fix(aggregator): make Aggregator thread-safe (closes #1) - #25

Merged
AndresL230 merged 7 commits into
mainfrom
fix/aggregator-thread-safety
May 13, 2026
Merged

fix(aggregator): make Aggregator thread-safe (closes #1)#25
AndresL230 merged 7 commits into
mainfrom
fix/aggregator-thread-safety

Conversation

@AndresL230

Copy link
Copy Markdown
Contributor

Summary

Closes#1.

Guards Aggregator state with a threading.RLock so the background timer
thread's flush() cannot race user threads calling ingest() via the
interceptor. flush() uses a swap-and-process pattern so percentile
computation runs outside the critical section.

Tests

  • TestThreadSafety::test_concurrent_ingest_and_flush_does_not_raise
    4 ingester threads × 50000 ingests vs. 500 flushes; reliably reproduces
    the RuntimeError: dictionary changed size during iteration on the
    old code with sys.setswitchinterval(0.000001).
  • TestThreadSafety::test_concurrent_correctness_no_lost_events
    proves the lock also prevents lost updates on counter increments.

Notes

  • Public API unchanged.
  • No new dependencies.
  • Tests use sys.setswitchinterval(0.000001) (restored in finally)
    to make the race deterministic on modern CPython (3.14 on this dev
    machine); the underlying bug is not version-specific.

🤖 Generated with Claude Code

AndresL230and others added 7 commits April 22, 2026 00:37
- Aggregator: introduce MAX_BUCKETS (2000) constant + max_buckets
config field + would_overflow() method + max_buckets getter.
Prevents silent data loss when a window crosses the ingest API's
422 threshold. Direct port of the Node SDK's overflow protection.
- Public surface: re-export MAX_BUCKETS and FlushStatus from the
package __init__.
- Tests: cover the new aggregator behavior, the lastFlushStatus
semantics on RecostHandle, and the transport-side chunking +
rejection signaling paths introduced alongside this feature.
AUDIT.md collects the full audit (tests, lint, mypy, source review,
runtime behavior) and maps the 25 raw findings to the 13 consolidated
issues filed in this repo.
ROADMAP.md sequences those 13 issues into five waves with parallelism
called out, so contributors know which issues can be picked up
simultaneously and which depend on earlier work landing first.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Two TDD-structured plans for the parallel Wave 1 work identified in
ROADMAP.md:
- 2026-05-13-aggregator-thread-safety.md walks through adding a
threading.RLock and swap-and-process flush, with a stress test that
reliably reproduces the race before the fix lands. Closes#1.
- 2026-05-13-naming-and-docs-reconciliation.md walks through renaming
the Flask extension class, stripping nonexistent EcoAPI* references
from CLAUDE.md, swapping the deprecated flush_interval option for
flush_interval_ms in the README, documenting max_buckets and
shutdown_flush_timeout_ms, and pinning the BUILTIN_PROVIDERS count.
Closes#5.
Both plans contain bite-sized tasks with the exact code/diffs to apply
and the exact pytest commands to verify each step.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Guards _buckets / _window_start / _size with a threading.RLock so the
background timer thread's flush() cannot race the interceptor's user
threads ingesting events. flush() now uses a swap-and-process pattern
so percentile computation runs outside the lock.
Adds a stress-test regression that reliably reproduced the race on the
old code (RuntimeError: dictionary changed size during iteration).
Refs #1
Adds a second thread-safety test that proves no counter increments are
lost when N threads race on a shared bucket. Complements the no-raise
stress test by exercising the counter-increment side of the race.
Refs #1
@coderabbitai

Copy link
Copy Markdown

Warning

Rate limit exceeded

@AndresL230 has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 51 minutes and 28 seconds before requesting another review.

You’ve run out of usage credits. Purchase more in the billing tab.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 4b029d7b-e869-47cf-8d47-6ae0bf296911

📥 Commits

Reviewing files that changed from the base of the PR and between 133114d and f055ae2.

📒 Files selected for processing (11)
  • .gitignore
  • AUDIT.md
  • ROADMAP.md
  • docs/superpowers/plans/2026-05-13-aggregator-thread-safety.md
  • docs/superpowers/plans/2026-05-13-naming-and-docs-reconciliation.md
  • pyproject.toml
  • recost/__init__.py
  • recost/_aggregator.py
  • tests/test_aggregator.py
  • tests/test_init.py
  • tests/test_transport.py
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fix/aggregator-thread-safety

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@AndresL230
AndresL230 merged commit c385851 into mainMay 13, 2026
1 check passed
@AndresL230
AndresL230 deleted the fix/aggregator-thread-safety branch May 21, 2026 04:17
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Aggregator is not thread-safe — flush vs. ingest race

1 participant

@AndresL230
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Add copy buttons to all
 blocks\n(function() {\n function addCopyButtons() {\n document.querySelectorAll('pre code').forEach(function(codeBlock) {\n if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;\n codeBlock.parentElement.setAttribute('data-copy-added', 'true');\n \n var btn = document.createElement('button');\n btn.textContent = 'Copy';\n btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';\n btn.onmouseover = function() { this.style.opacity = '1'; };\n btn.onmouseout = function() { this.style.opacity = '0.7'; };\n btn.onclick = function() {\n navigator.clipboard.writeText(codeBlock.textContent).then(function() {\n btn.textContent = 'Copied!';\n setTimeout(function() { btn.textContent = 'Copy'; }, 1500);\n });\n };\n codeBlock.parentElement.style.position = 'relative';\n codeBlock.parentElement.appendChild(btn);\n });\n }\n \n addCopyButtons();\n \n // Re-run on dynamic content\n var observer = new MutationObserver(addCopyButtons);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Add Copy Buttons to Code Blocks");
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '
Skip to content

fix(aggregator): make Aggregator thread-safe (closes #1) - #25

Merged
AndresL230 merged 7 commits into
mainfrom
fix/aggregator-thread-safety
May 13, 2026
Merged

fix(aggregator): make Aggregator thread-safe (closes #1)#25
AndresL230 merged 7 commits into
mainfrom
fix/aggregator-thread-safety

Conversation

@AndresL230

Copy link
Copy Markdown
Contributor

Summary

Closes#1.

Guards Aggregator state with a threading.RLock so the background timer
thread's flush() cannot race user threads calling ingest() via the
interceptor. flush() uses a swap-and-process pattern so percentile
computation runs outside the critical section.

Tests

  • TestThreadSafety::test_concurrent_ingest_and_flush_does_not_raise
    4 ingester threads × 50000 ingests vs. 500 flushes; reliably reproduces
    the RuntimeError: dictionary changed size during iteration on the
    old code with sys.setswitchinterval(0.000001).
  • TestThreadSafety::test_concurrent_correctness_no_lost_events
    proves the lock also prevents lost updates on counter increments.

Notes

  • Public API unchanged.
  • No new dependencies.
  • Tests use sys.setswitchinterval(0.000001) (restored in finally)
    to make the race deterministic on modern CPython (3.14 on this dev
    machine); the underlying bug is not version-specific.

🤖 Generated with Claude Code

AndresL230and others added 7 commits April 22, 2026 00:37
- Aggregator: introduce MAX_BUCKETS (2000) constant + max_buckets
config field + would_overflow() method + max_buckets getter.
Prevents silent data loss when a window crosses the ingest API's
422 threshold. Direct port of the Node SDK's overflow protection.
- Public surface: re-export MAX_BUCKETS and FlushStatus from the
package __init__.
- Tests: cover the new aggregator behavior, the lastFlushStatus
semantics on RecostHandle, and the transport-side chunking +
rejection signaling paths introduced alongside this feature.
AUDIT.md collects the full audit (tests, lint, mypy, source review,
runtime behavior) and maps the 25 raw findings to the 13 consolidated
issues filed in this repo.
ROADMAP.md sequences those 13 issues into five waves with parallelism
called out, so contributors know which issues can be picked up
simultaneously and which depend on earlier work landing first.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Two TDD-structured plans for the parallel Wave 1 work identified in
ROADMAP.md:
- 2026-05-13-aggregator-thread-safety.md walks through adding a
threading.RLock and swap-and-process flush, with a stress test that
reliably reproduces the race before the fix lands. Closes#1.
- 2026-05-13-naming-and-docs-reconciliation.md walks through renaming
the Flask extension class, stripping nonexistent EcoAPI* references
from CLAUDE.md, swapping the deprecated flush_interval option for
flush_interval_ms in the README, documenting max_buckets and
shutdown_flush_timeout_ms, and pinning the BUILTIN_PROVIDERS count.
Closes#5.
Both plans contain bite-sized tasks with the exact code/diffs to apply
and the exact pytest commands to verify each step.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Guards _buckets / _window_start / _size with a threading.RLock so the
background timer thread's flush() cannot race the interceptor's user
threads ingesting events. flush() now uses a swap-and-process pattern
so percentile computation runs outside the lock.
Adds a stress-test regression that reliably reproduced the race on the
old code (RuntimeError: dictionary changed size during iteration).
Refs #1
Adds a second thread-safety test that proves no counter increments are
lost when N threads race on a shared bucket. Complements the no-raise
stress test by exercising the counter-increment side of the race.
Refs #1
@coderabbitai

Copy link
Copy Markdown

Warning

Rate limit exceeded

@AndresL230 has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 51 minutes and 28 seconds before requesting another review.

You’ve run out of usage credits. Purchase more in the billing tab.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 4b029d7b-e869-47cf-8d47-6ae0bf296911

📥 Commits

Reviewing files that changed from the base of the PR and between 133114d and f055ae2.

📒 Files selected for processing (11)
  • .gitignore
  • AUDIT.md
  • ROADMAP.md
  • docs/superpowers/plans/2026-05-13-aggregator-thread-safety.md
  • docs/superpowers/plans/2026-05-13-naming-and-docs-reconciliation.md
  • pyproject.toml
  • recost/__init__.py
  • recost/_aggregator.py
  • tests/test_aggregator.py
  • tests/test_init.py
  • tests/test_transport.py
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fix/aggregator-thread-safety

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@AndresL230
AndresL230 merged commit c385851 into mainMay 13, 2026
1 check passed
@AndresL230
AndresL230 deleted the fix/aggregator-thread-safety branch May 21, 2026 04:17
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Aggregator is not thread-safe — flush vs. ingest race

1 participant

@AndresL230
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Force GitHub README to respect dark mode\n(function() {\n var style = document.createElement('style');\n style.textContent = '\n .markdown-body {\n color-scheme: dark light;\n }\n .markdown-body pre { background: #161b22 !important; }\n .markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }\n .markdown-body table th, .markdown-body table td { border-color: #30363d !important; }\n .markdown-body img { background: #0d1117; }\n .markdown-body blockquote { border-left-color: #8b949e; }\n .markdown-body hr { border-color: #30363d; }\n ';\n document.head.appendChild(style);\n})();", "GitHub Dark Mode README Fix"); } } catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content

fix(aggregator): make Aggregator thread-safe (closes #1) - #25

Merged
AndresL230 merged 7 commits into
mainfrom
fix/aggregator-thread-safety
May 13, 2026
Merged

fix(aggregator): make Aggregator thread-safe (closes #1)#25
AndresL230 merged 7 commits into
mainfrom
fix/aggregator-thread-safety

Conversation

@AndresL230

Copy link
Copy Markdown
Contributor

Summary

Closes#1.

Guards Aggregator state with a threading.RLock so the background timer
thread's flush() cannot race user threads calling ingest() via the
interceptor. flush() uses a swap-and-process pattern so percentile
computation runs outside the critical section.

Tests

  • TestThreadSafety::test_concurrent_ingest_and_flush_does_not_raise
    4 ingester threads × 50000 ingests vs. 500 flushes; reliably reproduces
    the RuntimeError: dictionary changed size during iteration on the
    old code with sys.setswitchinterval(0.000001).
  • TestThreadSafety::test_concurrent_correctness_no_lost_events
    proves the lock also prevents lost updates on counter increments.

Notes

  • Public API unchanged.
  • No new dependencies.
  • Tests use sys.setswitchinterval(0.000001) (restored in finally)
    to make the race deterministic on modern CPython (3.14 on this dev
    machine); the underlying bug is not version-specific.

🤖 Generated with Claude Code

AndresL230and others added 7 commits April 22, 2026 00:37
- Aggregator: introduce MAX_BUCKETS (2000) constant + max_buckets
config field + would_overflow() method + max_buckets getter.
Prevents silent data loss when a window crosses the ingest API's
422 threshold. Direct port of the Node SDK's overflow protection.
- Public surface: re-export MAX_BUCKETS and FlushStatus from the
package __init__.
- Tests: cover the new aggregator behavior, the lastFlushStatus
semantics on RecostHandle, and the transport-side chunking +
rejection signaling paths introduced alongside this feature.
AUDIT.md collects the full audit (tests, lint, mypy, source review,
runtime behavior) and maps the 25 raw findings to the 13 consolidated
issues filed in this repo.
ROADMAP.md sequences those 13 issues into five waves with parallelism
called out, so contributors know which issues can be picked up
simultaneously and which depend on earlier work landing first.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Two TDD-structured plans for the parallel Wave 1 work identified in
ROADMAP.md:
- 2026-05-13-aggregator-thread-safety.md walks through adding a
threading.RLock and swap-and-process flush, with a stress test that
reliably reproduces the race before the fix lands. Closes#1.
- 2026-05-13-naming-and-docs-reconciliation.md walks through renaming
the Flask extension class, stripping nonexistent EcoAPI* references
from CLAUDE.md, swapping the deprecated flush_interval option for
flush_interval_ms in the README, documenting max_buckets and
shutdown_flush_timeout_ms, and pinning the BUILTIN_PROVIDERS count.
Closes#5.
Both plans contain bite-sized tasks with the exact code/diffs to apply
and the exact pytest commands to verify each step.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Guards _buckets / _window_start / _size with a threading.RLock so the
background timer thread's flush() cannot race the interceptor's user
threads ingesting events. flush() now uses a swap-and-process pattern
so percentile computation runs outside the lock.
Adds a stress-test regression that reliably reproduced the race on the
old code (RuntimeError: dictionary changed size during iteration).
Refs #1
Adds a second thread-safety test that proves no counter increments are
lost when N threads race on a shared bucket. Complements the no-raise
stress test by exercising the counter-increment side of the race.
Refs #1
@coderabbitai

Copy link
Copy Markdown

Warning

Rate limit exceeded

@AndresL230 has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 51 minutes and 28 seconds before requesting another review.

You’ve run out of usage credits. Purchase more in the billing tab.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 4b029d7b-e869-47cf-8d47-6ae0bf296911

📥 Commits

Reviewing files that changed from the base of the PR and between 133114d and f055ae2.

📒 Files selected for processing (11)
  • .gitignore
  • AUDIT.md
  • ROADMAP.md
  • docs/superpowers/plans/2026-05-13-aggregator-thread-safety.md
  • docs/superpowers/plans/2026-05-13-naming-and-docs-reconciliation.md
  • pyproject.toml
  • recost/__init__.py
  • recost/_aggregator.py
  • tests/test_aggregator.py
  • tests/test_init.py
  • tests/test_transport.py
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fix/aggregator-thread-safety

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@AndresL230
AndresL230 merged commit c385851 into mainMay 13, 2026
1 check passed
@AndresL230
AndresL230 deleted the fix/aggregator-thread-safety branch May 21, 2026 04:17
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Aggregator is not thread-safe — flush vs. ingest race

1 participant

@AndresL230
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Highlight search terms from Google/DuckDuckGo/Bing referrer\n(function() {\n var ref = document.referrer;\n var terms = [];\n \n if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {\n var url = new URL(ref);\n var q = url.searchParams.get('q') || url.searchParams.get('p');\n if (q) {\n terms = q.split(/\\s+/).filter(function(t) { return t.length > 2; });\n }\n }\n \n if (terms.length === 0) return;\n \n var style = document.createElement('style');\n style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';\n document.head.appendChild(style);\n \n function highlight(node) {\n if (node.nodeType === 3) { // text node\n var text = node.textContent;\n var found = false;\n terms.forEach(function(term) {\n var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\') + ')', 'gi');\n if (regex.test(text)) {\n found = true;\n var frag = document.createDocumentFragment();\n var parts = text.split(regex);\n parts.forEach(function(part, i) {\n if (i % 2 === 0) {\n frag.appendChild(document.createTextNode(part));\n } else {\n var span = document.createElement('span');\n span.className = 'userscript-highlight';\n span.textContent = part;\n frag.appendChild(span);\n }\n });\n node.parentNode.replaceChild(frag, node);\n }\n });\n } else if (node.nodeType === 1 && node.childNodes) { // element\n var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];\n if (!skipTags.includes(node.tagName)) {\n Array.from(node.childNodes).forEach(highlight);\n }\n }\n }\n \n highlight(document.body);\n \n // Re-highlight on dynamic content\n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1 || node.nodeType === 3) highlight(node);\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Highlight Search Terms"); } } catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content

fix(aggregator): make Aggregator thread-safe (closes #1) - #25

Merged
AndresL230 merged 7 commits into
mainfrom
fix/aggregator-thread-safety
May 13, 2026
Merged

fix(aggregator): make Aggregator thread-safe (closes #1)#25
AndresL230 merged 7 commits into
mainfrom
fix/aggregator-thread-safety

Conversation

@AndresL230

Copy link
Copy Markdown
Contributor

Summary

Closes#1.

Guards Aggregator state with a threading.RLock so the background timer
thread's flush() cannot race user threads calling ingest() via the
interceptor. flush() uses a swap-and-process pattern so percentile
computation runs outside the critical section.

Tests

  • TestThreadSafety::test_concurrent_ingest_and_flush_does_not_raise
    4 ingester threads × 50000 ingests vs. 500 flushes; reliably reproduces
    the RuntimeError: dictionary changed size during iteration on the
    old code with sys.setswitchinterval(0.000001).
  • TestThreadSafety::test_concurrent_correctness_no_lost_events
    proves the lock also prevents lost updates on counter increments.

Notes

  • Public API unchanged.
  • No new dependencies.
  • Tests use sys.setswitchinterval(0.000001) (restored in finally)
    to make the race deterministic on modern CPython (3.14 on this dev
    machine); the underlying bug is not version-specific.

🤖 Generated with Claude Code

AndresL230and others added 7 commits April 22, 2026 00:37
- Aggregator: introduce MAX_BUCKETS (2000) constant + max_buckets
config field + would_overflow() method + max_buckets getter.
Prevents silent data loss when a window crosses the ingest API's
422 threshold. Direct port of the Node SDK's overflow protection.
- Public surface: re-export MAX_BUCKETS and FlushStatus from the
package __init__.
- Tests: cover the new aggregator behavior, the lastFlushStatus
semantics on RecostHandle, and the transport-side chunking +
rejection signaling paths introduced alongside this feature.
AUDIT.md collects the full audit (tests, lint, mypy, source review,
runtime behavior) and maps the 25 raw findings to the 13 consolidated
issues filed in this repo.
ROADMAP.md sequences those 13 issues into five waves with parallelism
called out, so contributors know which issues can be picked up
simultaneously and which depend on earlier work landing first.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Two TDD-structured plans for the parallel Wave 1 work identified in
ROADMAP.md:
- 2026-05-13-aggregator-thread-safety.md walks through adding a
threading.RLock and swap-and-process flush, with a stress test that
reliably reproduces the race before the fix lands. Closes#1.
- 2026-05-13-naming-and-docs-reconciliation.md walks through renaming
the Flask extension class, stripping nonexistent EcoAPI* references
from CLAUDE.md, swapping the deprecated flush_interval option for
flush_interval_ms in the README, documenting max_buckets and
shutdown_flush_timeout_ms, and pinning the BUILTIN_PROVIDERS count.
Closes#5.
Both plans contain bite-sized tasks with the exact code/diffs to apply
and the exact pytest commands to verify each step.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Guards _buckets / _window_start / _size with a threading.RLock so the
background timer thread's flush() cannot race the interceptor's user
threads ingesting events. flush() now uses a swap-and-process pattern
so percentile computation runs outside the lock.
Adds a stress-test regression that reliably reproduced the race on the
old code (RuntimeError: dictionary changed size during iteration).
Refs #1
Adds a second thread-safety test that proves no counter increments are
lost when N threads race on a shared bucket. Complements the no-raise
stress test by exercising the counter-increment side of the race.
Refs #1
@coderabbitai

Copy link
Copy Markdown

Warning

Rate limit exceeded

@AndresL230 has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 51 minutes and 28 seconds before requesting another review.

You’ve run out of usage credits. Purchase more in the billing tab.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 4b029d7b-e869-47cf-8d47-6ae0bf296911

📥 Commits

Reviewing files that changed from the base of the PR and between 133114d and f055ae2.

📒 Files selected for processing (11)
  • .gitignore
  • AUDIT.md
  • ROADMAP.md
  • docs/superpowers/plans/2026-05-13-aggregator-thread-safety.md
  • docs/superpowers/plans/2026-05-13-naming-and-docs-reconciliation.md
  • pyproject.toml
  • recost/__init__.py
  • recost/_aggregator.py
  • tests/test_aggregator.py
  • tests/test_init.py
  • tests/test_transport.py
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fix/aggregator-thread-safety

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@AndresL230
AndresL230 merged commit c385851 into mainMay 13, 2026
1 check passed
@AndresL230
AndresL230 deleted the fix/aggregator-thread-safety branch May 21, 2026 04:17
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Aggregator is not thread-safe — flush vs. ingest race

1 participant

@AndresL230
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Strip utm_, fbclid, gclid, etc. from all links on page\n(function() {\n var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',\n 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',\n 'ref', 'ref_src', 'source', 'medium', 'campaign'];\n \n function cleanUrl(url) {\n try {\n var u = new URL(url, window.location.origin);\n var changed = false;\n trackingParams.forEach(function(p) {\n if (u.searchParams.has(p)) {\n u.searchParams.delete(p);\n changed = true;\n }\n });\n return changed ? u.toString() : url;\n } catch (e) {\n return url;\n }\n }\n \n function cleanLinks() {\n document.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n \n cleanLinks();\n \n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1) {\n if (node.tagName === 'A') cleanLinks();\n node.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Remove Tracking Parameters from Links"); } } catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); } })(); (function(){ try { var __m = "youtube.com"; var __re = new RegExp('^' + "youtube\\.com" + '
Skip to content

fix(aggregator): make Aggregator thread-safe (closes #1) - #25

Merged
AndresL230 merged 7 commits into
mainfrom
fix/aggregator-thread-safety
May 13, 2026
Merged

fix(aggregator): make Aggregator thread-safe (closes #1)#25
AndresL230 merged 7 commits into
mainfrom
fix/aggregator-thread-safety

Conversation

@AndresL230

Copy link
Copy Markdown
Contributor

Summary

Closes#1.

Guards Aggregator state with a threading.RLock so the background timer
thread's flush() cannot race user threads calling ingest() via the
interceptor. flush() uses a swap-and-process pattern so percentile
computation runs outside the critical section.

Tests

  • TestThreadSafety::test_concurrent_ingest_and_flush_does_not_raise
    4 ingester threads × 50000 ingests vs. 500 flushes; reliably reproduces
    the RuntimeError: dictionary changed size during iteration on the
    old code with sys.setswitchinterval(0.000001).
  • TestThreadSafety::test_concurrent_correctness_no_lost_events
    proves the lock also prevents lost updates on counter increments.

Notes

  • Public API unchanged.
  • No new dependencies.
  • Tests use sys.setswitchinterval(0.000001) (restored in finally)
    to make the race deterministic on modern CPython (3.14 on this dev
    machine); the underlying bug is not version-specific.

🤖 Generated with Claude Code

AndresL230and others added 7 commits April 22, 2026 00:37
- Aggregator: introduce MAX_BUCKETS (2000) constant + max_buckets
config field + would_overflow() method + max_buckets getter.
Prevents silent data loss when a window crosses the ingest API's
422 threshold. Direct port of the Node SDK's overflow protection.
- Public surface: re-export MAX_BUCKETS and FlushStatus from the
package __init__.
- Tests: cover the new aggregator behavior, the lastFlushStatus
semantics on RecostHandle, and the transport-side chunking +
rejection signaling paths introduced alongside this feature.
AUDIT.md collects the full audit (tests, lint, mypy, source review,
runtime behavior) and maps the 25 raw findings to the 13 consolidated
issues filed in this repo.
ROADMAP.md sequences those 13 issues into five waves with parallelism
called out, so contributors know which issues can be picked up
simultaneously and which depend on earlier work landing first.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Two TDD-structured plans for the parallel Wave 1 work identified in
ROADMAP.md:
- 2026-05-13-aggregator-thread-safety.md walks through adding a
threading.RLock and swap-and-process flush, with a stress test that
reliably reproduces the race before the fix lands. Closes#1.
- 2026-05-13-naming-and-docs-reconciliation.md walks through renaming
the Flask extension class, stripping nonexistent EcoAPI* references
from CLAUDE.md, swapping the deprecated flush_interval option for
flush_interval_ms in the README, documenting max_buckets and
shutdown_flush_timeout_ms, and pinning the BUILTIN_PROVIDERS count.
Closes#5.
Both plans contain bite-sized tasks with the exact code/diffs to apply
and the exact pytest commands to verify each step.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Guards _buckets / _window_start / _size with a threading.RLock so the
background timer thread's flush() cannot race the interceptor's user
threads ingesting events. flush() now uses a swap-and-process pattern
so percentile computation runs outside the lock.
Adds a stress-test regression that reliably reproduced the race on the
old code (RuntimeError: dictionary changed size during iteration).
Refs #1
Adds a second thread-safety test that proves no counter increments are
lost when N threads race on a shared bucket. Complements the no-raise
stress test by exercising the counter-increment side of the race.
Refs #1
@coderabbitai

Copy link
Copy Markdown

Warning

Rate limit exceeded

@AndresL230 has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 51 minutes and 28 seconds before requesting another review.

You’ve run out of usage credits. Purchase more in the billing tab.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 4b029d7b-e869-47cf-8d47-6ae0bf296911

📥 Commits

Reviewing files that changed from the base of the PR and between 133114d and f055ae2.

📒 Files selected for processing (11)
  • .gitignore
  • AUDIT.md
  • ROADMAP.md
  • docs/superpowers/plans/2026-05-13-aggregator-thread-safety.md
  • docs/superpowers/plans/2026-05-13-naming-and-docs-reconciliation.md
  • pyproject.toml
  • recost/__init__.py
  • recost/_aggregator.py
  • tests/test_aggregator.py
  • tests/test_init.py
  • tests/test_transport.py
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fix/aggregator-thread-safety

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@AndresL230
AndresL230 merged commit c385851 into mainMay 13, 2026
1 check passed
@AndresL230
AndresL230 deleted the fix/aggregator-thread-safety branch May 21, 2026 04:17
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Aggregator is not thread-safe — flush vs. ingest race

1 participant

@AndresL230
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Auto-enable theater mode on YouTube\n(function() {\n function tryTheater() {\n var btn = document.querySelector('button[aria-label=\"Theater mode\"], ytd-player #player button[title=\"Theater mode\"]');\n if (btn && !btn.classList.contains('activated')) {\n btn.click();\n }\n }\n \n // Try immediately\n tryTheater();\n \n // Try after navigation (SPA)\n var lastUrl = location.href;\n setInterval(function() {\n if (location.href !== lastUrl) {\n lastUrl = location.href;\n setTimeout(tryTheater, 500);\n }\n }, 1000);\n \n // Also try on player load\n var observer = new MutationObserver(tryTheater);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "YouTube Theater Mode Default"); } } catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content

fix(aggregator): make Aggregator thread-safe (closes #1) - #25

Merged
AndresL230 merged 7 commits into
mainfrom
fix/aggregator-thread-safety
May 13, 2026
Merged

fix(aggregator): make Aggregator thread-safe (closes #1)#25
AndresL230 merged 7 commits into
mainfrom
fix/aggregator-thread-safety

Conversation

@AndresL230

Copy link
Copy Markdown
Contributor

Summary

Closes#1.

Guards Aggregator state with a threading.RLock so the background timer
thread's flush() cannot race user threads calling ingest() via the
interceptor. flush() uses a swap-and-process pattern so percentile
computation runs outside the critical section.

Tests

  • TestThreadSafety::test_concurrent_ingest_and_flush_does_not_raise
    4 ingester threads × 50000 ingests vs. 500 flushes; reliably reproduces
    the RuntimeError: dictionary changed size during iteration on the
    old code with sys.setswitchinterval(0.000001).
  • TestThreadSafety::test_concurrent_correctness_no_lost_events
    proves the lock also prevents lost updates on counter increments.

Notes

  • Public API unchanged.
  • No new dependencies.
  • Tests use sys.setswitchinterval(0.000001) (restored in finally)
    to make the race deterministic on modern CPython (3.14 on this dev
    machine); the underlying bug is not version-specific.

🤖 Generated with Claude Code

AndresL230and others added 7 commits April 22, 2026 00:37
- Aggregator: introduce MAX_BUCKETS (2000) constant + max_buckets
config field + would_overflow() method + max_buckets getter.
Prevents silent data loss when a window crosses the ingest API's
422 threshold. Direct port of the Node SDK's overflow protection.
- Public surface: re-export MAX_BUCKETS and FlushStatus from the
package __init__.
- Tests: cover the new aggregator behavior, the lastFlushStatus
semantics on RecostHandle, and the transport-side chunking +
rejection signaling paths introduced alongside this feature.
AUDIT.md collects the full audit (tests, lint, mypy, source review,
runtime behavior) and maps the 25 raw findings to the 13 consolidated
issues filed in this repo.
ROADMAP.md sequences those 13 issues into five waves with parallelism
called out, so contributors know which issues can be picked up
simultaneously and which depend on earlier work landing first.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Two TDD-structured plans for the parallel Wave 1 work identified in
ROADMAP.md:
- 2026-05-13-aggregator-thread-safety.md walks through adding a
threading.RLock and swap-and-process flush, with a stress test that
reliably reproduces the race before the fix lands. Closes#1.
- 2026-05-13-naming-and-docs-reconciliation.md walks through renaming
the Flask extension class, stripping nonexistent EcoAPI* references
from CLAUDE.md, swapping the deprecated flush_interval option for
flush_interval_ms in the README, documenting max_buckets and
shutdown_flush_timeout_ms, and pinning the BUILTIN_PROVIDERS count.
Closes#5.
Both plans contain bite-sized tasks with the exact code/diffs to apply
and the exact pytest commands to verify each step.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Guards _buckets / _window_start / _size with a threading.RLock so the
background timer thread's flush() cannot race the interceptor's user
threads ingesting events. flush() now uses a swap-and-process pattern
so percentile computation runs outside the lock.
Adds a stress-test regression that reliably reproduced the race on the
old code (RuntimeError: dictionary changed size during iteration).
Refs #1
Adds a second thread-safety test that proves no counter increments are
lost when N threads race on a shared bucket. Complements the no-raise
stress test by exercising the counter-increment side of the race.
Refs #1
@coderabbitai

Copy link
Copy Markdown

Warning

Rate limit exceeded

@AndresL230 has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 51 minutes and 28 seconds before requesting another review.

You’ve run out of usage credits. Purchase more in the billing tab.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 4b029d7b-e869-47cf-8d47-6ae0bf296911

📥 Commits

Reviewing files that changed from the base of the PR and between 133114d and f055ae2.

📒 Files selected for processing (11)
  • .gitignore
  • AUDIT.md
  • ROADMAP.md
  • docs/superpowers/plans/2026-05-13-aggregator-thread-safety.md
  • docs/superpowers/plans/2026-05-13-naming-and-docs-reconciliation.md
  • pyproject.toml
  • recost/__init__.py
  • recost/_aggregator.py
  • tests/test_aggregator.py
  • tests/test_init.py
  • tests/test_transport.py
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fix/aggregator-thread-safety

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@AndresL230
AndresL230 merged commit c385851 into mainMay 13, 2026
1 check passed
@AndresL230
AndresL230 deleted the fix/aggregator-thread-safety branch May 21, 2026 04:17
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Aggregator is not thread-safe — flush vs. ingest race

1 participant

@AndresL230
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Remove or un-stick sticky/fixed headers that block content\n(function() {\n function unstick() {\n document.querySelectorAll('header, nav, [role=\"banner\"], .header, .navbar, .sticky, .fixed-top, [style*=\"position: fixed\"], [style*=\"position:sticky\"]').forEach(function(el) {\n if (el.style.position === 'fixed' || el.style.position === 'sticky' || \n getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {\n el.style.position = 'static';\n el.style.top = 'auto';\n el.style.zIndex = 'auto';\n }\n });\n }\n \n unstick();\n \n var observer = new MutationObserver(unstick);\n observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });\n})();", "Kill Sticky Headers"); } } catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content

fix(aggregator): make Aggregator thread-safe (closes #1) - #25

Merged
AndresL230 merged 7 commits into
mainfrom
fix/aggregator-thread-safety
May 13, 2026
Merged

fix(aggregator): make Aggregator thread-safe (closes #1)#25
AndresL230 merged 7 commits into
mainfrom
fix/aggregator-thread-safety

Conversation

@AndresL230

Copy link
Copy Markdown
Contributor

Summary

Closes#1.

Guards Aggregator state with a threading.RLock so the background timer
thread's flush() cannot race user threads calling ingest() via the
interceptor. flush() uses a swap-and-process pattern so percentile
computation runs outside the critical section.

Tests

  • TestThreadSafety::test_concurrent_ingest_and_flush_does_not_raise
    4 ingester threads × 50000 ingests vs. 500 flushes; reliably reproduces
    the RuntimeError: dictionary changed size during iteration on the
    old code with sys.setswitchinterval(0.000001).
  • TestThreadSafety::test_concurrent_correctness_no_lost_events
    proves the lock also prevents lost updates on counter increments.

Notes

  • Public API unchanged.
  • No new dependencies.
  • Tests use sys.setswitchinterval(0.000001) (restored in finally)
    to make the race deterministic on modern CPython (3.14 on this dev
    machine); the underlying bug is not version-specific.

🤖 Generated with Claude Code

AndresL230and others added 7 commits April 22, 2026 00:37
- Aggregator: introduce MAX_BUCKETS (2000) constant + max_buckets
config field + would_overflow() method + max_buckets getter.
Prevents silent data loss when a window crosses the ingest API's
422 threshold. Direct port of the Node SDK's overflow protection.
- Public surface: re-export MAX_BUCKETS and FlushStatus from the
package __init__.
- Tests: cover the new aggregator behavior, the lastFlushStatus
semantics on RecostHandle, and the transport-side chunking +
rejection signaling paths introduced alongside this feature.
AUDIT.md collects the full audit (tests, lint, mypy, source review,
runtime behavior) and maps the 25 raw findings to the 13 consolidated
issues filed in this repo.
ROADMAP.md sequences those 13 issues into five waves with parallelism
called out, so contributors know which issues can be picked up
simultaneously and which depend on earlier work landing first.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Two TDD-structured plans for the parallel Wave 1 work identified in
ROADMAP.md:
- 2026-05-13-aggregator-thread-safety.md walks through adding a
threading.RLock and swap-and-process flush, with a stress test that
reliably reproduces the race before the fix lands. Closes#1.
- 2026-05-13-naming-and-docs-reconciliation.md walks through renaming
the Flask extension class, stripping nonexistent EcoAPI* references
from CLAUDE.md, swapping the deprecated flush_interval option for
flush_interval_ms in the README, documenting max_buckets and
shutdown_flush_timeout_ms, and pinning the BUILTIN_PROVIDERS count.
Closes#5.
Both plans contain bite-sized tasks with the exact code/diffs to apply
and the exact pytest commands to verify each step.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Guards _buckets / _window_start / _size with a threading.RLock so the
background timer thread's flush() cannot race the interceptor's user
threads ingesting events. flush() now uses a swap-and-process pattern
so percentile computation runs outside the lock.
Adds a stress-test regression that reliably reproduced the race on the
old code (RuntimeError: dictionary changed size during iteration).
Refs #1
Adds a second thread-safety test that proves no counter increments are
lost when N threads race on a shared bucket. Complements the no-raise
stress test by exercising the counter-increment side of the race.
Refs #1
@coderabbitai

Copy link
Copy Markdown

Warning

Rate limit exceeded

@AndresL230 has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 51 minutes and 28 seconds before requesting another review.

You’ve run out of usage credits. Purchase more in the billing tab.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 4b029d7b-e869-47cf-8d47-6ae0bf296911

📥 Commits

Reviewing files that changed from the base of the PR and between 133114d and f055ae2.

📒 Files selected for processing (11)
  • .gitignore
  • AUDIT.md
  • ROADMAP.md
  • docs/superpowers/plans/2026-05-13-aggregator-thread-safety.md
  • docs/superpowers/plans/2026-05-13-naming-and-docs-reconciliation.md
  • pyproject.toml
  • recost/__init__.py
  • recost/_aggregator.py
  • tests/test_aggregator.py
  • tests/test_init.py
  • tests/test_transport.py
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fix/aggregator-thread-safety

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@AndresL230
AndresL230 merged commit c385851 into mainMay 13, 2026
1 check passed
@AndresL230
AndresL230 deleted the fix/aggregator-thread-safety branch May 21, 2026 04:17
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Aggregator is not thread-safe — flush vs. ingest race

1 participant

@AndresL230
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Universal Dark Mode - works on any site\n(function() {\n var enabled = true;\n \n function applyDarkMode() {\n if (!enabled) return;\n \n // Create style element if it doesn't exist\n var style = document.getElementById('universal-dark-mode-style');\n if (!style) {\n style = document.createElement('style');\n style.id = 'universal-dark-mode-style';\n document.head.appendChild(style);\n }\n \n // Dark mode CSS - inverts colors but preserves images/video\n style.textContent = '\n /* Invert everything except media */\n html {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #1a1a2e !important;\n }\n \n /* Restore images, videos, iframes, canvas */\n img, video, iframe, canvas, svg, picture, [style*=\"background-image\"] {\n filter: invert(1) hue-rotate(180deg) !important;\n }\n \n /* Preserve specific elements that should not be inverted */\n .no-dark-mode, .no-dark-mode *,\n [data-theme=\"light\"], [data-theme=\"light\"],\n .ace_editor, .ace_editor *,\n .CodeMirror, .CodeMirror *,\n .monaco-editor, .monaco-editor *,\n .markdown-body pre, .markdown-body pre *,\n .highlight, .highlight *,\n pre code, pre code * {\n filter: none !important;\n }\n \n /* Fix common UI elements */\n .modal, .popup, .dropdown-menu, .tooltip, .popover {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #2d2d44 !important;\n border-color: #444 !important;\n }\n \n /* Scrollbars */\n ::-webkit-scrollbar { background: #1a1a2e !important; }\n ::-webkit-scrollbar-thumb { background: #444 !important; }\n ::-webkit-scrollbar-thumb:hover { background: #555 !important; }\n \n /* Selection */\n ::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ';\n }\n \n function removeDarkMode() {\n var style = document.getElementById('universal-dark-mode-style');\n if (style) style.remove();\n }\n \n // Toggle with Alt+Shift+D\n document.addEventListener('keydown', function(e) {\n if (e.altKey && e.shiftKey && e.key === 'D') {\n e.preventDefault();\n enabled = !enabled;\n if (enabled) {\n applyDarkMode();\n console.log('[Universal Dark Mode] Enabled');\n } else {\n removeDarkMode();\n console.log('[Universal Dark Mode] Disabled');\n }\n }\n });\n \n // Apply on load\n applyDarkMode();\n \n // Re-apply on dynamic content\n var observer = new MutationObserver(function(mutations) {\n if (enabled && !document.getElementById('universal-dark-mode-style')) {\n applyDarkMode();\n }\n });\n observer.observe(document.head, { childList: true });\n \n console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');\n})();", "Universal Dark Mode"); } } catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); } })(); })();
Skip to content

fix(aggregator): make Aggregator thread-safe (closes #1) - #25

Merged
AndresL230 merged 7 commits into
mainfrom
fix/aggregator-thread-safety
May 13, 2026
Merged

fix(aggregator): make Aggregator thread-safe (closes #1)#25
AndresL230 merged 7 commits into
mainfrom
fix/aggregator-thread-safety

Conversation

@AndresL230

Copy link
Copy Markdown
Contributor

Summary

Closes#1.

Guards Aggregator state with a threading.RLock so the background timer
thread's flush() cannot race user threads calling ingest() via the
interceptor. flush() uses a swap-and-process pattern so percentile
computation runs outside the critical section.

Tests

  • TestThreadSafety::test_concurrent_ingest_and_flush_does_not_raise
    4 ingester threads × 50000 ingests vs. 500 flushes; reliably reproduces
    the RuntimeError: dictionary changed size during iteration on the
    old code with sys.setswitchinterval(0.000001).
  • TestThreadSafety::test_concurrent_correctness_no_lost_events
    proves the lock also prevents lost updates on counter increments.

Notes

  • Public API unchanged.
  • No new dependencies.
  • Tests use sys.setswitchinterval(0.000001) (restored in finally)
    to make the race deterministic on modern CPython (3.14 on this dev
    machine); the underlying bug is not version-specific.

🤖 Generated with Claude Code

AndresL230and others added 7 commits April 22, 2026 00:37
- Aggregator: introduce MAX_BUCKETS (2000) constant + max_buckets
config field + would_overflow() method + max_buckets getter.
Prevents silent data loss when a window crosses the ingest API's
422 threshold. Direct port of the Node SDK's overflow protection.
- Public surface: re-export MAX_BUCKETS and FlushStatus from the
package __init__.
- Tests: cover the new aggregator behavior, the lastFlushStatus
semantics on RecostHandle, and the transport-side chunking +
rejection signaling paths introduced alongside this feature.
AUDIT.md collects the full audit (tests, lint, mypy, source review,
runtime behavior) and maps the 25 raw findings to the 13 consolidated
issues filed in this repo.
ROADMAP.md sequences those 13 issues into five waves with parallelism
called out, so contributors know which issues can be picked up
simultaneously and which depend on earlier work landing first.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Two TDD-structured plans for the parallel Wave 1 work identified in
ROADMAP.md:
- 2026-05-13-aggregator-thread-safety.md walks through adding a
threading.RLock and swap-and-process flush, with a stress test that
reliably reproduces the race before the fix lands. Closes#1.
- 2026-05-13-naming-and-docs-reconciliation.md walks through renaming
the Flask extension class, stripping nonexistent EcoAPI* references
from CLAUDE.md, swapping the deprecated flush_interval option for
flush_interval_ms in the README, documenting max_buckets and
shutdown_flush_timeout_ms, and pinning the BUILTIN_PROVIDERS count.
Closes#5.
Both plans contain bite-sized tasks with the exact code/diffs to apply
and the exact pytest commands to verify each step.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Guards _buckets / _window_start / _size with a threading.RLock so the
background timer thread's flush() cannot race the interceptor's user
threads ingesting events. flush() now uses a swap-and-process pattern
so percentile computation runs outside the lock.
Adds a stress-test regression that reliably reproduced the race on the
old code (RuntimeError: dictionary changed size during iteration).
Refs #1
Adds a second thread-safety test that proves no counter increments are
lost when N threads race on a shared bucket. Complements the no-raise
stress test by exercising the counter-increment side of the race.
Refs #1
@coderabbitai

Copy link
Copy Markdown

Warning

Rate limit exceeded

@AndresL230 has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 51 minutes and 28 seconds before requesting another review.

You’ve run out of usage credits. Purchase more in the billing tab.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 4b029d7b-e869-47cf-8d47-6ae0bf296911

📥 Commits

Reviewing files that changed from the base of the PR and between 133114d and f055ae2.

📒 Files selected for processing (11)
  • .gitignore
  • AUDIT.md
  • ROADMAP.md
  • docs/superpowers/plans/2026-05-13-aggregator-thread-safety.md
  • docs/superpowers/plans/2026-05-13-naming-and-docs-reconciliation.md
  • pyproject.toml
  • recost/__init__.py
  • recost/_aggregator.py
  • tests/test_aggregator.py
  • tests/test_init.py
  • tests/test_transport.py
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fix/aggregator-thread-safety

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@AndresL230
AndresL230 merged commit c385851 into mainMay 13, 2026
1 check passed
@AndresL230
AndresL230 deleted the fix/aggregator-thread-safety branch May 21, 2026 04:17
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Aggregator is not thread-safe — flush vs. ingest race

1 participant

@AndresL230