hermes-agent/tests/hermes_cli/test_auth_provider_gate.py

105 lines
3.5 KiB
Python

"""Tests for is_provider_explicitly_configured()."""
import json
import pytest
def _write_config(tmp_path, config: dict) -> None:
hermes_home = tmp_path / "hermes"
hermes_home.mkdir(parents=True, exist_ok=True)
import yaml
(hermes_home / "config.yaml").write_text(yaml.dump(config))
def _write_auth_store(tmp_path, payload: dict) -> None:
hermes_home = tmp_path / "hermes"
hermes_home.mkdir(parents=True, exist_ok=True)
(hermes_home / "auth.json").write_text(json.dumps(payload, indent=2))
@pytest.fixture(autouse=True)
def _clean_anthropic_env(monkeypatch):
"""Strip Anthropic env vars so CI secrets don't leak into tests."""
for key in ("ANTHROPIC_API_KEY", "ANTHROPIC_TOKEN", "CLAUDE_CODE_OAUTH_TOKEN"):
monkeypatch.delenv(key, raising=False)
def test_ambient_pool_source_does_not_count_as_explicit(tmp_path, monkeypatch):
"""gh_cli-seeded Copilot pool entries are ambient, not explicit config (#56974)."""
monkeypatch.setenv("HERMES_HOME", str(tmp_path / "hermes"))
monkeypatch.delenv("COPILOT_GITHUB_TOKEN", raising=False)
monkeypatch.delenv("GH_TOKEN", raising=False)
monkeypatch.delenv("GITHUB_TOKEN", raising=False)
_write_auth_store(tmp_path, {
"version": 1,
"providers": {},
"active_provider": None,
"credential_pool": {
"copilot": [{
"id": "abc123",
"source": "gh_cli",
"auth_type": "api_key",
"access_token": "ghu_sometoken",
}],
},
})
from hermes_cli.auth import is_provider_explicitly_configured
assert is_provider_explicitly_configured("copilot") is False
def test_returns_true_when_moa_reference_slot_uses_provider(tmp_path, monkeypatch):
"""MoA advisor slots are explicit provider selections for auth gating."""
monkeypatch.setenv("HERMES_HOME", str(tmp_path / "hermes"))
_write_config(tmp_path, {
"model": {"provider": "openai-codex", "default": "gpt-5.5"},
"moa": {
"presets": {
"default": {
"reference_models": [
{"provider": "anthropic", "model": "claude-opus-4-8"},
{"provider": "opencode-go", "model": "glm-5.2"},
],
"aggregator": {"provider": "openai-codex", "model": "gpt-5.5"},
}
}
},
})
_write_auth_store(tmp_path, {"version": 1, "providers": {}, "active_provider": "openai-codex"})
from hermes_cli.auth import is_provider_explicitly_configured
assert is_provider_explicitly_configured("anthropic") is True
def test_stale_env_pool_entry_does_not_count_when_var_unset(tmp_path, monkeypatch):
"""An env-seeded pool entry left in auth.json after the env var was removed
must not mark the provider configured (#55790): the picker showed removed
providers forever because the record existed even though no secret resolves."""
monkeypatch.setenv("HERMES_HOME", str(tmp_path / "hermes"))
monkeypatch.delenv("DEEPSEEK_API_KEY", raising=False)
_write_auth_store(tmp_path, {
"version": 1,
"providers": {},
"active_provider": None,
"credential_pool": {
"deepseek": [{
"id": "aaa111",
"source": "env:DEEPSEEK_API_KEY",
"auth_type": "api_key",
}],
},
})
from hermes_cli.auth import is_provider_explicitly_configured
assert is_provider_explicitly_configured("deepseek") is False