reflex-dev/reflex

reflex

Performance History

Latest Results

Require plain directory names in every frontend_path segment The previous guard only rejected ".." between forward slashes. On Windows a backslash is also a separator, so "..\\escaped" still traversed out of the build output, and a drive-letter or rooted segment such as "D:other" or "\\" makes pathlib replace the base path entirely. Validate each slash-delimited segment with PureWindowsPath: it must have no anchor (drive or root) and parse to exactly itself, which rules out backslashes, drive prefixes, UNC forms, and ".". Bare ".." is rejected explicitly since it parses to itself. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01UwbNDEaQNGWeHWS8nxsURd

claude/happy-brown-ajf67r

2 hours ago

Do not store merged router_data when it changes nothing A partial payload is never equal to the full dict the state holds, so it always reaches the merge -- and when it merges to what is already there, assigning it still dirtied router_data, marked the state touched, and persisted it for an event that moved nothing. Same class of bug as the spurious var dirtying fixed earlier, reached through the router_data assignment instead. Assign only when the merge actually differs. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Mwk1pagH3KZ884Xw55BNMh

claude/router-vars-refactor-7j1305

3 hours ago

Give the serialized router keys a single source of truth serialize_router_data and RouterDataVar independently spelled out the five keys of the serialized router shape, and the two have to agree: the literal a whole-router render produces is the object a component reads, and it must match what the delta carries. Name them once and use them in both places, with a test pinning the rendered keys to the serializer's and to what actually reaches the client. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Mwk1pagH3KZ884Xw55BNMh

claude/router-vars-refactor-7j1305

3 hours ago

Carry omitted router_data keys forward when rebuilding the router vars The previous commit stopped an absent key from being read as a change, but the constructors still read the incoming dict directly, so a payload holding only some navigation keys rebuilt page and url without the origin header that gives them their host. Merge the new data over what the state last saw and build from that; the merged dict is also what the caller now stores, so a partial payload does not drop keys for the next comparison either. Merging additionally makes an absent key compare equal to what it replaced, so the explicit presence check is no longer needed. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Mwk1pagH3KZ884Xw55BNMh

claude/router-vars-refactor-7j1305

3 hours ago

Record the connecting token in router_data when linking a sid Both reviewers flagged this as P1. Rebuilding SessionData from router_data left router_session.client_token empty until the first event filled it in, and duplicate-token handling makes that worse: the state is loaded under a freshly issued token, so anything reading client_token in the meantime -- a background task, a shared-state link -- addresses the wrong state tree. Record the identity the state was actually loaded under. Also make the EventNamespace fixture async so its token-manager teardown awaits on the test's own event loop, rather than driving a redis client bound to that loop from a fresh one via asyncio.run. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Mwk1pagH3KZ884Xw55BNMh

claude/router-vars-refactor-7j1305

3 hours ago

Address review findings on the router var split Whole-router dependency (greptile P1, cubic P2): deps=[State.router] registered only router_url, because VarData.merge surfaces the first non-empty field name, so a cached var declaring the whole router went stale when any other router field changed. Vars now name the state fields a dependency must track via _dependency_field_names(); RouterDataVar names all five. Non-composite vars keep their existing behaviour. Cached headers aliasing (greptile P2, cubic P2): the cached headers dict was shared with every event and, through it, with the mutable state.router_data, so a handler mutating self.router_data["headers"] corrupted the connection cache. Copy it per event -- measured at 0.081us against the 1.347us decode it replaced, so the cache still pays for itself 17x over. My note on the PR claiming the copy was the cost being removed was simply wrong. Omitted static keys (cubic P2): a router_data carrying only the navigation keys says nothing about the session or headers, but _update_router_vars read the omission as a change and reset them to their defaults. A key absent from the new payload is now left alone. Non-origin headers (cubic P2): only the origin header feeds the page and URL, so a cookie change no longer rebuilds the navigation vars. Hardcoded identifiers (greptile P2): the router field names are now named constants, used at the lookup sites and in the dynamic route dependency. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Mwk1pagH3KZ884Xw55BNMh

claude/router-vars-refactor-7j1305

3 hours ago

docs(otel): say which sends carry a traceparent in the browser module header and the fragments Since only sampled browser spans inject a traceparent and no exporter is installed without an endpoint, the module header claimed more than the code does. The reflex-otel fragment now names the explicit endpoint and the sampled-only propagation, and the reflex-base fragment mentions the upload helper's hook alongside the event loop's. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01AsnJbeBU5w6piuxSJoz9gy

claude/otel-fixes-3of3

3 hours ago

Keep the new on_event tests from leaking tokens into a shared redis EventNamespace's token manager is redis-backed when a redis URL is configured, so linking a token in these tests left it visible to test_redis_token_manager_enumerate_tokens, which asserts an exact token count. Tear the namespace down the way the token manager tests' own factory does. Also stop expecting router_route_id in every on_load delta of test_dynamic_route_var_route_change_completed_on_load: those navigations all match the same route, so the route pattern only changes on the first. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Mwk1pagH3KZ884Xw55BNMh

claude/router-vars-refactor-7j1305

3 hours ago

Latest Branches

+3%

Fix build failure when frontend_path is set without prerendering#7044

2 hours ago

a0480cc

claude/happy-brown-ajf67r

+3%

perf: split router into per-field base vars; gather connection-static router data at connect#7068

3 hours ago

9c270ca

claude/router-vars-refactor-7j1305

ENG-9166: suggestions for otel 3/3#7070

3 hours ago

6fef1cd

claude/otel-fixes-3of3

Home Terms Privacy Docs