dominus-sdk-python 3.0.3__tar.gz → 3.0.4__tar.gz

{dominus_sdk_python-3.0.3 → dominus_sdk_python-3.0.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dominus-sdk-python
-Version: 3.0.3
+Version: 3.0.4
 Summary: Python SDK for the Dominus gateway-first platform
 Author-email: CareBridge Systems <dev@carebridge.io>
 License: Proprietary
@@ -41,7 +41,7 @@ Async Python SDK for the Dominus gateway-first service plane.
 - Namespace-first API with a small root shortcut surface
 - Gateway-scoped client mode for MCP and other user-JWT sessions
 - Local helpers for JWT verification, trace propagation, retries, and console capture
-- Current package version: `3.0.2`
+- Current package version: `3.0.4`
 
 ## Install
 
@@ -126,6 +126,8 @@ JWT and selected scope headers directly through Gateway.
 | `processor` | Processor | Batch and single-job processing |
 | `sync` | Sync Worker | KV synchronization |
 | `authority` | Dominus Authority | Runs, companies, deploys, managed clients, context |
+| `deployer` | Deployer | Thin operator control-plane request surface |
+| `warden` | Warden | Thin operator control-plane request surface |
 | `fastapi` | Local decorators | `@jwt`, `@psk`, `@scopes(...)` |
 
 ## Root Shortcuts

{dominus_sdk_python-3.0.3 → dominus_sdk_python-3.0.4}/README.md

@@ -8,7 +8,7 @@ Async Python SDK for the Dominus gateway-first service plane.
 - Namespace-first API with a small root shortcut surface
 - Gateway-scoped client mode for MCP and other user-JWT sessions
 - Local helpers for JWT verification, trace propagation, retries, and console capture
-- Current package version: `3.0.2`
+- Current package version: `3.0.4`
 
 ## Install
 
@@ -93,6 +93,8 @@ JWT and selected scope headers directly through Gateway.
 | `processor` | Processor | Batch and single-job processing |
 | `sync` | Sync Worker | KV synchronization |
 | `authority` | Dominus Authority | Runs, companies, deploys, managed clients, context |
+| `deployer` | Deployer | Thin operator control-plane request surface |
+| `warden` | Warden | Thin operator control-plane request surface |
 | `fastapi` | Local decorators | `@jwt`, `@psk`, `@scopes(...)` |
 
 ## Root Shortcuts

{dominus_sdk_python-3.0.3 → dominus_sdk_python-3.0.4}/dominus/__init__.py

@@ -111,6 +111,8 @@ from .namespaces.jobs import JobsNamespace
 from .namespaces.processor import ProcessorNamespace
 from .namespaces.sync import SyncNamespace
 from .namespaces.authority import AuthorityNamespace
+from .namespaces.deployer import DeployerNamespace
+from .namespaces.warden import WardenNamespace
 
 # Export AI namespace for agent-runtime operations
 from .namespaces.ai import (
@@ -211,6 +213,8 @@ __all__ = [
     "ProcessorNamespace",
     "SyncNamespace",
     "AuthorityNamespace",
+    "DeployerNamespace",
+    "WardenNamespace",
     # AI namespace for agent-runtime operations
     "AiNamespace",
     "RagSubNamespace",

{dominus_sdk_python-3.0.3 → dominus_sdk_python-3.0.4}/dominus/namespaces/__init__.py

@@ -15,6 +15,8 @@ from .jobs import JobsNamespace
 from .processor import ProcessorNamespace
 from .sync import SyncNamespace
 from .authority import AuthorityNamespace
+from .deployer import DeployerNamespace
+from .warden import WardenNamespace
 from .ai import (
     AiNamespace,
     RagSubNamespace,
@@ -40,6 +42,8 @@ __all__ = [
     "ProcessorNamespace",
     "SyncNamespace",
     "AuthorityNamespace",
+    "DeployerNamespace",
+    "WardenNamespace",
     "AiNamespace",
     "RagSubNamespace",
     "ArtifactsSubNamespace",

dominus_sdk_python-3.0.4/dominus/namespaces/deployer.py

@@ -0,0 +1,39 @@
+"""Thin Deployer control-plane namespace."""
+from typing import Any, Dict, Optional, TYPE_CHECKING
+
+if TYPE_CHECKING:
+    from ..start import Dominus
+
+
+def _normalize_deployer_path(path: str) -> str:
+    trimmed = path.strip()
+    normalized = trimmed if trimmed.startswith("/") else f"/{trimmed}"
+    if normalized == "/svc/deployer" or normalized.startswith("/svc/deployer/"):
+        return normalized
+    if normalized == "/api/deployer" or normalized.startswith("/api/deployer/"):
+        return normalized
+    return f"/svc/deployer{normalized}"
+
+
+class DeployerNamespace:
+    """Deployer operator control-plane routes used by Mothership and MCP."""
+
+    def __init__(self, client: "Dominus"):
+        self._client = client
+
+    async def request(
+        self,
+        path: str,
+        *,
+        method: str = "GET",
+        body: Any = None,
+        headers: Optional[Dict[str, str]] = None,
+        timeout: float = 30.0,
+    ) -> Any:
+        return await self._client.gateway_fetch(
+            _normalize_deployer_path(path),
+            method=method,
+            body=body,
+            headers=headers,
+            timeout=timeout,
+        )

{dominus_sdk_python-3.0.3 → dominus_sdk_python-3.0.4}/dominus/namespaces/sync.py

@@ -1,7 +1,7 @@
 """
 Sync Namespace - KV synchronization operations.
 
-Provides manual trigger for KV sync (token + project metadata)
+Provides manual trigger for KV sync (token + app metadata)
 from database to Cloudflare KV. Routes through gateway to sync-worker.
 
 The sync worker also runs automatically at 4AM UTC via cron.
@@ -11,7 +11,7 @@ Usage:
 
     # Trigger manual sync (admin only)
     result = await dominus.sync.trigger_sync()
-    print(f"Synced {result['tokens_synced']} tokens, {result['projects_synced']} projects")
+    print(f"Synced {result['tokens_synced']} tokens, {result['apps_synced']} apps")
 
     # Health check
     health = await dominus.sync.get_health()
@@ -26,7 +26,7 @@ class SyncNamespace:
     """
     KV sync namespace.
 
-    Admin-only operations that synchronize token hashes and project
+    Admin-only operations that synchronize token hashes and app
     metadata from the database into Cloudflare KV. Purges stale
     entries and re-seeds current data.
     """
@@ -54,15 +54,15 @@ class SyncNamespace:
         """
         Trigger a manual KV sync. Requires admin system level.
 
-        Synchronizes token hashes and project metadata from the database
+        Synchronizes token hashes and app metadata from the database
         into Cloudflare KV. Purges stale entries and re-seeds current data.
 
         Args:
             timeout: Request timeout in seconds (default 60; Mothership uses 180).
 
         Returns:
-            {tokens_synced, projects_synced, tokens_deleted,
-             projects_deleted, errors, duration_ms, triggered_at}
+            {tokens_synced, apps_synced, tokens_deleted,
+             apps_deleted, errors, duration_ms, triggered_at}
         """
         return await self._api(
             "/api/sync/",

dominus_sdk_python-3.0.4/dominus/namespaces/warden.py

@@ -0,0 +1,39 @@
+"""Thin Warden control-plane namespace."""
+from typing import Any, Dict, Optional, TYPE_CHECKING
+
+if TYPE_CHECKING:
+    from ..start import Dominus
+
+
+def _normalize_warden_path(path: str) -> str:
+    trimmed = path.strip()
+    normalized = trimmed if trimmed.startswith("/") else f"/{trimmed}"
+    if normalized == "/svc/warden" or normalized.startswith("/svc/warden/"):
+        return normalized
+    if normalized == "/api/warden" or normalized.startswith("/api/warden/"):
+        return normalized
+    return f"/svc/warden{normalized}"
+
+
+class WardenNamespace:
+    """Warden operator control-plane routes used by Mothership and MCP."""
+
+    def __init__(self, client: "Dominus"):
+        self._client = client
+
+    async def request(
+        self,
+        path: str,
+        *,
+        method: str = "GET",
+        body: Any = None,
+        headers: Optional[Dict[str, str]] = None,
+        timeout: float = 30.0,
+    ) -> Any:
+        return await self._client.gateway_fetch(
+            _normalize_warden_path(path),
+            method=method,
+            body=body,
+            headers=headers,
+            timeout=timeout,
+        )

{dominus_sdk_python-3.0.3 → dominus_sdk_python-3.0.4}/dominus/start.py

@@ -172,6 +172,12 @@ class Dominus:
         from .namespaces.authority import AuthorityNamespace
         self.authority = AuthorityNamespace(self)
 
+        # Thin operator control-plane namespaces (Mothership / MCP parity)
+        from .namespaces.deployer import DeployerNamespace
+        from .namespaces.warden import WardenNamespace
+        self.deployer = DeployerNamespace(self)
+        self.warden = WardenNamespace(self)
+
         # Cache for JWT public key
         self._public_key_cache = None
 
@@ -475,6 +481,131 @@ class Dominus:
 
         return result.get("data", {})
 
+    async def gateway_fetch(
+        self,
+        path: str,
+        *,
+        method: str = "GET",
+        body: Optional[Dict[str, Any]] = None,
+        headers: Optional[Dict[str, str]] = None,
+        timeout: float = 30.0,
+    ) -> Any:
+        """Gateway `/svc/*` fetch with mixed JSON/base64 wire handling.
+
+        Mirrors the Node SDK `DominusClient.gatewayFetch()` contract so Python
+        callers can use the same remaining operator control-plane surfaces.
+        """
+        await self._ensure_ready()
+        from .helpers.core import _ensure_valid_jwt
+        jwt = await _ensure_valid_jwt(_TOKEN, _BASE_URL)
+
+        path = path.strip()
+        if not path.startswith("/"):
+            path = f"/{path}"
+
+        is_base64 = (
+            "/svc/warden/secrets" in path
+            or "/svc/secrets/" in path
+            or "/svc/admin/" in path
+        )
+        decode_base64 = (
+            is_base64
+            or "/svc/database/" in path
+            or "/svc/sync/" in path
+            or "/svc/authority/" in path
+        )
+        is_get = method.upper() in {"GET", "HEAD"}
+
+        from .helpers.trace import get_current_trace_id, get_current_span_id
+
+        req_headers = {
+            "Authorization": f"Bearer {jwt}",
+            "X-Trace-Id": get_current_trace_id(),
+            "X-Parent-Span-Id": get_current_span_id(),
+        }
+        if headers:
+            req_headers.update(headers)
+
+        request_content = None
+        request_json = None
+        if not is_get and body is not None:
+            if is_base64:
+                req_headers["Content-Type"] = "text/plain"
+                request_content = base64.b64encode(json.dumps(body).encode()).decode()
+            else:
+                req_headers["Content-Type"] = "application/json"
+                request_json = body
+
+        try:
+            async with httpx.AsyncClient(base_url=_GATEWAY_URL, headers=req_headers, timeout=timeout) as client:
+                response = await client.request(
+                    method.upper(),
+                    path,
+                    content=request_content,
+                    json=request_json,
+                )
+        except httpx.TimeoutException as exc:
+            raise DominusTimeoutError("Request timed out", endpoint=path) from exc
+        except httpx.NetworkError as exc:
+            raise DominusConnectionError(f"Request failed: {exc}", endpoint=path) from exc
+
+        def _decode_error_payload(text: str) -> Dict[str, Any]:
+            if not text:
+                return {}
+            try:
+                from .helpers.core import _decode_json_or_b64_json
+
+                decoded = _decode_json_or_b64_json(text)
+                return decoded if isinstance(decoded, dict) else {"detail": decoded}
+            except Exception:
+                return {"detail": text}
+
+        if response.is_error:
+            error_payload = _decode_error_payload(response.text)
+            nested = error_payload.get("error")
+            nested_err: Dict[str, Any] = nested if isinstance(nested, dict) else {}
+            error_message = (
+                error_payload.get("message")
+                or (nested_err.get("message") if nested_err else None)
+                or (nested if isinstance(nested, str) else None)
+                or error_payload.get("error")
+                or error_payload.get("detail")
+                or f"HTTP {response.status_code}"
+            )
+            error_details = error_payload.get("details")
+            if not isinstance(error_details, dict):
+                error_details = {}
+            for src in (error_payload, nested_err):
+                for key in ("code", "category", "retryable", "trace_id", "request_id"):
+                    if key in src and key not in error_details:
+                        error_details[key] = src[key]
+            raise_for_status(response.status_code, str(error_message), error_details, path)
+
+        text = response.text.strip()
+        if not text:
+            return {}
+
+        if decode_base64:
+            decoded = base64.b64decode(text.encode("utf-8")).decode("utf-8")
+            result = json.loads(decoded)
+        else:
+            try:
+                result = json.loads(text)
+            except json.JSONDecodeError:
+                return text
+
+        if isinstance(result, dict) and result.get("success") is False:
+            error_msg = result.get("error") or result.get("message") or "Unknown error"
+            error_details = result.get("details")
+            if not isinstance(error_details, dict):
+                error_details = {}
+            for key in ("code", "category", "retryable", "trace_id", "request_id"):
+                if key in result:
+                    error_details[key] = result[key]
+            raise DominusError(str(error_msg), details=error_details, endpoint=path)
+
+        return result
+
     async def _stream_request(
         self,
         endpoint: str,

{dominus_sdk_python-3.0.3 → dominus_sdk_python-3.0.4}/dominus_sdk_python.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dominus-sdk-python
-Version: 3.0.3
+Version: 3.0.4
 Summary: Python SDK for the Dominus gateway-first platform
 Author-email: CareBridge Systems <dev@carebridge.io>
 License: Proprietary
@@ -41,7 +41,7 @@ Async Python SDK for the Dominus gateway-first service plane.
 - Namespace-first API with a small root shortcut surface
 - Gateway-scoped client mode for MCP and other user-JWT sessions
 - Local helpers for JWT verification, trace propagation, retries, and console capture
-- Current package version: `3.0.2`
+- Current package version: `3.0.4`
 
 ## Install
 
@@ -126,6 +126,8 @@ JWT and selected scope headers directly through Gateway.
 | `processor` | Processor | Batch and single-job processing |
 | `sync` | Sync Worker | KV synchronization |
 | `authority` | Dominus Authority | Runs, companies, deploys, managed clients, context |
+| `deployer` | Deployer | Thin operator control-plane request surface |
+| `warden` | Warden | Thin operator control-plane request surface |
 | `fastapi` | Local decorators | `@jwt`, `@psk`, `@scopes(...)` |
 
 ## Root Shortcuts

{dominus_sdk_python-3.0.3 → dominus_sdk_python-3.0.4}/dominus_sdk_python.egg-info/SOURCES.txt

@@ -22,6 +22,7 @@ dominus/namespaces/authority.py
 dominus/namespaces/courier.py
 dominus/namespaces/db.py
 dominus/namespaces/ddl.py
+dominus/namespaces/deployer.py
 dominus/namespaces/fastapi.py
 dominus/namespaces/files.py
 dominus/namespaces/health.py
@@ -33,6 +34,7 @@ dominus/namespaces/redis.py
 dominus/namespaces/secrets.py
 dominus/namespaces/secure.py
 dominus/namespaces/sync.py
+dominus/namespaces/warden.py
 dominus/namespaces/workflow.py
 dominus/services/__init__.py
 dominus_sdk_python.egg-info/PKG-INFO
@@ -42,6 +44,7 @@ dominus_sdk_python.egg-info/requires.txt
 dominus_sdk_python.egg-info/top_level.txt
 tests/test_auth.py
 tests/test_authority_public_vocabulary.py
+tests/test_control_plane_namespaces.py
 tests/test_errors.py
 tests/test_flat_commands.py
 tests/test_health.py

{dominus_sdk_python-3.0.3 → dominus_sdk_python-3.0.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "dominus-sdk-python"
-version = "3.0.3"
+version = "3.0.4"
 description = "Python SDK for the Dominus gateway-first platform"
 readme = "README.md"
 license = {text = "Proprietary"}

dominus_sdk_python-3.0.4/tests/test_control_plane_namespaces.py

@@ -0,0 +1,49 @@
+import pytest
+
+import dominus.start as start_module
+
+
+@pytest.fixture()
+def sdk(monkeypatch):
+    monkeypatch.setattr(start_module, "_VALIDATION_ERROR", None)
+    monkeypatch.setattr(start_module, "_TOKEN", "a" * 64)
+    monkeypatch.setattr(start_module, "_VALIDATED", False)
+    monkeypatch.setattr(start_module, "_BASE_URL", "https://gateway.example")
+    monkeypatch.setattr(start_module, "_GATEWAY_URL", "https://gateway.example")
+    return start_module.Dominus()
+
+
+@pytest.mark.asyncio
+async def test_deployer_namespace_uses_gateway_fetch(monkeypatch, sdk):
+    calls = []
+
+    async def fake_gateway_fetch(path, **kwargs):
+        calls.append((path, kwargs))
+        return {"ok": True}
+
+    monkeypatch.setattr(sdk, "gateway_fetch", fake_gateway_fetch)
+
+    result = await sdk.deployer.request("/deployments/active", method="GET")
+
+    assert result == {"ok": True}
+    assert calls == [
+        ("/svc/deployer/deployments/active", {"method": "GET", "body": None, "headers": None, "timeout": 30.0})
+    ]
+
+
+@pytest.mark.asyncio
+async def test_warden_namespace_preserves_explicit_service_path(monkeypatch, sdk):
+    calls = []
+
+    async def fake_gateway_fetch(path, **kwargs):
+        calls.append((path, kwargs))
+        return {"ok": True}
+
+    monkeypatch.setattr(sdk, "gateway_fetch", fake_gateway_fetch)
+
+    result = await sdk.warden.request("/svc/warden/users/example", method="DELETE")
+
+    assert result == {"ok": True}
+    assert calls == [
+        ("/svc/warden/users/example", {"method": "DELETE", "body": None, "headers": None, "timeout": 30.0})
+    ]

{dominus_sdk_python-3.0.3 → dominus_sdk_python-3.0.4}/tests/test_public_exports.py

@@ -1,4 +1,9 @@
-from dominus import gateway_circuit_breaker, mint_selected_scope_jwt
+from dominus import (
+    DeployerNamespace,
+    WardenNamespace,
+    gateway_circuit_breaker,
+    mint_selected_scope_jwt,
+)
 
 
 def test_top_level_exports_drop_delegate_alias():
@@ -22,3 +27,5 @@ def test_top_level_exports_drop_delegate_alias():
         OpenNamespace = None
 
     assert OpenNamespace is None
+    assert DeployerNamespace is not None
+    assert WardenNamespace is not None

{dominus_sdk_python-3.0.3 → dominus_sdk_python-3.0.4}/tests/test_workflow_lifecycle.py

@@ -269,8 +269,8 @@ async def test_workflow_ensure_supports_authority_one_call_lifecycle():
     assert body["subject"] == "PCM47474562"
     assert body["company"] == "summit-radiology"
     assert body["inputs"] == {"report_snapshot": "ar://artifact"}
-    assert body["target_project_id"] == "proj-1"
-    assert body["target_environment"] == "production"
+    assert body["target_org_id"] == "proj-1"
+    assert body["target_env"] == "production"
     assert isinstance(body["idempotency_key"], str) and body["idempotency_key"]