// src/schemas/scout/logs.test.ts
import { describe, it, expect } from 'vitest';
import { scoutLogsSchema } from './logs.js';
import { DEFAULT_LOG_LINES, MAX_LOG_LINES } from '../../constants.js';
describe('Scout Logs Schema', () => {
it('should validate syslog subaction', () => {
const result = scoutLogsSchema.parse({
action: 'logs',
subaction: 'syslog',
host: 'tootie',
lines: 50
});
expect(result.subaction).toBe('syslog');
});
it('should validate journal with unit filter', () => {
const result = scoutLogsSchema.parse({
action: 'logs',
subaction: 'journal',
host: 'tootie',
unit: 'docker.service',
priority: 'err',
since: '1h'
});
expect(result.unit).toBe('docker.service');
expect(result.priority).toBe('err');
});
it('should validate dmesg', () => {
const result = scoutLogsSchema.parse({
action: 'logs',
subaction: 'dmesg',
host: 'tootie',
grep: 'USB'
});
expect(result.grep).toBe('USB');
});
it('should accept log-friendly patterns with brackets and quotes', () => {
// jsFilterSchema allows these since filtering is done in JavaScript, not shell
const logPatterns = [
'[ERROR]',
'[INFO]',
"User 'admin'",
'status=(failed)',
'key="value"',
'path: /var/log',
'test[injection]' // Brackets are safe in JS String.includes()
];
for (const pattern of logPatterns) {
const result = scoutLogsSchema.parse({
action: 'logs',
subaction: 'syslog',
host: 'tootie',
grep: pattern
});
expect(result.grep).toBe(pattern);
}
});
it('should reject grep patterns that are too long', () => {
const longPattern = 'a'.repeat(MAX_LOG_LINES + 1);
expect(() => scoutLogsSchema.parse({
action: 'logs',
subaction: 'syslog',
host: 'tootie',
grep: longPattern
})).toThrow(new RegExp(`Too big.*${MAX_LOG_LINES}`, 'i'));
});
it('should reject patterns with control characters', () => {
const maliciousPatterns = [
'line\ninjection', // Newline
'has\ttab', // Tab
'null\x00byte' // Null byte
];
for (const pattern of maliciousPatterns) {
expect(() => scoutLogsSchema.parse({
action: 'logs',
subaction: 'dmesg',
host: 'tootie',
grep: pattern
})).toThrow(/control characters/i);
}
});
it('should validate auth logs', () => {
const result = scoutLogsSchema.parse({
action: 'logs',
subaction: 'auth',
host: 'tootie',
lines: 200
});
expect(result.lines).toBe(200);
});
it('should reject invalid subaction', () => {
expect(() => scoutLogsSchema.parse({
action: 'logs',
subaction: 'invalid',
host: 'tootie'
})).toThrow();
});
it('should default lines to DEFAULT_LOG_LINES', () => {
const result = scoutLogsSchema.parse({
action: 'logs',
subaction: 'syslog',
host: 'tootie'
});
expect(result.lines).toBe(DEFAULT_LOG_LINES);
});
it('should accept lines === MAX_LOG_LINES', () => {
const result = scoutLogsSchema.parse({
action: 'logs',
subaction: 'syslog',
host: 'tootie',
lines: MAX_LOG_LINES
});
expect(result.lines).toBe(MAX_LOG_LINES);
});
it('should reject lines === MAX_LOG_LINES + 1', () => {
expect(() => scoutLogsSchema.parse({
action: 'logs',
subaction: 'syslog',
host: 'tootie',
lines: MAX_LOG_LINES + 1
})).toThrow();
});
it('should accept lines === 1', () => {
const result = scoutLogsSchema.parse({
action: 'logs',
subaction: 'syslog',
host: 'tootie',
lines: 1
});
expect(result.lines).toBe(1);
});
it('should reject lines === 0', () => {
expect(() => scoutLogsSchema.parse({
action: 'logs',
subaction: 'syslog',
host: 'tootie',
lines: 0
})).toThrow();
});
});
