update

README.md

@@ -28,7 +28,8 @@ A Hugging Face Space application for generating personalized email outreach sequ
 1. Set your API keys as secrets in Hugging Face Spaces:
    - Go to Settings → Secrets
    - Add `OPENAI_API_KEY` with your OpenAI API key value
-   - Add `SMARTLEAD_API_KEY` with your Smartlead API key value (optional, for Smartlead integration)
+   - Add `SMARTLEAD_API_KEY` with your Smartlead Admin API key value (required for Smartlead integration)
+   - Add `SMARTLEAD_CLIENT_API_KEY` with your Smartlead Client API key value (optional, may be required for certain operations)
 
 2. The app will automatically:
    - Create SQLite database in `/data/emailout.db`

backend/app/smartlead_client.py

@@ -10,21 +10,35 @@ class SmartleadClient:
     
     BASE_URL = "https://server.smartlead.ai/api/v1"
     
-    def __init__(self, api_key: Optional[str] = None):
+    def __init__(self, api_key: Optional[str] = None, client_api_key: Optional[str] = None):
+        """
+        Initialize Smartlead client
+        
+        Args:
+            api_key: Admin API key (required for campaign management operations)
+            client_api_key: Client API key (optional, may be required for certain operations)
+        """
         self.api_key = api_key or os.getenv("SMARTLEAD_API_KEY")
+        self.client_api_key = client_api_key or os.getenv("SMARTLEAD_CLIENT_API_KEY")
+        
         if not self.api_key:
-            raise ValueError("SMARTLEAD_API_KEY environment variable is required (use Admin API key)")
+            raise ValueError("SMARTLEAD_API_KEY environment variable is required (Admin API key)")
         
-        # Smartlead API authentication - try Bearer token format first
-        # If that doesn't work, may need to use API key directly or in different header
+        # Smartlead API uses query parameter authentication, not Bearer token
+        # According to docs: https://api.smartlead.ai/reference/authentication
         self.headers = {
-            "Authorization": f"Bearer {self.api_key}",
             "Content-Type": "application/json"
         }
     
     def _make_request(self, method: str, endpoint: str, data: Optional[Dict] = None, max_retries: int = 3) -> Dict:
         """Make API request with retry logic for 429/5xx errors"""
-        url = f"{self.BASE_URL}{endpoint}"
+        # Smartlead API requires api_key as query parameter
+        # Format: ?api_key=yourApiKey
+        url = f"{self.BASE_URL}{endpoint}?api_key={self.api_key}"
+        
+        # If client API key is provided, add it as well
+        if self.client_api_key:
+            url += f"&client_api_key={self.client_api_key}"
         
         for attempt in range(max_retries):
             try:
@@ -43,7 +57,7 @@ class SmartleadClient:
                         error_msg = error_data.get('message') or error_data.get('error') or response.text or "Unauthorized"
                     except:
                         error_msg = response.text or "Unauthorized"
-                    raise Exception(f"Smartlead API authentication failed (401): {error_msg}. Please verify you're using the Admin API key (not Client API key) and that it's correctly set in SMARTLEAD_API_KEY environment variable.")
+                    raise Exception(f"Smartlead API authentication failed (401): {error_msg}. Please verify your API key is correctly set in SMARTLEAD_API_KEY environment variable. If using client API key, also set SMARTLEAD_CLIENT_API_KEY.")
                 
                 # Handle rate limiting
                 if response.status_code == 429:
@@ -63,7 +77,8 @@ class SmartleadClient:
                 
             except requests.exceptions.HTTPError as e:
                 if response.status_code == 401:
-                    raise Exception(f"Smartlead API authentication failed (401): {response.text or 'Unauthorized'}. Please check your API key.")
+                    error_msg = response.text or 'Unauthorized'
+                    raise Exception(f"Smartlead API authentication failed (401): {error_msg}. Please verify your API key is correctly set in SMARTLEAD_API_KEY environment variable.")
                 if attempt == max_retries - 1:
                     raise Exception(f"Smartlead API error after {max_retries} attempts: {str(e)}")
                 if response.status_code < 500: