rail0-sdk 1.5.0 → 1.5.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 06dc80b9fc301df5fb28259087c18ceae341e047418d6c26855a17fc2076c0e8
-  data.tar.gz: ee45ee4241b861c2443af42dc3453a824e1d5974c3accb872f0d03b9356959d3
+  metadata.gz: 106a0758b1da0b740e9c6e78fb83ffa9cdbfb53d562c2784b67d544aba2d58c3
+  data.tar.gz: '09690a456b1bb50bd573944a3ef9b7f980748bb32eb76ce7c17312a70914cf7a'
 SHA512:
-  metadata.gz: 4a41a60e24ca27221b91e4c35021636cd8f5b134810369354f653b947f9578124c666c09005cc13f25b0f121262d06ff209f97bc637fcf20f2ea8fab5e616c0a
-  data.tar.gz: 3459c91f1e3ed2b9a2c3ede420e004d63c44d2fdf0def948b49e781d7b7f6b4bf00ac7e2c92c5d5b141c46704245c4aed6daed2f5c560199a39f1ed9b7137c24
+  metadata.gz: b0e50c24f6276cb4ba23c812dcc8bc7f3b58cf92715855518bb0a76725c3393959487eb29e59794312bd0ccaab49148b436d5c1873cdeb5029db32f5f5a15ef1
+  data.tar.gz: 59463fad22c007aea05412ade646a21c051db20a85f886bc62897442c810f3c1d3d0f295f03c252c691661be958e8d3f729e7aacbdc0af4a7613a5d13e626483

data/README.md

@@ -327,8 +327,17 @@ client.wallets.balances(account_id, id_or_address, chain_id: 84532) # live on-ch
 `delete` only deactivates (the same as `update(active: false)`; payments name the
 address, so the row stays). Either way the account's **only active wallet** is
 refused with 422 `last_active_wallet` — login resolves the account from a wallet,
-so an account with none could neither act nor add one back. Add or reactivate
-another wallet first.
+so an account with none could neither act nor add one back. Another wallet must
+be active first.
+
+**A session is bound to the wallet it signed in with.** Reads (`list`, `get`,
+`balances`) are account-wide, but `update`, `delete` and the token-holding methods
+act only on the session's own wallet: another wallet of the same account is
+refused with 403 `not_your_wallet`. An operator session is exempt.
+
+> **Adding a wallet is currently unavailable.** The gateway answers every
+> `wallets.create` with 403 `wallet_add_unavailable`. It returns with the merchant
+> wallet-management section, which keeps the request shape and the proof below.
 
 **Registering a wallet needs a SIWE proof-of-ownership of the address being
 added**, not merely the session JWT. `auth.prove_address` runs that handshake and

data/lib/rail0/error_hints.rb

@@ -56,9 +56,16 @@ module Rail0
     "payer_must_be_caller" => "the payer must be the signed-in wallet — sign in as the buyer to create its payment",
     "wallet_deactivated" => "this wallet is deactivated: it can still read, but not act on payments or change the account — reactivate it or sign in with another of the account's wallets",
     "account_deactivated" => "the merchant account is deactivated: void, release and refund still work, but authorize, charge, capture and account changes do not — ask an operator to reactivate it",
+    # A session is bound to the one wallet it signed in with: the account's other wallets
+    # are readable, but not this session's to change (operators are exempt).
+    "not_your_wallet" => "a session can change only the wallet it signed in with — sign in with that wallet to update it, deactivate it or manage its tokens",
+    # POST /accounts/:id/wallets is suspended for every session until the merchant
+    # wallet-management section lands.
+    "wallet_add_unavailable" => "adding a wallet to an account is not available yet — it returns with the merchant wallet-management section",
     # Login resolves the account FROM a wallet, so an account left with no active one
-    # could neither act nor add a wallet back.
-    "last_active_wallet" => "this is the account's only active wallet — add or reactivate another wallet first, then switch this one off",
+    # could neither act nor add a wallet back. Adding a wallet is suspended and a session
+    # changes only its own wallet, so the other wallet has to be reactivated by an operator.
+    "last_active_wallet" => "this is the account's only active wallet — another wallet must be active before this one can be switched off (adding a wallet is not available yet; an operator can reactivate one)",
     "last_admin" => "the change would leave no active operator — grant the operator role to another active account first",
     "not_redrivable" => "only a pending transaction that already holds its signed bytes can be redriven — check the transaction's `redrivable` flag, and submit the signature if it has none",
     "refund_expired" => "the refund window has closed (refundExpiry passed) — refund/dispute is no longer possible",

data/lib/rail0/resources/wallets.rb

@@ -11,6 +11,12 @@ module Rail0
     # with its token holdings nested under +tokens+ (a wallet with no matching
     # tokens is still returned with an empty list). +id_or_address+ accepts either
     # the wallet UUID or its 0x address (unique per account).
+    #
+    # A session is bound to the wallet it signed in with. Reads (list, get, balances)
+    # are account-wide, but update, delete and the token-holding methods act only on
+    # the session's own wallet: another wallet of the same account raises ApiError 403
+    # +not_your_wallet+ (an operator session is exempt). +create+ is suspended for
+    # every session (403 +wallet_add_unavailable+).
     class Wallets
       include Query
 
@@ -51,6 +57,10 @@ module Rail0
 
       # Add a wallet to the account.
       #
+      # CURRENTLY UNAVAILABLE: the gateway answers every session ApiError 403
+      # +wallet_add_unavailable+ until the merchant wallet-management section lands.
+      # The method and its proof shape are kept because that section reuses them.
+      #
       # Requires a SIWE PROOF-OF-OWNERSHIP of the address being added, not merely
       # the session JWT: the gateway verifies that +signature+ recovers to
       # +address+ (422 otherwise), consumes the nonce carried in +message+, and
@@ -77,9 +87,11 @@ module Rail0
         http.post("/accounts/#{segment(account_id)}/wallets", body)
       end
 
-      # Update a wallet's label and/or active status. +active: false+ on the account's
-      # only active wallet raises ApiError 422 +last_active_wallet+: login resolves the
-      # account from a wallet, so an account with none could neither act nor add one back.
+      # Update a wallet's label and/or active status. Only the wallet the session signed
+      # in with: another wallet of the account raises ApiError 403 +not_your_wallet+ (an
+      # operator may change any). +active: false+ on the account's only active wallet
+      # raises ApiError 422 +last_active_wallet+: login resolves the account from a
+      # wallet, so an account with none could neither act nor add one back.
       # @param account_id [String] Account UUID.
       # @param id_or_address [String] Wallet UUID or 0x address.
       # @param label [String, nil] New label.
@@ -93,7 +105,8 @@ module Rail0
       end
 
       # Soft-delete (deactivate) a wallet — the same as +update(active: false)+, so the
-      # account's only active wallet raises ApiError 422 +last_active_wallet+. Returns HTTP 204.
+      # account's only active wallet raises ApiError 422 +last_active_wallet+, and another
+      # wallet than the session's own 403 +not_your_wallet+. Returns HTTP 204.
       # @param account_id [String] Account UUID.
       # @param id_or_address [String] Wallet UUID or 0x address.
       # @return [nil]
@@ -119,6 +132,9 @@ module Rail0
       # Which tokens a wallet accepts, on which chains. This is what GET
       # /payment_methods then exposes to buyers, so a merchant onboarding flow that
       # can create a wallet but not configure its tokens cannot finish. (#12)
+      #
+      # Owner only, and only on the wallet the session signed in with: another wallet
+      # of the same account raises ApiError 403 +not_your_wallet+.
 
       # Accept a token (on a chain) on this wallet.
       #

data/lib/rail0/types.rb

@@ -106,7 +106,7 @@ module Rail0
     )
 
     AdminRpcHealthEndpoint = Struct.new(
-      :url,         # String — Scheme, host, port and path only.
+      :url,         # String — The endpoint, as configured.
       :ok,          # Boolean
       :status,      # String
       :error,       # String — Short `Class: first line`; never an upstream body.
@@ -348,6 +348,23 @@ module Rail0
       keyword_init: true
     )
 
+    # The whole account record, as an operator reads it (Full entity: GET /accounts, POST /accounts, and
+    # GET/PATCH /accounts/{account_id} for an admin session): every column plus `admin` and the derived
+    # `status`.
+    AccountFull = Struct.new(
+      :id,            # String
+      :name,          # String
+      :email,         # String — Stored lowercase.
+      :active,        # Boolean — The operator's switch. false = deactivated.
+      :priority_tip,  # Boolean — The merchant's fee setting (see Account.priority_tip).
+      :claimed_at,    # When the merchant claimed the account at POST /claim; null while it is pending its claim.
+      :created_at,    # String
+      :updated_at,    # String
+      :admin,         # Boolean — Whether the account holds the operator grant (a row in administrators).
+      :status,        # String — One-word reading of active and claimed_at together: pending_claim (not yet claimed, not operational), active (claimed and active) or deactivated (switched off by an operator, claimed or not).
+      keyword_init: true
+    )
+
     # An operator grant with the people named.
     AdministratorFull = Struct.new(
       :id,          # String
@@ -379,9 +396,10 @@ module Rail0
 
     # One reported policy value.
     PolicySetting = Struct.new(
-      :value,       # The effective value (number, boolean, string, list or map).
-      :env,         # String — The environment variable that sets it; null for a constant.
-      :overridden,  # Boolean — Whether that variable is set in this process.
+      :value,        # The effective value (number, boolean, string, list or map).
+      :env,          # String — The environment variable that sets it; null for a constant.
+      :overridden,   # Boolean — Whether that variable is set in this process.
+      :description,  # String — Plain-text explanation of the entry: what it controls, which part of the gateway reads it and the effect of raising or lowering it, and its unit (from config/policy_descriptions.yml). Every entry has one; older gateways omit the field.
       keyword_init: true
     )
 

data/lib/rail0/version.rb

@@ -5,5 +5,5 @@ module Rail0
   # consumed by path from a sibling checkout, where the number bought nothing: no registry
   # ever served a 1.x, no tag was ever cut, and the one consumer resolves the working tree.
   # Publishing from 1.2.0 would have implied two releases nobody can install.
-  VERSION = "1.5.0"
+  VERSION = "1.5.1"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rail0-sdk
 version: !ruby/object:Gem::Version
-  version: 1.5.0
+  version: 1.5.1
 platform: ruby
 authors:
 - Commerce Layer
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-10-12 00:00:00.000000000 Z
+date: 2026-10-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: logger