dominus-sdk-python 9.0.12__tar.gz → 9.0.14__tar.gz

{dominus_sdk_python-9.0.12 → dominus_sdk_python-9.0.14}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dominus-sdk-python
-Version: 9.0.12
+Version: 9.0.14
 Summary: Python SDK for the Dominus gateway-first platform
 Author-email: CareBridge Systems <dev@carebridge.io>
 License-Expression: LicenseRef-Proprietary
@@ -38,8 +38,8 @@ Async Python SDK for the Dominus gateway-first service plane.
 ## Agent Guide
 
 Start with `docs/agent-guide/INDEX.md`. The current snapshot is
-`docs/agent-guide/2026-09-14-1300-sdk-python/00-reading-order.md`; the latest
-cleanup audit is `docs/janitor/2026-09-14-1300-sdk-python-cleanup-audit.md`.
+`docs/agent-guide/2026-09-19-1300-sdk-python/00-reading-order.md`; the latest
+cleanup audit is `docs/janitor/2026-09-19-1300-sdk-python-cleanup-audit.md`.
 
 ## What This Repo Ships
 
@@ -48,7 +48,7 @@ cleanup audit is `docs/janitor/2026-09-14-1300-sdk-python-cleanup-audit.md`.
 - Gateway-scoped client mode for MCP and other user-JWT sessions
 - Transport compatibility for wrapped `{success,data}` responses and unwrapped Warden/control-plane success objects
 - Local helpers for JWT verification, trace propagation, retries, and console capture
-- Current package version: `9.0.12`
+- Current package version: `9.0.14`
 
 ## Install
 

{dominus_sdk_python-9.0.12 → dominus_sdk_python-9.0.14}/README.md

@@ -5,8 +5,8 @@ Async Python SDK for the Dominus gateway-first service plane.
 ## Agent Guide
 
 Start with `docs/agent-guide/INDEX.md`. The current snapshot is
-`docs/agent-guide/2026-09-14-1300-sdk-python/00-reading-order.md`; the latest
-cleanup audit is `docs/janitor/2026-09-14-1300-sdk-python-cleanup-audit.md`.
+`docs/agent-guide/2026-09-19-1300-sdk-python/00-reading-order.md`; the latest
+cleanup audit is `docs/janitor/2026-09-19-1300-sdk-python-cleanup-audit.md`.
 
 ## What This Repo Ships
 
@@ -15,7 +15,7 @@ cleanup audit is `docs/janitor/2026-09-14-1300-sdk-python-cleanup-audit.md`.
 - Gateway-scoped client mode for MCP and other user-JWT sessions
 - Transport compatibility for wrapped `{success,data}` responses and unwrapped Warden/control-plane success objects
 - Local helpers for JWT verification, trace propagation, retries, and console capture
-- Current package version: `9.0.12`
+- Current package version: `9.0.14`
 
 ## Install
 

{dominus_sdk_python-9.0.12 → dominus_sdk_python-9.0.14}/dominus/__init__.py

@@ -191,7 +191,7 @@ from .errors import (
     TimeoutError as DominusTimeoutError,
 )
 
-__version__ = "9.0.12"
+__version__ = "9.0.14"
 __all__ = [
     # Main SDK instance
     "dominus",

{dominus_sdk_python-9.0.12 → dominus_sdk_python-9.0.14}/dominus/namespaces/authority.py

@@ -56,6 +56,11 @@ LIST_RUN_KIND = "workflow"
 #: top-level projection on the wire; this SDK never relies on that default.
 RESULT_VIEW_BOUND = "bound"
 
+#: Canonical coherent deploy read view. Authority still serves the legacy
+#: ``latest_deployment_*`` projection when ``view`` is omitted; this SDK never
+#: relies on that default, and carries no legacy fallback.
+DEPLOY_VIEW_COHERENT = "coherent"
+
 
 def remote_command_outcome(payload: Mapping[str, Any]) -> Dict[str, Any]:
     """Unwrap a canonical ``RemoteCommandResult`` to the remote outcome it carries.
@@ -72,6 +77,35 @@ def remote_command_outcome(payload: Mapping[str, Any]) -> Dict[str, Any]:
     return dict(payload)
 
 
+def coherent_deploy_state(payload: Mapping[str, Any]) -> Dict[str, Any]:
+    """Split a coherent deploy read into current state, labeled history, provenance.
+
+    A coherent read returns the deploy's one current rollout, its executor
+    history, and the provenance naming which rollout is current. This accessor
+    keeps that separation intact so history can never be read as current state:
+    ``current_rollout`` stays ``None`` when Authority reports the read as
+    partial (an unset or unresolvable ``current_rollout_id``), and the newest
+    history entry is never substituted for it. ``partial`` restates the
+    provenance flag for callers that branch on it.
+    """
+    envelope: Mapping[str, Any] = payload if isinstance(payload, Mapping) else {}
+    provenance = envelope.get("provenance")
+    provenance = dict(provenance) if isinstance(provenance, Mapping) else {}
+    current = envelope.get("current_rollout")
+    history = envelope.get("executor_history")
+    return {
+        "deploy": dict(envelope.get("deploy") or {}),
+        "current_rollout": dict(current) if isinstance(current, Mapping) else None,
+        "executor_history": (
+            [dict(row) for row in history if isinstance(row, Mapping)]
+            if isinstance(history, list)
+            else []
+        ),
+        "provenance": provenance,
+        "partial": bool(provenance.get("partial")),
+    }
+
+
 def _is_workflow_recipe_ref(value: Optional[str]) -> bool:
     return str(value or "").strip().startswith("recipe://workflow-recipe-v1/")
 
@@ -1077,11 +1111,21 @@ class AuthorityNamespace:
         )
 
     async def get_deploy(self, deploy_id: str, *, timeout: Optional[float] = None) -> Dict[str, Any]:
-        """Get deploy by id. ``GET /api/authority/deploys/{deploy_id}``."""
+        """Get deploy by id in coherent current state.
+
+        ``GET /api/authority/deploys/{deploy_id}?view=coherent`` returns
+        ``{deploy, current_rollout, executor_history, provenance}``: the single
+        current rollout, the executor history labeled as history, and the
+        provenance naming which rollout is current (``partial`` when Authority
+        cannot resolve one). The view is requested explicitly so the read never
+        rides the server's legacy default, and there is no legacy fallback.
+        Use :func:`coherent_deploy_state` to read the sections apart.
+        """
         if not deploy_id:
             raise ValueError("deploy_id is required")
+        qs = _query_string({"view": DEPLOY_VIEW_COHERENT})
         return await self._get(
-            f"/api/authority/deploys/{quote(deploy_id, safe='')}",
+            f"/api/authority/deploys/{quote(deploy_id, safe='')}{qs}",
             timeout=self._http_timeout(timeout, 30.0),
         )
 

{dominus_sdk_python-9.0.12 → dominus_sdk_python-9.0.14}/dominus/start.py

@@ -437,7 +437,9 @@ class Dominus:
                     response = await client.get(endpoint)
                 elif method == "DELETE":
                     # Kernel wire format: same base64 JSON body as POST (Node SDK parity).
-                    response = await client.delete(endpoint, content=body_b64)
+                    # httpx.AsyncClient.delete() accepts no body kwarg (unlike
+                    # post/put), so use the generic verb to keep the body on the wire.
+                    response = await client.request("DELETE", endpoint, content=body_b64)
                 elif method == "PUT":
                     response = await client.put(endpoint, content=body_b64)
                 else:

{dominus_sdk_python-9.0.12 → dominus_sdk_python-9.0.14}/dominus_sdk_python.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dominus-sdk-python
-Version: 9.0.12
+Version: 9.0.14
 Summary: Python SDK for the Dominus gateway-first platform
 Author-email: CareBridge Systems <dev@carebridge.io>
 License-Expression: LicenseRef-Proprietary
@@ -38,8 +38,8 @@ Async Python SDK for the Dominus gateway-first service plane.
 ## Agent Guide
 
 Start with `docs/agent-guide/INDEX.md`. The current snapshot is
-`docs/agent-guide/2026-09-14-1300-sdk-python/00-reading-order.md`; the latest
-cleanup audit is `docs/janitor/2026-09-14-1300-sdk-python-cleanup-audit.md`.
+`docs/agent-guide/2026-09-19-1300-sdk-python/00-reading-order.md`; the latest
+cleanup audit is `docs/janitor/2026-09-19-1300-sdk-python-cleanup-audit.md`.
 
 ## What This Repo Ships
 
@@ -48,7 +48,7 @@ cleanup audit is `docs/janitor/2026-09-14-1300-sdk-python-cleanup-audit.md`.
 - Gateway-scoped client mode for MCP and other user-JWT sessions
 - Transport compatibility for wrapped `{success,data}` responses and unwrapped Warden/control-plane success objects
 - Local helpers for JWT verification, trace propagation, retries, and console capture
-- Current package version: `9.0.12`
+- Current package version: `9.0.14`
 
 ## Install
 

{dominus_sdk_python-9.0.12 → dominus_sdk_python-9.0.14}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "dominus-sdk-python"
-version = "9.0.12"
+version = "9.0.14"
 description = "Python SDK for the Dominus gateway-first platform"
 readme = "README.md"
 license = "LicenseRef-Proprietary"

{dominus_sdk_python-9.0.12 → dominus_sdk_python-9.0.14}/tests/test_authority_public_vocabulary.py

@@ -611,6 +611,91 @@ async def test_bootstrap_provisioning_target_carries_repo_template():
     assert "repo_template" not in absent_client.calls[-1]["body"]
 
 
+# --- Task 16: singular deploy reader reads coherent current state --
+
+
+@pytest.mark.asyncio
+async def test_get_deploy_requests_the_coherent_view_explicitly():
+    from dominus.namespaces.authority import DEPLOY_VIEW_COHERENT
+
+    client = FakeClient()
+    ns = AuthorityNamespace(client)
+
+    await ns.get_deploy("deploy::dominus-authority--production")
+
+    assert client.calls[0]["method"] == "GET"
+    assert client.calls[0]["endpoint"] == (
+        "/api/authority/deploys/deploy%3A%3Adominus-authority--production?view=coherent"
+    )
+    # The view is named on the wire, never inherited from the server default.
+    assert DEPLOY_VIEW_COHERENT == "coherent"
+
+
+def test_coherent_deploy_state_keeps_current_and_history_labeled_apart():
+    from dominus.namespaces.authority import coherent_deploy_state
+
+    state = coherent_deploy_state(
+        {
+            "deploy": {"deploy_id": "deploy-1", "app_slug": "carebridge"},
+            "current_rollout": {"rollout_id": "rollout-2", "generation": 7},
+            "executor_history": [
+                {"rollout_id": "rollout-1", "generation": 6},
+                {"rollout_id": "rollout-2", "generation": 7, "is_current": True},
+            ],
+            "provenance": {
+                "view": "coherent",
+                "source": "current_rollout",
+                "rollout_id": "rollout-2",
+                "generation": 7,
+                "is_current": True,
+                "partial": False,
+            },
+        }
+    )
+
+    assert state["current_rollout"]["rollout_id"] == "rollout-2"
+    assert [row["rollout_id"] for row in state["executor_history"]] == ["rollout-1", "rollout-2"]
+    assert state["provenance"]["generation"] == 7
+    assert state["partial"] is False
+
+
+def test_coherent_deploy_state_never_substitutes_history_for_a_missing_current_rollout():
+    from dominus.namespaces.authority import coherent_deploy_state
+
+    state = coherent_deploy_state(
+        {
+            "deploy": {"deploy_id": "deploy-2"},
+            "current_rollout": None,
+            "executor_history": [{"rollout_id": "rollout-9", "generation": 3}],
+            "provenance": {
+                "view": "coherent",
+                "source": None,
+                "rollout_id": None,
+                "is_current": False,
+                "partial": True,
+            },
+        }
+    )
+
+    # An unresolved current rollout stays an explicit partial; the newest
+    # history entry is not promoted into its place.
+    assert state["current_rollout"] is None
+    assert state["partial"] is True
+    assert [row["rollout_id"] for row in state["executor_history"]] == ["rollout-9"]
+
+
+def test_coherent_deploy_state_tolerates_a_non_envelope_payload():
+    from dominus.namespaces.authority import coherent_deploy_state
+
+    state = coherent_deploy_state({"code": "authority.deploy_not_found"})
+
+    assert state["deploy"] == {}
+    assert state["current_rollout"] is None
+    assert state["executor_history"] == []
+    assert state["provenance"] == {}
+    assert state["partial"] is False
+
+
 def test_bootstrap_signature_carries_standalone_and_root_role():
     bootstrap_sig = inspect.signature(AuthorityNamespace.bootstrap_provisioning_target)
     assert "standalone" in bootstrap_sig.parameters

{dominus_sdk_python-9.0.12 → dominus_sdk_python-9.0.14}/tests/test_transport_compat.py

@@ -1,3 +1,4 @@
+import base64
 import json
 import sys
 from pathlib import Path
@@ -56,6 +57,51 @@ class RequestClient:
         return FakeResponse(json.dumps({"success": True, "data": {"ok": True}}))
 
 
+class HttpxFaithfulDeleteClient:
+    """Fake AsyncClient whose ``delete()`` mirrors httpx's real signature.
+
+    httpx.AsyncClient.delete() takes no body kwarg (unlike post/put), so a fake
+    that tolerated ``content=`` here would silently mask the very regression
+    these tests exist to catch. ``request()`` is the body-capable generic verb.
+    """
+
+    calls = []
+
+    def __init__(self, *, base_url, headers, timeout):
+        self.base_url = base_url
+        self.headers = headers
+        self.timeout = timeout
+
+    async def __aenter__(self):
+        return self
+
+    async def __aexit__(self, exc_type, exc, tb):
+        return False
+
+    async def delete(self, endpoint, *, params=None, headers=None, cookies=None):
+        # Exact httpx 0.28 surface: no content/json/data parameter.
+        raise AssertionError(
+            "_request() must not send a body through httpx's body-less delete(); "
+            "use client.request('DELETE', ...) instead"
+        )
+
+    async def get(self, endpoint):
+        self.calls.append({"method": "GET", "endpoint": endpoint, "content": None})
+        return FakeResponse(json.dumps({"success": True, "data": {"ok": True}}))
+
+    async def post(self, endpoint, content=None):
+        self.calls.append({"method": "POST", "endpoint": endpoint, "content": content})
+        return FakeResponse(json.dumps({"success": True, "data": {"ok": True}}))
+
+    async def put(self, endpoint, content=None):
+        self.calls.append({"method": "PUT", "endpoint": endpoint, "content": content})
+        return FakeResponse(json.dumps({"success": True, "data": {"ok": True}}))
+
+    async def request(self, method, endpoint, *, content=None, **kwargs):
+        self.calls.append({"method": method, "endpoint": endpoint, "content": content})
+        return FakeResponse(json.dumps({"success": True, "data": {"ok": True}}))
+
+
 class UnwrappedRequestClient:
     calls = []
 
@@ -199,6 +245,52 @@ async def test_request_accepts_raw_json_success_envelope(monkeypatch, sdk):
     assert RequestClient.calls[0]["endpoint"] == "/svc/health"
 
 
+@pytest.mark.asyncio
+async def test_guardian_delete_reaches_transport_with_body(monkeypatch, sdk):
+    """Regression: guardian_delete (no explicit body) hit httpx's delete() kwarg wall.
+
+    Live failure 2026-09-22: AsyncClient.delete() got an unexpected keyword
+    argument 'content' -- every DELETE through _request raised TypeError.
+    """
+    HttpxFaithfulDeleteClient.calls = []
+
+    async def fake_ensure_valid_jwt(psk_token, base_url):
+        return "jwt-abc"
+
+    monkeypatch.setattr(core_module, "_ensure_valid_jwt", fake_ensure_valid_jwt)
+    monkeypatch.setattr(start_module.httpx, "AsyncClient", HttpxFaithfulDeleteClient)
+
+    result = await sdk.auth.guardian_delete("tenants", "5d05b96e-0aef-4dbf-a4dc-19354da9f58e")
+
+    assert result == {"ok": True}
+    call = HttpxFaithfulDeleteClient.calls[0]
+    assert call["method"] == "DELETE"
+    assert call["endpoint"] == "/svc/guardian/tenants/5d05b96e-0aef-4dbf-a4dc-19354da9f58e"
+    assert call["content"] == base64.b64encode(json.dumps({}).encode()).decode()
+
+
+@pytest.mark.asyncio
+async def test_non_guardian_delete_reaches_transport_with_body(monkeypatch, sdk):
+    """Same shared _request path, non-guardian namespace, real body on the wire."""
+    HttpxFaithfulDeleteClient.calls = []
+
+    async def fake_ensure_valid_jwt(psk_token, base_url):
+        return "jwt-abc"
+
+    monkeypatch.setattr(core_module, "_ensure_valid_jwt", fake_ensure_valid_jwt)
+    monkeypatch.setattr(start_module.httpx, "AsyncClient", HttpxFaithfulDeleteClient)
+
+    result = await sdk.ddl.drop_table("public", "widgets")
+
+    assert result == {"ok": True}
+    call = HttpxFaithfulDeleteClient.calls[0]
+    assert call["method"] == "DELETE"
+    assert call["endpoint"] == "/svc/smith/schema/drop-table"
+    assert call["content"] == base64.b64encode(
+        json.dumps({"schema": "public", "table": "widgets"}).encode()
+    ).decode()
+
+
 @pytest.mark.asyncio
 async def test_request_accepts_unwrapped_control_plane_success(monkeypatch, sdk):
     UnwrappedRequestClient.calls = []