lumera 0.25.2__tar.gz → 0.26.0__tar.gz

{lumera-0.25.2 → lumera-0.26.0}/PKG-INFO

@@ -1,11 +1,12 @@
 Metadata-Version: 2.4
 Name: lumera
-Version: 0.25.2
+Version: 0.26.0
 Summary: SDK for building on Lumera platform
 Requires-Python: >=3.11
 Requires-Dist: requests
 Requires-Dist: python-dotenv
 Requires-Dist: google-api-python-client==2.173.0
+Requires-Dist: simple-salesforce==1.12.6
 Requires-Dist: slack_sdk==3.35.0
 Provides-Extra: dev
 Requires-Dist: ruff; extra == "dev"

{lumera-0.25.2 → lumera-0.26.0}/lumera/_utils.py

@@ -157,6 +157,36 @@ def _raise_if_project_scope_denied(resp: requests.Response, provider: str, url:
         )
 
 
+def _raise_credentials_http_error(resp: requests.Response, api_name: str) -> None:
+    """Raise HTTPError for a failed credentials fetch with the server's message.
+
+    A bare ``raise_for_status()`` only reports "400 Client Error: Bad
+    Request", hiding actionable backend messages such as "Provider not
+    connected" or the candidate api_names of an ambiguous provider lookup.
+    Keeps raising ``requests.HTTPError`` (with ``.response`` attached) so
+    existing callers that catch it continue to work.
+    """
+    if resp.ok:
+        return
+    detail = ""
+    try:
+        payload = resp.json()
+    except ValueError:
+        payload = None
+    if isinstance(payload, dict):
+        for key in ("error", "message", "detail"):
+            value = payload.get(key)
+            if isinstance(value, str) and value.strip():
+                detail = value.strip()
+                break
+    if not detail:
+        detail = (resp.text or "").strip()[:300]
+    message = f"{resp.status_code} error fetching {api_name} credentials from Lumera"
+    if detail:
+        message += f": {detail}"
+    raise requests.HTTPError(message, response=resp)
+
+
 def _parse_expiry(expires_at: int | float | str | None) -> float:
     if not expires_at:
         return float("inf")
@@ -177,7 +207,7 @@ def _fetch_access_token(provider: str) -> tuple[str, float]:
     url = f"{API_BASE}/connections/{provider}/access-token"
     resp = _get_session().get(url, headers=_api_headers(), timeout=30)
     _raise_if_project_scope_denied(resp, provider, url)
-    resp.raise_for_status()
+    _raise_credentials_http_error(resp, provider)
 
     data = resp.json()
     access_token = data.get("access_token")
@@ -292,7 +322,7 @@ def _fetch_credentials(api_name: str, provider: str | None = None) -> Credential
     params = {"provider": provider_hint} if provider_hint else None
     resp = _get_session().get(url, headers=_api_headers(), params=params, timeout=30)
     _raise_if_project_scope_denied(resp, api_name, url)
-    resp.raise_for_status()
+    _raise_credentials_http_error(resp, api_name)
 
     data = resp.json()
     access_token = data.get("access_token")

{lumera-0.25.2 → lumera-0.26.0}/lumera/integrations/__init__.py

@@ -43,6 +43,7 @@ Available integrations:
 - ``bill`` - BILL AP/AR API
 - ``google`` - Google APIs (Sheets, Drive)
 - ``netsuite`` - NetSuite REST API and SuiteQL (M2M or OAuth)
+- ``salesforce`` - Salesforce REST API via customer-owned Client Credentials
 - ``slack`` - Slack (messages, files, reactions)
 
 Utilities:
@@ -64,7 +65,7 @@ from .._utils import (
     list_integration_connections,
     list_integrations,
 )
-from . import bill, google, netsuite, slack
+from . import bill, google, netsuite, salesforce, slack
 
 __all__ = [
     "Credentials",
@@ -75,5 +76,6 @@ __all__ = [
     "bill",
     "google",
     "netsuite",
+    "salesforce",
     "slack",
 ]

{lumera-0.25.2 → lumera-0.26.0}/lumera/integrations/netsuite.py

@@ -21,6 +21,12 @@ Quick start::
     ns = NetSuiteClient(api_name="netsuite_prod")
     accounts = ns.suiteql("SELECT COUNT(*) AS cnt FROM account")
     je_id = ns.create_record("journalentry", payload)
+
+The default ``api_name="netsuite"`` resolves to the connection named
+"netsuite", or — when no connection has that exact name — to the company's
+single connected NetSuite connection regardless of its api_name. Pass an
+explicit ``api_name`` only when the company has multiple NetSuite
+connections.
 """
 
 from __future__ import annotations

lumera-0.26.0/lumera/integrations/salesforce.py

@@ -0,0 +1,62 @@
+"""Lumera Salesforce integration helpers.
+
+Salesforce connections use a customer-owned External Client App with the OAuth
+2.0 Client Credentials flow. Lumera acquires and renews the short-lived access
+token; SDK callers receive a ready-to-use ``simple-salesforce`` client.
+
+Quick start::
+
+    from lumera.integrations.salesforce import get_client
+
+    sf = get_client("salesforce_prod")
+    accounts = sf.query("SELECT Id, Name FROM Account LIMIT 10")
+"""
+
+from __future__ import annotations
+
+from dataclasses import dataclass
+
+from simple_salesforce import Salesforce
+
+from lumera._utils import get_credentials
+
+
+@dataclass(frozen=True)
+class SalesforceToken:
+    """A Lumera-managed Salesforce access token and org endpoint."""
+
+    access_token: str
+    instance_url: str
+    api_version: str | None = None
+
+
+def get_token(api_name: str = "salesforce") -> SalesforceToken:
+    """Return the current Salesforce token and org-specific instance URL."""
+
+    credentials = get_credentials(api_name, provider="salesforce")
+    extra = credentials.extra or {}
+    instance_url = str(extra.get("instance_url") or "").strip()
+    if not instance_url:
+        raise ValueError(
+            "Salesforce instance_url not returned by Lumera. "
+            "Test or reconnect the Salesforce integration."
+        )
+    api_version = str(extra.get("api_version") or "").strip() or None
+    return SalesforceToken(
+        access_token=credentials.token,
+        instance_url=instance_url.rstrip("/"),
+        api_version=api_version,
+    )
+
+
+def get_client(api_name: str = "salesforce") -> Salesforce:
+    """Return an authenticated ``simple-salesforce`` client."""
+
+    token = get_token(api_name)
+    kwargs: dict[str, str] = {
+        "instance_url": token.instance_url,
+        "session_id": token.access_token,
+    }
+    if token.api_version:
+        kwargs["version"] = token.api_version
+    return Salesforce(**kwargs)

{lumera-0.25.2 → lumera-0.26.0}/lumera.egg-info/PKG-INFO

@@ -1,11 +1,12 @@
 Metadata-Version: 2.4
 Name: lumera
-Version: 0.25.2
+Version: 0.26.0
 Summary: SDK for building on Lumera platform
 Requires-Python: >=3.11
 Requires-Dist: requests
 Requires-Dist: python-dotenv
 Requires-Dist: google-api-python-client==2.173.0
+Requires-Dist: simple-salesforce==1.12.6
 Requires-Dist: slack_sdk==3.35.0
 Provides-Extra: dev
 Requires-Dist: ruff; extra == "dev"

{lumera-0.25.2 → lumera-0.26.0}/lumera.egg-info/SOURCES.txt

@@ -23,9 +23,11 @@ lumera/integrations/__init__.py
 lumera/integrations/bill.py
 lumera/integrations/google.py
 lumera/integrations/netsuite.py
+lumera/integrations/salesforce.py
 lumera/integrations/slack.py
 tests/test_agents_live.py
 tests/test_automations.py
 tests/test_flags.py
+tests/test_integrations_salesforce.py
 tests/test_sdk.py
 tests/test_webhooks.py

{lumera-0.25.2 → lumera-0.26.0}/lumera.egg-info/requires.txt

@@ -1,6 +1,7 @@
 requests
 python-dotenv
 google-api-python-client==2.173.0
+simple-salesforce==1.12.6
 slack_sdk==3.35.0
 
 [dev]

{lumera-0.25.2 → lumera-0.26.0}/pyproject.toml

@@ -1,12 +1,13 @@
 [project]
 name = "lumera"
-version = "0.25.2"
+version = "0.26.0"
 description = "SDK for building on Lumera platform"
 requires-python = ">=3.11"
 dependencies = [
     "requests",
     "python-dotenv",
     "google-api-python-client==2.173.0",
+    "simple-salesforce==1.12.6",
     "slack_sdk==3.35.0",
 ]
 

lumera-0.26.0/tests/test_integrations_salesforce.py

@@ -0,0 +1,59 @@
+from types import SimpleNamespace
+from unittest.mock import Mock
+
+import pytest
+
+from lumera.integrations import salesforce
+
+
+def test_get_token_reads_salesforce_runtime_metadata(monkeypatch: pytest.MonkeyPatch) -> None:
+    get_credentials = Mock(
+        return_value=SimpleNamespace(
+            token="access-token",
+            extra={
+                "instance_url": "https://acme.my.salesforce.com/",
+                "api_version": "65.0",
+            },
+        )
+    )
+    monkeypatch.setattr(salesforce, "get_credentials", get_credentials)
+
+    token = salesforce.get_token("salesforce_prod")
+
+    get_credentials.assert_called_once_with("salesforce_prod", provider="salesforce")
+    assert token.access_token == "access-token"
+    assert token.instance_url == "https://acme.my.salesforce.com"
+    assert token.api_version == "65.0"
+
+
+def test_get_client_builds_simple_salesforce_client(monkeypatch: pytest.MonkeyPatch) -> None:
+    client = object()
+    constructor = Mock(return_value=client)
+    monkeypatch.setattr(salesforce, "Salesforce", constructor)
+    monkeypatch.setattr(
+        salesforce,
+        "get_token",
+        lambda _api_name: salesforce.SalesforceToken(
+            access_token="access-token",
+            instance_url="https://acme.my.salesforce.com",
+            api_version="65.0",
+        ),
+    )
+
+    assert salesforce.get_client("salesforce_prod") is client
+    constructor.assert_called_once_with(
+        instance_url="https://acme.my.salesforce.com",
+        session_id="access-token",
+        version="65.0",
+    )
+
+
+def test_get_token_requires_instance_url(monkeypatch: pytest.MonkeyPatch) -> None:
+    monkeypatch.setattr(
+        salesforce,
+        "get_credentials",
+        lambda *_args, **_kwargs: SimpleNamespace(token="access-token", extra={}),
+    )
+
+    with pytest.raises(ValueError, match="instance_url"):
+        salesforce.get_token()

{lumera-0.25.2 → lumera-0.26.0}/tests/test_sdk.py

@@ -342,6 +342,32 @@ def test_get_credentials_sends_lumera_client_header(monkeypatch: pytest.MonkeyPa
     assert headers["X-Lumera-Client"].startswith("lumera-sdk/")
 
 
+def test_get_credentials_error_includes_server_message(monkeypatch: pytest.MonkeyPatch) -> None:
+    monkeypatch.setenv(sdk.TOKEN_ENV, "tok")
+    _utils._credentials_cache.clear()
+    _utils._token_cache.clear()
+
+    class MockSession:
+        def get(self, url: str, **kwargs: object) -> DummyResponse:
+            del url, kwargs
+            return DummyResponse(
+                status_code=400,
+                json_data={"error": "Provider not connected. Complete OAuth flow first."},
+            )
+
+        def mount(self, prefix: str, adapter: object) -> None:
+            del prefix, adapter
+
+    monkeypatch.setattr(_utils, "_get_session", lambda: MockSession())
+
+    with pytest.raises(requests.HTTPError) as excinfo:
+        _utils.get_credentials("netsuite")
+
+    assert "Provider not connected" in str(excinfo.value)
+    assert "netsuite" in str(excinfo.value)
+    assert excinfo.value.response.status_code == 400
+
+
 def test_get_credentials_sends_provider_validation_param(
     monkeypatch: pytest.MonkeyPatch,
 ) -> None: