P1: drop docs/README duplicate and dead dict, EN requirements, fish warn-once, SSRF scheme guard, proxy rotation lock (AUD-N-001, AUD-B-002, AUD-H-002, AUD-F-001, AUD-D-003, AUD-E-004)

bot.py

@@ -255,6 +255,9 @@ _TELEGRAM_PROXY_FALLBACKS = [
 ]
 _TELEGRAM_PROXY_CANDIDATES: list[str] = [TELEGRAM_API_BASE_URL] + [u for u in _TELEGRAM_PROXY_FALLBACKS if u != TELEGRAM_API_BASE_URL]
 _telegram_proxy_idx = 0  # индекс текущего активного прокси в _TELEGRAM_PROXY_CANDIDATES
+# Ротация мутирует два глобала сразу — под локом, иначе два concurrent-сбоя
+# уводят индекс на два шага и пропускают кандидата (AUD-E-004).
+_proxy_rotation_lock = asyncio.Lock()
 
 # НАЙДЕНО ПРИ ОТЛАДКЕ (11-12 августа 2026, реальный инцидент): TikWM стабильно
 # отвечает HTTP 403 с ПУСТЫМ телом на запросы с IP HF Spaces (см. историю правок
@@ -581,12 +584,13 @@ async def _rotate_telegram_proxy() -> bool:
     целевой сервер (TelegramAPIServer) "запечён" в сессию при её создании, поэтому
     здесь она пересоздаётся заново, указывая на новый кандидат."""
     global TELEGRAM_API_BASE_URL, _telegram_proxy_idx
-    if len(_TELEGRAM_PROXY_CANDIDATES) < 2:
-        return False
-    _telegram_proxy_idx = (_telegram_proxy_idx + 1) % len(_TELEGRAM_PROXY_CANDIDATES)
-    new_url = _TELEGRAM_PROXY_CANDIDATES[_telegram_proxy_idx]
-    old_url = TELEGRAM_API_BASE_URL
-    TELEGRAM_API_BASE_URL = new_url
+    async with _proxy_rotation_lock:
+        if len(_TELEGRAM_PROXY_CANDIDATES) < 2:
+            return False
+        _telegram_proxy_idx = (_telegram_proxy_idx + 1) % len(_TELEGRAM_PROXY_CANDIDATES)
+        new_url = _TELEGRAM_PROXY_CANDIDATES[_telegram_proxy_idx]
+        old_url = TELEGRAM_API_BASE_URL
+        TELEGRAM_API_BASE_URL = new_url
     log.warning('[telegram] Switching to fallback proxy: %s -> %s', old_url, new_url)
     if bot is not None:
         old_session = bot.session
@@ -1003,15 +1007,8 @@ def _classify_model_error(status: int | None, text: str) -> str:
 # в system_prompt.py) — тексты НЕ должны упоминать "модели" во множественном
 # числе или "подбор другой модели": для пользователя есть только Lumen, а
 # переключения внутри — деталь реализации.
-# Сами тексты живут в lumen_lang.py (ключи model_err_*), здесь — совместимые
-# алиасы и тонкая обёртка с языком (lang="en" — дефолт для вызовов без чата,
-# в тестах в том числе).
-_MODEL_ERROR_MESSAGES: dict[str, str] = {
-    "rate_limit": _lang_t(DEFAULT_LANG, "model_err_rate_limit"),
-    "paid": _lang_t(DEFAULT_LANG, "model_err_paid"),
-    "forbidden": _lang_t(DEFAULT_LANG, "model_err_forbidden"),
-    "unavailable": _lang_t(DEFAULT_LANG, "model_err_unavailable"),
-}
+# Сами тексты живут в lumen_lang.py (ключи model_err_*), здесь — тонкая
+# обёртка с языком (lang="en" — дефолт для вызовов без чата, в тестах в том числе).
 _MODEL_ERROR_FALLBACK_MSG = _lang_t(DEFAULT_LANG, "model_err_fallback")
 
 def _model_error_text(kind: str, lang: str = DEFAULT_LANG) -> str:
@@ -4952,6 +4949,9 @@ async def _handle_message_core(message: Message, extra_media: list[tuple[bytes,
              needs_youtube = True
              youtube_url_to_analyze = url
         else:
+             # needs_website читает ссылку сама модель через url_context на
+             # стороне Google — наш сервер произвольные URL не скачивает
+             # (свои загрузки — только через _download_url_bin с гардом схемы).
              needs_website = True
 
     clean_prompt = clean_mention(t).strip()

docs/README.md

@@ -1,118 +0,0 @@
----
-title: Lumen
-colorFrom: yellow
-colorTo: gray
-sdk: docker
-app_port: 7860
-pinned: false
----
-
-<p align="center">
-  <img src="assets/lumen-banner.svg" alt="Lumen: Intelligence. Clarity." width="480">
-</p>
-
-A Telegram bot styled after Claude's tone and personality (direct, warm, light on hedging), running on Google Gemini and free OpenRouter models with automatic per-message routing between them. Lumen also generates images, downloads TikTok videos without watermarks, and reads text back as speech. It runs as a webhook service on Hugging Face Spaces (Docker).
-
-**Stack:** Python 3.13 · aiogram · FastAPI · google-genai · Docker
-
-> The YAML block above is Hugging Face Space metadata, not a mistake: this same `README.md` doubles as the Space card. Everything below it is normal GitHub documentation.
-
-## Features
-
-- **Automatic model routing.** Every message goes to whichever provider actually has what it needs: web search and link reading go to Gemini, everything else defaults to free OpenRouter models, protecting Gemini's tight daily quota.
-- **Streaming replies** with a self-calibrating typing-speed pacer, so answers type themselves in instead of landing in a few large chunks.
-- **Defenses against prompt injection and identity leaks.** A deterministic input filter plus output scrubbers keep the bot from revealing which model or provider actually answered.
-- **TikTok downloads** without watermarks: video, slideshows (including "live" photo slides), and original sound.
-- **Image generation** through Pollinations.ai. The model is picked from the prompt itself (anime, fantasy, realism, quick sketch, or a general default).
-- **Text-to-speech**, trying Fish Audio first and falling back to Gemini TTS.
-- `/draw` and `/tts` also work as plain phrases at the start of a message ("draw a cat," "read this out loud"), no slash required.
-- **Persistent state.** An optional Upstash Redis backend keeps chat history and quota counters alive across redeploys.
-- **Error tracking** through an optional Sentry integration that scrubs secrets before sending anything.
-
-## How it works
-
-Lumen is a single FastAPI + aiogram service. Telegram delivers updates to a webhook. Each message gets routed through a chain of candidate models (Gemini and/or OpenRouter), built on the fly from the message's content: attachments, links, and a couple of lightweight heuristics for "does this need current information" and "is this a heavy request." The first provider that answers wins; the other is tried as a fallback if its whole chain fails.
-
-The codebase is a modular monolith. `bot.py` is the orchestrator; the rest is split into focused modules: `lumen_router_config.py` (model routing), `lumen_formatting.py` (markdown to Telegram HTML), `lumen_security.py` (injection and leak defenses), `lumen_images.py`, `lumen_tts.py`, `lumen_tiktok.py`, `lumen_telegram_transport.py`, `lumen_state_storage.py`, and `lumen_typing_pace.py`.
-
-See **[docs/ARCHITECTURE.md](docs/ARCHITECTURE.md)** for a deeper look at routing, streaming, the security layers, and the TikTok downloader.
-
-## Deploying on Hugging Face Spaces
-
-1. Push this repository to a Space (`sdk: docker` is already set in the frontmatter above).
-2. Set the two required secrets: `BOT_TOKEN` and `GEMINI_API_KEY`.
-3. Hugging Face builds the image from `Dockerfile` and runs `python -u bot.py`.
-4. On startup the bot registers its own webhook. If that fails, check the logs for `[webhook] setWebhook failed` and register it manually:
-   ```bash
-   curl -H "Authorization: Bearer <ADMIN_PANEL_KEY>" https://<space-host>/webhook_url
-   ```
-   then open the `register_link` it returns.
-5. `WEBHOOK_SECRET` and `ADMIN_PANEL_KEY` are derived deterministically from `BOT_TOKEN` (or from `ADMIN_SECRET_SEED`, if set). Fetch them with:
-   ```bash
-   curl -H "Authorization: Bearer <BOT_TOKEN>" https://<space-host>/admin_keys
-   ```
-
-Hugging Face Spaces' outbound IPs are blocked by Telegram's API at the network level, so a small proxy is required. See [Proxy setup](#proxy-setup) below.
-
-## Configuration
-
-Only `BOT_TOKEN` and `GEMINI_API_KEY` are required. Everything else has a sane default; the full reference (proxy addresses, timeouts, storage, rate limiting, TikTok tuning) lives in **[docs/ENVIRONMENT.md](docs/ENVIRONMENT.md)**.
-
-## Proxy setup
-
-Hugging Face Spaces' outbound IPs are blocked by Telegram's Bot API entirely, and TikWM (the TikTok API this bot uses) returns `403` to the same IPs. Both are fixed by one small pass-through proxy, deployed separately on Deno Deploy (source: `proxy.ts`):
-
-```bash
-TELEGRAM_API_BASE_URL=https://<proxy-domain>/fetch/api.telegram.org
-TIKWM_API_BASE_URL=https://<proxy-domain>/fetch/www.tikwm.com
-```
-
-The proxy only forwards to an explicit host allowlist (`api.telegram.org`, `www.tikwm.com`, `tikwm.com`). See `proxy.ts` for the implementation and `proxy_test.ts` for its tests.
-
-## Diagnostics
-
-All three endpoints below require `Authorization: Bearer <ADMIN_PANEL_KEY>` (`/admin_keys`, covered in the deploy steps above, uses `BOT_TOKEN` instead):
-
-| Endpoint | Purpose |
-|---|---|
-| `GET /diag` | Checks outbound network reachability (Telegram, Gemini, OpenRouter, TikWM, Pollinations, etc.) from inside the container. |
-| `GET /webhook_url` | Shows the computed webhook URL and a ready-to-open registration link. |
-| `GET /export_state` | Dumps all chat histories and quota counters as JSON, for manual backup. |
-
-`/logs` (a Telegram command, owner-only) sends the current `bot.log` with secrets redacted.
-
-## Commands
-
-`/start`, `/reset`, `/draw`, and `/tts` show up in Telegram's command menu:
-
-| Command | Access | Purpose |
-|---|---|---|
-| `/start` | anyone | Shows a short intro and the command list. |
-| `/reset` | anyone in DMs; group admins/owner in groups | Clears the chat's conversation history. |
-| `/draw [description]` | anyone | Generates an image (see [Features](#features)). |
-| `/tts [text]` | anyone | Reads text out loud. |
-
-Two more owner-only commands stay out of the menu on purpose, since they surface internal details that shouldn't be visible in a group chat:
-
-| Command | Access | Purpose |
-|---|---|---|
-| `/stats` | bot owner, DMs only | Active chat count, process uptime, per-model quota usage. |
-| `/logs` | bot owner, DMs only | Sends `bot.log` with secrets redacted. |
-
-## Testing
-
-```bash
-pip install -r requirements.txt -r requirements-dev.txt
-pytest -v
-```
-
-Test files mirror the module split: `test_lumen_formatting.py`, `test_lumen_security.py`, `test_lumen_router_config.py`, and `test_lumen_typing_pace.py` each test their matching module directly, while `test_bot.py` covers everything defined in `bot.py` itself. `conftest.py` stubs `BOT_TOKEN`/`GEMINI_API_KEY`/`BOT_LOG_PATH` so the suite needs no real secrets.
-
-CI (`.github/workflows/ci.yml`) runs `pyflakes` + `pytest` + `pip-audit` on every push and pull request; a successful run triggers `sync-to-hf.yml`, which mirrors the commit to the Hugging Face Space.
-
-## Known limitations
-
-- Chat history and quota counters survive redeploys only if Upstash is configured (see [docs/ENVIRONMENT.md](docs/ENVIRONMENT.md)); otherwise they live on the container's ephemeral disk and reset on every rebuild.
-- YouTube downloading isn't supported, because Hugging Face Spaces' outbound IPs are blocked at the TLS handshake level. Viewing and analyzing a video by link still works.
-- TikTok downloading depends on the unofficial TikWM API, not an official TikTok endpoint, and needs the proxy above to work from Hugging Face Spaces at all.
-- Streaming has only been exercised against mocked clients, not live Gemini/OpenRouter SSE traffic. See the manual smoke-test checklist in [docs/ARCHITECTURE.md](docs/ARCHITECTURE.md) before touching that code path.

lumen_lang.py

@@ -3,7 +3,7 @@ lumen_lang.py — язык системных сообщений бота (не
 
 Что это: все ФИКСИРОВАННЫЕ строки, которые бот отправляет пользователю сам
 (/start, подсказки, ошибки, статусы, кнопки-уточнения и их служебные реплики),
-на 6 языках. Ответы ИИ не трогаем — модель отвечает на языке собеседника
+на 25 языках. Ответы ИИ не трогаем — модель отвечает на языке собеседника
 (см. RESPONSE LANGUAGE в system_prompt.py).
 
 Языки (по алфавиту кода — так пользователю проще искать в меню), 25 штук:

lumen_router_config.py

@@ -179,9 +179,16 @@ FISH_AUDIO_FREE_TIER_EXPIRY = date(2026, 8, 31)
 # если Fish снова откроют free-доступ — достаточно вернуть True одной строкой.
 FISH_AUDIO_ENABLED = False
 
+_FISH_EXPIRY_WARNED = False
+
 def _check_fish_audio_tts_expiry() -> None:
+    # Warn once per process: after 31.08.2026 the condition is true forever.
+    global _FISH_EXPIRY_WARNED
+    if _FISH_EXPIRY_WARNED:
+        return
     today = date.today()
     if today > FISH_AUDIO_FREE_TIER_EXPIRY:
+        _FISH_EXPIRY_WARNED = True
         log.warning(
             '[tts] The advertised free-tier access to %s expired on %s (today is %s) — check fish.audio/blog/s2-1-pro-free-api in case it was extended again, and update FISH_AUDIO_FREE_TIER_EXPIRY. If access is really gone, _fish_audio_tts_bytes in bot.py already falls back to Gemini TTS silently on any failure — nothing breaks functionally, but the wasted failing requests are worth removing.',
             FISH_AUDIO_TTS_MODEL, FISH_AUDIO_FREE_TIER_EXPIRY.isoformat(), today.isoformat(),

lumen_tiktok.py

@@ -501,6 +501,12 @@ TIKTOK_DOWNLOAD_MAX_BYTES = int(os.getenv("TIKTOK_DOWNLOAD_MAX_BYTES", str(75 *
 
 
 async def _download_url_bin(session: aiohttp.ClientSession, url: str, headers: dict | None = None) -> bytes | None:
+    # URL приходят из JSON постороннего сервиса (TikWM) — качаем только
+    # http(s), остальное (file://, ftp:// и т.п.) отбрасываем до запроса (AUD-D-003).
+    scheme = urllib.parse.urlsplit(url).scheme.lower()
+    if scheme not in ("http", "https"):
+        log.warning("[download] Refusing non-HTTP(S) URL (scheme=%r).", scheme)
+        return None
     if headers is None:
         headers = {
             "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36",

requirements.txt

@@ -1,46 +1,43 @@
 # requirements.txt — Lumen Bot
 # Python 3.10+
 #
-# ВАЖНО: версии зафиксированы через == (а не >=), т.к. HF Spaces пересобирает
-# Docker-образ с нуля при каждом деплое, и без верхней границы `pip install`
-# мог бы молча подтянуть новую мажорную версию с ломающими изменениями API —
-# особенно критично для google-genai, чей API (types.GoogleSearch,
-# types.GoogleMaps, types.UrlContext и т.п.) активно используется в bot.py
-# и менялся между мажорными версиями. Обновлять версии здесь — осознанное
-# решение с последующей проверкой /diag и ручным тестом основных команд,
-# а не побочный эффект случайного редеплоя.
+# NOTE: versions are pinned with == (not >=) because HF Spaces rebuilds the
+# Docker image from scratch on every deploy — without an upper bound a fresh
+# `pip install` could silently pull a new major with breaking API changes.
+# This matters most for google-genai, whose API (types.GoogleSearch,
+# types.GoogleMaps, types.UrlContext, etc.) is used heavily in bot.py and
+# has changed between majors. Bumping a version here is a deliberate decision
+# followed by a /diag check plus a manual smoke test of the main commands,
+# never a side effect of a random redeploy.
 #
-# ОБНОВЛЕНО (аудит зависимостей, 16 августа 2026) — все пакеты подняты до
-# актуальных на этот момент версий PyPI, changelog каждого сверен на предмет
-# breaking changes относительно реально используемого в bot.py API (см. историю
-# коммита). aiohttp/mutagen/pytest/pyflakes уже были на последней версии —
-# оставлены без изменений.
-# ОБНОВЛЕНО ПОВТОРНО (аудит техдолга, 7 сентября 2026) — aiogram/google-genai/
-# sentry-sdk/uvicorn отстали на несколько минорных релизов (без известных CVE,
-# см. pip-audit); подняты до актуальных на этот момент стабильных версий.
-# fastapi/aiohttp/mutagen/tzdata уже были на последней версии — не тронуты.
-# Полный прогон тестового сьюта (390 тестов) под новыми версиями прошёл без
-# единого изменения кода — реального взаимодействия с живым API (Gemini/
-# Telegram) это не проверяет (см. README про сетевые ограничения песочницы),
-# перед деплоем всё равно стоит ручной smoke-тест /diag и основных команд.
+# UPDATED (dependency audit, 2026-08-16) — all packages raised to the PyPI
+# versions current at the time, each changelog checked for breaking changes
+# against the API actually used in bot.py (see commit history).
+# aiohttp/mutagen/pytest/pyflakes were already latest — left untouched.
+# UPDATED AGAIN (tech-debt audit, 2026-09-07) — aiogram/google-genai/
+# sentry-sdk/uvicorn had lagged a few minor releases (no known CVEs per
+# pip-audit); raised to the stable versions current at the time.
+# fastapi/aiohttp/mutagen/tzdata were already latest — untouched.
+# Full suite (390 tests) passed under the new versions with zero code changes —
+# that does not cover live API behavior (Gemini/Telegram), so a manual
+# /diag + main-commands smoke test is still due before deploy.
 aiohttp==3.14.3
 aiogram==3.31.0
 fastapi==0.141.1
 google-genai==2.22.0
 mutagen==1.48.1
 uvicorn==0.52.4
-# tzdata — python:3.13-slim (см. Dockerfile) не ставит системную базу часовых
-# поясов через apt, а stdlib-модуль zoneinfo (используется в _current_quota_day
-# для дневного сброса счётчиков квоты по America/Los_Angeles — там у Google
-# полночь для обнуления RPD-лимитов) без нeё падает ZoneInfoNotFoundError. Код
-# и так безопасно откатывается на UTC при отсутствии данных (см. try/except в
-# _current_quota_day), но тогда сброс квоты сдвигается на 7-8 часов от реального
-# обнуления лимита у Google — с этим пакетом сброс происходит в верное время.
-# Чистый pip-пакет с данными IANA tzdb, без компиляции — не раздувает образ.
+# tzdata — python:3.13-slim (see Dockerfile) ships no system timezone database
+# via apt, while stdlib zoneinfo (used in _current_quota_day for the daily
+# quota reset on America/Los_Angeles — Google's midnight for RPD limits)
+# raises ZoneInfoNotFoundError without it. The code already falls back to UTC
+# safely (see try/except in _current_quota_day), but then the quota reset
+# drifts 7-8 hours off Google's real reset — with this package it lands right.
+# Pure-pip IANA tzdb data, no compilation — does not bloat the image.
 tzdata==2026.3
-# sentry-sdk — опциональный (см. SENTRY_DSN в bot.py) персистентный трекинг ошибок:
-# bot.log живёт на эфемерном диске HF Spaces и теряется при каждом редеплое (см.
-# README, "Известные ограничения" — раньше это было единственным незакрытым
-# пунктом там). Без SENTRY_DSN sentry_sdk.init() не вызывается вообще — пакет
-# просто лежит неиспользуемым, поведение не меняется для тех, кто его не настроил.
+# sentry-sdk — optional (see SENTRY_DSN in bot.py) persistent error tracking:
+# bot.log lives on the ephemeral HF Spaces disk and is lost on every redeploy
+# (see README, "Known limitations" — that used to be the only open item there).
+# Without SENTRY_DSN, sentry_sdk.init() is never called — the package just
+# sits unused and changes nothing for whoever did not configure it.
 sentry-sdk==2.68.1

test_bot.py

@@ -4035,6 +4035,32 @@ def test_rotate_telegram_proxy_reports_lap_done_after_full_cycle():
         bot.bot = original_bot
 
 
+def test_rotate_telegram_proxy_concurrent_rotations_advance_one_step_each():
+    # Контракт AUD-E-004: индекс и URL мутируют под локом — две concurrent-
+    # ротации дают два шага (0→1→2), а не два прыжка в одну точку.
+    original_candidates = bot._TELEGRAM_PROXY_CANDIDATES
+    original_idx = bot._telegram_proxy_idx
+    original_base_url = bot.TELEGRAM_API_BASE_URL
+    original_bot = bot.bot
+    bot._TELEGRAM_PROXY_CANDIDATES = ["https://one.example.com", "https://two.example.com", "https://three.example.com"]
+    bot._telegram_proxy_idx = 0
+    bot.TELEGRAM_API_BASE_URL = "https://one.example.com"
+    bot.bot = None
+    try:
+        async def _two_rotations():
+            return await asyncio.gather(bot._rotate_telegram_proxy(), bot._rotate_telegram_proxy())
+
+        switched = asyncio.run(_two_rotations())
+        assert switched == [True, True]
+        assert bot._telegram_proxy_idx == 2
+        assert bot.TELEGRAM_API_BASE_URL == "https://three.example.com"
+    finally:
+        bot._TELEGRAM_PROXY_CANDIDATES = original_candidates
+        bot._telegram_proxy_idx = original_idx
+        bot.TELEGRAM_API_BASE_URL = original_base_url
+        bot.bot = original_bot
+
+
 class _FakeOwnerBot:
     def __init__(self):
         self.sent: list[dict] = []
@@ -4978,6 +5004,14 @@ def test_download_url_bin_ignores_malformed_content_length_header():
     assert result == b"ok"
 
 
+def test_download_url_bin_refuses_non_http_scheme_without_fetching():
+    # Регрессия AUD-D-003: URL приходят из JSON постороннего сервиса — не-HTTP
+    # отбрасываем до запроса (фейк вернул бы байты на что угодно, None доказывает гард).
+    session = _FakeDownloadSession(_FakeDownloadResponse([b"should never be fetched"]))
+    assert asyncio.run(lumen_tiktok._download_url_bin(session, "file:///etc/passwd")) is None
+    assert asyncio.run(lumen_tiktok._download_url_bin(session, "ftp://evil.example/x.mp4")) is None
+
+
 @pytest.fixture
 def rate_guard_setup(monkeypatch):
     def _setup():

test_lumen_router_config.py

@@ -541,7 +541,9 @@ def test_check_fish_audio_tts_expiry_warns_after_expiry_date(caplog):
     import logging
     from datetime import date, timedelta
     original_expiry = lumen_router_config.FISH_AUDIO_FREE_TIER_EXPIRY
+    original_warned = lumen_router_config._FISH_EXPIRY_WARNED
     lumen_router_config.FISH_AUDIO_FREE_TIER_EXPIRY = date.today() - timedelta(days=1)
+    lumen_router_config._FISH_EXPIRY_WARNED = False
     try:
         with caplog.at_level(logging.WARNING, logger="bot"):
             lumen_router_config._check_fish_audio_tts_expiry()
@@ -549,6 +551,25 @@ def test_check_fish_audio_tts_expiry_warns_after_expiry_date(caplog):
         assert lumen_router_config.FISH_AUDIO_TTS_MODEL in messages
     finally:
         lumen_router_config.FISH_AUDIO_FREE_TIER_EXPIRY = original_expiry
+        lumen_router_config._FISH_EXPIRY_WARNED = original_warned
+
+
+def test_check_fish_audio_tts_expiry_warns_only_once(caplog):
+    import logging
+    from datetime import date, timedelta
+    original_expiry = lumen_router_config.FISH_AUDIO_FREE_TIER_EXPIRY
+    original_warned = lumen_router_config._FISH_EXPIRY_WARNED
+    lumen_router_config.FISH_AUDIO_FREE_TIER_EXPIRY = date.today() - timedelta(days=1)
+    lumen_router_config._FISH_EXPIRY_WARNED = False
+    try:
+        with caplog.at_level(logging.WARNING, logger="bot"):
+            lumen_router_config._check_fish_audio_tts_expiry()
+            caplog.clear()
+            lumen_router_config._check_fish_audio_tts_expiry()
+        assert caplog.records == []
+    finally:
+        lumen_router_config.FISH_AUDIO_FREE_TIER_EXPIRY = original_expiry
+        lumen_router_config._FISH_EXPIRY_WARNED = original_warned
 
 
 def test_check_fish_audio_tts_expiry_silent_before_expiry_date(caplog):