Skip to main content

pycellarion

PyPI CI Contract License: MIT

Async Python client for the Cellarion wine-cellar API. It is the library behind the Home Assistant integration, and usable on its own by anything that wants to read a cellar or mark a bottle as consumed.

  • Async, typed, small. One dependency (aiohttp), py.typed, no I/O outside the calls you make.
  • Two credentials. A personal API token (cel_…, created in Cellarion under Settings → API tokens), or email and password used once to mint such a token. Passwords are never kept beyond the login they were given for.
  • Push events. Parses the server's text/event-stream and yields event names, so callers can refresh on change instead of polling.
  • Honest errors. Status codes map to a small exception hierarchy: CellarionAuthError (re-authenticate), CellarionScopeError (the token lacks a scope), CellarionTokensNotSupported, CellarionPushNotSupported and CellarionInventoryNotSupported (older servers), CellarionPushForbidden, and CellarionApiError for everything else.

Install

pip install pycellarion

Use

import aiohttp
from pycellarion import CellarionClient

async with aiohttp.ClientSession() as session:
    client = CellarionClient(session, "https://cellarion.app", token="cel_…")

    stats = await client.get_stats_overview()
    print(stats["stats"]["overview"]["totalBottles"])

    async for event in client.events_stream():
        if event == "_connected":
            continue
        print("something changed:", event)

Minting a token from email and password:

client = CellarionClient(session, "https://cellarion.app", "me@example.com", "secret")
await client.authenticate()
token = await client.async_create_api_token("My script", ["read", "consume"])
# keep `token`; the password is not needed again

Inventory

get_inventory() returns every bottle in the user's cellars in one read: cellars, racks, the wines the bottles reference, each bottle's place (rack, shelf, row, slot) and drink window. Keep the etag and pass it back; while nothing has changed the server answers 304 and you keep your copy.

from pycellarion import CellarionInventoryNotSupported

try:
    result = await client.get_inventory()
except CellarionInventoryNotSupported:
    ...  # the server is older than the inventory endpoint
inventory, etag = result.data, result.etag

for bottle in inventory["bottles"]:
    wine = inventory["wines"].get(bottle["wine"]) or bottle["pending"]
    print(wine["name"], bottle["vintage"], bottle["location"])
    if bottle["image"]:  # a label thumbnail path
        body, content_type = await client.get_image(bottle["image"])

# Later: only download it again when something changed
result = await client.get_inventory(etag)
if not result.not_modified:
    inventory, etag = result.data, result.etag

get_image() fetches only paths matching IMAGE_PATH_RE (/api/uploads/thumbs/…/<name>.<ext>.webp) and raises ValueError for anything else without making a request. The uploads mount is public, so the request carries no credential and follows no redirect.

API

Method Purpose
authenticate() Log in with email and password (session JWT); raises CellarionAuthError on bad credentials
async_create_api_token(name, scopes) Mint a personal API token (password login required)
get_stats_overview() / get_cellars() / get_notifications() / get_peak_bottles(limit) / get_health() Reads
get_account_id() Stable account id from /api/auth/whoami, or None on servers without it
get_inventory(etag=None) Whole-cellar inventory as an InventoryResult(data, etag, not_modified); 304 when etag is still current; CellarionInventoryNotSupported on older servers
get_image(path) (bytes, content_type) of a label thumbnail path from the inventory; any other path raises ValueError
consume_bottle(bottle_id, reason, rating, note) Mark a bottle as consumed
events_stream() Async iterator of push event names; yields "_connected" first
revoke_own_token() Ask the server to revoke the client's own API token (Cellarion 1.220+)

Responses are returned as plain dicts (JsonDict); bodies over MAX_BODY_BYTES (4 MiB) are refused. The inventory may be up to MAX_INVENTORY_BYTES (32 MiB) and an image up to MAX_IMAGE_BYTES (2 MiB); both caps are enforced on the bytes as they arrive, not only on the announced Content-Length.

API contract

The integration depends on a handful of endpoints and response shapes. tests/contract/ pins them down and runs nightly against a real Cellarion server (see the Contract badge above), so a change on the server side is caught before it reaches users. Run them yourself against any server with a read-scoped token:

CELLARION_CONTRACT_URL=https://cellarion.app CELLARION_CONTRACT_TOKEN=cel_… pytest tests/contract

They never write: no bottle is consumed and no token is revoked.

Development

pip install -e ".[test]"
ruff check . && ruff format --check . && mypy src
pytest --cov

Releases are published to PyPI from GitHub releases through trusted publishing.

License

MIT

Metadata

Release files for pycellarion 0.2.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for pycellarion 0.2.0
File Size Uploaded Provenance
pycellarion-0.2.0.tar.gz 20.2 kB With provenance Details

Built distribution (wheel)

Table of built distributions (wheels) for pycellarion 0.2.0
File Interpreter ABI Platform
pycellarion-0.2.0-py3-none-any.whl Python 3 none any Details

Total release size: 32.7 kB

Release files / pycellarion-0.2.0.tar.gz

Download URL pycellarion-0.2.0.tar.gz
Size 20.2 kB
Tags Source
SHA-256 checksum
How to use checksums
a5c190202da43d1fe0c94841c443d284f82ae2233eccf82b48a0c602f68fbd45
BLAKE2b-256 checksum
How to use checksums
67685b98eba2f5115912109388994b66136b9b409f3edd6f4ff50ca88570c58a
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 22, 2026.

Transparency log

Release files / pycellarion-0.2.0-py3-none-any.whl

Download URL pycellarion-0.2.0-py3-none-any.whl
Size 12.5 kB
Tags Python 3
SHA-256 checksum
How to use checksums
bf95e646564e1f27edffd1490e6d6e836ab745c020d5204e4deb26fd77afac7c
BLAKE2b-256 checksum
How to use checksums
2d445e71a43e3562f09d4f24a2eb5f2402cfcc046278901e0b742d74f9717034
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 22, 2026.

Transparency log

Security for pycellarion 0.2.0

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

All 2 files in this release have been uploaded with provenance metadata.

Select from 2 files

Attestation for pycellarion-0.2.0.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 22, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Release history Release notifications | RSS feed

This release

0.2.0 This release

2 release files Full provenance

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page