mobbdev 1.0.101 → 1.0.103

package/dist/index.mjs

@@ -280,7 +280,10 @@ var RepoNoTokenAccessError = class extends Error {
   }
 };
 
-// src/features/analysis/scm/shared/src/types/fix.ts
+// src/features/analysis/scm/utils/index.ts
+import { z as z14 } from "zod";
+
+// src/features/analysis/scm/shared/src/commitDescriptionMarkup.ts
 import { z as z2 } from "zod";
 
 // src/features/analysis/scm/generates/client_generates.ts
@@ -498,6 +501,7 @@ var Vulnerability_Report_Issue_Tag_Enum = /* @__PURE__ */ ((Vulnerability_Report
   Vulnerability_Report_Issue_Tag_Enum3["AutogeneratedCode"] = "AUTOGENERATED_CODE";
   Vulnerability_Report_Issue_Tag_Enum3["AuxiliaryCode"] = "AUXILIARY_CODE";
   Vulnerability_Report_Issue_Tag_Enum3["FalsePositive"] = "FALSE_POSITIVE";
+  Vulnerability_Report_Issue_Tag_Enum3["Suppressed"] = "SUPPRESSED";
   Vulnerability_Report_Issue_Tag_Enum3["TestCode"] = "TEST_CODE";
   Vulnerability_Report_Issue_Tag_Enum3["Unfixable"] = "UNFIXABLE";
   Vulnerability_Report_Issue_Tag_Enum3["VendorCode"] = "VENDOR_CODE";
@@ -552,6 +556,80 @@ var FixDetailsFragmentDoc = `
   }
 }
     `;
+var FixReportSummaryFieldsFragmentDoc = `
+    fragment FixReportSummaryFields on fixReport {
+  id
+  createdOn
+  repo {
+    originalUrl
+  }
+  issueTypes
+  CRITICAL: fixes_aggregate(
+    where: {_and: [{vulnerabilityReportIssues: {category: {_eq: "Fixable"}}}, {severityText: {_eq: "critical"}}]}
+  ) {
+    aggregate {
+      count
+    }
+  }
+  HIGH: fixes_aggregate(
+    where: {_and: [{vulnerabilityReportIssues: {category: {_eq: "Fixable"}}}, {severityText: {_eq: "high"}}]}
+  ) {
+    aggregate {
+      count
+    }
+  }
+  MEDIUM: fixes_aggregate(
+    where: {_and: [{vulnerabilityReportIssues: {category: {_eq: "Fixable"}}}, {severityText: {_eq: "medium"}}]}
+  ) {
+    aggregate {
+      count
+    }
+  }
+  LOW: fixes_aggregate(
+    where: {_and: [{vulnerabilityReportIssues: {category: {_eq: "Fixable"}}}, {severityText: {_eq: "low"}}]}
+  ) {
+    aggregate {
+      count
+    }
+  }
+  fixes(
+    where: {_and: [{vulnerabilityReportIssues: {category: {_eq: "Fixable"}}}, $filters]}
+    order_by: {severityValue: desc}
+    limit: $limit
+    offset: $offset
+  ) {
+    ...FixDetails
+  }
+  filteredFixesCount: fixes_aggregate(
+    where: {_and: [{vulnerabilityReportIssues: {category: {_eq: "Fixable"}}}, $filters]}
+  ) {
+    aggregate {
+      count
+    }
+  }
+  totalFixesCount: fixes_aggregate {
+    aggregate {
+      count
+    }
+  }
+  vulnerabilityReport {
+    scanDate
+    vendor
+    totalVulnerabilityReportIssuesCount: vulnerabilityReportIssues_aggregate {
+      aggregate {
+        count
+      }
+    }
+    notFixableVulnerabilityReportIssuesCount: vulnerabilityReportIssues_aggregate(
+      where: {category: {_neq: "Fixable"}}
+    ) {
+      aggregate {
+        count
+      }
+    }
+  }
+}
+    ${FixDetailsFragmentDoc}`;
 var MeDocument = `
     query Me {
   me {
@@ -981,80 +1059,24 @@ var AutoPrAnalysisDocument = `
   }
 }
     `;
-var GetMcpFixesDocument = `
-    query GetMCPFixes($fixReportId: uuid!) {
-  fix(where: {fixReportId: {_eq: $fixReportId}}) {
-    ...FixDetails
-  }
-}
-    ${FixDetailsFragmentDoc}`;
 var GetLatestReportByRepoUrlDocument = `
-    query GetLatestReportByRepoUrl($repoUrl: String!, $limit: Int = 3) {
+    query GetLatestReportByRepoUrl($repoUrl: String!, $filters: fix_bool_exp = {}, $limit: Int!, $offset: Int!) {
   fixReport(
     where: {repo: {originalUrl: {_eq: $repoUrl}}}
     order_by: {createdOn: desc}
     limit: 1
   ) {
-    id
-    createdOn
-    repo {
-      originalUrl
-    }
-    issueTypes
-    fixes_aggregate(
-      where: {vulnerabilityReportIssues: {category: {_eq: "Fixable"}}}
-    ) {
-      aggregate {
-        count
-      }
-    }
-    CRITICAL: fixes_aggregate(
-      where: {_and: [{vulnerabilityReportIssues: {category: {_eq: "Fixable"}}}, {severityText: {_eq: "critical"}}]}
-    ) {
-      aggregate {
-        count
-      }
-    }
-    HIGH: fixes_aggregate(
-      where: {_and: [{vulnerabilityReportIssues: {category: {_eq: "Fixable"}}}, {severityText: {_eq: "high"}}]}
-    ) {
-      aggregate {
-        count
-      }
-    }
-    MEDIUM: fixes_aggregate(
-      where: {_and: [{vulnerabilityReportIssues: {category: {_eq: "Fixable"}}}, {severityText: {_eq: "medium"}}]}
-    ) {
-      aggregate {
-        count
-      }
-    }
-    LOW: fixes_aggregate(
-      where: {_and: [{vulnerabilityReportIssues: {category: {_eq: "Fixable"}}}, {severityText: {_eq: "low"}}]}
-    ) {
-      aggregate {
-        count
-      }
-    }
-    fixes(
-      where: {vulnerabilityReportIssues: {category: {_eq: "Fixable"}}}
-      order_by: {severityValue: desc}
-      limit: $limit
-    ) {
-      ...FixDetails
-    }
-    vulnerabilityReport {
-      scanDate
-      vendor
-      vulnerabilityReportIssues_aggregate(where: {category: {_eq: "Fixable"}}) {
-        aggregate {
-          count
-        }
-      }
-    }
+    ...FixReportSummaryFields
   }
 }
-    ${FixDetailsFragmentDoc}`;
+    ${FixReportSummaryFieldsFragmentDoc}`;
+var GetReportFixesDocument = `
+    query GetReportFixes($reportId: uuid!, $filters: fix_bool_exp = {}, $limit: Int!, $offset: Int!) {
+  fixReport(where: {id: {_eq: $reportId}}) {
+    ...FixReportSummaryFields
+  }
+}
+    ${FixReportSummaryFieldsFragmentDoc}`;
 var defaultWrapper = (action, _operationName, _operationType, _variables) => action();
 function getSdk(client, withWrapper = defaultWrapper) {
   return {
@@ -1121,943 +1143,15 @@ function getSdk(client, withWrapper = defaultWrapper) {
     autoPrAnalysis(variables, requestHeaders, signal) {
       return withWrapper((wrappedRequestHeaders) => client.request({ document: AutoPrAnalysisDocument, variables, requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders }, signal }), "autoPrAnalysis", "mutation", variables);
     },
-    GetMCPFixes(variables, requestHeaders, signal) {
-      return withWrapper((wrappedRequestHeaders) => client.request({ document: GetMcpFixesDocument, variables, requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders }, signal }), "GetMCPFixes", "query", variables);
-    },
     GetLatestReportByRepoUrl(variables, requestHeaders, signal) {
       return withWrapper((wrappedRequestHeaders) => client.request({ document: GetLatestReportByRepoUrlDocument, variables, requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders }, signal }), "GetLatestReportByRepoUrl", "query", variables);
+    },
+    GetReportFixes(variables, requestHeaders, signal) {
+      return withWrapper((wrappedRequestHeaders) => client.request({ document: GetReportFixesDocument, variables, requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders }, signal }), "GetReportFixes", "query", variables);
     }
   };
 }
 
-// src/features/analysis/scm/shared/src/types/shared.ts
-import { z } from "zod";
-var ParsedSeverityZ = z.nativeEnum(Vulnerability_Severity_Enum).nullish().transform((i) => i ?? "low" /* Low */);
-var ScmSubmitFixRequestsZ = z.array(
-  z.object({
-    scmSubmitFixRequest: z.object({
-      submitFixRequest: z.object({
-        createdByUser: z.object({
-          email: z.string()
-        }),
-        targetBranchName: z.string().default("")
-      }),
-      prUrl: z.string().nullable(),
-      prStatus: z.nativeEnum(Pr_Status_Enum).nullable(),
-      commitUrl: z.string().nullable(),
-      scmId: z.string()
-    })
-  })
-);
-
-// src/features/analysis/scm/shared/src/types/fix.ts
-var PackageInfoZ = z2.object({
-  name: z2.string(),
-  version: z2.string(),
-  envName: z2.string().nullable()
-});
-var ManifestActionRequiredZ = z2.object({
-  action: z2.nativeEnum(ManifestAction),
-  language: z2.nativeEnum(Language),
-  lib: PackageInfoZ,
-  typesLib: PackageInfoZ.nullable()
-});
-var ExtraContextInternalZ = z2.object({
-  key: z2.string(),
-  value: z2.string().or(z2.boolean()).or(
-    z2.object({
-      int: z2.boolean(),
-      integer: z2.boolean(),
-      string: z2.boolean(),
-      date: z2.boolean()
-    })
-  )
-});
-var FixExtraContextZ = z2.object({
-  fixDescription: z2.string(),
-  manifestActionsRequired: z2.array(ManifestActionRequiredZ),
-  extraContext: z2.array(ExtraContextInternalZ)
-});
-var PatchAndQuestionsZ = z2.object({
-  __typename: z2.literal("FixData"),
-  patch: z2.string(),
-  patchOriginalEncodingBase64: z2.string(),
-  questions: z2.array(
-    z2.object({
-      name: z2.string(),
-      key: z2.string(),
-      index: z2.number(),
-      defaultValue: z2.string(),
-      value: z2.string().nullable(),
-      extraContext: z2.array(ExtraContextInternalZ),
-      inputType: z2.nativeEnum(FixQuestionInputType),
-      options: z2.array(z2.string())
-    })
-  ),
-  extraContext: FixExtraContextZ
-});
-var FixRatingZ = z2.object({
-  voteScore: z2.number(),
-  fixRatingTag: z2.nativeEnum(Fix_Rating_Tag_Enum).nullable().default(null),
-  comment: z2.string().nullable().default(null),
-  updatedDate: z2.string().nullable(),
-  user: z2.object({
-    email: z2.string(),
-    name: z2.string()
-  })
-});
-var FixSharedStateZ = z2.object({
-  state: z2.nativeEnum(Fix_State_Enum),
-  isArchived: z2.boolean(),
-  scmSubmitFixRequests: ScmSubmitFixRequestsZ,
-  fixRatings: z2.array(FixRatingZ).default([])
-}).nullish().transform(
-  (data) => data ? data : {
-    state: "Ready" /* Ready */,
-    isArchived: false,
-    scmSubmitFixRequests: [],
-    fixRatings: []
-  }
-);
-var FixQueryZ = z2.object({
-  __typename: z2.literal("fix").optional(),
-  id: z2.string().uuid(),
-  sharedState: FixSharedStateZ,
-  modifiedBy: z2.string().nullable(),
-  gitBlameLogin: z2.string().nullable(),
-  safeIssueLanguage: z2.string(),
-  safeIssueType: z2.string(),
-  confidence: z2.number(),
-  fixReportId: z2.string().uuid(),
-  isExpired: z2.boolean().default(false),
-  fixFiles: z2.array(
-    z2.object({
-      fileRepoRelativePath: z2.string()
-    })
-  ),
-  numberOfVulnerabilityIssues: z2.number(),
-  severityText: z2.nativeEnum(Vulnerability_Severity_Enum),
-  vulnerabilityReportIssues: z2.array(
-    z2.object({
-      vendorIssueId: z2.string(),
-      issueLanguage: z2.string(),
-      parsedSeverity: ParsedSeverityZ
-    })
-  ),
-  patchAndQuestions: PatchAndQuestionsZ,
-  effortToApplyFix: z2.nativeEnum(Effort_To_Apply_Fix_Enum).nullable()
-});
-var FixPartsForFixScreenZ = FixQueryZ.merge(
-  z2.object({
-    vulnerabilityReportIssues: z2.array(
-      z2.object({
-        vendorIssueId: z2.string(),
-        issueType: z2.string(),
-        issueLanguage: z2.string()
-      })
-    )
-  })
-);
-
-// src/features/analysis/scm/shared/src/types/issue.ts
-import { z as z4 } from "zod";
-
-// src/features/analysis/scm/shared/src/types/analysis.ts
-import { z as z3 } from "zod";
-var FixPageFixReportZ = z3.object({
-  id: z3.string().uuid(),
-  analysisUrl: z3.string(),
-  expirationOn: z3.string(),
-  createdOn: z3.string(),
-  state: z3.nativeEnum(Fix_Report_State_Enum),
-  repo: z3.object({
-    name: z3.string().nullable(),
-    originalUrl: z3.string(),
-    reference: z3.string(),
-    commitSha: z3.string(),
-    isKnownBranch: z3.boolean().nullable()
-  }),
-  vulnerabilityReport: z3.object({
-    vendor: z3.nativeEnum(Vulnerability_Report_Vendor_Enum),
-    vendorReportId: z3.string().uuid().nullable(),
-    projectId: z3.string().uuid(),
-    project: z3.object({
-      organizationId: z3.string().uuid()
-    }),
-    file: z3.object({
-      id: z3.string().uuid(),
-      path: z3.string()
-    }),
-    pending: z3.object({
-      aggregate: z3.object({
-        count: z3.number()
-      })
-    }),
-    supported: z3.object({
-      aggregate: z3.object({
-        count: z3.number()
-      })
-    }),
-    all: z3.object({
-      aggregate: z3.object({
-        count: z3.number()
-      })
-    }),
-    fixable: z3.object({
-      aggregate: z3.object({
-        count: z3.number()
-      })
-    }),
-    errors: z3.object({
-      aggregate: z3.object({
-        count: z3.number()
-      })
-    }),
-    vulnerabilityReportIssues: z3.object({
-      extraData: z3.object({
-        missing_files: z3.string().array().nullish(),
-        large_files: z3.string().array().nullish(),
-        error_files: z3.string().array().nullish()
-      })
-    }).array()
-  })
-});
-
-// src/features/analysis/scm/shared/src/types/issue.ts
-var MAX_SOURCE_CODE_FILE_SIZE_IN_BYTES = 1e5;
-var CATEGORY = {
-  NoFix: "NoFix",
-  Unsupported: "Unsupported",
-  Irrelevant: "Irrelevant",
-  FalsePositive: "FalsePositive",
-  Fixable: "Fixable",
-  Filtered: "Filtered"
-};
-var ValidCategoriesZ = z4.union([
-  z4.literal(CATEGORY.NoFix),
-  z4.literal(CATEGORY.Unsupported),
-  z4.literal(CATEGORY.Irrelevant),
-  z4.literal(CATEGORY.FalsePositive),
-  z4.literal(CATEGORY.Fixable),
-  z4.literal(CATEGORY.Filtered)
-]);
-var VulnerabilityReportIssueSharedStateZ = z4.object({
-  id: z4.string().uuid(),
-  isArchived: z4.boolean()
-}).nullish();
-var BaseIssuePartsZ = z4.object({
-  id: z4.string().uuid(),
-  safeIssueType: z4.string(),
-  safeIssueLanguage: z4.string(),
-  createdAt: z4.string(),
-  parsedSeverity: ParsedSeverityZ,
-  category: ValidCategoriesZ,
-  extraData: z4.object({
-    missing_files: z4.string().array().nullish(),
-    error_files: z4.string().array().nullish()
-  }),
-  vulnerabilityReportIssueTags: z4.array(
-    z4.object({
-      tag: z4.nativeEnum(Vulnerability_Report_Issue_Tag_Enum)
-    })
-  ),
-  codeNodes: z4.array(
-    z4.object({
-      path: z4.string(),
-      line: z4.number(),
-      index: z4.number()
-    })
-  ).transform((nodes) => nodes.sort((a, b) => b.index - a.index)),
-  sourceCodeNodes: z4.array(
-    z4.object({
-      sourceCodeFile: z4.object({
-        path: z4.string(),
-        signedFile: z4.object({
-          url: z4.string()
-        })
-      })
-    }).transform(async ({ sourceCodeFile }) => {
-      const { url } = sourceCodeFile.signedFile;
-      const sourceCodeRes = await fetch(url);
-      if (Number(sourceCodeRes.headers.get("Content-Length")) > MAX_SOURCE_CODE_FILE_SIZE_IN_BYTES) {
-        return null;
-      }
-      return {
-        path: sourceCodeFile.path,
-        fileContent: await sourceCodeRes.text()
-      };
-    })
-  ).transform((nodes) => nodes.filter((node) => node !== null)),
-  fix: FixPartsForFixScreenZ.nullish(),
-  vulnerabilityReportIssueNodeDiffFile: z4.object({
-    signedFile: z4.object({
-      url: z4.string()
-    }).transform(async ({ url }) => {
-      const codeDiff = await fetch(url).then((res) => res.text());
-      return { codeDiff };
-    })
-  }).nullish(),
-  sharedState: VulnerabilityReportIssueSharedStateZ
-});
-var FalsePositivePartsZ = z4.object({
-  extraContext: z4.array(z4.object({ key: z4.string(), value: z4.string() })),
-  fixDescription: z4.string()
-});
-var IssuePartsWithFixZ = BaseIssuePartsZ.merge(
-  z4.object({
-    category: z4.literal(CATEGORY.Irrelevant),
-    fix: FixPartsForFixScreenZ.nullish()
-  })
-);
-var IssuePartsFpZ = BaseIssuePartsZ.merge(
-  z4.object({
-    category: z4.literal(CATEGORY.FalsePositive),
-    fpId: z4.string().uuid(),
-    getFalsePositive: FalsePositivePartsZ
-  })
-);
-var GeneralIssueZ = BaseIssuePartsZ.merge(
-  z4.object({
-    category: z4.union([
-      z4.literal(CATEGORY.NoFix),
-      z4.literal(CATEGORY.Unsupported),
-      z4.literal(CATEGORY.Fixable),
-      z4.literal(CATEGORY.Filtered)
-    ])
-  })
-);
-var IssuePartsZ = z4.union([
-  IssuePartsFpZ,
-  IssuePartsWithFixZ,
-  GeneralIssueZ
-]);
-var GetIssueIndexesZ = z4.object({
-  currentIndex: z4.number(),
-  totalIssues: z4.number(),
-  nextIssue: z4.object({
-    id: z4.string().uuid()
-  }).nullish(),
-  prevIssue: z4.object({
-    id: z4.string().uuid()
-  }).nullish()
-});
-var GetIssueScreenDataZ = z4.object({
-  fixReport_by_pk: FixPageFixReportZ,
-  vulnerability_report_issue_by_pk: IssuePartsZ,
-  issueIndexes: GetIssueIndexesZ
-});
-var IssueBucketZ = z4.enum(["fixable", "irrelevant", "remaining"]);
-var mapCategoryToBucket = {
-  FalsePositive: "irrelevant",
-  Irrelevant: "irrelevant",
-  NoFix: "remaining",
-  Unsupported: "remaining",
-  Fixable: "fixable",
-  Filtered: "remaining"
-};
-
-// src/features/analysis/scm/shared/src/types/types.ts
-import { z as z7 } from "zod";
-
-// src/features/analysis/scm/shared/src/validations.ts
-import { z as z6 } from "zod";
-
-// src/features/analysis/scm/shared/src/getIssueType.ts
-import { z as z5 } from "zod";
-var issueTypeMap = {
-  ["NO_LIMITS_OR_THROTTLING" /* NoLimitsOrThrottling */]: "Missing Rate Limiting",
-  ["SQL_Injection" /* SqlInjection */]: "SQL Injection",
-  ["CMDi_relative_path_command" /* CmDiRelativePathCommand */]: "Relative Path Command Injection",
-  ["CMDi" /* CmDi */]: "Command Injection",
-  ["CONFUSING_NAMING" /* ConfusingNaming */]: "Confusing Naming",
-  ["XXE" /* Xxe */]: "XXE",
-  ["XSS" /* Xss */]: "XSS",
-  ["PT" /* Pt */]: "Path Traversal",
-  ["ZIP_SLIP" /* ZipSlip */]: "Zip Slip",
-  ["INSECURE_RANDOMNESS" /* InsecureRandomness */]: "Insecure Randomness",
-  ["SSRF" /* Ssrf */]: "Server Side Request Forgery",
-  ["TYPE_CONFUSION" /* TypeConfusion */]: "Type Confusion",
-  ["REGEX_INJECTION" /* RegexInjection */]: "Regular Expression Injection",
-  ["INCOMPLETE_URL_SANITIZATION" /* IncompleteUrlSanitization */]: "Incomplete URL Sanitization",
-  ["LOCALE_DEPENDENT_COMPARISON" /* LocaleDependentComparison */]: "Locale Dependent Comparison",
-  ["LOG_FORGING" /* LogForging */]: "Log Forging",
-  ["MISSING_CHECK_AGAINST_NULL" /* MissingCheckAgainstNull */]: "Missing Check against Null",
-  ["PASSWORD_IN_COMMENT" /* PasswordInComment */]: "Password in Comment",
-  ["OVERLY_BROAD_CATCH" /* OverlyBroadCatch */]: "Poor Error Handling: Overly Broad Catch",
-  ["USE_OF_SYSTEM_OUTPUT_STREAM" /* UseOfSystemOutputStream */]: "Use of System.out/System.err",
-  ["DANGEROUS_FUNCTION_OVERFLOW" /* DangerousFunctionOverflow */]: "Use of dangerous function",
-  ["DOS_STRING_BUILDER" /* DosStringBuilder */]: "Denial of Service: StringBuilder",
-  ["OPEN_REDIRECT" /* OpenRedirect */]: "Open Redirect",
-  ["WEAK_XML_SCHEMA_UNBOUNDED_OCCURRENCES" /* WeakXmlSchemaUnboundedOccurrences */]: "Weak XML Schema: Unbounded Occurrences",
-  ["SYSTEM_INFORMATION_LEAK" /* SystemInformationLeak */]: "System Information Leak",
-  ["SYSTEM_INFORMATION_LEAK_EXTERNAL" /* SystemInformationLeakExternal */]: "External System Information Leak",
-  ["HTTP_RESPONSE_SPLITTING" /* HttpResponseSplitting */]: "HTTP response splitting",
-  ["HTTP_ONLY_COOKIE" /* HttpOnlyCookie */]: "Cookie is not HttpOnly",
-  ["INSECURE_COOKIE" /* InsecureCookie */]: "Insecure Cookie",
-  ["TRUST_BOUNDARY_VIOLATION" /* TrustBoundaryViolation */]: "Trust Boundary Violation",
-  ["NULL_DEREFERENCE" /* NullDereference */]: "Null Dereference",
-  ["UNSAFE_DESERIALIZATION" /* UnsafeDeserialization */]: "Unsafe deserialization",
-  ["INSECURE_BINDER_CONFIGURATION" /* InsecureBinderConfiguration */]: "Insecure Binder Configuration",
-  ["UNSAFE_TARGET_BLANK" /* UnsafeTargetBlank */]: "Unsafe use of target blank",
-  ["IFRAME_WITHOUT_SANDBOX" /* IframeWithoutSandbox */]: "Client use of iframe without sandbox",
-  ["JQUERY_DEPRECATED_SYMBOLS" /* JqueryDeprecatedSymbols */]: "jQuery deprecated symbols",
-  ["MISSING_ANTIFORGERY_VALIDATION" /* MissingAntiforgeryValidation */]: "Missing Anti-Forgery Validation",
-  ["GRAPHQL_DEPTH_LIMIT" /* GraphqlDepthLimit */]: "GraphQL Depth Limit",
-  ["UNCHECKED_LOOP_CONDITION" /* UncheckedLoopCondition */]: "Unchecked Loop Condition",
-  ["IMPROPER_RESOURCE_SHUTDOWN_OR_RELEASE" /* ImproperResourceShutdownOrRelease */]: "Improper Resource Shutdown or Release",
-  ["IMPROPER_EXCEPTION_HANDLING" /* ImproperExceptionHandling */]: "Improper Exception Handling",
-  ["DEFAULT_RIGHTS_IN_OBJ_DEFINITION" /* DefaultRightsInObjDefinition */]: "Default Definer Rights in Package or Object Definition",
-  ["HTML_COMMENT_IN_JSP" /* HtmlCommentInJsp */]: "HTML Comment in JSP",
-  ["ERROR_CONDTION_WITHOUT_ACTION" /* ErrorCondtionWithoutAction */]: "Error Condition Without Action",
-  ["DEPRECATED_FUNCTION" /* DeprecatedFunction */]: "Deprecated Function",
-  ["HARDCODED_SECRETS" /* HardcodedSecrets */]: "Hardcoded Secrets",
-  ["PROTOTYPE_POLLUTION" /* PrototypePollution */]: "Prototype Pollution",
-  ["RACE_CONDITION_FORMAT_FLAW" /* RaceConditionFormatFlaw */]: "Race Condition Format Flaw",
-  ["NON_FINAL_PUBLIC_STATIC_FIELD" /* NonFinalPublicStaticField */]: "Non-final Public Static Field",
-  ["MISSING_HSTS_HEADER" /* MissingHstsHeader */]: "Missing HSTS Header",
-  ["DEAD_CODE_UNUSED_FIELD" /* DeadCodeUnusedField */]: "Dead Code: Unused Field",
-  ["HEADER_MANIPULATION" /* HeaderManipulation */]: "Header Manipulation",
-  ["MISSING_EQUALS_OR_HASHCODE" /* MissingEqualsOrHashcode */]: "Missing equals or hashcode method",
-  ["WCF_MISCONFIGURATION_INSUFFICIENT_LOGGING" /* WcfMisconfigurationInsufficientLogging */]: "WCF Misconfiguration: Insufficient Logging",
-  ["WCF_MISCONFIGURATION_THROTTLING_NOT_ENABLED" /* WcfMisconfigurationThrottlingNotEnabled */]: "WCF Misconfiguration: Throttling Not Enabled",
-  ["USELESS_REGEXP_CHAR_ESCAPE" /* UselessRegexpCharEscape */]: "Useless regular-expression character escape",
-  ["INCOMPLETE_HOSTNAME_REGEX" /* IncompleteHostnameRegex */]: "Incomplete Hostname Regex",
-  ["OVERLY_LARGE_RANGE" /* OverlyLargeRange */]: "Regex: Overly Large Range",
-  ["INSUFFICIENT_LOGGING" /* InsufficientLogging */]: "Insufficient Logging of Sensitive Operations",
-  ["PRIVACY_VIOLATION" /* PrivacyViolation */]: "Privacy Violation",
-  ["INCOMPLETE_URL_SCHEME_CHECK" /* IncompleteUrlSchemeCheck */]: "Incomplete URL Scheme Check",
-  ["VALUE_NEVER_READ" /* ValueNeverRead */]: "Value Never Read",
-  ["VALUE_SHADOWING" /* ValueShadowing */]: "Value Shadowing",
-  ["NO_EQUIVALENCE_METHOD" /* NoEquivalenceMethod */]: "Class Does Not Implement Equivalence Method",
-  ["INFORMATION_EXPOSURE_VIA_HEADERS" /* InformationExposureViaHeaders */]: "Information Exposure via Headers",
-  ["DEBUG_ENABLED" /* DebugEnabled */]: "Debug Enabled",
-  ["LEFTOVER_DEBUG_CODE" /* LeftoverDebugCode */]: "Leftover Debug Code",
-  ["POOR_ERROR_HANDLING_EMPTY_CATCH_BLOCK" /* PoorErrorHandlingEmptyCatchBlock */]: "Poor Error Handling: Empty Catch Block",
-  ["ERRONEOUS_STRING_COMPARE" /* ErroneousStringCompare */]: "Erroneous String Compare",
-  ["UNVALIDATED_PUBLIC_METHOD_ARGUMENT" /* UnvalidatedPublicMethodArgument */]: "Unvalidated Public Method Argument",
-  ["AUTO_ESCAPE_FALSE" /* AutoEscapeFalse */]: "Auto-escape False",
-  ["MISSING_CSP_HEADER" /* MissingCspHeader */]: "Missing CSP Header",
-  ["HARDCODED_DOMAIN_IN_HTML" /* HardcodedDomainInHtml */]: "Hardcoded Domain in HTML",
-  ["HEAP_INSPECTION" /* HeapInspection */]: "Heap Inspection",
-  ["CLIENT_DOM_STORED_CODE_INJECTION" /* ClientDomStoredCodeInjection */]: "Client Code Injection",
-  ["STRING_FORMAT_MISUSE" /* StringFormatMisuse */]: "String Format Misuse",
-  ["NON_READONLY_FIELD" /* NonReadonlyField */]: "Non Readonly Field",
-  ["CSRF" /* Csrf */]: "Cross-Site Request Forgery (CSRF)",
-  ["WEAK_ENCRYPTION" /* WeakEncryption */]: "Weak Encryption Mechanism",
-  ["CODE_IN_COMMENT" /* CodeInComment */]: "Code in Comment",
-  ["REGEX_MISSING_TIMEOUT" /* RegexMissingTimeout */]: "Regex Missing Timeout",
-  ["FRAMEABLE_LOGIN_PAGE" /* FrameableLoginPage */]: "Frameable Login Page",
-  ["USE_OF_HARD_CODED_CRYPTOGRAPHIC_KEY" /* UseOfHardCodedCryptographicKey */]: "Use of Hardcoded Cryptographic Key",
-  ["MISSING_SSL_MINVERSION" /* MissingSslMinversion */]: "Missing SSL MinVersion",
-  ["WEBSOCKET_MISSING_ORIGIN_CHECK" /* WebsocketMissingOriginCheck */]: "Missing Websocket Origin Check",
-  ["DUPLICATED_STRINGS" /* DuplicatedStrings */]: "String Literals Should not Be Duplicated",
-  ["INSECURE_UUID_VERSION" /* InsecureUuidVersion */]: "Insecure UUID Version",
-  ["GH_ACTIONS_SHELL_INJECTION" /* GhActionsShellInjection */]: "GitHub Actions Shell Injection",
-  ["MODIFIED_DEFAULT_PARAM" /* ModifiedDefaultParam */]: "Modified Default Param",
-  ["UNSAFE_WEB_THREAD" /* UnsafeWebThread */]: "Unsafe Web Thread",
-  ["NO_VAR" /* NoVar */]: 'Prefer "let" or "const"',
-  ["INSECURE_TMP_FILE" /* InsecureTmpFile */]: "Insecure Temporary File",
-  ["RETURN_SHOULD_NOT_BE_INVARIANT" /* ReturnShouldNotBeInvariant */]: "Return Should Not Be Invariant",
-  ["SYSTEM_EXIT_SHOULD_RERAISE" /* SystemExitShouldReraise */]: "SystemExit Should Reraise",
-  ["NO_RETURN_IN_FINALLY" /* NoReturnInFinally */]: "No Return in Finally Block",
-  ["WILDCARD_IMPORTS" /* WildcardImports */]: "Wildcard Imports should not be used",
-  ["AVOID_IDENTITY_COMPARISON_CACHED_TYPES" /* AvoidIdentityComparisonCachedTypes */]: "Avoid Identity Comparison of Cached Types",
-  ["AVOID_BUILTIN_SHADOWING" /* AvoidBuiltinShadowing */]: "Avoid Builtin Shadowing",
-  ["IMPROPER_STRING_FORMATTING" /* ImproperStringFormatting */]: "Improper String Formatting",
-  ["TAR_SLIP" /* TarSlip */]: "Tar Slip",
-  ["MISSING_WHITESPACE" /* MissingWhitespace */]: "Missing Whitespace",
-  ["NO_PRINT_STATEMENT" /* NoPrintStatement */]: 'Python 2 "print" Statement Is Obsolete',
-  ["NO_OP_OVERHEAD" /* NoOpOverhead */]: "Expensive Arguments in Conditional Methods",
-  ["DO_NOT_RAISE_EXCEPTION" /* DoNotRaiseException */]: "Do Not Raise Exception",
-  ["DECLARE_VARIABLE_EXPLICITLY" /* DeclareVariableExplicitly */]: "Declare Variable Explicitly",
-  ["NO_NESTED_TRY" /* NoNestedTry */]: "No Nested Try",
-  ["UNNECESSARY_IMPORTS" /* UnnecessaryImports */]: "Unnecessary Imports",
-  ["REDOS" /* Redos */]: "Regular Expression Denial of Service",
-  ["DO_NOT_THROW_GENERIC_EXCEPTION" /* DoNotThrowGenericException */]: "Do Not Throw Generic Exception"
-};
-var issueTypeZ = z5.nativeEnum(IssueType_Enum);
-var getIssueTypeFriendlyString = (issueType) => {
-  const issueTypeZParseRes = issueTypeZ.safeParse(issueType);
-  if (!issueTypeZParseRes.success) {
-    return issueType ? issueType.replaceAll("_", " ") : "Other";
-  }
-  return issueTypeMap[issueTypeZParseRes.data];
-};
-function getTagTooltip(tag) {
-  switch (tag) {
-    case "FALSE_POSITIVE":
-      return "Issue was found to be a false positive";
-    case "TEST_CODE":
-      return "Issue found in test files, not production code";
-    case "VENDOR_CODE":
-      return "Issue is in external libraries or dependencies not owned or maintained by your team";
-    case "AUTOGENERATED_CODE":
-      return "Code created by tools or frameworks, not manually written";
-    case "AUXILIARY_CODE":
-      return "Issue found in supporting files that don't impact core functionality";
-    case "Filtered":
-      return "Issue was filtered by user in the Fix Policy";
-    default:
-      return tag;
-  }
-}
-var issueDescription = {
-  ["AUTOGENERATED_CODE" /* AutogeneratedCode */]: "The flagged code is generated automatically by tools or frameworks as part of the build or runtime process. This categorization highlights that **the issue resides in non-manual code**, which often requires tool-specific solutions or exemptions.",
-  ["AUXILIARY_CODE" /* AuxiliaryCode */]: "The flagged code is auxiliary or supporting code, such as configuration files, build scripts, or other non-application logic. This categorization indicates that the issue is not directly related to the application's core functionality.",
-  ["FALSE_POSITIVE" /* FalsePositive */]: "The flagged code **does not represent an actual vulnerability within the application's context.** This categorization indicates that the issue is either misidentified by the scanner or deemed irrelevant to the application's functionality.",
-  ["TEST_CODE" /* TestCode */]: "The flagged code resides in a test-specific path or context. This categorization indicates that **it supports testing scenarios and is isolated from production use**.",
-  ["UNFIXABLE" /* Unfixable */]: "The flagged code cannot be fixed",
-  ["VENDOR_CODE" /* VendorCode */]: "The flagged code originates from a third-party library or dependency maintained externally. This categorization suggests that **the issue lies outside the application's direct control** and should be addressed by the vendor if necessary."
-};
-function replaceKeysWithValues(fixDescription, extraContext) {
-  let result = fixDescription;
-  extraContext.forEach(({ key, value }) => {
-    result = result.replace(`\${${key}}`, value);
-  });
-  return result;
-}
-function getParsedFalsePositiveMessage(data) {
-  const { fixDescription, extraContext } = data;
-  const containsTemplate = extraContext.some(
-    (context) => fixDescription.includes(`\${${context.key}}`)
-  );
-  const description2 = containsTemplate ? replaceKeysWithValues(fixDescription, extraContext) : fixDescription;
-  const contextString = containsTemplate ? null : `\`\`\`${extraContext.map(({ value }) => value).join(" ")} \`\`\``;
-  return { description: description2, contextString };
-}
-
-// src/features/analysis/scm/shared/src/validations.ts
-var IssueTypeSettingZ = z6.object({
-  autoPrEnabled: z6.boolean(),
-  enabled: z6.boolean(),
-  issueType: z6.nativeEnum(IssueType_Enum)
-});
-var IssueTypeSettingsZ = z6.array(IssueTypeSettingZ).transform((issueTypeSettings) => {
-  return Object.values(IssueType_Enum).map((issueTypeEnum) => {
-    const existingIssueTypeSetting = issueTypeSettings.find(
-      ({ issueType: dbIssueType }) => dbIssueType === issueTypeEnum
-    );
-    if (existingIssueTypeSetting) {
-      return existingIssueTypeSetting;
-    }
-    return {
-      autoPrEnabled: false,
-      enabled: true,
-      issueType: issueTypeEnum
-    };
-  }).sort((a, b) => {
-    return getIssueTypeFriendlyString(a.issueType).localeCompare(
-      getIssueTypeFriendlyString(b.issueType)
-    );
-  });
-});
-
-// src/features/analysis/scm/shared/src/types/types.ts
-var OrganizationScreenQueryParamsZ = z7.object({
-  organizationId: z7.string().uuid()
-});
-var ProjectPageQueryParamsZ = z7.object({
-  organizationId: z7.string().uuid(),
-  projectId: z7.string().uuid()
-});
-var AnalysisPageQueryParamsZ = ProjectPageQueryParamsZ.extend({
-  reportId: z7.string().uuid()
-});
-var FixPageQueryParamsZ = AnalysisPageQueryParamsZ.extend({
-  fixId: z7.string().uuid()
-});
-var IssuePageQueryParamsZ = AnalysisPageQueryParamsZ.extend({
-  issueId: z7.string().uuid()
-});
-var CliLoginPageQueryParamsZ = z7.object({
-  loginId: z7.string().uuid()
-});
-var AnalysisReportDigestedZ = z7.object({
-  id: z7.string().uuid(),
-  state: z7.nativeEnum(Fix_Report_State_Enum),
-  vulnerabilityReport: z7.object({
-    reportSummaryUrl: z7.string().url().nullish(),
-    scanDate: z7.string().nullable(),
-    supported: z7.object({
-      aggregate: z7.object({
-        count: z7.number()
-      })
-    }),
-    all: z7.object({
-      aggregate: z7.object({
-        count: z7.number()
-      })
-    }),
-    vendor: z7.nativeEnum(Vulnerability_Report_Vendor_Enum),
-    project: z7.object({
-      organizationId: z7.string().uuid()
-    })
-  })
-});
-var ReportQueryResultZ = z7.object({
-  fixReport_by_pk: z7.object({
-    id: z7.string().uuid(),
-    analysisUrl: z7.string(),
-    fixesCommitted: z7.object({
-      aggregate: z7.object({ count: z7.number() })
-    }),
-    fixesDownloaded: z7.object({
-      aggregate: z7.object({ count: z7.number() })
-    }),
-    fixesDoneCount: z7.number(),
-    fixesInprogressCount: z7.number(),
-    fixesReadyCount: z7.object({
-      aggregate: z7.object({ count: z7.number() })
-    }),
-    issueTypes: z7.record(z7.string(), z7.number()).nullable(),
-    issueLanguages: z7.record(z7.string(), z7.number()).nullable(),
-    fixesCountByEffort: z7.record(z7.string(), z7.number()).nullable(),
-    vulnerabilitySeverities: z7.record(z7.string(), z7.number()).nullable(),
-    createdOn: z7.string(),
-    expirationOn: z7.string().nullable(),
-    state: z7.nativeEnum(Fix_Report_State_Enum),
-    fixes: z7.array(
-      z7.object({
-        id: z7.string().uuid(),
-        safeIssueLanguage: z7.string(),
-        safeIssueType: z7.string(),
-        confidence: z7.number(),
-        effortToApplyFix: z7.nativeEnum(Effort_To_Apply_Fix_Enum).nullable(),
-        modifiedBy: z7.string().nullable(),
-        gitBlameLogin: z7.string().nullable(),
-        fixReportId: z7.string().uuid(),
-        filePaths: z7.array(
-          z7.object({
-            fileRepoRelativePath: z7.string()
-          })
-        ),
-        sharedState: FixSharedStateZ,
-        numberOfVulnerabilityIssues: z7.number(),
-        severityText: z7.nativeEnum(Vulnerability_Severity_Enum),
-        vulnerabilityReportIssues: z7.array(
-          z7.object({
-            id: z7.string().uuid(),
-            issueType: z7.string(),
-            issueLanguage: z7.string(),
-            category: z7.string()
-          })
-        )
-        // scmSubmitFixRequests: ScmSubmitFixRequestsZ,
-      })
-    ),
-    repo: z7.object({
-      name: z7.string().nullable(),
-      originalUrl: z7.string(),
-      reference: z7.string(),
-      commitSha: z7.string(),
-      isKnownBranch: z7.boolean().nullish().default(true)
-    }),
-    vulnerabilityReportIssuesFixedCount: z7.object({
-      vulnerabilityReportIssues_aggregate: z7.object({
-        aggregate: z7.object({ count: z7.number() })
-      })
-    }),
-    vulnerabilityReport: z7.object({
-      id: z7.string().uuid(),
-      reportSummaryUrl: z7.string().url().nullish(),
-      vendor: z7.nativeEnum(Vulnerability_Report_Vendor_Enum).nullable(),
-      issuesWithKnownLanguage: z7.number().nullable(),
-      scanDate: z7.string().nullable(),
-      vendorReportId: z7.string().uuid().nullable(),
-      projectId: z7.string().uuid(),
-      project: z7.object({
-        organizationId: z7.string().uuid()
-      }),
-      file: z7.object({
-        id: z7.string().uuid(),
-        path: z7.string()
-      }),
-      pending: z7.object({
-        aggregate: z7.object({
-          count: z7.number()
-        })
-      }),
-      irrelevant: z7.object({
-        aggregate: z7.object({
-          count: z7.number()
-        })
-      }),
-      remaining: z7.object({
-        aggregate: z7.object({
-          count: z7.number()
-        })
-      }),
-      digested: z7.object({
-        aggregate: z7.object({
-          count: z7.number()
-        })
-      }),
-      supported: z7.object({
-        aggregate: z7.object({
-          count: z7.number()
-        })
-      }),
-      all: z7.object({
-        aggregate: z7.object({
-          count: z7.number()
-        })
-      }),
-      fixable: z7.object({
-        aggregate: z7.object({
-          count: z7.number()
-        })
-      }),
-      errors: z7.object({
-        aggregate: z7.object({
-          count: z7.number()
-        })
-      }),
-      vulnerabilityReportIssues: z7.object({
-        id: z7.string().uuid(),
-        extraData: z7.object({
-          missing_files: z7.string().array().nullish(),
-          large_files: z7.string().array().nullish(),
-          error_files: z7.string().array().nullish()
-        })
-      }).array()
-    })
-  })
-});
-var ReportFixesQueryFixZ = z7.object({
-  id: z7.string().uuid(),
-  sharedState: FixSharedStateZ,
-  confidence: z7.number(),
-  gitBlameLogin: z7.string().nullable(),
-  effortToApplyFix: z7.nativeEnum(Effort_To_Apply_Fix_Enum).nullable(),
-  safeIssueLanguage: z7.string(),
-  safeIssueType: z7.string(),
-  fixReportId: z7.string().uuid(),
-  filePaths: z7.array(
-    z7.object({
-      fileRepoRelativePath: z7.string()
-    })
-  ),
-  numberOfVulnerabilityIssues: z7.number(),
-  severityText: z7.nativeEnum(Vulnerability_Severity_Enum),
-  vulnerabilityReportIssues: z7.array(
-    z7.object({
-      issueType: z7.string(),
-      issueLanguage: z7.string()
-    })
-  ).min(1)
-});
-var VulnerabilityReportIssueZ = z7.object({
-  id: z7.string().uuid(),
-  createdAt: z7.string(),
-  state: z7.nativeEnum(Vulnerability_Report_Issue_State_Enum),
-  safeIssueType: z7.string(),
-  safeIssueLanguage: z7.string(),
-  extraData: z7.object({
-    missing_files: z7.string().array().nullish(),
-    large_files: z7.string().array().nullish(),
-    error_files: z7.string().array().nullish()
-  }),
-  fix: ReportFixesQueryFixZ.nullable(),
-  falsePositive: z7.object({
-    id: z7.string().uuid()
-  }).nullable(),
-  parsedSeverity: ParsedSeverityZ,
-  severity: z7.string(),
-  severityValue: z7.number(),
-  category: z7.string(),
-  codeNodes: z7.array(z7.object({ path: z7.string() })),
-  vulnerabilityReportIssueTags: z7.array(
-    z7.object({
-      vulnerability_report_issue_tag_value: z7.string()
-    })
-  ),
-  sharedState: VulnerabilityReportIssueSharedStateZ
-});
-var GetReportIssuesQueryZ = z7.object({
-  fixReport: z7.object({
-    vulnerabilityReport: z7.object({
-      id: z7.string().uuid(),
-      lastIssueUpdatedAt: z7.string(),
-      vulnerabilityReportIssues_aggregate: z7.object({
-        aggregate: z7.object({ count: z7.number() })
-      }),
-      vulnerabilityReportIssues: z7.array(VulnerabilityReportIssueZ)
-    })
-  }).array()
-}).nullish();
-var FixReportByProjectZ = z7.object({
-  project_by_pk: z7.object({
-    vulnerabilityReports: z7.array(
-      z7.object({
-        fixReport: z7.object({ id: z7.string().uuid() }).nullable()
-      })
-    )
-  })
-});
-var FixScreenQueryResultZ = z7.object({
-  fixReport_by_pk: FixPageFixReportZ,
-  fix_by_pk: FixPartsForFixScreenZ,
-  fixesWithSameIssueType: z7.array(
-    z7.object({
-      id: z7.string().uuid(),
-      sharedState: z7.object({ state: z7.nativeEnum(Fix_State_Enum) }).nullable().default({ state: "Ready" /* Ready */ })
-    })
-  ),
-  relevantIssue: IssuePartsZ.nullish()
-});
-var FixPageQueryZ = z7.object({
-  data: FixScreenQueryResultZ
-});
-var GetReportFixesQueryZ = z7.object({
-  fixReport: z7.array(
-    z7.object({
-      fixes: z7.array(ReportFixesQueryFixZ),
-      vulnerabilityReportIssuesTotalCount: z7.object({
-        vulnerabilityReportIssues_aggregate: z7.object({
-          aggregate: z7.object({ count: z7.number() })
-        })
-      }),
-      vulnerabilityReportIssuesFixedCount: z7.object({
-        vulnerabilityReportIssues_aggregate: z7.object({
-          aggregate: z7.object({ count: z7.number() })
-        })
-      }),
-      vulnerabilityReportIssuesIrrelevantCount: z7.object({
-        vulnerabilityReportIssues_aggregate: z7.object({
-          aggregate: z7.object({ count: z7.number() })
-        })
-      }),
-      vulnerabilityReportIssuesRemainingCount: z7.object({
-        vulnerabilityReportIssues_aggregate: z7.object({
-          aggregate: z7.object({ count: z7.number() })
-        })
-      })
-    })
-  )
-}).nullish();
-var ProjectVulnerabilityReport = z7.object({
-  id: z7.string().uuid(),
-  name: z7.string().nullable(),
-  vendor: z7.nativeEnum(Vulnerability_Report_Vendor_Enum).nullable(),
-  fixReport: z7.object({
-    id: z7.string().uuid(),
-    createdOn: z7.string(),
-    vulnerabilityReportIssuesFixedCount: z7.object({
-      vulnerabilityReportIssues_aggregate: z7.object({
-        aggregate: z7.object({ count: z7.number() })
-      })
-    }),
-    issueTypes: z7.record(z7.string(), z7.number()).nullable(),
-    issueLanguages: z7.record(z7.nativeEnum(IssueLanguage_Enum), z7.number()).nullable(),
-    fixesCountByEffort: z7.record(z7.nativeEnum(Effort_To_Apply_Fix_Enum), z7.number()).nullable(),
-    vulnerabilitySeverities: z7.record(z7.nativeEnum(Vulnerability_Severity_Enum), z7.number()).nullable(),
-    fixesDoneCount: z7.number(),
-    fixesInprogressCount: z7.number(),
-    fixesReadyCount: z7.number(),
-    repo: z7.object({
-      originalUrl: z7.string(),
-      reference: z7.string(),
-      name: z7.string()
-    }),
-    createdByUser: z7.object({
-      email: z7.string()
-    }).nullable(),
-    state: z7.nativeEnum(Fix_Report_State_Enum),
-    expirationOn: z7.string()
-  })
-});
-var ProjectGetProjectZ = z7.object({
-  id: z7.string().uuid(),
-  name: z7.string(),
-  vulnerabilityReports: z7.object({
-    vendor: z7.nativeEnum(Vulnerability_Report_Vendor_Enum).nullable(),
-    fixReport: z7.object({
-      issueLanguages: z7.record(z7.nativeEnum(IssueLanguage_Enum), z7.number()).nullable(),
-      state: z7.nativeEnum(Fix_Report_State_Enum),
-      repo: z7.object({
-        originalUrl: z7.string(),
-        reference: z7.string()
-      }),
-      expirationOn: z7.string()
-    })
-  }).array()
-});
-var GetProjectsQueryZ = z7.array(ProjectGetProjectZ);
-var ProjectPageQueryResultZ = z7.object({
-  name: z7.string(),
-  id: z7.string().uuid(),
-  isDefault: z7.boolean().default(false),
-  organizationId: z7.string().uuid(),
-  vulnerabilityReports: z7.array(ProjectVulnerabilityReport),
-  projectIssueTypeSettings: z7.array(
-    IssueTypeSettingZ.merge(z7.object({ id: z7.string() }))
-  )
-});
-var GetProjectMembersDataZ = z7.object({
-  project_by_pk: z7.object({
-    name: z7.string(),
-    id: z7.string(),
-    projectUsers: z7.array(
-      z7.object({
-        projectToRole: z7.object({
-          projectRole: z7.object({
-            type: z7.nativeEnum(Project_Role_Type_Enum)
-          })
-        }),
-        user: z7.object({
-          id: z7.string().uuid(),
-          picture: z7.string().optional(),
-          name: z7.string().nullish(),
-          email: z7.string().email()
-        })
-      })
-    )
-  })
-});
-var RepoArgsZ = z7.object({
-  originalUrl: z7.string().url(),
-  branch: z7.string(),
-  commitSha: z7.string()
-});
-var scmCloudUrl = {
-  GitLab: "https://gitlab.com",
-  GitHub: "https://github.com",
-  Ado: "https://dev.azure.com",
-  Bitbucket: "https://bitbucket.org"
-};
-var ScmType = /* @__PURE__ */ ((ScmType2) => {
-  ScmType2["GitHub"] = "GitHub";
-  ScmType2["GitLab"] = "GitLab";
-  ScmType2["Ado"] = "Ado";
-  ScmType2["Bitbucket"] = "Bitbucket";
-  return ScmType2;
-})(ScmType || {});
-var ConvertToSarifInputFileFormat = /* @__PURE__ */ ((ConvertToSarifInputFileFormat2) => {
-  ConvertToSarifInputFileFormat2["FortifyFPR"] = "FortifyFPR";
-  return ConvertToSarifInputFileFormat2;
-})(ConvertToSarifInputFileFormat || {});
-
-// src/features/analysis/scm/ado/constants.ts
-var DEFUALT_ADO_ORIGIN = scmCloudUrl.Ado;
-
-// src/features/analysis/scm/ado/utils.ts
-import querystring from "querystring";
-import * as api from "azure-devops-node-api";
-import Debug from "debug";
-import { z as z17 } from "zod";
-
-// src/features/analysis/scm/env.ts
-import { z as z8 } from "zod";
-var EnvVariablesZod = z8.object({
-  GITLAB_API_TOKEN: z8.string().optional(),
-  GITHUB_API_TOKEN: z8.string().optional(),
-  GIT_PROXY_HOST: z8.string().optional().default("http://tinyproxy:8888")
-});
-var { GITLAB_API_TOKEN, GITHUB_API_TOKEN, GIT_PROXY_HOST } = EnvVariablesZod.parse(process.env);
-
-// src/features/analysis/scm/shared/src/commitDescriptionMarkup.ts
-import { z as z9 } from "zod";
-
 // src/features/analysis/scm/shared/src/fixDetailsData.ts
 var fixDetailsData = {
   ["PT" /* Pt */]: {
@@ -2324,6 +1418,173 @@ var fixDetailsData = {
   ["DO_NOT_THROW_GENERIC_EXCEPTION" /* DoNotThrowGenericException */]: void 0
 };
 
+// src/features/analysis/scm/shared/src/getIssueType.ts
+import { z } from "zod";
+var issueTypeMap = {
+  ["NO_LIMITS_OR_THROTTLING" /* NoLimitsOrThrottling */]: "Missing Rate Limiting",
+  ["SQL_Injection" /* SqlInjection */]: "SQL Injection",
+  ["CMDi_relative_path_command" /* CmDiRelativePathCommand */]: "Relative Path Command Injection",
+  ["CMDi" /* CmDi */]: "Command Injection",
+  ["CONFUSING_NAMING" /* ConfusingNaming */]: "Confusing Naming",
+  ["XXE" /* Xxe */]: "XXE",
+  ["XSS" /* Xss */]: "XSS",
+  ["PT" /* Pt */]: "Path Traversal",
+  ["ZIP_SLIP" /* ZipSlip */]: "Zip Slip",
+  ["INSECURE_RANDOMNESS" /* InsecureRandomness */]: "Insecure Randomness",
+  ["SSRF" /* Ssrf */]: "Server Side Request Forgery",
+  ["TYPE_CONFUSION" /* TypeConfusion */]: "Type Confusion",
+  ["REGEX_INJECTION" /* RegexInjection */]: "Regular Expression Injection",
+  ["INCOMPLETE_URL_SANITIZATION" /* IncompleteUrlSanitization */]: "Incomplete URL Sanitization",
+  ["LOCALE_DEPENDENT_COMPARISON" /* LocaleDependentComparison */]: "Locale Dependent Comparison",
+  ["LOG_FORGING" /* LogForging */]: "Log Forging",
+  ["MISSING_CHECK_AGAINST_NULL" /* MissingCheckAgainstNull */]: "Missing Check against Null",
+  ["PASSWORD_IN_COMMENT" /* PasswordInComment */]: "Password in Comment",
+  ["OVERLY_BROAD_CATCH" /* OverlyBroadCatch */]: "Poor Error Handling: Overly Broad Catch",
+  ["USE_OF_SYSTEM_OUTPUT_STREAM" /* UseOfSystemOutputStream */]: "Use of System.out/System.err",
+  ["DANGEROUS_FUNCTION_OVERFLOW" /* DangerousFunctionOverflow */]: "Use of dangerous function",
+  ["DOS_STRING_BUILDER" /* DosStringBuilder */]: "Denial of Service: StringBuilder",
+  ["OPEN_REDIRECT" /* OpenRedirect */]: "Open Redirect",
+  ["WEAK_XML_SCHEMA_UNBOUNDED_OCCURRENCES" /* WeakXmlSchemaUnboundedOccurrences */]: "Weak XML Schema: Unbounded Occurrences",
+  ["SYSTEM_INFORMATION_LEAK" /* SystemInformationLeak */]: "System Information Leak",
+  ["SYSTEM_INFORMATION_LEAK_EXTERNAL" /* SystemInformationLeakExternal */]: "External System Information Leak",
+  ["HTTP_RESPONSE_SPLITTING" /* HttpResponseSplitting */]: "HTTP response splitting",
+  ["HTTP_ONLY_COOKIE" /* HttpOnlyCookie */]: "Cookie is not HttpOnly",
+  ["INSECURE_COOKIE" /* InsecureCookie */]: "Insecure Cookie",
+  ["TRUST_BOUNDARY_VIOLATION" /* TrustBoundaryViolation */]: "Trust Boundary Violation",
+  ["NULL_DEREFERENCE" /* NullDereference */]: "Null Dereference",
+  ["UNSAFE_DESERIALIZATION" /* UnsafeDeserialization */]: "Unsafe deserialization",
+  ["INSECURE_BINDER_CONFIGURATION" /* InsecureBinderConfiguration */]: "Insecure Binder Configuration",
+  ["UNSAFE_TARGET_BLANK" /* UnsafeTargetBlank */]: "Unsafe use of target blank",
+  ["IFRAME_WITHOUT_SANDBOX" /* IframeWithoutSandbox */]: "Client use of iframe without sandbox",
+  ["JQUERY_DEPRECATED_SYMBOLS" /* JqueryDeprecatedSymbols */]: "jQuery deprecated symbols",
+  ["MISSING_ANTIFORGERY_VALIDATION" /* MissingAntiforgeryValidation */]: "Missing Anti-Forgery Validation",
+  ["GRAPHQL_DEPTH_LIMIT" /* GraphqlDepthLimit */]: "GraphQL Depth Limit",
+  ["UNCHECKED_LOOP_CONDITION" /* UncheckedLoopCondition */]: "Unchecked Loop Condition",
+  ["IMPROPER_RESOURCE_SHUTDOWN_OR_RELEASE" /* ImproperResourceShutdownOrRelease */]: "Improper Resource Shutdown or Release",
+  ["IMPROPER_EXCEPTION_HANDLING" /* ImproperExceptionHandling */]: "Improper Exception Handling",
+  ["DEFAULT_RIGHTS_IN_OBJ_DEFINITION" /* DefaultRightsInObjDefinition */]: "Default Definer Rights in Package or Object Definition",
+  ["HTML_COMMENT_IN_JSP" /* HtmlCommentInJsp */]: "HTML Comment in JSP",
+  ["ERROR_CONDTION_WITHOUT_ACTION" /* ErrorCondtionWithoutAction */]: "Error Condition Without Action",
+  ["DEPRECATED_FUNCTION" /* DeprecatedFunction */]: "Deprecated Function",
+  ["HARDCODED_SECRETS" /* HardcodedSecrets */]: "Hardcoded Secrets",
+  ["PROTOTYPE_POLLUTION" /* PrototypePollution */]: "Prototype Pollution",
+  ["RACE_CONDITION_FORMAT_FLAW" /* RaceConditionFormatFlaw */]: "Race Condition Format Flaw",
+  ["NON_FINAL_PUBLIC_STATIC_FIELD" /* NonFinalPublicStaticField */]: "Non-final Public Static Field",
+  ["MISSING_HSTS_HEADER" /* MissingHstsHeader */]: "Missing HSTS Header",
+  ["DEAD_CODE_UNUSED_FIELD" /* DeadCodeUnusedField */]: "Dead Code: Unused Field",
+  ["HEADER_MANIPULATION" /* HeaderManipulation */]: "Header Manipulation",
+  ["MISSING_EQUALS_OR_HASHCODE" /* MissingEqualsOrHashcode */]: "Missing equals or hashcode method",
+  ["WCF_MISCONFIGURATION_INSUFFICIENT_LOGGING" /* WcfMisconfigurationInsufficientLogging */]: "WCF Misconfiguration: Insufficient Logging",
+  ["WCF_MISCONFIGURATION_THROTTLING_NOT_ENABLED" /* WcfMisconfigurationThrottlingNotEnabled */]: "WCF Misconfiguration: Throttling Not Enabled",
+  ["USELESS_REGEXP_CHAR_ESCAPE" /* UselessRegexpCharEscape */]: "Useless regular-expression character escape",
+  ["INCOMPLETE_HOSTNAME_REGEX" /* IncompleteHostnameRegex */]: "Incomplete Hostname Regex",
+  ["OVERLY_LARGE_RANGE" /* OverlyLargeRange */]: "Regex: Overly Large Range",
+  ["INSUFFICIENT_LOGGING" /* InsufficientLogging */]: "Insufficient Logging of Sensitive Operations",
+  ["PRIVACY_VIOLATION" /* PrivacyViolation */]: "Privacy Violation",
+  ["INCOMPLETE_URL_SCHEME_CHECK" /* IncompleteUrlSchemeCheck */]: "Incomplete URL Scheme Check",
+  ["VALUE_NEVER_READ" /* ValueNeverRead */]: "Value Never Read",
+  ["VALUE_SHADOWING" /* ValueShadowing */]: "Value Shadowing",
+  ["NO_EQUIVALENCE_METHOD" /* NoEquivalenceMethod */]: "Class Does Not Implement Equivalence Method",
+  ["INFORMATION_EXPOSURE_VIA_HEADERS" /* InformationExposureViaHeaders */]: "Information Exposure via Headers",
+  ["DEBUG_ENABLED" /* DebugEnabled */]: "Debug Enabled",
+  ["LEFTOVER_DEBUG_CODE" /* LeftoverDebugCode */]: "Leftover Debug Code",
+  ["POOR_ERROR_HANDLING_EMPTY_CATCH_BLOCK" /* PoorErrorHandlingEmptyCatchBlock */]: "Poor Error Handling: Empty Catch Block",
+  ["ERRONEOUS_STRING_COMPARE" /* ErroneousStringCompare */]: "Erroneous String Compare",
+  ["UNVALIDATED_PUBLIC_METHOD_ARGUMENT" /* UnvalidatedPublicMethodArgument */]: "Unvalidated Public Method Argument",
+  ["AUTO_ESCAPE_FALSE" /* AutoEscapeFalse */]: "Auto-escape False",
+  ["MISSING_CSP_HEADER" /* MissingCspHeader */]: "Missing CSP Header",
+  ["HARDCODED_DOMAIN_IN_HTML" /* HardcodedDomainInHtml */]: "Hardcoded Domain in HTML",
+  ["HEAP_INSPECTION" /* HeapInspection */]: "Heap Inspection",
+  ["CLIENT_DOM_STORED_CODE_INJECTION" /* ClientDomStoredCodeInjection */]: "Client Code Injection",
+  ["STRING_FORMAT_MISUSE" /* StringFormatMisuse */]: "String Format Misuse",
+  ["NON_READONLY_FIELD" /* NonReadonlyField */]: "Non Readonly Field",
+  ["CSRF" /* Csrf */]: "Cross-Site Request Forgery (CSRF)",
+  ["WEAK_ENCRYPTION" /* WeakEncryption */]: "Weak Encryption Mechanism",
+  ["CODE_IN_COMMENT" /* CodeInComment */]: "Code in Comment",
+  ["REGEX_MISSING_TIMEOUT" /* RegexMissingTimeout */]: "Regex Missing Timeout",
+  ["FRAMEABLE_LOGIN_PAGE" /* FrameableLoginPage */]: "Frameable Login Page",
+  ["USE_OF_HARD_CODED_CRYPTOGRAPHIC_KEY" /* UseOfHardCodedCryptographicKey */]: "Use of Hardcoded Cryptographic Key",
+  ["MISSING_SSL_MINVERSION" /* MissingSslMinversion */]: "Missing SSL MinVersion",
+  ["WEBSOCKET_MISSING_ORIGIN_CHECK" /* WebsocketMissingOriginCheck */]: "Missing Websocket Origin Check",
+  ["DUPLICATED_STRINGS" /* DuplicatedStrings */]: "String Literals Should not Be Duplicated",
+  ["INSECURE_UUID_VERSION" /* InsecureUuidVersion */]: "Insecure UUID Version",
+  ["GH_ACTIONS_SHELL_INJECTION" /* GhActionsShellInjection */]: "GitHub Actions Shell Injection",
+  ["MODIFIED_DEFAULT_PARAM" /* ModifiedDefaultParam */]: "Modified Default Param",
+  ["UNSAFE_WEB_THREAD" /* UnsafeWebThread */]: "Unsafe Web Thread",
+  ["NO_VAR" /* NoVar */]: 'Prefer "let" or "const"',
+  ["INSECURE_TMP_FILE" /* InsecureTmpFile */]: "Insecure Temporary File",
+  ["RETURN_SHOULD_NOT_BE_INVARIANT" /* ReturnShouldNotBeInvariant */]: "Return Should Not Be Invariant",
+  ["SYSTEM_EXIT_SHOULD_RERAISE" /* SystemExitShouldReraise */]: "SystemExit Should Reraise",
+  ["NO_RETURN_IN_FINALLY" /* NoReturnInFinally */]: "No Return in Finally Block",
+  ["WILDCARD_IMPORTS" /* WildcardImports */]: "Wildcard Imports should not be used",
+  ["AVOID_IDENTITY_COMPARISON_CACHED_TYPES" /* AvoidIdentityComparisonCachedTypes */]: "Avoid Identity Comparison of Cached Types",
+  ["AVOID_BUILTIN_SHADOWING" /* AvoidBuiltinShadowing */]: "Avoid Builtin Shadowing",
+  ["IMPROPER_STRING_FORMATTING" /* ImproperStringFormatting */]: "Improper String Formatting",
+  ["TAR_SLIP" /* TarSlip */]: "Tar Slip",
+  ["MISSING_WHITESPACE" /* MissingWhitespace */]: "Missing Whitespace",
+  ["NO_PRINT_STATEMENT" /* NoPrintStatement */]: 'Python 2 "print" Statement Is Obsolete',
+  ["NO_OP_OVERHEAD" /* NoOpOverhead */]: "Expensive Arguments in Conditional Methods",
+  ["DO_NOT_RAISE_EXCEPTION" /* DoNotRaiseException */]: "Do Not Raise Exception",
+  ["DECLARE_VARIABLE_EXPLICITLY" /* DeclareVariableExplicitly */]: "Declare Variable Explicitly",
+  ["NO_NESTED_TRY" /* NoNestedTry */]: "No Nested Try",
+  ["UNNECESSARY_IMPORTS" /* UnnecessaryImports */]: "Unnecessary Imports",
+  ["REDOS" /* Redos */]: "Regular Expression Denial of Service",
+  ["DO_NOT_THROW_GENERIC_EXCEPTION" /* DoNotThrowGenericException */]: "Do Not Throw Generic Exception"
+};
+var issueTypeZ = z.nativeEnum(IssueType_Enum);
+var getIssueTypeFriendlyString = (issueType) => {
+  const issueTypeZParseRes = issueTypeZ.safeParse(issueType);
+  if (!issueTypeZParseRes.success) {
+    return issueType ? issueType.replaceAll("_", " ") : "Other";
+  }
+  return issueTypeMap[issueTypeZParseRes.data];
+};
+function getTagTooltip(tag) {
+  switch (tag) {
+    case "FALSE_POSITIVE":
+      return "Issue was found to be a false positive";
+    case "TEST_CODE":
+      return "Issue found in test files, not production code";
+    case "VENDOR_CODE":
+      return "Issue is in external libraries or dependencies not owned or maintained by your team";
+    case "AUTOGENERATED_CODE":
+      return "Code created by tools or frameworks, not manually written";
+    case "AUXILIARY_CODE":
+      return "Issue found in supporting files that don't impact core functionality";
+    case "Filtered":
+      return "Issue was filtered by user in the Fix Policy";
+    case "SUPPRESSED":
+      return "Suppressed in the scan report";
+    default:
+      return tag;
+  }
+}
+var issueDescription = {
+  ["AUTOGENERATED_CODE" /* AutogeneratedCode */]: "The flagged code is generated automatically by tools or frameworks as part of the build or runtime process. This categorization highlights that **the issue resides in non-manual code**, which often requires tool-specific solutions or exemptions.",
+  ["AUXILIARY_CODE" /* AuxiliaryCode */]: "The flagged code is auxiliary or supporting code, such as configuration files, build scripts, or other non-application logic. This categorization indicates that the issue is not directly related to the application's core functionality.",
+  ["FALSE_POSITIVE" /* FalsePositive */]: "The flagged code **does not represent an actual vulnerability within the application's context.** This categorization indicates that the issue is either misidentified by the scanner or deemed irrelevant to the application's functionality.",
+  ["TEST_CODE" /* TestCode */]: "The flagged code resides in a test-specific path or context. This categorization indicates that **it supports testing scenarios and is isolated from production use**.",
+  ["UNFIXABLE" /* Unfixable */]: "The flagged code cannot be fixed",
+  ["VENDOR_CODE" /* VendorCode */]: "The flagged code originates from a third-party library or dependency maintained externally. This categorization suggests that **the issue lies outside the application's direct control** and should be addressed by the vendor if necessary.",
+  ["SUPPRESSED" /* Suppressed */]: "Suppressed in the scan report."
+};
+function replaceKeysWithValues(fixDescription, extraContext) {
+  let result = fixDescription;
+  extraContext.forEach(({ key, value }) => {
+    result = result.replace(`\${${key}}`, value);
+  });
+  return result;
+}
+function getParsedFalsePositiveMessage(data) {
+  const { fixDescription, extraContext } = data;
+  const containsTemplate = extraContext.some(
+    (context) => fixDescription.includes(`\${${context.key}}`)
+  );
+  const description2 = containsTemplate ? replaceKeysWithValues(fixDescription, extraContext) : fixDescription;
+  const contextString = containsTemplate ? null : `\`\`\`${extraContext.map(({ value }) => value).join(" ")} \`\`\``;
+  return { description: description2, contextString };
+}
+
 // src/features/analysis/scm/shared/src/commitDescriptionMarkup.ts
 function capitalizeFirstLetter(str) {
   return str?.length ? str[0].toUpperCase() + str.slice(1) : "";
@@ -2352,7 +1613,7 @@ var getCommitDescription = ({
   )}**.
 
 `;
-  const parseIssueTypeRes = z9.nativeEnum(IssueType_Enum).safeParse(issueType);
+  const parseIssueTypeRes = z2.nativeEnum(IssueType_Enum).safeParse(issueType);
   if (issueType && parseIssueTypeRes.success) {
     if (irrelevantIssueWithTags?.[0]?.tag) {
       description2 += `
@@ -2395,7 +1656,7 @@ var getCommitIssueDescription = ({
   const issueTypeString = getIssueTypeFriendlyString(issueType);
   let description2 = `The following issues reported by ${capitalizeFirstLetter(vendor)} on this PR were found to be irrelevant to your project:
 `;
-  const parseIssueTypeRes = z9.nativeEnum(IssueType_Enum).safeParse(issueType);
+  const parseIssueTypeRes = z2.nativeEnum(IssueType_Enum).safeParse(issueType);
   if (issueType && parseIssueTypeRes.success) {
     if (irrelevantIssueWithTags?.[0]?.tag) {
       description2 = `
@@ -2420,10 +1681,10 @@ ${staticData.issueDescription}
 };
 
 // src/features/analysis/scm/shared/src/guidances.ts
-import { z as z12 } from "zod";
+import { z as z5 } from "zod";
 
 // src/features/analysis/scm/shared/src/storedFixData/index.ts
-import { z as z10 } from "zod";
+import { z as z3 } from "zod";
 
 // src/features/analysis/scm/shared/src/storedFixData/passwordInComment.ts
 var passwordInComment = {
@@ -2599,8 +1860,8 @@ var vulnerabilities8 = {
 var xml_default = vulnerabilities8;
 
 // src/features/analysis/scm/shared/src/storedFixData/index.ts
-var StoredFixDataItemZ = z10.object({
-  guidance: z10.function().returns(z10.string())
+var StoredFixDataItemZ = z3.object({
+  guidance: z3.function().returns(z3.string())
 });
 var languages = {
   ["Java" /* Java */]: java_default,
@@ -2614,7 +1875,7 @@ var languages = {
 };
 
 // src/features/analysis/scm/shared/src/storedQuestionData/index.ts
-import { z as z11 } from "zod";
+import { z as z4 } from "zod";
 
 // src/features/analysis/scm/shared/src/storedQuestionData/csharp/httpOnlyCookie.ts
 var httpOnlyCookie = {
@@ -3767,214 +3028,958 @@ var duplicatedStrings2 = {
     description: () => "",
     guidance: () => ""
   }
-};
-
-// src/features/analysis/scm/shared/src/storedQuestionData/python/logForging.ts
-var logForging5 = {
-  isHtmlDisplay: {
-    content: () => "Is the text written to the log going to be displayed as HTML?",
-    description: () => "",
-    guidance: ({ userInputValue }) => {
-      switch (userInputValue) {
-        case "yes":
-          return "We use `html.escape` to decode the HTML";
-        default:
-          return "";
-      }
+};
+
+// src/features/analysis/scm/shared/src/storedQuestionData/python/logForging.ts
+var logForging5 = {
+  isHtmlDisplay: {
+    content: () => "Is the text written to the log going to be displayed as HTML?",
+    description: () => "",
+    guidance: ({ userInputValue }) => {
+      switch (userInputValue) {
+        case "yes":
+          return "We use `html.escape` to decode the HTML";
+        default:
+          return "";
+      }
+    }
+  }
+};
+
+// src/features/analysis/scm/shared/src/storedQuestionData/python/openRedirect.ts
+var openRedirect3 = {
+  allowed_hosts: {
+    content: () => "Allowed domains/paths",
+    description: () => "If external, provide a coma separated list of allowed domains. If internal, provide a coma seperated list of allowed paths",
+    guidance: () => ""
+  }
+};
+
+// src/features/analysis/scm/shared/src/storedQuestionData/python/uncheckedLoopCondition.ts
+var uncheckedLoopCondition3 = {
+  loopLimit: {
+    content: () => "Please define a maximum loop limit",
+    description: () => `Setting this number to a reasonable value will prevent the vulnerability`,
+    guidance: () => ""
+  },
+  varName: {
+    content: () => "Please define a variable name",
+    description: () => `We need to define a variable to be used as a counter to limit the loop`,
+    guidance: () => ""
+  }
+};
+
+// src/features/analysis/scm/shared/src/storedQuestionData/python/index.ts
+var vulnerabilities13 = {
+  ["CSRF" /* Csrf */]: csrf2,
+  ["LOG_FORGING" /* LogForging */]: logForging5,
+  ["OPEN_REDIRECT" /* OpenRedirect */]: openRedirect3,
+  ["UNCHECKED_LOOP_CONDITION" /* UncheckedLoopCondition */]: uncheckedLoopCondition3,
+  ["DUPLICATED_STRINGS" /* DuplicatedStrings */]: duplicatedStrings2
+};
+var python_default2 = vulnerabilities13;
+
+// src/features/analysis/scm/shared/src/storedQuestionData/xml/unboundedOccurrences.ts
+var unboundedOccurrences = {
+  maxOccursLimit: {
+    content: () => "The number of allowed repetitions of the element.",
+    description: () => "",
+    guidance: () => `Setting this number to a reasonable value will prevent the attack. 
+A value too low will prevent valid XMLs from being processed. 
+A value too high will cause performance issues up to and including denial of service.`
+  }
+};
+
+// src/features/analysis/scm/shared/src/storedQuestionData/xml/index.ts
+var vulnerabilities14 = {
+  ["WEAK_XML_SCHEMA_UNBOUNDED_OCCURRENCES" /* WeakXmlSchemaUnboundedOccurrences */]: unboundedOccurrences
+};
+var xml_default2 = vulnerabilities14;
+
+// src/features/analysis/scm/shared/src/storedQuestionData/index.ts
+var StoredQuestionDataItemZ = z4.object({
+  content: z4.function().args(z4.any()).returns(z4.string()),
+  description: z4.function().args(z4.any()).returns(z4.string()),
+  guidance: z4.function().args(z4.any()).returns(z4.string())
+});
+var languages2 = {
+  ["Java" /* Java */]: java_default2,
+  ["JavaScript" /* JavaScript */]: js_default,
+  ["XML" /* Xml */]: xml_default2,
+  ["CSharp" /* CSharp */]: csharp_default2,
+  ["Python" /* Python */]: python_default2,
+  ["Go" /* Go */]: go_default2
+};
+var storedQuestionData_default = languages2;
+
+// src/features/analysis/scm/shared/src/guidances.ts
+function toQuestion(userInput) {
+  const { key, defaultValue } = userInput;
+  const value = userInput.value || defaultValue;
+  return { ...userInput, defaultValue, value, key, error: false };
+}
+function getQuestionInformation({
+  fixQuestionData,
+  issueType,
+  language
+}) {
+  const { name } = fixQuestionData;
+  const storedQuestionDataItem = storedQuestionData_default[language]?.[issueType]?.[name] ?? {
+    content: () => "",
+    description: () => "",
+    guidance: () => ""
+  };
+  return StoredQuestionDataItemZ.parse(storedQuestionDataItem);
+}
+function curriedQuestionInformationByQuestion({
+  issueType,
+  language
+}) {
+  return (fixQuestionData) => getQuestionInformation({
+    issueType,
+    language,
+    fixQuestionData
+  });
+}
+function getPackageFixGuidance(actionsRequired) {
+  const actionRequiredStrings = actionsRequired.map((action) => {
+    if (action.language === "JS" /* Js */) {
+      if (action.action === "add" /* Add */) {
+        let actionRequired = `We use \`${action.lib.name}\` package to sanitize user input. Please make sure you add the latest [\`${action.lib.name}\`](https://www.npmjs.com/package/${action.lib.name}) to your \`package.json\` file.`;
+        if (action.typesLib) {
+          actionRequired += ` For TypeScript users, consider adding [\`${action.typesLib.name}\`](https://www.npmjs.com/package/${action.typesLib.name}) to your \`package.json\` as well`;
+        }
+        return actionRequired;
+      }
+      if (action.action === "relock" /* Relock */) {
+        const actionRequired = `A lock file was detected, please make sure to relock the lock file using your package manager.`;
+        return actionRequired;
+      }
+      if (action.action === "upgrade" /* Upgrade */) {
+        return `We use \`${action.lib.name}\` package to sanitize user input. Please make sure you upgrade the package [\`${action.lib.name}\`](https://www.npmjs.com/package/${action.lib.name}) to the latest version in your \`package.json\` file.`;
+      }
+    }
+    if (action.language === "JAVA" /* Java */) {
+      const names = action.lib.name.split(":");
+      const groupId = names[0];
+      const artifactId = names[1];
+      if (action.action === "add" /* Add */) {
+        return `We use \`${artifactId}\` package in the fix. Please make sure you add the latest [\`${artifactId}\`](https://mvnrepository.com/artifact/${groupId}/${artifactId}) to your pom file.`;
+      }
+      if (action.action === "upgrade" /* Upgrade */) {
+        return `We use \`${artifactId}\` package in the fix. Please make sure you upgrade the package [\`${artifactId}\`](https://mvnrepository.com/artifact/${groupId}/${artifactId}) to the latest version in your pom file.`;
+      }
+    }
+    return void 0;
+  });
+  return actionRequiredStrings.filter((action) => !!action);
+}
+function getFixGuidances({
+  issueType,
+  issueLanguage,
+  fixExtraContext,
+  questions
+}) {
+  const storedFixGuidanceDataItem = languages[issueLanguage || ""]?.[issueType || ""] ?? {};
+  const storeFixResult = StoredFixDataItemZ.safeParse(storedFixGuidanceDataItem);
+  const libGuidances = getPackageFixGuidance(
+    fixExtraContext.manifestActionsRequired
+  );
+  const extraContext = fixExtraContext.extraContext.reduce(
+    (acc, obj) => {
+      acc[obj.key] = obj.value;
+      return acc;
+    },
+    {}
+  );
+  const fixGuidance = storeFixResult.success ? [storeFixResult.data.guidance({ questions, ...extraContext })] : [];
+  return libGuidances.concat(fixGuidance).filter((guidance) => !!guidance);
+}
+var IssueTypeAndLanguageZ = z5.object({
+  issueType: z5.nativeEnum(IssueType_Enum),
+  issueLanguage: z5.nativeEnum(IssueLanguage_Enum)
+});
+function getGuidances(args) {
+  const safeIssueTypeAndLanguage = IssueTypeAndLanguageZ.safeParse({
+    issueType: args.issueType,
+    issueLanguage: args.issueLanguage
+  });
+  if (!safeIssueTypeAndLanguage.success) {
+    return [];
+  }
+  const { questions, fixExtraContext } = args;
+  const { issueType, issueLanguage } = safeIssueTypeAndLanguage.data;
+  const fixGuidances = getFixGuidances({
+    issueType,
+    issueLanguage,
+    fixExtraContext,
+    questions
+  }).map((guidance, index) => ({ guidance, key: `fixGuidance_index_${index}` }));
+  return questions.map((question) => {
+    let questionGuidance = question.guidance;
+    if (!questionGuidance && issueType && issueLanguage) {
+      const getFixInformation = curriedQuestionInformationByQuestion({
+        issueType,
+        language: issueLanguage
+      });
+      const { guidance } = getFixInformation(question);
+      questionGuidance = guidance({
+        userInputValue: question.value
+      });
     }
-  }
-};
+    return {
+      ...question,
+      guidance: questionGuidance
+    };
+  }).filter(({ guidance }) => !!guidance).map(({ guidance, key }) => ({ guidance, key })).concat(fixGuidances);
+}
 
-// src/features/analysis/scm/shared/src/storedQuestionData/python/openRedirect.ts
-var openRedirect3 = {
-  allowed_hosts: {
-    content: () => "Allowed domains/paths",
-    description: () => "If external, provide a coma separated list of allowed domains. If internal, provide a coma seperated list of allowed paths",
-    guidance: () => ""
-  }
-};
+// src/features/analysis/scm/shared/src/types/fix.ts
+import { z as z7 } from "zod";
 
-// src/features/analysis/scm/shared/src/storedQuestionData/python/uncheckedLoopCondition.ts
-var uncheckedLoopCondition3 = {
-  loopLimit: {
-    content: () => "Please define a maximum loop limit",
-    description: () => `Setting this number to a reasonable value will prevent the vulnerability`,
-    guidance: () => ""
-  },
-  varName: {
-    content: () => "Please define a variable name",
-    description: () => `We need to define a variable to be used as a counter to limit the loop`,
-    guidance: () => ""
+// src/features/analysis/scm/shared/src/types/shared.ts
+import { z as z6 } from "zod";
+var ParsedSeverityZ = z6.nativeEnum(Vulnerability_Severity_Enum).nullish().transform((i) => i ?? "low" /* Low */);
+var ScmSubmitFixRequestsZ = z6.array(
+  z6.object({
+    scmSubmitFixRequest: z6.object({
+      submitFixRequest: z6.object({
+        createdByUser: z6.object({
+          email: z6.string()
+        }),
+        targetBranchName: z6.string().default("")
+      }),
+      prUrl: z6.string().nullable(),
+      prStatus: z6.nativeEnum(Pr_Status_Enum).nullable(),
+      commitUrl: z6.string().nullable(),
+      scmId: z6.string()
+    })
+  })
+);
+
+// src/features/analysis/scm/shared/src/types/fix.ts
+var PackageInfoZ = z7.object({
+  name: z7.string(),
+  version: z7.string(),
+  envName: z7.string().nullable()
+});
+var ManifestActionRequiredZ = z7.object({
+  action: z7.nativeEnum(ManifestAction),
+  language: z7.nativeEnum(Language),
+  lib: PackageInfoZ,
+  typesLib: PackageInfoZ.nullable()
+});
+var ExtraContextInternalZ = z7.object({
+  key: z7.string(),
+  value: z7.string().or(z7.boolean()).or(
+    z7.object({
+      int: z7.boolean(),
+      integer: z7.boolean(),
+      string: z7.boolean(),
+      date: z7.boolean()
+    })
+  )
+});
+var FixExtraContextZ = z7.object({
+  fixDescription: z7.string(),
+  manifestActionsRequired: z7.array(ManifestActionRequiredZ),
+  extraContext: z7.array(ExtraContextInternalZ)
+});
+var PatchAndQuestionsZ = z7.object({
+  __typename: z7.literal("FixData"),
+  patch: z7.string(),
+  patchOriginalEncodingBase64: z7.string(),
+  questions: z7.array(
+    z7.object({
+      name: z7.string(),
+      key: z7.string(),
+      index: z7.number(),
+      defaultValue: z7.string(),
+      value: z7.string().nullable(),
+      extraContext: z7.array(ExtraContextInternalZ),
+      inputType: z7.nativeEnum(FixQuestionInputType),
+      options: z7.array(z7.string())
+    })
+  ),
+  extraContext: FixExtraContextZ
+});
+var FixRatingZ = z7.object({
+  voteScore: z7.number(),
+  fixRatingTag: z7.nativeEnum(Fix_Rating_Tag_Enum).nullable().default(null),
+  comment: z7.string().nullable().default(null),
+  updatedDate: z7.string().nullable(),
+  user: z7.object({
+    email: z7.string(),
+    name: z7.string()
+  })
+});
+var FixSharedStateZ = z7.object({
+  state: z7.nativeEnum(Fix_State_Enum),
+  isArchived: z7.boolean(),
+  scmSubmitFixRequests: ScmSubmitFixRequestsZ,
+  fixRatings: z7.array(FixRatingZ).default([])
+}).nullish().transform(
+  (data) => data ? data : {
+    state: "Ready" /* Ready */,
+    isArchived: false,
+    scmSubmitFixRequests: [],
+    fixRatings: []
   }
-};
+);
+var FixQueryZ = z7.object({
+  __typename: z7.literal("fix").optional(),
+  id: z7.string().uuid(),
+  sharedState: FixSharedStateZ,
+  modifiedBy: z7.string().nullable(),
+  gitBlameLogin: z7.string().nullable(),
+  safeIssueLanguage: z7.string(),
+  safeIssueType: z7.string(),
+  confidence: z7.number(),
+  fixReportId: z7.string().uuid(),
+  isExpired: z7.boolean().default(false),
+  fixFiles: z7.array(
+    z7.object({
+      fileRepoRelativePath: z7.string()
+    })
+  ),
+  numberOfVulnerabilityIssues: z7.number(),
+  severityText: z7.nativeEnum(Vulnerability_Severity_Enum),
+  vulnerabilityReportIssues: z7.array(
+    z7.object({
+      vendorIssueId: z7.string(),
+      issueLanguage: z7.string(),
+      parsedSeverity: ParsedSeverityZ
+    })
+  ),
+  patchAndQuestions: PatchAndQuestionsZ,
+  effortToApplyFix: z7.nativeEnum(Effort_To_Apply_Fix_Enum).nullable()
+});
+var FixPartsForFixScreenZ = FixQueryZ.merge(
+  z7.object({
+    vulnerabilityReportIssues: z7.array(
+      z7.object({
+        vendorIssueId: z7.string(),
+        issueType: z7.string(),
+        issueLanguage: z7.string()
+      })
+    )
+  })
+);
 
-// src/features/analysis/scm/shared/src/storedQuestionData/python/index.ts
-var vulnerabilities13 = {
-  ["CSRF" /* Csrf */]: csrf2,
-  ["LOG_FORGING" /* LogForging */]: logForging5,
-  ["OPEN_REDIRECT" /* OpenRedirect */]: openRedirect3,
-  ["UNCHECKED_LOOP_CONDITION" /* UncheckedLoopCondition */]: uncheckedLoopCondition3,
-  ["DUPLICATED_STRINGS" /* DuplicatedStrings */]: duplicatedStrings2
-};
-var python_default2 = vulnerabilities13;
+// src/features/analysis/scm/shared/src/types/issue.ts
+import { z as z9 } from "zod";
 
-// src/features/analysis/scm/shared/src/storedQuestionData/xml/unboundedOccurrences.ts
-var unboundedOccurrences = {
-  maxOccursLimit: {
-    content: () => "The number of allowed repetitions of the element.",
-    description: () => "",
-    guidance: () => `Setting this number to a reasonable value will prevent the attack. 
-A value too low will prevent valid XMLs from being processed. 
-A value too high will cause performance issues up to and including denial of service.`
-  }
-};
+// src/features/analysis/scm/shared/src/types/analysis.ts
+import { z as z8 } from "zod";
+var FixPageFixReportZ = z8.object({
+  id: z8.string().uuid(),
+  analysisUrl: z8.string(),
+  expirationOn: z8.string(),
+  createdOn: z8.string(),
+  state: z8.nativeEnum(Fix_Report_State_Enum),
+  repo: z8.object({
+    name: z8.string().nullable(),
+    originalUrl: z8.string(),
+    reference: z8.string(),
+    commitSha: z8.string(),
+    isKnownBranch: z8.boolean().nullable()
+  }),
+  vulnerabilityReport: z8.object({
+    vendor: z8.nativeEnum(Vulnerability_Report_Vendor_Enum),
+    vendorReportId: z8.string().uuid().nullable(),
+    projectId: z8.string().uuid(),
+    project: z8.object({
+      organizationId: z8.string().uuid()
+    }),
+    file: z8.object({
+      id: z8.string().uuid(),
+      path: z8.string()
+    }),
+    pending: z8.object({
+      aggregate: z8.object({
+        count: z8.number()
+      })
+    }),
+    supported: z8.object({
+      aggregate: z8.object({
+        count: z8.number()
+      })
+    }),
+    all: z8.object({
+      aggregate: z8.object({
+        count: z8.number()
+      })
+    }),
+    fixable: z8.object({
+      aggregate: z8.object({
+        count: z8.number()
+      })
+    }),
+    errors: z8.object({
+      aggregate: z8.object({
+        count: z8.number()
+      })
+    }),
+    vulnerabilityReportIssues: z8.object({
+      extraData: z8.object({
+        missing_files: z8.string().array().nullish(),
+        large_files: z8.string().array().nullish(),
+        error_files: z8.string().array().nullish()
+      })
+    }).array()
+  })
+});
 
-// src/features/analysis/scm/shared/src/storedQuestionData/xml/index.ts
-var vulnerabilities14 = {
-  ["WEAK_XML_SCHEMA_UNBOUNDED_OCCURRENCES" /* WeakXmlSchemaUnboundedOccurrences */]: unboundedOccurrences
+// src/features/analysis/scm/shared/src/types/issue.ts
+var MAX_SOURCE_CODE_FILE_SIZE_IN_BYTES = 1e5;
+var CATEGORY = {
+  NoFix: "NoFix",
+  Unsupported: "Unsupported",
+  Irrelevant: "Irrelevant",
+  FalsePositive: "FalsePositive",
+  Fixable: "Fixable",
+  Filtered: "Filtered"
 };
-var xml_default2 = vulnerabilities14;
-
-// src/features/analysis/scm/shared/src/storedQuestionData/index.ts
-var StoredQuestionDataItemZ = z11.object({
-  content: z11.function().args(z11.any()).returns(z11.string()),
-  description: z11.function().args(z11.any()).returns(z11.string()),
-  guidance: z11.function().args(z11.any()).returns(z11.string())
+var ValidCategoriesZ = z9.union([
+  z9.literal(CATEGORY.NoFix),
+  z9.literal(CATEGORY.Unsupported),
+  z9.literal(CATEGORY.Irrelevant),
+  z9.literal(CATEGORY.FalsePositive),
+  z9.literal(CATEGORY.Fixable),
+  z9.literal(CATEGORY.Filtered)
+]);
+var VulnerabilityReportIssueSharedStateZ = z9.object({
+  id: z9.string().uuid(),
+  isArchived: z9.boolean()
+}).nullish();
+var BaseIssuePartsZ = z9.object({
+  id: z9.string().uuid(),
+  safeIssueType: z9.string(),
+  safeIssueLanguage: z9.string(),
+  createdAt: z9.string(),
+  parsedSeverity: ParsedSeverityZ,
+  category: ValidCategoriesZ,
+  extraData: z9.object({
+    missing_files: z9.string().array().nullish(),
+    error_files: z9.string().array().nullish()
+  }),
+  vulnerabilityReportIssueTags: z9.array(
+    z9.object({
+      tag: z9.nativeEnum(Vulnerability_Report_Issue_Tag_Enum)
+    })
+  ),
+  codeNodes: z9.array(
+    z9.object({
+      path: z9.string(),
+      line: z9.number(),
+      index: z9.number()
+    })
+  ).transform((nodes) => nodes.sort((a, b) => b.index - a.index)),
+  sourceCodeNodes: z9.array(
+    z9.object({
+      sourceCodeFile: z9.object({
+        path: z9.string(),
+        signedFile: z9.object({
+          url: z9.string()
+        })
+      })
+    }).transform(async ({ sourceCodeFile }) => {
+      const { url } = sourceCodeFile.signedFile;
+      const sourceCodeRes = await fetch(url);
+      if (Number(sourceCodeRes.headers.get("Content-Length")) > MAX_SOURCE_CODE_FILE_SIZE_IN_BYTES) {
+        return null;
+      }
+      return {
+        path: sourceCodeFile.path,
+        fileContent: await sourceCodeRes.text()
+      };
+    })
+  ).transform((nodes) => nodes.filter((node) => node !== null)),
+  fix: FixPartsForFixScreenZ.nullish(),
+  vulnerabilityReportIssueNodeDiffFile: z9.object({
+    signedFile: z9.object({
+      url: z9.string()
+    }).transform(async ({ url }) => {
+      const codeDiff = await fetch(url).then((res) => res.text());
+      return { codeDiff };
+    })
+  }).nullish(),
+  sharedState: VulnerabilityReportIssueSharedStateZ
 });
-var languages2 = {
-  ["Java" /* Java */]: java_default2,
-  ["JavaScript" /* JavaScript */]: js_default,
-  ["XML" /* Xml */]: xml_default2,
-  ["CSharp" /* CSharp */]: csharp_default2,
-  ["Python" /* Python */]: python_default2,
-  ["Go" /* Go */]: go_default2
+var FalsePositivePartsZ = z9.object({
+  extraContext: z9.array(z9.object({ key: z9.string(), value: z9.string() })),
+  fixDescription: z9.string()
+});
+var IssuePartsWithFixZ = BaseIssuePartsZ.merge(
+  z9.object({
+    category: z9.literal(CATEGORY.Irrelevant),
+    fix: FixPartsForFixScreenZ.nullish()
+  })
+);
+var IssuePartsFpZ = BaseIssuePartsZ.merge(
+  z9.object({
+    category: z9.literal(CATEGORY.FalsePositive),
+    fpId: z9.string().uuid(),
+    getFalsePositive: FalsePositivePartsZ
+  })
+);
+var GeneralIssueZ = BaseIssuePartsZ.merge(
+  z9.object({
+    category: z9.union([
+      z9.literal(CATEGORY.NoFix),
+      z9.literal(CATEGORY.Unsupported),
+      z9.literal(CATEGORY.Fixable),
+      z9.literal(CATEGORY.Filtered)
+    ])
+  })
+);
+var IssuePartsZ = z9.union([
+  IssuePartsFpZ,
+  IssuePartsWithFixZ,
+  GeneralIssueZ
+]);
+var GetIssueIndexesZ = z9.object({
+  currentIndex: z9.number(),
+  totalIssues: z9.number(),
+  nextIssue: z9.object({
+    id: z9.string().uuid()
+  }).nullish(),
+  prevIssue: z9.object({
+    id: z9.string().uuid()
+  }).nullish()
+});
+var GetIssueScreenDataZ = z9.object({
+  fixReport_by_pk: FixPageFixReportZ,
+  vulnerability_report_issue_by_pk: IssuePartsZ,
+  issueIndexes: GetIssueIndexesZ
+});
+var IssueBucketZ = z9.enum(["fixable", "irrelevant", "remaining"]);
+var mapCategoryToBucket = {
+  FalsePositive: "irrelevant",
+  Irrelevant: "irrelevant",
+  NoFix: "remaining",
+  Unsupported: "remaining",
+  Fixable: "fixable",
+  Filtered: "remaining"
 };
-var storedQuestionData_default = languages2;
 
-// src/features/analysis/scm/shared/src/guidances.ts
-function toQuestion(userInput) {
-  const { key, defaultValue } = userInput;
-  const value = userInput.value || defaultValue;
-  return { ...userInput, defaultValue, value, key, error: false };
-}
-function getQuestionInformation({
-  fixQuestionData,
-  issueType,
-  language
-}) {
-  const { name } = fixQuestionData;
-  const storedQuestionDataItem = storedQuestionData_default[language]?.[issueType]?.[name] ?? {
-    content: () => "",
-    description: () => "",
-    guidance: () => ""
-  };
-  return StoredQuestionDataItemZ.parse(storedQuestionDataItem);
-}
-function curriedQuestionInformationByQuestion({
-  issueType,
-  language
-}) {
-  return (fixQuestionData) => getQuestionInformation({
-    issueType,
-    language,
-    fixQuestionData
-  });
-}
-function getPackageFixGuidance(actionsRequired) {
-  const actionRequiredStrings = actionsRequired.map((action) => {
-    if (action.language === "JS" /* Js */) {
-      if (action.action === "add" /* Add */) {
-        let actionRequired = `We use \`${action.lib.name}\` package to sanitize user input. Please make sure you add the latest [\`${action.lib.name}\`](https://www.npmjs.com/package/${action.lib.name}) to your \`package.json\` file.`;
-        if (action.typesLib) {
-          actionRequired += ` For TypeScript users, consider adding [\`${action.typesLib.name}\`](https://www.npmjs.com/package/${action.typesLib.name}) to your \`package.json\` as well`;
-        }
-        return actionRequired;
-      }
-      if (action.action === "relock" /* Relock */) {
-        const actionRequired = `A lock file was detected, please make sure to relock the lock file using your package manager.`;
-        return actionRequired;
-      }
-      if (action.action === "upgrade" /* Upgrade */) {
-        return `We use \`${action.lib.name}\` package to sanitize user input. Please make sure you upgrade the package [\`${action.lib.name}\`](https://www.npmjs.com/package/${action.lib.name}) to the latest version in your \`package.json\` file.`;
-      }
-    }
-    if (action.language === "JAVA" /* Java */) {
-      const names = action.lib.name.split(":");
-      const groupId = names[0];
-      const artifactId = names[1];
-      if (action.action === "add" /* Add */) {
-        return `We use \`${artifactId}\` package in the fix. Please make sure you add the latest [\`${artifactId}\`](https://mvnrepository.com/artifact/${groupId}/${artifactId}) to your pom file.`;
-      }
-      if (action.action === "upgrade" /* Upgrade */) {
-        return `We use \`${artifactId}\` package in the fix. Please make sure you upgrade the package [\`${artifactId}\`](https://mvnrepository.com/artifact/${groupId}/${artifactId}) to the latest version in your pom file.`;
-      }
-    }
-    return void 0;
-  });
-  return actionRequiredStrings.filter((action) => !!action);
-}
-function getFixGuidances({
-  issueType,
-  issueLanguage,
-  fixExtraContext,
-  questions
-}) {
-  const storedFixGuidanceDataItem = languages[issueLanguage || ""]?.[issueType || ""] ?? {};
-  const storeFixResult = StoredFixDataItemZ.safeParse(storedFixGuidanceDataItem);
-  const libGuidances = getPackageFixGuidance(
-    fixExtraContext.manifestActionsRequired
-  );
-  const extraContext = fixExtraContext.extraContext.reduce(
-    (acc, obj) => {
-      acc[obj.key] = obj.value;
-      return acc;
-    },
-    {}
-  );
-  const fixGuidance = storeFixResult.success ? [storeFixResult.data.guidance({ questions, ...extraContext })] : [];
-  return libGuidances.concat(fixGuidance).filter((guidance) => !!guidance);
-}
-var IssueTypeAndLanguageZ = z12.object({
-  issueType: z12.nativeEnum(IssueType_Enum),
-  issueLanguage: z12.nativeEnum(IssueLanguage_Enum)
+// src/features/analysis/scm/shared/src/types/types.ts
+import { z as z11 } from "zod";
+
+// src/features/analysis/scm/shared/src/validations.ts
+import { z as z10 } from "zod";
+var IssueTypeSettingZ = z10.object({
+  autoPrEnabled: z10.boolean(),
+  enabled: z10.boolean(),
+  issueType: z10.nativeEnum(IssueType_Enum)
 });
-function getGuidances(args) {
-  const safeIssueTypeAndLanguage = IssueTypeAndLanguageZ.safeParse({
-    issueType: args.issueType,
-    issueLanguage: args.issueLanguage
-  });
-  if (!safeIssueTypeAndLanguage.success) {
-    return [];
-  }
-  const { questions, fixExtraContext } = args;
-  const { issueType, issueLanguage } = safeIssueTypeAndLanguage.data;
-  const fixGuidances = getFixGuidances({
-    issueType,
-    issueLanguage,
-    fixExtraContext,
-    questions
-  }).map((guidance, index) => ({ guidance, key: `fixGuidance_index_${index}` }));
-  return questions.map((question) => {
-    let questionGuidance = question.guidance;
-    if (!questionGuidance && issueType && issueLanguage) {
-      const getFixInformation = curriedQuestionInformationByQuestion({
-        issueType,
-        language: issueLanguage
-      });
-      const { guidance } = getFixInformation(question);
-      questionGuidance = guidance({
-        userInputValue: question.value
-      });
+var IssueTypeSettingsZ = z10.array(IssueTypeSettingZ).transform((issueTypeSettings) => {
+  return Object.values(IssueType_Enum).map((issueTypeEnum) => {
+    const existingIssueTypeSetting = issueTypeSettings.find(
+      ({ issueType: dbIssueType }) => dbIssueType === issueTypeEnum
+    );
+    if (existingIssueTypeSetting) {
+      return existingIssueTypeSetting;
     }
     return {
-      ...question,
-      guidance: questionGuidance
+      autoPrEnabled: false,
+      enabled: true,
+      issueType: issueTypeEnum
     };
-  }).filter(({ guidance }) => !!guidance).map(({ guidance, key }) => ({ guidance, key })).concat(fixGuidances);
-}
+  }).sort((a, b) => {
+    return getIssueTypeFriendlyString(a.issueType).localeCompare(
+      getIssueTypeFriendlyString(b.issueType)
+    );
+  });
+});
+
+// src/features/analysis/scm/shared/src/types/types.ts
+var OrganizationScreenQueryParamsZ = z11.object({
+  organizationId: z11.string().uuid()
+});
+var ProjectPageQueryParamsZ = z11.object({
+  organizationId: z11.string().uuid(),
+  projectId: z11.string().uuid()
+});
+var AnalysisPageQueryParamsZ = ProjectPageQueryParamsZ.extend({
+  reportId: z11.string().uuid()
+});
+var FixPageQueryParamsZ = AnalysisPageQueryParamsZ.extend({
+  fixId: z11.string().uuid()
+});
+var IssuePageQueryParamsZ = AnalysisPageQueryParamsZ.extend({
+  issueId: z11.string().uuid()
+});
+var CliLoginPageQueryParamsZ = z11.object({
+  loginId: z11.string().uuid()
+});
+var AnalysisReportDigestedZ = z11.object({
+  id: z11.string().uuid(),
+  state: z11.nativeEnum(Fix_Report_State_Enum),
+  vulnerabilityReport: z11.object({
+    reportSummaryUrl: z11.string().url().nullish(),
+    scanDate: z11.string().nullable(),
+    supported: z11.object({
+      aggregate: z11.object({
+        count: z11.number()
+      })
+    }),
+    all: z11.object({
+      aggregate: z11.object({
+        count: z11.number()
+      })
+    }),
+    vendor: z11.nativeEnum(Vulnerability_Report_Vendor_Enum),
+    project: z11.object({
+      organizationId: z11.string().uuid()
+    })
+  })
+});
+var ReportQueryResultZ = z11.object({
+  fixReport_by_pk: z11.object({
+    id: z11.string().uuid(),
+    analysisUrl: z11.string(),
+    fixesCommitted: z11.object({
+      aggregate: z11.object({ count: z11.number() })
+    }),
+    fixesDownloaded: z11.object({
+      aggregate: z11.object({ count: z11.number() })
+    }),
+    fixesDoneCount: z11.number(),
+    fixesInprogressCount: z11.number(),
+    fixesReadyCount: z11.object({
+      aggregate: z11.object({ count: z11.number() })
+    }),
+    issueTypes: z11.record(z11.string(), z11.number()).nullable(),
+    issueLanguages: z11.record(z11.string(), z11.number()).nullable(),
+    fixesCountByEffort: z11.record(z11.string(), z11.number()).nullable(),
+    vulnerabilitySeverities: z11.record(z11.string(), z11.number()).nullable(),
+    createdOn: z11.string(),
+    expirationOn: z11.string().nullable(),
+    state: z11.nativeEnum(Fix_Report_State_Enum),
+    fixes: z11.array(
+      z11.object({
+        id: z11.string().uuid(),
+        safeIssueLanguage: z11.string(),
+        safeIssueType: z11.string(),
+        confidence: z11.number(),
+        effortToApplyFix: z11.nativeEnum(Effort_To_Apply_Fix_Enum).nullable(),
+        modifiedBy: z11.string().nullable(),
+        gitBlameLogin: z11.string().nullable(),
+        fixReportId: z11.string().uuid(),
+        filePaths: z11.array(
+          z11.object({
+            fileRepoRelativePath: z11.string()
+          })
+        ),
+        sharedState: FixSharedStateZ,
+        numberOfVulnerabilityIssues: z11.number(),
+        severityText: z11.nativeEnum(Vulnerability_Severity_Enum),
+        vulnerabilityReportIssues: z11.array(
+          z11.object({
+            id: z11.string().uuid(),
+            issueType: z11.string(),
+            issueLanguage: z11.string(),
+            category: z11.string()
+          })
+        )
+        // scmSubmitFixRequests: ScmSubmitFixRequestsZ,
+      })
+    ),
+    repo: z11.object({
+      name: z11.string().nullable(),
+      originalUrl: z11.string(),
+      reference: z11.string(),
+      commitSha: z11.string(),
+      isKnownBranch: z11.boolean().nullish().default(true)
+    }),
+    vulnerabilityReportIssuesFixedCount: z11.object({
+      vulnerabilityReportIssues_aggregate: z11.object({
+        aggregate: z11.object({ count: z11.number() })
+      })
+    }),
+    vulnerabilityReport: z11.object({
+      id: z11.string().uuid(),
+      reportSummaryUrl: z11.string().url().nullish(),
+      vendor: z11.nativeEnum(Vulnerability_Report_Vendor_Enum).nullable(),
+      issuesWithKnownLanguage: z11.number().nullable(),
+      scanDate: z11.string().nullable(),
+      vendorReportId: z11.string().uuid().nullable(),
+      projectId: z11.string().uuid(),
+      project: z11.object({
+        organizationId: z11.string().uuid()
+      }),
+      file: z11.object({
+        id: z11.string().uuid(),
+        path: z11.string()
+      }),
+      pending: z11.object({
+        aggregate: z11.object({
+          count: z11.number()
+        })
+      }),
+      irrelevant: z11.object({
+        aggregate: z11.object({
+          count: z11.number()
+        })
+      }),
+      remaining: z11.object({
+        aggregate: z11.object({
+          count: z11.number()
+        })
+      }),
+      digested: z11.object({
+        aggregate: z11.object({
+          count: z11.number()
+        })
+      }),
+      supported: z11.object({
+        aggregate: z11.object({
+          count: z11.number()
+        })
+      }),
+      all: z11.object({
+        aggregate: z11.object({
+          count: z11.number()
+        })
+      }),
+      fixable: z11.object({
+        aggregate: z11.object({
+          count: z11.number()
+        })
+      }),
+      errors: z11.object({
+        aggregate: z11.object({
+          count: z11.number()
+        })
+      }),
+      vulnerabilityReportIssues: z11.object({
+        id: z11.string().uuid(),
+        extraData: z11.object({
+          missing_files: z11.string().array().nullish(),
+          large_files: z11.string().array().nullish(),
+          error_files: z11.string().array().nullish()
+        })
+      }).array()
+    })
+  })
+});
+var ReportFixesQueryFixZ = z11.object({
+  id: z11.string().uuid(),
+  sharedState: FixSharedStateZ,
+  confidence: z11.number(),
+  gitBlameLogin: z11.string().nullable(),
+  effortToApplyFix: z11.nativeEnum(Effort_To_Apply_Fix_Enum).nullable(),
+  safeIssueLanguage: z11.string(),
+  safeIssueType: z11.string(),
+  fixReportId: z11.string().uuid(),
+  filePaths: z11.array(
+    z11.object({
+      fileRepoRelativePath: z11.string()
+    })
+  ),
+  numberOfVulnerabilityIssues: z11.number(),
+  severityText: z11.nativeEnum(Vulnerability_Severity_Enum),
+  vulnerabilityReportIssues: z11.array(
+    z11.object({
+      issueType: z11.string(),
+      issueLanguage: z11.string()
+    })
+  ).min(1)
+});
+var VulnerabilityReportIssueZ = z11.object({
+  id: z11.string().uuid(),
+  createdAt: z11.string(),
+  state: z11.nativeEnum(Vulnerability_Report_Issue_State_Enum),
+  safeIssueType: z11.string(),
+  safeIssueLanguage: z11.string(),
+  extraData: z11.object({
+    missing_files: z11.string().array().nullish(),
+    large_files: z11.string().array().nullish(),
+    error_files: z11.string().array().nullish()
+  }),
+  fix: ReportFixesQueryFixZ.nullable(),
+  falsePositive: z11.object({
+    id: z11.string().uuid()
+  }).nullable(),
+  parsedSeverity: ParsedSeverityZ,
+  severity: z11.string(),
+  severityValue: z11.number(),
+  category: z11.string(),
+  codeNodes: z11.array(z11.object({ path: z11.string() })),
+  vulnerabilityReportIssueTags: z11.array(
+    z11.object({
+      vulnerability_report_issue_tag_value: z11.string()
+    })
+  ),
+  sharedState: VulnerabilityReportIssueSharedStateZ
+});
+var GetReportIssuesQueryZ = z11.object({
+  fixReport: z11.object({
+    vulnerabilityReport: z11.object({
+      id: z11.string().uuid(),
+      lastIssueUpdatedAt: z11.string(),
+      vulnerabilityReportIssues_aggregate: z11.object({
+        aggregate: z11.object({ count: z11.number() })
+      }),
+      vulnerabilityReportIssues: z11.array(VulnerabilityReportIssueZ)
+    })
+  }).array()
+}).nullish();
+var FixReportByProjectZ = z11.object({
+  project_by_pk: z11.object({
+    vulnerabilityReports: z11.array(
+      z11.object({
+        fixReport: z11.object({ id: z11.string().uuid() }).nullable()
+      })
+    )
+  })
+});
+var FixScreenQueryResultZ = z11.object({
+  fixReport_by_pk: FixPageFixReportZ,
+  fix_by_pk: FixPartsForFixScreenZ,
+  fixesWithSameIssueType: z11.array(
+    z11.object({
+      id: z11.string().uuid(),
+      sharedState: z11.object({ state: z11.nativeEnum(Fix_State_Enum) }).nullable().default({ state: "Ready" /* Ready */ })
+    })
+  ),
+  relevantIssue: IssuePartsZ.nullish()
+});
+var FixPageQueryZ = z11.object({
+  data: FixScreenQueryResultZ
+});
+var GetReportFixesQueryZ = z11.object({
+  fixReport: z11.array(
+    z11.object({
+      fixes: z11.array(ReportFixesQueryFixZ),
+      vulnerabilityReportIssuesTotalCount: z11.object({
+        vulnerabilityReportIssues_aggregate: z11.object({
+          aggregate: z11.object({ count: z11.number() })
+        })
+      }),
+      vulnerabilityReportIssuesFixedCount: z11.object({
+        vulnerabilityReportIssues_aggregate: z11.object({
+          aggregate: z11.object({ count: z11.number() })
+        })
+      }),
+      vulnerabilityReportIssuesIrrelevantCount: z11.object({
+        vulnerabilityReportIssues_aggregate: z11.object({
+          aggregate: z11.object({ count: z11.number() })
+        })
+      }),
+      vulnerabilityReportIssuesRemainingCount: z11.object({
+        vulnerabilityReportIssues_aggregate: z11.object({
+          aggregate: z11.object({ count: z11.number() })
+        })
+      })
+    })
+  )
+}).nullish();
+var ProjectVulnerabilityReport = z11.object({
+  id: z11.string().uuid(),
+  name: z11.string().nullable(),
+  vendor: z11.nativeEnum(Vulnerability_Report_Vendor_Enum).nullable(),
+  fixReport: z11.object({
+    id: z11.string().uuid(),
+    createdOn: z11.string(),
+    vulnerabilityReportIssuesFixedCount: z11.object({
+      vulnerabilityReportIssues_aggregate: z11.object({
+        aggregate: z11.object({ count: z11.number() })
+      })
+    }),
+    issueTypes: z11.record(z11.string(), z11.number()).nullable(),
+    issueLanguages: z11.record(z11.nativeEnum(IssueLanguage_Enum), z11.number()).nullable(),
+    fixesCountByEffort: z11.record(z11.nativeEnum(Effort_To_Apply_Fix_Enum), z11.number()).nullable(),
+    vulnerabilitySeverities: z11.record(z11.nativeEnum(Vulnerability_Severity_Enum), z11.number()).nullable(),
+    fixesDoneCount: z11.number(),
+    fixesInprogressCount: z11.number(),
+    fixesReadyCount: z11.number(),
+    repo: z11.object({
+      originalUrl: z11.string(),
+      reference: z11.string(),
+      name: z11.string()
+    }),
+    createdByUser: z11.object({
+      email: z11.string()
+    }).nullable(),
+    state: z11.nativeEnum(Fix_Report_State_Enum),
+    expirationOn: z11.string()
+  })
+});
+var ProjectGetProjectZ = z11.object({
+  id: z11.string().uuid(),
+  name: z11.string(),
+  vulnerabilityReports: z11.object({
+    vendor: z11.nativeEnum(Vulnerability_Report_Vendor_Enum).nullable(),
+    fixReport: z11.object({
+      issueLanguages: z11.record(z11.nativeEnum(IssueLanguage_Enum), z11.number()).nullable(),
+      state: z11.nativeEnum(Fix_Report_State_Enum),
+      repo: z11.object({
+        originalUrl: z11.string(),
+        reference: z11.string()
+      }),
+      expirationOn: z11.string()
+    })
+  }).array()
+});
+var GetProjectsQueryZ = z11.array(ProjectGetProjectZ);
+var ProjectPageQueryResultZ = z11.object({
+  name: z11.string(),
+  id: z11.string().uuid(),
+  isDefault: z11.boolean().default(false),
+  organizationId: z11.string().uuid(),
+  vulnerabilityReports: z11.array(ProjectVulnerabilityReport),
+  projectIssueTypeSettings: z11.array(
+    IssueTypeSettingZ.merge(z11.object({ id: z11.string() }))
+  )
+});
+var GetProjectMembersDataZ = z11.object({
+  project_by_pk: z11.object({
+    name: z11.string(),
+    id: z11.string(),
+    projectUsers: z11.array(
+      z11.object({
+        projectToRole: z11.object({
+          projectRole: z11.object({
+            type: z11.nativeEnum(Project_Role_Type_Enum)
+          })
+        }),
+        user: z11.object({
+          id: z11.string().uuid(),
+          picture: z11.string().optional(),
+          name: z11.string().nullish(),
+          email: z11.string().email()
+        })
+      })
+    )
+  })
+});
+var RepoArgsZ = z11.object({
+  originalUrl: z11.string().url(),
+  branch: z11.string(),
+  commitSha: z11.string()
+});
+var scmCloudUrl = {
+  GitLab: "https://gitlab.com",
+  GitHub: "https://github.com",
+  Ado: "https://dev.azure.com",
+  Bitbucket: "https://bitbucket.org"
+};
+var ScmType = /* @__PURE__ */ ((ScmType2) => {
+  ScmType2["GitHub"] = "GitHub";
+  ScmType2["GitLab"] = "GitLab";
+  ScmType2["Ado"] = "Ado";
+  ScmType2["Bitbucket"] = "Bitbucket";
+  return ScmType2;
+})(ScmType || {});
+var ConvertToSarifInputFileFormat = /* @__PURE__ */ ((ConvertToSarifInputFileFormat2) => {
+  ConvertToSarifInputFileFormat2["FortifyFPR"] = "FortifyFPR";
+  return ConvertToSarifInputFileFormat2;
+})(ConvertToSarifInputFileFormat || {});
 
 // src/features/analysis/scm/shared/src/urlParser/urlParser.ts
-import { z as z13 } from "zod";
+import { z as z12 } from "zod";
 var ADO_PREFIX_PATH = "tfs";
 var NAME_REGEX = /[a-z0-9\-_.+]+/i;
 function detectAdoUrl(args) {
@@ -3991,7 +3996,7 @@ function detectAdoUrl(args) {
         scmType: "Ado" /* Ado */,
         organization,
         // project has single repo - repoName === projectName
-        projectName: z13.string().parse(projectName),
+        projectName: z12.string().parse(projectName),
         repoName: projectName,
         prefixPath
       };
@@ -4002,7 +4007,7 @@ function detectAdoUrl(args) {
       return {
         scmType: "Ado" /* Ado */,
         organization,
-        projectName: z13.string().parse(projectName),
+        projectName: z12.string().parse(projectName),
         repoName,
         prefixPath
       };
@@ -4016,7 +4021,7 @@ function detectAdoUrl(args) {
           scmType: "Ado" /* Ado */,
           organization,
           // project has only one repo - repoName === projectName
-          projectName: z13.string().parse(repoName),
+          projectName: z12.string().parse(repoName),
           repoName,
           prefixPath
         };
@@ -4026,7 +4031,7 @@ function detectAdoUrl(args) {
         return {
           scmType: "Ado" /* Ado */,
           organization,
-          projectName: z13.string().parse(projectName),
+          projectName: z12.string().parse(projectName),
           repoName,
           prefixPath
         };
@@ -4152,11 +4157,8 @@ function getIssueUrl({
   return `${appBaseUrl}/organization/${organizationId}/project/${projectId}/report/${analysisId}/issue/${issueId}`;
 }
 
-// src/features/analysis/scm/utils/index.ts
-import { z as z15 } from "zod";
-
 // src/features/analysis/scm/types.ts
-import { z as z14 } from "zod";
+import { z as z13 } from "zod";
 var ReferenceType = /* @__PURE__ */ ((ReferenceType2) => {
   ReferenceType2["BRANCH"] = "BRANCH";
   ReferenceType2["COMMIT"] = "COMMIT";
@@ -4188,12 +4190,19 @@ var scmTypeToScmLibScmType = {
   ["Ado" /* Ado */]: "ADO" /* ADO */,
   ["Bitbucket" /* Bitbucket */]: "BITBUCKET" /* BITBUCKET */
 };
-var GetRefererenceResultZ = z14.object({
-  date: z14.date().optional(),
-  sha: z14.string(),
-  type: z14.nativeEnum(ReferenceType)
+var GetRefererenceResultZ = z13.object({
+  date: z13.date().optional(),
+  sha: z13.string(),
+  type: z13.nativeEnum(ReferenceType)
 });
 
+// src/features/analysis/scm/utils/scm.ts
+var safeBody = (body, maxBodyLength) => {
+  const truncationNotice = "\n\n... Message was cut here because it is too long";
+  const maxBodyContentLength = maxBodyLength - truncationNotice.length;
+  return body.length > maxBodyLength ? body.slice(0, maxBodyContentLength) + truncationNotice : body;
+};
+
 // src/features/analysis/scm/utils/index.ts
 function getFixUrlWithRedirect(params) {
   const {
@@ -4305,7 +4314,7 @@ function shouldValidateUrl(repoUrl) {
   return repoUrl && isUrlHasPath(repoUrl);
 }
 function isBrokerUrl(url) {
-  return z15.string().uuid().safeParse(new URL(url).host).success;
+  return z14.string().uuid().safeParse(new URL(url).host).success;
 }
 function buildAuthorizedRepoUrl(args) {
   const { url, username, password } = args;
@@ -4341,7 +4350,7 @@ function getCloudScmLibTypeFromUrl(url) {
   return void 0;
 }
 function getScmLibTypeFromScmType(scmType) {
-  const parsedScmType = z15.nativeEnum(ScmType).parse(scmType);
+  const parsedScmType = z14.nativeEnum(ScmType).parse(scmType);
   return scmTypeToScmLibScmType[parsedScmType];
 }
 function getScmConfig({
@@ -4407,6 +4416,24 @@ function getScmConfig({
   };
 }
 
+// src/features/analysis/scm/ado/constants.ts
+var DEFUALT_ADO_ORIGIN = scmCloudUrl.Ado;
+
+// src/features/analysis/scm/ado/utils.ts
+import querystring from "querystring";
+import * as api from "azure-devops-node-api";
+import Debug from "debug";
+import { z as z17 } from "zod";
+
+// src/features/analysis/scm/env.ts
+import { z as z15 } from "zod";
+var EnvVariablesZod = z15.object({
+  GITLAB_API_TOKEN: z15.string().optional(),
+  GITHUB_API_TOKEN: z15.string().optional(),
+  GIT_PROXY_HOST: z15.string().optional().default("http://tinyproxy:8888")
+});
+var { GITLAB_API_TOKEN, GITHUB_API_TOKEN, GIT_PROXY_HOST } = EnvVariablesZod.parse(process.env);
+
 // src/features/analysis/scm/ado/validation.ts
 import { z as z16 } from "zod";
 var ValidPullRequestStatusZ = z16.union([
@@ -4690,6 +4717,7 @@ async function validateAdoRepo({
 }
 
 // src/features/analysis/scm/ado/ado.ts
+var MAX_ADO_PR_BODY_LENGTH = 15e4;
 async function getAdoSdk(params) {
   const api2 = await getAdoApiClient(params);
   return {
@@ -4840,7 +4868,7 @@ async function getAdoSdk(params) {
           sourceRefName: `refs/heads/${sourceBranchName}`,
           targetRefName: `refs/heads/${targetBranchName}`,
           title,
-          description: body
+          description: safeBody(body, MAX_ADO_PR_BODY_LENGTH)
         },
         repo,
         projectName
@@ -5915,6 +5943,7 @@ var TokenExpiredErrorZ = z19.object({
   })
 });
 var BITBUCKET_ACCESS_TOKEN_URL = `https://${BITBUCKET_HOSTNAME}/site/oauth2/access_token`;
+var MAX_BITBUCKET_PR_BODY_LENGTH = 32768;
 var BitbucketParseResultZ = z19.object({
   organization: z19.string(),
   repoName: z19.string(),
@@ -6003,7 +6032,7 @@ function getBitbucketSdk(params) {
           type: "pullrequest",
           title: params2.title,
           summary: {
-            raw: params2.body
+            raw: safeBody(params2.body, MAX_BITBUCKET_PR_BODY_LENGTH)
           },
           source: {
             branch: {
@@ -6623,6 +6652,7 @@ async function githubValidateParams(url, accessToken) {
 }
 
 // src/features/analysis/scm/github/github.ts
+var MAX_GH_PR_BODY_LENGTH = 65536;
 function getGithubSdk(params = {}) {
   const octokit = getOctoKit(params);
   return {
@@ -6948,7 +6978,7 @@ function getGithubSdk(params = {}) {
         title,
         head: newBranchName,
         head_repo: sourceRepo,
-        body,
+        body: safeBody(body, MAX_GH_PR_BODY_LENGTH),
         base: defaultBranch
       });
       return {
@@ -6970,7 +7000,7 @@ function getGithubSdk(params = {}) {
         owner,
         repo,
         title: options.title,
-        body: options.body,
+        body: safeBody(options.body, MAX_GH_PR_BODY_LENGTH),
         head: options.sourceBranchName,
         base: options.targetBranchName,
         draft: false,
@@ -7278,6 +7308,7 @@ var debug3 = Debug3("scm:gitlab");
 function removeTrailingSlash2(str) {
   return str.trim().replace(/\/+$/, "");
 }
+var MAX_GITLAB_PR_BODY_LENGTH = 1048576;
 function getRandomGitlabCloudAnonToken() {
   if (!GITLAB_API_TOKEN || typeof GITLAB_API_TOKEN !== "string") {
     return void 0;
@@ -7475,7 +7506,7 @@ async function createMergeRequest(options) {
     options.targetBranchName,
     options.title,
     {
-      description: options.body
+      description: safeBody(options.body, MAX_GITLAB_PR_BODY_LENGTH)
     }
   );
   return res.iid;
@@ -10978,7 +11009,7 @@ async function handleMobbLogin({
   const newGqlClient = new GQLClient({ apiKey: newApiToken, type: "apiKey" });
   const loginSuccess = await newGqlClient.verifyToken();
   if (loginSuccess) {
-    debug18("set api token %s", newApiToken);
+    debug18(`set api token ${newApiToken}`);
     config3.set("apiToken", newApiToken);
     loginSpinner.success({
       text: `\u{1F513} Login to Mobb successful! ${typeof loginSpinner === "string" ? `Logged in as ${loginSuccess}` : ""}`
@@ -11137,24 +11168,96 @@ import {
 // src/mcp/Logger.ts
 var logglerUrl = "http://localhost:4444/log";
 var isTestEnvironment = process.env["VITEST"] || process.env["TEST"];
+var CIRCUIT_BREAKER_TIME = 5e3;
+var URL_CHECK_TIMEOUT = 200;
+var MAX_QUEUE_SIZE = 100;
 var Logger = class {
+  constructor() {
+    __publicField(this, "queue", []);
+    __publicField(this, "isProcessing", false);
+    __publicField(this, "isCircuitBroken", false);
+    __publicField(this, "circuitBreakerTimer", null);
+  }
   log(message, level = "info", data) {
+    if (isTestEnvironment) return;
+    if (this.queue.length >= MAX_QUEUE_SIZE) {
+      this.queue.shift();
+    }
+    this.queue.push({ message, level, data });
+    if (!this.isProcessing && !this.isCircuitBroken) {
+      this.processQueue();
+    }
+  }
+  async isUrlReachable(url) {
+    try {
+      const controller = new AbortController();
+      const timeoutId = setTimeout(() => controller.abort(), URL_CHECK_TIMEOUT);
+      await fetch(url, {
+        method: "HEAD",
+        signal: controller.signal
+      });
+      clearTimeout(timeoutId);
+      return true;
+    } catch (error) {
+      return false;
+    }
+  }
+  async processQueue() {
+    if (this.queue.length === 0 || this.isCircuitBroken) {
+      this.isProcessing = false;
+      return;
+    }
+    this.isProcessing = true;
+    const logEntry = this.queue[0];
+    if (!logEntry) {
+      this.isProcessing = false;
+      return;
+    }
+    const isReachable = await this.isUrlReachable(logglerUrl);
+    if (!isReachable) {
+      this.triggerCircuitBreaker();
+      return;
+    }
     const logMessage = {
       timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-      level,
-      message,
-      data
+      level: logEntry.level,
+      message: logEntry.message,
+      data: logEntry.data
     };
-    if (!isTestEnvironment) {
-      try {
-        fetch(logglerUrl, {
-          method: "POST",
-          headers: { "Content-Type": "application/json" },
-          body: JSON.stringify(logMessage)
-        });
-      } catch (error) {
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => {
+      controller.abort();
+    }, 500);
+    fetch(logglerUrl, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(logMessage),
+      redirect: "error",
+      // do not follow redirects
+      signal: controller.signal
+    }).then((_response) => {
+      this.queue.shift();
+      setTimeout(() => this.processQueue(), 0);
+    }).catch(() => {
+      this.triggerCircuitBreaker();
+    }).finally(() => {
+      clearTimeout(timeoutId);
+    });
+  }
+  triggerCircuitBreaker() {
+    this.isCircuitBroken = true;
+    this.queue = [];
+    this.isProcessing = false;
+    if (this.circuitBreakerTimer) {
+      clearTimeout(this.circuitBreakerTimer);
+    }
+    this.circuitBreakerTimer = setTimeout(() => {
+      this.isCircuitBroken = false;
+      this.circuitBreakerTimer = null;
+      if (this.queue.length > 0 && !this.isProcessing) {
+        this.processQueue();
       }
-    }
+    }, CIRCUIT_BREAKER_TIME);
   }
 };
 var logger = new Logger();
@@ -11162,7 +11265,7 @@ var logInfo = (message, data) => logger.log(message, "info", data);
 var logError = (message, data) => logger.log(message, "error", data);
 var logWarn = (message, data) => logger.log(message, "warn", data);
 var logDebug = (message, data) => logger.log(message, "debug", data);
-var log = logger.log;
+var log = logger.log.bind(logger);
 
 // src/mcp/services/McpGQLClient.ts
 import crypto2 from "crypto";
@@ -11438,24 +11541,6 @@ var McpGQLClient = class {
       throw e;
     }
   }
-  async getReportFixes(fixReportId) {
-    try {
-      logDebug("GraphQL: Calling GetMCPFixes query", { fixReportId });
-      const res = await this.clientSdk.GetMCPFixes({ fixReportId });
-      logInfo("GraphQL: GetMCPFixes successful", {
-        result: res,
-        fixCount: res.fix?.length || 0
-      });
-      return res.fix;
-    } catch (e) {
-      logError("GraphQL: GetMCPFixes failed", {
-        error: e,
-        fixReportId,
-        ...this.getErrorContext()
-      });
-      throw e;
-    }
-  }
   async getUserInfo() {
     const { me } = await this.clientSdk.Me();
     return me;
@@ -11501,15 +11586,21 @@ var McpGQLClient = class {
       return null;
     }
   }
-  async getLatestReportByRepoUrl(repoUrl, limit) {
+  async getLatestReportByRepoUrl({
+    repoUrl,
+    limit = 3,
+    offset = 0
+  }) {
     try {
       logDebug("GraphQL: Calling GetLatestReportByRepoUrl query", {
         repoUrl,
-        limit
+        limit,
+        offset
       });
       const res = await this.clientSdk.GetLatestReportByRepoUrl({
         repoUrl,
-        limit
+        limit,
+        offset
       });
       logInfo("GraphQL: GetLatestReportByRepoUrl successful", {
         result: res,
@@ -11525,6 +11616,56 @@ var McpGQLClient = class {
       throw e;
     }
   }
+  async getReportFixesPaginated({
+    reportId,
+    limit = 3,
+    offset = 0,
+    issueType,
+    severity
+  }) {
+    try {
+      const filters = {};
+      if (issueType && issueType.length > 0) {
+        filters["safeIssueType"] = { _in: issueType };
+      }
+      if (severity && severity.length > 0) {
+        filters["severityText"] = { _in: severity };
+      }
+      logDebug("GraphQL: Calling GetReportFixes query", {
+        reportId,
+        limit,
+        offset,
+        filters,
+        issueType,
+        severity
+      });
+      const res = await this.clientSdk.GetReportFixes({
+        reportId,
+        limit,
+        offset,
+        filters
+      });
+      logInfo("GraphQL: GetReportFixes successful", {
+        result: res,
+        fixCount: res.fixReport?.[0]?.fixes?.length || 0,
+        totalCount: res.fixReport?.[0]?.filteredFixesCount?.aggregate?.count || 0
+      });
+      if (res.fixReport.length === 0) {
+        return null;
+      }
+      return {
+        fixes: res.fixReport?.[0]?.fixes || [],
+        totalCount: res.fixReport?.[0]?.filteredFixesCount?.aggregate?.count || 0
+      };
+    } catch (e) {
+      logError("GraphQL: GetReportFixes failed", {
+        error: e,
+        reportId,
+        ...this.getErrorContext()
+      });
+      throw e;
+    }
+  }
 };
 async function openBrowser(url) {
   const now = Date.now();
@@ -11544,7 +11685,7 @@ async function getMcpGQLClient() {
   });
   const isConnected = await inGqlClient.verifyConnection();
   if (!isConnected) {
-    throw new ApiConnectionError("Error: failed to connect to the API");
+    throw new ApiConnectionError("Error: failed to connect to Mobb API");
   }
   const userVerify = await inGqlClient.verifyToken();
   if (userVerify) {
@@ -11587,10 +11728,10 @@ async function getMcpGQLClient() {
   const newGqlClient = new McpGQLClient({ apiKey: newApiToken, type: "apiKey" });
   const loginSuccess = await newGqlClient.verifyToken();
   if (loginSuccess) {
-    logDebug("set api token %s", newApiToken);
+    logDebug(`set api token ${newApiToken}`);
     config4.set("apiToken", newApiToken);
   } else {
-    throw new AuthenticationError("Something went wrong, API token is invalid.");
+    throw new AuthenticationError("Invalid API token");
   }
   return newGqlClient;
 }
@@ -11609,14 +11750,14 @@ var ToolRegistry = class {
     this.tools.set(tool.name, tool);
     logDebug(`Tool registered: ${tool.name}`, {
       toolName: tool.name,
-      description: tool.definition.description
+      description: tool.description
     });
   }
   getTool(name) {
     return this.tools.get(name);
   }
   getAllTools() {
-    return Array.from(this.tools.values()).map((tool) => tool.definition);
+    return Array.from(this.tools.values()).map((tool) => tool.getDefinition());
   }
   getToolNames() {
     return Array.from(this.tools.keys());
@@ -11697,10 +11838,19 @@ var McpServer = class {
   }
   async handleListToolsRequest(request) {
     logInfo("Received list_tools request", { params: request.params });
+    logInfo("Environment", {
+      env: process.env
+    });
+    logInfo("Request", {
+      request: JSON.parse(JSON.stringify(request))
+    });
+    logInfo("Server", {
+      server: this.server
+    });
     void getMcpGQLClient();
-    const tools = this.toolRegistry.getAllTools();
+    const toolsDefinitions = this.toolRegistry.getAllTools();
     const response = {
-      tools: tools.map((tool) => ({
+      tools: toolsDefinitions.map((tool) => ({
         name: tool.name,
         display_name: tool.display_name || tool.name,
         description: tool.description || "",
@@ -11717,6 +11867,15 @@ var McpServer = class {
   async handleCallToolRequest(request) {
     const { name, arguments: args } = request.params;
     logInfo(`Received call tool request for ${name}`, { name, args });
+    logInfo("Environment", {
+      env: process.env
+    });
+    logInfo("Request", {
+      request: JSON.parse(JSON.stringify(request))
+    });
+    logInfo("Server", {
+      server: this.server
+    });
     try {
       const tool = this.toolRegistry.getTool(name);
       if (!tool) {
@@ -11757,11 +11916,7 @@ var McpServer = class {
     logDebug("MCP server handlers registered");
   }
   registerTool(tool) {
-    this.toolRegistry.registerTool({
-      name: tool.name,
-      definition: tool.definition,
-      execute: tool.execute
-    });
+    this.toolRegistry.registerTool(tool);
     logDebug(`Tool registered: ${tool.name}`);
   }
   async start() {
@@ -11839,41 +11994,26 @@ var BaseTool = class {
       name: this.name,
       display_name: this.displayName,
       description: this.description,
-      inputSchema: {
-        type: "object",
-        properties: {
-          path: {
-            type: "string",
-            description: "The path to the local git repository"
-          }
-        },
-        required: ["path"]
-      }
+      inputSchema: this.inputSchema
     };
   }
   async execute(args) {
     logInfo(`Executing tool: ${this.name}`, { args });
+    logInfo(`Authenticating tool: ${this.name}`, { args });
+    const mcpGqlClient = await getMcpGQLClient();
+    const userInfo = await mcpGqlClient.getUserInfo();
+    logDebug("Authenticated", { userInfo });
     const validatedArgs = this.validateInput(args);
     logDebug(`Tool ${this.name} input validation successful`, {
       validatedArgs
     });
-    await this.validateAdditional(validatedArgs);
-    try {
-      const result = await this.executeInternal(validatedArgs);
-      logInfo(`Tool ${this.name} executed successfully`);
-      return result;
-    } catch (error) {
-      const errorMessage = error instanceof Error ? error.message : String(error);
-      logError(`Tool ${this.name} execution failed: ${errorMessage}`, {
-        error,
-        args
-      });
-      return this.createErrorResponse(errorMessage);
-    }
+    const result = await this.executeInternal(validatedArgs);
+    logInfo(`Tool ${this.name} executed successfully`);
+    return result;
   }
   validateInput(args) {
     try {
-      return this.inputSchema.parse(args);
+      return this.inputValidationSchema.parse(args);
     } catch (error) {
       if (error instanceof z31.ZodError) {
         const errorDetails = error.errors.map((e) => {
@@ -11887,12 +12027,6 @@ var BaseTool = class {
       throw error;
     }
   }
-  /**
-   * Additional validation that should bubble up as MCP errors
-   * Override this method in subclasses to add custom validation
-   */
-  async validateAdditional(_validatedArgs) {
-  }
   createSuccessResponse(text) {
     return {
       content: [
@@ -11903,25 +12037,27 @@ var BaseTool = class {
       ]
     };
   }
-  createErrorResponse(error) {
-    return {
-      content: [
-        {
-          type: "text",
-          text: error
-        }
-      ]
-    };
-  }
 };
 
-// src/mcp/tools/base/prompts.ts
+// src/mcp/core/prompts.ts
 function frienlyType(s) {
   const withoutUnderscores = s.replace(/_/g, " ");
   const result = withoutUnderscores.replace(/([a-z])([A-Z])/g, "$1 $2");
   return result.charAt(0).toUpperCase() + result.slice(1);
 }
-var applyFixesPrompt = (fixes) => {
+var noFixesReturnedForParameters = `No fixes returned for the given offset and limit parameters.
+`;
+var applyFixesPrompt = ({
+  fixes,
+  hasMore,
+  totalCount,
+  nextOffset,
+  shownCount,
+  currentTool
+}) => {
+  if (fixes.length === 0) {
+    return noFixesReturnedForParameters;
+  }
   const fixList = fixes.map((fix) => {
     const vulnerabilityType = frienlyType(fix.safeIssueType);
     const vulnerabilityDescription = fix.patchAndQuestions?.__typename === "FixData" ? fix.patchAndQuestions.extraContext?.fixDescription : void 0;
@@ -11998,10 +12134,22 @@ ${fix.patch || "No patch available"}
 - Do NOT ask for permission
 - Explain what you did AFTER applying the patches
 - If any patch fails, continue with the others and report issues at the end
+
+${hasMore ? `---
+
+## More Fixes Available (${totalCount - nextOffset} remaining)
+
+You have viewed ${shownCount} out of ${totalCount} available fixes.
+
+To fetch additional fixes, run the \`${currentTool}\` tool again with the following parameters:
+
+- **offset**: ${nextOffset}  _(start index for the next batch)_
+- **limit**:  <number_of_fixes_to_return>  _(optional \u2013 default is 3)_
+
+If you omit both **offset** and **limit**, the command will automatically return the next 3 fixes.
+` : ""}
 `;
 };
-
-// src/mcp/tools/checkForAvailableFixes/helpers/AvailableFixesResponsePrompts.ts
 var noReportFoundPrompt = `\u{1F50D} **MOBB SECURITY SCAN STATUS**
 
 ## No Vulnerability Report Found
@@ -12027,34 +12175,19 @@ We were unable to find a previous vulnerability report for this repository. This
    - Confirm the repository URL matches your remote origin
    - Verify the URL format is correct (e.g., https://github.com/org/repo)
 
-### \u{1F680} Next Steps
-To get started with security scanning:
-1. Run \`fix_vulnerabilities\` to perform a new scan
-2. Review the results and apply any suggested fixes
-3. Set up regular scanning to maintain security
-
-### \u{1F4A1} Additional Information
-- New scans typically take a few minutes to complete
-- You'll receive detailed results including:
-  - Vulnerability types and severities
-  - Specific code locations
-  - Recommended fixes
-  - Security best practices
-
 For assistance, please:
 - Visit our documentation at https://docs.mobb.ai
 - Contact support at support@mobb.ai`;
-var noFixesFoundPrompt = `\u{1F50D} **MOBB SECURITY SCAN STATUS**
-
-## No Available Fixes Found
-
-We've analyzed your repository but found no automated fixes available at this time.
+var noFixesAvailablePrompt = `There are no fixes available for this repository at this time.
 `;
-var fixesFoundPrompt = (fixReport) => {
-  if (fixReport.fixes_aggregate.aggregate?.count === 0) {
-    return noFixesFoundPrompt;
+var fixesFoundPrompt = ({
+  fixReport,
+  offset
+}) => {
+  const totalFixes = fixReport.filteredFixesCount.aggregate?.count || 0;
+  if (totalFixes === 0) {
+    return noFixesAvailablePrompt;
   }
-  const totalFixes = fixReport.fixes_aggregate.aggregate?.count || 0;
   const criticalFixes = fixReport.CRITICAL?.aggregate?.count || 0;
   const highFixes = fixReport.HIGH?.aggregate?.count || 0;
   const mediumFixes = fixReport.MEDIUM?.aggregate?.count || 0;
@@ -12064,6 +12197,9 @@ var fixesFoundPrompt = (fixReport) => {
   ).toLocaleString();
   const vendor = fixReport.vulnerabilityReport?.vendor || "Unknown";
   const reportUrl = "";
+  const shownCount = fixReport.fixes.length;
+  const nextOffset = offset + shownCount;
+  const hasMore = nextOffset < totalFixes;
   return `\u{1F50D} **MOBB SECURITY SCAN RESULTS**
 
 ## \u{1F4CA} Scan Report Summary
@@ -12081,15 +12217,61 @@ Total number of fixes available: **${totalFixes}**
 - \u{1F534} Critical: ${criticalFixes}
 - \u{1F7E0} High: ${highFixes}
 - \u{1F7E1} Medium: ${mediumFixes}
-- \uFFFD\uFFFD Low: ${lowFixes}
+- \u{1F7E2} Low: ${lowFixes}
+
+${applyFixesPrompt({
+    fixes: fixReport.fixes,
+    totalCount: totalFixes,
+    hasMore,
+    nextOffset: 0,
+    shownCount: fixReport.fixes.length,
+    currentTool: "check_for_available_fixes"
+  })}`;
+};
+var noFixesFoundPrompt = `\u{1F50D} **MOBB SECURITY SCAN COMPLETED** 
+
+Mobb security scan completed successfully but found no automated fixes available at this time.
+`;
+var fixesPrompt = ({
+  fixes,
+  totalCount,
+  offset
+}) => {
+  if (totalCount === 0) {
+    return noFixesFoundPrompt;
+  }
+  const shownCount = fixes.length;
+  const nextOffset = offset + shownCount;
+  const hasMore = nextOffset < totalCount;
+  return `Here are the fixes to the vulnerabilities discovered by Mobb MCP
+
+${applyFixesPrompt({
+    fixes,
+    totalCount,
+    hasMore,
+    nextOffset,
+    shownCount,
+    currentTool: "fix_vulnerabilities"
+  })}
+
+### \u{1F504} Running a Fresh Scan
+
+To perform a **rescan** of your repository (fetching a brand-new vulnerability report and updated fixes), include the additional parameter:
+
+- **isRescan**: true
+
+This will start a new analysis, discard any cached results.
 
-${applyFixesPrompt(fixReport.fixes)}`;
+\u26A0\uFE0F *Note:* A full rescan may take longer to complete than simply fetching additional fixes because your repository is re-uploaded and re-analyzed from scratch.
+
+`;
 };
 
 // src/mcp/tools/checkForAvailableFixes/AvailableFixesService.ts
 var AvailableFixesService = class {
   constructor() {
     __publicField(this, "gqlClient", null);
+    __publicField(this, "currentOffset", 0);
   }
   async initializeGqlClient() {
     if (!this.gqlClient) {
@@ -12097,13 +12279,30 @@ var AvailableFixesService = class {
     }
     return this.gqlClient;
   }
-  async checkForAvailableFixes(repoUrl, limit) {
+  async checkForAvailableFixes({
+    repoUrl,
+    limit = 3,
+    offset = 0
+  }) {
     try {
       logDebug("Checking for available fixes", { repoUrl, limit });
       const gqlClient = await this.initializeGqlClient();
       logDebug("GQL client initialized");
       logDebug("querying for latest report", { repoUrl, limit });
-      const result = await gqlClient.getLatestReportByRepoUrl(repoUrl, limit);
+      let effectiveOffset;
+      if (offset !== void 0) {
+        effectiveOffset = offset;
+      } else if (this.currentOffset) {
+        effectiveOffset = this.currentOffset ?? 0;
+      } else {
+        effectiveOffset = 0;
+      }
+      logDebug("effectiveOffset", { test: "j", effectiveOffset });
+      const result = await gqlClient.getLatestReportByRepoUrl({
+        repoUrl,
+        limit,
+        offset: effectiveOffset
+      });
       logDebug("received latest report result", { result });
       if (!result) {
         logInfo("No report found for repository", { repoUrl });
@@ -12112,7 +12311,11 @@ var AvailableFixesService = class {
       logInfo("Successfully retrieved available fixes", {
         reportFound: true
       });
-      return fixesFoundPrompt(result);
+      this.currentOffset = effectiveOffset + (result.fixes?.length || 0);
+      return fixesFoundPrompt({
+        fixReport: result,
+        offset: this.currentOffset
+      });
     } catch (error) {
       logError("Failed to check for available fixes", {
         error,
@@ -12130,29 +12333,31 @@ var CheckForAvailableFixesTool = class extends BaseTool {
     __publicField(this, "name", "check_for_available_fixes");
     __publicField(this, "displayName", "Check for Available Fixes");
     __publicField(this, "description", "Checks if there are any available fixes for vulnerabilities in the project");
-    __publicField(this, "inputSchema", z32.object({
-      path: z32.string().describe("Path to the project directory to check for available fixes"),
-      files: z32.array(z32.string()).optional().describe("Optional list of specific files to check"),
-      severity: z32.array(z32.string()).optional().describe("Optional list of severity levels to filter by"),
-      issueTypes: z32.array(z32.string()).optional().describe("Optional list of issue types to filter by"),
-      limit: z32.number().optional().describe("Optional maximum number of results to return")
-    }));
-  }
-  getJsonSchema() {
-    return {
+    __publicField(this, "inputSchema", {
       type: "object",
       properties: {
         path: {
           type: "string",
-          description: "Path to the project directory to check for available fixes"
+          description: "Path to the local git repository to check for available fixes"
+        },
+        offset: {
+          type: "number",
+          description: "[Optional] offset for pagination"
         },
         limit: {
           type: "number",
-          description: "Optional maximum number of results to return"
+          description: "[Optional] maximum number of results to return"
         }
       },
       required: ["path"]
-    };
+    });
+    __publicField(this, "inputValidationSchema", z32.object({
+      path: z32.string().describe(
+        "Path to the local git repository to check for available fixes"
+      ),
+      offset: z32.number().optional().describe("Optional offset for pagination"),
+      limit: z32.number().optional().describe("Optional maximum number of fixes to return")
+    }));
   }
   async executeInternal(args) {
     const pathValidation = new PathValidation();
@@ -12176,10 +12381,11 @@ var CheckForAvailableFixesTool = class extends BaseTool {
       throw new Error("No origin URL found for the repository");
     }
     const availableFixesService = new AvailableFixesService();
-    const fixResult = await availableFixesService.checkForAvailableFixes(
-      originUrl,
-      args.limit
-    );
+    const fixResult = await availableFixesService.checkForAvailableFixes({
+      repoUrl: originUrl,
+      limit: args.limit,
+      offset: args.offset
+    });
     logInfo("CheckForAvailableFixesTool execution completed successfully", {
       fixResult
     });
@@ -12194,6 +12400,9 @@ var CheckForAvailableFixesTool = class extends BaseTool {
   }
 };
 
+// src/mcp/tools/fixVulnerabilities/FixVulnerabilitiesTool.ts
+import z33 from "zod";
+
 // src/mcp/services/FilePacking.ts
 import fs10 from "fs";
 import path12 from "path";
@@ -12234,158 +12443,62 @@ var FilePacking = class {
   }
 };
 
-// src/mcp/tools/fixVulnerabilities/helpers/FixVulnerabilitiesResponsePrompts.ts
-var noFixesFoundPrompt2 = `\u{1F389} **MOBB SECURITY SCAN COMPLETED SUCCESSFULLY** \u{1F389}
-
-## Congratulations! No Vulnerabilities Found
-
-Your code has been thoroughly analyzed by Mobb's advanced security scanning engine, and we're pleased to report that **no security vulnerabilities were detected** in your codebase.
-
-### \u{1F6E1}\uFE0F What This Means
-- Your code follows secure coding practices
-- No immediate security risks were identified
-- Your application appears to be well-protected against common vulnerabilities
-
-### \u2705 Scan Summary
-- **Status:** Complete
-- **Vulnerabilities Found:** 0
-- **Security Rating:** Excellent
-- **Action Required:** None
-
-### \u{1F680} Next Steps
-While no vulnerabilities were found in this scan:
-1. **Keep up the great work** with secure coding practices
-2. **Run regular scans** as your codebase evolves
-3. **Stay updated** with the latest security best practices
-4. **Consider periodic security reviews** for ongoing protection
-
-### \u{1F4CA} Scan Details
-This scan analyzed your code for common security issues including:
-- SQL Injection vulnerabilities
-- Cross-Site Scripting (XSS) flaws
-- Authentication and authorization issues
-- Input validation problems
-- And many other security concerns
-
-**Well done on maintaining a secure codebase!** \u{1F3C6}`;
-var fixesPrompt = (fixes) => {
-  const fix = fixes[0];
-  if (!fix) {
-    return noFixesFoundPrompt2;
-  }
-  return `Here are the fixes to the vulnerabilities discovered by Mobb MCP
-
-${applyFixesPrompt(fixes)}  `;
-};
-var failedToConnectToApiPrompt = `# CONNECTION ERROR: FAILED TO REACH MOBB API
-
-## ANALYSIS SUMMARY
-- **Status:** \u274C Failed
-- **Issue Type:** Connection Error
-- **Error Details:** Unable to establish connection to the Mobb API service
-
-## TROUBLESHOOTING STEPS FOR THE USER
-
-The Mobb security scanning service is currently not reachable. This may be due to:
-
-1. **Missing or invalid authentication credentials**
-   - Ensure the \`API_KEY\` environment variable is properly set with your valid Mobb authentication token
-   - Example: \`export API_KEY=your_mobb_api_key_here\`
-
-2. **Incorrect API endpoint configuration**
-   - Check if the \`API_URL\` environment variable needs to be set to the correct Mobb service endpoint
-   - Example: \`export API_URL=https://api.mobb.ai/graphql\`
-
-3. **Network connectivity issues**
-   - Verify your internet connection is working properly
-   - Check if any firewall or proxy settings might be blocking the connection
-
-4. **Service outage**
-   - The Mobb service might be temporarily unavailable
-   - Please try again later or check the Mobb status page
-
-## NEXT STEPS
-
-Please resolve the connection issue using the steps above and try running the security scan again.
-
-For additional assistance, please:
-- Visit the Mobb documentation at https://docs.mobb.ai
-- Contact Mobb support at support@mobb.ai
-
-`;
-var failedToAuthenticatePrompt = `# AUTHENTICATION ERROR: MOBB LOGIN REQUIRED
-
-## ANALYSIS SUMMARY
-- **Status:** \u274C Failed
-- **Issue Type:** Authentication Error
-- **Error Details:** Unable to authenticate with the Mobb service
-
-## AUTHENTICATION REQUIRED
-
-The Mobb security scanning service requires authentication before it can analyze your code for vulnerabilities. You need to:
-
-1. **Login and authorize access to Mobb**
-   - A browser window should have opened to complete the authentication process
-   - If no browser window opened, please run the command again
-
-2. **Create a Mobb account if you don't have one**
-   - If you don't already have a Mobb account, you'll need to sign up
-   - Visit https://app.mobb.ai/auth/signup to create your free account
-   - Use your work email for easier team collaboration
-
-3. **Authorization flow**
-   - After logging in, you'll be asked to authorize the CLI tool
-   - This creates a secure token that allows the CLI to access Mobb services
-   - You only need to do this once per device
-
-## TROUBLESHOOTING
-
-If you're experiencing issues with authentication:
-
-- Ensure you have an active internet connection
-- Check that you can access https://app.mobb.ai in your browser
-- Try running the command again with the \`--debug\` flag for more detailed output
-- Make sure your browser isn't blocking pop-ups from the authentication window
-
-## NEXT STEPS
-
-Please complete the authentication process and try running the security scan again.
-
-For additional assistance, please:
-- Visit the Mobb documentation at https://docs.mobb.ai/cli/authentication
-- Contact Mobb support at support@mobb.ai
-
-`;
-
 // src/mcp/tools/fixVulnerabilities/FixVulnerabilitiesService.ts
 var VUL_REPORT_DIGEST_TIMEOUT_MS2 = 1e3 * 60 * 5;
 var VulnerabilityFixService = class {
   constructor() {
     __publicField(this, "gqlClient");
     __publicField(this, "filePacking");
+    /**
+     * Stores the fix report id that is created on the first run so that subsequent
+     * calls can skip the expensive packing/uploading/scan flow and directly fetch
+     * the analysis results.
+     */
+    __publicField(this, "storedFixReportId");
+    __publicField(this, "currentOffset", 0);
     this.filePacking = new FilePacking();
   }
-  async processVulnerabilities(fileList, repositoryPath) {
+  async processVulnerabilities({
+    fileList,
+    repositoryPath,
+    offset,
+    limit,
+    isRescan = false
+  }) {
     try {
-      this.validateFiles(fileList);
       this.gqlClient = await this.initializeGqlClient();
-      const repoUploadInfo = await this.initializeReport();
-      const zipBuffer = await this.packFiles(fileList, repositoryPath);
-      await this.uploadFiles(zipBuffer, repoUploadInfo);
-      const projectId = await this.getProjectId();
-      await this.runScan({
-        fixReportId: repoUploadInfo.fixReportId,
-        projectId
-      });
-      const fixes = await this.getReportFixes(repoUploadInfo.fixReportId);
-      return fixesPrompt(fixes);
-    } catch (error) {
-      if (error instanceof ApiConnectionError || error instanceof CliLoginError) {
-        return failedToConnectToApiPrompt;
+      let fixReportId = this.storedFixReportId;
+      if (!fixReportId || isRescan) {
+        this.validateFiles(fileList);
+        const repoUploadInfo = await this.initializeReport();
+        fixReportId = repoUploadInfo.fixReportId;
+        this.storedFixReportId = fixReportId;
+        const zipBuffer = await this.packFiles(fileList, repositoryPath);
+        await this.uploadFiles(zipBuffer, repoUploadInfo);
+        const projectId = await this.getProjectId();
+        await this.runScan({ fixReportId, projectId });
       }
-      if (error instanceof AuthenticationError || error instanceof FailedToGetApiTokenError) {
-        return failedToAuthenticatePrompt;
+      let effectiveOffset;
+      if (offset !== void 0) {
+        effectiveOffset = offset;
+      } else if (fixReportId) {
+        effectiveOffset = this.currentOffset ?? 0;
+      } else {
+        effectiveOffset = 0;
       }
+      logDebug("effectiveOffset", { effectiveOffset });
+      const fixes = await this.getReportFixes(
+        fixReportId,
+        effectiveOffset,
+        limit
+      );
+      this.currentOffset = effectiveOffset + (fixes.fixes?.length || 0);
+      return fixesPrompt({
+        fixes: fixes.fixes,
+        totalCount: fixes.totalCount,
+        offset: effectiveOffset
+      });
+    } catch (error) {
       const message = error.message;
       logError("Vulnerability processing failed", { error: message });
       throw error;
@@ -12474,7 +12587,7 @@ var VulnerabilityFixService = class {
       projectId,
       repoUrl: "",
       reference: "no-branch",
-      scanSource: "CLI" /* Cli */
+      scanSource: "MCP" /* Mcp */
     };
     logInfo("Submitting vulnerability report");
     const submitRes = await this.gqlClient.submitVulnerabilityReport(
@@ -12501,34 +12614,63 @@ var VulnerabilityFixService = class {
     });
     logInfo("Analysis subscription completed");
   }
-  async getReportFixes(fixReportId) {
+  async getReportFixes(fixReportId, offset, limit) {
+    logDebug("getReportFixes", { fixReportId, offset, limit });
     if (!this.gqlClient) {
       throw new GqlClientError();
     }
-    const fixes = await this.gqlClient.getReportFixes(fixReportId);
-    logInfo("Fixes retrieved", { fixCount: fixes.length });
-    return fixes;
+    const fixes = await this.gqlClient.getReportFixesPaginated({
+      reportId: fixReportId,
+      offset,
+      limit
+    });
+    logInfo("Fixes retrieved", { fixCount: fixes?.fixes?.length });
+    return {
+      fixes: fixes?.fixes || [],
+      totalCount: fixes?.totalCount || 0
+    };
   }
 };
 
 // src/mcp/tools/fixVulnerabilities/FixVulnerabilitiesTool.ts
-var FixVulnerabilitiesTool = class {
+var FixVulnerabilitiesTool = class extends BaseTool {
   constructor() {
+    super(...arguments);
     __publicField(this, "name", "fix_vulnerabilities");
-    __publicField(this, "display_name", "fix_vulnerabilities");
+    __publicField(this, "displayName", "Fix Vulnerabilities");
     __publicField(this, "description", "Scans the current code changes and returns fixes for potential vulnerabilities");
+    __publicField(this, "inputValidationSchema", z33.object({
+      path: z33.string().describe(
+        "Path to the local git repository to check for available fixes"
+      ),
+      offset: z33.number().optional().describe("Optional offset for pagination"),
+      limit: z33.number().optional().describe("Optional maximum number of results to return"),
+      rescan: z33.boolean().optional().describe("Optional whether to rescan the repository")
+    }));
     __publicField(this, "inputSchema", {
       type: "object",
       properties: {
         path: {
           type: "string",
-          description: "The path to the local git repository"
+          description: "Path to the project directory to check for available fixes"
+        },
+        offset: {
+          type: "number",
+          description: "[Optional] offset for pagination"
+        },
+        limit: {
+          type: "number",
+          description: "[Optional] maximum number of results to return"
+        },
+        rescan: {
+          type: "boolean",
+          description: "[Optional] whether to rescan the repository"
         }
       },
       required: ["path"]
     });
   }
-  async execute(args) {
+  async executeInternal(args) {
     logInfo("Executing tool: fix_vulnerabilities", { path: args.path });
     if (!args.path) {
       throw new Error("Invalid arguments: Missing required parameter 'path'");
@@ -12588,10 +12730,13 @@ var FixVulnerabilitiesTool = class {
     }
     try {
       const vulnerabilityFixService = new VulnerabilityFixService();
-      const fixResult = await vulnerabilityFixService.processVulnerabilities(
-        files,
-        args.path
-      );
+      const fixResult = await vulnerabilityFixService.processVulnerabilities({
+        fileList: files,
+        repositoryPath: args.path,
+        offset: args.offset,
+        limit: args.limit,
+        isRescan: args.rescan
+      });
       const result = {
         content: [
           {
@@ -12631,28 +12776,22 @@ function createMcpServer() {
     name: "mobb-mcp",
     version: "1.0.0"
   });
+  const enabledToolsEnv = process.env["TOOLS_ENABLED"];
+  const enabledToolsSet = enabledToolsEnv ? new Set(
+    enabledToolsEnv.split(",").map((t) => t.trim()).filter((t) => t.length > 0)
+  ) : null;
+  const registerIfEnabled = (tool) => {
+    if (!enabledToolsSet || enabledToolsSet.has(tool.name)) {
+      server.registerTool(tool);
+      logDebug(`Registered tool: ${tool.name}`);
+    } else {
+      logDebug(`Skipping tool (disabled): ${tool.name}`);
+    }
+  };
   const fixVulnerabilitiesTool = new FixVulnerabilitiesTool();
   const checkForAvailableFixesTool = new CheckForAvailableFixesTool();
-  server.registerTool({
-    name: fixVulnerabilitiesTool.name,
-    definition: {
-      name: fixVulnerabilitiesTool.name,
-      display_name: fixVulnerabilitiesTool.display_name,
-      description: fixVulnerabilitiesTool.description,
-      inputSchema: fixVulnerabilitiesTool.inputSchema
-    },
-    execute: (args) => fixVulnerabilitiesTool.execute(args)
-  });
-  server.registerTool({
-    name: checkForAvailableFixesTool.name,
-    definition: {
-      name: checkForAvailableFixesTool.name,
-      display_name: checkForAvailableFixesTool.displayName,
-      description: checkForAvailableFixesTool.description,
-      inputSchema: checkForAvailableFixesTool.getJsonSchema()
-    },
-    execute: (args) => checkForAvailableFixesTool.execute(args)
-  });
+  registerIfEnabled(fixVulnerabilitiesTool);
+  registerIfEnabled(checkForAvailableFixesTool);
   logInfo("MCP server created and configured");
   return server;
 }