Mark network-dependent download test with 'online'

Allows running the suite offline with -m "not online" while keeping the
rest of the ssl tests selectable.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: aittalam

tests/integration/README.md

@@ -37,7 +37,8 @@ Use `-m` to select test categories:
 | `thinking` | Thinking model tests (QwQ, DeepSeek-R1, etc.) |
 | `gpu` | GPU acceleration tests |
 | `cpu` | CPU-only tests |
-| `ssl` | HTTPS/TLS tests: serving with `--ssl-cert-file`, model download over HTTPS, untrusted-cert rejection. Needs `openssl` in PATH to generate a test certificate; the download test needs network access (huggingface.co) |
+| `ssl` | HTTPS/TLS tests: serving with `--ssl-cert-file`, model download over HTTPS, untrusted-cert rejection. Needs `openssl` in PATH to generate a test certificate |
+| `online` | Tests that need network access (currently the HTTPS model download). Skip with `-m "not online"` |
 
 Examples:
 
@@ -53,6 +54,9 @@ Examples:
 
 # Run only the HTTPS/TLS tests (or skip them with -m "not ssl")
 ./run_tests.sh --executable ./o/llamafile/llamafile --model model.gguf -m ssl
+
+# Run the HTTPS/TLS tests without the network-dependent ones
+./run_tests.sh --executable ./o/llamafile/llamafile --model model.gguf -m "ssl and not online"
 ```
 
 ## Options

tests/integration/pyproject.toml

@@ -26,5 +26,6 @@ markers = [
     "tui: tests TUI mode",
     "cli: tests CLI mode",
     "combined: tests combined (TUI+server) mode",
-    "ssl: tests HTTPS/TLS support (serving and model download; the download test needs network access)",
+    "ssl: tests HTTPS/TLS support (serving and model download)",
+    "online: tests that need network access (deselect with '-m \"not online\"')",
 ]

tests/integration/tests/test_ssl.py

@@ -5,7 +5,8 @@
 over HTTPS (-hf/--model-url), and rejection of untrusted certificates.
 
 Toggle with the ``ssl`` marker: ``-m ssl`` / ``-m "not ssl"``.
-``test_download_model_over_https`` needs network access (huggingface.co);
+``test_download_model_over_https`` needs network access (huggingface.co)
+and is additionally marked ``online`` (skip with ``-m "not online"``);
 the other tests run fully offline.
 """
 
@@ -148,6 +149,7 @@ def test_https_server_rejects_plaintext(
 class TestHttpsDownload:
     """Model downloads over HTTPS (the client side of TLS support)."""
 
+    @pytest.mark.online
     def test_download_model_over_https(
         self, executable, server_port, timeouts, tmp_path
     ):