mirror of
https://github.com/bytedance/deer-flow.git
synced 2026-09-14 16:08:41 +00:00
* feat(extensions): observe task lifecycle and system model calls PR 1 (#4636) gave extensions a middleware chain, and a middleware only sees what passes through the agent graph. Two runtime surfaces stay invisible to it: when a lead run or a subagent begins and ends, and the DeerFlow-owned model calls made outside the graph. This slice adds both, with no new Gateway surface -- routers, services, and the reference extension stay in PR 3. Contract (deerflow-extension-api 0.1.1) --------------------------------------- Two contribution kinds join `middlewares` on the registry: `task_lifecycle` (`on_task_start` / `on_task_stop`, receiving a `TaskInfo` and a conservative `TaskOutcome` of completed / aborted / failed) and `system_model_observer` (`on_system_model_call`, receiving a `SystemOperationKind`, a `SystemModelRequest` snapshot, and a `SystemModelResult` carrying either the response or the provider exception plus a duration). `SystemModelRequest.messages` normalizes to a tuple at construction. Goal evaluation and memory extraction pass a message list while title generation and summarization pass one prompt string, and a bare `str` already satisfies `Sequence` -- without normalization an observer iterating `request.messages` would silently walk characters. Copying also makes the frozen snapshot immutable in fact rather than only by declaration, since observations may run after the call site returns and keeps mutating its own list. Registry marks and rollbacks become per-bucket and positional, so an `install()` that fails after registering two different kinds cannot leave one of them behind. `needs_task_store` now covers all three kinds: a deployment that registers only lifecycle hooks still gets a task store. Task lifecycle -------------- The lead worker notifies start after the run has started and stop after completion persistence and the completion hook, but before clearing the finalizing barrier and publishing the stream end -- holding the barrier across stop is what keeps a same-thread replacement run from overlapping this task's lifecycle. Cancellation raised out of the stop notification is deferred, not propagated in place, so a cancelled run still clears the barrier and emits its end frame. A subagent with a parent `run_id` wraps its execution in the same pair inside `finally`, reporting `parent_task_id` so a delegation tree is reconstructable; a subagent without a `run_id` (embedded client, standalone LangGraph Server) logs and skips rather than inventing a parent. Contributors run in registration order inside one shared 3s budget and every failure is logged and failed open. System model calls ------------------ Four kinds cover the model calls the middleware chain cannot see: goal evaluation, memory extraction, title generation, and summarization. Each site reports both terminal paths without changing the provider exception the host observes, short-circuits on `has_system_model_observers`, and passes the live task store when the runtime has one (detached work gets an isolated store). The sync summarization half stays unobserved on purpose -- it and its only host caller are the sync side of an async-only runtime, so notifying there would block a thread on a call site the host never reaches; the reason is recorded at the call site. The DeerMem backend must stay vendorable and cannot import the extension API, so it reports through a new `MemoryCallbacks.on_memory_llm_result` host hook that the DeerFlow-side callbacks translate into an observation. Notification loop ----------------- Extension resources must be touched on the loop that created them, but subagents can execute on isolated loops and DeerMem runs on a worker thread. The Gateway registers its serving loop before any runtime dependency starts and resets it last through the exit stack, so every startup-failure and cancellation path is covered. Awaited hooks raised on another loop are dispatched across with `run_coroutine_threadsafe` and awaited under the same budget; synchronous sites submit fire-and-forget work. Shutdown stops accepting detached observations before the memory flush -- that flush runs on a worker thread and can emit memory observations -- while keeping the loop alive for awaited task hooks until run and subagent drain completes. Tests ----- `test_extension_task_lifecycle.py`, `test_extension_subagent_lifecycle.py`, and `test_extension_system_model_calls.py` cover ordering, fail-open, budget exhaustion, snapshot binding under a concurrent singleton replacement, the loop-dispatch and shutdown-suspension paths, and both terminal paths at every call site. `test_gateway_run_drain_shutdown.py` pins the stop-before-barrier and drain ordering. * fix(extensions): decide notification fail-open by origin, observe cancellation `_notify_each` only guarded `Exception`, so a contributor letting a `CancelledError` escape — an extension implementing an internal timeout with cancellation, say — skipped its successors and reached the worker's deferred-interrupt path, ending an otherwise successful run as cancelled. Fail-open is about where a failure came from, not its base class: only a genuine cancellation of the host task increments `Task.cancelling()`, so propagate on that and contain everything else. `KeyboardInterrupt` / `SystemExit` still propagate. `observe_system_model_call` skipped observers on cancellation for the same base-class reason, leaving goal / title / summarization silent on a terminal path that is routine — interrupt/rollback admission and shutdown both cancel the run task, with the provider tokens already spent. Awaiting observers there is unreliable (a repeated cancel interrupts that await before any of them runs), so report through the same non-blocking submission the synchronous memory bridge uses, then propagate the cancellation untouched. DeerMem keeps `BaseException` around its provider call, now with the reason recorded: that path runs on a worker thread, where cancelling the awaiting side never interrupts the running thread, so `CancelledError` cannot arrive at all. Its host-hook wrapper narrows to `Exception` — only the hook's own failures are non-fatal, and an observability path must not swallow a process teardown signal. * fix(extensions): warn on budget exhaustion, scope observer logs by task, propagate teardown Review response on #4684: - The memory observation bridge caught BaseException, which would swallow a teardown signal raised while dispatching; it now catches Exception, matching the boundary the DeerMem-side call site documents and tests. - A notification-budget timeout raised mid-hook fell into the generic hook-failure path and logged an asyncio-internal traceback; it now logs a warning like the pre-hook budget skip, while a TimeoutError a contributor raises on its own stays classified as a hook failure. - System model observer logs passed the operation kind as the task id, so log lines said "task goal/title/..."; they now carry the task scope id alongside the kind.
385 lines
15 KiB
Python
385 lines
15 KiB
Python
"""Tests for config-driven extension loading."""
|
|
|
|
from __future__ import annotations
|
|
|
|
import pytest
|
|
|
|
from deerflow.extensions.loader import (
|
|
Diagnostic,
|
|
ExtensionLoadError,
|
|
ExtensionSpec,
|
|
load_extensions,
|
|
)
|
|
from extension_test_fixtures import demo_extensions
|
|
|
|
_FIXTURE = "extension_test_fixtures.demo_extensions"
|
|
|
|
|
|
@pytest.fixture(autouse=True)
|
|
def _reset_fixture_state():
|
|
demo_extensions.INSTALLED.clear()
|
|
yield
|
|
demo_extensions.INSTALLED.clear()
|
|
|
|
|
|
def test_no_specs_yields_empty_result():
|
|
loaded, diagnostics = load_extensions([])
|
|
assert diagnostics == []
|
|
assert loaded.has_middleware_contributors is False
|
|
|
|
|
|
def test_successful_install_registers_and_attributes():
|
|
spec = ExtensionSpec(use=f"{_FIXTURE}:install_ok")
|
|
loaded, diagnostics = load_extensions([spec])
|
|
assert diagnostics == []
|
|
assert demo_extensions.INSTALLED == ["ok"]
|
|
assert loaded.middleware_contributors[0][0] == f"{_FIXTURE}:install_ok"
|
|
|
|
|
|
def test_config_block_is_passed_through_verbatim():
|
|
spec = ExtensionSpec(use=f"{_FIXTURE}:install_reads_config", config={"mode": "fast"})
|
|
load_extensions([spec])
|
|
assert demo_extensions.INSTALLED == ["config:fast"]
|
|
|
|
|
|
def test_disabled_extension_registers_nothing():
|
|
spec = ExtensionSpec(use=f"{_FIXTURE}:install_disabled", config={"enabled": False})
|
|
loaded, diagnostics = load_extensions([spec])
|
|
assert diagnostics == []
|
|
assert loaded.has_middleware_contributors is False
|
|
|
|
|
|
def test_load_order_follows_config_order():
|
|
specs = [
|
|
ExtensionSpec(use=f"{_FIXTURE}:install_ok"),
|
|
ExtensionSpec(use=f"{_FIXTURE}:install_stamped"),
|
|
]
|
|
load_extensions(specs)
|
|
assert demo_extensions.INSTALLED == ["ok", "stamped"]
|
|
|
|
|
|
def test_unresolvable_entry_point_is_skipped_with_an_error_diagnostic():
|
|
specs = [
|
|
ExtensionSpec(use="extension_test_fixtures.demo_extensions:does_not_exist"),
|
|
ExtensionSpec(use=f"{_FIXTURE}:install_ok"),
|
|
]
|
|
loaded, diagnostics = load_extensions(specs)
|
|
assert [d.level for d in diagnostics] == ["error"]
|
|
assert "does_not_exist" in diagnostics[0].source
|
|
assert demo_extensions.INSTALLED == ["ok"], "a broken extension must not stop the rest"
|
|
|
|
|
|
def test_non_callable_entry_point_is_rejected():
|
|
spec = ExtensionSpec(use=f"{_FIXTURE}:NOT_CALLABLE")
|
|
loaded, diagnostics = load_extensions([spec])
|
|
assert diagnostics[0].level == "error"
|
|
assert "callable" in diagnostics[0].message
|
|
|
|
|
|
def test_install_failure_rolls_back_partial_registration():
|
|
specs = [
|
|
ExtensionSpec(use=f"{_FIXTURE}:install_partial_then_raise"),
|
|
ExtensionSpec(use=f"{_FIXTURE}:install_ok"),
|
|
]
|
|
loaded, diagnostics = load_extensions(specs)
|
|
assert diagnostics[0].level == "error"
|
|
assert "boom" in diagnostics[0].message
|
|
sources = {source for source, _ in loaded.middleware_contributors}
|
|
assert sources == {f"{_FIXTURE}:install_ok"}
|
|
assert len(loaded.middleware_contributors) == 1, "rollback must clear every partial registration"
|
|
assert loaded.task_lifecycle == (), "rollback must clear partial lifecycle registrations too"
|
|
|
|
|
|
def test_rollback_does_not_remove_a_different_specs_registrations_sharing_the_same_use():
|
|
"""Two specs may legitimately share `use` with different config (e.g. the
|
|
same extension mounted twice with different settings). Rollback on the
|
|
second's install failure must be positional, not keyed by `use` — it must
|
|
not erase the first instance's already-successful registrations just
|
|
because they share a source string."""
|
|
specs = [
|
|
ExtensionSpec(use=f"{_FIXTURE}:install_shared_use", config={"label": "first"}),
|
|
ExtensionSpec(use=f"{_FIXTURE}:install_shared_use", config={"label": "second", "fail": True}),
|
|
]
|
|
loaded, diagnostics = load_extensions(specs)
|
|
assert [d.level for d in diagnostics] == ["error"]
|
|
assert "boom-shared" in diagnostics[0].message
|
|
assert len(loaded.middleware_contributors) == 1
|
|
source, contributor = loaded.middleware_contributors[0]
|
|
assert source == f"{_FIXTURE}:install_shared_use"
|
|
assert contributor.tag == "shared:first"
|
|
|
|
|
|
def test_required_extension_failure_aborts_startup():
|
|
spec = ExtensionSpec(use=f"{_FIXTURE}:install_partial_then_raise", required=True)
|
|
with pytest.raises(ExtensionLoadError):
|
|
load_extensions([spec])
|
|
|
|
|
|
def test_required_unresolvable_extension_aborts_startup():
|
|
spec = ExtensionSpec(use="nope.nothing:here", required=True)
|
|
with pytest.raises(ExtensionLoadError):
|
|
load_extensions([spec])
|
|
|
|
|
|
def test_incompatible_declared_api_is_refused_with_actionable_message():
|
|
spec = ExtensionSpec(use=f"{_FIXTURE}:install_future_api")
|
|
loaded, diagnostics = load_extensions([spec])
|
|
assert diagnostics[0].level == "error"
|
|
assert "99.0" in diagnostics[0].message
|
|
assert "pip install" in diagnostics[0].message
|
|
assert demo_extensions.INSTALLED == [], "an incompatible extension must not run"
|
|
|
|
|
|
def test_optional_extension_with_non_string_api_marker_is_skipped_with_a_diagnostic(monkeypatch):
|
|
monkeypatch.setattr(demo_extensions.install_ok, "__deerflow_api__", 101, raising=False)
|
|
spec = ExtensionSpec(use=f"{_FIXTURE}:install_ok")
|
|
|
|
loaded, diagnostics = load_extensions([spec])
|
|
|
|
assert loaded.has_middleware_contributors is False
|
|
assert demo_extensions.INSTALLED == [], "an invalid API marker must be rejected before install()"
|
|
assert len(diagnostics) == 1
|
|
assert diagnostics[0].level == "error"
|
|
assert diagnostics[0].source == spec.use
|
|
assert "invalid extension-api version marker" in diagnostics[0].message
|
|
assert "int" in diagnostics[0].message
|
|
|
|
|
|
def test_required_extension_with_non_string_iterable_api_marker_fails_closed(monkeypatch):
|
|
class _IterableAPIMarker:
|
|
def split(self, separator: str) -> list[object]:
|
|
return [object()]
|
|
|
|
def __str__(self) -> str:
|
|
return "non-string iterable marker"
|
|
|
|
monkeypatch.setattr(
|
|
demo_extensions.install_ok,
|
|
"__deerflow_api__",
|
|
_IterableAPIMarker(),
|
|
raising=False,
|
|
)
|
|
spec = ExtensionSpec(
|
|
use=f"{_FIXTURE}:install_ok",
|
|
required=True,
|
|
)
|
|
|
|
with pytest.raises(ExtensionLoadError, match="declares invalid api marker"):
|
|
load_extensions([spec])
|
|
|
|
assert demo_extensions.INSTALLED == [], "an invalid API marker must be rejected before install()"
|
|
|
|
|
|
def test_optional_extension_with_unrenderable_api_marker_still_returns_a_diagnostic(monkeypatch):
|
|
class _UnrenderableAPIMarker:
|
|
def __str__(self) -> str:
|
|
raise RuntimeError("API marker string rendering exploded")
|
|
|
|
monkeypatch.setattr(
|
|
demo_extensions.install_ok,
|
|
"__deerflow_api__",
|
|
_UnrenderableAPIMarker(),
|
|
raising=False,
|
|
)
|
|
spec = ExtensionSpec(use=f"{_FIXTURE}:install_ok")
|
|
|
|
loaded, diagnostics = load_extensions([spec])
|
|
|
|
assert loaded.has_middleware_contributors is False
|
|
assert demo_extensions.INSTALLED == []
|
|
assert len(diagnostics) == 1
|
|
assert diagnostics[0].level == "error"
|
|
assert "invalid extension-api version marker" in diagnostics[0].message
|
|
assert "_UnrenderableAPIMarker" in diagnostics[0].message
|
|
|
|
|
|
@pytest.mark.parametrize("required", [False, True])
|
|
def test_extension_api_marker_getter_failure_obeys_required_policy(monkeypatch, required):
|
|
class _ExplodingMarkerInstall:
|
|
@property
|
|
def __deerflow_api__(self):
|
|
raise RuntimeError("API marker getter exploded")
|
|
|
|
def __call__(self, registry, config):
|
|
raise AssertionError("install must not run after marker inspection fails")
|
|
|
|
monkeypatch.setattr(
|
|
"deerflow.extensions.loader.resolve_variable",
|
|
lambda path: _ExplodingMarkerInstall(),
|
|
)
|
|
spec = ExtensionSpec(use="hostile_extension:install", required=required)
|
|
|
|
if required:
|
|
with pytest.raises(ExtensionLoadError, match="could not inspect api marker"):
|
|
load_extensions([spec])
|
|
return
|
|
|
|
loaded, diagnostics = load_extensions([spec])
|
|
assert loaded.has_middleware_contributors is False
|
|
assert len(diagnostics) == 1
|
|
assert "could not inspect extension-api version marker" in diagnostics[0].message
|
|
|
|
|
|
def test_string_subclass_api_marker_cannot_break_incompatibility_diagnostics(monkeypatch):
|
|
class _HostileString(str):
|
|
def split(self, separator: str):
|
|
raise RuntimeError("API marker split exploded")
|
|
|
|
def __str__(self) -> str:
|
|
raise RuntimeError("API marker string rendering exploded")
|
|
|
|
def __format__(self, format_spec: str) -> str:
|
|
raise RuntimeError("API marker formatting exploded")
|
|
|
|
monkeypatch.setattr(
|
|
demo_extensions.install_ok,
|
|
"__deerflow_api__",
|
|
_HostileString("99.0"),
|
|
raising=False,
|
|
)
|
|
spec = ExtensionSpec(use=f"{_FIXTURE}:install_ok")
|
|
|
|
loaded, diagnostics = load_extensions([spec])
|
|
|
|
assert loaded.has_middleware_contributors is False
|
|
assert demo_extensions.INSTALLED == []
|
|
assert len(diagnostics) == 1
|
|
assert "99.0" in diagnostics[0].message
|
|
|
|
|
|
def test_compatible_string_subclass_api_marker_can_load(monkeypatch):
|
|
class _HostileString(str):
|
|
def split(self, separator: str):
|
|
raise RuntimeError("API marker split exploded")
|
|
|
|
def __str__(self) -> str:
|
|
raise RuntimeError("API marker string rendering exploded")
|
|
|
|
def __format__(self, format_spec: str) -> str:
|
|
raise RuntimeError("API marker formatting exploded")
|
|
|
|
monkeypatch.setattr(
|
|
demo_extensions.install_ok,
|
|
"__deerflow_api__",
|
|
_HostileString("0.1.0"),
|
|
raising=False,
|
|
)
|
|
|
|
loaded, diagnostics = load_extensions([ExtensionSpec(use=f"{_FIXTURE}:install_ok")])
|
|
|
|
assert diagnostics == []
|
|
assert loaded.has_middleware_contributors is True
|
|
assert demo_extensions.INSTALLED == ["ok"]
|
|
|
|
|
|
def test_newer_minor_declared_api_is_refused():
|
|
"""Before 1.0, minors carry no compatibility promise: an extension written
|
|
against 0.2 may use contracts a 0.1 host does not implement, and the host
|
|
must refuse it with an actionable message."""
|
|
spec = ExtensionSpec(use=f"{_FIXTURE}:install_newer_minor_api")
|
|
loaded, diagnostics = load_extensions([spec])
|
|
assert diagnostics[0].level == "error"
|
|
assert "0.2" in diagnostics[0].message
|
|
assert "pip install" in diagnostics[0].message
|
|
assert demo_extensions.INSTALLED == [], "a newer-minor extension must not run on an older host"
|
|
|
|
|
|
def test_newer_minor_required_extension_aborts_startup():
|
|
spec = ExtensionSpec(use=f"{_FIXTURE}:install_newer_minor_api", required=True)
|
|
with pytest.raises(ExtensionLoadError):
|
|
load_extensions([spec])
|
|
|
|
|
|
def test_compatible_declared_api_loads():
|
|
spec = ExtensionSpec(use=f"{_FIXTURE}:install_stamped")
|
|
loaded, diagnostics = load_extensions([spec])
|
|
assert diagnostics == []
|
|
assert demo_extensions.INSTALLED == ["stamped"]
|
|
assert loaded.has_task_lifecycle is True
|
|
assert loaded.task_lifecycle[0][0] == f"{_FIXTURE}:install_stamped"
|
|
|
|
|
|
def test_compatible_follows_semver_windows():
|
|
"""0.x: minors may break — the window is same major.minor with patches
|
|
additive (host >= declared). From 1.0 on: contracts only grow within a
|
|
major. Comparisons are numeric (1.10 > 1.9), not lexicographic."""
|
|
from deerflow.extensions.loader import _compatible
|
|
|
|
# 0.x window: same major.minor, patch-level growth only.
|
|
assert _compatible("0.1", "0.1")
|
|
assert _compatible("0.1", "0.1.1"), "patch growth stays compatible"
|
|
assert not _compatible("0.1.1", "0.1"), "a newer patch declaration exceeds what the host provides"
|
|
assert not _compatible("0.2", "0.1"), "0.x minors may break: a 0.1 host must refuse 0.2 extensions"
|
|
assert not _compatible("0.1", "0.2"), "0.x minors promise nothing in the other direction either"
|
|
|
|
# 1.x+ window: same major, contracts only grow.
|
|
assert _compatible("1.0", "1.0")
|
|
assert _compatible("1.0", "1.1"), "a newer host still provides everything a 1.0 extension declared"
|
|
assert _compatible("1.9", "1.10"), "minor comparison is numeric, not lexicographic"
|
|
assert not _compatible("1.1", "1.0"), "the 1.0 host lacks the 1.1 contract additions"
|
|
assert not _compatible("1.10", "1.9")
|
|
assert not _compatible("1.0.1", "1.0"), "even a newer patch declaration exceeds what the host provides"
|
|
assert not _compatible("2.0", "1.5"), "major mismatch"
|
|
assert not _compatible("1.0", "2.0"), "major mismatch"
|
|
assert not _compatible("not-a-version", "1.0"), "unparseable versions are refused, not waved through"
|
|
|
|
|
|
def test_undeclared_api_is_allowed():
|
|
"""The decorator is optional; pip constraints remain the primary gate."""
|
|
spec = ExtensionSpec(use=f"{_FIXTURE}:install_ok")
|
|
_, diagnostics = load_extensions([spec])
|
|
assert diagnostics == []
|
|
|
|
|
|
def test_a_successful_load_is_reported(caplog):
|
|
"""Every other branch is failure-only, so without this line an operator has
|
|
no way to tell a clean load from a `plugins:` block the host never read."""
|
|
with caplog.at_level("INFO", logger="deerflow.extensions.loader"):
|
|
load_extensions([ExtensionSpec(use=f"{_FIXTURE}:install_ok")])
|
|
|
|
assert f"Extensions loaded: 1/1 ({_FIXTURE}:install_ok)" in caplog.text
|
|
|
|
|
|
def test_the_report_counts_skipped_extensions_apart_from_loaded_ones(caplog):
|
|
specs = [
|
|
ExtensionSpec(use=f"{_FIXTURE}:install_ok"),
|
|
ExtensionSpec(use="does.not.exist:install"),
|
|
]
|
|
with caplog.at_level("INFO", logger="deerflow.extensions.loader"):
|
|
load_extensions(specs)
|
|
|
|
assert f"Extensions loaded: 1/2 ({_FIXTURE}:install_ok)" in caplog.text
|
|
|
|
|
|
def test_an_all_failed_load_reports_none_rather_than_an_empty_list(caplog):
|
|
with caplog.at_level("INFO", logger="deerflow.extensions.loader"):
|
|
load_extensions([ExtensionSpec(use="does.not.exist:install")])
|
|
|
|
assert "Extensions loaded: 0/1 (none)" in caplog.text
|
|
|
|
|
|
def test_no_configured_plugins_stays_off_the_info_log(caplog):
|
|
"""The default state for nearly every deployment; a line here is boot noise."""
|
|
with caplog.at_level("INFO", logger="deerflow.extensions.loader"):
|
|
load_extensions([])
|
|
|
|
assert "Extensions loaded" not in caplog.text
|
|
|
|
|
|
def test_diagnostic_helpers_set_level():
|
|
assert Diagnostic.error("s", "m").level == "error"
|
|
assert Diagnostic.warning("s", "m").level == "warning"
|
|
assert Diagnostic.info("s", "m").level == "info"
|
|
assert Diagnostic.debug("s", "m").level == "debug"
|
|
|
|
|
|
def test_host_registry_satisfies_the_public_contract():
|
|
"""Extensions annotate install(registry: ExtensionRegistry, ...) against
|
|
the contract package alone; the host's concrete registry must satisfy that
|
|
Protocol, or every correctly-annotated extension is lying about its types."""
|
|
from deerflow_extension_api import ExtensionRegistry as ContractRegistry
|
|
|
|
from deerflow.extensions.registry import ExtensionRegistry as HostRegistry
|
|
|
|
assert isinstance(HostRegistry(), ContractRegistry)
|