harness-run 0.4.0__tar.gz

harness_run-0.4.0/.dockerignore

@@ -0,0 +1,12 @@
+# Keep the build context small/fast (esp. the multi-hundred-MB .venv) — the dev image
+# COPYs only what it needs from the context anyway.
+.venv
+.git
+**/__pycache__
+*.pyc
+.pytest_cache
+.ruff_cache
+.mypy_cache
+*.egg-info
+dist
+build

harness_run-0.4.0/.github/workflows/ci.yml

@@ -0,0 +1,40 @@
+name: CI
+
+# All tests are offline unit tests (fake harness, mocked GCP/uv/git-over-network) — CI
+# needs no cloud credentials or API keys and bills nothing beyond the runner. Keep it
+# that way: anything that talks to Vertex/Anthropic belongs in a manually-run script,
+# not under `pytest -q`.
+
+on:
+  push:
+    branches: [main]  # PRs are covered by the pull_request trigger — no double runs
+  pull_request:
+
+concurrency:
+  group: ci-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.12", "3.13"]  # full requires-python range (>=3.12,<3.14)
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+      - name: Install uv
+        uses: astral-sh/setup-uv@v5
+        with:
+          enable-cache: true
+          cache-dependency-glob: pyproject.toml  # no lockfile — key the cache off deps
+      - name: Install (runtime + dev group)
+        run: uv pip install --system -e . --group dev
+      - name: Lint
+        run: ruff check .
+      - name: Test
+        run: pytest -q -n auto

harness_run-0.4.0/.github/workflows/publish.yml

@@ -0,0 +1,104 @@
+name: Publish to PyPI
+
+# Publishes a release to PyPI, https://pypi.org/project/harness-run/, through PyPI's Trusted
+# Publishing (OpenID Connect): no API token is stored in this repository. PyPI is configured
+# to trust this exact workflow file in this repository when it runs in the `pypi` GitHub
+# environment; that trust is set up on the PyPI project's Publishing page, not here. TestPyPI
+# trusts the same file in the `testpypi` environment.
+#
+# A release is a tag `vX.Y.Z` on `main`, and X.Y.Z must equal `version` in pyproject.toml
+# (the build job refuses otherwise; see the release checklist at the top of CHANGELOG.md).
+# Plain pushes publish nothing. Running the workflow by hand (workflow_dispatch) publishes the
+# checked-out version to TestPyPI instead, as a dry run of the release path:
+#   pip install -i https://test.pypi.org/simple/ --extra-index-url https://pypi.org/simple/ harness-run==X.Y.Z
+# TestPyPI never accepts the same version twice, so a repeated dry run needs a version bump.
+
+on:
+  push:
+    tags: ["v[0-9]*"]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: publish-${{ github.ref }}
+  cancel-in-progress: false  # never cancel an upload half-way
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    outputs:
+      version: ${{ steps.version.outputs.version }}
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - name: Install uv
+        uses: astral-sh/setup-uv@v5
+
+      - name: Check the tag against pyproject.toml
+        id: version
+        run: |
+          set -euo pipefail
+          declared=$(python3 -c 'import tomllib; print(tomllib.load(open("pyproject.toml", "rb"))["project"]["version"])')
+          tag="${GITHUB_REF_NAME#v}"
+          if [[ "$GITHUB_REF_TYPE" == "tag" && "$tag" != "$declared" ]]; then
+            echo "::error::tag $GITHUB_REF_NAME does not match pyproject version $declared; bump the version first (CHANGELOG.md, release checklist)"
+            exit 1
+          fi
+          echo "version=$declared" >> "$GITHUB_OUTPUT"
+          echo "building harness-run $declared"
+
+      - name: Build sdist and wheel
+        run: |
+          set -euo pipefail
+          uv build
+          uvx twine check --strict dist/*
+          ls -l dist/
+
+      - uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist/
+          if-no-files-found: error
+
+  publish:
+    if: github.ref_type == 'tag'
+    needs: build
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    environment:
+      name: pypi
+      url: https://pypi.org/project/harness-run/${{ needs.build.outputs.version }}/
+    permissions:
+      id-token: write  # mint the OIDC token PyPI exchanges for a short-lived upload token
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist/
+      - name: Upload to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+
+  publish-testpypi:
+    if: github.event_name == 'workflow_dispatch'
+    needs: build
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    environment:
+      name: testpypi
+      url: https://test.pypi.org/project/harness-run/${{ needs.build.outputs.version }}/
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist/
+      - name: Upload to TestPyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          repository-url: https://test.pypi.org/legacy/

harness_run-0.4.0/.gitignore

@@ -0,0 +1,13 @@
+__pycache__/
+*.pyc
+.venv/
+dist/
+build/
+*.egg-info/
+.pytest_cache/
+.ruff_cache/
+.mypy_cache/
+
+# Local agent-tool settings, per developer.
+.claude/
+.mcp.json

harness_run-0.4.0/CHANGELOG.md

@@ -0,0 +1,50 @@
+# Changelog
+
+All notable changes to `harness-run` are documented here.
+
+The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
+Versioning is [SemVer](https://semver.org/)-style with the usual 0.x caveat:
+**minor releases (0.X) may contain backwards-incompatible changes**; patch
+releases (0.X.Y) do not. Every incompatible change is listed under a
+**Backwards-incompatible** heading together with update notes describing how to
+migrate.
+
+Releases are git tags (`vX.Y.Z`) on `main`, published to [PyPI](https://pypi.org/project/harness-run/)
+by `.github/workflows/publish.yml` through PyPI's Trusted Publishing; install a specific release with
+
+```
+pip install "harness-run==X.Y.Z"
+```
+
+Release checklist: update this file (move the `Unreleased` section into a new
+version heading with the date), bump `version` in `pyproject.toml`, merge that
+commit to `main` (PR), tag the merge commit `vX.Y.Z` and push the tag. The
+publish workflow refuses a tag whose version differs from `pyproject.toml`; once
+it has uploaded the release, create the GitHub Release for the tag with this
+file's section as the notes.
+
+The workflow needs no token: PyPI and TestPyPI trust `publish.yml` from this repository
+running in the `pypi` and `testpypi` GitHub environments (Trusted Publishing, configured on
+the PyPI side under the project's Publishing settings and on the GitHub side under Settings
+→ Environments). To rehearse a release, run the workflow by hand from the Actions tab or with
+`gh workflow run publish.yml`: it builds the checked-out version and uploads it to TestPyPI
+only, where it can be checked with
+
+```
+pip install -i https://test.pypi.org/simple/ --extra-index-url https://pypi.org/simple/ "harness-run==X.Y.Z"
+```
+
+TestPyPI never accepts the same version twice, so a second rehearsal needs a version bump.
+
+## 0.4.0 — 2026-09-23
+
+First public release.
+
+`harness-run` was developed at [Zyte](https://www.zyte.com) as an internal library
+(`remote-agent-toolkit`, versions 0.1.0–0.3.1) and is released here under the Apache-2.0
+license with a new name. It runs coding agents — Claude Code and Codex, with Anthropic, OpenAI,
+Vertex AI and OpenRouter models — locally and in GCP Agent Sandbox through one API: declarative
+`AgentSpec`s, multi-turn sessions with checkpoint/resume, streaming events, structured output,
+skills, MCP servers, repository setup, per-run secrets and usage/cost reporting. The
+[README](README.md) and [docs/](docs/) describe the release; the development history before it
+is in the git log.