Allow read-only PR queue inventory under author profiles while preserving hard review/merge gates

tests/test_llm_agent_sha.py

@@ -118,10 +118,16 @@ class TestShaCannotBypassSelfReview(unittest.TestCase):
                 f"self-merge mutation reached the API: {method} {url}",
             )
 
+    @patch("mcp_server.api_get_all")
     @patch("mcp_server.api_request")
     @patch("mcp_server.get_auth_header", return_value=FAKE_AUTH)
-    def test_review_tool_refuses_self_approval_despite_sha(self, _auth, mock_api):
-        mock_api.side_effect = [{"login": "jcwalker3"}, _pr("jcwalker3")]
+    def test_review_tool_refuses_self_approval_despite_sha(self, _auth, mock_api, mock_get_all):
+        mock_get_all.return_value = [{"number": 9, "title": "PR 9", "state": "open", "head": {"ref": "branch9", "sha": "abc1234"}, "base": {"ref": "master"}, "mergeable": True, "user": {"login": "jcwalker3"}}]
+        mock_api.side_effect = [
+            {"login": "jcwalker3"}, # /user (inventory)
+            {"login": "jcwalker3"}, # /user (eligibility)
+            {"state": "open", "head": {"sha": "abc1234"}, "mergeable": True, "user": {"login": "jcwalker3"}} # /pulls/9 (eligibility)
+        ]
         env = self._env(SHA_WOULD_BE_REVIEWER, "reviewer")
         with patch.dict(os.environ, env, clear=True):
             r = gitea_review_pr(