getstack 1.4.0__tar.gz → 2.0.0__tar.gz

{getstack-1.4.0 → getstack-2.0.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: getstack
-Version: 1.4.0
+Version: 2.0.0
 Summary: Python SDK for STACK — trust infrastructure for AI agents
 Project-URL: Homepage, https://getstack.run
 Project-URL: Documentation, https://getstack.run/docs/sdk

{getstack-1.4.0 → getstack-2.0.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "getstack"
-version = "1.4.0"
+version = "2.0.0"
 description = "Python SDK for STACK — trust infrastructure for AI agents"
 readme = "README.md"
 license = "MIT"

{getstack-1.4.0 → getstack-2.0.0}/src/getstack/_async/partner_tenants.py

@@ -1,4 +1,4 @@
-"""Async mirror of PartnerTenantsService (Phase 5.6)."""
+"""Async mirror of PartnerTenantsService (white-label tenants)."""
 
 from __future__ import annotations
 
@@ -8,8 +8,6 @@ from urllib.parse import quote
 from ..client import AsyncHttpClient
 
 
-Tier = Literal["free", "developer", "pro", "business", "enterprise"]
-
 
 class AsyncPartnerTenantsService:
     def __init__(self, client: AsyncHttpClient):
@@ -18,23 +16,36 @@ class AsyncPartnerTenantsService:
     async def create(
         self,
         external_customer_id: Optional[str] = None,
-        tier: Optional[Tier] = None,
     ) -> dict[str, Any]:
+        """Create a white-label tenant.
+
+        Tenants have no plan of their own; they draw from your allowance
+        and wallet. Returns operator_id, api_key (shown once — store it),
+        external_customer_id, tier ('partner'), billing ('partner') and
+        created_at. Raises with code TENANT_LIMIT_REACHED (409) when your
+        deal caps the tenant count.
+        """
         body: dict[str, Any] = {}
         if external_customer_id is not None:
             body["external_customer_id"] = external_customer_id
-        if tier is not None:
-            body["tier"] = tier
         return await self._client.post("/v1/partner/tenants", json=body)
 
     async def list(self) -> list[dict[str, Any]]:
+        """List your tenants. Each carries ``usage`` ({period, actions}):
+        its month-to-date share of your action pool, when available."""
         res = await self._client.get("/v1/partner/tenants")
         return list(res.get("tenants", []))
 
     async def get(self, tenant_id: str) -> dict[str, Any]:
+        """Fetch one tenant (same shape as a ``list`` entry)."""
         return await self._client.get(f"/v1/partner/tenants/{tenant_id}")
 
     async def revoke(self, tenant_id: str) -> dict[str, Any]:
+        """Revoke a tenant. Cascades to its inbound webhooks and passports.
+
+        Returns {transitioned, webhooks_revoked, passports_revoked}.
+        Idempotent: a retry finishes a cascade that failed part-way.
+        """
         return await self._client.delete(f"/v1/partner/tenants/{tenant_id}")
 
     async def create_inbound_webhook(

{getstack-1.4.0 → getstack-2.0.0}/src/getstack/partner_connect.py

@@ -6,8 +6,9 @@ the account exists, and returns an opaque ``sk_grant_*`` token you
 attach to the calls you already make — same Bearer header, scoped to
 what the grant created, revocable by the user under /services.
 
-Supersedes the Phase 5.6 child-tenant OWNERSHIP semantics; the tenant
-surface remains available through its deprecation window.
+This is the user-owned partner model. For white-label deployment, where
+you provision and manage the customer's account yourself, use the tenant
+surface (``partner_tenants``) instead.
 
 Near-zero integration::
 

{getstack-1.4.0 → getstack-2.0.0}/src/getstack/partner_tenants.py

@@ -1,8 +1,21 @@
-"""Partner-tenancy surface (Phase 5.6).
+"""White-label tenants — partner surface.
 
-Platform partners (AgentMail, Cofounder, etc.) with is_partner=True on
-their operator row provision isolated child operators on behalf of
-their customers via this service.
+Platform partners (is_partner=True on their operator row) run STACK under
+their own product: each customer gets an isolated child operator that the
+partner provisions and manages. This is the white-label alternative to
+"Connect with STACK" (``partner_connect.connect``), where the customer owns
+their own STACK account.
+
+Tenants have no plan of their own. Every tenant draws from the partner's
+single allowance and wallet, under the partner's negotiated limits.
+
+Error codes worth handling (``StackError.code``):
+
+- TENANT_TIER_NOT_ALLOWED (400): ``tier`` was sent on create.
+- TENANT_LIMIT_REACHED (409): the partner's deal caps the tenant count.
+- ALLOWANCE_EXHAUSTED (402): the pool hit a negotiated hard cap.
+- TENANT_BILLED_BY_PARTNER (403): a tenant key called a billing mutation.
+- BILLING_ACCOUNT_INACTIVE (403): the tenant's partner is suspended or removed.
 """
 
 from __future__ import annotations
@@ -13,8 +26,6 @@ from urllib.parse import quote
 from .client import HttpClient
 
 
-Tier = Literal["free", "developer", "pro", "business", "enterprise"]
-
 
 class PartnerTenantsService:
     def __init__(self, client: HttpClient):
@@ -23,23 +34,36 @@ class PartnerTenantsService:
     def create(
         self,
         external_customer_id: Optional[str] = None,
-        tier: Optional[Tier] = None,
     ) -> dict[str, Any]:
+        """Create a white-label tenant.
+
+        Tenants have no plan of their own; they draw from your allowance
+        and wallet. Returns operator_id, api_key (shown once — store it),
+        external_customer_id, tier ('partner'), billing ('partner') and
+        created_at. Raises with code TENANT_LIMIT_REACHED (409) when your
+        deal caps the tenant count.
+        """
         body: dict[str, Any] = {}
         if external_customer_id is not None:
             body["external_customer_id"] = external_customer_id
-        if tier is not None:
-            body["tier"] = tier
         return self._client.post("/v1/partner/tenants", json=body)
 
     def list(self) -> list[dict[str, Any]]:
+        """List your tenants. Each carries ``usage`` ({period, actions}):
+        its month-to-date share of your action pool, when available."""
         res = self._client.get("/v1/partner/tenants")
         return list(res.get("tenants", []))
 
     def get(self, tenant_id: str) -> dict[str, Any]:
+        """Fetch one tenant (same shape as a ``list`` entry)."""
         return self._client.get(f"/v1/partner/tenants/{tenant_id}")
 
     def revoke(self, tenant_id: str) -> dict[str, Any]:
+        """Revoke a tenant. Cascades to its inbound webhooks and passports.
+
+        Returns {transitioned, webhooks_revoked, passports_revoked}.
+        Idempotent: a retry finishes a cascade that failed part-way.
+        """
         return self._client.delete(f"/v1/partner/tenants/{tenant_id}")
 
     def create_inbound_webhook(

{getstack-1.4.0 → getstack-2.0.0}/src/getstack/proxy.py

@@ -174,6 +174,8 @@ class ProxyService:
     def usage(self) -> dict:
         """Get monthly proxy usage stats.
 
-        Returns dict with: tier, limit, used, remaining, period.
+        Returns dict with: tier (the plan the account draws from), limit,
+        used, remaining, period, and pooled=True on white-label tenants,
+        whose counts are the partner's shared pool.
         """
         return self._client.request("GET", "/v1/proxy/usage")

{getstack-1.4.0 → getstack-2.0.0}/src/getstack/scan.py

@@ -72,6 +72,8 @@ class ScanService:
         """Get monthly scan usage stats.
 
         Returns:
-            Dict with keys: tier, limit, used, remaining, period.
+            Dict with keys: tier (the plan the account draws from), limit,
+            used, remaining, period, and pooled=True on white-label tenants,
+            whose counts are the partner's shared pool.
         """
         return self._client.request("GET", "/v1/scan/usage")

{getstack-1.4.0 → getstack-2.0.0}/src/getstack/usage.py

@@ -50,6 +50,10 @@ class UsageService:
             {used, limit, created_in_window?}), passthrough (None under a since/until
             window - those counters only exist for the current month),
             spend_cents (skills / llm_compute / identity / overage / total),
+            For pooled accounts (white-label tenants and their partners),
+            consumption.actions also carries pooled=True, own_used (this
+            account's share) and tenants (accounts sharing the pool), and
+            its ``used`` is the whole pool total.
             wallet_cents ({balance}), and earnings_cents ({unpaid, lifetime}).
             All money in cents.
         """

getstack-2.0.0/tests/test_partner_signing.py

@@ -0,0 +1,69 @@
+"""White-label tenant service: create without tier, revoke cascade, signing setup."""
+import asyncio
+import sys
+from pathlib import Path
+from unittest.mock import AsyncMock, Mock
+
+sys.path.insert(0, str(Path(__file__).resolve().parents[1] / "src"))
+
+from getstack.partner_tenants import PartnerTenantsService
+from getstack._async.partner_tenants import AsyncPartnerTenantsService
+
+
+def test_sync_tenant_signing():
+    client = Mock()
+    client.put.return_value = {"configured": True}
+    result = PartnerTenantsService(client).set_inbound_webhook_signing_secret(
+        "tenant fixture", "wh/fixture", "synthetic-provider", "synthetic-downstream",
+    )
+    assert result == {"configured": True}
+    client.put.assert_called_once_with(
+        "/v1/partner/tenants/tenant%20fixture/inbound-webhooks/wh%2Ffixture/provider-signing-secret",
+        json={"signing_secret": "synthetic-provider", "downstream_signing_secret": "synthetic-downstream"},
+    )
+
+
+def test_async_tenant_signing():
+    client = Mock()
+    client.put = AsyncMock(return_value={"configured": True})
+    result = asyncio.run(AsyncPartnerTenantsService(client).set_inbound_webhook_signing_secret(
+        "tenant fixture", "wh/fixture", "synthetic-provider",
+    ))
+    assert result == {"configured": True}
+    client.put.assert_awaited_once_with(
+        "/v1/partner/tenants/tenant%20fixture/inbound-webhooks/wh%2Ffixture/provider-signing-secret",
+        json={"signing_secret": "synthetic-provider"},
+    )
+
+
+def test_sync_tenant_create_sends_no_tier():
+    client = Mock()
+    client.post.return_value = {"operator_id": "op_t", "tier": "partner", "billing": "partner"}
+    service = PartnerTenantsService(client)
+    result = service.create(external_customer_id="cust_1")
+    assert result["billing"] == "partner"
+    client.post.assert_called_once_with("/v1/partner/tenants", json={"external_customer_id": "cust_1"})
+    try:
+        service.create(external_customer_id="cust_2", tier="pro")  # type: ignore[call-arg]
+    except TypeError:
+        pass
+    else:
+        raise AssertionError("create must not accept tier; tenants draw from the partner's plan")
+
+
+def test_async_tenant_create_sends_no_tier():
+    client = Mock()
+    client.post = AsyncMock(return_value={"operator_id": "op_t", "tier": "partner", "billing": "partner"})
+    asyncio.run(AsyncPartnerTenantsService(client).create())
+    client.post.assert_awaited_once_with("/v1/partner/tenants", json={})
+
+
+def test_tenant_revoke_returns_cascade_counts():
+    cascade = {"transitioned": True, "webhooks_revoked": 2, "passports_revoked": 3}
+    client = Mock()
+    client.delete.return_value = cascade
+    assert PartnerTenantsService(client).revoke("op_t") == cascade
+    client.delete.assert_called_once_with("/v1/partner/tenants/op_t")
+    aclient = Mock()
+    aclient.delete = AsyncMock(return_value=cascade)
+    assert asyncio.run(AsyncPartnerTenantsService(aclient).revoke("op_t")) == cascade

getstack-1.4.0/tests/test_partner_signing.py

@@ -1,36 +0,0 @@
-"""Tenant signing setup sends fixture keys in the body, never the URL."""
-import asyncio
-import sys
-from pathlib import Path
-from unittest.mock import AsyncMock, Mock
-
-sys.path.insert(0, str(Path(__file__).resolve().parents[1] / "src"))
-
-from getstack.partner_tenants import PartnerTenantsService
-from getstack._async.partner_tenants import AsyncPartnerTenantsService
-
-
-def test_sync_tenant_signing():
-    client = Mock()
-    client.put.return_value = {"configured": True}
-    result = PartnerTenantsService(client).set_inbound_webhook_signing_secret(
-        "tenant fixture", "wh/fixture", "synthetic-provider", "synthetic-downstream",
-    )
-    assert result == {"configured": True}
-    client.put.assert_called_once_with(
-        "/v1/partner/tenants/tenant%20fixture/inbound-webhooks/wh%2Ffixture/provider-signing-secret",
-        json={"signing_secret": "synthetic-provider", "downstream_signing_secret": "synthetic-downstream"},
-    )
-
-
-def test_async_tenant_signing():
-    client = Mock()
-    client.put = AsyncMock(return_value={"configured": True})
-    result = asyncio.run(AsyncPartnerTenantsService(client).set_inbound_webhook_signing_secret(
-        "tenant fixture", "wh/fixture", "synthetic-provider",
-    ))
-    assert result == {"configured": True}
-    client.put.assert_awaited_once_with(
-        "/v1/partner/tenants/tenant%20fixture/inbound-webhooks/wh%2Ffixture/provider-signing-secret",
-        json={"signing_secret": "synthetic-provider"},
-    )