feat: add tenant filtering to list instance methods for certificates, destinations, and fragments

Author: cassiofariasmachado

src/sap_cloud_sdk/destination/_local_client_base.py

@@ -217,6 +217,20 @@ def find_provider() -> Optional[T]:
                 return result
         return None
 
+    def _resolve_instance_list(
+        self,
+        tenant: Optional[str],
+        instance_list: List[Dict[str, Any]],
+    ) -> List[T]:
+        """Resolve entities from the instance list filtered by tenant.
+
+        When tenant is provided, returns entries matching that tenant (subscriber context).
+        When tenant is None, returns entries without a tenant field (provider context).
+        """
+        if tenant is not None:
+            return [self.from_dict(e) for e in instance_list if e.get("tenant") == tenant]
+        return [self.from_dict(e) for e in instance_list if not e.get("tenant")]
+
     def _resolve_subaccount_list(
         self,
         access_strategy: AccessStrategy,

src/sap_cloud_sdk/destination/local_certificate_client.py

@@ -253,7 +253,9 @@ def list_instance_certificates(
         """List all certificates from the service instance scope.
 
         Args:
-            tenant: Optional tenant subdomain (ignored in local dev mode).
+            tenant: Optional subscriber tenant subdomain. When provided, returns only entries
+                matching that tenant (subscriber context); otherwise returns provider-level
+                entries (no tenant field).
             _filter: Optional ListCertificatesFilter (ignored in local dev mode).
 
         Returns:
@@ -266,7 +268,7 @@ def list_instance_certificates(
         """
         try:
             data = self._read()
-            items = [Certificate.from_dict(entry) for entry in data.get("instance", [])]
+            items = self._resolve_instance_list(tenant, data.get("instance", []))
             return PagedResult(items=items)
         except DestinationOperationError:
             raise

src/sap_cloud_sdk/destination/local_client.py

@@ -41,6 +41,7 @@ class LocalDevDestinationClient(LocalDevClientBase[Destination]):
       ],
       "instance": [
         {
+          "tenant": "t1",                # optional: subscriber-specific entry
           "name": "destC",
           "type": "HTTP",
           "url": "https://provider.example.com"
@@ -250,7 +251,9 @@ def list_instance_destinations(
         """List all destinations from the service instance scope.
 
         Args:
-            tenant: Optional tenant subdomain (ignored in local dev mode).
+            tenant: Optional subscriber tenant subdomain. When provided, returns only entries
+                matching that tenant (subscriber context); otherwise returns provider-level
+                entries (no tenant field).
             _filter: Optional ListDestinationsFilter (ignored in local dev mode).
 
         Returns:
@@ -263,7 +266,7 @@ def list_instance_destinations(
         """
         try:
             data = self._read()
-            items = [Destination.from_dict(entry) for entry in data.get("instance", [])]
+            items = self._resolve_instance_list(tenant, data.get("instance", []))
             return PagedResult(items=items)
         except DestinationOperationError:
             raise

src/sap_cloud_sdk/destination/local_fragment_client.py

@@ -146,7 +146,9 @@ def list_instance_fragments(
         """List all fragments from the service instance scope.
 
         Args:
-            tenant: Optional tenant subdomain (ignored in local dev mode).
+            tenant: Optional subscriber tenant subdomain. When provided, returns only entries
+                matching that tenant (subscriber context); otherwise returns provider-level
+                entries (no tenant field).
 
         Returns:
             List of fragments. Returns empty list if no fragments exist.
@@ -156,7 +158,7 @@ def list_instance_fragments(
         """
         try:
             data = self._read()
-            return [Fragment.from_dict(entry) for entry in data.get("instance", [])]
+            return self._resolve_instance_list(tenant, data.get("instance", []))
         except DestinationOperationError:
             raise
         except Exception as e:

tests/destination/unit/test_local_certificate_client.py

@@ -143,6 +143,32 @@ def test_does_not_include_subaccount_entries(self, client):
         assert len(result.items) == 1
         assert result.items[0].name == "inst.pem"
 
+    def test_without_tenant_excludes_tenant_entries(self, client):
+        _write_store(client, {"instance": [
+            {"Name": "provider.pem", "Content": "c1"},
+            {"Name": "subscriber.pem", "Content": "c2", "tenant": "t1"},
+        ], "subaccount": []})
+        result = client.list_instance_certificates()
+        assert len(result.items) == 1
+        assert result.items[0].name == "provider.pem"
+
+    def test_with_tenant_returns_only_matching_entries(self, client):
+        _write_store(client, {"instance": [
+            {"Name": "provider.pem", "Content": "c1"},
+            {"Name": "t1.pem", "Content": "c2", "tenant": "t1"},
+            {"Name": "t2.pem", "Content": "c3", "tenant": "t2"},
+        ], "subaccount": []})
+        result = client.list_instance_certificates(tenant="t1")
+        assert len(result.items) == 1
+        assert result.items[0].name == "t1.pem"
+
+    def test_with_tenant_returns_empty_when_no_match(self, client):
+        _write_store(client, {"instance": [
+            {"Name": "provider.pem", "Content": "c1"},
+        ], "subaccount": []})
+        result = client.list_instance_certificates(tenant="unknown")
+        assert len(result.items) == 0
+
 
 class TestListSubaccountCertificates:
     def test_returns_paged_result(self, client):

tests/destination/unit/test_local_destination_client.py

@@ -164,6 +164,32 @@ def test_does_not_include_subaccount_entries(self, client):
         assert len(result.items) == 1
         assert result.items[0].name == "inst"
 
+    def test_without_tenant_excludes_tenant_entries(self, client):
+        _write_store(client, {"instance": [
+            {"name": "provider", "type": "HTTP"},
+            {"name": "subscriber", "type": "HTTP", "tenant": "t1"},
+        ], "subaccount": []})
+        result = client.list_instance_destinations()
+        assert len(result.items) == 1
+        assert result.items[0].name == "provider"
+
+    def test_with_tenant_returns_only_matching_entries(self, client):
+        _write_store(client, {"instance": [
+            {"name": "provider", "type": "HTTP"},
+            {"name": "t1-dest", "type": "HTTP", "tenant": "t1"},
+            {"name": "t2-dest", "type": "HTTP", "tenant": "t2"},
+        ], "subaccount": []})
+        result = client.list_instance_destinations(tenant="t1")
+        assert len(result.items) == 1
+        assert result.items[0].name == "t1-dest"
+
+    def test_with_tenant_returns_empty_when_no_match(self, client):
+        _write_store(client, {"instance": [
+            {"name": "provider", "type": "HTTP"},
+        ], "subaccount": []})
+        result = client.list_instance_destinations(tenant="unknown")
+        assert len(result.items) == 0
+
 
 class TestListSubaccountDestinations:
     def test_returns_paged_result(self, client):

tests/destination/unit/test_local_fragment_client.py

@@ -141,6 +141,32 @@ def test_does_not_include_subaccount_entries(self, client):
         assert len(result) == 1
         assert result[0].name == "inst"
 
+    def test_without_tenant_excludes_tenant_entries(self, client):
+        _write_store(client, {"instance": [
+            {"FragmentName": "provider", "URL": "https://a.com"},
+            {"FragmentName": "subscriber", "URL": "https://b.com", "tenant": "t1"},
+        ], "subaccount": []})
+        result = client.list_instance_fragments()
+        assert len(result) == 1
+        assert result[0].name == "provider"
+
+    def test_with_tenant_returns_only_matching_entries(self, client):
+        _write_store(client, {"instance": [
+            {"FragmentName": "provider", "URL": "https://a.com"},
+            {"FragmentName": "t1-frag", "URL": "https://b.com", "tenant": "t1"},
+            {"FragmentName": "t2-frag", "URL": "https://c.com", "tenant": "t2"},
+        ], "subaccount": []})
+        result = client.list_instance_fragments(tenant="t1")
+        assert len(result) == 1
+        assert result[0].name == "t1-frag"
+
+    def test_with_tenant_returns_empty_when_no_match(self, client):
+        _write_store(client, {"instance": [
+            {"FragmentName": "provider", "URL": "https://a.com"},
+        ], "subaccount": []})
+        result = client.list_instance_fragments(tenant="unknown")
+        assert result == []
+
 
 class TestListSubaccountFragments:
     def test_returns_list_of_fragments(self, client):