mobbdev 1.4.23 → 1.4.26

package/dist/args/commands/upload_ai_blame.mjs

@@ -138,10 +138,16 @@ function getSdk(client, withWrapper = defaultWrapper) {
     },
     SkillVerdictsByMd5(variables, requestHeaders, signal) {
       return withWrapper((wrappedRequestHeaders) => client.request({ document: SkillVerdictsByMd5Document, variables, requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders }, signal }), "SkillVerdictsByMd5", "query", variables);
+    },
+    LogMvsEvent(variables, requestHeaders, signal) {
+      return withWrapper((wrappedRequestHeaders) => client.request({ document: LogMvsEventDocument, variables, requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders }, signal }), "LogMvsEvent", "mutation", variables);
+    },
+    getMvsProject(variables, requestHeaders, signal) {
+      return withWrapper((wrappedRequestHeaders) => client.request({ document: GetMvsProjectDocument, variables, requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders }, signal }), "getMvsProject", "mutation", variables);
     }
   };
 }
-var AiBlameInferenceType, FixQuestionInputType, Language, ManifestAction, Effort_To_Apply_Fix_Enum, Fix_Rating_Tag_Enum, Fix_Report_State_Enum, Fix_State_Enum, IssueLanguage_Enum, IssueType_Enum, Pr_Status_Enum, Project_Role_Type_Enum, Vulnerability_Report_Issue_Category_Enum, Vulnerability_Report_Issue_State_Enum, Vulnerability_Report_Issue_Tag_Enum, Vulnerability_Report_Vendor_Enum, Vulnerability_Severity_Enum, FixDetailsFragmentDoc, FixReportSummaryFieldsFragmentDoc, MeDocument, GetLastOrgAndNamedProjectDocument, GetLastOrgDocument, GetEncryptedApiTokenDocument, FixReportStateDocument, GetVulnerabilityReportPathsDocument, GetAnalysisSubscriptionDocument, GetAnalysisDocument, GetFixesDocument, GetVulByNodesMetadataDocument, GetFalsePositiveDocument, UpdateScmTokenDocument, UploadS3BucketInfoDocument, GetTracyDiffUploadUrlDocument, AnalyzeCommitForExtensionAiBlameDocument, GetAiBlameInferenceDocument, GetAiBlameAttributionPromptDocument, GetPromptSummaryDocument, UploadAiBlameInferencesInitDocument, FinalizeAiBlameInferencesUploadDocument, UploadTracyRecordsDocument, GetTracyRawDataUploadUrlDocument, DigestVulnerabilityReportDocument, SubmitVulnerabilityReportDocument, CreateCommunityUserDocument, CreateCliLoginDocument, PerformCliLoginDocument, SetQuarantineEnabledDocument, CreateProjectDocument, ValidateRepoUrlDocument, GitReferenceDocument, AutoPrAnalysisDocument, GetFixWithAnswersDocument, GetFixReportsByRepoUrlDocument, GetReportFixesDocument, GetLatestReportByRepoUrlDocument, UpdateDownloadedFixDataDocument, GetUserMvsAutoFixDocument, StreamBlameAiAnalysisRequestsDocument, StreamCommitBlameRequestsDocument, ScanSkillDocument, SkillVerdictsByMd5Document, defaultWrapper;
+var AiBlameInferenceType, FixQuestionInputType, Language, ManifestAction, Effort_To_Apply_Fix_Enum, Fix_Rating_Tag_Enum, Fix_Report_State_Enum, Fix_State_Enum, IssueLanguage_Enum, IssueType_Enum, Pr_Status_Enum, Project_Role_Type_Enum, Vulnerability_Report_Issue_Category_Enum, Vulnerability_Report_Issue_State_Enum, Vulnerability_Report_Issue_Tag_Enum, Vulnerability_Report_Vendor_Enum, Vulnerability_Severity_Enum, FixDetailsFragmentDoc, FixReportSummaryFieldsFragmentDoc, MeDocument, GetLastOrgAndNamedProjectDocument, GetLastOrgDocument, GetEncryptedApiTokenDocument, FixReportStateDocument, GetVulnerabilityReportPathsDocument, GetAnalysisSubscriptionDocument, GetAnalysisDocument, GetFixesDocument, GetVulByNodesMetadataDocument, GetFalsePositiveDocument, UpdateScmTokenDocument, UploadS3BucketInfoDocument, GetTracyDiffUploadUrlDocument, AnalyzeCommitForExtensionAiBlameDocument, GetAiBlameInferenceDocument, GetAiBlameAttributionPromptDocument, GetPromptSummaryDocument, UploadAiBlameInferencesInitDocument, FinalizeAiBlameInferencesUploadDocument, UploadTracyRecordsDocument, GetTracyRawDataUploadUrlDocument, DigestVulnerabilityReportDocument, SubmitVulnerabilityReportDocument, CreateCommunityUserDocument, CreateCliLoginDocument, PerformCliLoginDocument, SetQuarantineEnabledDocument, CreateProjectDocument, ValidateRepoUrlDocument, GitReferenceDocument, AutoPrAnalysisDocument, GetFixWithAnswersDocument, GetFixReportsByRepoUrlDocument, GetReportFixesDocument, GetLatestReportByRepoUrlDocument, UpdateDownloadedFixDataDocument, GetUserMvsAutoFixDocument, StreamBlameAiAnalysisRequestsDocument, StreamCommitBlameRequestsDocument, ScanSkillDocument, SkillVerdictsByMd5Document, LogMvsEventDocument, GetMvsProjectDocument, defaultWrapper;
 var init_client_generates = __esm({
   "src/features/analysis/scm/generates/client_generates.ts"() {
     "use strict";
@@ -1077,7 +1083,7 @@ var init_client_generates = __esm({
 }
     `;
     SubmitVulnerabilityReportDocument = `
-    mutation SubmitVulnerabilityReport($fixReportId: String!, $repoUrl: String!, $reference: String!, $projectId: String!, $scanSource: String!, $sha: String, $experimentalEnabled: Boolean, $vulnerabilityReportFileName: String, $pullRequest: Int, $isFullScan: Boolean, $scanContext: String!, $fileCount: Int) {
+    mutation SubmitVulnerabilityReport($fixReportId: String!, $repoUrl: String!, $reference: String!, $projectId: String!, $scanSource: String!, $sha: String, $experimentalEnabled: Boolean, $vulnerabilityReportFileName: String, $pullRequest: Int, $isFullScan: Boolean, $scanContext: String!, $fileCount: Int, $computerName: String, $computerUser: String, $clientVersion: String) {
   submitVulnerabilityReport(
     fixReportId: $fixReportId
     repoUrl: $repoUrl
@@ -1091,6 +1097,9 @@ var init_client_generates = __esm({
     scanSource: $scanSource
     scanContext: $scanContext
     fileCount: $fileCount
+    computerName: $computerName
+    computerUser: $computerUser
+    clientVersion: $clientVersion
   ) {
     __typename
     ... on VulnerabilityReport {
@@ -1365,6 +1374,29 @@ var init_client_generates = __esm({
       scannedAt
     }
   }
+}
+    `;
+    LogMvsEventDocument = `
+    mutation LogMvsEvent($eventType: String!, $fixReportId: String, $projectId: String, $repoUrl: String, $riskCount: Int, $computerName: String, $computerUser: String, $clientVersion: String) {
+  logMvsEvent(
+    eventType: $eventType
+    fixReportId: $fixReportId
+    projectId: $projectId
+    repoUrl: $repoUrl
+    riskCount: $riskCount
+    computerName: $computerName
+    computerUser: $computerUser
+    clientVersion: $clientVersion
+  ) {
+    status
+  }
+}
+    `;
+    GetMvsProjectDocument = `
+    mutation getMvsProject($organizationId: String!) {
+  getMvsProject(organizationId: $organizationId) {
+    projectId
+  }
 }
     `;
     defaultWrapper = (action, _operationName, _operationType, _variables) => action();
@@ -1625,7 +1657,8 @@ var init_issue = __esm({
       category: z4.nativeEnum(Vulnerability_Report_Issue_Category_Enum),
       extraData: z4.object({
         missing_files: z4.string().array().nullish(),
-        error_files: z4.string().array().nullish()
+        error_files: z4.string().array().nullish(),
+        ai_cost_limit_exceeded: z4.string().nullish()
       }),
       vulnerabilityReportIssueTags: z4.array(
         z4.object({
@@ -2166,7 +2199,8 @@ var init_types = __esm({
             extraData: z7.object({
               missing_files: z7.string().array().nullish(),
               large_files: z7.string().array().nullish(),
-              error_files: z7.string().array().nullish()
+              error_files: z7.string().array().nullish(),
+              ai_cost_limit_exceeded: z7.string().nullish()
             })
           }).array()
         })
@@ -2205,7 +2239,8 @@ var init_types = __esm({
       extraData: z7.object({
         missing_files: z7.string().array().nullish(),
         large_files: z7.string().array().nullish(),
-        error_files: z7.string().array().nullish()
+        error_files: z7.string().array().nullish(),
+        ai_cost_limit_exceeded: z7.string().nullish()
       }),
       fix: ReportFixesQueryFixZ.nullable(),
       falsePositive: z7.object({
@@ -4494,7 +4529,6 @@ var CliError = class extends Error {
 
 // src/commands/AuthManager.ts
 import crypto from "crypto";
-import os from "os";
 import Debug10 from "debug";
 import open from "open";
 
@@ -7015,6 +7049,7 @@ import { fetch as fetch2, ProxyAgent } from "undici";
 
 // src/features/analysis/scm/gitlab/gitlab.ts
 import querystring3 from "querystring";
+import { setTimeout as delay } from "timers/promises";
 import {
   createRequesterFn
 } from "@gitbeaker/requester-utils";
@@ -7781,7 +7816,7 @@ async function sanitizeDataWithCounts(obj, options) {
 }
 
 // src/utils/with-timeout.ts
-import { setTimeout as delay } from "timers/promises";
+import { setTimeout as delay2 } from "timers/promises";
 
 // src/features/analysis/graphql/s3-raw-data-upload.ts
 import { setTimeout as sleep2 } from "timers/promises";
@@ -7885,16 +7920,42 @@ var URL_REFRESH_MS = 20 * 60 * 1e3;
 var debug10 = Debug9("mobbdev:tracy-batch-upload");
 
 // src/mcp/services/types.ts
-function buildLoginUrl(baseUrl, loginId, hostname, context) {
+import os from "os";
+function buildLoginUrl(baseUrl, loginId, machine, context) {
   const url = new URL(`${baseUrl}/${loginId}`);
-  url.searchParams.set("hostname", hostname);
-  url.searchParams.set("trigger", context.trigger);
-  url.searchParams.set("source", context.source);
-  if (context.ide) {
-    url.searchParams.set("ide", context.ide);
+  url.searchParams.set("hostname", machine.hostname);
+  if (machine.computerUser) {
+    url.searchParams.set("computerUser", machine.computerUser);
+  }
+  if (machine.clientVersion) {
+    url.searchParams.set("clientVersion", machine.clientVersion);
+  }
+  if (context) {
+    url.searchParams.set("trigger", context.trigger);
+    url.searchParams.set("source", context.source);
+    if (context.ide) {
+      url.searchParams.set("ide", context.ide);
+    }
   }
   return url.toString();
 }
+function getComputerUser() {
+  try {
+    return os.userInfo().username || void 0;
+  } catch {
+    return void 0;
+  }
+}
+function getLoginMachineInfo() {
+  return {
+    hostname: os.hostname(),
+    computerUser: getComputerUser(),
+    clientVersion: packageJson.version
+  };
+}
+function buildLoginBrowserUrl(baseUrl, loginId, context) {
+  return buildLoginUrl(baseUrl, loginId, getLoginMachineInfo(), context);
+}
 
 // src/utils/ConfigStoreService.ts
 import Configstore from "configstore";
@@ -8057,7 +8118,11 @@ var _AuthManager = class _AuthManager {
         publicKey: this.publicKey.export({ format: "pem", type: "pkcs1" }).toString()
       });
       const webLoginUrl = `${this.resolvedWebAppUrl}${loginPath || "/cli-login"}`;
-      const browserUrl = loginContext ? buildLoginUrl(webLoginUrl, this.loginId, os.hostname(), loginContext) : `${webLoginUrl}/${this.loginId}?hostname=${os.hostname()}`;
+      const browserUrl = buildLoginBrowserUrl(
+        webLoginUrl,
+        this.loginId,
+        loginContext
+      );
       this.currentBrowserUrl = browserUrl;
       return browserUrl;
     } catch (error) {

package/dist/index.mjs

@@ -138,10 +138,16 @@ function getSdk(client, withWrapper = defaultWrapper) {
     },
     SkillVerdictsByMd5(variables, requestHeaders, signal) {
       return withWrapper((wrappedRequestHeaders) => client.request({ document: SkillVerdictsByMd5Document, variables, requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders }, signal }), "SkillVerdictsByMd5", "query", variables);
+    },
+    LogMvsEvent(variables, requestHeaders, signal) {
+      return withWrapper((wrappedRequestHeaders) => client.request({ document: LogMvsEventDocument, variables, requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders }, signal }), "LogMvsEvent", "mutation", variables);
+    },
+    getMvsProject(variables, requestHeaders, signal) {
+      return withWrapper((wrappedRequestHeaders) => client.request({ document: GetMvsProjectDocument, variables, requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders }, signal }), "getMvsProject", "mutation", variables);
     }
   };
 }
-var AiBlameInferenceType, FixQuestionInputType, Language, ManifestAction, Effort_To_Apply_Fix_Enum, Fix_Rating_Tag_Enum, Fix_Report_State_Enum, Fix_State_Enum, IssueLanguage_Enum, IssueType_Enum, Pr_Status_Enum, Project_Role_Type_Enum, Vulnerability_Report_Issue_Category_Enum, Vulnerability_Report_Issue_State_Enum, Vulnerability_Report_Issue_Tag_Enum, Vulnerability_Report_Vendor_Enum, Vulnerability_Severity_Enum, FixDetailsFragmentDoc, FixReportSummaryFieldsFragmentDoc, MeDocument, GetLastOrgAndNamedProjectDocument, GetLastOrgDocument, GetEncryptedApiTokenDocument, FixReportStateDocument, GetVulnerabilityReportPathsDocument, GetAnalysisSubscriptionDocument, GetAnalysisDocument, GetFixesDocument, GetVulByNodesMetadataDocument, GetFalsePositiveDocument, UpdateScmTokenDocument, UploadS3BucketInfoDocument, GetTracyDiffUploadUrlDocument, AnalyzeCommitForExtensionAiBlameDocument, GetAiBlameInferenceDocument, GetAiBlameAttributionPromptDocument, GetPromptSummaryDocument, UploadAiBlameInferencesInitDocument, FinalizeAiBlameInferencesUploadDocument, UploadTracyRecordsDocument, GetTracyRawDataUploadUrlDocument, DigestVulnerabilityReportDocument, SubmitVulnerabilityReportDocument, CreateCommunityUserDocument, CreateCliLoginDocument, PerformCliLoginDocument, SetQuarantineEnabledDocument, CreateProjectDocument, ValidateRepoUrlDocument, GitReferenceDocument, AutoPrAnalysisDocument, GetFixWithAnswersDocument, GetFixReportsByRepoUrlDocument, GetReportFixesDocument, GetLatestReportByRepoUrlDocument, UpdateDownloadedFixDataDocument, GetUserMvsAutoFixDocument, StreamBlameAiAnalysisRequestsDocument, StreamCommitBlameRequestsDocument, ScanSkillDocument, SkillVerdictsByMd5Document, defaultWrapper;
+var AiBlameInferenceType, FixQuestionInputType, Language, ManifestAction, Effort_To_Apply_Fix_Enum, Fix_Rating_Tag_Enum, Fix_Report_State_Enum, Fix_State_Enum, IssueLanguage_Enum, IssueType_Enum, Pr_Status_Enum, Project_Role_Type_Enum, Vulnerability_Report_Issue_Category_Enum, Vulnerability_Report_Issue_State_Enum, Vulnerability_Report_Issue_Tag_Enum, Vulnerability_Report_Vendor_Enum, Vulnerability_Severity_Enum, FixDetailsFragmentDoc, FixReportSummaryFieldsFragmentDoc, MeDocument, GetLastOrgAndNamedProjectDocument, GetLastOrgDocument, GetEncryptedApiTokenDocument, FixReportStateDocument, GetVulnerabilityReportPathsDocument, GetAnalysisSubscriptionDocument, GetAnalysisDocument, GetFixesDocument, GetVulByNodesMetadataDocument, GetFalsePositiveDocument, UpdateScmTokenDocument, UploadS3BucketInfoDocument, GetTracyDiffUploadUrlDocument, AnalyzeCommitForExtensionAiBlameDocument, GetAiBlameInferenceDocument, GetAiBlameAttributionPromptDocument, GetPromptSummaryDocument, UploadAiBlameInferencesInitDocument, FinalizeAiBlameInferencesUploadDocument, UploadTracyRecordsDocument, GetTracyRawDataUploadUrlDocument, DigestVulnerabilityReportDocument, SubmitVulnerabilityReportDocument, CreateCommunityUserDocument, CreateCliLoginDocument, PerformCliLoginDocument, SetQuarantineEnabledDocument, CreateProjectDocument, ValidateRepoUrlDocument, GitReferenceDocument, AutoPrAnalysisDocument, GetFixWithAnswersDocument, GetFixReportsByRepoUrlDocument, GetReportFixesDocument, GetLatestReportByRepoUrlDocument, UpdateDownloadedFixDataDocument, GetUserMvsAutoFixDocument, StreamBlameAiAnalysisRequestsDocument, StreamCommitBlameRequestsDocument, ScanSkillDocument, SkillVerdictsByMd5Document, LogMvsEventDocument, GetMvsProjectDocument, defaultWrapper;
 var init_client_generates = __esm({
   "src/features/analysis/scm/generates/client_generates.ts"() {
     "use strict";
@@ -1077,7 +1083,7 @@ var init_client_generates = __esm({
 }
     `;
     SubmitVulnerabilityReportDocument = `
-    mutation SubmitVulnerabilityReport($fixReportId: String!, $repoUrl: String!, $reference: String!, $projectId: String!, $scanSource: String!, $sha: String, $experimentalEnabled: Boolean, $vulnerabilityReportFileName: String, $pullRequest: Int, $isFullScan: Boolean, $scanContext: String!, $fileCount: Int) {
+    mutation SubmitVulnerabilityReport($fixReportId: String!, $repoUrl: String!, $reference: String!, $projectId: String!, $scanSource: String!, $sha: String, $experimentalEnabled: Boolean, $vulnerabilityReportFileName: String, $pullRequest: Int, $isFullScan: Boolean, $scanContext: String!, $fileCount: Int, $computerName: String, $computerUser: String, $clientVersion: String) {
   submitVulnerabilityReport(
     fixReportId: $fixReportId
     repoUrl: $repoUrl
@@ -1091,6 +1097,9 @@ var init_client_generates = __esm({
     scanSource: $scanSource
     scanContext: $scanContext
     fileCount: $fileCount
+    computerName: $computerName
+    computerUser: $computerUser
+    clientVersion: $clientVersion
   ) {
     __typename
     ... on VulnerabilityReport {
@@ -1365,6 +1374,29 @@ var init_client_generates = __esm({
       scannedAt
     }
   }
+}
+    `;
+    LogMvsEventDocument = `
+    mutation LogMvsEvent($eventType: String!, $fixReportId: String, $projectId: String, $repoUrl: String, $riskCount: Int, $computerName: String, $computerUser: String, $clientVersion: String) {
+  logMvsEvent(
+    eventType: $eventType
+    fixReportId: $fixReportId
+    projectId: $projectId
+    repoUrl: $repoUrl
+    riskCount: $riskCount
+    computerName: $computerName
+    computerUser: $computerUser
+    clientVersion: $clientVersion
+  ) {
+    status
+  }
+}
+    `;
+    GetMvsProjectDocument = `
+    mutation getMvsProject($organizationId: String!) {
+  getMvsProject(organizationId: $organizationId) {
+    projectId
+  }
 }
     `;
     defaultWrapper = (action, _operationName, _operationType, _variables) => action();
@@ -1853,7 +1885,8 @@ var init_issue = __esm({
       category: z9.nativeEnum(Vulnerability_Report_Issue_Category_Enum),
       extraData: z9.object({
         missing_files: z9.string().array().nullish(),
-        error_files: z9.string().array().nullish()
+        error_files: z9.string().array().nullish(),
+        ai_cost_limit_exceeded: z9.string().nullish()
       }),
       vulnerabilityReportIssueTags: z9.array(
         z9.object({
@@ -2211,7 +2244,8 @@ var init_types = __esm({
             extraData: z11.object({
               missing_files: z11.string().array().nullish(),
               large_files: z11.string().array().nullish(),
-              error_files: z11.string().array().nullish()
+              error_files: z11.string().array().nullish(),
+              ai_cost_limit_exceeded: z11.string().nullish()
             })
           }).array()
         })
@@ -2250,7 +2284,8 @@ var init_types = __esm({
       extraData: z11.object({
         missing_files: z11.string().array().nullish(),
         large_files: z11.string().array().nullish(),
-        error_files: z11.string().array().nullish()
+        error_files: z11.string().array().nullish(),
+        ai_cost_limit_exceeded: z11.string().nullish()
       }),
       fix: ReportFixesQueryFixZ.nullable(),
       falsePositive: z11.object({
@@ -10915,6 +10950,7 @@ var GithubSCMLib = class extends SCMLib {
 
 // src/features/analysis/scm/gitlab/gitlab.ts
 import querystring3 from "querystring";
+import { setTimeout as delay } from "timers/promises";
 import {
   createRequesterFn
 } from "@gitbeaker/requester-utils";
@@ -11576,6 +11612,9 @@ async function processBody(response) {
   }
   return await response.text();
 }
+var GITLAB_RETRYABLE_STATUSES = /* @__PURE__ */ new Set([429, 502, 503, 504]);
+var GITLAB_REQUEST_MAX_ATTEMPTS = 4;
+var GITLAB_REQUEST_BASE_BACKOFF_MS = 1e3;
 async function brokerRequestHandler(endpoint, options) {
   const { prefixUrl, searchParams } = options || {};
   let baseUrl;
@@ -11588,24 +11627,42 @@ async function brokerRequestHandler(endpoint, options) {
       rejectUnauthorized: false
     }
   }) : void 0;
-  const response = await undiciFetch(url, {
-    headers: options?.headers,
-    method: options?.method,
-    body: options?.body ? String(options?.body) : void 0,
-    dispatcher
-  }).catch((e) => {
-    if (e.name === "TimeoutError" || e.name === "AbortError") {
-      throw new Error("Query timeout was reached");
+  let lastError;
+  for (let attempt = 1; attempt <= GITLAB_REQUEST_MAX_ATTEMPTS; attempt++) {
+    let response;
+    try {
+      response = await undiciFetch(url, {
+        headers: options?.headers,
+        method: options?.method,
+        body: options?.body ? String(options?.body) : void 0,
+        dispatcher
+      });
+    } catch (e) {
+      if (e.name === "TimeoutError" || e.name === "AbortError") {
+        lastError = new Error("Query timeout was reached");
+      } else {
+        throw e;
+      }
     }
-    throw e;
-  });
-  if (response.ok)
-    return {
-      body: await processBody(response),
-      headers: Object.fromEntries(response.headers.entries()),
-      status: response.status
-    };
-  throw new Error(`gitbeaker: ${response.statusText}`);
+    if (response) {
+      if (response.ok) {
+        return {
+          body: await processBody(response),
+          headers: Object.fromEntries(response.headers.entries()),
+          status: response.status
+        };
+      }
+      if (!GITLAB_RETRYABLE_STATUSES.has(response.status)) {
+        throw new Error(`gitbeaker: ${response.statusText}`);
+      }
+      lastError = new Error(`gitbeaker: ${response.statusText}`);
+    }
+    if (attempt === GITLAB_REQUEST_MAX_ATTEMPTS) break;
+    const retryAfter = Number(response?.headers.get("retry-after"));
+    const waitMs = Number.isFinite(retryAfter) && retryAfter > 0 ? retryAfter * 1e3 : GITLAB_REQUEST_BASE_BACKOFF_MS * 2 ** (attempt - 1);
+    await delay(waitMs);
+  }
+  throw lastError ?? new Error("gitbeaker: request failed");
 }
 async function listGitlabProjectMembers({
   repoUrl,
@@ -13204,7 +13261,6 @@ import { z as z31 } from "zod";
 
 // src/commands/AuthManager.ts
 import crypto from "crypto";
-import os3 from "os";
 import Debug11 from "debug";
 import open from "open";
 
@@ -14885,12 +14941,12 @@ async function uploadAiBlameCommandHandler(args) {
 }
 
 // src/utils/with-timeout.ts
-import { setTimeout as delay } from "timers/promises";
+import { setTimeout as delay2 } from "timers/promises";
 function withTimeout(promise, ms, label) {
   const ac = new AbortController();
   return Promise.race([
     promise.finally(() => ac.abort()),
-    delay(ms, void 0, { signal: ac.signal }).then(() => {
+    delay2(ms, void 0, { signal: ac.signal }).then(() => {
       throw new Error(`${label} timed out after ${ms}ms`);
     })
   ]);
@@ -15223,6 +15279,7 @@ async function prepareAndSendTracyRecords(client, rawRecords, workingDir, option
 }
 
 // src/mcp/services/types.ts
+import os3 from "os";
 function detectIDE() {
   const env3 = process.env;
   if (env3["CURSOR_TRACE_ID"] || env3["CURSOR_SESSION_ID"]) return "cursor";
@@ -15243,16 +15300,41 @@ function createMcpLoginContext(trigger) {
     ide: detectIDE()
   };
 }
-function buildLoginUrl(baseUrl, loginId, hostname, context) {
+function buildLoginUrl(baseUrl, loginId, machine, context) {
   const url = new URL(`${baseUrl}/${loginId}`);
-  url.searchParams.set("hostname", hostname);
-  url.searchParams.set("trigger", context.trigger);
-  url.searchParams.set("source", context.source);
-  if (context.ide) {
-    url.searchParams.set("ide", context.ide);
+  url.searchParams.set("hostname", machine.hostname);
+  if (machine.computerUser) {
+    url.searchParams.set("computerUser", machine.computerUser);
+  }
+  if (machine.clientVersion) {
+    url.searchParams.set("clientVersion", machine.clientVersion);
+  }
+  if (context) {
+    url.searchParams.set("trigger", context.trigger);
+    url.searchParams.set("source", context.source);
+    if (context.ide) {
+      url.searchParams.set("ide", context.ide);
+    }
   }
   return url.toString();
 }
+function getComputerUser() {
+  try {
+    return os3.userInfo().username || void 0;
+  } catch {
+    return void 0;
+  }
+}
+function getLoginMachineInfo() {
+  return {
+    hostname: os3.hostname(),
+    computerUser: getComputerUser(),
+    clientVersion: packageJson.version
+  };
+}
+function buildLoginBrowserUrl(baseUrl, loginId, context) {
+  return buildLoginUrl(baseUrl, loginId, getLoginMachineInfo(), context);
+}
 
 // src/commands/AuthManager.ts
 var debug12 = Debug11("mobbdev:auth");
@@ -15397,7 +15479,11 @@ var _AuthManager = class _AuthManager {
         publicKey: this.publicKey.export({ format: "pem", type: "pkcs1" }).toString()
       });
       const webLoginUrl = `${this.resolvedWebAppUrl}${loginPath || "/cli-login"}`;
-      const browserUrl = loginContext ? buildLoginUrl(webLoginUrl, this.loginId, os3.hostname(), loginContext) : `${webLoginUrl}/${this.loginId}?hostname=${os3.hostname()}`;
+      const browserUrl = buildLoginBrowserUrl(
+        webLoginUrl,
+        this.loginId,
+        loginContext
+      );
       this.currentBrowserUrl = browserUrl;
       return browserUrl;
     } catch (error) {
@@ -16435,8 +16521,8 @@ if (typeof __filename !== "undefined") {
 }
 var costumeRequire = createRequire(moduleUrl);
 var getCheckmarxPath = () => {
-  const os17 = type();
-  const cxFileName = os17 === "Windows_NT" ? "cx.exe" : "cx";
+  const os19 = type();
+  const cxFileName = os19 === "Windows_NT" ? "cx.exe" : "cx";
   try {
     return costumeRequire.resolve(`.bin/${cxFileName}`);
   } catch (e) {
@@ -19721,7 +19807,7 @@ function createLogger(config2) {
 
 // src/features/claude_code/hook_logger.ts
 var DD_RUM_TOKEN = true ? "pubf59c0182545bfb4c299175119f1abf9b" : "";
-var CLI_VERSION = true ? "1.4.23" : "unknown";
+var CLI_VERSION = true ? "1.4.26" : "unknown";
 var NAMESPACE = "mobbdev-claude-code-hook-logs";
 var claudeCodeVersion;
 function buildDdTags() {
@@ -21246,7 +21332,7 @@ var logDebug = (message, data) => logger2.log(message, "debug", data);
 var log = logger2.log.bind(logger2);
 
 // src/mcp/services/McpGQLClient.ts
-import crypto2 from "crypto";
+import os9 from "os";
 init_client_generates();
 init_configs();
 
@@ -21628,85 +21714,20 @@ var McpGQLClient = class extends GQLClient {
       if (!userEmail) {
         throw new Error("User email not found");
       }
-      const shortEmailHash = crypto2.createHash("sha256").update(userEmail).digest("hex").slice(0, 8).toUpperCase();
-      const projectName = `MCP Scans ${shortEmailHash}`;
-      logDebug("[GraphQL] Calling getLastOrgAndNamedProject query", {
-        projectName
-      });
-      const orgAndProjectRes = await this._clientSdk.getLastOrgAndNamedProject({
-        email: userEmail,
-        projectName
-      });
-      logDebug("[GraphQL] getLastOrgAndNamedProject successful", {
-        result: orgAndProjectRes
-      });
-      if (!orgAndProjectRes.user?.[0]?.userOrganizationsAndUserOrganizationRoles?.[0]?.organization?.id) {
+      const orgRes = await this._clientSdk.getLastOrg({ email: userEmail });
+      const organizationId = orgRes.user?.[0]?.userOrganizationsAndUserOrganizationRoles?.[0]?.organization?.id;
+      if (!organizationId) {
         throw new Error(
-          `The user with email:${userEmail}  is not associated with any organization`
+          `The user with email:${userEmail} is not associated with any organization`
         );
       }
-      const organization = orgAndProjectRes.user?.[0]?.userOrganizationsAndUserOrganizationRoles?.[0]?.organization;
-      const projectId = organization?.projects?.[0]?.id;
-      if (projectId) {
-        logDebug("[GraphQL] Found existing project", {
-          projectId,
-          projectName
-        });
-        return projectId;
-      }
-      logDebug("[GraphQL] Project not found, creating new project", {
-        organizationId: organization.id,
-        projectName
-      });
-      try {
-        const createdProject = await this._clientSdk.CreateProject({
-          organizationId: organization.id,
-          projectName
-        });
-        logDebug("[GraphQL] CreateProject successful", {
-          result: createdProject
-        });
-        return createdProject.createProject.projectId;
-      } catch (createError) {
-        const errorMessage3 = createError instanceof Error ? createError.message : String(createError);
-        const isConstraintViolation = errorMessage3.includes(
-          "duplicate key value violates unique constraint"
-        ) && errorMessage3.includes("project_name_organization_id_key");
-        if (isConstraintViolation) {
-          logDebug(
-            "[GraphQL] Project creation failed due to constraint violation, retrying fetch",
-            {
-              organizationId: organization.id,
-              projectName,
-              error: errorMessage3
-            }
-          );
-          const retryOrgAndProjectRes = await this._clientSdk.getLastOrgAndNamedProject({
-            email: userEmail,
-            projectName
-          });
-          const retryProjectId = retryOrgAndProjectRes.user?.[0]?.userOrganizationsAndUserOrganizationRoles?.[0]?.organization?.projects?.[0]?.id;
-          if (retryProjectId) {
-            logDebug(
-              "[GraphQL] Successfully found existing project after constraint violation",
-              {
-                projectId: retryProjectId,
-                projectName
-              }
-            );
-            return retryProjectId;
-          }
-          logError(
-            "[GraphQL] Failed to find project even after constraint violation retry",
-            {
-              organizationId: organization.id,
-              projectName,
-              retryResult: retryOrgAndProjectRes
-            }
-          );
-        }
-        throw createError;
+      const mvsRes = await this._clientSdk.getMvsProject({ organizationId });
+      const projectId = mvsRes.getMvsProject?.projectId;
+      if (!projectId) {
+        throw new Error("Failed to resolve the MVS project");
       }
+      logDebug("[GraphQL] Resolved MVS project", { projectId });
+      return projectId;
     } catch (e) {
       logError("[GraphQL] getProjectId failed", {
         error: e,
@@ -21803,6 +21824,26 @@ var McpGQLClient = class extends GQLClient {
       logDebug("[GraphQL] No auto-applied fixes to update status");
     }
   }
+  /** Best-effort: a telemetry failure must never break a scan/fix, so errors are swallowed. */
+  async logMvsEvent(params) {
+    try {
+      await this._clientSdk.LogMvsEvent({
+        eventType: params.eventType,
+        fixReportId: params.fixReportId ?? null,
+        projectId: params.projectId ?? null,
+        repoUrl: params.repoUrl ?? null,
+        riskCount: params.riskCount ?? null,
+        computerName: os9.hostname(),
+        computerUser: getComputerUser() ?? null,
+        clientVersion: packageJson.version
+      });
+    } catch (error) {
+      logDebug("[GraphQL] logMvsEvent failed (ignored)", {
+        eventType: params.eventType,
+        error: error.message
+      });
+    }
+  }
   async getMvsAutoFixSettings() {
     try {
       const envOverride = process.env["MVS_AUTO_FIX"];
@@ -22076,7 +22117,7 @@ async function createAuthenticatedMcpGQLClient({
 // src/mcp/services/McpUsageService/host.ts
 import { execSync as execSync2 } from "child_process";
 import fs15 from "fs";
-import os9 from "os";
+import os10 from "os";
 import path25 from "path";
 var IDEs = ["cursor", "windsurf", "webstorm", "vscode", "claude"];
 var runCommand = (cmd) => {
@@ -22091,7 +22132,7 @@ var gitInfo = {
   email: runCommand("git config user.email")
 };
 var getClaudeWorkspacePaths = () => {
-  const home = os9.homedir();
+  const home = os10.homedir();
   const claudeIdePath = path25.join(home, ".claude", "ide");
   const workspacePaths = [];
   if (!fs15.existsSync(claudeIdePath)) {
@@ -22120,7 +22161,7 @@ var getClaudeWorkspacePaths = () => {
   return workspacePaths;
 };
 var getMCPConfigPaths = (hostName) => {
-  const home = os9.homedir();
+  const home = os10.homedir();
   const currentDir = process.env["WORKSPACE_FOLDER_PATHS"] || process.env["PWD"] || process.cwd();
   switch (hostName.toLowerCase()) {
     case "cursor":
@@ -22210,7 +22251,7 @@ var readMCPConfig = (hostName) => {
 };
 var getRunningProcesses = () => {
   try {
-    return os9.platform() === "win32" ? execSync2("tasklist", { encoding: "utf8" }) : execSync2("ps aux", { encoding: "utf8" });
+    return os10.platform() === "win32" ? execSync2("tasklist", { encoding: "utf8" }) : execSync2("ps aux", { encoding: "utf8" });
   } catch {
     return "";
   }
@@ -22285,7 +22326,7 @@ var versionCommands = {
   }
 };
 var getProcessInfo = (pid) => {
-  const platform2 = os9.platform();
+  const platform2 = os10.platform();
   try {
     if (platform2 === "linux" || platform2 === "darwin") {
       const output = execSync2(`ps -o pid=,ppid=,comm= -p ${pid}`, {
@@ -22404,7 +22445,7 @@ var getHostInfo = (additionalMcpList) => {
     const config2 = allConfigs[ide] || null;
     const ideName = ide.charAt(0).toUpperCase() + ide.slice(1) || "Unknown";
     let ideVersion = "Unknown";
-    const platform2 = os9.platform();
+    const platform2 = os10.platform();
     const cmds = versionCommands[ideName]?.[platform2] ?? [];
     for (const cmd of cmds) {
       try {
@@ -22437,14 +22478,14 @@ var getHostInfo = (additionalMcpList) => {
 
 // src/mcp/services/McpUsageService/McpUsageService.ts
 import fetch6 from "node-fetch";
-import os11 from "os";
+import os12 from "os";
 import { v4 as uuidv42, v5 as uuidv5 } from "uuid";
 init_configs();
 
 // src/mcp/services/McpUsageService/system.ts
 init_configs();
 import fs16 from "fs";
-import os10 from "os";
+import os11 from "os";
 import path26 from "path";
 var MAX_DEPTH = 2;
 var patterns = ["mcp", "claude"];
@@ -22479,8 +22520,8 @@ var searchDir = async (dir, depth = 0) => {
 };
 var findSystemMCPConfigs = async () => {
   try {
-    const home = os10.homedir();
-    const platform2 = os10.platform();
+    const home = os11.homedir();
+    const platform2 = os11.platform();
     const knownDirs = platform2 === "win32" ? [
       path26.join(home, ".cursor"),
       path26.join(home, "Documents"),
@@ -22552,7 +22593,7 @@ var McpUsageService = class {
   generateHostId() {
     const stored = configStore.get(this.configKey);
     if (stored?.mcpHostId) return stored.mcpHostId;
-    const interfaces = os11.networkInterfaces();
+    const interfaces = os12.networkInterfaces();
     const macs = [];
     for (const iface of Object.values(interfaces)) {
       if (!iface) continue;
@@ -22560,7 +22601,7 @@ var McpUsageService = class {
         if (net.mac && net.mac !== "00:00:00:00:00:00") macs.push(net.mac);
       }
     }
-    const macString = macs.length ? macs.sort().join(",") : `${os11.hostname()}-${uuidv42()}`;
+    const macString = macs.length ? macs.sort().join(",") : `${os12.hostname()}-${uuidv42()}`;
     const hostId = uuidv5(macString, uuidv5.DNS);
     logDebug("[UsageService] Generated new host ID", { hostId });
     return hostId;
@@ -22583,7 +22624,7 @@ var McpUsageService = class {
       mcpHostId,
       organizationId,
       mcpVersion: packageJson.version,
-      mcpOsName: os11.platform(),
+      mcpOsName: os12.platform(),
       mcps: JSON.stringify(mcps),
       status,
       userName: user.name,
@@ -24904,7 +24945,7 @@ For a complete security audit workflow, use the \`full-security-audit\` prompt.
 
 // src/mcp/services/McpDetectionService/CursorMcpDetectionService.ts
 import * as fs19 from "fs";
-import * as os13 from "os";
+import * as os14 from "os";
 import * as path28 from "path";
 
 // src/mcp/services/McpDetectionService/BaseMcpDetectionService.ts
@@ -24915,11 +24956,11 @@ import * as path27 from "path";
 
 // src/mcp/services/McpDetectionService/McpDetectionServiceUtils.ts
 import * as fs17 from "fs";
-import * as os12 from "os";
+import * as os13 from "os";
 
 // src/mcp/services/McpDetectionService/VscodeMcpDetectionService.ts
 import * as fs20 from "fs";
-import * as os14 from "os";
+import * as os15 from "os";
 import * as path29 from "path";
 
 // src/mcp/tools/checkForNewAvailableFixes/CheckForNewAvailableFixesTool.ts
@@ -27625,6 +27666,7 @@ var PatchApplicationService = class {
 // src/mcp/services/ScanFiles.ts
 init_client_generates();
 init_GitService();
+import os16 from "os";
 init_configs();
 
 // src/mcp/services/FileOperations.ts
@@ -27898,7 +27940,12 @@ var executeSecurityScan = async ({
     isFullScan: !!isAllDetectionRulesScan,
     sha,
     scanContext,
-    fileCount
+    fileCount,
+    // MVS device attribution: a developer appears in the MVS Developers grid
+    // from scanning alone (no fresh login needed).
+    computerName: os16.hostname(),
+    computerUser: getComputerUser(),
+    clientVersion: packageJson.version
   };
   logInfo(`[${scanContext}] Submitting vulnerability report`);
   logDebug(`[${scanContext}] Submit vulnerability report variables`, {
@@ -29023,6 +29070,7 @@ var _ScanAndFixVulnerabilitiesService = class _ScanAndFixVulnerabilitiesService
         isExpired: this.storedFixReportId ? this.isFixReportIdExpired() : null
       });
       let fixReportId = this.storedFixReportId;
+      let didScan = false;
       if (!fixReportId || isRescan || this.isFixReportIdExpired()) {
         logInfo("Scanning files");
         this.reset();
@@ -29034,6 +29082,7 @@ var _ScanAndFixVulnerabilitiesService = class _ScanAndFixVulnerabilitiesService
           scanContext: ScanContext.USER_REQUEST
         });
         fixReportId = scanResult.fixReportId;
+        didScan = true;
       } else {
         logInfo("Using stored fixReportId");
       }
@@ -29046,6 +29095,23 @@ var _ScanAndFixVulnerabilitiesService = class _ScanAndFixVulnerabilitiesService
         limit: effectiveLimit
       });
       logInfo(`Found ${fixes.totalCount} fixes`);
+      if (fixReportId && effectiveOffset === 0 && fixes.totalCount > 0) {
+        if (didScan) {
+          await this.gqlClient.logMvsEvent({
+            eventType: "RISK_DETECTED",
+            fixReportId,
+            riskCount: fixes.totalCount
+          });
+        }
+        await this.gqlClient.logMvsEvent({
+          eventType: "FIXES_VIEWED",
+          fixReportId,
+          // Count of fixes shown, so the Event Log row mirrors Fixable Issues
+          // Detected ("N issues"). Not summed into the Fixable Issues KPI,
+          // which only counts RISK_DETECTED.
+          riskCount: fixes.totalCount
+        });
+      }
       if (fixes.totalCount > 0) {
         this.storedFixReportId = fixReportId;
         this.fixReportIdTimestamp = Date.now();
@@ -29842,18 +29908,18 @@ async function getGrpcClient(port, csrf3) {
 
 // src/features/codeium_intellij/parse_intellij_logs.ts
 import fs27 from "fs";
-import os15 from "os";
+import os17 from "os";
 import path35 from "path";
 function getLogsDir() {
   if (process.platform === "darwin") {
-    return path35.join(os15.homedir(), "Library/Logs/JetBrains");
+    return path35.join(os17.homedir(), "Library/Logs/JetBrains");
   } else if (process.platform === "win32") {
     return path35.join(
-      process.env["LOCALAPPDATA"] || path35.join(os15.homedir(), "AppData/Local"),
+      process.env["LOCALAPPDATA"] || path35.join(os17.homedir(), "AppData/Local"),
       "JetBrains"
     );
   } else {
-    return path35.join(os15.homedir(), ".cache/JetBrains");
+    return path35.join(os17.homedir(), ".cache/JetBrains");
   }
 }
 function parseIdeLogDir(ideLogDir) {
@@ -30076,11 +30142,11 @@ function processChatStepCodeAction(step) {
 
 // src/features/codeium_intellij/install_hook.ts
 import fsPromises5 from "fs/promises";
-import os16 from "os";
+import os18 from "os";
 import path36 from "path";
 import chalk14 from "chalk";
 function getCodeiumHooksPath() {
-  return path36.join(os16.homedir(), ".codeium", "hooks.json");
+  return path36.join(os18.homedir(), ".codeium", "hooks.json");
 }
 async function readCodeiumHooks() {
   const hooksPath = getCodeiumHooksPath();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mobbdev",
-  "version": "1.4.23",
+  "version": "1.4.26",
   "description": "Automated secure code remediation tool",
   "repository": "git+https://github.com/mobb-dev/bugsy.git",
   "main": "dist/index.mjs",