fix: enforce supported uv runtime

Author: misunders2d

RELEASE_MANIFEST.json

@@ -186,7 +186,7 @@
     },
     "docs/GATE_EVIDENCE.md": {
       "path": "docs/GATE_EVIDENCE.md",
-      "sha256": "4316709832aa201213df0947c738914c45e710223a856ac61effa6d38327e5a0"
+      "sha256": "bd78fcdf4615bcd672174d2b08583064196630c21063b9ce725708e11beb6957"
     },
     "docs/RELEASE_MANIFEST.md": {
       "path": "docs/RELEASE_MANIFEST.md",

docs/GATE_EVIDENCE.md

@@ -35,7 +35,7 @@ Gate statuses used here:
 | Release input, package, and clean install | `.venv/bin/python scripts/verify_release.py`; `SOURCE_DATE_EPOCH=1580601600 PYTHONDONTWRITEBYTECODE=1 UV_CACHE_DIR=/tmp/uv-cache UV_LINK_MODE=copy uv build --offline --no-build-isolation --out-dir /tmp/agentnet-final-build-20260713`; clean-wheel install/init/status/backup/restore/demos in `evidence/local/2026-07-13-final/manifest.json` | Verifier PASS; locked build backend produced retained, content-validated sdist/wheel evidence; new-environment install and clean schema-v1 status passed | Local package evidence only; it is not an independent signature, SBOM/provenance publication, root ceremony, maintained KMS, or cross-platform qualification. |
 | npm `0.1.3` packaging patch | `SOURCE_DATE_EPOCH=1580601600 PYTHONDONTWRITEBYTECODE=1 UV_CACHE_DIR=/tmp/uv-cache UV_LINK_MODE=copy uv build --offline --no-build-isolation --out-dir /tmp/agentnet-build-0.1.3-a`; repeated in an independent output directory | Byte-identical retained wheel and sdist; current package tests and release verifier pass | Marketing, discoverability metadata, preview image, and version-only runtime edits; prior PostgreSQL/security evidence remains historical and is not promoted. |
 | npm `0.1.4` installer repair | Retained build evidence plus clean public npm-tarball retest from an unrelated cwd | Python artifacts were byte-identical and bounded cwd/version checks passed, but full packed verification later reproduced `894 passed, 16 failed, 7 expected PostgreSQL skips`; activation blocked | The public package omitted six verifier inputs and allowed host-dependent Python minor selection. This row preserves the failed packed-artifact outcome; no production evidence is promoted. |
-| npm `0.1.5` packed-artifact correction | Exact CPython `3.13.13`; two independent reproducible Python builds; source release suite; clean installed npm tarball full `agentnet verify` from unrelated cwd | Byte-identical wheel/sdist; source `910 passed, 7 expected PostgreSQL skips`; packed `910 passed, 7 expected PostgreSQL skips`; release verifier PASS | Exact evidence-file inclusion, portable artifact-retention evidence, interpreter selection, and full packed-tarball prepublication gate only; no identity, authorization, protocol, storage, delivery, A2A, or production-gate semantics change. |
+| npm `0.1.5` packed-artifact correction | Exact CPython `3.13.13`; `uv>=0.11.28`; two independent reproducible Python builds; source release suite; clean installed npm tarball full `agentnet verify` from unrelated cwd | Byte-identical wheel/sdist; source `911 passed, 7 expected PostgreSQL skips`; packed `911 passed, 7 expected PostgreSQL skips`; release verifier PASS | Exact evidence-file inclusion, portable artifact-retention evidence, interpreter/toolchain selection, explicit old-uv rejection without host mutation, and full packed-tarball prepublication gate only; no identity, authorization, protocol, storage, delivery, A2A, or production-gate semantics change. |
 | PostgreSQL/storage corpus | `AGENTNET_TEST_POSTGRES_URL='postgresql:///agentnet_test_final?host=/tmp/agentnet-pgsocket-20260713-final&port=55432' AGENTNET_TEST_POSTGRES_ALLOW_MUTATION=1 PYTHONDONTWRITEBYTECODE=1 PYTHONPATH=src .venv/bin/pytest -q -p no:cacheprovider tests/production/test_postgres_runtime.py` | 44 passed, 0 skipped | Seven cases use a real local UTF-8 PostgreSQL 18.4 database for pre-release rejection, clean schema-v1 creation/checksum/DDL tamper fencing, mailbox visibility, reconnect fencing, quota admission, breaker CAS, and conflict/adjudication serialization; 37 are hermetic connection/SQLite contracts. No multi-node HA/failover/PITR or PostgreSQL restore-execution claim. |
 | Four installed deterministic harnesses | `PYTHONDONTWRITEBYTECODE=1 UV_CACHE_DIR=/tmp/uv-cache uv run pytest -q -p no:cacheprovider tests/adapters/test_installed_live_inference.py` | 8 passed in 1.94s | Exact installed version probes and deterministic private lifecycles only; no inference or semantic conformance. |
 | Native A2A local regression | `.venv/bin/pytest -q tests/a2a` | Included in the broad run; all checked-in A2A tests passed | H/L SDK, mapping, security, callback, persistence, and gateway evidence only. |

docs/npm-installation.md

@@ -24,7 +24,7 @@ pi install git:github.com/misunders2d/agentnet
 
 - Linux
 - Node.js 22.19 or newer
-- [`uv`](https://docs.astral.sh/uv/) on `PATH`
+- [`uv`](https://docs.astral.sh/uv/) 0.11.28 or newer on `PATH`
 
 The launcher uses the committed `uv.lock` and selects the release-certified CPython `3.13.13` runtime. The Python package remains compatible with `>=3.13,<3.15`, but the npm launcher is deliberately stricter so different hosts cannot silently verify the same release with different interpreter minors. It keeps an environment keyed by package version and install identity under the current user's state directory. Global npm and Pi-managed copies therefore do not rebind each other's Python environment. Override that location with an absolute `AGENTNET_NPM_RUNTIME_DIR` when needed.
 
@@ -47,7 +47,7 @@ Also verify `uv` independently:
 command -v uv
 ```
 
-Install `uv` from <https://docs.astral.sh/uv/> if that command prints nothing.
+Run `uv --version` and require 0.11.28 or newer. Install or explicitly upgrade `uv` from <https://docs.astral.sh/uv/> when needed; AgentNet never modifies the host `uv` installation automatically.
 
 ## Verify a source checkout before publication
 

evidence/local/2026-07-14-v0.1.5/artifacts/agentnet-0.1.5-py3-none-any.whl

@@ -1,12 +1,12 @@
 {
   "run_id": "2026-07-14-v0.1.5",
-  "evaluated_at": "2026-07-14T15:31:00+00:00",
+  "evaluated_at": "2026-07-14T16:25:00+00:00",
   "scope": "focused_packed_npm_release_repair",
   "release_certified": false,
   "release_source_tree_sha256": "5163628bf1e7b14a6dad03827fd5e51edd10f01ded21293a78be43d4acba1d08",
   "prior_runtime_evidence": "evidence/local/2026-07-13-final/manifest.json",
   "supersedes_package_evidence": "evidence/local/2026-07-14-v0.1.4/manifest.json",
-  "change_boundary": "Exact npm evidence-file inclusion, artifact-retention metadata, certified npm interpreter selection, and a full clean packed-tarball prepublication gate; no identity, authorization, protocol, storage, delivery, A2A, or production-gate semantics change.",
+  "change_boundary": "Exact npm evidence-file inclusion, artifact-retention metadata, certified npm interpreter selection, explicit uv 0.11.28+ enforcement without host mutation, and a full clean packed-tarball prepublication gate; no identity, authorization, protocol, storage, delivery, A2A, or production-gate semantics change.",
   "commands": [
     {
       "command": "public @misunders2d/agentnet@0.1.4 tarball clean install; full agentnet verify from unrelated cwd",
@@ -18,11 +18,11 @@
     },
     {
       "command": "release source suite with the three separately gated host-specific files excluded",
-      "result": "910 passed; 7 expected PostgreSQL skips"
+      "result": "911 passed; 7 expected PostgreSQL skips"
     },
     {
       "command": "npm run check:packed",
-      "result": "clean installed npm tarball; CPython 3.13.13; full agentnet verify from unrelated cwd; 910 passed; 7 expected PostgreSQL skips"
+      "result": "clean installed npm tarball; uv 0.11.28+ enforced; CPython 3.13.13; full agentnet verify from unrelated cwd; 911 passed; 7 expected PostgreSQL skips"
     },
     {
       "command": "uv run --python 3.13.13 python scripts/verify_release.py",
@@ -32,11 +32,11 @@
   "artifacts": [
     {
       "path": "evidence/local/2026-07-14-v0.1.5/artifacts/agentnet-0.1.5.tar.gz",
-      "sha256": "cb98099ca8acf8aaa500684888fdd1e0693bcca6590d40164c74be4180d85203"
+      "sha256": "b77a614bba6c23162a671bd484787018d350d8d06e6bfa0e1e6358565f6551e6"
     },
     {
       "path": "evidence/local/2026-07-14-v0.1.5/artifacts/agentnet-0.1.5-py3-none-any.whl",
-      "sha256": "4ce3d691c3441ae1e6af4fc0e3b1a91819818f1ef1bd1fe9069681f0f761cc40"
+      "sha256": "1428a65792a2c4170d5f002d809bb8c43a9378607940a33a4e76fb876071f9c6"
     }
   ]
 }

evidence/local/2026-07-14-v0.1.5/artifacts/agentnet-0.1.5.tar.gz

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { spawn } from "node:child_process";
+import { spawn, spawnSync } from "node:child_process";
 import { createHash } from "node:crypto";
 import { chmodSync, lstatSync, mkdirSync, readFileSync, realpathSync } from "node:fs";
 import os from "node:os";
@@ -21,6 +21,41 @@ if (process.platform !== "linux") {
   process.exit(1);
 }
 
+const uvExecutable = process.env.AGENTNET_UV || "uv";
+const minimumUvVersion = [0, 11, 28];
+const uvVersion = spawnSync(uvExecutable, ["--version"], {
+  encoding: "utf8",
+  shell: false,
+});
+if (uvVersion.error?.code === "ENOENT") {
+  console.error("AgentNet requires uv 0.11.28 or newer on PATH: https://docs.astral.sh/uv/");
+  process.exit(1);
+}
+if (uvVersion.error || uvVersion.status !== 0) {
+  console.error("AgentNet could not determine the installed uv version.");
+  process.exit(1);
+}
+const uvMatch = /^uv (\d+)\.(\d+)\.(\d+)(?:\s|$)/.exec(uvVersion.stdout.trim());
+if (!uvMatch) {
+  console.error("AgentNet could not parse the installed uv version.");
+  process.exit(1);
+}
+const actualUvVersion = uvMatch.slice(1).map(Number);
+const versionAtLeast = (actual, minimum) => {
+  for (let index = 0; index < minimum.length; index += 1) {
+    if (actual[index] > minimum[index]) return true;
+    if (actual[index] < minimum[index]) return false;
+  }
+  return true;
+};
+if (!versionAtLeast(actualUvVersion, minimumUvVersion)) {
+  console.error(
+    `AgentNet requires uv 0.11.28 or newer; found ${actualUvVersion.join(".")}. ` +
+      "Upgrade uv explicitly, then retry.",
+  );
+  process.exit(1);
+}
+
 const stateRoot = process.env.XDG_STATE_HOME
   ? path.resolve(process.env.XDG_STATE_HOME)
   : path.join(os.homedir(), ".local", "state");
@@ -50,7 +85,6 @@ const uvArguments = [
 if (verify) uvArguments.push("--extra", "test");
 uvArguments.push("agentnet", ...userArguments);
 
-const uvExecutable = process.env.AGENTNET_UV || "uv";
 const child = spawn(uvExecutable, uvArguments, {
   stdio: "inherit",
   env: {

evidence/local/2026-07-14-v0.1.5/manifest.json

@@ -74,5 +74,8 @@ const launcherText = readFileSync(launcher, "utf8");
 if (!launcherText.includes('"3.13.13"') || launcherText.includes('">=3.13,<3.15"')) {
   fail("npm launcher is not pinned to certified CPython 3.13.13");
 }
+if (!launcherText.includes("minimumUvVersion = [0, 11, 28]")) {
+  fail("npm launcher does not enforce the minimum supported uv version");
+}
 
 if (!process.exitCode) console.log("npm package check: PASS");

npm/bin/agentnet.mjs

@@ -99,6 +99,48 @@ def test_npm_launcher_is_locked_shell_free_and_user_scoped() -> None:
     )["scripts"]
 
 
+@pytest.mark.skipif(shutil.which("node") is None, reason="Node.js is unavailable")
+def test_npm_launcher_rejects_unsupported_uv_before_runtime_creation(tmp_path: Path) -> None:
+    package_root = tmp_path / "package"
+    launcher = package_root / "npm/bin/agentnet.mjs"
+    launcher.parent.mkdir(parents=True)
+    shutil.copy2(ROOT / "npm/bin/agentnet.mjs", launcher)
+    (package_root / "package.json").write_text(
+        json.dumps({"version": "0.1.5"}),
+        encoding="utf-8",
+    )
+    fake_uv = tmp_path / "old-uv"
+    fake_uv.write_text(
+        f"#!{sys.executable}\nprint('uv 0.9.13')\n",
+        encoding="utf-8",
+    )
+    fake_uv.chmod(0o700)
+    state_root = tmp_path / "state"
+    environment = os.environ.copy()
+    environment.update(
+        {
+            "AGENTNET_UV": str(fake_uv),
+            "XDG_STATE_HOME": str(state_root),
+        }
+    )
+
+    completed = subprocess.run(
+        ["node", str(launcher), "--version"],
+        check=False,
+        capture_output=True,
+        text=True,
+        env=environment,
+        timeout=30,
+    )
+
+    assert completed.returncode == 1
+    assert completed.stderr == (
+        "AgentNet requires uv 0.11.28 or newer; found 0.9.13. "
+        "Upgrade uv explicitly, then retry.\n"
+    )
+    assert not state_root.exists()
+
+
 @pytest.mark.skipif(shutil.which("npm") is None, reason="npm is unavailable")
 def test_npm_dry_run_tarball_contains_release_verifier_inputs() -> None:
     completed = subprocess.run(
@@ -131,7 +173,10 @@ def test_same_version_npm_installs_use_distinct_runtime_roots(tmp_path: Path) ->
     fake_uv = tmp_path / "fake-uv"
     fake_uv.write_text(
         f"#!{sys.executable}\n"
-        "import json, os\n"
+        "import json, os, sys\n"
+        "if sys.argv[1:] == ['--version']:\n"
+        "    print('uv 0.11.28')\n"
+        "    raise SystemExit(0)\n"
         "from pathlib import Path\n"
         "Path(os.environ['AGENTNET_TEST_CAPTURE']).write_text(json.dumps({\n"
         "  'package_root': os.environ['AGENTNET_PACKAGE_ROOT'],\n"