growsurf-ruby 1.1.1 → 1.1.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 29876fdbf502b86b0f96ce35e6c28d81f4e225b37a214306595c344e7552a5cb
-  data.tar.gz: 036aea5854c54da9166b77ca1a3e9c8437f4551332856f730d05387dc44759f6
+  metadata.gz: d8076462c15a156d463bf26bb5f654d2baf7a6795204be7b8ef79a9dd2ae2053
+  data.tar.gz: da320558ee220ff66aac11869a410cdcb402084b9563985763da99c47cce1755
 SHA512:
-  metadata.gz: 8653bef46e7cca5d928f99fbff808dd91d2ce46eabf7381c407e63b13c0c6009306587d1162bd6c0c22a7eb00eb62f570be1d5eebc776b2e8adf3046c53160a4
-  data.tar.gz: a7280a0256a42be4a2577f9070d2fc1132edc376b98d3131f8fc35172221e1ef3acc5934eb18d13c16492c7a6a25f54cdbc88c27fcd3fc579873a3569261b9b6
+  metadata.gz: d5c1d9647d05936815ddae19a40e12a06cf4d1ed469f27c86dc03b543b3abd9895923e494c4bb0f7a28ba50c0c219bafa78276c0feb15d94f08b43d40b59f908
+  data.tar.gz: fe5bcdf5683be8d8dbf038f33ca365d66d5959f5c3d3a5b7e9c8e9717e0970564d8d5ac9b6d625bbf1af24edda057405aacefd9f4a35e6cd7c48f2aac1023a51

data/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [1.1.2](https://github.com/growsurf/growsurf-ruby/compare/v1.1.1...v1.1.2) (2026-07-11)
+
+
+### Bug Fixes
+
+* support retry-safe API key rotation ([939cd05](https://github.com/growsurf/growsurf-ruby/commit/939cd054446d85e411652ae77d37d4351c1ad6ab))
+
 ## [1.1.1](https://github.com/growsurf/growsurf-ruby/compare/v1.1.0...v1.1.1) (2026-07-09)
 
 

data/README.md

@@ -17,7 +17,7 @@ To use this gem, install via Bundler by adding the following to your application
 <!-- x-release-please-start-version -->
 
 ```ruby
-gem "growsurf-ruby", "~> 1.1.1"
+gem "growsurf-ruby", "~> 1.1.2"
 ```
 
 <!-- x-release-please-end -->

data/lib/growsurf_ruby/client.rb

@@ -84,6 +84,7 @@ module GrowsurfRuby
         max_retries: max_retries,
         initial_retry_delay: initial_retry_delay,
         max_retry_delay: max_retry_delay,
+        idempotency_header: "Idempotency-Key",
         headers: headers
       )
 

data/lib/growsurf_ruby/models/account_rotate_api_key_response.rb

@@ -5,13 +5,13 @@ module GrowsurfRuby
     # @see GrowsurfRuby::Resources::Account#rotate_api_key
     class AccountRotateAPIKeyResponse < GrowsurfRuby::Internal::Type::BaseModel
       # @!attribute api_key
-      #   The new API key. The previous key is revoked immediately.
+      #   The new API key. Store it now; the key used for rotation stops working immediately.
       #
       #   @return [String]
       required :api_key, String, api_name: :apiKey
 
       # @!method initialize(api_key:)
-      #   @param api_key [String] The new API key. The previous key is revoked immediately.
+      #   @param api_key [String] The new API key. Store it now; the key used for rotation stops working immediately.
     end
   end
 end

data/lib/growsurf_ruby/resources/account.rb

@@ -4,9 +4,10 @@ module GrowsurfRuby
   module Resources
     class Account
       # Creates a new GrowSurf account. This is the only endpoint that does not require
-      # an API key. The response includes an API key for the new account, but the key is
-      # locked until the account's email address is verified: authenticated endpoints
-      # outside the `Accounts` group return a `403` with error code
+      # an API key. The response includes an API key for the new account, shown once
+      # in the response. The key is locked until the account's email address is
+      # verified: authenticated endpoints outside the `Accounts` group return a `403`
+      # with error code
       # `EMAIL_NOT_VERIFIED_ERROR` until then (resend the email via `POST
       # /account/verification-email`, then retry). A welcome email is sent to the
       # address with the verification link and a set-password link for dashboard
@@ -91,10 +92,12 @@ module GrowsurfRuby
         )
       end
 
-      # Generates a new API key and immediately revokes the old one. The key used to make
-      # this request stops working as soon as the response is returned — update every
-      # integration that used the old key with the new one. The account owner is
-      # notified by email whenever the key is rotated.
+      # Generates a new API key and invalidates the key used for the request. The SDK
+      # sends a retry-safe `Idempotency-Key`, so automatic retries return the same
+      # replacement. Store the returned key, then update every integration that used
+      # the old key. The account owner is notified by email whenever the key is rotated.
+      # Requires an API key with `api_key:rotate`. This operation is available only through
+      # the REST API or a GrowSurf API SDK, not through MCP.
       #
       # @overload rotate_api_key(request_options: {})
       #

data/lib/growsurf_ruby/resources/campaign/reward.rb

@@ -33,7 +33,8 @@ module GrowsurfRuby
           )
         end
 
-        # Approves a manually approved reward earned by a participant.
+        # Approves a manually approved reward earned by a participant. Requires
+        # `reward:write`. Passing `fulfill: true` also requires `reward:fulfill`.
         #
         # @overload approve(reward_id, id:, fulfill: nil, request_options: {})
         #
@@ -63,7 +64,7 @@ module GrowsurfRuby
           )
         end
 
-        # Marks an approved participant reward as fulfilled.
+        # Marks an approved participant reward as fulfilled. Requires `reward:fulfill`.
         #
         # @overload fulfill(reward_id, id:, request_options: {})
         #

data/lib/growsurf_ruby/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module GrowsurfRuby
-  VERSION = "1.1.1"
+  VERSION = "1.1.2"
 end

data/rbi/growsurf_ruby/models/account_rotate_api_key_response.rbi

@@ -11,13 +11,13 @@ module GrowsurfRuby
           )
         end
 
-      # The new API key. The previous key is revoked immediately.
+      # The new API key. Store it now; the key used for rotation stops working immediately.
       sig { returns(String) }
       attr_accessor :api_key
 
       sig { params(api_key: String).returns(T.attached_class) }
       def self.new(
-        # The new API key. The previous key is revoked immediately.
+        # The new API key. Store it now; the key used for rotation stops working immediately.
         api_key:
       )
       end

data/rbi/growsurf_ruby/resources/account.rbi

@@ -4,9 +4,10 @@ module GrowsurfRuby
   module Resources
     class Account
       # Creates a new GrowSurf account. This is the only endpoint that does not require
-      # an API key. The response includes an API key for the new account, but the key is
-      # locked until the account's email address is verified: authenticated endpoints
-      # outside the `Accounts` group return a `403` with error code
+      # an API key. The response includes an API key for the new account, shown once
+      # in the response. The key is locked until the account's email address is
+      # verified: authenticated endpoints outside the `Accounts` group return a `403`
+      # with error code
       # `EMAIL_NOT_VERIFIED_ERROR` until then (resend the email via `POST
       # /account/verification-email`, then retry). A welcome email is sent to the
       # address with the verification link and a set-password link for dashboard
@@ -67,10 +68,12 @@ module GrowsurfRuby
       )
       end
 
-      # Generates a new API key and immediately revokes the old one. The key used to make
-      # this request stops working as soon as the response is returned — update every
-      # integration that used the old key with the new one. The account owner is
-      # notified by email whenever the key is rotated.
+      # Generates a new API key and invalidates the key used for the request. The SDK
+      # sends a retry-safe `Idempotency-Key`, so automatic retries return the same
+      # replacement. Store the returned key, then update every integration that used
+      # the old key. The account owner is notified by email whenever the key is rotated.
+      # Requires an API key with `api_key:rotate`. This operation is available only through
+      # the REST API or a GrowSurf API SDK, not through MCP.
       sig do
         params(request_options: GrowsurfRuby::RequestOptions::OrHash).returns(
           GrowsurfRuby::Models::AccountRotateAPIKeyResponse

data/rbi/growsurf_ruby/resources/campaign/reward.rbi

@@ -23,7 +23,8 @@ module GrowsurfRuby
         )
         end
 
-        # Approves a manually approved reward earned by a participant.
+        # Approves a manually approved reward earned by a participant. Requires
+        # `reward:write`. Passing `fulfill: true` also requires `reward:fulfill`.
         sig do
           params(
             reward_id: String,
@@ -43,7 +44,7 @@ module GrowsurfRuby
         )
         end
 
-        # Marks an approved participant reward as fulfilled.
+        # Marks an approved participant reward as fulfilled. Requires `reward:fulfill`.
         sig do
           params(
             reward_id: String,

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: growsurf-ruby
 version: !ruby/object:Gem::Version
-  version: 1.1.1
+  version: 1.1.2
 platform: ruby
 authors:
 - Growsurf
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-07-09 00:00:00.000000000 Z
+date: 2026-07-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: cgi