mirror of
https://github.com/NousResearch/hermes-agent.git
synced 2026-04-25 00:51:20 +00:00
d7164603da
Gate function for checking whether a user has explicitly selected a provider via hermes model/setup, auth.json active_provider, or env vars. Used in subsequent commits to prevent unauthorized credential auto-discovery. Follows the pattern from PR #4210. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
78 lines
3 KiB
Python
78 lines
3 KiB
Python
"""Tests for is_provider_explicitly_configured()."""
|
|
|
|
import json
|
|
import os
|
|
import pytest
|
|
|
|
|
|
def _write_config(tmp_path, config: dict) -> None:
|
|
hermes_home = tmp_path / "hermes"
|
|
hermes_home.mkdir(parents=True, exist_ok=True)
|
|
import yaml
|
|
(hermes_home / "config.yaml").write_text(yaml.dump(config))
|
|
|
|
|
|
def _write_auth_store(tmp_path, payload: dict) -> None:
|
|
hermes_home = tmp_path / "hermes"
|
|
hermes_home.mkdir(parents=True, exist_ok=True)
|
|
(hermes_home / "auth.json").write_text(json.dumps(payload, indent=2))
|
|
|
|
|
|
def test_returns_false_when_no_config(tmp_path, monkeypatch):
|
|
monkeypatch.setenv("HERMES_HOME", str(tmp_path / "hermes"))
|
|
(tmp_path / "hermes").mkdir(parents=True, exist_ok=True)
|
|
|
|
from hermes_cli.auth import is_provider_explicitly_configured
|
|
assert is_provider_explicitly_configured("anthropic") is False
|
|
|
|
|
|
def test_returns_true_when_active_provider_matches(tmp_path, monkeypatch):
|
|
monkeypatch.setenv("HERMES_HOME", str(tmp_path / "hermes"))
|
|
_write_auth_store(tmp_path, {
|
|
"version": 1,
|
|
"providers": {},
|
|
"active_provider": "anthropic",
|
|
})
|
|
|
|
from hermes_cli.auth import is_provider_explicitly_configured
|
|
assert is_provider_explicitly_configured("anthropic") is True
|
|
|
|
|
|
def test_returns_true_when_config_provider_matches(tmp_path, monkeypatch):
|
|
monkeypatch.setenv("HERMES_HOME", str(tmp_path / "hermes"))
|
|
_write_config(tmp_path, {"model": {"provider": "anthropic", "default": "claude-sonnet-4-6"}})
|
|
|
|
from hermes_cli.auth import is_provider_explicitly_configured
|
|
assert is_provider_explicitly_configured("anthropic") is True
|
|
|
|
|
|
def test_returns_false_when_config_provider_is_different(tmp_path, monkeypatch):
|
|
monkeypatch.setenv("HERMES_HOME", str(tmp_path / "hermes"))
|
|
_write_config(tmp_path, {"model": {"provider": "kimi-coding", "default": "kimi-k2"}})
|
|
_write_auth_store(tmp_path, {
|
|
"version": 1,
|
|
"providers": {},
|
|
"active_provider": None,
|
|
})
|
|
|
|
from hermes_cli.auth import is_provider_explicitly_configured
|
|
assert is_provider_explicitly_configured("anthropic") is False
|
|
|
|
|
|
def test_returns_true_when_anthropic_env_var_set(tmp_path, monkeypatch):
|
|
monkeypatch.setenv("HERMES_HOME", str(tmp_path / "hermes"))
|
|
monkeypatch.setenv("ANTHROPIC_API_KEY", "sk-ant-api03-realkey")
|
|
(tmp_path / "hermes").mkdir(parents=True, exist_ok=True)
|
|
|
|
from hermes_cli.auth import is_provider_explicitly_configured
|
|
assert is_provider_explicitly_configured("anthropic") is True
|
|
|
|
|
|
def test_claude_code_oauth_token_does_not_count_as_explicit(tmp_path, monkeypatch):
|
|
"""CLAUDE_CODE_OAUTH_TOKEN is set by Claude Code, not the user — must not gate."""
|
|
monkeypatch.setenv("HERMES_HOME", str(tmp_path / "hermes"))
|
|
monkeypatch.setenv("CLAUDE_CODE_OAUTH_TOKEN", "sk-ant-oat01-auto-token")
|
|
(tmp_path / "hermes").mkdir(parents=True, exist_ok=True)
|
|
|
|
from hermes_cli.auth import is_provider_explicitly_configured
|
|
assert is_provider_explicitly_configured("anthropic") is False
|