merge: phase 14-04 register wiring

pkg/recon/sources/circleci_test.go

@@ -11,6 +11,7 @@ import (
 	"github.com/salvacybersec/keyhunter/pkg/recon"
 )
 
+<<<<<<< HEAD
 const circleFixtureJSON = `{
   "items": [
     {
@@ -55,11 +56,67 @@ func TestCircleCI_Sweep_ExtractsFindings(t *testing.T) {
 		t.Fatalf("Sweep err: %v", err)
 	}
 	close(out)
+=======
+func TestCircleCI_Name(t *testing.T) {
+	s := &CircleCISource{}
+	if s.Name() != "circleci" {
+		t.Fatalf("expected circleci, got %s", s.Name())
+	}
+}
+
+func TestCircleCI_Enabled(t *testing.T) {
+	s := &CircleCISource{}
+	if s.Enabled(recon.Config{}) {
+		t.Fatal("should be disabled without token")
+	}
+	s.Token = "cci-test"
+	if !s.Enabled(recon.Config{}) {
+		t.Fatal("should be enabled with token")
+	}
+}
+
+func TestCircleCI_Sweep(t *testing.T) {
+	mux := http.NewServeMux()
+	mux.HandleFunc("/project/gh/", func(w http.ResponseWriter, r *http.Request) {
+		w.Header().Set("Content-Type", "application/json")
+		_, _ = w.Write([]byte(`{"items":[{"id":"pipe-abc-123","number":42}]}`))
+	})
+	mux.HandleFunc("/pipeline/pipe-abc-123/workflow", func(w http.ResponseWriter, r *http.Request) {
+		_, _ = w.Write([]byte(`Build step: npm test
+Setting SECRET_KEY="sk-proj-CIRCLELEAK12345678"
+Tests completed successfully`))
+	})
+
+	srv := httptest.NewServer(mux)
+	defer srv.Close()
+
+	reg := providers.NewRegistryFromProviders([]providers.Provider{
+		{Name: "openai", Keywords: []string{"sk-proj-"}},
+	})
+
+	s := &CircleCISource{
+		Token:    "cci-test",
+		BaseURL:  srv.URL,
+		Registry: reg,
+		Client:   NewClient(),
+	}
+
+	out := make(chan recon.Finding, 10)
+	ctx, cancel := context.WithTimeout(context.Background(), 5*time.Second)
+	defer cancel()
+
+	err := s.Sweep(ctx, "", out)
+	close(out)
+	if err != nil {
+		t.Fatalf("Sweep error: %v", err)
+	}
+>>>>>>> worktree-agent-adad8c10
 
 	var findings []recon.Finding
 	for f := range out {
 		findings = append(findings, f)
 	}
+<<<<<<< HEAD
 	if len(findings) != 2 {
 		t.Fatalf("expected 2 findings, got %d", len(findings))
 	}
@@ -98,5 +155,12 @@ func TestCircleCI_NameAndRate(t *testing.T) {
 	}
 	if s.RespectsRobots() {
 		t.Error("expected RespectsRobots=false")
+=======
+	if len(findings) == 0 {
+		t.Fatal("expected at least one finding from CircleCI pipeline log")
+	}
+	if findings[0].SourceType != "recon:circleci" {
+		t.Fatalf("expected recon:circleci, got %s", findings[0].SourceType)
+>>>>>>> worktree-agent-adad8c10
 	}
 }