Guide for migrating MSBuild tasks to multithreaded mode support, including compatibility red-team review. Use this when converting tasks to thread-safe versions, implementing IMultiThreadableTask, adding TaskEnvironment support, or auditing migrations for behavioral compatibility.
MSBuild's multithreaded execution model requires tasks to avoid global process state (working directory, environment variables). Thread-safe tasks declare this capability via MSBuildMultiThreadableTask and use TaskEnvironment from IMultiThreadableTask for safe alternatives.
a. Ensure the task implementing class is decorated with the MSBuildMultiThreadableTask attribute.
b. Implement IMultiThreadableTask only if the task needs TaskEnvironment APIs (path absolutization, env vars, process start). If the task has no file/environment operations (e.g., a stub class), the attribute alone is sufficient.
[MSBuildMultiThreadableTask]
public class MyTask : Task, IMultiThreadableTask
{
public TaskEnvironment TaskEnvironment { get; set; } = TaskEnvironment.Fallback;
...
}
Note: [MSBuildMultiThreadableTask] has Inherited = false — it must be on each concrete class, not just the base.
All path strings must be absolutized with TaskEnvironment.GetAbsolutePath() before use in file system APIs. This resolves paths relative to the project directory, not the process working directory.
AbsolutePath absolutePath = TaskEnvironment.GetAbsolutePath(inputPath);
if (File.Exists(absolutePath))
{
string content = File.ReadAllText(absolutePath);
}
The AbsolutePath struct:
Value — the absolute path stringOriginalValue — preserves the input path (use for error messages and [Output] properties)string for File/Directory API compatibilityGetCanonicalForm() — resolves .. segments and normalizes separators (see Sin 5)CAUTION: GetAbsolutePath() throws ArgumentException for null/empty inputs. See Sin 3 and Sin 6 for compatibility implications.
| BEFORE (UNSAFE) | AFTER (SAFE) |
|---|---|
Environment.GetEnvironmentVariable("VAR"); | TaskEnvironment.GetEnvironmentVariable("VAR"); |
Environment.SetEnvironmentVariable("VAR", "v"); | TaskEnvironment.SetEnvironmentVariable("VAR", "v"); |
| BEFORE (UNSAFE - inherits process state) | AFTER (SAFE - uses task's isolated environment) |
|---|---|
var psi = new ProcessStartInfo("tool.exe"); | var psi = TaskEnvironment.GetProcessStartInfo(); |
psi.FileName = "tool.exe"; |
Built-in MSBuild tasks now initialize TaskEnvironment with a MultiProcessTaskEnvironmentDriver-backed default. Tests creating instances of built-in tasks no longer need manual TaskEnvironment setup. For custom or third-party tasks that implement IMultiThreadableTask without a default initializer, set TaskEnvironment = TaskEnvironmentHelper.CreateForTest().
| Category | APIs | Alternative |
|---|---|---|
| Forbidden | Environment.Exit, FailFast, Process.Kill, ThreadPool.SetMin/MaxThreads, Console.* | Return false, throw, or use Log |
| Use TaskEnvironment | Environment.CurrentDirectory, Get/SetEnvironmentVariable, Path.GetFullPath, ProcessStartInfo | See Steps 2-4 |
| Need absolute paths | File.*, Directory.*, FileInfo, DirectoryInfo, FileStream, StreamReader/Writer | Absolutize first (File System APIs) |
| Review required | Assembly.Load*, Activator.CreateInstance* | Check for version conflicts |
Trace every path string through all method calls and assignments to find all places it flows into file system operations — including helper methods that may internally use File System APIs.
item.ItemSpec, function parameters)OriginalValue for user-facing output (logs, errors) — see Sin 2In batch processing (iterating over files), GetAbsolutePath() throwing on one bad path aborts the entire batch. Match the original task's error semantics:
bool success = true;
foreach (ITaskItem item in SourceFiles)
{
try
{
AbsolutePath path = TaskEnvironment.GetAbsolutePath(item.ItemSpec);
ProcessFile(path);
}
catch (ArgumentException ex)
{
Log.LogError("Invalid path '{0}': {1}", item.ItemSpec, ex.Message);
success = false;
}
}
return success;
Stay in the AbsolutePath world — it's implicitly convertible to string where needed. Avoid round-tripping through string and back.
If your task spawns multiple threads internally, synchronize access to TaskEnvironment. Each task instance gets its own environment, so no synchronization between tasks is needed.
After migration, review for behavioral compatibility. Every observable difference is a bug until proven otherwise.
Observable behavior = Execute() return value, [Output] property values, error/warning message content, exception types, files written, and which code path runs.
Real bugs found during MSBuild task migrations. Every one shipped in initial "passing" code with green tests.
Absolutized values leak into [Output] properties that users/other tasks consume.
// BROKEN: ManifestPath was "bin\Release\app.manifest", now "C:\repo\bin\Release\app.manifest"
AbsolutePath abs = TaskEnvironment.GetAbsolutePath(Path.Combine(OutputDirectory, name));
ManifestPath = abs; // implicit string conversion!
// CORRECT: separate original form from absolutized path
string originalPath = Path.Combine(OutputDirectory, name);
AbsolutePath outputPath = TaskEnvironment.GetAbsolutePath(originalPath);
ManifestPath = originalPath; // [Output]: original form
document.Save((string)outputPath); // file I/O: absolute path
Detect: For every [Output] property, trace backward — is it ever assigned from an AbsolutePath?
Error messages show absolutized paths instead of the user's original input.
// BROKEN: "Cannot find 'C:\repo\app.manifest'" instead of "Cannot find 'app.manifest'"
AbsolutePath abs = TaskEnvironment.GetAbsolutePath(path);
Log.LogError("Cannot find '{0}'", abs); // implicit conversion!
// CORRECT: use OriginalValue
Log.LogError("Cannot find '{0}'", abs.OriginalValue);
Detect: Search every Log.LogError/LogWarning/LogMessage — is any argument an AbsolutePath?
Adding ?? "" silently swallows an exception the old code relied on for error handling.
// BEFORE: Path.GetDirectoryName("C:\") → null → Path.Combine(null, x) → ArgumentNullException
// → task fails with an exception / error logged → Execute() returns false
// BROKEN: ?? "" added "for safety"
string dir = Path.GetDirectoryName(fileName) ?? string.Empty;
// Path.Combine("", x) succeeds silently → no error → Execute() returns TRUE!
Detect: For every ?? you added, ask: "What happened when this was null before?" If it threw and was caught → your ?? is a bug.
GetAbsolutePath() inside a try block leaves the absolutized value out of scope in the catch block. Helper methods in the catch (like LockCheck) then use the original non-absolute path.
// CORRECT: hoist above try so catch can use it too
AbsolutePath abs = TaskEnvironment.GetAbsolutePath(OutputManifest.ItemSpec);
try {
WriteFile(abs);
} catch (Exception ex) {
string lockMsg = LockCheck.GetLockedFileMessage(abs); // absolute → correct file
Log.LogError("Failed: {0}", OutputManifest.ItemSpec, ...); // original → user-friendly
}
Detect: For every GetAbsolutePath inside a try, check if the catch block needs the absolutized value.
GetAbsolutePath does NOT canonicalize. Path.GetFullPath does TWO things: absolutize AND canonicalize (.. resolution, separator normalization). If the old code used Path.GetFullPath for dictionary keys, comparisons, or display, you must add .GetCanonicalForm():
// GetAbsolutePath("foo/../bar") → "C:\repo\foo/../bar" (NOT canonical)
// Path.GetFullPath("foo/../bar") → "C:\repo\bar" (canonical)
// BROKEN for dictionary keys — "C:\repo\foo\..\bar" ≠ "C:\repo\bar"
var map = items.ToDictionary(p => (string)TaskEnvironment.GetAbsolutePath(p.ItemSpec), ...);
// CORRECT
var map = items.ToDictionary(
p => (string)TaskEnvironment.GetAbsolutePath(p.ItemSpec).GetCanonicalForm(),
StringComparer.OrdinalIgnoreCase);
Detect: Find every Dictionary/HashSet/ToDictionary using path keys, and every place the old code called Path.GetFullPath. If canonicalization mattered, add .GetCanonicalForm().
Old code threw FileNotFoundException for missing files; new code throws ArgumentException from GetAbsolutePath("") before reaching the file check. Custom catch blocks filtering by exception type may be bypassed. (ExceptionHandling.IsIoRelatedException catches ArgumentException, but task-specific handlers might not.)
Detect: For every GetAbsolutePath, check what the old code threw for null/empty and whether the calling code has type-specific catch blocks.
For each modified line: What was the exact runtime value before? After? Where does it flow (outputs, logs, file paths, dictionary keys)? Does each destination produce identical observable behavior?
| Input | GetAbsolutePath | Old behavior | Match? |
|---|---|---|---|
null | ArgumentException | Varies | ❓ |
"" | ArgumentException | Varies | ❓ |
"C:\" (root) | Valid | Valid | ✅ usually |
"." | "C:\repo\." (not canonical) | "C:\repo" if GetFullPath | ❌ maybe |
"foo\..\bar" | "C:\repo\foo\..\bar" | "C:\repo\bar" if GetFullPath | ❌ maybe |
| Already absolute | Pass-through | Pass-through | ✅ |
Path.GetDirectoryName → Path.Combine chains:
| Input | GetDirectoryName returns | Path.Combine(result, x) |
|---|---|---|
"C:\" | null | Throws ArgumentNullException |
"" | "" (.NET Fx) / null (.NET Core+) | Works / Throws ⚠️ |
"file.resx" (no dir) | "" | Works |
Verify behavior on both net472 and net10.0.
[Output]? Does it compare, display, or use as a path?LockCheck, ManifestWriter, etc. internally resolve relative paths?ProjectDirectory values don't interfere[Task] × [Input Type] × [Assertion]
Inputs: relative path, absolute path, null, empty, ".." segments, root "C:\",
forward slashes, trailing separator, UNC path, 260+ char path
Assertions: Execute() return value, [Output] exact string, error message content,
exception type, file location, file content
[MSBuildMultiThreadableTask] on every concrete class (not just base — Inherited=false)IMultiThreadableTask on classes that use TaskEnvironment APIs, with default initializer = TaskEnvironment.Fallback[Output] property: exact string value matches pre-migrationLog.LogError/LogWarning: path in message matches pre-migration (use OriginalValue)GetAbsolutePath call: null/empty exception behavior matches old code pathGetCanonicalForm())?? or ?. added: verified it doesn't swallow a previously-thrown exceptionAbsolutePath leaks into user-visible strings unintentionallyTaskEnvironment = TaskEnvironmentHelper.CreateForTest() (built-in tasks have a default)Environment.Exit, Console.*, etc.)