Import AITURK IDE 1.0.0-beta.1 from Hermes 63279301; preserve MIT license

tests/hermes_cli/test_remote_spending_gate_contract.py

@@ -0,0 +1,72 @@
+"""Tests for the Remote-Spending gate denial contract (NAS PR #481).
+
+Behavior contracts: the HTTP→exception mapping in
+``hermes_cli.nous_billing._raise_for_error`` and the
+``tui_gateway.server._serialize_billing_error`` envelope the TUI branches on.
+These assert the wire contract (CF-4) — error code, actor, recovery, retry —
+not specific copy.
+"""
+
+import pytest
+
+from hermes_cli.nous_billing import (
+    BillingError,
+    BillingRateLimited,
+    BillingRemoteSpendingRevoked,
+    BillingScopeRequired,
+    BillingSessionRevoked,
+    _raise_for_error,
+)
+
+
+def _raise(status, payload, headers=None):
+    """Run _raise_for_error and return the exception it raises."""
+    with pytest.raises(BillingError) as ei:
+        _raise_for_error(status, payload, headers)
+    return ei.value
+
+
+# ── exception mapping (hermes_cli.nous_billing) ──────────────────────
+
+
+def test_403_remote_spending_revoked_maps_to_typed_exc_with_actor():
+    exc = _raise(403, {"error": "remote_spending_revoked", "recovery": "reconnect", "actor": "admin"})
+    assert isinstance(exc, BillingRemoteSpendingRevoked)
+    assert exc.actor == "admin"
+    assert exc.recovery == "reconnect"
+
+
+def test_401_session_revoked_is_distinct_from_plain_401():
+    revoked = _raise(401, {"error": "session_revoked", "recovery": "login"})
+    assert isinstance(revoked, BillingSessionRevoked)
+    assert revoked.recovery == "login"
+
+    plain = _raise(401, {"error": "invalid_token"})
+    assert not isinstance(plain, BillingSessionRevoked)
+
+
+def test_503_is_rate_limited_not_revoked_and_carries_retry_after():
+    exc = _raise(503, {"error": "temporarily_unavailable"}, {"Retry-After": "30"})
+    assert isinstance(exc, BillingRateLimited)
+    assert not isinstance(exc, BillingRemoteSpendingRevoked)
+    assert exc.retry_after == 30
+
+
+
+
+def test_409_idempotency_conflict_passes_through():
+    exc = _raise(409, {"error": "idempotency_conflict", "message": "same key, different amount"})
+    assert exc.error == "idempotency_conflict"
+
+
+# ── envelope serialization (tui_gateway.server) ──────────────────────
+
+
+def _serialize(status, payload, headers=None):
+    import tui_gateway.server as srv
+
+    return srv._serialize_billing_error(_raise(status, payload, headers))
+
+
+
+