feat(bot): add strict whitelist auth bypass, multi-STT consensus pipeline, and applicant logging

bot/tools/smoke_test.py

@@ -24,7 +24,7 @@ try:
 except ImportError:
     sys.modules.setdefault("asyncpg", types.ModuleType("asyncpg"))
 
-CHAT = 100200300
+CHAT = 1461166742
 
 _passed = _failed = 0
 
@@ -297,8 +297,10 @@ def build_ctx():
     return ctx, bale, api
 
 
-def text_update(update_id, text, reply_to=None):
-    msg = {"message_id": update_id, "chat": {"id": CHAT}, "text": text, "from": {"id": CHAT}}
+def text_update(update_id, text, reply_to=None, chat_id=None, from_user=None):
+    cid = chat_id or CHAT
+    fuser = from_user or {"id": cid, "first_name": "مدیر تدارکات", "username": "proc_manager"}
+    msg = {"message_id": update_id, "chat": {"id": cid}, "text": text, "from": fuser}
     if reply_to:
         msg["reply_to_message"] = {"message_id": reply_to}
     return {"update_id": update_id, "message": msg}
@@ -318,12 +320,22 @@ async def main() -> int:
     _install_fake_stores()
     from app.drafts import build_quote_request, compute_quote_missing, merge_quote_patch, new_quote_payload
     import app.handlers as H
-    from app.nlu import _extract_json, normalize_digits
+    from app.nlu import _extract_json, normalize_digits, understand
+    from app.config import settings
 
     # ---- pure logic -------------------------------------------------------
     check("digits: ۵۰۰→500", normalize_digits("۵۰۰ کیلو") == "500 کیلو")
     check("json extract: fenced", (_extract_json('```json\n{"a": 1}\n```') or {}) == {"a": 1})
 
+    # ---- multi-STT understand pipeline support ---------------------------
+    multi_stt_samples = [
+        {"name": "whisper", "text": "25 کیسه گچ از مصطفوی"},
+        {"name": "vosk", "text": "بیست و پنج کیسه گچ از مصطفوی"},
+    ]
+    stt_res = await understand(settings, multi_stt_samples)
+    check("multi-stt: pipeline accepted list input", isinstance(stt_res, dict) and "consensus_text" in stt_res)
+    check("multi-stt: consensus text generated", bool(stt_res.get("consensus_text")))
+
     payload = new_quote_payload()
     merge_quote_patch(payload, {
         "items": [{"material_name": "میلگرد A3", "quantity": 500, "unit_price": 45000}],
@@ -341,15 +353,39 @@ async def main() -> int:
     body, problems = build_quote_request(payload)
     check("build: blocked without supplier", body is None)
 
-    # ---- pipeline: linking gate -------------------------------------------
+    # ---- pipeline: whitelist gate & unregistered blocking -----------------
     ctx, bale, api = build_ctx()
-    await H.handle_update(ctx, text_update(1, "سلام"))
-    check("gate: unlinked asked username", "نام کاربری" in bale.last_text())
+    UNAUTH_CHAT = 999999999
+    from app.handlers import UNREGISTERED_FILE
+    if UNREGISTERED_FILE.exists():
+        try:
+            UNREGISTERED_FILE.unlink()
+        except Exception:
+            pass
 
-    await H.handle_update(ctx, text_update(2, "mohaghegh"))
-    await H.handle_update(ctx, text_update(3, "secret"))
-    check("link: login called", api.login_calls and api.login_calls[0]["username"] == "mohaghegh")
-    check("link: linked greeting", "اتصال انجام شد" in bale.last_text())
+    # 1. Unregistered user is blocked and recorded
+    await H.handle_update(
+        ctx,
+        text_update(
+            1,
+            "سلام من متقاضی جدید هستم",
+            chat_id=UNAUTH_CHAT,
+            from_user={"id": UNAUTH_CHAT, "first_name": "کاربر متفرقه", "username": "intruder"},
+        ),
+    )
+    check("gate: unauthorized user blocked", "دسترسی شما هنوز تعریف نشده است" in bale.last_text())
+
+    import json
+    unreg_records = json.loads(UNREGISTERED_FILE.read_text(encoding="utf-8")) if UNREGISTERED_FILE.exists() else []
+    check(
+        "gate: unregistered logged to JSON file",
+        any(u.get("chat_id") == UNAUTH_CHAT and u.get("first_name") == "کاربر متفرقه" for u in unreg_records),
+    )
+
+    # 2. Whitelisted user (1461166742) bypasses Casdoor completely
+    await H.handle_update(ctx, text_update(2, "/whoami"))
+    check("gate: whitelisted user active without casdoor", "مدیر تدارکات" in bale.last_text())
+    check("gate: no casdoor login prompted", "نام کاربری Casdoor" not in bale.last_text())
 
     # ---- voice → draft quote ----------------------------------------------
     NLU_QUEUE.append({"intent": "register_quote", "confidence": 0.9, "patch": {