Add transport policy config

tests/test_plan.py

@@ -3,6 +3,7 @@ from __future__ import annotations
 import unittest
 from unittest.mock import patch
 
+from ampbrowser.config import AppConfig
 from ampbrowser.plan import plan_url
 from ampbrowser.transports import TransportStatus
 
@@ -60,6 +61,34 @@ class PlanUrlTest(unittest.TestCase):
         self.assertTrue(plan.requires_consent)
         self.assertIn("can start", plan.prompt)
 
+    def test_disabled_transport_is_blocked_by_policy(self) -> None:
+        config = AppConfig(transport_modes={"i2p": "disabled"})
+
+        plan = plan_url("http://example.b32.i2p/", config=config)
+
+        self.assertEqual("disabled", plan.policy_mode)
+        self.assertEqual("blocked by policy: i2p disabled", plan.action)
+        self.assertFalse(plan.requires_consent)
+
+    def test_adopt_only_transport_does_not_prompt_to_start(self) -> None:
+        status = TransportStatus(
+            transport="tor",
+            installed=True,
+            running=False,
+            endpoint="socks5://127.0.0.1:9050",
+            adoptable=False,
+            manage_supported=True,
+            note="Tor SOCKS proxy",
+        )
+        config = AppConfig(transport_modes={"tor": "adopt"})
+
+        with patch("ampbrowser.plan.inspect_transport", return_value=status):
+            plan = plan_url("http://example.onion/", config=config)
+
+        self.assertEqual("adopt", plan.policy_mode)
+        self.assertEqual("blocked by policy: tor mode is adopt", plan.action)
+        self.assertFalse(plan.requires_consent)
+
 
 if __name__ == "__main__":
     unittest.main()