mirror of
https://github.com/diegosouzapw/OmniRoute.git
synced 2026-07-31 04:12:10 +03:00
* chore(release): open v3.8.37 development cycle * chore(ci): harden release flow — ratchet decoupling, fast-path drift gates, build-scope guard, heap default (#5054) Implements improvements 1-4 from the v3.8.36 release benchmark (_tasks/release-bench/v3.8.36/PLANO-MELHORIA.md): 1. Quality Ratchet decoupled from flaky coverage (ci.yml): the shard→coverage→ratchet chain meant a single flaky Coverage Shard SKIPPED the whole Quality Ratchet on the release PR (v3.8.36 #4854), so cycle drift only surfaced post-merge in #5029. The job now runs on !cancelled(); coverage download is continue-on-error and the ratchet runs --allow-missing, so the DETERMINISTIC gates (eslint/complexity/cognitive/duplication/ codeql) stay blocking even when coverage is unavailable. 2. Fast-path drift gates (quality.yml PR→release): added check:complexity, check:cognitive-complexity, and a new lightweight check:pack-policy (pack-artifact unexpected-files check WITHOUT a build, via --policy-only) so drift + stray-tarball-file regressions are caught/rebaselined PER-PR instead of cascading onto the release PR. 3. Build heap default 4096→8192 MB (build-next-isolated.mjs): the clean graph peaks ~3.9 GB and brushed the old 4 GB ceiling; 8 GB gives headroom. Comment notes heap is NOT the fix for a poisoned scope (run check:build-scope instead). 4. check:build-scope gate (new): fails if .ts/.tsx/.js/.jsx files in the tsconfig scope exceed a threshold — catches worktrees/cruft leaking into the build scope (the v3.8.36 OOM root cause: 355,215 vs 4,547 files) BEFORE it detonates next build. Wired into the fast-path. * fix(auth): only trust forwarding headers from loopback TCP peers (#4689) Integrated into release/v3.8.37 — loopback-gated forwarding headers (IP spoofing fix). Cherry-picked onto current release tip; ipUtils.test.ts 9/9 green. * fix(codex): treat OAuth 401 as unrecoverable refresh failure (#4686) Integrated into release/v3.8.37 — codex OAuth 401 treated as unrecoverable refresh. Cherry-picked onto release tip; token-refresh-service.test.ts 38/38 green. * fix(translator): preserve reasoning_effort for non-Copilot Responses clients (#4688) Integrated into release/v3.8.37 — preserve reasoning_effort for non-Copilot Responses clients. Cherry-picked onto release tip; tests 47/47 green. * fix(translator): coerce tool descriptions to strings in OpenAI normalization (#4675) Integrated into release/v3.8.37 — coerce tool descriptions to strings in OpenAI normalization. Cherry-picked onto release tip; tests 3/3 green. * feat(sse): x-omniroute-strip-reasoning header to drop reasoning_content (#4678) Integrated into release/v3.8.37 — x-omniroute-strip-reasoning header. Cherry-picked onto release tip (resolved chatCore.ts/headers.ts adjacency conflict, kept resolveCompressionHeader + isStripReasoningRequested); tests 8/8 green. * fix(combo): flatten Anthropic tool messages + tool history to prevent upstream 503 (#4648) Integrated into release/v3.8.37 — flattenToolHistory helper (combo anti-503). Cherry-picked onto release tip; tests 9/9 green. * feat(headroom): proxy lifecycle management + dashboard UI (Docker sidecar supported) (#4649) Integrated into release/v3.8.37 — headroom proxy lifecycle (status/start/stop, local-only + spawn-capable per Rules #15/#17). Cherry-picked onto release tip; lifecycle 7/7 + route-guard 43/43 + check:cycles green. * feat(cli): multi-model support for Factory Droid CLI (#4682) Integrated into release/v3.8.37 — Factory Droid multi-model support. Cherry-picked onto release tip (kept readJsoncConfig + droidCustomModels imports); droid-custom-models 11/11 green. * fix(providers): require Default Model in compatible-provider API-key setup (#4641) Integrated into release/v3.8.37 — require Default Model in compatible-provider API-key setup. Cherry-picked fix + test-move onto release tip (kept release providerSpecificData + QuotaScrapingFields; fixed moved-test import path; baseline rebaseline unneeded, 865<866); UI test 2/2 green. * fix(dashboard): stop double-masking already-masked API key in list (E2E 3/9 regression) (#4671) Integrated into release/v3.8.37 — render server-masked key verbatim (drop redundant maskKey call). Note: release's maskKey already guards '****' (since v3.8.34), so this is a safe simplification; added a contract test pinning the **** passthrough invariant (2/2 green, would fail against the pre-guard maskKey = the historical double-mask bug). * chore(quality): rebaseline file-size for rc17 PR batch drift Own growth from the merged rc17 PRs (#4678/#4686/#4688) at existing chokepoints — cohesive, not extractable: - open-sse/handlers/responseSanitizer.ts 1103->1122 (SanitizeOpenAIResponseOptions + stripReasoning, #4678) - open-sse/services/tokenRefresh.ts 2070->2090 (codex 401 unrecoverable-refresh guard, #4686) - tests/unit/token-refresh-service.test.ts 1322->1353 (401 regression case, #4686) - tests/unit/translator-openai-responses-req.test.ts 1047->1050 (reasoning_effort assertion, #4688) * docs(env): document HEADROOM_URL in .env.example + ENVIRONMENT.md The headroom proxy lifecycle (#4649) reads HEADROOM_URL (src/lib/headroom/detect.ts, default http://localhost:8787) but it was missing from the env contract, tripping check:env-doc-sync. Adds the var to both .env.example (commented, has a default) and the Proxy Health table in ENVIRONMENT.md. * fix(sse): stream writer mock abort() returns a Promise (#4788) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; tests green. * fix(cli): fall back to default data dir when DATA_DIR is not writable (#4767) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; tests green. * fix(oauth): verify Cursor installation on Linux before auto-import (#4770) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; tests green. * fix(sse): track Ollama streaming usage from raw NDJSON chunks (#4754) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; tests green. * fix(sse): strip enumDescriptions from antigravity tool schema (#4740) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; tests green. * fix(sse): include low-level cause details in formatProviderError (#4741) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; tests green. * fix(translator): strip x-anthropic-billing-header in claude-to-openai (#4728) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; tests green. * fix(sse): gate Kiro image attachments behind a Claude-capability check (#4763) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; tests green. * fix(sse): read Antigravity usage from the response.usageMetadata envelope (#4785) Integrated into release/v3.8.37 — Antigravity response.usageMetadata envelope. Cherry-picked onto release tip (resolved test-tail adjacency with #4754 Ollama block); usage-extractor 23/23 green. * fix(api): fall back to existing access token for any OAuth provider on refresh failure (#4786) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; tests green. * fix(cli): verify launchd registration + skip self-SIGTERM in macOS autostart (#4765) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; tests green. * fix(executors): anthropic-compatible-* gateways get Bearer alongside x-api-key (#4729) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; tests green. * fix(sse): json_schema fallback for OpenAI-compatible providers (#4766) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; tests green. * fix(sse): use workos auth token shape for cline (#4787) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; tests green. * feat(sse): parse Gemini CLI 429 retryDelay from structured RetryInfo (#4738) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; tests green. * fix(sse): finalize tool_calls finish_reason on early stream end in OpenAI Responses translator (#4764) Integrated into release/v3.8.37 — computeFinishReason finalizes tool_calls on early stream end (Responses translator). Cherry-picked onto release tip; responses-translation-fixes 29/29 green. * test(sse): golden-lock provider.ts translate-path across all providers (#4734) Integrated into release/v3.8.37 — golden-lock for provider.ts translate-path. Cherry-picked onto release tip; snapshot regenerated against the current provider set (UPDATE_GOLDEN=1, 167 entries); golden test 3/3 deterministic. * chore(quality): rebaseline file-size for rc17 leva2 PR batch drift Own growth from the merged leva2 PRs (cohesive, not extractable): - src/lib/usage/providerLimits.ts 950->955 (#4786) - open-sse/executors/default.ts NEW frozen @828 (#4729 + #4766 + #4787 header branches) - open-sse/translator/request/openai-to-kiro.ts 807->814 (#4763) - open-sse/translator/response/openai-responses.ts 923->937 (#4764) - tests/unit/executor-default-base.test.ts 1339->1440 (#4766) - tests/unit/translator-openai-to-kiro.test.ts 918->980 (#4763) * fix(dashboard): align Engine Combos editor engines with API schema (#4955) (#5062) The named-combos pipeline dropdown offered four engines (headroom, session-dedup, ccr, llmlingua) that stackedPipelineStepSchema rejects, so selecting one made PUT /api/context/combos/[id] return HTTP 400 while saveCombo swallowed the non-OK response (if (!res.ok) return). Editing the default 'Standard Savings' combo and changing an engine reproduced the 400. - Add canonical STACKED_PIPELINE_ENGINE_INTENSITIES next to the schema as the single source of truth; the client dropdown imports it so it can never drift from the discriminated union the API validates against. - Surface save errors and empty-name/empty-pipeline validation in the editor instead of failing silently. - Add a parity unit test asserting the UI engine map equals the schema union and that every (engine, intensity) the UI emits is accepted. * fix(sse): filter nameless hosted tools when converting Responses API to Chat format (#4789) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; CHANGELOG re-merged; tests green. * fix(dashboard): keep desktop sidebar visible via explicit CSS class (#4812) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; CHANGELOG re-merged; tests green. * fix(sse): strip enumDescriptions from Antigravity tool schemas (#4813) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; CHANGELOG re-merged; tests green. * fix(dashboard): resolve passthrough model aliases by providerId in ModelSelectModal (#4815) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; CHANGELOG re-merged; tests green. * fix(oauth): allow per-connection refresh lead-time override via providerSpecificData.refreshLeadMs (#4818) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; CHANGELOG re-merged; tests green. * fix(sse): strip X-Stainless-* headers and normalize SDK User-Agent for OpenAI-compatible endpoints (#4820) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; CHANGELOG re-merged; tests green. * fix(sse): strip Gemini built-in tools when functionDeclarations present in Antigravity envelope (#4821) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; CHANGELOG re-merged; tests green. * fix(api): surface a Docker-localhost hint on provider-node validation connection errors (#4822) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; CHANGELOG re-merged; tests green. * fix(sse): resolve bare model names to connection defaultModel before upstream calls (#4825) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; CHANGELOG re-merged; tests green. * fix(build): trace-include sql.js sql-wasm.wasm in standalone bundle (#4839) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; CHANGELOG re-merged; tests green. * fix(sse): strip Composer <|final|> sentinel markers leaking after Composer reasoning (#4842) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; CHANGELOG re-merged; tests green. * fix(config): sync full SiliconFlow model list into registry (#4844) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; CHANGELOG re-merged; tests green. * fix(sse): close reasoning before message content in Responses stream (#4848) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; CHANGELOG re-merged; tests green. * fix(sse): reject unsupported Kiro [1m] context suffix (#4816) Integrated into release/v3.8.37 — cherry-picked onto release tip; test-tail conflict with #4763 resolved (kept both image + [1m] test blocks); CHANGELOG re-merged; 29/29 green. * fix(db): validate HuggingFace tokens via whoami-v2 auth probe (#4819) Integrated into release/v3.8.37 — defining commit re-homed onto the god-file-split validation module (validateHuggingFaceProvider in validation/openaiFormat.ts + map wiring); 115/115 green. * fix(sse): make anthropic-version default-guard case-insensitive (#4823) Integrated into release/v3.8.37 — conflict with #4729 Bearer-fallback resolved (kept both Bearer fallback + case-insensitive anthropic-version guard); 48/48 green. * fix(sse): sanitize Kiro tool schemas to avoid 400 "Improperly formed request" (#4847) Integrated into release/v3.8.37 — conflict in kiro-to-openai.ts resolved (kept release fallbackToolCallId + adopted #1375 toolNameMap remap); 7/7 green. * feat(sse): add GPT-4 to the GitHub Copilot provider (#4798) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; CHANGELOG re-merged; tests green. * feat(sse): add GPT-4o mini to GitHub Copilot provider (#4797) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; CHANGELOG re-merged; tests green. * feat(api): add MiniMax-M3 pricing row (#4814) Integrated into release/v3.8.37 — pricing row re-homed onto god-file-split pricing/regional.ts (pricing.ts is now a barrel); 4/4 green. * fix(cli): save runtime deps with --save-exact so a sibling install can't prune them (#4841) Integrated into release/v3.8.37 — trayRuntime conflict resolved (kept release SYSTRAY_SPEC + added --save-exact); 2/2 green. * fix(sse): preserve required fields in antigravity tool schemas (#4843) Integrated into release/v3.8.37 — conflict resolved (kept #4740/#4813 enumDescriptions strip + typed normalizeSchemaTypes, added required-preservation helpers; test-tail merged keeping both enumDescriptions + required tests); 7/7 green. * chore(quality): rebaseline file-size for rc17b leva3 PR batch drift * fix(sse): strip reasoning blobs from agentic context to prevent O(n^2) token growth (#4849) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; CHANGELOG re-merged; tests green. * fix(sse): unwrap Qoder HTTP 200 SSE error envelope so fallback can trigger (#4850) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; CHANGELOG re-merged; tests green. * fix(sse): strip temperature for Claude models with extended thinking (#4853) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; CHANGELOG re-merged; tests green. * fix(sse): emit valid concatenable kiro tool_calls.arguments deltas (#4855) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; CHANGELOG re-merged; tests green. * feat(sse): add toggleable tool-source diagnostics (#4856) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; CHANGELOG re-merged; tests green. * fix(sse): redact api key from the AUTH debug log in the chat handler (#4858) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; CHANGELOG re-merged; tests green. * fix(sse): forward AI SDK image parts in Responses translator (#4859) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; CHANGELOG re-merged; tests green. * fix(sse): resolve custom combos by id and case-insensitive name (#4446) (#4869) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; CHANGELOG re-merged; tests green. * fix(sse): exclude WS bridge controller-closed error from provider breaker (#4602) (#4870) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; CHANGELOG re-merged; tests green. * feat(providers): add xAI Grok inbound translators and thinking patcher (#4910) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; CHANGELOG re-merged; tests green. * feat(embeddings): add dimensions override field to embedding combos (#4913) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; CHANGELOG re-merged; tests green. * feat(oauth): Codex bulk-import endpoint — POST /api/oauth/codex/import (#4914) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; CHANGELOG re-merged; tests green. * fix(antigravity): retry transient upstream failures (#4941) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; CHANGELOG re-merged; tests green. * fix(sse): surface malformed HTTP-200 upstream responses (#4942) Integrated into release/v3.8.37 — cherry-picked defining commit onto release tip; CHANGELOG re-merged; tests green. * fix(sse): normalize Codex custom tools (apply_patch) to { input: string } schema (#4862) Integrated into release/v3.8.37 — conflict in request/openai-responses.ts resolved (kept #4789 nameless-tool skip + added #1007 custom-tool {input:string} normalization); 48/48 green incl. #4789/#4859 regression. * fix(sse): dense, deterministic output ordering in Responses API response.completed (#4906) Integrated into release/v3.8.37 — manual integration with #4862 in response/openai-responses.ts (custom-tool funcItem + dense recordCompletedItem). Fixed a latent #4848 interaction: the close-reasoning-before-message guard force-closed <think>-tag reasoning prematurely, which dense output (#4906) then snapshotted as a partial buffer ("plan" vs "planning") — scoped the guard to native reasoning_content (!inThinking) in BOTH transformer + translator paths. Full Responses suite 203/203 green incl. #4848/#4862 regression. * feat(sse): auto-promote successful combo model to position #1 (#4852) Integrated into release/v3.8.37 — dropped the stale file-size-baseline.json hunk (re-derived against the rc17b rebaseline); code+test applied clean; 13/13 green. * feat(providers): add Pioneer AI (Fastino Labs) provider (#4909) Integrated into release/v3.8.37 — providers.ts apikey block re-homed onto god-file-split src/shared/constants/providers/apikey/frontier-labs.ts (inline APIKEY_PROVIDERS no longer exists); registry/pioneer + providers/index.ts applied clean; 6/6 green. * add DGrid AI gateway provider (#4931) Integrated into release/v3.8.37 — rebased the contributor's commit onto the release tip; providers.ts god-file-split conflict resolved by relocating the dgrid APIKEY_PROVIDERS entry into apikey/gateways.ts; CHANGELOG added. 7/7 green. Thanks @dgridOP! * chore(quality): rebaseline file-size for rc17b leva4 PR batch drift * docs(routing): sync combo strategy docs for Fusion (17 strategies) (#5067) Fusion (16th strategy, panel fan-out + judge synthesis) and headroom shipped but the strategy-count docs were stale (14/15) and omitted both. Update every combo-strategy reference to the canonical 17, add fusion + headroom to all strategy tables, and add a dedicated Fusion section to AUTO-COMBO.md documenting judgeModel / fusionTuning config + an example. - CLAUDE.md, README.md, FEATURES.md, RESILIENCE_GUIDE.md, ARCHITECTURE.md, OPEN_SSE_ARCHITECTURE.md, OMNIROUTE_VS_ALTERNATIVES.md, docs/README.md, request-pipeline.mmd: 14/15 -> 17, list fusion + headroom - docs/routing/AUTO-COMBO.md: strategy table + new Fusion strategy section - docs/openapi.yaml: add reset-window, headroom, fusion to the strategy enum * fix(oauth): classify /api/oauth/cursor/auto-import as local-only (route-guard) (#5070) The Cursor auto-import route runs execFile("which", ["cursor"]) to verify a local Cursor install before importing credentials — a child-process spawn. The check:route-guard-membership gate (Hard Rules #15/#17) flagged it as an unclassified spawn-capable route: reachable past the loopback gate, an RCE-via-tunnel surface (a leaked JWT over a tunnel could trigger the spawn). Classify the specific path in LOCAL_ONLY_API_PREFIXES so loopback enforcement runs unconditionally before any auth check. Scoped to the exact path — the rest of /api/oauth/ (browser redirect/callback flows) stays remote-reachable. TDD: added a failing-then-passing assertion in route-guard-local-prefix.test.ts (classification + an over-broadening guard proving sibling OAuth paths stay remote). check:route-guard-membership now reports 0 new gaps. * chore(release): v3.8.37 — 2026-06-26 --------- Co-authored-by: dgridOP <dgrid_op@outlook.com>
634 lines
19 KiB
TypeScript
634 lines
19 KiB
TypeScript
import test from "node:test";
|
|
import assert from "node:assert/strict";
|
|
|
|
import {
|
|
createDisconnectAwareStream,
|
|
createNoopAbortWritable,
|
|
createStreamController,
|
|
pipeWithDisconnect,
|
|
} from "../../open-sse/utils/streamHandler.ts";
|
|
import { FORMATS } from "../../open-sse/translator/formats.ts";
|
|
import {
|
|
clearPendingRequests,
|
|
getPendingRequests,
|
|
trackPendingRequest,
|
|
} from "../../src/lib/usage/usageHistory.ts";
|
|
|
|
const encoder = new TextEncoder();
|
|
const decoder = new TextDecoder();
|
|
const PENDING_REQUEST_CLEARED_MARKER = "__omniroutePendingRequestCleared";
|
|
|
|
async function readStreamText(stream) {
|
|
const reader = stream.getReader();
|
|
const chunks = [];
|
|
|
|
while (true) {
|
|
const { done, value } = await reader.read();
|
|
if (done) break;
|
|
chunks.push(value);
|
|
}
|
|
|
|
return decoder.decode(
|
|
chunks.length === 1 ? chunks[0] : Uint8Array.from(chunks.flatMap((chunk) => Array.from(chunk)))
|
|
);
|
|
}
|
|
|
|
test("createDisconnectAwareStream converts upstream errors into SSE error chunks", async () => {
|
|
const upstreamError = Object.assign(new Error("provider exploded"), { statusCode: 429 });
|
|
const transformStream = {
|
|
readable: new ReadableStream({
|
|
start(controller) {
|
|
controller.error(upstreamError);
|
|
},
|
|
}),
|
|
writable: {
|
|
getWriter() {
|
|
return {
|
|
abort() {},
|
|
};
|
|
},
|
|
},
|
|
};
|
|
|
|
const stream = createDisconnectAwareStream(transformStream, createStreamController());
|
|
const text = await readStreamText(stream);
|
|
|
|
assert.match(text, /"finish_reason":"error"/);
|
|
assert.match(text, /"message":"provider exploded"/);
|
|
assert.match(text, /"code":"rate_limit_exceeded"/);
|
|
assert.match(text, /\[DONE\]/);
|
|
});
|
|
|
|
test("createDisconnectAwareStream: Gemini 503 high-demand error becomes SSE error chunk with message preserved", async () => {
|
|
const geminiMsg =
|
|
"[503]: This model is currently experiencing high demand. Spikes in demand are usually temporary. Please try again later.";
|
|
const upstreamError = Object.assign(new Error(geminiMsg), { statusCode: 503 });
|
|
const transformStream = {
|
|
readable: new ReadableStream({
|
|
start(controller) {
|
|
controller.error(upstreamError);
|
|
},
|
|
}),
|
|
writable: {
|
|
getWriter() {
|
|
return {
|
|
abort() {},
|
|
};
|
|
},
|
|
},
|
|
};
|
|
|
|
const stream = createDisconnectAwareStream(transformStream, createStreamController());
|
|
const text = await readStreamText(stream);
|
|
|
|
assert.match(text, /"finish_reason":"error"/);
|
|
assert.match(text, /"message":"\[503\]: This model is currently experiencing high demand/);
|
|
assert.match(text, /"type":"server_error"/);
|
|
assert.match(text, /"code":"server_error"/);
|
|
assert.match(text, /\[DONE\]/);
|
|
});
|
|
|
|
test("createDisconnectAwareStream emits Responses API failure events for Responses clients", async () => {
|
|
const upstreamError = Object.assign(new Error("responses stream\ndied"), { statusCode: 503 });
|
|
const transformStream = {
|
|
readable: new ReadableStream({
|
|
start(controller) {
|
|
controller.error(upstreamError);
|
|
},
|
|
}),
|
|
writable: {
|
|
getWriter() {
|
|
return {
|
|
abort() {},
|
|
};
|
|
},
|
|
},
|
|
};
|
|
|
|
const stream = createDisconnectAwareStream(
|
|
transformStream,
|
|
createStreamController({ clientResponseFormat: FORMATS.OPENAI_RESPONSES })
|
|
);
|
|
const text = await readStreamText(stream);
|
|
|
|
assert.match(text, /event: response\.failed/);
|
|
assert.match(text, /"type":"response\.failed"/);
|
|
assert.match(text, /"message":"responses stream\\ndied"/);
|
|
assert.match(text, /"type":"server_error"/);
|
|
assert.match(text, /"code":"server_error"/);
|
|
assert.doesNotMatch(text, /chat\.completion\.chunk/);
|
|
assert.doesNotMatch(text, /"finish_reason":"error"/);
|
|
assert.doesNotMatch(text, /\[DONE\]/);
|
|
});
|
|
|
|
test("createDisconnectAwareStream keeps newlines escaped inside SSE data fields", async () => {
|
|
const upstreamError = Object.assign(new Error("line one\nline two\rline three"), {
|
|
statusCode: 400,
|
|
});
|
|
const transformStream = {
|
|
readable: new ReadableStream({
|
|
start(controller) {
|
|
controller.error(upstreamError);
|
|
},
|
|
}),
|
|
writable: {
|
|
getWriter() {
|
|
return {
|
|
abort() {},
|
|
};
|
|
},
|
|
},
|
|
};
|
|
|
|
const stream = createDisconnectAwareStream(
|
|
transformStream,
|
|
createStreamController({ clientResponseFormat: FORMATS.OPENAI_RESPONSES })
|
|
);
|
|
const text = await readStreamText(stream);
|
|
|
|
assert.match(text, /^event: response\.failed\ndata: \{"type":"response\.failed"/);
|
|
assert.match(text, /"message":"line one\\nline two\\rline three"/);
|
|
assert.doesNotMatch(text, /^line two/m);
|
|
assert.doesNotMatch(text, /^line three/m);
|
|
});
|
|
|
|
test("createDisconnectAwareStream treats legacy OpenAI response format alias as Responses", async () => {
|
|
const upstreamError = Object.assign(new Error("legacy responses alias died"), {
|
|
statusCode: 429,
|
|
});
|
|
const transformStream = {
|
|
readable: new ReadableStream({
|
|
start(controller) {
|
|
controller.error(upstreamError);
|
|
},
|
|
}),
|
|
writable: {
|
|
getWriter() {
|
|
return {
|
|
abort() {},
|
|
};
|
|
},
|
|
},
|
|
};
|
|
|
|
const stream = createDisconnectAwareStream(
|
|
transformStream,
|
|
createStreamController({ clientResponseFormat: FORMATS.OPENAI_RESPONSE })
|
|
);
|
|
const text = await readStreamText(stream);
|
|
|
|
assert.match(text, /event: response\.failed/);
|
|
assert.match(text, /"type":"rate_limit_error"/);
|
|
assert.match(text, /"code":"rate_limit_exceeded"/);
|
|
assert.doesNotMatch(text, /chat\.completion\.chunk/);
|
|
assert.doesNotMatch(text, /\[DONE\]/);
|
|
});
|
|
|
|
test("createDisconnectAwareStream emits Claude SSE errors for Claude clients", async () => {
|
|
const upstreamError = Object.assign(new Error("claude stream died"), { statusCode: 502 });
|
|
const transformStream = {
|
|
readable: new ReadableStream({
|
|
start(controller) {
|
|
controller.error(upstreamError);
|
|
},
|
|
}),
|
|
writable: {
|
|
getWriter() {
|
|
return {
|
|
abort() {},
|
|
};
|
|
},
|
|
},
|
|
};
|
|
|
|
const stream = createDisconnectAwareStream(
|
|
transformStream,
|
|
createStreamController({ clientResponseFormat: FORMATS.CLAUDE })
|
|
);
|
|
const text = await readStreamText(stream);
|
|
|
|
assert.match(text, /event: error/);
|
|
assert.match(text, /"type":"error"/);
|
|
assert.match(text, /"type":"api_error"/);
|
|
assert.match(text, /"message":"claude stream died"/);
|
|
assert.doesNotMatch(text, /"code"/);
|
|
assert.doesNotMatch(text, /chat\.completion\.chunk/);
|
|
assert.doesNotMatch(text, /"finish_reason":"error"/);
|
|
assert.doesNotMatch(text, /\[DONE\]/);
|
|
});
|
|
|
|
test("createDisconnectAwareStream keeps newlines escaped for Claude SSE errors", async () => {
|
|
const upstreamError = Object.assign(new Error("claude line one\nclaude line two"), {
|
|
statusCode: 502,
|
|
});
|
|
const transformStream = {
|
|
readable: new ReadableStream({
|
|
start(controller) {
|
|
controller.error(upstreamError);
|
|
},
|
|
}),
|
|
writable: {
|
|
getWriter() {
|
|
return {
|
|
abort() {},
|
|
};
|
|
},
|
|
},
|
|
};
|
|
|
|
const stream = createDisconnectAwareStream(
|
|
transformStream,
|
|
createStreamController({ clientResponseFormat: FORMATS.CLAUDE })
|
|
);
|
|
const text = await readStreamText(stream);
|
|
|
|
assert.match(text, /^event: error\ndata: \{"type":"error"/);
|
|
assert.match(text, /"message":"claude line one\\nclaude line two"/);
|
|
assert.doesNotMatch(text, /^claude line two/m);
|
|
});
|
|
|
|
test("createDisconnectAwareStream cancel propagates disconnect reason and aborts the writer", async () => {
|
|
let aborted = false;
|
|
let disconnectEvent = null;
|
|
|
|
const transformStream = {
|
|
readable: new ReadableStream({
|
|
pull() {},
|
|
cancel() {},
|
|
}),
|
|
writable: {
|
|
getWriter() {
|
|
return {
|
|
abort() {
|
|
aborted = true;
|
|
},
|
|
};
|
|
},
|
|
},
|
|
};
|
|
|
|
const controller = createStreamController({
|
|
onDisconnect(event) {
|
|
disconnectEvent = event;
|
|
},
|
|
});
|
|
const stream = createDisconnectAwareStream(transformStream, controller);
|
|
|
|
await stream.cancel("client-gone");
|
|
|
|
await new Promise((resolve) => setTimeout(resolve, 2050));
|
|
|
|
assert.equal(aborted, true);
|
|
assert.equal(controller.isConnected(), false);
|
|
assert.equal(disconnectEvent.reason, "client-gone");
|
|
assert.ok(disconnectEvent.duration >= 0);
|
|
});
|
|
|
|
test("createNoopAbortWritable: getWriter().abort() returns a resolved Promise (matches WritableStreamDefaultWriter contract)", async () => {
|
|
// The mock writable that pipeWithDisconnect hands to createDisconnectAwareStream
|
|
// is consumed only via its writer's abort() hook (in the cancel() path). The
|
|
// native WritableStreamDefaultWriter.abort() returns Promise<void>; the mock
|
|
// must match that contract so cancel/error handling can await it instead of
|
|
// receiving `undefined`. Ported from decolua/9router@6b624af4.
|
|
const writable = createNoopAbortWritable();
|
|
const writer = writable.getWriter();
|
|
|
|
const aborted = writer.abort();
|
|
|
|
assert.ok(aborted instanceof Promise, "abort() must return a Promise, not undefined");
|
|
// Awaiting must resolve cleanly to undefined (Promise<void>), never reject.
|
|
assert.equal(await aborted, undefined);
|
|
});
|
|
|
|
test("createNoopAbortWritable: cancelling a stream wired through it awaits the abort promise without throwing", async () => {
|
|
// End-to-end seam: the noop writable is what pipeWithDisconnect injects. Wire
|
|
// it into createDisconnectAwareStream exactly as production does and drive the
|
|
// cancel() path. With abort() returning undefined (the pre-fix shape) this
|
|
// still completes, but a thenable abort keeps the cancel/error path clean.
|
|
const transformStream = {
|
|
readable: new ReadableStream({
|
|
pull() {},
|
|
cancel() {},
|
|
}),
|
|
writable: createNoopAbortWritable(),
|
|
};
|
|
|
|
const stream = createDisconnectAwareStream(transformStream, createStreamController());
|
|
|
|
await assert.doesNotReject(stream.cancel("client-gone"));
|
|
});
|
|
|
|
test("createDisconnectAwareStream uses the default cancel reason when none is provided", async () => {
|
|
let disconnectEvent = null;
|
|
|
|
const transformStream = {
|
|
readable: new ReadableStream({
|
|
cancel() {},
|
|
}),
|
|
writable: {
|
|
getWriter() {
|
|
return {
|
|
abort() {},
|
|
};
|
|
},
|
|
},
|
|
};
|
|
|
|
const controller = createStreamController({
|
|
onDisconnect(event) {
|
|
disconnectEvent = event;
|
|
},
|
|
});
|
|
const stream = createDisconnectAwareStream(transformStream, controller);
|
|
|
|
await stream.cancel();
|
|
|
|
assert.equal(disconnectEvent.reason, "cancelled");
|
|
});
|
|
|
|
test("createDisconnectAwareStream closes immediately when the controller is already disconnected", async () => {
|
|
const controller = createStreamController();
|
|
controller.handleDisconnect("preclosed");
|
|
|
|
const stream = createDisconnectAwareStream(
|
|
{
|
|
readable: new ReadableStream({
|
|
pull(inner) {
|
|
inner.enqueue(encoder.encode("ignored"));
|
|
},
|
|
}),
|
|
writable: {
|
|
getWriter() {
|
|
return {
|
|
abort() {},
|
|
};
|
|
},
|
|
},
|
|
},
|
|
controller
|
|
);
|
|
const reader = stream.getReader();
|
|
const first = await reader.read();
|
|
|
|
assert.equal(first.done, true);
|
|
});
|
|
|
|
test("createStreamController aborts after delayed disconnect and tolerates abort/unknown errors", async () => {
|
|
const controller = createStreamController();
|
|
const errorOnlyController = createStreamController();
|
|
|
|
controller.handleDisconnect();
|
|
controller.handleDisconnect("ignored-repeat");
|
|
errorOnlyController.handleError(new DOMException("aborted", "AbortError"));
|
|
errorOnlyController.handleError({ statusCode: 418 });
|
|
|
|
await new Promise((resolve) => setTimeout(resolve, 2050));
|
|
|
|
assert.equal(controller.signal.aborted, true);
|
|
assert.equal(controller.isConnected(), false);
|
|
assert.equal(errorOnlyController.signal.aborted, false);
|
|
});
|
|
|
|
test("pipeWithDisconnect pipes transformed bytes and marks the controller complete", async () => {
|
|
const source = new ReadableStream({
|
|
start(controller) {
|
|
controller.enqueue(encoder.encode("hello"));
|
|
controller.close();
|
|
},
|
|
});
|
|
const providerResponse = new Response(source);
|
|
const controller = createStreamController();
|
|
const stream = pipeWithDisconnect(providerResponse, new TransformStream(), controller);
|
|
|
|
const text = await readStreamText(stream);
|
|
|
|
assert.equal(text, "hello");
|
|
assert.equal(controller.isConnected(), false);
|
|
});
|
|
|
|
test("pipeWithDisconnect clears pending requests when the upstream stream errors", async () => {
|
|
clearPendingRequests();
|
|
const provider = "openai";
|
|
const model = "gpt-stream-error";
|
|
const connectionId = "conn-stream-error";
|
|
const modelKey = `${model} (${provider})`;
|
|
|
|
trackPendingRequest(model, provider, connectionId, true);
|
|
|
|
const source = new ReadableStream({
|
|
start(controller) {
|
|
controller.error(Object.assign(new Error("socket closed"), { statusCode: 502 }));
|
|
},
|
|
});
|
|
const stream = pipeWithDisconnect(
|
|
new Response(source),
|
|
new TransformStream(),
|
|
createStreamController({ provider, model, connectionId })
|
|
);
|
|
|
|
const text = await readStreamText(stream);
|
|
const pending = getPendingRequests();
|
|
|
|
assert.match(text, /"message":"socket closed"/);
|
|
assert.equal(pending.byModel[modelKey], 0);
|
|
assert.equal(pending.details[connectionId], undefined);
|
|
});
|
|
|
|
test("pipeWithDisconnect lets controller onError own pending cleanup", async () => {
|
|
clearPendingRequests();
|
|
const provider = "openai";
|
|
const model = "gpt-stream-error-owned";
|
|
const connectionId = "conn-stream-error-owned";
|
|
const modelKey = `${model} (${provider})`;
|
|
let errorEvent = null;
|
|
|
|
trackPendingRequest(model, provider, connectionId, true);
|
|
|
|
const source = new ReadableStream({
|
|
start(controller) {
|
|
controller.error(Object.assign(new Error("terminated"), { statusCode: 502 }));
|
|
},
|
|
});
|
|
const stream = pipeWithDisconnect(
|
|
new Response(source),
|
|
new TransformStream(),
|
|
createStreamController({
|
|
provider,
|
|
model,
|
|
connectionId,
|
|
onError(event) {
|
|
errorEvent = event;
|
|
return true;
|
|
},
|
|
})
|
|
);
|
|
|
|
const text = await readStreamText(stream);
|
|
const pending = getPendingRequests();
|
|
|
|
assert.match(text, /"message":"terminated"/);
|
|
assert.equal(errorEvent?.statusCode, 502);
|
|
assert.equal(pending.byModel[modelKey], 1);
|
|
assert.equal(pending.byAccount[connectionId][modelKey], 1);
|
|
});
|
|
|
|
test("pipeWithDisconnect does not double-clear transform errors already accounted for", async () => {
|
|
clearPendingRequests();
|
|
const provider = "openai";
|
|
const model = "gpt-marked-error";
|
|
const connectionId = "conn-marked-error";
|
|
const modelKey = `${model} (${provider})`;
|
|
|
|
trackPendingRequest(model, provider, connectionId, true);
|
|
trackPendingRequest(model, provider, connectionId, true);
|
|
trackPendingRequest(model, provider, connectionId, false);
|
|
|
|
const markedError = Object.assign(new Error("already cleared"), {
|
|
[PENDING_REQUEST_CLEARED_MARKER]: true,
|
|
});
|
|
const source = new ReadableStream({
|
|
start(controller) {
|
|
controller.error(markedError);
|
|
},
|
|
});
|
|
const stream = pipeWithDisconnect(
|
|
new Response(source),
|
|
new TransformStream(),
|
|
createStreamController({ provider, model, connectionId })
|
|
);
|
|
|
|
await readStreamText(stream);
|
|
const pending = getPendingRequests();
|
|
|
|
assert.equal(pending.byModel[modelKey], 1);
|
|
assert.equal(pending.byAccount[connectionId][modelKey], 1);
|
|
});
|
|
|
|
// Stall detection: tied to RAW upstream byte activity, not transform output.
|
|
// Ports decolua/9router#1243 — reasoning models (Claude thinking, Kiro
|
|
// EventStream binary frames) can stream raw bytes for long stretches while
|
|
// the SSE transform produces zero output as it accumulates a frame. The
|
|
// stall watchdog must NOT fire on those slow-but-progressing streams.
|
|
test("pipeWithDisconnect does NOT flag a slow but progressing upstream as stalled (no false positive)", async () => {
|
|
// Upstream emits 3 small chunks 30ms apart (90ms total). The transform
|
|
// never forwards any output (simulates a translator buffering a frame
|
|
// boundary that has not yet completed). The stall budget is 200ms — well
|
|
// above the 30ms gap between upstream bytes, so a byte-activity watchdog
|
|
// should never fire. A transform-output-activity watchdog would
|
|
// false-stall here.
|
|
const source = new ReadableStream({
|
|
async start(controller) {
|
|
controller.enqueue(encoder.encode("a"));
|
|
await new Promise((r) => setTimeout(r, 30));
|
|
controller.enqueue(encoder.encode("b"));
|
|
await new Promise((r) => setTimeout(r, 30));
|
|
controller.enqueue(encoder.encode("c"));
|
|
await new Promise((r) => setTimeout(r, 30));
|
|
controller.close();
|
|
},
|
|
});
|
|
|
|
// Black-hole transform — consumes every byte, emits nothing until flush.
|
|
const swallowingTransform = new TransformStream({
|
|
transform() {
|
|
/* drop chunk — output stream is silent */
|
|
},
|
|
flush(controller) {
|
|
controller.enqueue(encoder.encode("done"));
|
|
},
|
|
});
|
|
|
|
let onErrorCalled = false;
|
|
const streamController = createStreamController({
|
|
onError() {
|
|
onErrorCalled = true;
|
|
return true;
|
|
},
|
|
});
|
|
|
|
const stream = pipeWithDisconnect(
|
|
new Response(source),
|
|
swallowingTransform,
|
|
streamController,
|
|
{ stallTimeoutMs: 200 }
|
|
);
|
|
|
|
const text = await readStreamText(stream);
|
|
|
|
// No stall error — final flush output reaches the client cleanly.
|
|
assert.equal(text, "done");
|
|
assert.equal(onErrorCalled, false, "stall watchdog must NOT fire on a slow but progressing upstream");
|
|
assert.doesNotMatch(text, /stall/i);
|
|
assert.doesNotMatch(text, /"finish_reason":"error"/);
|
|
});
|
|
|
|
test("pipeWithDisconnect flags a truly stalled upstream (no bytes for the full stall budget)", async () => {
|
|
// Upstream emits one byte and then goes silent forever. Stall budget is
|
|
// 80ms — the watchdog must fire and surface a stream-stall error.
|
|
const source = new ReadableStream({
|
|
start(controller) {
|
|
controller.enqueue(encoder.encode("x"));
|
|
// never enqueue again, never close — simulate a truly hung upstream
|
|
},
|
|
cancel() {
|
|
// upstream cancel hook so the stall abort path can release the source
|
|
},
|
|
});
|
|
|
|
let onErrorEvent = null;
|
|
const streamController = createStreamController({
|
|
onError(event) {
|
|
onErrorEvent = event;
|
|
return true;
|
|
},
|
|
});
|
|
|
|
const stream = pipeWithDisconnect(
|
|
new Response(source),
|
|
new TransformStream(),
|
|
streamController,
|
|
{ stallTimeoutMs: 80 }
|
|
);
|
|
|
|
const text = await readStreamText(stream);
|
|
|
|
assert.ok(onErrorEvent !== null, "stall watchdog must fire when upstream stops sending bytes");
|
|
assert.match(onErrorEvent.message, /stall/i);
|
|
assert.match(text, /stall/i);
|
|
assert.match(text, /"finish_reason":"error"/);
|
|
});
|
|
|
|
test("pipeWithDisconnect stall watchdog does not fire after normal stream completion", async () => {
|
|
// Upstream completes quickly. The stall timer must be cleared on
|
|
// completion so a stale abort cannot fire after the request has ended.
|
|
const source = new ReadableStream({
|
|
start(controller) {
|
|
controller.enqueue(encoder.encode("ok"));
|
|
controller.close();
|
|
},
|
|
});
|
|
|
|
let onErrorCalled = false;
|
|
const streamController = createStreamController({
|
|
onError() {
|
|
onErrorCalled = true;
|
|
return true;
|
|
},
|
|
});
|
|
|
|
const stream = pipeWithDisconnect(
|
|
new Response(source),
|
|
new TransformStream(),
|
|
streamController,
|
|
{ stallTimeoutMs: 50 }
|
|
);
|
|
|
|
const text = await readStreamText(stream);
|
|
|
|
// Wait past the stall budget — no late stall error must surface.
|
|
await new Promise((r) => setTimeout(r, 120));
|
|
|
|
assert.equal(text, "ok");
|
|
assert.equal(onErrorCalled, false, "stall watchdog must be cleared on stream completion");
|
|
});
|