mobbdev 1.2.22 → 1.2.27

package/dist/args/commands/upload_ai_blame.mjs

@@ -237,6 +237,7 @@ var init_client_generates = __esm({
       IssueType_Enum2["DuplicatedStrings"] = "DUPLICATED_STRINGS";
       IssueType_Enum2["ErroneousStringCompare"] = "ERRONEOUS_STRING_COMPARE";
       IssueType_Enum2["ErrorCondtionWithoutAction"] = "ERROR_CONDTION_WITHOUT_ACTION";
+      IssueType_Enum2["ExcessiveSecretsExposure"] = "EXCESSIVE_SECRETS_EXPOSURE";
       IssueType_Enum2["FrameableLoginPage"] = "FRAMEABLE_LOGIN_PAGE";
       IssueType_Enum2["FunctionCallWithoutParentheses"] = "FUNCTION_CALL_WITHOUT_PARENTHESES";
       IssueType_Enum2["GhActionsShellInjection"] = "GH_ACTIONS_SHELL_INJECTION";
@@ -881,6 +882,7 @@ var init_client_generates = __esm({
     ... on ProcessAIBlameRequestedResult {
       status
       requestIds
+      commitBlameRequestIds
     }
   }
 }
@@ -1711,7 +1713,8 @@ var init_getIssueType = __esm({
       ["ACTION_NOT_PINNED_TO_COMMIT_SHA" /* ActionNotPinnedToCommitSha */]: "Action Not Pinned to Commit Sha",
       ["DJANGO_BLANK_FIELD_NEEDS_NULL_OR_DEFAULT" /* DjangoBlankFieldNeedsNullOrDefault */]: "Django Blank Field Needs Null or Default",
       ["REDUNDANT_NIL_ERROR_CHECK" /* RedundantNilErrorCheck */]: "Redundant Nil Error Check",
-      ["MISSING_WORKFLOW_PERMISSIONS" /* MissingWorkflowPermissions */]: "Missing Workflow Permissions"
+      ["MISSING_WORKFLOW_PERMISSIONS" /* MissingWorkflowPermissions */]: "Missing Workflow Permissions",
+      ["EXCESSIVE_SECRETS_EXPOSURE" /* ExcessiveSecretsExposure */]: "Excessive Secrets Exposure"
     };
     issueTypeZ = z5.nativeEnum(IssueType_Enum);
     getIssueTypeFriendlyString = (issueType) => {
@@ -2571,11 +2574,20 @@ var init_urlParser = __esm({
   }
 });
 
+// src/features/analysis/scm/shared/src/urlParser/repoSlug.ts
+var init_repoSlug = __esm({
+  "src/features/analysis/scm/shared/src/urlParser/repoSlug.ts"() {
+    "use strict";
+    init_urlParser();
+  }
+});
+
 // src/features/analysis/scm/shared/src/urlParser/index.ts
 var init_urlParser2 = __esm({
   "src/features/analysis/scm/shared/src/urlParser/index.ts"() {
     "use strict";
     init_types2();
+    init_repoSlug();
     init_urlParser();
   }
 });
@@ -4210,7 +4222,9 @@ function subscribeStream(query, variables, handlers, wsClientOptions) {
         finalizeError(error);
       },
       complete: () => {
-        return;
+        finalizeError(
+          new Error("Subscription completed by server before resolving")
+        );
       }
     }
   );
@@ -4544,7 +4558,8 @@ var fixDetailsData = {
   ["ACTION_NOT_PINNED_TO_COMMIT_SHA" /* ActionNotPinnedToCommitSha */]: void 0,
   ["DJANGO_BLANK_FIELD_NEEDS_NULL_OR_DEFAULT" /* DjangoBlankFieldNeedsNullOrDefault */]: void 0,
   ["REDUNDANT_NIL_ERROR_CHECK" /* RedundantNilErrorCheck */]: void 0,
-  ["MISSING_WORKFLOW_PERMISSIONS" /* MissingWorkflowPermissions */]: void 0
+  ["MISSING_WORKFLOW_PERMISSIONS" /* MissingWorkflowPermissions */]: void 0,
+  ["EXCESSIVE_SECRETS_EXPOSURE" /* ExcessiveSecretsExposure */]: void 0
 };
 
 // src/features/analysis/scm/shared/src/commitDescriptionMarkup.ts
@@ -6146,9 +6161,6 @@ var GetReferenceResultZ = z14.object({
   type: z14.nativeEnum(ReferenceType)
 });
 
-// src/features/analysis/scm/utils/diffUtils.ts
-import parseDiff from "parse-diff";
-
 // src/features/analysis/scm/ado/constants.ts
 init_types2();
 var DEFUALT_ADO_ORIGIN = scmCloudUrl.Ado;
@@ -6249,8 +6261,6 @@ var REPORT_DEFAULT_FILE_NAME = "report.json";
 init_env();
 
 // src/features/analysis/scm/github/GithubSCMLib.ts
-init_env();
-import pLimit from "p-limit";
 import { z as z22 } from "zod";
 init_client_generates();
 
@@ -6274,7 +6284,7 @@ import {
   Gitlab
 } from "@gitbeaker/rest";
 import Debug4 from "debug";
-import pLimit2 from "p-limit";
+import pLimit from "p-limit";
 import {
   Agent,
   fetch as undiciFetch,

package/dist/index.mjs

@@ -237,6 +237,7 @@ var init_client_generates = __esm({
       IssueType_Enum2["DuplicatedStrings"] = "DUPLICATED_STRINGS";
       IssueType_Enum2["ErroneousStringCompare"] = "ERRONEOUS_STRING_COMPARE";
       IssueType_Enum2["ErrorCondtionWithoutAction"] = "ERROR_CONDTION_WITHOUT_ACTION";
+      IssueType_Enum2["ExcessiveSecretsExposure"] = "EXCESSIVE_SECRETS_EXPOSURE";
       IssueType_Enum2["FrameableLoginPage"] = "FRAMEABLE_LOGIN_PAGE";
       IssueType_Enum2["FunctionCallWithoutParentheses"] = "FUNCTION_CALL_WITHOUT_PARENTHESES";
       IssueType_Enum2["GhActionsShellInjection"] = "GH_ACTIONS_SHELL_INJECTION";
@@ -881,6 +882,7 @@ var init_client_generates = __esm({
     ... on ProcessAIBlameRequestedResult {
       status
       requestIds
+      commitBlameRequestIds
     }
   }
 }
@@ -1411,7 +1413,8 @@ var init_getIssueType = __esm({
       ["ACTION_NOT_PINNED_TO_COMMIT_SHA" /* ActionNotPinnedToCommitSha */]: "Action Not Pinned to Commit Sha",
       ["DJANGO_BLANK_FIELD_NEEDS_NULL_OR_DEFAULT" /* DjangoBlankFieldNeedsNullOrDefault */]: "Django Blank Field Needs Null or Default",
       ["REDUNDANT_NIL_ERROR_CHECK" /* RedundantNilErrorCheck */]: "Redundant Nil Error Check",
-      ["MISSING_WORKFLOW_PERMISSIONS" /* MissingWorkflowPermissions */]: "Missing Workflow Permissions"
+      ["MISSING_WORKFLOW_PERMISSIONS" /* MissingWorkflowPermissions */]: "Missing Workflow Permissions",
+      ["EXCESSIVE_SECRETS_EXPOSURE" /* ExcessiveSecretsExposure */]: "Excessive Secrets Exposure"
     };
     issueTypeZ = z.nativeEnum(IssueType_Enum);
     getIssueTypeFriendlyString = (issueType) => {
@@ -2620,11 +2623,20 @@ var init_urlParser = __esm({
   }
 });
 
+// src/features/analysis/scm/shared/src/urlParser/repoSlug.ts
+var init_repoSlug = __esm({
+  "src/features/analysis/scm/shared/src/urlParser/repoSlug.ts"() {
+    "use strict";
+    init_urlParser();
+  }
+});
+
 // src/features/analysis/scm/shared/src/urlParser/index.ts
 var init_urlParser2 = __esm({
   "src/features/analysis/scm/shared/src/urlParser/index.ts"() {
     "use strict";
     init_types2();
+    init_repoSlug();
     init_urlParser();
   }
 });
@@ -4274,7 +4286,8 @@ var fixDetailsData = {
   ["ACTION_NOT_PINNED_TO_COMMIT_SHA" /* ActionNotPinnedToCommitSha */]: void 0,
   ["DJANGO_BLANK_FIELD_NEEDS_NULL_OR_DEFAULT" /* DjangoBlankFieldNeedsNullOrDefault */]: void 0,
   ["REDUNDANT_NIL_ERROR_CHECK" /* RedundantNilErrorCheck */]: void 0,
-  ["MISSING_WORKFLOW_PERMISSIONS" /* MissingWorkflowPermissions */]: void 0
+  ["MISSING_WORKFLOW_PERMISSIONS" /* MissingWorkflowPermissions */]: void 0,
+  ["EXCESSIVE_SECRETS_EXPOSURE" /* ExcessiveSecretsExposure */]: void 0
 };
 
 // src/features/analysis/scm/shared/src/commitDescriptionMarkup.ts
@@ -6109,34 +6122,6 @@ var GetReferenceResultZ = z13.object({
   type: z13.nativeEnum(ReferenceType)
 });
 
-// src/features/analysis/scm/utils/diffUtils.ts
-import parseDiff from "parse-diff";
-function parseAddedLinesByFile(diff) {
-  const result = /* @__PURE__ */ new Map();
-  const parsedDiff = parseDiff(diff);
-  for (const file of parsedDiff) {
-    if (!file.to || file.to === "/dev/null") {
-      continue;
-    }
-    const filePath = file.to;
-    const addedLines = [];
-    if (file.chunks) {
-      for (const chunk of file.chunks) {
-        for (const change of chunk.changes) {
-          if (change.type === "add") {
-            const addChange = change;
-            addedLines.push(addChange.ln);
-          }
-        }
-      }
-    }
-    if (addedLines.length > 0) {
-      result.set(filePath, addedLines);
-    }
-  }
-  return result;
-}
-
 // src/features/analysis/scm/utils/scm.ts
 var safeBody = (body, maxBodyLength) => {
   const truncationNotice = "\n\n... Message was cut here because it is too long";
@@ -7101,28 +7086,16 @@ var SCMLib = class {
    *
    * @param repoUrl - Repository URL
    * @param prNumbers - Array of PR numbers to fetch commits for
-   * @returns Map of PR number to array of commit SHAs
+   * @returns Map of PR number to array of commit SHAs in chronological order
+   *          (oldest first, HEAD commit last)
    */
   async getPrCommitsBatch(_repoUrl, _prNumbers) {
     throw new Error("getPrCommitsBatch not implemented for this SCM provider");
   }
-  /**
-   * Fetches additions and deletions counts for multiple PRs in batch.
-   * More efficient than fetching individual PR details.
-   *
-   * @param repoUrl - Repository URL
-   * @param prNumbers - Array of PR numbers to fetch metrics for
-   * @returns Map of PR number to additions/deletions count
-   */
-  async getPrAdditionsDeletionsBatch(_repoUrl, _prNumbers) {
-    throw new Error(
-      "getPrAdditionsDeletionsBatch not implemented for this SCM provider"
-    );
-  }
   /**
    * Batch fetch PR data (additions/deletions + comments) for multiple PRs.
    * Only implemented for GitHub (via GraphQL). Other providers should override if supported.
-   * This is more efficient than calling getPrAdditionsDeletionsBatch separately.
+   * This is more efficient than calling separate batch methods.
    *
    * @param _repoUrl - Repository URL
    * @param _prNumbers - Array of PR numbers to fetch data for
@@ -7364,11 +7337,8 @@ var AdoSCMLib = class extends SCMLib {
       markdownComment: comment
     });
   }
-  async getCommitDiff(_commitSha) {
-    throw new Error("getCommitDiff not implemented for ADO");
-  }
-  async getSubmitRequestDiff(_submitRequestId) {
-    throw new Error("getSubmitRequestDiff not implemented for ADO");
+  async getSubmitRequestMetadata(_submitRequestId) {
+    throw new Error("getSubmitRequestMetadata not implemented for ADO");
   }
   async searchSubmitRequests(_params) {
     throw new Error("searchSubmitRequests not implemented for ADO");
@@ -7946,11 +7916,8 @@ var BitbucketSCMLib = class extends SCMLib {
       markdownComment: comment
     });
   }
-  async getCommitDiff(_commitSha) {
-    throw new Error("getCommitDiff not implemented for Bitbucket");
-  }
-  async getSubmitRequestDiff(_submitRequestId) {
-    throw new Error("getSubmitRequestDiff not implemented for Bitbucket");
+  async getSubmitRequestMetadata(_submitRequestId) {
+    throw new Error("getSubmitRequestMetadata not implemented for Bitbucket");
   }
   async searchSubmitRequests(_params) {
     throw new Error("searchSubmitRequests not implemented for Bitbucket");
@@ -7980,8 +7947,6 @@ var REPORT_DEFAULT_FILE_NAME = "report.json";
 init_env();
 
 // src/features/analysis/scm/github/GithubSCMLib.ts
-init_env();
-import pLimit from "p-limit";
 import { z as z21 } from "zod";
 init_client_generates();
 
@@ -8054,18 +8019,6 @@ var GET_PR_METRICS_QUERY = `
         mergedAt
         additions
         deletions
-        commits(first: 100) {
-          totalCount
-          nodes {
-            commit {
-              oid
-              committedDate
-              author {
-                date
-              }
-            }
-          }
-        }
         comments(first: 100) {
           totalCount
           nodes {
@@ -8506,33 +8459,6 @@ function getGithubSdk(params = {}) {
         commit_sha: commitSha
       });
     },
-    async getCommitWithDiff({
-      commitSha,
-      owner,
-      repo
-    }) {
-      const [commitData, diffData] = await Promise.all([
-        // Get commit metadata
-        octokit.rest.repos.getCommit({
-          repo,
-          owner,
-          ref: commitSha
-        }),
-        // Get commit diff
-        octokit.request("GET /repos/{owner}/{repo}/commits/{ref}", {
-          owner,
-          repo,
-          ref: commitSha,
-          headers: {
-            Accept: "application/vnd.github.v3.diff"
-          }
-        })
-      ]);
-      return {
-        commit: commitData.data,
-        diff: diffData.data
-      };
-    },
     async getTagDate({
       tag,
       owner,
@@ -8716,14 +8642,6 @@ function getGithubSdk(params = {}) {
     async getUserInfo() {
       return octokit.request(GET_USER);
     },
-    async getPrCommits(params2) {
-      const data = await octokit.paginate(octokit.rest.pulls.listCommits, {
-        owner: params2.owner,
-        repo: params2.repo,
-        pull_number: params2.pull_number
-      });
-      return { data };
-    },
     async getUserRepos() {
       return octokit.rest.repos.listForAuthenticatedUser({
         visibility: "all",
@@ -8767,30 +8685,6 @@ function getGithubSdk(params = {}) {
       });
       return { data };
     },
-    /**
-     * Batch fetch additions/deletions for multiple PRs via GraphQL.
-     * Uses GITHUB_GRAPHQL_FRAGMENTS.PR_CHANGES for the field selection.
-     */
-    async getPrAdditionsDeletionsBatch(params2) {
-      return executeBatchGraphQL(octokit, params2.owner, params2.repo, {
-        items: params2.prNumbers,
-        aliasPrefix: "pr",
-        buildFragment: (prNumber, index) => `
-          pr${index}: pullRequest(number: ${prNumber}) {
-            ${GITHUB_GRAPHQL_FRAGMENTS.PR_CHANGES}
-          }`,
-        extractResult: (data) => {
-          const prData = data;
-          if (prData.additions !== void 0 && prData.deletions !== void 0) {
-            return {
-              additions: prData.additions,
-              deletions: prData.deletions
-            };
-          }
-          return void 0;
-        }
-      });
-    },
     /**
      * Batch fetch comments for multiple PRs via GraphQL.
      * Uses GITHUB_GRAPHQL_FRAGMENTS.PR_COMMENTS for the field selection.
@@ -8818,7 +8712,7 @@ function getGithubSdk(params = {}) {
     /**
      * Batch fetch PR data (additions/deletions + comments) for multiple PRs via GraphQL.
      * Combines PR_CHANGES and PR_COMMENTS fragments into a single API call for efficiency.
-     * This is more efficient than calling getPrAdditionsDeletionsBatch and getPrCommentsBatch separately.
+     * This is more efficient than calling separate batch methods.
      */
     async getPrDataBatch(params2) {
       return executeBatchGraphQL(octokit, params2.owner, params2.repo, {
@@ -9209,82 +9103,21 @@ var GithubSCMLib = class _GithubSCMLib extends SCMLib {
       comment_id: commentId
     });
   }
-  async getCommitDiff(commitSha, options) {
+  async getSubmitRequestMetadata(submitRequestId) {
     this._validateAccessTokenAndUrl();
     const { owner, repo } = parseGithubOwnerAndRepo(this.url);
-    const { commit, diff } = await this.githubSdk.getCommitWithDiff({
+    const prNumber = Number(submitRequestId);
+    const prRes = await this.githubSdk.getPr({
       owner,
       repo,
-      commitSha
+      pull_number: prNumber
     });
-    const commitTimestamp = commit.commit.committer?.date ? new Date(commit.commit.committer.date) : new Date(commit.commit.author?.date || Date.now());
-    let repositoryCreatedAt = options?.repositoryCreatedAt;
-    if (repositoryCreatedAt === void 0) {
-      try {
-        const repoData = await this.githubSdk.getRepository({ owner, repo });
-        repositoryCreatedAt = repoData.data.created_at ? new Date(repoData.data.created_at) : void 0;
-      } catch (error) {
-        console.error("Failed to fetch repository creation date", {
-          error,
-          owner,
-          repo
-        });
-        repositoryCreatedAt = void 0;
-      }
-    }
-    return {
-      diff,
-      commitTimestamp,
-      commitSha: commit.sha,
-      authorName: commit.commit.author?.name,
-      authorEmail: commit.commit.author?.email,
-      message: commit.commit.message,
-      repositoryCreatedAt
-    };
-  }
-  async getSubmitRequestDiff(submitRequestId) {
-    this._validateAccessTokenAndUrl();
-    const { owner, repo } = parseGithubOwnerAndRepo(this.url);
-    const prNumber = Number(submitRequestId);
-    const [prRes, commitsRes, repoData, prDiff] = await Promise.all([
-      this.githubSdk.getPr({ owner, repo, pull_number: prNumber }),
-      this.githubSdk.getPrCommits({ owner, repo, pull_number: prNumber }),
-      this.githubSdk.getRepository({ owner, repo }),
-      this.getPrDiff({ pull_number: prNumber })
-    ]);
     const pr = prRes.data;
-    const repositoryCreatedAt = repoData.data.created_at ? new Date(repoData.data.created_at) : void 0;
-    const limit = pLimit(GITHUB_API_CONCURRENCY);
-    const commits = await Promise.all(
-      commitsRes.data.map(
-        (commit) => limit(
-          () => this.getCommitDiff(commit.sha, {
-            repositoryCreatedAt
-          })
-        )
-      )
-    );
-    const addedLinesByFile = parseAddedLinesByFile(prDiff);
-    const diffLines = [];
-    for (const [file, lines] of addedLinesByFile) {
-      for (const line of lines) {
-        diffLines.push({ file, line });
-      }
-    }
     return {
-      diff: prDiff,
-      createdAt: new Date(pr.created_at),
-      updatedAt: new Date(pr.updated_at),
-      submitRequestId,
-      submitRequestNumber: prNumber,
-      sourceBranch: pr.head.ref,
-      targetBranch: pr.base.ref,
-      authorName: pr.user?.name || pr.user?.login,
-      authorEmail: pr.user?.email || void 0,
       title: pr.title,
-      description: pr.body || void 0,
-      commits,
-      diffLines
+      targetBranch: pr.base.ref,
+      sourceBranch: pr.head.ref,
+      headCommitSha: pr.head.sha
     };
   }
   /**
@@ -9342,7 +9175,7 @@ var GithubSCMLib = class _GithubSCMLib extends SCMLib {
   }
   /**
    * Fetches commits for multiple PRs in a single GraphQL request.
-   * Much more efficient than calling getSubmitRequestDiff for each PR.
+   * Much more efficient than fetching commits for each PR individually.
    *
    * @param repoUrl - Repository URL
    * @param prNumbers - Array of PR numbers to fetch commits for
@@ -9353,23 +9186,6 @@ var GithubSCMLib = class _GithubSCMLib extends SCMLib {
     const { owner, repo } = parseGithubOwnerAndRepo(repoUrl);
     return this.githubSdk.getPrCommitsBatch({ owner, repo, prNumbers });
   }
-  /**
-   * Fetches additions and deletions counts for multiple PRs in a single GraphQL request.
-   * Used to enrich search results with changed lines data.
-   *
-   * @param repoUrl - Repository URL
-   * @param prNumbers - Array of PR numbers to fetch metrics for
-   * @returns Map of PR number to additions/deletions count
-   */
-  async getPrAdditionsDeletionsBatch(repoUrl, prNumbers) {
-    this._validateAccessToken();
-    const { owner, repo } = parseGithubOwnerAndRepo(repoUrl);
-    return this.githubSdk.getPrAdditionsDeletionsBatch({
-      owner,
-      repo,
-      prNumbers
-    });
-  }
   /**
    * Batch fetch PR data (additions/deletions + comments) for multiple PRs.
    * Combines both metrics into a single GraphQL call for efficiency.
@@ -9469,19 +9285,6 @@ var GithubSCMLib = class _GithubSCMLib extends SCMLib {
       throw new Error(`Pull request #${prNumber} not found`);
     }
     const prStatus = determinePrStatus(pr.state, pr.isDraft);
-    const firstCommit = pr.commits.nodes[0];
-    const firstCommitDate = firstCommit ? new Date(
-      firstCommit.commit.author?.date || firstCommit.commit.committedDate || pr.createdAt
-    ) : null;
-    let commitShas = pr.commits.nodes.map((node) => node.commit.oid);
-    if (pr.commits.totalCount > 100) {
-      const commitsRes = await this.githubSdk.getPrCommits({
-        owner,
-        repo,
-        pull_number: prNumber
-      });
-      commitShas = commitsRes.data.map((c) => c.sha);
-    }
     let commentIds = pr.comments.nodes.map((node) => node.id);
     if (pr.comments.totalCount > 100) {
       const commentsRes = await this.githubSdk.getGeneralPrComments({
@@ -9496,10 +9299,7 @@ var GithubSCMLib = class _GithubSCMLib extends SCMLib {
       repositoryUrl: this.url,
       prCreatedAt: new Date(pr.createdAt),
       prMergedAt: pr.mergedAt ? new Date(pr.mergedAt) : null,
-      firstCommitDate,
       linesAdded: pr.additions,
-      commitsCount: pr.commits.totalCount,
-      commitShas,
       prStatus,
       commentIds
     };
@@ -9537,7 +9337,7 @@ import {
   Gitlab
 } from "@gitbeaker/rest";
 import Debug3 from "debug";
-import pLimit2 from "p-limit";
+import pLimit from "p-limit";
 import {
   Agent,
   fetch as undiciFetch,
@@ -9619,14 +9419,6 @@ function removeTrailingSlash2(str) {
   return str.trim().replace(/\/+$/, "");
 }
 var MAX_GITLAB_PR_BODY_LENGTH = 1048576;
-function buildUnifiedDiff(diffs) {
-  return diffs.filter((d) => d.diff).map((d) => {
-    const oldPath = d.old_path || d.new_path || "";
-    const newPath = d.new_path || d.old_path || "";
-    return `diff --git a/${oldPath} b/${newPath}
-${d.diff}`;
-  }).join("\n");
-}
 function getRandomGitlabCloudAnonToken() {
   if (!GITLAB_API_TOKEN || typeof GITLAB_API_TOKEN !== "string") {
     return void 0;
@@ -9776,34 +9568,74 @@ async function getGitlabIsRemoteBranch({
     return false;
   }
 }
-async function getGitlabRepoList(url, accessToken) {
+async function searchGitlabProjects({
+  url,
+  accessToken,
+  perPage = 20,
+  page = 1
+}) {
+  if (perPage > GITLAB_MAX_PER_PAGE) {
+    throw new Error(
+      `perPage ${perPage} exceeds GitLab maximum of ${GITLAB_MAX_PER_PAGE}`
+    );
+  }
   const api2 = getGitBeaker({ url, gitlabAuthToken: accessToken });
-  const res = await api2.Projects.all({
-    membership: true,
-    //TODO: a bug in the sorting mechanism of this api call
-    //disallows us to sort by updated_at in descending order
-    //so we have to sort by updated_at in ascending order.
-    //We can wait for the bug to be fixed or call the api
-    //directly with fetch()
-    sort: "asc",
-    orderBy: "updated_at",
-    perPage: 100
-  });
-  return Promise.all(
-    res.map(async (project) => {
-      const proj = await api2.Projects.show(project.id);
-      const owner = proj.namespace.name;
-      const repoLanguages = await api2.Projects.showLanguages(project.id);
-      return {
-        repoName: project.path,
-        repoUrl: project.web_url,
-        repoOwner: owner,
-        repoLanguages: Object.keys(repoLanguages),
-        repoIsPublic: project.visibility === "public",
-        repoUpdatedAt: project.last_activity_at
-      };
-    })
-  );
+  let response;
+  try {
+    response = await api2.Projects.all({
+      membership: true,
+      orderBy: "last_activity_at",
+      sort: "desc",
+      pagination: "offset",
+      perPage,
+      page,
+      showExpanded: true
+    });
+  } catch (e) {
+    debug4(
+      "[searchGitlabProjects] order_by=last_activity_at failed, falling back to created_at: %s",
+      e instanceof Error ? e.message : String(e)
+    );
+    response = await api2.Projects.all({
+      membership: true,
+      orderBy: "created_at",
+      sort: "desc",
+      pagination: "offset",
+      perPage,
+      page,
+      showExpanded: true
+    });
+  }
+  const projects = response.data.map((p) => ({
+    id: p.id,
+    path: p.path,
+    web_url: p.web_url,
+    namespace_name: p.namespace?.name ?? "",
+    visibility: p.visibility,
+    last_activity_at: p.last_activity_at
+  }));
+  return {
+    projects,
+    hasMore: response.paginationInfo.next !== null
+  };
+}
+async function getGitlabProjectLanguages({
+  url,
+  accessToken,
+  projectId
+}) {
+  try {
+    const api2 = getGitBeaker({ url, gitlabAuthToken: accessToken });
+    const languages3 = await api2.Projects.showLanguages(projectId);
+    return Object.keys(languages3);
+  } catch (e) {
+    debug4(
+      "[getGitlabProjectLanguages] Failed for project %d: %s",
+      projectId,
+      e instanceof Error ? e.message : String(e)
+    );
+    return [];
+  }
 }
 async function getGitlabBranchList({
   accessToken,
@@ -9873,6 +9705,11 @@ async function searchGitlabMergeRequests({
   perPage = GITLAB_PER_PAGE,
   page = 1
 }) {
+  if (perPage > GITLAB_MAX_PER_PAGE) {
+    throw new Error(
+      `perPage ${perPage} exceeds GitLab maximum of ${GITLAB_MAX_PER_PAGE}`
+    );
+  }
   const { projectPath } = parseGitlabOwnerAndRepo(repoUrl);
   debug4(
     "[searchGitlabMergeRequests] Fetching MRs for %s (page=%d, perPage=%d)",
@@ -9884,16 +9721,17 @@ async function searchGitlabMergeRequests({
     url: repoUrl,
     gitlabAuthToken: accessToken
   });
-  const mergeRequests = await api2.MergeRequests.all({
+  const response = await api2.MergeRequests.all({
     projectId: projectPath,
     state: state === "all" ? void 0 : state,
     updatedAfter: updatedAfter?.toISOString(),
     orderBy,
     sort,
     perPage,
-    page
+    page,
+    showExpanded: true
   });
-  const items = mergeRequests.map((mr) => ({
+  const items = response.data.map((mr) => ({
     iid: mr.iid,
     title: mr.title,
     state: mr.state,
@@ -9911,7 +9749,7 @@ async function searchGitlabMergeRequests({
   );
   return {
     items,
-    hasMore: mergeRequests.length === perPage
+    hasMore: response.paginationInfo.next !== null
   };
 }
 var GITLAB_API_CONCURRENCY = 5;
@@ -9928,7 +9766,7 @@ async function getGitlabMrCommitsBatch({
     url: repoUrl,
     gitlabAuthToken: accessToken
   });
-  const limit = pLimit2(GITLAB_API_CONCURRENCY);
+  const limit = pLimit(GITLAB_API_CONCURRENCY);
   const results = await Promise.all(
     mrNumbers.map(
       (mrNumber) => limit(async () => {
@@ -9937,7 +9775,7 @@ async function getGitlabMrCommitsBatch({
             projectPath,
             mrNumber
           );
-          return [mrNumber, commits.map((c) => c.id)];
+          return [mrNumber, commits.map((c) => c.id).reverse()];
         } catch (error) {
           contextLogger.warn(
             "[getGitlabMrCommitsBatch] Failed to fetch commits for MR",
@@ -9967,28 +9805,12 @@ async function getGitlabMrDataBatch({
     url: repoUrl,
     gitlabAuthToken: accessToken
   });
-  const limit = pLimit2(GITLAB_API_CONCURRENCY);
+  const limit = pLimit(GITLAB_API_CONCURRENCY);
   const results = await Promise.all(
     mrNumbers.map(
       (mrNumber) => limit(async () => {
         try {
-          const [diffs, notes] = await Promise.all([
-            api2.MergeRequests.allDiffs(projectPath, mrNumber),
-            api2.MergeRequestNotes.all(projectPath, mrNumber)
-          ]);
-          let additions = 0;
-          let deletions = 0;
-          for (const diff of diffs) {
-            if (diff.diff) {
-              for (const line of diff.diff.split("\n")) {
-                if (line.startsWith("+") && !line.startsWith("+++")) {
-                  additions++;
-                } else if (line.startsWith("-") && !line.startsWith("---")) {
-                  deletions++;
-                }
-              }
-            }
-          }
+          const notes = await api2.MergeRequestNotes.all(projectPath, mrNumber);
           const comments = notes.map((note) => ({
             author: note.author ? {
               login: note.author.username,
@@ -9998,7 +9820,7 @@ async function getGitlabMrDataBatch({
           }));
           return [
             mrNumber,
-            { changedLines: { additions, deletions }, comments }
+            { changedLines: { additions: 0, deletions: 0 }, comments }
           ];
         } catch (error) {
           contextLogger.warn(
@@ -10022,39 +9844,6 @@ async function getGitlabMrDataBatch({
   );
   return new Map(results);
 }
-async function getGitlabMergeRequestLinesAdded({
-  url,
-  prNumber,
-  accessToken
-}) {
-  try {
-    const { projectPath } = parseGitlabOwnerAndRepo(url);
-    const api2 = getGitBeaker({
-      url,
-      gitlabAuthToken: accessToken
-    });
-    const diffs = await api2.MergeRequests.allDiffs(projectPath, prNumber);
-    let linesAdded = 0;
-    for (const diff of diffs) {
-      if (diff.diff) {
-        const addedLines = diff.diff.split("\n").filter(
-          (line) => line.startsWith("+") && !line.startsWith("+++")
-        ).length;
-        linesAdded += addedLines;
-      }
-    }
-    return linesAdded;
-  } catch (error) {
-    contextLogger.warn(
-      "[getGitlabMergeRequestLinesAdded] Failed to fetch diffs for MR",
-      {
-        prNumber,
-        error
-      }
-    );
-    return 0;
-  }
-}
 async function getGitlabMergeRequestMetrics({
   url,
   prNumber,
@@ -10065,26 +9854,17 @@ async function getGitlabMergeRequestMetrics({
     url,
     gitlabAuthToken: accessToken
   });
-  const [mr, commits, linesAdded, notes] = await Promise.all([
+  const [mr, notes] = await Promise.all([
     api2.MergeRequests.show(projectPath, prNumber),
-    api2.MergeRequests.allCommits(projectPath, prNumber),
-    getGitlabMergeRequestLinesAdded({ url, prNumber, accessToken }),
     api2.MergeRequestNotes.all(projectPath, prNumber)
   ]);
-  const sortedCommits = [...commits].sort(
-    (a, b) => new Date(a.created_at).getTime() - new Date(b.created_at).getTime()
-  );
-  const firstCommitDate = sortedCommits[0]?.created_at ?? null;
   const commentIds = notes.filter((note) => !note.system).map((note) => String(note.id));
   return {
     state: mr.state,
     isDraft: mr.draft ?? false,
     createdAt: mr.created_at,
     mergedAt: mr.merged_at ?? null,
-    linesAdded,
-    commitsCount: commits.length,
-    commitShas: commits.map((c) => c.id),
-    firstCommitDate,
+    linesAdded: 0,
     commentIds
   };
 }
@@ -10166,7 +9946,8 @@ function parseGitlabOwnerAndRepo(gitlabUrl) {
   return { owner: organization, repo: repoName, projectPath };
 }
 var GITLAB_MAX_RESULTS_LIMIT = 1024;
-var GITLAB_PER_PAGE = 128;
+var GITLAB_MAX_PER_PAGE = 100;
+var GITLAB_PER_PAGE = GITLAB_MAX_PER_PAGE;
 async function getGitlabRecentCommits({
   repoUrl,
   accessToken,
@@ -10175,14 +9956,17 @@ async function getGitlabRecentCommits({
   const { projectPath } = parseGitlabOwnerAndRepo(repoUrl);
   const api2 = getGitBeaker({ url: repoUrl, gitlabAuthToken: accessToken });
   const allCommits = [];
+  const perPage = GITLAB_PER_PAGE;
   let page = 1;
   let hasMore = true;
   while (hasMore && allCommits.length < GITLAB_MAX_RESULTS_LIMIT) {
-    const commits = await api2.Commits.all(projectPath, {
+    const response = await api2.Commits.all(projectPath, {
       since,
-      perPage: GITLAB_PER_PAGE,
-      page
+      perPage,
+      page,
+      showExpanded: true
     });
+    const commits = response.data;
     if (commits.length === 0) {
       hasMore = false;
       break;
@@ -10204,11 +9988,8 @@ async function getGitlabRecentCommits({
         parents: commit.parent_ids?.map((sha) => ({ sha })) || []
       });
     }
-    if (commits.length < GITLAB_PER_PAGE) {
-      hasMore = false;
-    } else {
-      page++;
-    }
+    hasMore = response.paginationInfo.next !== null;
+    page++;
   }
   if (allCommits.length >= GITLAB_MAX_RESULTS_LIMIT) {
     contextLogger.warn("[getGitlabRecentCommits] Hit commit pagination limit", {
@@ -10220,29 +10001,6 @@ async function getGitlabRecentCommits({
   }
   return allCommits;
 }
-async function getGitlabCommitDiff({
-  repoUrl,
-  accessToken,
-  commitSha
-}) {
-  const { projectPath } = parseGitlabOwnerAndRepo(repoUrl);
-  const api2 = getGitBeaker({ url: repoUrl, gitlabAuthToken: accessToken });
-  const [commit, diffs] = await Promise.all([
-    api2.Commits.show(projectPath, commitSha),
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    api2.Commits.showDiff(projectPath, commitSha, { unidiff: true })
-  ]);
-  const diffString = buildUnifiedDiff(diffs);
-  const commitTimestamp = commit.committed_date ? new Date(commit.committed_date) : /* @__PURE__ */ new Date();
-  return {
-    diff: diffString,
-    commitTimestamp,
-    commitSha: commit.id,
-    authorName: commit.author_name,
-    authorEmail: commit.author_email,
-    message: commit.message
-  };
-}
 async function getGitlabRateLimitStatus({
   repoUrl,
   accessToken
@@ -10324,88 +10082,6 @@ async function brokerRequestHandler(endpoint, options) {
     };
   throw new Error(`gitbeaker: ${response.statusText}`);
 }
-async function getGitlabMergeRequestDiff({
-  repoUrl,
-  accessToken,
-  mrNumber
-}) {
-  debug4("[getGitlabMergeRequestDiff] Starting for MR #%d", mrNumber);
-  const { projectPath } = parseGitlabOwnerAndRepo(repoUrl);
-  const api2 = getGitBeaker({ url: repoUrl, gitlabAuthToken: accessToken });
-  debug4(
-    "[getGitlabMergeRequestDiff] Fetching MR details, diffs, and commits..."
-  );
-  const startMrFetch = Date.now();
-  const [mr, mrDiffs, mrCommitsRaw] = await Promise.all([
-    api2.MergeRequests.show(projectPath, mrNumber),
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    api2.MergeRequests.allDiffs(projectPath, mrNumber, { unidiff: true }),
-    api2.MergeRequests.allCommits(projectPath, mrNumber)
-  ]);
-  debug4(
-    "[getGitlabMergeRequestDiff] MR fetch took %dms. Diffs: %d, Commits: %d",
-    Date.now() - startMrFetch,
-    mrDiffs.length,
-    mrCommitsRaw.length
-  );
-  const diffString = buildUnifiedDiff(mrDiffs);
-  debug4(
-    "[getGitlabMergeRequestDiff] Fetching commit diffs for %d commits...",
-    mrCommitsRaw.length
-  );
-  const startCommitFetch = Date.now();
-  const commitDiffLimit = pLimit2(GITLAB_API_CONCURRENCY);
-  const commits = await Promise.all(
-    mrCommitsRaw.map(
-      (commit) => commitDiffLimit(async () => {
-        const commitDiff = await getGitlabCommitDiff({
-          repoUrl,
-          accessToken,
-          commitSha: commit.id
-        });
-        return {
-          diff: commitDiff.diff,
-          commitTimestamp: commitDiff.commitTimestamp,
-          commitSha: commitDiff.commitSha,
-          authorName: commitDiff.authorName,
-          authorEmail: commitDiff.authorEmail,
-          message: commitDiff.message
-        };
-      })
-    )
-  );
-  commits.sort(
-    (a, b) => new Date(a.commitTimestamp).getTime() - new Date(b.commitTimestamp).getTime()
-  );
-  debug4(
-    "[getGitlabMergeRequestDiff] Commit diffs fetch took %dms",
-    Date.now() - startCommitFetch
-  );
-  const addedLinesByFile = parseAddedLinesByFile(diffString);
-  const diffLines = [];
-  for (const [file, lines] of addedLinesByFile) {
-    for (const line of lines) {
-      diffLines.push({ file, line });
-    }
-  }
-  return {
-    diff: diffString,
-    createdAt: new Date(mr.created_at),
-    updatedAt: new Date(mr.updated_at),
-    submitRequestId: String(mrNumber),
-    submitRequestNumber: mrNumber,
-    sourceBranch: mr.source_branch,
-    targetBranch: mr.target_branch,
-    authorName: mr.author?.name || mr.author?.username,
-    authorEmail: void 0,
-    // GitLab MR API doesn't expose author email directly
-    title: mr.title,
-    description: mr.description || void 0,
-    commits,
-    headCommitSha: mr.sha,
-    diffLines
-  };
-}
 
 // src/features/analysis/scm/gitlab/GitlabSCMLib.ts
 init_client_generates();
@@ -10438,7 +10114,20 @@ var GitlabSCMLib = class extends SCMLib {
       contextLogger.warn("[GitlabSCMLib.getRepoList] No access token provided");
       throw new Error("no access token");
     }
-    return getGitlabRepoList(this.url, this.accessToken);
+    const allRepos = [];
+    let cursor;
+    let hasMore = true;
+    while (hasMore) {
+      const page = await this.searchRepos({
+        scmOrg: _scmOrg,
+        limit: 100,
+        cursor
+      });
+      allRepos.push(...page.results);
+      hasMore = page.hasMore;
+      cursor = page.nextCursor;
+    }
+    return allRepos;
   }
   async getBranchList() {
     this._validateAccessTokenAndUrl();
@@ -10570,33 +10259,23 @@ var GitlabSCMLib = class extends SCMLib {
     this._validateAccessTokenAndUrl();
     return `${this.url}/-/commits/${branchName}`;
   }
-  async getCommitDiff(commitSha) {
-    this._validateAccessTokenAndUrl();
-    const result = await getGitlabCommitDiff({
-      repoUrl: this.url,
-      accessToken: this.accessToken,
-      commitSha
-    });
-    return {
-      diff: result.diff,
-      commitTimestamp: result.commitTimestamp,
-      commitSha: result.commitSha,
-      authorName: result.authorName,
-      authorEmail: result.authorEmail,
-      message: result.message
-    };
-  }
-  async getSubmitRequestDiff(submitRequestId) {
+  async getSubmitRequestMetadata(submitRequestId) {
     this._validateAccessTokenAndUrl();
     const mrNumber = parseInt(submitRequestId, 10);
     if (isNaN(mrNumber) || mrNumber <= 0) {
       throw new Error(`Invalid merge request ID: ${submitRequestId}`);
     }
-    return getGitlabMergeRequestDiff({
-      repoUrl: this.url,
-      accessToken: this.accessToken,
-      mrNumber
+    const mr = await getGitlabMergeRequest({
+      url: this.url,
+      prNumber: mrNumber,
+      accessToken: this.accessToken
     });
+    return {
+      title: mr.title,
+      targetBranch: mr.target_branch,
+      sourceBranch: mr.source_branch,
+      headCommitSha: mr.sha
+    };
   }
   async searchSubmitRequests(params) {
     this._validateAccessTokenAndUrl();
@@ -10678,8 +10357,47 @@ var GitlabSCMLib = class extends SCMLib {
       mrNumbers: prNumbers
     });
   }
-  async searchRepos(_params) {
-    throw new Error("searchRepos not implemented for GitLab");
+  async searchRepos(params) {
+    if (!this.accessToken) {
+      throw new Error("no access token");
+    }
+    const page = parseCursorSafe(params.cursor, 1);
+    const perPage = params.limit || 10;
+    const { projects, hasMore } = await searchGitlabProjects({
+      url: this.url,
+      accessToken: this.accessToken,
+      perPage,
+      page
+    });
+    const includeLanguages = params.includeLanguages !== false;
+    const languageMap = /* @__PURE__ */ new Map();
+    if (includeLanguages && projects.length > 0) {
+      const languageResults = await Promise.all(
+        projects.map(
+          (p) => getGitlabProjectLanguages({
+            url: this.url,
+            accessToken: this.accessToken,
+            projectId: p.id
+          }).then((langs) => [p.id, langs])
+        )
+      );
+      for (const [id, langs] of languageResults) {
+        languageMap.set(id, langs);
+      }
+    }
+    const results = projects.map((p) => ({
+      repoName: p.path,
+      repoUrl: p.web_url,
+      repoOwner: p.namespace_name,
+      repoLanguages: languageMap.get(p.id) || [],
+      repoIsPublic: p.visibility === "public",
+      repoUpdatedAt: p.last_activity_at
+    }));
+    return {
+      results,
+      nextCursor: hasMore ? String(page + 1) : void 0,
+      hasMore
+    };
   }
   async getPullRequestMetrics(prNumber) {
     this._validateAccessTokenAndUrl();
@@ -10704,10 +10422,7 @@ var GitlabSCMLib = class extends SCMLib {
       repositoryUrl: this.url,
       prCreatedAt: new Date(metrics.createdAt),
       prMergedAt: metrics.mergedAt ? new Date(metrics.mergedAt) : null,
-      firstCommitDate: metrics.firstCommitDate ? new Date(metrics.firstCommitDate) : null,
       linesAdded: metrics.linesAdded,
-      commitsCount: metrics.commitsCount,
-      commitShas: metrics.commitShas,
       prStatus,
       commentIds: metrics.commentIds
     };
@@ -10837,34 +10552,8 @@ var StubSCMLib = class extends SCMLib {
   async addCommentToSubmitRequest(_submitRequestId, _comment) {
     console.warn("addCommentToSubmitRequest() no-op");
   }
-  async getCommitDiff(_commitSha) {
-    console.warn("getCommitDiff() returning stub diff");
-    return {
-      diff: "",
-      commitTimestamp: /* @__PURE__ */ new Date(),
-      commitSha: _commitSha,
-      authorName: void 0,
-      authorEmail: void 0,
-      message: void 0
-    };
-  }
-  async getSubmitRequestDiff(_submitRequestId) {
-    console.warn("getSubmitRequestDiff() returning stub diff");
-    return {
-      diff: "",
-      createdAt: /* @__PURE__ */ new Date(),
-      updatedAt: /* @__PURE__ */ new Date(),
-      submitRequestId: _submitRequestId,
-      submitRequestNumber: parseInt(_submitRequestId) || 0,
-      sourceBranch: "",
-      targetBranch: "",
-      authorName: void 0,
-      authorEmail: void 0,
-      title: void 0,
-      description: void 0,
-      commits: [],
-      diffLines: []
-    };
+  async getSubmitRequestMetadata(_submitRequestId) {
+    throw new Error("getSubmitRequestMetadata() not implemented");
   }
   async getPullRequestMetrics(_prNumber) {
     console.warn("getPullRequestMetrics() returning empty object");
@@ -12001,7 +11690,9 @@ function subscribeStream(query, variables, handlers, wsClientOptions) {
         finalizeError(error);
       },
       complete: () => {
-        return;
+        finalizeError(
+          new Error("Subscription completed by server before resolving")
+        );
       }
     }
   );
@@ -12903,7 +12594,7 @@ import Debug10 from "debug";
 
 // src/features/analysis/add_fix_comments_for_pr/utils/utils.ts
 import Debug9 from "debug";
-import parseDiff2 from "parse-diff";
+import parseDiff from "parse-diff";
 import { z as z27 } from "zod";
 
 // src/features/analysis/utils/by_key.ts
@@ -13276,7 +12967,7 @@ Refresh the page in order to see the changes.`,
 }
 async function getRelevantVulenrabilitiesFromDiff(params) {
   const { gqlClient, diff, vulnerabilityReportId } = params;
-  const parsedDiff = parseDiff2(diff);
+  const parsedDiff = parseDiff(diff);
   const fileHunks = parsedDiff.map((file) => {
     const fileNumbers = file.chunks.flatMap((chunk) => chunk.changes).filter((change) => change.type === "add").map((_change) => {
       const change = _change;
@@ -21710,7 +21401,7 @@ import {
   writeFileSync
 } from "fs";
 import fs22 from "fs/promises";
-import parseDiff3 from "parse-diff";
+import parseDiff2 from "parse-diff";
 import path21 from "path";
 var PatchApplicationService = class {
   /**
@@ -22394,7 +22085,7 @@ var PatchApplicationService = class {
     fixId,
     scanContext
   }) {
-    const parsedPatch = parseDiff3(patch);
+    const parsedPatch = parseDiff2(patch);
     if (!parsedPatch || parsedPatch.length === 0) {
       throw new Error("Failed to parse patch - no changes found");
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mobbdev",
-  "version": "1.2.22",
+  "version": "1.2.27",
   "description": "Automated secure code remediation tool",
   "repository": "git+https://github.com/mobb-dev/bugsy.git",
   "main": "dist/index.mjs",