* tests: read checked-in files as UTF-8 instead of the platform default Path.read_text() with no encoding uses locale.getpreferredencoding(), which is UTF-8 on the Linux runners and cp1252 on a stock Windows install. Nine module-level reads of checked-in source files were relying on that default. studio/backend/routes/inference.py carries the DeepSeek tool-call token regexes, so it holds U+FF5C and U+2581. Under cp1252 that read raised UnicodeDecodeError on byte 0x81 at position 97806, and because the reads run at import time it took test_cancel_atomicity.py and test_cancel_id_wiring.py out at collection, not as failures. Green on CI, permanently broken for a Windows contributor running the suite locally. Adds a guard: at module scope there is no tmp_path fixture, so a bare read_text()/write_text()/open() there is always touching a checked-in file. That makes the rule mechanical enough to enforce with no allowlist, while staying quiet about temp-dir I/O inside test bodies where the platform default is harmless. The repo already spells this correctly in 464 other places; this only stops the stragglers coming back. * tests: cover import-time helper reads and keep the guard py3.9-safe Follows up on the Codex review: - add `from __future__ import annotations`, since `str | None` in `_offender` is evaluated at import on Python 3.9 and pyproject declares requires-python ">=3.9,<3.15". - widen the guard from module scope to import time. Class bodies and the bodies of module-level helpers called from an executing statement run during collection too, so `CODE = _extract_mixed_precision_code()` was the same hazard as an inline read. `if __name__ == "__main__":` blocks are skipped: pytest never executes them. - scan studio/backend/tests/ as well as tests/. Both trees are collected on Windows by separate CI jobs, and the offender that started this, test_tool_xml_strip.py reading routes/inference.py, lives there. Widening it surfaced seven more import-time reads of checked-in sources; all now name utf-8. * [pre-commit.ci] auto fixes from pre-commit.com hooks for more information, see https://pre-commit.ci * Harden the import-time encoding guard for PR #7438 Close the detector gaps raised in review, all of which I reproduced against the actual AST before changing anything. False negatives (the guard let a real hazard through): - _is_main_guard ignored the comparison operator, so if __name__ != "__main__" counted as script-only even though its body runs at import. - The else arm of a main guard was discarded with the rest of the If node. - Decorators and argument defaults on a module-level def were skipped with the body, though both are evaluated when the def executes. - Path.open() in text mode was invisible; only builtin open() was matched. - encoding = None and encoding = "locale" both re-select the platform default, but the keyword merely being present counted as pinned. False positives (the guard would have blocked a compliant contributor): - A non-literal mode fell through to the "r" default, so open(p, mode) was flagged even when mode is "rb", where adding encoding= is a ValueError and there is no edit that satisfies the rule. - Same for open(*args) and a **kwargs splat, which hide the mode and can hide an encoding. - Lambda bodies and comprehension elements were walked even though neither runs at definition. Verified: still reports the same 22 offenders on unpatched main, green on this branch and on the tree merged with latest main (557 files), and an adversarial corpus of 33 cases now scores zero false positives and zero false negatives. Also corrected two docstring claims: neither collecting job runs on Windows, and the read is governed by locale.getencoding(). * Walk eager comprehensions and treat io.open as the builtin Two regressions from the previous commit, both reproduced against the AST before changing anything. Lumping list, set and dict comprehensions in with generator expressions was wrong. Only a genexp is lazy; the other three run their element expression, their filters and their nested iterators immediately, so CONTENTS = [p.read_text() for p in PATHS] at module scope is an import-time read the guard was silently missing. Comprehensions are now walked in full and only the genexp keeps the outermost-iterable-only treatment. io was also in the not-a-path-opener list, but io.open is the builtin, with the same mode position and the same platform default. io.open(CHECKED_IN_FILE) is exactly the hazard this guard exists for, so it is matched now, with binary modes and a pinned encoding still exempt. tarfile.open and fitz.open stay exempt since neither has an encoding to name. Verified: 13 targeted cases covering all five eager comprehension forms and io.open in text, binary and pinned shapes all classify correctly; still 22 offenders on unpatched main; green on this branch and on the tree merged with latest main. * Close three more walker gaps in the import-time guard All three reproduced against the AST first. A generator expression handed straight to a call is consumed there, so DATA = "".join(p.read_text() for p in paths) runs its element at import. Only an unconsumed genexp bound to a name stays lazy, so the walker now follows the consumed ones in full and keeps the outermost-iterable-only treatment for the rest. if "__main__" == __name__ is an equivalent and accepted spelling of the main guard, but requiring __name__ on the left meant its body was treated as import-time code. That is a false positive on a block pytest never runs, so both operand orders are recognised now. The helper table was built from module-level defs only, so a def in a class body invoked while the class is constructed was never followed, contradicting the walker's stated coverage of class bodies. Helpers are now collected from the module body and from class bodies at any nesting. Verified: 15 targeted cases including all three fixes and the earlier ones still classify correctly; still 22 offenders on unpatched main; green on this branch and on the tree merged with latest main. * Handle positional read_text encodings, lazy generators and nested helpers * Guard reads reached from test bodies, unbound Path calls and __file__ paths * [pre-commit.ci] auto fixes from pre-commit.com hooks for more information, see https://pre-commit.ci * Follow derived paths, skip lazy generator helpers, cover compressed openers * Guard the CLI tests, helper parameters and unbound Path arguments * Discover test roots and follow literal, in-place and tuple-derived paths * Identify module openers by import, unwrap starred paths, pin subprocess snippets * Resolve import origins, seed helper locals, follow named generators and parametrize * Scope imports lexically, list tracked test files, bind unpacked names * Resolve aliased openers, keyword-only params, destructured targets, next() * Pin the encoding on subprocess snippets, workflow lint and CLI output for PR #7438 * Harden the CLI encoding guard against detached streams for PR #7438 * Tighten the encoding guard's path and scope analysis for PR #7438 * Resolve path provenance more precisely and keep POSIX stream encodings for PR #7438 * Resolve qualified path classes and scope conditional imports for PR #7438 * Scope CLI stream setup to the entry point and align two encoding pairs for PR #7438 --------- Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com> Co-authored-by: danielhanchen <danielhanchen@gmail.com>
158 lines
7.1 KiB
Python
158 lines
7.1 KiB
Python
"""Unsloth install-root inference must not crash under hostile filesystem conditions (PermissionError/OSError swallowed; custom root kept when resolve() fails)."""
|
|
|
|
from __future__ import annotations
|
|
|
|
import importlib.util
|
|
import sys
|
|
import textwrap
|
|
from pathlib import Path
|
|
from unittest import mock
|
|
|
|
import pytest
|
|
|
|
|
|
REPO_ROOT = Path(__file__).resolve().parents[1]
|
|
STORAGE_ROOTS = REPO_ROOT / "studio" / "backend" / "utils" / "paths" / "storage_roots.py"
|
|
LLAMA_CPP = REPO_ROOT / "studio" / "backend" / "core" / "inference" / "llama_cpp.py"
|
|
|
|
|
|
def _load(name: str, path: Path):
|
|
spec = importlib.util.spec_from_file_location(name, path)
|
|
assert spec is not None and spec.loader is not None
|
|
mod = importlib.util.module_from_spec(spec)
|
|
sys.modules[name] = mod
|
|
spec.loader.exec_module(mod)
|
|
return mod
|
|
|
|
|
|
def test_infer_studio_home_swallows_permission_error(tmp_path, monkeypatch):
|
|
candidate = tmp_path / "fake_root"
|
|
venv = candidate / "unsloth_studio"
|
|
venv.mkdir(parents = True)
|
|
monkeypatch.setattr(sys, "prefix", str(venv))
|
|
sys.modules.pop("sr_perm", None)
|
|
mod = _load("sr_perm", STORAGE_ROOTS)
|
|
with mock.patch.object(Path, "is_file", side_effect = PermissionError("denied")):
|
|
# Must NOT raise.
|
|
assert mod._infer_studio_home_from_venv() is None
|
|
|
|
|
|
def test_studio_root_does_not_crash_on_permission_error(tmp_path, monkeypatch):
|
|
"""studio_root() falls through to the legacy default on a restricted filesystem."""
|
|
candidate = tmp_path / "fake_root"
|
|
venv = candidate / "unsloth_studio"
|
|
venv.mkdir(parents = True)
|
|
monkeypatch.setattr(sys, "prefix", str(venv))
|
|
monkeypatch.delenv("UNSLOTH_STUDIO_HOME", raising = False)
|
|
monkeypatch.delenv("STUDIO_HOME", raising = False)
|
|
sys.modules.pop("sr_studio_perm", None)
|
|
mod = _load("sr_studio_perm", STORAGE_ROOTS)
|
|
with mock.patch.object(Path, "is_file", side_effect = OSError("ebusy")):
|
|
result = mod.studio_root()
|
|
assert result == Path.home() / ".unsloth" / "studio"
|
|
|
|
|
|
def _method_body(src: str, name: str) -> str:
|
|
"""Whole method body (def to next sibling def at the same indent)."""
|
|
start = src.index(f"def {name}")
|
|
indent = " " * (start - src.rfind("\n", 0, start) - 1)
|
|
nxt = src.find(f"\n{indent}def ", start + 1)
|
|
return src[start : nxt if nxt != -1 else len(src)]
|
|
|
|
|
|
def test_kill_orphan_catches_oserror_from_studio_root():
|
|
"""Cleanup must not crash when studio_root() raises. _kill_orphaned_servers
|
|
resolves the install root through the shared _resolved_studio_root_and_is_legacy()
|
|
classifier, which swallows (ImportError, OSError, ValueError) on the probe."""
|
|
src = LLAMA_CPP.read_text(encoding = "utf-8")
|
|
# Cleanup delegates to the shared classifier rather than importing studio_root inline.
|
|
assert "LlamaCppBackend._resolved_studio_root_and_is_legacy()" in _method_body(
|
|
src, "_kill_orphaned_servers"
|
|
), "_kill_orphaned_servers must resolve the root via _resolved_studio_root_and_is_legacy()"
|
|
# The shared classifier catches both the resolve() failure and the outer studio_root() probe.
|
|
classifier = _method_body(src, "_resolved_studio_root_and_is_legacy")
|
|
assert "studio_root as _sr" in classifier, "classifier must probe studio_root()"
|
|
assert "except (OSError, ValueError):" in classifier, "inner resolve() probe must be guarded"
|
|
assert "except (ImportError, OSError, ValueError):" in classifier, (
|
|
"_resolved_studio_root_and_is_legacy must catch (ImportError, OSError, ValueError) "
|
|
"from studio_root()"
|
|
)
|
|
|
|
|
|
def _exec_search_roots_block(
|
|
home: Path, studio_root_value: Path, resolve_raises: bool
|
|
) -> list[Path]:
|
|
"""Run _find_llama_server_binary's search_roots derivation -- plus the shared
|
|
_resolved_studio_root_and_is_legacy() classifier it delegates to -- with a
|
|
controlled studio_root() and resolve(), without importing the heavy module."""
|
|
src = LLAMA_CPP.read_text(encoding = "utf-8")
|
|
# Shared root classifier (holds the defensive try/except for studio_root()).
|
|
# End the slice at the next sibling def/decorator at the same indent rather
|
|
# than the literal "@staticmethod" string, so a future docstring mentioning a
|
|
# decorator can't truncate the helper mid-body and break exec().
|
|
helper_start = src.index("def _resolved_studio_root_and_is_legacy")
|
|
indent = " " * (helper_start - src.rfind("\n", 0, helper_start) - 1)
|
|
nxt_def = src.find(f"\n{indent}def ", helper_start + 1)
|
|
nxt_dec = src.find(f"\n{indent}@", helper_start + 1)
|
|
sibling = [idx for idx in (nxt_def, nxt_dec) if idx != -1]
|
|
helper_end = min(sibling) if sibling else len(src)
|
|
helper = textwrap.dedent(src[helper_start:helper_end])
|
|
# search_roots derivation inside _find_llama_server_binary (delegates to the classifier).
|
|
block_start = src.index('legacy_llama = Path.home() / ".unsloth" / "llama.cpp"')
|
|
block_end = src.index("for unsloth_home in search_roots:", block_start)
|
|
block = textwrap.dedent(" " * 8 + src[block_start:block_end])
|
|
fake_module = type(sys)("fake_storage_roots")
|
|
fake_module.studio_root = lambda: studio_root_value
|
|
sys.modules["utils.paths.storage_roots"] = fake_module
|
|
try:
|
|
original_resolve = Path.resolve
|
|
|
|
def _resolve(self, *a, **k):
|
|
if resolve_raises:
|
|
raise OSError("ebusy")
|
|
return original_resolve(self, *a, **k)
|
|
|
|
with (
|
|
mock.patch.object(Path, "home", classmethod(lambda cls: home)),
|
|
mock.patch.object(Path, "resolve", _resolve),
|
|
):
|
|
ns: dict = {"Path": Path}
|
|
exec(helper, ns) # noqa: S102 -- defines _resolved_studio_root_and_is_legacy
|
|
ns["LlamaCppBackend"] = type(
|
|
"LlamaCppBackend",
|
|
(),
|
|
{
|
|
"_resolved_studio_root_and_is_legacy": staticmethod(
|
|
ns["_resolved_studio_root_and_is_legacy"]
|
|
)
|
|
},
|
|
)
|
|
exec(block, ns) # noqa: S102 -- defines search_roots
|
|
return ns["search_roots"]
|
|
finally:
|
|
sys.modules.pop("utils.paths.storage_roots", None)
|
|
|
|
|
|
def test_search_roots_keeps_custom_when_resolve_fails(tmp_path):
|
|
home = tmp_path / "home"
|
|
home.mkdir()
|
|
custom = tmp_path / "custom_studio"
|
|
custom.mkdir()
|
|
roots = _exec_search_roots_block(home = home, studio_root_value = custom, resolve_raises = True)
|
|
# On resolve() failure, the inner except falls back to direct equality;
|
|
# custom != legacy_studio so the custom root must remain in search_roots.
|
|
assert custom / "llama.cpp" in roots, f"custom root dropped on resolve() failure: {roots}"
|
|
# custom-mode discovery excludes the legacy tree to match _kill_orphaned_servers.
|
|
assert (
|
|
home / ".unsloth" / "llama.cpp"
|
|
) not in roots, f"legacy llama path must not appear in custom-mode search_roots: {roots}"
|
|
|
|
|
|
def test_search_roots_default_mode_uses_legacy_only(tmp_path):
|
|
home = tmp_path / "home"
|
|
home.mkdir()
|
|
legacy = home / ".unsloth" / "studio"
|
|
legacy.mkdir(parents = True)
|
|
roots = _exec_search_roots_block(home = home, studio_root_value = legacy, resolve_raises = False)
|
|
# Default mode: only legacy_llama.
|
|
assert roots == [home / ".unsloth" / "llama.cpp"]
|