feat(execution-limits): add structured ExecutionError kind/reason fields; enforce all 5 execution limits in PureLangGraph #44

Merged

hurui200320 merged 1 commits from feat/execution-limits into master 2026-06-11 11:05:30 +00:00

Conversation 3 Commits 1 Files Changed 9

+2077 -54

1 Commits

Author	SHA1	Message	Date
hurui200320	17d99abce7	feat(execution-limits): add structured ExecutionError kind/reason fields; enforce all 5 execution limits in PureLangGraph ... AC1: ExecutionError gains kind (categorical: depth, model_calls, tool_calls, timeout, cost) and reason (sub-code: budget_exhausted or missing_pricing_entry) fields, both defaulting to empty string. All existing raise ExecutionError(msg) call sites are backward-compatible. AC2: PureLangGraph.__init__ accepts limits: dict[str, Any] and pricing: dict[str, Any] (both default to {}). When limits['max_depth'] is supplied, a depth breach raises ExecutionError(kind='depth') instead of silently returning the current message (the old behaviour was a silent data-loss bug). When no max_depth limit is supplied, the legacy heuristic (max(2000, len(nodes)*50)) is used with a silent cap for backward compatibility with existing callers that do not pass limits. AC3: max_model_calls is checked before each NodeType.AGENT execution; counter increments after the check so the limit is enforced before the (limit+1)-th invocation. Breach raises ExecutionError(kind='model_calls'). AC4: max_tool_calls is checked before each NodeType.TOOL execution; same pattern as model_calls. Breach raises ExecutionError(kind='tool_calls'). AC5: execute() wraps _execute_from_node() in asyncio.wait_for() when limits['timeout_ms'] is set. asyncio.TimeoutError is caught and re-raised as ExecutionError(kind='timeout') so the router can map it to HTTP 429. AC6+AC7: After each LLM node, cost is computed from the pricing table (rates are USD per million tokens, matching ADR-2029 example values such as gpt-4.1-mini prompt=/bin/zsh.15/1M). Cost breach raises ExecutionError(kind='cost', reason='budget_exhausted'). A missing provider or model entry raises ExecutionError(kind='cost', reason='missing_pricing_entry') — proceeding with assumed zero cost is forbidden per ADR-2029. An empty pricing dict ({}) disables all cost checking (cost tracking was not requested). AC8: ExecutionError re-exported from cleveractors/__init__.py and added to __all__. Wire: runtime_dispatch._execute_graph() now passes executor.limits and executor.pricing to PureLangGraph so the limits reach the enforcement layer. ExecutionError is also re-raised (not swallowed) in _execute_from_node()'s broad except block so limit errors always propagate to the caller. New BDD tests (features/execution_limits.feature, 19 scenarios): - ExecutionError defaults kind and reason to empty strings - ExecutionError accepts kind and reason keyword arguments - ExecutionError exported from cleveractors top-level package - Graph exceeding max_depth raises ExecutionError(kind='depth') - Two AGENT nodes with max_model_calls=1 raises on 2nd call - Two TOOL nodes with max_tool_calls=1 raises on 2nd call - Slow node with timeout_ms=50 raises ExecutionError(kind='timeout') - LLM node exceeding max_cost_usd raises budget_exhausted - Unknown provider/model in pricing raises missing_pricing_entry - Empty pricing table skips cost calculation entirely - Executor limits/pricing propagation verified Quality gates: lint pass, typecheck 0 errors, unit_tests 2317/2317 pass, integration_tests pass, coverage 97.17% (threshold 96.5%). ISSUES CLOSED: #15	2026-06-11 09:37:37 +00:00