cmpnd 0.29.0__tar.gz → 0.30.0__tar.gz

{cmpnd-0.29.0 → cmpnd-0.30.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: cmpnd
-Version: 0.29.0
+Version: 0.30.0
 Summary: DSPy observability and deployment SDK for cmpnd
 Project-URL: Homepage, https://cmpnd.ai
 Author-email: cmpnd <hello@cmpnd.ai>

{cmpnd-0.29.0 → cmpnd-0.30.0}/cmpnd/cli/commands/admin.py

@@ -3,7 +3,7 @@
 `cmpnd admin org create|invite|set-owner|list|show|set-limit|set-github-login|elect-owner`
 is the closed-beta org bootstrap and steward surface:
 stand up a shared org with its GitHub auto-join key, prepare one for a customer
-with a pre-approved owner invite (``create --owner-email``), anoint its first owner,
+with a pre-approved owner invite (``create --owner-email`` or ``invite``), anoint an owner,
 adjust its member cap or GitHub link, and grant ownership from the election
 queue. `cmpnd admin user …` is the operator's user-lifecycle surface (list,
 inspect, create, approve/reject the pending-signup queue, promote/demote admin,
@@ -51,11 +51,20 @@ def _register_org(sub: _SubParsersAction[ArgumentParser]) -> None:
     )
     create.set_defaults(func=handle_org_create)
 
-    invite_owner = osub.add_parser("invite", help="Mail a pre-approved owner invite into an org that has no owner")
+    invite_owner = osub.add_parser(
+        "invite", help="Mail someone a pre-approved invite that makes them an owner of the org when they accept"
+    )
     invite_owner.add_argument("org_id", help="Organization id")
     invite_owner.add_argument("email", help="The customer's email")
     invite_owner.set_defaults(func=handle_org_invite_owner)
 
+    revoke_invite = osub.add_parser(
+        "revoke-invite", help="Withdraw the open owner invites sent to an email, so the link stops working"
+    )
+    revoke_invite.add_argument("org_id", help="Organization id")
+    revoke_invite.add_argument("email", help="The email the invite was sent to")
+    revoke_invite.set_defaults(func=handle_org_revoke_invite)
+
     set_owner = osub.add_parser("set-owner", help="Make an existing user the org's owner")
     set_owner.add_argument("org_id", help="Organization id")
     set_owner.add_argument("email", help="Owner email (must already be a provisioned user)")
@@ -196,6 +205,13 @@ def handle_org_invite_owner(client: api_client.ApiClient, args: Any) -> Any:
     )
 
 
+def handle_org_revoke_invite(client: api_client.ApiClient, args: Any) -> Any:
+    return client.post(
+        f"/api/v1/admin/organizations/{args.org_id}/owner-invite/revoke",
+        json={"email": args.email},
+    )
+
+
 def handle_org_set_owner(client: api_client.ApiClient, args: Any) -> Any:
     # 204 No Content → post() returns None; synthesize a confirmation.
     client.post(f"/api/v1/admin/organizations/{args.org_id}/owner", json={"email": args.email})

{cmpnd-0.29.0 → cmpnd-0.30.0}/cmpnd/cli/verbs.py

@@ -149,6 +149,7 @@ DOMAIN_VERBS: dict[str, str] = {
     "disable": "suspends an account and keeps its rows — the reversible half of delete",
     "reset-password": "sets a credential the caller cannot read back, so it is not an update to a visible field",
     "elect-owner": "grants ownership out of the election queue, which has its own gate",
+    "revoke-invite": "withdraws the open owner invites to an address; bare revoke would read as revoking the org",
     "run": "invokes a deployment; the response is the point, and nothing is stored under that name",
     "follow": "tails a record until it settles — a list over time rather than a snapshot",
     "select": "marks one candidate as the program's chosen version",

{cmpnd-0.29.0 → cmpnd-0.30.0}/docs/cli.md

@@ -420,5 +420,45 @@ a pre-approved owner invite. The response carries the invite link as
 `owner_invite.url` in case the email does not arrive. When the customer redeems
 the link they become the org's owner, with no approval step, and `cmpnd admin
 org show` reports the org handed off (`seed.handoff_pending: false`). `cmpnd
-admin org invite ORG_ID EMAIL` does the same for an existing org that has
-no owner, and the server refuses an org that already has one.
+admin org invite ORG_ID EMAIL` does the same for an existing org, whatever
+owners it already has: the invite is the admin's anointment, no different from
+`set-owner`, so an org may gain as many owners this way as it wants. `cmpnd
+admin org revoke-invite ORG_ID EMAIL` withdraws the open owner invites sent to
+that address, so a mistaken link stops working; `cmpnd admin org show` lists
+the addresses still pending under `seed.pending_owner_emails`.
+
+The step-by-step way to prepare an org for a customer keeps every write under
+the operator's own identity:
+
+1. `cmpnd admin org create NAME` and `cmpnd admin org set-owner ORG_ID
+   YOUR_EMAIL` to create the org and own it.
+2. Prepare it with an ordinary key: deploy programs, register credentials,
+   set limits.
+3. `cmpnd admin org invite ORG_ID CUSTOMER_EMAIL` to mail the customer a
+   pre-approved owner invite. They accept and become an owner beside you.
+4. `cmpnd org leave ORG_ID` once they have accepted; a co-owner may leave.
+   Revoke the key from step 2 as well, so no dead key lingers.
+
+The customer then takes over with their own keys. Nothing the operator
+prepared is bound to the operator's membership: credentials and tool servers
+carry only the org, and a deployment keeps its creator after they leave.
+
+5. `cmpnd login` and `cmpnd auth me`: the org and the owner role.
+6. Rotate the credentials to their own: `cmpnd credentials create --target
+   PROVIDER` with the same target, and `cmpnd credentials create --kind mcp
+   --server URL --name NAME` with the same server and name, replace the sealed
+   keys in place; the tool server and the deployment keep pointing at them.
+7. `cmpnd tool-servers show SERVER_ID` and `cmpnd tool-servers refresh
+   SERVER_ID`: the tools and the allow-list, re-read under their key.
+8. `cmpnd ps`, `cmpnd sample ID`, `cmpnd run ID '<json>'`: the deployment runs
+   under their credential, and `cmpnd traces list` shows the trace as theirs.
+9. `cmpnd optimize gepa FILE --reflection-model MODEL --auto light` from the
+   program's source checkout, then `cmpnd optimizations show RUN_ID`: their
+   first optimization, spent on their own credential.
+
+Both sides then verify. The operator's `cmpnd admin org show ORG_ID` lists the
+customer as owner and not the operator, with `seed.handoff_pending` false and
+`seed.handed_off_to_email` the customer; the operator's step-2 key gets 401.
+The customer's `cmpnd ps`, `cmpnd run`, `cmpnd tool-servers show` and `cmpnd
+optimizations show` all succeed under the rotated credentials, and the web app
+shows them the program, its deployment, the traces and the optimization runs.

{cmpnd-0.29.0 → cmpnd-0.30.0}/pyproject.toml

@@ -5,7 +5,7 @@ name = "cmpnd"
 # it's new) — no git tags. Bump with `uv version --bump {minor,patch}` or by
 # hand. Runtime `cmpnd.__version__` reads installed metadata, so it tracks
 # this automatically. See docs/plans/2026-07-02-sdk-pypi-tag-free-publish.md.
-version = "0.29.0"
+version = "0.30.0"
 description = "DSPy observability and deployment SDK for cmpnd"
 readme = "README.md"
 requires-python = ">=3.10"

{cmpnd-0.29.0 → cmpnd-0.30.0}/tests/test_cli/test_admin.py

@@ -48,6 +48,15 @@ class TestAdminOrg:
         )
         assert result["role"] == "owner"
 
+    def test_revoke_invite_posts_email(self, mock_client):
+        mock_client.post.return_value = {"org_id": "o_1", "email": "founder@acme.com", "revoked": 1}
+        result = admin.handle_org_revoke_invite(mock_client, Namespace(org_id="o_1", email="founder@acme.com"))
+        mock_client.post.assert_called_once_with(
+            "/api/v1/admin/organizations/o_1/owner-invite/revoke",
+            json={"email": "founder@acme.com"},
+        )
+        assert result["revoked"] == 1
+
     def test_create_parser_accepts_owner_email(self):
         from argparse import ArgumentParser
 
@@ -58,6 +67,8 @@ class TestAdminOrg:
         assert args.func is admin.handle_org_create
         args = parser.parse_args(["admin", "org", "invite", "o_1", "founder@acme.com"])
         assert args.func is admin.handle_org_invite_owner
+        args = parser.parse_args(["admin", "org", "revoke-invite", "o_1", "founder@acme.com"])
+        assert args.func is admin.handle_org_revoke_invite
 
     def test_set_owner_posts_and_confirms(self, mock_client):
         mock_client.post.return_value = None  # 204 No Content

{cmpnd-0.29.0 → cmpnd-0.30.0}/uv.lock

@@ -496,7 +496,7 @@ wheels = [
 
 [[package]]
 name = "cmpnd"
-version = "0.29.0"
+version = "0.30.0"
 source = { editable = "." }
 dependencies = [
     { name = "dspy" },