@oculum/scanner 1.0.9 → 1.0.11

package/src/__tests__/snapshots/__snapshots__/anthropic-validation-refactor.test.ts.snap

@@ -0,0 +1,758 @@
+// Jest Snapshot v1, https://goo.gl/fbAQLP
+
+exports[`Refactor Safety - anthropic.ts Auto-Dismiss Rules Auto-dismiss stats tracking should correctly count auto-dismissed findings 1`] = `
+Object {
+  "dismissed": Array [
+    Object {
+      "finding": Object {
+        "category": "dangerous_function",
+        "confidence": "high",
+        "description": "Test description",
+        "filePath": "src/__tests__/test.ts",
+        "id": "test-finding-1",
+        "layer": 2,
+        "lineContent": "const x = 1;",
+        "lineNumber": 10,
+        "severity": "high",
+        "suggestedFix": "Fix it",
+        "title": "Test Finding",
+      },
+      "reason": "Finding in test/mock file",
+      "rule": "test_file",
+    },
+    Object {
+      "finding": Object {
+        "category": "dangerous_function",
+        "confidence": "high",
+        "description": "Test description",
+        "filePath": "src/__tests__/another.test.ts",
+        "id": "test-finding-1",
+        "layer": 2,
+        "lineContent": "const x = 1;",
+        "lineNumber": 10,
+        "severity": "high",
+        "suggestedFix": "Fix it",
+        "title": "Test Finding",
+      },
+      "reason": "Finding in test/mock file",
+      "rule": "test_file",
+    },
+  ],
+  "toValidate": Array [
+    Object {
+      "category": "dangerous_function",
+      "confidence": "high",
+      "description": "Test description",
+      "filePath": "src/real-code.ts",
+      "id": "test-finding-1",
+      "layer": 2,
+      "lineContent": "const x = 1;",
+      "lineNumber": 10,
+      "severity": "high",
+      "suggestedFix": "Fix it",
+      "title": "Test Finding",
+    },
+  ],
+}
+`;
+
+exports[`Refactor Safety - anthropic.ts Auto-Dismiss Rules CSS classes auto-dismiss should NOT auto-dismiss high entropy strings without CSS indicators 1`] = `
+Object {
+  "dismissed": Array [],
+  "toValidate": Array [
+    Object {
+      "category": "high_entropy_string",
+      "confidence": "high",
+      "description": "Test description",
+      "filePath": "src/handler.ts",
+      "id": "test-finding-1",
+      "layer": 2,
+      "lineContent": "const token = \\"aB3dE5fG7hI9jK1lM3nO5pQ7rS9tU1vW3xY5z\\";",
+      "lineNumber": 10,
+      "severity": "high",
+      "suggestedFix": "Fix it",
+      "title": "Test Finding",
+    },
+  ],
+}
+`;
+
+exports[`Refactor Safety - anthropic.ts Auto-Dismiss Rules CSS classes auto-dismiss should auto-dismiss Tailwind classes flagged as high entropy 1`] = `
+Object {
+  "dismissed": Array [
+    Object {
+      "finding": Object {
+        "category": "high_entropy_string",
+        "confidence": "high",
+        "description": "Test description",
+        "filePath": "src/handler.ts",
+        "id": "test-finding-1",
+        "layer": 2,
+        "lineContent": "className=\\"flex items-center justify-between px-4 py-2 text-sm\\"",
+        "lineNumber": 10,
+        "severity": "high",
+        "suggestedFix": "Fix it",
+        "title": "Test Finding",
+      },
+      "reason": "CSS/Tailwind classes (not a secret)",
+      "rule": "css_classes",
+    },
+    Object {
+      "finding": Object {
+        "category": "high_entropy_string",
+        "confidence": "high",
+        "description": "Test description",
+        "filePath": "src/handler.ts",
+        "id": "test-finding-1",
+        "layer": 2,
+        "lineContent": "class=\\"bg-gray-100 rounded-lg shadow-md hover:bg-gray-200\\"",
+        "lineNumber": 10,
+        "severity": "high",
+        "suggestedFix": "Fix it",
+        "title": "Test Finding",
+      },
+      "reason": "CSS/Tailwind classes (not a secret)",
+      "rule": "css_classes",
+    },
+  ],
+  "toValidate": Array [],
+}
+`;
+
+exports[`Refactor Safety - anthropic.ts Auto-Dismiss Rules Comment line auto-dismiss should NOT auto-dismiss ai_pattern findings in comments 1`] = `
+Object {
+  "dismissed": Array [],
+  "toValidate": Array [
+    Object {
+      "category": "ai_pattern",
+      "confidence": "high",
+      "description": "Test description",
+      "filePath": "src/handler.ts",
+      "id": "test-finding-1",
+      "layer": 2,
+      "lineContent": "// AI-generated code pattern",
+      "lineNumber": 10,
+      "severity": "high",
+      "suggestedFix": "Fix it",
+      "title": "Test Finding",
+    },
+  ],
+}
+`;
+
+exports[`Refactor Safety - anthropic.ts Auto-Dismiss Rules Comment line auto-dismiss should auto-dismiss findings in comment lines 1`] = `
+Object {
+  "dismissed": Array [
+    Object {
+      "finding": Object {
+        "category": "hardcoded_secret",
+        "confidence": "high",
+        "description": "Test description",
+        "filePath": "src/handler.ts",
+        "id": "test-finding-1",
+        "layer": 2,
+        "lineContent": "// TODO: Replace with env var: API_KEY=sk-1234",
+        "lineNumber": 10,
+        "severity": "high",
+        "suggestedFix": "Fix it",
+        "title": "Test Finding",
+      },
+      "reason": "Code comment (not executable)",
+      "rule": "comment_line",
+    },
+    Object {
+      "finding": Object {
+        "category": "dangerous_function",
+        "confidence": "high",
+        "description": "Test description",
+        "filePath": "src/handler.ts",
+        "id": "test-finding-1",
+        "layer": 2,
+        "lineContent": "/* eval(userCode) would be dangerous */",
+        "lineNumber": 10,
+        "severity": "high",
+        "suggestedFix": "Fix it",
+        "title": "Test Finding",
+      },
+      "reason": "Code comment (not executable)",
+      "rule": "comment_line",
+    },
+  ],
+  "toValidate": Array [],
+}
+`;
+
+exports[`Refactor Safety - anthropic.ts Auto-Dismiss Rules Documentation file auto-dismiss should auto-dismiss findings in documentation files 1`] = `
+Object {
+  "dismissed": Array [
+    Object {
+      "finding": Object {
+        "category": "dangerous_function",
+        "confidence": "high",
+        "description": "Test description",
+        "filePath": "docs/api.md",
+        "id": "test-finding-1",
+        "layer": 2,
+        "lineContent": "const x = 1;",
+        "lineNumber": 10,
+        "severity": "high",
+        "suggestedFix": "Fix it",
+        "title": "Test Finding",
+      },
+      "reason": "Finding in documentation file",
+      "rule": "documentation_file",
+    },
+    Object {
+      "finding": Object {
+        "category": "dangerous_function",
+        "confidence": "high",
+        "description": "Test description",
+        "filePath": "README.md",
+        "id": "test-finding-1",
+        "layer": 2,
+        "lineContent": "const x = 1;",
+        "lineNumber": 10,
+        "severity": "high",
+        "suggestedFix": "Fix it",
+        "title": "Test Finding",
+      },
+      "reason": "Finding in example/demo file",
+      "rule": "example_file",
+    },
+    Object {
+      "finding": Object {
+        "category": "dangerous_function",
+        "confidence": "high",
+        "description": "Test description",
+        "filePath": "CHANGELOG.txt",
+        "id": "test-finding-1",
+        "layer": 2,
+        "lineContent": "const x = 1;",
+        "lineNumber": 10,
+        "severity": "high",
+        "suggestedFix": "Fix it",
+        "title": "Test Finding",
+      },
+      "reason": "Finding in documentation file",
+      "rule": "documentation_file",
+    },
+  ],
+  "toValidate": Array [],
+}
+`;
+
+exports[`Refactor Safety - anthropic.ts Auto-Dismiss Rules Environment variable reference auto-dismiss should NOT auto-dismiss actual hardcoded secrets 1`] = `
+Object {
+  "dismissed": Array [],
+  "toValidate": Array [
+    Object {
+      "category": "hardcoded_secret",
+      "confidence": "high",
+      "description": "Test description",
+      "filePath": "src/handler.ts",
+      "id": "test-finding-1",
+      "layer": 2,
+      "lineContent": "const apiKey = \\"sk-1234567890abcdef\\";",
+      "lineNumber": 10,
+      "severity": "high",
+      "suggestedFix": "Fix it",
+      "title": "Test Finding",
+    },
+  ],
+}
+`;
+
+exports[`Refactor Safety - anthropic.ts Auto-Dismiss Rules Environment variable reference auto-dismiss should auto-dismiss env var references flagged as secrets 1`] = `
+Object {
+  "dismissed": Array [
+    Object {
+      "finding": Object {
+        "category": "hardcoded_secret",
+        "confidence": "high",
+        "description": "Test description",
+        "filePath": "src/handler.ts",
+        "id": "test-finding-1",
+        "layer": 2,
+        "lineContent": "const apiKey = process.env.API_KEY;",
+        "lineNumber": 10,
+        "severity": "high",
+        "suggestedFix": "Fix it",
+        "title": "Test Finding",
+      },
+      "reason": "Uses environment variable (not hardcoded)",
+      "rule": "env_var_reference",
+    },
+    Object {
+      "finding": Object {
+        "category": "high_entropy_string",
+        "confidence": "high",
+        "description": "Test description",
+        "filePath": "src/handler.ts",
+        "id": "test-finding-1",
+        "layer": 2,
+        "lineContent": "const secret = process.env.SECRET_KEY;",
+        "lineNumber": 10,
+        "severity": "high",
+        "suggestedFix": "Fix it",
+        "title": "Test Finding",
+      },
+      "reason": "Uses environment variable (not hardcoded)",
+      "rule": "env_var_reference",
+    },
+  ],
+  "toValidate": Array [],
+}
+`;
+
+exports[`Refactor Safety - anthropic.ts Auto-Dismiss Rules Example file auto-dismiss should auto-dismiss findings in example files 1`] = `
+Object {
+  "dismissed": Array [
+    Object {
+      "finding": Object {
+        "category": "dangerous_function",
+        "confidence": "high",
+        "description": "Test description",
+        "filePath": "src/examples/demo.ts",
+        "id": "test-finding-1",
+        "layer": 2,
+        "lineContent": "const x = 1;",
+        "lineNumber": 10,
+        "severity": "high",
+        "suggestedFix": "Fix it",
+        "title": "Test Finding",
+      },
+      "reason": "Finding in example/demo file",
+      "rule": "example_file",
+    },
+  ],
+  "toValidate": Array [
+    Object {
+      "category": "dangerous_function",
+      "confidence": "high",
+      "description": "Test description",
+      "filePath": "examples/basic-usage.ts",
+      "id": "test-finding-1",
+      "layer": 2,
+      "lineContent": "const x = 1;",
+      "lineNumber": 10,
+      "severity": "high",
+      "suggestedFix": "Fix it",
+      "title": "Test Finding",
+    },
+  ],
+}
+`;
+
+exports[`Refactor Safety - anthropic.ts Auto-Dismiss Rules Generic message auto-dismiss should auto-dismiss generic success/error messages 1`] = `
+Object {
+  "dismissed": Array [
+    Object {
+      "finding": Object {
+        "category": "ai_pattern",
+        "confidence": "high",
+        "description": "Test description",
+        "filePath": "src/handler.ts",
+        "id": "test-finding-1",
+        "layer": 2,
+        "lineContent": "console.log(\\"success\\");",
+        "lineNumber": 10,
+        "severity": "high",
+        "suggestedFix": "Fix it",
+        "title": "Test Finding",
+      },
+      "reason": "Generic UI message (not security-relevant)",
+      "rule": "generic_message",
+    },
+    Object {
+      "finding": Object {
+        "category": "ai_pattern",
+        "confidence": "high",
+        "description": "Test description",
+        "filePath": "src/handler.ts",
+        "id": "test-finding-1",
+        "layer": 2,
+        "lineContent": "throw new Error(\\"something went wrong\\");",
+        "lineNumber": 10,
+        "severity": "high",
+        "suggestedFix": "Fix it",
+        "title": "Test Finding",
+      },
+      "reason": "Generic UI message (not security-relevant)",
+      "rule": "generic_message",
+    },
+  ],
+  "toValidate": Array [],
+}
+`;
+
+exports[`Refactor Safety - anthropic.ts Auto-Dismiss Rules Health check endpoint auto-dismiss should NOT auto-dismiss other missing_auth findings 1`] = `
+Object {
+  "dismissed": Array [],
+  "toValidate": Array [
+    Object {
+      "category": "missing_auth",
+      "confidence": "high",
+      "description": "Test description",
+      "filePath": "src/api/users.ts",
+      "id": "test-finding-1",
+      "layer": 2,
+      "lineContent": "app.post(\\"/api/users\\", createUser)",
+      "lineNumber": 10,
+      "severity": "high",
+      "suggestedFix": "Fix it",
+      "title": "Test Finding",
+    },
+  ],
+}
+`;
+
+exports[`Refactor Safety - anthropic.ts Auto-Dismiss Rules Health check endpoint auto-dismiss should auto-dismiss health check missing_auth findings 1`] = `
+Object {
+  "dismissed": Array [
+    Object {
+      "finding": Object {
+        "category": "missing_auth",
+        "confidence": "high",
+        "description": "Test description",
+        "filePath": "src/api/health.ts",
+        "id": "test-finding-1",
+        "layer": 2,
+        "lineContent": "app.get(\\"/health\\", (req, res) => res.send(\\"ok\\"))",
+        "lineNumber": 10,
+        "severity": "high",
+        "suggestedFix": "Fix it",
+        "title": "Test Finding",
+      },
+      "reason": "Public health check endpoint (auth not required)",
+      "rule": "health_check_endpoint",
+    },
+    Object {
+      "finding": Object {
+        "category": "missing_auth",
+        "confidence": "high",
+        "description": "Test description",
+        "filePath": "src/routes/health.ts",
+        "id": "test-finding-1",
+        "layer": 2,
+        "lineContent": "router.get(\\"/api/healthcheck\\", handler)",
+        "lineNumber": 10,
+        "severity": "high",
+        "suggestedFix": "Fix it",
+        "title": "Test Finding",
+      },
+      "reason": "Public health check endpoint (auth not required)",
+      "rule": "health_check_endpoint",
+    },
+  ],
+  "toValidate": Array [],
+}
+`;
+
+exports[`Refactor Safety - anthropic.ts Auto-Dismiss Rules Info severity auto-dismiss (core tier only) should NOT auto-dismiss info severity for AI-assisted tier 1`] = `
+Object {
+  "dismissed": Array [],
+  "toValidate": Array [
+    Object {
+      "category": "ai_pattern",
+      "confidence": "high",
+      "description": "Test description",
+      "filePath": "src/handler.ts",
+      "id": "test-finding-1",
+      "layer": 2,
+      "lineContent": "const x = 1;",
+      "lineNumber": 10,
+      "severity": "info",
+      "suggestedFix": "Fix it",
+      "title": "Test Finding",
+    },
+  ],
+}
+`;
+
+exports[`Refactor Safety - anthropic.ts Auto-Dismiss Rules Info severity auto-dismiss (core tier only) should auto-dismiss info severity for core tier findings 1`] = `
+Object {
+  "dismissed": Array [
+    Object {
+      "finding": Object {
+        "category": "dangerous_function",
+        "confidence": "high",
+        "description": "Test description",
+        "filePath": "src/handler.ts",
+        "id": "test-finding-1",
+        "layer": 2,
+        "lineContent": "const x = 1;",
+        "lineNumber": 10,
+        "severity": "info",
+        "suggestedFix": "Fix it",
+        "title": "Test Finding",
+      },
+      "reason": "Already info severity for core detector (low priority)",
+      "rule": "info_severity_core_only",
+    },
+    Object {
+      "finding": Object {
+        "category": "hardcoded_secret",
+        "confidence": "high",
+        "description": "Test description",
+        "filePath": "src/handler.ts",
+        "id": "test-finding-1",
+        "layer": 1,
+        "lineContent": "const x = 1;",
+        "lineNumber": 10,
+        "severity": "info",
+        "suggestedFix": "Fix it",
+        "title": "Test Finding",
+      },
+      "reason": "Already info severity for core detector (low priority)",
+      "rule": "info_severity_core_only",
+    },
+  ],
+  "toValidate": Array [],
+}
+`;
+
+exports[`Refactor Safety - anthropic.ts Auto-Dismiss Rules Mixed findings should correctly filter mixed findings 1`] = `
+Object {
+  "dismissed": Array [
+    Object {
+      "finding": Object {
+        "category": "dangerous_function",
+        "confidence": "high",
+        "description": "Test description",
+        "filePath": "src/__tests__/handler.test.ts",
+        "id": "1",
+        "layer": 2,
+        "lineContent": "const x = 1;",
+        "lineNumber": 10,
+        "severity": "high",
+        "suggestedFix": "Fix it",
+        "title": "Test Finding",
+      },
+      "reason": "Finding in test/mock file",
+      "rule": "test_file",
+    },
+    Object {
+      "finding": Object {
+        "category": "hardcoded_secret",
+        "confidence": "high",
+        "description": "Test description",
+        "filePath": "src/config.ts",
+        "id": "3",
+        "layer": 2,
+        "lineContent": "const key = process.env.SECRET;",
+        "lineNumber": 10,
+        "severity": "high",
+        "suggestedFix": "Fix it",
+        "title": "Test Finding",
+      },
+      "reason": "Uses environment variable (not hardcoded)",
+      "rule": "env_var_reference",
+    },
+    Object {
+      "finding": Object {
+        "category": "dangerous_function",
+        "confidence": "high",
+        "description": "Test description",
+        "filePath": "src/util.ts",
+        "id": "5",
+        "layer": 2,
+        "lineContent": "const x = 1;",
+        "lineNumber": 10,
+        "severity": "info",
+        "suggestedFix": "Fix it",
+        "title": "Test Finding",
+      },
+      "reason": "Already info severity for core detector (low priority)",
+      "rule": "info_severity_core_only",
+    },
+  ],
+  "toValidate": Array [
+    Object {
+      "category": "dangerous_function",
+      "confidence": "high",
+      "description": "Test description",
+      "filePath": "src/api/handler.ts",
+      "id": "2",
+      "layer": 2,
+      "lineContent": "const x = 1;",
+      "lineNumber": 10,
+      "severity": "high",
+      "suggestedFix": "Fix it",
+      "title": "Test Finding",
+    },
+    Object {
+      "category": "hardcoded_secret",
+      "confidence": "high",
+      "description": "Test description",
+      "filePath": "src/config.ts",
+      "id": "4",
+      "layer": 2,
+      "lineContent": "const key = \\"actual-secret-value\\";",
+      "lineNumber": 10,
+      "severity": "high",
+      "suggestedFix": "Fix it",
+      "title": "Test Finding",
+    },
+  ],
+}
+`;
+
+exports[`Refactor Safety - anthropic.ts Auto-Dismiss Rules Scanner code auto-dismiss should auto-dismiss findings in scanner/fixture code 1`] = `
+Object {
+  "dismissed": Array [
+    Object {
+      "finding": Object {
+        "category": "dangerous_function",
+        "confidence": "high",
+        "description": "Test description",
+        "filePath": "packages/scanner/src/layer1/patterns.ts",
+        "id": "test-finding-1",
+        "layer": 2,
+        "lineContent": "const x = 1;",
+        "lineNumber": 10,
+        "severity": "high",
+        "suggestedFix": "Fix it",
+        "title": "Test Finding",
+      },
+      "reason": "Finding in scanner/fixture code",
+      "rule": "scanner_code",
+    },
+    Object {
+      "finding": Object {
+        "category": "dangerous_function",
+        "confidence": "high",
+        "description": "Test description",
+        "filePath": "src/__tests__/fixtures/vulnerable.ts",
+        "id": "test-finding-1",
+        "layer": 2,
+        "lineContent": "const x = 1;",
+        "lineNumber": 10,
+        "severity": "high",
+        "suggestedFix": "Fix it",
+        "title": "Test Finding",
+      },
+      "reason": "Finding in test/mock file",
+      "rule": "test_file",
+    },
+  ],
+  "toValidate": Array [],
+}
+`;
+
+exports[`Refactor Safety - anthropic.ts Auto-Dismiss Rules Test file auto-dismiss should auto-dismiss findings in mock files 1`] = `
+Object {
+  "dismissed": Array [],
+  "toValidate": Array [
+    Object {
+      "category": "dangerous_function",
+      "confidence": "high",
+      "description": "Test description",
+      "filePath": "src/__mocks__/api.ts",
+      "id": "test-finding-1",
+      "layer": 2,
+      "lineContent": "const x = 1;",
+      "lineNumber": 10,
+      "severity": "high",
+      "suggestedFix": "Fix it",
+      "title": "Test Finding",
+    },
+    Object {
+      "category": "dangerous_function",
+      "confidence": "high",
+      "description": "Test description",
+      "filePath": "mocks/handler.ts",
+      "id": "test-finding-1",
+      "layer": 2,
+      "lineContent": "const x = 1;",
+      "lineNumber": 10,
+      "severity": "high",
+      "suggestedFix": "Fix it",
+      "title": "Test Finding",
+    },
+  ],
+}
+`;
+
+exports[`Refactor Safety - anthropic.ts Auto-Dismiss Rules Test file auto-dismiss should auto-dismiss findings in test files 1`] = `
+Object {
+  "dismissed": Array [
+    Object {
+      "finding": Object {
+        "category": "dangerous_function",
+        "confidence": "high",
+        "description": "Test description",
+        "filePath": "src/__tests__/handler.test.ts",
+        "id": "test-finding-1",
+        "layer": 2,
+        "lineContent": "const x = 1;",
+        "lineNumber": 10,
+        "severity": "high",
+        "suggestedFix": "Fix it",
+        "title": "Test Finding",
+      },
+      "reason": "Finding in test/mock file",
+      "rule": "test_file",
+    },
+    Object {
+      "finding": Object {
+        "category": "dangerous_function",
+        "confidence": "high",
+        "description": "Test description",
+        "filePath": "src/handler.spec.ts",
+        "id": "test-finding-1",
+        "layer": 2,
+        "lineContent": "const x = 1;",
+        "lineNumber": 10,
+        "severity": "high",
+        "suggestedFix": "Fix it",
+        "title": "Test Finding",
+      },
+      "reason": "Finding in test/mock file",
+      "rule": "test_file",
+    },
+    Object {
+      "finding": Object {
+        "category": "dangerous_function",
+        "confidence": "high",
+        "description": "Test description",
+        "filePath": "tests/integration/api.test.js",
+        "id": "test-finding-1",
+        "layer": 2,
+        "lineContent": "const x = 1;",
+        "lineNumber": 10,
+        "severity": "high",
+        "suggestedFix": "Fix it",
+        "title": "Test Finding",
+      },
+      "reason": "Finding in test/mock file",
+      "rule": "test_file",
+    },
+  ],
+  "toValidate": Array [],
+}
+`;
+
+exports[`Refactor Safety - anthropic.ts Auto-Dismiss Rules Type definition any auto-dismiss should auto-dismiss any type in .d.ts files 1`] = `
+Object {
+  "dismissed": Array [
+    Object {
+      "finding": Object {
+        "category": "ai_pattern",
+        "confidence": "high",
+        "description": "Test description",
+        "filePath": "types/global.d.ts",
+        "id": "test-finding-1",
+        "layer": 2,
+        "lineContent": "const x = 1;",
+        "lineNumber": 10,
+        "severity": "high",
+        "suggestedFix": "Fix it",
+        "title": "TypeScript any usage",
+      },
+      "reason": "Type definition (not runtime code)",
+      "rule": "type_definition_any",
+    },
+  ],
+  "toValidate": Array [],
+}
+`;