Re-audit fixes: typing-indicator regression test, Deno proxy tests in CI

.github/workflows/ci.yml

@@ -37,6 +37,13 @@ jobs:
 
       - run: pytest -q
 
+      # Deno-тесты прокси (proxy/proxy_test.ts — без внешних импортов, офлайн).
+      - uses: denoland/setup-deno@v2
+        with:
+          deno-version: v2.x
+
+      - run: deno test proxy/proxy_test.ts
+
       # проверка requirements.txt на известные CVE в зафиксированных версиях —
       # requirements-dev.txt (pytest/pyflakes/pip-audit) не сканируем: это
       # dev-инструменты, не попадающие в рантайм-образ (см. Dockerfile/.dockerignore)

README.md

@@ -131,7 +131,7 @@ pytest -v
 
 Test files live in `tests/` and mirror the module split: `test_lumen_formatting.py`, `test_lumen_security.py`, `test_lumen_router_config.py`, `test_lumen_typing_pace.py`, `test_lumen_images.py`, and `test_lumen_model_speed.py` each test their matching module directly, while `test_bot_admin.py`, `test_bot_commands.py`, `test_bot_routes.py`, `test_bot_state.py`, `test_bot_streaming.py`, `test_bot_tiktok.py`, `test_bot_transport.py`, and `test_bot_tts.py` cover `bot.py` by domain (shared fakes live in `bot_test_helpers.py`). `conftest.py` stubs `BOT_TOKEN`/`GEMINI_API_KEY`/`BOT_LOG_PATH` so the suite needs no real secrets.
 
-CI (`.github/workflows/ci.yml`) runs `pyflakes` + `pytest` + `pip-audit` on every push and pull request; a successful run triggers `sync-to-hf.yml`, which mirrors the commit to the Hugging Face Space.
+CI (`.github/workflows/ci.yml`) runs `pyflakes` + `pytest` + `pip-audit` + `deno test` on every push and pull request; a successful run triggers `sync-to-hf.yml`, which mirrors the commit to the Hugging Face Space.
 
 ## Known limitations
 

tests/test_bot_state.py

@@ -4,6 +4,7 @@ test_bot_state.py — Состояние и утилиты: хранилище,
 Выделено из test_bot.py (P2 аудита); общие фейки — в bot_test_helpers.py.
 """
 from types import SimpleNamespace
+from unittest.mock import AsyncMock
 from unittest.mock import MagicMock
 from unittest.mock import patch
 import asyncio
@@ -502,6 +503,16 @@ def test_ordinary_question_gets_no_file_notice(rate_guard_setup, monkeypatch):
     assert "[Служебная пометка" not in prompt
 
 
+def test_message_core_sends_typing_indicator(rate_guard_setup, monkeypatch):
+    # Регрессия: вызов шёл в bot.send_chat_action (такой функции нет) вместо bot.bot.send_chat_action — индикатор "печатает" молча не показывался.
+    message = rate_guard_setup()
+    message.text = "столица Венгрии?"
+    fake_bot = SimpleNamespace(send_chat_action=AsyncMock())
+    monkeypatch.setattr(bot, "bot", fake_bot)
+    _run_core_capturing_prompt(message, monkeypatch)
+    fake_bot.send_chat_action.assert_awaited_once_with(chat_id=123, action="typing")
+
+
 def test_media_question_with_attached_file_gets_no_file_notice(rate_guard_setup, monkeypatch):
     message = rate_guard_setup()
     message.text = "что на фото?"