Внедрение KESL на ВМ2 + замена CLAMAV на KESL

VM2_services/codebase/services/message-safety/tests/test_files.py

@@ -1,14 +1,24 @@
 from __future__ import annotations
 
+import asyncio
 import hashlib
 import io
+import json
+import struct
+from pathlib import Path
 from uuid import UUID
 
 import pytest
 from PIL import Image
 
 from app.contracts import Attachment
-from app.file_pipeline import ObjectChanged, collect_and_hash, detect_format
+from app.file_pipeline import (
+    KeslSocketScanner,
+    ObjectChanged,
+    collect_and_hash,
+    detect_format,
+    one_chunk,
+)
 
 
 def image_bytes(format_name: str) -> bytes:
@@ -71,3 +81,65 @@ async def test_authoritative_stream_hash_and_size() -> None:
     assert body == data and digest == hashlib.sha256(data).digest()
     with pytest.raises(ObjectChanged):
         await collect_and_hash(Reader(data), attachment(data, size=len(data) + 1), max_size=100)
+
+
+class FakeWriter:
+    def __init__(self) -> None:
+        self.request = bytearray()
+
+    def write(self, value: bytes) -> None:
+        self.request.extend(value)
+
+    async def drain(self) -> None:
+        return None
+
+    def close(self) -> None:
+        return None
+
+    async def wait_closed(self) -> None:
+        return None
+
+
+def framed(value: dict[str, object]):
+    body = json.dumps(value).encode()
+    reader = __import__("asyncio").StreamReader()
+    reader.feed_data(struct.pack(">I", len(body)) + body)
+    reader.feed_eof()
+    return reader
+
+
+async def test_kesl_socket_clean_infected_and_status(monkeypatch, tmp_path: Path) -> None:
+    responses = [
+        {
+            "status": "completed",
+            "verdict": "clean",
+            "threat": None,
+            "engine_version": "12.4",
+            "signatures_version": "sha256:" + "a" * 64,
+        },
+        {
+            "status": "completed",
+            "verdict": "infected",
+            "threat": "EICAR-Test-File",
+            "engine_version": "12.4",
+            "signatures_version": "sha256:" + "b" * 64,
+        },
+        {
+            "status": "ready",
+            "engine_version": "12.4",
+            "databases_date": "2026-09-07T11:25:00+00:00",
+            "signatures_version": "sha256:" + "c" * 64,
+        },
+    ]
+
+    async def connect(_):
+        return framed(responses.pop(0)), FakeWriter()
+
+    monkeypatch.setattr(asyncio, "open_unix_connection", connect, raising=False)
+    scanner = KeslSocketScanner(tmp_path / "scan.sock")
+    clean = await scanner.scan(one_chunk(b"clean"), scan_timeout=1)
+    infected = await scanner.scan(one_chunk(b"eicar"), scan_timeout=1)
+    status = await scanner.status()
+    assert clean.threat is None
+    assert infected.threat == "EICAR-Test-File"
+    assert status.engine_version == "12.4"