* docs(spec): #134 unify BigQuery access behind BqAccess facade Brainstorm output for issue #134. Captures: - root cause (incl. correction of the issue's hypothesis about commit 33a9964) - BqAccess facade API + project resolution rules - error contract — typed BqAccessError mapped to HTTP 502 for upstream BQ failures, 500 for deployment/config bugs - migration plan for v2_scan, v2_sample, RemoteQueryEngine - test rewrite eliminating _bq_client_factory injection point - E2E verification protocol on agnes-development as success criterion * docs(spec): #134 revise after first review Incorporates code-reviewer findings: Must-fix: - Add v2_schema (2 copies of INSTALL/LOAD/SECRET dance) to migration scope. - Reframe v2_scan headline: missing try/except around BQ calls is the actual cause of bare 500s, not project resolution (which 33a9964 fixed). - List two more deferred call sites (extractor.py, register_bq_table) with explicit rationale. Important: - Drop billing != data clause from cross_project_forbidden heuristic; rely only on 'serviceusage' substring. billing != data is normal for cross-project setup, was over-classifying. - Split bq_bad_request into _user (400) and _server (502) variants; add sql_origin parameter to translate_bq_error so call sites declare whether SQL contains user input. - Add @functools.cache to BqAccess.from_config; document tests bypass via dependency_overrides. - Replace monkey-patched-classmethod test pattern with BqAccess(client_factory=...) injection at construction time. Cleaner than today's _bq_client_factory and 1:1 migration shape. - Keep BqProjects.data (reviewer assumed registry has source_project; it doesn't). Multi-project explicitly listed as non-goal with note. Nice-to-have: - Add 'Implementation strategy' section: 2 staged commits (bug fix alone is revertable; refactor follows). - Extend E2E protocol to cover all three endpoints, not just /sample. - Note removal of stale docstring at src/remote_query.py:204. * docs(spec): #134 revision 3 — incorporates second-round review Must-fix from second review: - v2_schema split into two migration cases: _fetch_bq_schema translates errors via translate_bq_error; _fetch_bq_table_options preserves its swallow-all 'except Exception → return {}' so /schema doesn't 502 on partition-info failures. - RemoteQueryEngine.__init__ now resolves BqAccess lazily (in _get_bq_client, not in __init__). Without this, ~7 DuckDB-only tests in test_remote_query.py would suddenly fail with not_configured. - translate_bq_error pass-through for BqAccessError is now load-bearing (clause 1, before any Google-API branch). bq.client() raises BqAccessError for bq_lib_missing/auth_failed; without explicit pass-through those fall to 'unknown' and re-raise as bare 500. - Commit 1 now emits the SAME structured response shape as commit 2 to avoid contract churn between commits. - BIGQUERY_PROJECT env-var precedence is BREAKING for env-only deployments — flagged in CHANGELOG ### Changed. Editorial: - sql_origin renamed to bad_request_status with values 'client_error' / 'upstream_error' (clearer about what the parameter actually decides). bq_bad_request_user/_server kinds collapsed to bq_bad_request (400) and bq_upstream_error (502). - CLI (cli/commands/query.py) noted as external RemoteQueryEngine caller; unaffected because new bq_access kwarg has default None. - Added unit/integration tests for the new contracts: test_translate_passes_through_BqAccessError, test_v2_scan_returns_500_on_bq_lib_missing, test_v2_schema_returns_200_with_empty_partition_on_bq_failure, test_resolve_succeeds_after_config_set. - E2E protocol now covers /schema as the fourth endpoint. - Documented functools.cache-doesn't-cache-exceptions semantics and fixture nullcontext-doesn't-close caveat for nested sessions. * docs(spec): #134 revision 4 — incorporates third-round review Third reviewer verdict: 'implementation-ready with two trivial edits'; explicitly noted prior rounds did the heavy lifting. Edits: 1. get_bq_access() module-level function instead of @classmethod @functools.cache from_config. Removes the classmethod-cache stacking footgun (different Python versions wrap differently) and gives FastAPI's dependency introspection a clean function signature. Drops the 'Do not subclass BqAccess' caveat that no longer applies. 2. Commit 1 strategy explicitly: wrap _fetch_bq_sample (v2_sample), _bq_dry_run_bytes + _run_bq_scan (v2_scan), and _fetch_bq_schema (v2_schema strict block). Do NOT touch _fetch_bq_table_options swallow-all in commit 1 — preserved as-is, then migrated (still preserved) in commit 2. All three endpoints emit the same structured body shape so client parsers see one consistent contract throughout the staged rollout. No more half-rolled-out window where /sample is bare 500 while /scan is structured 502. * docs(plan): #134 implementation plan — Phase 1 (atomic bug fix) + Phase 2 (BqAccess refactor) + Phase 3 (verification) Bite-sized TDD tasks. 3 phases, 16 tasks total: Phase 1 (Commit 1) — atomic bug fix across all four v2 endpoints: Tasks 1.1-1.5 wrap _fetch_bq_sample, _bq_dry_run_bytes, _run_bq_scan, _fetch_bq_schema with structured 502/400 try/except. _fetch_bq_table_options preserved untouched. CHANGELOG Fixed entries. Phase 2 (Commit 2) — BqAccess facade extraction + migration: Tasks 2.1-2.5 build connectors/bigquery/access.py bottom-up (BqProjects, BqAccessError, translate_bq_error, default factories, BqAccess class, get_bq_access module-level cached). Task 2.6 adds conftest.py fixture. Tasks 2.7-2.9 migrate v2_scan, v2_sample, v2_schema to BqAccess. Tasks 2.10-2.11 migrate RemoteQueryEngine + tests (lazy bq_access, drop _bq_client_factory). Task 2.12 CHANGELOG Changed BREAKING + Internal. Phase 3 — Verification: 3.1 full pytest. 3.2 squash into two PR-shape commits. 3.3 manual E2E on agnes-development per spec protocol → close #134. Self-review table maps spec sections to implementing tasks; no gaps. * fix(v2): #134 structured 502/400 on BQ errors across /scan, /scan/estimate, /sample, /schema Wraps the BigQuery call sites in v2_scan, v2_sample, and v2_schema (strict block only) with try/except for google.api_core exceptions, translating to HTTPException with a structured body shape: {error, message, details}. Fixes Pavel's report (#134) where these endpoints returned bare HTTP 500 with no body when the SA on agnes-development hit cross-project Forbidden on serviceusage.services.use. Also fixes /sample's missing billing_project fallback (the bug 33a9964 fixed for /scan never landed here). Status code split: - /scan, /scan/estimate: BadRequest -> 400 (bq_bad_request) since SQL is user-derived from req.select/where/order_by. - /sample, /schema: BadRequest -> 502 (bq_upstream_error) since SQL is server-constructed from validated identifiers. - All Forbidden -> 502 with cross_project_forbidden if 'serviceusage' in error message (with hint pointing at data_source.bigquery.billing_project), else bq_forbidden. Body shape matches what the upcoming BqAccess refactor (next commit) will produce, so client-side parsers see one consistent contract throughout the staged rollout. _fetch_bq_table_options preserved exactly as-is — its swallow-all-and-return-empty contract is intentional and survives into the refactor; /schema continues to return 200 with empty partition info when partition queries fail. Outer wraps in scan_endpoint, scan_estimate_endpoint, sample, and schema endpoints exist only to make the test pattern (monkeypatching whole _fetch_* functions) work, and are tagged TODO(#134 Phase 2) for removal once BqAccess centralizes translation. * refactor(bq): #134 BqAccess facade — unify v2_scan, v2_sample, v2_schema, RemoteQueryEngine Extracts the duplicated BigQuery-access pattern (project resolution + client construction + DuckDB-extension session + Google-API error translation) into connectors/bigquery/access.py. Migrates four call sites to use it: - app/api/v2_scan.py — _bq_dry_run_bytes, _run_bq_scan - app/api/v2_sample.py — _fetch_bq_sample - app/api/v2_schema.py — _fetch_bq_schema (strict translation), _fetch_bq_table_options (preserves swallow-all best-effort contract) - src/remote_query.py — RemoteQueryEngine, lazy bq_access kwarg The new module exposes: - BqProjects (frozen dataclass: billing + data project IDs) - BqAccessError (typed exception with HTTP_STATUS class mapping) - BqAccess (facade with injectable client_factory/duckdb_session_factory for tests; defaults call the real google-cloud-bigquery + DuckDB extension) - get_bq_access (module-level @functools.cache; FastAPI Depends target) - translate_bq_error (Google API exception → BqAccessError mapper, with BqAccessError pass-through, 'serviceusage'-substring heuristic for cross_project_forbidden, and bad_request_status param distinguishing user-derived (400) from server-constructed (502) SQL) - _default_client_factory, _default_duckdb_session_factory RemoteQueryEngine.__init__ no longer accepts _bq_client_factory; tests migrate to bq_access=BqAccess(projects, client_factory=...). DuckDB-only RemoteQueryEngine tests need no changes — bq_access defaults to None and get_bq_access() is only invoked on first BQ call (lazy resolution). BqAccessError raised internally is translated to RemoteQueryError( error_type="bq_error") in _get_bq_client to preserve the engine's existing public contract — CLI and /api/query/hybrid callers see no change. Endpoint tests (test_v2_scan, test_v2_scan_estimate, test_v2_sample, test_v2_schema) migrate from monkey-patching whole _fetch_* functions to using the new bq_access fixture in tests/conftest.py — which exercises the REAL translation path through BqAccess + translate_bq_error, closing the test gap flagged in Task 1.1's review. Side-effect behavior change: v2_sample's FROM clause now uses the data project (instance.yaml data_source.bigquery.project), not the conflated billing_project from Phase 1. Documented in CHANGELOG ### Internal. BREAKING for deployments combining BIGQUERY_PROJECT env var with data_source.bigquery.project in instance.yaml — env var now overrides data project too. See CHANGELOG ### Changed. Two known-duplicate BQ-access sites (connectors/bigquery/extractor.py, scripts/duckdb_manager.register_bq_table) explicitly out of scope; tracked as follow-up. Removed stale docstring at the previous src/remote_query.py:204 that referenced scripts.duckdb_manager._create_bq_client as the default BQ client factory (RemoteQueryEngine never actually used that function). Test counts: tests/test_bq_access.py +27 (new), tests/test_v2_*.py + tests/test_remote_query.py migrated to bq_access fixture (counts unchanged or +1-2 per file). Full suite: 2086 passed, 8 pre-existing failures (DB migration tests with unrelated internal_roles DependencyException — not introduced by this PR). * fix(bq_access): translate DefaultCredentialsError to BqAccessError(auth_failed) CI on PR #138 caught: bigquery.Client(...) resolves Application Default Credentials at construction time; without ADC (CI without SA key, dev laptop without 'gcloud auth application-default login') it raises google.auth.exceptions.DefaultCredentialsError synchronously. Pre-fix _default_client_factory only caught ImportError, so DefaultCredentialsError propagated as raw exception — and from production endpoints would surface as bare 500 (the exact failure mode #134 sets out to fix). Now translates to BqAccessError(kind='auth_failed', details.hint='Run gcloud auth application-default login...'). Endpoint catch chain returns HTTP 502 with structured body. Adds unit test test_raises_auth_failed_on_default_credentials_error. Third-round spec review flagged this case in passing; the fix didn't land. CI's auth-less environment surfaced it. * fix(bq_access): get_bq_access() returns sentinel instead of raising when not configured Devin BUG_0001 on PR #138 review: 'get_bq_access() as FastAPI Depends breaks all v2 endpoints for non-BigQuery instances'. Pre-fix: get_bq_access() raised BqAccessError(not_configured) when neither BIGQUERY_PROJECT env nor data_source.bigquery.project was set. Because FastAPI resolves Depends() BEFORE the endpoint body runs, this exception fires during dep-injection — the endpoint's try/except BqAccessError clause never gets a chance to catch it. Result: every v2 request on Keboola-only or CSV-only instances returned bare HTTP 500, even for local-source tables that never touch BigQuery. Fix: get_bq_access() now returns a sentinel BqAccess with empty BqProjects and factories that raise BqAccessError(not_configured) on actual use. Construction succeeds, FastAPI's dep-injection cleanly yields the sentinel, the endpoint runs. The local-source code path in build_sample / build_schema / etc. never calls bq.client() or bq.duckdb_session() (it reads parquet directly), so non-BQ tables return 200 as before. Only when an endpoint actually tries to query BQ (source_type == 'bigquery') does the sentinel raise — and the endpoint's existing except BqAccessError catches it normally, returning structured 502 with hint. Test get_bq_access::test_raises_not_configured_when_neither_set renamed and rewritten to test_returns_sentinel_when_neither_set: asserts BqAccess is returned, then asserts client() and duckdb_session() each raise BqAccessError(not_configured) on call. Test test_does_not_cache_exceptions removed (no longer applicable) and replaced with test_sentinel_is_cached_per_process documenting the operator-restart-on-config-change contract. * docs(spec+plan): #134 genericize customer-specific tokens (CLAUDE.md OSS rule) Devin BUG_0001/0002 round 3 on PR #138: spec and plan docs contained customer-specific deployment hostnames, deployment names, and a GCP project ID that violated CLAUDE.md's vendor-agnostic OSS rule ('Nothing customer-specific belongs in code, configuration defaults, comments, docs, commit messages, PR titles, or PR bodies'). Replacements: agnes-development.groupondev.com -> <your-agnes-host> agnes-development -> <your-dev-instance> prj-grp-dataview-prod-1ff9 -> <your-data-project> s1_session_landings -> <bq_table_id> E2E verification semantics unchanged — operators still run the same four curls + config flip + retry, just substituting their own host / deployment name / project / table. * fix(bq_access): hook get_bq_access.cache_clear into instance_config.reset_cache Devin ANALYSIS_0004 on PR #138: get_bq_access is @functools.cache'd at process level, so it captures BigQuery project IDs at first call and ignores subsequent instance.yaml changes. Pre-Phase-2 the v2 endpoints re-read get_value() on every request, so admin /api/admin/server-config saves (which call instance_config.reset_cache()) hot-reloaded the BQ project. Without this fix, my refactor silently regresses that contract — operators editing instance.yaml via the admin UI would see no effect on v2 endpoints until container restart. instance_config.reset_cache() now also calls connectors.bigquery.access.get_bq_access.cache_clear() (lazy import, swallowed if connectors module isn't loaded — keeps instance_config usable in isolated unit tests). Adds test_instance_config_reset_cache_invalidates_get_bq_access as regression guard. Updates CHANGELOG Internal entry to mention the hot-reload contract + the not-configured sentinel behavior (round-3 fix from Devin BUG_0001 was previously only in commit message). * fix(bq_access): surface not_configured before identifier validation + plan path genericize Devin BUG_0001 + BUG_0002 round 5 on PR #138. BUG_0001 (plan doc): personal filesystem path violated CLAUDE.md vendor-agnostic rule. Replaced with '<worktree-root>' placeholder. BUG_0002 (sentinel error path): when get_bq_access() returns the sentinel BqAccess (BQ not configured), the empty bq.projects.data was reaching validate_quoted_identifier first and raising ValueError -> endpoint mapped to HTTP 400 'unsafe_identifier' instead of structured 500 'not_configured' with hint. Each fetch helper now checks 'if not bq.projects.data: bq.client()' as the first step, which triggers the sentinel's BqAccessError(not_configured). Endpoint catches the typed error and returns HTTP 500 with hint pointing at data_source.bigquery.project. Best-effort _fetch_bq_table_options returns {} silently in this case (preserves the swallow-all contract). * fix(bq_access): classify DuckDB-native exceptions from bigquery_query() via string match Devin ANALYSIS on PR #138 review (latest round). The DuckDB bigquery extension is a C++ plugin making its own HTTP calls — when BQ returns 403, it throws duckdb.IOException with the BQ error embedded as text, not gax.Forbidden. translate_bq_error's isinstance checks would miss these, falling to case 7 → bare 500 in production for v2_scan, v2_sample, and v2_schema (the bigquery_query() paths). Fix: last-resort string-match heuristic before the re-raise. 'Forbidden' / '403' / 'Bad Request' / '400' in the lowercased message classifies via the same kind hierarchy. The 'serviceusage' substring still distinguishes cross_project_forbidden from bq_forbidden. Specific enough that random exceptions without HTTP-error keywords still re-raise. Adds 4 unit tests covering the new heuristic + the 'don't swallow random exceptions' invariant. * chore(release): cut 0.22.0 PR #138 contains issue #134 user-visible behavior changes: - BREAKING: BIGQUERY_PROJECT env var now overrides instance.yaml data_source.bigquery.project for v2 endpoints (previously RemoteQueryEngine billing only). - Fixed: structured 502/400 on /api/v2/sample, /scan, /scan/estimate, /schema when BigQuery raises Forbidden/BadRequest (was bare 500). - Internal: BqAccess facade refactor unifying four duplicate BQ-access call sites; instance_config.reset_cache() now invalidates BqAccess cache too so admin server-config saves hot-reload BQ project IDs. Bumps to 0.22.0 because PR #137 merged first and took 0.21.0.
570 lines
21 KiB
Python
570 lines
21 KiB
Python
"""Tests for RemoteQueryEngine — two-phase BQ registration + DuckDB execution."""
|
|
|
|
from datetime import date
|
|
from decimal import Decimal
|
|
from unittest.mock import MagicMock
|
|
|
|
import duckdb
|
|
import pyarrow as pa
|
|
import pytest
|
|
|
|
from connectors.bigquery.access import BqAccess, BqAccessError, BqProjects
|
|
from src.remote_query import RemoteQueryEngine, RemoteQueryError, _validate_bq_sql, _validate_sql
|
|
|
|
|
|
def _make_bq_access(client):
|
|
"""Build a BqAccess that yields the given mock client. Used by tests that
|
|
inject a fake BQ client into RemoteQueryEngine."""
|
|
return BqAccess(
|
|
BqProjects(billing="test-billing", data="test-data"),
|
|
client_factory=lambda projects: client,
|
|
)
|
|
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# Fixtures
|
|
# ---------------------------------------------------------------------------
|
|
|
|
|
|
@pytest.fixture
|
|
def analytics_conn():
|
|
conn = duckdb.connect()
|
|
conn.execute("CREATE TABLE orders (id INT, date DATE, amount DECIMAL(10,2))")
|
|
conn.execute(
|
|
"INSERT INTO orders VALUES (1, '2026-01-01', 100.0), (2, '2026-01-15', 200.0)"
|
|
)
|
|
yield conn
|
|
conn.close()
|
|
|
|
|
|
def _make_bq_mock(arrow_table, count_value=None):
|
|
"""Build a minimal BQ client mock.
|
|
|
|
First call to client.query() returns a count job, second returns a data job.
|
|
If count_value is None, infer it from arrow_table.num_rows.
|
|
"""
|
|
if count_value is None:
|
|
count_value = arrow_table.num_rows
|
|
|
|
count_arrow = pa.table({"count": pa.array([count_value], type=pa.int64())})
|
|
|
|
count_job = MagicMock()
|
|
count_job.to_arrow.return_value = count_arrow
|
|
|
|
data_job = MagicMock()
|
|
data_job.to_arrow.return_value = arrow_table
|
|
|
|
mock_client = MagicMock()
|
|
mock_client.query.side_effect = [count_job, data_job]
|
|
|
|
return mock_client
|
|
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# TestRemoteQueryEngineRegister
|
|
# ---------------------------------------------------------------------------
|
|
|
|
|
|
class TestRemoteQueryEngineRegister:
|
|
def test_register_bq_success(self, analytics_conn):
|
|
"""Mock BQ client returning an Arrow table; verify view is queryable."""
|
|
arrow_table = pa.table(
|
|
{
|
|
"order_id": pa.array([10, 20, 30], type=pa.int64()),
|
|
"revenue": pa.array([1.0, 2.0, 3.0], type=pa.float64()),
|
|
}
|
|
)
|
|
mock_client = _make_bq_mock(arrow_table)
|
|
|
|
engine = RemoteQueryEngine(
|
|
analytics_conn,
|
|
bq_access=_make_bq_access(mock_client),
|
|
max_bq_registration_rows=500_000,
|
|
)
|
|
|
|
result = engine.register_bq("bq_orders", "SELECT order_id, revenue FROM bq.orders")
|
|
|
|
assert result["alias"] == "bq_orders"
|
|
assert result["rows"] == 3
|
|
assert result["columns"] == ["order_id", "revenue"]
|
|
assert result["memory_mb"] > 0
|
|
|
|
# The alias must be queryable from DuckDB
|
|
rows = analytics_conn.execute("SELECT COUNT(*) FROM bq_orders").fetchone()
|
|
assert rows[0] == 3
|
|
|
|
def test_register_bq_row_limit_exceeded(self, analytics_conn):
|
|
"""COUNT pre-check returns a value exceeding the row limit → RemoteQueryError."""
|
|
arrow_table = pa.table({"x": pa.array([1], type=pa.int64())})
|
|
# count exceeds limit
|
|
mock_client = _make_bq_mock(arrow_table, count_value=1_000_000)
|
|
|
|
engine = RemoteQueryEngine(
|
|
analytics_conn,
|
|
bq_access=_make_bq_access(mock_client),
|
|
max_bq_registration_rows=500_000,
|
|
)
|
|
|
|
with pytest.raises(RemoteQueryError) as exc_info:
|
|
engine.register_bq("bq_big", "SELECT * FROM bq.huge_table")
|
|
|
|
assert exc_info.value.error_type == "row_limit"
|
|
assert exc_info.value.details["count"] == 1_000_000
|
|
|
|
def test_register_bq_invalid_alias(self, analytics_conn):
|
|
engine = RemoteQueryEngine(analytics_conn)
|
|
# Space in alias — invalid identifier
|
|
with pytest.raises(RemoteQueryError) as exc_info:
|
|
engine.register_bq("bad alias", "SELECT 1")
|
|
assert exc_info.value.error_type == "query_error"
|
|
|
|
# Reserved alias — information_schema
|
|
with pytest.raises(RemoteQueryError) as exc_info:
|
|
engine.register_bq("information_schema", "SELECT 1")
|
|
assert exc_info.value.error_type == "query_error"
|
|
|
|
# Valid alias — should not raise from alias validation
|
|
# (will raise later trying to reach BQ without a client, but not from alias check)
|
|
try:
|
|
engine.register_bq("valid_name", "SELECT 1")
|
|
except RemoteQueryError as exc:
|
|
assert exc.error_type != "query_error" or "Invalid alias" not in str(exc)
|
|
except (ImportError, ModuleNotFoundError):
|
|
pass # Expected — no BQ package in test env
|
|
|
|
def test_register_bq_missing_package(self, analytics_conn):
|
|
"""When google-cloud-bigquery is not installed, BqAccess raises
|
|
BqAccessError(bq_lib_missing); the engine must translate that to
|
|
RemoteQueryError."""
|
|
def _missing_lib_factory(projects):
|
|
raise BqAccessError(
|
|
"bq_lib_missing",
|
|
"google-cloud-bigquery is not installed",
|
|
)
|
|
|
|
bq = BqAccess(
|
|
BqProjects(billing="test-billing", data="test-data"),
|
|
client_factory=_missing_lib_factory,
|
|
)
|
|
engine = RemoteQueryEngine(
|
|
analytics_conn,
|
|
bq_access=bq,
|
|
max_bq_registration_rows=500_000,
|
|
)
|
|
|
|
with pytest.raises(RemoteQueryError, match="google-cloud-bigquery"):
|
|
engine.register_bq("bq_alias", "SELECT 1")
|
|
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# TestRemoteQueryEngineExecute
|
|
# ---------------------------------------------------------------------------
|
|
|
|
|
|
class TestRemoteQueryEngineExecute:
|
|
def test_execute_local_only(self, analytics_conn):
|
|
"""Query local table; result dict has correct structure."""
|
|
engine = RemoteQueryEngine(analytics_conn)
|
|
result = engine.execute("SELECT id, amount FROM orders ORDER BY id")
|
|
|
|
assert result["columns"] == ["id", "amount"]
|
|
assert result["row_count"] == 2
|
|
assert result["truncated"] is False
|
|
assert len(result["rows"]) == 2
|
|
# Non-standard types (Decimal) must be serialized to str
|
|
for row in result["rows"]:
|
|
for val in row:
|
|
assert isinstance(val, (int, float, bool, str, type(None)))
|
|
|
|
def test_execute_with_registered_bq(self, analytics_conn):
|
|
"""Manually register an Arrow table, then JOIN it with local orders."""
|
|
bq_arrow = pa.table(
|
|
{
|
|
"id": pa.array([1, 2], type=pa.int64()),
|
|
"label": pa.array(["first", "second"], type=pa.utf8()),
|
|
}
|
|
)
|
|
mock_client = _make_bq_mock(bq_arrow)
|
|
|
|
engine = RemoteQueryEngine(
|
|
analytics_conn,
|
|
bq_access=_make_bq_access(mock_client),
|
|
max_bq_registration_rows=500_000,
|
|
)
|
|
engine.register_bq("bq_labels", "SELECT id, label FROM bq.labels")
|
|
|
|
result = engine.execute(
|
|
"SELECT o.id, o.amount, b.label "
|
|
"FROM orders o JOIN bq_labels b ON o.id = b.id "
|
|
"ORDER BY o.id"
|
|
)
|
|
|
|
assert result["row_count"] == 2
|
|
assert "label" in result["columns"]
|
|
|
|
def test_execute_respects_max_result_rows(self, analytics_conn):
|
|
"""When max_result_rows=1, result is truncated after 1 row."""
|
|
engine = RemoteQueryEngine(analytics_conn, max_result_rows=1)
|
|
result = engine.execute("SELECT id FROM orders ORDER BY id")
|
|
|
|
assert result["row_count"] == 1
|
|
assert result["truncated"] is True
|
|
|
|
def test_execute_invalid_sql(self, analytics_conn):
|
|
"""DROP TABLE must be rejected with RemoteQueryError(error_type='query_error')."""
|
|
engine = RemoteQueryEngine(analytics_conn)
|
|
|
|
with pytest.raises(RemoteQueryError) as exc_info:
|
|
engine.execute("DROP TABLE orders")
|
|
|
|
assert exc_info.value.error_type == "query_error"
|
|
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# _validate_sql unit tests
|
|
# ---------------------------------------------------------------------------
|
|
|
|
|
|
class TestValidateSql:
|
|
@pytest.mark.parametrize(
|
|
"sql",
|
|
[
|
|
"DROP TABLE foo",
|
|
"DELETE FROM foo",
|
|
"INSERT INTO foo VALUES (1)",
|
|
"UPDATE foo SET x=1",
|
|
"ALTER TABLE foo ADD COLUMN y INT",
|
|
"CREATE TABLE foo (x INT)",
|
|
"COPY foo TO '/tmp/out.csv'",
|
|
"ATTACH '/db.duckdb'",
|
|
"DETACH db",
|
|
"LOAD 'extension'",
|
|
"INSTALL httpfs",
|
|
"SELECT read_parquet('/data/file.parquet')",
|
|
"SELECT * FROM '../secret/file'",
|
|
"SELECT 1; DROP TABLE foo",
|
|
],
|
|
)
|
|
def test_blocked_sql(self, sql):
|
|
with pytest.raises(RemoteQueryError) as exc_info:
|
|
_validate_sql(sql)
|
|
assert exc_info.value.error_type == "query_error"
|
|
|
|
@pytest.mark.parametrize(
|
|
"sql",
|
|
[
|
|
"SELECT id FROM orders",
|
|
"WITH cte AS (SELECT 1 AS x) SELECT x FROM cte",
|
|
"select count(*) from orders",
|
|
"with t as (select 1) select * from t",
|
|
],
|
|
)
|
|
def test_allowed_sql(self, sql):
|
|
# Should not raise
|
|
_validate_sql(sql)
|
|
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# _validate_bq_sql unit tests
|
|
# ---------------------------------------------------------------------------
|
|
|
|
|
|
class TestValidateBqSql:
|
|
def test_information_schema_is_allowed(self):
|
|
"""INFORMATION_SCHEMA queries must pass BQ SQL validation."""
|
|
# Should not raise
|
|
_validate_bq_sql("SELECT * FROM dataset.INFORMATION_SCHEMA.COLUMNS")
|
|
|
|
@pytest.mark.parametrize(
|
|
"sql",
|
|
[
|
|
"DROP TABLE x",
|
|
"INSERT INTO x VALUES (1)",
|
|
"DELETE FROM x",
|
|
"UPDATE x SET y=1",
|
|
"ALTER TABLE x ADD COLUMN z INT",
|
|
"CREATE TABLE x (y INT)",
|
|
"TRUNCATE TABLE x",
|
|
"MERGE INTO x USING y ON x.id=y.id WHEN MATCHED THEN UPDATE SET x.a=y.a",
|
|
"SELECT 1; DROP TABLE x",
|
|
],
|
|
)
|
|
def test_blocked_bq_sql(self, sql):
|
|
"""Write/mutation operations must be rejected."""
|
|
with pytest.raises(RemoteQueryError) as exc_info:
|
|
_validate_bq_sql(sql)
|
|
assert exc_info.value.error_type == "query_error"
|
|
|
|
@pytest.mark.parametrize(
|
|
"sql",
|
|
[
|
|
"SELECT * FROM dataset.INFORMATION_SCHEMA.COLUMNS",
|
|
"SELECT id FROM project.dataset.table",
|
|
"WITH cte AS (SELECT 1 AS x) SELECT x FROM cte",
|
|
],
|
|
)
|
|
def test_allowed_bq_sql(self, sql):
|
|
"""Valid read-only BQ queries must pass."""
|
|
# Should not raise
|
|
_validate_bq_sql(sql)
|
|
|
|
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# Hybrid Query BigQuery integration tests (mocked BQ client)
|
|
# ---------------------------------------------------------------------------
|
|
|
|
|
|
class TestHybridQueryBigQuery:
|
|
"""Tests for the two-phase BQ registration + DuckDB execution flow.
|
|
|
|
These test the RemoteQueryEngine's register_bq + execute pipeline
|
|
with a mocked BQ client, simulating the /api/query/hybrid endpoint.
|
|
"""
|
|
|
|
def test_register_bq_creates_temporary_view_in_duckdb(self, analytics_conn):
|
|
"""register_bq parameter creates a temporary view in DuckDB that is
|
|
queryable via the registered alias."""
|
|
arrow_table = pa.table(
|
|
{
|
|
"date": pa.array(["2026-01-01", "2026-01-15"], type=pa.utf8()),
|
|
"views": pa.array([100, 200], type=pa.int64()),
|
|
}
|
|
)
|
|
mock_client = _make_bq_mock(arrow_table)
|
|
|
|
engine = RemoteQueryEngine(
|
|
analytics_conn,
|
|
bq_access=_make_bq_access(mock_client),
|
|
)
|
|
|
|
result = engine.register_bq("traffic", "SELECT date, views FROM bq.traffic")
|
|
assert result["alias"] == "traffic"
|
|
assert result["rows"] == 2
|
|
|
|
# The alias is queryable from DuckDB as a view/table
|
|
rows = analytics_conn.execute("SELECT views FROM traffic ORDER BY views").fetchall()
|
|
assert rows[0][0] == 100
|
|
assert rows[1][0] == 200
|
|
|
|
def test_sql_query_can_join_local_table_with_registered_bq(self, analytics_conn):
|
|
"""SQL query can JOIN local table with registered BQ result."""
|
|
# Local orders table already exists from fixture
|
|
bq_arrow = pa.table(
|
|
{
|
|
"date": pa.array(["2026-01-01", "2026-01-15"], type=pa.utf8()),
|
|
"views": pa.array([50, 75], type=pa.int64()),
|
|
}
|
|
)
|
|
mock_client = _make_bq_mock(bq_arrow)
|
|
|
|
engine = RemoteQueryEngine(
|
|
analytics_conn,
|
|
bq_access=_make_bq_access(mock_client),
|
|
)
|
|
engine.register_bq("traffic", "SELECT date, views FROM bq.traffic")
|
|
|
|
result = engine.execute(
|
|
"SELECT o.id, o.amount, t.views "
|
|
"FROM orders o JOIN traffic t ON o.date = t.date "
|
|
"ORDER BY o.id"
|
|
)
|
|
|
|
assert result["row_count"] == 2
|
|
assert "views" in result["columns"]
|
|
assert "amount" in result["columns"]
|
|
# Verify the join produced correct data
|
|
assert result["rows"][0][2] == 50 # views for 2026-01-01
|
|
assert result["rows"][1][2] == 75 # views for 2026-01-15
|
|
|
|
def test_multiple_register_bq_parameters_simultaneously(self, analytics_conn):
|
|
"""Multiple register_bq parameters work simultaneously — each creates
|
|
an independent view that can be joined together."""
|
|
traffic_arrow = pa.table(
|
|
{
|
|
"date": pa.array(["2026-01-01", "2026-01-15"], type=pa.utf8()),
|
|
"views": pa.array([100, 200], type=pa.int64()),
|
|
}
|
|
)
|
|
revenue_arrow = pa.table(
|
|
{
|
|
"date": pa.array(["2026-01-01", "2026-01-15"], type=pa.utf8()),
|
|
"revenue": pa.array([1000.0, 2000.0], type=pa.float64()),
|
|
}
|
|
)
|
|
|
|
# First call returns count + data for traffic, second for revenue
|
|
traffic_count = pa.table({"count": pa.array([2], type=pa.int64())})
|
|
revenue_count = pa.table({"count": pa.array([2], type=pa.int64())})
|
|
|
|
traffic_count_job = MagicMock()
|
|
traffic_count_job.to_arrow.return_value = traffic_count
|
|
traffic_data_job = MagicMock()
|
|
traffic_data_job.to_arrow.return_value = traffic_arrow
|
|
|
|
revenue_count_job = MagicMock()
|
|
revenue_count_job.to_arrow.return_value = revenue_count
|
|
revenue_data_job = MagicMock()
|
|
revenue_data_job.to_arrow.return_value = revenue_arrow
|
|
|
|
mock_client = MagicMock()
|
|
mock_client.query.side_effect = [
|
|
traffic_count_job, traffic_data_job,
|
|
revenue_count_job, revenue_data_job,
|
|
]
|
|
|
|
engine = RemoteQueryEngine(
|
|
analytics_conn,
|
|
bq_access=_make_bq_access(mock_client),
|
|
)
|
|
|
|
engine.register_bq("traffic", "SELECT date, views FROM bq.traffic")
|
|
engine.register_bq("revenue", "SELECT date, revenue FROM bq.revenue")
|
|
|
|
result = engine.execute(
|
|
"SELECT t.date, t.views, r.revenue "
|
|
"FROM traffic t JOIN revenue r ON t.date = r.date "
|
|
"ORDER BY t.views"
|
|
)
|
|
|
|
assert result["row_count"] == 2
|
|
assert set(result["columns"]) == {"date", "views", "revenue"}
|
|
|
|
def test_invalid_bq_sql_returns_meaningful_error(self, analytics_conn):
|
|
"""Invalid BQ SQL (blocked keyword) returns RemoteQueryError with
|
|
error_type='query_error'."""
|
|
engine = RemoteQueryEngine(analytics_conn)
|
|
|
|
with pytest.raises(RemoteQueryError) as exc_info:
|
|
engine.register_bq("bad", "DROP TABLE important_data")
|
|
|
|
assert exc_info.value.error_type == "query_error"
|
|
assert "blocked" in str(exc_info.value).lower() or "drop" in str(exc_info.value).lower()
|
|
|
|
def test_missing_bigquery_credentials_returns_proper_error(self, analytics_conn):
|
|
"""Missing BigQuery credentials surface as RemoteQueryError, not a crash.
|
|
|
|
Simulated by a BqAccess whose client_factory raises BqAccessError —
|
|
the same shape get_bq_access() would produce on bq_lib_missing /
|
|
not_configured in production.
|
|
"""
|
|
def _missing_lib_factory(projects):
|
|
raise BqAccessError(
|
|
"bq_lib_missing",
|
|
"google-cloud-bigquery is not installed",
|
|
)
|
|
|
|
bq = BqAccess(
|
|
BqProjects(billing="test-billing", data="test-data"),
|
|
client_factory=_missing_lib_factory,
|
|
)
|
|
engine = RemoteQueryEngine(analytics_conn, bq_access=bq)
|
|
|
|
with pytest.raises(RemoteQueryError) as exc_info:
|
|
engine.register_bq("bq_data", "SELECT 1")
|
|
|
|
assert exc_info.value.error_type == "bq_error"
|
|
# Should mention the missing package or config, not a raw traceback
|
|
detail = str(exc_info.value).lower()
|
|
assert "bigquery" in detail or "google" in detail
|
|
|
|
def test_bq_query_error_returns_meaningful_error(self, analytics_conn):
|
|
"""When the BQ client raises an exception during query, the engine
|
|
wraps it in RemoteQueryError with error_type='bq_error'."""
|
|
mock_client = MagicMock()
|
|
mock_client.query.side_effect = Exception("Connection refused")
|
|
|
|
engine = RemoteQueryEngine(
|
|
analytics_conn,
|
|
bq_access=_make_bq_access(mock_client),
|
|
)
|
|
|
|
with pytest.raises(RemoteQueryError) as exc_info:
|
|
engine.register_bq("bq_data", "SELECT 1 FROM dataset.table")
|
|
|
|
assert exc_info.value.error_type == "bq_error"
|
|
assert "connection refused" in str(exc_info.value).lower()
|
|
|
|
def test_bq_count_precheck_failure_returns_bq_error(self, analytics_conn):
|
|
"""When the BQ COUNT(*) pre-check fails, the engine returns
|
|
RemoteQueryError with error_type='bq_error'."""
|
|
mock_client = MagicMock()
|
|
count_job = MagicMock()
|
|
count_job.to_arrow.side_effect = Exception("Permission denied")
|
|
mock_client.query.return_value = count_job
|
|
|
|
engine = RemoteQueryEngine(
|
|
analytics_conn,
|
|
bq_access=_make_bq_access(mock_client),
|
|
)
|
|
|
|
with pytest.raises(RemoteQueryError) as exc_info:
|
|
engine.register_bq("bq_data", "SELECT 1 FROM dataset.table")
|
|
|
|
assert exc_info.value.error_type == "bq_error"
|
|
|
|
def test_bq_row_limit_exceeded_returns_row_limit_error(self, analytics_conn):
|
|
"""When BQ result exceeds max_bq_registration_rows, returns
|
|
RemoteQueryError with error_type='row_limit'."""
|
|
arrow_table = pa.table({"x": pa.array([1], type=pa.int64())})
|
|
mock_client = _make_bq_mock(arrow_table, count_value=999_999)
|
|
|
|
engine = RemoteQueryEngine(
|
|
analytics_conn,
|
|
bq_access=_make_bq_access(mock_client),
|
|
max_bq_registration_rows=500_000,
|
|
)
|
|
|
|
with pytest.raises(RemoteQueryError) as exc_info:
|
|
engine.register_bq("big_data", "SELECT * FROM huge_table")
|
|
|
|
assert exc_info.value.error_type == "row_limit"
|
|
assert exc_info.value.details["count"] == 999_999
|
|
|
|
def test_bq_memory_limit_exceeded_returns_memory_limit_error(self, analytics_conn):
|
|
"""When the Arrow table exceeds max_memory_mb, returns
|
|
RemoteQueryError with error_type='memory_limit'."""
|
|
# Create a table that reports a large nbytes
|
|
big_arrow = pa.table(
|
|
{"x": pa.array([1] * 1000, type=pa.int64())}
|
|
)
|
|
mock_client = _make_bq_mock(big_arrow)
|
|
|
|
engine = RemoteQueryEngine(
|
|
analytics_conn,
|
|
bq_access=_make_bq_access(mock_client),
|
|
max_memory_mb=0.001, # tiny limit → guaranteed exceed
|
|
)
|
|
|
|
with pytest.raises(RemoteQueryError) as exc_info:
|
|
engine.register_bq("big_data", "SELECT * FROM wide_table")
|
|
|
|
assert exc_info.value.error_type == "memory_limit"
|
|
|
|
def test_hybrid_query_execute_error_returns_query_error(self, analytics_conn):
|
|
"""When the final DuckDB SQL execution fails, returns
|
|
RemoteQueryError with error_type='query_error'."""
|
|
engine = RemoteQueryEngine(analytics_conn)
|
|
|
|
with pytest.raises(RemoteQueryError) as exc_info:
|
|
engine.execute("SELECT * FROM nonexistent_table")
|
|
|
|
assert exc_info.value.error_type == "query_error"
|
|
|
|
def test_reserved_alias_rejected(self, analytics_conn):
|
|
"""Reserved aliases (information_schema, main, etc.) are rejected."""
|
|
engine = RemoteQueryEngine(analytics_conn)
|
|
|
|
with pytest.raises(RemoteQueryError) as exc_info:
|
|
engine.register_bq("information_schema", "SELECT 1")
|
|
|
|
assert exc_info.value.error_type == "query_error"
|
|
|
|
def test_invalid_alias_rejected(self, analytics_conn):
|
|
"""Aliases that aren't valid SQL identifiers are rejected."""
|
|
engine = RemoteQueryEngine(analytics_conn)
|
|
|
|
with pytest.raises(RemoteQueryError) as exc_info:
|
|
engine.register_bq("bad alias!", "SELECT 1")
|
|
|
|
assert exc_info.value.error_type == "query_error"
|