dominus-sdk-python 9.0.6__tar.gz → 9.0.8__tar.gz

{dominus_sdk_python-9.0.6 → dominus_sdk_python-9.0.8}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dominus-sdk-python
-Version: 9.0.6
+Version: 9.0.8
 Summary: Python SDK for the Dominus gateway-first platform
 Author-email: CareBridge Systems <dev@carebridge.io>
 License-Expression: LicenseRef-Proprietary
@@ -38,8 +38,8 @@ Async Python SDK for the Dominus gateway-first service plane.
 ## Agent Guide
 
 Start with `docs/agent-guide/INDEX.md`. The current snapshot is
-`docs/agent-guide/2026-08-04-sdk-python/00-reading-order.md`; the latest
-cleanup audit is `docs/janitor/2026-08-04-sdk-python-cleanup-audit.md`.
+`docs/agent-guide/2026-09-03-0942-sdk-python/00-reading-order.md`; the latest
+cleanup audit is `docs/janitor/2026-09-03-0942-sdk-python-cleanup-audit.md`.
 
 ## What This Repo Ships
 
@@ -48,7 +48,7 @@ cleanup audit is `docs/janitor/2026-08-04-sdk-python-cleanup-audit.md`.
 - Gateway-scoped client mode for MCP and other user-JWT sessions
 - Transport compatibility for wrapped `{success,data}` responses and unwrapped Warden/control-plane success objects
 - Local helpers for JWT verification, trace propagation, retries, and console capture
-- Current package version: `9.0.5`
+- Current package version: `9.0.6`
 
 ## Install
 

{dominus_sdk_python-9.0.6 → dominus_sdk_python-9.0.8}/README.md

@@ -5,8 +5,8 @@ Async Python SDK for the Dominus gateway-first service plane.
 ## Agent Guide
 
 Start with `docs/agent-guide/INDEX.md`. The current snapshot is
-`docs/agent-guide/2026-08-04-sdk-python/00-reading-order.md`; the latest
-cleanup audit is `docs/janitor/2026-08-04-sdk-python-cleanup-audit.md`.
+`docs/agent-guide/2026-09-03-0942-sdk-python/00-reading-order.md`; the latest
+cleanup audit is `docs/janitor/2026-09-03-0942-sdk-python-cleanup-audit.md`.
 
 ## What This Repo Ships
 
@@ -15,7 +15,7 @@ cleanup audit is `docs/janitor/2026-08-04-sdk-python-cleanup-audit.md`.
 - Gateway-scoped client mode for MCP and other user-JWT sessions
 - Transport compatibility for wrapped `{success,data}` responses and unwrapped Warden/control-plane success objects
 - Local helpers for JWT verification, trace propagation, retries, and console capture
-- Current package version: `9.0.5`
+- Current package version: `9.0.6`
 
 ## Install
 

{dominus_sdk_python-9.0.6 → dominus_sdk_python-9.0.8}/dominus/__init__.py

@@ -190,7 +190,7 @@ from .errors import (
     TimeoutError as DominusTimeoutError,
 )
 
-__version__ = "9.0.6"
+__version__ = "9.0.8"
 __all__ = [
     # Main SDK instance
     "dominus",

{dominus_sdk_python-9.0.6 → dominus_sdk_python-9.0.8}/dominus/namespaces/authority.py

@@ -48,6 +48,30 @@ def _is_provisioning_bootstrap_run_kind(run_kind: Optional[str]) -> bool:
     return _normalize_run_kind_token(run_kind) == "provisioning_bootstrap"
 
 
+#: The only run kind ``GET /api/authority/runs`` surfaces. Authority rejects any
+#: other value; ``bootstrap``/``deploy_rollout`` runs are read by run id.
+LIST_RUN_KIND = "workflow"
+
+#: Canonical control-result view. Authority still defaults to the legacy
+#: top-level projection on the wire; this SDK never relies on that default.
+RESULT_VIEW_BOUND = "bound"
+
+
+def remote_command_outcome(payload: Mapping[str, Any]) -> Dict[str, Any]:
+    """Unwrap a canonical ``RemoteCommandResult`` to the remote outcome it carries.
+
+    The envelope's ``owner``/``bound_subject``/``provenance`` state who actually
+    performed the command; callers that only need the run summary use this, and
+    callers that need attribution read the envelope directly. A payload that is
+    not an envelope is returned unchanged so an upstream error body is never
+    replaced with an empty dict.
+    """
+    if isinstance(payload, Mapping) and "outcome" in payload and "bound_subject" in payload:
+        outcome = payload.get("outcome")
+        return dict(outcome) if isinstance(outcome, Mapping) else {}
+    return dict(payload)
+
+
 def _is_workflow_recipe_ref(value: Optional[str]) -> bool:
     return str(value or "").strip().startswith("recipe://workflow-recipe-v1/")
 
@@ -313,9 +337,22 @@ class AuthorityNamespace:
             timeout=self._http_timeout(timeout, 30.0),
         )
 
+    async def run_kinds(self, *, timeout: Optional[float] = None) -> Dict[str, Any]:
+        """Read the run-kind/capability matrix. ``GET /api/authority/run-kinds``.
+
+        Explicit capability discovery: callers ask which actions a kind supports
+        (and which kinds the run list surfaces) instead of guessing from run-id
+        prefixes.
+        """
+        return await self._get(
+            "/api/authority/run-kinds",
+            timeout=self._http_timeout(timeout, 30.0),
+        )
+
     async def list_runs(
         self,
         *,
+        kind: str = LIST_RUN_KIND,
         workflow_id: Optional[str] = None,
         status: Optional[str] = None,
         group: Optional[str] = None,
@@ -328,9 +365,20 @@ class AuthorityNamespace:
         offset: int = 0,
         timeout: Optional[float] = None,
     ) -> Dict[str, Any]:
-        """List Authority-backed runs. ``GET /api/authority/runs``."""
+        """List Authority-backed workflow runs. ``GET /api/authority/runs``.
+
+        This list is workflow-kind only and says so: ``kind`` is sent explicitly
+        rather than inheriting a server default that reads like a universal
+        inventory. Use :meth:`run_kinds` to see which kinds are listable.
+        """
+        if str(kind).strip().lower() != LIST_RUN_KIND:
+            raise ValueError(
+                f"Authority lists only kind={LIST_RUN_KIND!r} runs; "
+                f"{kind!r} runs are read by run id via get_run()"
+            )
         tid, tev = self._target_query_params(target_org_id, target_env)
         qs = _query_string({
+            "kind": LIST_RUN_KIND,
             "workflow_id": workflow_id,
             "status": status,
             "group": group,
@@ -378,6 +426,7 @@ class AuthorityNamespace:
             "metadata": metadata,
             **self._initiator(initiator_type, initiator_id, idempotency_key),
             **self._scope(app_slug, env, target_org_id, target_env),
+            "result_view": RESULT_VIEW_BOUND,
         })
         return await self._post(
             f"/api/authority/runs/{quote(run_id, safe='')}/cancel",
@@ -422,6 +471,7 @@ class AuthorityNamespace:
             "metadata": metadata,
             **self._initiator(initiator_type, initiator_id, idempotency_key),
             **self._scope(app_slug, env, target_org_id, target_env),
+            "result_view": RESULT_VIEW_BOUND,
         })
         return await self._post(
             f"/api/authority/runs/{quote(run_id, safe='')}/retry",
@@ -459,6 +509,7 @@ class AuthorityNamespace:
             "metadata": metadata,
             **self._initiator(initiator_type, initiator_id, idempotency_key),
             **self._scope(app_slug, env, target_org_id, target_env),
+            "result_view": RESULT_VIEW_BOUND,
         })
         return await self._post(
             f"/api/authority/runs/{quote(run_id, safe='')}/nudge",
@@ -898,6 +949,9 @@ class AuthorityNamespace:
         region: Optional[str] = None,
         system: Optional[str] = None,
         github_mode: Optional[str] = None,
+        repo_template: Optional[str] = None,
+        standalone: Optional[bool] = None,
+        root_role: Optional[str] = None,
         overwrite_existing: Optional[bool] = None,
         owner_email: Optional[str] = None,
         execution_mode: Optional[str] = None,
@@ -928,6 +982,9 @@ class AuthorityNamespace:
             "region": region,
             "system": system,
             "github_mode": github_mode,
+            "repo_template": repo_template,
+            "standalone": standalone,
+            "root_role": root_role,
             "overwrite_existing": overwrite_existing,
             "owner_email": owner_email,
             "execution_mode": execution_mode,

{dominus_sdk_python-9.0.6 → dominus_sdk_python-9.0.8}/dominus_sdk_python.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dominus-sdk-python
-Version: 9.0.6
+Version: 9.0.8
 Summary: Python SDK for the Dominus gateway-first platform
 Author-email: CareBridge Systems <dev@carebridge.io>
 License-Expression: LicenseRef-Proprietary
@@ -38,8 +38,8 @@ Async Python SDK for the Dominus gateway-first service plane.
 ## Agent Guide
 
 Start with `docs/agent-guide/INDEX.md`. The current snapshot is
-`docs/agent-guide/2026-08-04-sdk-python/00-reading-order.md`; the latest
-cleanup audit is `docs/janitor/2026-08-04-sdk-python-cleanup-audit.md`.
+`docs/agent-guide/2026-09-03-0942-sdk-python/00-reading-order.md`; the latest
+cleanup audit is `docs/janitor/2026-09-03-0942-sdk-python-cleanup-audit.md`.
 
 ## What This Repo Ships
 
@@ -48,7 +48,7 @@ cleanup audit is `docs/janitor/2026-08-04-sdk-python-cleanup-audit.md`.
 - Gateway-scoped client mode for MCP and other user-JWT sessions
 - Transport compatibility for wrapped `{success,data}` responses and unwrapped Warden/control-plane success objects
 - Local helpers for JWT verification, trace propagation, retries, and console capture
-- Current package version: `9.0.5`
+- Current package version: `9.0.6`
 
 ## Install
 

{dominus_sdk_python-9.0.6 → dominus_sdk_python-9.0.8}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "dominus-sdk-python"
-version = "9.0.6"
+version = "9.0.8"
 description = "Python SDK for the Dominus gateway-first platform"
 readme = "README.md"
 license = "LicenseRef-Proprietary"

{dominus_sdk_python-9.0.6 → dominus_sdk_python-9.0.8}/tests/test_authority_public_vocabulary.py

@@ -515,3 +515,130 @@ async def test_authority_ensure_run_bootstrap_requires_provisioning_target_slug(
             env="production",
         )
     assert client.calls == []
+
+
+# --- Task 21: canonical run-kind discovery, honest list, bound control results --
+
+
+@pytest.mark.asyncio
+async def test_run_kinds_reads_the_explicit_capability_surface():
+    client = FakeClient()
+    ns = AuthorityNamespace(client)
+
+    await ns.run_kinds()
+
+    assert client.calls[0]["endpoint"] == "/api/authority/run-kinds"
+    assert client.calls[0]["method"] == "GET"
+
+
+@pytest.mark.asyncio
+async def test_list_runs_states_the_workflow_kind_it_actually_gets():
+    client = FakeClient()
+    ns = AuthorityNamespace(client)
+
+    await ns.list_runs(limit=5)
+
+    assert "kind=workflow" in client.calls[0]["endpoint"]
+
+
+@pytest.mark.asyncio
+async def test_list_runs_rejects_a_kind_authority_does_not_list():
+    client = FakeClient()
+    ns = AuthorityNamespace(client)
+
+    with pytest.raises(ValueError):
+        await ns.list_runs(kind="bootstrap")
+
+    assert client.calls == []
+
+
+@pytest.mark.asyncio
+async def test_run_control_calls_request_the_canonical_bound_result():
+    client = FakeClient()
+    ns = AuthorityNamespace(client)
+
+    await ns.cancel_run("run-1", reason="operator")
+    await ns.retry_run("run-1", reason="operator")
+    await ns.nudge_run("run-1", reason="operator")
+
+    assert [call["body"]["result_view"] for call in client.calls] == ["bound", "bound", "bound"]
+
+
+def test_run_control_outcome_helper_preserves_owner_and_provenance():
+    from dominus.namespaces.authority import remote_command_outcome
+
+    envelope = {
+        "owner": "workflow-manager",
+        "bound_subject": {"kind": "workflow", "canonical_id": "wf-1"},
+        "operation": "cancel",
+        "outcome": {"run_id": "run-1", "status": "cancelled"},
+        "observed_at": "2026-08-24T00:00:00Z",
+        "provenance": {"request_id": "req_1", "trace_id": "tr_1"},
+    }
+
+    assert remote_command_outcome(envelope) == {"run_id": "run-1", "status": "cancelled"}
+    # A non-envelope payload is returned untouched rather than silently emptied.
+    assert remote_command_outcome({"run_id": "run-1"}) == {"run_id": "run-1"}
+
+
+def test_bootstrap_signature_carries_repo_template():
+    bootstrap_sig = inspect.signature(AuthorityNamespace.bootstrap_provisioning_target)
+    assert "repo_template" in bootstrap_sig.parameters
+
+
+@pytest.mark.asyncio
+async def test_bootstrap_provisioning_target_carries_repo_template():
+    client = FakeClient()
+    namespace = AuthorityNamespace(client)
+    await namespace.bootstrap_provisioning_target(
+        "summit-radiology",
+        shared_app_slug="shared-core",
+        app_slug="carebridge",
+        env="production",
+        repo_template="dominus-fastapi-template",
+    )
+    assert client.calls[-1]["body"]["repo_template"] == "dominus-fastapi-template"
+
+    absent_client = FakeClient()
+    absent_namespace = AuthorityNamespace(absent_client)
+    await absent_namespace.bootstrap_provisioning_target(
+        "summit-radiology",
+        shared_app_slug="shared-core",
+        app_slug="carebridge",
+        env="production",
+    )
+    # Absent field keeps the legacy wire body byte-identical.
+    assert "repo_template" not in absent_client.calls[-1]["body"]
+
+
+def test_bootstrap_signature_carries_standalone_and_root_role():
+    bootstrap_sig = inspect.signature(AuthorityNamespace.bootstrap_provisioning_target)
+    assert "standalone" in bootstrap_sig.parameters
+    assert "root_role" in bootstrap_sig.parameters
+
+
+@pytest.mark.asyncio
+async def test_bootstrap_provisioning_target_carries_standalone_and_root_role():
+    client = FakeClient()
+    namespace = AuthorityNamespace(client)
+    await namespace.bootstrap_provisioning_target(
+        "summit-radiology",
+        app_slug="carebridge",
+        env="production",
+        standalone=True,
+        root_role="root",
+    )
+    assert client.calls[-1]["body"]["standalone"] is True
+    assert client.calls[-1]["body"]["root_role"] == "root"
+
+    absent_client = FakeClient()
+    absent_namespace = AuthorityNamespace(absent_client)
+    await absent_namespace.bootstrap_provisioning_target(
+        "summit-radiology",
+        shared_app_slug="shared-core",
+        app_slug="carebridge",
+        env="production",
+    )
+    # Absent fields keep the legacy wire body byte-identical.
+    assert "standalone" not in absent_client.calls[-1]["body"]
+    assert "root_role" not in absent_client.calls[-1]["body"]