Files
wehub-resource-sync 0ef5fcb1c5
Security / Dependency audit (pip-audit) (push) Has been cancelled
Security / CodeQL (javascript-typescript) (push) Has been cancelled
Security / CodeQL (python) (push) Has been cancelled
Security / Secret scan (gitleaks) (push) Has been cancelled
rust / test (ubuntu) (push) Has been cancelled
rust / simulator e2e (macos-latest) (push) Has been cancelled
rust / simulator e2e (ubuntu-latest) (push) Has been cancelled
rust / simulator e2e (windows-latest) (push) Has been cancelled
rust / wheels (aarch64-apple-darwin) (push) Has been cancelled
rust / wheels (x86_64-unknown-linux-gnu) (push) Has been cancelled
rust / wheels (x86_64-apple-darwin) (push) Has been cancelled
rust / audit (push) Has been cancelled
rust / parity (nightly, allowed to fail during Phase 0) (push) Has been cancelled
CI / commitlint (push) Has been skipped
Dev Containers / validate (.devcontainer/devcontainer.json, default) (push) Failing after 0s
Dev Containers / validate (.devcontainer/memory-stack/devcontainer.json, memory-stack) (push) Failing after 0s
Dev Containers / validate-worktree (push) Failing after 0s
CI / changes (push) Failing after 4s
Deploy Documentation / validate (push) Has been skipped
Deploy Documentation / deploy (push) Failing after 1s
Init Native E2E / init-native (ubuntu-latest, claude) (push) Failing after 1s
Init Native E2E / init-native (ubuntu-latest, codex) (push) Failing after 1s
Install Native E2E / install-native (ubuntu-latest) (push) Failing after 1s
OpenCode Plugin / typecheck + build + test (push) Failing after 1s
Init Native E2E / init-native (ubuntu-latest, copilot) (push) Failing after 1s
Release Please / release-please (push) Failing after 1s
Wrap E2E / docker-wrap-e2e (push) Failing after 1s
Wrap Native E2E / wrap-native (ubuntu-latest) (push) Failing after 1s
Init E2E / docker-init-e2e (push) Failing after 4s
Merge Conflicts / merge-conflicts (push) Failing after 4s
CI / lint (push) Has been cancelled
CI / build-wheel (push) Has been cancelled
CI / build-wheel-windows (push) Has been cancelled
CI / prefetch-model (push) Has been cancelled
CI / test-dashboard-ui (push) Has been cancelled
CI / test (1) (push) Has been cancelled
CI / test (2) (push) Has been cancelled
CI / test (3) (push) Has been cancelled
CI / test (4) (push) Has been cancelled
CI / test-extras (push) Has been cancelled
CI / test-agno (push) Has been cancelled
CI / build (push) Has been cancelled
CI / workflow-validation (push) Has been cancelled
CI / docker-native-e2e (push) Has been cancelled
CI / windows-native-wrapper (push) Has been cancelled
CI / macos-native-wrapper (push) Has been cancelled
Docker / docker-build (map[name:arm64 platform:linux/arm64 runs_on:ubuntu-24.04-arm], map[bake_target:runtime-code-nonroot name:code-nonroot]) (push) Has been cancelled
Docker / docker-build (map[name:arm64 platform:linux/arm64 runs_on:ubuntu-24.04-arm], map[bake_target:runtime-code-slim name:code-slim]) (push) Has been cancelled
Docker / docker-build (map[name:arm64 platform:linux/arm64 runs_on:ubuntu-24.04-arm], map[bake_target:runtime-code-slim-nonroot name:code-slim-nonroot]) (push) Has been cancelled
Docker / docker-build (map[name:arm64 platform:linux/arm64 runs_on:ubuntu-24.04-arm], map[bake_target:runtime-nonroot name:nonroot]) (push) Has been cancelled
Docker / docker-build (map[name:arm64 platform:linux/arm64 runs_on:ubuntu-24.04-arm], map[bake_target:runtime-slim name:slim]) (push) Has been cancelled
Docker / docker-build (map[name:arm64 platform:linux/arm64 runs_on:ubuntu-24.04-arm], map[bake_target:runtime-slim-nonroot name:slim-nonroot]) (push) Has been cancelled
Docker / docker-manifest (map[bake_target:runtime name:]) (push) Has been cancelled
Docker / docker-manifest (map[bake_target:runtime-code name:code]) (push) Has been cancelled
Docker / docker-manifest (map[bake_target:runtime-code-nonroot name:code-nonroot]) (push) Has been cancelled
Docker / docker-manifest (map[bake_target:runtime-code-slim name:code-slim]) (push) Has been cancelled
Docker / docker-manifest (map[bake_target:runtime-code-slim-nonroot name:code-slim-nonroot]) (push) Has been cancelled
Docker / docker-manifest (map[bake_target:runtime-nonroot name:nonroot]) (push) Has been cancelled
Docker / docker-manifest (map[bake_target:runtime-slim name:slim]) (push) Has been cancelled
Docker / docker-manifest (map[bake_target:runtime-slim-nonroot name:slim-nonroot]) (push) Has been cancelled
Docker / docker-build (map[name:amd64 platform:linux/amd64 runs_on:ubuntu-24.04], map[bake_target:runtime name:]) (push) Has been cancelled
Docker / docker-build (map[name:amd64 platform:linux/amd64 runs_on:ubuntu-24.04], map[bake_target:runtime-code name:code]) (push) Has been cancelled
Docker / docker-build (map[name:amd64 platform:linux/amd64 runs_on:ubuntu-24.04], map[bake_target:runtime-code-nonroot name:code-nonroot]) (push) Has been cancelled
Docker / docker-build (map[name:amd64 platform:linux/amd64 runs_on:ubuntu-24.04], map[bake_target:runtime-code-slim name:code-slim]) (push) Has been cancelled
Docker / docker-build (map[name:amd64 platform:linux/amd64 runs_on:ubuntu-24.04], map[bake_target:runtime-code-slim-nonroot name:code-slim-nonroot]) (push) Has been cancelled
Docker / docker-build (map[name:amd64 platform:linux/amd64 runs_on:ubuntu-24.04], map[bake_target:runtime-nonroot name:nonroot]) (push) Has been cancelled
Docker / docker-build (map[name:amd64 platform:linux/amd64 runs_on:ubuntu-24.04], map[bake_target:runtime-slim name:slim]) (push) Has been cancelled
Docker / docker-build (map[name:amd64 platform:linux/amd64 runs_on:ubuntu-24.04], map[bake_target:runtime-slim-nonroot name:slim-nonroot]) (push) Has been cancelled
Docker / docker-build (map[name:arm64 platform:linux/arm64 runs_on:ubuntu-24.04-arm], map[bake_target:runtime name:]) (push) Has been cancelled
Docker / docker-build (map[name:arm64 platform:linux/arm64 runs_on:ubuntu-24.04-arm], map[bake_target:runtime-code name:code]) (push) Has been cancelled
Docker / promote-latest (push) Has been cancelled
Init Native E2E / init-native (macos-latest, claude) (push) Has been cancelled
Init Native E2E / init-native (macos-latest, codex) (push) Has been cancelled
Init Native E2E / init-native (macos-latest, copilot) (push) Has been cancelled
Install Native E2E / install-native (macos-latest) (push) Has been cancelled
Wrap Native E2E / wrap-native (macos-latest) (push) Has been cancelled
chore: import upstream snapshot with attribution
2026-07-13 12:03:20 +08:00

228 lines
8.3 KiB
Python

"""Upstream 429 rate-limit retry + Retry-After honoring (fixes #1221).
Both the non-streaming (``server.py:_retry_request``) and streaming
(``streaming.py:_stream_response``) forwarders must retry an upstream 429 with
backoff instead of passing it straight back to the client, since a parallel
agent fan-out that exceeds the per-minute limit otherwise aborts every run.
"""
from __future__ import annotations
import asyncio
import httpx
from headroom.proxy.server import ProxyConfig, create_app
class _RateLimitTransport(httpx.AsyncBaseTransport):
"""Returns ``fail_status`` for the first ``fail_times`` calls, then 200.
Records ``calls`` so a test can assert whether a retry happened.
"""
def __init__(
self,
*,
fail_status: int = 429,
fail_times: int = 1,
retry_after: str | None = None,
sse: bool = False,
) -> None:
self.fail_status = fail_status
self.fail_times = fail_times
self.retry_after = retry_after
self.sse = sse
self.calls = 0
async def handle_async_request(self, request: httpx.Request) -> httpx.Response:
self.calls += 1
async for _ in request.stream: # drain the request body
pass
if self.calls <= self.fail_times:
headers = {"retry-after": self.retry_after} if self.retry_after is not None else {}
return httpx.Response(
self.fail_status,
headers=headers,
json={"type": "error", "error": {"type": "rate_limit_error"}},
)
if self.sse:
body = b'event: message_stop\ndata: {"type":"message_stop"}\n\n'
return httpx.Response(200, headers={"content-type": "text/event-stream"}, content=body)
return httpx.Response(
200,
json={
"id": "msg_1",
"type": "message",
"role": "assistant",
"content": [{"type": "text", "text": "ok"}],
"usage": {"input_tokens": 1, "output_tokens": 1},
},
)
def _proxy_with(transport: _RateLimitTransport, *, max_attempts: int = 3):
config = ProxyConfig(
optimize=False,
cache_enabled=False,
rate_limit_enabled=False,
cost_tracking_enabled=False,
log_requests=False,
ccr_inject_tool=False,
ccr_handle_responses=False,
ccr_context_tracking=False,
image_optimize=False,
retry_enabled=True,
retry_max_attempts=max_attempts,
retry_base_delay_ms=1,
retry_max_delay_ms=5000,
)
proxy = create_app(config).state.proxy
proxy.http_client = httpx.AsyncClient(transport=transport)
return proxy
# --- non-streaming: _retry_request ---------------------------------------
def test_retry_request_retries_429_then_succeeds() -> None:
transport = _RateLimitTransport(fail_status=429, fail_times=1, retry_after="0")
proxy = _proxy_with(transport)
resp = asyncio.run(proxy._retry_request("POST", "https://up/v1/messages", {}, {"messages": []}))
assert resp.status_code == 200
assert transport.calls == 2 # one 429 + one success — the retry happened
def test_retry_request_returns_429_verbatim_on_exhaustion() -> None:
# Always 429: must return the 429 to the client, NOT raise / convert to 5xx.
transport = _RateLimitTransport(fail_status=429, fail_times=99, retry_after="0")
proxy = _proxy_with(transport, max_attempts=3)
resp = asyncio.run(proxy._retry_request("POST", "https://up/v1/messages", {}, {"messages": []}))
assert resp.status_code == 429
assert transport.calls == 3 # exhausted all attempts
def test_retry_request_honors_retry_after(monkeypatch) -> None:
slept: list[float] = []
async def _fake_wait(self, seconds: float) -> bool: # type: ignore[no-untyped-def]
slept.append(seconds)
return False
monkeypatch.setattr(
"headroom.proxy.server.HeadroomProxy._wait_for_retry_delay_or_shutdown", _fake_wait
)
transport = _RateLimitTransport(fail_status=429, fail_times=1, retry_after="2")
proxy = _proxy_with(transport)
asyncio.run(proxy._retry_request("POST", "https://up/v1/messages", {}, {"messages": []}))
# Retry-After: 2s honored (not the ~1-10ms jittered exponential backoff).
assert slept and abs(slept[0] - 2.0) < 0.01
def test_retry_request_does_not_retry_other_4xx() -> None:
transport = _RateLimitTransport(fail_status=400, fail_times=99)
proxy = _proxy_with(transport)
resp = asyncio.run(proxy._retry_request("POST", "https://up/v1/messages", {}, {"messages": []}))
assert resp.status_code == 400
assert transport.calls == 1 # 4xx (non-429) still short-circuits — no retry
def test_retry_request_still_retries_5xx() -> None:
transport = _RateLimitTransport(fail_status=503, fail_times=1)
proxy = _proxy_with(transport)
resp = asyncio.run(proxy._retry_request("POST", "https://up/v1/messages", {}, {"messages": []}))
assert resp.status_code == 200
assert transport.calls == 2 # 5xx retry path unchanged
# --- streaming: _stream_response -----------------------------------------
def test_stream_response_retries_429() -> None:
transport = _RateLimitTransport(fail_status=429, fail_times=1, retry_after="0", sse=True)
proxy = _proxy_with(transport)
asyncio.run(
proxy._stream_response(
"https://up/v1/messages",
{},
{"messages": []},
"anthropic",
"claude-3",
"r1",
0,
0,
0,
[],
{},
0.0,
)
)
assert transport.calls == 2 # streaming 429 retried, not forwarded raw
# --- 529 overloaded: same transient-retry path as 429 --------------------
#
# 529 is Anthropic's ``overloaded_error``. Like 429 it means "try again
# shortly", so both forwarders must retry it honoring Retry-After. Before this
# fix the streaming path forwarded a 529 to the client raw (zero retries), and
# _retry_request retried it only via the generic 5xx path — raising on
# exhaustion instead of returning the 529 verbatim, and ignoring Retry-After.
def test_retry_request_retries_529_then_succeeds() -> None:
transport = _RateLimitTransport(fail_status=529, fail_times=1, retry_after="0")
proxy = _proxy_with(transport)
resp = asyncio.run(proxy._retry_request("POST", "https://up/v1/messages", {}, {"messages": []}))
assert resp.status_code == 200
assert transport.calls == 2 # one 529 + one success — the retry happened
def test_retry_request_returns_529_verbatim_on_exhaustion() -> None:
# Always 529: must return the 529 to the client, NOT raise / convert to 5xx.
transport = _RateLimitTransport(fail_status=529, fail_times=99, retry_after="0")
proxy = _proxy_with(transport, max_attempts=3)
resp = asyncio.run(proxy._retry_request("POST", "https://up/v1/messages", {}, {"messages": []}))
assert resp.status_code == 529
assert transport.calls == 3 # exhausted all attempts, returned verbatim
def test_retry_request_honors_retry_after_on_529(monkeypatch) -> None:
slept: list[float] = []
async def _fake_wait(self, seconds: float) -> bool: # type: ignore[no-untyped-def]
slept.append(seconds)
return False
monkeypatch.setattr(
"headroom.proxy.server.HeadroomProxy._wait_for_retry_delay_or_shutdown", _fake_wait
)
transport = _RateLimitTransport(fail_status=529, fail_times=1, retry_after="2")
proxy = _proxy_with(transport)
asyncio.run(proxy._retry_request("POST", "https://up/v1/messages", {}, {"messages": []}))
# Retry-After: 2s honored for 529 just like 429.
assert slept and abs(slept[0] - 2.0) < 0.01
def test_stream_response_retries_529() -> None:
# The gap this PR closes: an interactive (streaming) session hitting a 529
# used to get "Overloaded" surfaced immediately, with no retry.
transport = _RateLimitTransport(fail_status=529, fail_times=1, retry_after="0", sse=True)
proxy = _proxy_with(transport)
asyncio.run(
proxy._stream_response(
"https://up/v1/messages",
{},
{"messages": []},
"anthropic",
"claude-3",
"r1",
0,
0,
0,
[],
{},
0.0,
)
)
assert transport.calls == 2 # streaming 529 retried, not forwarded raw