Files
coder/coderd/x/chatd/chatretry/chatretry_test.go
T
Ethan 1b9745c311 fix: surface chat error diagnostics (#26367)
Closes CODAGT-223

## What's already on `main` (via #25803)

#25803 fixed how `detail` is *rendered* when present:
`ChatStatusCallout` shows `status.detail` in a monospace `<code>` block
for `kind === "generic"`, `AgentChatPage` reads
`error.response?.data?.detail` inline, and the auth message was
tightened.

It did not fix `detail` being absent in the first place.

## The gap

`chaterror.Classify` only populates `Detail` from
`*fantasy.ProviderError` (OpenAI-shaped JSON envelope). Every other
realistic failure shape produces blank `Detail`:
`context.DeadlineExceeded`, `Post "…": connection refused`, `stream
error: stream ID …; INTERNAL_ERROR`, `Post "https://api.openai.com/…":
400 invalid model: gpt-9000`, `fantasy.Error` from the stream decoder,
`xerrors.New("status 401 from upstream")`, HTTP/2 peer resets. Users
still see the dead-end alert: "Request failed / The chat request failed
unexpectedly." with no third line.

## The fix

A new `chaterror.FormatDiagnosticDetail` entry point shares
diagnostic-detail logic with `classify.go`: non-auth rule-table branches
now fall back to a bounded raw error string when structured detail is
absent, while auth-classified failures keep only structured provider
detail. Curated branches (canceled, interrupted, Responses-API,
stream-incomplete, chain-broken) are left alone. The `exp_chats.go` POST
catch-all uses the exported helper, so the backend consistently emits a
bounded diagnostic string instead of leaving `Detail` blank. Fallback
diagnostics redact URLs preserved in typed transport errors by stripping
userinfo, query strings, and fragments before display, which keeps
provider error text useful while reducing credential exposure from
standard request URL wrappers.

## Security

This change surfaces upstream error text in the chat UI, where it is
also persisted in `chats.last_error`, so it crosses a trust boundary.
Codex brought this up as an issue through reviews. Mindful of cases like
#20968, where a sensitive field leaked into agent logs, the design
deliberately narrows what can reach a user:

- Auth-classified failures keep only structured provider detail and
never fall back to the raw error string.
- Fallback diagnostics redact any URL preserved in a typed `*url.Error`
by removing userinfo, query strings, and fragments, so credentials in
standard transport URL wrappers do not leak.
- Request-side credentials are not exposed: providers authenticate via
headers, and `fantasy.ProviderError.Error()` does not print the URL or
request dump. Dumped response headers are stripped before parsing, and
detail is length-capped.

The remaining channels are structured provider detail (`error.message`
from the provider's response body), which is surfaced verbatim because
it is the useful diagnostic this PR exists to deliver, and
already-flattened fallback text where typed transport context has been
lost. A well-behaved provider returns a description of the failure here,
not a secret; OpenAI, for example, masks the middle of the submitted key
and returns only a short fragment alongside a docs link. For a real
secret to appear, the upstream API, or a proxy an admin points
`base_url` at, would have to echo a plaintext credential into its own
error body or flattened error prose. I judge that any secret leakage as
a result of this PR would require a misbehaving API or middleware, and
that the usefulness of real diagnostics outweighs that bounded risk.
2026-06-16 00:21:13 +10:00

409 lines
9.7 KiB
Go

package chatretry_test
import (
"context"
"errors"
"fmt"
"sync/atomic"
"testing"
"time"
"charm.land/fantasy"
"github.com/stretchr/testify/require"
"golang.org/x/xerrors"
"github.com/coder/coder/v2/coderd/x/chatd/chaterror"
"github.com/coder/coder/v2/coderd/x/chatd/chatretry"
"github.com/coder/coder/v2/codersdk"
)
func TestDelay(t *testing.T) {
t.Parallel()
tests := []struct {
attempt int
want time.Duration
}{
{0, 1 * time.Second},
{1, 2 * time.Second},
{2, 4 * time.Second},
{3, 8 * time.Second},
{4, 16 * time.Second},
{5, 32 * time.Second},
{6, 60 * time.Second},
{10, 60 * time.Second},
{100, 60 * time.Second},
}
for _, tt := range tests {
t.Run(fmt.Sprintf("Attempt%d", tt.attempt), func(t *testing.T) {
t.Parallel()
got := chatretry.Delay(tt.attempt)
if got != tt.want {
t.Errorf("Delay(%d) = %v, want %v", tt.attempt, got, tt.want)
}
})
}
}
func TestRetry_SuccessOnFirstTry(t *testing.T) {
t.Parallel()
calls := 0
err := chatretry.Retry(context.Background(), func(_ context.Context) error {
calls++
return nil
}, nil)
require.NoError(t, err)
require.Equal(t, 1, calls)
}
func TestRetry_TransientThenSuccess(t *testing.T) {
t.Parallel()
calls := 0
err := chatretry.Retry(context.Background(), func(_ context.Context) error {
calls++
if calls == 1 {
return xerrors.New("service unavailable")
}
return nil
}, nil)
require.NoError(t, err)
require.Equal(t, 2, calls)
}
func TestRetry_MultipleTransientThenSuccess(t *testing.T) {
t.Parallel()
calls := 0
err := chatretry.Retry(context.Background(), func(_ context.Context) error {
calls++
if calls <= 3 {
return xerrors.New("overloaded")
}
return nil
}, nil)
require.NoError(t, err)
require.Equal(t, 4, calls)
}
func TestRetry_ContextCanceledStatus500ThenSuccess(t *testing.T) {
t.Parallel()
calls := 0
err := chatretry.Retry(context.Background(), func(_ context.Context) error {
calls++
if calls == 1 {
return xerrors.Errorf("received status 500 from upstream: %w", context.Canceled)
}
return nil
}, nil)
require.NoError(t, err)
require.Equal(t, 2, calls)
}
func TestRetry_ContextCanceledNonRetryableDoesNotWrapAsTransportReset(t *testing.T) {
t.Parallel()
tests := []struct {
name string
err error
wantKind codersdk.ChatErrorKind
wantStatus int
}{
{
name: "Status401",
err: xerrors.Errorf("received status 401 from upstream: %w", context.Canceled),
wantKind: codersdk.ChatErrorKindAuth,
wantStatus: 401,
},
{
name: "QuotaNoStatus",
err: xerrors.Errorf("insufficient_quota: %w", context.Canceled),
wantKind: codersdk.ChatErrorKindUsageLimit,
},
}
for _, tt := range tests {
t.Run(tt.name, func(t *testing.T) {
t.Parallel()
calls := 0
err := chatretry.Retry(context.Background(), func(_ context.Context) error {
calls++
return tt.err
}, nil)
require.Error(t, err)
require.ErrorIs(t, err, context.Canceled)
require.NotErrorIs(t, err, chaterror.ErrProviderTransportReset)
require.Equal(t, 1, calls)
classified := chaterror.Classify(err)
require.Equal(t, tt.wantKind, classified.Kind)
require.False(t, classified.Retryable)
require.Equal(t, tt.wantStatus, classified.StatusCode)
})
}
}
func TestRetry_ContextCanceledFromAttemptWithHealthyParentRetries(t *testing.T) {
t.Parallel()
calls := 0
var retryErr error
var retryClassified chatretry.ClassifiedError
err := chatretry.Retry(context.Background(), func(_ context.Context) error {
calls++
if calls == 1 {
return context.Canceled
}
return nil
}, func(
_ int,
err error,
classified chatretry.ClassifiedError,
_ time.Duration,
) {
retryErr = err
retryClassified = classified
})
require.NoError(t, err)
require.Equal(t, 2, calls)
require.ErrorIs(t, retryErr, chaterror.ErrProviderTransportReset)
require.ErrorIs(t, retryErr, context.Canceled)
require.Equal(t, chaterror.ClassifiedError{
Message: "The AI provider is temporarily unavailable.",
Detail: "provider transport reset context canceled",
Kind: codersdk.ChatErrorKindTimeout,
Retryable: true,
StatusCode: 0,
}, retryClassified)
}
func TestRetry_ContextCanceledFromParentDoesNotRetry(t *testing.T) {
t.Parallel()
ctx, cancel := context.WithCancel(context.Background())
calls := 0
err := chatretry.Retry(ctx, func(_ context.Context) error {
calls++
cancel()
return context.Canceled
}, nil)
require.ErrorIs(t, err, context.Canceled)
require.NotErrorIs(t, err, chaterror.ErrProviderTransportReset)
require.Equal(t, 1, calls)
}
func TestRetry_ParentCancelCauseIsPreserved(t *testing.T) {
t.Parallel()
cause := xerrors.New("retry parent stopped")
ctx, cancel := context.WithCancelCause(context.Background())
calls := 0
err := chatretry.Retry(ctx, func(_ context.Context) error {
calls++
cancel(cause)
return context.Canceled
}, nil)
require.ErrorIs(t, err, cause)
require.NotErrorIs(t, err, chaterror.ErrProviderTransportReset)
require.Equal(t, 1, calls)
}
func TestRetry_NonRetryableError(t *testing.T) {
t.Parallel()
calls := 0
err := chatretry.Retry(context.Background(), func(_ context.Context) error {
calls++
return xerrors.New("invalid api key")
}, nil)
require.Error(t, err)
require.EqualError(t, err, "invalid api key")
require.Equal(t, 1, calls)
require.Equal(
t,
chaterror.Classify(xerrors.New("invalid api key")),
chaterror.Classify(err),
)
}
func TestRetry_ContextCanceledDuringWait(t *testing.T) {
t.Parallel()
ctx, cancel := context.WithCancel(context.Background())
calls := 0
err := chatretry.Retry(ctx, func(_ context.Context) error {
calls++
if calls == 1 {
cancel()
}
return xerrors.New("overloaded")
}, nil)
if !errors.Is(err, context.Canceled) {
t.Fatalf("expected context.Canceled, got %v", err)
}
}
func TestRetry_ContextCanceledDuringFn(t *testing.T) {
t.Parallel()
ctx, cancel := context.WithCancel(context.Background())
err := chatretry.Retry(ctx, func(_ context.Context) error {
cancel()
return xerrors.New("overloaded")
}, nil)
if !errors.Is(err, context.Canceled) {
t.Fatalf("expected context.Canceled, got %v", err)
}
}
func TestRetry_OnRetryCalledWithCorrectArgs(t *testing.T) {
t.Parallel()
type retryRecord struct {
attempt int
errMsg string
classified chatretry.ClassifiedError
delay time.Duration
}
var records []retryRecord
calls := 0
err := chatretry.Retry(context.Background(), func(_ context.Context) error {
calls++
if calls <= 2 {
return xerrors.New("received status 429 from upstream")
}
return nil
}, func(
attempt int,
err error,
classified chatretry.ClassifiedError,
delay time.Duration,
) {
records = append(records, retryRecord{
attempt: attempt,
errMsg: err.Error(),
classified: classified,
delay: delay,
})
})
require.NoError(t, err)
require.Len(t, records, 2)
expected := chaterror.Classify(xerrors.New("received status 429 from upstream"))
require.Equal(t, 1, records[0].attempt)
require.Equal(t, 2, records[1].attempt)
require.Equal(t, "received status 429 from upstream", records[0].errMsg)
require.Equal(t, expected, records[0].classified)
require.Equal(t, expected, records[1].classified)
require.Equal(t, chatretry.Delay(0), records[0].delay)
require.Equal(t, chatretry.Delay(1), records[1].delay)
}
func TestRetry_OnRetryNilDoesNotPanic(t *testing.T) {
t.Parallel()
var calls atomic.Int32
err := chatretry.Retry(context.Background(), func(_ context.Context) error {
if calls.Add(1) == 1 {
return xerrors.New("overloaded")
}
return nil
}, nil)
if err != nil {
t.Fatalf("expected nil error, got %v", err)
}
}
func TestRetry_UsesRetryAfterAsDelayFloor(t *testing.T) {
t.Parallel()
tests := []struct {
name string
headers map[string]string
wantDelay time.Duration
wantRetryAfter time.Duration
}{
{
name: "LongerThanBaseDelay",
headers: map[string]string{"Retry-After": "3"},
wantDelay: 3 * time.Second,
wantRetryAfter: 3 * time.Second,
},
{
name: "ShorterThanBaseDelay",
headers: map[string]string{"Retry-After-Ms": "500"},
wantDelay: chatretry.Delay(0),
wantRetryAfter: 500 * time.Millisecond,
},
}
for _, tt := range tests {
t.Run(tt.name, func(t *testing.T) {
t.Parallel()
ctx, cancel := context.WithCancel(context.Background())
defer cancel()
calls := 0
var gotClassified chatretry.ClassifiedError
var gotDelay time.Duration
err := chatretry.Retry(ctx, func(_ context.Context) error {
calls++
return &fantasy.ProviderError{
Message: "upstream failed",
StatusCode: 429,
ResponseHeaders: tt.headers,
}
}, func(
_ int,
_ error,
classified chatretry.ClassifiedError,
delay time.Duration,
) {
gotClassified = classified
gotDelay = delay
cancel()
})
require.ErrorIs(t, err, context.Canceled)
require.Equal(t, 1, calls)
require.True(t, gotClassified.Retryable)
require.Equal(t, 429, gotClassified.StatusCode)
require.Equal(t, tt.wantRetryAfter, gotClassified.RetryAfter)
require.Equal(t, tt.wantDelay, gotDelay)
})
}
}
// TestRetry_HTTP2TransportErrorKeepsRetrying proves a bare HTTP/2
// transport error is treated as retryable, so Retry drives one more
// attempt instead of returning on the first call.
func TestRetry_HTTP2TransportErrorKeepsRetrying(t *testing.T) {
t.Parallel()
calls := 0
err := chatretry.Retry(context.Background(), func(_ context.Context) error {
calls++
if calls == 1 {
return xerrors.New(
"http2: client connection force closed via ClientConn.Close",
)
}
return nil
}, nil)
require.NoError(t, err)
require.Equal(t, 2, calls, "expected one retry after an HTTP/2 transport failure")
}