matplobbot-shared 0.1.331__tar.gz → 0.1.332__tar.gz

{matplobbot_shared-0.1.331 → matplobbot_shared-0.1.332}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: matplobbot-shared
-Version: 0.1.331
+Version: 0.1.332
 Summary: Shared library for the Matplobbot ecosystem.
 Author: Ackrome
 Author-email: ivansergeyevich@gmail.com

{matplobbot_shared-0.1.331 → matplobbot_shared-0.1.332}/README.md

@@ -59,7 +59,8 @@ The project currently includes:
 - View live usage stats over WebSockets.
 - See popular commands, text activity, action-type breakdowns, and activity trends.
 - Inspect user-specific pages with paginated history, filtering, and CSV export.
-- Stream the bot log into the dashboard for real-time monitoring.
+- View bot logs with `docker compose logs -f mpb-telegram-bot`; the legacy log WebSocket is intentionally disabled.
+- Configure private mailbox forwarding with `/mail` (requires `MAIL_CREDENTIAL_KEY`).
 
 ## Screenshots
 

{matplobbot_shared-0.1.331 → matplobbot_shared-0.1.332}/matplobbot_shared.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: matplobbot-shared
-Version: 0.1.331
+Version: 0.1.332
 Summary: Shared library for the Matplobbot ecosystem.
 Author: Ackrome
 Author-email: ivansergeyevich@gmail.com

{matplobbot_shared-0.1.331 → matplobbot_shared-0.1.332}/setup.py

@@ -2,7 +2,7 @@ from setuptools import find_packages, setup
 
 setup(
     name="matplobbot-shared",
-    version="0.1.331",  # Bump version
+    version="0.1.332",  # Bump version
     packages=find_packages(include=["shared_lib", "shared_lib.*"]),
     description="Shared library for the Matplobbot ecosystem.",
     author="Ackrome",

{matplobbot_shared-0.1.331 → matplobbot_shared-0.1.332}/shared_lib/database.py

@@ -815,14 +815,17 @@ async def delete_old_inactive_subscriptions(days_inactive: int = 30):
 
 
 async def get_subscriptions_for_notification(notification_time: str) -> list:
+    try:
+        target_time = datetime.time.fromisoformat(notification_time)
+    except (TypeError, ValueError):
+        logger.warning("Ignoring invalid notification time: %r", notification_time)
+        return []
+
     async with get_session() as session:
-        # notification_time comes as "HH:MM"
-        # We use PostgreSQL TO_CHAR on the Time column
         stmt = select(UserScheduleSubscription).where(
             and_(
                 UserScheduleSubscription.is_active.is_(True),
-                func.to_char(UserScheduleSubscription.notification_time, "HH24:MI")
-                == notification_time,
+                UserScheduleSubscription.notification_time == target_time,
             )
         )
         result = await session.execute(stmt)
@@ -1004,20 +1007,46 @@ async def batch_update_subscription_hashes(entity_type: str, entity_id: str, new
 
 
 # --- Cached Schedules ---
+def _cached_entity_name(entity_type: str, data: list | dict, fallback: str) -> str:
+    """Extract a stable display name without querying/expanding JSON later."""
+    if not isinstance(data, list):
+        return fallback
+    field_by_type = {
+        "group": "group",
+        "person": "lecturer_title",
+        "auditorium": "auditorium",
+    }
+    field = field_by_type.get(entity_type)
+    if not field:
+        return fallback
+    for lesson in data:
+        if isinstance(lesson, dict):
+            value = str(lesson.get(field) or "").strip()
+            if value:
+                return value[:255]
+    return fallback
+
+
 async def upsert_cached_schedule(entity_type: str, entity_id: str, data: list | dict):
     json_data = json.loads(json.dumps(data, default=str))  # Ensure serializable
+    entity_name = _cached_entity_name(entity_type, json_data, str(entity_id))
     async with get_session() as session:
         stmt = (
             pg_insert(CachedSchedule)
             .values(
                 entity_type=entity_type,
                 entity_id=str(entity_id),
+                entity_name=entity_name,
                 schedule_data=json_data,
                 updated_at=datetime.datetime.now(),
             )
             .on_conflict_do_update(
                 constraint="uq_cached_schedule_entity",
-                set_=dict(schedule_data=json_data, updated_at=datetime.datetime.now()),
+                set_=dict(
+                    entity_name=entity_name,
+                    schedule_data=json_data,
+                    updated_at=datetime.datetime.now(),
+                ),
             )
         )
         await session.execute(stmt)
@@ -1598,6 +1627,7 @@ async def merge_cached_schedule(
         # merged_data.sort(key=lambda x: (x.get('date', ''), x.get('beginLesson', '')))
 
         json_data = json.loads(json.dumps(merged_data, default=str))
+        entity_name = _cached_entity_name(entity_type, json_data, str(entity_id))
 
         # 4. Upsert (вставка или обновление)
         stmt_insert = (
@@ -1605,12 +1635,17 @@ async def merge_cached_schedule(
             .values(
                 entity_type=entity_type,
                 entity_id=str(entity_id),
+                entity_name=entity_name,
                 schedule_data=json_data,
                 updated_at=datetime.datetime.now(),
             )
             .on_conflict_do_update(
                 constraint="uq_cached_schedule_entity",
-                set_=dict(schedule_data=json_data, updated_at=datetime.datetime.now()),
+                set_=dict(
+                    entity_name=entity_name,
+                    schedule_data=json_data,
+                    updated_at=datetime.datetime.now(),
+                ),
             )
         )
 

{matplobbot_shared-0.1.331 → matplobbot_shared-0.1.332}/shared_lib/html_tools.py

@@ -1,4 +1,4 @@
-import re
+import re
 
 HTML_TAG_RE = re.compile(r"(</?([a-zA-Z0-9_-]+)(?:\s+[^>]*)?>)")
 

{matplobbot_shared-0.1.331 → matplobbot_shared-0.1.332}/shared_lib/locales/en.json

@@ -157,6 +157,7 @@
     "help_btn_lec_search": "📚 /lec_search - Search notes",
     "help_btn_lec_all": "📂 /lec_all - Browse notes",
     "help_btn_favorites": "⭐ /favorites - Favorites",
+    "help_btn_mail": "✉️ /mail - Mailboxes",
     "help_btn_settings": "⚙️ /settings - Settings",
     "help_btn_latex": "🧮 /latex - Render LaTeX",
     "help_btn_mermaid": "🎨 /mermaid - Render Mermaid",

{matplobbot_shared-0.1.331 → matplobbot_shared-0.1.332}/shared_lib/locales/ru.json

@@ -136,6 +136,7 @@
     "help_btn_lec_search": "📚 /lec_search - Поиск по конспектам",
     "help_btn_lec_all": "📂 /lec_all - Просмотр конспектов",
     "help_btn_favorites": "⭐ /favorites - Избранное",
+    "help_btn_mail": "✉️ /mail - Почтовые ящики",
     "help_btn_settings": "⚙️ /settings - Настройки",
     "help_btn_latex": "🧮 /latex - Рендер LaTeX",
     "help_btn_mermaid": "🎨 /mermaid - Рендер Mermaid",

{matplobbot_shared-0.1.331 → matplobbot_shared-0.1.332}/shared_lib/mail_bridge.py

@@ -13,9 +13,10 @@ from html import escape
 
 from bs4 import BeautifulSoup
 from cryptography.fernet import Fernet
-from sqlalchemy import BigInteger, Boolean, Column, Integer, LargeBinary, String, UniqueConstraint
 
-from shared_lib.models import Base
+from shared_lib.models import MailAccount
+
+__all__ = ["MailAccount", "cipher", "seal", "unseal", "validate_host", "poll_mail", "parse_mail"]
 
 MAX_MAIL_BYTES = 35 * 1024 * 1024
 PASSWORD_PROMPT = "Пароль приложения для почты"
@@ -41,24 +42,6 @@ def sensitive_mail_update(event, data):
     )
 
 
-class MailAccount(Base):
-    __tablename__ = "mail_accounts"
-    __table_args__ = (
-        UniqueConstraint("user_id", "address", "host", name="uq_mail_owner_address_host"),
-    )
-    id = Column(Integer, primary_key=True)
-    user_id = Column(BigInteger, nullable=False, index=True)
-    address = Column(String(320), nullable=False)
-    host = Column(String(253), nullable=False)
-    protocol = Column(String(8), nullable=False)
-    port = Column(Integer, nullable=False, default=993)
-    credential = Column(LargeBinary, nullable=False)
-    enabled = Column(Boolean, nullable=False, default=True)
-    checkpoint = Column(LargeBinary, nullable=False)
-    pending = Column(LargeBinary, nullable=True)
-    status = Column(String(80), nullable=False, default="ready")
-
-
 def cipher():
     return Fernet(os.environ["MAIL_CREDENTIAL_KEY"].encode("ascii"))
 

{matplobbot_shared-0.1.331 → matplobbot_shared-0.1.332}/shared_lib/models.py

@@ -36,7 +36,9 @@ class UserAction(Base):
     __tablename__ = "user_actions"
 
     id = Column(Integer, primary_key=True, autoincrement=True)
-    user_id = Column(BigInteger, ForeignKey("users.user_id", ondelete="CASCADE"), nullable=False, index=True)
+    user_id = Column(
+        BigInteger, ForeignKey("users.user_id", ondelete="CASCADE"), nullable=False, index=True
+    )
     action_type = Column(String, nullable=False, index=True)
     action_details = Column(String, nullable=True)
     timestamp = Column(DateTime(timezone=True), server_default=func.now(), index=True)
@@ -78,7 +80,12 @@ class UserScheduleSubscription(Base):
     __tablename__ = "user_schedule_subscriptions"
 
     id = Column(Integer, primary_key=True, autoincrement=True)
-    user_id = Column(BigInteger, ForeignKey("users.user_id", ondelete="CASCADE"), nullable=False)
+    user_id = Column(
+        BigInteger,
+        ForeignKey("users.user_id", ondelete="CASCADE"),
+        nullable=False,
+        index=True,
+    )
     chat_id = Column(BigInteger, nullable=False)
     entity_type = Column(String, nullable=False)
     entity_id = Column(String, nullable=False)
@@ -95,6 +102,11 @@ class UserScheduleSubscription(Base):
         UniqueConstraint(
             "chat_id", "entity_type", "entity_id", "notification_time", name="uq_schedule_subs"
         ),
+        Index(
+            "ix_user_subscriptions_notification_time_active",
+            "notification_time",
+            "is_active",
+        ),
     )
 
 
@@ -132,6 +144,7 @@ class CachedSchedule(Base):
     id = Column(Integer, primary_key=True, autoincrement=True)
     entity_type = Column(String, nullable=False)
     entity_id = Column(String, nullable=False)
+    entity_name = Column(String(255), nullable=True)
     schedule_data = Column(JSONB, nullable=False)
     updated_at = Column(DateTime(timezone=True), server_default=func.now(), onupdate=func.now())
 
@@ -140,6 +153,31 @@ class CachedSchedule(Base):
     )
 
 
+class MailAccount(Base):
+    """Encrypted mailbox connection owned by a Telegram user."""
+
+    __tablename__ = "mail_accounts"
+    __table_args__ = (
+        UniqueConstraint("user_id", "address", "host", name="uq_mail_owner_address_host"),
+    )
+    id = Column(Integer, primary_key=True)
+    user_id = Column(
+        BigInteger,
+        ForeignKey("users.user_id", ondelete="CASCADE"),
+        nullable=False,
+        index=True,
+    )
+    address = Column(String(320), nullable=False)
+    host = Column(String(253), nullable=False)
+    protocol = Column(String(8), nullable=False)
+    port = Column(Integer, nullable=False, default=993)
+    credential = Column(LargeBinary, nullable=False)
+    enabled = Column(Boolean, nullable=False, default=True)
+    checkpoint = Column(LargeBinary, nullable=False)
+    pending = Column(LargeBinary, nullable=True)
+    status = Column(String(80), nullable=False, default="ready")
+
+
 class SearchDocument(Base):
     __tablename__ = "search_documents"
 

{matplobbot_shared-0.1.331 → matplobbot_shared-0.1.332}/shared_lib/redis_client.py

@@ -1,5 +1,6 @@
 import json
 import logging
+import os
 
 import redis.asyncio as redis
 
@@ -67,4 +68,7 @@ class RedisClient:
 
 
 # Создаем единственный экземпляр клиента
-redis_client = RedisClient(host="redis")
+redis_client = RedisClient(
+    host=os.getenv("REDIS_HOST", "redis"),
+    port=int(os.getenv("REDIS_PORT", "6379")),
+)

{matplobbot_shared-0.1.331 → matplobbot_shared-0.1.332}/shared_lib/services/university_api.py

@@ -31,8 +31,10 @@ class RuzAPIClient:
         self.initial_delay = initial_delay
         self.backoff_factor = backoff_factor
 
-    async def _request(self, sub_url: str) -> dict[str, Any] | list[dict[str, Any]]:
-        full_url = self.HOST + sub_url
+    async def _request(
+        self, path: str, params: dict[str, str] | None = None
+    ) -> dict[str, Any] | list[dict[str, Any]]:
+        full_url = self.HOST + path
         ssl_context = ssl.create_default_context(cafile=certifi.where())
         last_exception = None
 
@@ -40,7 +42,10 @@ class RuzAPIClient:
             try:
                 # Добавляем явный таймаут на запрос, чтобы не висеть бесконечно
                 async with self.session.get(
-                    full_url, ssl=ssl_context, timeout=aiohttp.ClientTimeout(total=15)
+                    full_url,
+                    params=params,
+                    ssl=ssl_context,
+                    timeout=aiohttp.ClientTimeout(total=15),
                 ) as response:
                     if response.status == 200:
                         try:
@@ -73,14 +78,17 @@ class RuzAPIClient:
 
     async def search(self, term: str, search_type: str) -> list[dict[str, Any]]:
         """Generic search function."""
-        return await self._request(f"/api/search?term={term}&type={search_type}")
+        return await self._request(
+            "/api/search", params={"term": term, "type": search_type}
+        )
 
     async def get_schedule(
         self, entity_type: str, entity_id: str, start: str, finish: str
     ) -> list[dict[str, Any]]:
         """Generic function to get a schedule."""
         return await self._request(
-            f"/api/schedule/{entity_type}/{entity_id}?start={start}&finish={finish}&lng=1"
+            f"/api/schedule/{entity_type}/{entity_id}",
+            params={"start": start, "finish": finish, "lng": "1"},
         )
 
 

{matplobbot_shared-0.1.331 → matplobbot_shared-0.1.332}/shared_lib/tasks.py

@@ -623,7 +623,9 @@ def compile_project_task(
                             return {
                                 "status": "error",
                                 "message": f"Security restriction in {path}: LaTeX source must be UTF-8 text",
-                                "errors": [{"line": 1, "message": "LaTeX source must be UTF-8 text"}],
+                                "errors": [
+                                    {"line": 1, "message": "LaTeX source must be UTF-8 text"}
+                                ],
                             }
                         is_safe, reason = _validate_latex_source(file_text)
                         if not is_safe:

{matplobbot_shared-0.1.331 → matplobbot_shared-0.1.332}/tests/test_authorization_guards.py

@@ -61,11 +61,17 @@ class TestAuthorizationGuards(unittest.IsolatedAsyncioTestCase):
         self.assertFalse(can_subscribe_user_updates({"role": "user", "telegram_id": 1}, 2))
 
     def test_get_jwt_secret_key_raises_if_missing_in_production(self):
-        with patch.dict(os.environ, {"ENVIRONMENT": "production"}, clear=True), self.assertRaises(RuntimeError):
+        with (
+            patch.dict(os.environ, {"ENVIRONMENT": "production"}, clear=True),
+            self.assertRaises(RuntimeError),
+        ):
             _get_jwt_secret_key()
 
     def test_get_jwt_secret_key_raises_for_prod_alias(self):
-        with patch.dict(os.environ, {"ENVIRONMENT": "prod"}, clear=True), self.assertRaises(RuntimeError):
+        with (
+            patch.dict(os.environ, {"ENVIRONMENT": "prod"}, clear=True),
+            self.assertRaises(RuntimeError),
+        ):
             _get_jwt_secret_key()
 
     def test_get_jwt_secret_key_fallback_in_development(self):

{matplobbot_shared-0.1.331 → matplobbot_shared-0.1.332}/tests/test_keyboards.py

@@ -78,6 +78,8 @@ class TestTelegramWebAppKeyboards(unittest.IsolatedAsyncioTestCase):
         buttons = [button for row in markup.keyboard for button in row]
         self.assertFalse(any(button.web_app for button in buttons))
         self.assertIn("/search", [button.text for button in buttons])
+        self.assertIn("/mail", [button.text for button in buttons])
+        self.assertLessEqual(max(len(row) for row in markup.keyboard), 2)
 
     async def test_invalid_public_site_url_omits_inline_web_app_buttons(self):
         kb.PUBLIC_SITE_URL = "http://localhost:8080"

{matplobbot_shared-0.1.331 → matplobbot_shared-0.1.332}/tests/test_latex_task_security.py

@@ -60,7 +60,7 @@ class TestLatexTaskSecurity(unittest.TestCase):
         self.assertIn("input", reason)
 
     def test_binary_latex_is_validated_before_compilation(self):
-        binary_tex = base64.b64encode(br"\input{/etc/passwd}").decode()
+        binary_tex = base64.b64encode(rb"\input{/etc/passwd}").decode()
         project_files = [{"path": "main.tex", "binary": binary_tex}]
         with patch("subprocess.run") as mock_run:
             result = compile_project_task.run(project_files, "main.tex")
@@ -71,7 +71,10 @@ class TestLatexTaskSecurity(unittest.TestCase):
     @patch("subprocess.run")
     def test_compile_project_task_rejects_evil_file_before_compilation(self, mock_run):
         project_files = [
-            {"path": "main.tex", "text": r"\documentclass{article}\begin{document}\write18{rm -rf /}\end{document}"}
+            {
+                "path": "main.tex",
+                "text": r"\documentclass{article}\begin{document}\write18{rm -rf /}\end{document}",
+            }
         ]
         result = compile_project_task.run(project_files, "main.tex")
         self.assertEqual(result["status"], "error")

{matplobbot_shared-0.1.331 → matplobbot_shared-0.1.332}/tests/test_mail_bridge.py

@@ -106,6 +106,7 @@ class MailTests(unittest.TestCase):
     def test_sensitive_inputs_and_router(self):
         module = handlers()
         self.assertEqual(module.MailManager().router.name, "mail")
+        self.assertEqual(module.MAX_MAILBOXES_PER_USER, 10)
         event = SimpleNamespace(message=SimpleNamespace(reply_to_message=None), edited_message=None)
         self.assertTrue(sensitive_mail_update(event, {"raw_state": "MailSetup:password"}))
         event.message.reply_to_message = SimpleNamespace(text=module.PASSWORD_PROMPT)

{matplobbot_shared-0.1.331 → matplobbot_shared-0.1.332}/tests/test_schedule_search_api.py

@@ -31,6 +31,9 @@ try:
 except ModuleNotFoundError:
     FASTAPI_AVAILABLE = False
 
+from shared_lib.database import _cached_entity_name
+from shared_lib.services.university_api import RuzAPIClient
+
 
 @unittest.skipUnless(FASTAPI_AVAILABLE, "fastapi is not installed in this environment")
 class TestScheduleSearchAPI(unittest.TestCase):
@@ -532,3 +535,58 @@ class TestScheduleSearchAPI(unittest.TestCase):
         refresh_schema = schema["components"]["schemas"]["ScheduleCacheBulkRefreshResponse"]
         self.assertIn("remapped", refresh_schema["properties"])
         self.assertIn("items", refresh_schema["properties"])
+
+
+class TestRuzAPIClient(unittest.IsolatedAsyncioTestCase):
+    async def test_search_and_schedule_send_query_parameters_separately(self):
+        class FakeResponse:
+            status = 200
+
+            async def __aenter__(self):
+                return self
+
+            async def __aexit__(self, *_args):
+                return None
+
+            async def json(self):
+                return []
+
+        class FakeSession:
+            def __init__(self):
+                self.calls = []
+
+            def get(self, url, **kwargs):
+                self.calls.append((url, kwargs))
+                return FakeResponse()
+
+        session = FakeSession()
+        client = RuzAPIClient(session, max_retries=1)
+
+        await client.search("М80 & 101", "group")
+        await client.get_schedule("group", "M80/101", "2026-04-01", "2026-04-30")
+
+        self.assertEqual(session.calls[0][0], "https://ruz.fa.ru/api/search")
+        self.assertEqual(
+            session.calls[0][1]["params"], {"term": "М80 & 101", "type": "group"}
+        )
+        self.assertEqual(session.calls[1][0], "https://ruz.fa.ru/api/schedule/group/M80/101")
+        self.assertEqual(
+            session.calls[1][1]["params"],
+            {"start": "2026-04-01", "finish": "2026-04-30", "lng": "1"},
+        )
+
+
+class TestCachedScheduleLabels(unittest.TestCase):
+    def test_cached_entity_name_uses_type_specific_display_field(self):
+        self.assertEqual(
+            _cached_entity_name("group", [{"group": "M80-101"}], "group-1"), "M80-101"
+        )
+        self.assertEqual(
+            _cached_entity_name("person", [{"lecturer_title": "Ivan Petrov"}], "person-1"),
+            "Ivan Petrov",
+        )
+        self.assertEqual(
+            _cached_entity_name("auditorium", [{"auditorium": "A-101"}], "room-1"),
+            "A-101",
+        )
+        self.assertEqual(_cached_entity_name("group", [], "group-1"), "group-1")

{matplobbot_shared-0.1.331 → matplobbot_shared-0.1.332}/tests/test_scheduler_html_splitter.py

@@ -31,7 +31,7 @@ class TestSchedulerHTMLSplitter(unittest.TestCase):
 
     def test_split_nested_tags(self):
         inner = "Click here to see schedule details.\n" * 15
-        msg = f"<b>Notice: <a href=\"https://example.com/sched\">{inner}</a></b>"
+        msg = f'<b>Notice: <a href="https://example.com/sched">{inner}</a></b>'
         chunks = split_telegram_html_message(msg, max_chars=200)
 
         self.assertGreater(len(chunks), 1)
@@ -42,13 +42,17 @@ class TestSchedulerHTMLSplitter(unittest.TestCase):
 
     def test_split_preserves_code_and_pre(self):
         inner = "const x = 123;\nconsole.log(x);\n" * 15
-        msg = f"<pre><code class=\"language-js\">{inner}</code></pre>"
+        msg = f'<pre><code class="language-js">{inner}</code></pre>'
         chunks = split_telegram_html_message(msg, max_chars=200)
 
         self.assertGreater(len(chunks), 1)
         for i, chunk in enumerate(chunks):
-            self.assertEqual(chunk.count("<pre>"), chunk.count("</pre>"), f"Chunk {i} unbalanced <pre>")
-            self.assertEqual(chunk.count("<code"), chunk.count("</code>"), f"Chunk {i} unbalanced <code>")
+            self.assertEqual(
+                chunk.count("<pre>"), chunk.count("</pre>"), f"Chunk {i} unbalanced <pre>"
+            )
+            self.assertEqual(
+                chunk.count("<code"), chunk.count("</code>"), f"Chunk {i} unbalanced <code>"
+            )
 
 
 if __name__ == "__main__":

{matplobbot_shared-0.1.331 → matplobbot_shared-0.1.332}/tests/test_stats_avatar_security.py

@@ -1,4 +1,4 @@
-import unittest
+import unittest
 from unittest.mock import AsyncMock, MagicMock, patch
 
 from bot.logger import _avatar_cache, _get_avatar_pic_url

{matplobbot_shared-0.1.331 → matplobbot_shared-0.1.332}/tests/test_studio_router_api.py

@@ -6,7 +6,7 @@ from unittest.mock import AsyncMock, Mock, patch
 
 FASTAPI_AVAILABLE = True
 try:
-    from fastapi import FastAPI
+    from fastapi import FastAPI, HTTPException
     from fastapi.testclient import TestClient
 
     os.environ.setdefault("JWT_SECRET_KEY", "test-secret-for-unit-tests")
@@ -81,6 +81,15 @@ class TestStudioRouterAPI(unittest.TestCase):
     def tearDown(self):
         self.app.dependency_overrides.clear()
 
+    def test_project_filename_rejects_paths_and_control_characters(self):
+        self.assertEqual(
+            studio_router._sanitize_project_filename("diagram.png"), "diagram.png"
+        )
+        for filename in ("../secret.txt", "nested/image.png", r"nested\image.png", "bad\x00.txt"):
+            with self.subTest(filename=filename), self.assertRaises(HTTPException) as raised:
+                studio_router._sanitize_project_filename(filename)
+            self.assertEqual(raised.exception.status_code, 400)
+
     def test_project_ownership_guard_returns_404(self):
         self.db.execute.return_value = _mock_scalar_result(None)