test_content_gate.py

tests/test_content_gate.py

1. """content_gate.py: frontmatter flags, line patterns, remove vs redact, fail-closed."""
2. import json
3. import shutil
4. import tempfile
5. import unittest
6. from pathlib import Path
8. from helpers import load, run
11. class ContentGateTest(unittest.TestCase):
12. def setUp(self):
13. self.dir = Path(tempfile.mkdtemp(prefix="bm-cg-"))
14. (self.dir / "clean.md").write_text("# Clean\n\nNothing to see.\n")
15. (self.dir / "flagged.md").write_text("---\nprivate: true\n---\n# Flagged\n")
16. (self.dir / "visibility.md").write_text("---\nvisibility: 'Private'\n---\n# V\n")
17. (self.dir / "marker.md").write_text("# Mixed\n\nkeep this\nnot this %% bm:private %%\nkeep too\n")
18. (self.dir / "ssn.txt").write_text("id 123-45-6789\n")
19. (self.dir / "binary.md").write_bytes(b"\xff\xfe not utf-8\n")
20. (self.dir / "photo.png").write_bytes(b"\x89PNG")
22. def tearDown(self):
23. shutil.rmtree(self.dir, ignore_errors=True)
25. def gate(self, mode):
26. return load("content_gate.py", {"BM_STAGING_DIR": str(self.dir), "BM_GATE_MODE": mode})
28. def names(self):
29. return sorted(p.name for p in self.dir.iterdir())
31. def report(self):
32. return json.loads((self.dir / "gate-report.json").read_text())
34. def test_remove_mode(self):
35. code, _ = run(self.gate("remove"))
36. self.assertEqual(code, 0)
37. self.assertEqual(self.names(), ["clean.md", "gate-report.json", "photo.png"])
38. r = self.report()
39. self.assertEqual(r["passed"], 1)
40. self.assertEqual(len(r["removed"]), 5)
42. def test_redact_mode(self):
43. run(self.gate("redact"))
44. self.assertNotIn("flagged.md", self.names()) # frontmatter still removes
45. self.assertNotIn("visibility.md", self.names())
46. marker = (self.dir / "marker.md").read_text()
47. self.assertIn("keep this", marker)
48. self.assertIn("keep too", marker)
49. self.assertIn("[[bm-gated]]", marker)
50. self.assertNotIn("not this", marker)
51. self.assertIn("[[bm-gated]]", (self.dir / "ssn.txt").read_text())
52. self.assertEqual(sorted(self.report()["redacted"]), ["marker.md", "ssn.txt"])
54. def test_txt_files_are_scanned(self):
55. run(self.gate("remove"))
56. self.assertNotIn("ssn.txt", self.names())
58. def test_undecodable_file_is_pulled_not_crashed_on(self):
59. code, _ = run(self.gate("remove"))
60. self.assertEqual(code, 0)
61. self.assertNotIn("binary.md", self.names())
62. self.assertIn("binary.md (unreadable, fail-closed)", self.report()["removed"])
64. def test_unknown_mode_refuses(self):
65. code, _ = run(self.gate("remvoe"))
66. self.assertEqual(code, 2)
67. self.assertIn("flagged.md", self.names()) # nothing touched
68. self.assertFalse((self.dir / "gate-report.json").exists())
70. def test_placeholder_path_refuses(self):
71. mod = load("content_gate.py", {"BM_STAGING_DIR": "/Users/CHANGEME/cowork-staging/staging",
72. "BM_GATE_MODE": "remove"})
73. code, _ = run(mod)
74. self.assertEqual(code, 2)
77. if __name__ == "__main__":
78. unittest.main()