wefunder 0.1.0.beta3 → 1.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a3ac10a62a698ee6cb163f3ec6e100248d461dc6c55bf97caeb1bac349b44af6
-  data.tar.gz: 26d0e08433a88d288942da627f8d509ffa196e6e2ed3cc347bae43beadaf84bf
+  metadata.gz: f82d3280df8bafaa7518ab69f7af96d3bdfb1a2e253b6b6fb22794f65d40c701
+  data.tar.gz: ff14e7f509d6868ed74b89beefd709cc7b9f30d84a5fdb54a7490193babfa8e5
 SHA512:
-  metadata.gz: 4ee97ef8052e3e7a9476a8b0243b52a706bfd2c6a5911e1b9362c07e5d5d6290529615ed6daace3d953769d126a492440692ebef5191cd7846c418a70f6a54b5
-  data.tar.gz: 535800baceafa25b8fcb744d2a1fc16a0596e14d80db5fba6f0c83772ee371c16a361335f82819b5a5e664bf016d17b008d3ff46a3f07f527eab491d8aa36bdd
+  metadata.gz: 669cdc32cae0a4218a827efdc5418d8060fc6667b6c7b7c1ecef0405c232eaa37935e32ec6970b233ccc8e43e4638d447fcc7fec2eb61e9d8e53d9732972a941
+  data.tar.gz: 708b4b330bf19f2ab9af55369576ac2a30e7ca7a1a9a7d989a5ee353869f46ca0162c2f7271e801650c601d64a0a2d2b21d85a8eeb76c8798c840d06e2755eba

data/README.md

@@ -17,12 +17,12 @@ Requires Ruby 3.2+.
 ## Install
 
 ```bash
-gem install wefunder --pre
+gem install wefunder
 # or in a Gemfile:
-gem "wefunder", "~> 0.1.0.beta"
+gem "wefunder", "~> 1.0"
 ```
 
-`--pre` is needed while the SDK is in beta (pre-release gems are not selected by default).
+The SDK follows semantic versioning from `1.0.0`: breaking changes only in a new major version, announced in the changelog.
 
 ## Authentication
 
@@ -103,8 +103,12 @@ portfolio = wf.portfolio.get
 ```
 
 Namespaces: `users`, `offerings`, `investments`, `portfolio`, `campaigns`, `syndicates`, `intents`,
-`attribution`, and `webhook_endpoints`. Query parameters are keyword arguments; enum-typed ones take
-plain strings, and `Time` / `DateTime` / `Date` values are sent as ISO 8601.
+`attribution`, `installations`, and `webhook_endpoints`. Query parameters are keyword arguments;
+enum-typed ones take plain strings, and `Time` / `DateTime` / `Date` values are sent as ISO 8601.
+
+`wf.installations` lets your app act as a company or syndicate: `eligible_targets`, `create`,
+`mint_token`, `list`, `get`, `revoke`, and `install_or_mint_token`, which handles the API's 409
+`already_installed` answer by minting a token for the existing install with the same scopes.
 
 `wf.investments` is the Investment Delta API. `list` without a cursor bootstraps; pass `updated_since:`
 or the `meta.next_cursor` you saved from your last page to receive only records that changed since then.

data/lib/wefunder/client.rb

@@ -26,7 +26,7 @@ module Wefunder
   # typed-error unwrapping, and lazy auto-pagination. +raw+ exposes every generated API.
   class Client
     attr_reader :mode, :users, :offerings, :investments, :portfolio, :campaigns, :syndicates, :intents,
-                :attribution, :webhook_endpoints
+                :attribution, :installations, :webhook_endpoints
 
     def initialize(access_token: nil, tokens: nil, client_id: nil, client_secret: nil, client_credentials: nil,
                    api_version: DEFAULT_API_VERSION, base_url: DEFAULT_API_BASE_URL, authorize_base_url: nil,
@@ -53,6 +53,7 @@ module Wefunder
       @syndicates = Syndicates.new(self)
       @intents = Intents.new(self)
       @attribution = Attribution.new(self)
+      @installations = Installations.new(self)
       @webhook_endpoints = WebhookEndpoints.new(self)
     end
 
@@ -275,6 +276,58 @@ module Wefunder
       def me = data_of(wrap { raw.attribution_partners.get_attribution_me })
     end
 
+    # /installations (read:installations / write:installations; write does not imply read). An
+    # install lets your app act AS a company or syndicate: +create+ and +mint_token+ return the
+    # envelope whose +token.access_token+ is a company-owned token (shown once, no expiry, no
+    # refresh) — build a second client with it. Installing is also what makes a company or
+    # syndicate an audience for your webhooks.
+    class Installations < Namespace
+      # Companies / syndicates the token's user may install your app on (empty for an investor).
+      def eligible_targets(target_type: nil)
+        opts = target_type ? { target_type: target_type } : {}
+        data_of(wrap { raw.installations.list_eligible_install_targets(opts) }) || []
+      end
+
+      # Every install of your app; the envelope (+meta.count+).
+      def list = wrap { raw.installations.list_installations }
+      def get(installation_id) = data_of(wrap { raw.installations.get_installation(installation_id) })
+
+      # Install on a target (+target_type:+, +target_id:+, optional +scopes:+ / +tier:+). Returns the
+      # envelope: +data+ is the install, +token.access_token+ the one-time token. If the app is
+      # already installed there the API answers 409 +already_installed+ with
+      # +details["installation"]+ = the existing id; see +install_or_mint_token+.
+      def create(**attrs)
+        attrs = attrs.transform_keys(&:to_sym)
+        wrap { raw.installations.create_installation(WefunderGenerated::CreateInstallationRequest.new(attrs)) }
+      end
+
+      # A fresh company-owned token for an existing install. +scopes+ narrows within the install's
+      # ceiling; omit for the ceiling. An explicit +[]+ grants nothing, so only nil omits the body.
+      def mint_token(installation_id, scopes = nil)
+        opts = {}
+        opts[:create_installation_token_request] = WefunderGenerated::CreateInstallationTokenRequest.new(scopes: scopes) if scopes
+        wrap { raw.installations.create_installation_token(installation_id, opts) }
+      end
+
+      # +create+, falling back to +mint_token+ for the existing install on 409 +already_installed+.
+      # The mint re-requests +scopes+ so a retry never widens the grant. Any other error (revoked
+      # install, missing scope) still raises.
+      def install_or_mint_token(**attrs)
+        # Normalize once so the fallback re-requests exactly what create sent — string-keyed
+        # attrs (e.g. from JSON.parse) must not turn a restricted or empty grant into the ceiling.
+        attrs = attrs.transform_keys(&:to_sym)
+        create(**attrs)
+      rescue Wefunder::Error => e
+        existing_id = e.details["installation"] if e.type == "already_installed" && e.details.is_a?(Hash)
+        raise unless existing_id.is_a?(String) && !existing_id.empty?
+
+        mint_token(existing_id, attrs[:scopes])
+      end
+
+      # Revoke an install: its tokens stop working at once. Returns the install, now +revoked+.
+      def revoke(installation_id) = data_of(wrap { raw.installations.revoke_installation(installation_id) })
+    end
+
     # Endpoints belong to your application and are managed through the LIVE API
     # (write:webhooks). The signing secret is returned only on create and rotate.
     class WebhookEndpoints < Namespace

data/lib/wefunder/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Wefunder
-  VERSION = "0.1.0.beta3"
+  VERSION = "1.0.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: wefunder
 version: !ruby/object:Gem::Version
-  version: 0.1.0.beta3
+  version: 1.0.0
 platform: ruby
 authors:
 - Wefunder
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-10-02 00:00:00.000000000 Z
+date: 2026-10-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: faraday
@@ -452,5 +452,5 @@ requirements: []
 rubygems_version: 3.5.22
 signing_key:
 specification_version: 4
-summary: Official Ruby SDK for the Wefunder API (beta)
+summary: Official Ruby SDK for the Wefunder API
 test_files: []