mirror of
https://github.com/deepseek-ai/deepseek-harness
synced 2026-08-15 21:04:50 +00:00
One host registry serves every composition in the process, so its two service-wide collections answered per-owner questions process-wide. `start()` asked only whether SOME surface was attached, so an agent whose own composition loads no `tool-tasks` could start work it has no tool to collect or stop as soon as any other preset attached one — and the answer changed depending on which sessions happened to be open. `settle()` walked every registered listener, so a task settling without a waiter injected one completion notice per mounted preset into the same owner. Both collections now sit in `ScopedLayers`, the layered-registry primitive `tools` and `skills` already use: a registration files into its registering context's scope, and a read unions the global layer with the owner's scope chain. A surface or listener registered from an unscoped context lands in the global layer and serves every owner, which is exactly the host-plane composition's own controls, so the TUI path is unchanged without a special case. This supersedes the consumer-side filter in the previous commit. That filter produced the right notices but sat in the wrong layer: it left the `start()` gate process-wide, it could not be enforced against a producer that resolves the registry directly, and it made a Consumer carry scope knowledge that the other layered registries keep in the registry. `tool-tasks` is scope-agnostic again and the `dsh-scope` edge moves to `tasks-local`. `start()`'s refusal is now owner-relative, so its model-visible text names the agent rather than the process. The shipped `minimal` preset keeps `enableRunInBackground: false`, no longer as the safety boundary — the registry owns that now — but so an agent that could never collect a task is not offered the parameter at all. Refs #2141
148 lines
6.1 KiB
TypeScript
148 lines
6.1 KiB
TypeScript
/**
|
|
* The background-task Service Definition (`ctx.tasks`). It owns the contract for
|
|
* task ids, session-scoped access, lifecycle state, completion listeners, and
|
|
* owner cleanup while producers retain their execution resources. The
|
|
* process-local registry lives in `@deepseek-ai/dsh-tasks-local`.
|
|
* @module @deepseek-ai/dsh-tasks
|
|
*/
|
|
|
|
import { Context, Service } from 'cordis'
|
|
import type { Agent } from '@deepseek-ai/dsh-agent'
|
|
import type { TaskDoneListener, TaskId, TaskRead, TaskSnapshot, TaskStart } from './types.ts'
|
|
|
|
export { TaskId } from './types.ts'
|
|
export type {
|
|
TaskDoneListener,
|
|
TaskHooks,
|
|
TaskKind,
|
|
TaskKindMap,
|
|
TaskOutcome,
|
|
TaskRead,
|
|
TaskSnapshot,
|
|
TaskStart,
|
|
TaskStatus,
|
|
} from './types.ts'
|
|
|
|
declare module 'cordis' {
|
|
interface Context {
|
|
tasks: TaskService
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Abstract background task registry. Subclass, implement the abstract methods,
|
|
* and load the subclass as a plugin — it registers as `ctx.tasks` (one
|
|
* implementation per context; loading a second throws, which is cordis'
|
|
* standard duplicate-service behavior).
|
|
*
|
|
* Implementations must honor these semantics:
|
|
* - Registrations outlive producer and control-surface fibers. Owner and
|
|
* service disposal cancel live work and await compliant producers; a
|
|
* throwing teardown cancel force-fails only the record.
|
|
* - Owned-task access is fenced by the owner's session id. Ids are
|
|
* predictable, so authorization — not secrecy — is the boundary.
|
|
* - Settlement is first-wins: one terminal record, one round of contained
|
|
* listener notification, and released waiters, even against a late
|
|
* producer outcome.
|
|
* - {@link start} refuses work while no attached control surface serves the
|
|
* spec's owner, so a producer cannot start work that owner cannot collect
|
|
* or stop. One registry serves every composition in the process, so this
|
|
* question — and completion-listener delivery — is owner-relative rather
|
|
* than process-wide: registrations made from an unscoped context serve
|
|
* every owner, and registrations made under an agent composition's scope
|
|
* serve exactly the agents composed under it.
|
|
*/
|
|
export abstract class TaskService extends Service {
|
|
constructor(ctx: Context) {
|
|
// `abstract` erases at runtime, so a composition row naming this package
|
|
// would register a ctx.tasks with no method implementations and fail far
|
|
// from the misconfiguration. Fail loud at load instead.
|
|
if (new.target === TaskService) {
|
|
throw new Error('@deepseek-ai/dsh-tasks is the abstract task registry seam; load an implementation such as @deepseek-ai/dsh-tasks-local instead')
|
|
}
|
|
super(ctx, 'tasks')
|
|
}
|
|
|
|
/**
|
|
* Preflight access, validation, and owner cleanup before starting and
|
|
* atomically registering work. A throwing starter leaves nothing registered;
|
|
* after it returns, registration cannot fail. Settlement records the outcome,
|
|
* notifies listeners, and releases waiters.
|
|
* @param spec - task identity, owner, and synchronous starter.
|
|
* @returns the registry-issued `<kind>-N` id.
|
|
*/
|
|
abstract start(spec: TaskStart): TaskId
|
|
|
|
/**
|
|
* List caller-owned and unowned tasks in registration order without exposing
|
|
* another session's labels.
|
|
* @param caller - reading agent; a non-agent caller sees only unowned tasks.
|
|
* @returns fresh snapshots.
|
|
*/
|
|
abstract list(caller?: Agent): TaskSnapshot[]
|
|
|
|
/**
|
|
* Return a non-consuming snapshot without changing its read cursor or notice
|
|
* state. Throws for an unknown or foreign task.
|
|
* @param id - task to look up.
|
|
* @param caller - reading agent checked against the owner.
|
|
* @returns a fresh snapshot.
|
|
*/
|
|
abstract get(id: TaskId, caller?: Agent): TaskSnapshot
|
|
|
|
/**
|
|
* Read the next stream delta, or the idempotent final output after settlement.
|
|
* A terminal read marks the task reported. Throws for an unknown or foreign
|
|
* task.
|
|
* @param id - task to read.
|
|
* @param caller - reading agent checked against the owner.
|
|
* @returns output text and the post-read snapshot.
|
|
*/
|
|
abstract read(id: TaskId, caller?: Agent): TaskRead
|
|
|
|
/**
|
|
* Request cancellation, then mark the task stopping and reported. A producer
|
|
* throw propagates without changing task state. Throws for an unknown or
|
|
* foreign task.
|
|
* @param id - task to cancel.
|
|
* @param caller - killing agent checked against the owner.
|
|
* @param reason - logged reason forwarded to the producer.
|
|
* @returns `requested` for live work, otherwise `already-finished`.
|
|
*/
|
|
abstract kill(id: TaskId, caller?: Agent, reason?: string): 'requested' | 'already-finished'
|
|
|
|
/**
|
|
* Wait for settlement or timeout without cancelling the task. Caller abort
|
|
* rejects only while the task is live; after settlement the terminal
|
|
* snapshot wins so a notice suppressed for this waiter is still delivered.
|
|
* Throws for invalid, unknown, or foreign input.
|
|
* @param id - task to wait for.
|
|
* @param timeoutMs - positive finite wait bound in milliseconds.
|
|
* @param caller - waiting agent checked against the owner.
|
|
* @param signal - optional cancellation of the wait itself.
|
|
* @returns snapshot at settlement or timeout.
|
|
*/
|
|
abstract wait(id: TaskId, timeoutMs: number, caller?: Agent, signal?: AbortSignal): Promise<TaskSnapshot>
|
|
|
|
/**
|
|
* Register an effect-scoped completion listener. It receives the settlements
|
|
* of the owners its registering context's scope covers; each listener is
|
|
* contained; returned promises are observed but not awaited. No listener runs
|
|
* after service disposal.
|
|
* @param listener - receives each terminal snapshot and its exact owner.
|
|
* @returns disposer that unregisters the listener.
|
|
*/
|
|
abstract onTaskDone(listener: TaskDoneListener): () => void
|
|
|
|
/**
|
|
* Attach an effect-scoped surface that can read and stop tasks. It serves the
|
|
* owners its registering context's scope covers, and {@link start} refuses an
|
|
* owner no attached surface serves.
|
|
* @param name - diagnostic label; duplicate names remain independent.
|
|
* @returns disposer that detaches this surface.
|
|
*/
|
|
abstract attachSurface(name: string): () => void
|
|
}
|
|
|
|
export default TaskService
|