e93507a09c
Lockfile supply-chain audit / lockfile supply-chain audit (push) Has been cancelled
Windows Studio GGUF CI / GPU prebuilt resolves without Visual Studio (push) Has been cancelled
Windows Studio GGUF CI / setup.ps1 unit tests (VS 2026 / CMake guard) (push) Has been cancelled
Windows Studio GGUF CI / real-VS detection (VS 2022) (push) Has been cancelled
Windows Studio GGUF CI / real-VS detection (VS 2026) (push) Has been cancelled
Windows Studio GGUF CI / VC++ runtime detect + install round-trip (windows-2025-vs2026) (push) Has been cancelled
Windows Studio GGUF CI / VC++ runtime detect + install round-trip (windows-latest) (push) Has been cancelled
Windows Studio Update CI / Studio Updating Tests (push) Has been cancelled
Wheel CI / Wheel build + content sanity + import smoke (push) Has been cancelled
Lint CI / Source lint (Python + shell + YAML + JSON + safety nets) (push) Has been cancelled
MLX CI on Mac M1 / dispatch (push) Has been cancelled
Security audit / advisory audit (pip + npm + cargo) (push) Has been cancelled
Security audit / pip scan-packages :: extras (push) Has been cancelled
Security audit / pip scan-packages :: studio (push) Has been cancelled
Security audit / pip scan-packages :: hf-stack (push) Has been cancelled
Security audit / npm scan-packages (Studio frontend tarballs) (push) Has been cancelled
Security audit / workflow-trigger lint (pull_request_target / cache-poisoning) (push) Has been cancelled
Security audit / pytest tests/security (push) Has been cancelled
Security audit / npm provenance + new install-script diff (push) Has been cancelled
Studio API CI / Studio API & Auth Tests (push) Has been cancelled
Backend CI / (Python 3.10) (push) Has been cancelled
Backend CI / (Python 3.11) (push) Has been cancelled
Backend CI / (Python 3.12) (push) Has been cancelled
Backend CI / (Python 3.13) (push) Has been cancelled
Backend CI / Repo tests (CPU) (push) Has been cancelled
Frontend CI / Frontend build + bundle sanity (push) Has been cancelled
Studio GGUF CI / OpenAI, Anthropic API tests (push) Has been cancelled
Studio GGUF CI / Tool calling Tests (push) Has been cancelled
Studio GGUF CI / JSON, images (push) Has been cancelled
Mac Studio GGUF CI / OpenAI, Anthropic API tests (push) Has been cancelled
Mac Studio GGUF CI / Tool calling Tests (push) Has been cancelled
Mac Studio GGUF CI / JSON, images (push) Has been cancelled
Mac Studio Install Matrix CI / Install + load (macos-14) (push) Has been cancelled
Mac Studio Install Matrix CI / Install + load (macos-15) (push) Has been cancelled
Mac Studio Install Matrix CI / Install + load (macos-26) (push) Has been cancelled
Mac Studio Install Matrix CI / Install + load (macos-15-intel) (push) Has been cancelled
Mac Studio API CI / Studio API & Auth Tests (push) Has been cancelled
Mac Studio Install Matrix CI / Install + load (macos-26-intel) (push) Has been cancelled
Mac Studio UI CI / Chat UI Tests (push) Has been cancelled
Studio Tauri CI / Tauri Linux debug build (no codesign) (push) Has been cancelled
Mac Studio Update CI / Studio Updating Tests (push) Has been cancelled
Studio UI CI / Chat UI Tests (push) Has been cancelled
Windows Studio API CI / Studio API & Auth Tests (push) Has been cancelled
Windows Studio UI CI / Chat UI Tests (push) Has been cancelled
Studio Update CI / Studio Updating Tests (push) Has been cancelled
Core / Core (HF=default + TRL=default) (push) Has been cancelled
Core / Core (HF=4.57.6 + TRL<1) (push) Has been cancelled
Core / Core (HF=latest + TRL=latest) (push) Has been cancelled
Core / llama.cpp build + smoke (push) Has been cancelled
Windows Studio GGUF CI / OpenAI, Anthropic API tests (push) Has been cancelled
Windows Studio GGUF CI / Tool calling Tests (push) Has been cancelled
Windows Studio GGUF CI / JSON, images (push) Has been cancelled
Windows Studio GGUF CI / Studio install + inference without Visual Studio (push) Has been cancelled
Studio export capability / capability (macos-latest) (push) Has been cancelled
Studio export capability / capability (ubuntu-latest) (push) Has been cancelled
Studio export capability / capability (windows-latest) (push) Has been cancelled
Cross-platform parity / parity (macos-latest) (push) Has been cancelled
Cross-platform parity / parity (windows-latest) (push) Has been cancelled
Scorecard supply-chain security / Scorecard analysis (push) Has been cancelled
Studio load-orchestrator CI / test (push) Has been cancelled
224 lines
7.2 KiB
Python
224 lines
7.2 KiB
Python
# SPDX-License-Identifier: AGPL-3.0-only
|
|
# Copyright 2026-present the Unsloth AI Inc. team. All rights reserved. See /studio/LICENSE.AGPL-3.0
|
|
|
|
import asyncio
|
|
import importlib.util
|
|
from pathlib import Path
|
|
|
|
import pytest
|
|
|
|
|
|
def _seed_route_source() -> str:
|
|
return (
|
|
Path(__file__).resolve().parent.parent / "routes" / "data_recipe" / "seed.py"
|
|
).read_text()
|
|
|
|
|
|
def test_seed_inspect_load_kwargs_disables_remote_code_execution():
|
|
assert '"trust_remote_code": False' in _seed_route_source()
|
|
|
|
|
|
class _FakeUpload:
|
|
def __init__(self, filename: str, content: bytes):
|
|
self.filename = filename
|
|
self._content = content
|
|
|
|
async def read(self) -> bytes:
|
|
return self._content
|
|
|
|
|
|
def _load_seed_route(monkeypatch: pytest.MonkeyPatch, tmp_path: Path):
|
|
pytest.importorskip("fastapi")
|
|
pytest.importorskip("multipart")
|
|
pytest.importorskip("structlog")
|
|
|
|
backend_root = Path(__file__).resolve().parent.parent
|
|
monkeypatch.syspath_prepend(str(backend_root))
|
|
route_path = backend_root / "routes" / "data_recipe" / "seed.py"
|
|
spec = importlib.util.spec_from_file_location("seed_under_test", route_path)
|
|
assert spec is not None and spec.loader is not None
|
|
seed_route = importlib.util.module_from_spec(spec)
|
|
spec.loader.exec_module(seed_route)
|
|
seed_route.UNSTRUCTURED_UPLOAD_ROOT = tmp_path / "unstructured-uploads"
|
|
return seed_route
|
|
|
|
|
|
def _run_upload(
|
|
seed_route,
|
|
filename: str,
|
|
content: bytes,
|
|
block_id: str = "block",
|
|
):
|
|
return asyncio.run(
|
|
seed_route.upload_unstructured_file(_FakeUpload(filename, content), block_id)
|
|
)
|
|
|
|
|
|
def _block_files(seed_route, block_id: str = "block") -> list[str]:
|
|
block_dir = seed_route.UNSTRUCTURED_UPLOAD_ROOT / block_id
|
|
if not block_dir.exists():
|
|
return []
|
|
return sorted(path.name for path in block_dir.iterdir())
|
|
|
|
|
|
def _raise(exc: BaseException):
|
|
def raise_exc(*args, **kwargs):
|
|
raise exc
|
|
|
|
return raise_exc
|
|
|
|
|
|
@pytest.mark.parametrize(
|
|
("filename", "package"),
|
|
[
|
|
("paper.pdf", "pymupdf4llm"),
|
|
("notes.docx", "mammoth"),
|
|
],
|
|
)
|
|
def test_unstructured_upload_names_missing_extractor_dependency(
|
|
monkeypatch, tmp_path, filename, package
|
|
):
|
|
seed_route = _load_seed_route(monkeypatch, tmp_path)
|
|
monkeypatch.setattr(
|
|
seed_route,
|
|
"_extract_text_from_file",
|
|
_raise(ModuleNotFoundError(f"No module named {package!r}", name = package)),
|
|
)
|
|
|
|
result = _run_upload(seed_route, filename, b"%PDF-1.7")
|
|
|
|
assert result.status == "error"
|
|
assert (
|
|
result.error
|
|
== f"Cannot read {Path(filename).suffix} files: the '{package}' package is not installed."
|
|
)
|
|
assert _block_files(seed_route) == []
|
|
|
|
|
|
def test_unstructured_upload_keeps_txt_path_working(monkeypatch, tmp_path):
|
|
seed_route = _load_seed_route(monkeypatch, tmp_path)
|
|
|
|
result = _run_upload(seed_route, "notes.txt", b"hello")
|
|
|
|
assert result.status == "ok"
|
|
assert result.error is None
|
|
assert any(name.endswith(".txt") for name in _block_files(seed_route))
|
|
assert any(name.endswith(".extracted.txt") for name in _block_files(seed_route))
|
|
|
|
|
|
@pytest.mark.parametrize(
|
|
"exc",
|
|
[
|
|
ImportError("cannot import internal symbol"),
|
|
ModuleNotFoundError(
|
|
"No module named 'missing_transitive_pkg'",
|
|
name = "missing_transitive_pkg",
|
|
),
|
|
],
|
|
)
|
|
def test_unstructured_upload_import_errors_stay_generic(monkeypatch, tmp_path, exc):
|
|
seed_route = _load_seed_route(monkeypatch, tmp_path)
|
|
monkeypatch.setattr(seed_route, "_extract_text_from_file", _raise(exc))
|
|
result = _run_upload(seed_route, "paper.pdf", b"%PDF-1.7")
|
|
|
|
assert result.status == "error"
|
|
assert result.error == "Text extraction failed."
|
|
assert _block_files(seed_route) == []
|
|
|
|
|
|
_TEST_UPLOAD_UID = "0f" * 16
|
|
|
|
|
|
def test_remove_unstructured_block_deletes_directory(monkeypatch, tmp_path):
|
|
seed_route = _load_seed_route(monkeypatch, tmp_path)
|
|
_run_upload(seed_route, "notes.txt", b"hello", block_id = _TEST_UPLOAD_UID)
|
|
assert _block_files(seed_route, _TEST_UPLOAD_UID) != []
|
|
|
|
result = asyncio.run(seed_route.remove_unstructured_block(_TEST_UPLOAD_UID))
|
|
|
|
assert result == {"status": "ok", "deleted": True}
|
|
assert not (seed_route.UNSTRUCTURED_UPLOAD_ROOT / _TEST_UPLOAD_UID).exists()
|
|
|
|
|
|
def test_remove_unstructured_block_missing_directory_is_ok(monkeypatch, tmp_path):
|
|
seed_route = _load_seed_route(monkeypatch, tmp_path)
|
|
|
|
result = asyncio.run(seed_route.remove_unstructured_block(_TEST_UPLOAD_UID))
|
|
|
|
assert result == {"status": "ok", "deleted": False}
|
|
|
|
|
|
def test_remove_unstructured_block_rejects_unsafe_ids(monkeypatch, tmp_path):
|
|
seed_route = _load_seed_route(monkeypatch, tmp_path)
|
|
|
|
with pytest.raises(seed_route.HTTPException) as exc:
|
|
asyncio.run(seed_route.remove_unstructured_block("../escape"))
|
|
|
|
assert exc.value.status_code == 400
|
|
|
|
|
|
def test_remove_unstructured_block_rejects_legacy_node_ids(monkeypatch, tmp_path):
|
|
seed_route = _load_seed_route(monkeypatch, tmp_path)
|
|
_run_upload(seed_route, "notes.txt", b"hello", block_id = "n1")
|
|
assert _block_files(seed_route, "n1") != []
|
|
|
|
with pytest.raises(seed_route.HTTPException) as exc:
|
|
asyncio.run(seed_route.remove_unstructured_block("n1"))
|
|
|
|
assert exc.value.status_code == 400
|
|
assert _block_files(seed_route, "n1") != []
|
|
|
|
|
|
def test_remove_unstructured_block_rejects_symlink_escape(monkeypatch, tmp_path):
|
|
seed_route = _load_seed_route(monkeypatch, tmp_path)
|
|
outside = tmp_path / "outside"
|
|
outside.mkdir()
|
|
(outside / "victim.txt").write_text("keep me")
|
|
root = seed_route.UNSTRUCTURED_UPLOAD_ROOT
|
|
root.mkdir(parents = True)
|
|
(root / _TEST_UPLOAD_UID).symlink_to(outside)
|
|
|
|
with pytest.raises(seed_route.HTTPException) as exc:
|
|
asyncio.run(seed_route.remove_unstructured_block(_TEST_UPLOAD_UID))
|
|
|
|
assert exc.value.status_code == 400
|
|
assert (outside / "victim.txt").exists()
|
|
|
|
|
|
def test_remove_unstructured_block_fails_if_directory_remains(monkeypatch, tmp_path):
|
|
seed_route = _load_seed_route(monkeypatch, tmp_path)
|
|
root = seed_route.UNSTRUCTURED_UPLOAD_ROOT
|
|
block_dir = root / _TEST_UPLOAD_UID
|
|
block_dir.mkdir(parents = True)
|
|
(block_dir / "victim.txt").write_text("keep me")
|
|
|
|
calls = []
|
|
|
|
def noop_rmtree(path, *args, **kwargs):
|
|
calls.append((path, args, kwargs))
|
|
|
|
monkeypatch.setattr(seed_route.shutil, "rmtree", noop_rmtree)
|
|
|
|
with pytest.raises(seed_route.HTTPException) as exc:
|
|
asyncio.run(seed_route.remove_unstructured_block(_TEST_UPLOAD_UID))
|
|
|
|
assert calls
|
|
assert exc.value.status_code == 500
|
|
assert block_dir.exists()
|
|
|
|
|
|
def test_total_upload_quota_is_scoped_per_block(monkeypatch, tmp_path):
|
|
seed_route = _load_seed_route(monkeypatch, tmp_path)
|
|
monkeypatch.setattr(seed_route, "UNSTRUCTURED_RECIPE_UPLOAD_TOTAL_MAX_BYTES", 10)
|
|
|
|
first = _run_upload(seed_route, "a.txt", b"123456789")
|
|
assert first.status == "ok"
|
|
|
|
with pytest.raises(seed_route.HTTPException) as exc:
|
|
_run_upload(seed_route, "b.txt", b"123")
|
|
assert exc.value.status_code == 413
|
|
|
|
# Another block starts with its own untouched budget.
|
|
other = _run_upload(seed_route, "c.txt", b"123", block_id = "other")
|
|
assert other.status == "ok"
|