feat(policy,claude_sdk,cli,config_loader): pretooluse policy rules per agent, tool call audit, sibling imports for config

tests/test_policy.py

@@ -0,0 +1,71 @@
+from pathlib import Path
+
+import pytest
+
+from beaver_gateway.core.policy import Deny, ToolCall, brief, evaluate, hook_output
+
+
+def call(tool: str, **tool_input) -> ToolCall:
+    return ToolCall(
+        tool=tool,
+        input=tool_input,
+        agent="a",
+        kind="master",
+        conversation="c1",
+        cwd=Path("/vault"),
+    )
+
+
+def test_path_resolves_relative_against_cwd():
+    assert call("Write", file_path="мета/бобер/x.md").path() == Path(
+        "/vault/мета/бобер/x.md"
+    )
+    assert call("Write", file_path="/vault/a/../b.md").path() == Path("/vault/b.md")
+    assert call("Write", file_path="../../etc/passwd").path() == Path("/etc/passwd")
+    assert call("Bash", command="ls").path() is None
+
+
+def test_mcp_split():
+    assert call("mcp__firefly__store_transaction").mcp == (
+        "firefly",
+        "store_transaction",
+    )
+    assert call("Write").mcp is None
+
+
+async def test_first_deny_wins_and_async_rules_work():
+    seen = []
+
+    def allow(c):
+        seen.append("allow")
+
+    async def deny(c):
+        return Deny(reason="no")
+
+    def never(c):
+        raise AssertionError
+
+    verdict = await evaluate((allow, deny, never), call("Write"))
+    assert verdict == Deny(reason="no")
+    assert seen == ["allow"]
+
+
+async def test_raising_rule_fails_closed():
+    def boom(c):
+        raise RuntimeError("x")
+
+    verdict = await evaluate((boom,), call("Write"))
+    assert verdict is not None and "boom" in verdict.reason
+
+
+def test_hook_output_shapes():
+    assert hook_output(None) == {}
+    out = hook_output(Deny(reason="r"))
+    assert out["hookSpecificOutput"]["permissionDecision"] == "deny"
+    assert out["hookSpecificOutput"]["permissionDecisionReason"] == "r"
+
+
+def test_brief_prefers_path_then_command_and_truncates():
+    assert brief({"file_path": "/v/x.md", "content": "a" * 999}) == "/v/x.md"
+    assert brief({"command": "ls -la"}) == "ls -la"
+    assert len(brief({"q": "a" * 999})) == 240