feat: support governed Glas execution

tests/test_credentials.py

@@ -8,9 +8,9 @@ def test_explicit_env_var_short_circuits(monkeypatch):
     assert resolve_openrouter_api_key() == "sk-explicit"
 
 
-def test_falls_back_to_bao_kv_when_no_approle(monkeypatch):
+def test_falls_back_to_bao_kv_when_no_approle(monkeypatch, tmp_path):
     monkeypatch.delenv("OPENROUTER_API_KEY", raising=False)
-    monkeypatch.delenv("REIN_OPENWEIGHTS_APPROLE_DIR", raising=False)
+    monkeypatch.setenv("REIN_OPENWEIGHTS_APPROLE_DIR", str(tmp_path / "missing"))
 
     with patch("rein_openweights.credentials._bao", return_value="sk-from-vault") as bao:
         key = resolve_openrouter_api_key()
@@ -44,9 +44,30 @@ def test_approle_lane_exchanges_token_before_kv_read(monkeypatch, tmp_path):
     assert calls[1][0] == "kv"
 
 
-def test_returns_none_when_bao_fails(monkeypatch):
+def test_returns_none_when_bao_fails(monkeypatch, tmp_path):
+    monkeypatch.delenv("OPENROUTER_API_KEY", raising=False)
+    monkeypatch.setenv("REIN_OPENWEIGHTS_APPROLE_DIR", str(tmp_path / "missing"))
+
+
+def test_uses_standard_approle_directory_by_default(monkeypatch, tmp_path):
     monkeypatch.delenv("OPENROUTER_API_KEY", raising=False)
     monkeypatch.delenv("REIN_OPENWEIGHTS_APPROLE_DIR", raising=False)
+    role_id = tmp_path / "role_id"
+    secret_id = tmp_path / "secret_id"
+    role_id.write_text("role-123")
+    secret_id.write_text("secret-456")
+    monkeypatch.setattr("rein_openweights.credentials._DEFAULT_APPROLE_DIR", tmp_path)
+
+    calls = []
+
+    def fake_bao(*args, env=None):
+        calls.append(args)
+        return "vault-token" if args[0] == "write" else "sk-from-vault"
+
+    with patch("rein_openweights.credentials._bao", side_effect=fake_bao):
+        assert resolve_openrouter_api_key() == "sk-from-vault"
+
+    assert [call[0] for call in calls] == ["write", "kv"]
 
     from rein_openweights.credentials import CredentialError
 

tests/test_runner.py

@@ -73,3 +73,32 @@ def test_run_task_fails_fast_without_credential(tmp_path):
 
     assert result.ok is False
     assert "credential" in result.reason
+
+
+def test_run_task_refuses_unknown_tool_profile_before_credential_lookup(tmp_path):
+    repo = _init_repo(tmp_path)
+    task_file = _task_file(tmp_path, repo)
+
+    with patch("rein_openweights.runner.resolve_openrouter_api_key") as resolve:
+        result = run_task(task_file, tool_profile="unsafe-shell", report_to_hub=False)
+
+    assert result.ok is False
+    assert result.reason == "unsupported tool profile: unsafe-shell"
+    assert result.tool_profile == "unsafe-shell"
+    resolve.assert_not_called()
+
+
+def test_run_task_normalizes_provider_failure(tmp_path):
+    repo = _init_repo(tmp_path)
+    task_file = _task_file(tmp_path, repo)
+
+    with (
+        patch("rein_openweights.runner.resolve_openrouter_api_key", return_value="sk-test"),
+        patch("rein_openweights.runner.run_loop", side_effect=RuntimeError("provider down")),
+    ):
+        result = run_task(task_file, report_to_hub=False)
+
+    assert result.ok is False
+    assert result.committed is False
+    assert result.reason == "session failed: provider down"
+    assert result.model