mobbdev 1.0.153 → 1.0.155

package/dist/index.mjs

@@ -8030,6 +8030,12 @@ import {
   fetch as undiciFetch,
   ProxyAgent as ProxyAgent2
 } from "undici";
+
+// src/utils/contextLogger.ts
+import debugModule from "debug";
+var debug3 = debugModule("mobb:shared");
+
+// src/features/analysis/scm/gitlab/gitlab.ts
 init_env();
 
 // src/features/analysis/scm/gitlab/types.ts
@@ -8041,7 +8047,7 @@ var GitlabAuthResultZ = z22.object({
 });
 
 // src/features/analysis/scm/gitlab/gitlab.ts
-var debug3 = Debug3("scm:gitlab");
+var debug4 = Debug3("scm:gitlab");
 function removeTrailingSlash2(str) {
   return str.trim().replace(/\/+$/, "");
 }
@@ -8979,7 +8985,7 @@ import chalk from "chalk";
 import Debug4 from "debug";
 import * as dotenv from "dotenv";
 import { z as z24 } from "zod";
-var debug4 = Debug4("mobbdev:constants");
+var debug5 = Debug4("mobbdev:constants");
 var __dirname = path6.dirname(fileURLToPath2(import.meta.url));
 dotenv.config({ path: path6.join(__dirname, "../.env") });
 var scmFriendlyText = {
@@ -9016,7 +9022,7 @@ var envVariablesSchema = z24.object({
   HTTPS_PROXY: z24.string().optional().default("")
 }).required();
 var envVariables = envVariablesSchema.parse(process.env);
-debug4("config %o", envVariables);
+debug5("config %o", envVariables);
 var mobbAscii = `
                                    ..                       
                              ..........                     
@@ -9346,7 +9352,7 @@ function keyBy(array, keyBy2) {
 
 // src/features/analysis/utils/send_report.ts
 import Debug5 from "debug";
-var debug5 = Debug5("mobbdev:index");
+var debug6 = Debug5("mobbdev:index");
 async function sendReport({
   spinner,
   submitVulnerabilityReportVariables,
@@ -9357,7 +9363,7 @@ async function sendReport({
       submitVulnerabilityReportVariables
     );
     if (submitRes.submitVulnerabilityReport.__typename !== "VulnerabilityReport") {
-      debug5("error submit vul report %s", submitRes);
+      debug6("error submit vul report %s", submitRes);
       throw new Error("\u{1F575}\uFE0F\u200D\u2642\uFE0F Mobb analysis failed");
     }
     spinner.update({ text: progressMassages.processingVulnerabilityReport });
@@ -9409,7 +9415,7 @@ var scannerToFriendlyString = {
 // src/features/analysis/add_fix_comments_for_pr/utils/buildCommentBody.ts
 import Debug6 from "debug";
 import { z as z25 } from "zod";
-var debug6 = Debug6("mobbdev:handle-finished-analysis");
+var debug7 = Debug6("mobbdev:handle-finished-analysis");
 var getCommitFixButton = (commitUrl) => `<a href="${commitUrl}"><img src=${COMMIT_FIX_SVG}></a>`;
 function buildFixCommentBody({
   fix,
@@ -9468,7 +9474,7 @@ function buildFixCommentBody({
     safeIssueType: z25.nativeEnum(IssueType_Enum)
   }).safeParse(fix);
   if (!validFixParseRes.success) {
-    debug6(
+    debug7(
       `fix ${fixId} has custom issue type or language, therefore the commit description will not be added`,
       validFixParseRes.error
     );
@@ -9532,7 +9538,7 @@ ${issuePageLink}`;
 }
 
 // src/features/analysis/add_fix_comments_for_pr/utils/utils.ts
-var debug7 = Debug7("mobbdev:handle-finished-analysis");
+var debug8 = Debug7("mobbdev:handle-finished-analysis");
 function calculateRanges(integers) {
   if (integers.length === 0) {
     return [];
@@ -9566,7 +9572,7 @@ function deleteAllPreviousComments({
     try {
       return scm.deleteComment({ comment_id: comment.id });
     } catch (e) {
-      debug7("delete comment failed %s", e);
+      debug8("delete comment failed %s", e);
       return Promise.resolve();
     }
   });
@@ -9582,7 +9588,7 @@ function deleteAllPreviousGeneralPrComments(params) {
     try {
       return scm.deleteGeneralPrComment({ commentId: comment.id });
     } catch (e) {
-      debug7("delete comment failed %s", e);
+      debug8("delete comment failed %s", e);
       return Promise.resolve();
     }
   });
@@ -9726,7 +9732,7 @@ async function postAnalysisInsightComment(params) {
     fixablePrVuls,
     nonFixablePrVuls
   } = prVulenrabilities;
-  debug7({
+  debug8({
     fixablePrVuls,
     nonFixablePrVuls,
     vulnerabilitiesOutsidePr,
@@ -9781,7 +9787,7 @@ ${contactUsMarkdown}`;
 }
 
 // src/features/analysis/add_fix_comments_for_pr/add_fix_comments_for_pr.ts
-var debug8 = Debug8("mobbdev:handle-finished-analysis");
+var debug9 = Debug8("mobbdev:handle-finished-analysis");
 async function addFixCommentsForPr({
   analysisId,
   scm: _scm,
@@ -9793,7 +9799,7 @@ async function addFixCommentsForPr({
   }
   const scm = _scm;
   const getAnalysisRes = await gqlClient.getAnalysis(analysisId);
-  debug8("getAnalysis %o", getAnalysisRes);
+  debug9("getAnalysis %o", getAnalysisRes);
   const {
     vulnerabilityReport: {
       projectId,
@@ -9898,7 +9904,7 @@ ${contextString}` : description;
 
 // src/features/analysis/auto_pr_handler.ts
 import Debug9 from "debug";
-var debug9 = Debug9("mobbdev:handleAutoPr");
+var debug10 = Debug9("mobbdev:handleAutoPr");
 async function handleAutoPr(params) {
   const {
     gqlClient,
@@ -9922,7 +9928,7 @@ async function handleAutoPr(params) {
         prId,
         prStrategy: createOnePr ? "CONDENSE" /* Condense */ : "SPREAD" /* Spread */
       });
-      debug9("auto pr analysis res %o", autoPrAnalysisRes);
+      debug10("auto pr analysis res %o", autoPrAnalysisRes);
       if (autoPrAnalysisRes.autoPrAnalysis?.__typename === "AutoPrError") {
         createAutoPrSpinner.error({
           text: `\u{1F504} Automatic pull request failed - ${autoPrAnalysisRes.autoPrAnalysis.error}`
@@ -9949,14 +9955,14 @@ async function handleAutoPr(params) {
 // src/features/analysis/git.ts
 init_GitService();
 import Debug10 from "debug";
-var debug10 = Debug10("mobbdev:git");
+var debug11 = Debug10("mobbdev:git");
 async function getGitInfo(srcDirPath) {
-  debug10("getting git info for %s", srcDirPath);
+  debug11("getting git info for %s", srcDirPath);
   const gitService = new GitService(srcDirPath);
   try {
     const validationResult = await gitService.validateRepository();
     if (!validationResult.isValid) {
-      debug10("folder is not a git repo");
+      debug11("folder is not a git repo");
       return {
         success: false,
         hash: void 0,
@@ -9971,9 +9977,9 @@ async function getGitInfo(srcDirPath) {
     };
   } catch (e) {
     if (e instanceof Error) {
-      debug10("failed to run git %o", e);
+      debug11("failed to run git %o", e);
       if (e.message.includes(" spawn ")) {
-        debug10("git cli not installed");
+        debug11("git cli not installed");
       } else {
         throw e;
       }
@@ -9996,11 +10002,11 @@ import { createClient } from "graphql-ws";
 import { HttpsProxyAgent } from "https-proxy-agent";
 import WebSocket from "ws";
 var DEFAULT_API_URL = "https://api.mobb.ai/v1/graphql";
-var debug11 = Debug11("mobbdev:subscribe");
+var debug12 = Debug11("mobbdev:subscribe");
 var SUBSCRIPTION_TIMEOUT_MS = 30 * 60 * 1e3;
 function createWSClient(options) {
   const proxy = options.url.startsWith("wss://") && process.env["HTTPS_PROXY"] ? new HttpsProxyAgent(process.env["HTTPS_PROXY"]) : options.url.startsWith("ws://") && process.env["HTTP_PROXY"] ? new HttpsProxyAgent(process.env["HTTP_PROXY"]) : null;
-  debug11(
+  debug12(
     `Using proxy: ${proxy ? "yes" : "no"} with url: ${options.url} and with proxy: ${process.env["HTTP_PROXY"]} for the websocket connection`
   );
   const CustomWebSocket = class extends WebSocket {
@@ -10149,7 +10155,7 @@ var GetVulByNodesMetadataZ = z27.object({
 });
 
 // src/features/analysis/graphql/gql.ts
-var debug12 = Debug12("mobbdev:gql");
+var debug13 = Debug12("mobbdev:gql");
 var API_KEY_HEADER_NAME = "x-mobb-key";
 var REPORT_STATE_CHECK_DELAY = 5 * 1e3;
 function getProxyAgent(url) {
@@ -10159,12 +10165,12 @@ function getProxyAgent(url) {
     const isHttps = parsedUrl.protocol === "https:";
     const proxy = isHttps ? HTTPS_PROXY : isHttp ? HTTP_PROXY : null;
     if (proxy) {
-      debug12("Using proxy %s", proxy);
-      debug12("Proxy agent %o", proxy);
+      debug13("Using proxy %s", proxy);
+      debug13("Proxy agent %o", proxy);
       return isHttps ? new HttpsProxyAgent2(proxy) : new HttpProxyAgent(proxy);
     }
   } catch (err) {
-    debug12(`Skipping proxy for ${url}. Reason: ${err.message}`);
+    debug13(`Skipping proxy for ${url}. Reason: ${err.message}`);
   }
   return void 0;
 }
@@ -10179,7 +10185,7 @@ var fetchWithProxy = (url, options = {}) => {
       });
     }
   } catch (err) {
-    debug12(`Skipping proxy for ${url}. Reason: ${err.message}`);
+    debug13(`Skipping proxy for ${url}. Reason: ${err.message}`);
   }
   return fetchOrig(url, options);
 };
@@ -10188,7 +10194,7 @@ var GQLClient = class {
     __publicField(this, "_client");
     __publicField(this, "_clientSdk");
     __publicField(this, "_auth");
-    debug12(`init with  ${args}`);
+    debug13(`init with  ${args}`);
     this._auth = args;
     this._client = new GraphQLClient(API_URL, {
       headers: args.type === "apiKey" ? { [API_KEY_HEADER_NAME]: args.apiKey || "" } : {
@@ -10197,7 +10203,7 @@ var GQLClient = class {
       fetch: fetchWithProxy,
       requestMiddleware: (request) => {
         const requestId = uuidv4();
-        debug12(
+        debug13(
           `sending API request with id: ${requestId} and with request: ${request.body}`
         );
         return {
@@ -10227,7 +10233,7 @@ var GQLClient = class {
       await this.getUserInfo();
     } catch (e) {
       if (e?.toString().startsWith("FetchError")) {
-        debug12("verify connection failed %o", e);
+        debug13("verify connection failed %o", e);
         return false;
       }
     }
@@ -10239,7 +10245,7 @@ var GQLClient = class {
     try {
       info = await this.getUserInfo();
     } catch (e) {
-      debug12("verify token failed %o", e);
+      debug13("verify token failed %o", e);
       return false;
     }
     return info?.email || true;
@@ -10298,7 +10304,7 @@ var GQLClient = class {
     try {
       await this._clientSdk.CreateCommunityUser();
     } catch (e) {
-      debug12("create community user failed %o", e);
+      debug13("create community user failed %o", e);
     }
   }
   async updateScmToken(args) {
@@ -10529,7 +10535,7 @@ import { isBinary as isBinary2 } from "istextorbinary";
 import { simpleGit as simpleGit2 } from "simple-git";
 import { parseStringPromise } from "xml2js";
 import { z as z28 } from "zod";
-var debug13 = Debug13("mobbdev:pack");
+var debug14 = Debug13("mobbdev:pack");
 var FPR_SOURCE_CODE_FILE_MAPPING_SCHEMA = z28.object({
   properties: z28.object({
     entry: z28.array(
@@ -10551,7 +10557,7 @@ function getManifestFilesSuffixes() {
   return ["package.json", "pom.xml"];
 }
 async function pack(srcDirPath, vulnFiles, isIncludeAllFiles = false) {
-  debug13("pack folder %s", srcDirPath);
+  debug14("pack folder %s", srcDirPath);
   let git = void 0;
   try {
     git = simpleGit2({
@@ -10561,13 +10567,13 @@ async function pack(srcDirPath, vulnFiles, isIncludeAllFiles = false) {
     });
     await git.status();
   } catch (e) {
-    debug13("failed to run git %o", e);
+    debug14("failed to run git %o", e);
     git = void 0;
     if (e instanceof Error) {
       if (e.message.includes(" spawn ")) {
-        debug13("git cli not installed");
+        debug14("git cli not installed");
       } else if (e.message.includes("not a git repository")) {
-        debug13("folder is not a git repo");
+        debug14("folder is not a git repo");
       } else {
         throw e;
       }
@@ -10582,9 +10588,9 @@ async function pack(srcDirPath, vulnFiles, isIncludeAllFiles = false) {
     followSymbolicLinks: false,
     dot: true
   });
-  debug13("files found %d", filepaths.length);
+  debug14("files found %d", filepaths.length);
   const zip = new AdmZip();
-  debug13("compressing files");
+  debug14("compressing files");
   for (const filepath of filepaths) {
     const absFilepath = path7.join(srcDirPath, filepath.toString());
     if (!isIncludeAllFiles) {
@@ -10593,26 +10599,26 @@ async function pack(srcDirPath, vulnFiles, isIncludeAllFiles = false) {
         absFilepath.toString().replaceAll(path7.win32.sep, path7.posix.sep),
         vulnFiles
       )) {
-        debug13("ignoring %s because it is not a vulnerability file", filepath);
+        debug14("ignoring %s because it is not a vulnerability file", filepath);
         continue;
       }
     }
     if (fs7.lstatSync(absFilepath).size > MCP_MAX_FILE_SIZE) {
-      debug13("ignoring %s because the size is > 5MB", filepath);
+      debug14("ignoring %s because the size is > 5MB", filepath);
       continue;
     }
     const data = git ? await git.showBuffer([`HEAD:./${filepath}`]) : fs7.readFileSync(absFilepath);
     if (isBinary2(null, data)) {
-      debug13("ignoring %s because is seems to be a binary file", filepath);
+      debug14("ignoring %s because is seems to be a binary file", filepath);
       continue;
     }
     zip.addFile(filepath.toString(), data);
   }
-  debug13("get zip file buffer");
+  debug14("get zip file buffer");
   return zip.toBuffer();
 }
 async function repackFpr(fprPath) {
-  debug13("repack fpr file %s", fprPath);
+  debug14("repack fpr file %s", fprPath);
   const zipIn = new AdmZip(fprPath);
   const zipOut = new AdmZip();
   const mappingXML = zipIn.readAsText("src-archive/index.xml", "utf-8");
@@ -10627,7 +10633,7 @@ async function repackFpr(fprPath) {
       zipOut.addFile(realPath, buf);
     }
   }
-  debug13("get repacked zip file buffer");
+  debug14("get repacked zip file buffer");
   return zipOut.toBuffer();
 }
 
@@ -10722,16 +10728,16 @@ function createSpawn({ args, processPath, name, cwd }, options) {
   return createChildProcess({ childProcess: child, name }, options);
 }
 function createChildProcess({ childProcess, name }, options) {
-  const debug20 = Debug14(`mobbdev:${name}`);
+  const debug21 = Debug14(`mobbdev:${name}`);
   const { display } = options;
   return new Promise((resolve, reject) => {
     let out = "";
     const onData = (chunk) => {
-      debug20(`chunk received from ${name} std ${chunk}`);
+      debug21(`chunk received from ${name} std ${chunk}`);
       out += chunk;
     };
     if (!childProcess?.stdout || !childProcess?.stderr) {
-      debug20(`unable to fork ${name}`);
+      debug21(`unable to fork ${name}`);
       reject(new Error(`unable to fork ${name}`));
     }
     childProcess.stdout?.on("data", onData);
@@ -10741,11 +10747,11 @@ function createChildProcess({ childProcess, name }, options) {
       childProcess.stderr?.pipe(process2.stderr);
     }
     childProcess.on("exit", (code) => {
-      debug20(`${name} exit code ${code}`);
+      debug21(`${name} exit code ${code}`);
       resolve({ message: out, code });
     });
     childProcess.on("error", (err) => {
-      debug20(`${name} error %o`, err);
+      debug21(`${name} error %o`, err);
       reject(err);
     });
   });
@@ -10758,7 +10764,7 @@ import { existsSync } from "fs";
 import { createSpinner as createSpinner2 } from "nanospinner";
 import { type } from "os";
 import path8 from "path";
-var debug14 = Debug15("mobbdev:checkmarx");
+var debug15 = Debug15("mobbdev:checkmarx");
 var require2 = createRequire(import.meta.url);
 var getCheckmarxPath = () => {
   const os3 = type();
@@ -10799,14 +10805,14 @@ function validateCheckmarxInstallation() {
   existsSync(getCheckmarxPath());
 }
 async function forkCheckmarx(args, { display }) {
-  debug14("fork checkmarx with args %o %s", args.join(" "), display);
+  debug15("fork checkmarx with args %o %s", args.join(" "), display);
   return createSpawn(
     { args, processPath: getCheckmarxPath(), name: "checkmarx" },
     { display }
   );
 }
 async function getCheckmarxReport({ reportPath, repositoryRoot, branch, projectName }, { skipPrompts = false }) {
-  debug14("get checkmarx report start %s %s", reportPath, repositoryRoot);
+  debug15("get checkmarx report start %s %s", reportPath, repositoryRoot);
   const { code: loginCode } = await forkCheckmarx(VALIDATE_COMMAND, {
     display: false
   });
@@ -10877,17 +10883,17 @@ import chalk4 from "chalk";
 import Debug16 from "debug";
 import { createSpinner as createSpinner3 } from "nanospinner";
 import open from "open";
-var debug15 = Debug16("mobbdev:snyk");
+var debug16 = Debug16("mobbdev:snyk");
 var require3 = createRequire2(import.meta.url);
 var SNYK_PATH = require3.resolve("snyk/bin/snyk");
 var SNYK_ARTICLE_URL = "https://docs.snyk.io/scan-using-snyk/snyk-code/configure-snyk-code#enable-snyk-code";
-debug15("snyk executable path %s", SNYK_PATH);
+debug16("snyk executable path %s", SNYK_PATH);
 async function forkSnyk(args, { display }) {
-  debug15("fork snyk with args %o %s", args, display);
+  debug16("fork snyk with args %o %s", args, display);
   return createFork({ args, processPath: SNYK_PATH, name: "snyk" }, { display });
 }
 async function getSnykReport(reportPath, repoRoot, { skipPrompts = false }) {
-  debug15("get snyk report start %s %s", reportPath, repoRoot);
+  debug16("get snyk report start %s %s", reportPath, repoRoot);
   const config4 = await forkSnyk(["config"], { display: false });
   const { message: configMessage } = config4;
   if (!configMessage.includes("api: ")) {
@@ -10901,7 +10907,7 @@ async function getSnykReport(reportPath, repoRoot, { skipPrompts = false }) {
     snykLoginSpinner.update({
       text: "\u{1F513} Waiting for Snyk login to complete"
     });
-    debug15("no token in the config %s", config4);
+    debug16("no token in the config %s", config4);
     await forkSnyk(["auth"], { display: true });
     snykLoginSpinner.success({ text: "\u{1F513} Login to Snyk Successful" });
   }
@@ -10911,12 +10917,12 @@ async function getSnykReport(reportPath, repoRoot, { skipPrompts = false }) {
     { display: true }
   );
   if (scanOutput.includes("Snyk Code is not supported for org")) {
-    debug15("snyk code is not enabled %s", scanOutput);
+    debug16("snyk code is not enabled %s", scanOutput);
     snykSpinner.error({ text: "\u{1F50D} Snyk configuration needed" });
     const answer = await snykArticlePrompt();
-    debug15("answer %s", answer);
+    debug16("answer %s", answer);
     if (answer) {
-      debug15("opening the browser");
+      debug16("opening the browser");
       await open(SNYK_ARTICLE_URL);
     }
     console.log(
@@ -10933,7 +10939,7 @@ async function getSnykReport(reportPath, repoRoot, { skipPrompts = false }) {
 // src/features/analysis/upload-file.ts
 import Debug17 from "debug";
 import fetch3, { File, fileFrom, FormData } from "node-fetch";
-var debug16 = Debug17("mobbdev:upload-file");
+var debug17 = Debug17("mobbdev:upload-file");
 async function uploadFile({
   file,
   url,
@@ -10946,9 +10952,9 @@ async function uploadFile({
   logInfo2(`FileUpload: upload file start ${url}`);
   logInfo2(`FileUpload: upload fields`, uploadFields);
   logInfo2(`FileUpload: upload key ${uploadKey}`);
-  debug16("upload file start %s", url);
-  debug16("upload fields %o", uploadFields);
-  debug16("upload key %s", uploadKey);
+  debug17("upload file start %s", url);
+  debug17("upload fields %o", uploadFields);
+  debug17("upload key %s", uploadKey);
   const form = new FormData();
   Object.entries(uploadFields).forEach(([key, value]) => {
     form.append(key, value);
@@ -10957,13 +10963,13 @@ async function uploadFile({
     form.append("key", uploadKey);
   }
   if (typeof file === "string") {
-    debug16("upload file from path %s", file);
+    debug17("upload file from path %s", file);
     logInfo2(`FileUpload: upload file from path ${file}`);
     form.append("file", await fileFrom(file));
   } else {
-    debug16("upload file from buffer");
+    debug17("upload file from buffer");
     logInfo2(`FileUpload: upload file from buffer`);
-    form.append("file", new File([file], "file"));
+    form.append("file", new File([new Uint8Array(file)], "file"));
   }
   const agent = getProxyAgent(url);
   const response = await fetch3(url, {
@@ -10972,11 +10978,11 @@ async function uploadFile({
     agent
   });
   if (!response.ok) {
-    debug16("error from S3 %s %s", response.body, response.status);
+    debug17("error from S3 %s %s", response.body, response.status);
     logInfo2(`FileUpload: error from S3 ${response.body} ${response.status}`);
     throw new Error(`Failed to upload the file: ${response.status}`);
   }
-  debug16("upload file done");
+  debug17("upload file done");
   logInfo2(`FileUpload: upload file done`);
 }
 
@@ -11011,9 +11017,9 @@ async function downloadRepo({
 }) {
   const { createSpinner: createSpinner5 } = Spinner2({ ci });
   const repoSpinner = createSpinner5("\u{1F4BE} Downloading Repo").start();
-  debug17("download repo %s %s %s", repoUrl, dirname);
+  debug18("download repo %s %s %s", repoUrl, dirname);
   const zipFilePath = path9.join(dirname, "repo.zip");
-  debug17("download URL: %s auth headers: %o", downloadUrl, authHeaders);
+  debug18("download URL: %s auth headers: %o", downloadUrl, authHeaders);
   const response = await fetch4(downloadUrl, {
     method: "GET",
     headers: {
@@ -11021,7 +11027,7 @@ async function downloadRepo({
     }
   });
   if (!response.ok) {
-    debug17("SCM zipball request failed %s %s", response.body, response.status);
+    debug18("SCM zipball request failed %s %s", response.body, response.status);
     repoSpinner.error({ text: "\u{1F4BE} Repo download failed" });
     throw new Error(`Can't access ${chalk5.bold(repoUrl)}`);
   }
@@ -11035,7 +11041,7 @@ async function downloadRepo({
   if (!repoRoot) {
     throw new Error("Repo root not found");
   }
-  debug17("repo root %s", repoRoot);
+  debug18("repo root %s", repoRoot);
   repoSpinner.success({ text: "\u{1F4BE} Repo downloaded successfully" });
   return path9.join(dirname, repoRoot);
 }
@@ -11044,9 +11050,9 @@ var getReportUrl = ({
   projectId,
   fixReportId
 }) => `${WEB_APP_URL}/organization/${organizationId}/project/${projectId}/report/${fixReportId}`;
-var debug17 = Debug18("mobbdev:index");
+var debug18 = Debug18("mobbdev:index");
 var config2 = new Configstore(packageJson.name, { apiToken: "" });
-debug17("config %o", config2);
+debug18("config %o", config2);
 async function runAnalysis(params, options) {
   const tmpObj = tmp2.dirSync({
     unsafeCleanup: true
@@ -11191,7 +11197,7 @@ async function _scan(params, { skipPrompts = false } = {}) {
     commitDirectly,
     pullRequest
   } = params;
-  debug17("start %s %s", dirname, repo);
+  debug18("start %s %s", dirname, repo);
   const { createSpinner: createSpinner5 } = Spinner2({ ci });
   skipPrompts = skipPrompts || ci;
   let gqlClient = new GQLClient({
@@ -11265,8 +11271,8 @@ async function _scan(params, { skipPrompts = false } = {}) {
     );
   }
   const { sha } = getReferenceDataRes.gitReference;
-  debug17("project id %s", projectId);
-  debug17("default branch %s", reference);
+  debug18("project id %s", projectId);
+  debug18("default branch %s", reference);
   if (command === "scan") {
     reportPath = await getReport(
       {
@@ -11648,7 +11654,7 @@ import chalkAnimation from "chalk-animation";
 import Configstore2 from "configstore";
 import Debug19 from "debug";
 import open3 from "open";
-var debug18 = Debug19("mobbdev:commands");
+var debug19 = Debug19("mobbdev:commands");
 async function review(params, { skipPrompts = true } = {}) {
   const {
     repo,
@@ -11839,9 +11845,9 @@ async function handleMobbLogin({
     });
     loginSpinner.spin();
     if (encryptedApiToken) {
-      debug18("encrypted API token received %s", encryptedApiToken);
+      debug19("encrypted API token received %s", encryptedApiToken);
       newApiToken = crypto.privateDecrypt(privateKey, Buffer.from(encryptedApiToken, "base64")).toString("utf-8");
-      debug18("API token decrypted");
+      debug19("API token decrypted");
       break;
     }
     await sleep(LOGIN_CHECK_DELAY);
@@ -11855,7 +11861,7 @@ async function handleMobbLogin({
   const newGqlClient = new GQLClient({ apiKey: newApiToken, type: "apiKey" });
   const loginSuccess = await newGqlClient.validateUserToken();
   if (loginSuccess) {
-    debug18(`set api token ${newApiToken}`);
+    debug19(`set api token ${newApiToken}`);
     config3.set("apiToken", newApiToken);
     loginSpinner.success({
       text: `\u{1F513} Login to Mobb successful! ${typeof loginSpinner === "string" ? `Logged in as ${loginSuccess}` : ""}`
@@ -14899,13 +14905,13 @@ var parseArgs = async (args) => {
 };
 
 // src/index.ts
-var debug19 = Debug20("mobbdev:index");
+var debug20 = Debug20("mobbdev:index");
 async function run() {
   return parseArgs(hideBin(process.argv));
 }
 (async () => {
   try {
-    debug19("Bugsy CLI v%s running...", packageJson.version);
+    debug20("Bugsy CLI v%s running...", packageJson.version);
     await run();
     process.exit(0);
   } catch (err) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mobbdev",
-  "version": "1.0.153",
+  "version": "1.0.155",
   "description": "Automated secure code remediation tool",
   "repository": "git+https://github.com/mobb-dev/bugsy.git",
   "main": "dist/index.js",
@@ -45,18 +45,18 @@
   "author": "",
   "license": "MIT",
   "dependencies": {
-    "@gitbeaker/requester-utils": "42.5.0",
-    "@gitbeaker/rest": "42.5.0",
-    "@modelcontextprotocol/sdk": "1.17.2",
+    "@gitbeaker/requester-utils": "43.4.0",
+    "@gitbeaker/rest": "43.4.0",
+    "@modelcontextprotocol/sdk": "1.17.4",
     "@octokit/core": "5.2.0",
     "@octokit/request-error": "5.1.1",
     "adm-zip": "0.5.16",
     "axios": "1.11.0",
     "azure-devops-node-api": "15.1.1",
     "bitbucket": "2.11.0",
-    "chalk": "5.5.0",
+    "chalk": "5.6.0",
     "chalk-animation": "2.0.3",
-    "configstore": "6.0.0",
+    "configstore": "7.0.0",
     "cross-fetch": "4.1.0",
     "debug": "4.4.1",
     "dotenv": "16.6.1",
@@ -70,7 +70,7 @@
     "ignore": "7.0.5",
     "inquirer": "9.3.7",
     "isomorphic-ws": "5.0.0",
-    "istextorbinary": "6.0.0",
+    "istextorbinary": "9.5.0",
     "libsodium-wrappers": "0.7.15",
     "multimatch": "7.0.0",
     "nanospinner": "1.1.0",
@@ -82,7 +82,7 @@
     "sax": "1.4.1",
     "semver": "7.7.2",
     "simple-git": "3.28.0",
-    "snyk": "1.1298.2",
+    "snyk": "1.1298.3",
     "tar": "6.2.1",
     "tmp": "0.2.5",
     "undici": "6.21.3",
@@ -103,7 +103,7 @@
     "@types/chalk-animation": "1.6.3",
     "@types/configstore": "6.0.2",
     "@types/debug": "4.1.12",
-    "@types/inquirer": "9.0.8",
+    "@types/inquirer": "9.0.9",
     "@types/libsodium-wrappers": "0.7.14",
     "@types/sax": "1.2.7",
     "@types/semver": "7.7.0",
@@ -126,7 +126,7 @@
     "nock": "14.0.10",
     "prettier": "3.6.2",
     "tsup": "8.5.0",
-    "typescript": "4.9.5",
+    "typescript": "5.9.2",
     "vitest": "3.2.4"
   },
   "engines": {