rail0-sdk 1.7.1 → 1.7.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5d88d3da009d4c04853e8fb794eba655913763a1391c6e0bd6915bda6cb68d36
-  data.tar.gz: 5cc37022ce71f950c6b11dcf421902518b63caebfd54a13f78eaf909a7eef39c
+  metadata.gz: 3c69ef678235fc14acf0f3bcaebc302bd3b63d6dd1b41a1358381b49fd6a9738
+  data.tar.gz: 1d42362b54cf2118b2150087211bd7f5df49a8248278af49603fd745d32be08b
 SHA512:
-  metadata.gz: 2512e0a842d7d76749dc4028a0c1d2590b7fe1dd4e95676572a39aa8c41fa9a882c2e4a534e85080f0fe8089c8001c6f2101ff4b9fb7ab9f4e2cc9d7e6d35d62
-  data.tar.gz: 7b569639525815722a586f308d45ebc67c964cbd4f6f1ae4c5bac4a8c5a731589b03dffebcfcdb375e3a265f9f1143b52162d5e8685de591e39a364de3257cf8
+  metadata.gz: 061516a40ea00e3ebf114f9ae841bfac830682f443caaa8f82fbe4789de91d1eab760896c6a0447a371092cd01f5bbb9f30200e8e17f0897bce60390ba541e82
+  data.tar.gz: 5f0e8c80653d3234d24f2816f607a84ecfb99c743afa2dd58fa64d3c184510458796ab54efc8cad00c7b478f35a26bf68d6339e1c592dff8d2712d087e3aae03

data/README.md

@@ -382,6 +382,7 @@ client.wallets.list(account_id, token_active: true)
 
 client.wallets.get(account_id, id_or_address)
 client.wallets.update(account_id, id_or_address, label: "Renamed", active: false)
+client.wallets.update(account_id, id_or_address, active: true)      # back on (see below)
 client.wallets.delete(account_id, id_or_address)                    # 204
 client.wallets.balances(account_id, id_or_address, chain_id: 84532) # live on-chain balances
 ```
@@ -392,6 +393,17 @@ refused with 422 `last_active_wallet` — login resolves the account from a wall
 so an account with none could neither act nor add one back. Another wallet must
 be active first.
 
+**Switching a wallet back on.** Every switch-off records who did it in the wallet's
+`deactivated_by`: `"owner"` (a session signed in with that wallet) or `"operator"`
+(an operator session); `nil` while active, and on a switch-off older than the record.
+A deactivated wallet's session is read-only (403 `wallet_deactivated`) except for one
+write: `update(account_id, id, active: true)` on its **own** wallet, which switches it
+back on when its owner switched it off. A wallet an operator switched off (or with
+`deactivated_by: nil`) raises 403 `wallet_deactivated_by_operator`: an operator's
+switch-off revokes the key, so only an operator lifts it. The flip side: a wallet its
+owner switched off can be switched back on by whoever holds its key, so a definitive
+revocation (a leaked key) must come from an operator.
+
 **A session is bound to the wallet it signed in with.** Reads (`list`, `get`,
 `balances`) are account-wide, but `update`, `delete` and the token-holding methods
 act only on the session's own wallet: another wallet of the same account is

data/lib/rail0/error_hints.rb

@@ -55,7 +55,10 @@ module Rail0
     "not_payer_or_payee" => "only the payer or the payee may do this",
     "release_submitter_not_a_party" => "a release must be sent by the payment's payer or payee — omit `from` to build it for the signed-in wallet",
     "payer_must_be_caller" => "the payer must be the signed-in wallet — sign in as the buyer to create its payment",
-    "wallet_deactivated" => "this wallet is deactivated: it can still read, but not act on payments or change the account — reactivate it or sign in with another of the account's wallets",
+    # gateway#439: a deactivated session may switch its OWN wallet back on when its owner
+    # switched it off; an operator's switch-off is the operator's to lift.
+    "wallet_deactivated" => "this wallet is deactivated: it can still read, but not act on payments or change the account — if you switched it off, its own session can switch it back on (wallets.update(..., active: true)), or sign in with another of the account's wallets",
+    "wallet_deactivated_by_operator" => "an operator deactivated this wallet, so only an operator can reactivate it — ask an operator to reactivate it",
     "account_deactivated" => "the merchant account is deactivated: void, release and refund still work, but authorize, charge, capture and account changes do not — ask an operator to reactivate it",
     # A session is bound to the one wallet it signed in with: the account's other wallets
     # are readable, but not this session's to change (operators are exempt).
@@ -65,8 +68,9 @@ module Rail0
     "wallet_add_unavailable" => "adding a wallet to an account is not available yet — it returns with the merchant wallet-management section",
     # Login resolves the account FROM a wallet, so an account left with no active one
     # could neither act nor add a wallet back. Adding a wallet is suspended and a session
-    # changes only its own wallet, so the other wallet has to be reactivated by an operator.
-    "last_active_wallet" => "this is the account's only active wallet — another wallet must be active before this one can be switched off (adding a wallet is not available yet; an operator can reactivate one)",
+    # changes only its own wallet, so the other wallet comes back on from its own session
+    # (if its owner switched it off) or from an operator (gateway#439).
+    "last_active_wallet" => "this is the account's only active wallet — another wallet must be active before this one can be switched off: sign in with one you switched off and reactivate it, or ask an operator (adding a wallet is not available yet)",
     "last_admin" => "the change would leave no active operator — grant the operator role to another active account first",
     "not_redrivable" => "only a pending transaction that already holds its signed bytes can be redriven — check the transaction's `redrivable` flag, and submit the signature if it has none",
     "refund_expired" => "the refund window has closed (refundExpiry passed) — refund/dispute is no longer possible",

data/lib/rail0/resources/wallets.rb

@@ -92,11 +92,16 @@ module Rail0
       # operator may change any). +active: false+ on the account's only active wallet
       # raises ApiError 422 +last_active_wallet+: login resolves the account from a
       # wallet, so an account with none could neither act nor add one back.
+      #
+      # +active: true+ is the one write a deactivated wallet's own session may make: it
+      # switches the wallet back on when its owner switched it off. A wallet an operator
+      # switched off (+deactivated_by+ "operator", or nil on an older switch-off) raises
+      # ApiError 403 +wallet_deactivated_by_operator+: only an operator lifts it.
       # @param account_id [String] Account UUID.
       # @param id_or_address [String] Wallet UUID or 0x address.
       # @param label [String, nil] New label.
       # @param active [Boolean, nil] New active status.
-      # @return [Hash] id, address, label, active
+      # @return [Hash] id, address, label, active, deactivated_by
       def update(account_id, id_or_address, label: nil, active: nil)
         body = {}
         body[:label]  = label  unless label.nil?

data/lib/rail0/types.rb

@@ -209,10 +209,11 @@ module Rail0
 
     # Public-safe wallet view (the reduced set a buyer needs to discover a merchant's payment methods).
     Wallet = Struct.new(
-      :id,       # String
-      :address,  # String
+      :id,              # String
+      :address,         # String
       :label,
-      :active,   # Boolean
+      :active,          # Boolean
+      :deactivated_by,  # Who switched the wallet off: `owner` (a session signed in with this wallet) or `operator` (an admin session). Null while active, and on a switch-off that predates the record — treated as `operator`. A wallet an operator switched off can be switched back on only by an operator (403 `wallet_deactivated_by_operator`). Always null on GET /payment_methods, which serves active wallets only.
       keyword_init: true
     )
 
@@ -229,11 +230,12 @@ module Rail0
     # A wallet with its token holdings nested inline. `tokens` is empty when the wallet has none — the
     # wallet is still returned, never omitted.
     WalletWithTokens = Struct.new(
-      :id,       # String
-      :address,  # String
+      :id,              # String
+      :address,         # String
       :label,
-      :active,   # Boolean
-      :tokens,   # Array
+      :active,          # Boolean
+      :deactivated_by,  # Who switched the wallet off: `owner` (a session signed in with this wallet) or `operator` (an admin session). Null while active, and on a switch-off that predates the record — treated as `operator`. A wallet an operator switched off can be switched back on only by an operator (403 `wallet_deactivated_by_operator`). Always null on GET /payment_methods, which serves active wallets only.
+      :tokens,          # Array
       keyword_init: true
     )
 
@@ -474,7 +476,8 @@ module Rail0
       :webhooks,      # Hash
       :settlement,    # Hash
       :rate_limit,    # Hash
-      :siwe,          # Hash
+      :siwe,          # Hash — domains (SIWE_DOMAIN), accepted_chain_ids (1 plus the ids of the active catalog chains: the chainId values a login may carry) and nonce_ttl.
+      :session,       # Hash — environment (RAIL0_ENVIRONMENT, default RACK_ENV: the scope every issued token is bound to), jwt_ttl and jwt_audience: the session token's lifetime (a constant) and audience (`rail0-gateway:<environment>`).
       :fees,          # Hash
       :rpc,           # Hash
       :onboarding,    # Hash
@@ -532,18 +535,5 @@ module Rail0
       :contract_address,  # String — Address (lowercase) of the RAIL0 deployment the payment is bound to, archived versions included. The sweeper accepts a receipt's event only when this contract emitted it.
       keyword_init: true
     )
-
-    # Per-chain indexer config.
-    SyncBlockchain = Struct.new(
-      :chain_id,                # Integer
-      :start_block,             # Integer
-      :required_confirmations,  # Integer — Fallback burial depth, used where the chain serves no finality tag.
-      :finality_tag,            # String — Which block the chain calls settled; the indexer gates every notify on it.
-      :explorer_url,            # Block explorer base URL; null when the chain has none.
-      :network_type,            # String — "testnet" or "mainnet"; selects which chains a deployment indexes.
-      :rpc_urls,                # Array — Ordered list of public RPC endpoints tried in turn (serial fallback).
-      :contracts,               # Array — Active RAIL0 contract addresses on the chain (all watched versions).
-      keyword_init: true
-    )
   end
 end

data/lib/rail0/version.rb

@@ -5,5 +5,5 @@ module Rail0
   # consumed by path from a sibling checkout, where the number bought nothing: no registry
   # ever served a 1.x, no tag was ever cut, and the one consumer resolves the working tree.
   # Publishing from 1.2.0 would have implied two releases nobody can install.
-  VERSION = "1.7.1"
+  VERSION = "1.7.2"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rail0-sdk
 version: !ruby/object:Gem::Version
-  version: 1.7.1
+  version: 1.7.2
 platform: ruby
 authors:
 - Commerce Layer
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-10-20 00:00:00.000000000 Z
+date: 2026-10-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: logger