cmpnd 0.28.0__tar.gz → 0.30.0__tar.gz

{cmpnd-0.28.0 → cmpnd-0.30.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: cmpnd
-Version: 0.28.0
+Version: 0.30.0
 Summary: DSPy observability and deployment SDK for cmpnd
 Project-URL: Homepage, https://cmpnd.ai
 Author-email: cmpnd <hello@cmpnd.ai>

{cmpnd-0.28.0 → cmpnd-0.30.0}/cmpnd/cli/commands/admin.py

@@ -1,8 +1,9 @@
 """Platform-operator commands, hidden behind CMPND_CLI_ADMIN=1.
 
-`cmpnd admin org create|set-owner|list|show|set-limit|set-github-login|elect-owner`
+`cmpnd admin org create|invite|set-owner|list|show|set-limit|set-github-login|elect-owner`
 is the closed-beta org bootstrap and steward surface:
-stand up a shared org with its GitHub auto-join key, anoint its first owner,
+stand up a shared org with its GitHub auto-join key, prepare one for a customer
+with a pre-approved owner invite (``create --owner-email`` or ``invite``), anoint an owner,
 adjust its member cap or GitHub link, and grant ownership from the election
 queue. `cmpnd admin user …` is the operator's user-lifecycle surface (list,
 inspect, create, approve/reject the pending-signup queue, promote/demote admin,
@@ -42,8 +43,28 @@ def _register_org(sub: _SubParsersAction[ArgumentParser]) -> None:
         default="",
         help="GitHub org login for OAuth auto-join (optional)",
     )
+    create.add_argument(
+        "--owner-email",
+        dest="owner_email",
+        default="",
+        help="Prepare the org for this customer: mail them a pre-approved owner invite (optional)",
+    )
     create.set_defaults(func=handle_org_create)
 
+    invite_owner = osub.add_parser(
+        "invite", help="Mail someone a pre-approved invite that makes them an owner of the org when they accept"
+    )
+    invite_owner.add_argument("org_id", help="Organization id")
+    invite_owner.add_argument("email", help="The customer's email")
+    invite_owner.set_defaults(func=handle_org_invite_owner)
+
+    revoke_invite = osub.add_parser(
+        "revoke-invite", help="Withdraw the open owner invites sent to an email, so the link stops working"
+    )
+    revoke_invite.add_argument("org_id", help="Organization id")
+    revoke_invite.add_argument("email", help="The email the invite was sent to")
+    revoke_invite.set_defaults(func=handle_org_revoke_invite)
+
     set_owner = osub.add_parser("set-owner", help="Make an existing user the org's owner")
     set_owner.add_argument("org_id", help="Organization id")
     set_owner.add_argument("email", help="Owner email (must already be a provisioned user)")
@@ -169,9 +190,25 @@ def _register_feature_flags(sub: _SubParsersAction[ArgumentParser]) -> None:
 
 
 def handle_org_create(client: api_client.ApiClient, args: Any) -> Any:
+    # With --owner-email the server marks the org operator-seeded and mails the
+    # customer a pre-approved owner invite; redeeming it hands the org over.
+    body = {"name": args.name, "github_login": args.github_login}
+    if args.owner_email:
+        body["owner_email"] = args.owner_email
+    return client.post("/api/v1/admin/organizations", json=body)
+
+
+def handle_org_invite_owner(client: api_client.ApiClient, args: Any) -> Any:
+    return client.post(
+        f"/api/v1/admin/organizations/{args.org_id}/owner-invite",
+        json={"email": args.email},
+    )
+
+
+def handle_org_revoke_invite(client: api_client.ApiClient, args: Any) -> Any:
     return client.post(
-        "/api/v1/admin/organizations",
-        json={"name": args.name, "github_login": args.github_login},
+        f"/api/v1/admin/organizations/{args.org_id}/owner-invite/revoke",
+        json={"email": args.email},
     )
 
 

{cmpnd-0.28.0 → cmpnd-0.30.0}/cmpnd/cli/verbs.py

@@ -149,6 +149,7 @@ DOMAIN_VERBS: dict[str, str] = {
     "disable": "suspends an account and keeps its rows — the reversible half of delete",
     "reset-password": "sets a credential the caller cannot read back, so it is not an update to a visible field",
     "elect-owner": "grants ownership out of the election queue, which has its own gate",
+    "revoke-invite": "withdraws the open owner invites to an address; bare revoke would read as revoking the org",
     "run": "invokes a deployment; the response is the point, and nothing is stored under that name",
     "follow": "tails a record until it settles — a list over time rather than a snapshot",
     "select": "marks one candidate as the program's chosen version",

{cmpnd-0.28.0 → cmpnd-0.30.0}/docs/cli.md

@@ -413,3 +413,52 @@ not store, so the endpoint's existing key stays in place. Plain
 `cmpnd login` never carries admin scopes, so an operator's everyday key has
 ordinary privilege. `--admin` does not combine with `--with-token`, because a
 pasted key keeps the scopes it was minted with.
+
+`cmpnd admin org create NAME --owner-email EMAIL` prepares an org for a
+customer. The server creates the org, marks it operator-seeded, and mails EMAIL
+a pre-approved owner invite. The response carries the invite link as
+`owner_invite.url` in case the email does not arrive. When the customer redeems
+the link they become the org's owner, with no approval step, and `cmpnd admin
+org show` reports the org handed off (`seed.handoff_pending: false`). `cmpnd
+admin org invite ORG_ID EMAIL` does the same for an existing org, whatever
+owners it already has: the invite is the admin's anointment, no different from
+`set-owner`, so an org may gain as many owners this way as it wants. `cmpnd
+admin org revoke-invite ORG_ID EMAIL` withdraws the open owner invites sent to
+that address, so a mistaken link stops working; `cmpnd admin org show` lists
+the addresses still pending under `seed.pending_owner_emails`.
+
+The step-by-step way to prepare an org for a customer keeps every write under
+the operator's own identity:
+
+1. `cmpnd admin org create NAME` and `cmpnd admin org set-owner ORG_ID
+   YOUR_EMAIL` to create the org and own it.
+2. Prepare it with an ordinary key: deploy programs, register credentials,
+   set limits.
+3. `cmpnd admin org invite ORG_ID CUSTOMER_EMAIL` to mail the customer a
+   pre-approved owner invite. They accept and become an owner beside you.
+4. `cmpnd org leave ORG_ID` once they have accepted; a co-owner may leave.
+   Revoke the key from step 2 as well, so no dead key lingers.
+
+The customer then takes over with their own keys. Nothing the operator
+prepared is bound to the operator's membership: credentials and tool servers
+carry only the org, and a deployment keeps its creator after they leave.
+
+5. `cmpnd login` and `cmpnd auth me`: the org and the owner role.
+6. Rotate the credentials to their own: `cmpnd credentials create --target
+   PROVIDER` with the same target, and `cmpnd credentials create --kind mcp
+   --server URL --name NAME` with the same server and name, replace the sealed
+   keys in place; the tool server and the deployment keep pointing at them.
+7. `cmpnd tool-servers show SERVER_ID` and `cmpnd tool-servers refresh
+   SERVER_ID`: the tools and the allow-list, re-read under their key.
+8. `cmpnd ps`, `cmpnd sample ID`, `cmpnd run ID '<json>'`: the deployment runs
+   under their credential, and `cmpnd traces list` shows the trace as theirs.
+9. `cmpnd optimize gepa FILE --reflection-model MODEL --auto light` from the
+   program's source checkout, then `cmpnd optimizations show RUN_ID`: their
+   first optimization, spent on their own credential.
+
+Both sides then verify. The operator's `cmpnd admin org show ORG_ID` lists the
+customer as owner and not the operator, with `seed.handoff_pending` false and
+`seed.handed_off_to_email` the customer; the operator's step-2 key gets 401.
+The customer's `cmpnd ps`, `cmpnd run`, `cmpnd tool-servers show` and `cmpnd
+optimizations show` all succeed under the rotated credentials, and the web app
+shows them the program, its deployment, the traces and the optimization runs.

{cmpnd-0.28.0 → cmpnd-0.30.0}/pyproject.toml

@@ -5,7 +5,7 @@ name = "cmpnd"
 # it's new) — no git tags. Bump with `uv version --bump {minor,patch}` or by
 # hand. Runtime `cmpnd.__version__` reads installed metadata, so it tracks
 # this automatically. See docs/plans/2026-07-02-sdk-pypi-tag-free-publish.md.
-version = "0.28.0"
+version = "0.30.0"
 description = "DSPy observability and deployment SDK for cmpnd"
 readme = "README.md"
 requires-python = ">=3.10"

{cmpnd-0.28.0 → cmpnd-0.30.0}/tests/test_cli/test_admin.py

@@ -10,13 +10,66 @@ from cmpnd.cli.commands import admin
 class TestAdminOrg:
     def test_create_posts_name_and_github_login(self, mock_client):
         mock_client.post.return_value = {"id": "o_1", "name": "Acme", "github_login": "acme"}
-        result = admin.handle_org_create(mock_client, Namespace(name="Acme", github_login="acme"))
+        result = admin.handle_org_create(mock_client, Namespace(name="Acme", github_login="acme", owner_email=""))
         mock_client.post.assert_called_once_with(
             "/api/v1/admin/organizations",
             json={"name": "Acme", "github_login": "acme"},
         )
         assert result["github_login"] == "acme"
 
+    def test_create_without_owner_email_sends_no_owner_email(self, mock_client):
+        mock_client.post.return_value = {"id": "o_1"}
+        admin.handle_org_create(mock_client, Namespace(name="Acme", github_login="", owner_email=""))
+        mock_client.post.assert_called_once_with(
+            "/api/v1/admin/organizations",
+            json={"name": "Acme", "github_login": ""},
+        )
+
+    def test_create_with_owner_email_prepares_the_org_for_its_customer(self, mock_client):
+        mock_client.post.return_value = {
+            "id": "o_1",
+            "owner_invite": {"role": "owner", "email": "founder@acme.com", "url": "https://x/auth/invite/t"},
+        }
+        result = admin.handle_org_create(
+            mock_client, Namespace(name="Acme", github_login="", owner_email="founder@acme.com")
+        )
+        mock_client.post.assert_called_once_with(
+            "/api/v1/admin/organizations",
+            json={"name": "Acme", "github_login": "", "owner_email": "founder@acme.com"},
+        )
+        assert result["owner_invite"]["role"] == "owner"
+
+    def test_invite_owner_posts_email(self, mock_client):
+        mock_client.post.return_value = {"role": "owner", "email": "founder@acme.com"}
+        result = admin.handle_org_invite_owner(mock_client, Namespace(org_id="o_1", email="founder@acme.com"))
+        mock_client.post.assert_called_once_with(
+            "/api/v1/admin/organizations/o_1/owner-invite",
+            json={"email": "founder@acme.com"},
+        )
+        assert result["role"] == "owner"
+
+    def test_revoke_invite_posts_email(self, mock_client):
+        mock_client.post.return_value = {"org_id": "o_1", "email": "founder@acme.com", "revoked": 1}
+        result = admin.handle_org_revoke_invite(mock_client, Namespace(org_id="o_1", email="founder@acme.com"))
+        mock_client.post.assert_called_once_with(
+            "/api/v1/admin/organizations/o_1/owner-invite/revoke",
+            json={"email": "founder@acme.com"},
+        )
+        assert result["revoked"] == 1
+
+    def test_create_parser_accepts_owner_email(self):
+        from argparse import ArgumentParser
+
+        parser = ArgumentParser()
+        admin.register(parser.add_subparsers())
+        args = parser.parse_args(["admin", "org", "create", "Acme", "--owner-email", "founder@acme.com"])
+        assert args.owner_email == "founder@acme.com"
+        assert args.func is admin.handle_org_create
+        args = parser.parse_args(["admin", "org", "invite", "o_1", "founder@acme.com"])
+        assert args.func is admin.handle_org_invite_owner
+        args = parser.parse_args(["admin", "org", "revoke-invite", "o_1", "founder@acme.com"])
+        assert args.func is admin.handle_org_revoke_invite
+
     def test_set_owner_posts_and_confirms(self, mock_client):
         mock_client.post.return_value = None  # 204 No Content
         result = admin.handle_org_set_owner(mock_client, Namespace(org_id="o_1", email="owner@acme.com"))

{cmpnd-0.28.0 → cmpnd-0.30.0}/uv.lock

@@ -496,7 +496,7 @@ wheels = [
 
 [[package]]
 name = "cmpnd"
-version = "0.28.0"
+version = "0.30.0"
 source = { editable = "." }
 dependencies = [
     { name = "dspy" },