mirror of
https://github.com/diegosouzapw/OmniRoute.git
synced 2026-09-20 22:02:19 +03:00
Behind the new `PROTECTED_PRIORITY_INFRA_502_ENABLED` flag (default off), protected-priority combo stops caused by provably non-quota infrastructure (provider circuit open, predictive-TTFT latency) surface as 502 instead of a quota-looking 503.
Maintainer rework before merge (kept the idea, no default behavior change):
- The original branch made 502 the default for every stop, including model lockouts and cooldowns, and removed the #8133/#1731 provider-wide skip for 401/5xx without a connection id; both are restored with their regression tests untouched.
- Nineteen cases cover eight gate causes plus predictive latency, flag off and on.
Validated first on the combined board of all 38 PRs of this batch (10 merged as-is, 28 after the maintainer rework) on top of release/v3.8.51 c0f92ec: typecheck:core, check:open-sse-typecheck and check:dashboard-typecheck clean; ESLint clean on every changed file; file-size (rebaselined for the combined growth), complexity, cognitive-complexity, changelog-integrity, docs-counts, docs-sync, migration-numbering and i18n new-key gates green; 735 focused node:test cases with the only batch-caused failure (a flag-count assertion) fixed. Then re-validated alone on the fresh release tip right before this merge: ESLint on the changed files, typecheck:core, check:open-sse-typecheck, the file-size/complexity/changelog gates and this PR's own tests.
Thanks @maxmad64bis!
345 lines
12 KiB
TypeScript
345 lines
12 KiB
TypeScript
/**
|
|
* Pre-dispatch skip gates for handleComboChat's executeTarget.
|
|
* Order is locked (spec §4.1). Do not reorder.
|
|
*
|
|
* Extracted from combo.ts executeTarget entry through the retry loop.
|
|
*
|
|
* @internal — not part of the public combo.ts barrel.
|
|
*/
|
|
import {
|
|
getRuntimeProviderProfile,
|
|
isAccountSemaphoreFull,
|
|
isModelLocked,
|
|
} from "../accountFallback.ts";
|
|
import { isProviderInCooldown } from "../providerCooldownTracker.ts";
|
|
import { checkCredentialGate, logCredentialSkip } from "../credentialGate.ts";
|
|
import { errorResponse } from "../../utils/error.ts";
|
|
import { getCircuitBreaker } from "../../../src/shared/utils/circuitBreaker";
|
|
import { parseModel } from "../model.ts";
|
|
import { canAffordRequest } from "../../../src/lib/quota/quotaScheduler.ts";
|
|
import { getCachedProviderConnectionById } from "../../../src/lib/db/readCache.ts";
|
|
import { lookupPositiveCap } from "./concurrencyCaps.ts";
|
|
import { recordComboDecision } from "./decisionTrace.ts";
|
|
import {
|
|
getExhaustedTargetSkipReason,
|
|
resolvePersistedConnectionCooldownSkipReason,
|
|
} from "./comboPredicates.ts";
|
|
import { resolveQuotaExhaustionCutoffForTarget } from "./quotaExhaustionCutoff.ts";
|
|
import { protectedPriorityStopStatus } from "./protectedPriorityStopStatus.ts";
|
|
import type { ProtectedPriorityStopCause } from "./protectedPriorityStopStatus.ts";
|
|
import type { AttemptLoopDeps, AttemptLoopState, GateDecision } from "./attemptLoopTypes.ts";
|
|
import type { ResolvedComboTarget } from "./types.ts";
|
|
|
|
/**
|
|
* Cached vs fresh connection read for the persisted-cooldown gate.
|
|
* `fresh: false` (first attempt) uses the 5s readCache. `fresh: true`
|
|
* (every retry) goes straight to SQLite.
|
|
*
|
|
* Task 2 call sites pass `false` — same as combo.ts executeTarget today.
|
|
* Retry-path `fresh: true` is Task 4 wiring, not this extract.
|
|
*/
|
|
export async function readConnectionForCooldownGate(
|
|
connectionId: string,
|
|
fresh: boolean
|
|
): Promise<Record<string, unknown> | null | undefined> {
|
|
if (!fresh) return getCachedProviderConnectionById(connectionId);
|
|
const { getProviderConnectionById } = await import("@/lib/db/providers");
|
|
return (await getProviderConnectionById(connectionId)) as Record<string, unknown> | null;
|
|
}
|
|
|
|
export async function evaluateExecuteTargetGates(opts: {
|
|
index: number;
|
|
state: AttemptLoopState;
|
|
deps: AttemptLoopDeps;
|
|
}): Promise<GateDecision> {
|
|
const { index: i, state, deps } = opts;
|
|
const target = state.orderedTargets[i];
|
|
const modelStr = target.modelStr;
|
|
const rawModel = parseModel(modelStr).model || modelStr;
|
|
const provider = target.provider;
|
|
const protectedPriorityTarget =
|
|
deps.strategy === "priority" && target.fallbackOnlyOnQuotaExhaustion === true;
|
|
|
|
const stopProtectedPriorityTarget = (message: string, cause?: ProtectedPriorityStopCause) => {
|
|
state.observeFailure(false, target.executionKey);
|
|
deps.clearStaleLKGP(deps.combo.name, target.executionKey, deps.combo.id, deps.log, "COMBO");
|
|
return protectedPriorityTarget
|
|
? { ok: false as const, response: errorResponse(protectedPriorityStopStatus(cause), message) }
|
|
: null;
|
|
};
|
|
|
|
// Lift-as-is from combo.ts executeTarget: only count a fallback when
|
|
// this is not the first ordered target. Do not change the condition.
|
|
const bumpFallback = () => {
|
|
if (i > 0) state.fallbackCount++;
|
|
};
|
|
|
|
const cb = getCircuitBreaker(provider);
|
|
const cbStatus = cb.getStatus();
|
|
if (cbStatus.state === "OPEN") {
|
|
state.skippedForCircuitOpen = true;
|
|
if (
|
|
cbStatus.retryAfterMs > 0 &&
|
|
(state.earliestCircuitOpenRetryMs === 0 ||
|
|
cbStatus.retryAfterMs < state.earliestCircuitOpenRetryMs)
|
|
) {
|
|
state.earliestCircuitOpenRetryMs = cbStatus.retryAfterMs;
|
|
}
|
|
deps.log.info("COMBO", `Skipping ${modelStr} — circuit breaker OPEN for ${provider}`);
|
|
recordComboDecision(deps.traceInvocationId, {
|
|
step: target.executionKey,
|
|
target: modelStr,
|
|
decision: "skipped_before_dispatch",
|
|
reason: "circuit_open",
|
|
});
|
|
bumpFallback();
|
|
return {
|
|
kind: "skip",
|
|
result: stopProtectedPriorityTarget(
|
|
`Provider ${provider} circuit breaker is open`,
|
|
"circuit_open"
|
|
),
|
|
};
|
|
}
|
|
|
|
if (
|
|
deps.resilienceSettings.providerCooldown.enabled &&
|
|
Boolean(provider && provider !== "unknown") &&
|
|
(isProviderInCooldown(provider, target.connectionId ?? undefined, deps.resilienceSettings) ||
|
|
isProviderInCooldown(provider, undefined, deps.resilienceSettings))
|
|
) {
|
|
deps.log.info("COMBO", `Skipping ${modelStr} — provider ${provider} in global cooldown`);
|
|
recordComboDecision(deps.traceInvocationId, {
|
|
step: target.executionKey,
|
|
target: modelStr,
|
|
decision: "skipped_before_dispatch",
|
|
reason: "provider_cooldown",
|
|
});
|
|
bumpFallback();
|
|
return {
|
|
kind: "skip",
|
|
result: stopProtectedPriorityTarget(`Provider ${provider} is in cooldown`),
|
|
};
|
|
}
|
|
|
|
const preScreenEntry = deps.preScreenMap.get(target.executionKey);
|
|
const profile = preScreenEntry?.profile ?? (await getRuntimeProviderProfile(provider));
|
|
|
|
const allowRateLimitedConnection =
|
|
Boolean(provider && provider !== "unknown") &&
|
|
state.transientRateLimitedProviders.has(provider);
|
|
const abortSignal = state.abortControllers.get(i)?.signal;
|
|
const targetForAttempt = allowRateLimitedConnection
|
|
? {
|
|
...target,
|
|
allowRateLimitedConnection: true,
|
|
modelAbortSignal: abortSignal,
|
|
fallbackAttempts: i,
|
|
}
|
|
: { ...target, modelAbortSignal: abortSignal, fallbackAttempts: i };
|
|
|
|
if (target.connectionId && !allowRateLimitedConnection) {
|
|
const persistedSkip = await resolvePersistedConnectionCooldownSkipReason(
|
|
target,
|
|
(id) => readConnectionForCooldownGate(id, false),
|
|
allowRateLimitedConnection
|
|
);
|
|
if (persistedSkip) {
|
|
// Lift-as-is: combo.ts skips without observeFailure / stopProtectedPriorityTarget.
|
|
deps.log.info("COMBO", persistedSkip);
|
|
// #12659: this branch used to be untraced, so an ALL_TARGETS_SKIPPED
|
|
// caused purely by persisted cooldowns surfaced as an opaque
|
|
// `attempted=0, excluded=[]` diagnostics body.
|
|
recordComboDecision(deps.traceInvocationId, {
|
|
step: target.executionKey,
|
|
target: modelStr,
|
|
decision: "skipped_before_dispatch",
|
|
reason: "persisted_cooldown",
|
|
});
|
|
deps.clearStaleLKGP(deps.combo.name, target.executionKey, deps.combo.id, deps.log, "COMBO");
|
|
bumpFallback();
|
|
return { kind: "skip", result: null };
|
|
}
|
|
}
|
|
|
|
const exhaustedSkip = getExhaustedTargetSkipReason(
|
|
target,
|
|
state.exhaustedProviders,
|
|
state.exhaustedConnections
|
|
);
|
|
if (exhaustedSkip) {
|
|
deps.log.info("COMBO", exhaustedSkip);
|
|
recordComboDecision(deps.traceInvocationId, {
|
|
step: target.executionKey,
|
|
target: modelStr,
|
|
decision: "skipped_before_dispatch",
|
|
reason: "request_exhaustion",
|
|
});
|
|
bumpFallback();
|
|
return {
|
|
kind: "skip",
|
|
result: stopProtectedPriorityTarget(`Target ${modelStr} is unavailable`),
|
|
};
|
|
}
|
|
|
|
if (provider && rawModel && isModelLocked(provider, target.connectionId || "", rawModel)) {
|
|
deps.log.info("COMBO", `Skipping ${modelStr} — model locked by resilience (cooldown active)`);
|
|
recordComboDecision(deps.traceInvocationId, {
|
|
step: target.executionKey,
|
|
target: modelStr,
|
|
decision: "skipped_before_dispatch",
|
|
reason: "model_lockout",
|
|
});
|
|
bumpFallback();
|
|
return {
|
|
kind: "skip",
|
|
result: stopProtectedPriorityTarget(`Model ${modelStr} is locked`),
|
|
};
|
|
}
|
|
|
|
if (deps.strategy !== "auto" && provider && target.connectionId) {
|
|
const quotaCutoff = await resolveQuotaExhaustionCutoffForTarget(
|
|
provider,
|
|
target.connectionId,
|
|
deps.resilienceSettings,
|
|
deps.quotaCutoffResetWindowConfig,
|
|
deps.combo.name,
|
|
deps.log,
|
|
modelStr
|
|
);
|
|
if (quotaCutoff.blocked) {
|
|
deps.log.info(
|
|
"COMBO",
|
|
`Skipping ${modelStr} — quota exhaustion cutoff (${quotaCutoff.reason || "quota_exhausted"})`
|
|
);
|
|
deps.clearStaleLKGP(deps.combo.name, target.executionKey, deps.combo.id, deps.log, "COMBO");
|
|
recordComboDecision(deps.traceInvocationId, {
|
|
step: target.executionKey,
|
|
target: modelStr,
|
|
decision: "skipped_before_dispatch",
|
|
reason: "quota_cutoff",
|
|
});
|
|
bumpFallback();
|
|
state.observeFailure(true, target.executionKey);
|
|
if (protectedPriorityTarget) {
|
|
const protectedTargetTrust = state.targetFailureTrust.get(target.executionKey);
|
|
if (!protectedTargetTrust?.allObservedFailuresQuota) {
|
|
return {
|
|
kind: "skip",
|
|
result: {
|
|
ok: false,
|
|
response: errorResponse(503, `Target ${modelStr} is unavailable`),
|
|
},
|
|
};
|
|
}
|
|
}
|
|
return { kind: "skip", result: null };
|
|
}
|
|
}
|
|
|
|
// Lift-as-is: combo.ts reads the env flag inline, not via AttemptLoopDeps.
|
|
if (process.env.OMNIROUTE_QUOTA_AWARE_ROUTING === "1" && provider && target.connectionId) {
|
|
const quotaDecision = canAffordRequest(
|
|
target.connectionId,
|
|
modelStr,
|
|
deps.body as Record<string, unknown> | null | undefined
|
|
);
|
|
if (!quotaDecision.affordable) {
|
|
deps.log.info(
|
|
"COMBO",
|
|
`Skipping ${modelStr} — quota budget ${quotaDecision.reason} (remaining ${quotaDecision.tokensRemaining ?? 0}, cost ${quotaDecision.estimatedCost ?? 0})`
|
|
);
|
|
deps.clearStaleLKGP(deps.combo.name, target.executionKey, deps.combo.id, deps.log, "COMBO");
|
|
bumpFallback();
|
|
return { kind: "skip", result: null };
|
|
}
|
|
}
|
|
|
|
if (deps.isModelAvailable) {
|
|
const available = await deps.isModelAvailable(modelStr, targetForAttempt);
|
|
if (!available) {
|
|
deps.log.debug?.(
|
|
"COMBO",
|
|
`Skipping ${modelStr} — no credentials available or model excluded`
|
|
);
|
|
deps.clearStaleLKGP(deps.combo.name, target.executionKey, deps.combo.id, deps.log, "COMBO");
|
|
recordComboDecision(deps.traceInvocationId, {
|
|
step: target.executionKey,
|
|
target: modelStr,
|
|
decision: "skipped_before_dispatch",
|
|
reason: "availability",
|
|
});
|
|
bumpFallback();
|
|
return {
|
|
kind: "skip",
|
|
result: stopProtectedPriorityTarget(`Model ${modelStr} is unavailable`),
|
|
};
|
|
}
|
|
}
|
|
|
|
// Lift-as-is: combo.ts uses the same `as string | undefined` cast.
|
|
const connectionId = target.connectionId as string | undefined;
|
|
if (connectionId) {
|
|
const gateResult = checkCredentialGate(connectionId, provider, modelStr);
|
|
if (gateResult.allowed === false) {
|
|
logCredentialSkip(deps.log, modelStr, gateResult.reason || "Credential gate blocked");
|
|
recordComboDecision(deps.traceInvocationId, {
|
|
step: target.executionKey,
|
|
target: modelStr,
|
|
decision: "skipped_before_dispatch",
|
|
reason: "credential_gate",
|
|
});
|
|
bumpFallback();
|
|
return {
|
|
kind: "skip",
|
|
result: stopProtectedPriorityTarget(`Credential gate blocked ${modelStr}`),
|
|
};
|
|
}
|
|
|
|
const maxConcurrentCap = await lookupPositiveCap(connectionId);
|
|
if (maxConcurrentCap && isAccountSemaphoreFull(provider, connectionId, maxConcurrentCap)) {
|
|
deps.log.info(
|
|
"COMBO",
|
|
`Skipping ${modelStr} — connection ${connectionId} is at max concurrency cap (${maxConcurrentCap})`
|
|
);
|
|
recordComboDecision(deps.traceInvocationId, {
|
|
step: target.executionKey,
|
|
target: modelStr,
|
|
decision: "skipped_before_dispatch",
|
|
reason: "concurrency_cap",
|
|
});
|
|
bumpFallback();
|
|
return {
|
|
kind: "skip",
|
|
result: stopProtectedPriorityTarget(`Connection capacity reached for ${modelStr}`),
|
|
};
|
|
}
|
|
}
|
|
|
|
if (
|
|
deps.perTargetAdmission &&
|
|
!(await deps.perTargetAdmission({
|
|
modelStr,
|
|
executionKey: target.executionKey,
|
|
body: deps.body,
|
|
}))
|
|
) {
|
|
deps.log.info("COMBO", `Skipping ${modelStr} — admission lane full (#9654)`);
|
|
recordComboDecision(deps.traceInvocationId, {
|
|
step: target.executionKey,
|
|
target: modelStr,
|
|
decision: "skipped_before_dispatch",
|
|
reason: "admission_lane",
|
|
});
|
|
bumpFallback();
|
|
return { kind: "skip", result: null };
|
|
}
|
|
|
|
return {
|
|
kind: "proceed",
|
|
targetForAttempt: targetForAttempt as ResolvedComboTarget,
|
|
profile,
|
|
protectedPriorityTarget,
|
|
};
|
|
}
|