@futdevpro/nts-dynamo 1.15.20 → 1.15.23

package/src/_modules/logs/file-log.service.spec.ts

@@ -199,4 +199,143 @@ describe('| DyNTS_FileLog_Service', (): void => {
       expect(DyNTS_FileLog_Service.getInstance().isInstalled()).toBe(false);
     });
   });
+
+  describe('| listLogFiles()', (): void => {
+    it('| ures lista ha nincs installalva', (): void => {
+      const svc = DyNTS_FileLog_Service.getInstance();
+      // NEM hivunk install-t
+      expect(svc.listLogFiles()).toEqual([]);
+    });
+
+    it('| listazza az osszes prefix-elt log fajlt + jelzi az isCurrent flag-et', (): void => {
+      // 3 fajl letrehozasa kezzel kulonbozo prefix-szel
+      fs.writeFileSync(path.join(tempDir, 'spec-2026-01-01_aaa.log'), 'a');
+      fs.writeFileSync(path.join(tempDir, 'spec-2026-01-02_bbb.log'), 'bb');
+      fs.writeFileSync(path.join(tempDir, 'spec-2026-01-03_ccc.log'), 'ccc');
+      fs.writeFileSync(path.join(tempDir, 'other-2026-01-04_zzz.log'), 'should-be-ignored');
+
+      DyNTS_global_settings.log_settings.file_log = {
+        enabled: true,
+        logDir: tempDir,
+        filenamePrefix: 'spec-',
+      };
+      const svc = DyNTS_FileLog_Service.getInstance();
+      svc.install();
+
+      const list = svc.listLogFiles();
+      // 3 spec- fajl + 1 aktualis session fajl = 4
+      expect(list.length).toBe(4);
+      const names: string[] = list.map((e) => e.name);
+      expect(names.find((n) => n.startsWith('other-'))).toBeUndefined();
+      expect(list.filter((e) => e.isCurrent).length).toBe(1);
+    });
+  });
+
+  describe('| readLogFile() — happy paths', (): void => {
+    let svc: DyNTS_FileLog_Service;
+    let testFile: string;
+
+    beforeEach((): void => {
+      DyNTS_global_settings.log_settings.file_log = {
+        enabled: true,
+        logDir: tempDir,
+        filenamePrefix: 'spec-',
+      };
+      svc = DyNTS_FileLog_Service.getInstance();
+      svc.install();
+      // Kulon teszt-fajl
+      testFile = `spec-test-${Date.now()}.log`;
+      const lines: string[] = [];
+      for (let i: number = 1; i <= 50; i++) {
+        lines.push(`line-${i}`);
+      }
+      fs.writeFileSync(path.join(tempDir, testFile), lines.join('\n') + '\n');
+    });
+
+    it('| tail mod: utolso N sor', (): void => {
+      const result = svc.readLogFile(testFile, { tail: 5 });
+      expect(result.mode).toBe('tail');
+      expect(result.lines).toEqual(['line-46', 'line-47', 'line-48', 'line-49', 'line-50']);
+      expect(result.totalLines).toBe(50);
+      expect(result.rangeStart).toBe(46);
+      expect(result.rangeEnd).toBe(50);
+    });
+
+    it('| head mod: elso N sor', (): void => {
+      const result = svc.readLogFile(testFile, { head: 3 });
+      expect(result.mode).toBe('head');
+      expect(result.lines).toEqual(['line-1', 'line-2', 'line-3']);
+      expect(result.rangeStart).toBe(1);
+      expect(result.rangeEnd).toBe(3);
+    });
+
+    it('| range mod: explicit 10-15 tartomany', (): void => {
+      const result = svc.readLogFile(testFile, { rangeStart: 10, rangeEnd: 15 });
+      expect(result.mode).toBe('range');
+      expect(result.lines).toEqual(['line-10', 'line-11', 'line-12', 'line-13', 'line-14', 'line-15']);
+    });
+
+    it('| default tail 200 ha semmi mod nincs megadva', (): void => {
+      const result = svc.readLogFile(testFile, {});
+      expect(result.mode).toBe('tail');
+      // A teszt fajl 50 sor → mind visszajon
+      expect(result.lines.length).toBe(50);
+    });
+  });
+
+  describe('| readLogFile() — error paths', (): void => {
+    let svc: DyNTS_FileLog_Service;
+
+    beforeEach((): void => {
+      DyNTS_global_settings.log_settings.file_log = {
+        enabled: true,
+        logDir: tempDir,
+        filenamePrefix: 'spec-',
+      };
+      svc = DyNTS_FileLog_Service.getInstance();
+      svc.install();
+    });
+
+    it('| throw ha invalid filename (prefix nem matchel)', (): void => {
+      expect(() => svc.readLogFile('other-2026.log')).toThrowError('invalid filename');
+    });
+
+    it('| throw ha path traversal kiserlet (`../`)', (): void => {
+      expect(() => svc.readLogFile('../etc/passwd')).toThrowError('invalid filename');
+    });
+
+    it('| throw ha path separator (`/`) van a nevben', (): void => {
+      expect(() => svc.readLogFile('spec-foo/bar.log')).toThrowError('invalid filename');
+    });
+
+    it('| throw ha file nem letezik', (): void => {
+      expect(() => svc.readLogFile('spec-nonexistent.log')).toThrowError('file not found');
+    });
+
+    it('| NEM installalt service → throw `not installed`', (): void => {
+      svc._teardownForTesting();
+      expect(() => svc.readLogFile('spec-foo.log')).toThrowError(/not installed/);
+    });
+  });
+
+  describe('| getCurrentLogFilename()', (): void => {
+    it('| ures string ha nincs installalva', (): void => {
+      expect(DyNTS_FileLog_Service.getInstance().getCurrentLogFilename()).toBe('');
+    });
+
+    it('| basename-t ad vissza ha installalva van', (): void => {
+      DyNTS_global_settings.log_settings.file_log = {
+        enabled: true,
+        logDir: tempDir,
+        filenamePrefix: 'spec-',
+      };
+      const svc = DyNTS_FileLog_Service.getInstance();
+      svc.install();
+      const basename: string = svc.getCurrentLogFilename();
+      expect(basename.startsWith('spec-')).toBe(true);
+      expect(basename.endsWith('.log')).toBe(true);
+      expect(basename.includes('/')).toBe(false);
+      expect(basename.includes('\\')).toBe(false);
+    });
+  });
 });

package/src/_modules/logs/file-log.service.ts

@@ -3,6 +3,8 @@ import * as path from 'path';
 
 import { DyNTS_SingletonServiceBase } from '../../_services/base/singleton.service-base';
 import { DyNTS_global_settings } from '../../_collections/global-settings.const';
+import { DyNTS_FileLog_Entry } from './_models/file-log-entry.interface';
+import { DyNTS_FileLog_ReadOptions, DyNTS_FileLog_ReadResult } from './_models/file-log-read-result.interface';
 
 
 /**
@@ -22,6 +24,12 @@ const DEFAULT_INCLUDE_STDERR: boolean = true;
 /** ANSI escape code regex (szin/formazas kodok). */
 const ANSI_ESCAPE_REGEX: RegExp = /\x1b\[[0-9;]*[a-zA-Z]/g;
 
+/** Max sor szam egy `readLogFile()` hivasra — vedi a memory-t nagy fajloknal. */
+const MAX_READ_LINES: number = 10000;
+
+/** Default tail sor szam (ha semmi mas mod nincs megadva). */
+const DEFAULT_READ_TAIL: number = 200;
+
 
 /**
  * File-based szerver log service — duplikalja a stdout/stderr-t per-session
@@ -149,6 +157,181 @@ export class DyNTS_FileLog_Service extends DyNTS_SingletonServiceBase {
     return this.currentLogPath;
   }
 
+  /**
+   * Az aktualis aktiv log fajl basename-je (NEM teljes path). Csak akkor
+   * nem-ures, ha az install() sikeresen lefutott.
+   */
+  getCurrentLogFilename(): string {
+    if (!this.currentLogPath) { return ''; }
+    return path.basename(this.currentLogPath);
+  }
+
+  /**
+   * Aktiv log dir abszolut path-ja. Csak akkor nem-ures, ha az install()
+   * sikeresen lefutott.
+   */
+  getActiveLogDir(): string {
+    return this.activeLogDir;
+  }
+
+  /**
+   * Aktiv filename prefix (a service config-jabol). Hasznalja a controller
+   * a request-fajlnev whitelist regex epitesehez.
+   */
+  getFilenamePrefix(): string {
+    return this.filenamePrefix;
+  }
+
+  /**
+   * Osszes log fajl listazasa az aktiv log dir-bol. Csak a service prefix-evel
+   * matchelo fajlokat veszi (`{prefix}*.log`).
+   *
+   * Rendezes: mtime DESC (legujabb elol). Hibakat csendben elnyel — ha a dir
+   * nem letezik vagy nem olvashato, ures array-t ad vissza.
+   */
+  listLogFiles(): DyNTS_FileLog_Entry[] {
+    if (!this.activeLogDir || !this.installed) { return []; }
+    const currentBasename: string = this.getCurrentLogFilename();
+    const entries: DyNTS_FileLog_Entry[] = [];
+
+    try {
+      const dirContents: string[] = fs.readdirSync(this.activeLogDir);
+      for (const name of dirContents) {
+        if (!name.startsWith(this.filenamePrefix) || !name.endsWith(DEFAULT_FILENAME_SUFFIX)) { continue; }
+        const fullPath: string = path.join(this.activeLogDir, name);
+        try {
+          const stats: fs.Stats = fs.statSync(fullPath);
+          if (!stats.isFile()) { continue; }
+          entries.push({
+            name:      name,
+            sizeBytes: stats.size,
+            mtimeMs:   stats.mtimeMs,
+            isCurrent: name === currentBasename,
+          });
+        } catch {
+          // egy fajlonkenti hiba ne szakitsa meg a listat
+        }
+      }
+    } catch {
+      // dir read hiba → ures listat adunk vissza
+      return [];
+    }
+
+    // Legujabb elol
+    entries.sort((a: DyNTS_FileLog_Entry, b: DyNTS_FileLog_Entry): number => b.mtimeMs - a.mtimeMs);
+    return entries;
+  }
+
+  /**
+   * Egy konkret log fajl olvasasa, line-based mode-ban (tail / head / range).
+   *
+   * **Biztonsagi safeguards:**
+   * - Filename whitelist: `{prefix}*.log` mintara matchelo nev kotelezo
+   * - Path resolution `path.resolve(activeLogDir, name)` + `startsWith(activeLogDir)` (path traversal vedelem)
+   * - Sor szam cap: `MAX_READ_LINES` (10000)
+   *
+   * **Hibak:**
+   * - Throw `Error('not installed')` ha a service nincs install-olva
+   * - Throw `Error('invalid filename')` ha a name nem matchel a whitelist-re VAGY kilep az activeLogDir-bol
+   * - Throw `Error('file not found')` ha a fajl nem letezik
+   *
+   * A hivot kell vigyaznia hogy ezeket HTTP status code-okra forditja.
+   */
+  readLogFile(name: string, options: DyNTS_FileLog_ReadOptions = {}): DyNTS_FileLog_ReadResult {
+    if (!this.installed || !this.activeLogDir) {
+      throw new Error('FileLog service not installed');
+    }
+
+    // Whitelist regex: csak a service prefix-evel matchelo fajlnev
+    if (!this.isValidFilename(name)) {
+      throw new Error('invalid filename');
+    }
+
+    // Path resolve + traversal check
+    const resolvedPath: string = path.resolve(this.activeLogDir, name);
+    const resolvedDir: string = path.resolve(this.activeLogDir);
+    // path.sep + sufix ellenőrzéssel megelőzzük a hasonló prefixű dir átverést
+    // (pl. '/logs' vs '/logs-other'); a resolvedPath az activeLogDir-en BELUL
+    // kell legyen.
+    if (!resolvedPath.startsWith(resolvedDir + path.sep) && resolvedPath !== resolvedDir) {
+      throw new Error('invalid filename');
+    }
+
+    if (!fs.existsSync(resolvedPath)) {
+      throw new Error('file not found');
+    }
+
+    const stats: fs.Stats = fs.statSync(resolvedPath);
+    if (!stats.isFile()) {
+      throw new Error('file not found');
+    }
+
+    // Olvass + split soroka. UTF-8 encoding alapertelmezett. Nagy fajloknal a
+    // teljes betoltes nem ideal, de a 10000-soros cap es a Stream-based
+    // optimization egy kesobbi iteracio lehet ha kell.
+    const fullContent: string = fs.readFileSync(resolvedPath, 'utf-8');
+    // Split a sorvegekre — utolso ures stringet kivagjuk ha a fajl
+    // sorvégzodessel zarult (regenerált sor szám hibakerulest celozzuk meg)
+    const allLines: string[] = fullContent.split(/\r?\n/);
+    if (allLines.length > 0 && allLines[allLines.length - 1] === '') {
+      allLines.pop();
+    }
+    const totalLines: number = allLines.length;
+
+    // Mod meghatarozasa: range > head > tail
+    let mode: 'tail' | 'head' | 'range';
+    let startIdx: number;
+    let endIdx: number;  // exclusive
+
+    if (options.rangeStart !== undefined && options.rangeEnd !== undefined) {
+      mode = 'range';
+      const start1: number = Math.max(1, Math.floor(options.rangeStart));
+      const end1: number = Math.max(start1, Math.floor(options.rangeEnd));
+      startIdx = Math.max(0, Math.min(totalLines, start1 - 1));
+      endIdx   = Math.max(startIdx, Math.min(totalLines, end1));
+      // Cap
+      if (endIdx - startIdx > MAX_READ_LINES) {
+        endIdx = startIdx + MAX_READ_LINES;
+      }
+    } else if (options.head !== undefined) {
+      mode = 'head';
+      const headN: number = Math.min(Math.max(1, Math.floor(options.head)), MAX_READ_LINES);
+      startIdx = 0;
+      endIdx   = Math.min(totalLines, headN);
+    } else {
+      mode = 'tail';
+      const tailN: number = Math.min(Math.max(1, Math.floor(options.tail ?? DEFAULT_READ_TAIL)), MAX_READ_LINES);
+      startIdx = Math.max(0, totalLines - tailN);
+      endIdx   = totalLines;
+    }
+
+    const lines: string[] = allLines.slice(startIdx, endIdx);
+
+    return {
+      name:       path.basename(resolvedPath),
+      sizeBytes:  stats.size,
+      totalLines: totalLines,
+      lines:      lines,
+      mode:       mode,
+      rangeStart: startIdx + 1,                       // 1-based, inclusive
+      rangeEnd:   Math.max(startIdx, endIdx),         // 1-based, inclusive ha lines van; egyebkent 0-szeru
+    };
+  }
+
+  /**
+   * Filename whitelist ellenorzes. Csak a service prefix-evel matchelo,
+   * biztonsagos karakterkeszletu fajlnev megengedett.
+   */
+  private isValidFilename(name: string): boolean {
+    if (typeof name !== 'string' || name.length === 0 || name.length > 256) { return false; }
+    // Path-szeparatorokat kifejezetten tiltjuk (mar a regex is, de gyors check)
+    if (name.includes('/') || name.includes('\\') || name.includes('..')) { return false; }
+    // `{prefix}[\w\-.]+\.log` — szigoru ASCII set
+    const escapedPrefix: string = this.filenamePrefix.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+    const regex: RegExp = new RegExp(`^${escapedPrefix}[\\w\\-.]+\\.log$`);
+    return regex.test(name);
+  }
+
   /**
    * Telepitve van-e (csak akkor true, ha az enabled === true es a setup nem bukott).
    */

package/src/_modules/logs/file-logs.controller.spec.ts

@@ -0,0 +1,245 @@
+import * as fs from 'fs';
+import * as os from 'os';
+import * as path from 'path';
+
+import { DyFM_HttpCallType } from '@futdevpro/fsm-dynamo';
+
+import { DyNTS_global_settings } from '../../_collections/global-settings.const';
+
+import { DyNTS_FileLog_Service } from './file-log.service';
+import { DyNTS_FileLogs_Controller } from './file-logs.controller';
+
+
+/** Minimal Request mock builder. */
+const mockReq = (args: { params?: Record<string, string>; query?: Record<string, any> } = {}): any => ({
+  params: args.params ?? {},
+  query: args.query ?? {},
+  headers: {},
+});
+
+/** Minimal Response mock that records status + send payload. */
+interface MockRes {
+  statusCode: number;
+  payload: any;
+  status: (code: number) => MockRes;
+  send: (data: any) => MockRes;
+}
+const mockRes = (): MockRes => {
+  const res: MockRes = {
+    statusCode: 200,
+    payload: undefined,
+    status(code: number): MockRes { res.statusCode = code; return res; },
+    send(data: any): MockRes { res.payload = data; return res; },
+  };
+  return res;
+};
+
+
+/** Extract a task function by endpoint name. */
+const taskByName = (controller: DyNTS_FileLogs_Controller, name: string): ((req: any, res: any) => Promise<void>) => {
+  const ep: any = controller.endpoints.find((e: any) => e.name === name);
+  if (!ep) { throw new Error(`endpoint ${name} not found`); }
+  return ep.tasks[0];
+};
+
+
+describe('| DyNTS_FileLogs_Controller', (): void => {
+  let tempDir: string;
+  let originalFileLogConfig: typeof DyNTS_global_settings.log_settings.file_log;
+
+  beforeEach((): void => {
+    tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'nts-filelogs-ctrl-'));
+    originalFileLogConfig = DyNTS_global_settings.log_settings.file_log;
+  });
+
+  afterEach((): void => {
+    DyNTS_FileLog_Service.getInstance()._teardownForTesting();
+    DyNTS_FileLogs_Controller.configure({});
+    DyNTS_global_settings.log_settings.file_log = originalFileLogConfig;
+    try { fs.rmSync(tempDir, { recursive: true, force: true }); } catch { /* swallow */ }
+  });
+
+
+  describe('| singleton + endpoint shape', (): void => {
+    it('| getInstance() singleton', (): void => {
+      const a = DyNTS_FileLogs_Controller.getInstance();
+      const b = DyNTS_FileLogs_Controller.getInstance();
+      expect(a).toBe(b);
+    });
+
+    it('| setupEndpoints letrehozza /list + /file/:filename endpointokat', (): void => {
+      const ctrl = DyNTS_FileLogs_Controller.getInstance();
+      ctrl.setupEndpoints();
+
+      const list = ctrl.endpoints.find((e: any) => e.name === 'listFileLogs');
+      const read = ctrl.endpoints.find((e: any) => e.name === 'readFileLog');
+      expect(list).toBeDefined();
+      expect(list?.type).toBe(DyFM_HttpCallType.get);
+      expect(read).toBeDefined();
+      expect(read?.type).toBe(DyFM_HttpCallType.get);
+    });
+
+    it('| authPreProcess hozzaadodik preProcesses-be ha config-olva', (): void => {
+      const myAuth = async (): Promise<void> => { /* noop */ };
+      DyNTS_FileLogs_Controller.configure({ authPreProcess: myAuth });
+      const ctrl = DyNTS_FileLogs_Controller.getInstance();
+      ctrl.setupEndpoints();
+      const list: any = ctrl.endpoints.find((e: any) => e.name === 'listFileLogs');
+      expect(list).toBeDefined();
+      // A preProcesses property private, de cast-tal ellenorizheto
+      const pre: any = (list as any).preProcesses;
+      expect(pre).toBeDefined();
+      expect(pre.length).toBe(1);
+      expect(pre[0]).toBe(myAuth);
+    });
+  });
+
+
+  describe('| GET /list', (): void => {
+    it('| 503 ha a service nincs installalva', async (): Promise<void> => {
+      const ctrl = DyNTS_FileLogs_Controller.getInstance();
+      ctrl.setupEndpoints();
+      const task = taskByName(ctrl, 'listFileLogs');
+
+      const res = mockRes();
+      await task(mockReq(), res);
+      expect(res.statusCode).toBe(503);
+      expect(res.payload.error).toContain('not installed');
+    });
+
+    it('| 200 + files lista ha installalva van', async (): Promise<void> => {
+      DyNTS_global_settings.log_settings.file_log = { enabled: true, logDir: tempDir, filenamePrefix: 'spec-' };
+      DyNTS_FileLog_Service.getInstance().install();
+      // Egy extra spec- fajlt kezzel
+      fs.writeFileSync(path.join(tempDir, 'spec-extra-2026.log'), 'extra-content');
+
+      const ctrl = DyNTS_FileLogs_Controller.getInstance();
+      ctrl.setupEndpoints();
+      const task = taskByName(ctrl, 'listFileLogs');
+
+      const res = mockRes();
+      await task(mockReq(), res);
+      expect(res.statusCode).toBe(200);
+      expect(res.payload.count).toBeGreaterThanOrEqual(2);  // session + extra
+      expect(res.payload.totalSizeBytes).toBeGreaterThan(0);
+      expect(Array.isArray(res.payload.files)).toBe(true);
+    });
+  });
+
+
+  describe('| GET /file/:filename', (): void => {
+    let testFile: string;
+
+    beforeEach((): void => {
+      DyNTS_global_settings.log_settings.file_log = { enabled: true, logDir: tempDir, filenamePrefix: 'spec-' };
+      DyNTS_FileLog_Service.getInstance().install();
+      testFile = `spec-read-${Date.now()}.log`;
+      const lines: string[] = [];
+      for (let i: number = 1; i <= 30; i++) {
+        lines.push(`row-${i}`);
+      }
+      fs.writeFileSync(path.join(tempDir, testFile), lines.join('\n') + '\n');
+    });
+
+    it('| 503 ha a service nincs installalva', async (): Promise<void> => {
+      DyNTS_FileLog_Service.getInstance()._teardownForTesting();
+      const ctrl = DyNTS_FileLogs_Controller.getInstance();
+      ctrl.setupEndpoints();
+      const task = taskByName(ctrl, 'readFileLog');
+
+      const res = mockRes();
+      await task(mockReq({ params: { filename: testFile } }), res);
+      expect(res.statusCode).toBe(503);
+    });
+
+    it('| 200 + tail mod default', async (): Promise<void> => {
+      const ctrl = DyNTS_FileLogs_Controller.getInstance();
+      ctrl.setupEndpoints();
+      const task = taskByName(ctrl, 'readFileLog');
+
+      const res = mockRes();
+      await task(mockReq({ params: { filename: testFile }, query: { tail: '5' } }), res);
+      expect(res.statusCode).toBe(200);
+      expect(res.payload.mode).toBe('tail');
+      expect(res.payload.lines).toEqual(['row-26', 'row-27', 'row-28', 'row-29', 'row-30']);
+      expect(res.payload.totalLines).toBe(30);
+    });
+
+    it('| 200 + head mod', async (): Promise<void> => {
+      const ctrl = DyNTS_FileLogs_Controller.getInstance();
+      ctrl.setupEndpoints();
+      const task = taskByName(ctrl, 'readFileLog');
+
+      const res = mockRes();
+      await task(mockReq({ params: { filename: testFile }, query: { head: '3' } }), res);
+      expect(res.statusCode).toBe(200);
+      expect(res.payload.mode).toBe('head');
+      expect(res.payload.lines).toEqual(['row-1', 'row-2', 'row-3']);
+    });
+
+    it('| 200 + range mod', async (): Promise<void> => {
+      const ctrl = DyNTS_FileLogs_Controller.getInstance();
+      ctrl.setupEndpoints();
+      const task = taskByName(ctrl, 'readFileLog');
+
+      const res = mockRes();
+      await task(mockReq({ params: { filename: testFile }, query: { rangeStart: '5', rangeEnd: '8' } }), res);
+      expect(res.statusCode).toBe(200);
+      expect(res.payload.mode).toBe('range');
+      expect(res.payload.lines).toEqual(['row-5', 'row-6', 'row-7', 'row-8']);
+    });
+
+    it('| 400 invalid tail (negativ)', async (): Promise<void> => {
+      const ctrl = DyNTS_FileLogs_Controller.getInstance();
+      ctrl.setupEndpoints();
+      const task = taskByName(ctrl, 'readFileLog');
+
+      const res = mockRes();
+      await task(mockReq({ params: { filename: testFile }, query: { tail: '-5' } }), res);
+      expect(res.statusCode).toBe(400);
+    });
+
+    it('| 400 invalid range (end < start)', async (): Promise<void> => {
+      const ctrl = DyNTS_FileLogs_Controller.getInstance();
+      ctrl.setupEndpoints();
+      const task = taskByName(ctrl, 'readFileLog');
+
+      const res = mockRes();
+      await task(mockReq({ params: { filename: testFile }, query: { rangeStart: '10', rangeEnd: '5' } }), res);
+      expect(res.statusCode).toBe(400);
+    });
+
+    it('| 404 invalid filename (prefix nem matchel)', async (): Promise<void> => {
+      const ctrl = DyNTS_FileLogs_Controller.getInstance();
+      ctrl.setupEndpoints();
+      const task = taskByName(ctrl, 'readFileLog');
+
+      const res = mockRes();
+      await task(mockReq({ params: { filename: 'evil-2026.log' } }), res);
+      expect(res.statusCode).toBe(404);
+      expect(res.payload.error).toBe('invalid filename');
+    });
+
+    it('| 404 path traversal (`../`)', async (): Promise<void> => {
+      const ctrl = DyNTS_FileLogs_Controller.getInstance();
+      ctrl.setupEndpoints();
+      const task = taskByName(ctrl, 'readFileLog');
+
+      const res = mockRes();
+      await task(mockReq({ params: { filename: '../etc/passwd' } }), res);
+      expect(res.statusCode).toBe(404);
+      expect(res.payload.error).toBe('invalid filename');
+    });
+
+    it('| 404 file nem letezik (de valid prefix)', async (): Promise<void> => {
+      const ctrl = DyNTS_FileLogs_Controller.getInstance();
+      ctrl.setupEndpoints();
+      const task = taskByName(ctrl, 'readFileLog');
+
+      const res = mockRes();
+      await task(mockReq({ params: { filename: 'spec-nonexistent.log' } }), res);
+      expect(res.statusCode).toBe(404);
+      expect(res.payload.error).toBe('file not found');
+    });
+  });
+});