mengzhx/deepseek-harness
1
0
Fork 0
mirror of https://github.com/deepseek-ai/deepseek-harness.git synced 2026-09-11 04:00:38 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(code-runtime-python): reserve the interpreter baseline in the budget gate and re-check against the clamped RLIMIT_AS

Browse Source 
The output-budget/address-space gate's 8x multiple had no room for the
interpreter's own footprint, so a budget sized right at addressSpaceMb/8 was
admitted while its worst-case peak plus the interpreter overran RLIMIT_AS
(e.g. 15 MiB maxLogBytes against 128 MiB). Reserve a fixed
INTERPRETER_BASELINE_BYTES (64 MiB) before the multiple claims the rest, so each
budget times 8 must fit the room LEFT after the baseline.

The host gate validates against the CONFIGURED addressSpaceMb, but a launch
environment can inherit a stricter RLIMIT_AS (a ulimit -v wrapper below
addressSpaceMb) that _clamped lowers the effective limit to, leaving the budgets
sized for a ceiling the child never gets. bootstrap.py now re-checks both budgets
against the effective clamped soft limit after applying it, mirroring the host
gate's multiple and baseline, and raises at boot rather than letting a
near-budget output OOM mid-run.

Add regression tests for both (the load gate against a 256 MiB address space
covering both budgets, and a ulimit -v wrapper for the inherited-limit re-check);
register the tail-copy test in the note Testing section; sync the zh pair. Merges
origin/feat/code-runtime-python-protocol to resolve the DIRTY base.
This commit is contained in:
Chinesezjc
2026-08-31 14:22:37 +08:00
committed by Tianyi Cui
parent 86c6d9345e
commit 436a97a12d
6 changed files with 106 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packages/code-runtime/code-runtime-python/py/bootstrap.py
+34 -3
View File
@@ -48,6 +48,16 @@ _READ_CHUNK_BYTES = 65536
# real class name is touched.
_MAX_FALLBACK_NAME_CHARS = 200
# Mirror of the host's output-budget/address-space gate (src/index.ts's
# OUTPUT_BUDGET_WORST_CASE_ADDRESS_SPACE_MULTIPLE and INTERPRETER_BASELINE_BYTES),
# re-applied against the EFFECTIVE RLIMIT_AS after inheritance clamping. An astral
# character is one character but ~4 bytes of str storage and ~4 UTF-8 bytes, live
# at once while the ledger charges and frames it, so a budget's worst-case peak is
# eight times its byte count; the interpreter's own footprint is reserved on top.
# Kept in sync with the host constants by the shared reasoning, not a wire field.
_OUTPUT_BUDGET_WORST_CASE_MULTIPLE = 8
_INTERPRETER_BASELINE_BYTES = 64 * 1024 * 1024
# ---------------------------------------------------------------------------
# Log buffer — Python-side ledger for captured text.
@@ -637,9 +647,30 @@ async def _run(channel: ProtocolChannel) -> None:
# ceiling still bound the run.
if sys.platform != "darwin":
addr_bytes = int(boot["addressSpaceBytes"])
resource.setrlimit(
resource.RLIMIT_AS, _clamped(resource.RLIMIT_AS, addr_bytes, addr_bytes)
)
effective_as = _clamped(resource.RLIMIT_AS, addr_bytes, addr_bytes)
resource.setrlimit(resource.RLIMIT_AS, effective_as)
# The host rejected an output budget too large for the CONFIGURED
# addressSpaceMb, but a launch environment can inherit a STRICTER
# RLIMIT_AS (e.g. a `ulimit -v` wrapper below addressSpaceMb), which
# `_clamped` correctly lowers the effective limit to — leaving the
# budgets validated against a ceiling the child never gets. Re-check
# both budgets against the EFFECTIVE soft limit here, mirroring the
# host gate (each budget times the worst-case Unicode multiple must
# fit the room left after the interpreter baseline), and fail loud at
# boot rather than letting a near-budget output OOM mid-run. The
# constants match src/index.ts's OUTPUT_BUDGET_WORST_CASE_ADDRESS_
# SPACE_MULTIPLE and INTERPRETER_BASELINE_BYTES.
effective_soft = effective_as[0]
if effective_soft != resource.RLIM_INFINITY:
budgetable = effective_soft - _INTERPRETER_BASELINE_BYTES
for _budget_key in ("maxLogBytes", "maxValueBytes"):
if int(boot[_budget_key]) * _OUTPUT_BUDGET_WORST_CASE_MULTIPLE > budgetable:
raise ValueError(
"config.%s is too large for the inherited RLIMIT_AS of %d bytes "
"(a near-budget output would breach it during encode); "
"lower the budget or raise the inherited address-space limit"
% (_budget_key, effective_soft)
)
except BaseException as exc: # noqa: BLE001 -- report every failure to host
channel.send_sync(
{