agentic-runner 3.19.0__tar.gz → 3.20.0__tar.gz

{agentic_runner-3.19.0 → agentic_runner-3.20.0}/PKG-INFO

@@ -1,11 +1,11 @@
 Metadata-Version: 2.5
 Name: agentic-runner
-Version: 3.19.0
+Version: 3.20.0
 Summary: The Agentic OS Runner: an activity-only Temporal executor for workspaces, Agent Runtimes and verb seams
 License-Expression: AGPL-3.0-only
 License-File: LICENSE
 Requires-Python: >=3.12
-Requires-Dist: agentic-runner-contracts==3.19.0
+Requires-Dist: agentic-runner-contracts==3.20.0
 Requires-Dist: cryptography<51,>=50
 Requires-Dist: httpx<1.0,>=0.27
 Requires-Dist: pydantic-settings<3.0,>=2.0

{agentic_runner-3.19.0 → agentic_runner-3.20.0}/pyproject.toml

@@ -10,7 +10,7 @@ dependencies = [
   # Exactly this release's contracts: the two ship as one version, and an unpinned
   # requirement let `uv tool upgrade` keep an older contracts wheel the Runner cannot
   # import from (QTS-1473). `scripts/set-version.py` moves it with the version.
-  "agentic-runner-contracts==3.19.0",
+  "agentic-runner-contracts==3.20.0",
   # Imported directly by `registration.py` (the Ed25519 identity that signs every
   # heartbeat); already present transitively through pyjwt[crypto], declared because
   # we import it.

{agentic_runner-3.19.0 → agentic_runner-3.20.0}/src/agentic_runner/__init__.py

@@ -7,6 +7,6 @@ stay on the platform; this package imports none of them, and a CI partition test
 (``tests/test_package_partition.py``) fails the build if that changes.
 """
 
-__version__ = "3.19.0"
+__version__ = "3.20.0"
 
 __all__ = ["__version__"]

{agentic_runner-3.19.0 → agentic_runner-3.20.0}/src/agentic_runner/activities.py

@@ -1710,8 +1710,9 @@ class RunnerRalphActivities:
         self._workspace_root = workspace_root
         self._contract_isolation = contract_isolation
         # What this process is, as the control plane registered it (PRD issue 42): its
-        # Runner id, its host party and its config-declared Tags. Every activity payload
-        # is checked against it before the body runs, so a stolen or misrouted task costs
+        # Runner id, its host party and its config-declared Tags, which the last heartbeat
+        # ack's Tags replace (`_current_routing_identity`). Every activity payload is
+        # checked against it before the body runs, so a stolen or misrouted task costs
         # no verb. ``None`` in a process that never registered -- it polls no
         # ``runner.{runner_id}`` queue, so nothing routes to it and there is nothing to
         # assert against; the fail-closed check is on every Runner the router can pick.
@@ -1791,10 +1792,11 @@ class RunnerRalphActivities:
         poller into a visible intra-Organisation incident rather than silence (17 A11).
         """
 
-        if self._routing_identity is not None:
+        identity = self._current_routing_identity()
+        if identity is not None:
             routing = getattr(request, "routing", None)
             try:
-                assert_routed(routing, self._routing_identity)
+                assert_routed(routing, identity)
             except RoutingRefusedError as refusal:
                 work_record_id = getattr(request, "work_record_id", "")
                 if not work_record_id:
@@ -1804,11 +1806,11 @@ class RunnerRalphActivities:
                     self._fastapi_client,
                     str(work_record_id),
                     source=_ROUTING_EVIDENCE_SOURCE,
-                    actor=f"runner:{self._routing_identity.runner_id}",
+                    actor=f"runner:{identity.runner_id}",
                     payload={
                         "event": "directive.routing_refused",
                         "reason": refusal.reason,
-                        "runner_id": self._routing_identity.runner_id,
+                        "runner_id": identity.runner_id,
                         "routed_runner_id": None if routing is None else routing.runner_id,
                         "detail": str(refusal),
                     },
@@ -1818,6 +1820,19 @@ class RunnerRalphActivities:
                 self._token_source, self._fastapi_client, request, actor=self._actor()
             )
 
+    def _current_routing_identity(self) -> RunnerRoutingIdentity | None:
+        """The registered identity, with the Tags the last heartbeat ack carried.
+
+        The console edits a Runner's Tags after registration and the control plane routes
+        on the edit at once (ADR-0022 §13); checking the bootstrap set instead would
+        refuse work routed on an added Tag on every retry.
+        """
+
+        acked = self._heartbeat_link.tags if self._heartbeat_link is not None else None
+        if self._routing_identity is None or acked is None:
+            return self._routing_identity
+        return replace(self._routing_identity, tags=acked)
+
     def _actor(self) -> str:
         return (
             f"runner:{self._routing_identity.runner_id}"
@@ -3887,10 +3902,11 @@ class RunnerRalphActivities:
                     "remedy": "work.open",
                 },
             )
-        if state.repository or self._routing_identity is None:
+        identity = self._current_routing_identity()
+        if state.repository or identity is None:
             return None
         selector = snapshot.runner_selector_of(product_id)
-        if selector is not None and selector_satisfied(selector, self._routing_identity.tags):
+        if selector is not None and selector_satisfied(selector, identity.tags):
             return None
         return (
             f"this Runner's tags do not satisfy the Runner selector of Product {product_id}, "
@@ -3898,7 +3914,7 @@ class RunnerRalphActivities:
             {
                 "event": "directive.repository_refused",
                 "product_id": product_id,
-                "runner_id": str(self._routing_identity.runner_id),
+                "runner_id": str(identity.runner_id),
                 "selector": [requirement.as_payload() for requirement in selector or ()],
             },
         )

{agentic_runner-3.19.0 → agentic_runner-3.20.0}/src/agentic_runner/heartbeat_link.py

@@ -121,6 +121,7 @@ class HeartbeatLink:
         # finished is never read again, while one under a running Directive is read at
         # every verb -- and `max_concurrent_directives` is itself bounded by this number.
         self._held: OrderedDict[str, _Held] = OrderedDict()
+        self._tags: dict[str, str] | None = None
         self._last_ack: float | None = None
         self._seen_monotonic, self._seen_wall = self._clock()
         self._woke = False
@@ -147,6 +148,16 @@ class HeartbeatLink:
             self._held.move_to_end(agent_id)
         return held
 
+    @property
+    def tags(self) -> dict[str, str] | None:
+        """This Runner's Tags as the last ack carried them (ADR-0022 §13).
+
+        ``None`` until an ack carries them, from a control plane below contracts 3.20 or
+        before the first beat: routing then checks the Tags this Runner bootstrapped with.
+        """
+
+        return None if self._tags is None else dict(self._tags)
+
     def applied(self) -> list[AppliedSnapshot]:
         return [
             AppliedSnapshot(agent_id=UUID(agent_id), version=held.version)
@@ -154,13 +165,15 @@ class HeartbeatLink:
         ]
 
     def apply(self, ack: HeartbeatAck) -> None:
-        """Apply one ack's pushes: snapshots per Agent, ceilings per Contract.
+        """Apply one ack's pushes: snapshots per Agent, ceilings per Contract, the Tags.
 
         Replacement, never a merge. A narrowed Grant that merged into what it narrowed
         would leave the wider entry standing, which is the one mistake this whole layer
         exists to prevent.
         """
 
+        if ack.tags is not None:
+            self._tags = dict(ack.tags)
         for push in ack.grant_pushes:
             agent_id = str(push.agent_id)
             self._held[agent_id] = _Held(