Odysseus v1.0

tests/test_cookbook_helpers.py

@@ -0,0 +1,40 @@
+import pytest
+from fastapi import HTTPException
+
+from routes.cookbook_helpers import _safe_env_prefix, _validate_gpus, _validate_ssh_port
+
+
+def test_safe_env_prefix_accepts_quoted_venv_path():
+    assert (
+        _safe_env_prefix("source '~/vllm-env/bin/activate'")
+        == '[ -f "$HOME/vllm-env/bin/activate" ] && source "$HOME/vllm-env/bin/activate" || true'
+    )
+
+
+def test_safe_env_prefix_leaves_compound_conda_prefix_unchanged():
+    prefix = 'eval "$(conda shell.bash hook)" && conda activate qwen35'
+    assert _safe_env_prefix(prefix) == prefix
+
+
+def test_safe_env_prefix_rejects_freeform_shell():
+    with pytest.raises(HTTPException):
+        _safe_env_prefix("echo ok; curl https://example.invalid")
+
+
+def test_safe_env_prefix_accepts_powershell_activation_path():
+    assert (
+        _safe_env_prefix("& 'C:\\Users\\me\\venv\\Scripts\\Activate.ps1'")
+        == "& 'C:\\Users\\me\\venv\\Scripts\\Activate.ps1'"
+    )
+
+
+def test_validate_ssh_port_rejects_shell_payload():
+    with pytest.raises(HTTPException):
+        _validate_ssh_port("22; touch /tmp/pwned")
+    assert _validate_ssh_port("2222") == "2222"
+
+
+def test_validate_gpus_accepts_indexes_only():
+    assert _validate_gpus("0,1,2") == "0,1,2"
+    with pytest.raises(HTTPException):
+        _validate_gpus("0; rm -rf /")