max_api_client 0.1.2 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9a7a9568ed92bf227e962ff1e08005f0d08a1a54c159f771ce30eb18c46665a8
-  data.tar.gz: 4507132c766e8e3f26f967b95516646e601b71ea83057428490c0992528300a3
+  metadata.gz: 7d6578ded53eb4717c32d40728c217f163db0e8149bc813b084c6920692201dd
+  data.tar.gz: 338a01c773c1be6502cd37161bf1b11011a08717fd006055db99e9ff7466716c
 SHA512:
-  metadata.gz: 619624bec359f829957a21b9177794256e68138b94479caa5690c728f728333ad1d39e538ffd0d8dab78a1178f4cf5244770423c1e2f50ac66494ce927a232e0
-  data.tar.gz: e8e107a33f368aee7eab0782659222d5ca3764325a98fe50d8df099250da0c3faf588b4ba62abdf8286e7d212c5cdad144a12968864f318b04db32ca22bd0cf9
+  metadata.gz: a656768c33a27bf0c4d6a61b8eb8c6ef807b2177472c19c99c70ed29ec4f4d9a4ee9dfaec2a8db4d330582040d79b8500d511bcb3dd8e55fd178f98058f8fb09
+  data.tar.gz: 99f540522f43226232847ee792d1950643c7ff56464b693813b60d7a3da6cd07fa155c62978c95630cf8f7da78385ffbe5c6eb48b79392b5ca7e395362901751

data/CHANGELOG.md

@@ -1,7 +1,35 @@
 ## [Unreleased]
 
-- Rewrote `README.md` with installation instructions, project status, TS vs Ruby comparison, and Max Bot API reference sections.
-- Filled gem metadata in `max_api_client.gemspec`.
+## [0.2.0] - 2026-10-03
+
+Synced with Max Bot API schema 0.0.33.
+
+- Added `edit_my_commands` (`PATCH /me/commands`); `set_my_commands` and `delete_my_commands` now use it instead of `PATCH /me`.
+- Added `add_chat_admins` and `remove_chat_admin`.
+- Added comment methods: `get_comments`, `get_comment`, `send_comment`, `edit_comment`, `delete_comment` (`api.raw.comments`).
+- Added `get_video_info` (`GET /videos/{videoToken}`).
+- Added `ContactAttachment`, `InlineKeyboardAttachment` and `Button` builders; attachment objects now serialize to JSON without an explicit `to_h`.
+- Added `limit` to `poll_updates`; an empty `types` list is no longer sent.
+- Fixed `remove_chat_member`: `user_id` and `block` are sent as query parameters, as the schema requires.
+- Fixed `get_message`, which raised `ArgumentError`.
+- Fixed `answer_on_callback`: `disable_link_preview` is sent as a query parameter.
+- `false` query values are now sent as `false` instead of being dropped.
+- Sending a message is retried at most 3 times on `attachment.not.ready`, with exponential backoff.
+- `delete_message` no longer accepts extra options (they raised `ArgumentError`).
+- Deprecated `edit_my_info`, `get_all_chats`, `get_chat_by_link` and `add_chat_members`: their endpoints are removed from the API or absent from the schema.
+
+## [0.1.3] - 2026-07-16
+
+- Switched the default API endpoint to `https://platform-api2.max.ru`.
+- Added the Russian Trusted Root CA to the TLS trust store, with optional `ca_file` override.
+- Added an explicit `verify_ssl: false` option for environments that must temporarily ignore certificate errors.
+- Documented the new endpoint and TLS configuration options.
+- Updated the TypeScript reference client link.
+
+## [0.1.2] - 2026-03-27
+
+- Configured RubyGems trusted publishing through GitHub Actions.
+- Added release tag validation and updated the Ruby CI matrix.
 
 ## [0.1.0] - 2026-02-12
 

data/README.md

@@ -24,19 +24,95 @@ gem "max_api_client", git: "git@github.com:Ziaw/max_api_client.git"
 bundle install
 ```
 
+## Адрес API и сертификат Минцифры
+
+По умолчанию клиент использует актуальный адрес `https://platform-api2.max.ru`.
+В gem включён корневой сертификат `Russian Trusted Root CA`, поэтому TLS-цепочка
+MAX проверяется вместе с обычным системным хранилищем доверенных сертификатов.
+По умолчанию проверка TLS включена.
+
+Актуальные сертификаты и инструкции по их системной установке опубликованы
+на Госуслугах: <https://www.gosuslugi.ru/crt>.
+
+Обычное подключение не требует дополнительных настроек:
+
+```ruby
+api = MaxApiClient::Api.new(
+  token: ENV.fetch("MAX_BOT_TOKEN")
+)
+```
+
+Доступные параметры подключения:
+
+- `base_url` — адрес MAX API, по умолчанию `https://platform-api2.max.ru`;
+- `ca_file` — путь к дополнительному доверенному CA-файлу;
+- `verify_ssl` — проверять сертификат сервера, по умолчанию `true`;
+- `open_timeout` — таймаут установления соединения;
+- `read_timeout` — таймаут чтения ответа.
+
+Эти параметры поддерживают как `MaxApiClient::Api`, так и
+`MaxApiClient::Client`.
+
+### Подключение собственного сертификата
+
+Передайте путь к актуальному сертификату Минцифры в формате PEM:
+
+```ruby
+api = MaxApiClient::Api.new(
+  token: ENV.fetch("MAX_BOT_TOKEN"),
+  ca_file: "/etc/ssl/certs/russian_trusted_root_ca.pem"
+)
+```
+
+Чтобы использовать только системное хранилище сертификатов, передайте
+`ca_file: nil`.
+
+### Игнорирование неверного сертификата
+
+Если окружение временно не может проверить сертификат, отключите проверку
+параметром `verify_ssl: false`:
+
+```ruby
+api = MaxApiClient::Api.new(
+  token: ENV.fetch("MAX_BOT_TOKEN"),
+  verify_ssl: false
+)
+```
+
+`verify_ssl: false` принимает любой серверный сертификат и делает соединение
+уязвимым для перехвата. Используйте эту настройку только как временный обходной
+вариант. Для постоянной настройки передайте актуальный сертификат через
+`ca_file` или установите его в системное хранилище.
+
+Полный пример настройки:
+
+```ruby
+api = MaxApiClient::Api.new(
+  token: ENV.fetch("MAX_BOT_TOKEN"),
+  base_url: "https://platform-api2.max.ru",
+  ca_file: MaxApiClient::Client::DEFAULT_CA_FILE,
+  verify_ssl: true,
+  open_timeout: 10,
+  read_timeout: 30
+)
+```
+
 ## Справочник API
 
 ### Методы бота
 
-Методы Ruby, доступные через `MaxApiClient::Api`:
+Методы доступные через `MaxApiClient::Api`, порт официального клиента <https://github.com/max-messenger/max-bot-api-client-ts>, названия сохранены, poller собственный:
 
 - `get_my_info`
-- `edit_my_info(**extra)`
+- `edit_my_commands(commands)`
 - `set_my_commands(commands)`
 - `delete_my_commands`
 
-`set_my_commands(commands)` это короткий хелпер над `edit_my_info(commands: ...)`.
-Он принимает массив команд и отправляет его в поле `commands` профиля бота.
+Клиент соответствует схеме Bot API MAX версии 0.0.33
+(<https://github.com/max-messenger/api-schema>).
+
+`set_my_commands(commands)` это синоним `edit_my_commands(commands)`.
+Он принимает массив команд и отправляет его в поле `commands`.
 
 Ожидается массив хэшей с данными команды, например:
 
@@ -52,27 +128,28 @@ api.set_my_commands([
 Соответствующие HTTP-маршруты:
 
 - `GET /me`
-- `PATCH /me`
+- `PATCH /me/commands`
 
 Типовые сценарии:
 
 - получить текущий профиль бота;
-- обновить имя, описание, аватар и команды бота;
 - опубликовать или очистить подсказки команд для пользователей.
 
+Устаревший метод `edit_my_info(**extra)` (`PATCH /me`) оставлен для совместимости
+и выводит предупреждение: этого маршрута нет в актуальной схеме API.
+
 ### Методы чатов
 
 Методы Ruby, доступные через `MaxApiClient::Api`:
 
-- `get_all_chats(**extra)`
 - `get_chat(chat_id)`
-- `get_chat_by_link(chat_link)`
 - `edit_chat_info(chat_id, **extra)`
 - `get_chat_membership(chat_id)`
 - `get_chat_admins(chat_id)`
-- `add_chat_members(chat_id, user_ids)`
+- `add_chat_admins(chat_id, admins)`
+- `remove_chat_admin(chat_id, user_id)`
 - `get_chat_members(chat_id, **extra)`
-- `remove_chat_member(chat_id, user_id)`
+- `remove_chat_member(chat_id, user_id, block: nil)`
 - `get_pinned_message(chat_id)`
 - `pin_message(chat_id, message_id, **extra)`
 - `unpin_message(chat_id)`
@@ -81,13 +158,12 @@ api.set_my_commands([
 
 Соответствующие HTTP-маршруты:
 
-- `GET /chats`
 - `GET /chats/{chat_id}`
-- `GET /chats/{chat_link}`
 - `PATCH /chats/{chat_id}`
 - `GET /chats/{chat_id}/members/me`
 - `GET /chats/{chat_id}/members/admins`
-- `POST /chats/{chat_id}/members`
+- `POST /chats/{chat_id}/members/admins`
+- `DELETE /chats/{chat_id}/members/admins/{user_id}`
 - `GET /chats/{chat_id}/members`
 - `DELETE /chats/{chat_id}/members`
 - `GET /chats/{chat_id}/pin`
@@ -98,14 +174,29 @@ api.set_my_commands([
 
 Типовые сценарии:
 
-- получить список чатов, доступных боту;
-- найти чат по идентификатору или публичной ссылке;
+- получить чат по идентификатору;
 - изменить заголовок, иконку и метаданные чата;
 - управлять участниками и администраторами;
 - читать, устанавливать и снимать закреплённые сообщения;
 - отправлять статус набора текста и другие действия отправителя;
 - выходить из чата.
 
+Пример назначения администратора:
+
+```ruby
+api.add_chat_admins(chat_id, [
+  { user_id: 42, permissions: %w[write pin_message] }
+])
+```
+
+Устаревшие методы оставлены для совместимости и выводят предупреждение:
+
+- `get_all_chats(**extra)` — `GET /chats` не поддерживается с июня 2026;
+  список чатов нужно вести самостоятельно по событиям `bot_added` и `bot_started`;
+- `get_chat_by_link(chat_link)` — поиска по ссылке нет в актуальной схеме;
+- `add_chat_members(chat_id, user_ids)` — `POST /chats/{chat_id}/members`
+  удалён из API 30 сентября 2026.
+
 ### Методы сообщений
 
 Методы Ruby, доступные через `MaxApiClient::Api`:
@@ -115,7 +206,8 @@ api.set_my_commands([
 - `get_messages(chat_id, **extra)`
 - `get_message(message_id)`
 - `edit_message(message_id, **extra)`
-- `delete_message(message_id, **extra)`
+- `delete_message(message_id)`
+- `get_video_info(video_token)`
 - `answer_on_callback(callback_id, **extra)`
 
 Соответствующие HTTP-маршруты:
@@ -125,6 +217,7 @@ api.set_my_commands([
 - `GET /messages/{message_id}`
 - `PUT /messages`
 - `DELETE /messages`
+- `GET /videos/{video_token}`
 - `POST /answers`
 
 Поддерживаемые возможности:
@@ -133,7 +226,25 @@ api.set_my_commands([
 - дополнительный payload для форматирования, reply-ссылок и вложений;
 - редактирование и удаление сообщений;
 - ответы на callback-кнопки;
-- автоматический повтор запроса, если вложение после загрузки ещё не готово.
+- автоматический повтор запроса (до 3 попыток), если вложение после загрузки ещё не готово.
+
+### Методы комментариев
+
+Методы Ruby, доступные через `MaxApiClient::Api`:
+
+- `get_comments(message_id, **extra)`
+- `get_comment(message_id, comment_id)`
+- `send_comment(message_id, text, **extra)`
+- `edit_comment(message_id, comment_id, **extra)`
+- `delete_comment(message_id, comment_id)`
+
+Соответствующие HTTP-маршруты:
+
+- `GET /messages/{message_id}/comments`
+- `GET /messages/{message_id}/comments/{comment_id}`
+- `POST /messages/{message_id}/comments`
+- `PUT /messages/{message_id}/comments`
+- `DELETE /messages/{message_id}/comments`
 
 ### Методы подписок
 
@@ -142,7 +253,7 @@ api.set_my_commands([
 - `get_subscriptions`
 - `subscribe(url, update_types: nil, secret: nil)`
 - `unsubscribe(url)`
-- `poll_updates(types = [], marker: nil, timeout: 20, retry_interval: 5, read_timeout: nil, &block)`
+- `poll_updates(types = [], marker: nil, limit: nil, timeout: 20, retry_interval: 5, read_timeout: nil, &block)`
 
 Соответствующие HTTP-маршруты:
 
@@ -197,6 +308,25 @@ end
 - `StickerAttachment`
 - `LocationAttachment`
 - `ShareAttachment`
+- `ContactAttachment`
+- `InlineKeyboardAttachment`
+
+Объекты вложений можно передавать в `attachments:` напрямую. Кнопки клавиатуры
+собираются через `MaxApiClient::Button`:
+
+```ruby
+keyboard = MaxApiClient::InlineKeyboardAttachment.new(
+  buttons: [[
+    MaxApiClient::Button.callback("Да", "yes"),
+    MaxApiClient::Button.link("Сайт", "https://max.ru")
+  ]]
+)
+
+api.send_message_to_chat(chat_id, "Выберите", attachments: [keyboard])
+```
+
+Доступные кнопки: `callback`, `link`, `message`, `request_contact`,
+`request_geo_location`, `open_app`, `clipboard`.
 
 ### Доступ к Raw API
 
@@ -265,6 +395,7 @@ bin/console
 ## Источники
 
 - Официальная документация Max Bot API: <https://dev.max.ru/>
+- OpenAPI-схема Max Bot API: <https://github.com/max-messenger/api-schema>
 - TypeScript reference client: <https://github.com/max-messenger/max-bot-api-client-ts>
 
 ## Лицензия

data/certs/russian_trusted_root_ca.pem

@@ -0,0 +1,33 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

data/lib/max_api_client/api.rb

@@ -2,18 +2,21 @@
 
 module MaxApiClient
   # High-level convenience wrapper over grouped Max Bot API endpoints.
+  # rubocop:disable Metrics/ClassLength
   class Api
     attr_reader :raw, :upload, :client
 
     # rubocop:disable Metrics/ParameterLists
     def initialize(token:, base_url: Client::DEFAULT_BASE_URL, adapter: nil, open_timeout: nil, read_timeout: nil,
-                   logger: nil)
+                   ca_file: Client::DEFAULT_CA_FILE, verify_ssl: true, logger: nil)
       @client = Client.new(
         token:,
         base_url:,
         adapter:,
         open_timeout:,
         read_timeout:,
+        ca_file:,
+        verify_ssl:,
         logger:
       )
       @raw = RawApi.new(client)
@@ -28,20 +31,26 @@ module MaxApiClient
     # rubocop:enable Naming/AccessorMethodName
 
     def edit_my_info(**extra)
+      warn_deprecated(:edit_my_info, "PATCH /me is absent from the current API schema, use edit_my_commands")
       raw.bots.edit_my_info(**extra)
     end
 
+    def edit_my_commands(commands)
+      raw.bots.edit_my_commands(commands:)
+    end
+
     # rubocop:disable Naming/AccessorMethodName
     def set_my_commands(commands)
-      edit_my_info(commands:)
+      edit_my_commands(commands)
     end
     # rubocop:enable Naming/AccessorMethodName
 
     def delete_my_commands
-      edit_my_info(commands: [])
+      edit_my_commands([])
     end
 
     def get_all_chats(**extra)
+      warn_deprecated(:get_all_chats, "GET /chats is not supported by the API since June 2026")
       raw.chats.get_all(**extra)
     end
 
@@ -50,6 +59,7 @@ module MaxApiClient
     end
 
     def get_chat_by_link(chat_link)
+      warn_deprecated(:get_chat_by_link, "lookup by link is absent from the current API schema")
       raw.chats.get_by_link(chat_link:)
     end
 
@@ -65,7 +75,16 @@ module MaxApiClient
       raw.chats.get_chat_admins(chat_id:)
     end
 
+    def add_chat_admins(chat_id, admins)
+      raw.chats.add_chat_admins(chat_id:, admins:)
+    end
+
+    def remove_chat_admin(chat_id, user_id)
+      raw.chats.remove_chat_admin(chat_id:, user_id:)
+    end
+
     def add_chat_members(chat_id, user_ids)
+      warn_deprecated(:add_chat_members, "POST /chats/{chat_id}/members was removed from the API on 2026-09-30")
       raw.chats.add_chat_members(chat_id:, user_ids:)
     end
 
@@ -117,14 +136,38 @@ module MaxApiClient
       raw.messages.edit(message_id:, **extra)
     end
 
-    def delete_message(message_id, **extra)
-      raw.messages.delete(message_id:, **extra)
+    def delete_message(message_id)
+      raw.messages.delete(message_id:)
+    end
+
+    def get_video_info(video_token)
+      raw.messages.get_video_info(video_token:)
     end
 
     def answer_on_callback(callback_id, **extra)
       raw.messages.answer_on_callback(callback_id:, **extra)
     end
 
+    def get_comments(message_id, **extra)
+      raw.comments.get(message_id:, **csv_query(extra, :comment_ids))
+    end
+
+    def get_comment(message_id, comment_id)
+      raw.comments.get_by_id(message_id:, comment_id:)
+    end
+
+    def send_comment(message_id, text, **extra)
+      message_from(raw.comments.send(message_id:, text:, **extra))
+    end
+
+    def edit_comment(message_id, comment_id, **extra)
+      raw.comments.edit(message_id:, comment_id:, **extra)
+    end
+
+    def delete_comment(message_id, comment_id)
+      raw.comments.delete(message_id:, comment_id:)
+    end
+
     # rubocop:disable Naming/AccessorMethodName
     def get_subscriptions
       raw.subscriptions.get_subscriptions
@@ -139,12 +182,14 @@ module MaxApiClient
       raw.subscriptions.unsubscribe(url:)
     end
 
-    def poll_updates(types = [], marker: nil, timeout: Polling::DEFAULT_TIMEOUT,
+    # rubocop:disable Metrics/ParameterLists
+    def poll_updates(types = [], marker: nil, limit: nil, timeout: Polling::DEFAULT_TIMEOUT,
                      retry_interval: Polling::DEFAULT_RETRY_INTERVAL, read_timeout: nil, &block)
       poller = Polling.new(
         self,
         types:,
         marker:,
+        limit:,
         timeout:,
         retry_interval:,
         read_timeout:
@@ -154,6 +199,7 @@ module MaxApiClient
 
       poller.each(&block)
     end
+    # rubocop:enable Metrics/ParameterLists
 
     def upload_image(options)
       data = upload.image(**options)
@@ -187,8 +233,13 @@ module MaxApiClient
       query.merge(key => normalize_types(query[key]))
     end
 
+    def warn_deprecated(method_name, reason)
+      warn("[max_api_client] #{method_name} is deprecated: #{reason}", uplevel: 2)
+    end
+
     def message_from(response)
       response.fetch("message") { response.fetch(:message) }
     end
   end
+  # rubocop:enable Metrics/ClassLength
 end

data/lib/max_api_client/attachments.rb

@@ -6,6 +6,10 @@ module MaxApiClient
     def to_h
       raise NotImplementedError, "#{self.class} must implement #to_h"
     end
+
+    def to_json(*args)
+      to_h.to_json(*args)
+    end
   end
 
   # Shared attachment implementation for upload-backed media objects.
@@ -105,7 +109,71 @@ module MaxApiClient
     end
 
     def to_h
-      { type: "share", payload: { url:, token: } }
+      { type: "share", payload: { url:, token: }.compact }
+    end
+  end
+
+  # Attachment wrapper for contact cards.
+  class ContactAttachment < Attachment
+    attr_reader :name, :contact_id, :vcf_info, :vcf_phone
+
+    def initialize(name: nil, contact_id: nil, vcf_info: nil, vcf_phone: nil)
+      super()
+      @name = name
+      @contact_id = contact_id
+      @vcf_info = vcf_info
+      @vcf_phone = vcf_phone
+    end
+
+    def to_h
+      { type: "contact", payload: { name:, contact_id:, vcf_info:, vcf_phone: }.compact }
+    end
+  end
+
+  # Attachment wrapper for an inline keyboard: an array of button rows.
+  class InlineKeyboardAttachment < Attachment
+    attr_reader :buttons
+
+    def initialize(buttons:)
+      super()
+      @buttons = buttons
+    end
+
+    def to_h
+      { type: "inline_keyboard", payload: { buttons: } }
+    end
+  end
+
+  # Builders for inline keyboard buttons.
+  module Button
+    module_function
+
+    def callback(text, payload)
+      { type: "callback", text:, payload: }
+    end
+
+    def link(text, url)
+      { type: "link", text:, url: }
+    end
+
+    def message(text)
+      { type: "message", text: }
+    end
+
+    def request_contact(text)
+      { type: "request_contact", text: }
+    end
+
+    def request_geo_location(text, quick: nil)
+      { type: "request_geo_location", text:, quick: }.compact
+    end
+
+    def open_app(text, web_app, payload: nil, contact_id: nil)
+      { type: "open_app", text:, web_app:, payload:, contact_id: }.compact
+    end
+
+    def clipboard(text, payload)
+      { type: "clipboard", text:, payload: }
     end
   end
 end

data/lib/max_api_client/certificate_store.rb

@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+
+module MaxApiClient
+  # Builds a TLS trust store from the system defaults and an optional CA file.
+  class CertificateStore
+    def self.configure(http, ca_file:, verify_ssl:)
+      http.use_ssl = true
+      http.verify_mode = verify_ssl ? OpenSSL::SSL::VERIFY_PEER : OpenSSL::SSL::VERIFY_NONE
+      http.cert_store = build(ca_file:) if verify_ssl
+    end
+
+    def self.build(ca_file:)
+      OpenSSL::X509::Store.new.tap do |store|
+        store.set_default_paths
+        store.add_file(ca_file) if ca_file
+      end
+    end
+  end
+end

data/lib/max_api_client/client.rb

@@ -3,7 +3,8 @@
 module MaxApiClient
   # HTTP transport client responsible for authenticated API requests.
   class Client
-    DEFAULT_BASE_URL = "https://platform-api.max.ru"
+    DEFAULT_BASE_URL = "https://platform-api2.max.ru"
+    DEFAULT_CA_FILE = File.expand_path("../../certs/russian_trusted_root_ca.pem", __dir__)
     REQUEST_CLASSES = {
       get: Net::HTTP::Get,
       post: Net::HTTP::Post,
@@ -12,15 +13,18 @@ module MaxApiClient
       delete: Net::HTTP::Delete
     }.freeze
 
-    attr_reader :token, :base_url
+    attr_reader :token, :base_url, :ca_file, :verify_ssl
 
     # rubocop:disable Metrics/ParameterLists
-    def initialize(token:, base_url: DEFAULT_BASE_URL, adapter: nil, open_timeout: nil, read_timeout: nil, logger: nil)
+    def initialize(token:, base_url: DEFAULT_BASE_URL, adapter: nil, open_timeout: nil, read_timeout: nil,
+                   ca_file: DEFAULT_CA_FILE, verify_ssl: true, logger: nil)
       @token = token
       @base_url = base_url
       @adapter = adapter
       @open_timeout = open_timeout
       @read_timeout = read_timeout
+      @ca_file = ca_file
+      @verify_ssl = verify_ssl
       @logger = logger || MaxApiClient.logger
     end
     # rubocop:enable Metrics/ParameterLists
@@ -82,7 +86,7 @@ module MaxApiClient
 
       params = URI.decode_www_form(String(uri.query))
       query.to_h.each do |key, value|
-        next if value.nil? || value == false
+        next if value.nil?
 
         params << [key.to_s, value.to_s]
       end
@@ -122,10 +126,13 @@ module MaxApiClient
     end
 
     def configured_http(uri, open_timeout:, read_timeout:)
+      open_timeout ||= @open_timeout
+      read_timeout ||= @read_timeout
+
       Net::HTTP.new(uri.host, uri.port).tap do |http|
-        http.use_ssl = uri.scheme == "https"
-        http.open_timeout = open_timeout || @open_timeout if open_timeout || @open_timeout
-        http.read_timeout = read_timeout || @read_timeout if read_timeout || @read_timeout
+        CertificateStore.configure(http, ca_file:, verify_ssl:) if uri.scheme == "https"
+        http.open_timeout = open_timeout if open_timeout
+        http.read_timeout = read_timeout if read_timeout
       end
     end
 

data/lib/max_api_client/polling.rb

@@ -16,11 +16,12 @@ module MaxApiClient
     ].freeze
 
     # rubocop:disable Metrics/ParameterLists
-    def initialize(api, types: [], marker: nil, timeout: DEFAULT_TIMEOUT, retry_interval: DEFAULT_RETRY_INTERVAL,
-                   read_timeout: nil)
+    def initialize(api, types: [], marker: nil, limit: nil, timeout: DEFAULT_TIMEOUT,
+                   retry_interval: DEFAULT_RETRY_INTERVAL, read_timeout: nil)
       @api = api
       @types = types
       @marker = marker
+      @limit = limit
       @timeout = timeout
       @retry_interval = retry_interval
       @read_timeout = read_timeout || (timeout.to_i + READ_TIMEOUT_PADDING)
@@ -63,12 +64,13 @@ module MaxApiClient
 
     private
 
-    attr_reader :api, :types, :marker, :timeout, :retry_interval, :read_timeout
+    attr_reader :api, :types, :marker, :limit, :timeout, :retry_interval, :read_timeout
 
     def fetch_updates
       api.raw.subscriptions.get_updates(
         types: normalize_types(types),
         marker:,
+        limit:,
         timeout:,
         read_timeout:
       )
@@ -87,9 +89,9 @@ module MaxApiClient
     end
 
     def normalize_types(value)
-      return value.join(",") if value.is_a?(Array)
+      value = value.join(",") if value.is_a?(Array)
 
-      value
+      value unless value.to_s.empty?
     end
   end
 end

data/lib/max_api_client/raw_api.rb

@@ -17,6 +17,10 @@ module MaxApiClient
       @messages ||= build_api(MessagesApi)
     end
 
+    def comments
+      @comments ||= build_api(CommentsApi)
+    end
+
     def subscriptions
       @subscriptions ||= build_api(SubscriptionsApi)
     end
@@ -40,13 +44,19 @@ module MaxApiClient
     end
     # rubocop:enable Naming/AccessorMethodName
 
+    # PATCH /me is absent from the current API schema; prefer #edit_my_commands.
     def edit_my_info(**extra)
       patch("me", body: extra)
     end
+
+    def edit_my_commands(commands:)
+      patch("me/commands", body: { commands: })
+    end
   end
 
   # Raw chat management endpoints.
   class ChatsApi < BaseApi
+    # GET /chats is no longer supported by the API since June 2026.
     def get_all(**extra)
       get("chats", query: extra)
     end
@@ -55,6 +65,7 @@ module MaxApiClient
       get("chats/{chat_id}", path_params: { chat_id: })
     end
 
+    # Lookup by public link is absent from the current API schema.
     def get_by_link(chat_link:)
       get("chats/{chat_link}", path_params: { chat_link: })
     end
@@ -71,6 +82,15 @@ module MaxApiClient
       get("chats/{chat_id}/members/admins", path_params: { chat_id: })
     end
 
+    def add_chat_admins(chat_id:, admins:)
+      post("chats/{chat_id}/members/admins", path_params: { chat_id: }, body: { admins: })
+    end
+
+    def remove_chat_admin(chat_id:, user_id:)
+      delete("chats/{chat_id}/members/admins/{user_id}", path_params: { chat_id:, user_id: })
+    end
+
+    # POST /chats/{chat_id}/members was removed from the API on 2026-09-30.
     def add_chat_members(chat_id:, user_ids:)
       post("chats/{chat_id}/members", path_params: { chat_id: }, body: { user_ids: })
     end
@@ -80,7 +100,7 @@ module MaxApiClient
     end
 
     def remove_chat_member(chat_id:, user_id:, block: nil)
-      delete("chats/{chat_id}/members", path_params: { chat_id: }, body: compact_nil(user_id:, block:))
+      delete("chats/{chat_id}/members", path_params: { chat_id: }, query: compact_nil(user_id:, block:))
     end
 
     def get_pinned_message(chat_id:)
@@ -108,22 +128,30 @@ module MaxApiClient
   class MessagesApi < BaseApi
     ATTACHMENT_NOT_READY_CODE = "attachment.not.ready"
     ATTACHMENT_NOT_READY_DELAY = 1
+    ATTACHMENT_NOT_READY_RETRIES = 3
 
     def get(**query)
       super("messages", query:)
     end
 
     def get_by_id(message_id:)
-      get("messages/{message_id}", path_params: { message_id: })
+      call_api(:get, "messages/{message_id}", path_params: { message_id: })
     end
 
     def send(chat_id: nil, user_id: nil, disable_link_preview: nil, **body)
-      post("messages", query: compact_nil(chat_id:, user_id:, disable_link_preview:), body:)
-    rescue ApiError => e
-      raise unless e.code == ATTACHMENT_NOT_READY_CODE
+      attempt = 0
+
+      begin
+        post("messages", query: compact_nil(chat_id:, user_id:, disable_link_preview:), body:)
+      rescue ApiError => e
+        raise unless e.code == ATTACHMENT_NOT_READY_CODE
 
-      sleep(ATTACHMENT_NOT_READY_DELAY)
-      send(chat_id:, user_id:, disable_link_preview:, **body)
+        attempt += 1
+        raise if attempt >= ATTACHMENT_NOT_READY_RETRIES
+
+        sleep(ATTACHMENT_NOT_READY_DELAY * (2**(attempt - 1)))
+        retry
+      end
     end
 
     def edit(message_id:, **body)
@@ -134,8 +162,36 @@ module MaxApiClient
       super("messages", query: { message_id: })
     end
 
-    def answer_on_callback(callback_id:, **body)
-      post("answers", query: { callback_id: }, body:)
+    def get_video_info(video_token:)
+      call_api(:get, "videos/{video_token}", path_params: { video_token: })
+    end
+
+    def answer_on_callback(callback_id:, disable_link_preview: nil, **body)
+      post("answers", query: compact_nil(callback_id:, disable_link_preview:), body:)
+    end
+  end
+
+  # Raw endpoints for comments under channel posts.
+  class CommentsApi < BaseApi
+    def get(message_id:, **query)
+      super("messages/{message_id}/comments", path_params: { message_id: }, query:)
+    end
+
+    def get_by_id(message_id:, comment_id:)
+      call_api(:get, "messages/{message_id}/comments/{comment_id}", path_params: { message_id:, comment_id: })
+    end
+
+    def send(message_id:, disable_link_preview: nil, **body)
+      post("messages/{message_id}/comments", path_params: { message_id: },
+                                             query: compact_nil(disable_link_preview:), body:)
+    end
+
+    def edit(message_id:, comment_id:, **body)
+      put("messages/{message_id}/comments", path_params: { message_id: }, query: { comment_id: }, body:)
+    end
+
+    def delete(message_id:, comment_id:)
+      super("messages/{message_id}/comments", path_params: { message_id: }, query: { comment_id: })
     end
   end
 

data/lib/max_api_client/version.rb

@@ -2,5 +2,5 @@
 
 # Root namespace for gem version information.
 module MaxApiClient
-  VERSION = "0.1.2"
+  VERSION = "0.2.0"
 end

data/lib/max_api_client.rb

@@ -2,11 +2,13 @@
 
 require "json"
 require "net/http"
+require "openssl"
 require "uri"
 require "securerandom"
 
 require_relative "max_api_client/version"
 require_relative "max_api_client/error"
+require_relative "max_api_client/certificate_store"
 require_relative "max_api_client/client"
 require_relative "max_api_client/base_api"
 require_relative "max_api_client/raw_api"

data/sig/max_api_client.rbs

@@ -17,9 +17,12 @@ module MaxApiClient
 
   class Client
     DEFAULT_BASE_URL: String
+    DEFAULT_CA_FILE: String
     attr_reader token: String
     attr_reader base_url: String
-    def initialize: (token: String, ?base_url: String, ?adapter: untyped, ?open_timeout: Numeric?, ?read_timeout: Numeric?, ?logger: untyped) -> void
+    attr_reader ca_file: String?
+    attr_reader verify_ssl: bool
+    def initialize: (token: String, ?base_url: String, ?adapter: untyped, ?open_timeout: Numeric?, ?read_timeout: Numeric?, ?ca_file: String?, ?verify_ssl: bool, ?logger: untyped) -> void
     def call: (method: Symbol | String, ?path: String?, ?query: untyped, ?body: untyped, ?path_params: untyped, ?headers: untyped, ?url: String?, ?raw_body: untyped, ?parse_json: bool) -> Hash[Symbol, untyped]
   end
 
@@ -33,6 +36,7 @@ module MaxApiClient
     def bots: () -> BotsApi
     def chats: () -> ChatsApi
     def messages: () -> MessagesApi
+    def comments: () -> CommentsApi
     def subscriptions: () -> SubscriptionsApi
     def uploads: () -> UploadsApi
   end
@@ -40,6 +44,7 @@ module MaxApiClient
   class BotsApi
     def get_my_info: () -> untyped
     def edit_my_info: (untyped extra) -> untyped
+    def edit_my_commands: (commands: Array[bot_command]) -> untyped
   end
 
   class ChatsApi
@@ -49,6 +54,8 @@ module MaxApiClient
     def edit: (chat_id: Integer, **untyped extra) -> untyped
     def get_chat_membership: (chat_id: Integer) -> untyped
     def get_chat_admins: (chat_id: Integer) -> untyped
+    def add_chat_admins: (chat_id: Integer, admins: Array[Hash[Symbol | String, untyped]]) -> untyped
+    def remove_chat_admin: (chat_id: Integer, user_id: Integer) -> untyped
     def add_chat_members: (chat_id: Integer, user_ids: Array[Integer]) -> untyped
     def get_chat_members: (chat_id: Integer, **untyped query) -> untyped
     def remove_chat_member: (chat_id: Integer, user_id: Integer, ?block: bool?) -> untyped
@@ -65,7 +72,16 @@ module MaxApiClient
     def send: (?chat_id: Integer?, ?user_id: Integer?, ?disable_link_preview: bool?, **untyped body) -> untyped
     def edit: (message_id: String, **untyped body) -> untyped
     def delete: (message_id: String) -> untyped
-    def answer_on_callback: (callback_id: String, **untyped body) -> untyped
+    def get_video_info: (video_token: String) -> untyped
+    def answer_on_callback: (callback_id: String, ?disable_link_preview: bool?, **untyped body) -> untyped
+  end
+
+  class CommentsApi
+    def get: (message_id: String, **untyped query) -> untyped
+    def get_by_id: (message_id: String, comment_id: String) -> untyped
+    def send: (message_id: String, ?disable_link_preview: bool?, **untyped body) -> untyped
+    def edit: (message_id: String, comment_id: String, **untyped body) -> untyped
+    def delete: (message_id: String, comment_id: String) -> untyped
   end
 
   class SubscriptionsApi
@@ -81,6 +97,7 @@ module MaxApiClient
 
   class Attachment
     def to_h: () -> Hash[Symbol, untyped]
+    def to_json: (*untyped args) -> String
   end
 
   class ImageAttachment < Attachment
@@ -104,6 +121,22 @@ module MaxApiClient
   class ShareAttachment < Attachment
   end
 
+  class ContactAttachment < Attachment
+  end
+
+  class InlineKeyboardAttachment < Attachment
+  end
+
+  module Button
+    def self.callback: (String text, String payload) -> Hash[Symbol, untyped]
+    def self.link: (String text, String url) -> Hash[Symbol, untyped]
+    def self.message: (String text) -> Hash[Symbol, untyped]
+    def self.request_contact: (String text) -> Hash[Symbol, untyped]
+    def self.request_geo_location: (String text, ?quick: bool?) -> Hash[Symbol, untyped]
+    def self.open_app: (String text, String web_app, ?payload: String?, ?contact_id: Integer?) -> Hash[Symbol, untyped]
+    def self.clipboard: (String text, String payload) -> Hash[Symbol, untyped]
+  end
+
   class Upload
     def initialize: (Api) -> void
   end
@@ -112,7 +145,7 @@ module MaxApiClient
     DEFAULT_TIMEOUT: Integer
     DEFAULT_RETRY_INTERVAL: Integer
     READ_TIMEOUT_PADDING: Integer
-    def initialize: (Api api, ?types: Array[String] | String, ?marker: Integer?, ?timeout: Integer, ?retry_interval: Integer, ?read_timeout: Numeric?) -> void
+    def initialize: (Api api, ?types: Array[String] | String, ?marker: Integer?, ?limit: Integer?, ?timeout: Integer, ?retry_interval: Integer, ?read_timeout: Numeric?) -> void
     def each: () { (untyped update) -> void } -> self
     def each: () -> Enumerator[untyped, self]
     def stop: () -> bool
@@ -123,9 +156,10 @@ module MaxApiClient
     attr_reader raw: RawApi
     attr_reader upload: Upload
     attr_reader client: Client
-    def initialize: (token: String, ?base_url: String, ?adapter: untyped, ?open_timeout: Numeric?, ?read_timeout: Numeric?, ?logger: untyped) -> void
+    def initialize: (token: String, ?base_url: String, ?adapter: untyped, ?open_timeout: Numeric?, ?read_timeout: Numeric?, ?ca_file: String?, ?verify_ssl: bool, ?logger: untyped) -> void
     def get_my_info: () -> untyped
     def edit_my_info: (untyped extra) -> untyped
+    def edit_my_commands: (Array[bot_command] commands) -> untyped
     def set_my_commands: (Array[bot_command] commands) -> untyped
     def delete_my_commands: () -> untyped
     def get_all_chats: (?untyped extra) -> untyped
@@ -134,6 +168,8 @@ module MaxApiClient
     def edit_chat_info: (Integer chat_id, untyped extra) -> untyped
     def get_chat_membership: (Integer chat_id) -> untyped
     def get_chat_admins: (Integer chat_id) -> untyped
+    def add_chat_admins: (Integer chat_id, Array[Hash[Symbol | String, untyped]] admins) -> untyped
+    def remove_chat_admin: (Integer chat_id, Integer user_id) -> untyped
     def add_chat_members: (Integer chat_id, Array[Integer] user_ids) -> untyped
     def get_chat_members: (Integer chat_id, ?untyped extra) -> untyped
     def remove_chat_member: (Integer chat_id, Integer user_id, ?block: bool?) -> untyped
@@ -147,13 +183,19 @@ module MaxApiClient
     def get_messages: (Integer chat_id, ?untyped extra) -> untyped
     def get_message: (String message_id) -> untyped
     def edit_message: (String message_id, ?untyped extra) -> untyped
-    def delete_message: (String message_id, ?untyped extra) -> untyped
+    def delete_message: (String message_id) -> untyped
+    def get_video_info: (String video_token) -> untyped
+    def get_comments: (String message_id, ?untyped extra) -> untyped
+    def get_comment: (String message_id, String comment_id) -> untyped
+    def send_comment: (String message_id, String text, ?untyped extra) -> untyped
+    def edit_comment: (String message_id, String comment_id, ?untyped extra) -> untyped
+    def delete_comment: (String message_id, String comment_id) -> untyped
     def answer_on_callback: (String callback_id, ?untyped extra) -> untyped
     def get_subscriptions: () -> untyped
     def subscribe: (String url, ?update_types: Array[String] | String?, ?secret: String?) -> untyped
     def unsubscribe: (String url) -> untyped
-    def poll_updates: (?Array[String] | String types, ?marker: Integer?, ?timeout: Integer, ?retry_interval: Integer, ?read_timeout: Numeric?) { (untyped update) -> void } -> Polling
-    def poll_updates: (?Array[String] | String types, ?marker: Integer?, ?timeout: Integer, ?retry_interval: Integer, ?read_timeout: Numeric?) -> Enumerator[untyped, Polling]
+    def poll_updates: (?Array[String] | String types, ?marker: Integer?, ?limit: Integer?, ?timeout: Integer, ?retry_interval: Integer, ?read_timeout: Numeric?) { (untyped update) -> void } -> Polling
+    def poll_updates: (?Array[String] | String types, ?marker: Integer?, ?limit: Integer?, ?timeout: Integer, ?retry_interval: Integer, ?read_timeout: Numeric?) -> Enumerator[untyped, Polling]
     def upload_image: (Hash[Symbol, untyped] options) -> ImageAttachment
     def upload_video: (Hash[Symbol, untyped] options) -> VideoAttachment
     def upload_audio: (Hash[Symbol, untyped] options) -> AudioAttachment

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: max_api_client
 version: !ruby/object:Gem::Version
-  version: 0.1.2
+  version: 0.2.0
 platform: ruby
 authors:
 - Alexandr Zimin
@@ -23,10 +23,12 @@ files:
 - LICENSE.txt
 - README.md
 - Rakefile
+- certs/russian_trusted_root_ca.pem
 - lib/max_api_client.rb
 - lib/max_api_client/api.rb
 - lib/max_api_client/attachments.rb
 - lib/max_api_client/base_api.rb
+- lib/max_api_client/certificate_store.rb
 - lib/max_api_client/client.rb
 - lib/max_api_client/error.rb
 - lib/max_api_client/polling.rb