orbit-lang-sdk 0.1.0__py3-none-any.whl

orbit_lang_sdk-0.1.0.dist-info/METADATA

@@ -0,0 +1,73 @@
+Metadata-Version: 2.4
+Name: orbit-lang-sdk
+Version: 0.1.0
+Summary: Python worker SDK for the ORBIT orchestration runtime
+Author: ORBIT contributors
+License-Expression: Apache-2.0
+Project-URL: Homepage, https://github.com/AjmalX0/Orbit
+Project-URL: Documentation, https://github.com/AjmalX0/Orbit/tree/main/sdks/python
+Project-URL: Issues, https://github.com/AjmalX0/Orbit/issues
+Keywords: orbit,workflow,orchestration,durable-execution,saga,worker
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Topic :: System :: Distributed Computing
+Classifier: Typing :: Typed
+Requires-Python: >=3.9
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Dynamic: license-file
+
+# orbit-lang-sdk (Python)
+
+Python worker SDK for the [ORBIT](../../README.md) runtime. Standard library
+only, Python 3.9+.
+
+```bash
+pip install orbit-lang-sdk
+```
+
+```python
+from orbit_sdk import Worker, TaskError
+
+worker = Worker("payments-worker", concurrency=8)   # server: $ORBIT_SERVER, token: $ORBIT_TOKEN
+
+@worker.task("payments.charge", version="1.0.0")
+def charge(input, ctx):
+    if input["amount"] > 5000:
+        raise TaskError("CARD_DECLINED", "limit exceeded", retryable=False)
+    # ctx.idempotency_key is stable across retries and redeliveries
+    return {"transaction_id": f"tx-{input['order_id']}", "status": "captured"}
+
+worker.run()   # Ctrl-C / SIGTERM drains in-flight tasks and unregisters
+```
+
+* Handlers receive `(input: dict, ctx: Context)` and return a `dict`. `async def`
+  handlers are supported.
+* `ctx` exposes `execution_id`, `step_id`, `attempt`, `idempotency_key`,
+  `redelivery`, `deadline_ms`, `remaining_ms()`, `is_cancelled` / `cancelled`
+  (a `threading.Event` set when the runtime cancels the attempt) and `log()`.
+* Raise `TaskError(code, message, retryable=..., details=...)` for business
+  errors. Any other exception is reported as a retryable `UNHANDLED_EXCEPTION`
+  with its traceback.
+* The SDK re-registers after a runtime restart and keeps retrying result
+  delivery through outages, so results produced during a crash are not lost.
+
+Starting workflows from Python:
+
+```python
+from orbit_sdk import Client
+c = Client()
+eid = c.start("OrderProcessing", {"order_id": "A-1", ...}, execution_id="order-A-1")
+print(c.wait(eid)["status"])
+```
+
+## Credentials and TLS
+
+| Variable | Purpose |
+|---|---|
+| `ORBIT_SERVER` | runtime URL (default `http://127.0.0.1:7233`) |
+| `ORBIT_WORKER_TOKEN` (or `ORBIT_TOKEN`) | bearer token: a per-worker token from `orbit token`, or the shared worker token |
+| `ORBIT_CA_CERT` | PEM CA to trust when the runtime uses a private certificate |
+| `ORBIT_CLIENT_CERT`, `ORBIT_CLIENT_KEY` | PEM client certificate and key for mutual TLS |

orbit_lang_sdk-0.1.0.dist-info/RECORD

@@ -0,0 +1,9 @@
+orbit_lang_sdk-0.1.0.dist-info/licenses/LICENSE,sha256=z8d0m5b2O9McPEK1xHG_dWgUBT6EfBDz6wA0F7xSPTA,11358
+orbit_sdk/__init__.py,sha256=w6Naf7riwJfNHl5jXgKnVX4aJMv05zISHXQISE35KmE,777
+orbit_sdk/client.py,sha256=ngVS_DnYnBKy5ymL_jEUGkY95fuPDUdMcRR8mV2e_zk,3632
+orbit_sdk/py.typed,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+orbit_sdk/worker.py,sha256=QyxESAND29tx8tpURQaj66tK_h4FeGmTETeYCf2mhqk,11394
+orbit_lang_sdk-0.1.0.dist-info/METADATA,sha256=03cmB1kwF8mobKYc7qtz-_H9lpWGko4yUkYLeHfc1cA,2831
+orbit_lang_sdk-0.1.0.dist-info/WHEEL,sha256=mOdXR9C3wMVov7cSY8PY-XCzo3SmmWCHvGQr5csJoao,91
+orbit_lang_sdk-0.1.0.dist-info/top_level.txt,sha256=cJyAoybkXH5VJ_iJpmwF3IFl0xQYdUZ3fp-7HjBZ8oI,10
+orbit_lang_sdk-0.1.0.dist-info/RECORD,,

orbit_lang_sdk-0.1.0.dist-info/WHEEL

@@ -0,0 +1,5 @@
+Wheel-Version: 1.0
+Generator: setuptools (84.2.1)
+Root-Is-Purelib: true
+Tag: py3-none-any
+

orbit_lang_sdk-0.1.0.dist-info/licenses/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

orbit_lang_sdk-0.1.0.dist-info/top_level.txt

@@ -0,0 +1 @@
+orbit_sdk

orbit_sdk/__init__.py

@@ -0,0 +1,24 @@
+"""ORBIT worker SDK for Python.
+
+A worker announces the tasks it implements, long-polls the ORBIT runtime for
+work, runs your handler and reports the result. It has no dependencies
+outside the standard library.
+
+    from orbit_sdk import Worker, TaskError
+
+    worker = Worker("payments-worker")
+
+    @worker.task("payments.charge", version="1.0.0")
+    def charge(input, ctx):
+        if input["amount"] <= 0:
+            raise TaskError("INVALID_AMOUNT", "amount must be positive", retryable=False)
+        return {"transaction_id": f"tx-{ctx.idempotency_key}", "status": "ok"}
+
+    worker.run()
+"""
+
+from .client import ApiError, Client
+from .worker import Context, TaskError, Worker
+
+__all__ = ["Worker", "Context", "TaskError", "Client", "ApiError"]
+__version__ = "0.1.0"

orbit_sdk/client.py

@@ -0,0 +1,84 @@
+"""Tiny JSON-over-HTTP client for the ORBIT runtime API (standard library only)."""
+
+import json
+import os
+import ssl
+import urllib.error
+import urllib.request
+from typing import Any, Optional, Tuple
+
+DEFAULT_SERVER = "http://127.0.0.1:7233"
+
+
+class ApiError(Exception):
+    """An error response from the runtime, or a connection failure (status 0)."""
+
+    def __init__(self, status: int, code: str, message: str):
+        super().__init__(f"{code} ({status}): {message}")
+        self.status = status
+        self.code = code
+        self.message = message
+
+    @property
+    def is_connection_error(self) -> bool:
+        return self.status == 0
+
+
+class Client:
+    def __init__(
+        self,
+        server: Optional[str] = None,
+        token: Optional[str] = None,
+        timeout: float = 70.0,
+        ca_cert: Optional[str] = None,
+        client_cert: Optional[str] = None,
+        client_key: Optional[str] = None,
+    ):
+        self.server = (server or os.environ.get("ORBIT_SERVER") or DEFAULT_SERVER).rstrip("/")
+        # Workers should be given the restricted worker credential when the runtime has one.
+        self.token = token if token is not None else (os.environ.get("ORBIT_WORKER_TOKEN") or os.environ.get("ORBIT_TOKEN"))
+        self.timeout = timeout
+        ca = ca_cert or os.environ.get("ORBIT_CA_CERT")
+        # Mutual TLS: a client certificate identifies the worker to the runtime.
+        cert = client_cert or os.environ.get("ORBIT_CLIENT_CERT")
+        key = client_key or os.environ.get("ORBIT_CLIENT_KEY")
+        self._ssl = None
+        if ca or cert:
+            self._ssl = ssl.create_default_context(cafile=ca)
+            if cert:
+                self._ssl.load_cert_chain(cert, key)
+
+    def request(self, method: str, path: str, body: Any = None) -> Tuple[int, Any]:
+        data = None if body is None else json.dumps(body).encode()
+        req = urllib.request.Request(self.server + path, data=data, method=method)
+        req.add_header("content-type", "application/json")
+        req.add_header("accept", "application/json")
+        if self.token:
+            req.add_header("authorization", f"Bearer {self.token}")
+        try:
+            with urllib.request.urlopen(req, timeout=self.timeout, context=self._ssl) as resp:
+                raw = resp.read()
+                return resp.status, (json.loads(raw) if raw else None)
+        except urllib.error.HTTPError as e:
+            raw = e.read()
+            try:
+                err = json.loads(raw).get("error", {})
+            except (ValueError, AttributeError):
+                err = {}
+            raise ApiError(e.code, err.get("code", "HTTP_ERROR"), err.get("message", raw.decode(errors="replace"))) from None
+        except (urllib.error.URLError, ConnectionError, TimeoutError, OSError) as e:
+            raise ApiError(0, "CONNECTION", f"cannot reach ORBIT runtime at {self.server}: {e}") from None
+
+    def get(self, path: str) -> Any:
+        return self.request("GET", path)[1]
+
+    def post(self, path: str, body: Any) -> Tuple[int, Any]:
+        return self.request("POST", path, body)
+
+    # Convenience helpers for applications that start workflows.
+    def start(self, workflow: str, input: Any = None, version: Optional[str] = None, execution_id: Optional[str] = None) -> str:
+        _, r = self.post("/v1/executions", {"workflow": workflow, "version": version, "input": input or {}, "execution_id": execution_id})
+        return r["execution_id"]
+
+    def wait(self, execution_id: str, timeout_ms: int = 30000) -> Any:
+        return self.get(f"/v1/executions/{execution_id}/wait?timeout_ms={timeout_ms}")

orbit_sdk/worker.py

@@ -0,0 +1,277 @@
+"""ORBIT worker runtime for Python.
+
+Delivery is at-least-once: a task can be delivered again after a worker or
+runtime crash (``ctx.redelivery`` is then True). Make side effects idempotent
+using ``ctx.idempotency_key``, which is stable across retries and redeliveries.
+"""
+
+import asyncio
+import inspect
+import json
+import logging
+import os
+import random
+import signal
+import socket
+import threading
+import time
+import traceback
+from typing import Any, Callable, Dict, Optional, Set
+
+from .client import ApiError, Client
+
+log = logging.getLogger("orbit")
+
+
+class TaskError(Exception):
+    """Raise from a handler to fail the attempt with a structured error.
+
+    ``retryable=False`` fails the step immediately regardless of its retry policy.
+    """
+
+    def __init__(self, code: str, message: str = "", retryable: bool = True, details: Any = None):
+        super().__init__(f"{code}: {message}")
+        self.code = code
+        self.message = message
+        self.retryable = retryable
+        self.details = details
+
+
+class Context:
+    """Information about the attempt being executed."""
+
+    def __init__(self, task: Dict[str, Any], worker: "Worker"):
+        self.token: str = task["token"]
+        self.execution_id: str = task["execution_id"]
+        self.workflow: str = task.get("workflow", "")
+        self.workflow_version: str = task.get("workflow_version", "")
+        self.step_id: str = task["step_id"]
+        self.task_name: str = task["task_name"]
+        self.attempt: int = task.get("attempt", 1)
+        self.idempotency_key: str = task.get("idempotency_key", "")
+        self.redelivery: bool = task.get("redelivery", False)
+        self.deadline_ms: Optional[int] = task.get("deadline_ms")
+        self.cancelled = threading.Event()
+        self._worker = worker
+
+    @property
+    def is_cancelled(self) -> bool:
+        """True once the runtime asked this attempt to stop (timeout, cancellation)."""
+        return self.cancelled.is_set()
+
+    def remaining_ms(self) -> Optional[int]:
+        if self.deadline_ms is None:
+            return None
+        return max(0, self.deadline_ms - int(time.time() * 1000))
+
+    def log(self, message: str, **fields: Any) -> None:
+        record = {"execution_id": self.execution_id, "step": self.step_id, "attempt": self.attempt, **fields}
+        log.info("%s %s", message, json.dumps(record, default=str))
+
+
+Handler = Callable[[Dict[str, Any], Context], Any]
+
+
+class _Task:
+    def __init__(self, name: str, version: str, fn: Handler):
+        self.name = name
+        self.version = version
+        self.fn = fn
+
+
+class Worker:
+    def __init__(
+        self,
+        worker_id: Optional[str] = None,
+        server: Optional[str] = None,
+        token: Optional[str] = None,
+        concurrency: int = 4,
+        runtime: str = "python",
+        poll_wait_ms: int = 20000,
+    ):
+        self.worker_id = worker_id or f"python-{socket.gethostname()}-{os.getpid()}"
+        self.client = Client(server, token, timeout=poll_wait_ms / 1000 + 15)
+        self.concurrency = max(1, concurrency)
+        self.runtime = runtime
+        self.poll_wait_ms = poll_wait_ms
+        self._tasks: Dict[str, _Task] = {}
+        self._session: Optional[str] = None
+        self._session_lock = threading.Lock()
+        self._heartbeat_interval = 5.0
+        self._stop = threading.Event()
+        self._active: Dict[str, Context] = {}
+        self._active_lock = threading.Lock()
+
+    # ------------------------------------------------------------ registration
+
+    def task(self, name: str, version: str = "1.0.0") -> Callable[[Handler], Handler]:
+        """Decorator registering ``fn(input, ctx)`` as the implementation of ``name@version``."""
+
+        def wrap(fn: Handler) -> Handler:
+            self.register(name, fn, version)
+            return fn
+
+        return wrap
+
+    def register(self, name: str, fn: Handler, version: str = "1.0.0") -> None:
+        if name in self._tasks:
+            raise ValueError(f"task {name!r} is already registered")
+        self._tasks[name] = _Task(name, version, fn)
+
+    def _register_session(self) -> str:
+        with self._session_lock:
+            body = {
+                "worker_id": self.worker_id,
+                "runtime": self.runtime,
+                "sdk": "orbit-python/0.1.0",
+                "contracts": [{"task_name": t.name, "contract_version": t.version} for t in self._tasks.values()],
+            }
+            _, r = self.client.post("/v1/workers/register", body)
+            self._session = r["worker_session_id"]
+            self._heartbeat_interval = max(0.5, r.get("heartbeat_interval_ms", 5000) / 1000)
+            for w in r.get("warnings", []):
+                log.warning("runtime: %s", w)
+            log.info("worker %s registered (%d tasks)", self.worker_id, len(self._tasks))
+            return self._session
+
+    def _session_id(self) -> str:
+        return self._session or self._register_session()
+
+    def _with_session(self, fn: Callable[[str], Any]) -> Any:
+        """Call ``fn(session)``, re-registering if the runtime forgot the session (e.g. after a restart)."""
+        session = self._session_id()
+        try:
+            return fn(session)
+        except ApiError as e:
+            if e.status == 404 and e.code == "UNKNOWN_SESSION":
+                with self._session_lock:
+                    if self._session == session:
+                        self._session = None
+                return fn(self._session_id())
+            raise
+
+    # ----------------------------------------------------------------- running
+
+    def run(self, install_signal_handlers: bool = True) -> None:
+        """Run until stopped (SIGINT/SIGTERM or :meth:`stop`)."""
+        if not self._tasks:
+            raise RuntimeError("no tasks registered")
+        logging.basicConfig(level=os.environ.get("ORBIT_LOG_LEVEL", "INFO"), format="%(asctime)s %(levelname)s %(name)s %(message)s")
+        if install_signal_handlers and threading.current_thread() is threading.main_thread():
+            for sig in (signal.SIGINT, signal.SIGTERM):
+                signal.signal(sig, lambda *_: self.stop())
+        self._retrying(self._register_session)
+        threads = [threading.Thread(target=self._heartbeat_loop, name="orbit-heartbeat", daemon=True)]
+        threads += [threading.Thread(target=self._poll_loop, name=f"orbit-poll-{i}", daemon=True) for i in range(self.concurrency)]
+        for t in threads:
+            t.start()
+        try:
+            while not self._stop.is_set():
+                self._stop.wait(0.5)
+        finally:
+            for t in threads[1:]:
+                t.join(timeout=self.poll_wait_ms / 1000 + 5)
+            try:
+                if self._session:
+                    self.client.post("/v1/workers/unregister", {"worker_session_id": self._session})
+            except ApiError:
+                pass
+            log.info("worker %s stopped", self.worker_id)
+
+    def start(self) -> threading.Thread:
+        """Run in a background thread (useful in tests and embedded use)."""
+        t = threading.Thread(target=self.run, kwargs={"install_signal_handlers": False}, daemon=True)
+        t.start()
+        return t
+
+    def stop(self) -> None:
+        self._stop.set()
+
+    def _retrying(self, fn: Callable[[], Any]) -> Any:
+        delay = 0.2
+        while True:
+            try:
+                return fn()
+            except ApiError as e:
+                if not e.is_connection_error and e.status < 500:
+                    raise
+                if self._stop.is_set():
+                    log.warning("%s; giving up because the worker is stopping", e.message)
+                    return None
+                log.warning("%s; retrying in %.1fs", e.message, delay)
+                self._stop.wait(delay)
+                delay = min(delay * 2, 5.0) * (0.8 + random.random() * 0.4)
+
+    def _heartbeat_loop(self) -> None:
+        while not self._stop.wait(self._heartbeat_interval):
+            try:
+                r = self._with_session(lambda s: self.client.post("/v1/workers/heartbeat", {"worker_session_id": s})[1])
+                for token in r.get("cancel", []):
+                    with self._active_lock:
+                        ctx = self._active.get(token)
+                    if ctx:
+                        ctx.log("cancellation requested by runtime")
+                        ctx.cancelled.set()
+            except ApiError as e:
+                log.debug("heartbeat failed: %s", e)
+
+    def _poll_loop(self) -> None:
+        backoff = 0.2
+        while not self._stop.is_set():
+            try:
+                status, task = self._with_session(
+                    lambda s: self.client.post("/v1/workers/poll", {"worker_session_id": s, "wait_ms": self.poll_wait_ms})
+                )
+                backoff = 0.2
+            except ApiError as e:
+                if self._stop.is_set():
+                    return
+                log.warning("poll failed: %s; retrying in %.1fs", e.message, backoff)
+                self._stop.wait(backoff)
+                backoff = min(backoff * 2, 5.0)
+                continue
+            if status == 204 or not task:
+                continue
+            self._execute(task)
+
+    def _execute(self, task: Dict[str, Any]) -> None:
+        ctx = Context(task, self)
+        impl = self._tasks.get(task["task_name"])
+        with self._active_lock:
+            self._active[ctx.token] = ctx
+        try:
+            if impl is None:
+                raise TaskError("UNKNOWN_TASK", f"worker does not implement {task['task_name']}", retryable=True)
+            ctx.log("executing", task=ctx.task_name, redelivery=ctx.redelivery)
+            result = impl.fn(task.get("input") or {}, ctx)
+            if inspect.isawaitable(result):
+                result = asyncio.run(_await(result))
+            if result is None:
+                result = {}
+            if not isinstance(result, dict):
+                raise TaskError("INVALID_RESULT", f"handler returned {type(result).__name__}; tasks must return a dict", retryable=False)
+            self._report("/v1/tasks/complete", {"token": ctx.token, "output": result})
+        except TaskError as e:
+            ctx.log("task failed", code=e.code)
+            self._report("/v1/tasks/fail", {"token": ctx.token, "error_code": e.code, "error_message": e.message, "retryable": e.retryable, "details": e.details})
+        except Exception as e:  # noqa: BLE001 - report any handler crash to the runtime
+            tb = traceback.format_exc(limit=8)
+            log.error("task %s raised %s", task["task_name"], tb)
+            self._report(
+                "/v1/tasks/fail",
+                {"token": ctx.token, "error_code": "UNHANDLED_EXCEPTION", "error_message": f"{type(e).__name__}: {e}", "retryable": True, "details": {"traceback": tb}},
+            )
+        finally:
+            with self._active_lock:
+                self._active.pop(ctx.token, None)
+
+    def _report(self, path: str, body: Dict[str, Any]) -> None:
+        """Deliver a result, retrying through connection failures so that a
+        result survives a runtime restart (the runtime reconciles it)."""
+        r = self._retrying(lambda: self.client.post(path, body)[1])
+        if r and not r.get("accepted", True):
+            log.info("runtime ignored result for %s: %s", body["token"][:8], r.get("reason"))
+
+
+async def _await(aw: Any) -> Any:
+    return await aw