dominus-sdk-python 6.2.0__tar.gz → 7.0.0__tar.gz

{dominus_sdk_python-6.2.0 → dominus_sdk_python-7.0.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dominus-sdk-python
-Version: 6.2.0
+Version: 7.0.0
 Summary: Python SDK for the Dominus gateway-first platform
 Author-email: CareBridge Systems <dev@carebridge.io>
 License-Expression: LicenseRef-Proprietary
@@ -35,6 +35,12 @@ Requires-Dist: PyJWT>=2.8.0; extra == "all"
 
 Async Python SDK for the Dominus gateway-first service plane.
 
+## Agent Guide
+
+Start with `docs/agent-guide/INDEX.md`. The current snapshot is
+`docs/agent-guide/2026-06-27-0849-agent-guide/00-reading-order.md`; the latest
+cleanup audit is `docs/janitor/2026-06-27-0849-agent-guide-cleanup-audit.md`.
+
 ## What This Repo Ships
 
 - Python 3.9+ asyncio client for Dominus services
@@ -42,7 +48,7 @@ Async Python SDK for the Dominus gateway-first service plane.
 - Gateway-scoped client mode for MCP and other user-JWT sessions
 - Transport compatibility for wrapped `{success,data}` responses and unwrapped Warden/control-plane success objects
 - Local helpers for JWT verification, trace propagation, retries, and console capture
-- Current package version: `6.1.1`
+- Current package version: `7.0.0`
 
 ## Install
 
@@ -223,6 +229,9 @@ JWT and selected scope headers directly through Gateway.
 | `warden` | Warden | Thin operator control-plane request surface |
 | `platform` | Platform Worker | Group/repository policy decisions with actor attribution |
 | `coder` | Coder Runtime | Policy-bound Coder run lifecycle with workflow/pipeline recipe launch sources |
+| `publisher` | Publisher | Release/channel/signing build and artifact operations |
+| `stash` | Stash | Stash items, kinds, bookmarks, watches, artifact facade |
+| `recipes` | Recipe Worker | Recipe type registry, publish, validate, get/list |
 | `fastapi` | Local decorators | `@jwt`, `@psk`, `@scopes(...)` |
 
 ## Root Shortcuts

{dominus_sdk_python-6.2.0 → dominus_sdk_python-7.0.0}/README.md

@@ -2,6 +2,12 @@
 
 Async Python SDK for the Dominus gateway-first service plane.
 
+## Agent Guide
+
+Start with `docs/agent-guide/INDEX.md`. The current snapshot is
+`docs/agent-guide/2026-06-27-0849-agent-guide/00-reading-order.md`; the latest
+cleanup audit is `docs/janitor/2026-06-27-0849-agent-guide-cleanup-audit.md`.
+
 ## What This Repo Ships
 
 - Python 3.9+ asyncio client for Dominus services
@@ -9,7 +15,7 @@ Async Python SDK for the Dominus gateway-first service plane.
 - Gateway-scoped client mode for MCP and other user-JWT sessions
 - Transport compatibility for wrapped `{success,data}` responses and unwrapped Warden/control-plane success objects
 - Local helpers for JWT verification, trace propagation, retries, and console capture
-- Current package version: `6.1.1`
+- Current package version: `7.0.0`
 
 ## Install
 
@@ -190,6 +196,9 @@ JWT and selected scope headers directly through Gateway.
 | `warden` | Warden | Thin operator control-plane request surface |
 | `platform` | Platform Worker | Group/repository policy decisions with actor attribution |
 | `coder` | Coder Runtime | Policy-bound Coder run lifecycle with workflow/pipeline recipe launch sources |
+| `publisher` | Publisher | Release/channel/signing build and artifact operations |
+| `stash` | Stash | Stash items, kinds, bookmarks, watches, artifact facade |
+| `recipes` | Recipe Worker | Recipe type registry, publish, validate, get/list |
 | `fastapi` | Local decorators | `@jwt`, `@psk`, `@scopes(...)` |
 
 ## Root Shortcuts

{dominus_sdk_python-6.2.0 → dominus_sdk_python-7.0.0}/dominus/__init__.py

@@ -115,6 +115,7 @@ from .namespaces.warden import WardenNamespace
 from .namespaces.platform import PlatformNamespace
 from .namespaces.coder import CoderNamespace
 from .namespaces.publisher import PublisherNamespace
+from .namespaces.stash import StashNamespace
 
 # Export AI namespace for agent-runtime operations
 from .namespaces.ai import (
@@ -160,12 +161,19 @@ from .errors import (
     ValidationError,
     ConflictError,
     ServiceError,
+    StashBookmarkArtifactNotFound,
+    StashBookmarkInvalidVersionRef,
+    StashBookmarkDuplicateName,
+    StashBookmarkUpstreamRejected,
+    StashWatchInvalidWebhookUrl,
+    StashWatchUpstreamRejected,
+    StashWatchNotFound,
     SecureTableError,
     ConnectionError as DominusConnectionError,
     TimeoutError as DominusTimeoutError,
 )
 
-__version__ = "6.2.0"
+__version__ = "7.0.0"
 __all__ = [
     # Main SDK instance
     "dominus",
@@ -219,6 +227,7 @@ __all__ = [
     "PlatformNamespace",
     "CoderNamespace",
     "PublisherNamespace",
+    "StashNamespace",
     # AI namespace for agent-runtime operations
     "AiNamespace",
     "RagSubNamespace",
@@ -250,6 +259,13 @@ __all__ = [
     "ValidationError",
     "ConflictError",
     "ServiceError",
+    "StashBookmarkArtifactNotFound",
+    "StashBookmarkInvalidVersionRef",
+    "StashBookmarkDuplicateName",
+    "StashBookmarkUpstreamRejected",
+    "StashWatchInvalidWebhookUrl",
+    "StashWatchUpstreamRejected",
+    "StashWatchNotFound",
     "SecureTableError",
     "DominusConnectionError",
     "DominusTimeoutError",

{dominus_sdk_python-6.2.0 → dominus_sdk_python-7.0.0}/dominus/errors.py

@@ -205,6 +205,34 @@ class ServiceError(DominusError):
         super().__init__(message, status_code, details, endpoint)
 
 
+class StashBookmarkArtifactNotFound(NotFoundError):
+    """Raised when a stash artifact bookmark target cannot be found."""
+
+
+class StashBookmarkInvalidVersionRef(ValidationError):
+    """Raised when a stash artifact bookmark version_ref is invalid."""
+
+
+class StashBookmarkDuplicateName(ConflictError):
+    """Raised when a stash artifact bookmark name is already in use."""
+
+
+class StashBookmarkUpstreamRejected(ServiceError):
+    """Raised when the artifact backend rejects a stash bookmark operation."""
+
+
+class StashWatchInvalidWebhookUrl(ValidationError):
+    """Raised when a stash artifact watcher webhook_url is invalid."""
+
+
+class StashWatchUpstreamRejected(ServiceError):
+    """Raised when the artifact backend rejects a stash watch operation."""
+
+
+class StashWatchNotFound(NotFoundError):
+    """Raised when a stash artifact watcher cannot be found."""
+
+
 class ConnectionError(DominusError):
     """Raised when connection to the backend fails."""
 
@@ -244,6 +272,17 @@ class SecureTableError(DominusError):
         super().__init__(message, status_code, details, endpoint)
 
 
+STASH_ERROR_CLASSES = {
+    "stash.bookmark.artifact_not_found": StashBookmarkArtifactNotFound,
+    "stash.bookmark.invalid_version_ref": StashBookmarkInvalidVersionRef,
+    "stash.bookmark.duplicate_name": StashBookmarkDuplicateName,
+    "stash.bookmark.upstream_rejected": StashBookmarkUpstreamRejected,
+    "stash.watch.invalid_webhook_url": StashWatchInvalidWebhookUrl,
+    "stash.watch.upstream_rejected": StashWatchUpstreamRejected,
+    "stash.watch.not_found": StashWatchNotFound,
+}
+
+
 def raise_for_status(
     status_code: int,
     message: str,
@@ -262,6 +301,7 @@ def raise_for_status(
     Raises:
         Appropriate DominusError subclass
     """
+    code = _first_string((details or {}).get("code"))
     error_classes = {
         400: ValidationError,
         401: AuthenticationError,
@@ -274,5 +314,5 @@ def raise_for_status(
         504: TimeoutError,
     }
 
-    error_class = error_classes.get(status_code, DominusError)
+    error_class = STASH_ERROR_CLASSES.get(code) or error_classes.get(status_code, DominusError)
     raise error_class(message, status_code, details, endpoint)

{dominus_sdk_python-6.2.0 → dominus_sdk_python-7.0.0}/dominus/namespaces/__init__.py

@@ -21,6 +21,8 @@ from .deployer import DeployerNamespace
 from .warden import WardenNamespace
 from .platform import PlatformNamespace
 from .coder import CoderNamespace
+from .publisher import PublisherNamespace
+from .stash import StashNamespace
 from .ai import (
     AiNamespace,
     RagSubNamespace,
@@ -52,6 +54,8 @@ __all__ = [
     "WardenNamespace",
     "PlatformNamespace",
     "CoderNamespace",
+    "PublisherNamespace",
+    "StashNamespace",
     "AiNamespace",
     "RagSubNamespace",
     "ArtifactsSubNamespace",

{dominus_sdk_python-6.2.0 → dominus_sdk_python-7.0.0}/dominus/namespaces/authority.py

@@ -3,7 +3,7 @@ Authority Namespace - Dominus Authority service surface.
 
 Canonical SDK entry point for the dominus-authority service. Mirrors the MCP
 ``authority_*`` tool surface so application code can drive runs, provisioning
-targets, deploys, managed clients, timelines, dossiers, and Authority context resolution
+targets, deploys, managed clients, timelines, verdicts, and Authority context resolution
 without touching workflow-manager / client-worker / deploy-worker routes
 directly.
 
@@ -13,7 +13,7 @@ All methods route through the gateway (``use_gateway=True``) which maps
 Run launch is also exposed as ``dominus.workflow.ensure(...)``. Both call
 ``/api/authority/runs/ensure``. Use ``dominus.workflow.ensure`` for the
 canonical recipe-backed launch path; use ``dominus.authority.ensure_run`` when
-you want to think in Authority terms (run lifecycle, run dossiers, retries,
+you want to think in Authority terms (run lifecycle, verdicts, retries,
 cancels).
 """
 from __future__ import annotations
@@ -74,7 +74,7 @@ class AuthorityNamespace:
             subject="PCM47474562",
         )
         await dominus.authority.list_provisioning_targets()
-        await dominus.authority.get_run_dossier(run_id)
+        await dominus.authority.get_run_verdict(run_id)
     """
 
     def __init__(self, client: "Dominus"):
@@ -489,27 +489,17 @@ class AuthorityNamespace:
             timeout=self._http_timeout(timeout, 30.0),
         )
 
-    async def get_run_dossier(
+    async def get_run_verdict(
         self,
         run_id: str,
         *,
-        since: Optional[str] = None,
-        until: Optional[str] = None,
-        window_hours: Optional[int] = None,
-        limit: Optional[int] = None,
         timeout: Optional[float] = None,
     ) -> Dict[str, Any]:
-        """Get the full Authority dossier for a run. ``GET /api/authority/dossiers/run/{run_id}``."""
+        """Get the compact Authority verdict for a run. ``GET /api/authority/runs/{run_id}/verdict``."""
         if not run_id:
             raise ValueError("run_id is required")
-        qs = _query_string({
-            "since": since,
-            "until": until,
-            "window_hours": window_hours,
-            "limit": limit,
-        })
         return await self._get(
-            f"/api/authority/dossiers/run/{quote(run_id, safe='')}{qs}",
+            f"/api/authority/runs/{quote(run_id, safe='')}/verdict",
             timeout=self._http_timeout(timeout, 30.0),
         )
 
@@ -984,39 +974,6 @@ class AuthorityNamespace:
             timeout=self._http_timeout(timeout, 30.0),
         )
 
-    async def get_provisioning_target_dossier(
-        self,
-        provisioning_target_slug: str,
-        *,
-        app_slug: Optional[str] = None,
-        env: Optional[str] = None,
-        target_org_id: Optional[str] = None,
-        target_env: Optional[str] = None,
-        since: Optional[str] = None,
-        until: Optional[str] = None,
-        window_hours: Optional[int] = None,
-        limit: Optional[int] = None,
-        timeout: Optional[float] = None,
-    ) -> Dict[str, Any]:
-        """Get full Authority dossier for a provisioning target. ``GET /api/authority/dossiers/provisioning-target/{provisioning_target_slug}``."""
-        if not provisioning_target_slug:
-            raise ValueError("provisioning_target_slug is required")
-        tid, tev = self._target_query_params(target_org_id, target_env)
-        qs = _query_string({
-            "app_slug": app_slug,
-            "env": env,
-            "target_org_id": tid,
-            "target_env": tev,
-            "since": since,
-            "until": until,
-            "window_hours": window_hours,
-            "limit": limit,
-        })
-        return await self._get(
-            f"/api/authority/dossiers/provisioning-target/{quote(provisioning_target_slug, safe='')}{qs}",
-            timeout=self._http_timeout(timeout, 30.0),
-        )
-
     # ==================================================================
     # Deploys
     # ==================================================================
@@ -1147,36 +1104,20 @@ class AuthorityNamespace:
             timeout=self._http_timeout(timeout, 30.0),
         )
 
-    async def get_deploy_dossier(
+    async def get_deploy_verdict(
         self,
         deploy_id: str,
         *,
-        since: Optional[str] = None,
-        until: Optional[str] = None,
-        window_hours: Optional[int] = None,
-        limit: Optional[int] = None,
-        full: bool = False,
         timeout: Optional[float] = None,
     ) -> Dict[str, Any]:
         """
-        Get the full Authority dossier for a deploy.
-        ``GET /api/authority/dossiers/deploy/{deploy_id}``.
-
-        Mirrors the MCP ``authority_get_deploy_dossier`` tool. If the dossier
-        route is not yet enabled in dominus-authority the gateway will return
-        404 — the SDK surface is intentionally aligned with MCP.
+        Get the compact Authority verdict for a deploy.
+        ``GET /api/authority/deploys/{deploy_id}/verdict``.
         """
         if not deploy_id:
             raise ValueError("deploy_id is required")
-        qs = _query_string({
-            "since": since,
-            "until": until,
-            "window_hours": window_hours,
-            "limit": limit,
-            "full": 1 if full else None,
-        })
         return await self._get(
-            f"/api/authority/dossiers/deploy/{quote(deploy_id, safe='')}{qs}",
+            f"/api/authority/deploys/{quote(deploy_id, safe='')}/verdict",
             timeout=self._http_timeout(timeout, 30.0),
         )
 

{dominus_sdk_python-6.2.0 → dominus_sdk_python-7.0.0}/dominus/namespaces/stash.py

@@ -6,10 +6,18 @@ stores items in each project's ``stash.*`` schema and transparently falls
 back to a designated shared project on read.
 """
 from typing import Any, Dict, List, Optional, TYPE_CHECKING
+from urllib.parse import urlencode
 
 if TYPE_CHECKING:
     from ..start import Dominus
 
+BookmarkRef = Dict[str, Any]
+WatcherRef = Dict[str, Any]
+
+
+def _facade_query(*, env: str, kind: str, scope: str, key: str) -> str:
+    return urlencode({"env": env, "kind": kind, "scope": scope, "key": key})
+
 
 class StashNamespace:
     """
@@ -273,3 +281,155 @@ class StashNamespace:
             body=body,
             use_gateway=True,
         )
+
+    async def bookmark(
+        self,
+        *,
+        env: str,
+        kind: str,
+        scope: str,
+        key: str,
+        name: str,
+        version_ref: str,
+        timeout: float = 30.0,
+    ) -> BookmarkRef:
+        """Create or update a named bookmark for a stash artifact facade item."""
+        return await self._client._request(
+            endpoint="/svc/stash/bookmark",
+            method="POST",
+            body={
+                "env": env,
+                "kind": kind,
+                "scope": scope,
+                "key": key,
+                "name": name,
+                "version_ref": version_ref,
+            },
+            use_gateway=True,
+            timeout=timeout,
+        )
+
+    async def unbookmark(
+        self,
+        *,
+        env: str,
+        kind: str,
+        scope: str,
+        key: str,
+        name: str,
+        timeout: float = 30.0,
+    ) -> None:
+        """Remove a named bookmark from a stash artifact facade item."""
+        await self._client._request(
+            endpoint="/svc/stash/unbookmark",
+            method="POST",
+            body={
+                "env": env,
+                "kind": kind,
+                "scope": scope,
+                "key": key,
+                "name": name,
+            },
+            use_gateway=True,
+            timeout=timeout,
+        )
+        return None
+
+    async def watch(
+        self,
+        *,
+        env: str,
+        kind: str,
+        scope: str,
+        key: str,
+        watcher_name: str,
+        webhook_url: str,
+        timeout: float = 30.0,
+    ) -> WatcherRef:
+        """Create or update a webhook watcher for a stash artifact facade item."""
+        return await self._client._request(
+            endpoint="/svc/stash/watch",
+            method="POST",
+            body={
+                "env": env,
+                "kind": kind,
+                "scope": scope,
+                "key": key,
+                "watcher_name": watcher_name,
+                "webhook_url": webhook_url,
+            },
+            use_gateway=True,
+            timeout=timeout,
+        )
+
+    async def unwatch(
+        self,
+        *,
+        env: str,
+        kind: str,
+        scope: str,
+        key: str,
+        watcher_name: str,
+        timeout: float = 30.0,
+    ) -> None:
+        """Remove a webhook watcher from a stash artifact facade item."""
+        await self._client._request(
+            endpoint="/svc/stash/unwatch",
+            method="POST",
+            body={
+                "env": env,
+                "kind": kind,
+                "scope": scope,
+                "key": key,
+                "watcher_name": watcher_name,
+            },
+            use_gateway=True,
+            timeout=timeout,
+        )
+        return None
+
+    async def list_bookmarks(
+        self,
+        *,
+        env: str,
+        kind: str,
+        scope: str,
+        key: str,
+        timeout: float = 30.0,
+    ) -> List[BookmarkRef]:
+        """List bookmark refs for a stash artifact facade item."""
+        result = await self._client._request(
+            endpoint=f"/svc/stash/bookmark/list?{_facade_query(env=env, kind=kind, scope=scope, key=key)}",
+            method="GET",
+            use_gateway=True,
+            timeout=timeout,
+        )
+        if isinstance(result, list):
+            return result
+        if isinstance(result, dict):
+            bookmarks = result.get("bookmarks")
+            return bookmarks if isinstance(bookmarks, list) else []
+        return []
+
+    async def list_watchers(
+        self,
+        *,
+        env: str,
+        kind: str,
+        scope: str,
+        key: str,
+        timeout: float = 30.0,
+    ) -> List[WatcherRef]:
+        """List watcher refs for a stash artifact facade item."""
+        result = await self._client._request(
+            endpoint=f"/svc/stash/watch/list?{_facade_query(env=env, kind=kind, scope=scope, key=key)}",
+            method="GET",
+            use_gateway=True,
+            timeout=timeout,
+        )
+        if isinstance(result, list):
+            return result
+        if isinstance(result, dict):
+            watchers = result.get("watchers")
+            return watchers if isinstance(watchers, list) else []
+        return []

{dominus_sdk_python-6.2.0 → dominus_sdk_python-7.0.0}/dominus/start.py

@@ -168,7 +168,7 @@ class Dominus:
         from .namespaces.sync import SyncNamespace
         self.sync = SyncNamespace(self)
 
-        # Authority service (runs, provisioning targets, deploys, managed clients, dossiers)
+        # Authority service (runs, provisioning targets, deploys, managed clients, verdicts)
         from .namespaces.authority import AuthorityNamespace
         self.authority = AuthorityNamespace(self)
 

{dominus_sdk_python-6.2.0 → dominus_sdk_python-7.0.0}/dominus_sdk_python.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dominus-sdk-python
-Version: 6.2.0
+Version: 7.0.0
 Summary: Python SDK for the Dominus gateway-first platform
 Author-email: CareBridge Systems <dev@carebridge.io>
 License-Expression: LicenseRef-Proprietary
@@ -35,6 +35,12 @@ Requires-Dist: PyJWT>=2.8.0; extra == "all"
 
 Async Python SDK for the Dominus gateway-first service plane.
 
+## Agent Guide
+
+Start with `docs/agent-guide/INDEX.md`. The current snapshot is
+`docs/agent-guide/2026-06-27-0849-agent-guide/00-reading-order.md`; the latest
+cleanup audit is `docs/janitor/2026-06-27-0849-agent-guide-cleanup-audit.md`.
+
 ## What This Repo Ships
 
 - Python 3.9+ asyncio client for Dominus services
@@ -42,7 +48,7 @@ Async Python SDK for the Dominus gateway-first service plane.
 - Gateway-scoped client mode for MCP and other user-JWT sessions
 - Transport compatibility for wrapped `{success,data}` responses and unwrapped Warden/control-plane success objects
 - Local helpers for JWT verification, trace propagation, retries, and console capture
-- Current package version: `6.1.1`
+- Current package version: `7.0.0`
 
 ## Install
 
@@ -223,6 +229,9 @@ JWT and selected scope headers directly through Gateway.
 | `warden` | Warden | Thin operator control-plane request surface |
 | `platform` | Platform Worker | Group/repository policy decisions with actor attribution |
 | `coder` | Coder Runtime | Policy-bound Coder run lifecycle with workflow/pipeline recipe launch sources |
+| `publisher` | Publisher | Release/channel/signing build and artifact operations |
+| `stash` | Stash | Stash items, kinds, bookmarks, watches, artifact facade |
+| `recipes` | Recipe Worker | Recipe type registry, publish, validate, get/list |
 | `fastapi` | Local decorators | `@jwt`, `@psk`, `@scopes(...)` |
 
 ## Root Shortcuts

{dominus_sdk_python-6.2.0 → dominus_sdk_python-7.0.0}/dominus_sdk_python.egg-info/SOURCES.txt

@@ -56,12 +56,14 @@ tests/test_errors.py
 tests/test_flat_commands.py
 tests/test_health.py
 tests/test_logs.py
+tests/test_namespace_barrel_exports.py
 tests/test_platform_coder_namespaces.py
 tests/test_provisioning_parity.py
 tests/test_public_exports.py
 tests/test_publisher_namespace.py
 tests/test_recipes_namespace.py
 tests/test_recipes_stash_routing.py
+tests/test_stash_artifact_facade.py
 tests/test_transport_compat.py
 tests/test_workflow_lifecycle.py
 tests/test_workflow_refs.py

{dominus_sdk_python-6.2.0 → dominus_sdk_python-7.0.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "dominus-sdk-python"
-version = "6.2.0"
+version = "7.0.0"
 description = "Python SDK for the Dominus gateway-first platform"
 readme = "README.md"
 license = "LicenseRef-Proprietary"