mirror of
https://github.com/bytedance/deer-flow.git
synced 2026-09-23 13:06:20 +00:00
* feat(extensions): let an out-of-tree extension observe what the agent did
DeerFlow's extension system can contribute middleware, services and routes,
but an extension cannot answer basic questions about a run without reaching
into host internals. Several of the facts it would need are destroyed by the
operations that produce them:
* The middleware chain injects and rewrites a lot of context — date
reminders, recalled memory, compaction summaries, durable-context data,
image payloads, activated skill bodies. Downstream, none of it is
attributable: at the model-call boundary an injected HumanMessage is
indistinguishable from the user's own, and anything wanting to tell them
apart has to pattern-match prompt wording, which breaks on the next copy
edit.
* Two runs of "the same agent" are only comparable if the chain enforced the
same limits, prompts and thresholds. Recovering that from outside means
reading private attributes and guessing which of them change behaviour — a
guess that rots silently as middlewares gain fields.
* The lead-agent factory resolves a model after runtime overrides, renders a
prompt, filters tools through authorization and composes a stack, all
inside one synchronous call, and none of it survives: a middleware sees its
neighbours but not the prompt, the run worker sees a graph but not what
went into it.
* Summarization is destructive by design. N messages leave the context and
one summary enters it; afterwards only the summary exists, so "which
messages became this?" is not reconstructible.
This adds seven neutral facilities so those facts are recorded where they are
still true, and releases the contract package as 0.2.0.
Message provenance
Producers stamp `deerflow_content_kind` / `deerflow_producer_kind` onto the
messages they inject or rewrite. Stamping is unconditional — a fact whose
presence depends on whether an observer is installed is not a fact — and the
keys are server-owned, so provenance cannot be forged from a request.
Middleware self-description
Twelve middlewares declare their own behaviour-affecting parameters through
a duck-typed `release_policy_parameters()`. Long text is hashed rather than
embedded: a declaration is an identity, not a copy of the prompt.
Agent assembly descriptor
`assemble_lead_agent()` returns the graph plus a descriptor whose fingerprint
answers "did anything about this agent change between these two runs?".
`make_lead_agent()` keeps its graph-only signature — it is the LangGraph
Server ABI declared in langgraph.json. Tools and skills are sorted before
hashing because their assembly order is incidental; middlewares are not,
because stack order decides what wraps what. Host build identity is reported
but excluded from the fingerprint, so a redeploy does not invalidate every
agent's identity.
Context compaction observation
Summarization emits the content hashes of the messages it is about to remove
joined to the summary that replaced them. Content is the only identity
available at that seam: the summary does not become a message, and what later
projects it into a request renders it bounded and escaped rather than
verbatim.
Neutral policy, transform and MCP-source facts
Guardrail decisions are published to runtime context under a `__`-prefixed
key; result-rewriting middlewares append a declared, ordered transform trail;
MCP tools carry their credential-free logical origin.
Extension route identity
Contributed routes are session-authenticated and cannot opt out, but
"logged in" and "administrator" are different questions. Extensions get a
neutral projection of the caller rather than the host's auth context, and
`require_admin` fails closed when identity cannot be determined.
Extension-owned tables
An extension that persists data owns its own MetaData and migration chain, so
its tables are absent from Base.metadata and `alembic revision --autogenerate`
proposes dropping them. Extensions declare a table prefix, which is rejected
at registration if it would shadow a host table.
The contract package stays dependency-free and imports no host code; every new
Protocol method has a default so later additions remain additive. The loader's
pre-1.0 rule requires an exact major.minor match, so extensions written against
0.1 are now refused at startup with an actionable install hint rather than
loading into a host that implements a different surface.
uv.lock records the contract package's new version, so `uv sync --locked` still
resolves on a fresh checkout.
* fix(backend): sort gateway service imports
376 lines
16 KiB
Python
376 lines
16 KiB
Python
"""Middleware that extends TodoListMiddleware with context-loss detection and premature-exit prevention.
|
|
|
|
When the message history is truncated (e.g., by SummarizationMiddleware), the
|
|
original `write_todos` tool call and its ToolMessage can be scrolled out of the
|
|
active context window. This middleware detects that situation and injects a
|
|
reminder message so the model still knows about the outstanding todo list.
|
|
|
|
Additionally, this middleware prevents the agent from exiting the loop while
|
|
there are still incomplete todo items. When the model produces a final response
|
|
(no tool calls) but todos are not yet complete, the middleware queues a reminder
|
|
for the next model request and jumps back to the model node to force continued
|
|
engagement. The completion reminder is injected via ``wrap_model_call`` instead
|
|
of being persisted into graph state as a normal user-visible message.
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
import threading
|
|
from collections.abc import Awaitable, Callable
|
|
from typing import Any, override
|
|
|
|
from langchain.agents.middleware import TodoListMiddleware
|
|
from langchain.agents.middleware.todo import Todo
|
|
from langchain.agents.middleware.types import ModelCallResult, ModelRequest, ModelResponse, hook_config
|
|
from langchain_core.messages import AIMessage, HumanMessage
|
|
from langgraph.runtime import Runtime
|
|
|
|
from deerflow.agents.thread_state import ThreadState
|
|
|
|
|
|
def _todos_in_messages(messages: list[Any]) -> bool:
|
|
"""Return True if any AIMessage in *messages* contains a write_todos tool call."""
|
|
for msg in messages:
|
|
if isinstance(msg, AIMessage) and msg.tool_calls:
|
|
for tc in msg.tool_calls:
|
|
if tc.get("name") == "write_todos":
|
|
return True
|
|
return False
|
|
|
|
|
|
def _reminder_in_messages(messages: list[Any]) -> bool:
|
|
"""Return True if a todo_reminder HumanMessage is already present in *messages*."""
|
|
for msg in messages:
|
|
if isinstance(msg, HumanMessage) and getattr(msg, "name", None) == "todo_reminder":
|
|
return True
|
|
return False
|
|
|
|
|
|
def _format_todos(todos: list[Todo]) -> str:
|
|
"""Format a list of Todo items into a human-readable string."""
|
|
lines: list[str] = []
|
|
for todo in todos:
|
|
status = todo.get("status", "pending")
|
|
content = todo.get("content", "")
|
|
lines.append(f"- [{status}] {content}")
|
|
return "\n".join(lines)
|
|
|
|
|
|
def _format_completion_reminder(todos: list[Todo]) -> str:
|
|
"""Format a completion reminder for incomplete todo items."""
|
|
incomplete = [t for t in todos if t.get("status") != "completed"]
|
|
incomplete_text = "\n".join(f"- [{t.get('status', 'pending')}] {t.get('content', '')}" for t in incomplete)
|
|
return (
|
|
"<system_reminder>\n"
|
|
"You have incomplete todo items that must be finished before giving your final response:\n\n"
|
|
f"{incomplete_text}\n\n"
|
|
"Please continue working on these tasks. Call `write_todos` to mark items as completed "
|
|
"as you finish them, and only respond when all items are done.\n"
|
|
"</system_reminder>"
|
|
)
|
|
|
|
|
|
_TOOL_CALL_FINISH_REASONS = {"tool_calls", "function_call"}
|
|
|
|
|
|
def _has_tool_call_intent_or_error(message: AIMessage) -> bool:
|
|
"""Return True when an AIMessage is not a clean final answer.
|
|
|
|
Todo completion reminders should only fire when the model has produced a
|
|
plain final response. Provider/tool parsing details have moved across
|
|
LangChain versions and integrations, so keep all tool-intent/error signals
|
|
behind this helper instead of checking one concrete field at the call site.
|
|
"""
|
|
if message.tool_calls:
|
|
return True
|
|
|
|
if getattr(message, "invalid_tool_calls", None):
|
|
return True
|
|
|
|
# Backward/provider compatibility: some integrations preserve raw or legacy
|
|
# tool-call intent in additional_kwargs even when structured tool_calls is
|
|
# empty. If this helper changes, update the matching sentinel test
|
|
# `TestToolCallIntentOrError.test_langchain_ai_message_tool_fields_are_explicitly_handled`;
|
|
# if that test fails after a LangChain upgrade, review this helper so new
|
|
# tool-call/error fields are not silently treated as clean final answers.
|
|
additional_kwargs = getattr(message, "additional_kwargs", {}) or {}
|
|
if additional_kwargs.get("tool_calls") or additional_kwargs.get("function_call"):
|
|
return True
|
|
|
|
response_metadata = getattr(message, "response_metadata", {}) or {}
|
|
return response_metadata.get("finish_reason") in _TOOL_CALL_FINISH_REASONS
|
|
|
|
|
|
class TodoMiddleware(TodoListMiddleware):
|
|
"""Extends TodoListMiddleware with `write_todos` context-loss detection.
|
|
|
|
When the original `write_todos` tool call has been truncated from the message
|
|
history (e.g., after summarization), the model loses awareness of the current
|
|
todo list. This middleware detects that gap in `before_model` / `abefore_model`
|
|
and injects a reminder message so the model can continue tracking progress.
|
|
"""
|
|
|
|
state_schema = ThreadState
|
|
|
|
def release_policy_parameters(self) -> dict[str, object]:
|
|
from deerflow_extension_api import canonical_hash
|
|
|
|
return {
|
|
"system_prompt_hash": canonical_hash(self.system_prompt),
|
|
"tool_description_hash": canonical_hash(self.tool_description),
|
|
"state_channel": "todos",
|
|
}
|
|
|
|
@override
|
|
def before_model(
|
|
self,
|
|
state: ThreadState,
|
|
runtime: Runtime,
|
|
) -> dict[str, Any] | None:
|
|
"""Inject a todo-list reminder when write_todos has left the context window."""
|
|
todos: list[Todo] = state.get("todos") or [] # type: ignore[assignment]
|
|
if not todos:
|
|
return None
|
|
|
|
messages = state.get("messages") or []
|
|
if _todos_in_messages(messages):
|
|
# write_todos is still visible in context — nothing to do.
|
|
return None
|
|
|
|
if _reminder_in_messages(messages):
|
|
# A reminder was already injected and hasn't been truncated yet.
|
|
return None
|
|
|
|
# The todo list exists in state but the original write_todos call is gone.
|
|
# Inject a reminder as a HumanMessage so the model stays aware.
|
|
formatted = _format_todos(todos)
|
|
reminder = HumanMessage(
|
|
name="todo_reminder",
|
|
additional_kwargs={"hide_from_ui": True},
|
|
content=(
|
|
"<system_reminder>\n"
|
|
"Your todo list from earlier is no longer visible in the current context window, "
|
|
"but it is still active. Here is the current state:\n\n"
|
|
f"{formatted}\n\n"
|
|
"Continue tracking and updating this todo list as you work. "
|
|
"Call `write_todos` whenever the status of any item changes.\n"
|
|
"</system_reminder>"
|
|
),
|
|
)
|
|
return {"messages": [reminder]}
|
|
|
|
@override
|
|
async def abefore_model(
|
|
self,
|
|
state: ThreadState,
|
|
runtime: Runtime,
|
|
) -> dict[str, Any] | None:
|
|
"""Async version of before_model."""
|
|
return self.before_model(state, runtime)
|
|
|
|
# Maximum number of completion reminders before allowing the agent to exit.
|
|
# This prevents infinite loops when the agent cannot make further progress.
|
|
_MAX_COMPLETION_REMINDERS = 2
|
|
# Hard cap for per-run reminder bookkeeping in long-lived middleware instances.
|
|
_MAX_COMPLETION_REMINDER_KEYS = 4096
|
|
|
|
def __init__(self, *args: Any, **kwargs: Any) -> None:
|
|
super().__init__(*args, **kwargs)
|
|
self._lock = threading.Lock()
|
|
self._pending_completion_reminders: dict[tuple[str, str], list[str]] = {}
|
|
self._completion_reminder_counts: dict[tuple[str, str], int] = {}
|
|
self._completion_reminder_touch_order: dict[tuple[str, str], int] = {}
|
|
self._completion_reminder_next_order = 0
|
|
|
|
@staticmethod
|
|
def _get_thread_id(runtime: Runtime) -> str:
|
|
context = getattr(runtime, "context", None)
|
|
thread_id = context.get("thread_id") if context else None
|
|
return str(thread_id) if thread_id else "default"
|
|
|
|
@staticmethod
|
|
def _get_run_id(runtime: Runtime) -> str:
|
|
context = getattr(runtime, "context", None)
|
|
run_id = context.get("run_id") if context else None
|
|
return str(run_id) if run_id else "default"
|
|
|
|
def _pending_key(self, runtime: Runtime) -> tuple[str, str]:
|
|
return self._get_thread_id(runtime), self._get_run_id(runtime)
|
|
|
|
def _touch_completion_reminder_key_locked(self, key: tuple[str, str]) -> None:
|
|
self._completion_reminder_next_order += 1
|
|
self._completion_reminder_touch_order[key] = self._completion_reminder_next_order
|
|
|
|
def _completion_reminder_keys_locked(self) -> set[tuple[str, str]]:
|
|
keys = set(self._pending_completion_reminders)
|
|
keys.update(self._completion_reminder_counts)
|
|
keys.update(self._completion_reminder_touch_order)
|
|
return keys
|
|
|
|
def _drop_completion_reminder_key_locked(self, key: tuple[str, str]) -> None:
|
|
self._pending_completion_reminders.pop(key, None)
|
|
self._completion_reminder_counts.pop(key, None)
|
|
self._completion_reminder_touch_order.pop(key, None)
|
|
|
|
def _prune_completion_reminder_state_locked(self, protected_key: tuple[str, str]) -> None:
|
|
keys = self._completion_reminder_keys_locked()
|
|
overflow = len(keys) - self._MAX_COMPLETION_REMINDER_KEYS
|
|
if overflow <= 0:
|
|
return
|
|
|
|
candidates = [key for key in keys if key != protected_key]
|
|
candidates.sort(key=lambda key: self._completion_reminder_touch_order.get(key, 0))
|
|
for key in candidates[:overflow]:
|
|
self._drop_completion_reminder_key_locked(key)
|
|
|
|
def _queue_completion_reminder(self, runtime: Runtime, reminder: str) -> None:
|
|
key = self._pending_key(runtime)
|
|
with self._lock:
|
|
self._pending_completion_reminders.setdefault(key, []).append(reminder)
|
|
self._completion_reminder_counts[key] = self._completion_reminder_counts.get(key, 0) + 1
|
|
self._touch_completion_reminder_key_locked(key)
|
|
self._prune_completion_reminder_state_locked(protected_key=key)
|
|
|
|
def _completion_reminder_count_for_runtime(self, runtime: Runtime) -> int:
|
|
key = self._pending_key(runtime)
|
|
with self._lock:
|
|
return self._completion_reminder_counts.get(key, 0)
|
|
|
|
def _drain_completion_reminders(self, runtime: Runtime) -> list[str]:
|
|
key = self._pending_key(runtime)
|
|
with self._lock:
|
|
reminders = self._pending_completion_reminders.pop(key, [])
|
|
if reminders or key in self._completion_reminder_counts:
|
|
self._touch_completion_reminder_key_locked(key)
|
|
return reminders
|
|
|
|
def _clear_other_run_completion_reminders(self, runtime: Runtime) -> None:
|
|
thread_id, current_run_id = self._pending_key(runtime)
|
|
with self._lock:
|
|
for key in self._completion_reminder_keys_locked():
|
|
if key[0] == thread_id and key[1] != current_run_id:
|
|
self._drop_completion_reminder_key_locked(key)
|
|
|
|
def _clear_current_run_completion_reminders(self, runtime: Runtime) -> None:
|
|
key = self._pending_key(runtime)
|
|
with self._lock:
|
|
self._drop_completion_reminder_key_locked(key)
|
|
|
|
@override
|
|
def before_agent(self, state: ThreadState, runtime: Runtime) -> dict[str, Any] | None:
|
|
self._clear_other_run_completion_reminders(runtime)
|
|
return None
|
|
|
|
@override
|
|
async def abefore_agent(self, state: ThreadState, runtime: Runtime) -> dict[str, Any] | None:
|
|
self._clear_other_run_completion_reminders(runtime)
|
|
return None
|
|
|
|
@hook_config(can_jump_to=["model"])
|
|
@override
|
|
def after_model(
|
|
self,
|
|
state: ThreadState,
|
|
runtime: Runtime,
|
|
) -> dict[str, Any] | None:
|
|
"""Prevent premature agent exit when todo items are still incomplete.
|
|
|
|
In addition to the base class check for parallel ``write_todos`` calls,
|
|
this override intercepts model responses that have no tool calls while
|
|
there are still incomplete todo items. It injects a reminder
|
|
``HumanMessage`` and jumps back to the model node so the agent
|
|
continues working through the todo list.
|
|
|
|
A retry cap of ``_MAX_COMPLETION_REMINDERS`` (default 2) prevents
|
|
infinite loops when the agent cannot make further progress.
|
|
"""
|
|
# 1. Preserve base class logic (parallel write_todos detection).
|
|
base_result = super().after_model(state, runtime)
|
|
if base_result is not None:
|
|
return base_result
|
|
|
|
# 2. Only intervene when the agent wants to exit cleanly. Tool-call
|
|
# intent or tool-call parse errors should be handled by the tool path
|
|
# instead of being masked by todo reminders.
|
|
messages = state.get("messages") or []
|
|
last_ai = next((m for m in reversed(messages) if isinstance(m, AIMessage)), None)
|
|
if not last_ai or _has_tool_call_intent_or_error(last_ai):
|
|
return None
|
|
|
|
# 3. Allow exit when all todos are completed or there are no todos.
|
|
todos: list[Todo] = state.get("todos") or [] # type: ignore[assignment]
|
|
if not todos or all(t.get("status") == "completed" for t in todos):
|
|
return None
|
|
|
|
# 4. Enforce a reminder cap to prevent infinite re-engagement loops.
|
|
if self._completion_reminder_count_for_runtime(runtime) >= self._MAX_COMPLETION_REMINDERS:
|
|
return None
|
|
|
|
# 5. Queue a reminder for the next model request and jump back. We must
|
|
# not persist this control prompt as a normal HumanMessage, otherwise it
|
|
# can leak into user-visible message streams and saved transcripts.
|
|
self._queue_completion_reminder(runtime, _format_completion_reminder(todos))
|
|
return {"jump_to": "model"}
|
|
|
|
@override
|
|
@hook_config(can_jump_to=["model"])
|
|
async def aafter_model(
|
|
self,
|
|
state: ThreadState,
|
|
runtime: Runtime,
|
|
) -> dict[str, Any] | None:
|
|
"""Async version of after_model."""
|
|
return self.after_model(state, runtime)
|
|
|
|
@staticmethod
|
|
def _format_pending_completion_reminders(reminders: list[str]) -> str:
|
|
return "\n\n".join(dict.fromkeys(reminders))
|
|
|
|
def _augment_request(self, request: ModelRequest) -> ModelRequest:
|
|
reminders = self._drain_completion_reminders(request.runtime)
|
|
if not reminders:
|
|
return request
|
|
new_messages = [
|
|
*request.messages,
|
|
HumanMessage(
|
|
content=self._format_pending_completion_reminders(reminders),
|
|
name="todo_completion_reminder",
|
|
additional_kwargs={"hide_from_ui": True},
|
|
),
|
|
]
|
|
return request.override(messages=new_messages)
|
|
|
|
@override
|
|
def wrap_model_call(
|
|
self,
|
|
request: ModelRequest,
|
|
handler: Callable[[ModelRequest], ModelResponse],
|
|
) -> ModelCallResult:
|
|
# The base class appends the `write_todos` system prompt to the request;
|
|
# without calling it the model is never told about the todo list feature.
|
|
# Augment with pending completion reminders on the request that already
|
|
# carries the injected system prompt.
|
|
return super().wrap_model_call(request, lambda req: handler(self._augment_request(req)))
|
|
|
|
@override
|
|
async def awrap_model_call(
|
|
self,
|
|
request: ModelRequest,
|
|
handler: Callable[[ModelRequest], Awaitable[ModelResponse]],
|
|
) -> ModelCallResult:
|
|
# See wrap_model_call: preserve the base class system-prompt injection.
|
|
async def augmented_handler(req: ModelRequest) -> ModelResponse:
|
|
return await handler(self._augment_request(req))
|
|
|
|
return await super().awrap_model_call(request, augmented_handler)
|
|
|
|
@override
|
|
def after_agent(self, state: ThreadState, runtime: Runtime) -> dict[str, Any] | None:
|
|
self._clear_current_run_completion_reminders(runtime)
|
|
return None
|
|
|
|
@override
|
|
async def aafter_agent(self, state: ThreadState, runtime: Runtime) -> dict[str, Any] | None:
|
|
self._clear_current_run_completion_reminders(runtime)
|
|
return None
|