rail0-sdk 1.7.2 → 1.8.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 3c69ef678235fc14acf0f3bcaebc302bd3b63d6dd1b41a1358381b49fd6a9738
-  data.tar.gz: 1d42362b54cf2118b2150087211bd7f5df49a8248278af49603fd745d32be08b
+  metadata.gz: eaaadaf08346573c426e649979548088c8cbbb1a2b037e63026c5512fa44feb8
+  data.tar.gz: b4eea2d0cd8cb675f2d31e5fbddee08f62fd3421f2cb969db246fc8e4d4338fb
 SHA512:
-  metadata.gz: 061516a40ea00e3ebf114f9ae841bfac830682f443caaa8f82fbe4789de91d1eab760896c6a0447a371092cd01f5bbb9f30200e8e17f0897bce60390ba541e82
-  data.tar.gz: 5f0e8c80653d3234d24f2816f607a84ecfb99c743afa2dd58fa64d3c184510458796ab54efc8cad00c7b478f35a26bf68d6339e1c592dff8d2712d087e3aae03
+  metadata.gz: 9433218dbe34e8d9a6cf7c200aca99d15695940fc099e5347b85e14c9612dbef6d824c303b3cd52e81e00787c25a0c2459cc40aa5e62bd0adb4555294f984816
+  data.tar.gz: 5e185810e4e78e7282ceda6760e5c2ee2857bf7c5469806fbb48fdc92fed12592fd8367aa1707bdafc76a52d4d7e65251d3dce36222174434bce9c53125398ff

data/README.md

@@ -471,6 +471,11 @@ client.payments.create(params, idempotency_key: nil)  # or keyword fields
 client.payments.get(id)
 client.payments.update(id, description: "Order #42")  # → the payment, same shape as get
 client.payments.update(id, description: nil)          # nil (or "") clears it
+# The payee's own fields (the payer gets 403 not_the_payee): an internal note never shown
+# to the payer, and the payment's identifier in the merchant's system. Only what you pass
+# is sent.
+client.payments.update(id, merchant_note: "refund agreed by email")
+client.payments.update(id, reference: "ORD-1042", reference_origin: "commercelayer")
 # The description is the only editable field: off-chain, so any status, settled included.
 # Payer or payee only (a non-participant gets 404); over 255 characters is a 422.
 client.payments.list(status: "authorized", disputed: false, chain_id: 84532, sort: "-created_at")
@@ -644,6 +649,7 @@ client.webhooks.enable(id)
 client.webhooks.disable(id)
 client.webhooks.rotate_secret(id)    # returns a fresh shared_secret
 client.webhooks.reset_circuit(id)
+client.webhooks.test(id)   # signed webhooks.test event now → { delivered:, response_code:, … }; not logged
 # status is "delivered" or "failed" only; payment_id takes a UUID or a rail0_id.
 client.webhooks.event_callbacks(id, status: "failed", response_code: "500")
 client.webhooks.redeliver(id, callback_id)  # 202 { status: "queued" } — replay one delivery
@@ -740,11 +746,13 @@ client.accounts.get(account_id)
 client.accounts.update(account_id, email: "ops@merchant.example")
 client.accounts.update(account_id, name: "Merchant Ltd", email: "ops@merchant.example")
 client.accounts.update(account_id, priority_tip: false)   # minimum tip on the account's own transactions
+# Payment windows of NEW payments: seconds, or :default (sent as null) for the gateway default.
+client.accounts.update(account_id, authorization_ttl: 2 * 86_400, refund_ttl: :default)
 ```
 
 `email` is in the response because the holder is this endpoint's only possible caller.
 
-`update` needs at least one of `name`/`email`/`priority_tip` (it raises `ArgumentError`
+`update` needs at least one of `name`/`email`/`priority_tip`/a payment window (it raises `ArgumentError`
 before sending an empty PATCH, which the gateway would answer with 400). Name and email are
 unique across accounts, so a value another account holds answers **409**. It is a write on
 the account, so a deactivated wallet (403 `wallet_deactivated`) or account (403
@@ -755,6 +763,15 @@ exposed here.
 capture, void, release, refund): `true`, the default, tips the network's suggested priority
 fee; `false` uses the chain's minimum tip (0 on most chains, 25 gwei on Polygon PoS/Amoy) —
 cheaper, slower to confirm under load. The buyer's dispute/close-dispute never read it.
+
+**Payment windows** — `authorization_ttl` (how long an authorization can be captured) and
+`refund_ttl` (how long a payment can be refunded or disputed), in seconds — are the deadlines
+the account's **new** payments are created with: its own value, or the gateway default. The
+profile's `payment_windows` says which, and the bounds; outside them, or with the refund
+window less than `min_refund_window` (one day) past the authorization, the gateway answers
+**422** `invalid_payment_windows`. A payment's deadlines are signed into it, so a change moves
+only the payments created afterwards.
+
 The account's wallets are a collection under the same path (`client.wallets`), and
 buyer-facing discovery is `client.payment_methods`.
 
@@ -1082,25 +1099,52 @@ uses them everywhere, table-aligned hashes because some literals are tables, and
 (`retry_on_429`, `eip712`, `secp256k1`) that each spell themselves their own way. A linter
 that argues with the codebase teaches people to ignore it.
 
-## Publishing
-
-Releases publish from GitHub Actions (`.github/workflows/release.yml`) through RubyGems
-**Trusted Publishing**: RubyGems.org trusts that workflow in this repo, so there is no API
-key to store or rotate and no OTP prompt.
-
-1. Merge a PR that bumps `Rail0::VERSION` in `lib/rail0/version.rb`.
-2. Publish a GitHub release on `main` tagged `v<version>` (e.g. `v1.2.0`).
-
-The workflow checks the tag against `Rail0::VERSION`, runs `rake build` (rubocop and the
-specs first, then the gem) and pushes it. A version already on RubyGems.org is skipped, so
-a re-run (Actions → release → Run workflow, from `main`, with the tag as input) is always
-safe — that is also how a release cut before the workflow existed gets published.
-
-One-time setup, by an owner of the gem on rubygems.org: rail0-sdk → Trusted publishers →
-GitHub Actions, repository `commercelayer/rail0-ruby`, workflow `release.yml`.
-
-Publishing by hand still works as a fallback (`gem build rail0-sdk.gemspec && gem push
-rail0-sdk-<version>.gem`, with the OTP the gem's `rubygems_mfa_required` asks for).
+## Releasing
+
+A release is an approved pull request: merging it is what publishes.
+
+1. `bin/release-prepare`, on an up-to-date, clean `main`. It computes the version from the titles of the pull requests merged since the last tag
+   (Conventional Commits): a breaking change — `!` after the type, as in `feat(api)!:`, or a
+   `BREAKING CHANGE:` footer — makes it a major, any `feat` a minor, anything else a patch,
+   and it refuses when nothing merged. `bin/release-prepare minor` (or `patch`, `major`,
+   `X.Y.Z`) sets it by hand instead. The release PR says which pull requests decided it.
+   It then bumps `Rail0::VERSION` and `Gemfile.lock`, writes the release
+   notes from the pull requests merged since the last tag, and opens
+   `chore(release): vX.Y.Z`. `--dry-run` prints all of it and writes nothing.
+
+   **Or on a feature branch**, to release a change in the same review: run it on a clean
+   branch that is pushed, contains `origin/main` and has an open pull request into `main`.
+   The bump is committed and pushed on that branch (`chore(release): vX.Y.Z`), the pull
+   request's own title counts toward the version and gets a line in the notes, and the
+   notes go into its description between `<!-- release:start -->` markers — the text above
+   them is kept. Re-run it after new commits or a merge of `main`: it refreshes the version
+   and the notes instead of bumping twice. One approval then covers the change and its
+   release.
+2. Review the pull request (edit the notes in its body if needed), approve and merge it.
+   The approval must come from a reviewer **other than the pull request's author**, on its
+   final commit: release.yml checks it before publishing anything and stops otherwise —
+   an admin merge that bypassed the review, a direct push to `main` or a resume of an
+   unapproved release publishes nothing.
+3. `.github/workflows/release.yml` runs on that push to `main`: CI again on the release
+   commit, `gem push` through RubyGems **Trusted Publishing**, then the tag `vX.Y.Z` and
+   the GitHub release (notes from the pull request), then a Slack message.
+
+A merge that does not change the version releases nothing. If a run stops halfway, Actions
+→ release → Run workflow (on `main`) resumes it: what is already on RubyGems.org or already
+tagged is skipped. `rake release` is disabled (it would tag and push from a laptop), and no
+API key exists anywhere: RubyGems.org trusts only `release.yml` in this repo.
+
+One-time settings (repository admins):
+
+- environment `release` (Settings → Environments), deployment limited to `main`;
+- on rubygems.org, rail0-sdk's trusted publisher (repository `commercelayer/rail0-ruby`,
+  workflow `release.yml`) bound to environment `release` — only once the new
+  `release.yml` is on `main`;
+- a tag ruleset on `v*`: block updates and deletions, restrict creation to GitHub Actions
+  and admins;
+- branch protection on `main`: required `ci` check (`spec`), "Include administrators";
+- the Slack channel: `release.yml` posts through the `PIPELINE_SLACK_CHANNEL_WEBHOOK_URL`
+  secret, named in one place (the `announce` job).
 
 ## License
 

data/lib/rail0/resources/accounts.rb

@@ -30,12 +30,16 @@ module Rail0
 
       # The account's own profile.
       # @param account_id [String] The account UUID — must be the one this JWT belongs to.
-      # @return [Hash] `id`, `name`, `email`, `priority_tip`, `created_at`, `updated_at`.
+      # @return [Hash] `id`, `name`, `email`, `priority_tip`, `authorization_ttl`, `refund_ttl`,
+      #   `payment_windows`, `created_at`, `updated_at`.
       #   `email` is part of the response because only the account's owner, or an operator,
       #   can read it. `priority_tip` is the fee setting of the account's OWN transactions
       #   (authorize, capture, void, release, refund): true, the default, tips the network's
       #   suggested priority fee; false uses the chain's minimum tip — 0 on most chains,
       #   25 gwei on Polygon PoS/Amoy. The buyer's dispute/close_dispute never read it.
+      #   `authorization_ttl` / `refund_ttl` are the payment windows the account's NEW
+      #   payments are created with, in seconds — its own or the gateway default;
+      #   `payment_windows` says which, and the bounds a new value must fit.
       def get(account_id)
         http.get("/accounts/#{segment(account_id)}")
       end
@@ -48,6 +52,10 @@ module Rail0
       # are UNIQUE across accounts, so a value another account already holds answers 409.
       # `priority_tip: false` is a value, not an absence: it is sent as false and switches
       # the account's own transactions to the chain's minimum tip; nil leaves it alone.
+      # The payment windows take a number of seconds, or `:default` to put one back on the
+      # gateway default (sent as null); nil leaves it alone. Outside the bounds in
+      # `payment_windows`, or closer than its `min_refund_window`, the gateway answers 422
+      # invalid_payment_windows. A change moves only the payments created afterwards.
       #
       # This is a write on the account itself, so a deactivated wallet (403
       # wallet_deactivated) or a deactivated account (403 account_deactivated) cannot
@@ -60,17 +68,35 @@ module Rail0
       # @param priority_tip [Boolean, nil] Tip the network's suggested priority fee on the
       #   account's own transactions (true, the gateway default) or the chain's minimum tip
       #   (false). Owner or admin.
+      # @param authorization_ttl [Integer, :default, nil] Authorization (capture) window of
+      #   new payments, in seconds, or :default. Owner or admin.
+      # @param refund_ttl [Integer, :default, nil] Refund and dispute window of new
+      #   payments, in seconds, or :default. Owner or admin.
       # @return [Hash] the updated profile, same shape as {get}.
-      # @raise [ArgumentError] when none of name, email or priority_tip is given.
-      def update(account_id, name: nil, email: nil, priority_tip: nil)
+      # @raise [ArgumentError] when no field is given, or a window is neither an Integer
+      #   nor :default.
+      def update(account_id, name: nil, email: nil, priority_tip: nil, authorization_ttl: nil, refund_ttl: nil)
         body = {}
         body[:name]         = name         unless name.nil?
         body[:email]        = email        unless email.nil?
         body[:priority_tip] = priority_tip unless priority_tip.nil?
-        raise ArgumentError, "at least one of name, email or priority_tip is required" if body.empty?
+        { authorization_ttl: authorization_ttl, refund_ttl: refund_ttl }.each do |key, value|
+          body[key] = window(key, value) unless value.nil?
+        end
+        raise ArgumentError, "at least one of name, email, priority_tip or a payment window is required" if body.empty?
 
         http.patch("/accounts/#{segment(account_id)}", body)
       end
+
+      private
+
+      # A payment window as the gateway takes it: whole seconds, or null for the default.
+      def window(key, value)
+        return if value == :default
+        return value if value.is_a?(Integer)
+
+        raise ArgumentError, "#{key} must be an Integer number of seconds or :default"
+      end
     end
   end
 end

data/lib/rail0/resources/auth.rb

@@ -58,7 +58,7 @@ module Rail0
       #
       # +admin+ is true only for an account holding the operator (administrators)
       # grant: the gateway adds the field on an admin's session alone, and it is
-      # normalised here to a boolean so a standard login reads false rather than nil.
+      # normalized here to a boolean so a standard login reads false rather than nil.
       # Visibility only — every gated route re-checks the grant per request.
       def verify(message:, signature:)
         session = http.post("/auth", { message: message, signature: signature })

data/lib/rail0/resources/payments.rb

@@ -13,6 +13,11 @@ module Rail0
     # step (e.g. MetaMask) skip the local signer and report the hash via
     # {submit_by_hash} instead.
     class Payments
+      # The default of {update}'s keywords: "not passed", told apart from an explicit +nil+
+      # (which is sent, as JSON null, and clears the field).
+      UNSET = Object.new.freeze
+      private_constant :UNSET
+
       include Query
 
       # Operations accepted by the prepare/submit endpoints.
@@ -62,6 +67,10 @@ module Rail0
       #   `last_error_code`, false = none.
       # @param expiring_within [Integer, nil] scope "all" only: `authorized` payments whose
       #   `authorization_expiry` falls within this many SECONDS from now (1..90 days).
+      # @param reference [String, nil] Only payments with this reference — the payment's
+      #   identifier in the merchant's own system (exact match).
+      # @param reference_origin [String, nil] Only payments whose reference comes from this
+      #   system (case-insensitive).
       # @param sort [String, nil] Comma-separated sort fields; prefix with - for desc.
       # @param page [Integer, nil] Page number (1-based; 1..1,000,000, 400 outside).
       # @param per_page [Integer, nil] Items per page (max 100).
@@ -74,9 +83,11 @@ module Rail0
       def list(status: nil, mode: nil, payer: nil, payee: nil, token: nil, rail0_id: nil,
                chain_id: nil, disputed: nil, operation: nil, min_amount: nil, max_amount: nil,
                created_from: nil, created_to: nil, scope: nil, account_id: nil, has_error: nil,
-               expiring_within: nil, sort: nil, page: nil, per_page: nil)
+               expiring_within: nil, reference: nil, reference_origin: nil, sort: nil, page: nil,
+               per_page: nil)
         query = build_query(status: status, mode: mode, payer: payer, payee: payee, token: token,
-                            rail0_id: rail0_id, chain_id: chain_id, disputed: disputed,
+                            rail0_id: rail0_id, reference: reference, reference_origin: reference_origin,
+                            chain_id: chain_id, disputed: disputed,
                             operation: operation,
                             min_amount: min_amount, max_amount: max_amount,
                             created_from: created_from, created_to: created_to,
@@ -97,7 +108,10 @@ module Rail0
       #   create(chain_id: 84532, mode: "authorize", amount: "100.00", token: "0x…", payer: "0x…", payee: "0x…")
       #   create({ chain_id: 84532, ... }, idempotency_key: "order-42")
       #
-      # @param params [Hash, nil] chain_id, mode, amount, token, payer, payee, description (opt), metadata (opt).
+      # @param params [Hash, nil] chain_id, mode, amount, token, payer, payee, description (opt),
+      #   metadata (opt), reference (opt — the payment's identifier in the merchant's own
+      #   system, max 128 characters, not unique, an idempotency term), reference_origin (opt
+      #   — which system: a lowercase slug, e.g. "commercelayer"; needs a reference).
       # @param idempotency_key [String, nil] Optional Idempotency-Key header value.
       # @param fields [Hash] Field keywords, used when +params+ is omitted.
       # @return [Hash]
@@ -116,22 +130,36 @@ module Rail0
         http.get("/payments/#{segment(id)}")
       end
 
-      # Set or clear a payment's description (PATCH /payments/{id}).
+      # Set or clear a payment's off-chain fields (PATCH /payments/{id}).
+      #
+      # Off-chain metadata, so it can change at any status, settled payments included. Only
+      # a participant (the payer or the payee) may call it — a non-participant gets the same
+      # 404 as an unknown id, and a deactivated caller wallet a 403 `wallet_deactivated`.
+      #
+      # Only the keywords you PASS are sent, and at least one is required (ArgumentError
+      # first, rather than the gateway's 400). +nil+ or +""+ clears a field.
       #
-      # The description is the only field this route edits: it is off-chain metadata, so
-      # it can change at any status, settled payments included. Only a participant (the
-      # payer or the payee) may edit it — a non-participant gets the same 404 as an unknown
-      # id, and a deactivated caller wallet a 403 `wallet_deactivated`.
+      # - +description:+ either party, max 255 characters (422 over).
+      # - +merchant_note:+ the PAYEE's internal note, max 2000 characters — never shown to
+      #   the payer, not in webhooks.
+      # - +reference:+ / +reference_origin:+ the payment's identifier in the merchant's own
+      #   system and which system; the payee corrects them, and clearing the reference
+      #   clears its origin.
       #
-      # +description:+ is required, and is always sent: passing +nil+ sends JSON +null+,
-      # which clears it (as does +""+). Over 255 characters is a 422.
-      # (rail0-gateway#373)
+      # The last three are the payee's: the payer gets 403 `not_the_payee`.
       #
       # @param id [String] Payment UUID or rail0_id.
-      # @param description [String, nil] The new description; +nil+ or +""+ clears it.
       # @return [Hash] The updated payment, the same shape {get} returns.
-      def update(id, description:)
-        http.patch("/payments/#{segment(id)}", { description: description })
+      # @raise [ArgumentError] when no field is given.
+      def update(id, description: UNSET, merchant_note: UNSET, reference: UNSET, reference_origin: UNSET)
+        body = { description: description, merchant_note: merchant_note, reference: reference,
+                 reference_origin: reference_origin }.reject { |_, v| v.equal?(UNSET) }
+        if body.empty?
+          raise ArgumentError,
+                "at least one of description, merchant_note, reference or reference_origin is required"
+        end
+
+        http.patch("/payments/#{segment(id)}", body)
       end
 
       # List on-chain transactions for a payment.

data/lib/rail0/resources/query.rb

@@ -11,7 +11,7 @@ module Rail0
     # segment the same way ({#segment}).
     module Query
       # Segments that would not stay put once interpolated: "." and ".." are dot
-      # segments that a URL normaliser (a proxy, a CDN, the server's router) may
+      # segments that a URL normalizer (a proxy, a CDN, the server's router) may
       # resolve away, and an empty one collapses the path onto its parent.
       UNSAFE_SEGMENTS = ["", ".", ".."].freeze
       private_constant :UNSAFE_SEGMENTS

data/lib/rail0/resources/webhooks.rb

@@ -127,6 +127,18 @@ module Rail0
         http.put("/webhooks/#{segment(id)}/reset_circuit")
       end
 
+      # Send a test event to the webhook's callback now and report what it did
+      # (POST /webhooks/{id}/test). The event has topic "webhooks.test", +test: true+ and
+      # no payment, and is signed and delivered like a real one. Synchronous, one attempt,
+      # not logged in {event_callbacks} and not counted by the circuit breaker; it works on
+      # a disabled webhook. A refusal by the endpoint is a result, not an error.
+      # @param id [String] Webhook UUID.
+      # @return [Hash] +delivered+, +response_code+, +response_message+, +error_reason+,
+      #   +duration_ms+.
+      def test(id)
+        http.post("/webhooks/#{segment(id)}/test", {})
+      end
+
       # List delivery attempts for a webhook.
       # @param id [String] Webhook UUID.
       # @param status [String, nil] Filter by delivery status: "delivered" or "failed" only

data/lib/rail0/types.rb

@@ -265,6 +265,9 @@ module Rail0
       :last_error_code,       # Decoded reason of the last failed on-chain attempt; null once the payment makes forward progress. Non-null means the latest attempt failed.
       :last_error_message,    # Human-readable form of last_error_code.
       :description,
+      :reference,             # This payment's identifier in the merchant's own system; set at create, correctable by the payee.
+      :reference_origin,      # The system the reference comes from, a lowercase slug (e.g. commercelayer).
+      :merchant_note,         # The payee's internal note (PATCH /payments/{id}). Present only when the session is the payment's PAYEE, and on the operator's Full view; absent for the payer.
       :metadata,
       :signed_at,             # When the payer signature was stored (null while unsigned).
       :created_at,            # String
@@ -291,6 +294,16 @@ module Rail0
       keyword_init: true
     )
 
+    # What the callback did with a test event (POST /webhooks/{id}/test).
+    WebhookTestResult = Struct.new(
+      :delivered,         # Boolean — The endpoint answered 2xx.
+      :response_code,     # The HTTP status it answered; null when no response came (see error_reason).
+      :response_message,  # Up to 1000 printable characters of its response body.
+      :error_reason,      # Why no response came: a refused address, a TLS or connection error, the deadline.
+      :duration_ms,       # Integer — How long the attempt took.
+      keyword_init: true
+    )
+
     Transaction = Struct.new(
       :id,                    # String
       :payment_id,            # String
@@ -336,32 +349,48 @@ module Rail0
     )
 
     # The account's own profile as the holder reads it (GET) and as a PATCH returns it — id, name,
-    # email, priority_tip, timestamps. Deliberately no admin/role field: the operator grant lives in a
-    # separate table, so a standard account's profile carries no trace of that axis. An ADMIN reading
-    # any account gets the whole record plus `admin` instead, which is a different shape and not this
-    # one.
+    # email, priority_tip, payment windows, timestamps. Deliberately no admin/role field: the operator
+    # grant lives in a separate table, so a standard account's profile carries no trace of that axis. An
+    # ADMIN reading any account gets the whole record plus `admin` instead, which is a different shape
+    # and not this one.
     Account = Struct.new(
-      :id,            # String
-      :name,          # String
+      :id,                 # String
+      :name,               # String
       :email,
-      :priority_tip,  # Boolean — Whether the merchant's own transactions tip the network's suggested priority fee (true, the default) or the chain's minimum tip (false: 0 on most chains, 25 gwei on Polygon PoS/Amoy). The buyer's dispute/close_dispute never read it.
-      :created_at,    # String
-      :updated_at,    # String
+      :priority_tip,       # Boolean — Whether the merchant's own transactions tip the network's suggested priority fee (true, the default) or the chain's minimum tip (false: 0 on most chains, 25 gwei on Polygon PoS/Amoy). The buyer's dispute/close_dispute never read it.
+      :authorization_ttl,  # Integer — Seconds an authorization of the account's new payments stays capturable after the payment is created: the account's own value, or the gateway default (AUTHORIZATION_TTL).
+      :refund_ttl,         # Integer — Seconds the account's new payments stay refundable, and open to a dispute, after they are created: the account's own value, or the gateway default (REFUND_TTL).
+      :payment_windows,    # PaymentWindows
+      :created_at,         # String
+      :updated_at,         # String
+      keyword_init: true
+    )
+
+    # How the account's windows are set and what a new value must meet: per window, whether it is the
+    # account's own (custom) or the default, the default, and the bounds. The refund window has no floor
+    # of its own: the pair must keep refund_ttl - authorization_ttl >= min_refund_window.
+    PaymentWindows = Struct.new(
+      :authorization_ttl,  # Hash
+      :refund_ttl,         # Hash
+      :min_refund_window,  # Integer
       keyword_init: true
     )
 
     # The whole account record, as an operator reads it (Full entity: GET /accounts, and GET/PATCH
     # /accounts/{account_id} for an admin session): every column plus `admin` and the derived `status`.
     AccountFull = Struct.new(
-      :id,            # String
-      :name,          # String
-      :email,         # String — Stored lowercase.
-      :active,        # Boolean — The operator's switch. false = deactivated.
-      :priority_tip,  # Boolean — The merchant's fee setting (see Account.priority_tip).
-      :created_at,    # String
-      :updated_at,    # String
-      :admin,         # Boolean — Whether the account holds the operator grant (a row in administrators).
-      :status,        # String — One-word reading of active: active, or deactivated (switched off by an operator).
+      :id,                 # String
+      :name,               # String
+      :email,              # String — Stored lowercase.
+      :active,             # Boolean — The operator's switch. false = deactivated.
+      :priority_tip,       # Boolean — The merchant's fee setting (see Account.priority_tip).
+      :authorization_ttl,  # Integer — Seconds an authorization of the account's new payments stays capturable after the payment is created: the account's own value, or the gateway default (AUTHORIZATION_TTL).
+      :refund_ttl,         # Integer — Seconds the account's new payments stay refundable, and open to a dispute, after they are created: the account's own value, or the gateway default (REFUND_TTL).
+      :payment_windows,    # PaymentWindows
+      :created_at,         # String
+      :updated_at,         # String
+      :admin,              # Boolean — Whether the account holds the operator grant (a row in administrators).
+      :status,             # String — One-word reading of active: active, or deactivated (switched off by an operator).
       keyword_init: true
     )
 

data/lib/rail0/version.rb

@@ -5,5 +5,5 @@ module Rail0
   # consumed by path from a sibling checkout, where the number bought nothing: no registry
   # ever served a 1.x, no tag was ever cut, and the one consumer resolves the working tree.
   # Publishing from 1.2.0 would have implied two releases nobody can install.
-  VERSION = "1.7.2"
+  VERSION = "1.8.1"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rail0-sdk
 version: !ruby/object:Gem::Version
-  version: 1.7.2
+  version: 1.8.1
 platform: ruby
 authors:
 - Commerce Layer
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-10-21 00:00:00.000000000 Z
+date: 2026-10-28 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: logger