fix(#1004,#1006): get_host_journal - JournalPriority enum, grep/since/until, default 30/max 100, verbatim container, fix doc comment

hive-sh4re/src/lib.rs

@@ -435,17 +435,26 @@ pub enum Request {
         /// Filter to a specific systemd unit (e.g. `hive-c0re.service`).
         #[serde(default, skip_serializing_if = "Option::is_none")]
         unit: Option<String>,
-        /// Filter to a specific nspawn container by logical agent name
-        /// (e.g. `"iris"` → machine `h-iris`). Adds `-M` flag.
+        /// Machine name to pass to journalctl `-M` verbatim (e.g. `h-iris`).
+        /// The caller is responsible for the correct nspawn machine name.
         #[serde(default, skip_serializing_if = "Option::is_none")]
         container: Option<String>,
-        /// Number of journal lines to return (default 100, max 500).
+        /// Number of journal lines to return (default 30, max 100).
         #[serde(default, skip_serializing_if = "Option::is_none")]
         lines: Option<u32>,
-        /// Minimum syslog priority level: `err`, `warning`, `info`, `debug`.
-        /// Corresponds to journalctl `-p LEVEL`.
+        /// Minimum syslog priority level.
         #[serde(default, skip_serializing_if = "Option::is_none")]
-        priority: Option<String>,
+        priority: Option<JournalPriority>,
+        /// Regex to match against log message fields (journalctl `--grep`).
+        #[serde(default, skip_serializing_if = "Option::is_none")]
+        grep: Option<String>,
+        /// Show entries on or newer than this timestamp (journalctl `--since`).
+        /// ISO 8601 or journalctl-accepted relative strings (e.g. `"-1h"`).
+        #[serde(default, skip_serializing_if = "Option::is_none")]
+        since: Option<String>,
+        /// Show entries on or older than this timestamp (journalctl `--until`).
+        #[serde(default, skip_serializing_if = "Option::is_none")]
+        until: Option<String>,
     },
 
     // ---- privileged (manager socket only for now) ---------------------------
@@ -847,6 +856,38 @@ impl ToolGroup {
 /// Per-agent capability grants. Stored in `meta/capabilities.json`
 /// (same shape as `tool-groups.json`: `{ "alice": ["read_host_journal"] }`).
 /// Capabilities control system-level access that hive-c0re enforces
+/// Syslog priority levels for `GetHostJournal`. Serialised as lowercase
+/// strings matching journalctl `-p` accepted values.
+#[derive(Debug, Clone, Copy, PartialEq, Eq, Hash, Serialize, Deserialize, schemars::JsonSchema)]
+#[serde(rename_all = "lowercase")]
+pub enum JournalPriority {
+    Emerg,
+    Alert,
+    Crit,
+    Err,
+    Warning,
+    Notice,
+    Info,
+    Debug,
+}
+
+impl JournalPriority {
+    /// Returns the lowercase string journalctl expects for `-p`.
+    #[must_use]
+    pub fn as_str(self) -> &'static str {
+        match self {
+            Self::Emerg => "emerg",
+            Self::Alert => "alert",
+            Self::Crit => "crit",
+            Self::Err => "err",
+            Self::Warning => "warning",
+            Self::Notice => "notice",
+            Self::Info => "info",
+            Self::Debug => "debug",
+        }
+    }
+}
+
 /// at dispatch time; they are orthogonal to tool groups (which control
 /// which MCP tools the harness exposes to claude).
 ///