ordercloud-python 2026.4.1__tar.gz → 2026.10.1__tar.gz

{ordercloud_python-2026.4.1 → ordercloud_python-2026.10.1}/.github/dependabot.yml

@@ -24,3 +24,9 @@ updates:
     labels:
       - "ci"
     open-pull-requests-limit: 5
+    groups:
+      # The init / autobuild / analyze / upload-sarif steps must share one
+      # version, so they are bumped together in a single PR.
+      codeql-action:
+        patterns:
+          - "github/codeql-action*"

{ordercloud_python-2026.4.1 → ordercloud_python-2026.10.1}/.github/workflows/ci.yml

@@ -14,8 +14,8 @@ jobs:
     name: Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
         with:
           python-version: "3.13"
       - name: Install ruff
@@ -29,8 +29,8 @@ jobs:
     name: Type check
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
         with:
           python-version: "3.13"
       - name: Install dependencies
@@ -46,8 +46,8 @@ jobs:
       matrix:
         python-version: ["3.10", "3.11", "3.12", "3.13"]
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
         with:
           python-version: ${{ matrix.python-version }}
       - name: Install dependencies
@@ -56,7 +56,7 @@ jobs:
         run: pytest --cov=ordercloud --cov-report=xml --cov-report=term-missing --cov-fail-under=90
       - name: Upload coverage to Codecov
         if: matrix.python-version == '3.13'
-        uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6.0.0
+        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
         with:
           files: ./coverage.xml
           fail_ci_if_error: false

{ordercloud_python-2026.4.1 → ordercloud_python-2026.10.1}/.github/workflows/codeql.yml

@@ -18,18 +18,18 @@ jobs:
     name: Analyze (Python)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
+        uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
         with:
           languages: python
           queries: security-and-quality
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
+        uses: github/codeql-action/autobuild@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
+        uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
         with:
           category: "/language:python"

{ordercloud_python-2026.4.1 → ordercloud_python-2026.10.1}/.github/workflows/dependency-review.yml

@@ -12,9 +12,9 @@ jobs:
     name: Review dependencies
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - name: Dependency Review
-        uses: actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48 # v4
+        uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5.0.0
         with:
           fail-on-severity: moderate
           deny-licenses: GPL-3.0, AGPL-3.0

{ordercloud_python-2026.4.1 → ordercloud_python-2026.10.1}/.github/workflows/release.yml

@@ -14,8 +14,8 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
         with:
           python-version: "3.13"
       - name: Install build
@@ -38,7 +38,8 @@ jobs:
 
   publish:
     name: Publish to PyPI
-    needs: build
+    # The PyPI upload cannot be undone, so it runs only after attestation.
+    needs: attestation
     runs-on: ubuntu-latest
     permissions:
       id-token: write
@@ -52,7 +53,7 @@ jobs:
           name: dist
           path: dist/
       - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0
+        uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2
 
   attestation:
     name: Attest build provenance
@@ -69,9 +70,26 @@ jobs:
           name: dist
           path: dist/
       - name: Attest build provenance
-        uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1.0
+        id: attest
+        uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373 # v4.1.1
         with:
           subject-path: dist/*
+      - name: Name provenance file
+        env:
+          BUNDLE_PATH: ${{ steps.attest.outputs.bundle-path }}
+        run: |
+          if [ ! -s "$BUNDLE_PATH" ]; then
+            echo "::error::Attestation bundle is missing or empty: $BUNDLE_PATH"
+            exit 1
+          fi
+          mkdir provenance
+          cp "$BUNDLE_PATH" "provenance/ordercloud_python-${GITHUB_REF_NAME#v}.intoto.jsonl"
+      - name: Upload provenance
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: provenance
+          path: provenance/
+          if-no-files-found: error
 
   github-release:
     name: Create GitHub Release
@@ -80,16 +98,26 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - name: Download distributions
         uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: dist
           path: dist/
+      - name: Download provenance
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        with:
+          name: provenance
+          path: provenance/
       - name: Create GitHub Release
         env:
           GH_TOKEN: ${{ github.token }}
         run: |
-          gh release create "$GITHUB_REF_NAME" dist/* \
+          PROVENANCE="provenance/ordercloud_python-${GITHUB_REF_NAME#v}.intoto.jsonl"
+          if [ ! -s "$PROVENANCE" ]; then
+            echo "::error::Provenance file is missing or empty: $PROVENANCE"
+            exit 1
+          fi
+          gh release create "$GITHUB_REF_NAME" dist/* "$PROVENANCE" \
             --title "$GITHUB_REF_NAME" \
             --generate-notes

{ordercloud_python-2026.4.1 → ordercloud_python-2026.10.1}/.github/workflows/sbom.yml

@@ -16,7 +16,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Generate SBOM
         uses: anchore/sbom-action@e22c389904149dbc22b58101806040fa8d37a610 # v0
@@ -25,7 +25,7 @@ jobs:
           output-file: sbom.spdx.json
 
       - name: Upload SBOM as artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: sbom
           path: sbom.spdx.json

{ordercloud_python-2026.4.1 → ordercloud_python-2026.10.1}/.github/workflows/scorecard.yml

@@ -19,7 +19,7 @@ jobs:
       contents: read
       actions: read
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
 
@@ -31,6 +31,6 @@ jobs:
           publish_results: true
 
       - name: Upload SARIF results
-        uses: github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
+        uses: github/codeql-action/upload-sarif@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
         with:
           sarif_file: results.sarif

ordercloud_python-2026.10.1/CHANGELOG.md

@@ -0,0 +1,85 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+This project uses [Calendar Versioning](https://calver.org/) — `YYYY.MM.N` where `N` is the release number within that month.
+
+## 2026.10.1 — 2026-10-05
+
+Regenerated from the OrderCloud OpenAPI v3 spec, **version 1.0.454 → 1.0.470**. This release contains **one breaking change** — `ApiClient.client_secret` is removed — which the CalVer version number does not signal. Coverage is unchanged: **639 operations** across 60 resources, with 173 models and 17 enums.
+
+### Breaking
+
+- **`ApiClient.client_secret` (`ClientSecret`) removed**, following its removal from the `ApiClient` schema in the spec. `ApiClient` keeps the models' `extra="allow"` configuration, so code that still uses the field now behaves as follows:
+  - Reading `.client_secret` on an `ApiClient` that was not given one raises `AttributeError` (it previously returned `None`).
+  - mypy reports any `.client_secret` access as an `attr-defined` error.
+  - A `ClientSecret` value in an API response is no longer available as `.client_secret`; it is kept as an undeclared extra under its API name, in `model_extra["ClientSecret"]`.
+  - `ApiClient(ClientSecret="...")` is accepted, and the value is still sent to the API under the key `ClientSecret`.
+  - `ApiClient(client_secret="...")` is accepted, but the value is now sent to the API under the snake_case key `client_secret` instead of `ClientSecret`.
+  - Request bodies passed as plain dicts are sent unchanged.
+
+  The five API-client secret operations (`ApiClients.ListSecrets` / `CreateSecret` / `GetSecret` / `PatchSecret` / `DeleteSecret`) and the `ApiClientSecret` / `ApiClientSecretCreateResponse` models are unchanged in this release.
+
+### Added
+
+- **`Discount.priority`** (`Priority`, integer). The spec describes it as: "Controls precedence when multiple discounts apply to the same user and product. Lower number = higher precedence (1 beats 2). Null is applied last."
+- **`OrderEditAfterSubmit`** added to the `ApiRole` enum. Role lists that contain it (for example `SecurityProfile.roles` or `ApiClient.maximum_granted_roles`) now validate; on 2026.6.1 they raise a pydantic `ValidationError`.
+
+### Spec changes with no SDK code change
+
+- The `x-lifecycle: Beta` marker is removed from the Discounts tag and its nine operations. The code generator does not read this marker.
+- `GET /discounts` now lists `Priority` and `!Priority` as `sortBy` values. `Discounts.list` takes `sort_by` as a plain string and passes it through unvalidated, so no SDK change was needed.
+- `OrderEditAfterSubmit` is also added to the spec's OAuth2 scopes. The SDK's `scopes` setting takes plain strings.
+
+### Release artefacts
+
+- GitHub releases now also attach the build provenance attestation for the sdist and wheel, as `ordercloud_python-<version>.intoto.jsonl`, alongside the distributions themselves.
+
+### Changed
+
+- Bumped package version to `2026.10.1` (CalVer).
+
+## 2026.6.1 — 2026-06-14
+
+Regenerated from the OrderCloud OpenAPI v3 spec, **version 1.0.445 → 1.0.454**. All changes are additive — no breaking changes to existing models or operations. Coverage now spans **639 operations** (was 632) across the same 60 resources, with **173 models** and 17 enums.
+
+### Added
+
+- **Generated promotion codes** — `Promotions.ListCodes` (`GET /promotions/{promotionID}/codes`), the `PromotionCode` model, and `GeneratedCodeCount` / `GeneratedCodeLength` / `GeneratedCodePrefix` fields on the `Promotion` model family (`Promotion`, `OrderPromotion`, `AddedPromo`, `RemovedPromo`, `EligiblePromotion`).
+- **Repeat order** — `Orders.Repeat` (`POST /orders/{direction}/{orderID}/repeat`) with the `OrderRepeatResponse` and `UnavailableLineItem` models.
+- **Catalog entity sync** — five `EntitySyncs` catalog operations (get / save / patch / delete on `/integrations/entitysync/catalogs`, plus `/catalogs/sync`) and the `SyncCatalog` model.
+- **New models** — `BuyerDiscount` (on `BuyerPriceSchedule`) and `ApiError` (the typed error returned within `UnavailableLineItem`).
+- **New fields / values** — `Percent` on `DiscountedPrices`; `BulkReader` added to the `ApiRole` enum.
+
+### Changed
+
+- Bumped package version to `2026.6.1` (CalVer).
+
+## 2026.4.1 — 2026-04-13
+
+Initial release. Full SDK for the Sitecore OrderCloud API, generated from the OpenAPI v3 spec (version 1.0.445).
+
+### Features
+
+- **Full API coverage** — 632 operations across 60 resources, generated from the official OpenAPI spec
+- **Async and sync clients** — `OrderCloudClient` (async, default) and `SyncOrderCloudClient` with identical API shapes
+- **Pydantic v2 typed models** — 167 models and 17 enums with full type annotations
+- **Typed extended properties (xp)** — `Product[MyXp]` pattern for type-safe custom fields, backward compatible with untyped `dict[str, Any]`
+- **Auto-pagination** — `paginate()` and `paginate_sync()` async/sync generators for any list method
+- **Retry with exponential backoff** — configurable `max_retries` and `retry_backoff`; retries 429/5xx, respects `Retry-After` headers
+- **Structured logging** — `logging.getLogger("ordercloud")` with DEBUG request/response and WARNING retry logging
+- **Middleware hooks** — `add_before_request()` / `add_after_response()` for request/response interception
+- **OAuth2 client credentials** — automatic token acquisition, caching, and refresh
+- **PEP 561 typed** — `py.typed` marker for downstream type checking
+
+### Code Generation
+
+Three-stage pipeline in `tools/codegen/`: OpenAPI JSON -> parser -> IR dataclasses -> transformer -> Jinja2 templates -> Python source -> ruff format. 10 source files, 5 templates. Generates 100 files (37 model modules, 60 resource modules, 2 init barrels, 1 client).
+
+### Quality
+
+- 759 unit tests, 97% overall coverage (100% on all hand-written infrastructure and all 37 model modules)
+- CI: lint, format, type check (mypy strict), test matrix (Python 3.10-3.13), coverage upload
+- CodeQL security scanning, OpenSSF Scorecard, SBOM generation, dependency review
+- Dependabot for pip and GitHub Actions version management
+- Branch protection with required status checks

ordercloud_python-2026.10.1/CONTRIBUTING.md

@@ -0,0 +1,133 @@
+# Contributing to ordercloud-python
+
+Bug reports, feature requests, and pull requests are welcome.
+
+## Reporting Issues
+
+Open a [GitHub Issue](https://github.com/markcassidyconsulting/ordercloud-python/issues). For bugs, include:
+
+- Python version and OS
+- SDK version (`python -c "import ordercloud; print(ordercloud.__version__)"`)
+- Minimal code to reproduce
+- Full traceback
+
+## Development Setup
+
+```bash
+git clone https://github.com/markcassidyconsulting/ordercloud-python.git
+cd ordercloud-python
+pip install -e ".[dev,examples,codegen]"
+```
+
+This installs the SDK in editable mode with all development dependencies: pytest, ruff, mypy, respx, python-dotenv, and jinja2.
+
+## Running Checks
+
+All of these must pass before submitting a PR:
+
+```bash
+# Lint and format
+ruff check src/ tests/
+ruff format --check src/ tests/
+
+# Type checking (strict)
+mypy src/
+
+# Unit tests (no network calls)
+pytest tests/ --ignore=tests/integration
+
+# Unit tests with coverage
+pytest tests/ --ignore=tests/integration --cov=ordercloud --cov-report=term-missing
+```
+
+CI runs these across Python 3.10, 3.11, 3.12, and 3.13. Coverage must stay above 90%.
+
+## Integration Tests
+
+Integration tests run against a live OrderCloud sandbox and are skipped automatically when credentials aren't set. To run them locally:
+
+1. Create a `.env` file at the repo root (gitignored):
+
+```env
+ORDERCLOUD_TEST_CLIENT_ID=your-sandbox-client-id
+ORDERCLOUD_TEST_CLIENT_SECRET=your-sandbox-client-secret
+ORDERCLOUD_TEST_BASE_URL=https://sandboxapi.ordercloud.io/v1
+ORDERCLOUD_TEST_AUTH_URL=https://sandboxauth.ordercloud.io/oauth/token
+```
+
+2. Run:
+
+```bash
+pytest tests/integration/ -v
+```
+
+The `ORDERCLOUD_TEST_*` prefix ensures these never accidentally run against a production instance.
+
+## Code Structure
+
+| Directory | What lives there |
+|-----------|-----------------|
+| `src/ordercloud/` | The SDK package |
+| `src/ordercloud/models/` | Pydantic models (generated) |
+| `src/ordercloud/resources/` | Resource clients (generated) |
+| `src/ordercloud/auth.py` | OAuth2 token management (hand-written) |
+| `src/ordercloud/http.py` | HTTP client with retries (hand-written) |
+| `src/ordercloud/config.py` | Configuration dataclass (hand-written) |
+| `src/ordercloud/errors.py` | Exception types (hand-written) |
+| `src/ordercloud/middleware.py` | Request/response hooks (hand-written) |
+| `src/ordercloud/sync_client.py` | Sync wrapper (hand-written) |
+| `src/ordercloud/resources/base.py` | Base resource + pagination (hand-written) |
+| `src/ordercloud/models/shared.py` | Base model, enums, ListPage (hand-written) |
+| `tools/codegen/` | Code generation pipeline |
+| `tests/` | Unit tests (mocked HTTP) |
+| `tests/integration/` | Integration tests (live sandbox) |
+
+Files marked `# GENERATED by tools/codegen` are regenerated from the OpenAPI spec. Don't edit them by hand — change the codegen templates or pipeline instead.
+
+## Code Generation
+
+Models and resource clients are generated from the OrderCloud OpenAPI v3 spec:
+
+```bash
+python -m tools.codegen --spec openapi.json --output src/ordercloud
+```
+
+The pipeline: **OpenAPI JSON** -> parser -> IR dataclasses -> transformer -> Jinja2 templates -> Python source -> ruff format.
+
+If you need to change how models or resources are structured, the relevant files are:
+
+- `tools/codegen/ir.py` — intermediate representation dataclasses
+- `tools/codegen/parser.py` — OpenAPI spec to IR
+- `tools/codegen/transformer.py` — IR enrichment (imports, grouping)
+- `tools/codegen/templates/*.j2` — Jinja2 templates for output files
+
+## Conventions
+
+- **snake_case** for all Python identifiers. Model fields use snake_case with PascalCase aliases matching the API.
+- **Google-style docstrings** on public classes and methods.
+- **`ruff`** for both linting and formatting. No additional style config needed.
+- **`mypy --strict`** on hand-written infrastructure. Generated code has targeted relaxations in `pyproject.toml`.
+- **Tests for every change.** Unit tests for logic, integration tests if it touches API behaviour.
+
+## Pull Requests
+
+- One concern per PR. Keep them focused.
+- Include tests for new functionality or bug fixes.
+- All CI checks must pass (lint, format, typecheck, tests across 4 Python versions).
+- Update `CHANGELOG.md` if the change is user-facing.
+
+## Branching & Merging
+
+`main` is protected by a repository ruleset: every change lands through a pull request with all required status checks green. This applies to **everyone, including the maintainer** — there are no direct pushes to `main`, and the ruleset carries no bypass. Force-pushes and branch deletion are blocked.
+
+No reviewing approval is required (this is a single-maintainer project), so the practical flow for a small change is:
+
+```bash
+git checkout -b fix/short-description
+# ...make the change, commit...
+git push -u origin fix/short-description
+gh pr create --fill
+gh pr merge --auto --squash --delete-branch
+```
+
+`--auto` queues the merge to happen the moment CI passes, so there's no need to sit and watch the checks. The full matrix takes a few minutes; a slight delay before merge is expected and accepted. Dependabot PRs follow the same path automatically.

{ordercloud_python-2026.4.1 → ordercloud_python-2026.10.1}/PKG-INFO

@@ -1,6 +1,6 @@
-Metadata-Version: 2.4
+Metadata-Version: 2.5
 Name: ordercloud-python
-Version: 2026.4.1
+Version: 2026.10.1
 Summary: Idiomatic Python SDK for Sitecore OrderCloud
 Project-URL: Homepage, https://github.com/markcassidyconsulting/ordercloud-python
 Project-URL: Repository, https://github.com/markcassidyconsulting/ordercloud-python
@@ -50,7 +50,7 @@ Description-Content-Type: text/markdown
 
 A fully typed, async-first Python SDK for [Sitecore OrderCloud](https://ordercloud.io).
 
-**Complete API coverage** — all 632 operations across 60 resources, generated from the official OpenAPI spec. Built for modern Python:
+**Complete API coverage** — all 639 operations across 60 resources, generated from the official OpenAPI spec. Built for modern Python:
 
 - **Async and sync clients** — `async with OrderCloudClient(...)` or `with SyncOrderCloudClient(...)`. Same API shape, your choice of runtime.
 - **Pydantic v2 models** — every API resource is a typed, validated model. snake_case fields, PascalCase aliases for API compatibility.
@@ -60,7 +60,7 @@ A fully typed, async-first Python SDK for [Sitecore OrderCloud](https://orderclo
 - **Middleware hooks** — intercept requests and responses for logging, metrics, or header injection.
 - **Structured logging** — standard Python `logging` module, DEBUG/WARNING levels.
 - **Full type annotations** — `py.typed` marker for downstream type checking with mypy, pyright, etc.
-- **784 tests, 97% coverage** — 759 unit tests (mocked HTTP) + 25 integration tests (live sandbox).
+- **803 tests, 97% coverage** — 778 unit tests (mocked HTTP) + 25 integration tests (live sandbox).
 
 ## Installation
 
@@ -244,14 +244,14 @@ Before-request hooks receive a mutable `RequestContext` — modify `headers`, `p
 
 ## API Coverage
 
-The SDK covers **all 60 resources** and **632 operations** in the OrderCloud API. Models and resource clients are generated from the official OpenAPI v3 spec (version 1.0.445).
+The SDK covers **all 60 resources** and **639 operations** in the OrderCloud API. Models and resource clients are generated from the official OpenAPI v3 spec (version 1.0.470).
 
 ### Core Commerce
 
 | Resource | Operations | Highlights |
 |----------|-----------|------------|
 | Products | 18 | CRUD, variants, specs, suppliers, assignments |
-| Orders | 29 | CRUD, submit, approve, decline, cancel, complete, forward, split, ship, promotions |
+| Orders | 30 | CRUD, submit, approve, decline, cancel, complete, forward, split, ship, repeat, promotions |
 | Line Items | 9 | CRUD, shipping address management, cross-order listing |
 | Cart | 37 | Full shopping cart lifecycle, checkout, payments, promotions |
 | Bundles | 12 | CRUD, product/catalog assignments |
@@ -275,7 +275,7 @@ The SDK covers **all 60 resources** and **632 operations** in the OrderCloud API
 | Resource | Operations | Highlights |
 |----------|-----------|------------|
 | Price Schedules | 8 | CRUD, price breaks |
-| Promotions | 9 | CRUD, assignments |
+| Promotions | 10 | CRUD, assignments, generated codes |
 | Discounts | 9 | CRUD, assignments |
 | Specs | 15 | CRUD, options, product assignments |
 
@@ -307,7 +307,7 @@ The SDK covers **all 60 resources** and **632 operations** in the OrderCloud API
 | Integration Events | 10 | CRUD, calculate, estimate shipping |
 | Message Senders | 11 | CRUD, assignments, CC listeners |
 | Subscriptions | 6 | CRUD |
-| Entity Syncs | 40 | Full sync infrastructure |
+| Entity Syncs | 45 | Full sync infrastructure (incl. catalogs) |
 | Delivery Configurations | 6 | CRUD |
 | Inventory Records | 18 | CRUD, variant records, assignments |
 
@@ -504,18 +504,18 @@ The test suite is self-bootstrapping — it uses the SDK itself to create all te
 
 ### Test Suite
 
-784 tests across 12 modules.
+803 tests across 12 modules.
 
-**Unit tests (759)** — mocked HTTP via [respx](https://lundberg.github.io/respx/), no network calls:
+**Unit tests (778)** — mocked HTTP via [respx](https://lundberg.github.io/respx/), no network calls:
 
 | Module | Tests | Purpose |
 |--------|-------|---------|
 | `test_auth.py` | 13 | OAuth2 token management |
-| `test_http.py` | 16 | HTTP client, error parsing, retries |
-| `test_models.py` | 28 | Model round-trips, enums, xp, ListPage |
-| `test_resources.py` | 22 | Representative resource operations |
-| `test_resource_coverage.py` | 632 | All 60 resources, all 632 operations |
-| `test_sync_client.py` | 48 | Sync wrapper, pagination |
+| `test_http.py` | 37 | HTTP client, error parsing, retries |
+| `test_models.py` | 44 | Model round-trips, enums, xp, ListPage |
+| `test_resources.py` | 33 | Representative resource operations |
+| `test_resource_coverage.py` | 639 | All 60 resources, all 639 operations |
+| `test_sync_client.py` | 12 | Sync wrapper, pagination |
 
 **Integration tests (25)** — live sandbox, skipped when credentials are absent:
 
@@ -532,11 +532,11 @@ The test suite is self-bootstrapping — it uses the SDK itself to create all te
 
 | Module | Coverage |
 |--------|----------|
-| `auth.py` | 100% |
+| `auth.py` | 93% |
 | `client.py` | 100% |
-| `config.py` | 100% |
+| `config.py` | 94% |
 | `errors.py` | 100% |
-| `http.py` | 97% |
+| `http.py` | 98% |
 | `middleware.py` | 100% |
 | `sync_client.py` | 100% |
 | `resources/base.py` | 100% |
@@ -545,7 +545,7 @@ The test suite is self-bootstrapping — it uses the SDK itself to create all te
 
 ## Contributing
 
-Bug reports and feature requests are welcome via [GitHub Issues](https://github.com/markcassidyconsulting/ordercloud-python/issues). If you're interested in the internals, the codegen pipeline in `tools/codegen/` is a good starting point. See the [Changelog](CHANGELOG.md) for release history.
+Bug reports, feature requests, and pull requests are welcome. See [CONTRIBUTING.md](CONTRIBUTING.md) for development setup, running tests, code generation, and PR guidelines. See the [Changelog](CHANGELOG.md) for release history.
 
 ## License
 

{ordercloud_python-2026.4.1 → ordercloud_python-2026.10.1}/README.md

@@ -10,7 +10,7 @@
 
 A fully typed, async-first Python SDK for [Sitecore OrderCloud](https://ordercloud.io).
 
-**Complete API coverage** — all 632 operations across 60 resources, generated from the official OpenAPI spec. Built for modern Python:
+**Complete API coverage** — all 639 operations across 60 resources, generated from the official OpenAPI spec. Built for modern Python:
 
 - **Async and sync clients** — `async with OrderCloudClient(...)` or `with SyncOrderCloudClient(...)`. Same API shape, your choice of runtime.
 - **Pydantic v2 models** — every API resource is a typed, validated model. snake_case fields, PascalCase aliases for API compatibility.
@@ -20,7 +20,7 @@ A fully typed, async-first Python SDK for [Sitecore OrderCloud](https://orderclo
 - **Middleware hooks** — intercept requests and responses for logging, metrics, or header injection.
 - **Structured logging** — standard Python `logging` module, DEBUG/WARNING levels.
 - **Full type annotations** — `py.typed` marker for downstream type checking with mypy, pyright, etc.
-- **784 tests, 97% coverage** — 759 unit tests (mocked HTTP) + 25 integration tests (live sandbox).
+- **803 tests, 97% coverage** — 778 unit tests (mocked HTTP) + 25 integration tests (live sandbox).
 
 ## Installation
 
@@ -204,14 +204,14 @@ Before-request hooks receive a mutable `RequestContext` — modify `headers`, `p
 
 ## API Coverage
 
-The SDK covers **all 60 resources** and **632 operations** in the OrderCloud API. Models and resource clients are generated from the official OpenAPI v3 spec (version 1.0.445).
+The SDK covers **all 60 resources** and **639 operations** in the OrderCloud API. Models and resource clients are generated from the official OpenAPI v3 spec (version 1.0.470).
 
 ### Core Commerce
 
 | Resource | Operations | Highlights |
 |----------|-----------|------------|
 | Products | 18 | CRUD, variants, specs, suppliers, assignments |
-| Orders | 29 | CRUD, submit, approve, decline, cancel, complete, forward, split, ship, promotions |
+| Orders | 30 | CRUD, submit, approve, decline, cancel, complete, forward, split, ship, repeat, promotions |
 | Line Items | 9 | CRUD, shipping address management, cross-order listing |
 | Cart | 37 | Full shopping cart lifecycle, checkout, payments, promotions |
 | Bundles | 12 | CRUD, product/catalog assignments |
@@ -235,7 +235,7 @@ The SDK covers **all 60 resources** and **632 operations** in the OrderCloud API
 | Resource | Operations | Highlights |
 |----------|-----------|------------|
 | Price Schedules | 8 | CRUD, price breaks |
-| Promotions | 9 | CRUD, assignments |
+| Promotions | 10 | CRUD, assignments, generated codes |
 | Discounts | 9 | CRUD, assignments |
 | Specs | 15 | CRUD, options, product assignments |
 
@@ -267,7 +267,7 @@ The SDK covers **all 60 resources** and **632 operations** in the OrderCloud API
 | Integration Events | 10 | CRUD, calculate, estimate shipping |
 | Message Senders | 11 | CRUD, assignments, CC listeners |
 | Subscriptions | 6 | CRUD |
-| Entity Syncs | 40 | Full sync infrastructure |
+| Entity Syncs | 45 | Full sync infrastructure (incl. catalogs) |
 | Delivery Configurations | 6 | CRUD |
 | Inventory Records | 18 | CRUD, variant records, assignments |
 
@@ -464,18 +464,18 @@ The test suite is self-bootstrapping — it uses the SDK itself to create all te
 
 ### Test Suite
 
-784 tests across 12 modules.
+803 tests across 12 modules.
 
-**Unit tests (759)** — mocked HTTP via [respx](https://lundberg.github.io/respx/), no network calls:
+**Unit tests (778)** — mocked HTTP via [respx](https://lundberg.github.io/respx/), no network calls:
 
 | Module | Tests | Purpose |
 |--------|-------|---------|
 | `test_auth.py` | 13 | OAuth2 token management |
-| `test_http.py` | 16 | HTTP client, error parsing, retries |
-| `test_models.py` | 28 | Model round-trips, enums, xp, ListPage |
-| `test_resources.py` | 22 | Representative resource operations |
-| `test_resource_coverage.py` | 632 | All 60 resources, all 632 operations |
-| `test_sync_client.py` | 48 | Sync wrapper, pagination |
+| `test_http.py` | 37 | HTTP client, error parsing, retries |
+| `test_models.py` | 44 | Model round-trips, enums, xp, ListPage |
+| `test_resources.py` | 33 | Representative resource operations |
+| `test_resource_coverage.py` | 639 | All 60 resources, all 639 operations |
+| `test_sync_client.py` | 12 | Sync wrapper, pagination |
 
 **Integration tests (25)** — live sandbox, skipped when credentials are absent:
 
@@ -492,11 +492,11 @@ The test suite is self-bootstrapping — it uses the SDK itself to create all te
 
 | Module | Coverage |
 |--------|----------|
-| `auth.py` | 100% |
+| `auth.py` | 93% |
 | `client.py` | 100% |
-| `config.py` | 100% |
+| `config.py` | 94% |
 | `errors.py` | 100% |
-| `http.py` | 97% |
+| `http.py` | 98% |
 | `middleware.py` | 100% |
 | `sync_client.py` | 100% |
 | `resources/base.py` | 100% |
@@ -505,7 +505,7 @@ The test suite is self-bootstrapping — it uses the SDK itself to create all te
 
 ## Contributing
 
-Bug reports and feature requests are welcome via [GitHub Issues](https://github.com/markcassidyconsulting/ordercloud-python/issues). If you're interested in the internals, the codegen pipeline in `tools/codegen/` is a good starting point. See the [Changelog](CHANGELOG.md) for release history.
+Bug reports, feature requests, and pull requests are welcome. See [CONTRIBUTING.md](CONTRIBUTING.md) for development setup, running tests, code generation, and PR guidelines. See the [Changelog](CHANGELOG.md) for release history.
 
 ## License