agentic-runner 3.18.1__tar.gz → 3.18.3__tar.gz

{agentic_runner-3.18.1 → agentic_runner-3.18.3}/PKG-INFO

@@ -1,11 +1,11 @@
 Metadata-Version: 2.5
 Name: agentic-runner
-Version: 3.18.1
+Version: 3.18.3
 Summary: The Agentic OS Runner: an activity-only Temporal executor for workspaces, Agent Runtimes and verb seams
 License-Expression: AGPL-3.0-only
 License-File: LICENSE
 Requires-Python: >=3.12
-Requires-Dist: agentic-runner-contracts==3.18.1
+Requires-Dist: agentic-runner-contracts==3.18.3
 Requires-Dist: cryptography<51,>=50
 Requires-Dist: httpx<1.0,>=0.27
 Requires-Dist: pydantic-settings<3.0,>=2.0

{agentic_runner-3.18.1 → agentic_runner-3.18.3}/pyproject.toml

@@ -10,7 +10,7 @@ dependencies = [
   # Exactly this release's contracts: the two ship as one version, and an unpinned
   # requirement let `uv tool upgrade` keep an older contracts wheel the Runner cannot
   # import from (QTS-1473). `scripts/set-version.py` moves it with the version.
-  "agentic-runner-contracts==3.18.1",
+  "agentic-runner-contracts==3.18.3",
   # Imported directly by `registration.py` (the Ed25519 identity that signs every
   # heartbeat); already present transitively through pyjwt[crypto], declared because
   # we import it.

{agentic_runner-3.18.1 → agentic_runner-3.18.3}/src/agentic_runner/__init__.py

@@ -7,6 +7,6 @@ stay on the platform; this package imports none of them, and a CI partition test
 (``tests/test_package_partition.py``) fails the build if that changes.
 """
 
-__version__ = "3.18.1"
+__version__ = "3.18.3"
 
 __all__ = ["__version__"]

{agentic_runner-3.18.1 → agentic_runner-3.18.3}/src/agentic_runner/cli.py

@@ -13,8 +13,7 @@ the Organisation's cap.
 
 ``install | start | stop | status <org>`` and ``credential set`` are the workstation
 Runner (PRD issue 47, ``workstation.py``): one login agent per Organisation, managed by
-the user who hosts it, with no ``sudo`` anywhere. ``add <name>`` registers another Runner
-beside them, reusing their control plane and ``PATH`` (ADR-0022 §21).
+the user who hosts it, with no ``sudo`` anywhere.
 
 ``sign-in --contract <id>`` signs one Contract's Claude Code in with Anthropic's own flow,
 in this terminal, as that Contract's uid in its harness root (QTS-1448). No code or token
@@ -165,7 +164,9 @@ def main(argv: Sequence[str] | None = None) -> int:
         "--control-plane", default=os.environ.get(CONTROL_PLANE_ENV), help="control plane URL"
     )
     install.add_argument(
-        "--temporal-address", required=True, help="host:port, e.g. temporal-grpc.<zone>:443"
+        "--temporal-address",
+        default="",
+        help="host:port; a fallback only, the Runner uses the address its registration gives",
     )
     install.add_argument(
         "--temporal-plaintext",
@@ -180,21 +181,6 @@ def main(argv: Sequence[str] | None = None) -> int:
     )
     install.add_argument("--no-start", action="store_true", help="write the agent, do not start")
     install.add_argument("--root", default=None, type=Path, help="state root (default per OS)")
-
-    add = subcommands.add_parser(
-        "add",
-        help="register another Runner under this install, with its own process, identity "
-        "and Recipient Key (one per Contract)",
-    )
-    add.add_argument("org", metavar="name", help="the new Runner's name on this machine")
-    add.add_argument(
-        "--beside",
-        default=None,
-        help="the installed Runner whose control plane and PATH to reuse; needed only when "
-        "the installed Runners talk to different control planes",
-    )
-    add.add_argument("--no-start", action="store_true", help="write the agent, do not start")
-    add.add_argument("--root", default=None, type=Path, help="state root (default per OS)")
     for service_verb in ("start", "stop"):
         driven = subcommands.add_parser(
             service_verb, help=f"{service_verb} one Organisation's login agent"
@@ -328,7 +314,7 @@ def main(argv: Sequence[str] | None = None) -> int:
         if arguments.org:
             return workstation.run_process(_org_paths(arguments), login_agent=arguments.login_agent)
         return asyncio.run(service.run(attestation=_image_attestation()))
-    if arguments.command in {"install", "add", "start", "stop", "credential"}:
+    if arguments.command in {"install", "start", "stop", "credential"}:
         return _workstation(arguments)
     if arguments.command == "recipient-key":
         api, kube_ns = in_cluster()
@@ -375,8 +361,6 @@ def _workstation(arguments: argparse.Namespace) -> int:
     try:
         if arguments.command == "install":
             return _install(arguments, paths)
-        if arguments.command == "add":
-            return _add(arguments, paths)
         if arguments.command == "start":
             workstation.start(paths)
             print(f"started {paths.org}")
@@ -440,7 +424,11 @@ def _install(arguments: argparse.Namespace, paths: workstation.OrgPaths) -> int:
     except ValueError as error:
         print(str(error), file=sys.stderr)
         return 2
-    token = _registration_token()
+    # Pasted, never a flag: a flag is in the process table for every uid on the box.
+    token = registration_token_from_env() or getpass.getpass(
+        "Runner Registration Token (yours from /me/runners, or the Organisation Admin's for "
+        "an Organisation Runner): "
+    )
     settings = workstation.WorkstationSettings(
         org=paths.org,
         control_plane_url=arguments.control_plane,
@@ -450,19 +438,11 @@ def _install(arguments: argparse.Namespace, paths: workstation.OrgPaths) -> int:
         install_channel=workstation.install_channel(),
         acp_cli_kinds=acp_cli_kinds,
     )
-    return _register(paths, settings, token, start=not arguments.no_start)
-
-
-def _register(
-    paths: workstation.OrgPaths,
-    settings: workstation.WorkstationSettings,
-    token: str,
-    *,
-    start: bool,
-) -> int:
     try:
         lines = asyncio.run(
-            workstation.install(paths, settings, registration_token=token, start_service=start)
+            workstation.install(
+                paths, settings, registration_token=token, start_service=not arguments.no_start
+            )
         )
     except (workstation.CliMissingError, RunnerRegistrationError, RuntimeError) as error:
         print(f"install refused: {error}", file=sys.stderr)
@@ -472,19 +452,6 @@ def _register(
     return 0
 
 
-def _add(arguments: argparse.Namespace, paths: workstation.OrgPaths) -> int:
-    settings = workstation.settings_to_add(paths, beside=arguments.beside)
-    return _register(paths, settings, _registration_token(), start=not arguments.no_start)
-
-
-def _registration_token() -> str:
-    # Pasted, never a flag: a flag is in the process table for every uid on the box.
-    return registration_token_from_env() or getpass.getpass(
-        "Runner Registration Token (yours from /me/runners, or the Organisation Admin's for "
-        "an Organisation Runner): "
-    )
-
-
 def _acp_cli_kinds(flag: str | None, paths: workstation.OrgPaths) -> str:
     # A reinstall to pick up a new PATH or retry a token must not turn ACP off (QTS-1355).
     if flag is not None:

{agentic_runner-3.18.1 → agentic_runner-3.18.3}/src/agentic_runner/skills/agentic-runner-setup/SKILL.md

@@ -22,7 +22,6 @@ The prompt they pasted from the console holds these. Ask for any that is missing
 - **Control plane URL**: the Runner's `controlPlane.url`, copied from the console's
   Runners page. It is the only control plane address you use, and only as a value you
   pass to the Runner. Never call it or any other control plane address yourself.
-- **Temporal address**: `host:port`, from the same page.
 
 The **Runner Registration Token** is not one of them. It is the reusable credential a Runner registers
 with, and the person types it only where the Runner reads it, never into this
@@ -82,7 +81,7 @@ without showing it:
 
 ```sh
 uv tool install agentic-runner
-agentic-runner install <org> --control-plane <control-plane-url> --temporal-address <temporal-address>
+agentic-runner install <org> --control-plane <control-plane-url>
 ```
 
 You run the first line. Do not run the second yourself: wait until the person says it
@@ -91,7 +90,7 @@ finished, and ask for its last lines of output.
 **Docker.** Follow
 https://github.com/qtsone/agentic-runner/blob/main/docs/docker.md#the-env-file and then
 https://github.com/qtsone/agentic-runner/blob/main/docs/docker.md#docker-run. Create
-`runner.env` with the URL and the address filled in, and ask the person to add the Agent
+`runner.env` with the control plane URL filled in, and ask the person to add the Agent
 Token line to it themselves.
 
 **Kubernetes.** Follow

{agentic_runner-3.18.1 → agentic_runner-3.18.3}/src/agentic_runner/workstation.py

@@ -7,8 +7,6 @@ precedent does on a developer machine and nothing a daemon would need:
   identity, namespace, Runner Token, hooks, credential store and Workspaces under
   ``<root>/<org>/``. A contractor with two clients runs two. There is no supervisor over
   N Organisations -- that is the "one Runner straddling Organisations" 12 A6 rejected.
-  ``add <name>`` puts another such process beside them, a personal Runner per Contract
-  (ADR-0022 §21), named freely rather than after its Organisation.
 * **A login agent, never a system daemon** (23 item 1): a LaunchAgent in
   ``~/Library/LaunchAgents`` on macOS, a systemd *user* unit (with linger) on Linux, a
   per-user logon task on Windows. No ``sudo`` anywhere: the login keychain is unreachable
@@ -83,7 +81,6 @@ __all__ = [
     "run_environment",
     "run_process",
     "service_definition",
-    "settings_to_add",
     "start",
     "status_lines",
     "stop",
@@ -201,7 +198,9 @@ class WorkstationSettings(BaseModel):
 
     org: str
     control_plane_url: str
-    temporal_address: str
+    # A fallback only: `run` uses the address the registration response carries (ADR-0022
+    # §4). An install made before 3.17 saved one and keeps it.
+    temporal_address: str = ""
     # `temporal-grpc.<zone>` over TLS with the Runner Token (15's note on 23): no VPN, no
     # client certificate. Plaintext exists for a local dev server only.
     temporal_tls: bool = True
@@ -676,50 +675,6 @@ async def install(
     return lines
 
 
-def settings_to_add(paths: OrgPaths, *, beside: str | None) -> WorkstationSettings:
-    """``add <name>``: what ``install`` registers another Runner with (ADR-0022 §21).
-
-    A personal Runner serves one Contract, so a person with three Contracts runs three. Each
-    is ``install``'s own process with its own state directory -- identity, Runner Token and
-    Recipient Key (§37) -- and only the settings an earlier ``install`` was told are copied,
-    so the command the console shows carries no Temporal address.
-    """
-
-    # Registered state, not workstation.json: ``install`` saves the settings before it
-    # registers, so a refused token leaves them behind and the retry must go through.
-    if load_state(paths.state_dir) is not None:
-        raise ValueError(
-            f"{paths.org!r} is already installed under {paths.root}; pick a new name for "
-            "the Runner you are adding"
-        )
-    return _settings_beside(paths.root, beside).model_copy(update={"org": paths.org})
-
-
-def _settings_beside(root: Path, beside: str | None) -> WorkstationSettings:
-    if beside is not None:
-        return WorkstationSettings.load(OrgPaths(root=root, org=validate_org(beside)))
-    installed = [
-        WorkstationSettings.load(OrgPaths(root=root, org=file.parent.name))
-        for file in sorted(root.glob("*/workstation.json"), key=lambda file: file.stat().st_mtime)
-    ]
-    if not installed:
-        raise FileNotFoundError(
-            f"no Runner is installed under {root}; run `agentic-runner install` first"
-        )
-    endpoints = {
-        (settings.control_plane_url, settings.temporal_address, settings.temporal_tls)
-        for settings in installed
-    }
-    if len(endpoints) > 1:
-        names = ", ".join(sorted(settings.org for settings in installed))
-        raise ValueError(
-            f"the Runners under {root} ({names}) talk to different control planes; "
-            "name the one to add beside with --beside"
-        )
-    # The newest install's PATH and ACP kinds: the latest the person told this machine.
-    return installed[-1]
-
-
 def start(paths: OrgPaths, **driver: Any) -> None:
     _drive_service(paths, "start", **driver)