agentic-runner
The Agentic OS Runner (ADR-0013): an activity-only Temporal worker that executes
exactly what must happen where the workspace, the Agent Runtime subprocess, a verb seam
or a credential the Runner holds is. The Ralph Loop — every @workflow.defn — runs on
platform-hosted Platform Workers and never ships here.
It depends on agentic-runner-contracts and third-party packages only: it imports no
platform module, enforced by tests/test_package_partition.py.
Without the platform — its namespace, Directive tokens, Grant snapshots, Evidence sink and the loop itself — this package is an executor with no scheduler, no governance and no intake. That inertness, not obfuscation, is the boundary (ADR-0013 §5).
Running it
agentic-runner run is the process: it exchanges the Runner Registration Token in
AGENTIC_RUNNER_REGISTRATION_TOKEN (or, deprecated, AGENTIC_AGENT_TOKEN) for a durable
identity at AGENTIC_CONTROL_PLANE_URL (once, persisted under AGENTIC_RUNNER_STATE_DIR),
heartbeats every 30 s, connects to the
namespace it was handed with the Runner Token the heartbeat refreshes, and polls its own
runner.{runner_id} queue. AGENTIC_RUNNER_ISOLATION is contract_uid (default: every
Contract its own uid, needs CAP_SETUID — refused otherwise) or none. Readiness is
GET /healthz on AGENTIC_RUNNER_READINESS_PORT.
It ships as ghcr.io/qtsone/agentic-runner (Dockerfile.runner at the repository
root: Python, git, codex, claude, nothing else) and installs with
charts/agentic-runner.
On a workstation it is a per-user login agent, one per Organisation:
agentic-runner install | start | stop | status <org> (LaunchAgent, systemd user unit or
logon task; never sudo), with Credential References in the OS credential store.
Licensed under AGPL-3.0-only.
1 maintainer
Metadata
1 maintainer
Release files for agentic-runner 3.23.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| agentic_runner-3.23.1.tar.gz | 320.4 kB | With provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| agentic_runner-3.23.1-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 687.5 kB
Release files / agentic_runner-3.23.1.tar.gz
| Download URL | agentic_runner-3.23.1.tar.gz |
|---|---|
| Size | 320.4 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
1f481c4051e815db6372f0b32d3d2aa1c1b73056f0a4cd96938ff3c19dcb4d78
|
|
BLAKE2b-256 checksum How to use checksums |
ad9a40af930d806e5457a579c07f2fe3bb4dda39589b55c3b3360d725fd23f1e
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 15, 2026.
Transparency logRelease files / agentic_runner-3.23.1-py3-none-any.whl
| Download URL | agentic_runner-3.23.1-py3-none-any.whl |
|---|---|
| Size | 367.1 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
a4c94b7f21fe5a9e65d4f7a1aa02bf219d17175348cd73f70e1cbe37d20dafff
|
|
BLAKE2b-256 checksum How to use checksums |
1f8abd840a5c6a1806a40ffe5e325c88b59225047fda809427a4731534bdf3f6
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 15, 2026.
Transparency logSecurity for agentic-runner 3.23.1
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 2 files in this release have been uploaded with provenance metadata.
Attestation for agentic_runner-3.23.1.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 15, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
