cmpnd 0.68.0__tar.gz → 0.69.0__tar.gz

{cmpnd-0.68.0 → cmpnd-0.69.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: cmpnd
-Version: 0.68.0
+Version: 0.69.0
 Summary: DSPy observability and deployment SDK for cmpnd
 Project-URL: Homepage, https://cmpnd.ai
 Author-email: cmpnd <hello@cmpnd.ai>

{cmpnd-0.68.0 → cmpnd-0.69.0}/cmpnd/_authored_import.py

@@ -263,7 +263,6 @@ def _program_facts(
     lm = packaging._extract_lm_object(program)
     lm_kwargs = getattr(lm, "kwargs", {}) if lm is not None else {}
     facts = ProgramFacts(
-        program_signature_hash=identity.compute_program_hash(program),
         entrypoint_kind=kind,
         module_class=type(program).__name__,
         litellm_model=getattr(lm, "model", None),

{cmpnd-0.68.0 → cmpnd-0.69.0}/cmpnd/authored.py

@@ -43,7 +43,6 @@ class SourceCheckError(ValueError):
 class ProgramFacts:
     """Facts derived by importing the staged program without calling forward."""
 
-    program_signature_hash: int | None = None
     entrypoint_kind: str = "instance"
     module_class: str | None = None
     signature_name: str | None = None
@@ -72,11 +71,7 @@ class ProgramFacts:
 
     def deploy_body(self) -> dict[str, Any]:
         """Return fields the deployment create route accepts."""
-        from . import identity
-
         body: dict[str, Any] = {}
-        if self.program_signature_hash is not None:
-            body["program_signature_hash"] = identity.format_signature_hash(self.program_signature_hash)
         for name in (
             "module_class",
             "signature_name",

{cmpnd-0.68.0 → cmpnd-0.69.0}/cmpnd/deployment.py

@@ -527,13 +527,10 @@ def deploy_module_under(
     # Package the module
     zip_bytes = packaging.generate_source_zip(module, metric, mcp_tools=pinned_mcp_tools)
 
-    # Compute program identity via the IR reflector on the live module (class
-    # tag included); the signature is kept around only for display metadata.
+    # The deployment names its program by id alone; the signature only describes it.
     sig = packaging._get_module_signature(module)
-    program_signature_hash = identity.compute_program_hash(module) or 0
 
     deploy_body: dict[str, Any] = {
-        "program_signature_hash": identity.format_signature_hash(program_signature_hash),
         # Declare the ZIP's exact length so the server can reject an oversized
         # deploy before the upload.
         "declared_content_length": len(zip_bytes),

{cmpnd-0.68.0 → cmpnd-0.69.0}/docs/sdk-instrumentation.md

@@ -803,7 +803,9 @@ name form. A program name wins over the config's id. `configure()`
 checks the id's shape and raises `ValueError` on a bad one, and a `Config` built directly
 is checked the same way.
 
-The id rides every body that can declare a program, beside `program_signature_hash`:
+The id rides every body that can declare a program. A deployment create names its program
+by the id alone and sends no `program_signature_hash`. The other bodies still carry the
+hash beside the id:
 
 | Body | Where | Built by |
 |---|---|---|

{cmpnd-0.68.0 → cmpnd-0.69.0}/pyproject.toml

@@ -5,7 +5,7 @@ name = "cmpnd"
 # it's new) — no git tags. Bump with `uv version --bump {minor,patch}` or by
 # hand. Runtime `cmpnd.__version__` reads installed metadata, so it tracks
 # this automatically. See docs/plans/2026-07-02-sdk-pypi-tag-free-publish.md.
-version = "0.68.0"
+version = "0.69.0"
 description = "DSPy observability and deployment SDK for cmpnd"
 readme = "README.md"
 requires-python = ">=3.11"

{cmpnd-0.68.0 → cmpnd-0.69.0}/tests/e2e/test_deploy_programs.py

@@ -219,7 +219,6 @@ class TestDeployBadImportRejected:
             create_resp = client.post(
                 f"{config.endpoint}/api/v1/deployments",
                 json={
-                    "program_signature_hash": 0,
                     "declared_content_length": len(zip_bytes),
                     "program_id": program_id_for(f"test_deploy_programs-{uuid.uuid4().hex[:8]}"),
                     # A worker that spends egress tokens needs the model a token names, so

{cmpnd-0.68.0 → cmpnd-0.69.0}/tests/e2e/test_optimize_loop.py

@@ -32,7 +32,6 @@ import dspy
 import pytest
 
 import cmpnd
-from tests import _identity_helpers
 from tests.e2e import committee_task, fake_lm
 from tests.e2e.helpers import named_program, platform_client, poll_until, program_id_for
 from tests.e2e.target_capabilities import needs_an_optimizer
@@ -190,7 +189,6 @@ class TestOptimizeGepaDeployDetail:
 
     def test_gepa_deploy_run_stamps_traces_and_lands_detail(self, deployed_source, program_id, server_client):
         program, trainset, valset, deployed = deployed_source
-        sig_hash = _identity_helpers.program_hash_for_sig(program.signature)
         before = time.time()
 
         platform_client().optimize_deployment(
@@ -210,10 +208,10 @@ class TestOptimizeGepaDeployDetail:
 
         # Correlate to THIS run through the optimization index, not by scanning
         # the trace stream: `deployed_source` is module-scoped, so every other test
-        # in this file emits traces under the SAME program_signature_hash. This run
-        # is the only one of this optimizer + signature started after `before`.
-        # (The optimization search is not filtered by program_signature_hash, so
-        # match it on the returned row, which surfaces it.)
+        # in this file emits traces under the SAME program. This run is the only
+        # one of this optimizer + program started after `before`. A run serve
+        # starts names its deployment's program_id. The optimization search does
+        # not filter by program, so match it on the returned row, which carries it.
         #
         # Poll, don't sleep-once: on serve the deploy run's detail + traces land
         # via a background completion watcher (5s poll cadence) AFTER optimize_deployment()
@@ -228,11 +226,11 @@ class TestOptimizeGepaDeployDetail:
                 order_direction="desc",
                 per_page=50,
             ).get("optimization_runs", [])
-            return [r for r in runs if str(r.get("program_signature_hash")) == str(sig_hash)]
+            return [r for r in runs if r.get("program_id") == program_id]
 
         mine = poll_until(_find_run, timeout=60.0, interval=3.0)
         assert mine, (
-            f"no GEPA optimization run for program_signature_hash={sig_hash} after {start_from} "
+            f"no GEPA optimization run for program_id={program_id} after {start_from} "
             "(serve completion watcher didn't land it within 60s)"
         )
         run_id = mine[0]["run_id"]
@@ -254,9 +252,7 @@ class TestOptimizeGepaDeployDetail:
         assert candidates, f"GEPA deploy run {run_id} landed a header but no candidate detail (CMP-323)"
 
         # The worker's tracker stamps the run id onto the run's traces (the collector
-        # stamps only deployment_id), and serve carries the int64
-        # program_signature_hash through the poll without float-rounding it, so the
-        # run row matches this signature. Its traces land under the deployment's program.
+        # stamps only deployment_id), and the traces land under the deployment's program.
         # Page wide (page_size=500, the API max) so this run's few traces aren't crowded
         # out of the default window by the other tests' runs — module-scoped
         # `deployed_source` means they all share this program —

{cmpnd-0.68.0 → cmpnd-0.69.0}/tests/test_authored.py

@@ -142,8 +142,9 @@ def test_bundle_pins_tools_without_importing_the_program_twice(monkeypatch):
     check.assert_called_once()
 
 
-def test_deploy_body_omits_unknown_hash_and_trace_limits():
+def test_deploy_body_omits_trace_limits_and_sends_no_hash():
     assert authored.ProgramFacts.minimal().deploy_body() == {}
+    assert "program_signature_hash" not in authored.ProgramFacts(module_class="Predict").deploy_body()
 
 
 def test_deploy_body_preserves_empty_signature_field_lists():

{cmpnd-0.68.0 → cmpnd-0.69.0}/tests/test_deploy.py

@@ -414,7 +414,8 @@ class TestDeploy:
         create_call = client.post.call_args_list[0]
         assert "ct_test_key" in str(create_call)
 
-    def test_sends_program_signature_hash(self, mock_httpx):
+    def test_sends_no_program_signature_hash(self, mock_httpx):
+        # A deployment names its program by id alone.
         client = self._setup_mocks(mock_httpx)
 
         with mock.patch.object(deployment, "time") as mock_time:
@@ -425,9 +426,7 @@ class TestDeploy:
 
         create_call = client.post.call_args_list[0]
         body = create_call.kwargs.get("json", {})
-        assert "program_signature_hash" in body
-        # CMP-331: carried as a quoted decimal string on the wire, not a number.
-        assert isinstance(body["program_signature_hash"], str)
+        assert "program_signature_hash" not in body
 
     def test_sends_the_programs_signature(self, mock_httpx):
         # A program's signature is known the moment the module is packaged, and the

{cmpnd-0.68.0 → cmpnd-0.69.0}/tests/test_deploy_program_id.py

@@ -108,7 +108,7 @@ class TestDeployBody:
             lambda: deployment.deploy_module_under(dspy.Predict("question -> answer"), None, 300, None, None, config)
         )
         assert "program_id" not in body
-        assert "program_signature_hash" in body
+        assert "program_signature_hash" not in body
 
     def test_an_undeclared_bundle_deploy_omits_the_key(self):
         _configure()

{cmpnd-0.68.0 → cmpnd-0.69.0}/uv.lock

@@ -505,7 +505,7 @@ wheels = [
 
 [[package]]
 name = "cmpnd"
-version = "0.68.0"
+version = "0.69.0"
 source = { editable = "." }
 default-groups = ["dspy-3-4-1"]
 dependencies = [