basecamp-sdk 0.23.0 → 0.25.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 970062728951b90280186908c54935e720d7297edf23230a9f0a7ccc57804376
-  data.tar.gz: d26a1714e8e59778e2563180531d0835f274f53bdab6f2ebf0edba8d79ab353f
+  metadata.gz: 7713550a3bc2d6b5dd732e3bdadb679d5016316e9f4004677c028a30daa65371
+  data.tar.gz: 71b74a2b499c484f245669d9b317df4f826c799f2d2bbda0cce140a75b22884f
 SHA512:
-  metadata.gz: 8d7e0cda0be190fbc8d4d40cbe27529b45cc2226e462154dfe2509b80acaf2295da8a1593f1832defd0003b7ff59971df9f416c82ab6adf2ef8094cb29a0aa9d
-  data.tar.gz: d7fb5dfdb49af2eef1740528ef96a88801d0c8e66ef0dc025fc8c9e848456b414fa5187ce56bbaff7fdffdc3967cdb1272325e83ff39f287ffb8d7f8c7ec59e7
+  metadata.gz: a5f430f32c8ef3e13f0b3690ec31223bc942f06bc907708fe33fbfa84b99a86dcfe56a2734ef0e8224f5cfdfdc41ce4c28703e8321c6ba88330bba4bedf775f0
+  data.tar.gz: 834ea9c748c9d64ce67089e765875bf8c6c56a52ce0d895629b1c02f4d6e2acbdcb63b566a563c19823ce1c3199016b02fba3c92136bbbd5cb67cf6d950a0744

data/lib/basecamp/generated/metadata.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://basecamp.com/schemas/sdk-metadata.json",
   "version": "1.0.0",
-  "generated": "2026-10-05T19:11:15Z",
+  "generated": "2026-10-15T16:04:42Z",
   "operations": {
     "GetAccount": {
       "retry": {

data/lib/basecamp/generated/services/boosts_service.rb

@@ -48,7 +48,7 @@ module Basecamp
         end
       end
 
-      # List boosts on a specific event within a recording
+      # List boosts on a specific event within a recording. Only boostable events carry boosts: those whose action is completed, adopted, column_changed or moved_in (their JSON includes boosts_count and boosts_url). Any other event answers 403 Forbidden; an event on a recording the person cannot see answers 404.
       # @param recording_id [Integer] recording id ID
       # @param event_id [Integer] event id ID
       # @param page [Integer, nil] Page number for paginating through results. Defaults to 1. A positive value selects exactly that page, not a starting offset; see SPEC section 8.
@@ -61,7 +61,7 @@ module Basecamp
         end
       end
 
-      # Create a boost on a specific event within a recording
+      # Create a boost on a specific event within a recording. Only boostable events accept one: those whose action is completed, adopted, column_changed or moved_in (their JSON includes boosts_count and boosts_url). Any other event answers 403 Forbidden, as does an event on a recording whose comments are closed; an event on a recording the person cannot see answers 404.
       # @param recording_id [Integer] recording id ID
       # @param event_id [Integer] event id ID
       # @param content [String] content

data/lib/basecamp/generated/services/card_columns_service.rb

@@ -89,11 +89,14 @@ module Basecamp
         end
       end
 
-      # Move a column within a card table
+      # Move a column to a slot within its card table. target_id is the card table's own id (the same as cardTableId), not a column; position is the 1-based slot among the columns, not counting Triage, Not Now or Done.
       # @param card_table_id [Integer] card table id ID
-      # @param source_id [Integer] source id
-      # @param target_id [Integer] target id
-      # @param position [Integer, nil] position
+      # @param source_id [Integer] The column to move.
+      # @param target_id [Integer] The card table the column moves within: the same id as `cardTableId`.
+      #   Basecamp refuses any other destination, a column included, with 422.
+      # @param position [Integer, nil] 1-based slot among the card table's columns, not counting Triage,
+      #   Not Now or Done. 1 puts the column first; a slot past the last puts it
+      #   last. Default: 1.
       # @return [void]
       def move(card_table_id:, source_id:, target_id:, position: nil)
         with_operation(service: "cardcolumns", operation: "move", is_mutation: true, resource_id: card_table_id) do

data/lib/basecamp/generated/services/checkins_service.rb

@@ -81,15 +81,14 @@ module Basecamp
         end
       end
 
-      # Update an existing question
+      # Update an existing question's title, schedule or both. A schedule replaces the whole schedule, so send every part of it: one without frequency or time_of_day is refused, and one without start_date re-anchors the recurrence on today. Pausing and resuming are PauseQuestion and ResumeQuestion.
       # @param question_id [Integer] question id ID
-      # @param title [String, nil] title
+      # @param title [String, nil] The question text. An update carries a title, a schedule or both.
       # @param schedule [Hash, nil] schedule
-      # @param paused [Boolean, nil] paused
       # @return [Hash] response data
-      def update_question(question_id:, title: nil, schedule: nil, paused: nil)
+      def update_question(question_id:, title: nil, schedule: nil)
         with_operation(service: "checkins", operation: "update_question", is_mutation: true, resource_id: question_id) do
-          http_put("/questions/#{question_id}", body: compact_params(title: title, schedule: schedule, paused: paused)).json(operation: "UpdateQuestion")
+          http_put("/questions/#{question_id}", body: compact_params(title: title, schedule: schedule)).json(operation: "UpdateQuestion")
         end
       end
 

data/lib/basecamp/generated/services/lineup_service.rb

@@ -15,26 +15,24 @@ module Basecamp
         end
       end
 
-      # Create a new lineup marker
+      # Create a new lineup marker. Returns the created marker.
       # @param name [String] name
       # @param date [String] date
-      # @return [void]
+      # @return [Hash] response data
       def create(name:, date:)
         with_operation(service: "lineup", operation: "create", is_mutation: true) do
-          http_post("/lineup/markers.json", body: compact_params(name: name, date: date))
-          nil
+          http_post("/lineup/markers.json", body: compact_params(name: name, date: date)).json(operation: "CreateLineupMarker")
         end
       end
 
-      # Update an existing lineup marker
+      # Update an existing lineup marker. Returns the updated marker.
       # @param marker_id [Integer] marker id ID
       # @param name [String, nil] name
       # @param date [String, nil] date
-      # @return [void]
+      # @return [Hash] response data
       def update(marker_id:, name: nil, date: nil)
         with_operation(service: "lineup", operation: "update", is_mutation: true, resource_id: marker_id) do
-          http_put("/lineup/markers/#{marker_id}", body: compact_params(name: name, date: date))
-          nil
+          http_put("/lineup/markers/#{marker_id}", body: compact_params(name: name, date: date)).json(operation: "UpdateLineupMarker")
         end
       end
 

data/lib/basecamp/generated/services/my_notifications_service.rb

@@ -7,7 +7,7 @@ module Basecamp
     # @generated from OpenAPI spec
     class MyNotificationsService < BaseService
 
-      # Get the current user's notification inbox (the "Hey!" menu).
+      # Get the current user's notifications (the "Hey!" menu in Basecamp 4).
       # @param page [Integer, nil] Page number for paginating through read items. Defaults to 1. This
       #   operation is not auto-paginated in any SDK, so a page is returned as
       #   asked for and later pages are not followed.

data/lib/basecamp/generated/types.rb

@@ -1,7 +1,7 @@
 # frozen_string_literal: true
 
 # Auto-generated from OpenAPI spec. Do not edit manually.
-# Generated: 2026-10-05T19:11:15Z
+# Generated: 2026-10-15T16:04:42Z
 
 require "json"
 require "time"
@@ -3299,7 +3299,7 @@ module Basecamp
       include TypeHelpers
       # @!attribute [rw] clientside
       #   @deprecated This shape is deprecated since 2024-01: Use Client Visibility feature instead
-      attr_accessor :app_url, :created_at, :id, :name, :status, :updated_at, :url, :bookmark_url, :bookmarked, :client_company, :clients_enabled, :clientside, :description, :dock, :end_date, :purpose, :star_url, :starred, :start_date
+      attr_accessor :app_url, :created_at, :id, :name, :status, :updated_at, :url, :bookmark_url, :bookmarked, :client_company, :clients_enabled, :clientside, :description, :dock, :end_date, :purpose, :star_url, :starred, :start_date, :timesheet_enabled
 
       # @return [Array<Symbol>]
       def self.required_fields
@@ -3326,6 +3326,7 @@ module Basecamp
         @star_url = data["star_url"]
         @starred = parse_boolean(data["starred"])
         @start_date = data["start_date"]
+        @timesheet_enabled = parse_boolean(data["timesheet_enabled"])
       end
 
       def to_h
@@ -3349,6 +3350,7 @@ module Basecamp
           "star_url" => @star_url,
           "starred" => @starred,
           "start_date" => @start_date,
+          "timesheet_enabled" => @timesheet_enabled,
         }.compact
       end
 

data/lib/basecamp/oauth/exchange.rb

@@ -288,9 +288,16 @@ module Basecamp
       end
 
       def parse_token_response(status, body)
-        data = JSON.parse(body)
+        # A failed request is classified from its status and OAuth error
+        # object BEFORE the body is parsed as a token: a refusal whose body is
+        # not JSON (a bare 401, an HTML error page) must surface as that
+        # refusal, not as a malformed token response.
+        handle_error_response(status, body) unless (200..299).cover?(status)
 
-        handle_error_response(status, data) unless (200..299).cover?(status)
+        data = JSON.parse(body)
+        unless data.is_a?(Hash)
+          raise OauthError.new("api_error", "Token response is not a JSON object", http_status: status)
+        end
 
         unless data["access_token"].is_a?(String) && !data["access_token"].empty?
           raise OauthError.new(
@@ -344,20 +351,49 @@ module Basecamp
         ), cause: nil
       end
 
-      def handle_error_response(status, data)
-        error_msg = Basecamp::Security.truncate(data["error_description"] || data["error"] || "Token request failed")
-
-        if status == 401 || data["error"] == "invalid_grant"
+      # The OAuth error codes a caller resolves by signing in again: the grant
+      # is invalid, expired or revoked (+invalid_grant+), the client failed to
+      # authenticate (+invalid_client+) or may not use this grant
+      # (+unauthorized_client+), or the resource owner refused
+      # (+access_denied+). Classified by code, not status: RFC 6749 §5.2
+      # answers +invalid_client+ with a 400 unless the client authenticated
+      # through the Authorization header, so a 401 cannot be the only signal.
+      # Matches every other SDK's token endpoint (conformance/oauth-token).
+      AUTH_ERROR_CODES = %w[invalid_grant invalid_client unauthorized_client access_denied].freeze
+
+      # Classifies a non-2xx token endpoint response: "auth" for an error code
+      # in AUTH_ERROR_CODES on any status, or for any 401 whatever its body
+      # (Launchpad and other servers refuse with a bare status); "api_error"
+      # for everything else. The body is read only for the RFC 6749 +error+
+      # and +error_description+ members and is never echoed — a body that is
+      # not an OAuth error object contributes nothing.
+      def handle_error_response(status, body)
+        data = oauth_error_object(body)
+        error_code = data["error"] if data["error"].is_a?(String)
+        description = data["error_description"] if data["error_description"].is_a?(String)
+        error_msg = Basecamp::Security.truncate(description || error_code || "Token request failed")
+
+        if status == 401 || AUTH_ERROR_CODES.include?(error_code)
           raise OauthError.new(
             "auth",
             error_msg,
             http_status: status,
-            hint: "The authorization code or refresh token may be invalid or expired"
+            hint: "The authorization server refused this grant or client: authorize again, or check the client credentials"
           )
         end
 
         raise OauthError.new("api_error", error_msg, http_status: status)
       end
+
+      # The response body as an OAuth error object, or {} when it is not one.
+      # The parser error is discarded, never chained: its message embeds the
+      # offending input.
+      def oauth_error_object(body)
+        parsed = JSON.parse(body)
+        parsed.is_a?(Hash) ? parsed : {}
+      rescue JSON::ParserError
+        {}
+      end
     end
   end
 end

data/lib/basecamp/version.rb

@@ -1,6 +1,6 @@
 # frozen_string_literal: true
 
 module Basecamp
-  VERSION = "0.23.0"
+  VERSION = "0.25.0"
   API_VERSION = "2026-09-15"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: basecamp-sdk
 version: !ruby/object:Gem::Version
-  version: 0.23.0
+  version: 0.25.0
 platform: ruby
 authors:
 - Basecamp
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-10-05 00:00:00.000000000 Z
+date: 2026-10-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: faraday