dominus-sdk-python 4.6.2__tar.gz → 5.0.0__tar.gz

{dominus_sdk_python-4.6.2 → dominus_sdk_python-5.0.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dominus-sdk-python
-Version: 4.6.2
+Version: 5.0.0
 Summary: Python SDK for the Dominus gateway-first platform
 Author-email: CareBridge Systems <dev@carebridge.io>
 License: Proprietary
@@ -198,7 +198,7 @@ JWT and selected scope headers directly through Gateway.
 | `jobs` | Job Worker | Enqueue, poll, dead-letter management |
 | `processor` | Processor | Batch and single-job processing |
 | `sync` | Sync Worker | KV synchronization |
-| `authority` | Dominus Authority | Runs, companies, deploys, managed clients, context |
+| `authority` | Dominus Authority | Runs, provisioning targets, deploys, managed clients, context |
 | `browser` | Browser Worker | Browser run health, ensure/start/status/result/retry/nudge/cancel/timeline/dossier |
 | `deployer` | Deployer | Thin operator control-plane request surface |
 | `warden` | Warden | Thin operator control-plane request surface |

{dominus_sdk_python-4.6.2 → dominus_sdk_python-5.0.0}/README.md

@@ -164,7 +164,7 @@ JWT and selected scope headers directly through Gateway.
 | `jobs` | Job Worker | Enqueue, poll, dead-letter management |
 | `processor` | Processor | Batch and single-job processing |
 | `sync` | Sync Worker | KV synchronization |
-| `authority` | Dominus Authority | Runs, companies, deploys, managed clients, context |
+| `authority` | Dominus Authority | Runs, provisioning targets, deploys, managed clients, context |
 | `browser` | Browser Worker | Browser run health, ensure/start/status/result/retry/nudge/cancel/timeline/dossier |
 | `deployer` | Deployer | Thin operator control-plane request surface |
 | `warden` | Warden | Thin operator control-plane request surface |

{dominus_sdk_python-4.6.2 → dominus_sdk_python-5.0.0}/dominus/namespaces/authority.py

@@ -2,8 +2,8 @@
 Authority Namespace - Dominus Authority service surface.
 
 Canonical SDK entry point for the dominus-authority service. Mirrors the MCP
-``authority_*`` tool surface so application code can drive runs, companies,
-deploys, managed clients, timelines, dossiers, and Authority context resolution
+``authority_*`` tool surface so application code can drive runs, provisioning
+targets, deploys, managed clients, timelines, dossiers, and Authority context resolution
 without touching workflow-manager / client-worker / deploy-worker routes
 directly.
 
@@ -44,8 +44,8 @@ def _normalize_run_kind_token(raw: Optional[str]) -> str:
     return s
 
 
-def _is_company_bootstrap_run_kind(run_kind: Optional[str]) -> bool:
-    return _normalize_run_kind_token(run_kind) == "company_bootstrap"
+def _is_provisioning_bootstrap_run_kind(run_kind: Optional[str]) -> bool:
+    return _normalize_run_kind_token(run_kind) == "provisioning_bootstrap"
 
 
 def _query_string(params: Mapping[str, Any]) -> str:
@@ -62,7 +62,7 @@ class AuthorityNamespace:
     Usage::
 
         await dominus.authority.ensure_run(workflow_id="...", subject="PCM47474562")
-        await dominus.authority.list_companies()
+        await dominus.authority.list_provisioning_targets()
         await dominus.authority.get_run_dossier(run_id)
     """
 
@@ -170,9 +170,8 @@ class AuthorityNamespace:
         workflow_id: Optional[str] = None,
         workflow_ref: Optional[str] = None,
         run_kind: Optional[str] = None,
-        bootstrap_profile: Optional[str] = None,
-        company_slug: Optional[str] = None,
-        slug: Optional[str] = None,
+        bootstrap_profile_ref: Optional[str] = None,
+        provisioning_target_slug: Optional[str] = None,
         instance_id: Optional[str] = None,
         instance_key: Optional[str] = None,
         group: Optional[str] = None,
@@ -209,22 +208,20 @@ class AuthorityNamespace:
 
         Calls ``POST /api/authority/runs/ensure``.
 
-        For company bootstrap, pass ``run_kind="company.bootstrap"`` (or ``company_bootstrap``) plus
-        ``company``, ``company_slug``, or ``slug``. Optional bootstrap fields mirror
-        ``bootstrap_company`` (``execution_mode``, ``region``, ``bootstrap_profile``, …).
+        For provisioning bootstrap, pass ``run_kind="provisioning.bootstrap"`` plus
+        ``provisioning_target_slug``. Optional bootstrap fields mirror
+        ``bootstrap_provisioning_target`` (``execution_mode``, ``region``, ``bootstrap_profile_ref``, ...).
         """
-        bootstrap = _is_company_bootstrap_run_kind(run_kind)
+        bootstrap = _is_provisioning_bootstrap_run_kind(run_kind)
         if not bootstrap and not workflow_id and not workflow_ref:
             raise ValueError(
                 "ensure_run requires workflow_id or workflow_ref unless run_kind is "
-                "company.bootstrap / company_bootstrap"
+                "provisioning.bootstrap"
             )
         if bootstrap:
-            co = (company_slug or slug or company or "").strip()
-            if not co:
-                raise ValueError(
-                    "ensure_run with run_kind company.bootstrap requires company, company_slug, or slug"
-                )
+            target_slug = (provisioning_target_slug or "").strip()
+            if not target_slug:
+                raise ValueError("ensure_run with run_kind provisioning.bootstrap requires provisioning_target_slug")
         if mode == "streaming":
             raise ValueError(
                 "Authority runs do not support streaming mode; "
@@ -237,7 +234,8 @@ class AuthorityNamespace:
         if bootstrap:
             body = _compact({
                 "run_kind": run_kind,
-                "bootstrap_profile": bootstrap_profile,
+                "bootstrap_profile_ref": bootstrap_profile_ref,
+                "provisioning_target_slug": provisioning_target_slug,
                 "workflow_id": workflow_id,
                 "workflow_ref": workflow_ref,
                 "instance_id": instance_id,
@@ -245,9 +243,6 @@ class AuthorityNamespace:
                 "group": group,
                 "owner": owner,
                 "subject": subject,
-                "company": company,
-                "company_slug": company_slug,
-                "slug": slug,
                 "bindings": bindings,
                 "inputs": inputs,
                 "context": context,
@@ -269,7 +264,6 @@ class AuthorityNamespace:
             body = _compact({
                 "workflow_id": workflow_id,
                 "workflow_ref": workflow_ref,
-                "bootstrap_profile": bootstrap_profile,
                 "instance_id": instance_id,
                 "instance_key": instance_key,
                 "group": group,
@@ -779,13 +773,13 @@ class AuthorityNamespace:
         )
 
     # ==================================================================
-    # Companies
+    # Provisioning Targets
     # ==================================================================
 
-    async def create_company(
+    async def create_provisioning_target(
         self,
         *,
-        company_slug: str,
+        provisioning_target_slug: str,
         display_name: Optional[str] = None,
         description: Optional[str] = None,
         bootstrap_status: Optional[str] = None,
@@ -794,34 +788,43 @@ class AuthorityNamespace:
         app_slug: Optional[str] = None,
         env: Optional[str] = None,
         target_org_id: Optional[str] = None,
+        target_app_slug: Optional[str] = None,
         target_env: Optional[str] = None,
+        shared_app_slug: Optional[str] = None,
         initiator_type: Optional[str] = None,
         initiator_id: Optional[str] = None,
         idempotency_key: Optional[str] = None,
         timeout: Optional[float] = None,
     ) -> Dict[str, Any]:
-        """Create a new company. ``POST /api/authority/companies``."""
-        if not company_slug:
-            raise ValueError("create_company requires company_slug")
+        """Create a new provisioning target. ``POST /api/authority/provisioning-targets``."""
+        if not provisioning_target_slug:
+            raise ValueError("create_provisioning_target requires provisioning_target_slug")
         body = _compact({
-            "company_slug": company_slug,
+            "provisioning_target_slug": provisioning_target_slug,
             "display_name": display_name,
             "description": description,
             "bootstrap_status": bootstrap_status,
             "bootstrap_run_id": bootstrap_run_id,
             "metadata": metadata,
             **self._initiator(initiator_type, initiator_id, idempotency_key),
-            **self._scope(app_slug, env, target_org_id, target_env),
+            **self._scope(
+                app_slug,
+                env,
+                target_org_id,
+                target_env,
+                target_app_slug=target_app_slug,
+                shared_app_slug=shared_app_slug,
+            ),
         })
         return await self._post(
-            "/api/authority/companies",
+            "/api/authority/provisioning-targets",
             body,
             timeout=self._http_timeout(timeout, 30.0),
         )
 
-    async def get_company(
+    async def get_provisioning_target(
         self,
-        company_slug: str,
+        provisioning_target_slug: str,
         *,
         app_slug: Optional[str] = None,
         env: Optional[str] = None,
@@ -829,9 +832,9 @@ class AuthorityNamespace:
         target_env: Optional[str] = None,
         timeout: Optional[float] = None,
     ) -> Dict[str, Any]:
-        """Get an Authority company. ``GET /api/authority/companies/{company}``."""
-        if not company_slug:
-            raise ValueError("company_slug is required")
+        """Get an Authority provisioning target. ``GET /api/authority/provisioning-targets/{provisioning_target_slug}``."""
+        if not provisioning_target_slug:
+            raise ValueError("provisioning_target_slug is required")
         tid, tev = self._target_query_params(target_org_id, target_env)
         qs = _query_string({
             "app_slug": app_slug,
@@ -840,11 +843,11 @@ class AuthorityNamespace:
             "target_env": tev,
         })
         return await self._get(
-            f"/api/authority/companies/{quote(company_slug, safe='')}{qs}",
+            f"/api/authority/provisioning-targets/{quote(provisioning_target_slug, safe='')}{qs}",
             timeout=self._http_timeout(timeout, 30.0),
         )
 
-    async def list_companies(
+    async def list_provisioning_targets(
         self,
         *,
         status: Optional[str] = None,
@@ -856,7 +859,7 @@ class AuthorityNamespace:
         offset: int = 0,
         timeout: Optional[float] = None,
     ) -> Dict[str, Any]:
-        """List Authority companies. ``GET /api/authority/companies``."""
+        """List Authority provisioning targets. ``GET /api/authority/provisioning-targets``."""
         tid, tev = self._target_query_params(target_org_id, target_env)
         qs = _query_string({
             "app_slug": app_slug,
@@ -868,18 +871,18 @@ class AuthorityNamespace:
             "offset": offset,
         })
         return await self._get(
-            f"/api/authority/companies{qs}",
+            f"/api/authority/provisioning-targets{qs}",
             timeout=self._http_timeout(timeout, 30.0),
         )
 
-    async def bootstrap_company(
+    async def bootstrap_provisioning_target(
         self,
-        company_slug: str,
+        provisioning_target_slug: str,
         *,
         action: Optional[str] = None,
         run_id: Optional[str] = None,
         reason: Optional[str] = None,
-        bootstrap_profile: Optional[str] = None,
+        bootstrap_profile_ref: Optional[str] = None,
         shared_app_slug: Optional[str] = None,
         region: Optional[str] = None,
         system: Optional[str] = None,
@@ -902,14 +905,14 @@ class AuthorityNamespace:
         idempotency_key: Optional[str] = None,
         timeout: Optional[float] = None,
     ) -> Dict[str, Any]:
-        """Trigger or replay company bootstrap. ``POST /api/authority/companies/{company}/bootstrap``."""
-        if not company_slug:
-            raise ValueError("company_slug is required")
+        """Trigger or replay provisioning target bootstrap. ``POST /api/authority/provisioning-targets/{provisioning_target_slug}/bootstrap``."""
+        if not provisioning_target_slug:
+            raise ValueError("provisioning_target_slug is required")
         body = _compact({
             "action": action,
             "run_id": run_id,
             "reason": reason,
-            "bootstrap_profile": bootstrap_profile,
+            "bootstrap_profile_ref": bootstrap_profile_ref,
             "shared_app_slug": shared_app_slug,
             "region": region,
             "system": system,
@@ -933,36 +936,36 @@ class AuthorityNamespace:
             ),
         })
         return await self._post(
-            f"/api/authority/companies/{quote(company_slug, safe='')}/bootstrap",
+            f"/api/authority/provisioning-targets/{quote(provisioning_target_slug, safe='')}/bootstrap",
             body,
             timeout=self._http_timeout(timeout, 60.0),
         )
 
-    async def get_company_bootstrap(
+    async def get_provisioning_target_bootstrap(
         self,
-        company_slug: str,
+        provisioning_target_slug: str,
         *,
         run_id: Optional[str] = None,
         app_slug: Optional[str] = None,
         env: Optional[str] = None,
         timeout: Optional[float] = None,
     ) -> Dict[str, Any]:
-        """Get company bootstrap state. ``GET /api/authority/companies/{company}/bootstrap``."""
-        if not company_slug:
-            raise ValueError("company_slug is required")
+        """Get provisioning target bootstrap state. ``GET /api/authority/provisioning-targets/{provisioning_target_slug}/bootstrap``."""
+        if not provisioning_target_slug:
+            raise ValueError("provisioning_target_slug is required")
         qs = _query_string({
             "app_slug": app_slug,
             "env": env,
             "run_id": run_id,
         })
         return await self._get(
-            f"/api/authority/companies/{quote(company_slug, safe='')}/bootstrap{qs}",
+            f"/api/authority/provisioning-targets/{quote(provisioning_target_slug, safe='')}/bootstrap{qs}",
             timeout=self._http_timeout(timeout, 30.0),
         )
 
-    async def get_company_dossier(
+    async def get_provisioning_target_dossier(
         self,
-        company_slug: str,
+        provisioning_target_slug: str,
         *,
         app_slug: Optional[str] = None,
         env: Optional[str] = None,
@@ -974,9 +977,9 @@ class AuthorityNamespace:
         limit: Optional[int] = None,
         timeout: Optional[float] = None,
     ) -> Dict[str, Any]:
-        """Get full Authority dossier for a company. ``GET /api/authority/dossiers/company/{company}``."""
-        if not company_slug:
-            raise ValueError("company_slug is required")
+        """Get full Authority dossier for a provisioning target. ``GET /api/authority/dossiers/provisioning-target/{provisioning_target_slug}``."""
+        if not provisioning_target_slug:
+            raise ValueError("provisioning_target_slug is required")
         tid, tev = self._target_query_params(target_org_id, target_env)
         qs = _query_string({
             "app_slug": app_slug,
@@ -989,7 +992,7 @@ class AuthorityNamespace:
             "limit": limit,
         })
         return await self._get(
-            f"/api/authority/dossiers/company/{quote(company_slug, safe='')}{qs}",
+            f"/api/authority/dossiers/provisioning-target/{quote(provisioning_target_slug, safe='')}{qs}",
             timeout=self._http_timeout(timeout, 30.0),
         )
 

{dominus_sdk_python-4.6.2 → dominus_sdk_python-5.0.0}/dominus/start.py

@@ -168,7 +168,7 @@ class Dominus:
         from .namespaces.sync import SyncNamespace
         self.sync = SyncNamespace(self)
 
-        # Authority service (runs, companies, deploys, managed clients, dossiers)
+        # Authority service (runs, provisioning targets, deploys, managed clients, dossiers)
         from .namespaces.authority import AuthorityNamespace
         self.authority = AuthorityNamespace(self)
 

{dominus_sdk_python-4.6.2 → dominus_sdk_python-5.0.0}/dominus_sdk_python.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dominus-sdk-python
-Version: 4.6.2
+Version: 5.0.0
 Summary: Python SDK for the Dominus gateway-first platform
 Author-email: CareBridge Systems <dev@carebridge.io>
 License: Proprietary
@@ -198,7 +198,7 @@ JWT and selected scope headers directly through Gateway.
 | `jobs` | Job Worker | Enqueue, poll, dead-letter management |
 | `processor` | Processor | Batch and single-job processing |
 | `sync` | Sync Worker | KV synchronization |
-| `authority` | Dominus Authority | Runs, companies, deploys, managed clients, context |
+| `authority` | Dominus Authority | Runs, provisioning targets, deploys, managed clients, context |
 | `browser` | Browser Worker | Browser run health, ensure/start/status/result/retry/nudge/cancel/timeline/dossier |
 | `deployer` | Deployer | Thin operator control-plane request surface |
 | `warden` | Warden | Thin operator control-plane request surface |

{dominus_sdk_python-4.6.2 → dominus_sdk_python-5.0.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "dominus-sdk-python"
-version = "4.6.2"
+version = "5.0.0"
 description = "Python SDK for the Dominus gateway-first platform"
 readme = "README.md"
 license = {text = "Proprietary"}

{dominus_sdk_python-4.6.2 → dominus_sdk_python-5.0.0}/tests/test_authority_public_vocabulary.py

@@ -73,7 +73,7 @@ class FakeMintClient:
 
 def test_authority_scope_signatures_use_new_public_vocabulary():
     ensure_sig = inspect.signature(AuthorityNamespace.ensure_run)
-    bootstrap_sig = inspect.signature(AuthorityNamespace.bootstrap_company)
+    bootstrap_sig = inspect.signature(AuthorityNamespace.bootstrap_provisioning_target)
     release_sig = inspect.signature(AuthorityNamespace.publish_client_release)
     context_sig = inspect.signature(AuthorityNamespace.context_resolve)
     timeline_sig = inspect.signature(AuthorityNamespace.get_run_timeline)
@@ -86,14 +86,17 @@ def test_authority_scope_signatures_use_new_public_vocabulary():
     schedule_create_sig = inspect.signature(AuthorityNamespace.create_schedule)
     mint_sig = inspect.signature(core_helpers.mint_selected_scope_jwt)
 
-    for name in ("app_slug", "env", "target_org_id", "target_env", "run_kind", "target_app_slug", "bootstrap_profile"):
+    for name in ("app_slug", "env", "target_org_id", "target_env", "run_kind", "target_app_slug", "bootstrap_profile_ref", "provisioning_target_slug"):
         assert name in ensure_sig.parameters
-    for legacy in ("project_slug", "environment", "target_project_id", "target_environment"):
+    old_profile_key = "bootstrap" + "_profile"
+    for legacy in ("project_slug", "environment", "target_project_id", "target_environment", old_profile_key):
         assert legacy not in ensure_sig.parameters
 
-    for name in ("shared_app_slug", "target_app_slug", "target_env", "bootstrap_profile"):
+    for name in ("shared_app_slug", "target_app_slug", "target_env", "bootstrap_profile_ref"):
         assert name in bootstrap_sig.parameters
-    assert "shared_project_slug" not in bootstrap_sig.parameters
+    old_target_key = "company" + "_slug"
+    for legacy in ("shared_project_slug", old_profile_key, old_target_key):
+        assert legacy not in bootstrap_sig.parameters
 
     for name in ("storage_app_slug", "storage_env", "app_slug", "env"):
         assert name in release_sig.parameters
@@ -137,16 +140,15 @@ async def test_authority_scope_methods_use_canonical_context_wire_names():
         env="production",
         target_org_id="org-123",
         target_env="production",
-        bootstrap_profile="carebridge_company_v1",
     )
-    await namespace.bootstrap_company(
+    await namespace.bootstrap_provisioning_target(
         "summit-radiology",
         shared_app_slug="shared-core",
         app_slug="carebridge",
         env="production",
         target_app_slug="carebridge",
         target_env="production",
-        bootstrap_profile="carebridge_company_v1",
+        bootstrap_profile_ref="recipe://bootstrap-profile-v1/default@head",
     )
     await namespace.publish_client_release(
         variant_slug="desktop",
@@ -179,7 +181,7 @@ async def test_authority_scope_methods_use_canonical_context_wire_names():
         window_hours=24,
         limit=150,
     )
-    await namespace.get_company_dossier(
+    await namespace.get_provisioning_target_dossier(
         "summit-radiology",
         app_slug="carebridge",
         env="production",
@@ -253,14 +255,14 @@ async def test_authority_scope_methods_use_canonical_context_wire_names():
     assert ensure_body["env"] == "production"
     assert ensure_body["target_org_id"] == "org-123"
     assert ensure_body["target_env"] == "production"
-    assert ensure_body["bootstrap_profile"] == "carebridge_company_v1"
+    assert "bootstrap_profile_ref" not in ensure_body
 
     bootstrap_body = client.calls[1]["body"]
     assert bootstrap_body["shared_app_slug"] == "shared-core"
     assert bootstrap_body["app_slug"] == "carebridge"
     assert bootstrap_body["target_app_slug"] == "carebridge"
     assert bootstrap_body["target_env"] == "production"
-    assert bootstrap_body["bootstrap_profile"] == "carebridge_company_v1"
+    assert bootstrap_body["bootstrap_profile_ref"] == "recipe://bootstrap-profile-v1/default@head"
 
     release_body = client.calls[2]["body"]
     assert release_body["storage_app_slug"] == "storage-core"
@@ -284,7 +286,7 @@ async def test_authority_scope_methods_use_canonical_context_wire_names():
         "since=2026-04-11T08%3A33%3A00Z&until=2026-04-11T09%3A33%3A00Z&window_hours=24&limit=150"
     )
     assert client.calls[6]["endpoint"] == (
-        "/api/authority/dossiers/company/summit-radiology?"
+        "/api/authority/dossiers/provisioning-target/summit-radiology?"
         "app_slug=carebridge&env=production&target_org_id=target-org-1&target_env=production"
         "&since=2026-04-11T08%3A33%3A00Z&until=2026-04-11T09%3A33%3A00Z&window_hours=24&limit=150"
     )
@@ -351,6 +353,46 @@ async def test_authority_scope_methods_use_canonical_context_wire_names():
     assert client.calls[18]["endpoint"] == "/api/authority/schedules/demo.hourly/runs/run-2/fail"
 
 
+@pytest.mark.asyncio
+async def test_authority_provisioning_target_helpers_use_final_routes_and_payload_keys():
+    client = FakeClient()
+    namespace = AuthorityNamespace(client)
+
+    await namespace.create_provisioning_target(
+        provisioning_target_slug="summit-radiology",
+        app_slug="carebridge",
+        env="production",
+        target_app_slug="carebridge",
+        target_env="production",
+        shared_app_slug="carebridge-platform",
+    )
+    await namespace.get_provisioning_target(
+        "summit-radiology",
+        app_slug="carebridge",
+        env="production",
+    )
+    await namespace.list_provisioning_targets(app_slug="carebridge", env="production", limit=25)
+    await namespace.bootstrap_provisioning_target(
+        "summit-radiology",
+        action="start",
+        bootstrap_profile_ref="recipe://bootstrap-profile-v1/default@head",
+        execution_mode="async",
+    )
+    await namespace.get_provisioning_target_bootstrap(
+        "summit-radiology",
+        run_id="provisioning-run::run-1",
+    )
+
+    assert client.calls[0]["endpoint"] == "/api/authority/provisioning-targets"
+    assert client.calls[0]["body"]["provisioning_target_slug"] == "summit-radiology"
+    assert client.calls[0]["body"]["target_app_slug"] == "carebridge"
+    assert client.calls[1]["endpoint"] == "/api/authority/provisioning-targets/summit-radiology?app_slug=carebridge&env=production"
+    assert client.calls[2]["endpoint"] == "/api/authority/provisioning-targets?app_slug=carebridge&env=production&limit=25&offset=0"
+    assert client.calls[3]["endpoint"] == "/api/authority/provisioning-targets/summit-radiology/bootstrap"
+    assert client.calls[3]["body"]["bootstrap_profile_ref"] == "recipe://bootstrap-profile-v1/default@head"
+    assert client.calls[4]["endpoint"] == "/api/authority/provisioning-targets/summit-radiology/bootstrap?run_id=provisioning-run%3A%3Arun-1"
+
+
 @pytest.mark.asyncio
 async def test_selected_scope_mint_helper_uses_new_public_names_and_route_canonical_mint_payload(monkeypatch):
     FakeMintClient.instances.clear()
@@ -414,35 +456,35 @@ async def test_list_runs_keeps_target_query_when_org_differs_from_gateway():
 
 
 @pytest.mark.asyncio
-async def test_authority_ensure_run_company_bootstrap_omits_workflow_mode():
+async def test_authority_ensure_run_provisioning_bootstrap_omits_workflow_mode():
     client = FakeClient()
     namespace = AuthorityNamespace(client)
     await namespace.ensure_run(
-        run_kind="company.bootstrap",
-        company="acme-corp",
+        run_kind="provisioning.bootstrap",
+        provisioning_target_slug="acme-corp",
         app_slug="carebridge",
         env="production",
         target_org_id="org-1",
         execution_mode="async",
         shared_app_slug="shared-core",
-        bootstrap_profile="carebridge_company_v1",
+        bootstrap_profile_ref="recipe://bootstrap-profile-v1/default@head",
     )
     body = client.calls[0]["body"]
-    assert body["run_kind"] == "company.bootstrap"
-    assert body["company"] == "acme-corp"
+    assert body["run_kind"] == "provisioning.bootstrap"
+    assert body["provisioning_target_slug"] == "acme-corp"
     assert body["execution_mode"] == "async"
     assert body["shared_app_slug"] == "shared-core"
-    assert body["bootstrap_profile"] == "carebridge_company_v1"
+    assert body["bootstrap_profile_ref"] == "recipe://bootstrap-profile-v1/default@head"
     assert "mode" not in body
 
 
 @pytest.mark.asyncio
-async def test_authority_ensure_run_bootstrap_requires_company_slug():
+async def test_authority_ensure_run_bootstrap_requires_provisioning_target_slug():
     client = FakeClient()
     namespace = AuthorityNamespace(client)
-    with pytest.raises(ValueError, match="company, company_slug, or slug"):
+    with pytest.raises(ValueError, match="provisioning_target_slug"):
         await namespace.ensure_run(
-            run_kind="company_bootstrap",
+            run_kind="provisioning.bootstrap",
             app_slug="carebridge",
             env="production",
         )