agentic-runner
The Agentic OS Runner (ADR-0013): an activity-only Temporal worker that executes
exactly what must happen where the workspace, the Agent Runtime subprocess, a verb seam
or a credential the Runner holds is. The Ralph Loop — every @workflow.defn — runs on
platform-hosted Platform Workers and never ships here.
It depends on agentic-runner-contracts and third-party packages only: it imports no
platform module, enforced by tests/test_package_partition.py.
Without the platform — its namespace, Directive tokens, Grant snapshots, Evidence sink and the loop itself — this package is an executor with no scheduler, no governance and no intake. That inertness, not obfuscation, is the boundary (ADR-0013 §5).
Running it
agentic-runner run is the process: it exchanges the Runner Registration Token in
AGENTIC_RUNNER_REGISTRATION_TOKEN (or, deprecated, AGENTIC_AGENT_TOKEN) for a durable
identity at AGENTIC_CONTROL_PLANE_URL (once, persisted under AGENTIC_RUNNER_STATE_DIR),
heartbeats every 30 s, connects to the
namespace it was handed with the Runner Token the heartbeat refreshes, and polls its own
runner.{runner_id} queue. AGENTIC_RUNNER_ISOLATION is contract_uid (default: every
Contract its own uid, needs CAP_SETUID — refused otherwise) or none. Readiness is
GET /healthz on AGENTIC_RUNNER_READINESS_PORT.
It ships as ghcr.io/qtsone/agentic-runner (Dockerfile.runner at the repository
root: Python, git, codex, claude, nothing else) and installs with
charts/agentic-runner.
On a workstation it is a per-user login agent, one per Organisation:
agentic-runner install | start | stop | status <org> (LaunchAgent, systemd user unit or
logon task; never sudo), with Credential References in the OS credential store.
Licensed under AGPL-3.0-only.
1 maintainer
Metadata
1 maintainer
Release files for agentic-runner 3.18.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| agentic_runner-3.18.1.tar.gz | 309.8 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| agentic_runner-3.18.1-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 665.6 kB
Release files / agentic_runner-3.18.1.tar.gz
| Download URL | agentic_runner-3.18.1.tar.gz |
|---|---|
| Size | 309.8 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
f2e9577d1f03062a0afb19d343b51a58bd1df2f54591a769180706b6bea206a0
|
|
BLAKE2b-256 checksum How to use checksums |
db53b2a3c83a9cf76647f780ec4674b349dc5a7bf54819c81d06d807222ba907
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 13, 2026.
Transparency logRelease files / agentic_runner-3.18.1-py3-none-any.whl
| Download URL | agentic_runner-3.18.1-py3-none-any.whl |
|---|---|
| Size | 355.8 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
f247b16e770d662e6758010e8be1675fd46210a3b8d8e3275b603e6171dd189f
|
|
BLAKE2b-256 checksum How to use checksums |
a272e90c185857da417ec76462982d18b918b165c005ea4b61263bbb79db46aa
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 13, 2026.
Transparency log
