123 lines
4.9 KiB
TypeScript
123 lines
4.9 KiB
TypeScript
import { describe, expect, it, vi } from 'vitest';
|
|
import type { UnifiedResultProjection } from '../../src/domain/unified-result';
|
|
import {
|
|
buildUnifiedResultJsonl,
|
|
queryAllUnifiedResults,
|
|
RESULT_DB_JSONL_FORMAT,
|
|
RESULT_DB_JSONL_SCHEMA_VERSION,
|
|
unifiedResultJsonlFileName
|
|
} from '../../src/exports/unified-result-jsonl';
|
|
|
|
function result(id: string): UnifiedResultProjection {
|
|
return {
|
|
resultProjectionId: id,
|
|
sourceKind: 'scanner-finding',
|
|
sourceResultId: `source-${id}`,
|
|
projectId: 'project-1',
|
|
assessmentId: 'assessment-1',
|
|
collectionRunId: 'scan-1',
|
|
scanRunId: 'scan-1',
|
|
title: `Synthetic result ${id}`,
|
|
severityOriginal: 'high',
|
|
severityNormalized: 'high',
|
|
outcomeOriginal: 'fail',
|
|
outcomeNormalized: 'fail',
|
|
technicalExecutionState: 'completed',
|
|
resultType: 'compliance_check',
|
|
isIoe: false,
|
|
isDeviation: true,
|
|
lifecycleState: 'unknown',
|
|
mappingConfidence: 1,
|
|
reviewStatus: 'unreviewed',
|
|
importedAt: '2026-09-03T10:00:00.000Z',
|
|
createdAt: '2026-09-03T10:00:00.000Z',
|
|
categories: []
|
|
};
|
|
}
|
|
|
|
describe('filtered Result DB JSONL export', () => {
|
|
it('writes an explicit manifest followed by one complete JSON object per filtered result', () => {
|
|
const text = buildUnifiedResultJsonl({
|
|
projectId: 'project-1', scanRunIds: ['scan-1'], deviation: true,
|
|
severity: ['critical', 'high'], search: 'synthetic', offset: 50, limit: 50
|
|
}, [result('result-1'), result('result-2')], '2026-09-03T12:34:56.789Z');
|
|
const lines = text.trimEnd().split('\n').map(line => JSON.parse(line));
|
|
|
|
expect(lines[0]).toEqual({
|
|
recordType: 'manifest',
|
|
format: RESULT_DB_JSONL_FORMAT,
|
|
schemaVersion: RESULT_DB_JSONL_SCHEMA_VERSION,
|
|
generatedAt: '2026-09-03T12:34:56.789Z',
|
|
resultCount: 2,
|
|
scope: { projectId: 'project-1', scanRunIds: ['scan-1'] },
|
|
filters: { deviation: true, severity: ['critical', 'high'], search: 'synthetic' }
|
|
});
|
|
expect(lines.slice(1)).toEqual([
|
|
{ recordType: 'result', position: 1, result: result('result-1') },
|
|
{ recordType: 'result', position: 2, result: result('result-2') }
|
|
]);
|
|
expect(text.endsWith('\n')).toBe(true);
|
|
expect(unifiedResultJsonlFileName('2026-09-03T12:34:56.789Z'))
|
|
.toBe('assessor-result-db-filtered-2026-09-03T12-34-56Z.jsonl');
|
|
});
|
|
|
|
it('loads every filtered page with the same scope and rejects a changing result set', async () => {
|
|
const all = [result('result-1'), result('result-2'), result('result-3')];
|
|
const reader = vi.fn(async query => ({
|
|
total: all.length,
|
|
items: all.slice(query.offset ?? 0, (query.offset ?? 0) + (query.limit ?? all.length))
|
|
}));
|
|
|
|
await expect(queryAllUnifiedResults(reader, {
|
|
projectId: 'project-1', scanRunIds: ['scan-1'], deviation: true, offset: 99, limit: 1
|
|
}, 2)).resolves.toEqual(all);
|
|
expect(reader).toHaveBeenNthCalledWith(1, {
|
|
projectId: 'project-1', scanRunIds: ['scan-1'], deviation: true, offset: 0, limit: 2
|
|
});
|
|
expect(reader).toHaveBeenNthCalledWith(2, {
|
|
projectId: 'project-1', scanRunIds: ['scan-1'], deviation: true, offset: 2, limit: 2
|
|
});
|
|
|
|
let call = 0;
|
|
await expect(queryAllUnifiedResults(async query => {
|
|
call += 1;
|
|
return { total: call === 1 ? 2 : 3, items: [result(`result-${query.offset ?? 0}`)] };
|
|
}, { deviation: true }, 1)).rejects.toThrow('changed during export');
|
|
});
|
|
|
|
it('exports only the already disclosed supplemental projection', () => {
|
|
const supplemental: UnifiedResultProjection = {
|
|
...result('safe-environment'),
|
|
sourceKind: 'environment-observation',
|
|
sourceTool: 'pingcastle',
|
|
title: 'Domain functional level',
|
|
environmentProperty: 'domain.functional_level',
|
|
environmentSubjectType: 'active-directory-environment',
|
|
environmentNormalizedValue: 2016,
|
|
supplementalDisclosurePolicyVersion: '1.0.0',
|
|
supplementalDisclosureClass: 'technical-metadata',
|
|
affectedAsset: 'Private Customer',
|
|
environmentOriginalValue: 'Private Customer',
|
|
environmentSubjectIdentity: 'private.synthetic.example',
|
|
environmentAttributes: { customer: 'Private Customer' },
|
|
sourceLocator: { objectPath: 'private/customer/path' }
|
|
};
|
|
const text = buildUnifiedResultJsonl({}, [supplemental], '2026-09-03T12:34:56.789Z');
|
|
|
|
expect(text).toContain('"environmentNormalizedValue":2016');
|
|
expect(text).toContain('"supplementalDisclosurePolicyVersion":"1.0.0"');
|
|
expect(text).not.toMatch(/environmentOriginalValue|environmentSubjectIdentity|sourceLocator|Private Customer/i);
|
|
});
|
|
|
|
it('rejects an unclassified supplemental record instead of exporting it', () => {
|
|
const unclassified: UnifiedResultProjection = {
|
|
...result('unsafe-environment'),
|
|
sourceKind: 'environment-observation',
|
|
environmentOriginalValue: 'Private Customer'
|
|
};
|
|
|
|
expect(() => buildUnifiedResultJsonl({}, [unclassified], '2026-09-03T12:34:56.789Z'))
|
|
.toThrow('unclassified supplemental result');
|
|
});
|
|
});
|