mobbdev 1.4.29 → 1.4.31

package/dist/args/commands/upload_ai_blame.mjs

@@ -144,10 +144,13 @@ function getSdk(client, withWrapper = defaultWrapper) {
     },
     getMvsProject(variables, requestHeaders, signal) {
       return withWrapper((wrappedRequestHeaders) => client.request({ document: GetMvsProjectDocument, variables, requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders }, signal }), "getMvsProject", "mutation", variables);
+    },
+    IssueTypes(variables, requestHeaders, signal) {
+      return withWrapper((wrappedRequestHeaders) => client.request({ document: IssueTypesDocument, variables, requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders }, signal }), "IssueTypes", "query", variables);
     }
   };
 }
-var AiBlameInferenceType, FixQuestionInputType, Language, ManifestAction, Effort_To_Apply_Fix_Enum, Fix_Rating_Tag_Enum, Fix_Report_State_Enum, Fix_State_Enum, IssueLanguage_Enum, IssueType_Enum, Pr_Status_Enum, Project_Role_Type_Enum, Vulnerability_Report_Issue_Category_Enum, Vulnerability_Report_Issue_State_Enum, Vulnerability_Report_Issue_Tag_Enum, Vulnerability_Report_Vendor_Enum, Vulnerability_Severity_Enum, FixDetailsFragmentDoc, FixReportSummaryFieldsFragmentDoc, MeDocument, GetLastOrgAndNamedProjectDocument, GetLastOrgDocument, GetEncryptedApiTokenDocument, FixReportStateDocument, GetVulnerabilityReportPathsDocument, GetAnalysisSubscriptionDocument, GetAnalysisDocument, GetFixesDocument, GetVulByNodesMetadataDocument, GetFalsePositiveDocument, UpdateScmTokenDocument, UploadS3BucketInfoDocument, GetTracyDiffUploadUrlDocument, AnalyzeCommitForExtensionAiBlameDocument, GetAiBlameInferenceDocument, GetAiBlameAttributionPromptDocument, GetPromptSummaryDocument, UploadAiBlameInferencesInitDocument, FinalizeAiBlameInferencesUploadDocument, UploadTracyRecordsDocument, GetTracyRawDataUploadUrlDocument, DigestVulnerabilityReportDocument, SubmitVulnerabilityReportDocument, CreateCommunityUserDocument, CreateCliLoginDocument, PerformCliLoginDocument, SetQuarantineEnabledDocument, CreateProjectDocument, ValidateRepoUrlDocument, GitReferenceDocument, AutoPrAnalysisDocument, GetFixWithAnswersDocument, GetFixReportsByRepoUrlDocument, GetReportFixesDocument, GetLatestReportByRepoUrlDocument, UpdateDownloadedFixDataDocument, GetUserMvsAutoFixDocument, StreamBlameAiAnalysisRequestsDocument, StreamCommitBlameRequestsDocument, ScanSkillDocument, SkillVerdictsByMd5Document, LogMvsEventDocument, GetMvsProjectDocument, defaultWrapper;
+var AiBlameInferenceType, FixQuestionInputType, Language, ManifestAction, Effort_To_Apply_Fix_Enum, Fix_Rating_Tag_Enum, Fix_Report_State_Enum, Fix_State_Enum, IssueLanguage_Enum, IssueType_Enum, Pr_Status_Enum, Project_Role_Type_Enum, Vulnerability_Report_Issue_Category_Enum, Vulnerability_Report_Issue_State_Enum, Vulnerability_Report_Issue_Tag_Enum, Vulnerability_Report_Vendor_Enum, Vulnerability_Severity_Enum, FixDetailsFragmentDoc, FixReportSummaryFieldsFragmentDoc, MeDocument, GetLastOrgAndNamedProjectDocument, GetLastOrgDocument, GetEncryptedApiTokenDocument, FixReportStateDocument, GetVulnerabilityReportPathsDocument, GetAnalysisSubscriptionDocument, GetAnalysisDocument, GetFixesDocument, GetVulByNodesMetadataDocument, GetFalsePositiveDocument, UpdateScmTokenDocument, UploadS3BucketInfoDocument, GetTracyDiffUploadUrlDocument, AnalyzeCommitForExtensionAiBlameDocument, GetAiBlameInferenceDocument, GetAiBlameAttributionPromptDocument, GetPromptSummaryDocument, UploadAiBlameInferencesInitDocument, FinalizeAiBlameInferencesUploadDocument, UploadTracyRecordsDocument, GetTracyRawDataUploadUrlDocument, DigestVulnerabilityReportDocument, SubmitVulnerabilityReportDocument, CreateCommunityUserDocument, CreateCliLoginDocument, PerformCliLoginDocument, SetQuarantineEnabledDocument, CreateProjectDocument, ValidateRepoUrlDocument, GitReferenceDocument, AutoPrAnalysisDocument, GetFixWithAnswersDocument, GetFixReportsByRepoUrlDocument, GetReportFixesDocument, GetLatestReportByRepoUrlDocument, UpdateDownloadedFixDataDocument, GetUserMvsAutoFixDocument, StreamBlameAiAnalysisRequestsDocument, StreamCommitBlameRequestsDocument, ScanSkillDocument, SkillVerdictsByMd5Document, LogMvsEventDocument, GetMvsProjectDocument, IssueTypesDocument, defaultWrapper;
 var init_client_generates = __esm({
   "src/features/analysis/scm/generates/client_generates.ts"() {
     "use strict";
@@ -1399,6 +1402,16 @@ var init_client_generates = __esm({
   getMvsProject(organizationId: $organizationId) {
     projectId
   }
+}
+    `;
+    IssueTypesDocument = `
+    query IssueTypes {
+  issueTypes {
+    value
+    label
+    issueDescription
+    fixInstructions
+  }
 }
     `;
     defaultWrapper = (action, _operationName, _operationType, _variables) => action();
@@ -1776,6 +1789,21 @@ var init_issue = __esm({
   }
 });
 
+// src/features/analysis/scm/shared/src/issueTypeCatalog.ts
+function getIssueTypeCatalogEntry(value) {
+  if (!catalog || !value) {
+    return void 0;
+  }
+  return catalog.get(value);
+}
+var catalog;
+var init_issueTypeCatalog = __esm({
+  "src/features/analysis/scm/shared/src/issueTypeCatalog.ts"() {
+    "use strict";
+    catalog = null;
+  }
+});
+
 // src/features/analysis/scm/shared/src/getIssueType.ts
 import { z as z5 } from "zod";
 var issueTypeMap, issueTypeZ, getIssueTypeFriendlyString, statusMap, statusZ, issueDescription;
@@ -1783,6 +1811,7 @@ var init_getIssueType = __esm({
   "src/features/analysis/scm/shared/src/getIssueType.ts"() {
     "use strict";
     init_client_generates();
+    init_issueTypeCatalog();
     issueTypeMap = {
       ["NO_LIMITS_OR_THROTTLING" /* NoLimitsOrThrottling */]: "Missing Rate Limiting",
       ["SQL_Injection" /* SqlInjection */]: "SQL Injection",
@@ -1938,6 +1967,10 @@ var init_getIssueType = __esm({
     };
     issueTypeZ = z5.nativeEnum(IssueType_Enum);
     getIssueTypeFriendlyString = (issueType) => {
+      const fromCatalog = getIssueTypeCatalogEntry(issueType)?.label;
+      if (fromCatalog) {
+        return fromCatalog;
+      }
       const issueTypeZParseRes = issueTypeZ.safeParse(issueType);
       if (!issueTypeZParseRes.success) {
         return issueType ? issueType.replaceAll("_", " ") : "Other";
@@ -6895,6 +6928,7 @@ var IssueTypeAndLanguageZ = z12.object({
 });
 
 // src/features/analysis/scm/shared/src/index.ts
+init_issueTypeCatalog();
 init_types2();
 init_urlParser2();
 init_validations();

package/dist/index.mjs

@@ -144,10 +144,13 @@ function getSdk(client, withWrapper = defaultWrapper) {
     },
     getMvsProject(variables, requestHeaders, signal) {
       return withWrapper((wrappedRequestHeaders) => client.request({ document: GetMvsProjectDocument, variables, requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders }, signal }), "getMvsProject", "mutation", variables);
+    },
+    IssueTypes(variables, requestHeaders, signal) {
+      return withWrapper((wrappedRequestHeaders) => client.request({ document: IssueTypesDocument, variables, requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders }, signal }), "IssueTypes", "query", variables);
     }
   };
 }
-var AiBlameInferenceType, FixQuestionInputType, Language, ManifestAction, Effort_To_Apply_Fix_Enum, Fix_Rating_Tag_Enum, Fix_Report_State_Enum, Fix_State_Enum, IssueLanguage_Enum, IssueType_Enum, Pr_Status_Enum, Project_Role_Type_Enum, Vulnerability_Report_Issue_Category_Enum, Vulnerability_Report_Issue_State_Enum, Vulnerability_Report_Issue_Tag_Enum, Vulnerability_Report_Vendor_Enum, Vulnerability_Severity_Enum, FixDetailsFragmentDoc, FixReportSummaryFieldsFragmentDoc, MeDocument, GetLastOrgAndNamedProjectDocument, GetLastOrgDocument, GetEncryptedApiTokenDocument, FixReportStateDocument, GetVulnerabilityReportPathsDocument, GetAnalysisSubscriptionDocument, GetAnalysisDocument, GetFixesDocument, GetVulByNodesMetadataDocument, GetFalsePositiveDocument, UpdateScmTokenDocument, UploadS3BucketInfoDocument, GetTracyDiffUploadUrlDocument, AnalyzeCommitForExtensionAiBlameDocument, GetAiBlameInferenceDocument, GetAiBlameAttributionPromptDocument, GetPromptSummaryDocument, UploadAiBlameInferencesInitDocument, FinalizeAiBlameInferencesUploadDocument, UploadTracyRecordsDocument, GetTracyRawDataUploadUrlDocument, DigestVulnerabilityReportDocument, SubmitVulnerabilityReportDocument, CreateCommunityUserDocument, CreateCliLoginDocument, PerformCliLoginDocument, SetQuarantineEnabledDocument, CreateProjectDocument, ValidateRepoUrlDocument, GitReferenceDocument, AutoPrAnalysisDocument, GetFixWithAnswersDocument, GetFixReportsByRepoUrlDocument, GetReportFixesDocument, GetLatestReportByRepoUrlDocument, UpdateDownloadedFixDataDocument, GetUserMvsAutoFixDocument, StreamBlameAiAnalysisRequestsDocument, StreamCommitBlameRequestsDocument, ScanSkillDocument, SkillVerdictsByMd5Document, LogMvsEventDocument, GetMvsProjectDocument, defaultWrapper;
+var AiBlameInferenceType, FixQuestionInputType, Language, ManifestAction, Effort_To_Apply_Fix_Enum, Fix_Rating_Tag_Enum, Fix_Report_State_Enum, Fix_State_Enum, IssueLanguage_Enum, IssueType_Enum, Pr_Status_Enum, Project_Role_Type_Enum, Vulnerability_Report_Issue_Category_Enum, Vulnerability_Report_Issue_State_Enum, Vulnerability_Report_Issue_Tag_Enum, Vulnerability_Report_Vendor_Enum, Vulnerability_Severity_Enum, FixDetailsFragmentDoc, FixReportSummaryFieldsFragmentDoc, MeDocument, GetLastOrgAndNamedProjectDocument, GetLastOrgDocument, GetEncryptedApiTokenDocument, FixReportStateDocument, GetVulnerabilityReportPathsDocument, GetAnalysisSubscriptionDocument, GetAnalysisDocument, GetFixesDocument, GetVulByNodesMetadataDocument, GetFalsePositiveDocument, UpdateScmTokenDocument, UploadS3BucketInfoDocument, GetTracyDiffUploadUrlDocument, AnalyzeCommitForExtensionAiBlameDocument, GetAiBlameInferenceDocument, GetAiBlameAttributionPromptDocument, GetPromptSummaryDocument, UploadAiBlameInferencesInitDocument, FinalizeAiBlameInferencesUploadDocument, UploadTracyRecordsDocument, GetTracyRawDataUploadUrlDocument, DigestVulnerabilityReportDocument, SubmitVulnerabilityReportDocument, CreateCommunityUserDocument, CreateCliLoginDocument, PerformCliLoginDocument, SetQuarantineEnabledDocument, CreateProjectDocument, ValidateRepoUrlDocument, GitReferenceDocument, AutoPrAnalysisDocument, GetFixWithAnswersDocument, GetFixReportsByRepoUrlDocument, GetReportFixesDocument, GetLatestReportByRepoUrlDocument, UpdateDownloadedFixDataDocument, GetUserMvsAutoFixDocument, StreamBlameAiAnalysisRequestsDocument, StreamCommitBlameRequestsDocument, ScanSkillDocument, SkillVerdictsByMd5Document, LogMvsEventDocument, GetMvsProjectDocument, IssueTypesDocument, defaultWrapper;
 var init_client_generates = __esm({
   "src/features/analysis/scm/generates/client_generates.ts"() {
     "use strict";
@@ -1399,12 +1402,37 @@ var init_client_generates = __esm({
   getMvsProject(organizationId: $organizationId) {
     projectId
   }
+}
+    `;
+    IssueTypesDocument = `
+    query IssueTypes {
+  issueTypes {
+    value
+    label
+    issueDescription
+    fixInstructions
+  }
 }
     `;
     defaultWrapper = (action, _operationName, _operationType, _variables) => action();
   }
 });
 
+// src/features/analysis/scm/shared/src/issueTypeCatalog.ts
+function getIssueTypeCatalogEntry(value) {
+  if (!catalog || !value) {
+    return void 0;
+  }
+  return catalog.get(value);
+}
+var catalog;
+var init_issueTypeCatalog = __esm({
+  "src/features/analysis/scm/shared/src/issueTypeCatalog.ts"() {
+    "use strict";
+    catalog = null;
+  }
+});
+
 // src/features/analysis/scm/shared/src/getIssueType.ts
 import { z } from "zod";
 function getTagTooltip(tag2) {
@@ -1448,6 +1476,7 @@ var init_getIssueType = __esm({
   "src/features/analysis/scm/shared/src/getIssueType.ts"() {
     "use strict";
     init_client_generates();
+    init_issueTypeCatalog();
     issueTypeMap = {
       ["NO_LIMITS_OR_THROTTLING" /* NoLimitsOrThrottling */]: "Missing Rate Limiting",
       ["SQL_Injection" /* SqlInjection */]: "SQL Injection",
@@ -1603,6 +1632,10 @@ var init_getIssueType = __esm({
     };
     issueTypeZ = z.nativeEnum(IssueType_Enum);
     getIssueTypeFriendlyString = (issueType) => {
+      const fromCatalog = getIssueTypeCatalogEntry(issueType)?.label;
+      if (fromCatalog) {
+        return fromCatalog;
+      }
       const issueTypeZParseRes = issueTypeZ.safeParse(issueType);
       if (!issueTypeZParseRes.success) {
         return issueType ? issueType.replaceAll("_", " ") : "Other";
@@ -6805,6 +6838,7 @@ function getGuidances(args) {
 }
 
 // src/features/analysis/scm/shared/src/index.ts
+init_issueTypeCatalog();
 init_types2();
 init_urlParser2();
 
@@ -8780,6 +8814,35 @@ function getBitbucketSdk(params) {
         return { accountId: null, email: null };
       }
     },
+    async listRecentCommits(params2) {
+      const sinceDate = new Date(params2.since);
+      const commits = [];
+      const MAX_PAGES = 100;
+      let page = 1;
+      let done = false;
+      while (!done && page <= MAX_PAGES) {
+        const res = await bitbucketClient.repositories.listCommits({
+          repo_slug: params2.repo_slug,
+          workspace: params2.workspace,
+          page: String(page),
+          pagelen: 100
+        });
+        const data = res.data;
+        const values = data?.values ?? [];
+        if (values.length === 0) break;
+        for (const commit of values) {
+          const date = commit?.["date"];
+          if (date && new Date(date) < sinceDate) {
+            done = true;
+            continue;
+          }
+          commits.push(commit);
+        }
+        if (!data?.next) break;
+        page++;
+      }
+      return commits;
+    },
     async getRepoCommitAuthors(params2) {
       try {
         const res = await bitbucketClient.repositories.listCommits({
@@ -9123,8 +9186,33 @@ var BitbucketSCMLib = class extends SCMLib {
   async getPullRequestMetrics(_prNumber) {
     throw new Error("getPullRequestMetrics not implemented for Bitbucket");
   }
-  async getRecentCommits(_since) {
-    throw new Error("getRecentCommits not implemented for Bitbucket");
+  async getRecentCommits(since) {
+    this._validateAccessTokenAndUrl();
+    const { workspace, repo_slug } = parseBitbucketOrganizationAndRepo(this.url);
+    const bitbucketSdk = createBitbucketSdk(this.accessToken);
+    const rawCommits = await bitbucketSdk.listRecentCommits({
+      workspace,
+      repo_slug,
+      since
+    });
+    return {
+      data: rawCommits.map((commit) => {
+        const c = commit;
+        const author = c["author"];
+        const match = author?.raw?.match(/^(.+?)\s*<([^>]+)>/);
+        return {
+          sha: c["hash"] ?? "",
+          commit: {
+            committer: c["date"] ? { date: c["date"] } : void 0,
+            author: match ? { name: match[1]?.trim(), email: match[2] } : void 0,
+            message: c["message"] ?? ""
+          },
+          // Bitbucket resolves the commit to an account when it can; account_id
+          // matches repo_contributor.external_id for Bitbucket rows.
+          authorExternalId: author?.user?.account_id ?? null
+        };
+      })
+    };
   }
   async getRateLimitStatus() {
     return null;
@@ -9389,7 +9477,7 @@ function getOctoKit(options) {
         octokit.log.warn(
           `Request quota exhausted for request ${options2.method} ${options2.url}`
         );
-        if (retryCount === 0) {
+        if (retryCount < 3) {
           octokit.log.info(`Retrying after ${retryAfter} seconds!`);
           return true;
         }
@@ -9399,7 +9487,7 @@ function getOctoKit(options) {
         octokit.log.warn(
           `SecondaryRateLimit detected for request ${options2.method} ${options2.url}`
         );
-        if (retryCount === 0) {
+        if (retryCount < 3) {
           octokit.log.info(`Retrying after ${retryAfter} seconds!`);
           return true;
         }
@@ -10164,10 +10252,16 @@ function getGithubSdk(params = {}) {
       });
       return members;
     },
-    async getUserProfile(params2) {
+    async getUserProfile(getProfileParams) {
+      const cache = params.userProfileCache;
+      const cached = cache?.get(getProfileParams.username);
+      if (cached) {
+        return cached;
+      }
       const { data } = await octokit.rest.users.getByUsername({
-        username: params2.username
+        username: getProfileParams.username
       });
+      cache?.set(getProfileParams.username, data);
       return data;
     },
     async getLatestRepoCommitByAuthor(params2) {
@@ -10260,12 +10354,16 @@ function determinePrStatus(state, isDraft) {
 }
 var GithubSCMLib = class extends SCMLib {
   // we don't always need a url, what's important is that we have an access token
-  constructor(url, accessToken, scmOrg) {
+  constructor(url, accessToken, scmOrg, options) {
     super(url, accessToken, scmOrg);
     __publicField(this, "githubSdk");
     this.githubSdk = getGithubSdk({
       auth: accessToken,
-      url
+      url,
+      // Honor GitHub's rate-limit/Retry-After backoff for bulk callers
+      // (e.g. the contributor sync) instead of failing fast.
+      isEnableRetries: options?.enableThrottling,
+      userProfileCache: options?.userProfileCache
     });
   }
   async createSubmitRequest(params) {
@@ -10395,7 +10493,13 @@ var GithubSCMLib = class extends SCMLib {
           author: c.commit.author ? { email: c.commit.author.email, name: c.commit.author.name } : void 0,
           message: c.commit.message
         },
-        parents: c.parents?.map((p) => ({ sha: p.sha }))
+        parents: c.parents?.map((p) => ({ sha: p.sha })),
+        // Top-level `author` is GitHub's resolution of the commit to an account
+        // (null when GitHub can't tie the commit email to a user). Its numeric
+        // id matches repo_contributor.external_id (stored as String(id)), and
+        // its type marks GitHub App / bot accounts authoritatively.
+        authorExternalId: c.author?.id != null ? String(c.author.id) : null,
+        authorIsBot: c.author?.type === "Bot"
       }))
     };
   }
@@ -10464,7 +10568,11 @@ var GithubSCMLib = class extends SCMLib {
                     author: c.login
                   }
                 );
-                const commitEmail = commit?.commit?.author?.email;
+                const commitAuthor = commit?.commit?.author;
+                const commitEmail = commitAuthor?.email;
+                if (commitAuthor?.name && displayName === c.login) {
+                  displayName = commitAuthor.name;
+                }
                 if (commitEmail) {
                   if (isRealEmail(commitEmail)) {
                     profileEmail = commitEmail;
@@ -10543,6 +10651,11 @@ var GithubSCMLib = class extends SCMLib {
               username: c.login
             });
           }
+          contextLogger.info("[GitHub] Contributor resolved", {
+            username: c.login,
+            profileName: displayName,
+            displayNameIsNull: displayName === null
+          });
           return {
             externalId: String(c.id),
             username: c.login ?? null,
@@ -12321,12 +12434,20 @@ var StubSCMLib = class extends SCMLib {
 };
 
 // src/features/analysis/scm/scmFactory.ts
-async function createScmLib({ url, accessToken, scmType, scmOrg }, { propagateExceptions = false, skipValidation = false } = {}) {
+async function createScmLib({ url, accessToken, scmType, scmOrg }, {
+  propagateExceptions = false,
+  skipValidation = false,
+  enableThrottling = false,
+  githubUserProfileCache
+} = {}) {
   const trimmedUrl = url ? url.trim().replace(/\/$/, "").replace(/.git$/i, "") : void 0;
   try {
     switch (scmType) {
       case "GITHUB" /* GITHUB */: {
-        const scm = new GithubSCMLib(trimmedUrl, accessToken, scmOrg);
+        const scm = new GithubSCMLib(trimmedUrl, accessToken, scmOrg, {
+          enableThrottling,
+          userProfileCache: githubUserProfileCache
+        });
         if (!skipValidation) await scm.validateParams();
         return scm;
       }
@@ -19943,7 +20064,7 @@ function createLogger(config2) {
 
 // src/features/claude_code/hook_logger.ts
 var DD_RUM_TOKEN = true ? "pubf59c0182545bfb4c299175119f1abf9b" : "";
-var CLI_VERSION = true ? "1.4.29" : "unknown";
+var CLI_VERSION = true ? "1.4.31" : "unknown";
 var NAMESPACE = "mobbdev-claude-code-hook-logs";
 var claudeCodeVersion;
 function buildDdTags() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mobbdev",
-  "version": "1.4.29",
+  "version": "1.4.31",
   "description": "Automated secure code remediation tool",
   "repository": "git+https://github.com/mobb-dev/bugsy.git",
   "main": "dist/index.mjs",