weft-sdk 0.24.0 → 0.32.2

data/lib/weft/facilitator/settlement.rb

@@ -0,0 +1,117 @@
+# frozen_string_literal: true
+
+require 'json'
+
+require_relative 'json_wire'
+
+module Weft
+  module Facilitator
+    FACILITATOR_UNAVAILABLE_ERROR = 'weft:facilitator-settle-unavailable'
+    CORE_FACILITATOR_UNAVAILABLE = /^Facilitator settle failed \(503\):(?: |$)/
+    SETTLEMENT_OVERRIDES_HEADER = 'Settlement-Overrides'
+    PAYMENT_REQUIRED_CACHE_CONTROL = 'no-store'
+    SYNC_RETRY_FLOOR_MS = 30_000
+
+    module Settlement
+      module_function
+
+      def facilitator_unavailable?(reason)
+        return false if reason.nil?
+
+        text = reason.to_s
+        text == FACILITATOR_UNAVAILABLE_ERROR || CORE_FACILITATOR_UNAVAILABLE.match?(text)
+      end
+
+      def with_private_cache_control(value)
+        return 'private' if value.nil? || value.to_s.empty?
+
+        directives = value.to_s.split(',').map { |part| part.strip.downcase }
+        return value if directives.include?('private')
+
+        "#{value}, private"
+      end
+
+      def json_response?(headers)
+        content_type = header_value(headers, 'content-type')
+        return false if content_type.nil?
+
+        /^(application\/json|[^;]+\+json)(?:;|$)/i.match?(content_type)
+      end
+
+      def header_value(headers, name)
+        return nil unless headers.is_a?(Hash)
+
+        pair = headers.find { |key, _| key.to_s.casecmp?(name) }
+        return nil unless pair
+
+        value = pair[1]
+        value.is_a?(Array) ? value[0] : value
+      end
+
+      def unavailable_response?(response)
+        body = response[:body] || response['body']
+        if body.is_a?(Hash)
+          %w[errorReason error].each do |field|
+            text = body[field] || body[field.to_sym]
+            return true if text.is_a?(String) && facilitator_unavailable?(text)
+          end
+        end
+
+        encoded = header_value(response[:headers] || response['headers'], 'payment-response')
+        return false if encoded.nil? || encoded.empty?
+
+        decoded = JSON.parse(JsonWire.base64_decode(encoded))
+        facilitator_unavailable?(decoded['errorReason'])
+      rescue StandardError
+        false
+      end
+    end
+
+    class SettleError < StandardError
+      attr_reader :status_code, :error_reason, :error_message, :payer, :transaction, :network
+
+      def initialize(status_code, response)
+        response = {} unless response.is_a?(Hash)
+        @status_code = status_code
+        @error_reason = response['errorReason'] || response[:errorReason]
+        @error_message = response['errorMessage'] || response[:errorMessage]
+        @payer = response['payer'] || response[:payer]
+        @transaction = response['transaction'] || response[:transaction]
+        @network = response['network'] || response[:network]
+        reason = @error_reason || 'unknown reason'
+        message = @error_message
+        super(message ? "#{reason}: #{message}" : reason.to_s)
+      end
+    end
+
+    class FacilitatorUnavailableError < StandardError
+      def initialize
+        super(FACILITATOR_UNAVAILABLE_ERROR)
+      end
+
+      def status_code
+        503
+      end
+    end
+
+    module SettleErrors
+      module_function
+
+      def unavailable?(error)
+        return false unless error.is_a?(SettleError)
+        return false unless error.status_code == 503
+        return false unless defined_field?(error, :@error_reason)
+        return false unless defined_field?(error, :@error_message)
+        return false unless defined_field?(error, :@payer)
+        return false unless defined_field?(error, :@transaction)
+        return false unless defined_field?(error, :@network)
+
+        !(error.error_reason == 'settlement_pending' && !error.transaction.to_s.empty?)
+      end
+
+      def defined_field?(error, name)
+        error.instance_variable_defined?(name)
+      end
+    end
+  end
+end

data/lib/weft/facilitator/x402.rb

@@ -0,0 +1,355 @@
+# frozen_string_literal: true
+
+require 'json'
+require 'uri'
+
+require_relative 'extensions'
+require_relative 'path_match'
+require_relative 'json_wire'
+require_relative 'settlement'
+
+module Weft
+  module Facilitator
+    PAYMENT_FLOWS = {
+      'authorization' => {
+        'verifyBeforeHandler' => true,
+        'settleBeforeHandler' => false,
+        'settleAfterHandler' => true
+      },
+      'upfront' => {
+        'verifyBeforeHandler' => false,
+        'settleBeforeHandler' => true,
+        'settleAfterHandler' => false
+      },
+      'escrow' => {
+        'verifyBeforeHandler' => false,
+        'settleBeforeHandler' => true,
+        'settleAfterHandler' => true
+      }
+    }.freeze
+
+    FALLBACK_PAYWALL_HTML = <<~HTML.freeze
+      <!DOCTYPE html>
+      <html>
+        <head>
+          <title>Payment Required</title>
+          <meta charset="UTF-8">
+          <meta name="viewport" content="width=device-width, initial-scale=1.0">
+        </head>
+        <body>
+          <div style="max-width: 600px; margin: 50px auto; padding: 20px; font-family: system-ui, -apple-system, sans-serif;">
+            <h1>Payment Required</h1>
+            <p>This resource is protected by the x402 payment protocol.</p>
+            <p style="margin-top: 2rem; padding: 1rem; background: #fef3c7; border-radius: 0.5rem;">
+              <strong>Note to developers:</strong> install <code>@x402/paywall</code> to enable
+              the in-browser wallet connection and payment UI. Programmatic clients should read
+              the payment requirements from the 402 response headers and JSON body.
+            </p>
+          </div>
+        </body>
+      </html>
+    HTML
+
+    module X402
+      module_function
+
+      def encode_payment_required(value)
+        JsonWire.encode_json(value)
+      end
+
+      def encode_payment_response(value)
+        JsonWire.encode_json(value)
+      end
+
+      def decode_payment_signature(header)
+        JSON.parse(JsonWire.base64_decode(header))
+      end
+
+      def parse_route_pattern(pattern)
+        verb, path = PathMatch.split_verb(pattern)
+        {
+          'verb' => verb.upcase,
+          'regex' => PathMatch.compile_route(path),
+          'path' => path
+        }
+      end
+
+      def route_matches?(pattern, method, path)
+        parsed = parse_route_pattern(pattern)
+        normalized = normalize_path(path)
+        upper = method.to_s.upcase
+        return false unless parsed['verb'] == '*' || parsed['verb'] == upper
+
+        parsed['regex'].match?(normalized)
+      rescue Regexp::TimeoutError
+        true
+      end
+
+      def network_matches?(pattern, network)
+        PathMatch.glob_match?(pattern, network)
+      end
+
+      def normalize_path(path)
+        text = path.to_s
+        question = text.index('?')
+        hash = text.index('#')
+        cut = [question, hash].compact.min
+        text = text[0, cut] if cut
+        normalized = text.split('/', -1).map do |segment|
+          decoded = decode_component(segment)
+          decoded.gsub('/', '%2F').gsub('\\', '%5C')
+        end.join('/')
+        PathMatch.trim_trailing_slashes_keep_root(PathMatch.collapse_slashes(normalized))
+      end
+
+      def decode_component(segment)
+        decoded = segment.gsub(/%([0-9A-Fa-f]{2})/) do
+          [Regexp.last_match(1)].pack('H*').force_encoding(Encoding::UTF_8)
+        end
+        decoded.valid_encoding? ? decoded : segment
+      rescue StandardError
+        segment
+      end
+
+      def resolve_payment_flow(scheme, requirements)
+        extra = Product.read(requirements, 'extra')
+        atm = extra.is_a?(Hash) && (extra['assetTransferMethod'] || extra[:assetTransferMethod]).is_a?(String) ?
+                (extra['assetTransferMethod'] || extra[:assetTransferMethod]) :
+                (Product.read(scheme, 'defaultAssetTransferMethod') || 'authorization')
+        flows = Product.read(scheme, 'paymentFlows') || {}
+        config = flows[atm] || flows[atm.to_sym]
+        unless config.is_a?(Hash)
+          raise ArgumentError,
+                "[x402] Scheme \"#{Product.read(scheme, 'scheme')}\" does not support assetTransferMethod \"#{atm}\"."
+        end
+
+        supported = Product.read(config, 'supported') || []
+        default_flow = Product.read(config, 'default')
+        requested = extra.is_a?(Hash) ? (extra['paymentFlow'] || extra[:paymentFlow]) : nil
+        flow = requested.nil? ? default_flow : requested
+        unless supported.include?(flow)
+          raise ArgumentError, "[x402] Unsupported paymentFlow \"#{flow}\"."
+        end
+
+        { 'assetTransferMethod' => atm, 'paymentFlow' => flow }
+      end
+
+      def apply_payment_flow_wire_extra(extra, resolved)
+        next_extra = Product.stringify_hash(extra || {})
+        if resolved['assetTransferMethod'] == 'default' || next_extra['assetTransferMethod'] == 'default'
+          next_extra.delete('assetTransferMethod')
+        end
+        next_extra['paymentFlow'] = resolved['paymentFlow'] unless resolved['paymentFlow'] == 'authorization'
+        next_extra
+      end
+
+      def payment_flow_phases(flow)
+        phases = PAYMENT_FLOWS[flow.to_s]
+        raise ArgumentError, "[x402] Unknown payment flow \"#{flow}\"." unless phases
+
+        phases
+      end
+
+      def convert_to_token_amount(decimal_amount, decimals)
+        if decimal_amount.include?('e') || decimal_amount.include?('E')
+          raise ArgumentError, "Invalid amount: #{decimal_amount}"
+        end
+        unless PathMatch.decimal_amount?(decimal_amount)
+          raise ArgumentError, "Invalid amount: #{decimal_amount}"
+        end
+
+        int_part, dec_part = decimal_amount.split('.', 2)
+        padded = (dec_part || '').ljust(decimals, '0')[0, decimals]
+        PathMatch.strip_leading_zeros(int_part + padded)
+      end
+
+      def resolve_settlement_override_amount(raw_amount, requirements, decimals)
+        if (match = raw_amount.match(/\A(\d+(?:\.\d{0,2})?)%\z/))
+          int_part, dec_part = match[1].split('.', 2)
+          scaled = (int_part.to_i * 100) + dec_part.to_s.ljust(2, '0')[0, 2].to_i
+          base = requirements['amount'].to_i
+          return ((base * scaled) / 10_000).to_s
+        end
+        if (match = raw_amount.match(/\A\$(\d+(?:\.\d+)?)\z/))
+          if decimals.nil?
+            raise ArgumentError,
+                  "Cannot convert dollar settlement override \"#{raw_amount}\" to atomic units: " \
+                  'asset decimals are unknown. Pass an atomic amount or register the asset.'
+          end
+          return convert_to_token_amount(match[1], decimals)
+        end
+
+        raw_amount
+      end
+    end
+
+    class ResourceServer
+      def initialize(client)
+        @client = client
+        @schemes = {}
+        @kinds = []
+        @extensions = {}
+      end
+
+      attr_reader :client
+
+      def register(network, scheme)
+        @schemes[network] ||= {}
+        @schemes[network][Product.read(scheme, 'scheme')] = scheme
+      end
+
+      def register_extension(extension)
+        key = extension.respond_to?(:key) ? extension.key : extension[:key]
+        @extensions[key] = extension
+      end
+
+      def record_supported(body)
+        @kinds = body.is_a?(Hash) ? (body['kinds'] || []) : []
+      end
+
+      def initialize!
+        record_supported(@client.supported)
+      end
+
+      def scheme_for(network, scheme_name)
+        found = scheme_map(@schemes[network], scheme_name)
+        return found if found
+
+        @schemes.each do |pattern, schemes|
+          next if pattern == network
+          next unless X402.network_matches?(pattern, network)
+
+          found = scheme_map(schemes, scheme_name)
+          return found if found
+        end
+        nil
+      end
+
+      def dynamic_info_fields(key)
+        extension = @extensions[key]
+        return nil unless extension
+
+        Product.read(extension, 'dynamicInfoFields') || Product.read(extension, 'dynamic_info_fields')
+      end
+
+      def supported_kind?(network, scheme_name)
+        @kinds.any? do |kind|
+          kind['scheme'] == scheme_name && kind['network'] == network && kind['x402Version'] == 2
+        end
+      end
+
+      def build_requirements(option, _context)
+        scheme_name = Product.read(option, 'scheme')
+        network = Product.read(option, 'network')
+        scheme = scheme_for(network, scheme_name)
+        unless scheme
+          raise ArgumentError,
+                "No scheme implementation registered for \"#{scheme_name}\" on network \"#{network}\""
+        end
+        unless supported_kind?(network, scheme_name)
+          raise StandardError,
+                "Facilitator does not support #{scheme_name} on #{network}. " \
+                'Make sure to call initialize() to fetch supported kinds from facilitators.'
+        end
+
+        price = Product.read(option, 'price')
+        price = price.call(_context) if price.respond_to?(:call)
+        pay_to = Product.read(option, 'payTo')
+        pay_to = pay_to.call(_context) if pay_to.respond_to?(:call)
+        parsed = call_scheme(scheme, 'parsePrice', price, network)
+        parsed = Product.stringify_hash(parsed)
+        extra = {}
+        extra.merge!(Product.stringify_hash(parsed['extra'])) if parsed['extra'].is_a?(Hash)
+        extra.merge!(Product.stringify_hash(Product.read(option, 'extra'))) if Product.read(option, 'extra').is_a?(Hash)
+        requirement = {
+          'scheme' => scheme_name,
+          'network' => network,
+          'amount' => parsed['amount'],
+          'asset' => parsed['asset'],
+          'payTo' => pay_to,
+          'maxTimeoutSeconds' => Product.read(option, 'maxTimeoutSeconds') || 300,
+          'extra' => extra
+        }
+        enhanced = call_scheme(scheme, 'enhancePaymentRequirements', requirement, nil, [])
+        requirement = Product.stringify_hash(enhanced || requirement)
+        resolved = X402.resolve_payment_flow(scheme, requirement)
+        requirement['extra'] = X402.apply_payment_flow_wire_extra(requirement['extra'], resolved)
+        [requirement]
+      end
+
+      def create_payment_required(requirements, resource_info, error, extensions, transport_context)
+        accepts = requirements.map do |item|
+          copy = Product.stringify_hash(item)
+          copy['extra'] = Product.stringify_hash(copy['extra']) if copy['extra'].is_a?(Hash)
+          copy
+        end
+        response = {
+          'x402Version' => 2,
+          'resource' => resource_info,
+          'accepts' => accepts
+        }
+        response['error'] = error unless error.nil?
+        # Match JSON.stringify key order: x402Version, error, resource, accepts, extensions.
+        response = reorder_required(response, error)
+        if extensions.is_a?(Hash) && !extensions.empty?
+          response['extensions'] = extensions
+        end
+        enrich_extensions(response, transport_context)
+        response
+      end
+
+      def payment_flow(requirements)
+        scheme = scheme_for(requirements['network'], requirements['scheme'])
+        raise ArgumentError, "[x402] No server implementation registered for scheme: #{requirements['scheme']}" unless scheme
+
+        X402.resolve_payment_flow(scheme, requirements)['paymentFlow']
+      end
+
+      private
+
+      def reorder_required(response, error)
+        ordered = { 'x402Version' => response['x402Version'] }
+        ordered['error'] = error unless error.nil?
+        ordered['resource'] = response['resource']
+        ordered['accepts'] = response['accepts']
+        ordered
+      end
+
+      def enrich_extensions(response, transport_context)
+        extensions = response['extensions']
+        return unless extensions.is_a?(Hash)
+
+        extensions.each_key do |key|
+          hook = @extensions[key] || @extensions[key.to_s]
+          next unless hook.respond_to?(:enrich_payment_required_response)
+
+          context = {
+            'paymentRequiredResponse' => response,
+            'transportContext' => transport_context
+          }
+          shipped = hook.enrich_payment_required_response(extensions[key], context)
+          extensions[key] = shipped unless shipped.nil?
+        end
+      end
+
+      def scheme_map(schemes, scheme_name)
+        return nil unless schemes.is_a?(Hash)
+
+        schemes[scheme_name]
+      end
+
+      def call_scheme(scheme, name, *args)
+        fn = Product.read(scheme, name) || Product.read(scheme, underscore(name))
+        return fn.call(*args) if fn.respond_to?(:call)
+        return scheme.public_send(name, *args) if scheme.respond_to?(name)
+        return scheme.public_send(underscore(name), *args) if scheme.respond_to?(underscore(name))
+
+        args.first
+      end
+
+      def underscore(name)
+        name.gsub(/([A-Z])/) { "_#{Regexp.last_match(1).downcase}" }
+      end
+    end
+  end
+end

data/lib/weft/generated/api/account_api.rb

@@ -1,9 +1,9 @@
 =begin
 #Weft API
 
-#The Weft API powers the `weft` CLI, the hosted MCP server (`weft.network/mcp`), and third-party applications that discover and pay for resources on Weft. The buyer runtime covers six concerns:    1. Account creation and recovery (`/api/v1/auth/*`)   2. Credential identity (`/api/v1/me`)   3. Wallet visibility (`/api/v1/balance`)   4. Discovery (`/api/v1/search`)   5. Paid execution (`/api/v1/fetch`)   6. Purchase history (`/api/v1/purchases`)  Buyer runtime calls require a dashboard-created `wk_*` account key, an OAuth access token with the relevant scope, or a claimed `wbt_*` bearer on its fixed allowlist. The organization-scoped API key and payment operations in this document are seller administration surfaces and require an `ax_live_*` resource key. These credential types are not interchangeable.  This document is a deliberate subset of the `/api/v1` surface, not an inventory of it. The seller-side management endpoints — `/api/v1/agents`, `/api/v1/webhook_endpoints`, and `/api/v1/analytics` — are reachable with an `ax_live_*` key but are intentionally left undocumented: they are dashboard-facing and not part of the published client contract. Nothing outside this document is a supported contract, and the response-validation gate in `config/environments/test.rb` enforces only what is declared here.  Before claim, a `wbt_*` bearer is temporary and permits only search plus its own status/cancel operations for 30 minutes. Human approval binds it to the User and promotes the same secret to durable identity, search, balance, fetch, purchase-history, status, and revocation capabilities. It remains valid until revoked. Seller, organization, API-key administration, dashboard-session, transfer, withdrawal, and MCP surfaces always refuse it.  Bootstrap lifecycle successes follow the API-standard `{ \"data\": ... }` envelope. All errors share the envelope defined by `ErrorResponse`, except the buyer-runtime endpoints (`/search`, `/fetch`) which use bespoke envelopes carrying additional context — see `SearchErrorResponse` and `FetchErrorResponse`.
+#The Weft API powers the `weft` CLI, the hosted MCP server (`weft.network/mcp`), and third-party applications that discover and pay for resources on Weft. The buyer runtime covers six concerns:    1. Account creation and recovery (`/api/v1/auth/*`)   2. Credential identity (`/api/v1/me`)   3. Wallet visibility (`/api/v1/balance`)   4. Discovery (`/api/v1/search`)   5. Paid execution (`/api/v1/fetch`)   6. Purchase history (`/api/v1/purchases`)  Buyer runtime calls require a dashboard-created `wk_*` account key, an OAuth access token with the relevant scope, or a claimed `wbt_*` bearer on its fixed allowlist. The organization-scoped API key and payment operations in this document are seller administration surfaces and require an `ax_live_*` resource key. These credential types are not interchangeable.  This document is a deliberate subset of the `/api/v1` surface, not an inventory of it. The seller-side management endpoints — `/api/v1/agents` and `/api/v1/analytics` — are reachable with an `ax_live_*` key but are intentionally left undocumented: they are dashboard-facing and not part of the published client contract. `/api/v1/webhook_endpoints` stays routed and returns HTTP 410 with error code `gone` for index, show, create, update, and destroy. Nothing outside this document is a supported contract, and the response-validation gate in `config/environments/test.rb` enforces only what is declared here.  Before claim, a `wbt_*` bearer is temporary and permits only search plus its own status/cancel operations for 30 minutes. Human approval binds it to the User and promotes the same secret to durable identity, search, balance, fetch, purchase-history, status, and revocation capabilities. It remains valid until revoked. Seller, organization, API-key administration, dashboard-session, transfer, withdrawal, and MCP surfaces always refuse it.  Bootstrap lifecycle successes follow the API-standard `{ \"data\": ... }` envelope. All errors share the envelope defined by `ErrorResponse`, except the buyer-runtime endpoints (`/search`, `/fetch`) which use bespoke envelopes carrying additional context — see `SearchErrorResponse` and `FetchErrorResponse`.
 
-The version of the OpenAPI document: 0.24.0
+The version of the OpenAPI document: 0.32.2
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.19.0

data/lib/weft/generated/api/agent_bootstrap_api.rb

@@ -1,9 +1,9 @@
 =begin
 #Weft API
 
-#The Weft API powers the `weft` CLI, the hosted MCP server (`weft.network/mcp`), and third-party applications that discover and pay for resources on Weft. The buyer runtime covers six concerns:    1. Account creation and recovery (`/api/v1/auth/*`)   2. Credential identity (`/api/v1/me`)   3. Wallet visibility (`/api/v1/balance`)   4. Discovery (`/api/v1/search`)   5. Paid execution (`/api/v1/fetch`)   6. Purchase history (`/api/v1/purchases`)  Buyer runtime calls require a dashboard-created `wk_*` account key, an OAuth access token with the relevant scope, or a claimed `wbt_*` bearer on its fixed allowlist. The organization-scoped API key and payment operations in this document are seller administration surfaces and require an `ax_live_*` resource key. These credential types are not interchangeable.  This document is a deliberate subset of the `/api/v1` surface, not an inventory of it. The seller-side management endpoints — `/api/v1/agents`, `/api/v1/webhook_endpoints`, and `/api/v1/analytics` — are reachable with an `ax_live_*` key but are intentionally left undocumented: they are dashboard-facing and not part of the published client contract. Nothing outside this document is a supported contract, and the response-validation gate in `config/environments/test.rb` enforces only what is declared here.  Before claim, a `wbt_*` bearer is temporary and permits only search plus its own status/cancel operations for 30 minutes. Human approval binds it to the User and promotes the same secret to durable identity, search, balance, fetch, purchase-history, status, and revocation capabilities. It remains valid until revoked. Seller, organization, API-key administration, dashboard-session, transfer, withdrawal, and MCP surfaces always refuse it.  Bootstrap lifecycle successes follow the API-standard `{ \"data\": ... }` envelope. All errors share the envelope defined by `ErrorResponse`, except the buyer-runtime endpoints (`/search`, `/fetch`) which use bespoke envelopes carrying additional context — see `SearchErrorResponse` and `FetchErrorResponse`.
+#The Weft API powers the `weft` CLI, the hosted MCP server (`weft.network/mcp`), and third-party applications that discover and pay for resources on Weft. The buyer runtime covers six concerns:    1. Account creation and recovery (`/api/v1/auth/*`)   2. Credential identity (`/api/v1/me`)   3. Wallet visibility (`/api/v1/balance`)   4. Discovery (`/api/v1/search`)   5. Paid execution (`/api/v1/fetch`)   6. Purchase history (`/api/v1/purchases`)  Buyer runtime calls require a dashboard-created `wk_*` account key, an OAuth access token with the relevant scope, or a claimed `wbt_*` bearer on its fixed allowlist. The organization-scoped API key and payment operations in this document are seller administration surfaces and require an `ax_live_*` resource key. These credential types are not interchangeable.  This document is a deliberate subset of the `/api/v1` surface, not an inventory of it. The seller-side management endpoints — `/api/v1/agents` and `/api/v1/analytics` — are reachable with an `ax_live_*` key but are intentionally left undocumented: they are dashboard-facing and not part of the published client contract. `/api/v1/webhook_endpoints` stays routed and returns HTTP 410 with error code `gone` for index, show, create, update, and destroy. Nothing outside this document is a supported contract, and the response-validation gate in `config/environments/test.rb` enforces only what is declared here.  Before claim, a `wbt_*` bearer is temporary and permits only search plus its own status/cancel operations for 30 minutes. Human approval binds it to the User and promotes the same secret to durable identity, search, balance, fetch, purchase-history, status, and revocation capabilities. It remains valid until revoked. Seller, organization, API-key administration, dashboard-session, transfer, withdrawal, and MCP surfaces always refuse it.  Bootstrap lifecycle successes follow the API-standard `{ \"data\": ... }` envelope. All errors share the envelope defined by `ErrorResponse`, except the buyer-runtime endpoints (`/search`, `/fetch`) which use bespoke envelopes carrying additional context — see `SearchErrorResponse` and `FetchErrorResponse`.
 
-The version of the OpenAPI document: 0.24.0
+The version of the OpenAPI document: 0.32.2
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.19.0

data/lib/weft/generated/api/api_keys_api.rb

@@ -1,9 +1,9 @@
 =begin
 #Weft API
 
-#The Weft API powers the `weft` CLI, the hosted MCP server (`weft.network/mcp`), and third-party applications that discover and pay for resources on Weft. The buyer runtime covers six concerns:    1. Account creation and recovery (`/api/v1/auth/*`)   2. Credential identity (`/api/v1/me`)   3. Wallet visibility (`/api/v1/balance`)   4. Discovery (`/api/v1/search`)   5. Paid execution (`/api/v1/fetch`)   6. Purchase history (`/api/v1/purchases`)  Buyer runtime calls require a dashboard-created `wk_*` account key, an OAuth access token with the relevant scope, or a claimed `wbt_*` bearer on its fixed allowlist. The organization-scoped API key and payment operations in this document are seller administration surfaces and require an `ax_live_*` resource key. These credential types are not interchangeable.  This document is a deliberate subset of the `/api/v1` surface, not an inventory of it. The seller-side management endpoints — `/api/v1/agents`, `/api/v1/webhook_endpoints`, and `/api/v1/analytics` — are reachable with an `ax_live_*` key but are intentionally left undocumented: they are dashboard-facing and not part of the published client contract. Nothing outside this document is a supported contract, and the response-validation gate in `config/environments/test.rb` enforces only what is declared here.  Before claim, a `wbt_*` bearer is temporary and permits only search plus its own status/cancel operations for 30 minutes. Human approval binds it to the User and promotes the same secret to durable identity, search, balance, fetch, purchase-history, status, and revocation capabilities. It remains valid until revoked. Seller, organization, API-key administration, dashboard-session, transfer, withdrawal, and MCP surfaces always refuse it.  Bootstrap lifecycle successes follow the API-standard `{ \"data\": ... }` envelope. All errors share the envelope defined by `ErrorResponse`, except the buyer-runtime endpoints (`/search`, `/fetch`) which use bespoke envelopes carrying additional context — see `SearchErrorResponse` and `FetchErrorResponse`.
+#The Weft API powers the `weft` CLI, the hosted MCP server (`weft.network/mcp`), and third-party applications that discover and pay for resources on Weft. The buyer runtime covers six concerns:    1. Account creation and recovery (`/api/v1/auth/*`)   2. Credential identity (`/api/v1/me`)   3. Wallet visibility (`/api/v1/balance`)   4. Discovery (`/api/v1/search`)   5. Paid execution (`/api/v1/fetch`)   6. Purchase history (`/api/v1/purchases`)  Buyer runtime calls require a dashboard-created `wk_*` account key, an OAuth access token with the relevant scope, or a claimed `wbt_*` bearer on its fixed allowlist. The organization-scoped API key and payment operations in this document are seller administration surfaces and require an `ax_live_*` resource key. These credential types are not interchangeable.  This document is a deliberate subset of the `/api/v1` surface, not an inventory of it. The seller-side management endpoints — `/api/v1/agents` and `/api/v1/analytics` — are reachable with an `ax_live_*` key but are intentionally left undocumented: they are dashboard-facing and not part of the published client contract. `/api/v1/webhook_endpoints` stays routed and returns HTTP 410 with error code `gone` for index, show, create, update, and destroy. Nothing outside this document is a supported contract, and the response-validation gate in `config/environments/test.rb` enforces only what is declared here.  Before claim, a `wbt_*` bearer is temporary and permits only search plus its own status/cancel operations for 30 minutes. Human approval binds it to the User and promotes the same secret to durable identity, search, balance, fetch, purchase-history, status, and revocation capabilities. It remains valid until revoked. Seller, organization, API-key administration, dashboard-session, transfer, withdrawal, and MCP surfaces always refuse it.  Bootstrap lifecycle successes follow the API-standard `{ \"data\": ... }` envelope. All errors share the envelope defined by `ErrorResponse`, except the buyer-runtime endpoints (`/search`, `/fetch`) which use bespoke envelopes carrying additional context — see `SearchErrorResponse` and `FetchErrorResponse`.
 
-The version of the OpenAPI document: 0.24.0
+The version of the OpenAPI document: 0.32.2
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.19.0

data/lib/weft/generated/api/auth_api.rb

@@ -1,9 +1,9 @@
 =begin
 #Weft API
 
-#The Weft API powers the `weft` CLI, the hosted MCP server (`weft.network/mcp`), and third-party applications that discover and pay for resources on Weft. The buyer runtime covers six concerns:    1. Account creation and recovery (`/api/v1/auth/*`)   2. Credential identity (`/api/v1/me`)   3. Wallet visibility (`/api/v1/balance`)   4. Discovery (`/api/v1/search`)   5. Paid execution (`/api/v1/fetch`)   6. Purchase history (`/api/v1/purchases`)  Buyer runtime calls require a dashboard-created `wk_*` account key, an OAuth access token with the relevant scope, or a claimed `wbt_*` bearer on its fixed allowlist. The organization-scoped API key and payment operations in this document are seller administration surfaces and require an `ax_live_*` resource key. These credential types are not interchangeable.  This document is a deliberate subset of the `/api/v1` surface, not an inventory of it. The seller-side management endpoints — `/api/v1/agents`, `/api/v1/webhook_endpoints`, and `/api/v1/analytics` — are reachable with an `ax_live_*` key but are intentionally left undocumented: they are dashboard-facing and not part of the published client contract. Nothing outside this document is a supported contract, and the response-validation gate in `config/environments/test.rb` enforces only what is declared here.  Before claim, a `wbt_*` bearer is temporary and permits only search plus its own status/cancel operations for 30 minutes. Human approval binds it to the User and promotes the same secret to durable identity, search, balance, fetch, purchase-history, status, and revocation capabilities. It remains valid until revoked. Seller, organization, API-key administration, dashboard-session, transfer, withdrawal, and MCP surfaces always refuse it.  Bootstrap lifecycle successes follow the API-standard `{ \"data\": ... }` envelope. All errors share the envelope defined by `ErrorResponse`, except the buyer-runtime endpoints (`/search`, `/fetch`) which use bespoke envelopes carrying additional context — see `SearchErrorResponse` and `FetchErrorResponse`.
+#The Weft API powers the `weft` CLI, the hosted MCP server (`weft.network/mcp`), and third-party applications that discover and pay for resources on Weft. The buyer runtime covers six concerns:    1. Account creation and recovery (`/api/v1/auth/*`)   2. Credential identity (`/api/v1/me`)   3. Wallet visibility (`/api/v1/balance`)   4. Discovery (`/api/v1/search`)   5. Paid execution (`/api/v1/fetch`)   6. Purchase history (`/api/v1/purchases`)  Buyer runtime calls require a dashboard-created `wk_*` account key, an OAuth access token with the relevant scope, or a claimed `wbt_*` bearer on its fixed allowlist. The organization-scoped API key and payment operations in this document are seller administration surfaces and require an `ax_live_*` resource key. These credential types are not interchangeable.  This document is a deliberate subset of the `/api/v1` surface, not an inventory of it. The seller-side management endpoints — `/api/v1/agents` and `/api/v1/analytics` — are reachable with an `ax_live_*` key but are intentionally left undocumented: they are dashboard-facing and not part of the published client contract. `/api/v1/webhook_endpoints` stays routed and returns HTTP 410 with error code `gone` for index, show, create, update, and destroy. Nothing outside this document is a supported contract, and the response-validation gate in `config/environments/test.rb` enforces only what is declared here.  Before claim, a `wbt_*` bearer is temporary and permits only search plus its own status/cancel operations for 30 minutes. Human approval binds it to the User and promotes the same secret to durable identity, search, balance, fetch, purchase-history, status, and revocation capabilities. It remains valid until revoked. Seller, organization, API-key administration, dashboard-session, transfer, withdrawal, and MCP surfaces always refuse it.  Bootstrap lifecycle successes follow the API-standard `{ \"data\": ... }` envelope. All errors share the envelope defined by `ErrorResponse`, except the buyer-runtime endpoints (`/search`, `/fetch`) which use bespoke envelopes carrying additional context — see `SearchErrorResponse` and `FetchErrorResponse`.
 
-The version of the OpenAPI document: 0.24.0
+The version of the OpenAPI document: 0.32.2
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.19.0

data/lib/weft/generated/api/balance_api.rb

@@ -1,9 +1,9 @@
 =begin
 #Weft API
 
-#The Weft API powers the `weft` CLI, the hosted MCP server (`weft.network/mcp`), and third-party applications that discover and pay for resources on Weft. The buyer runtime covers six concerns:    1. Account creation and recovery (`/api/v1/auth/*`)   2. Credential identity (`/api/v1/me`)   3. Wallet visibility (`/api/v1/balance`)   4. Discovery (`/api/v1/search`)   5. Paid execution (`/api/v1/fetch`)   6. Purchase history (`/api/v1/purchases`)  Buyer runtime calls require a dashboard-created `wk_*` account key, an OAuth access token with the relevant scope, or a claimed `wbt_*` bearer on its fixed allowlist. The organization-scoped API key and payment operations in this document are seller administration surfaces and require an `ax_live_*` resource key. These credential types are not interchangeable.  This document is a deliberate subset of the `/api/v1` surface, not an inventory of it. The seller-side management endpoints — `/api/v1/agents`, `/api/v1/webhook_endpoints`, and `/api/v1/analytics` — are reachable with an `ax_live_*` key but are intentionally left undocumented: they are dashboard-facing and not part of the published client contract. Nothing outside this document is a supported contract, and the response-validation gate in `config/environments/test.rb` enforces only what is declared here.  Before claim, a `wbt_*` bearer is temporary and permits only search plus its own status/cancel operations for 30 minutes. Human approval binds it to the User and promotes the same secret to durable identity, search, balance, fetch, purchase-history, status, and revocation capabilities. It remains valid until revoked. Seller, organization, API-key administration, dashboard-session, transfer, withdrawal, and MCP surfaces always refuse it.  Bootstrap lifecycle successes follow the API-standard `{ \"data\": ... }` envelope. All errors share the envelope defined by `ErrorResponse`, except the buyer-runtime endpoints (`/search`, `/fetch`) which use bespoke envelopes carrying additional context — see `SearchErrorResponse` and `FetchErrorResponse`.
+#The Weft API powers the `weft` CLI, the hosted MCP server (`weft.network/mcp`), and third-party applications that discover and pay for resources on Weft. The buyer runtime covers six concerns:    1. Account creation and recovery (`/api/v1/auth/*`)   2. Credential identity (`/api/v1/me`)   3. Wallet visibility (`/api/v1/balance`)   4. Discovery (`/api/v1/search`)   5. Paid execution (`/api/v1/fetch`)   6. Purchase history (`/api/v1/purchases`)  Buyer runtime calls require a dashboard-created `wk_*` account key, an OAuth access token with the relevant scope, or a claimed `wbt_*` bearer on its fixed allowlist. The organization-scoped API key and payment operations in this document are seller administration surfaces and require an `ax_live_*` resource key. These credential types are not interchangeable.  This document is a deliberate subset of the `/api/v1` surface, not an inventory of it. The seller-side management endpoints — `/api/v1/agents` and `/api/v1/analytics` — are reachable with an `ax_live_*` key but are intentionally left undocumented: they are dashboard-facing and not part of the published client contract. `/api/v1/webhook_endpoints` stays routed and returns HTTP 410 with error code `gone` for index, show, create, update, and destroy. Nothing outside this document is a supported contract, and the response-validation gate in `config/environments/test.rb` enforces only what is declared here.  Before claim, a `wbt_*` bearer is temporary and permits only search plus its own status/cancel operations for 30 minutes. Human approval binds it to the User and promotes the same secret to durable identity, search, balance, fetch, purchase-history, status, and revocation capabilities. It remains valid until revoked. Seller, organization, API-key administration, dashboard-session, transfer, withdrawal, and MCP surfaces always refuse it.  Bootstrap lifecycle successes follow the API-standard `{ \"data\": ... }` envelope. All errors share the envelope defined by `ErrorResponse`, except the buyer-runtime endpoints (`/search`, `/fetch`) which use bespoke envelopes carrying additional context — see `SearchErrorResponse` and `FetchErrorResponse`.
 
-The version of the OpenAPI document: 0.24.0
+The version of the OpenAPI document: 0.32.2
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.19.0

data/lib/weft/generated/api/documentation_api.rb

@@ -1,9 +1,9 @@
 =begin
 #Weft API
 
-#The Weft API powers the `weft` CLI, the hosted MCP server (`weft.network/mcp`), and third-party applications that discover and pay for resources on Weft. The buyer runtime covers six concerns:    1. Account creation and recovery (`/api/v1/auth/*`)   2. Credential identity (`/api/v1/me`)   3. Wallet visibility (`/api/v1/balance`)   4. Discovery (`/api/v1/search`)   5. Paid execution (`/api/v1/fetch`)   6. Purchase history (`/api/v1/purchases`)  Buyer runtime calls require a dashboard-created `wk_*` account key, an OAuth access token with the relevant scope, or a claimed `wbt_*` bearer on its fixed allowlist. The organization-scoped API key and payment operations in this document are seller administration surfaces and require an `ax_live_*` resource key. These credential types are not interchangeable.  This document is a deliberate subset of the `/api/v1` surface, not an inventory of it. The seller-side management endpoints — `/api/v1/agents`, `/api/v1/webhook_endpoints`, and `/api/v1/analytics` — are reachable with an `ax_live_*` key but are intentionally left undocumented: they are dashboard-facing and not part of the published client contract. Nothing outside this document is a supported contract, and the response-validation gate in `config/environments/test.rb` enforces only what is declared here.  Before claim, a `wbt_*` bearer is temporary and permits only search plus its own status/cancel operations for 30 minutes. Human approval binds it to the User and promotes the same secret to durable identity, search, balance, fetch, purchase-history, status, and revocation capabilities. It remains valid until revoked. Seller, organization, API-key administration, dashboard-session, transfer, withdrawal, and MCP surfaces always refuse it.  Bootstrap lifecycle successes follow the API-standard `{ \"data\": ... }` envelope. All errors share the envelope defined by `ErrorResponse`, except the buyer-runtime endpoints (`/search`, `/fetch`) which use bespoke envelopes carrying additional context — see `SearchErrorResponse` and `FetchErrorResponse`.
+#The Weft API powers the `weft` CLI, the hosted MCP server (`weft.network/mcp`), and third-party applications that discover and pay for resources on Weft. The buyer runtime covers six concerns:    1. Account creation and recovery (`/api/v1/auth/*`)   2. Credential identity (`/api/v1/me`)   3. Wallet visibility (`/api/v1/balance`)   4. Discovery (`/api/v1/search`)   5. Paid execution (`/api/v1/fetch`)   6. Purchase history (`/api/v1/purchases`)  Buyer runtime calls require a dashboard-created `wk_*` account key, an OAuth access token with the relevant scope, or a claimed `wbt_*` bearer on its fixed allowlist. The organization-scoped API key and payment operations in this document are seller administration surfaces and require an `ax_live_*` resource key. These credential types are not interchangeable.  This document is a deliberate subset of the `/api/v1` surface, not an inventory of it. The seller-side management endpoints — `/api/v1/agents` and `/api/v1/analytics` — are reachable with an `ax_live_*` key but are intentionally left undocumented: they are dashboard-facing and not part of the published client contract. `/api/v1/webhook_endpoints` stays routed and returns HTTP 410 with error code `gone` for index, show, create, update, and destroy. Nothing outside this document is a supported contract, and the response-validation gate in `config/environments/test.rb` enforces only what is declared here.  Before claim, a `wbt_*` bearer is temporary and permits only search plus its own status/cancel operations for 30 minutes. Human approval binds it to the User and promotes the same secret to durable identity, search, balance, fetch, purchase-history, status, and revocation capabilities. It remains valid until revoked. Seller, organization, API-key administration, dashboard-session, transfer, withdrawal, and MCP surfaces always refuse it.  Bootstrap lifecycle successes follow the API-standard `{ \"data\": ... }` envelope. All errors share the envelope defined by `ErrorResponse`, except the buyer-runtime endpoints (`/search`, `/fetch`) which use bespoke envelopes carrying additional context — see `SearchErrorResponse` and `FetchErrorResponse`.
 
-The version of the OpenAPI document: 0.24.0
+The version of the OpenAPI document: 0.32.2
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.19.0