens join on `token` + `chain_id`. Resolved from the gateway's in-memory chain catalogue, retired tokens and archived contract versions included. Null only when the gateway cannot resolve the token (a contract it has not loaded, a token deleted outright) — fall back to GET /tokens then.
       :authorization_expiry,  # Integer
       :refund_expiry,         # Integer
       :escrow_stranded,       # Boolean — True exactly inside the stranded-escrow window (#233): a partial capture has permanently ruled void out, and release only opens at authorization_expiry — so no verb can return the buyer's uncaptured escrow until then. Mirrors RAIL0.sol; the gateway names the window, it cannot shorten it.
       :escrow_returnable_at,  # String — When the stranded escrow becomes returnable (release opens) — the authorization expiry as ISO-8601. Null whenever nothing is stranded, so presence alone is the signal.
       :disputed,              # Boolean — True while an open dispute exists.
+      :in_flight,             # Boolean — True while one of the payment's transactions is on its way to the chain and not yet settled: status `submitting`, `submitted`, or `pending` holding its signed transaction (the `redrivable` rows — signed and handed over, broadcast not yet sent). A `pending` row still awaiting its signature (an unfinished prepare) does not count, nor do `confirmed`/`failed`. While true the mirrored balances are about to move, so a client should disable further actions on the payment. Carried by list rows too, which embed no transactions; computed for a whole page in one query.
       :last_error_code,       # Decoded reason of the last failed on-chain attempt; null once the payment makes forward progress. Non-null means the latest attempt failed.
       :last_error_message,    # Human-readable form of last_error_code.
       :description,

data/lib/rail0/version.rb

@@ -5,5 +5,5 @@ module Rail0
   # consumed by path from a sibling checkout, where the number bought nothing: no registry
   # ever served a 1.x, no tag was ever cut, and the one consumer resolves the working tree.
   # Publishing from 1.2.0 would have implied two releases nobody can install.
-  VERSION = "1.2.0"
+  VERSION = "1.3.1"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: rail0-sdk
 version: !ruby/object:Gem::Version
-  version: 1.2.0
+  version: 1.3.1
 platform: ruby
 authors:
 - Commerce Layer