mobbdev 1.0.166 → 1.0.170

package/dist/index.mjs

@@ -968,6 +968,7 @@ var init_GitService = __esm({
           );
           const fileSet = /* @__PURE__ */ new Set();
           let commitsProcessed = 0;
+          const consideredFiles = [];
           for (const file of currentChanges.files) {
             if (fileSet.size >= maxFiles) {
               break;
@@ -1026,7 +1027,7 @@ var init_GitService = __esm({
                     path2.join(gitRoot, gitRelativePath)
                   );
                 }
-                this.log(`[GitService] Considering file: ${adjustedPath}`, "debug");
+                consideredFiles.push(adjustedPath);
                 if (!fileSet.has(adjustedPath) && await FileUtils.shouldPackFile(
                   path2.join(gitRoot, gitRelativePath)
                 ) && !adjustedPath.startsWith("..")) {
@@ -1044,6 +1045,13 @@ var init_GitService = __esm({
             }
           }
           const files = Array.from(fileSet);
+          if (consideredFiles.length > 0) {
+            this.log(
+              `[GitService] Considered ${consideredFiles.length} files during recent file search`,
+              "debug",
+              { consideredFiles }
+            );
+          }
           this.log("[GitService] Recently changed files retrieved", "info", {
             fileCount: files.length,
             commitsProcessed,
@@ -1655,6 +1663,7 @@ var IssueType_Enum = /* @__PURE__ */ ((IssueType_Enum2) => {
   IssueType_Enum2["RegexInjection"] = "REGEX_INJECTION";
   IssueType_Enum2["RegexMissingTimeout"] = "REGEX_MISSING_TIMEOUT";
   IssueType_Enum2["RequestParametersBoundViaInput"] = "REQUEST_PARAMETERS_BOUND_VIA_INPUT";
+  IssueType_Enum2["ReturnInInit"] = "RETURN_IN_INIT";
   IssueType_Enum2["ReturnShouldNotBeInvariant"] = "RETURN_SHOULD_NOT_BE_INVARIANT";
   IssueType_Enum2["SpringDefaultPermit"] = "SPRING_DEFAULT_PERMIT";
   IssueType_Enum2["SqlInjection"] = "SQL_Injection";
@@ -2743,7 +2752,8 @@ var fixDetailsData = {
   ["MISSING_TEMPLATE_STRING_INDICATOR" /* MissingTemplateStringIndicator */]: void 0,
   ["NO_ASSERT" /* NoAssert */]: void 0,
   ["FUNCTION_CALL_WITHOUT_PARENTHESES" /* FunctionCallWithoutParentheses */]: void 0,
-  ["SPRING_DEFAULT_PERMIT" /* SpringDefaultPermit */]: void 0
+  ["SPRING_DEFAULT_PERMIT" /* SpringDefaultPermit */]: void 0,
+  ["RETURN_IN_INIT" /* ReturnInInit */]: void 0
 };
 
 // src/features/analysis/scm/shared/src/getIssueType.ts
@@ -2879,7 +2889,8 @@ var issueTypeMap = {
   ["USELESS_IF_BODY" /* UselessIfBody */]: "Useless If Body",
   ["NO_ASSERT" /* NoAssert */]: "No Assert",
   ["FUNCTION_CALL_WITHOUT_PARENTHESES" /* FunctionCallWithoutParentheses */]: "Function Call Without Parentheses",
-  ["SPRING_DEFAULT_PERMIT" /* SpringDefaultPermit */]: "Spring Default Permit"
+  ["SPRING_DEFAULT_PERMIT" /* SpringDefaultPermit */]: "Spring Default Permit",
+  ["RETURN_IN_INIT" /* ReturnInInit */]: "Return in Init"
 };
 var issueTypeZ = z.nativeEnum(IssueType_Enum);
 var getIssueTypeFriendlyString = (issueType) => {
@@ -5201,7 +5212,7 @@ var ReportFixesQueryFixZ = z11.object({
     })
   ).min(1)
 });
-var VulnerabilityReportIssueZ = z11.object({
+var BaseVulnerabilityReportIssueZ = z11.object({
   id: z11.string().uuid(),
   createdAt: z11.string(),
   state: z11.nativeEnum(Vulnerability_Report_Issue_State_Enum),
@@ -5220,7 +5231,6 @@ var VulnerabilityReportIssueZ = z11.object({
   severity: z11.string(),
   severityValue: z11.number(),
   category: z11.string(),
-  codeNodes: z11.array(z11.object({ path: z11.string() })),
   vulnerabilityReportIssueTags: z11.array(
     z11.object({
       vulnerability_report_issue_tag_value: z11.string()
@@ -5228,6 +5238,18 @@ var VulnerabilityReportIssueZ = z11.object({
   ),
   sharedState: VulnerabilityReportIssueSharedStateZ
 });
+var VulnerabilityReportIssueZ = BaseVulnerabilityReportIssueZ.merge(
+  z11.object({
+    codeNodes: z11.array(z11.object({ path: z11.string() }))
+  })
+);
+var VulnerabilityReportIssueWithCodeFilePathZ = BaseVulnerabilityReportIssueZ.merge(
+  z11.object({
+    codeFilePath: z11.string().nullable(),
+    //TODO: REMOVE THIS once we flush out all the reports that don't have codeFilePath
+    codeNodes: z11.array(z11.object({ path: z11.string() }))
+  })
+);
 var GetReportIssuesQueryZ = z11.object({
   fixReport: z11.object({
     vulnerabilityReport: z11.object({
@@ -5236,7 +5258,9 @@ var GetReportIssuesQueryZ = z11.object({
       vulnerabilityReportIssues_aggregate: z11.object({
         aggregate: z11.object({ count: z11.number() })
       }),
-      vulnerabilityReportIssues: z11.array(VulnerabilityReportIssueZ)
+      vulnerabilityReportIssues: z11.array(
+        VulnerabilityReportIssueWithCodeFilePathZ
+      )
     })
   }).array()
 }).nullish();

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "mobbdev",
-  "version": "1.0.166",
+  "version": "1.0.170",
   "description": "Automated secure code remediation tool",
   "repository": "git+https://github.com/mobb-dev/bugsy.git",
-  "main": "dist/index.js",
-  "module": "dist/index.js",
+  "main": "dist/index.mjs",
+  "module": "dist/index.mjs",
   "scripts": {
     "clean": "rm -rf build",
     "env": "dotenv -e ./.env",
@@ -12,15 +12,15 @@
     "build": "tsc && tsup-node --env.NODE_ENV production",
     "build:dev": "tsup-node --env.NODE_ENV development",
     "increment-version": "./src/scripts/increment-version.sh",
-    "test:mcp": "pnpm run build && vitest run __tests__/mcp/",
+    "test:unit:mcp": "vitest run __tests__/mcp/",
     "test:mcp:watch": "vitest watch __tests__/mcp/",
     "test:mcp:verbose": "pnpm run build && NODE_ENV=test VERBOSE=true vitest run __tests__/mcp/",
-    "test:mcp:integration": "pnpm run build && GIT_PROXY_HOST=http://tinyproxy:8888 API_URL=http://app-api:8080/v1/graphql TOKEN=$(../../scripts/login_auth0.sh) vitest run --sequence.concurrent=false false __tests__/integration.test.ts -t 'mcp|MCP'",
-    "test:mcp:all": "pnpm run test:mcp && pnpm run test:mcp:integration && cd ./__e2e__ && npm i && npm run test:mcp",
-    "test:unit": "GIT_PROXY_HOST=http://tinyproxy:8888 TOKEN=$(../../scripts/login_auth0.sh) vitest run --exclude='**/__tests__/integration.test.ts' --exclude='**/__tests__/mcp/**'",
+    "test:mcp:all": "pnpm run test:unit:mcp && pnpm run test:integration:mcp && pnpm run test:e2e:mcp",
+    "test:unit": "GIT_PROXY_HOST=http://tinyproxy:8888 TOKEN=$(../../scripts/login_auth0.sh) vitest run --exclude='**/__tests__/integration.test.ts' --exclude='**/__tests__/integration.mcp.test.ts' --exclude='**/__tests__/mcp/**'",
     "test:integration": "GIT_PROXY_HOST=http://tinyproxy:8888 TOKEN=$(../../scripts/login_auth0.sh) vitest run --sequence.concurrent=false false __tests__/integration.test.ts",
+    "test:integration:mcp": "GIT_PROXY_HOST=http://tinyproxy:8888 TOKEN=$(../../scripts/login_auth0.sh) vitest run --sequence.concurrent=false false __tests__/integration.mcp.test.ts",
     "test:integration:watch": "GIT_PROXY_HOST=http://tinyproxy:8888 TOKEN=$(../../scripts/login_auth0.sh) vitest watch run __tests__/integration.test.ts",
-    "test": "pnpm run test:unit && pnpm run test:mcp && pnpm run test:integration",
+    "test": "pnpm run test:unit && pnpm run test:integration",
     "test:ado": "GIT_PROXY_HOST=http://tinyproxy:8888 TOKEN=$(../../scripts/login_auth0.sh) vitest run ado.test",
     "test:github": "GIT_PROXY_HOST=http://tinyproxy:8888 TOKEN=$(../../scripts/login_auth0.sh) vitest run github.test",
     "test:gitlab": "GIT_PROXY_HOST=http://tinyproxy:8888 TOKEN=$(../../scripts/login_auth0.sh) vitest run gitlab.test",
@@ -30,13 +30,14 @@
     "test:watch": "TOKEN=$(../../scripts/login_auth0.sh) vitest",
     "test:integration:proxy": "GIT_PROXY_HOST=http://tinyproxy:8888 HTTP_PROXY=http://localhost:8888 API_URL=http://app-api:8080/v1/graphql TOKEN=$(../../scripts/login_auth0.sh) vitest run --sequence.concurrent=false false integration.test.ts",
     "lint": "eslint --cache --max-warnings 0 --ignore-path .eslintignore --ext .ts,.tsx,.jsx,.graphql .",
+    "lint:fix": "eslint --fix --cache --max-warnings 0 --ignore-path .eslintignore --ext .js,.ts,.tsx,.jsx,.graphql . && prettier --write \"src/**/*.graphql\"",
     "lint:fix:files": "eslint --fix --cache --max-warnings 0 --ignore-path .eslintignore --ext .js,.ts,.tsx,.jsx,.graphql",
     "prepack": "dotenv-vault pull production .env && pnpm build",
     "dev:mcp": "pnpm run build && node dist/index.mjs mcp",
     "debug:mcp": "pnpm run build && node dist/index.mjs mcp --debug",
     "generate": "pnpm run env -- graphql-codegen -r dotenv/config --config client_codegen.ts",
-    "test:e2e": "cd ./__e2e__ && npm i && npm run test && npm run test:mcp",
-    "test:e2e:mcp": "cd ./__e2e__ && npm i && npm run test:mcp"
+    "test:e2e": "cd ./__e2e__ && npm i && npm run test",
+    "test:e2e:mcp": "pnpm run build && cd ./__e2e__ && npm i && npm run test:mcp"
   },
   "bin": {
     "mobbdev": "bin/cli.mjs"