mirror of
https://github.com/bytedance/deer-flow.git
synced 2026-07-09 16:08:31 +00:00
Some checks are pending
Backend Blocking IO / backend-blocking-io (push) Waiting to run
Unit Tests / backend-unit-tests (push) Waiting to run
E2E Tests / e2e-tests (push) Waiting to run
Frontend Unit Tests / frontend-unit-tests (push) Waiting to run
Lint Check / lint-backend (push) Waiting to run
Lint Check / lint-frontend (push) Waiting to run
Replay E2E (front-back contract) / Layer 1 — backend golden (no API key) (push) Waiting to run
Replay E2E (front-back contract) / Layer 2 — full-stack render (no API key) (push) Waiting to run
* feat(persistence): wire alembic migrations + bootstrap schema on startup Closes #3682. Pre-#3658 DBs lack the `runs.token_usage_by_model` column because alembic was never wired up — startup only ran `create_all`, which never ALTERs existing tables. Adds a hybrid bootstrap in FastAPI lifespan (replaces bare `create_all`): - empty DB → create_all + stamp head - legacy DB → stamp 0001_baseline + upgrade head - versioned DB → upgrade head Concurrency: Postgres `pg_advisory_lock` (cross-process); SQLite per-engine `asyncio.Lock` + 30s `PRAGMA busy_timeout` on both prod and alembic engines. Column revisions use `safe_add_column` / `safe_drop_column` idempotent helpers as fallback. Other bits: - 0001 baseline (chain root) + 0002 add `runs.token_usage_by_model` - `include_object` filter so alembic ignores LangGraph checkpointer tables - `make migrate-rev MSG="..."` for authoring new revisions (no migrate/stamp targets — startup is the only execution path) - Tests: three-branch decision, concurrency, #3682 regression, env filter, blocking-IO gate anchor - CLAUDE.md: new "Schema migrations" section * fix(style): fix lint error * perf(persistence): address review feedback on alembic bootstrap Behavioural fixes - _SQLITE_LOCKS now keyed via WeakKeyDictionary so id-reuse after GC cannot return a stale, loop-bound lock and the cache cannot leak one entry per disposed engine. - safe_add_column compares nullable / server_default against the desired column when the name already exists and emits a warning on drift, surfacing manual-ALTER workarounds instead of silently no-op'ing. - _postgres_lock issues SET LOCAL idle_in_transaction_session_timeout=0 before pg_advisory_lock, so managed Postgres cannot kill the idle lock-holding session mid-upgrade and silently release the advisory lock. - legacy branch now backfills missing baseline tables via a restricted create_all (Base.metadata.create_all scoped to _BASELINE_TABLE_NAMES). Restores pre-#1930 upgraders whose channel_* tables were never provisioned, without pre-empting future create_table revisions for newly-added models. Schema parity - runs.token_usage_by_model gains server_default=text("'{}'") in both the ORM model and the 0001_baseline create_table, matching what 0002 adds via ALTER. create_all and alembic-upgrade paths now produce identical column definitions. - New parity test compares Base.metadata.create_all output against a pure alembic upgrade base->head, asserting column-set, nullable, and server_default agree across all tables (normalized through the same helper safe_add_column's drift check uses). Guards - test_baseline_table_names_constant_matches_0001 pins _BASELINE_TABLE_NAMES to 0001_baseline.upgrade()'s actual output -- the constant cannot drift silently when someone edits 0001. - test_legacy_backfill_skips_non_baseline_tables verifies the restricted backfill does not create a phantom table on Base.metadata, modelling a future revision that would otherwise collide on op.create_table. Doc residuals - Three-branch decision table is now consistent across bootstrap.py top docstring, engine.py comment, test module docstring, and CLAUDE.md. - Stale test anchor in blocking_io/test_persistence_engine_sqlite.py docstring now points at the real file. * fix(style): fix lint error * fix(persistence): close drift detection holes - _check_column_drift compares column type via a family equivalence allowlist ({JSON, JSONB}). Catches the wrong-type workaround `TEXT NOT NULL DEFAULT '{}'` that previously slipped through silently, while keeping Postgres JSON/JSONB dialect reflection quiet. Reflected and desired type are also echoed in every drift warning's payload for operator triage. - Extract _escape_url_for_alembic so bootstrap._alembic_safe_url and scripts/_autogen_revision share the ConfigParser % escape rule instead of duplicating it. - backend/README.md: add `make migrate-rev MSG=...` to Commands and a Schema Migrations section per the repo's README/CLAUDE.md sync policy. - test_base_to_dict.py: scope the test ORM class to an isolated MetaData so the create_all-vs-alembic parity test (added in the previous commit) is not polluted by the phantom table on the full pytest session.
91 lines
3.7 KiB
Python
91 lines
3.7 KiB
Python
"""Tests for the ``include_object`` filter used by ``migrations/env.py``.
|
|
|
|
LangGraph checkpointer tables (``checkpoints`` and friends) live alongside
|
|
DeerFlow's own tables in the same database. Alembic must NEVER emit DDL for
|
|
them or a future ``alembic revision --autogenerate`` would propose
|
|
``drop_table('checkpoints')`` whenever LangGraph's tables are reflected from
|
|
a live DB.
|
|
|
|
The filter is the only line of defence between an honest autogenerate run
|
|
and a destructive revision. It lives in ``_env_filters.py`` so it can be unit
|
|
tested without alembic's import-time machinery.
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
import sqlalchemy as sa
|
|
|
|
from deerflow.persistence.migrations._env_filters import (
|
|
LANGGRAPH_OWNED_TABLES,
|
|
include_object,
|
|
)
|
|
|
|
|
|
def _table(name: str) -> sa.Table:
|
|
return sa.Table(name, sa.MetaData())
|
|
|
|
|
|
def test_filter_excludes_langgraph_checkpoint_tables() -> None:
|
|
for owned in (
|
|
"checkpoints",
|
|
"checkpoint_blobs",
|
|
"checkpoint_writes",
|
|
"checkpoint_migrations",
|
|
):
|
|
assert include_object(_table(owned), owned, "table", True, None) is False
|
|
|
|
|
|
def test_filter_includes_deerflow_tables() -> None:
|
|
for owned in ("runs", "threads_meta", "feedback", "users", "channel_connections"):
|
|
assert include_object(_table(owned), owned, "table", True, None) is True
|
|
|
|
|
|
def test_filter_excludes_indexes_on_langgraph_tables() -> None:
|
|
# An Index whose parent table is LangGraph-owned must also be filtered out;
|
|
# otherwise autogenerate would emit drop_index against tables alembic does
|
|
# not own.
|
|
md = sa.MetaData()
|
|
parent = sa.Table("checkpoints", md, sa.Column("id", sa.Integer, primary_key=True))
|
|
idx = sa.Index("ix_checkpoints_anything", parent.c.id)
|
|
assert include_object(idx, idx.name, "index", True, None) is False
|
|
|
|
|
|
def test_filter_includes_indexes_on_deerflow_tables() -> None:
|
|
md = sa.MetaData()
|
|
parent = sa.Table("runs", md, sa.Column("run_id", sa.String, primary_key=True))
|
|
idx = sa.Index("ix_runs_something", parent.c.run_id)
|
|
assert include_object(idx, idx.name, "index", True, None) is True
|
|
|
|
|
|
def test_langgraph_owned_tables_set_is_complete() -> None:
|
|
# Pin the explicit set so an inadvertent removal -- e.g. someone simplifying
|
|
# the filter -- requires a test diff that surfaces the change.
|
|
assert LANGGRAPH_OWNED_TABLES == frozenset(
|
|
{
|
|
"checkpoints",
|
|
"checkpoint_blobs",
|
|
"checkpoint_writes",
|
|
"checkpoint_migrations",
|
|
}
|
|
)
|
|
|
|
|
|
def test_env_module_wires_busy_timeout_for_sqlite() -> None:
|
|
"""Regression for the cross-process bootstrap pitfall: alembic spawns its
|
|
own engine inside ``env.py::run_migrations_online`` and that engine does
|
|
NOT inherit PRAGMAs from the production engine. Without an event listener
|
|
here, its connections would use the default 5s busy_timeout and racy
|
|
multi-process bootstrap would fail with ``database is locked`` instead of
|
|
waiting for the file lock.
|
|
|
|
We check the source rather than execute env.py (which would try to drive
|
|
alembic on import) so this test stays a pure parity check.
|
|
"""
|
|
from pathlib import Path # noqa: PLC0415
|
|
|
|
env_path = Path(__file__).resolve().parents[1] / "packages/harness/deerflow/persistence/migrations/env.py"
|
|
src = env_path.read_text(encoding="utf-8")
|
|
assert "PRAGMA busy_timeout=30000" in src or "PRAGMA busy_timeout = 30000" in src, (
|
|
"env.py must set busy_timeout on its alembic-spawned engine; without it, cross-process bootstrap on SQLite fails fast instead of waiting for the file lock"
|
|
)
|
|
assert 'listens_for(connectable.sync_engine, "connect")' in src, "busy_timeout must be wired via an event listener so EVERY connection alembic opens gets the PRAGMA, not just one initial probe"
|