Files
hermes-agent/tools/interrupt.py

130 lines
5.2 KiB
Python

"""Per-thread interrupt signaling for all tools: thread-scoped so interrupting one
agent session does not kill tools in other sessions (the gateway runs many agents in one
process). The agent passes its execution thread id to set_interrupt(); tools call
is_interrupted(), which checks the CURRENT thread."""
import contextvars
import logging
import threading
from collections.abc import Callable
from utils import env_var_enabled
logger = logging.getLogger(__name__)
# Opt-in debug tracing — pairs with HERMES_DEBUG_INTERRUPT in tools/environments/base.py.
_DEBUG_INTERRUPT = env_var_enabled("HERMES_DEBUG_INTERRUPT")
if _DEBUG_INTERRUPT:
# AIAgent's quiet_mode forces the `tools` logger to ERROR on CLI startup;
# force ours back to INFO so the trace is visible in agent.log.
logger.setLevel(logging.INFO)
# Interrupted thread idents + optional user-safe cause (never the user's message text).
_interrupted_threads: set[int] = set()
_interrupt_reasons: dict[int, str] = {}
# Threads asked to YIELD: hand a long-running foreground command to the background
# instead of killing it, so a mid-turn user message is not parked behind it.
_yield_threads: set[int] = set()
_lock = threading.Lock()
# Tool-worker tid a deadline worker acts for. ``run_bounded_sync`` runs its worker under
# ``contextvars.copy_context()``, so a guard chain moved onto that worker still honours
# ``/stop`` aimed at the tool thread that spawned it (``is_interrupted`` checks both).
acting_for_tid: contextvars.ContextVar[int | None] = contextvars.ContextVar(
"hermes_interrupt_acting_for_tid", default=None,
)
def set_interrupt(active: bool, thread_id: int | None = None, *, reason: str | None = None) -> None:
"""Set or clear the interrupt for *thread_id* (default: current thread); ``reason`` is
an optional user-safe cause. Clearing also drops a pending yield request."""
tid = thread_id if thread_id is not None else threading.current_thread().ident
with _lock:
(_interrupted_threads.add if active else _interrupted_threads.discard)(tid)
if active and reason:
_interrupt_reasons[tid] = reason
else:
_interrupt_reasons.pop(tid, None)
if not active:
_yield_threads.discard(tid)
_snapshot = set(_interrupted_threads) if _DEBUG_INTERRUPT else None
if _DEBUG_INTERRUPT:
logger.info(
"[interrupt-debug] set_interrupt(active=%s, target_tid=%s) "
"called_from_tid=%s current_set=%s",
active, tid, threading.current_thread().ident, _snapshot)
def is_interrupted() -> bool:
return is_thread_interrupted(threading.current_thread().ident) or is_thread_interrupted(acting_for_tid.get())
def is_thread_interrupted(thread_id: int | None) -> bool:
"""Whether *thread_id* has an interrupt bit set (``None`` never is). Used when
a wait moves onto a deadline worker (``run_bounded_sync``) so ``/stop``
targeting the original tool-worker tid still kills the subprocess.
See #94285.
"""
if thread_id is None:
return False
with _lock:
return thread_id in _interrupted_threads
def request_yield(thread_id: int) -> None:
"""Ask the tool running on *thread_id* to yield: a foreground terminal command hands
its live process to the background registry and returns at once, so a user's mid-turn
message (``redirect()`` during tool execution) is delivered instead of parked behind it.
The command itself is never killed; that is what ``set_interrupt`` is for."""
with _lock:
_yield_threads.add(thread_id)
def is_thread_yield_requested(thread_id: int | None) -> bool:
"""Whether a yield is pending for *thread_id* (``None`` never is)."""
if thread_id is None:
return False
with _lock:
return thread_id in _yield_threads
def consume_yield(thread_id: int | None) -> bool:
"""Atomically take the pending yield for *thread_id*; True if one was pending."""
if thread_id is None:
return False
with _lock:
if thread_id in _yield_threads:
_yield_threads.discard(thread_id)
return True
return False
def run_if_not_interrupted(callback: Callable[[], None]) -> bool:
"""Run a state transition atomically with current-thread interruption.
Returns ``False`` without calling ``callback`` when the current thread is
already interrupted. The callback runs under the interrupt lock and must
not block or re-enter any interrupt API.
"""
tid = threading.current_thread().ident
with _lock:
if tid in _interrupted_threads:
return False
callback()
return True
def get_interrupt_reason() -> str | None:
"""User-safe interrupt cause for the current thread, if known."""
with _lock:
return _interrupt_reasons.get(threading.current_thread().ident)
def clear_current_thread_interrupt() -> None:
"""Clear any interrupt bit on the CURRENT thread: gives a user-approved command a clean
slate right before it spawns its child, so a stale bit that landed during the blocking
approval-wait cannot SIGINT the just-approved run. A *genuine* interrupt arriving after
this call re-sets the bit and is still observed by the executor's poll loop. Call
directly on the executing thread."""
set_interrupt(False)