agentic-runner 3.0.0__tar.gz → 3.1.0__tar.gz

{agentic_runner-3.0.0 → agentic_runner-3.1.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: agentic-runner
-Version: 3.0.0
+Version: 3.1.0
 Summary: The Agentic OS Runner: an activity-only Temporal executor for workspaces, Agent Runtimes and verb seams
 License-Expression: AGPL-3.0-only
 License-File: LICENSE

{agentic_runner-3.0.0 → agentic_runner-3.1.0}/src/agentic_runner/__init__.py

@@ -7,6 +7,6 @@ stay on the platform; this package imports none of them, and a CI partition test
 (``tests/test_package_partition.py``) fails the build if that changes.
 """
 
-__version__ = "3.0.0"
+__version__ = "3.1.0"
 
 __all__ = ["__version__"]

agentic_runner-3.1.0/src/agentic_runner/build.py

@@ -0,0 +1,33 @@
+"""This build's own digest: the ``build_id`` a Runner reports and a release publishes.
+
+Its own module, with no Runner import, because registration (the bootstrap request) and
+the workstation (the heartbeat attestation) both need it and the workstation imports
+registration. The release pipeline calls it on the installed wheel and on the image, so
+any change to how it is computed changes every published ``build-id.txt`` with it.
+"""
+
+from __future__ import annotations
+
+from hashlib import sha256
+from pathlib import Path
+
+import agentic_runner
+
+__all__ = ["build_id"]
+
+_PACKAGE = Path(agentic_runner.__file__).parent
+
+
+def build_id(package: Path = _PACKAGE) -> str:
+    """The SHA-256 of the package's ``.py`` sources, path and bytes, in sorted order.
+
+    Self-reported build identity (12 B7), not a signature: the consoles say
+    "self-reported" beside it. Only ``.py`` files count, so a wheel, the image and a
+    Homebrew install of one release give the same value whatever bytecode each compiled.
+    """
+
+    digest = sha256()
+    for source in sorted(package.rglob("*.py")):
+        digest.update(source.relative_to(package).as_posix().encode())
+        digest.update(source.read_bytes())
+    return digest.hexdigest()

{agentic_runner-3.0.0 → agentic_runner-3.1.0}/src/agentic_runner/registration.py

@@ -33,6 +33,7 @@ from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PrivateKey
 from pydantic import BaseModel, ConfigDict
 
 from agentic_runner import __version__ as runner_version
+from agentic_runner.build import build_id
 from agentic_runner.private_state import private_read, private_write
 from agentic_runner_contracts import __version__ as contracts_version
 from agentic_runner_contracts.channel_messages import TRANSCRIPT_DELIVERIES_PATH, TranscriptDelivery
@@ -252,6 +253,7 @@ class RunnerRegistrationClient:
             runner_version=runner_version,
             recipient_key=recipient_key,
             max_concurrent_directives=max_concurrent_directives,
+            build_id=build_id(),
         )
         payload = await self._post(BOOTSTRAP_PATH, content=request.model_dump_json(), headers={})
         response = BootstrapResponse.model_validate(payload)

{agentic_runner-3.0.0 → agentic_runner-3.1.0}/src/agentic_runner/testing/control_plane.py

@@ -175,6 +175,10 @@ class FakeControlPlane:
                 "isolation_modes": sorted({b.isolation_mode.value for b in self.bootstraps}),
                 "heartbeats": len(self.heartbeats),
                 "heartbeat_runner_ids": sorted({str(r) for r in self.heartbeat_runner_ids}),
+                "bootstrap_build_ids": sorted({b.build_id or "" for b in self.bootstraps}),
+                "heartbeat_build_ids": sorted(
+                    {h.attestation.build_id if h.attestation else "" for h in self.heartbeats}
+                ),
                 "directive_tokens": len(self.directive_tokens),
                 "evidence": len(self.evidence),
                 "refusals": [f"{r.method} {r.path} {r.status} {r.reason}" for r in self.refusals],

{agentic_runner-3.0.0 → agentic_runner-3.1.0}/src/agentic_runner/workstation.py

@@ -36,7 +36,6 @@ import tempfile
 from collections.abc import Callable, Mapping, Sequence
 from dataclasses import dataclass
 from datetime import UTC, datetime
-from hashlib import sha256
 from pathlib import Path
 from typing import Any, Final
 from xml.sax.saxutils import escape
@@ -44,8 +43,8 @@ from xml.sax.saxutils import escape
 import httpx
 from pydantic import BaseModel, ConfigDict
 
-import agentic_runner
 from agentic_runner import service
+from agentic_runner.build import build_id
 from agentic_runner.host_store import open_workstation_store
 from agentic_runner.lifecycle import LifecycleOutbox
 from agentic_runner.registration import load_state
@@ -333,22 +332,6 @@ def cli_versions(found: Mapping[str, str], *, run: Run = subprocess.run) -> list
 # ------------------------------------------------------------------ attestation
 
 
-def build_id() -> str:
-    """A digest of this build's own source: self-reported build identity (12 B7).
-
-    Not a signature and not claimed to be one -- the consoles say "self-reported" beside
-    it. What it buys is that two Runners reporting the same version but running
-    different code show different ids.
-    """
-
-    package = Path(agentic_runner.__file__).parent
-    digest = sha256()
-    for source in sorted(package.rglob("*.py")):
-        digest.update(source.relative_to(package).as_posix().encode())
-        digest.update(source.read_bytes())
-    return digest.hexdigest()[:16]
-
-
 def os_release() -> str:
     system = re.sub(r"[^a-z0-9_]", "", platform_module.system().lower())[:16] or "unknown"
     release = re.sub(r"[^0-9A-Za-z._+-]", "", platform_module.release())[:48]