Files
OmniRoute/config
Innokentiy Solntsev f909b1d45e fix(resilience): don't cool down accounts or trip the breaker on client aborts (#7908)
* fix(resilience): don't cool down accounts or trip the breaker on client aborts

When the caller drops the connection mid-stream, the in-flight request surfaces
request_signal_aborted, "Client disconnected", or a DOM AbortError with no
upstream status code. These shapes were counted as provider failures: the
serving connection went into cooldown, the provider circuit breaker accrued
failures, and healthy accounts ended up marked unavailable from client-side
cancellations alone.

Treat client aborts as local stream lifecycle events (#4602 policy): extend
isLocalStreamLifecycleError() to recognize abort shapes and skip connection
disable and breaker accounting for them. Genuine upstream failures (5xx/429/401)
are still counted.

Fixes #7907.

* fix(resilience): guard the two remaining breaker-trip call sites against client aborts (#7907)

PR #7908 correctly wired isLocalStreamLifecycleError() into
shouldSkipConnDisable() and chatHelpers.ts's onStreamFailure, but two
separate breaker._onFailure()-triggering call sites were purely
status-code gated and never checked it, so a client-side abort (no
upstream status, defaults to 502, error='request_signal_aborted')
still tripped the whole-provider circuit breaker — the highest
blast-radius of the 3 resilience mechanisms:

- src/sse/handlers/chat.ts: the single-model, non-combo terminal-failure
  path called breaker._onFailure() directly, bypassing the isFailure
  option (which only applies inside breaker.execute()). Extracted the
  predicate into shouldTripProviderBreakerForResult() and added the
  missing isLocalStreamLifecycleError guard.
- open-sse/services/combo/comboPredicates.ts::shouldRecordProviderBreakerFailure(),
  used by handleComboChat's executeTarget (open-sse/services/combo.ts),
  gained the same guard via a new optional `error` field.

Added tests/unit/circuit-breaker-abort-provider-trip-7907.test.ts
exercising both real predicates directly (not just the isolated
isLocalStreamLifecycleError() helper) — confirmed red on the unfixed
code (missing export) and green after the fix, alongside the existing
#4602/#7908/combo-breaker-429 suites (24/24 pass, no regressions).

file-size-baseline.json: +1 combo.ts (irreducible call-site wiring for
the new `error` field) and +1 chatHelpers.ts (own growth from the PR's
already-verified onStreamFailure guard, surfaced only now since
fast-gates PR->release skip check:file-size).

Co-authored-by: Diego Rodrigues de Sa e Souza <diegosouzapw@users.noreply.github.com>
Co-authored-by: insoln <insoln@ya.ru>

* test(quality): register circuit-breaker abort tests in stryker tap.testFiles

The two new tests (circuit-breaker-abort-provider-trip-7907, circuit-breaker-client-abort)
import mutated modules (circuitBreaker.ts, comboPredicates.ts) but were not listed in
stryker.conf.json tap.testFiles, tripping check:mutation-test-coverage --strict.

Co-authored-by: diegosouzapw <diegosouza.pw@gmail.com>

---------

Co-authored-by: Diego Rodrigues de Sa e Souza <diegosouza.pw@gmail.com>
Co-authored-by: Diego Rodrigues de Sa e Souza <diegosouzapw@users.noreply.github.com>
2026-07-21 12:01:47 -03:00
..
2026-07-13 09:12:40 -03:00