agentic-runner 3.0.0__tar.gz → 3.1.1__tar.gz

{agentic_runner-3.0.0 → agentic_runner-3.1.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: agentic-runner
-Version: 3.0.0
+Version: 3.1.1
 Summary: The Agentic OS Runner: an activity-only Temporal executor for workspaces, Agent Runtimes and verb seams
 License-Expression: AGPL-3.0-only
 License-File: LICENSE

{agentic_runner-3.0.0 → agentic_runner-3.1.1}/src/agentic_runner/__init__.py

@@ -7,6 +7,6 @@ stay on the platform; this package imports none of them, and a CI partition test
 (``tests/test_package_partition.py``) fails the build if that changes.
 """
 
-__version__ = "3.0.0"
+__version__ = "3.1.1"
 
 __all__ = ["__version__"]

agentic_runner-3.1.1/src/agentic_runner/build.py

@@ -0,0 +1,33 @@
+"""This build's own digest: the ``build_id`` a Runner reports and a release publishes.
+
+Its own module, with no Runner import, because registration (the bootstrap request) and
+the workstation (the heartbeat attestation) both need it and the workstation imports
+registration. The release pipeline calls it on the installed wheel and on the image, so
+any change to how it is computed changes every published ``build-id.txt`` with it.
+"""
+
+from __future__ import annotations
+
+from hashlib import sha256
+from pathlib import Path
+
+import agentic_runner
+
+__all__ = ["build_id"]
+
+_PACKAGE = Path(agentic_runner.__file__).parent
+
+
+def build_id(package: Path = _PACKAGE) -> str:
+    """The SHA-256 of the package's ``.py`` sources, path and bytes, in sorted order.
+
+    Self-reported build identity (12 B7), not a signature: the consoles say
+    "self-reported" beside it. Only ``.py`` files count, so a wheel, the image and a
+    Homebrew install of one release give the same value whatever bytecode each compiled.
+    """
+
+    digest = sha256()
+    for source in sorted(package.rglob("*.py")):
+        digest.update(source.relative_to(package).as_posix().encode())
+        digest.update(source.read_bytes())
+    return digest.hexdigest()

{agentic_runner-3.0.0 → agentic_runner-3.1.1}/src/agentic_runner/registration.py

@@ -33,6 +33,7 @@ from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PrivateKey
 from pydantic import BaseModel, ConfigDict
 
 from agentic_runner import __version__ as runner_version
+from agentic_runner.build import build_id
 from agentic_runner.private_state import private_read, private_write
 from agentic_runner_contracts import __version__ as contracts_version
 from agentic_runner_contracts.channel_messages import TRANSCRIPT_DELIVERIES_PATH, TranscriptDelivery
@@ -68,6 +69,7 @@ INTAKE_IGNORED_PATH = "/api/runner/v1/runners/intake/ignored"
 # The refusal a revoked Runner's heartbeat earns (06 §2: revocation *is* the refused
 # heartbeat). The one reason this process stops on rather than retries.
 RUNNER_REVOKED_REASON = "runner_revoked"
+CONTROL_PLANE_OLDER_REASON = "control_plane_older"
 
 # What the state directory holds after a successful bootstrap. One file, mode 0600: the
 # private key is in it, and a Runner that loses it re-bootstraps rather than recovering.
@@ -252,6 +254,7 @@ class RunnerRegistrationClient:
             runner_version=runner_version,
             recipient_key=recipient_key,
             max_concurrent_directives=max_concurrent_directives,
+            build_id=build_id(),
         )
         payload = await self._post(BOOTSTRAP_PATH, content=request.model_dump_json(), headers={})
         response = BootstrapResponse.model_validate(payload)
@@ -344,9 +347,29 @@ def _refusal(response: httpx.Response) -> tuple[str, str]:
         detail = None
     if isinstance(detail, dict) and "reason" in detail:
         return str(detail["reason"]), str(detail.get("detail", detail["reason"]))
+    if unknown := _fields_the_control_plane_does_not_know(response.status_code, detail):
+        return CONTROL_PLANE_OLDER_REASON, (
+            f"the control plane is older than this Runner (agentic-runner {runner_version}, "
+            f"agentic-runner-contracts {contracts_version}): it does not know "
+            f"{', '.join(unknown)}. Install the agentic-runner release that matches the "
+            "control plane, or ask your Organisation's Admin to upgrade it."
+        )
     return "refused", f"{response.status_code}: {response.text[:200]}"
 
 
+def _fields_the_control_plane_does_not_know(status_code: int, detail: Any) -> list[str]:
+    # A strict request model (extra="forbid") answering 422 with nothing but
+    # `extra_forbidden` errors is version skew, not a bad token: this Runner's contracts
+    # added fields the control plane's pinned contracts have not caught up to (RR-13).
+    if status_code != 422 or not isinstance(detail, list) or not detail:
+        return []
+    if not all(
+        isinstance(error, dict) and error.get("type") == "extra_forbidden" for error in detail
+    ):
+        return []
+    return [str(error.get("loc", ["?"])[-1]) for error in detail]
+
+
 class SignedIntakeStream:
     """:class:`agentic_runner.user_sources.IntakeStream` over the signed outbound stream."""
 

{agentic_runner-3.0.0 → agentic_runner-3.1.1}/src/agentic_runner/testing/control_plane.py

@@ -175,6 +175,10 @@ class FakeControlPlane:
                 "isolation_modes": sorted({b.isolation_mode.value for b in self.bootstraps}),
                 "heartbeats": len(self.heartbeats),
                 "heartbeat_runner_ids": sorted({str(r) for r in self.heartbeat_runner_ids}),
+                "bootstrap_build_ids": sorted({b.build_id or "" for b in self.bootstraps}),
+                "heartbeat_build_ids": sorted(
+                    {h.attestation.build_id if h.attestation else "" for h in self.heartbeats}
+                ),
                 "directive_tokens": len(self.directive_tokens),
                 "evidence": len(self.evidence),
                 "refusals": [f"{r.method} {r.path} {r.status} {r.reason}" for r in self.refusals],

{agentic_runner-3.0.0 → agentic_runner-3.1.1}/src/agentic_runner/workstation.py

@@ -36,7 +36,6 @@ import tempfile
 from collections.abc import Callable, Mapping, Sequence
 from dataclasses import dataclass
 from datetime import UTC, datetime
-from hashlib import sha256
 from pathlib import Path
 from typing import Any, Final
 from xml.sax.saxutils import escape
@@ -44,8 +43,8 @@ from xml.sax.saxutils import escape
 import httpx
 from pydantic import BaseModel, ConfigDict
 
-import agentic_runner
 from agentic_runner import service
+from agentic_runner.build import build_id
 from agentic_runner.host_store import open_workstation_store
 from agentic_runner.lifecycle import LifecycleOutbox
 from agentic_runner.registration import load_state
@@ -333,22 +332,6 @@ def cli_versions(found: Mapping[str, str], *, run: Run = subprocess.run) -> list
 # ------------------------------------------------------------------ attestation
 
 
-def build_id() -> str:
-    """A digest of this build's own source: self-reported build identity (12 B7).
-
-    Not a signature and not claimed to be one -- the consoles say "self-reported" beside
-    it. What it buys is that two Runners reporting the same version but running
-    different code show different ids.
-    """
-
-    package = Path(agentic_runner.__file__).parent
-    digest = sha256()
-    for source in sorted(package.rglob("*.py")):
-        digest.update(source.relative_to(package).as_posix().encode())
-        digest.update(source.read_bytes())
-    return digest.hexdigest()[:16]
-
-
 def os_release() -> str:
     system = re.sub(r"[^a-z0-9_]", "", platform_module.system().lower())[:16] or "unknown"
     release = re.sub(r"[^0-9A-Za-z._+-]", "", platform_module.release())[:48]