From 24aa0477a7fdd8e78b17c0ea9b2b5a62d9465402 Mon Sep 17 00:00:00 2001
From: Evgeny Kiriyak <224408464+evkir@users.noreply.github.com>
Date: Thu, 30 Jul 2026 20:18:24 +0200
Subject: [PATCH] test(core): cover red-team merge into the exploit phase
 result

---
 tests/unit/test_redteam_agent.py | 52 ++++++++++++++++++++++++++++++++
 1 file changed, 52 insertions(+)

diff --git a/tests/unit/test_redteam_agent.py b/tests/unit/test_redteam_agent.py
index fc3469a..2b2842a 100644
--- a/tests/unit/test_redteam_agent.py
+++ b/tests/unit/test_redteam_agent.py
@@ -192,3 +192,55 @@ def test_orchestrator_runs_red_team_when_enabled():
         result = orch._run_planned_redteam(session)
 
     assert result["channels"] == 2
+
+
+def test_exploit_phase_merges_red_team_result():
+    """The red-team result has to reach the phase output, not just the agent.
+
+    `_run_planned_redteam` returning a report means nothing if the exploit
+    phase drops it: the report is what the scorecard and the session KB read.
+    """
+    from unittest.mock import patch
+
+    from cyberai.core.orchestrator import Orchestrator
+
+    orch = Orchestrator(CyberAIConfig(use_planned_redteam=True))
+    orch.audit = MagicMock()
+    session = ScanSession(target="t.local")
+    session.kb_set("plan", PLAN)
+
+    exploit_agent = MagicMock()
+    exploit_agent.run.return_value = {"attack_paths": []}
+
+    with (
+        patch.object(Orchestrator, "_client_for", return_value=MagicMock()),
+        patch("cyberai.agents.exploit.agent.ExploitAgent", return_value=exploit_agent),
+        patch.object(Orchestrator, "_run_planned_redteam", return_value={"channels": 2}),
+    ):
+        result = orch._run_exploit(session)
+
+    assert result["redteam"] == {"channels": 2}
+    assert session.kb_get("exploit")["redteam"] == {"channels": 2}
+    # The exploit agent's own keys survive the merge.
+    assert result["attack_paths"] == []
+
+
+def test_exploit_phase_omits_the_key_when_red_team_is_off():
+    from unittest.mock import patch
+
+    from cyberai.core.orchestrator import Orchestrator
+
+    orch = Orchestrator(CyberAIConfig())
+    orch.audit = MagicMock()
+    session = ScanSession(target="t.local")
+
+    exploit_agent = MagicMock()
+    exploit_agent.run.return_value = {"attack_paths": []}
+
+    with (
+        patch.object(Orchestrator, "_client_for", return_value=MagicMock()),
+        patch("cyberai.agents.exploit.agent.ExploitAgent", return_value=exploit_agent),
+    ):
+        result = orch._run_exploit(session)
+
+    assert "redteam" not in result