konecty-sdk-python 2.1.0__tar.gz → 2.1.2__tar.gz

konecty_sdk_python-2.1.2/KonectySdkPython/lib/exceptions.py

@@ -0,0 +1,42 @@
+"""Exceptions for the Konecty SDK."""
+
+
+class KonectyError(Exception):
+    """Base exception for Konecty errors."""
+
+    pass
+
+
+class KonectyAPIError(KonectyError):
+    """Raised when the API returns success=false or a non-2xx status."""
+
+    pass
+
+
+class KonectyGoogleSessionError(KonectyAPIError):
+    """
+    Raised by exchange_google_code. Carries the machine-readable ``code`` from
+    ``errors[0].code`` so callers can branch or translate without parsing the
+    message; ``failed`` covers unreadable or unrecognised bodies.
+
+    Subclasses KonectyAPIError so existing ``except KonectyAPIError`` keeps working.
+
+    Mirrors KonectyGoogleSessionError in the TypeScript SDK — keep both in sync.
+    """
+
+    def __init__(self, code: str, message: str) -> None:
+        super().__init__(message)
+        self.code = code
+
+
+class KonectyValidationError(KonectyError):
+    """Raised for validation errors."""
+
+    pass
+
+
+class KonectySerializationError(KonectyError):
+    """Raised when a value is not serializable."""
+
+    def __init__(self) -> None:
+        super().__init__("Tipo não serializável")

{konecty_sdk_python-2.1.0 → konecty_sdk_python-2.1.2}/KonectySdkPython/lib/services/auth.py

@@ -3,7 +3,7 @@
 from typing import Any, Dict, Optional, Union
 from urllib.parse import quote, urlencode
 
-from ..exceptions import KonectyAPIError
+from ..exceptions import KonectyAPIError, KonectyGoogleSessionError
 from .base import BaseService
 
 GOOGLE_START_PATH = "/api/auth/google/start"
@@ -15,6 +15,29 @@ GOOGLE_SESSION_PATH = "/api/auth/google/session"
 LOGIN_OPTIONS_PATH = "/api/auth/login-options"
 
 
+_GOOGLE_SESSION_ERROR_CODES = (
+    "invalid_code",
+    "expired_code",
+    "user_not_found",
+    "user_inactive",
+)
+
+
+def _first_error_code(error: KonectyAPIError) -> str:
+    """
+    Extract the first recognised ``errors[].code``; ``failed`` when there is none.
+
+    Same set and same fallback as the TypeScript SDK, so both raise the same code
+    for the same response.
+    """
+    errors = error.args[0] if error.args else None
+    if isinstance(errors, list):
+        for item in errors:
+            if isinstance(item, dict) and item.get("code") in _GOOGLE_SESSION_ERROR_CODES:
+                return str(item["code"])
+    return "failed"
+
+
 def _first_error_message(error: KonectyAPIError) -> str:
     """Extract errors[0].message from a KonectyAPIError raised by the HTTP layer."""
     errors = error.args[0] if error.args else None
@@ -74,8 +97,10 @@ class AuthService(BaseService):
         POST /api/auth/google/session. Exchanges the single-use code (TTL 60s) for a session.
 
         On success the returned authId is adopted by the client, so following requests
-        are authenticated. On error raises KonectyAPIError with errors[0].message and
-        leaves the client authentication state untouched.
+        are authenticated. On error raises KonectyGoogleSessionError — errors[0].message
+        as the message plus the machine-readable ``code`` — and leaves the client
+        authentication state untouched. The error subclasses KonectyAPIError, so callers
+        catching that keep working.
         """
         payload: Dict[str, Any] = {"code": code}
         if geolocation is not None:
@@ -90,11 +115,15 @@ class AuthService(BaseService):
         try:
             response = await self._post(GOOGLE_SESSION_PATH, json=payload)
         except KonectyAPIError as error:
-            raise KonectyAPIError(_first_error_message(error)) from error
+            raise KonectyGoogleSessionError(
+                _first_error_code(error), _first_error_message(error)
+            ) from error
 
         auth_id = response.get("authId") if isinstance(response, dict) else None
         if not isinstance(auth_id, str) or not auth_id:
-            raise KonectyAPIError("Google session response has no authId")
+            raise KonectyGoogleSessionError(
+                "failed", "Google session response has no authId"
+            )
 
         self._client.set_auth_id(auth_id)
         return response

{konecty_sdk_python-2.1.0 → konecty_sdk_python-2.1.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: konecty_sdk_python
-Version: 2.1.0
+Version: 2.1.2
 Summary: Konecty SDK Python
 Author-email: Leonardo Leal <leonardo.leal@konecty.com>, Derotino Silveira <derotino.silveira@konecty.com>
 License: MIT
@@ -127,9 +127,29 @@ uv pip install -e ".[dev]"
 
 #### Build & Publish
 
-It is needed to increase the version number on the [pyproject](./pyproject.toml) file.
+Publishing runs from the **Publish** workflow, triggered by hand from the Actions tab
+(`Run workflow`) — no merge publishes on its own. Pick the increment (`patch`, `minor` or
+`major`) and run it; **the version bump is part of publishing**, so there is nothing to edit
+beforehand.
+
+The workflow runs the tests, bumps `version` in [pyproject.toml](./pyproject.toml), builds into
+`dist-build/` and uploads with `uv publish` (secret `PYPI_API_TOKEN`). Only after the upload
+succeeds does it commit `chore(release): <version>` and tag it — a failed upload leaves no bump
+behind claiming a release that does not exist on PyPI.
+
+<details>
+<summary>Publishing manually</summary>
+
+Same PyPI endpoint (`upload.pypi.org/legacy/`) and the same kind of API token. Credentials
+come from `.pypirc`, which is gitignored and therefore local-only — this is why CI
+authenticates through a secret instead.
 
 ```sh
 uv build
 uvx twine upload --config-file .pypirc --skip-existing dist/*
 ```
+
+Note `--skip-existing`: unlike the workflow, this silently skips versions already published,
+and it is what keeps a stale local `dist/` from re-uploading old artifacts.
+
+</details>

{konecty_sdk_python-2.1.0 → konecty_sdk_python-2.1.2}/README.md

@@ -97,9 +97,29 @@ uv pip install -e ".[dev]"
 
 #### Build & Publish
 
-It is needed to increase the version number on the [pyproject](./pyproject.toml) file.
+Publishing runs from the **Publish** workflow, triggered by hand from the Actions tab
+(`Run workflow`) — no merge publishes on its own. Pick the increment (`patch`, `minor` or
+`major`) and run it; **the version bump is part of publishing**, so there is nothing to edit
+beforehand.
+
+The workflow runs the tests, bumps `version` in [pyproject.toml](./pyproject.toml), builds into
+`dist-build/` and uploads with `uv publish` (secret `PYPI_API_TOKEN`). Only after the upload
+succeeds does it commit `chore(release): <version>` and tag it — a failed upload leaves no bump
+behind claiming a release that does not exist on PyPI.
+
+<details>
+<summary>Publishing manually</summary>
+
+Same PyPI endpoint (`upload.pypi.org/legacy/`) and the same kind of API token. Credentials
+come from `.pypirc`, which is gitignored and therefore local-only — this is why CI
+authenticates through a secret instead.
 
 ```sh
 uv build
 uvx twine upload --config-file .pypirc --skip-existing dist/*
 ```
+
+Note `--skip-existing`: unlike the workflow, this silently skips versions already published,
+and it is what keeps a stale local `dist/` from re-uploading old artifacts.
+
+</details>

{konecty_sdk_python-2.1.0 → konecty_sdk_python-2.1.2}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "konecty_sdk_python"
-version = "2.1.0"
+version = "2.1.2"
 description = "Konecty SDK Python"
 readme = "README.md"
 requires-python = ">=3.11"

konecty_sdk_python-2.1.0/KonectySdkPython/lib/exceptions.py

@@ -1,26 +0,0 @@
-"""Exceptions for the Konecty SDK."""
-
-
-class KonectyError(Exception):
-    """Base exception for Konecty errors."""
-
-    pass
-
-
-class KonectyAPIError(KonectyError):
-    """Raised when the API returns success=false or a non-2xx status."""
-
-    pass
-
-
-class KonectyValidationError(KonectyError):
-    """Raised for validation errors."""
-
-    pass
-
-
-class KonectySerializationError(KonectyError):
-    """Raised when a value is not serializable."""
-
-    def __init__(self) -> None:
-        super().__init__("Tipo não serializável")