Закрыты задачи бэклога по неочевидному поведению UI при ошибках отправки сообщений и блокировках со стороны Message-safety + добалено ограничение на размер сообщения

codebase/backend/api-backend/tests/contract/test_openapi.py

@@ -4,9 +4,11 @@ from pathlib import Path
 from types import SimpleNamespace
 
 import yaml
+from alembic.config import Config
+from alembic.script import ScriptDirectory
 from pydantic import SecretStr
 
-from app.main import app, otp_settings, websocket_token
+from app.main import EXPECTED_API_DB_REVISION, app, otp_settings, websocket_token
 from app.services import SettingsSnapshot
 
 EXPECTED_PATHS = {
@@ -58,6 +60,11 @@ def test_openapi_31_contains_all_http_contracts() -> None:
     assert committed["paths"].keys() == schema["paths"].keys()
 
 
+def test_readiness_expected_revision_matches_alembic_head() -> None:
+    scripts = ScriptDirectory.from_config(Config("alembic.ini"))
+    assert EXPECTED_API_DB_REVISION == scripts.get_current_head()
+
+
 def test_websocket_route_is_registered() -> None:
     assert any(getattr(route, "path", None) == "/api/v1/realtime" for route in app.routes)
 
@@ -104,6 +111,15 @@ def test_committed_openapi_server_does_not_double_api_prefix() -> None:
     assert committed["servers"] == [{"url": "/"}]
 
 
+def test_public_config_contract_exposes_message_length() -> None:
+    committed = yaml.safe_load(Path("openapi.yaml").read_text(encoding="utf-8"))
+    response = committed["paths"]["/api/v1/public/app-config"]["get"]["responses"]["200"]
+    messages = response["content"]["application/json"]["schema"]["properties"]["messages"]
+
+    assert messages["required"] == ["max_text_length"]
+    assert messages["properties"]["max_text_length"]["maximum"] == 10_000
+
+
 def test_otp_settings_contract_is_strict_and_complete() -> None:
     generated = app.openapi()
     response = generated["paths"]["/internal/settings/v1/otp"]["get"]["responses"]["200"]

codebase/backend/api-backend/tests/unit/test_cli_settings.py

@@ -16,6 +16,7 @@ def test_production_like_seed_contains_all_mandatory_settings() -> None:
     assert values["otp.phone.code_length"] == "6"
     assert values["otp.phone.ttl_seconds"] == "60"
     assert values["otp.phone.sms_order_timeout_ms"] == "3000"
+    assert values["chat.message.max_length"] == "4000"
 
 
 def test_seed_rejects_invalid_typed_value(tmp_path: Path) -> None:
@@ -62,3 +63,16 @@ def test_seed_rejects_public_otp_setting(tmp_path: Path) -> None:
 
     with pytest.raises(ValueError, match="must not be public"):
         load_seed(path)
+
+
+@pytest.mark.parametrize("value", [0, 10001])
+def test_seed_rejects_invalid_chat_message_max_length(tmp_path: Path, value: int) -> None:
+    path = tmp_path / "settings.yaml"
+    path.write_text(
+        "schema_version: 1\nsettings:\n"
+        f"  chat.message.max_length: {{type: integer, value: {value}, public: true}}\n",
+        encoding="utf-8",
+    )
+
+    with pytest.raises(ValueError, match="value must be between 1 and 10000"):
+        load_seed(path)

codebase/backend/api-backend/tests/unit/test_domain.py

@@ -14,6 +14,7 @@ from app.schemas import (
     decode_cursor,
     encode_cursor,
 )
+from app.services import MESSAGE_SAFETY_REPLIES, safety_reply_message
 
 
 def test_asyncpg_receives_libpq_dsn_without_sqlalchemy_driver() -> None:
@@ -51,6 +52,19 @@ def test_message_discriminated_union() -> None:
         adapter.validate_python(
             {"content_kind": "text", "text": "", "attachment_id": str(uuid.uuid4())}
         )
+    longest = adapter.validate_python({"content_kind": "text", "text": "а" * 10_000})
+    assert len(longest.text) == 10_000
+    with pytest.raises(ValidationError):
+        adapter.validate_python({"content_kind": "text", "text": "а" * 10_001})
+
+
+def test_message_safety_business_replies_are_content_specific() -> None:
+    assert "переформулировать" in MESSAGE_SAFETY_REPLIES["text"]
+    assert "документ" in MESSAGE_SAFETY_REPLIES["file"]
+    reply = safety_reply_message(uuid.uuid4(), "text")
+    assert reply.sender_type == "company"
+    assert reply.safety_status == "allowed"
+    assert reply.delivery_status == "delivered"
 
 
 def test_fingerprint_is_canonical_and_user_scoped() -> None: