0ef5fcb1c5
Security / Dependency audit (pip-audit) (push) Has been cancelled
Security / CodeQL (javascript-typescript) (push) Has been cancelled
Security / CodeQL (python) (push) Has been cancelled
Security / Secret scan (gitleaks) (push) Has been cancelled
rust / test (ubuntu) (push) Has been cancelled
rust / simulator e2e (macos-latest) (push) Has been cancelled
rust / simulator e2e (ubuntu-latest) (push) Has been cancelled
rust / simulator e2e (windows-latest) (push) Has been cancelled
rust / wheels (aarch64-apple-darwin) (push) Has been cancelled
rust / wheels (x86_64-unknown-linux-gnu) (push) Has been cancelled
rust / wheels (x86_64-apple-darwin) (push) Has been cancelled
rust / audit (push) Has been cancelled
rust / parity (nightly, allowed to fail during Phase 0) (push) Has been cancelled
CI / commitlint (push) Has been skipped
Dev Containers / validate (.devcontainer/devcontainer.json, default) (push) Failing after 0s
Dev Containers / validate (.devcontainer/memory-stack/devcontainer.json, memory-stack) (push) Failing after 0s
Dev Containers / validate-worktree (push) Failing after 0s
CI / changes (push) Failing after 4s
Deploy Documentation / validate (push) Has been skipped
Deploy Documentation / deploy (push) Failing after 1s
Init Native E2E / init-native (ubuntu-latest, claude) (push) Failing after 1s
Init Native E2E / init-native (ubuntu-latest, codex) (push) Failing after 1s
Install Native E2E / install-native (ubuntu-latest) (push) Failing after 1s
OpenCode Plugin / typecheck + build + test (push) Failing after 1s
Init Native E2E / init-native (ubuntu-latest, copilot) (push) Failing after 1s
Release Please / release-please (push) Failing after 1s
Wrap E2E / docker-wrap-e2e (push) Failing after 1s
Wrap Native E2E / wrap-native (ubuntu-latest) (push) Failing after 1s
Init E2E / docker-init-e2e (push) Failing after 4s
Merge Conflicts / merge-conflicts (push) Failing after 4s
CI / lint (push) Has been cancelled
CI / build-wheel (push) Has been cancelled
CI / build-wheel-windows (push) Has been cancelled
CI / prefetch-model (push) Has been cancelled
CI / test-dashboard-ui (push) Has been cancelled
CI / test (1) (push) Has been cancelled
CI / test (2) (push) Has been cancelled
CI / test (3) (push) Has been cancelled
CI / test (4) (push) Has been cancelled
CI / test-extras (push) Has been cancelled
CI / test-agno (push) Has been cancelled
CI / build (push) Has been cancelled
CI / workflow-validation (push) Has been cancelled
CI / docker-native-e2e (push) Has been cancelled
CI / windows-native-wrapper (push) Has been cancelled
CI / macos-native-wrapper (push) Has been cancelled
Docker / docker-build (map[name:arm64 platform:linux/arm64 runs_on:ubuntu-24.04-arm], map[bake_target:runtime-code-nonroot name:code-nonroot]) (push) Has been cancelled
Docker / docker-build (map[name:arm64 platform:linux/arm64 runs_on:ubuntu-24.04-arm], map[bake_target:runtime-code-slim name:code-slim]) (push) Has been cancelled
Docker / docker-build (map[name:arm64 platform:linux/arm64 runs_on:ubuntu-24.04-arm], map[bake_target:runtime-code-slim-nonroot name:code-slim-nonroot]) (push) Has been cancelled
Docker / docker-build (map[name:arm64 platform:linux/arm64 runs_on:ubuntu-24.04-arm], map[bake_target:runtime-nonroot name:nonroot]) (push) Has been cancelled
Docker / docker-build (map[name:arm64 platform:linux/arm64 runs_on:ubuntu-24.04-arm], map[bake_target:runtime-slim name:slim]) (push) Has been cancelled
Docker / docker-build (map[name:arm64 platform:linux/arm64 runs_on:ubuntu-24.04-arm], map[bake_target:runtime-slim-nonroot name:slim-nonroot]) (push) Has been cancelled
Docker / docker-manifest (map[bake_target:runtime name:]) (push) Has been cancelled
Docker / docker-manifest (map[bake_target:runtime-code name:code]) (push) Has been cancelled
Docker / docker-manifest (map[bake_target:runtime-code-nonroot name:code-nonroot]) (push) Has been cancelled
Docker / docker-manifest (map[bake_target:runtime-code-slim name:code-slim]) (push) Has been cancelled
Docker / docker-manifest (map[bake_target:runtime-code-slim-nonroot name:code-slim-nonroot]) (push) Has been cancelled
Docker / docker-manifest (map[bake_target:runtime-nonroot name:nonroot]) (push) Has been cancelled
Docker / docker-manifest (map[bake_target:runtime-slim name:slim]) (push) Has been cancelled
Docker / docker-manifest (map[bake_target:runtime-slim-nonroot name:slim-nonroot]) (push) Has been cancelled
Docker / docker-build (map[name:amd64 platform:linux/amd64 runs_on:ubuntu-24.04], map[bake_target:runtime name:]) (push) Has been cancelled
Docker / docker-build (map[name:amd64 platform:linux/amd64 runs_on:ubuntu-24.04], map[bake_target:runtime-code name:code]) (push) Has been cancelled
Docker / docker-build (map[name:amd64 platform:linux/amd64 runs_on:ubuntu-24.04], map[bake_target:runtime-code-nonroot name:code-nonroot]) (push) Has been cancelled
Docker / docker-build (map[name:amd64 platform:linux/amd64 runs_on:ubuntu-24.04], map[bake_target:runtime-code-slim name:code-slim]) (push) Has been cancelled
Docker / docker-build (map[name:amd64 platform:linux/amd64 runs_on:ubuntu-24.04], map[bake_target:runtime-code-slim-nonroot name:code-slim-nonroot]) (push) Has been cancelled
Docker / docker-build (map[name:amd64 platform:linux/amd64 runs_on:ubuntu-24.04], map[bake_target:runtime-nonroot name:nonroot]) (push) Has been cancelled
Docker / docker-build (map[name:amd64 platform:linux/amd64 runs_on:ubuntu-24.04], map[bake_target:runtime-slim name:slim]) (push) Has been cancelled
Docker / docker-build (map[name:amd64 platform:linux/amd64 runs_on:ubuntu-24.04], map[bake_target:runtime-slim-nonroot name:slim-nonroot]) (push) Has been cancelled
Docker / docker-build (map[name:arm64 platform:linux/arm64 runs_on:ubuntu-24.04-arm], map[bake_target:runtime name:]) (push) Has been cancelled
Docker / docker-build (map[name:arm64 platform:linux/arm64 runs_on:ubuntu-24.04-arm], map[bake_target:runtime-code name:code]) (push) Has been cancelled
Docker / promote-latest (push) Has been cancelled
Init Native E2E / init-native (macos-latest, claude) (push) Has been cancelled
Init Native E2E / init-native (macos-latest, codex) (push) Has been cancelled
Init Native E2E / init-native (macos-latest, copilot) (push) Has been cancelled
Install Native E2E / install-native (macos-latest) (push) Has been cancelled
Wrap Native E2E / wrap-native (macos-latest) (push) Has been cancelled
228 lines
8.3 KiB
Python
228 lines
8.3 KiB
Python
"""Upstream 429 rate-limit retry + Retry-After honoring (fixes #1221).
|
|
|
|
Both the non-streaming (``server.py:_retry_request``) and streaming
|
|
(``streaming.py:_stream_response``) forwarders must retry an upstream 429 with
|
|
backoff instead of passing it straight back to the client, since a parallel
|
|
agent fan-out that exceeds the per-minute limit otherwise aborts every run.
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
import asyncio
|
|
|
|
import httpx
|
|
|
|
from headroom.proxy.server import ProxyConfig, create_app
|
|
|
|
|
|
class _RateLimitTransport(httpx.AsyncBaseTransport):
|
|
"""Returns ``fail_status`` for the first ``fail_times`` calls, then 200.
|
|
|
|
Records ``calls`` so a test can assert whether a retry happened.
|
|
"""
|
|
|
|
def __init__(
|
|
self,
|
|
*,
|
|
fail_status: int = 429,
|
|
fail_times: int = 1,
|
|
retry_after: str | None = None,
|
|
sse: bool = False,
|
|
) -> None:
|
|
self.fail_status = fail_status
|
|
self.fail_times = fail_times
|
|
self.retry_after = retry_after
|
|
self.sse = sse
|
|
self.calls = 0
|
|
|
|
async def handle_async_request(self, request: httpx.Request) -> httpx.Response:
|
|
self.calls += 1
|
|
async for _ in request.stream: # drain the request body
|
|
pass
|
|
if self.calls <= self.fail_times:
|
|
headers = {"retry-after": self.retry_after} if self.retry_after is not None else {}
|
|
return httpx.Response(
|
|
self.fail_status,
|
|
headers=headers,
|
|
json={"type": "error", "error": {"type": "rate_limit_error"}},
|
|
)
|
|
if self.sse:
|
|
body = b'event: message_stop\ndata: {"type":"message_stop"}\n\n'
|
|
return httpx.Response(200, headers={"content-type": "text/event-stream"}, content=body)
|
|
return httpx.Response(
|
|
200,
|
|
json={
|
|
"id": "msg_1",
|
|
"type": "message",
|
|
"role": "assistant",
|
|
"content": [{"type": "text", "text": "ok"}],
|
|
"usage": {"input_tokens": 1, "output_tokens": 1},
|
|
},
|
|
)
|
|
|
|
|
|
def _proxy_with(transport: _RateLimitTransport, *, max_attempts: int = 3):
|
|
config = ProxyConfig(
|
|
optimize=False,
|
|
cache_enabled=False,
|
|
rate_limit_enabled=False,
|
|
cost_tracking_enabled=False,
|
|
log_requests=False,
|
|
ccr_inject_tool=False,
|
|
ccr_handle_responses=False,
|
|
ccr_context_tracking=False,
|
|
image_optimize=False,
|
|
retry_enabled=True,
|
|
retry_max_attempts=max_attempts,
|
|
retry_base_delay_ms=1,
|
|
retry_max_delay_ms=5000,
|
|
)
|
|
proxy = create_app(config).state.proxy
|
|
proxy.http_client = httpx.AsyncClient(transport=transport)
|
|
return proxy
|
|
|
|
|
|
# --- non-streaming: _retry_request ---------------------------------------
|
|
|
|
|
|
def test_retry_request_retries_429_then_succeeds() -> None:
|
|
transport = _RateLimitTransport(fail_status=429, fail_times=1, retry_after="0")
|
|
proxy = _proxy_with(transport)
|
|
resp = asyncio.run(proxy._retry_request("POST", "https://up/v1/messages", {}, {"messages": []}))
|
|
assert resp.status_code == 200
|
|
assert transport.calls == 2 # one 429 + one success — the retry happened
|
|
|
|
|
|
def test_retry_request_returns_429_verbatim_on_exhaustion() -> None:
|
|
# Always 429: must return the 429 to the client, NOT raise / convert to 5xx.
|
|
transport = _RateLimitTransport(fail_status=429, fail_times=99, retry_after="0")
|
|
proxy = _proxy_with(transport, max_attempts=3)
|
|
resp = asyncio.run(proxy._retry_request("POST", "https://up/v1/messages", {}, {"messages": []}))
|
|
assert resp.status_code == 429
|
|
assert transport.calls == 3 # exhausted all attempts
|
|
|
|
|
|
def test_retry_request_honors_retry_after(monkeypatch) -> None:
|
|
slept: list[float] = []
|
|
|
|
async def _fake_wait(self, seconds: float) -> bool: # type: ignore[no-untyped-def]
|
|
slept.append(seconds)
|
|
return False
|
|
|
|
monkeypatch.setattr(
|
|
"headroom.proxy.server.HeadroomProxy._wait_for_retry_delay_or_shutdown", _fake_wait
|
|
)
|
|
transport = _RateLimitTransport(fail_status=429, fail_times=1, retry_after="2")
|
|
proxy = _proxy_with(transport)
|
|
asyncio.run(proxy._retry_request("POST", "https://up/v1/messages", {}, {"messages": []}))
|
|
# Retry-After: 2s honored (not the ~1-10ms jittered exponential backoff).
|
|
assert slept and abs(slept[0] - 2.0) < 0.01
|
|
|
|
|
|
def test_retry_request_does_not_retry_other_4xx() -> None:
|
|
transport = _RateLimitTransport(fail_status=400, fail_times=99)
|
|
proxy = _proxy_with(transport)
|
|
resp = asyncio.run(proxy._retry_request("POST", "https://up/v1/messages", {}, {"messages": []}))
|
|
assert resp.status_code == 400
|
|
assert transport.calls == 1 # 4xx (non-429) still short-circuits — no retry
|
|
|
|
|
|
def test_retry_request_still_retries_5xx() -> None:
|
|
transport = _RateLimitTransport(fail_status=503, fail_times=1)
|
|
proxy = _proxy_with(transport)
|
|
resp = asyncio.run(proxy._retry_request("POST", "https://up/v1/messages", {}, {"messages": []}))
|
|
assert resp.status_code == 200
|
|
assert transport.calls == 2 # 5xx retry path unchanged
|
|
|
|
|
|
# --- streaming: _stream_response -----------------------------------------
|
|
|
|
|
|
def test_stream_response_retries_429() -> None:
|
|
transport = _RateLimitTransport(fail_status=429, fail_times=1, retry_after="0", sse=True)
|
|
proxy = _proxy_with(transport)
|
|
asyncio.run(
|
|
proxy._stream_response(
|
|
"https://up/v1/messages",
|
|
{},
|
|
{"messages": []},
|
|
"anthropic",
|
|
"claude-3",
|
|
"r1",
|
|
0,
|
|
0,
|
|
0,
|
|
[],
|
|
{},
|
|
0.0,
|
|
)
|
|
)
|
|
assert transport.calls == 2 # streaming 429 retried, not forwarded raw
|
|
|
|
|
|
# --- 529 overloaded: same transient-retry path as 429 --------------------
|
|
#
|
|
# 529 is Anthropic's ``overloaded_error``. Like 429 it means "try again
|
|
# shortly", so both forwarders must retry it honoring Retry-After. Before this
|
|
# fix the streaming path forwarded a 529 to the client raw (zero retries), and
|
|
# _retry_request retried it only via the generic 5xx path — raising on
|
|
# exhaustion instead of returning the 529 verbatim, and ignoring Retry-After.
|
|
|
|
|
|
def test_retry_request_retries_529_then_succeeds() -> None:
|
|
transport = _RateLimitTransport(fail_status=529, fail_times=1, retry_after="0")
|
|
proxy = _proxy_with(transport)
|
|
resp = asyncio.run(proxy._retry_request("POST", "https://up/v1/messages", {}, {"messages": []}))
|
|
assert resp.status_code == 200
|
|
assert transport.calls == 2 # one 529 + one success — the retry happened
|
|
|
|
|
|
def test_retry_request_returns_529_verbatim_on_exhaustion() -> None:
|
|
# Always 529: must return the 529 to the client, NOT raise / convert to 5xx.
|
|
transport = _RateLimitTransport(fail_status=529, fail_times=99, retry_after="0")
|
|
proxy = _proxy_with(transport, max_attempts=3)
|
|
resp = asyncio.run(proxy._retry_request("POST", "https://up/v1/messages", {}, {"messages": []}))
|
|
assert resp.status_code == 529
|
|
assert transport.calls == 3 # exhausted all attempts, returned verbatim
|
|
|
|
|
|
def test_retry_request_honors_retry_after_on_529(monkeypatch) -> None:
|
|
slept: list[float] = []
|
|
|
|
async def _fake_wait(self, seconds: float) -> bool: # type: ignore[no-untyped-def]
|
|
slept.append(seconds)
|
|
return False
|
|
|
|
monkeypatch.setattr(
|
|
"headroom.proxy.server.HeadroomProxy._wait_for_retry_delay_or_shutdown", _fake_wait
|
|
)
|
|
transport = _RateLimitTransport(fail_status=529, fail_times=1, retry_after="2")
|
|
proxy = _proxy_with(transport)
|
|
asyncio.run(proxy._retry_request("POST", "https://up/v1/messages", {}, {"messages": []}))
|
|
# Retry-After: 2s honored for 529 just like 429.
|
|
assert slept and abs(slept[0] - 2.0) < 0.01
|
|
|
|
|
|
def test_stream_response_retries_529() -> None:
|
|
# The gap this PR closes: an interactive (streaming) session hitting a 529
|
|
# used to get "Overloaded" surfaced immediately, with no retry.
|
|
transport = _RateLimitTransport(fail_status=529, fail_times=1, retry_after="0", sse=True)
|
|
proxy = _proxy_with(transport)
|
|
asyncio.run(
|
|
proxy._stream_response(
|
|
"https://up/v1/messages",
|
|
{},
|
|
{"messages": []},
|
|
"anthropic",
|
|
"claude-3",
|
|
"r1",
|
|
0,
|
|
0,
|
|
0,
|
|
[],
|
|
{},
|
|
0.0,
|
|
)
|
|
)
|
|
assert transport.calls == 2 # streaming 529 retried, not forwarded raw
|