sendmux-core 1.2.0 → 1.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ff4ba7f22a000b14507a25981b13a01a670fb31e668df0557ebe9c2235250e70
-  data.tar.gz: 40c0a5588f8dcccdad392eb4a5fd377787515af71de933406ab1da8ea118b9fd
+  metadata.gz: f39dc569a3376fb13568b300d2cf22819cf1815894fac4f749cd8b0cd5622100
+  data.tar.gz: bc14bfe99f7242ba965ff6f676d6fd2a4a7608b7530e0576ab4e3f7fce3fc29b
 SHA512:
-  metadata.gz: 1845afef061ef4c6fd27a43a286007a0f628db39439c3d2a7bf0f813873345cac550f2c662a826a7a573c5ca7ffd1c39ac26e5508e8a88440799fe29a3a25e36
-  data.tar.gz: 77b6fec300b2fdce52fa4c7f21bd1d5122d01f05db8e5c36cf5f90fbbf3877b43086cfa2ab4dbdd27ad33c6c7bf098c62bc27ada7ed5ee1677865e68b2b1d708
+  metadata.gz: a1976ba03f4693dee9b5b7a4dec6722a037d0ae2c170069bcda0e29d04a200ddcf399136bd2d3a3476c7c967d33e15ff2b71cb221adf5a3d59489e8d7a190a0d
+  data.tar.gz: 9915b261526d42672bb55ed28be7bc5fe3171093eedc04b0cb5819de3c0e2a83ee372e9e73e21b748baab38d3358462820c3d8eda8468343dde5c513c36d5b9b

data/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [1.3.0](https://github.com/Sendmux/sendmux-sdk/compare/ruby-core/v1.2.0...ruby-core/v1.3.0) (2026-09-10)
+
+
+### Features
+
+* add REST OAuth clients and CLI token lifecycle ([cc4a3aa](https://github.com/Sendmux/sendmux-sdk/commit/cc4a3aa6110378641418a94455ed5b9a986e65ff))
+
 ## [1.2.0](https://github.com/Sendmux/sendmux-sdk/compare/ruby-core/v1.1.0...ruby-core/v1.2.0) (2026-09-08)
 
 

data/README.md

@@ -15,7 +15,7 @@ Shared authentication, retry, pagination, header, and error helpers for the Send
 ## Requirements
 
 - Ruby 3.1 or newer.
-- A Sendmux API key when using the helpers with a surface client.
+- A Sendmux API key or REST OAuth access token when using a surface client.
 
 ## Installation
 
@@ -46,6 +46,8 @@ puts surface
 
 Use `Sendmux::Core::ApiKeySurface::ROOT` for root-key management clients, `Sendmux::Core::ApiKeySurface::SENDING` for send-capable `smx_mbx_` keys or owner-approved Sending-resource `smx_agent_` tokens, and `Sendmux::Core::ApiKeySurface::MAILBOX` for mailbox-compatible credentials. Mailbox-compatible credentials can start with `smx_mbx_` or `smx_agent_`.
 
+Surface clients accept `access_token:` as a bare token or callable instead of `api_key:`. Token providers run before each request; the application owns token storage and refresh.
+
 ### Header helpers
 
 Generated Ruby operations accept option hashes. The header helpers return the option keys expected by those generated operations.

data/lib/sendmux/core/auth.rb

@@ -9,17 +9,41 @@ module Sendmux
       MAILBOX_PREFIX = 'smx_mbx_'
       AGENT_PREFIX = 'smx_agent_'
 
-      def self.configure_bearer(configuration, api_key, expected_surface, base_url: nil)
-        assert_api_key_surface(api_key, expected_surface)
+      def self.configure_bearer(configuration, api_key, expected_surface, base_url: nil, access_token: nil)
+        raise ArgumentError, 'Provide exactly one of api_key or access_token' if api_key.nil? == access_token.nil?
         unless configuration.respond_to?(:access_token=)
           raise ArgumentError, 'Generated configuration does not support bearer access tokens'
         end
 
-        configuration.access_token = api_key
+        if api_key.nil?
+          configure_access_token(configuration, access_token)
+        else
+          assert_api_key_surface(api_key, expected_surface)
+          configuration.access_token = api_key
+          configuration.access_token_getter = nil if configuration.respond_to?(:access_token_getter=)
+        end
         configure_base_url(configuration, base_url) if base_url && !base_url.empty?
         configuration
       end
 
+      def self.configure_access_token(configuration, access_token)
+        if access_token.respond_to?(:call)
+          configuration.access_token = nil
+          configuration.access_token_getter = -> { validate_access_token(access_token.call) }
+        else
+          configuration.access_token = validate_access_token(access_token)
+          configuration.access_token_getter = nil if configuration.respond_to?(:access_token_getter=)
+        end
+      end
+
+      def self.validate_access_token(token)
+        unless token.is_a?(String) && token.match?(%r{\A[A-Za-z0-9._~+/-]+=*\z})
+          raise ArgumentError, 'Provide a valid bare access token'
+        end
+
+        token
+      end
+
       def self.assert_api_key_surface(api_key, expected_surface)
         actual = surface_for(api_key)
         unless actual

data/lib/sendmux/core/retry.rb

@@ -13,12 +13,20 @@ module Sendmux
       end
 
       def self.retryable_request?(env)
+        return false if explicitly_non_retryable?(env[:body])
+
         method = env[:method].to_s.upcase
         return true if SAFE_METHODS.include?(method)
 
         method == 'POST' && header(env[:request_headers] || {}, 'Idempotency-Key') && replayable_body?(env[:body])
       end
 
+      def self.explicitly_non_retryable?(body)
+        payload = ErrorMapper.payload_from(body)
+        detail = ErrorMapper.hash_at(payload, 'error')
+        payload.is_a?(Hash) && payload['ok'] == false && detail && detail['retryable'] == false
+      end
+
       def self.header(headers, name)
         headers.find { |key, _value| key.to_s.downcase == name.downcase }&.last
       end

data/lib/sendmux/core/version.rb

@@ -2,6 +2,6 @@
 
 module Sendmux
   module Core
-    VERSION = '1.2.0'
+    VERSION = '1.3.0'
   end
 end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: sendmux-core
 version: !ruby/object:Gem::Version
-  version: 1.2.0
+  version: 1.3.0
 platform: ruby
 authors:
 - Sendmux
 bindir: bin
 cert_chain: []
-date: 2026-09-08 00:00:00.000000000 Z
+date: 2026-09-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: faraday