litellm/tests/unit/router_strategy/test_router_routing_plugins.py
yuneng-jiang a11a93f44a
test: move tests/test_litellm core utils, routing, responses, caching and rust_bridge into tests/unit (#43199)
* ci: run the unit_selection.sh shard files on every event instead of only fork pull requests

Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>

* ci: rename fork-flag to unit-flag now that it applies on every event

* test: move tests/test_litellm root and small trees into tests/unit

Pure renames, no content changes. Follow-up commits in this PR fix
references, merge the three files that already existed in tests/unit,
keep live-provider tests in tests/test_litellm and wire CI.

* test: carry tests/test_litellm conftest isolation into tests/unit

Callback lists, routing fallbacks, cached HTTP clients, logger state, AWS,
proxy-URL and keychain env, and session-end client cleanup now reset for
unit tests too. The environment isolation owns its MonkeyPatch so a test's
own monkeypatch is undone before the model-cost teardown runs.

* test: merge, split and prune the moved root and small-tree tests

Merge batches/test_batch_utils.py and the chat_completions and messages
dispatch tests into the files that already existed in tests/unit. Keep
the live Gemini interactions tests, the async image-fetch format test and
the OpenAI embedding scorer test in tests/test_litellm since they need
real network or keys. Put test_router.py under tests/unit/test_router so
the existing package no longer shadows it. Delete eight tests the audit
found superseded by stronger ones kept in this move.

* ci: run the moved root and small-tree tests under their legacy flags

Add the misc and responses-caching-types flags to unit_selection.sh and
CircleCI, extend enterprise-routing and mcp-integration, and point the
legacy GHA shards, Makefile, redis-compat workflow, merge smoke manifest
and change classifier at the new paths.

* test: make the new tests/unit directories packages

tests/unit/test_package_layout.py requires every directory to carry an
__init__.py, and without one the moved and retained
test_litellm_responses_bridge.py modules collide on import.

* test: scope the unit socket block to tests/unit in shared sessions

The GHA shards collect the legacy test-path and the unit selection in one
pytest session. The unit conftest's loopback-only block leaked into legacy
modules that reach the network at import. The legacy conftest now lifts the
restriction at collect and setup time, and the unit conftest re-applies it
when collecting its own modules.

* test: move tests/test_litellm/llms into tests/unit/llms

Rename-only. Moves the provider tests and the fine-tuning fixtures they
load, mirroring the old paths. Follow-up commits merge, split and wire them.

* test: merge, split and prune the moved llms tests

Merges the Databricks chat transformation tests into the existing unit
file, keeps the tests that need real keys or the network in
tests/test_litellm, deletes the audited tests a stronger unit test
already covers, and points imports at tests.unit.llms.

* ci: run the moved llms tests under their legacy flags

The Vertex AI and All Other Providers shards keep their legacy test-path
for the retained files and add the llm-vertex-ai and llm-other-providers
unit selections. CircleCI gets matching unit jobs.

* test: make the tests/unit/llms directories packages

Adds __init__.py to the moved dirs and drops the legacy ones whose
directories no longer hold tests.

* test: drop script runners and path hacks the llms split left dangling

The __main__ runners in the split openai_like files and the Databricks e2e
runner called tests that now live in the other half of the split or were
deleted. The retained legacy halves also no longer need sys.path edits.

* test: give the shard-script tests their own GITHUB_OUTPUT

They only passed where the runner set it. The CircleCI unit job's env
allowlist drops it, so the script's redirect failed there.

* test: point the router and module-deletion checks at tests/unit

router_code_coverage and code_qa_check_tests only searched tests/test_litellm,
so the moved router tests no longer counted. The two silent-experiment tests
the audit deleted were the only direct callers of those methods; they are
replaced with tests that assert the forwarded shadow request and the
recursion guard.

* test: move tests/test_litellm integrations and secret_managers into tests/unit

Rename-only. Mirrors the old paths, including the directory conftests
and the prompt and JSON fixtures. Follow-up commits prune and wire them.

* test: prune and repoint the moved integrations tests

Deletes the 7 audited tests a stronger test in the same tree already
covers, imports the TLS sink helpers from their new conftest path, and
restores os.environ after each integrations test. Some presets write
OTEL_EXPORTER_OTLP_HEADERS straight into os.environ, and without the
legacy tree's test ordering that header leaked into the AgentOps tests.

* ci: run the moved integrations tests under their legacy flag

The integrations GHA shard and a new CircleCI job run the integrations
unit selection. secret_managers joins the misc selection.

* docs: point integrations and secret_managers references at tests/unit

* test: make the moved integrations directories packages

* test: keep the Databricks manual e2e runner and fix the SageMaker Nova run path

The Databricks e2e file is a manual script whose main() calls the tests
that were pruned, so pruning them broke the documented run. It is back to
its main version. The SageMaker Nova docstring now points at the file's
real location in tests/local_testing.

* test: move tests/test_litellm core utils, routing, responses, caching and rust_bridge into tests/unit

Rename-only. Mirrors the old paths, including fixtures, the stubtest config
and the native-route wheel script. Two files that collide with existing unit
files are merged in a follow-up commit.

* test: merge, prune and repoint the moved core, routing, responses, caching and rust_bridge tests

Merges the two files that collided with existing unit files, folding the
legacy extra case into test_is_chat_completion_cached_dict, and deletes the
9 audited tests a stronger test in the same file already covers.

Keeps what needs the network in tests/test_litellm: test_tokenizers pulls a
tokenizer from the Hugging Face hub, and the gpt2 and r50k_base tokenizer
cases download their BPE files. The unit core_utils conftest points
TIKTOKEN_CACHE_DIR at litellm's bundled encodings so the rest never depend on
import order to stay offline, and FakeSecretVault moves to a shared module
so both trees can build it.

* ci: run the moved core, routing, responses, caching and rust_bridge tests under their flags

core_utils gets a core-utils flag and CircleCI job, and its GHA shard keeps
the legacy path for the retained network tests. router_utils and
router_strategy join enterprise-routing, responses joins
responses-caching-types (minus responses/mcp, which mcp-integration owns),
caching joins caching-local and rust_bridge joins misc. The redis-compat,
test-rust, stubtest and merge-smoke paths follow the move.

* docs: point the Rust crate references at tests/unit

* test: make the moved core, routing and rust_bridge directories packages

* test: keep the no-loop DualCache batch_get_cache regression test

It runs the sync path outside any event loop, which the inside-loop test
cannot, so a change that picks the Redis client by loop state would only
show up there.

* test: keep the job's UNIT_FLAG out of the shard-script tests

* fix(url_utils): block 192.0.0.0/24 on every Python patch release

* test: move the new budget limiter tests into tests/unit/router_strategy

* test: move the new sentry scrubbing tests into tests/unit/litellm_core_utils

* test: move the new zerobus tests into tests/unit/integrations

* test: make tests/unit/integrations/zerobus a package

* test: load litellm's own tiktoken cache setup once instead of resetting it per test

---------

Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
2026-09-25 17:10:13 -07:00

330 lines
13 KiB
Python

"""
Tests for Router(plugins=[...]) -- a pipeline of routing plugins that run
before the routing decision is made, narrowing the candidate deployment pool.
Discussion: https://github.com/BerriAI/litellm/discussions/32168
"""
import pytest
from litellm import Router
from litellm.types.router import RoutingContext
class LanguageDetector:
async def run(self, context: RoutingContext) -> RoutingContext:
context.signals["language-detector"] = {"lang": "en"}
return context
class DomainClassifier:
async def run(self, context: RoutingContext) -> RoutingContext:
context.signals["domain-classifier"] = {"domain": "coding", "confidence": 0.93}
return context
class TenantPolicy:
ALLOWED_PROVIDERS = {"acme-corp": {"openai", "anthropic"}}
async def run(self, context: RoutingContext) -> RoutingContext:
tenant = context.metadata.get("tenant", "default")
allowed = self.ALLOWED_PROVIDERS.get(tenant, {"openai", "anthropic", "self-hosted"})
context.candidate_models = [m for m in context.candidate_models if m.split("/")[0] in allowed]
context.signals["tenant-policy"] = {"tenant": tenant, "allowed_providers": sorted(allowed)}
return context
class BudgetPolicy:
COST_CAP_PER_TOKEN = 0.000005
COST_BY_MODEL = {
"openai/gpt-4o-mini": 0.00000015,
"anthropic/claude-haiku-4-5": 0.000001,
"openai/gpt-5.1": 0.00003,
}
async def run(self, context: RoutingContext) -> RoutingContext:
context.candidate_models = [
m for m in context.candidate_models if self.COST_BY_MODEL.get(m, 0) <= self.COST_CAP_PER_TOKEN
]
context.signals["budget-policy"] = {"daily_limit": 100}
return context
class BlockEverything:
async def run(self, context: RoutingContext) -> RoutingContext:
context.candidate_models = []
return context
class MessageRecorder:
"""Records what each plugin pass was handed, then blocks so the request stops there."""
def __init__(self):
self.seen = []
async def run(self, context: RoutingContext) -> RoutingContext:
self.seen.append(list(context.raw_messages))
context.candidate_models = []
return context
def _smart_router_model_list():
return [
{
"model_name": "smart-router",
"litellm_params": {"model": "openai/gpt-4o-mini", "mock_response": "cheap openai"},
"model_info": {"tags": ["openai"]},
},
{
"model_name": "smart-router",
"litellm_params": {"model": "anthropic/claude-haiku-4-5", "mock_response": "anthropic"},
"model_info": {"tags": ["anthropic"]},
},
{
"model_name": "smart-router",
"litellm_params": {"model": "openai/gpt-5.1", "mock_response": "expensive openai"},
"model_info": {"tags": ["openai"]},
},
{
"model_name": "smart-router",
"litellm_params": {"model": "ollama/llama-3-70b", "mock_response": "self hosted"},
"model_info": {"tags": ["self-hosted"]},
},
]
@pytest.mark.asyncio
async def test_routing_plugin_pipeline_matches_jeann2013_e2e_scenario():
"""
https://github.com/BerriAI/litellm/discussions/32168#discussioncomment-17608820
language plugin -> domain classifier -> tenant policy (openai+anthropic only)
-> budget policy (drops over-cap models) -> Router picks the best remaining
candidate. Must never land on the self-hosted or over-budget deployment.
"""
router = Router(
model_list=_smart_router_model_list(),
plugins=[LanguageDetector(), DomainClassifier(), TenantPolicy(), BudgetPolicy()],
)
response = await router.acompletion(
model="smart-router",
messages=[{"role": "user", "content": "Write a function to reverse a linked list."}],
metadata={"tenant": "acme-corp"},
)
# response.model is the bare model name (litellm strips the provider/ prefix
# on the response), so compare against bare names rather than litellm_params.model
routed_model = response.model
assert routed_model in {"gpt-4o-mini", "claude-haiku-4-5"}
assert routed_model not in {"llama-3-70b", "gpt-5.1"}
@pytest.mark.asyncio
async def test_routing_plugin_narrowing_to_zero_candidates_raises():
"""A plugin narrowing to nothing is a policy decision -- must raise, not silently
fall back to the unfiltered pool (that would defeat the policy it enforces)."""
router = Router(
model_list=_smart_router_model_list(),
plugins=[BlockEverything()],
)
with pytest.raises(ValueError, match="No deployments left after routing-plugin filtering"):
await router.acompletion(
model="smart-router",
messages=[{"role": "user", "content": "hi"}],
)
def test_sync_get_available_deployment_rejects_configured_plugins():
"""
Router.completion() (and any other sync entry point) resolves deployments via
the synchronous get_available_deployment(), which never runs the routing-plugin
pipeline. Silently allowing that would let a deny-all policy plugin be bypassed
just by calling the sync API -- must fail closed instead.
"""
router = Router(model_list=_smart_router_model_list(), plugins=[TenantPolicy()])
with pytest.raises(ValueError, match="routing-plugin pipeline"):
router.get_available_deployment(model="smart-router", messages=[{"role": "user", "content": "hi"}])
def test_sync_router_completion_rejects_configured_plugins():
"""End-to-end: Router.completion() (the sync API) must not silently skip plugins either."""
router = Router(model_list=_smart_router_model_list(), plugins=[TenantPolicy()])
with pytest.raises(ValueError, match="routing-plugin pipeline"):
router.completion(model="smart-router", messages=[{"role": "user", "content": "hi"}])
@pytest.mark.asyncio
async def test_async_completion_with_unsupported_strategy_rejects_configured_plugins():
"""
async_get_available_deployment() itself delegates to the synchronous selector
for routing strategies outside {simple-shuffle, usage-based-routing-v2,
cost-based-routing, latency-based-routing, least-busy} -- e.g. "usage-based-routing"
(v1, not v2) -- which would silently bypass the plugin pipeline on the async path too.
"""
router = Router(
model_list=_smart_router_model_list(),
plugins=[TenantPolicy()],
routing_strategy="usage-based-routing",
)
with pytest.raises(ValueError, match="routing-plugin pipeline"):
await router.acompletion(model="smart-router", messages=[{"role": "user", "content": "hi"}])
@pytest.mark.asyncio
async def test_prompt_management_model_still_runs_the_plugin_pipeline():
"""
A prompt-management model routes through its own factory, which picked the deployment
on the synchronous path. Plugins never run there, so the guard turned every such request
into an error message about the caller's own API choice, on an async call the caller made
correctly. It also read the in-flight counts with a blocking call inside the event loop.
"""
router = Router(
model_list=[
{
"model_name": "cached-claude",
"litellm_params": {
"model": "anthropic_cache_control_hook/claude-sonnet-5",
"prompt_id": "cache-points",
},
}
],
routing_strategy="least-busy",
plugins=[BlockEverything()],
)
with pytest.raises(ValueError, match="No deployments left after routing-plugin filtering"):
await router.acompletion(
model="cached-claude",
messages=[{"role": "user", "content": "hi"}],
litellm_call_id="lit-7039",
)
@pytest.mark.asyncio
async def test_prompt_management_plugins_see_the_callers_own_messages():
"""
The prompt-management factory picks its deployment with a placeholder message, which was
harmless while that pick ran on the synchronous path (plugins never ran there at all). Now
that the pick runs the plugin pipeline, a plugin that classifies request content would score
the placeholder instead of the conversation, and the narrowing it produces decides which
deployments the real call is allowed to use.
"""
recorder = MessageRecorder()
router = Router(
model_list=[
{
"model_name": "cached-claude",
"litellm_params": {
"model": "anthropic_cache_control_hook/claude-sonnet-5",
"prompt_id": "cache-points",
},
}
],
routing_strategy="least-busy",
plugins=[recorder],
)
messages = [{"role": "user", "content": "wire me $40,000 to account 12345"}]
with pytest.raises(ValueError, match="No deployments left after routing-plugin filtering"):
await router.acompletion(
model="cached-claude",
messages=messages,
litellm_call_id="lit-7039",
)
assert recorder.seen == [messages]
@pytest.mark.asyncio
async def test_router_without_plugins_is_unaffected():
"""Regression guard: a Router with no `plugins` configured behaves exactly as before."""
router = Router(
model_list=[
{
"model_name": "smart-router",
"litellm_params": {"model": "openai/gpt-4o-mini", "mock_response": "hi"},
},
],
)
response = await router.acompletion(
model="smart-router",
messages=[{"role": "user", "content": "hi"}],
)
assert response.choices[0].message.content == "hi"
@pytest.mark.asyncio
async def test_run_routing_plugins_narrows_candidates_and_records_signals():
"""Unit-level check of _run_routing_plugins in isolation, independent of acompletion."""
router = Router(
model_list=_smart_router_model_list(),
plugins=[LanguageDetector(), DomainClassifier(), TenantPolicy(), BudgetPolicy()],
)
request_kwargs = {"metadata": {"tenant": "acme-corp"}}
context = await router._run_routing_plugins(
model="smart-router",
request_kwargs=request_kwargs,
messages=[{"role": "user", "content": "hi"}],
)
assert context.candidate_models == ["openai/gpt-4o-mini", "anthropic/claude-haiku-4-5"]
assert context.signals["domain-classifier"]["domain"] == "coding"
assert request_kwargs["metadata"]["_routing_plugin_candidate_models"] == context.candidate_models
def test_filter_by_routing_plugin_candidates_narrows_and_raises_when_empty():
"""Unit-level check of _filter_by_routing_plugin_candidates in isolation."""
router = Router(model_list=_smart_router_model_list(), plugins=[TenantPolicy()])
healthy_deployments = router.model_list
narrowed = router._filter_by_routing_plugin_candidates(
healthy_deployments=healthy_deployments,
request_kwargs={"metadata": {"_routing_plugin_candidate_models": ["openai/gpt-4o-mini"]}},
)
assert [d["litellm_params"]["model"] for d in narrowed] == ["openai/gpt-4o-mini"]
with pytest.raises(ValueError, match="No deployments left after routing-plugin filtering"):
router._filter_by_routing_plugin_candidates(
healthy_deployments=healthy_deployments,
request_kwargs={"metadata": {"_routing_plugin_candidate_models": ["nonexistent/model"]}},
)
def test_json_default_stable_id_is_stable_across_instances():
"""generate_model_id's json.dumps `default=` fallback must not embed an object's
memory address (e.g. plain str() on an object with no custom __repr__ falls back
to object.__repr__'s `<module.Class object at 0x...>`) -- that would make the
deployment id churn on every process restart for any deployment whose
litellm_params contain a live plugin instance."""
router = Router(model_list=_smart_router_model_list())
assert router._json_default_stable_id(LanguageDetector()) == router._json_default_stable_id(LanguageDetector())
assert router._json_default_stable_id(LanguageDetector()) != router._json_default_stable_id(TenantPolicy())
def testgenerate_model_id_is_stable_when_litellm_params_contain_a_plugin_instance():
"""End-to-end: a deployment id built from litellm_params containing a routing
plugin instance (e.g. complexity_router_config.plugins) must be identical across
separate calls, not just non-crashing."""
router = Router(model_list=_smart_router_model_list())
litellm_params = {
"model": "auto_router/complexity_router",
"complexity_router_config": {"plugins": [LanguageDetector()]},
}
id1 = router.generate_model_id("smart-router", litellm_params)
id2 = router.generate_model_id(
"smart-router",
{
"model": "auto_router/complexity_router",
"complexity_router_config": {"plugins": [LanguageDetector()]},
},
)
assert id1 == id2