growsurf-python 1.1.1__tar.gz → 1.1.2__tar.gz

growsurf_python-1.1.2/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "1.1.2"
+}

{growsurf_python-1.1.1 → growsurf_python-1.1.2}/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [1.1.2](https://github.com/growsurf/growsurf-python/compare/v1.1.1...v1.1.2) (2026-07-11)
+
+
+### Bug Fixes
+
+* support retry-safe API key rotation ([8656a44](https://github.com/growsurf/growsurf-python/commit/8656a4469e8e48a6ad7252ad1c9241d8cef09ee2))
+
 ## [1.1.1](https://github.com/growsurf/growsurf-python/compare/v1.1.0...v1.1.1) (2026-07-09)
 
 

{growsurf_python-1.1.1 → growsurf_python-1.1.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: growsurf-python
-Version: 1.1.1
+Version: 1.1.2
 Summary: The official Python library for the growsurf API
 Project-URL: Homepage, https://github.com/growsurf/growsurf-python
 Project-URL: Repository, https://github.com/growsurf/growsurf-python

{growsurf_python-1.1.1 → growsurf_python-1.1.2}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "growsurf-python"
-version = "1.1.1"
+version = "1.1.2"
 description = "The official Python library for the growsurf API"
 dynamic = ["readme"]
 license = "Apache-2.0"

{growsurf_python-1.1.1 → growsurf_python-1.1.2}/src/growsurf/_client.py

@@ -115,6 +115,7 @@ class Growsurf(SyncAPIClient):
             custom_query=default_query,
             _strict_response_validation=_strict_response_validation,
         )
+        self._idempotency_header = "Idempotency-Key"
 
     @cached_property
     def account(self) -> AccountResource:
@@ -311,6 +312,7 @@ class AsyncGrowsurf(AsyncAPIClient):
             custom_query=default_query,
             _strict_response_validation=_strict_response_validation,
         )
+        self._idempotency_header = "Idempotency-Key"
 
     @cached_property
     def account(self) -> AsyncAccountResource:

{growsurf_python-1.1.1 → growsurf_python-1.1.2}/src/growsurf/_version.py

@@ -1,4 +1,4 @@
 # File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
 __title__ = "growsurf"
-__version__ = "1.1.1"  # x-release-please-version
+__version__ = "1.1.2"  # x-release-please-version

{growsurf_python-1.1.1 → growsurf_python-1.1.2}/src/growsurf/resources/account.py

@@ -65,9 +65,10 @@ class AccountResource(SyncAPIResource):
         an API key, so you can call it on a client constructed with any placeholder
         `api_key`.
 
-        The response includes an API key for the new account, but the key is locked
-        until the account's email address is verified: authenticated endpoints outside
-        the Accounts group return a `403` with error code `EMAIL_NOT_VERIFIED_ERROR`
+        The response includes an API key for the new account, shown once in the
+        response. The key is locked until the account's email address is verified:
+        authenticated endpoints outside the Accounts group return a `403` with error
+        code `EMAIL_NOT_VERIFIED_ERROR`
         until then (resend the email via the resend-verification-email endpoint, then
         retry). A welcome email is sent to the address with the verification link and a
         set-password link for dashboard access. Accounts whose email is never verified
@@ -183,11 +184,13 @@ class AccountResource(SyncAPIResource):
         timeout: float | httpx.Timeout | None | NotGiven = not_given,
     ) -> RotateApiKeyResponse:
         """
-        Generates a new API key and immediately revokes the old one.
+        Generates a new API key and invalidates the key used for the request.
 
-        The key used to make this request stops working as soon as the response is
-        returned — update every integration that used the old key with the new one. The
-        account owner is notified by email whenever the key is rotated.
+        The SDK sends a retry-safe `Idempotency-Key`, so automatic retries return the
+        same replacement. Store the returned key, then update every integration that
+        used the old key. The account owner is notified by email whenever the key is
+        rotated. Requires an API key with `api_key:rotate`. This operation is available
+        only through the REST API or a GrowSurf API SDK, not through MCP.
         """
         return self._post(
             "/account/api-key",
@@ -288,9 +291,10 @@ class AsyncAccountResource(AsyncAPIResource):
         an API key, so you can call it on a client constructed with any placeholder
         `api_key`.
 
-        The response includes an API key for the new account, but the key is locked
-        until the account's email address is verified: authenticated endpoints outside
-        the Accounts group return a `403` with error code `EMAIL_NOT_VERIFIED_ERROR`
+        The response includes an API key for the new account, shown once in the
+        response. The key is locked until the account's email address is verified:
+        authenticated endpoints outside the Accounts group return a `403` with error
+        code `EMAIL_NOT_VERIFIED_ERROR`
         until then (resend the email via the resend-verification-email endpoint, then
         retry). A welcome email is sent to the address with the verification link and a
         set-password link for dashboard access. Accounts whose email is never verified
@@ -406,11 +410,13 @@ class AsyncAccountResource(AsyncAPIResource):
         timeout: float | httpx.Timeout | None | NotGiven = not_given,
     ) -> RotateApiKeyResponse:
         """
-        Generates a new API key and immediately revokes the old one.
+        Generates a new API key and invalidates the key used for the request.
 
-        The key used to make this request stops working as soon as the response is
-        returned — update every integration that used the old key with the new one. The
-        account owner is notified by email whenever the key is rotated.
+        The SDK sends a retry-safe `Idempotency-Key`, so automatic retries return the
+        same replacement. Store the returned key, then update every integration that
+        used the old key. The account owner is notified by email whenever the key is
+        rotated. Requires an API key with `api_key:rotate`. This operation is available
+        only through the REST API or a GrowSurf API SDK, not through MCP.
         """
         return await self._post(
             "/account/api-key",

{growsurf_python-1.1.1 → growsurf_python-1.1.2}/src/growsurf/resources/campaign/reward.py

@@ -96,7 +96,8 @@ class RewardResource(SyncAPIResource):
         timeout: float | httpx.Timeout | None | NotGiven = not_given,
     ) -> RewardApproveResponse:
         """
-        Approves a manually approved reward earned by a participant.
+        Approves a manually approved reward earned by a participant. Requires
+        `reward:write`. Passing `fulfill=True` also requires `reward:fulfill`.
 
         Args:
           fulfill: Set true to mark the reward as fulfilled after approval.
@@ -135,7 +136,7 @@ class RewardResource(SyncAPIResource):
         timeout: float | httpx.Timeout | None | NotGiven = not_given,
     ) -> RewardFulfillResponse:
         """
-        Marks an approved participant reward as fulfilled.
+        Marks an approved participant reward as fulfilled. Requires `reward:fulfill`.
 
         Args:
           extra_headers: Send extra headers
@@ -232,7 +233,8 @@ class AsyncRewardResource(AsyncAPIResource):
         timeout: float | httpx.Timeout | None | NotGiven = not_given,
     ) -> RewardApproveResponse:
         """
-        Approves a manually approved reward earned by a participant.
+        Approves a manually approved reward earned by a participant. Requires
+        `reward:write`. Passing `fulfill=True` also requires `reward:fulfill`.
 
         Args:
           fulfill: Set true to mark the reward as fulfilled after approval.
@@ -271,7 +273,7 @@ class AsyncRewardResource(AsyncAPIResource):
         timeout: float | httpx.Timeout | None | NotGiven = not_given,
     ) -> RewardFulfillResponse:
         """
-        Marks an approved participant reward as fulfilled.
+        Marks an approved participant reward as fulfilled. Requires `reward:fulfill`.
 
         Args:
           extra_headers: Send extra headers

{growsurf_python-1.1.1 → growsurf_python-1.1.2}/src/growsurf/types/rotate_api_key_response.py

@@ -9,4 +9,4 @@ __all__ = ["RotateApiKeyResponse"]
 
 class RotateApiKeyResponse(BaseModel):
     api_key: str = FieldInfo(alias="apiKey")
-    """The new API key. The previous key is revoked immediately."""
+    """The new API key. Store it now; the key used for rotation stops working immediately."""

{growsurf_python-1.1.1 → growsurf_python-1.1.2}/tests/test_client.py

@@ -399,6 +399,17 @@ class TestGrowsurf:
         test_client.close()
         test_client2.close()
 
+    def test_mutating_requests_include_a_retry_stable_idempotency_key(self, client: Growsurf) -> None:
+        options = FinalRequestOptions(method="post", url="/account/api-key")
+        options.idempotency_key = client._idempotency_key()
+        request = client._build_request(options)
+
+        assert client._idempotency_header == "Idempotency-Key"
+        idempotency_key = request.headers.get("Idempotency-Key")
+        assert idempotency_key is not None
+        assert idempotency_key.startswith("stainless-python-retry-")
+        assert options.idempotency_key == idempotency_key
+
     def test_validate_headers(self) -> None:
         client = Growsurf(base_url=base_url, api_key=api_key, _strict_response_validation=True)
         request = client._build_request(FinalRequestOptions(method="get", url="/foo"))
@@ -1314,6 +1325,17 @@ class TestAsyncGrowsurf:
         await test_client.close()
         await test_client2.close()
 
+    def test_mutating_requests_include_a_retry_stable_idempotency_key(self, client: AsyncGrowsurf) -> None:
+        options = FinalRequestOptions(method="post", url="/account/api-key")
+        options.idempotency_key = client._idempotency_key()
+        request = client._build_request(options)
+
+        assert client._idempotency_header == "Idempotency-Key"
+        idempotency_key = request.headers.get("Idempotency-Key")
+        assert idempotency_key is not None
+        assert idempotency_key.startswith("stainless-python-retry-")
+        assert options.idempotency_key == idempotency_key
+
     def test_validate_headers(self) -> None:
         client = AsyncGrowsurf(base_url=base_url, api_key=api_key, _strict_response_validation=True)
         request = client._build_request(FinalRequestOptions(method="get", url="/foo"))

{growsurf_python-1.1.1 → growsurf_python-1.1.2}/uv.lock

@@ -420,7 +420,7 @@ wheels = [
 
 [[package]]
 name = "growsurf-python"
-version = "1.1.0"
+version = "1.1.1"
 source = { editable = "." }
 dependencies = [
     { name = "anyio" },

growsurf_python-1.1.1/.release-please-manifest.json

@@ -1,3 +0,0 @@
-{
-  ".": "1.1.1"
-}