fix(cli): reject negative and fractional filter flags in Danish portal CLIs (#281)

Follow-up to #191: it tightened page/limit/per-page, but five filter flags still used bare z.coerce.number() and accepted negative and fractional values that were sent raw to the portals (e.g. --jobage=-5, --radius=2.5).

jobindex --jobage, jobnet --radius, jobdanmark --category/--jobtitle-id and jobbank --company now use .int().min(1), mirroring #191. Adds 8 network-free regression tests (a negative and a fractional case per flag) using the same validation-error pattern as the existing cli-flag-validation suites.
This commit is contained in:
Oscar Madera
2026-08-05 06:27:43 +02:00
committed by GitHub
parent fcefb8150f
commit eef9c47461
8 changed files with 64 additions and 9 deletions
@@ -4,7 +4,9 @@ import { runCLI } from "./helpers";
// All cases fail schema validation (or the required-flag guard) before any
// network request, so the suite is network-free. Regression context: a bare
// z.coerce.number() accepted --limit=-1, and slice(0, -1) then silently
// dropped the last result instead of erroring.
// dropped the last result instead of erroring. The --company filter flag
// also accepted negative and fractional values that were sent raw to the
// portal.
function expectValidationError(result: { exitCode: number; stdout: string; stderr: string }, option: string) {
expect(result.exitCode).toBe(1);
@@ -33,6 +35,18 @@ describe("Jobbank CLI flag validation", () => {
expect(JSON.parse(result.stderr).error.message).toContain("Expected integer");
});
test("search --company=-1 is rejected", async () => {
const result = await runCLI(["search", "--key", "test", "--company=-1"]);
expectValidationError(result, "company");
expect(JSON.parse(result.stderr).error.message).toContain("greater than or equal to 1");
});
test("search --company=1.5 is rejected as non-integer", async () => {
const result = await runCLI(["search", "--key", "test", "--company=1.5"]);
expectValidationError(result, "company");
expect(JSON.parse(result.stderr).error.message).toContain("Expected integer");
});
test("valid --limit passes schema validation (proven offline via the required-filter guard)", async () => {
const result = await runCLI(["search", "--limit=5"]);