test(notebooks): cover snapshot failures and malformed HTTP responses

Author: voyti

deepnote_toolkit/notebooks/yaml_loader.py

@@ -11,11 +11,12 @@
 
 
 class _CoreSchemaLoader(_BaseLoader):  # type: ignore[misc,valid-type]
-    """A safe loader that resolves plain scalars by the YAML 1.2 core schema.
+    """A safe loader for the scalar conventions used by `.deepnote` files.
 
     `.deepnote` files are written as YAML 1.2, where `No`, `on`, `12:30` and
     `2026-08-17` are strings. PyYAML's YAML 1.1 rules read them as booleans,
-    numbers and dates.
+    numbers and dates. Leading-zero scalars intentionally remain strings, unlike
+    the core schema. Merge keys are treated as literal keys, not YAML 1.1 merges.
     """
 
     yaml_implicit_resolvers: dict[str, Any] = {}

docs/streamlit-apps.md

@@ -22,7 +22,7 @@ if st.button("Run"):
         elif result.snapshot_status == "pending":
             st.info("The run finished, but its outputs are not available yet.")
         elif (table := result.first_dataframe()) is not None:
-            st.dataframe(table.records())
+            st.dataframe(table.records(include_index=False))
         else:
             st.write(result.text())
     except RunnerError as error:
@@ -63,7 +63,8 @@ without a valid saved choice starts empty. Unselected single selects and partial
 selected date ranges are omitted from the returned dictionary; disable your Run
 button until required fields are present. An omitted input uses the notebook's
 value according to the API. Stale multi-select choices produce a warning. Invalid
-slider bounds/defaults and duplicate variable names raise `ValueError`.
+slider bounds/defaults and duplicate variable names raise `ValueError`. File inputs
+render as text paths; this helper does not upload files.
 
 `runner.info().matches_inputs(document.inputs)` compares static input definitions:
 unique names, types, single/multiple selection, options, and slider bounds/steps.

tests/unit/test_notebooks_runners.py

@@ -534,3 +534,37 @@ def credentials(*, timeout):
             session=session(),
         ).run({})
     assert not http.calls
+
+
+@pytest.mark.parametrize("status", [403, 503])
+def test_snapshot_poll_error_policy(http, runner, status):
+    add_run(http, run_response(snapshotStatus="pending"), create=True)
+    http.get(
+        "https://api.deepnote.com/v2/runs/run-1?snapshotDelivery=blocks", status=status
+    )
+    if status == 403:
+        with pytest.raises(RunnerError, match="403"):
+            runner.run({})
+        assert len(http.calls) == 2
+    else:
+        add_run(http, run_response(snapshotStatus="available", snapshotBlocks=[]))
+        assert runner.run({}).snapshot_status == "available"
+        assert len(http.calls) == 3
+
+
+@pytest.mark.parametrize("body", ["not-json", "[]", "null"])
+def test_invalid_json_response_is_a_runner_error(http, body):
+    http.get("http://127.0.0.1:8787/api/info", body=body)
+    with pytest.raises(RunnerError, match="invalid JSON|non-object"):
+        DeepnoteLocalRunner(session=session()).info()
+
+
+def test_same_origin_redirect_is_also_refused(http, runner):
+    http.post(
+        "https://api.deepnote.com/v2/runs",
+        status=307,
+        headers={"Location": "https://api.deepnote.com/other"},
+    )
+    with pytest.raises(RunnerError, match="Refused a redirect"):
+        runner.run({})
+    assert len(http.calls) == 1