arccos-api 0.4.2__tar.gz → 0.5.0__tar.gz

arccos_api-0.5.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Paul Frederiksen
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

{arccos_api-0.4.2/arccos_api.egg-info → arccos_api-0.5.0}/PKG-INFO

@@ -1,18 +1,19 @@
 Metadata-Version: 2.4
 Name: arccos-api
-Version: 0.4.2
+Version: 0.5.0
 Summary: Unofficial Python CLI and client library for the Arccos Golf API
 Author: Paul Frederiksen
-License: MIT
+License-Expression: MIT
 Project-URL: Homepage, https://github.com/pfrederiksen/arccos-api
 Project-URL: Repository, https://github.com/pfrederiksen/arccos-api
 Project-URL: Issues, https://github.com/pfrederiksen/arccos-api/issues
+Project-URL: PyPI, https://pypi.org/project/arccos-api/
+Project-URL: Changelog, https://github.com/pfrederiksen/arccos-api/blob/main/CHANGELOG.md
 Keywords: golf,arccos,api,cli,golf-stats
 Classifier: Development Status :: 4 - Beta
 Classifier: Environment :: Console
 Classifier: Intended Audience :: Developers
 Classifier: Intended Audience :: End Users/Desktop
-Classifier: License :: OSI Approved :: MIT License
 Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
@@ -21,6 +22,7 @@ Classifier: Programming Language :: Python :: 3.14
 Classifier: Topic :: Software Development :: Libraries :: Python Modules
 Requires-Python: >=3.11
 Description-Content-Type: text/markdown
+License-File: LICENSE
 Requires-Dist: requests<3,>=2.31
 Requires-Dist: click<9,>=8.1
 Requires-Dist: rich<15,>=13.0
@@ -32,6 +34,7 @@ Requires-Dist: mypy; extra == "dev"
 Requires-Dist: types-requests; extra == "dev"
 Requires-Dist: build>=0.10.0; extra == "dev"
 Requires-Dist: twine>=4.0.0; extra == "dev"
+Dynamic: license-file
 
 <p align="center">
   <img src="assets/banner.png" alt="arccos-api banner" width="100%">
@@ -39,18 +42,30 @@ Requires-Dist: twine>=4.0.0; extra == "dev"
 
 # arccos-api
 
+[![PyPI](https://img.shields.io/pypi/v/arccos-api?label=PyPI)](https://pypi.org/project/arccos-api/)
+
 Unofficial Python client and CLI for the [Arccos Golf](https://arccosgolf.com) platform.
 
-Arccos provides no public API. This library was reverse-engineered from the Arccos Dashboard web app. It gives you full programmatic access to your own golf data — rounds, handicap, club distances, pace of play, and more.
+Arccos provides no public API. This library gives you read-only programmatic access to your own golf data — rounds, handicap, club distances, pace of play, and more.
 
 > **Unofficial.** Not affiliated with Arccos Golf LLC. Use with your own account only. Respect their servers (no aggressive polling).
 
+> **Read-only by design.** This client only sends `GET` requests to the Arccos data API. It cannot create, edit, or delete rounds, shots, clubs, courses, or account data. Authentication necessarily sends `POST` requests to the separate Arccos authentication service to log in and refresh tokens; those requests only obtain credentials and do not modify golf data.
+
 ## Installation
 
+Install the `arccos-api` distribution from [PyPI](https://pypi.org/project/arccos-api/):
+
 ```bash
 pip install arccos-api
 ```
 
+Or install the CLI with Homebrew:
+
+```bash
+brew install pfrederiksen/tap/arccos-api
+```
+
 Or install from source:
 
 ```bash
@@ -88,9 +103,13 @@ arccos clubs       # smart club distances
 | `arccos courses` | List courses you've played (or `--search` to filter) |
 | `arccos pace` | Pace of play analysis by course (color-coded) |
 | `arccos stats` | Strokes gained analysis (defaults to latest round) |
+| `arccos stats --dashboard` | Strokes gained analysis from the current dashboard endpoint |
+| `arccos tour-analytics` | Tour analytics summary/facet data |
 | `arccos trends` | Handicap trend chart over recent rounds |
 | `arccos club-shots <id>` | Shot history for a specific club |
+| `arccos shot-dispersion [id]` | Shot dispersion for the bag or a specific club |
 | `arccos up-and-down` | Scramble / strokes-to-get-down stats |
+| `arccos hole-image <course> <hole>` | Hole feature metadata and dashboard image URLs |
 | `arccos export` | Export rounds to JSON, CSV, or NDJSON (`--detail` for hole data) |
 | `arccos completions <shell>` | Generate bash/zsh/fish completion script |
 | `arccos logout` | Clear cached credentials |
@@ -108,7 +127,7 @@ arccos rounds --course "pebble"       # filter by course name (substring)
 arccos rounds --json                  # raw JSON
 
 # Round detail
-arccos round 18294051                 # hole-by-hole breakdown
+arccos round 12345678                 # hole-by-hole breakdown
 
 # Handicap
 arccos handicap                       # category breakdown
@@ -122,11 +141,15 @@ arccos clubs --after 2025-01-01       # distances from this year only
 arccos bests                          # all-time personal bests
 arccos overview                       # scoring avg + handicap breakdown
 arccos scoring                        # scoring trend with bar chart
+arccos stats --dashboard              # dashboard SGA, same endpoint as web app
+arccos stats --dashboard --latest     # dashboard SGA for your latest round
 arccos trends                         # handicap trend chart
 arccos up-and-down                    # scramble stats
+arccos tour-analytics --facet driving # tour analytics by facet
+arccos tour-analytics --summary       # tour analytics summary
 
 # Compare rounds
-arccos compare 26685289 26762935      # side-by-side hole comparison
+arccos compare 12345678 12345679      # side-by-side hole comparison
 
 # Courses
 arccos courses                        # all courses played
@@ -134,6 +157,11 @@ arccos courses --search "torrey"      # filter by name or city
 
 # Club detail
 arccos club-shots 1                   # shot history for club ID 1
+arccos shot-dispersion                # bag-level dispersion data
+arccos shot-dispersion 1 --json       # raw dispersion for club ID 1
+
+# Hole imagery metadata
+arccos hole-image 10769 7 -v 11       # image + metadata URLs and hole features
 
 # Shell completions
 eval "$(arccos completions bash)"     # enable tab completion
@@ -158,24 +186,24 @@ $ arccos clubs
 ╭──────┬──────────────────┬───────┬─────────┬──────────┬───────╮
 │ Club │ Model            │ Smart │ Longest │    Range │ Shots │
 ├──────┼──────────────────┼───────┼─────────┼──────────┼───────┤
-│ Dr   │ TaylorMade Qi10  │  252y │    291y │ 245–263y │   312 │
-│ 3w   │ TaylorMade Qi10  │  228y │    248y │ 220–235y │    87 │
-│ 5w   │ Callaway Paradym │  208y │    231y │ 200–215y │   143 │
-│ 4h   │ Titleist T200    │  195y │    214y │ 188–202y │    61 │
-│ 6i   │ Titleist T150    │  172y │    190y │ 165–179y │    94 │
-│ 7i   │ Titleist T150    │  160y │    178y │ 153–167y │   118 │
-│ 8i   │ Titleist T150    │  148y │    165y │ 141–155y │   105 │
-│ 9i   │ Titleist T150    │  136y │    152y │ 130–142y │    97 │
-│ Pw   │ Titleist T150    │  124y │    140y │ 118–130y │    82 │
+│ Dr   │ Example Driver   │  252y │    291y │ 245–263y │   312 │
+│ 3w   │ Example Fairway  │  228y │    248y │ 220–235y │    87 │
+│ 5w   │ Example Fairway  │  208y │    231y │ 200–215y │   143 │
+│ 4h   │ Example Hybrid   │  195y │    214y │ 188–202y │    61 │
+│ 6i   │ Example Iron     │  172y │    190y │ 165–179y │    94 │
+│ 7i   │ Example Iron     │  160y │    178y │ 153–167y │   118 │
+│ 8i   │ Example Iron     │  148y │    165y │ 141–155y │   105 │
+│ 9i   │ Example Iron     │  136y │    152y │ 130–142y │    97 │
+│ Pw   │ Example Wedge    │  124y │    140y │ 118–130y │    82 │
 │ 50   │ Vokey SM10       │  108y │    125y │ 102–114y │    76 │
 │ 54   │ Vokey SM10       │   88y │    105y │  82–94y  │   201 │
 │ 58   │ Vokey SM10       │   64y │     88y │  58–70y  │   168 │
 ╰──────┴──────────────────┴───────┴─────────┴──────────┴───────╯
 
-$ arccos round 18294051
-╭─── Round 18294051 ────╮
-│ Date:   2025-09-14    │
-│ Course: Torrey Pines  │
+$ arccos round 12345678
+╭─── Round 12345678 ────╮
+│ Date:   2026-01-15    │
+│ Course: Example GC    │
 │ Score:  79 (+7)       │
 │ Holes:  18            │
 ╰───────────────────────╯
@@ -210,9 +238,9 @@ Pace of Play — 10 rounds across 6 courses   Overall avg: 4h 22m
 ╭───┬──────────┬───────────────────────┬────────╮
 │   │ Avg Time │ Course                │ Rounds │
 ├───┼──────────┼───────────────────────┼────────┤
-│ ● │   5h 10m │ Bethpage Black        │      2 │
-│ ● │   4h 45m │ Torrey Pines          │      3 │
-│ ● │   3h 50m │ Bandon Dunes          │      2 │
+│ ● │   5h 10m │ Example Golf Club A    │      2 │
+│ ● │   4h 45m │ Example Golf Club B    │      3 │
+│ ● │   3h 50m │ Example Golf Club C    │      2 │
 │ ● │   3h 35m │ Chambers Bay          │      1 │
 ╰───┴──────────┴───────────────────────┴────────╯
 ```
@@ -265,12 +293,24 @@ for club in client.clubs.smart_distances():
     print(f"  Club {club['clubId']}: {dist:.0f}y")
 
 # Bag configuration (maps clubId → clubType + make/model)
-profile = client._http.get(f"/users/{client.user_id}")
+profile = client.profile()
 bag = client.clubs.bag(str(profile["bagId"]))
 for club in bag["clubs"]:
     if club.get("isDeleted") != "T":
         print(f"  {club['clubMakeOther']} {club['clubModelOther']}")
 
+# Current dashboard club/SGA analytics endpoints
+club_inventory = client.clubs.list()
+shot_dispersion = client.clubs.shot_dispersion()
+dashboard_sga = client.stats.dashboard_analysis(goal_hcp=5, no_of_rounds=20)
+player_profile = client.stats.player_profile()
+tour_summary = client.stats.tour_analytics_summary()
+
+# Course / hole imagery metadata
+hole_features = client.courses.hole_features(10769, 7, version=11)
+image_url = client.courses.hole_image_url(10769, 7, 11, "2026-07")
+metadata_url = client.courses.hole_metadata_url(10769, 7, 11, "2026-07")
+
 # Courses played
 for course in client.courses.played():
     print(f"  {course.get('name', course['courseId'])}")
@@ -289,7 +329,7 @@ for r in client.rounds.iter_all():
     print(r["roundId"], r["noOfShots"])
 
 # Course search
-results = client.courses.search("Torrey Pines")
+results = client.courses.search("Example Golf Club")
 ```
 
 ## API Reference
@@ -300,6 +340,8 @@ Full OpenAPI 3.1 spec: [`docs/openapi.yaml`](docs/openapi.yaml)
 
 All auth calls go to `https://authentication.arccosgolf.com`.
 
+These are the only non-GET Arccos interactions in this project. They obtain an access key and JWT; they do not write golf or account data.
+
 | Step | Endpoint | Body | Returns |
 |------|----------|------|---------|
 | 1. Get access key | `POST /accessKeys` | `{"email", "password", "signedInByFacebook": "F"}` | `{"userId", "accessKey", "secret"}` |
@@ -311,19 +353,31 @@ The JWT expires in ~3 hours. The `accessKey` is valid for ~180 days. Refresh by
 
 All data calls go to `https://api.arccosgolf.com` with `Authorization: Bearer <token>`.
 
+The data client enforces `GET` only and exposes no `POST`, `PUT`, `PATCH`, or `DELETE` methods.
+
 | Resource | Method | Path |
 |----------|--------|------|
 | User profile | GET | `/users/{userId}` (includes `bagId`, `bags[]`) |
+| User details | GET | `/users/{userId}/details` |
 | Bag / clubs | GET | `/users/{userId}/bags/{bagId}` (club config with make/model) |
+| Club inventory | GET | `/v6/users/{userId}/clubs` |
 | Rounds | GET | `/users/{userId}/rounds?offSet=0&limit=200&roundType=flagship` |
 | Round detail | GET | `/users/{userId}/rounds/{roundId}` (includes `holes[]` with `shots[]`) |
 | Handicap | GET | `/users/{userId}/handicaps/latest` |
 | Handicap history | GET | `/users/{userId}/handicaps?rounds=20` |
 | Smart distances | GET | `/v4/clubs/user/{userId}/smart-distances` |
+| Shot dispersion | GET | `/v3/user/{userId}/clubs/dispersion` |
+| Club shot dispersion | GET | `/v3/user/{userId}/clubs/{clubId}/dispersion` |
 | Courses played | GET | `/users/{userId}/coursesPlayed` |
 | Course metadata | GET | `/courses/{courseId}?courseVersion=1` |
+| Hole feature metadata | GET | `/courses/{courseId}/holes/{holeId}?courseVersion=1` |
 | Course search | GET | `/v2/courses?search={query}` |
 | Club shots | GET | `/users/{userId}/bags/{bagId}/clubs/{clubId}/shots` |
+| Dashboard SGA | GET | `/sga/getDashboardAnalysis/{userId}` |
+| SGA player profile | GET | `/sga/playerProfile/{userId}` |
+| Tour analytics | GET | `/users/{userId}/tourAnalytics` |
+| Tour analytics summary | GET | `/users/{userId}/tourAnalyticsSummary` |
+| Tour analytics ranked | GET | `/users/{userId}/tourAnalyticsRanked` |
 | Personal bests | GET | `/users/{userId}/personalBests?tags=allTimeBest` |
 | Strokes to get down | GET | `/v2/sga/strokes-to-get-down` |
 
@@ -332,11 +386,11 @@ All data calls go to `https://api.arccosgolf.com` with `Authorization: Bearer <t
 **Round** (from `GET /users/{id}/rounds/{roundId}`):
 ```json
 {
-  "roundId": 18294051,
+  "roundId": 12345678,
   "courseId": 12450,
   "courseVersion": 4,
-  "startTime": "2025-09-14T15:30:00.000000Z",
-  "endTime": "2025-09-14T20:15:00.000000Z",
+  "startTime": "2026-01-15T15:30:00.000000Z",
+  "endTime": "2026-01-15T20:15:00.000000Z",
   "noOfShots": 79,
   "noOfHoles": 18,
   "holes": [
@@ -364,7 +418,7 @@ All data calls go to `https://api.arccosgolf.com` with `Authorization: Bearer <t
 ```json
 {
   "clubId": 1, "clubType": 1,
-  "clubMakeOther": "TaylorMade", "clubModelOther": "Qi10",
+  "clubMakeOther": "Example", "clubModelOther": "Model 1",
   "isDeleted": "F"
 }
 ```
@@ -378,19 +432,22 @@ python3 -m venv .venv
 source .venv/bin/activate
 pip install -e ".[dev]"
 
-pytest                  # tests with coverage (87%+, 139 tests)
-ruff check arccos/      # lint
+pytest                  # tests with coverage (87%+, 173 tests)
+ruff check .            # lint
 mypy arccos/            # type check
 ```
 
 Coverage report: `htmlcov/index.html`. Minimum threshold: 80% (configured in `pyproject.toml`).
+Current suite: 173 tests.
 
 ## Security
 
+- Data access is read-only: the client only sends `GET` requests to `api.arccosgolf.com`. The only `POST` requests are the required login/token-refresh calls to `authentication.arccosgolf.com`; no golf data is created, changed, or deleted.
 - Credentials are cached in `~/.arccos_creds.json` (mode `0600` — owner-only read/write). The file contains your access key (~180-day validity) and JWT token. Keep it safe.
 - All API communication uses HTTPS with TLS certificate verification.
 - `arccos logout` removes the local credential file but does **not** revoke server-side tokens. If you suspect your credentials were compromised, change your Arccos password.
 - The export command restricts output paths to your home directory or current working directory.
+- Security issues should be reported privately as described in [`SECURITY.md`](SECURITY.md).
 
 ## Disclaimer
 

{arccos_api-0.4.2 → arccos_api-0.5.0}/README.md

@@ -4,18 +4,30 @@
 
 # arccos-api
 
+[![PyPI](https://img.shields.io/pypi/v/arccos-api?label=PyPI)](https://pypi.org/project/arccos-api/)
+
 Unofficial Python client and CLI for the [Arccos Golf](https://arccosgolf.com) platform.
 
-Arccos provides no public API. This library was reverse-engineered from the Arccos Dashboard web app. It gives you full programmatic access to your own golf data — rounds, handicap, club distances, pace of play, and more.
+Arccos provides no public API. This library gives you read-only programmatic access to your own golf data — rounds, handicap, club distances, pace of play, and more.
 
 > **Unofficial.** Not affiliated with Arccos Golf LLC. Use with your own account only. Respect their servers (no aggressive polling).
 
+> **Read-only by design.** This client only sends `GET` requests to the Arccos data API. It cannot create, edit, or delete rounds, shots, clubs, courses, or account data. Authentication necessarily sends `POST` requests to the separate Arccos authentication service to log in and refresh tokens; those requests only obtain credentials and do not modify golf data.
+
 ## Installation
 
+Install the `arccos-api` distribution from [PyPI](https://pypi.org/project/arccos-api/):
+
 ```bash
 pip install arccos-api
 ```
 
+Or install the CLI with Homebrew:
+
+```bash
+brew install pfrederiksen/tap/arccos-api
+```
+
 Or install from source:
 
 ```bash
@@ -53,9 +65,13 @@ arccos clubs       # smart club distances
 | `arccos courses` | List courses you've played (or `--search` to filter) |
 | `arccos pace` | Pace of play analysis by course (color-coded) |
 | `arccos stats` | Strokes gained analysis (defaults to latest round) |
+| `arccos stats --dashboard` | Strokes gained analysis from the current dashboard endpoint |
+| `arccos tour-analytics` | Tour analytics summary/facet data |
 | `arccos trends` | Handicap trend chart over recent rounds |
 | `arccos club-shots <id>` | Shot history for a specific club |
+| `arccos shot-dispersion [id]` | Shot dispersion for the bag or a specific club |
 | `arccos up-and-down` | Scramble / strokes-to-get-down stats |
+| `arccos hole-image <course> <hole>` | Hole feature metadata and dashboard image URLs |
 | `arccos export` | Export rounds to JSON, CSV, or NDJSON (`--detail` for hole data) |
 | `arccos completions <shell>` | Generate bash/zsh/fish completion script |
 | `arccos logout` | Clear cached credentials |
@@ -73,7 +89,7 @@ arccos rounds --course "pebble"       # filter by course name (substring)
 arccos rounds --json                  # raw JSON
 
 # Round detail
-arccos round 18294051                 # hole-by-hole breakdown
+arccos round 12345678                 # hole-by-hole breakdown
 
 # Handicap
 arccos handicap                       # category breakdown
@@ -87,11 +103,15 @@ arccos clubs --after 2025-01-01       # distances from this year only
 arccos bests                          # all-time personal bests
 arccos overview                       # scoring avg + handicap breakdown
 arccos scoring                        # scoring trend with bar chart
+arccos stats --dashboard              # dashboard SGA, same endpoint as web app
+arccos stats --dashboard --latest     # dashboard SGA for your latest round
 arccos trends                         # handicap trend chart
 arccos up-and-down                    # scramble stats
+arccos tour-analytics --facet driving # tour analytics by facet
+arccos tour-analytics --summary       # tour analytics summary
 
 # Compare rounds
-arccos compare 26685289 26762935      # side-by-side hole comparison
+arccos compare 12345678 12345679      # side-by-side hole comparison
 
 # Courses
 arccos courses                        # all courses played
@@ -99,6 +119,11 @@ arccos courses --search "torrey"      # filter by name or city
 
 # Club detail
 arccos club-shots 1                   # shot history for club ID 1
+arccos shot-dispersion                # bag-level dispersion data
+arccos shot-dispersion 1 --json       # raw dispersion for club ID 1
+
+# Hole imagery metadata
+arccos hole-image 10769 7 -v 11       # image + metadata URLs and hole features
 
 # Shell completions
 eval "$(arccos completions bash)"     # enable tab completion
@@ -123,24 +148,24 @@ $ arccos clubs
 ╭──────┬──────────────────┬───────┬─────────┬──────────┬───────╮
 │ Club │ Model            │ Smart │ Longest │    Range │ Shots │
 ├──────┼──────────────────┼───────┼─────────┼──────────┼───────┤
-│ Dr   │ TaylorMade Qi10  │  252y │    291y │ 245–263y │   312 │
-│ 3w   │ TaylorMade Qi10  │  228y │    248y │ 220–235y │    87 │
-│ 5w   │ Callaway Paradym │  208y │    231y │ 200–215y │   143 │
-│ 4h   │ Titleist T200    │  195y │    214y │ 188–202y │    61 │
-│ 6i   │ Titleist T150    │  172y │    190y │ 165–179y │    94 │
-│ 7i   │ Titleist T150    │  160y │    178y │ 153–167y │   118 │
-│ 8i   │ Titleist T150    │  148y │    165y │ 141–155y │   105 │
-│ 9i   │ Titleist T150    │  136y │    152y │ 130–142y │    97 │
-│ Pw   │ Titleist T150    │  124y │    140y │ 118–130y │    82 │
+│ Dr   │ Example Driver   │  252y │    291y │ 245–263y │   312 │
+│ 3w   │ Example Fairway  │  228y │    248y │ 220–235y │    87 │
+│ 5w   │ Example Fairway  │  208y │    231y │ 200–215y │   143 │
+│ 4h   │ Example Hybrid   │  195y │    214y │ 188–202y │    61 │
+│ 6i   │ Example Iron     │  172y │    190y │ 165–179y │    94 │
+│ 7i   │ Example Iron     │  160y │    178y │ 153–167y │   118 │
+│ 8i   │ Example Iron     │  148y │    165y │ 141–155y │   105 │
+│ 9i   │ Example Iron     │  136y │    152y │ 130–142y │    97 │
+│ Pw   │ Example Wedge    │  124y │    140y │ 118–130y │    82 │
 │ 50   │ Vokey SM10       │  108y │    125y │ 102–114y │    76 │
 │ 54   │ Vokey SM10       │   88y │    105y │  82–94y  │   201 │
 │ 58   │ Vokey SM10       │   64y │     88y │  58–70y  │   168 │
 ╰──────┴──────────────────┴───────┴─────────┴──────────┴───────╯
 
-$ arccos round 18294051
-╭─── Round 18294051 ────╮
-│ Date:   2025-09-14    │
-│ Course: Torrey Pines  │
+$ arccos round 12345678
+╭─── Round 12345678 ────╮
+│ Date:   2026-01-15    │
+│ Course: Example GC    │
 │ Score:  79 (+7)       │
 │ Holes:  18            │
 ╰───────────────────────╯
@@ -175,9 +200,9 @@ Pace of Play — 10 rounds across 6 courses   Overall avg: 4h 22m
 ╭───┬──────────┬───────────────────────┬────────╮
 │   │ Avg Time │ Course                │ Rounds │
 ├───┼──────────┼───────────────────────┼────────┤
-│ ● │   5h 10m │ Bethpage Black        │      2 │
-│ ● │   4h 45m │ Torrey Pines          │      3 │
-│ ● │   3h 50m │ Bandon Dunes          │      2 │
+│ ● │   5h 10m │ Example Golf Club A    │      2 │
+│ ● │   4h 45m │ Example Golf Club B    │      3 │
+│ ● │   3h 50m │ Example Golf Club C    │      2 │
 │ ● │   3h 35m │ Chambers Bay          │      1 │
 ╰───┴──────────┴───────────────────────┴────────╯
 ```
@@ -230,12 +255,24 @@ for club in client.clubs.smart_distances():
     print(f"  Club {club['clubId']}: {dist:.0f}y")
 
 # Bag configuration (maps clubId → clubType + make/model)
-profile = client._http.get(f"/users/{client.user_id}")
+profile = client.profile()
 bag = client.clubs.bag(str(profile["bagId"]))
 for club in bag["clubs"]:
     if club.get("isDeleted") != "T":
         print(f"  {club['clubMakeOther']} {club['clubModelOther']}")
 
+# Current dashboard club/SGA analytics endpoints
+club_inventory = client.clubs.list()
+shot_dispersion = client.clubs.shot_dispersion()
+dashboard_sga = client.stats.dashboard_analysis(goal_hcp=5, no_of_rounds=20)
+player_profile = client.stats.player_profile()
+tour_summary = client.stats.tour_analytics_summary()
+
+# Course / hole imagery metadata
+hole_features = client.courses.hole_features(10769, 7, version=11)
+image_url = client.courses.hole_image_url(10769, 7, 11, "2026-07")
+metadata_url = client.courses.hole_metadata_url(10769, 7, 11, "2026-07")
+
 # Courses played
 for course in client.courses.played():
     print(f"  {course.get('name', course['courseId'])}")
@@ -254,7 +291,7 @@ for r in client.rounds.iter_all():
     print(r["roundId"], r["noOfShots"])
 
 # Course search
-results = client.courses.search("Torrey Pines")
+results = client.courses.search("Example Golf Club")
 ```
 
 ## API Reference
@@ -265,6 +302,8 @@ Full OpenAPI 3.1 spec: [`docs/openapi.yaml`](docs/openapi.yaml)
 
 All auth calls go to `https://authentication.arccosgolf.com`.
 
+These are the only non-GET Arccos interactions in this project. They obtain an access key and JWT; they do not write golf or account data.
+
 | Step | Endpoint | Body | Returns |
 |------|----------|------|---------|
 | 1. Get access key | `POST /accessKeys` | `{"email", "password", "signedInByFacebook": "F"}` | `{"userId", "accessKey", "secret"}` |
@@ -276,19 +315,31 @@ The JWT expires in ~3 hours. The `accessKey` is valid for ~180 days. Refresh by
 
 All data calls go to `https://api.arccosgolf.com` with `Authorization: Bearer <token>`.
 
+The data client enforces `GET` only and exposes no `POST`, `PUT`, `PATCH`, or `DELETE` methods.
+
 | Resource | Method | Path |
 |----------|--------|------|
 | User profile | GET | `/users/{userId}` (includes `bagId`, `bags[]`) |
+| User details | GET | `/users/{userId}/details` |
 | Bag / clubs | GET | `/users/{userId}/bags/{bagId}` (club config with make/model) |
+| Club inventory | GET | `/v6/users/{userId}/clubs` |
 | Rounds | GET | `/users/{userId}/rounds?offSet=0&limit=200&roundType=flagship` |
 | Round detail | GET | `/users/{userId}/rounds/{roundId}` (includes `holes[]` with `shots[]`) |
 | Handicap | GET | `/users/{userId}/handicaps/latest` |
 | Handicap history | GET | `/users/{userId}/handicaps?rounds=20` |
 | Smart distances | GET | `/v4/clubs/user/{userId}/smart-distances` |
+| Shot dispersion | GET | `/v3/user/{userId}/clubs/dispersion` |
+| Club shot dispersion | GET | `/v3/user/{userId}/clubs/{clubId}/dispersion` |
 | Courses played | GET | `/users/{userId}/coursesPlayed` |
 | Course metadata | GET | `/courses/{courseId}?courseVersion=1` |
+| Hole feature metadata | GET | `/courses/{courseId}/holes/{holeId}?courseVersion=1` |
 | Course search | GET | `/v2/courses?search={query}` |
 | Club shots | GET | `/users/{userId}/bags/{bagId}/clubs/{clubId}/shots` |
+| Dashboard SGA | GET | `/sga/getDashboardAnalysis/{userId}` |
+| SGA player profile | GET | `/sga/playerProfile/{userId}` |
+| Tour analytics | GET | `/users/{userId}/tourAnalytics` |
+| Tour analytics summary | GET | `/users/{userId}/tourAnalyticsSummary` |
+| Tour analytics ranked | GET | `/users/{userId}/tourAnalyticsRanked` |
 | Personal bests | GET | `/users/{userId}/personalBests?tags=allTimeBest` |
 | Strokes to get down | GET | `/v2/sga/strokes-to-get-down` |
 
@@ -297,11 +348,11 @@ All data calls go to `https://api.arccosgolf.com` with `Authorization: Bearer <t
 **Round** (from `GET /users/{id}/rounds/{roundId}`):
 ```json
 {
-  "roundId": 18294051,
+  "roundId": 12345678,
   "courseId": 12450,
   "courseVersion": 4,
-  "startTime": "2025-09-14T15:30:00.000000Z",
-  "endTime": "2025-09-14T20:15:00.000000Z",
+  "startTime": "2026-01-15T15:30:00.000000Z",
+  "endTime": "2026-01-15T20:15:00.000000Z",
   "noOfShots": 79,
   "noOfHoles": 18,
   "holes": [
@@ -329,7 +380,7 @@ All data calls go to `https://api.arccosgolf.com` with `Authorization: Bearer <t
 ```json
 {
   "clubId": 1, "clubType": 1,
-  "clubMakeOther": "TaylorMade", "clubModelOther": "Qi10",
+  "clubMakeOther": "Example", "clubModelOther": "Model 1",
   "isDeleted": "F"
 }
 ```
@@ -343,19 +394,22 @@ python3 -m venv .venv
 source .venv/bin/activate
 pip install -e ".[dev]"
 
-pytest                  # tests with coverage (87%+, 139 tests)
-ruff check arccos/      # lint
+pytest                  # tests with coverage (87%+, 173 tests)
+ruff check .            # lint
 mypy arccos/            # type check
 ```
 
 Coverage report: `htmlcov/index.html`. Minimum threshold: 80% (configured in `pyproject.toml`).
+Current suite: 173 tests.
 
 ## Security
 
+- Data access is read-only: the client only sends `GET` requests to `api.arccosgolf.com`. The only `POST` requests are the required login/token-refresh calls to `authentication.arccosgolf.com`; no golf data is created, changed, or deleted.
 - Credentials are cached in `~/.arccos_creds.json` (mode `0600` — owner-only read/write). The file contains your access key (~180-day validity) and JWT token. Keep it safe.
 - All API communication uses HTTPS with TLS certificate verification.
 - `arccos logout` removes the local credential file but does **not** revoke server-side tokens. If you suspect your credentials were compromised, change your Arccos password.
 - The export command restricts output paths to your home directory or current working directory.
+- Security issues should be reported privately as described in [`SECURITY.md`](SECURITY.md).
 
 ## Disclaimer
 

{arccos_api-0.4.2 → arccos_api-0.5.0}/arccos/__init__.py

@@ -50,7 +50,8 @@ class _SensitiveFilter(_logging.Filter):
 
 
 _logger = _logging.getLogger("arccos")
-_logger.addFilter(_SensitiveFilter())
+_sensitive_filter = _SensitiveFilter()
+_logger.addFilter(_sensitive_filter)
 
 # Allow ARCCOS_LOG_LEVEL=DEBUG (or INFO, WARNING, etc.) to enable logging
 _log_level = _os.environ.get("ARCCOS_LOG_LEVEL")
@@ -59,6 +60,8 @@ if _log_level:
     if not _logger.handlers:
         _handler = _logging.StreamHandler()
         _handler.setFormatter(_logging.Formatter("%(name)s %(levelname)s: %(message)s"))
+        # Handler filters also cover records propagated by child loggers.
+        _handler.addFilter(_sensitive_filter)
         _logger.addHandler(_handler)
 
 __version__ = _pkg_version("arccos-api")