npm - ferret-scan - Versions diffs - 2.1.2 → 2.3.0 - Mend

ferret-scan 2.1.2 → 2.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (181) hide show

package/CHANGELOG.md +35 -0
package/README.md +15 -11
package/bin/ferret.js +109 -13
package/dist/__tests__/AgentMonitor.test.d.ts +6 -0
package/dist/__tests__/AgentMonitor.test.js +235 -0
package/dist/__tests__/AtlasNavigatorReporter.test.d.ts +6 -0
package/dist/__tests__/AtlasNavigatorReporter.test.js +193 -0
package/dist/__tests__/CorrelationAnalyzer.test.d.ts +6 -0
package/dist/__tests__/CorrelationAnalyzer.test.js +211 -0
package/dist/__tests__/IndicatorMatcher.test.d.ts +6 -0
package/dist/__tests__/IndicatorMatcher.test.js +245 -0
package/dist/__tests__/MarketplaceScanner.test.d.ts +5 -0
package/dist/__tests__/MarketplaceScanner.test.js +212 -0
package/dist/__tests__/RuleGenerator.test.d.ts +6 -0
package/dist/__tests__/RuleGenerator.test.js +207 -0
package/dist/__tests__/ThreatFeed.test.d.ts +6 -0
package/dist/__tests__/ThreatFeed.test.js +359 -0
package/dist/__tests__/WatchMode.test.d.ts +6 -0
package/dist/__tests__/WatchMode.test.js +104 -0
package/dist/__tests__/astAnalyzerExtra.test.d.ts +6 -0
package/dist/__tests__/astAnalyzerExtra.test.js +67 -0
package/dist/__tests__/astAnalyzerFull.test.d.ts +6 -0
package/dist/__tests__/astAnalyzerFull.test.js +138 -0
package/dist/__tests__/astAnalyzerPatterns.test.d.ts +6 -0
package/dist/__tests__/astAnalyzerPatterns.test.js +143 -0
package/dist/__tests__/atlas.test.d.ts +6 -0
package/dist/__tests__/atlas.test.js +319 -0
package/dist/__tests__/atlasCatalog.test.d.ts +6 -0
package/dist/__tests__/atlasCatalog.test.js +200 -0
package/dist/__tests__/atlasCatalogExtra.test.d.ts +6 -0
package/dist/__tests__/atlasCatalogExtra.test.js +215 -0
package/dist/__tests__/baseline.test.d.ts +6 -0
package/dist/__tests__/baseline.test.js +321 -0
package/dist/__tests__/baselineExtra.test.d.ts +6 -0
package/dist/__tests__/baselineExtra.test.js +317 -0
package/dist/__tests__/capabilityMapping.test.d.ts +5 -0
package/dist/__tests__/capabilityMapping.test.js +49 -0
package/dist/__tests__/capabilityMappingExtra.test.d.ts +5 -0
package/dist/__tests__/capabilityMappingExtra.test.js +200 -0
package/dist/__tests__/complianceExtra.test.d.ts +6 -0
package/dist/__tests__/complianceExtra.test.js +121 -0
package/dist/__tests__/config.test.js +1 -1
package/dist/__tests__/configLoader.test.d.ts +6 -0
package/dist/__tests__/configLoader.test.js +225 -0
package/dist/__tests__/configLoaderExtra.test.d.ts +6 -0
package/dist/__tests__/configLoaderExtra.test.js +186 -0
package/dist/__tests__/correlationAnalyzerExtra.test.d.ts +5 -0
package/dist/__tests__/correlationAnalyzerExtra.test.js +98 -0
package/dist/__tests__/correlationAnalyzerFull.test.d.ts +6 -0
package/dist/__tests__/correlationAnalyzerFull.test.js +154 -0
package/dist/__tests__/customRules.extra.test.d.ts +6 -0
package/dist/__tests__/customRules.extra.test.js +245 -0
package/dist/__tests__/customRules.test.d.ts +7 -0
package/dist/__tests__/customRules.test.js +347 -0
package/dist/__tests__/dependencyRisk.test.d.ts +5 -0
package/dist/__tests__/dependencyRisk.test.js +248 -0
package/dist/__tests__/dependencyRiskExtra.test.d.ts +6 -0
package/dist/__tests__/dependencyRiskExtra.test.js +177 -0
package/dist/__tests__/featureExitCodes.test.d.ts +7 -0
package/dist/__tests__/featureExitCodes.test.js +332 -0
package/dist/__tests__/fileDiscoveryConfigOnly.test.d.ts +6 -0
package/dist/__tests__/fileDiscoveryConfigOnly.test.js +195 -0
package/dist/__tests__/fileDiscoveryExtra.test.d.ts +6 -0
package/dist/__tests__/fileDiscoveryExtra.test.js +149 -0
package/dist/__tests__/fixer.extra.test.d.ts +6 -0
package/dist/__tests__/fixer.extra.test.js +135 -0
package/dist/__tests__/fixerApply.test.d.ts +6 -0
package/dist/__tests__/fixerApply.test.js +132 -0
package/dist/__tests__/gitHooks.test.d.ts +7 -0
package/dist/__tests__/gitHooks.test.js +188 -0
package/dist/__tests__/htmlReporter.extra.test.d.ts +5 -0
package/dist/__tests__/htmlReporter.extra.test.js +126 -0
package/dist/__tests__/interactiveTui.test.d.ts +6 -0
package/dist/__tests__/interactiveTui.test.js +180 -0
package/dist/__tests__/interactiveTuiCommands.test.d.ts +6 -0
package/dist/__tests__/interactiveTuiCommands.test.js +187 -0
package/dist/__tests__/interactiveTuiMore.test.d.ts +6 -0
package/dist/__tests__/interactiveTuiMore.test.js +194 -0
package/dist/__tests__/interactiveTuiSession.test.d.ts +6 -0
package/dist/__tests__/interactiveTuiSession.test.js +173 -0
package/dist/__tests__/llmAnalysis.test.d.ts +6 -0
package/dist/__tests__/llmAnalysis.test.js +229 -0
package/dist/__tests__/llmAnalysisBuildExcerpt.test.d.ts +6 -0
package/dist/__tests__/llmAnalysisBuildExcerpt.test.js +132 -0
package/dist/__tests__/llmAnalysisExtra.test.d.ts +6 -0
package/dist/__tests__/llmAnalysisExtra.test.js +214 -0
package/dist/__tests__/llmAnalysisFilters.test.d.ts +6 -0
package/dist/__tests__/llmAnalysisFilters.test.js +181 -0
package/dist/__tests__/llmAnalysisMitre.test.d.ts +6 -0
package/dist/__tests__/llmAnalysisMitre.test.js +192 -0
package/dist/__tests__/llmGroqTPM.test.d.ts +6 -0
package/dist/__tests__/llmGroqTPM.test.js +89 -0
package/dist/__tests__/llmProviderRetry.test.d.ts +6 -0
package/dist/__tests__/llmProviderRetry.test.js +172 -0
package/dist/__tests__/mcpValidator.extra.test.d.ts +5 -0
package/dist/__tests__/mcpValidator.extra.test.js +270 -0
package/dist/__tests__/patternMatcherExtra.test.d.ts +7 -0
package/dist/__tests__/patternMatcherExtra.test.js +198 -0
package/dist/__tests__/patternsCommon.test.d.ts +6 -0
package/dist/__tests__/patternsCommon.test.js +107 -0
package/dist/__tests__/policyEnforcement.test.d.ts +5 -0
package/dist/__tests__/policyEnforcement.test.js +510 -0
package/dist/__tests__/quarantineExtra.test.d.ts +5 -0
package/dist/__tests__/quarantineExtra.test.js +214 -0
package/dist/__tests__/redactionExtra.test.d.ts +6 -0
package/dist/__tests__/redactionExtra.test.js +228 -0
package/dist/__tests__/scanDiff.test.d.ts +7 -0
package/dist/__tests__/scanDiff.test.js +266 -0
package/dist/__tests__/scanFull.test.d.ts +6 -0
package/dist/__tests__/scanFull.test.js +158 -0
package/dist/__tests__/scannerDampening.test.d.ts +6 -0
package/dist/__tests__/scannerDampening.test.js +160 -0
package/dist/__tests__/scannerExtra.test.d.ts +6 -0
package/dist/__tests__/scannerExtra.test.js +194 -0
package/dist/__tests__/scannerMitre.test.d.ts +5 -0
package/dist/__tests__/scannerMitre.test.js +141 -0
package/dist/__tests__/scannerSSRF.test.d.ts +5 -0
package/dist/__tests__/scannerSSRF.test.js +149 -0
package/dist/__tests__/schemas.test.d.ts +6 -0
package/dist/__tests__/schemas.test.js +125 -0
package/dist/__tests__/webhooks.extra.test.d.ts +6 -0
package/dist/__tests__/webhooks.extra.test.js +144 -0
package/dist/__tests__/webhooks.test.d.ts +6 -0
package/dist/__tests__/webhooks.test.js +154 -0
package/dist/analyzers/AstAnalyzer.d.ts +5 -1
package/dist/analyzers/AstAnalyzer.js +25 -4
package/dist/features/customRules.js +22 -29
package/dist/features/ignoreComments.js +5 -5
package/dist/features/mcpTrustScore.d.ts +17 -0
package/dist/features/mcpTrustScore.js +74 -0
package/dist/features/mcpValidator.d.ts +2 -0
package/dist/features/mcpValidator.js +13 -0
package/dist/features/policyEnforcement.d.ts +22 -22
package/dist/features/policyEnforcement.js +3 -2
package/dist/intelligence/ThreatFeed.js +207 -62
package/dist/remediation/Fixer.js +56 -30
package/dist/remediation/Quarantine.js +79 -11
package/dist/reporters/ConsoleReporter.js +10 -0
package/dist/reporters/HtmlReporter.js +5 -0
package/dist/reporters/SarifReporter.d.ts +1 -0
package/dist/reporters/SarifReporter.js +1 -0
package/dist/rules/ai-specific.js +8 -8
package/dist/rules/backdoors.js +12 -12
package/dist/rules/correlationRules.js +6 -6
package/dist/rules/index.d.ts +1 -0
package/dist/rules/index.js +10 -1
package/dist/rules/injection.js +8 -8
package/dist/rules/patterns/common.d.ts +34 -0
package/dist/rules/patterns/common.js +48 -0
package/dist/scanner/IAnalyzer.d.ts +19 -0
package/dist/scanner/IAnalyzer.js +5 -0
package/dist/scanner/PatternMatcher.js +19 -2
package/dist/scanner/Scanner.js +64 -125
package/dist/scanner/analyzers/CapabilityAnalyzer.d.ts +8 -0
package/dist/scanner/analyzers/CapabilityAnalyzer.js +19 -0
package/dist/scanner/analyzers/DependencyAnalyzer.d.ts +8 -0
package/dist/scanner/analyzers/DependencyAnalyzer.js +18 -0
package/dist/scanner/analyzers/EntropyAnalyzer.d.ts +8 -0
package/dist/scanner/analyzers/EntropyAnalyzer.js +12 -0
package/dist/scanner/analyzers/LlmAnalyzer.d.ts +17 -0
package/dist/scanner/analyzers/LlmAnalyzer.js +36 -0
package/dist/scanner/analyzers/McpAnalyzer.d.ts +8 -0
package/dist/scanner/analyzers/McpAnalyzer.js +19 -0
package/dist/scanner/analyzers/SemanticAnalyzer.d.ts +8 -0
package/dist/scanner/analyzers/SemanticAnalyzer.js +21 -0
package/dist/scanner/analyzers/ThreatIntelAnalyzer.d.ts +8 -0
package/dist/scanner/analyzers/ThreatIntelAnalyzer.js +21 -0
package/dist/types.d.ts +23 -0
package/dist/types.js +1 -1
package/dist/utils/baseline.d.ts +15 -2
package/dist/utils/baseline.js +50 -19
package/dist/utils/contentCache.d.ts +39 -0
package/dist/utils/contentCache.js +77 -0
package/dist/utils/glob.d.ts +50 -0
package/dist/utils/glob.js +84 -0
package/dist/utils/pathSecurity.js +1 -0
package/dist/utils/safeRegex.d.ts +55 -0
package/dist/utils/safeRegex.js +130 -0
package/dist/utils/schemas.d.ts +70 -64
package/dist/utils/schemas.js +13 -0
package/package.json +34 -19

package/dist/__tests__/htmlReporter.extra.test.js ADDED Viewed

@@ -0,0 +1,126 @@
+/**
+ * Additional HTML Reporter Tests
+ */
+import { generateHtmlReport, formatHtmlReport } from '../reporters/HtmlReporter.js';
+function makeFinding(overrides = {}) {
+    return {
+        ruleId: 'INJ-001',
+        ruleName: 'Injection Rule',
+        severity: 'HIGH',
+        category: 'injection',
+        file: '/project/test.md',
+        relativePath: 'test.md',
+        line: 5,
+        match: 'IGNORE <script>alert(1)</script>',
+        context: [
+            { lineNumber: 4, content: 'previous line', isMatch: false },
+            { lineNumber: 5, content: 'IGNORE PREVIOUS', isMatch: true },
+        ],
+        remediation: 'Remove injection attempt',
+        timestamp: new Date(),
+        riskScore: 75,
+        ...overrides,
+    };
+}
+function makeScanResult(findings = [], overrides = {}) {
+    return {
+        success: true,
+        startTime: new Date(),
+        endTime: new Date(),
+        duration: 1500,
+        scannedPaths: ['/project'],
+        totalFiles: 10,
+        analyzedFiles: 8,
+        skippedFiles: 2,
+        findings,
+        findingsBySeverity: {
+            CRITICAL: findings.filter(f => f.severity === 'CRITICAL'),
+            HIGH: findings.filter(f => f.severity === 'HIGH'),
+            MEDIUM: findings.filter(f => f.severity === 'MEDIUM'),
+            LOW: findings.filter(f => f.severity === 'LOW'),
+            INFO: findings.filter(f => f.severity === 'INFO'),
+        },
+        findingsByCategory: {},
+        overallRiskScore: 65,
+        summary: {
+            critical: findings.filter(f => f.severity === 'CRITICAL').length,
+            high: findings.filter(f => f.severity === 'HIGH').length,
+            medium: findings.filter(f => f.severity === 'MEDIUM').length,
+            low: findings.filter(f => f.severity === 'LOW').length,
+            info: 0,
+            total: findings.length,
+        },
+        errors: [],
+        ...overrides,
+    };
+}
+describe('generateHtmlReport', () => {
+    it('generates valid HTML with no findings', () => {
+        const html = generateHtmlReport(makeScanResult());
+        expect(typeof html).toBe('string');
+        expect(html).toContain('<!DOCTYPE html>');
+        expect(html).toContain('<html');
+        expect(html).toContain('</html>');
+    });
+    it('escapes HTML in finding content', () => {
+        const finding = makeFinding({
+            match: '<script>alert("xss")</script>',
+        });
+        const html = generateHtmlReport(makeScanResult([finding]));
+        expect(html).not.toContain('<script>alert("xss")</script>');
+        expect(html).toContain('&lt;script&gt;');
+    });
+    it('includes custom title', () => {
+        const html = generateHtmlReport(makeScanResult(), { title: 'My Security Report' });
+        expect(html).toContain('My Security Report');
+    });
+    it('supports dark mode option', () => {
+        const lightHtml = generateHtmlReport(makeScanResult(), { darkMode: false });
+        const darkHtml = generateHtmlReport(makeScanResult(), { darkMode: true });
+        expect(lightHtml).not.toBe(darkHtml);
+    });
+    it('includes findings in report', () => {
+        const finding = makeFinding({ severity: 'CRITICAL' });
+        const html = generateHtmlReport(makeScanResult([finding]));
+        expect(html).toContain('INJ-001');
+        expect(html).toContain('CRITICAL');
+    });
+    it('includes context lines in report', () => {
+        const finding = makeFinding({
+            context: [
+                { lineNumber: 4, content: 'previous line content', isMatch: false },
+                { lineNumber: 5, content: 'IGNORE PREVIOUS', isMatch: true },
+            ],
+        });
+        const html = generateHtmlReport(makeScanResult([finding]), { includeContext: true });
+        expect(html).toContain('previous line content');
+    });
+    it('includes scan duration in report', () => {
+        const html = generateHtmlReport(makeScanResult());
+        // Duration should be formatted
+        expect(html).toContain('1.50'); // 1500ms = 1.50s
+    });
+    it('generates report with multiple severity levels', () => {
+        const findings = [
+            makeFinding({ severity: 'CRITICAL' }),
+            makeFinding({ severity: 'HIGH' }),
+            makeFinding({ severity: 'MEDIUM' }),
+            makeFinding({ severity: 'LOW' }),
+            makeFinding({ severity: 'INFO' }),
+        ];
+        const html = generateHtmlReport(makeScanResult(findings));
+        expect(html).toContain('CRITICAL');
+        expect(html).toContain('HIGH');
+        expect(html).toContain('MEDIUM');
+        expect(html).toContain('LOW');
+        expect(html).toContain('INFO');
+    });
+});
+describe('formatHtmlReport', () => {
+    it('returns same as generateHtmlReport', () => {
+        const result = makeScanResult([makeFinding()]);
+        const options = { title: 'Test Report' };
+        expect(formatHtmlReport(result, options)).toBe(generateHtmlReport(result, options));
+    });
+});
+//# sourceMappingURL=htmlReporter.extra.test.js.map

package/dist/__tests__/interactiveTui.test.d.ts ADDED Viewed

@@ -0,0 +1,6 @@
+/**
+ * Interactive TUI Tests
+ * Tests for displayFindings and other TUI utility functions
+ */
+export {};
+//# sourceMappingURL=interactiveTui.test.d.ts.map

package/dist/__tests__/interactiveTui.test.js ADDED Viewed

@@ -0,0 +1,180 @@
+/**
+ * Interactive TUI Tests
+ * Tests for displayFindings and other TUI utility functions
+ */
+import interactiveTuiDefault from '../features/interactiveTui.js';
+import { displayFindings } from '../features/interactiveTui.js';
+const { formatFinding, formatSummary } = interactiveTuiDefault;
+function makeFinding(overrides = {}) {
+    return {
+        ruleId: 'INJ-001',
+        ruleName: 'Injection Test Rule',
+        severity: 'HIGH',
+        category: 'injection',
+        file: '/project/test.md',
+        relativePath: 'test.md',
+        line: 5,
+        match: 'IGNORE PREVIOUS',
+        context: [
+            { lineNumber: 4, content: 'previous line', isMatch: false },
+            { lineNumber: 5, content: 'IGNORE PREVIOUS', isMatch: true },
+            { lineNumber: 6, content: 'next line', isMatch: false },
+        ],
+        remediation: 'Remove the injection attempt',
+        timestamp: new Date(),
+        riskScore: 75,
+        ...overrides,
+    };
+}
+function makeScanResult(findings = []) {
+    return {
+        success: true,
+        startTime: new Date(),
+        endTime: new Date(),
+        duration: 1500,
+        scannedPaths: ['/project'],
+        totalFiles: 10,
+        analyzedFiles: 8,
+        skippedFiles: 2,
+        findings,
+        findingsBySeverity: {
+            CRITICAL: findings.filter(f => f.severity === 'CRITICAL'),
+            HIGH: findings.filter(f => f.severity === 'HIGH'),
+            MEDIUM: findings.filter(f => f.severity === 'MEDIUM'),
+            LOW: findings.filter(f => f.severity === 'LOW'),
+            INFO: findings.filter(f => f.severity === 'INFO'),
+        },
+        findingsByCategory: {},
+        overallRiskScore: 65,
+        summary: {
+            critical: findings.filter(f => f.severity === 'CRITICAL').length,
+            high: findings.filter(f => f.severity === 'HIGH').length,
+            medium: findings.filter(f => f.severity === 'MEDIUM').length,
+            low: findings.filter(f => f.severity === 'LOW').length,
+            info: 0,
+            total: findings.length,
+        },
+        errors: [],
+    };
+}
+describe('formatFinding', () => {
+    it('formats a finding as a string', () => {
+        const finding = makeFinding();
+        const result = formatFinding(finding, 0, 1);
+        expect(typeof result).toBe('string');
+        expect(result.length).toBeGreaterThan(0);
+        expect(result).toContain('INJ-001');
+        expect(result).toContain('HIGH');
+        expect(result).toContain('injection');
+        expect(result).toContain('test.md');
+        expect(result).toContain('IGNORE PREVIOUS');
+    });
+    it('includes context when present', () => {
+        const finding = makeFinding();
+        const result = formatFinding(finding, 0, 1);
+        expect(result).toContain('Context:');
+        expect(result).toContain('IGNORE PREVIOUS');
+    });
+    it('includes remediation', () => {
+        const finding = makeFinding();
+        const result = formatFinding(finding, 0, 1);
+        expect(result).toContain('Remove the injection attempt');
+    });
+    it('handles finding without context', () => {
+        const finding = makeFinding({ context: [] });
+        const result = formatFinding(finding, 0, 5);
+        expect(result).not.toContain('Context:');
+    });
+    it('handles finding without remediation', () => {
+        const finding = makeFinding({ remediation: '' });
+        const result = formatFinding(finding, 0, 1);
+        expect(typeof result).toBe('string');
+    });
+    it('shows correct index and total', () => {
+        const finding = makeFinding();
+        const result = formatFinding(finding, 2, 10);
+        expect(result).toContain('3/10');
+    });
+    it('formats CRITICAL severity', () => {
+        const finding = makeFinding({ severity: 'CRITICAL' });
+        const result = formatFinding(finding, 0, 1);
+        expect(result).toContain('CRITICAL');
+    });
+    it('formats MEDIUM severity', () => {
+        const finding = makeFinding({ severity: 'MEDIUM' });
+        const result = formatFinding(finding, 0, 1);
+        expect(result).toContain('MEDIUM');
+    });
+    it('formats LOW severity', () => {
+        const finding = makeFinding({ severity: 'LOW' });
+        const result = formatFinding(finding, 0, 1);
+        expect(result).toContain('LOW');
+    });
+    it('formats INFO severity', () => {
+        const finding = makeFinding({ severity: 'INFO' });
+        const result = formatFinding(finding, 0, 1);
+        expect(result).toContain('INFO');
+    });
+});
+describe('formatSummary', () => {
+    it('formats a scan summary as a string', () => {
+        const result = makeScanResult([makeFinding()]);
+        const summary = formatSummary(result);
+        expect(typeof summary).toBe('string');
+        expect(summary).toContain('Scan Summary');
+        expect(summary).toContain('Files Scanned');
+        expect(summary).toContain('Risk Score');
+    });
+    it('includes findings count', () => {
+        const findings = [
+            makeFinding({ severity: 'CRITICAL' }),
+            makeFinding({ severity: 'HIGH' }),
+            makeFinding({ severity: 'MEDIUM' }),
+        ];
+        const result = makeScanResult(findings);
+        const summary = formatSummary(result);
+        expect(summary).toContain('CRITICAL');
+        expect(summary).toContain('HIGH');
+        expect(summary).toContain('MEDIUM');
+    });
+    it('handles empty scan result', () => {
+        const result = makeScanResult([]);
+        const summary = formatSummary(result);
+        expect(summary).toContain('Scan Summary');
+        expect(typeof summary).toBe('string');
+    });
+});
+describe('displayFindings', () => {
+    let consoleSpy;
+    beforeEach(() => {
+        consoleSpy = jest.spyOn(console, 'log').mockImplementation(() => { });
+    });
+    afterEach(() => {
+        consoleSpy.mockRestore();
+    });
+    it('displays a list of findings', () => {
+        const findings = [makeFinding(), makeFinding({ ruleId: 'CRED-001', line: 10 })];
+        displayFindings(findings);
+        expect(consoleSpy).toHaveBeenCalled();
+    });
+    it('respects maxDisplay limit', () => {
+        const findings = Array.from({ length: 20 }, (_, i) => makeFinding({ line: i + 1 }));
+        displayFindings(findings, { maxDisplay: 5 });
+        // Should show "and X more findings" message
+        const calls = consoleSpy.mock.calls.flat().join('');
+        expect(calls).toContain('more findings');
+    });
+    it('handles empty findings array', () => {
+        displayFindings([]);
+        expect(consoleSpy).toHaveBeenCalled();
+        const calls = consoleSpy.mock.calls.flat().join('');
+        expect(calls).toContain('0 total');
+    });
+    it('does not show "more" message when findings fit in maxDisplay', () => {
+        const findings = [makeFinding()];
+        displayFindings(findings, { maxDisplay: 10 });
+        const calls = consoleSpy.mock.calls.flat().join('');
+        expect(calls).not.toContain('more findings');
+    });
+});
+//# sourceMappingURL=interactiveTui.test.js.map

package/dist/__tests__/interactiveTuiCommands.test.d.ts ADDED Viewed

@@ -0,0 +1,6 @@
+/**
+ * Interactive TUI Command Handler Tests
+ * Tests for all commands in startInteractiveSession
+ */
+export {};
+//# sourceMappingURL=interactiveTuiCommands.test.d.ts.map

package/dist/__tests__/interactiveTuiCommands.test.js ADDED Viewed

@@ -0,0 +1,187 @@
+/**
+ * Interactive TUI Command Handler Tests
+ * Tests for all commands in startInteractiveSession
+ */
+import { EventEmitter } from 'events';
+// Mock readline interface
+const mockRlInstance = new EventEmitter();
+jest.mock('node:readline', () => ({
+    createInterface: jest.fn().mockReturnValue(mockRlInstance),
+}));
+import { startInteractiveSession } from '../features/interactiveTui.js';
+function makeFinding(overrides = {}) {
+    return {
+        ruleId: 'INJ-001',
+        ruleName: 'Injection Rule',
+        severity: 'HIGH',
+        category: 'injection',
+        file: '/project/test.md',
+        relativePath: 'test.md',
+        line: 5,
+        match: 'IGNORE PREVIOUS',
+        context: [],
+        remediation: 'Remove',
+        timestamp: new Date(),
+        riskScore: 75,
+        ...overrides,
+    };
+}
+function makeScanResult(findings = []) {
+    return {
+        success: true,
+        startTime: new Date(),
+        endTime: new Date(),
+        duration: 1000,
+        scannedPaths: ['/project'],
+        totalFiles: 5,
+        analyzedFiles: 4,
+        skippedFiles: 1,
+        findings,
+        findingsBySeverity: {
+            CRITICAL: findings.filter(f => f.severity === 'CRITICAL'),
+            HIGH: findings.filter(f => f.severity === 'HIGH'),
+            MEDIUM: findings.filter(f => f.severity === 'MEDIUM'),
+            LOW: findings.filter(f => f.severity === 'LOW'),
+            INFO: [],
+        },
+        findingsByCategory: {},
+        overallRiskScore: 50,
+        summary: {
+            critical: 0,
+            high: findings.filter(f => f.severity === 'HIGH').length,
+            medium: 0, low: 0, info: 0,
+            total: findings.length,
+        },
+        errors: [],
+    };
+}
+async function runCommandSequence(scanResult, commands) {
+    const outputs = [];
+    const consoleSpy = jest.spyOn(console, 'log').mockImplementation((msg) => {
+        outputs.push(msg ?? '');
+    });
+    let callCount = 0;
+    mockRlInstance.question = jest.fn((_prompt, cb) => {
+        const cmd = commands[callCount++] ?? 'quit';
+        cb(cmd);
+    });
+    mockRlInstance.close = jest.fn(() => {
+        mockRlInstance.emit('close');
+    });
+    try {
+        await startInteractiveSession(scanResult);
+    }
+    finally {
+        consoleSpy.mockRestore();
+    }
+    return outputs;
+}
+describe('startInteractiveSession - command handlers', () => {
+    beforeEach(() => {
+        jest.clearAllMocks();
+    });
+    it('handles summary command with scan result', async () => {
+        const result = makeScanResult([makeFinding()]);
+        const outputs = await runCommandSequence(result, ['summary', 'quit']);
+        const allOutput = outputs.join('');
+        expect(allOutput).toContain('Scan Summary');
+    });
+    it('handles summary command without scan result', async () => {
+        const outputs = await runCommandSequence(null, ['summary', 'quit']);
+        const allOutput = outputs.join('');
+        expect(allOutput).toContain('No scan results');
+    });
+    it('handles list command with findings', async () => {
+        const findings = [
+            makeFinding({ severity: 'CRITICAL', ruleId: 'INJ-001' }),
+            makeFinding({ severity: 'HIGH', ruleId: 'CRED-001' }),
+        ];
+        const result = makeScanResult(findings);
+        const outputs = await runCommandSequence(result, ['list', 'quit']);
+        const allOutput = outputs.join('');
+        expect(allOutput).toContain('Findings');
+    });
+    it('handles list command without scan result', async () => {
+        const outputs = await runCommandSequence(null, ['list', 'quit']);
+        const allOutput = outputs.join('');
+        expect(allOutput).toContain('No scan results');
+    });
+    it('handles show command for specific index', async () => {
+        const findings = [makeFinding({ ruleId: 'INJ-001' }), makeFinding({ ruleId: 'CRED-001' })];
+        const result = makeScanResult(findings);
+        const outputs = await runCommandSequence(result, ['show 1', 'quit']);
+        const allOutput = outputs.join('');
+        expect(allOutput.length).toBeGreaterThan(0);
+    });
+    it('handles show with invalid index', async () => {
+        const findings = [makeFinding()];
+        const result = makeScanResult(findings);
+        const outputs = await runCommandSequence(result, ['show 999', 'quit']);
+        const allOutput = outputs.join('');
+        expect(allOutput).toContain('Invalid index');
+    });
+    it('handles show with no findings', async () => {
+        const result = makeScanResult([]);
+        const outputs = await runCommandSequence(result, ['show', 'quit']);
+        const allOutput = outputs.join('');
+        expect(allOutput).toContain('No findings');
+    });
+    it('handles next command', async () => {
+        const findings = [makeFinding({ ruleId: 'INJ-001' }), makeFinding({ ruleId: 'CRED-001' })];
+        const result = makeScanResult(findings);
+        const outputs = await runCommandSequence(result, ['next', 'quit']);
+        const allOutput = outputs.join('');
+        expect(allOutput.length).toBeGreaterThan(0);
+    });
+    it('handles prev command', async () => {
+        const findings = [makeFinding()];
+        const result = makeScanResult(findings);
+        const outputs = await runCommandSequence(result, ['prev', 'quit']);
+        expect(outputs.length).toBeGreaterThan(0);
+    });
+    it('handles filter command by severity', async () => {
+        const findings = [
+            makeFinding({ severity: 'HIGH' }),
+            makeFinding({ severity: 'CRITICAL' }),
+        ];
+        const result = makeScanResult(findings);
+        const outputs = await runCommandSequence(result, ['filter severity HIGH', 'quit']);
+        expect(outputs.length).toBeGreaterThan(0);
+    });
+    it('handles sort command', async () => {
+        const findings = [makeFinding(), makeFinding({ ruleId: 'CRED-001', severity: 'CRITICAL' })];
+        const result = makeScanResult(findings);
+        const outputs = await runCommandSequence(result, ['sort file', 'quit']);
+        expect(outputs.length).toBeGreaterThan(0);
+    });
+    it('handles quit command via alias q', async () => {
+        const result = makeScanResult();
+        const outputs = await runCommandSequence(result, ['q']);
+        expect(outputs.length).toBeGreaterThan(0);
+    });
+    it('handles exit command', async () => {
+        const result = makeScanResult();
+        const outputs = await runCommandSequence(result, ['exit']);
+        expect(outputs.length).toBeGreaterThan(0);
+    });
+    it('handles help with alias h', async () => {
+        const result = makeScanResult();
+        const outputs = await runCommandSequence(result, ['h', 'quit']);
+        const allOutput = outputs.join('');
+        expect(allOutput).toContain('Commands');
+    });
+    it('handles h alias', async () => {
+        const result = makeScanResult();
+        const outputs = await runCommandSequence(result, ['?', 'quit']);
+        const allOutput = outputs.join('');
+        expect(allOutput).toContain('Commands');
+    });
+    it('handles list with limit argument', async () => {
+        const findings = Array.from({ length: 30 }, (_, i) => makeFinding({ line: i + 1 }));
+        const result = makeScanResult(findings);
+        const outputs = await runCommandSequence(result, ['list 5', 'quit']);
+        const allOutput = outputs.join('');
+        expect(allOutput).toContain('more');
+    });
+});
+//# sourceMappingURL=interactiveTuiCommands.test.js.map

package/dist/__tests__/interactiveTuiMore.test.d.ts ADDED Viewed

@@ -0,0 +1,6 @@
+/**
+ * More Interactive TUI Command Tests
+ * Tests for files, export, clear, filter variations, and sort variations
+ */
+export {};
+//# sourceMappingURL=interactiveTuiMore.test.d.ts.map