litellm/tests/unit/integrations/gitlab/test_gitlab_client.py
yuneng-jiang cf491d1df9
test: move tests/test_litellm integrations and secret_managers into tests/unit (#43194)
* ci: run the unit_selection.sh shard files on every event instead of only fork pull requests

Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>

* ci: rename fork-flag to unit-flag now that it applies on every event

* test: move tests/test_litellm root and small trees into tests/unit

Pure renames, no content changes. Follow-up commits in this PR fix
references, merge the three files that already existed in tests/unit,
keep live-provider tests in tests/test_litellm and wire CI.

* test: carry tests/test_litellm conftest isolation into tests/unit

Callback lists, routing fallbacks, cached HTTP clients, logger state, AWS,
proxy-URL and keychain env, and session-end client cleanup now reset for
unit tests too. The environment isolation owns its MonkeyPatch so a test's
own monkeypatch is undone before the model-cost teardown runs.

* test: merge, split and prune the moved root and small-tree tests

Merge batches/test_batch_utils.py and the chat_completions and messages
dispatch tests into the files that already existed in tests/unit. Keep
the live Gemini interactions tests, the async image-fetch format test and
the OpenAI embedding scorer test in tests/test_litellm since they need
real network or keys. Put test_router.py under tests/unit/test_router so
the existing package no longer shadows it. Delete eight tests the audit
found superseded by stronger ones kept in this move.

* ci: run the moved root and small-tree tests under their legacy flags

Add the misc and responses-caching-types flags to unit_selection.sh and
CircleCI, extend enterprise-routing and mcp-integration, and point the
legacy GHA shards, Makefile, redis-compat workflow, merge smoke manifest
and change classifier at the new paths.

* test: make the new tests/unit directories packages

tests/unit/test_package_layout.py requires every directory to carry an
__init__.py, and without one the moved and retained
test_litellm_responses_bridge.py modules collide on import.

* test: scope the unit socket block to tests/unit in shared sessions

The GHA shards collect the legacy test-path and the unit selection in one
pytest session. The unit conftest's loopback-only block leaked into legacy
modules that reach the network at import. The legacy conftest now lifts the
restriction at collect and setup time, and the unit conftest re-applies it
when collecting its own modules.

* test: move tests/test_litellm/llms into tests/unit/llms

Rename-only. Moves the provider tests and the fine-tuning fixtures they
load, mirroring the old paths. Follow-up commits merge, split and wire them.

* test: merge, split and prune the moved llms tests

Merges the Databricks chat transformation tests into the existing unit
file, keeps the tests that need real keys or the network in
tests/test_litellm, deletes the audited tests a stronger unit test
already covers, and points imports at tests.unit.llms.

* ci: run the moved llms tests under their legacy flags

The Vertex AI and All Other Providers shards keep their legacy test-path
for the retained files and add the llm-vertex-ai and llm-other-providers
unit selections. CircleCI gets matching unit jobs.

* test: make the tests/unit/llms directories packages

Adds __init__.py to the moved dirs and drops the legacy ones whose
directories no longer hold tests.

* test: drop script runners and path hacks the llms split left dangling

The __main__ runners in the split openai_like files and the Databricks e2e
runner called tests that now live in the other half of the split or were
deleted. The retained legacy halves also no longer need sys.path edits.

* test: give the shard-script tests their own GITHUB_OUTPUT

They only passed where the runner set it. The CircleCI unit job's env
allowlist drops it, so the script's redirect failed there.

* test: point the router and module-deletion checks at tests/unit

router_code_coverage and code_qa_check_tests only searched tests/test_litellm,
so the moved router tests no longer counted. The two silent-experiment tests
the audit deleted were the only direct callers of those methods; they are
replaced with tests that assert the forwarded shadow request and the
recursion guard.

* test: move tests/test_litellm integrations and secret_managers into tests/unit

Rename-only. Mirrors the old paths, including the directory conftests
and the prompt and JSON fixtures. Follow-up commits prune and wire them.

* test: prune and repoint the moved integrations tests

Deletes the 7 audited tests a stronger test in the same tree already
covers, imports the TLS sink helpers from their new conftest path, and
restores os.environ after each integrations test. Some presets write
OTEL_EXPORTER_OTLP_HEADERS straight into os.environ, and without the
legacy tree's test ordering that header leaked into the AgentOps tests.

* ci: run the moved integrations tests under their legacy flag

The integrations GHA shard and a new CircleCI job run the integrations
unit selection. secret_managers joins the misc selection.

* docs: point integrations and secret_managers references at tests/unit

* test: make the moved integrations directories packages

* test: keep the Databricks manual e2e runner and fix the SageMaker Nova run path

The Databricks e2e file is a manual script whose main() calls the tests
that were pruned, so pruning them broke the documented run. It is back to
its main version. The SageMaker Nova docstring now points at the file's
real location in tests/local_testing.

* test: keep the job's UNIT_FLAG out of the shard-script tests

---------

Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
2026-09-25 12:57:07 -07:00

291 lines
10 KiB
Python

import base64
import json
import pytest
from litellm.integrations.gitlab.gitlab_client import GitLabClient
# -----------------------------
# Test doubles for HTTP layer
# -----------------------------
class HTTPError(Exception):
def __init__(self, msg, response=None):
super().__init__(msg)
self.response = response
class FakeResponse:
def __init__(
self, *, status_code=200, headers=None, text="", content=b"", json_data=None
):
self.status_code = status_code
self.headers = headers or {}
self.text = text
self.content = content if content else text.encode("utf-8")
self._json_data = json_data
def json(self):
if self._json_data is not None:
return self._json_data
try:
return json.loads(self.text)
except Exception:
raise ValueError("Invalid JSON")
def raise_for_status(self):
if 400 <= self.status_code:
raise HTTPError(f"HTTP {self.status_code}", response=self)
class StubHTTPHandler:
"""
Minimal stub that returns a FakeResponse based on url.
Configure behavior by customizing self.routes in each test.
"""
def __init__(self):
self.routes = {} # url -> FakeResponse or Exception
self.calls = [] # [(method, url, headers)]
def get(self, url, headers=None):
self.calls.append(("GET", url, headers or {}))
resp_or_exc = self.routes.get(url)
if isinstance(resp_or_exc, Exception):
raise resp_or_exc
if resp_or_exc is None:
# default: 404 not found
return FakeResponse(
status_code=404, headers={"content-type": "application/json"}, text="{}"
)
return resp_or_exc
def close(self):
pass
# -----------------------------
# Fixtures / helpers
# -----------------------------
def make_client(**overrides):
cfg = {
"project": "group/sub/repo",
"access_token": "glpat_xxx",
"branch": "develop",
"base_url": "https://gitlab.example.com/api/v4",
}
cfg.update(overrides)
client = GitLabClient(cfg)
# swap in stub http handler
client.http_handler = StubHTTPHandler()
return client
def enc_project(p): # how client encodes project in urls
return p.replace("/", "%2F")
# -----------------------------
# Constructor / config tests
# -----------------------------
def test_init_requires_project_and_token():
with pytest.raises(ValueError, match='project and access_token are required'):
GitLabClient({"project": "p"})
with pytest.raises(ValueError, match='project and access_token are required'):
GitLabClient({"access_token": "t"})
def test_ref_prefers_tag_over_branch():
c = make_client(tag="v1.2.3", branch="main")
assert c.ref == "v1.2.3"
def test_default_branch_is_main_when_absent():
c = make_client(branch=None) # explicit None
assert c.ref == "main"
def test_auth_header_token_default():
c = make_client()
assert c.headers.get("Private-Token") == "glpat_xxx"
assert "Authorization" not in c.headers
def test_auth_header_oauth():
c = make_client(auth_method="oauth")
assert c.headers.get("Authorization") == "Bearer glpat_xxx"
assert "Private-Token" not in c.headers
def test_set_ref_updates_effective_ref():
c = make_client(branch="main")
c.set_ref("feature/x")
assert c.ref == "feature/x"
with pytest.raises(ValueError, match='ref must be a non-empty string'):
c.set_ref("")
# -----------------------------
# get_file_content
# -----------------------------
def test_get_file_content_raw_text_success():
c = make_client(tag="release-1")
raw_url = f"https://gitlab.example.com/api/v4/projects/{enc_project('group/sub/repo')}/repository/files/path%2Fto%2Ffile.prompt/raw?ref=release-1"
c.http_handler.routes[raw_url] = FakeResponse(
status_code=200,
headers={"content-type": "text/plain; charset=utf-8"},
text="Hello world",
)
out = c.get_file_content("path/to/file.prompt")
assert out == "Hello world"
# ensure it used the expected URL
assert c.http_handler.calls[-1][1] == raw_url
def test_get_file_content_raw_binary_utf8_decodes():
c = make_client(branch="main")
raw_url = f"https://gitlab.example.com/api/v4/projects/{enc_project('group/sub/repo')}/repository/files/bin%2Ffile.raw/raw?ref=main"
c.http_handler.routes[raw_url] = FakeResponse(
status_code=200,
headers={"content-type": "application/octet-stream"},
content="προμ pt".encode("utf-8"),
)
out = c.get_file_content("bin/file.raw")
assert out == "προμ pt"
def test_get_file_content_fallbacks_to_json_when_raw_404_and_decodes_base64():
c = make_client(branch="main")
raw_url = f"https://gitlab.example.com/api/v4/projects/{enc_project('group/sub/repo')}/repository/files/prompts%2Ffoo.prompt/raw?ref=main"
json_url = f"https://gitlab.example.com/api/v4/projects/{enc_project('group/sub/repo')}/repository/files/prompts%2Ffoo.prompt?ref=main"
c.http_handler.routes[raw_url] = FakeResponse(
status_code=404, headers={"content-type": "application/json"}, text="{}"
)
encoded = base64.b64encode("FROM JSON".encode("utf-8")).decode("ascii")
c.http_handler.routes[json_url] = FakeResponse(
status_code=200,
headers={"content-type": "application/json"},
json_data={"content": encoded, "encoding": "base64"},
)
out = c.get_file_content("prompts/foo.prompt")
assert out == "FROM JSON"
def test_get_file_content_returns_none_on_404_everywhere():
c = make_client(branch="main")
raw_url = f"https://gitlab.example.com/api/v4/projects/{enc_project('group/sub/repo')}/repository/files/ghost%2Fmissing.prompt/raw?ref=main"
json_url = f"https://gitlab.example.com/api/v4/projects/{enc_project('group/sub/repo')}/repository/files/ghost%2Fmissing.prompt?ref=main"
c.http_handler.routes[raw_url] = FakeResponse(status_code=404)
c.http_handler.routes[json_url] = FakeResponse(status_code=404)
assert c.get_file_content("ghost/missing.prompt") is None
def test_get_file_content_permission_errors_are_mapped():
c = make_client(branch="main")
raw_url = f"https://gitlab.example.com/api/v4/projects/{enc_project('group/sub/repo')}/repository/files/secure%2Ffile.prompt/raw?ref=main"
# raise_for_status will be called, so return 403 response (not an exception from transport)
c.http_handler.routes[raw_url] = FakeResponse(status_code=403)
with pytest.raises(Exception, match="Check your GitLab permissions for project 'group") as ei:
c.get_file_content("secure/file.prompt")
assert "Access denied" in str(ei.value)
c.http_handler.routes[raw_url] = FakeResponse(status_code=401)
with pytest.raises(Exception, match='Authentication failed\\. Check your GitLab token and') as ei2:
c.get_file_content("secure/file.prompt")
assert "Authentication failed" in str(ei2.value)
# -----------------------------
# list_files
# -----------------------------
def test_list_files_filters_by_extension_and_handles_recursive_flag():
c = make_client(branch="dev")
tree_url = f"https://gitlab.example.com/api/v4/projects/{enc_project('group/sub/repo')}/repository/tree?ref=dev&path=prompts&recursive=true"
c.http_handler.routes[tree_url] = FakeResponse(
status_code=200,
headers={"content-type": "application/json"},
json_data=[
{"type": "blob", "path": "prompts/a.prompt"},
{"type": "blob", "path": "prompts/b.txt"},
{"type": "blob", "path": "prompts/sub/c.prompt"},
{"type": "tree", "path": "prompts/sub"},
],
)
files = c.list_files("prompts", ".prompt", recursive=True)
assert files == ["prompts/a.prompt", "prompts/sub/c.prompt"]
def test_list_files_404_returns_empty_list():
c = make_client()
tree_url = f"https://gitlab.example.com/api/v4/projects/{enc_project('group/sub/repo')}/repository/tree?ref=develop&path=does%20not%20exist"
c.http_handler.routes[tree_url] = FakeResponse(status_code=404)
out = c.list_files("does not exist", ".prompt", recursive=False)
assert out == []
def test_list_files_allows_ref_override():
c = make_client(branch="main")
url = f"https://gitlab.example.com/api/v4/projects/{enc_project('group/sub/repo')}/repository/tree?ref=v2&path=prompts"
c.http_handler.routes[url] = FakeResponse(status_code=200, json_data=[])
out = c.list_files("prompts", ".prompt", ref="v2")
assert out == []
# verify correct URL used
assert c.http_handler.calls[-1][1] == url
# -----------------------------
# repo info / branches / metadata / connection
# -----------------------------
def test_get_repository_info_success():
c = make_client()
url = f"https://gitlab.example.com/api/v4/projects/{enc_project('group/sub/repo')}"
c.http_handler.routes[url] = FakeResponse(status_code=200, json_data={"id": 123})
info = c.get_repository_info()
assert info["id"] == 123
def test_test_connection_true_and_false():
c = make_client()
ok_url = (
f"https://gitlab.example.com/api/v4/projects/{enc_project('group/sub/repo')}"
)
c.http_handler.routes[ok_url] = FakeResponse(status_code=200, json_data={"id": 1})
assert c.test_connection() is True
# make it fail next time
c.http_handler.routes[ok_url] = FakeResponse(status_code=500)
assert c.test_connection() is False
def test_get_branches_returns_list():
c = make_client()
url = f"https://gitlab.example.com/api/v4/projects/{enc_project('group/sub/repo')}/repository/branches"
c.http_handler.routes[url] = FakeResponse(
status_code=200, json_data=[{"name": "main"}]
)
branches = c.get_branches()
assert isinstance(branches, list)
assert branches[0]["name"] == "main"
def test_get_file_metadata_parses_headers_and_handles_404():
c = make_client(branch="x")
raw_url = f"https://gitlab.example.com/api/v4/projects/{enc_project('group/sub/repo')}/repository/files/foo%2Fbar.raw/raw?ref=x"
c.http_handler.routes[raw_url] = FakeResponse(
status_code=200,
headers={
"content-type": "application/octet-stream",
"content-length": "1234",
"last-modified": "Thu, 01 Jan 1970 00:00:00 GMT",
},
content=b"\x00",
)
meta = c.get_file_metadata("foo/bar.raw")
assert meta["content_type"] == "application/octet-stream"
assert meta["content_length"] == "1234"
c.http_handler.routes[raw_url] = FakeResponse(status_code=404)
assert c.get_file_metadata("foo/bar.raw") is None