import { describe, it, expect } from 'vitest'; import { z } from 'zod'; import { iconRef } from '../../lib/api/routes/devices.js'; describe('icon ref validation', () => { it('accepts set + brand refs and null', () => { expect(iconRef.safeParse('set:devices:router').success).toBe(true); expect(iconRef.safeParse('brand:apple').success).toBe(true); expect(iconRef.safeParse(null).success).toBe(true); }); it('rejects junk', () => { expect(iconRef.safeParse('set:bad').success).toBe(false); expect(iconRef.safeParse('javascript:alert').success).toBe(false); }); });