agentic-runner-contracts 3.4.2__tar.gz → 3.6.0__tar.gz

{agentic_runner_contracts-3.4.2 → agentic_runner_contracts-3.6.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: agentic-runner-contracts
-Version: 3.4.2
+Version: 3.6.0
 Summary: Activity I/O contracts and Public Metadata name builders shared by the Agentic OS platform and the installable Runner
 License-Expression: AGPL-3.0-only
 License-File: LICENSE

{agentic_runner_contracts-3.4.2 → agentic_runner_contracts-3.6.0}/src/agentic_runner_contracts/__init__.py

@@ -32,6 +32,16 @@ the package the floor is *about*, and read back through ``agentic-runner --versi
 # Additive; an older payload parses with no Skills. But the context forbids extra keys,
 # so a Runner one minor behind refuses a context that carries `skills` -- the platform
 # must not send the field until its Runners are on 2.7.
-__version__ = "3.4.2"
+# 3.5.0 (local-agents 12): `WorkerRuntimeContext.cli_kind` widens from the two known
+# kinds to the registration pattern `^[a-z][a-z0-9_]{0,31}$`. Additive: every payload that
+# parsed still parses; a Runner one minor behind refuses a context naming a new kind, which
+# fails that Directive closed, and routing sends a kind only to a Runner that reports it.
+# 3.6.0 (local-agents 05): `ContractDeviceLoginInput.method`,
+# `ContractDeviceLoginResult.sign_in_id`, `ContractDeviceLoginStatusResult.auth_method` /
+# `subscription_type`, `SealedSignInCode` on `HeartbeatAck.sign_in_codes` and
+# `SignInCodeRelay` on `HeartbeatEnvelope.sign_in_codes`. Additive; the envelope omits the
+# key while it is empty. But the ack forbids extra keys, so the platform must not relay a
+# code to a Runner below 3.6.
+__version__ = "3.6.0"
 
 __all__ = ["__version__"]

{agentic_runner_contracts-3.4.2 → agentic_runner_contracts-3.6.0}/src/agentic_runner_contracts/activity_io.py

@@ -1237,6 +1237,10 @@ class ContractDeviceLoginInput:
     # The Runner whose disk holds that harness root, and so whose queue the activity is
     # dispatched on (PRD issue 37). Optional only for a start that predates the split.
     runner_id: str | None = None
+    # Claude Code only (local-agents 05): `oauth_token` (`claude setup-token`, the
+    # long-lived token) or `claude_ai` (`claude auth login --claudeai`). None means
+    # `oauth_token`, and the only one a shared Runner accepts.
+    method: str | None = None
 
 
 @dataclass(frozen=True)
@@ -1254,8 +1258,11 @@ class ContractDeviceLoginResult:
     contract_id: str
     runtime_kind: str
     verification_uri: str
+    # Empty for Claude Code, whose flow has no device code: the browser shows the person a
+    # code to paste back instead, sealed and relayed against `sign_in_id`.
     user_code: str
     expires_at: str
+    sign_in_id: str = ""
 
 
 @dataclass(frozen=True)
@@ -1279,6 +1286,10 @@ class ContractDeviceLoginStatusResult:
     runtime_kind: str
     token_present: bool
     delivered_at: str | None
+    # Claude Code only, from `claude auth status --json` (local-agents 05): which login
+    # the CLI found (`oauth_token`, `claude.ai`) and the plan it reports.
+    auth_method: str | None = None
+    subscription_type: str | None = None
 
 
 class ContractDeviceLoginActivities(Protocol):
@@ -1298,7 +1309,7 @@ class ContractDeviceLoginStatusActivities(Protocol):
     async def check_contract_device_login_status(
         self, request: ContractDeviceLoginStatusInput
     ) -> ContractDeviceLoginStatusResult:
-        """Stat this Contract's harness token file; never open it."""
+        """Whether this Contract's harness is signed in; never opens its login."""
 
 
 @dataclass(frozen=True)

{agentic_runner_contracts-3.4.2 → agentic_runner_contracts-3.6.0}/src/agentic_runner_contracts/runner_registration.py

@@ -43,7 +43,12 @@ from pydantic import (
 
 from agentic_runner_contracts.channel_messages import TranscriptRequest
 from agentic_runner_contracts.llm_usage import UsageRecord
-from agentic_runner_contracts.sealed_credential import OpenedCredential, SealedCredential
+from agentic_runner_contracts.sealed_credential import (
+    OpenedCredential,
+    SealedCredential,
+    SealedSignInCode,
+    SignInCodeRelay,
+)
 from agentic_runner_contracts.user_sources import SourceStatus, UserSourceAssignment
 
 # 23 item 4 (Buildkite's own numbers): heartbeat every 30 s, stale at 3 min. Stale is a
@@ -544,15 +549,19 @@ class HeartbeatEnvelope(BaseModel):
     # Console-v2 issue 29: each Runner-hosted Tool Server's latest start, per slug. A
     # server not started since the process began is absent.
     tool_servers: list[ToolServerHealth] = Field(default_factory=list, max_length=64)
+    # Local-agents 05: what became of each sign-in code the last ack relayed.
+    sign_in_codes: list[SignInCodeRelay] = Field(default_factory=list, max_length=16)
 
     @model_serializer(mode="wrap")
-    def _omit_empty_tool_servers(self, handler: SerializerFunctionWrapHandler) -> Any:
-        # A control plane on contracts 2.5 forbids extra keys, so a Runner that started no
-        # Tool Server sends the body that control plane already parses. One that did needs
-        # the control plane on 2.6 first.
+    def _omit_empty_optional_lists(self, handler: SerializerFunctionWrapHandler) -> Any:
+        # An older control plane forbids extra keys, so a Runner with nothing to say in
+        # these sends the body that control plane already parses. One that has something
+        # needs the control plane on the contracts minor that added the field first.
         body = handler(self)
-        if isinstance(body, dict) and not body.get("tool_servers"):
-            body.pop("tool_servers", None)
+        if isinstance(body, dict):
+            for name in ("tool_servers", "sign_in_codes"):
+                if not body.get(name):
+                    body.pop(name, None)
         return body
 
 
@@ -600,6 +609,10 @@ class HeartbeatAck(BaseModel):
     # the control plane hands a request over on exactly one beat -- and answered on the
     # signed stream (`TRANSCRIPT_DELIVERIES_PATH`), never on the ack itself.
     transcript_requests: list[TranscriptRequest] = Field(default_factory=list, max_length=16)
+    # Local-agents 05: one-time browser sign-in codes, sealed to this installation's
+    # Recipient Key. Relayed once each, like `transcript_requests`; the outcome comes back
+    # on the next envelope's `sign_in_codes`.
+    sign_in_codes: list[SealedSignInCode] = Field(default_factory=list, max_length=16)
 
 
 class DirectiveTokenRequest(BaseModel):

{agentic_runner_contracts-3.4.2 → agentic_runner_contracts-3.6.0}/src/agentic_runner_contracts/runtime_context.py

@@ -9,9 +9,16 @@ the same reason: both sides resolve this context, through clients of their own.
 from __future__ import annotations
 
 import re
-from typing import Any, Literal, Protocol
-
-from pydantic import BaseModel, ConfigDict, Field, field_validator, model_validator
+from typing import Annotated, Any, Literal, Protocol
+
+from pydantic import (
+    BaseModel,
+    ConfigDict,
+    Field,
+    StringConstraints,
+    field_validator,
+    model_validator,
+)
 
 _FORBIDDEN_SECRET_VALUE_FIELDS = frozenset(
     {
@@ -98,7 +105,10 @@ class WorkerRuntimeContext(BaseModel):
 
     work_record_id: str
     profile_slug: str
-    cli_kind: Literal["codex_cli", "claude_code"]
+    # Any harness a Profile names, the pattern the Runner's registration already reports
+    # (local-agents 12 item 6). Which runtime serves it is the Runner's choice; a kind the
+    # Runner does not serve fails closed there.
+    cli_kind: Annotated[str, StringConstraints(pattern=r"^[a-z][a-z0-9_]{0,31}$")]
     repo: str
     base_branch: str
     reviewer: str | None = None

{agentic_runner_contracts-3.4.2 → agentic_runner_contracts-3.6.0}/src/agentic_runner_contracts/sealed_credential.py

@@ -33,6 +33,7 @@ import base64
 import binascii
 import hashlib
 from datetime import timedelta
+from enum import StrEnum
 from typing import Annotated, Final
 from uuid import UUID
 
@@ -43,11 +44,16 @@ __all__ = [
     "HONEST_STATEMENT",
     "RENEWAL_INTERVAL",
     "SEAL_DOMAIN",
+    "SIGN_IN_CODE_DOMAIN",
     "OpenedCredential",
     "SealedCredential",
+    "SealedSignInCode",
+    "SignInCodeOutcome",
+    "SignInCodeRelay",
     "SlotDelivery",
     "delivery_binding",
     "key_fingerprint",
+    "sign_in_code_binding",
 ]
 
 # Domain separation. Version it rather than the wire: a second construction would be a
@@ -55,6 +61,11 @@ __all__ = [
 # something it misread.
 SEAL_DOMAIN: Final[str] = "agentic-os/sealed-credential/v1"
 
+# A one-time sign-in code is sealed to the same Recipient Key but is not a credential slot
+# (local-agents 05): its own prefix means a code can never open as a slot value, nor a slot
+# value as a code.
+SIGN_IN_CODE_DOMAIN: Final[str] = "agentic-os/sign-in-code/v1"
+
 # 22 A7: the Runner regenerates its keypair on this cadence, re-seals every slot to the
 # new key and destroys the old private half only once every slot reports the new key id.
 RENEWAL_INTERVAL: Final[timedelta] = timedelta(days=30)
@@ -91,6 +102,21 @@ def delivery_binding(*, contract_id: UUID | str, slot: str, recipient_key_id: st
     return "|".join((SEAL_DOMAIN, str(contract_id), slot, recipient_key_id)).encode("utf-8")
 
 
+def sign_in_code_binding(
+    *, contract_id: UUID | str, sign_in_id: str, recipient_key_id: str
+) -> bytes:
+    """The AEAD associated data one sealed sign-in code is bound to (local-agents 05).
+
+    Bound to the sign-in the Runner started, so a code lifted from one sign-in and
+    replayed against another -- or another Contract's -- does not open. The browser builds
+    the same bytes in TypeScript; see :func:`delivery_binding` for why this lives here.
+    """
+
+    return "|".join((SIGN_IN_CODE_DOMAIN, str(contract_id), sign_in_id, recipient_key_id)).encode(
+        "utf-8"
+    )
+
+
 def key_fingerprint(public_key: str) -> str:
     """The Recipient Key's fingerprint, for out-of-band comparison (22 A4).
 
@@ -169,3 +195,46 @@ class SlotDelivery(BaseModel):
     delivered: int = Field(ge=0)
     stale: bool = False
     host_party: str = ""
+
+
+SignInId = Annotated[str, StringConstraints(pattern=r"^si_[0-9a-f]{32}$")]
+
+
+class SealedSignInCode(BaseModel):
+    """A one-time browser sign-in code, sealed to the Runner that started the sign-in.
+
+    Carried on the heartbeat ack once and never in a Temporal payload (local-agents 05):
+    the platform relays ciphertext it cannot open and deletes it on delivery or expiry.
+    """
+
+    model_config = ConfigDict(extra="forbid")
+
+    contract_id: UUID
+    sign_in_id: SignInId
+    recipient_key_id: KeyId
+    ciphertext: Annotated[str, StringConstraints(min_length=1, max_length=2048)]
+
+    def binding(self) -> bytes:
+        return sign_in_code_binding(
+            contract_id=self.contract_id,
+            sign_in_id=self.sign_in_id,
+            recipient_key_id=self.recipient_key_id,
+        )
+
+
+class SignInCodeOutcome(StrEnum):
+    """What the Runner did with one relayed code -- the reason the console shows."""
+
+    WRITTEN = "written"
+    UNKNOWN = "unknown"
+    EXPIRED = "expired"
+    UNOPENABLE = "unopenable"
+
+
+class SignInCodeRelay(BaseModel):
+    """One relayed code's outcome, reported on the next heartbeat. Never the code."""
+
+    model_config = ConfigDict(extra="forbid")
+
+    sign_in_id: SignInId
+    outcome: SignInCodeOutcome