@oculum/scanner 1.0.1 → 1.0.3

package/src/types.ts

@@ -56,6 +56,61 @@ export interface Vulnerability {
   originalSeverity?: VulnerabilitySeverity // For downgraded findings, the original severity
 }
 
+/**
+ * Cancellation token for aborting scans gracefully
+ * Allows users to stop long-running scans (Ctrl+C) and get partial results
+ */
+export interface CancellationToken {
+  /** Whether cancellation has been requested */
+  cancelled: boolean
+  /** Reason for cancellation (e.g., "User pressed Ctrl+C") */
+  reason?: string
+  /** Request cancellation */
+  cancel(reason?: string): void
+  /** Register cleanup callback to run when cancelled */
+  onCancel(callback: () => void): void
+}
+
+/**
+ * Create a new cancellation token
+ *
+ * @example
+ * const token = createCancellationToken()
+ * process.on('SIGINT', () => token.cancel('User interrupted'))
+ * const result = await runScan(files, repo, { cancellationToken: token })
+ */
+export function createCancellationToken(): CancellationToken {
+  const cleanupCallbacks: Array<() => void> = []
+
+  const token: CancellationToken = {
+    cancelled: false,
+    reason: undefined,
+    cancel(reason?: string) {
+      if (!token.cancelled) {
+        token.cancelled = true
+        token.reason = reason
+        // Run cleanup callbacks
+        cleanupCallbacks.forEach(cb => {
+          try {
+            cb()
+          } catch (e) {
+            // Ignore cleanup errors
+          }
+        })
+      }
+    },
+    onCancel(callback) {
+      if (token.cancelled) {
+        callback() // Already cancelled, run immediately
+      } else {
+        cleanupCallbacks.push(callback)
+      }
+    }
+  }
+
+  return token
+}
+
 export interface ScanFile {
   path: string
   content: string
@@ -107,6 +162,10 @@ export interface ScanResult {
     cacheReadTokens: number
     cacheHitRate: number
   }
+
+  // Cancellation metadata
+  cancelled?: boolean // true if scan was cancelled by user
+  cancelReason?: string // Reason for cancellation (e.g., "User pressed Ctrl+C")
 }
 
 export interface ScanProgress {

package/src/utils/context-helpers.ts

@@ -201,6 +201,46 @@ export function isClientBundledFile(filePath: string): boolean {
   return clientPatterns.some(pattern => pattern.test(filePath))
 }
 
+/**
+ * Check if file is a seed or data generation file
+ * These files generate test/demo data and Math.random() usage is acceptable
+ * Used to reduce false positives for Math.random() detection
+ */
+export function isSeedOrDataGenFile(filePath: string): boolean {
+  const patterns = [
+    /\/seed\//i,
+    /\/seeds\//i,
+    /seed-database\.(ts|js)$/i,
+    /\/seeder\./i,
+    /datacreator\.(ts|js)$/i,
+    /\/data\/.*creator/i,
+    /\/fixtures\//i,
+    /\.fixture\./i,
+    /\/generators?\//i,
+    /\/factories\//i,
+    /factory\.(ts|js)$/i,
+  ]
+  return patterns.some(p => p.test(filePath))
+}
+
+/**
+ * Check if file is educational/intentional vulnerability code
+ * These files (e.g., OWASP Juice Shop) contain intentional vulnerabilities for training
+ * Should be skipped entirely to avoid false positives
+ */
+export function isEducationalVulnerabilityFile(filePath: string): boolean {
+  const patterns = [
+    /\/insecurity\.(ts|js)$/i,
+    /\/vulnerable\.(ts|js)$/i,
+    /\/intentionally-vulnerable/i,
+    /\/security-examples?\//i,
+    /\/vuln-examples?\//i,
+    /\/challenge-\d+/i,  // OWASP Juice Shop challenges
+    /\/exploit-examples?\//i,
+  ]
+  return patterns.some(p => p.test(filePath))
+}
+
 // ============================================================================
 // Code Line Context Detection
 // ============================================================================