feat: Import-API mit Vorschau, Saldo-Pruefung und Duplikat-Schutz

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

finance/tests/test_import_api.py

@@ -0,0 +1,48 @@
+from datetime import date
+from decimal import Decimal
+from pathlib import Path
+
+import pytest
+
+from app.parsers.base import ParsedStatement, ParsedTransaction
+
+H = {"Authorization": "Bearer test-key"}
+
+FAKE = ParsedStatement(
+    bank="dkb", iban="DE02120300000000202051",
+    period_start=date(2026, 6, 1), period_end=date(2026, 6, 30),
+    opening_balance=Decimal("100.00"), closing_balance=Decimal("40.00"),
+    transactions=[ParsedTransaction(date(2026, 6, 3), date(2026, 6, 3),
+                                    Decimal("-60.00"), "Miete Juni", "Vermieter")])
+
+
+@pytest.fixture
+def fake_parse(monkeypatch):
+    monkeypatch.setattr("app.services.importer.parse_pdf", lambda p: FAKE)
+
+
+def _upload(client, name="auszug.pdf"):
+    return client.post("/api/imports/upload", headers=H,
+                       files={"file": (name, b"%PDF-fake", "application/pdf")})
+
+
+def test_upload_preview_confirm(client, fake_parse, tmp_path, monkeypatch):
+    monkeypatch.setenv("FB_INBOX_DIR", str(tmp_path / "inbox"))
+    monkeypatch.setenv("FB_UPLOADS_DIR", str(tmp_path / "uploads"))
+    from app.config import get_settings
+    get_settings.cache_clear()
+    r = _upload(client)
+    assert r.status_code == 201
+    sid = r.json()["id"]
+    prev = client.get(f"/api/imports/{sid}/preview", headers=H).json()
+    assert prev["balance_ok"] is True
+    assert len(prev["transactions"]) == 1
+    assert client.post(f"/api/imports/{sid}/confirm", headers=H).status_code == 200
+    txs = client.get("/api/transactions", headers=H).json()
+    assert len(txs) == 1 and txs[0]["status"] == "confirmed"
+    # Zweiter Import desselben Auszugs: alles Duplikate
+    sid2 = _upload(client, "auszug2.pdf").json()["id"]
+    prev2 = client.get(f"/api/imports/{sid2}/preview", headers=H).json()
+    assert prev2["duplicates"] == 1
+    client.post(f"/api/imports/{sid2}/confirm", headers=H)
+    assert len(client.get("/api/transactions", headers=H).json()) == 1