Import AITURK IDE 1.0.0-beta.1 from Hermes 63279301; preserve MIT license

tests/gateway/test_approvals_command.py

@@ -0,0 +1,59 @@
+"""Gateway contract and live dispatch for /approvals."""
+
+from types import SimpleNamespace
+from unittest.mock import AsyncMock, MagicMock, patch
+
+import pytest
+import yaml
+
+import gateway.run as gateway_run
+from gateway.config import Platform
+from gateway.platforms.base import MessageEvent
+from gateway.session import SessionSource
+
+
+def _event(text: str = "/approvals") -> MessageEvent:
+    return MessageEvent(
+        text=text,
+        source=SessionSource(
+            platform=Platform.TELEGRAM,
+            user_id="user-1",
+            chat_id="chat-1",
+            chat_type="dm",
+        ),
+    )
+
+
+def _runner():
+    runner = object.__new__(gateway_run.GatewayRunner)
+    runner.config = SimpleNamespace(platforms={})
+    runner.hooks = MagicMock(loaded_hooks=[])
+    runner.hooks.emit = AsyncMock(return_value=[])
+    runner._running_agents = {}
+    runner._get_or_create_gateway_honcho = lambda _key: (None, None)
+    runner._is_user_authorized = lambda _source: True
+    runner.session_store = SimpleNamespace(get_or_create_session=lambda _source: None)
+    return runner
+
+
+@pytest.mark.asyncio
+async def test_gateway_rejects_non_admin_persistent_approval_change():
+    runner = _runner()
+    runner.config = SimpleNamespace(
+        platforms={
+            Platform.TELEGRAM: SimpleNamespace(
+                extra={
+                    "allow_admin_from": ["admin-1"],
+                    "user_allowed_commands": ["approvals"],
+                }
+            )
+        }
+    )
+
+    with patch("hermes_cli.approval_mode.run_approval_mode_command") as run:
+        output = await runner._handle_approvals_command(_event("/approvals off"))
+
+    assert "admin" in output.lower()
+    run.assert_not_called()
+
+