mobbdev 1.4.30 → 1.4.32

package/dist/args/commands/upload_ai_blame.mjs

@@ -150,7 +150,7 @@ function getSdk(client, withWrapper = defaultWrapper) {
     }
   };
 }
-var AiBlameInferenceType, FixQuestionInputType, Language, ManifestAction, Effort_To_Apply_Fix_Enum, Fix_Rating_Tag_Enum, Fix_Report_State_Enum, Fix_State_Enum, IssueLanguage_Enum, IssueType_Enum, Pr_Status_Enum, Project_Role_Type_Enum, Vulnerability_Report_Issue_Category_Enum, Vulnerability_Report_Issue_State_Enum, Vulnerability_Report_Issue_Tag_Enum, Vulnerability_Report_Vendor_Enum, Vulnerability_Severity_Enum, FixDetailsFragmentDoc, FixReportSummaryFieldsFragmentDoc, MeDocument, GetLastOrgAndNamedProjectDocument, GetLastOrgDocument, GetEncryptedApiTokenDocument, FixReportStateDocument, GetVulnerabilityReportPathsDocument, GetAnalysisSubscriptionDocument, GetAnalysisDocument, GetFixesDocument, GetVulByNodesMetadataDocument, GetFalsePositiveDocument, UpdateScmTokenDocument, UploadS3BucketInfoDocument, GetTracyDiffUploadUrlDocument, AnalyzeCommitForExtensionAiBlameDocument, GetAiBlameInferenceDocument, GetAiBlameAttributionPromptDocument, GetPromptSummaryDocument, UploadAiBlameInferencesInitDocument, FinalizeAiBlameInferencesUploadDocument, UploadTracyRecordsDocument, GetTracyRawDataUploadUrlDocument, DigestVulnerabilityReportDocument, SubmitVulnerabilityReportDocument, CreateCommunityUserDocument, CreateCliLoginDocument, PerformCliLoginDocument, SetQuarantineEnabledDocument, CreateProjectDocument, ValidateRepoUrlDocument, GitReferenceDocument, AutoPrAnalysisDocument, GetFixWithAnswersDocument, GetFixReportsByRepoUrlDocument, GetReportFixesDocument, GetLatestReportByRepoUrlDocument, UpdateDownloadedFixDataDocument, GetUserMvsAutoFixDocument, StreamBlameAiAnalysisRequestsDocument, StreamCommitBlameRequestsDocument, ScanSkillDocument, SkillVerdictsByMd5Document, LogMvsEventDocument, GetMvsProjectDocument, IssueTypesDocument, defaultWrapper;
+var AiBlameInferenceType, FixQuestionInputType, Language, ManifestAction, Effort_To_Apply_Fix_Enum, Fix_Rating_Tag_Enum, Fix_Report_State_Enum, Fix_State_Enum, IssueLanguage_Enum, Pr_Status_Enum, Project_Role_Type_Enum, Vulnerability_Report_Issue_Category_Enum, Vulnerability_Report_Issue_State_Enum, Vulnerability_Report_Issue_Tag_Enum, Vulnerability_Report_Vendor_Enum, Vulnerability_Severity_Enum, FixDetailsFragmentDoc, FixReportSummaryFieldsFragmentDoc, MeDocument, GetLastOrgAndNamedProjectDocument, GetLastOrgDocument, GetEncryptedApiTokenDocument, FixReportStateDocument, GetVulnerabilityReportPathsDocument, GetAnalysisSubscriptionDocument, GetAnalysisDocument, GetFixesDocument, GetVulByNodesMetadataDocument, GetFalsePositiveDocument, UpdateScmTokenDocument, UploadS3BucketInfoDocument, GetTracyDiffUploadUrlDocument, AnalyzeCommitForExtensionAiBlameDocument, GetAiBlameInferenceDocument, GetAiBlameAttributionPromptDocument, GetPromptSummaryDocument, UploadAiBlameInferencesInitDocument, FinalizeAiBlameInferencesUploadDocument, UploadTracyRecordsDocument, GetTracyRawDataUploadUrlDocument, DigestVulnerabilityReportDocument, SubmitVulnerabilityReportDocument, CreateCommunityUserDocument, CreateCliLoginDocument, PerformCliLoginDocument, SetQuarantineEnabledDocument, CreateProjectDocument, ValidateRepoUrlDocument, GitReferenceDocument, AutoPrAnalysisDocument, GetFixWithAnswersDocument, GetFixReportsByRepoUrlDocument, GetReportFixesDocument, GetLatestReportByRepoUrlDocument, UpdateDownloadedFixDataDocument, GetUserMvsAutoFixDocument, StreamBlameAiAnalysisRequestsDocument, StreamCommitBlameRequestsDocument, ScanSkillDocument, SkillVerdictsByMd5Document, LogMvsEventDocument, GetMvsProjectDocument, IssueTypesDocument, defaultWrapper;
 var init_client_generates = __esm({
   "src/features/analysis/scm/generates/client_generates.ts"() {
     "use strict";
@@ -237,160 +237,6 @@ var init_client_generates = __esm({
       IssueLanguage_Enum2["Yaml"] = "YAML";
       return IssueLanguage_Enum2;
     })(IssueLanguage_Enum || {});
-    IssueType_Enum = /* @__PURE__ */ ((IssueType_Enum2) => {
-      IssueType_Enum2["ActionNotPinnedToCommitSha"] = "ACTION_NOT_PINNED_TO_COMMIT_SHA";
-      IssueType_Enum2["AutoEscapeFalse"] = "AUTO_ESCAPE_FALSE";
-      IssueType_Enum2["AvoidBuiltinShadowing"] = "AVOID_BUILTIN_SHADOWING";
-      IssueType_Enum2["AvoidIdentityComparisonCachedTypes"] = "AVOID_IDENTITY_COMPARISON_CACHED_TYPES";
-      IssueType_Enum2["AwsDynamodbPointInTimeRecoveryDisabled"] = "AWS_DYNAMODB_POINT_IN_TIME_RECOVERY_DISABLED";
-      IssueType_Enum2["BufferOverflow"] = "BUFFER_OVERFLOW";
-      IssueType_Enum2["ClientDomStoredCodeInjection"] = "CLIENT_DOM_STORED_CODE_INJECTION";
-      IssueType_Enum2["CmDi"] = "CMDi";
-      IssueType_Enum2["CmDiRelativePathCommand"] = "CMDi_relative_path_command";
-      IssueType_Enum2["CodeInComment"] = "CODE_IN_COMMENT";
-      IssueType_Enum2["ConfusingNaming"] = "CONFUSING_NAMING";
-      IssueType_Enum2["CredentialDisclosure"] = "CREDENTIAL_DISCLOSURE";
-      IssueType_Enum2["Csrf"] = "CSRF";
-      IssueType_Enum2["DangerousFunctionOverflow"] = "DANGEROUS_FUNCTION_OVERFLOW";
-      IssueType_Enum2["DeadCodeUnusedField"] = "DEAD_CODE_UNUSED_FIELD";
-      IssueType_Enum2["DebugEnabled"] = "DEBUG_ENABLED";
-      IssueType_Enum2["DeclareVariableExplicitly"] = "DECLARE_VARIABLE_EXPLICITLY";
-      IssueType_Enum2["DefaultRightsInObjDefinition"] = "DEFAULT_RIGHTS_IN_OBJ_DEFINITION";
-      IssueType_Enum2["DeprecatedFunction"] = "DEPRECATED_FUNCTION";
-      IssueType_Enum2["DjangoBlankFieldNeedsNullOrDefault"] = "DJANGO_BLANK_FIELD_NEEDS_NULL_OR_DEFAULT";
-      IssueType_Enum2["DosStringBuilder"] = "DOS_STRING_BUILDER";
-      IssueType_Enum2["DoNotRaiseException"] = "DO_NOT_RAISE_EXCEPTION";
-      IssueType_Enum2["DoNotThrowGenericException"] = "DO_NOT_THROW_GENERIC_EXCEPTION";
-      IssueType_Enum2["DuplicatedStrings"] = "DUPLICATED_STRINGS";
-      IssueType_Enum2["ErroneousStringCompare"] = "ERRONEOUS_STRING_COMPARE";
-      IssueType_Enum2["ErrorCondtionWithoutAction"] = "ERROR_CONDTION_WITHOUT_ACTION";
-      IssueType_Enum2["ExcessiveSecretsExposure"] = "EXCESSIVE_SECRETS_EXPOSURE";
-      IssueType_Enum2["FrameableLoginPage"] = "FRAMEABLE_LOGIN_PAGE";
-      IssueType_Enum2["FunctionCallWithoutParentheses"] = "FUNCTION_CALL_WITHOUT_PARENTHESES";
-      IssueType_Enum2["GhActionsShellInjection"] = "GH_ACTIONS_SHELL_INJECTION";
-      IssueType_Enum2["GraphqlDepthLimit"] = "GRAPHQL_DEPTH_LIMIT";
-      IssueType_Enum2["HardcodedDomainInHtml"] = "HARDCODED_DOMAIN_IN_HTML";
-      IssueType_Enum2["HardcodedSecrets"] = "HARDCODED_SECRETS";
-      IssueType_Enum2["HeaderManipulation"] = "HEADER_MANIPULATION";
-      IssueType_Enum2["HeapInspection"] = "HEAP_INSPECTION";
-      IssueType_Enum2["HtmlCommentInJsp"] = "HTML_COMMENT_IN_JSP";
-      IssueType_Enum2["HttpOnlyCookie"] = "HTTP_ONLY_COOKIE";
-      IssueType_Enum2["HttpParameterPollution"] = "HTTP_PARAMETER_POLLUTION";
-      IssueType_Enum2["HttpResponseSplitting"] = "HTTP_RESPONSE_SPLITTING";
-      IssueType_Enum2["IframeWithoutSandbox"] = "IFRAME_WITHOUT_SANDBOX";
-      IssueType_Enum2["ImproperCertificateValidation"] = "IMPROPER_CERTIFICATE_VALIDATION";
-      IssueType_Enum2["ImproperExceptionHandling"] = "IMPROPER_EXCEPTION_HANDLING";
-      IssueType_Enum2["ImproperResourceShutdownOrRelease"] = "IMPROPER_RESOURCE_SHUTDOWN_OR_RELEASE";
-      IssueType_Enum2["ImproperStringFormatting"] = "IMPROPER_STRING_FORMATTING";
-      IssueType_Enum2["ImproperValidationOfArrayIndex"] = "IMPROPER_VALIDATION_OF_ARRAY_INDEX";
-      IssueType_Enum2["IncompleteHostnameRegex"] = "INCOMPLETE_HOSTNAME_REGEX";
-      IssueType_Enum2["IncompleteSanitization"] = "INCOMPLETE_SANITIZATION";
-      IssueType_Enum2["IncompleteUrlSanitization"] = "INCOMPLETE_URL_SANITIZATION";
-      IssueType_Enum2["IncompleteUrlSchemeCheck"] = "INCOMPLETE_URL_SCHEME_CHECK";
-      IssueType_Enum2["IncorrectIntegerConversion"] = "INCORRECT_INTEGER_CONVERSION";
-      IssueType_Enum2["IncorrectSqlApiUsage"] = "INCORRECT_SQL_API_USAGE";
-      IssueType_Enum2["InformationExposureViaHeaders"] = "INFORMATION_EXPOSURE_VIA_HEADERS";
-      IssueType_Enum2["InsecureBinderConfiguration"] = "INSECURE_BINDER_CONFIGURATION";
-      IssueType_Enum2["InsecureCookie"] = "INSECURE_COOKIE";
-      IssueType_Enum2["InsecureDeserialization"] = "INSECURE_DESERIALIZATION";
-      IssueType_Enum2["InsecurePostmessage"] = "INSECURE_POSTMESSAGE";
-      IssueType_Enum2["InsecureRandomness"] = "INSECURE_RANDOMNESS";
-      IssueType_Enum2["InsecureTmpFile"] = "INSECURE_TMP_FILE";
-      IssueType_Enum2["InsecureUuidVersion"] = "INSECURE_UUID_VERSION";
-      IssueType_Enum2["InsufficientLogging"] = "INSUFFICIENT_LOGGING";
-      IssueType_Enum2["J2EeGetConnection"] = "J2EE_GET_CONNECTION";
-      IssueType_Enum2["JqueryDeprecatedSymbols"] = "JQUERY_DEPRECATED_SYMBOLS";
-      IssueType_Enum2["JwtDecodeWithoutVerify"] = "JWT_DECODE_WITHOUT_VERIFY";
-      IssueType_Enum2["LeftoverDebugCode"] = "LEFTOVER_DEBUG_CODE";
-      IssueType_Enum2["LocaleDependentComparison"] = "LOCALE_DEPENDENT_COMPARISON";
-      IssueType_Enum2["LogForging"] = "LOG_FORGING";
-      IssueType_Enum2["MissingAntiforgeryValidation"] = "MISSING_ANTIFORGERY_VALIDATION";
-      IssueType_Enum2["MissingCheckAgainstNull"] = "MISSING_CHECK_AGAINST_NULL";
-      IssueType_Enum2["MissingCspHeader"] = "MISSING_CSP_HEADER";
-      IssueType_Enum2["MissingEncodingFileOpen"] = "MISSING_ENCODING_FILE_OPEN";
-      IssueType_Enum2["MissingEqualsOrHashcode"] = "MISSING_EQUALS_OR_HASHCODE";
-      IssueType_Enum2["MissingHstsHeader"] = "MISSING_HSTS_HEADER";
-      IssueType_Enum2["MissingSslMinversion"] = "MISSING_SSL_MINVERSION";
-      IssueType_Enum2["MissingTemplateStringIndicator"] = "MISSING_TEMPLATE_STRING_INDICATOR";
-      IssueType_Enum2["MissingUser"] = "MISSING_USER";
-      IssueType_Enum2["MissingWhitespace"] = "MISSING_WHITESPACE";
-      IssueType_Enum2["MissingWorkflowPermissions"] = "MISSING_WORKFLOW_PERMISSIONS";
-      IssueType_Enum2["MissingXFrameOptions"] = "MISSING_X_FRAME_OPTIONS";
-      IssueType_Enum2["ModifiedDefaultParam"] = "MODIFIED_DEFAULT_PARAM";
-      IssueType_Enum2["NonFinalPublicStaticField"] = "NON_FINAL_PUBLIC_STATIC_FIELD";
-      IssueType_Enum2["NonReadonlyField"] = "NON_READONLY_FIELD";
-      IssueType_Enum2["NoAssert"] = "NO_ASSERT";
-      IssueType_Enum2["NoEquivalenceMethod"] = "NO_EQUIVALENCE_METHOD";
-      IssueType_Enum2["NoLimitsOrThrottling"] = "NO_LIMITS_OR_THROTTLING";
-      IssueType_Enum2["NoNestedTry"] = "NO_NESTED_TRY";
-      IssueType_Enum2["NoNewPrivileges"] = "NO_NEW_PRIVILEGES";
-      IssueType_Enum2["NoOpOverhead"] = "NO_OP_OVERHEAD";
-      IssueType_Enum2["NoPrintStatement"] = "NO_PRINT_STATEMENT";
-      IssueType_Enum2["NoReturnInFinally"] = "NO_RETURN_IN_FINALLY";
-      IssueType_Enum2["NoVar"] = "NO_VAR";
-      IssueType_Enum2["NullDereference"] = "NULL_DEREFERENCE";
-      IssueType_Enum2["OftenMisusedBooleanGetBoolean"] = "OFTEN_MISUSED_BOOLEAN_GET_BOOLEAN";
-      IssueType_Enum2["OpenRedirect"] = "OPEN_REDIRECT";
-      IssueType_Enum2["OverlyBroadCatch"] = "OVERLY_BROAD_CATCH";
-      IssueType_Enum2["OverlyLargeRange"] = "OVERLY_LARGE_RANGE";
-      IssueType_Enum2["PasswordInComment"] = "PASSWORD_IN_COMMENT";
-      IssueType_Enum2["PoorErrorHandlingEmptyCatchBlock"] = "POOR_ERROR_HANDLING_EMPTY_CATCH_BLOCK";
-      IssueType_Enum2["PortAllInterfaces"] = "PORT_ALL_INTERFACES";
-      IssueType_Enum2["PrivacyViolation"] = "PRIVACY_VIOLATION";
-      IssueType_Enum2["PrototypePollution"] = "PROTOTYPE_POLLUTION";
-      IssueType_Enum2["Pt"] = "PT";
-      IssueType_Enum2["RaceConditionFormatFlaw"] = "RACE_CONDITION_FORMAT_FLAW";
-      IssueType_Enum2["Redos"] = "REDOS";
-      IssueType_Enum2["RedundantCondition"] = "REDUNDANT_CONDITION";
-      IssueType_Enum2["RedundantNilErrorCheck"] = "REDUNDANT_NIL_ERROR_CHECK";
-      IssueType_Enum2["RegexInjection"] = "REGEX_INJECTION";
-      IssueType_Enum2["RegexMissingTimeout"] = "REGEX_MISSING_TIMEOUT";
-      IssueType_Enum2["RequestParametersBoundViaInput"] = "REQUEST_PARAMETERS_BOUND_VIA_INPUT";
-      IssueType_Enum2["ReturnInInit"] = "RETURN_IN_INIT";
-      IssueType_Enum2["ReturnShouldNotBeInvariant"] = "RETURN_SHOULD_NOT_BE_INVARIANT";
-      IssueType_Enum2["SpringDefaultPermit"] = "SPRING_DEFAULT_PERMIT";
-      IssueType_Enum2["SqlInjection"] = "SQL_Injection";
-      IssueType_Enum2["Ssrf"] = "SSRF";
-      IssueType_Enum2["StringFormatMisuse"] = "STRING_FORMAT_MISUSE";
-      IssueType_Enum2["StringTerminationError"] = "STRING_TERMINATION_ERROR";
-      IssueType_Enum2["SystemExitShouldReraise"] = "SYSTEM_EXIT_SHOULD_RERAISE";
-      IssueType_Enum2["SystemInformationLeak"] = "SYSTEM_INFORMATION_LEAK";
-      IssueType_Enum2["SystemInformationLeakExternal"] = "SYSTEM_INFORMATION_LEAK_EXTERNAL";
-      IssueType_Enum2["TaintedNumericCast"] = "TAINTED_NUMERIC_CAST";
-      IssueType_Enum2["TarSlip"] = "TAR_SLIP";
-      IssueType_Enum2["TrustBoundaryViolation"] = "TRUST_BOUNDARY_VIOLATION";
-      IssueType_Enum2["TypeConfusion"] = "TYPE_CONFUSION";
-      IssueType_Enum2["UncheckedLoopCondition"] = "UNCHECKED_LOOP_CONDITION";
-      IssueType_Enum2["UncheckedReturnValue"] = "UNCHECKED_RETURN_VALUE";
-      IssueType_Enum2["UnencryptedAwsSqsQueue"] = "UNENCRYPTED_AWS_SQS_QUEUE";
-      IssueType_Enum2["UnnecessaryImports"] = "UNNECESSARY_IMPORTS";
-      IssueType_Enum2["UnsafeDeserialization"] = "UNSAFE_DESERIALIZATION";
-      IssueType_Enum2["UnsafeReflection"] = "UNSAFE_REFLECTION";
-      IssueType_Enum2["UnsafeTargetBlank"] = "UNSAFE_TARGET_BLANK";
-      IssueType_Enum2["UnsafeWebThread"] = "UNSAFE_WEB_THREAD";
-      IssueType_Enum2["UnvalidatedPublicMethodArgument"] = "UNVALIDATED_PUBLIC_METHOD_ARGUMENT";
-      IssueType_Enum2["UselessIfBody"] = "USELESS_IF_BODY";
-      IssueType_Enum2["UselessRegexpCharEscape"] = "USELESS_REGEXP_CHAR_ESCAPE";
-      IssueType_Enum2["UselessTernary"] = "USELESS_TERNARY";
-      IssueType_Enum2["UseOfHardCodedCryptographicKey"] = "USE_OF_HARD_CODED_CRYPTOGRAPHIC_KEY";
-      IssueType_Enum2["UseOfSystemOutputStream"] = "USE_OF_SYSTEM_OUTPUT_STREAM";
-      IssueType_Enum2["UseRaiseForStatus"] = "USE_RAISE_FOR_STATUS";
-      IssueType_Enum2["UseSysExit"] = "USE_SYS_EXIT";
-      IssueType_Enum2["UseTimeout"] = "USE_TIMEOUT";
-      IssueType_Enum2["ValueNeverRead"] = "VALUE_NEVER_READ";
-      IssueType_Enum2["ValueShadowing"] = "VALUE_SHADOWING";
-      IssueType_Enum2["WcfMisconfigurationInsufficientLogging"] = "WCF_MISCONFIGURATION_INSUFFICIENT_LOGGING";
-      IssueType_Enum2["WcfMisconfigurationThrottlingNotEnabled"] = "WCF_MISCONFIGURATION_THROTTLING_NOT_ENABLED";
-      IssueType_Enum2["WeakEncryption"] = "WEAK_ENCRYPTION";
-      IssueType_Enum2["WeakXmlSchemaUnboundedOccurrences"] = "WEAK_XML_SCHEMA_UNBOUNDED_OCCURRENCES";
-      IssueType_Enum2["WebsocketMissingOriginCheck"] = "WEBSOCKET_MISSING_ORIGIN_CHECK";
-      IssueType_Enum2["WildcardImports"] = "WILDCARD_IMPORTS";
-      IssueType_Enum2["WritableFilesystemService"] = "WRITABLE_FILESYSTEM_SERVICE";
-      IssueType_Enum2["Xss"] = "XSS";
-      IssueType_Enum2["Xxe"] = "XXE";
-      IssueType_Enum2["ZipSlip"] = "ZIP_SLIP";
-      return IssueType_Enum2;
-    })(IssueType_Enum || {});
     Pr_Status_Enum = /* @__PURE__ */ ((Pr_Status_Enum2) => {
       Pr_Status_Enum2["Active"] = "ACTIVE";
       Pr_Status_Enum2["Closed"] = "CLOSED";
@@ -1790,12 +1636,21 @@ var init_issue = __esm({
 });
 
 // src/features/analysis/scm/shared/src/issueTypeCatalog.ts
+function hydrateIssueTypeCatalog(entries) {
+  catalog = new Map(entries.map((entry) => [entry.value, entry]));
+}
+function isIssueTypeCatalogHydrated() {
+  return catalog !== null;
+}
 function getIssueTypeCatalogEntry(value) {
   if (!catalog || !value) {
     return void 0;
   }
   return catalog.get(value);
 }
+function listIssueTypeCatalog() {
+  return catalog ? [...catalog.values()] : [];
+}
 var catalog;
 var init_issueTypeCatalog = __esm({
   "src/features/analysis/scm/shared/src/issueTypeCatalog.ts"() {
@@ -1806,176 +1661,19 @@ var init_issueTypeCatalog = __esm({
 
 // src/features/analysis/scm/shared/src/getIssueType.ts
 import { z as z5 } from "zod";
-var issueTypeMap, issueTypeZ, getIssueTypeFriendlyString, statusMap, statusZ, issueDescription;
+var SafeIssueTypeStringZ, getIssueTypeFriendlyString, statusMap, statusZ, issueDescription;
 var init_getIssueType = __esm({
   "src/features/analysis/scm/shared/src/getIssueType.ts"() {
     "use strict";
     init_client_generates();
     init_issueTypeCatalog();
-    issueTypeMap = {
-      ["NO_LIMITS_OR_THROTTLING" /* NoLimitsOrThrottling */]: "Missing Rate Limiting",
-      ["SQL_Injection" /* SqlInjection */]: "SQL Injection",
-      ["CMDi_relative_path_command" /* CmDiRelativePathCommand */]: "Relative Path Command Injection",
-      ["CMDi" /* CmDi */]: "Command Injection",
-      ["CONFUSING_NAMING" /* ConfusingNaming */]: "Confusing Naming",
-      ["XXE" /* Xxe */]: "XXE",
-      ["XSS" /* Xss */]: "XSS",
-      ["PT" /* Pt */]: "Path Traversal",
-      ["ZIP_SLIP" /* ZipSlip */]: "Zip Slip",
-      ["INSECURE_RANDOMNESS" /* InsecureRandomness */]: "Insecure Randomness",
-      ["SSRF" /* Ssrf */]: "Server Side Request Forgery",
-      ["TYPE_CONFUSION" /* TypeConfusion */]: "Type Confusion",
-      ["REGEX_INJECTION" /* RegexInjection */]: "Regular Expression Injection",
-      ["INCOMPLETE_URL_SANITIZATION" /* IncompleteUrlSanitization */]: "Incomplete URL Sanitization",
-      ["LOCALE_DEPENDENT_COMPARISON" /* LocaleDependentComparison */]: "Locale Dependent Comparison",
-      ["LOG_FORGING" /* LogForging */]: "Log Forging",
-      ["MISSING_CHECK_AGAINST_NULL" /* MissingCheckAgainstNull */]: "Missing Check against Null",
-      ["PASSWORD_IN_COMMENT" /* PasswordInComment */]: "Password in Comment",
-      ["OVERLY_BROAD_CATCH" /* OverlyBroadCatch */]: "Poor Error Handling: Overly Broad Catch",
-      ["USE_OF_SYSTEM_OUTPUT_STREAM" /* UseOfSystemOutputStream */]: "Use of System.out/System.err",
-      ["DANGEROUS_FUNCTION_OVERFLOW" /* DangerousFunctionOverflow */]: "Use of dangerous function",
-      ["DOS_STRING_BUILDER" /* DosStringBuilder */]: "Denial of Service: StringBuilder",
-      ["OPEN_REDIRECT" /* OpenRedirect */]: "Open Redirect",
-      ["WEAK_XML_SCHEMA_UNBOUNDED_OCCURRENCES" /* WeakXmlSchemaUnboundedOccurrences */]: "Weak XML Schema: Unbounded Occurrences",
-      ["SYSTEM_INFORMATION_LEAK" /* SystemInformationLeak */]: "System Information Leak",
-      ["SYSTEM_INFORMATION_LEAK_EXTERNAL" /* SystemInformationLeakExternal */]: "External System Information Leak",
-      ["HTTP_RESPONSE_SPLITTING" /* HttpResponseSplitting */]: "HTTP response splitting",
-      ["HTTP_ONLY_COOKIE" /* HttpOnlyCookie */]: "Cookie is not HttpOnly",
-      ["INSECURE_COOKIE" /* InsecureCookie */]: "Insecure Cookie",
-      ["TRUST_BOUNDARY_VIOLATION" /* TrustBoundaryViolation */]: "Trust Boundary Violation",
-      ["NULL_DEREFERENCE" /* NullDereference */]: "Null Dereference",
-      ["UNSAFE_DESERIALIZATION" /* UnsafeDeserialization */]: "Unsafe deserialization",
-      ["UNSAFE_REFLECTION" /* UnsafeReflection */]: "Unsafe Reflection",
-      ["INSECURE_BINDER_CONFIGURATION" /* InsecureBinderConfiguration */]: "Insecure Binder Configuration",
-      ["UNSAFE_TARGET_BLANK" /* UnsafeTargetBlank */]: "Unsafe use of target blank",
-      ["IFRAME_WITHOUT_SANDBOX" /* IframeWithoutSandbox */]: "Client use of iframe without sandbox",
-      ["JQUERY_DEPRECATED_SYMBOLS" /* JqueryDeprecatedSymbols */]: "jQuery deprecated symbols",
-      ["MISSING_ANTIFORGERY_VALIDATION" /* MissingAntiforgeryValidation */]: "Missing Anti-Forgery Validation",
-      ["GRAPHQL_DEPTH_LIMIT" /* GraphqlDepthLimit */]: "GraphQL Depth Limit",
-      ["UNCHECKED_LOOP_CONDITION" /* UncheckedLoopCondition */]: "Unchecked Loop Condition",
-      ["IMPROPER_RESOURCE_SHUTDOWN_OR_RELEASE" /* ImproperResourceShutdownOrRelease */]: "Improper Resource Shutdown or Release",
-      ["IMPROPER_EXCEPTION_HANDLING" /* ImproperExceptionHandling */]: "Improper Exception Handling",
-      ["DEFAULT_RIGHTS_IN_OBJ_DEFINITION" /* DefaultRightsInObjDefinition */]: "Default Definer Rights in Package or Object Definition",
-      ["HTML_COMMENT_IN_JSP" /* HtmlCommentInJsp */]: "HTML Comment in JSP",
-      ["ERROR_CONDTION_WITHOUT_ACTION" /* ErrorCondtionWithoutAction */]: "Error Condition Without Action",
-      ["DEPRECATED_FUNCTION" /* DeprecatedFunction */]: "Deprecated Function",
-      ["HARDCODED_SECRETS" /* HardcodedSecrets */]: "Hardcoded Secrets",
-      ["PROTOTYPE_POLLUTION" /* PrototypePollution */]: "Prototype Pollution",
-      ["RACE_CONDITION_FORMAT_FLAW" /* RaceConditionFormatFlaw */]: "Race Condition Format Flaw",
-      ["NON_FINAL_PUBLIC_STATIC_FIELD" /* NonFinalPublicStaticField */]: "Non-final Public Static Field",
-      ["MISSING_HSTS_HEADER" /* MissingHstsHeader */]: "Missing HSTS Header",
-      ["DEAD_CODE_UNUSED_FIELD" /* DeadCodeUnusedField */]: "Dead Code: Unused Field",
-      ["HEADER_MANIPULATION" /* HeaderManipulation */]: "Header Manipulation",
-      ["MISSING_EQUALS_OR_HASHCODE" /* MissingEqualsOrHashcode */]: "Missing equals or hashcode method",
-      ["WCF_MISCONFIGURATION_INSUFFICIENT_LOGGING" /* WcfMisconfigurationInsufficientLogging */]: "WCF Misconfiguration: Insufficient Logging",
-      ["WCF_MISCONFIGURATION_THROTTLING_NOT_ENABLED" /* WcfMisconfigurationThrottlingNotEnabled */]: "WCF Misconfiguration: Throttling Not Enabled",
-      ["USELESS_REGEXP_CHAR_ESCAPE" /* UselessRegexpCharEscape */]: "Useless regular-expression character escape",
-      ["INCOMPLETE_HOSTNAME_REGEX" /* IncompleteHostnameRegex */]: "Incomplete Hostname Regex",
-      ["OVERLY_LARGE_RANGE" /* OverlyLargeRange */]: "Regex: Overly Large Range",
-      ["INSUFFICIENT_LOGGING" /* InsufficientLogging */]: "Insufficient Logging of Sensitive Operations",
-      ["PRIVACY_VIOLATION" /* PrivacyViolation */]: "Privacy Violation",
-      ["INCOMPLETE_URL_SCHEME_CHECK" /* IncompleteUrlSchemeCheck */]: "Incomplete URL Scheme Check",
-      ["VALUE_NEVER_READ" /* ValueNeverRead */]: "Value Never Read",
-      ["VALUE_SHADOWING" /* ValueShadowing */]: "Value Shadowing",
-      ["NO_EQUIVALENCE_METHOD" /* NoEquivalenceMethod */]: "Class Does Not Implement Equivalence Method",
-      ["INFORMATION_EXPOSURE_VIA_HEADERS" /* InformationExposureViaHeaders */]: "Information Exposure via Headers",
-      ["DEBUG_ENABLED" /* DebugEnabled */]: "Debug Enabled",
-      ["J2EE_GET_CONNECTION" /* J2EeGetConnection */]: "J2EE Bad Practices: getConnection()",
-      ["LEFTOVER_DEBUG_CODE" /* LeftoverDebugCode */]: "Leftover Debug Code",
-      ["POOR_ERROR_HANDLING_EMPTY_CATCH_BLOCK" /* PoorErrorHandlingEmptyCatchBlock */]: "Poor Error Handling: Empty Catch Block",
-      ["ERRONEOUS_STRING_COMPARE" /* ErroneousStringCompare */]: "Erroneous String Compare",
-      ["UNVALIDATED_PUBLIC_METHOD_ARGUMENT" /* UnvalidatedPublicMethodArgument */]: "Unvalidated Public Method Argument",
-      ["AUTO_ESCAPE_FALSE" /* AutoEscapeFalse */]: "Auto-escape False",
-      ["MISSING_CSP_HEADER" /* MissingCspHeader */]: "Missing CSP Header",
-      ["HARDCODED_DOMAIN_IN_HTML" /* HardcodedDomainInHtml */]: "Hardcoded Domain in HTML",
-      ["HEAP_INSPECTION" /* HeapInspection */]: "Heap Inspection",
-      ["CLIENT_DOM_STORED_CODE_INJECTION" /* ClientDomStoredCodeInjection */]: "Client Code Injection",
-      ["STRING_FORMAT_MISUSE" /* StringFormatMisuse */]: "String Format Misuse",
-      ["NON_READONLY_FIELD" /* NonReadonlyField */]: "Non Readonly Field",
-      ["CSRF" /* Csrf */]: "Cross-Site Request Forgery (CSRF)",
-      ["WEAK_ENCRYPTION" /* WeakEncryption */]: "Weak Encryption Mechanism",
-      ["CODE_IN_COMMENT" /* CodeInComment */]: "Code in Comment",
-      ["REGEX_MISSING_TIMEOUT" /* RegexMissingTimeout */]: "Regex Missing Timeout",
-      ["FRAMEABLE_LOGIN_PAGE" /* FrameableLoginPage */]: "Frameable Login Page",
-      ["USE_OF_HARD_CODED_CRYPTOGRAPHIC_KEY" /* UseOfHardCodedCryptographicKey */]: "Use of Hardcoded Cryptographic Key",
-      ["MISSING_SSL_MINVERSION" /* MissingSslMinversion */]: "Missing SSL MinVersion",
-      ["WEBSOCKET_MISSING_ORIGIN_CHECK" /* WebsocketMissingOriginCheck */]: "Missing Websocket Origin Check",
-      ["DUPLICATED_STRINGS" /* DuplicatedStrings */]: "String Literals Should not Be Duplicated",
-      ["INSECURE_UUID_VERSION" /* InsecureUuidVersion */]: "Insecure UUID Version",
-      ["GH_ACTIONS_SHELL_INJECTION" /* GhActionsShellInjection */]: "GitHub Actions Shell Injection",
-      ["MODIFIED_DEFAULT_PARAM" /* ModifiedDefaultParam */]: "Modified Default Param",
-      ["UNSAFE_WEB_THREAD" /* UnsafeWebThread */]: "Unsafe Web Thread",
-      ["NO_VAR" /* NoVar */]: 'Prefer "let" or "const"',
-      ["INSECURE_TMP_FILE" /* InsecureTmpFile */]: "Insecure Temporary File",
-      ["RETURN_SHOULD_NOT_BE_INVARIANT" /* ReturnShouldNotBeInvariant */]: "Return Should Not Be Invariant",
-      ["SYSTEM_EXIT_SHOULD_RERAISE" /* SystemExitShouldReraise */]: "SystemExit Should Reraise",
-      ["NO_RETURN_IN_FINALLY" /* NoReturnInFinally */]: "No Return in Finally Block",
-      ["WILDCARD_IMPORTS" /* WildcardImports */]: "Wildcard Imports should not be used",
-      ["AVOID_IDENTITY_COMPARISON_CACHED_TYPES" /* AvoidIdentityComparisonCachedTypes */]: "Avoid Identity Comparison of Cached Types",
-      ["AVOID_BUILTIN_SHADOWING" /* AvoidBuiltinShadowing */]: "Avoid Builtin Shadowing",
-      ["IMPROPER_STRING_FORMATTING" /* ImproperStringFormatting */]: "Improper String Formatting",
-      ["TAR_SLIP" /* TarSlip */]: "Tar Slip",
-      ["MISSING_WHITESPACE" /* MissingWhitespace */]: "Missing Whitespace",
-      ["NO_PRINT_STATEMENT" /* NoPrintStatement */]: 'Python 2 "print" Statement Is Obsolete',
-      ["NO_OP_OVERHEAD" /* NoOpOverhead */]: "Expensive Arguments in Conditional Methods",
-      ["DO_NOT_RAISE_EXCEPTION" /* DoNotRaiseException */]: "Do Not Raise Exception",
-      ["DECLARE_VARIABLE_EXPLICITLY" /* DeclareVariableExplicitly */]: "Declare Variable Explicitly",
-      ["NO_NESTED_TRY" /* NoNestedTry */]: "No Nested Try",
-      ["UNNECESSARY_IMPORTS" /* UnnecessaryImports */]: "Unnecessary Imports",
-      ["REDOS" /* Redos */]: "Regular Expression Denial of Service",
-      ["DO_NOT_THROW_GENERIC_EXCEPTION" /* DoNotThrowGenericException */]: "Do Not Throw Generic Exception",
-      ["BUFFER_OVERFLOW" /* BufferOverflow */]: "Buffer Overflow",
-      ["STRING_TERMINATION_ERROR" /* StringTerminationError */]: "String Termination Error",
-      ["HTTP_PARAMETER_POLLUTION" /* HttpParameterPollution */]: "HTTP Parameter Pollution",
-      ["INCOMPLETE_SANITIZATION" /* IncompleteSanitization */]: "Incomplete Sanitization",
-      ["CREDENTIAL_DISCLOSURE" /* CredentialDisclosure */]: "Credential Disclosure",
-      ["INSECURE_POSTMESSAGE" /* InsecurePostmessage */]: "Insecure Postmessage",
-      ["MISSING_USER" /* MissingUser */]: "Missing User",
-      ["MISSING_ENCODING_FILE_OPEN" /* MissingEncodingFileOpen */]: "Missing Encoding File Open",
-      ["PORT_ALL_INTERFACES" /* PortAllInterfaces */]: "Port All Interfaces",
-      ["WRITABLE_FILESYSTEM_SERVICE" /* WritableFilesystemService */]: "Writable Filesystem Service",
-      ["NO_NEW_PRIVILEGES" /* NoNewPrivileges */]: "No New Privileges",
-      ["MISSING_TEMPLATE_STRING_INDICATOR" /* MissingTemplateStringIndicator */]: "Missing Template String Indicator",
-      ["USELESS_TERNARY" /* UselessTernary */]: "Useless Ternary",
-      ["REQUEST_PARAMETERS_BOUND_VIA_INPUT" /* RequestParametersBoundViaInput */]: "Request Parameters Bound Via Input",
-      ["USE_SYS_EXIT" /* UseSysExit */]: "Use Sys Exit",
-      ["INCORRECT_SQL_API_USAGE" /* IncorrectSqlApiUsage */]: "Incorrect SQL API Usage",
-      ["USE_RAISE_FOR_STATUS" /* UseRaiseForStatus */]: "Use Raise For Status",
-      ["USE_TIMEOUT" /* UseTimeout */]: "Use Timeout",
-      ["USELESS_IF_BODY" /* UselessIfBody */]: "Useless If Body",
-      ["NO_ASSERT" /* NoAssert */]: "No Assert",
-      ["FUNCTION_CALL_WITHOUT_PARENTHESES" /* FunctionCallWithoutParentheses */]: "Function Call Without Parentheses",
-      ["SPRING_DEFAULT_PERMIT" /* SpringDefaultPermit */]: "Spring Default Permit",
-      ["RETURN_IN_INIT" /* ReturnInInit */]: "Return in Init",
-      ["ACTION_NOT_PINNED_TO_COMMIT_SHA" /* ActionNotPinnedToCommitSha */]: "Action Not Pinned to Commit Sha",
-      ["DJANGO_BLANK_FIELD_NEEDS_NULL_OR_DEFAULT" /* DjangoBlankFieldNeedsNullOrDefault */]: "Django Blank Field Needs Null or Default",
-      ["REDUNDANT_CONDITION" /* RedundantCondition */]: "Insider Threat: Redundant Condition",
-      ["REDUNDANT_NIL_ERROR_CHECK" /* RedundantNilErrorCheck */]: "Redundant Nil Error Check",
-      ["MISSING_WORKFLOW_PERMISSIONS" /* MissingWorkflowPermissions */]: "Missing Workflow Permissions",
-      ["EXCESSIVE_SECRETS_EXPOSURE" /* ExcessiveSecretsExposure */]: "Excessive Secrets Exposure",
-      ["TAINTED_NUMERIC_CAST" /* TaintedNumericCast */]: "Tainted Numeric Cast",
-      ["MISSING_X_FRAME_OPTIONS" /* MissingXFrameOptions */]: "Missing X-Frame-Options Header",
-      ["IMPROPER_VALIDATION_OF_ARRAY_INDEX" /* ImproperValidationOfArrayIndex */]: "Improper Validation of Array Index",
-      ["INCORRECT_INTEGER_CONVERSION" /* IncorrectIntegerConversion */]: "Incorrect Integer Conversion",
-      ["IMPROPER_CERTIFICATE_VALIDATION" /* ImproperCertificateValidation */]: "Improper Certificate Validation",
-      ["OFTEN_MISUSED_BOOLEAN_GET_BOOLEAN" /* OftenMisusedBooleanGetBoolean */]: "Often Misused: Boolean.getBoolean()",
-      ["UNENCRYPTED_AWS_SQS_QUEUE" /* UnencryptedAwsSqsQueue */]: "AWS SQS Queue Unencrypted",
-      ["INSECURE_DESERIALIZATION" /* InsecureDeserialization */]: "Insecure Deserialization",
-      ["AWS_DYNAMODB_POINT_IN_TIME_RECOVERY_DISABLED" /* AwsDynamodbPointInTimeRecoveryDisabled */]: "AWS DynamoDB Point-in-Time Recovery Disabled",
-      ["JWT_DECODE_WITHOUT_VERIFY" /* JwtDecodeWithoutVerify */]: "JWT Decoded Without Signature Verification",
-      ["UNCHECKED_RETURN_VALUE" /* UncheckedReturnValue */]: "Unchecked Return Value"
-    };
-    issueTypeZ = z5.nativeEnum(IssueType_Enum);
+    SafeIssueTypeStringZ = z5.string().regex(/^[A-Za-z0-9_]+$/).max(128);
     getIssueTypeFriendlyString = (issueType) => {
       const fromCatalog = getIssueTypeCatalogEntry(issueType)?.label;
       if (fromCatalog) {
         return fromCatalog;
       }
-      const issueTypeZParseRes = issueTypeZ.safeParse(issueType);
-      if (!issueTypeZParseRes.success) {
-        return issueType ? issueType.replaceAll("_", " ") : "Other";
-      }
-      return issueTypeMap[issueTypeZParseRes.data];
+      return issueType ? issueType.replaceAll("_", " ") : "Other";
     };
     statusMap = {
       ["Digested" /* Digested */]: "Digested",
@@ -2009,31 +1707,33 @@ var IssueTypeSettingZ, IssueTypeSettingsZ;
 var init_validations = __esm({
   "src/features/analysis/scm/shared/src/validations.ts"() {
     "use strict";
-    init_client_generates();
     init_getIssueType();
+    init_issueTypeCatalog();
     IssueTypeSettingZ = z6.object({
       autoPrEnabled: z6.boolean(),
       enabled: z6.boolean(),
-      issueType: z6.nativeEnum(IssueType_Enum)
+      issueType: SafeIssueTypeStringZ
     });
     IssueTypeSettingsZ = z6.array(IssueTypeSettingZ).transform((issueTypeSettings) => {
-      return Object.values(IssueType_Enum).map((issueTypeEnum) => {
-        const existingIssueTypeSetting = issueTypeSettings.find(
-          ({ issueType: dbIssueType }) => dbIssueType === issueTypeEnum
+      const catalogValues = listIssueTypeCatalog().map((entry) => entry.value);
+      if (catalogValues.length === 0) {
+        throw new Error(
+          "Issue-type catalog is not hydrated; cannot derive default issue-type settings"
         );
-        if (existingIssueTypeSetting) {
-          return existingIssueTypeSetting;
-        }
-        return {
+      }
+      const existingByIssueType = new Map(
+        issueTypeSettings.map((setting) => [setting.issueType, setting])
+      );
+      return catalogValues.map(
+        (issueType) => existingByIssueType.get(issueType) ?? {
           autoPrEnabled: false,
           enabled: true,
-          issueType: issueTypeEnum
-        };
-      }).sort((a, b) => {
-        return getIssueTypeFriendlyString(a.issueType).localeCompare(
-          getIssueTypeFriendlyString(b.issueType)
-        );
-      });
+          issueType
+        }
+      ).map((setting) => ({
+        setting,
+        label: getIssueTypeFriendlyString(setting.issueType)
+      })).sort((a, b) => a.label.localeCompare(b.label)).map(({ setting }) => setting);
     });
   }
 });
@@ -2487,7 +2187,7 @@ var init_types2 = __esm({
 });
 
 // src/features/analysis/scm/shared/src/urlParser/urlParser.ts
-import { z as z13 } from "zod";
+import { z as z12 } from "zod";
 function computeCanonicalUrl(data) {
   const {
     scmType,
@@ -2529,7 +2229,7 @@ function detectAdoUrl(args) {
         scmType: "Ado" /* Ado */,
         organization,
         // project has single repo - repoName === projectName
-        projectName: z13.string().parse(projectName),
+        projectName: z12.string().parse(projectName),
         repoName: projectName,
         prefixPath
       };
@@ -2540,7 +2240,7 @@ function detectAdoUrl(args) {
       return {
         scmType: "Ado" /* Ado */,
         organization,
-        projectName: z13.string().parse(projectName),
+        projectName: z12.string().parse(projectName),
         repoName,
         prefixPath
       };
@@ -2554,7 +2254,7 @@ function detectAdoUrl(args) {
           scmType: "Ado" /* Ado */,
           organization,
           // project has only one repo - repoName === projectName
-          projectName: z13.string().parse(repoName),
+          projectName: z12.string().parse(repoName),
           repoName,
           prefixPath
         };
@@ -2564,7 +2264,7 @@ function detectAdoUrl(args) {
         return {
           scmType: "Ado" /* Ado */,
           organization,
-          projectName: z13.string().parse(projectName),
+          projectName: z12.string().parse(projectName),
           repoName,
           prefixPath
         };
@@ -2640,7 +2340,7 @@ function parseSshUrl(scmURL, scmType) {
     if (pathElements.length === 3) {
       const [organization2, projectName, repoName2] = pathElements;
       if (organization2?.match(NAME_REGEX) && projectName && repoName2?.match(NAME_REGEX)) {
-        const parsedProjectName = z13.string().parse(projectName);
+        const parsedProjectName = z12.string().parse(projectName);
         return {
           scmType: "Ado" /* Ado */,
           hostname: normalizedHostname,
@@ -2868,17 +2568,17 @@ var init_urlParser2 = __esm({
 });
 
 // src/features/analysis/scm/env.ts
-import { z as z16 } from "zod";
+import { z as z15 } from "zod";
 var EnvVariablesZod, GITLAB_API_TOKEN, GITHUB_API_TOKEN, GIT_PROXY_HOST, MAX_UPLOAD_FILE_SIZE_MB, GITHUB_API_CONCURRENCY;
 var init_env = __esm({
   "src/features/analysis/scm/env.ts"() {
     "use strict";
-    EnvVariablesZod = z16.object({
-      GITLAB_API_TOKEN: z16.string().optional(),
-      GITHUB_API_TOKEN: z16.string().optional(),
-      GIT_PROXY_HOST: z16.string().optional().default("http://tinyproxy:8888"),
-      MAX_UPLOAD_FILE_SIZE_MB: z16.coerce.number().gt(0).default(2),
-      GITHUB_API_CONCURRENCY: z16.coerce.number().gt(0).optional().default(10)
+    EnvVariablesZod = z15.object({
+      GITLAB_API_TOKEN: z15.string().optional(),
+      GITHUB_API_TOKEN: z15.string().optional(),
+      GIT_PROXY_HOST: z15.string().optional().default("http://tinyproxy:8888"),
+      MAX_UPLOAD_FILE_SIZE_MB: z15.coerce.number().gt(0).default(2),
+      GITHUB_API_CONCURRENCY: z15.coerce.number().gt(0).optional().default(10)
     });
     ({
       GITLAB_API_TOKEN,
@@ -2912,7 +2612,7 @@ var init_configs = __esm({
 });
 
 // src/utils/blame/gitBlameTypes.ts
-import { z as z19 } from "zod";
+import { z as z18 } from "zod";
 function parseCoAuthorValue(raw) {
   const trimmed = raw.trim();
   if (!trimmed) {
@@ -2948,9 +2648,9 @@ var PrepareGitBlameMessageZ, PrepareGitBlameResponseMessageZ, CommitMetadataZ, L
 var init_gitBlameTypes = __esm({
   "src/utils/blame/gitBlameTypes.ts"() {
     "use strict";
-    PrepareGitBlameMessageZ = z19.object({
-      reportId: z19.string(),
-      repoArchivePath: z19.string(),
+    PrepareGitBlameMessageZ = z18.object({
+      reportId: z18.string(),
+      repoArchivePath: z18.string(),
       // Optional list of file paths to blame. Producers must pick one of two modes:
       //
       //  - **Omit `filePaths`** = "blame every file in the archive". Used by the
@@ -2966,132 +2666,132 @@ var init_gitBlameTypes = __esm({
       // "Login.java" when the actual file is "src/main/java/Login.java") are
       // tolerated — scm_agent's filter matches exact-or-trailing-basename. Empty
       // strings are filtered out defensively.
-      filePaths: z19.array(z19.string()).optional()
+      filePaths: z18.array(z18.string()).optional()
     });
-    PrepareGitBlameResponseMessageZ = z19.object({
-      reportId: z19.string()
+    PrepareGitBlameResponseMessageZ = z18.object({
+      reportId: z18.string()
     });
-    CommitMetadataZ = z19.object({
-      author: z19.string().optional(),
-      "author-mail": z19.string().optional(),
-      "author-time": z19.string().optional(),
-      "author-tz": z19.string().optional(),
-      committer: z19.string().optional(),
-      "committer-mail": z19.string().optional(),
-      "committer-time": z19.string().optional(),
-      "committer-tz": z19.string().optional(),
-      summary: z19.string().optional(),
-      filename: z19.string().optional()
+    CommitMetadataZ = z18.object({
+      author: z18.string().optional(),
+      "author-mail": z18.string().optional(),
+      "author-time": z18.string().optional(),
+      "author-tz": z18.string().optional(),
+      committer: z18.string().optional(),
+      "committer-mail": z18.string().optional(),
+      "committer-time": z18.string().optional(),
+      "committer-tz": z18.string().optional(),
+      summary: z18.string().optional(),
+      filename: z18.string().optional()
     });
-    LineToCommitMapZ = z19.record(z19.string(), z19.string());
-    CommitMetadataMapZ = z19.record(z19.string(), CommitMetadataZ);
-    BlameInfoZ = z19.object({
+    LineToCommitMapZ = z18.record(z18.string(), z18.string());
+    CommitMetadataMapZ = z18.record(z18.string(), CommitMetadataZ);
+    BlameInfoZ = z18.object({
       lineToCommit: LineToCommitMapZ,
       commitMetadata: CommitMetadataMapZ
     });
-    LineRangeZ = z19.object({
+    LineRangeZ = z18.object({
       /** First line in chunk (1-indexed) */
-      start: z19.number(),
+      start: z18.number(),
       /** Last line in chunk (inclusive) */
-      end: z19.number()
+      end: z18.number()
     });
-    PrContextZ = z19.object({
-      prNumber: z19.number(),
-      repositoryUrl: z19.string(),
-      organizationId: z19.string(),
-      userEmail: z19.string(),
-      source: z19.enum(["pr", "github"]),
-      githubContext: z19.object({
-        prNumber: z19.number(),
-        installationId: z19.number(),
-        repositoryURL: z19.string()
+    PrContextZ = z18.object({
+      prNumber: z18.number(),
+      repositoryUrl: z18.string(),
+      organizationId: z18.string(),
+      userEmail: z18.string(),
+      source: z18.enum(["pr", "github"]),
+      githubContext: z18.object({
+        prNumber: z18.number(),
+        installationId: z18.number(),
+        repositoryURL: z18.string()
       }).optional()
     });
-    PrepareCommitBlameMessageZ = z19.object({
+    PrepareCommitBlameMessageZ = z18.object({
       /** Commit blame request ID from database (for tracking and updating status) */
-      commitBlameRequestId: z19.string(),
+      commitBlameRequestId: z18.string(),
       /** Organization ID (for org-scoped caching) */
-      organizationId: z19.string(),
+      organizationId: z18.string(),
       /** Full repository URL (e.g., https://github.com/org/repo) */
-      repositoryUrl: z19.string(),
+      repositoryUrl: z18.string(),
       /** Commit SHA to analyze (typically PR head commit) */
-      commitSha: z19.string(),
+      commitSha: z18.string(),
       /** Authentication headers for repository access (e.g., GitHub token) */
-      extraHeaders: z19.record(z19.string(), z19.string()).default({}),
+      extraHeaders: z18.record(z18.string(), z18.string()).default({}),
       // --- PR analysis fields ---
       /** Target branch name (from getPr() base.ref). When set, enables PR analysis mode. */
-      targetBranch: z19.string().optional(),
+      targetBranch: z18.string().optional(),
       /** Context for triggering blame attribution analysis after SCM agent completes. */
       prContext: PrContextZ.optional(),
       /** User email for blame attribution analysis trigger context (used for both PR and single commit flows). */
-      userEmail: z19.string().optional()
+      userEmail: z18.string().optional()
     });
-    BlameLineInfoZ = z19.object({
+    BlameLineInfoZ = z18.object({
       /** Line number as it appeared in the introducing commit */
-      originalLineNumber: z19.number(),
+      originalLineNumber: z18.number(),
       /** Commit SHA that introduced this line */
-      commitSha: z19.string(),
+      commitSha: z18.string(),
       /** Author name for this line */
-      authorName: z19.string().optional(),
+      authorName: z18.string().optional(),
       /** Author email for this line */
-      authorEmail: z19.string().optional()
+      authorEmail: z18.string().optional()
     }).nullable();
-    FileBlameDataZ = z19.array(BlameLineInfoZ);
-    ChunkFetchResultZ = z19.object({
-      filePath: z19.string(),
-      lines: z19.array(z19.number()),
+    FileBlameDataZ = z18.array(BlameLineInfoZ);
+    ChunkFetchResultZ = z18.object({
+      filePath: z18.string(),
+      lines: z18.array(z18.number()),
       data: FileBlameDataZ.nullable()
     });
-    FileBlameResponseEntryZ = z19.object({
+    FileBlameResponseEntryZ = z18.object({
       /** Chunk index (0 for small files, 0-N for large file chunks) */
-      chunkIndex: z19.number(),
+      chunkIndex: z18.number(),
       /** Blame data array (1-indexed, index 0 is null) */
       blameData: FileBlameDataZ
     });
-    CommitBlameDataZ = z19.record(
-      z19.string(),
+    CommitBlameDataZ = z18.record(
+      z18.string(),
       // fileName
-      z19.array(FileBlameResponseEntryZ)
+      z18.array(FileBlameResponseEntryZ)
     );
-    CommitInfoZ = z19.object({
+    CommitInfoZ = z18.object({
       /** Number of parent commits (1 = normal commit, 2+ = merge commit, null = failed to determine) */
-      parentCount: z19.number().nullable()
+      parentCount: z18.number().nullable()
     });
-    GitIdentityZ = z19.object({
-      name: z19.string(),
-      email: z19.string()
+    GitIdentityZ = z18.object({
+      name: z18.string(),
+      email: z18.string()
     });
     COMMIT_LOG_FORMAT = "%H%x00%ae%x00%an%x00%ce%x00%cn%x00%at%x00%s%x00%(trailers:key=Co-authored-by,valueonly,separator=%x00)";
-    CommitDataZ = z19.object({
-      diff: z19.string(),
+    CommitDataZ = z18.object({
+      diff: z18.string(),
       author: GitIdentityZ,
       committer: GitIdentityZ,
-      coAuthors: z19.array(GitIdentityZ),
-      timestamp: z19.number(),
+      coAuthors: z18.array(GitIdentityZ),
+      timestamp: z18.number(),
       // Unix timestamp in seconds
-      message: z19.string().optional(),
-      parentCount: z19.number().nullable()
+      message: z18.string().optional(),
+      parentCount: z18.number().nullable()
     });
-    PrDiffDataZ = z19.object({
-      diff: z19.string()
+    PrDiffDataZ = z18.object({
+      diff: z18.string()
     });
-    PrStatsZ = z19.object({
-      additions: z19.number(),
-      deletions: z19.number()
+    PrStatsZ = z18.object({
+      additions: z18.number(),
+      deletions: z18.number()
     });
-    CommitsManifestZ = z19.object({
-      commits: z19.array(z19.string())
+    CommitsManifestZ = z18.object({
+      commits: z18.array(z18.string())
       // Array of commit SHAs in order
     });
-    BlameLineEntryZ = z19.object({
+    BlameLineEntryZ = z18.object({
       /** Current file path in the PR head (what git blame was invoked on). */
-      file: z19.string(),
+      file: z18.string(),
       /** Current line number in the PR head. */
-      line: z19.number(),
+      line: z18.number(),
       /** SHA of the commit that originally authored this line. */
-      originalCommitSha: z19.string(),
+      originalCommitSha: z18.string(),
       /** Line number as it was in `originalCommitSha`. */
-      originalLineNumber: z19.number(),
+      originalLineNumber: z18.number(),
       /**
        * File path as it was in `originalCommitSha` at the time that commit
        * authored this line. When a file has been renamed since, this differs
@@ -3104,24 +2804,24 @@ var init_gitBlameTypes = __esm({
        * must treat empty as "fall back to `file`" (see enrichDiffLines,
        * targetedBlame).
        */
-      originalFile: z19.string().default("")
+      originalFile: z18.string().default("")
     });
-    BlameLinesDataZ = z19.object({
-      lines: z19.array(BlameLineEntryZ)
+    BlameLinesDataZ = z18.object({
+      lines: z18.array(BlameLineEntryZ)
     });
-    PrepareCommitBlameResponseMessageZ = z19.object({
+    PrepareCommitBlameResponseMessageZ = z18.object({
       /** Commit blame request ID (matches request, used to update specific DB record) */
-      commitBlameRequestId: z19.string(),
+      commitBlameRequestId: z18.string(),
       /** Organization ID (matches request) */
-      organizationId: z19.string(),
+      organizationId: z18.string(),
       /** Repository URL (matches request) */
-      repositoryUrl: z19.string(),
+      repositoryUrl: z18.string(),
       /** Commit SHA analyzed (matches request) */
-      commitSha: z19.string(),
+      commitSha: z18.string(),
       /** Processing status */
-      status: z19.enum(["success", "failure"]),
+      status: z18.enum(["success", "failure"]),
       /** Error message (only present if status is 'failure') */
-      error: z19.string().optional(),
+      error: z18.string().optional(),
       /**
        * Blame data for all processed files/chunks.
        * Empty dictionary if status is 'failure'.
@@ -3133,29 +2833,29 @@ var init_gitBlameTypes = __esm({
        * Keyed by commit SHA, deduplicated.
        * Empty dictionary if status is 'failure'.
        */
-      commits: z19.record(z19.string(), CommitInfoZ).default({}),
+      commits: z18.record(z18.string(), CommitInfoZ).default({}),
       // --- New PR diff computation response fields ---
       /** S3 paths for commit-level data (commitSha → S3 key). Present in PR analysis mode and single commit mode. */
-      commitDataS3Paths: z19.record(z19.string(), z19.string()).optional(),
+      commitDataS3Paths: z18.record(z18.string(), z18.string()).optional(),
       /** S3 key for PR diff JSON. Present in PR analysis mode. */
-      prDiffS3Path: z19.string().optional(),
+      prDiffS3Path: z18.string().optional(),
       /** S3 key for commits manifest. Present in PR analysis mode. */
-      commitsManifestS3Path: z19.string().optional(),
+      commitsManifestS3Path: z18.string().optional(),
       /** S3 key for per-line targeted blame data. Present in PR analysis mode. */
-      blameLinesS3Path: z19.string().optional(),
+      blameLinesS3Path: z18.string().optional(),
       /** S3 key for PR stats (additions/deletions). Present in PR analysis mode. */
-      prStatsS3Path: z19.string().optional(),
+      prStatsS3Path: z18.string().optional(),
       /** PR context passed through from request for response handler. */
       prContext: PrContextZ.optional(),
       /** PR title from the request metadata (passed through). */
-      prTitle: z19.string().optional(),
+      prTitle: z18.string().optional(),
       /** User email passed through from request for single commit blame attribution analysis trigger. */
-      userEmail: z19.string().optional()
+      userEmail: z18.string().optional()
     });
-    VulnerabilityAttributionMessageZ = z19.object({
-      fixReportId: z19.string().uuid(),
-      vulnerabilityAttributionRequestId: z19.string().uuid(),
-      userEmail: z19.string()
+    VulnerabilityAttributionMessageZ = z18.object({
+      fixReportId: z18.string().uuid(),
+      vulnerabilityAttributionRequestId: z18.string().uuid(),
+      userEmail: z18.string()
     });
   }
 });
@@ -4422,7 +4122,7 @@ import * as os3 from "os";
 import path6 from "path";
 import chalk3 from "chalk";
 import { withFile } from "tmp-promise";
-import z27 from "zod";
+import z26 from "zod";
 
 // src/commands/handleMobbLogin.ts
 import chalk2 from "chalk";
@@ -4894,344 +4594,12 @@ import debugModule from "debug";
 var debug3 = debugModule("mobb:shared");
 
 // src/features/analysis/scm/utils/index.ts
-import { z as z15 } from "zod";
+import { z as z14 } from "zod";
 
 // src/features/analysis/scm/shared/src/commitDescriptionMarkup.ts
 init_client_generates();
-import { z as z9 } from "zod";
-
-// src/features/analysis/scm/shared/src/fixDetailsData.ts
-init_client_generates();
-var fixDetailsData = {
-  ["PT" /* Pt */]: {
-    issueDescription: "Path Traversal AKA Directory Traversal occurs when a path coming from user input is not properly sanitized, allowing an attacker to navigate through directories beyond the intended scope. Attackers can exploit this to access sensitive files or execute arbitrary code.",
-    fixInstructions: "Sanitize user-supplied paths, ensuring that they are restricted to a predefined directory structure."
-  },
-  ["ZIP_SLIP" /* ZipSlip */]: {
-    issueDescription: "Zip Slip is a form of directory traversal that can be exploited by extracting files from an archive. Attackers can manipulate archive files to overwrite sensitive files or execute arbitrary code.",
-    fixInstructions: "Ensure that extracted files are relative and within the intended directory structure."
-  },
-  ["XSS" /* Xss */]: {
-    issueDescription: "Cross-Site Scripting (XSS) allows attackers to inject malicious scripts into web pages viewed by other users. This can lead to theft of session cookies, redirection to malicious websites, or defacement of the webpage.",
-    fixInstructions: "Implement input validation and output encoding. This includes sanitizing user input and escaping special characters to prevent execution of injected scripts."
-  },
-  ["XXE" /* Xxe */]: {
-    issueDescription: "XML External Entity (XXE) allows attackers to exploit vulnerable XML processors by including external entities, leading to disclosure of confidential data, denial of service, or server-side request forgery.",
-    fixInstructions: "Disable external entity processing in XML parsers or update to versions that mitigate XXE vulnerabilities. Input validation should be implemented to ensure that XML input does not contain external entity references."
-  },
-  ["CMDi" /* CmDi */]: {
-    issueDescription: "Command Injection (CMDI) allows attackers inject malicious commands into vulnerable applications, that can result in execution of arbitrary commands on the underlying operating system.",
-    fixInstructions: "Validate or sanitize user input to prevent executing arbitrary commands."
-  },
-  ["SQL_Injection" /* SqlInjection */]: {
-    issueDescription: "SQL Injection allows attackers to execute malicious SQL queries by manipulating input data. This can result in unauthorized access to sensitive data, data manipulation, or even complete database compromise.",
-    fixInstructions: "Use parameterized queries or prepared statements to sanitize user input and prevent manipulation of the SQL query."
-  },
-  ["SSRF" /* Ssrf */]: {
-    issueDescription: "Server-Side Request Forgery (SSRF) allows attackers to make unauthorized requests from a vulnerable server, potentially accessing internal systems, services, or data.",
-    fixInstructions: "Validate or sanitize user-supplied URLs, ensuring that they are restricted to trusted domains. Implementing proper input validation and using whitelists for acceptable URLs can prevent SSRF attacks."
-  },
-  ["LOG_FORGING" /* LogForging */]: {
-    issueDescription: "Log Forging allows attackers to manipulate log files by injecting malicious content. This can be used to obfuscate attack traces or forge log entries to conceal unauthorized activities.",
-    fixInstructions: "Implement proper input sanitization to remove new lines for values going to the log."
-  },
-  ["HTTP_ONLY_COOKIE" /* HttpOnlyCookie */]: {
-    issueDescription: "Cookie without the 'HttpOnly' attribute can be accessed by client-side scripts, exposing them to potential XSS attacks.",
-    fixInstructions: "Ensure that sensitive cookies are marked with the 'HttpOnly' attribute to prevent client-side scripts from accessing them."
-  },
-  ["SYSTEM_INFORMATION_LEAK" /* SystemInformationLeak */]: {
-    issueDescription: "System Information Leak occurs when sensitive system information is inadvertently disclosed to external entities, potentially aiding attackers in identifying vulnerabilities or targets.",
-    fixInstructions: "Review and restrict the amount of system information exposed through error messages, debug logs, or response headers."
-  },
-  ["UNCHECKED_LOOP_CONDITION" /* UncheckedLoopCondition */]: {
-    issueDescription: "Unchecked Loop Condition can lead to infinite loops or unexpected behavior in software applications. Attackers can exploit this vulnerability to cause denial of service or consume excessive system resources.",
-    fixInstructions: "Carefully review loop conditions to ensure that they are properly validated and bounded."
-  },
-  ["TRUST_BOUNDARY_VIOLATION" /* TrustBoundaryViolation */]: {
-    issueDescription: "Trust Boundary Violation occurs when untrusted data is added to a trusted context, potentially leading to security vulnerabilities. Attackers can exploit this to bypass security controls or execute unauthorized actions.",
-    fixInstructions: "Clearly define and enforce trust boundaries within applications, ensuring that untrusted data is properly validated and sanitized before being used in a trusted context."
-  },
-  ["REGEX_INJECTION" /* RegexInjection */]: {
-    issueDescription: "Regex Injection occurs when attackers manipulate regular expressions to perform unintended actions or bypass security controls. This can lead to security vulnerabilities such as denial of service or injection attacks.",
-    fixInstructions: "Avoid constructing regular expressions from user-supplied input whenever possible. If dynamic regular expressions are necessary, input should be properly validated and sanitized to prevent injection attacks."
-  },
-  ["ERROR_CONDTION_WITHOUT_ACTION" /* ErrorCondtionWithoutAction */]: {
-    issueDescription: "Error Condition Without Action refers to situations where error conditions are identified but not appropriately handled or mitigated. This can lead to unexpected behavior, system crashes, or security vulnerabilities.",
-    fixInstructions: "Implement error handling mechanisms to gracefully handle unexpected conditions and prevent system crashes."
-  },
-  ["HTTP_RESPONSE_SPLITTING" /* HttpResponseSplitting */]: {
-    issueDescription: "HTTP Response Splitting occurs when attackers manipulate HTTP responses to inject additional headers or content. This can lead to security vulnerabilities such as cache poisoning, session fixation, or XSS attacks.",
-    fixInstructions: "Properly sanitize user input before including it in HTTP response headers or content."
-  },
-  ["INSECURE_COOKIE" /* InsecureCookie */]: {
-    issueDescription: "Cookies lacking the 'Secure' attribute may be transmitted over unencrypted channels. This makes them vulnerable to interception or manipulation by attackers.",
-    fixInstructions: "Ensure that sensitive cookies are transmitted over secure channels (e.g., HTTPS) and are marked with the 'Secure' attributes."
-  },
-  ["CMDi_relative_path_command" /* CmDiRelativePathCommand */]: {
-    issueDescription: "Command Injection via Relative Path may allow attackers to manipulate file paths to execute arbitrary commands on the underlying system.",
-    fixInstructions: "Paths coming from the input should be properly sanitized to ensure that only expected characters and paths are allowed."
-  },
-  ["MISSING_CHECK_AGAINST_NULL" /* MissingCheckAgainstNull */]: {
-    issueDescription: "Missing Check Against Null occurs when null or uninitialized variables are not properly handled, leading to unexpected behavior or security vulnerabilities.",
-    fixInstructions: "Implement proper null checks and error handling mechanisms to prevent null dereference vulnerabilities. Null values should be handled gracefully to avoid unexpected behavior or security issues."
-  },
-  ["PASSWORD_IN_COMMENT" /* PasswordInComment */]: {
-    issueDescription: "Password in Comment refers to situations where sensitive information such as passwords or API keys are hardcoded or embedded in code comments. This can lead to inadvertent exposure of credentials and potential security breaches if the code is shared or leaked.",
-    fixInstructions: "Remove hardcoded sensitive information from code comments."
-  },
-  ["OVERLY_BROAD_CATCH" /* OverlyBroadCatch */]: {
-    issueDescription: "Overly Broad Catch occurs when exceptions are caught indiscriminately without proper handling or logging. This can lead to silent failures, masking potential security issues or allowing attackers to conduct reconnaissance.",
-    fixInstructions: "Implement specific exception handling for different error scenarios to ensure proper diagnosis and mitigation of issues. Catch blocks should log relevant information and handle exceptions gracefully to prevent silent failures."
-  },
-  ["USE_OF_SYSTEM_OUTPUT_STREAM" /* UseOfSystemOutputStream */]: {
-    issueDescription: "Use of System Output Stream refers to situations where sensitive information is written to standard output streams such as System.out. This can lead to inadvertent exposure of sensitive data, especially in production environments.",
-    fixInstructions: "Avoid writing sensitive information to standard output streams and instead use secure logging mechanisms or dedicated logging frameworks. Output streams should be properly configured to prevent leakage of sensitive data."
-  },
-  ["DOS_STRING_BUILDER" /* DosStringBuilder */]: {
-    issueDescription: "Denial of Service (DoS) via String Builder may allow attackers to manipulate string concatenation operations to consume excessive memory or CPU resources. This can lead to degradation of system performance or unresponsiveness.",
-    fixInstructions: "Use StringBuilder or similar efficient data structures for string concatenation operations to minimize memory overhead. Input validation should be performed to limit the size and complexity of input strings, preventing abuse by attackers."
-  },
-  ["HTML_COMMENT_IN_JSP" /* HtmlCommentInJsp */]: {
-    issueDescription: "HTML Comment in JSP occurs when developers inadvertently expose sensitive information or internal implementation details in HTML comments within JavaServer Pages (JSP) files. This can lead to inadvertent disclosure of credentials, configuration details, or security vulnerabilities.",
-    fixInstructions: "Review JSP files to ensure that sensitive information or internal details are not exposed in HTML comments. Comments containing sensitive information should be removed or replaced with generic placeholders."
-  },
-  ["OPEN_REDIRECT" /* OpenRedirect */]: {
-    issueDescription: "Open Redirect vulnerabilities may allow attackers to manipulate URL parameters to redirect users to malicious websites or phishing pages. This can lead to theft of sensitive information or unauthorized access to user accounts.",
-    fixInstructions: "Redirect URLs validation should be performed to ensure that redirect URLs point to trusted domains."
-  },
-  ["UNSAFE_TARGET_BLANK" /* UnsafeTargetBlank */]: {
-    issueDescription: "Unsafe Target Blank occurs when developers use the target='_blank' attribute without the rel='noopener' attribute in anchor tags. This can lead to security vulnerabilities such as tabnabbing or reverse tabnabbing, allowing attackers to hijack user sessions or perform phishing attacks.",
-    fixInstructions: "Ensure that anchor tags with target='_blank' attribute include the rel='noopener' attribute to prevent potential security vulnerabilities. This prevents the newly opened page from accessing the window.opener property, mitigating the risk of tabnabbing or reverse tabnabbing attacks."
-  },
-  ["IFRAME_WITHOUT_SANDBOX" /* IframeWithoutSandbox */]: {
-    issueDescription: "IFrame Without Sandbox occurs when <iframe> elements are used without the 'sandbox' attribute, allowing potentially malicious content to execute in the context of the parent page.",
-    fixInstructions: "Use the 'sandbox' attribute to restrict the capabilities of <iframe> elements, isolating potentially untrusted content from the parent page. This helps mitigate the risk of malicious code execution and prevents attacks such as clickjacking."
-  },
-  ["JQUERY_DEPRECATED_SYMBOLS" /* JqueryDeprecatedSymbols */]: {
-    issueDescription: "JQuery Deprecated Symbols refers to the use of deprecated or removed functions, methods, or symbols in jQuery libraries. This can lead to compatibility issues, security vulnerabilities, or performance degradation in applications.",
-    fixInstructions: "Replace deprecated symbols with recommended alternatives."
-  },
-  ["DEPRECATED_FUNCTION" /* DeprecatedFunction */]: {
-    issueDescription: "Deprecated Function refers to the use of functions, methods, or features that have been deprecated in programming languages or frameworks. This can lead to compatibility issues, security vulnerabilities, or performance degradation in applications.",
-    fixInstructions: "Update code to replace deprecated functions with recommended alternatives provided by the language or framework."
-  },
-  ["HARDCODED_SECRETS" /* HardcodedSecrets */]: {
-    issueDescription: "Hardcoded Secrets refers to the practice of embedding sensitive information such as passwords, API keys, or cryptographic keys directly into source code or configuration files. This can lead to inadvertent exposure of credentials and potential security breaches if the code is shared or leaked.",
-    fixInstructions: "Remove hardcoded sensitive information in source code or configuration files. Instead, sensitive data should be stored securely using encryption or secure credential management solutions."
-  },
-  ["GRAPHQL_DEPTH_LIMIT" /* GraphqlDepthLimit */]: {
-    issueDescription: "GraphQL Depth Limit refers to the lack of restrictions on query depth in GraphQL implementations, allowing attackers to execute complex and resource-intensive queries. This can lead to denial of service or excessive resource consumption.",
-    fixInstructions: "Implement depth limits and query complexity thresholds in GraphQL schemas to restrict the complexity of incoming queries."
-  },
-  ["SYSTEM_INFORMATION_LEAK_EXTERNAL" /* SystemInformationLeakExternal */]: {
-    issueDescription: "System Information Leak occurs when sensitive system information is inadvertently disclosed to external entities, potentially aiding attackers in identifying vulnerabilities or targets.",
-    fixInstructions: "Review and restrict the amount of system information exposed to external entities such as third-party APIs or integrations."
-  },
-  ["INSECURE_RANDOMNESS" /* InsecureRandomness */]: {
-    issueDescription: "Insecure Randomness refers to the use of insecure or predictable random number generation algorithms, leading to weak cryptographic keys, session tokens, or initialization vectors. This can facilitate brute-force attacks or cryptographic exploits.",
-    fixInstructions: "Use secure random number generation algorithms provided by cryptographic libraries or frameworks."
-  },
-  ["TYPE_CONFUSION" /* TypeConfusion */]: {
-    issueDescription: "Type Confusion occurs in programming languages with weak typing systems when an attacker manipulates object types to bypass type checks or exploit memory corruption vulnerabilities. This can lead to arbitrary code execution or unauthorized access to sensitive data.",
-    fixInstructions: "Implement strict type checking and validation to prevent type confusion vulnerabilities."
-  },
-  ["INCOMPLETE_URL_SANITIZATION" /* IncompleteUrlSanitization */]: {
-    issueDescription: "Incomplete URL Sanitization occurs when user-supplied URLs are not properly sanitized, allowing attackers to inject malicious content or bypass security controls. This can lead to security vulnerabilities such as XSS attacks, open redirect, or SSRF.",
-    fixInstructions: "Implement thorough URL validation and/or sanitization to ensure that user-supplied URLs conform to expected formats and do not contain malicious content."
-  },
-  ["UNSAFE_DESERIALIZATION" /* UnsafeDeserialization */]: {
-    issueDescription: "Unsafe Deserialization occurs when attackers manipulate serialized objects to execute arbitrary code or bypass security controls. This can lead to remote code execution, privilege escalation, or data tampering.",
-    fixInstructions: "Implement strict validation and integrity checks on serialized objects."
-  },
-  ["IMPROPER_RESOURCE_SHUTDOWN_OR_RELEASE" /* ImproperResourceShutdownOrRelease */]: {
-    issueDescription: "Improper Resource Shutdown or Release refers to situations where system resources such as file handles, database connections, or network sockets are not properly closed or released after use. This can lead to resource exhaustion, denial of service, or memory leaks.",
-    fixInstructions: "Ensure that system resources are consistently closed or released after use. Using try-with resources blocks, finalizers, or dedicated resource management libraries can help mitigate the risk of improper resource shutdown or release vulnerabilities."
-  },
-  ["IMPROPER_EXCEPTION_HANDLING" /* ImproperExceptionHandling */]: {
-    issueDescription: "Improper Exception Handling occurs when exceptions are not handled or propagated correctly, leading to unexpected behavior, security vulnerabilities, or application crashes.",
-    fixInstructions: "Implement exception handling to gracefully handle unexpected errors."
-  },
-  ["MISSING_ANTIFORGERY_VALIDATION" /* MissingAntiforgeryValidation */]: {
-    issueDescription: "Missing Anti-Forgery Validation occurs when web applications do not properly validate or enforce anti-forgery tokens, allowing attackers to forge or replay requests from authenticated users.",
-    fixInstructions: "Implement anti-forgery measures to validate the authenticity of user-submitted requests."
-  },
-  ["INSECURE_BINDER_CONFIGURATION" /* InsecureBinderConfiguration */]: {
-    issueDescription: "Insecure Binder Configuration refers to misconfigurations in application frameworks or dependency injection containers, leading to security vulnerabilities such as injection attacks or privilege escalation.",
-    fixInstructions: "Secure binder configurations to prevent injection attacks and enforce least privilege principles. Configurations should be restricted to trusted sources and sanitized to prevent unauthorized access or manipulation."
-  },
-  ["NULL_DEREFERENCE" /* NullDereference */]: {
-    issueDescription: "Null Dereference occurs when null or uninitialized pointers are dereferenced, leading to application crashes or security vulnerabilities. Attackers can exploit this to cause denial of service or execute arbitrary code.",
-    fixInstructions: "Implement proper null checks and error handling mechanisms. Null values should be handled gracefully to avoid unexpected behavior or security issues."
-  },
-  ["DANGEROUS_FUNCTION_OVERFLOW" /* DangerousFunctionOverflow */]: {
-    issueDescription: "Dangerous Function Overflow occurs when functions or methods are called with parameters that exceed predefined limits, leading to buffer overflows or memory corruption vulnerabilities.",
-    fixInstructions: "Implement proper input validation and bounds checking to prevent dangerous function overflows. Functions should be designed to handle input within safe limits and gracefully reject or truncate input that exceeds these limits."
-  },
-  ["DEFAULT_RIGHTS_IN_OBJ_DEFINITION" /* DefaultRightsInObjDefinition */]: {
-    issueDescription: "Default Rights in Object Definition refers to situations where SQL objects are created with default or excessive permissions, leading to security vulnerabilities such as privilege escalation or unauthorized access.",
-    fixInstructions: "Restrict default permissions in object definitions to enforce least privilege principles. Objects should be created with the minimum necessary permissions required for their intended functionality."
-  },
-  ["WEAK_XML_SCHEMA_UNBOUNDED_OCCURRENCES" /* WeakXmlSchemaUnboundedOccurrences */]: {
-    issueDescription: "Weak XML Schema Unbounded Occurrences refers to the lack of restrictions on the maximum number of occurrences for elements or attributes in XML schemas. This can lead to denial of service or resource exhaustion attacks by causing excessive memory consumption or processing overhead.",
-    fixInstructions: "Impose limits on the maximum number of occurrences for elements or attributes in XML schemas to prevent resource exhaustion attacks."
-  },
-  ["DEAD_CODE_UNUSED_FIELD" /* DeadCodeUnusedField */]: void 0,
-  ["LOCALE_DEPENDENT_COMPARISON" /* LocaleDependentComparison */]: void 0,
-  ["MISSING_HSTS_HEADER" /* MissingHstsHeader */]: void 0,
-  ["NON_FINAL_PUBLIC_STATIC_FIELD" /* NonFinalPublicStaticField */]: void 0,
-  ["PROTOTYPE_POLLUTION" /* PrototypePollution */]: void 0,
-  ["RACE_CONDITION_FORMAT_FLAW" /* RaceConditionFormatFlaw */]: void 0,
-  ["HEADER_MANIPULATION" /* HeaderManipulation */]: void 0,
-  ["MISSING_EQUALS_OR_HASHCODE" /* MissingEqualsOrHashcode */]: {
-    issueDescription: "Missing equals or hashcode method can lead to unexpected behavior in collections. If two objects are equal, they should have the same hashcode.",
-    fixInstructions: "Add the missing methods to ensure proper behavior in collections."
-  },
-  ["VALUE_NEVER_READ" /* ValueNeverRead */]: {
-    issueDescription: "The variable's value is not used. After the assignment, the variable is either assigned another value or goes out of scope.",
-    fixInstructions: "Remove the assignment to the variable."
-  },
-  ["WCF_MISCONFIGURATION_INSUFFICIENT_LOGGING" /* WcfMisconfigurationInsufficientLogging */]: void 0,
-  ["WCF_MISCONFIGURATION_THROTTLING_NOT_ENABLED" /* WcfMisconfigurationThrottlingNotEnabled */]: void 0,
-  ["USELESS_REGEXP_CHAR_ESCAPE" /* UselessRegexpCharEscape */]: void 0,
-  ["INCOMPLETE_HOSTNAME_REGEX" /* IncompleteHostnameRegex */]: void 0,
-  ["OVERLY_LARGE_RANGE" /* OverlyLargeRange */]: void 0,
-  ["PRIVACY_VIOLATION" /* PrivacyViolation */]: void 0,
-  ["VALUE_SHADOWING" /* ValueShadowing */]: void 0,
-  ["INCOMPLETE_URL_SCHEME_CHECK" /* IncompleteUrlSchemeCheck */]: void 0,
-  ["INSUFFICIENT_LOGGING" /* InsufficientLogging */]: void 0,
-  ["NO_EQUIVALENCE_METHOD" /* NoEquivalenceMethod */]: void 0,
-  ["INFORMATION_EXPOSURE_VIA_HEADERS" /* InformationExposureViaHeaders */]: void 0,
-  ["DEBUG_ENABLED" /* DebugEnabled */]: void 0,
-  ["CONFUSING_NAMING" /* ConfusingNaming */]: {
-    issueDescription: "A data member and a function have the same name which can be confusing to the developer.",
-    fixInstructions: "Rename the data member to avoid confusion."
-  },
-  ["J2EE_GET_CONNECTION" /* J2EeGetConnection */]: void 0,
-  ["LEFTOVER_DEBUG_CODE" /* LeftoverDebugCode */]: void 0,
-  ["UNVALIDATED_PUBLIC_METHOD_ARGUMENT" /* UnvalidatedPublicMethodArgument */]: void 0,
-  ["ERRONEOUS_STRING_COMPARE" /* ErroneousStringCompare */]: void 0,
-  ["POOR_ERROR_HANDLING_EMPTY_CATCH_BLOCK" /* PoorErrorHandlingEmptyCatchBlock */]: void 0,
-  ["AUTO_ESCAPE_FALSE" /* AutoEscapeFalse */]: {
-    issueDescription: "Auto Escape False occurs when automatic escaping is disabled in template engines, allowing untrusted data to be rendered without proper encoding. This can lead to Cross-Site Scripting (XSS) vulnerabilities.",
-    fixInstructions: "Set auto escape to true."
-  },
-  ["NO_LIMITS_OR_THROTTLING" /* NoLimitsOrThrottling */]: {
-    issueDescription: "The lack of a rate limit can allow denial-of-service attacks, in which an attacker can cause the application to crash or become unresponsive by issuing a large number of requests simultaneously.",
-    fixInstructions: "Use express-rate-limit npm package to set a rate limit."
-  },
-  ["MISSING_CSP_HEADER" /* MissingCspHeader */]: void 0,
-  ["HARDCODED_DOMAIN_IN_HTML" /* HardcodedDomainInHtml */]: void 0,
-  ["HEAP_INSPECTION" /* HeapInspection */]: {
-    issueDescription: "All variables stored by the application in unencrypted memory can be read by an attacker. This can lead to the exposure of sensitive information, such as passwords, credit card numbers, and personal data.",
-    fixInstructions: "Use secure storage methods to store secrets in memory."
-  },
-  ["CLIENT_DOM_STORED_CODE_INJECTION" /* ClientDomStoredCodeInjection */]: {
-    issueDescription: "Client DOM Stored Code Injection is a client-side security vulnerability where malicious JavaScript code gets stored in the DOM and later executed when retrieved by legitimate scripts.",
-    fixInstructions: "Update the code to avoid the possibility for malicious JavaScript code to get stored in the DOM."
-  },
-  ["STRING_FORMAT_MISUSE" /* StringFormatMisuse */]: void 0,
-  ["NON_READONLY_FIELD" /* NonReadonlyField */]: void 0,
-  ["CSRF" /* Csrf */]: {
-    issueDescription: "Cross Site Request Forgery is an attack that forces an end user to execute unwanted actions on a web application in which they\u2019re currently authenticated.",
-    fixInstructions: "Configure a CSRF protection mechanism, such as a CSRF token, in your application."
-  },
-  ["WEAK_ENCRYPTION" /* WeakEncryption */]: void 0,
-  ["CODE_IN_COMMENT" /* CodeInComment */]: void 0,
-  ["REGEX_MISSING_TIMEOUT" /* RegexMissingTimeout */]: void 0,
-  ["FRAMEABLE_LOGIN_PAGE" /* FrameableLoginPage */]: void 0,
-  ["USE_OF_HARD_CODED_CRYPTOGRAPHIC_KEY" /* UseOfHardCodedCryptographicKey */]: void 0,
-  ["MISSING_SSL_MINVERSION" /* MissingSslMinversion */]: void 0,
-  ["WEBSOCKET_MISSING_ORIGIN_CHECK" /* WebsocketMissingOriginCheck */]: void 0,
-  ["DUPLICATED_STRINGS" /* DuplicatedStrings */]: void 0,
-  ["INSECURE_UUID_VERSION" /* InsecureUuidVersion */]: void 0,
-  ["GH_ACTIONS_SHELL_INJECTION" /* GhActionsShellInjection */]: void 0,
-  ["MODIFIED_DEFAULT_PARAM" /* ModifiedDefaultParam */]: void 0,
-  ["UNSAFE_WEB_THREAD" /* UnsafeWebThread */]: void 0,
-  ["NO_VAR" /* NoVar */]: void 0,
-  ["INSECURE_TMP_FILE" /* InsecureTmpFile */]: void 0,
-  ["RETURN_SHOULD_NOT_BE_INVARIANT" /* ReturnShouldNotBeInvariant */]: void 0,
-  ["SYSTEM_EXIT_SHOULD_RERAISE" /* SystemExitShouldReraise */]: void 0,
-  ["NO_RETURN_IN_FINALLY" /* NoReturnInFinally */]: void 0,
-  ["AVOID_IDENTITY_COMPARISON_CACHED_TYPES" /* AvoidIdentityComparisonCachedTypes */]: void 0,
-  ["AVOID_BUILTIN_SHADOWING" /* AvoidBuiltinShadowing */]: void 0,
-  ["IMPROPER_STRING_FORMATTING" /* ImproperStringFormatting */]: void 0,
-  ["WILDCARD_IMPORTS" /* WildcardImports */]: void 0,
-  ["TAR_SLIP" /* TarSlip */]: void 0,
-  ["MISSING_WHITESPACE" /* MissingWhitespace */]: void 0,
-  ["NO_PRINT_STATEMENT" /* NoPrintStatement */]: void 0,
-  ["NO_OP_OVERHEAD" /* NoOpOverhead */]: void 0,
-  ["DO_NOT_RAISE_EXCEPTION" /* DoNotRaiseException */]: void 0,
-  ["DECLARE_VARIABLE_EXPLICITLY" /* DeclareVariableExplicitly */]: void 0,
-  ["UNNECESSARY_IMPORTS" /* UnnecessaryImports */]: void 0,
-  ["NO_NESTED_TRY" /* NoNestedTry */]: void 0,
-  ["REDOS" /* Redos */]: void 0,
-  ["DO_NOT_THROW_GENERIC_EXCEPTION" /* DoNotThrowGenericException */]: void 0,
-  ["BUFFER_OVERFLOW" /* BufferOverflow */]: {
-    issueDescription: "Buffer Overflow occurs when a program writes data beyond the allocated memory space, leading to unexpected behavior or security vulnerabilities.",
-    fixInstructions: "Implement proper input validation and bounds checking to prevent buffer overflows. Use safe string manipulation functions and ensure that the buffer size is properly managed."
-  },
-  ["STRING_TERMINATION_ERROR" /* StringTerminationError */]: {
-    issueDescription: "String Termination Error occurs when a string is not properly terminated, leading to unexpected behavior or security vulnerabilities.",
-    fixInstructions: "Implement proper input validation and bounds checking to prevent string termination errors. Use safe string manipulation functions and ensure that the buffer size is properly managed."
-  },
-  ["HTTP_PARAMETER_POLLUTION" /* HttpParameterPollution */]: {
-    issueDescription: "HTTP Parameter Pollution occurs when an attacker can manipulate the parameters of an HTTP request to change the behavior of the server.",
-    fixInstructions: "Implement proper input validation and bounds checking to prevent HTTP parameter pollution. Use safe string manipulation functions and ensure that the buffer size is properly managed."
-  },
-  ["INCOMPLETE_SANITIZATION" /* IncompleteSanitization */]: void 0,
-  ["CREDENTIAL_DISCLOSURE" /* CredentialDisclosure */]: void 0,
-  ["INSECURE_POSTMESSAGE" /* InsecurePostmessage */]: void 0,
-  ["MISSING_USER" /* MissingUser */]: {
-    issueDescription: "Missing User occurs when a user is not specified in the Dockerfile, leading to security vulnerabilities.",
-    fixInstructions: "Specify a user in the Dockerfile to prevent security vulnerabilities."
-  },
-  ["MISSING_ENCODING_FILE_OPEN" /* MissingEncodingFileOpen */]: void 0,
-  ["PORT_ALL_INTERFACES" /* PortAllInterfaces */]: void 0,
-  ["WRITABLE_FILESYSTEM_SERVICE" /* WritableFilesystemService */]: void 0,
-  ["NO_NEW_PRIVILEGES" /* NoNewPrivileges */]: void 0,
-  ["USELESS_TERNARY" /* UselessTernary */]: void 0,
-  ["REQUEST_PARAMETERS_BOUND_VIA_INPUT" /* RequestParametersBoundViaInput */]: void 0,
-  ["USE_SYS_EXIT" /* UseSysExit */]: void 0,
-  ["INCORRECT_SQL_API_USAGE" /* IncorrectSqlApiUsage */]: void 0,
-  ["USE_RAISE_FOR_STATUS" /* UseRaiseForStatus */]: void 0,
-  ["USE_TIMEOUT" /* UseTimeout */]: void 0,
-  ["USELESS_IF_BODY" /* UselessIfBody */]: void 0,
-  ["MISSING_TEMPLATE_STRING_INDICATOR" /* MissingTemplateStringIndicator */]: void 0,
-  ["NO_ASSERT" /* NoAssert */]: void 0,
-  ["FUNCTION_CALL_WITHOUT_PARENTHESES" /* FunctionCallWithoutParentheses */]: void 0,
-  ["SPRING_DEFAULT_PERMIT" /* SpringDefaultPermit */]: void 0,
-  ["RETURN_IN_INIT" /* ReturnInInit */]: void 0,
-  ["ACTION_NOT_PINNED_TO_COMMIT_SHA" /* ActionNotPinnedToCommitSha */]: void 0,
-  ["DJANGO_BLANK_FIELD_NEEDS_NULL_OR_DEFAULT" /* DjangoBlankFieldNeedsNullOrDefault */]: void 0,
-  ["REDUNDANT_CONDITION" /* RedundantCondition */]: void 0,
-  ["REDUNDANT_NIL_ERROR_CHECK" /* RedundantNilErrorCheck */]: void 0,
-  ["MISSING_WORKFLOW_PERMISSIONS" /* MissingWorkflowPermissions */]: void 0,
-  ["EXCESSIVE_SECRETS_EXPOSURE" /* ExcessiveSecretsExposure */]: void 0,
-  ["TAINTED_NUMERIC_CAST" /* TaintedNumericCast */]: void 0,
-  ["MISSING_X_FRAME_OPTIONS" /* MissingXFrameOptions */]: void 0,
-  ["IMPROPER_VALIDATION_OF_ARRAY_INDEX" /* ImproperValidationOfArrayIndex */]: void 0,
-  ["INCORRECT_INTEGER_CONVERSION" /* IncorrectIntegerConversion */]: void 0,
-  ["IMPROPER_CERTIFICATE_VALIDATION" /* ImproperCertificateValidation */]: void 0,
-  ["OFTEN_MISUSED_BOOLEAN_GET_BOOLEAN" /* OftenMisusedBooleanGetBoolean */]: void 0,
-  ["UNSAFE_REFLECTION" /* UnsafeReflection */]: void 0,
-  ["UNENCRYPTED_AWS_SQS_QUEUE" /* UnencryptedAwsSqsQueue */]: {
-    issueDescription: "AWS SQS queue contents are unencrypted; data could be read if the queue is compromised.",
-    fixInstructions: "Enable server-side encryption by setting sqs_managed_sse_enabled = true, or supply a KMS key via kms_master_key_id."
-  },
-  ["INSECURE_DESERIALIZATION" /* InsecureDeserialization */]: void 0,
-  ["AWS_DYNAMODB_POINT_IN_TIME_RECOVERY_DISABLED" /* AwsDynamodbPointInTimeRecoveryDisabled */]: {
-    issueDescription: "AWS DynamoDB table has point-in-time recovery disabled; accidental or malicious writes/deletes cannot be rolled back from a known-good snapshot.",
-    fixInstructions: "Enable point-in-time recovery by adding `point_in_time_recovery { enabled = true }` to the aws_dynamodb_table resource."
-  },
-  ["JWT_DECODE_WITHOUT_VERIFY" /* JwtDecodeWithoutVerify */]: {
-    issueDescription: "Decoding a JWT with `JWT.decode()` only base64-decodes the token without checking its signature, so an attacker can forge a token with arbitrary claims (identity, roles, expiration) and have it trusted. CWE-345, OWASP A08:2021 Software and Data Integrity Failures.",
-    fixInstructions: "Verify the signature before trusting any claims: build a verifier with the expected algorithm and secret/key (e.g. `JWT.require(Algorithm.HMAC256(secret)).build().verify(token)`) instead of calling `JWT.decode(token)`. After merging, confirm the verifier is configured with the same algorithm and secret/key used to sign your tokens \u2014 an incorrect or placeholder secret will make verification throw `JWTVerificationException` at runtime and reject legitimate tokens."
-  },
-  ["UNCHECKED_RETURN_VALUE" /* UncheckedReturnValue */]: void 0
-};
-
-// src/features/analysis/scm/shared/src/commitDescriptionMarkup.ts
 init_getIssueType();
+init_issueTypeCatalog();
 var severityToEmoji = {
   ["critical" /* Critical */]: "\u{1F6A8}",
   ["high" /* High */]: "\u{1F6A9}",
@@ -5244,14 +4612,12 @@ init_getIssueType();
 
 // src/features/analysis/scm/shared/src/guidances.ts
 init_client_generates();
-import { z as z12 } from "zod";
+init_getIssueType();
+import { z as z11 } from "zod";
 
 // src/features/analysis/scm/shared/src/storedFixData/index.ts
 init_client_generates();
-import { z as z10 } from "zod";
-
-// src/features/analysis/scm/shared/src/storedFixData/csharp/index.ts
-init_client_generates();
+import { z as z9 } from "zod";
 
 // src/features/analysis/scm/shared/src/storedFixData/passwordInComment.ts
 var passwordInComment = {
@@ -5288,8 +4654,8 @@ This is an illustration of how the form will look like:
 
 // src/features/analysis/scm/shared/src/storedFixData/csharp/index.ts
 var vulnerabilities = {
-  ["MISSING_ANTIFORGERY_VALIDATION" /* MissingAntiforgeryValidation */]: missingAntiForgeryValidation,
-  ["PASSWORD_IN_COMMENT" /* PasswordInComment */]: passwordInComment
+  ["MISSING_ANTIFORGERY_VALIDATION"]: missingAntiForgeryValidation,
+  ["PASSWORD_IN_COMMENT"]: passwordInComment
 };
 var csharp_default = vulnerabilities;
 
@@ -5305,9 +4671,6 @@ var go_default = vulnerabilities3;
 var vulnerabilities4 = {};
 var hcl_default = vulnerabilities4;
 
-// src/features/analysis/scm/shared/src/storedFixData/java/index.ts
-init_client_generates();
-
 // src/features/analysis/scm/shared/src/storedFixData/java/insecureDeserialization.ts
 var insecureDeserialization = {
   guidance: () => "Added a `@Consumes` annotation restricting the endpoint to common safe media types (JSON, XML, form, multipart, octet-stream, plain text). Requests with `Content-Type: application/x-java-serialized-object` are no longer routed to the RESTEasy `SerializableProvider`. If your endpoint legitimately accepts a content type not in this allowlist (e.g. `image/png`, a custom JSON variant), expect HTTP 415 from those clients and extend the `@Consumes` list to include it."
@@ -5364,17 +4727,14 @@ var systemInformationLeak = {
 
 // src/features/analysis/scm/shared/src/storedFixData/java/index.ts
 var vulnerabilities5 = {
-  ["PASSWORD_IN_COMMENT" /* PasswordInComment */]: passwordInComment,
-  ["INSECURE_DESERIALIZATION" /* InsecureDeserialization */]: insecureDeserialization,
-  ["J2EE_GET_CONNECTION" /* J2EeGetConnection */]: j2eeGetConnection,
-  ["SQL_Injection" /* SqlInjection */]: sqlInjection,
-  ["SYSTEM_INFORMATION_LEAK" /* SystemInformationLeak */]: systemInformationLeak
+  ["PASSWORD_IN_COMMENT"]: passwordInComment,
+  ["INSECURE_DESERIALIZATION"]: insecureDeserialization,
+  ["J2EE_GET_CONNECTION"]: j2eeGetConnection,
+  ["SQL_Injection"]: sqlInjection,
+  ["SYSTEM_INFORMATION_LEAK"]: systemInformationLeak
 };
 var java_default = vulnerabilities5;
 
-// src/features/analysis/scm/shared/src/storedFixData/javascript/index.ts
-init_client_generates();
-
 // src/features/analysis/scm/shared/src/storedFixData/python/csrf.ts
 var csrf = {
   guidance: () => `Please make sure the CSRF middleware is activated by default in the MIDDLEWARE setting. If you override that setting, remember that \`django.middleware.csrf.CsrfViewMiddleware\` should come before any view middleware that assume that CSRF attacks have been dealt with.
@@ -5417,11 +4777,11 @@ var ssrf = {
 
 // src/features/analysis/scm/shared/src/storedFixData/javascript/index.ts
 var vulnerabilities6 = {
-  ["SSRF" /* Ssrf */]: ssrf,
-  ["HARDCODED_SECRETS" /* HardcodedSecrets */]: hardcodedSecrets,
-  ["PASSWORD_IN_COMMENT" /* PasswordInComment */]: passwordInComment,
-  ["NO_LIMITS_OR_THROTTLING" /* NoLimitsOrThrottling */]: noLimitsOrThrottling,
-  ["CSRF" /* Csrf */]: csrf
+  ["SSRF"]: ssrf,
+  ["HARDCODED_SECRETS"]: hardcodedSecrets,
+  ["PASSWORD_IN_COMMENT"]: passwordInComment,
+  ["NO_LIMITS_OR_THROTTLING"]: noLimitsOrThrottling,
+  ["CSRF"]: csrf
 };
 var javascript_default = vulnerabilities6;
 
@@ -5429,9 +4789,6 @@ var javascript_default = vulnerabilities6;
 var vulnerabilities7 = {};
 var php_default = vulnerabilities7;
 
-// src/features/analysis/scm/shared/src/storedFixData/python/index.ts
-init_client_generates();
-
 // src/features/analysis/scm/shared/src/storedFixData/python/autoEscapeFalse.ts
 var autoEscapeFalse = {
   guidance: () => `This fix enables automatic escaping for HTML. When that's enabled, everything is escaped by default except for values explicitly marked as safe. Variables and expressions can be marked as safe either in:
@@ -5466,15 +4823,12 @@ See the [\`requests\` SSL verification docs](https://requests.readthedocs.io/en/
 
 // src/features/analysis/scm/shared/src/storedFixData/python/index.ts
 var vulnerabilities8 = {
-  ["AUTO_ESCAPE_FALSE" /* AutoEscapeFalse */]: autoEscapeFalse,
-  ["CSRF" /* Csrf */]: csrf,
-  ["IMPROPER_CERTIFICATE_VALIDATION" /* ImproperCertificateValidation */]: improperCertificateValidation
+  ["AUTO_ESCAPE_FALSE"]: autoEscapeFalse,
+  ["CSRF"]: csrf,
+  ["IMPROPER_CERTIFICATE_VALIDATION"]: improperCertificateValidation
 };
 var python_default = vulnerabilities8;
 
-// src/features/analysis/scm/shared/src/storedFixData/sql/index.ts
-init_client_generates();
-
 // src/features/analysis/scm/shared/src/storedFixData/sql/defaultRightsInObjDefinition.ts
 var defaultRightsInObjDefinition = {
   guidance: () => "***Make sure the user who is supposed to run the procedure has sufficient permissions.***\n\nRead more details about the `EXECUTE AS` statement in [the official Microsoft documentation](https://learn.microsoft.com/en-us/sql/t-sql/statements/execute-as-clause-transact-sql?view=sql-server-ver16&tabs=sqlserver).\n\n`EXECUTE AS CALLER` is the default behavior for SQL Server 2005 and later."
@@ -5482,20 +4836,19 @@ var defaultRightsInObjDefinition = {
 
 // src/features/analysis/scm/shared/src/storedFixData/sql/index.ts
 var vulnerabilities9 = {
-  ["DEFAULT_RIGHTS_IN_OBJ_DEFINITION" /* DefaultRightsInObjDefinition */]: defaultRightsInObjDefinition
+  ["DEFAULT_RIGHTS_IN_OBJ_DEFINITION"]: defaultRightsInObjDefinition
 };
 var sql_default = vulnerabilities9;
 
 // src/features/analysis/scm/shared/src/storedFixData/xml/index.ts
-init_client_generates();
 var vulnerabilities10 = {
-  ["PASSWORD_IN_COMMENT" /* PasswordInComment */]: passwordInComment
+  ["PASSWORD_IN_COMMENT"]: passwordInComment
 };
 var xml_default = vulnerabilities10;
 
 // src/features/analysis/scm/shared/src/storedFixData/index.ts
-var StoredFixDataItemZ = z10.object({
-  guidance: z10.function().returns(z10.string())
+var StoredFixDataItemZ = z9.object({
+  guidance: z9.function().args(z9.any()).returns(z9.string())
 });
 var languages = {
   ["Java" /* Java */]: java_default,
@@ -5512,10 +4865,7 @@ var languages = {
 
 // src/features/analysis/scm/shared/src/storedQuestionData/index.ts
 init_client_generates();
-import { z as z11 } from "zod";
-
-// src/features/analysis/scm/shared/src/storedQuestionData/cpp/index.ts
-init_client_generates();
+import { z as z10 } from "zod";
 
 // src/features/analysis/scm/shared/src/storedQuestionData/cpp/commandInjection.ts
 var commandInjection = {
@@ -5561,14 +4911,11 @@ var pathManipulation = {
 
 // src/features/analysis/scm/shared/src/storedQuestionData/cpp/index.ts
 var vulnerabilities11 = {
-  ["CMDi" /* CmDi */]: commandInjection,
-  ["PT" /* Pt */]: pathManipulation
+  ["CMDi"]: commandInjection,
+  ["PT"]: pathManipulation
 };
 var cpp_default = vulnerabilities11;
 
-// src/features/analysis/scm/shared/src/storedQuestionData/csharp/index.ts
-init_client_generates();
-
 // src/features/analysis/scm/shared/src/storedQuestionData/csharp/httpOnlyCookie.ts
 var httpOnlyCookie = {
   httpOnlyCookie: {
@@ -5863,31 +5210,28 @@ var xxe = {
 
 // src/features/analysis/scm/shared/src/storedQuestionData/csharp/index.ts
 var vulnerabilities12 = {
-  ["LOG_FORGING" /* LogForging */]: logForging,
-  ["SSRF" /* Ssrf */]: ssrf2,
-  ["XXE" /* Xxe */]: xxe,
-  ["XSS" /* Xss */]: xss,
-  ["USE_OF_SYSTEM_OUTPUT_STREAM" /* UseOfSystemOutputStream */]: useOfSystemOutputStream,
-  ["SYSTEM_INFORMATION_LEAK" /* SystemInformationLeak */]: sysLeak,
-  ["OVERLY_BROAD_CATCH" /* OverlyBroadCatch */]: overlyBroadCatch,
-  ["TRUST_BOUNDARY_VIOLATION" /* TrustBoundaryViolation */]: trustBoundaryViolation,
-  ["PT" /* Pt */]: pt,
-  ["REGEX_MISSING_TIMEOUT" /* RegexMissingTimeout */]: regexMissingTimeout,
-  ["HTTP_ONLY_COOKIE" /* HttpOnlyCookie */]: httpOnlyCookie,
-  ["INSECURE_COOKIE" /* InsecureCookie */]: insecureCookie,
-  ["WCF_MISCONFIGURATION_THROTTLING_NOT_ENABLED" /* WcfMisconfigurationThrottlingNotEnabled */]: wcfMisconfigurationThrottlingNotEnabled,
-  ["INSECURE_BINDER_CONFIGURATION" /* InsecureBinderConfiguration */]: insecureBinderConfiguration,
-  ["VALUE_SHADOWING" /* ValueShadowing */]: valueShadowing,
-  ["INSECURE_RANDOMNESS" /* InsecureRandomness */]: insecureRandomness,
-  ["INSUFFICIENT_LOGGING" /* InsufficientLogging */]: insufficientLogging,
-  ["SQL_Injection" /* SqlInjection */]: sqlInjection2,
-  ["REQUEST_PARAMETERS_BOUND_VIA_INPUT" /* RequestParametersBoundViaInput */]: requestParametersBoundViaInput
+  ["LOG_FORGING"]: logForging,
+  ["SSRF"]: ssrf2,
+  ["XXE"]: xxe,
+  ["XSS"]: xss,
+  ["USE_OF_SYSTEM_OUTPUT_STREAM"]: useOfSystemOutputStream,
+  ["SYSTEM_INFORMATION_LEAK"]: sysLeak,
+  ["OVERLY_BROAD_CATCH"]: overlyBroadCatch,
+  ["TRUST_BOUNDARY_VIOLATION"]: trustBoundaryViolation,
+  ["PT"]: pt,
+  ["REGEX_MISSING_TIMEOUT"]: regexMissingTimeout,
+  ["HTTP_ONLY_COOKIE"]: httpOnlyCookie,
+  ["INSECURE_COOKIE"]: insecureCookie,
+  ["WCF_MISCONFIGURATION_THROTTLING_NOT_ENABLED"]: wcfMisconfigurationThrottlingNotEnabled,
+  ["INSECURE_BINDER_CONFIGURATION"]: insecureBinderConfiguration,
+  ["VALUE_SHADOWING"]: valueShadowing,
+  ["INSECURE_RANDOMNESS"]: insecureRandomness,
+  ["INSUFFICIENT_LOGGING"]: insufficientLogging,
+  ["SQL_Injection"]: sqlInjection2,
+  ["REQUEST_PARAMETERS_BOUND_VIA_INPUT"]: requestParametersBoundViaInput
 };
 var csharp_default2 = vulnerabilities12;
 
-// src/features/analysis/scm/shared/src/storedQuestionData/go/index.ts
-init_client_generates();
-
 // src/features/analysis/scm/shared/src/storedQuestionData/go/logForging.ts
 var logForging2 = {
   isHtmlDisplay: {
@@ -5917,15 +5261,12 @@ var websocketMissingOriginCheck = {
 
 // src/features/analysis/scm/shared/src/storedQuestionData/go/index.ts
 var vulnerabilities13 = {
-  ["LOG_FORGING" /* LogForging */]: logForging2,
-  ["MISSING_SSL_MINVERSION" /* MissingSslMinversion */]: missingSslMinversion,
-  ["WEBSOCKET_MISSING_ORIGIN_CHECK" /* WebsocketMissingOriginCheck */]: websocketMissingOriginCheck
+  ["LOG_FORGING"]: logForging2,
+  ["MISSING_SSL_MINVERSION"]: missingSslMinversion,
+  ["WEBSOCKET_MISSING_ORIGIN_CHECK"]: websocketMissingOriginCheck
 };
 var go_default2 = vulnerabilities13;
 
-// src/features/analysis/scm/shared/src/storedQuestionData/java/index.ts
-init_client_generates();
-
 // src/features/analysis/scm/shared/src/storedQuestionData/java/commandInjection.ts
 var commandInjection2 = {
   isUnixShellCommandPart: {
@@ -6382,38 +5723,35 @@ var xxe2 = {
 
 // src/features/analysis/scm/shared/src/storedQuestionData/java/index.ts
 var vulnerabilities14 = {
-  ["SQL_Injection" /* SqlInjection */]: sqlInjection3,
-  ["CMDi_relative_path_command" /* CmDiRelativePathCommand */]: relativePathCommand,
-  ["CMDi" /* CmDi */]: commandInjection2,
-  ["CONFUSING_NAMING" /* ConfusingNaming */]: confusingNaming,
-  ["ERROR_CONDTION_WITHOUT_ACTION" /* ErrorCondtionWithoutAction */]: errorConditionWithoutAction,
-  ["XXE" /* Xxe */]: xxe2,
-  ["XSS" /* Xss */]: xss2,
-  ["PRIVACY_VIOLATION" /* PrivacyViolation */]: privacyViolation,
-  ["PT" /* Pt */]: pt2,
-  ["SSRF" /* Ssrf */]: ssrf3,
-  ["LOG_FORGING" /* LogForging */]: logForging3,
-  ["LOCALE_DEPENDENT_COMPARISON" /* LocaleDependentComparison */]: localeDependentComparison,
-  ["MISSING_CHECK_AGAINST_NULL" /* MissingCheckAgainstNull */]: missingCheckAgainstNull,
-  ["OPEN_REDIRECT" /* OpenRedirect */]: openRedirect,
-  ["OVERLY_BROAD_CATCH" /* OverlyBroadCatch */]: overlyBroadCatch2,
-  ["SYSTEM_INFORMATION_LEAK" /* SystemInformationLeak */]: sysLeak2,
-  ["USE_OF_SYSTEM_OUTPUT_STREAM" /* UseOfSystemOutputStream */]: useOfSystemOutputStream2,
-  ["HTTP_ONLY_COOKIE" /* HttpOnlyCookie */]: httpOnlyCookie2,
-  ["UNCHECKED_LOOP_CONDITION" /* UncheckedLoopCondition */]: uncheckedLoopCondition,
-  ["INSECURE_COOKIE" /* InsecureCookie */]: insecureCookie2,
-  ["TRUST_BOUNDARY_VIOLATION" /* TrustBoundaryViolation */]: trustBoundaryViolation2,
-  ["UNSAFE_REFLECTION" /* UnsafeReflection */]: unsafeReflection,
-  ["J2EE_GET_CONNECTION" /* J2EeGetConnection */]: j2eeGetConnection2,
-  ["LEFTOVER_DEBUG_CODE" /* LeftoverDebugCode */]: leftoverDebugCode,
-  ["ERRONEOUS_STRING_COMPARE" /* ErroneousStringCompare */]: erroneousStringCompare,
-  ["DUPLICATED_STRINGS" /* DuplicatedStrings */]: duplicatedStrings
+  ["SQL_Injection"]: sqlInjection3,
+  ["CMDi_relative_path_command"]: relativePathCommand,
+  ["CMDi"]: commandInjection2,
+  ["CONFUSING_NAMING"]: confusingNaming,
+  ["ERROR_CONDTION_WITHOUT_ACTION"]: errorConditionWithoutAction,
+  ["XXE"]: xxe2,
+  ["XSS"]: xss2,
+  ["PRIVACY_VIOLATION"]: privacyViolation,
+  ["PT"]: pt2,
+  ["SSRF"]: ssrf3,
+  ["LOG_FORGING"]: logForging3,
+  ["LOCALE_DEPENDENT_COMPARISON"]: localeDependentComparison,
+  ["MISSING_CHECK_AGAINST_NULL"]: missingCheckAgainstNull,
+  ["OPEN_REDIRECT"]: openRedirect,
+  ["OVERLY_BROAD_CATCH"]: overlyBroadCatch2,
+  ["SYSTEM_INFORMATION_LEAK"]: sysLeak2,
+  ["USE_OF_SYSTEM_OUTPUT_STREAM"]: useOfSystemOutputStream2,
+  ["HTTP_ONLY_COOKIE"]: httpOnlyCookie2,
+  ["UNCHECKED_LOOP_CONDITION"]: uncheckedLoopCondition,
+  ["INSECURE_COOKIE"]: insecureCookie2,
+  ["TRUST_BOUNDARY_VIOLATION"]: trustBoundaryViolation2,
+  ["UNSAFE_REFLECTION"]: unsafeReflection,
+  ["J2EE_GET_CONNECTION"]: j2eeGetConnection2,
+  ["LEFTOVER_DEBUG_CODE"]: leftoverDebugCode,
+  ["ERRONEOUS_STRING_COMPARE"]: erroneousStringCompare,
+  ["DUPLICATED_STRINGS"]: duplicatedStrings
 };
 var java_default2 = vulnerabilities14;
 
-// src/features/analysis/scm/shared/src/storedQuestionData/js/index.ts
-init_client_generates();
-
 // src/features/analysis/scm/shared/src/storedQuestionData/python/csrf.ts
 var csrf2 = {
   isPythonDjangoTemplate: {
@@ -6739,33 +6077,30 @@ var xss3 = {
 
 // src/features/analysis/scm/shared/src/storedQuestionData/js/index.ts
 var vulnerabilities15 = {
-  ["CMDi" /* CmDi */]: commandInjection3,
-  ["GRAPHQL_DEPTH_LIMIT" /* GraphqlDepthLimit */]: graphqlDepthLimit,
-  ["INSECURE_RANDOMNESS" /* InsecureRandomness */]: insecureRandomness2,
-  ["SSRF" /* Ssrf */]: ssrf4,
-  ["TYPE_CONFUSION" /* TypeConfusion */]: typeConfusion,
-  ["INCOMPLETE_URL_SANITIZATION" /* IncompleteUrlSanitization */]: incompleteUrlSanitization,
-  ["LOG_FORGING" /* LogForging */]: logForging4,
-  ["XSS" /* Xss */]: xss3,
-  ["OPEN_REDIRECT" /* OpenRedirect */]: openRedirect2,
-  ["SYSTEM_INFORMATION_LEAK" /* SystemInformationLeak */]: sysLeak3,
-  ["SYSTEM_INFORMATION_LEAK_EXTERNAL" /* SystemInformationLeakExternal */]: sysLeakExternal,
-  ["IFRAME_WITHOUT_SANDBOX" /* IframeWithoutSandbox */]: iframeWithoutSandbox,
-  ["PT" /* Pt */]: pt3,
-  ["HARDCODED_SECRETS" /* HardcodedSecrets */]: hardcodedSecrets2,
-  ["MISSING_HSTS_HEADER" /* MissingHstsHeader */]: headerMaxAge,
-  ["UNCHECKED_LOOP_CONDITION" /* UncheckedLoopCondition */]: uncheckedLoopCondition2,
-  ["NO_LIMITS_OR_THROTTLING" /* NoLimitsOrThrottling */]: noLimitsOrThrottling2,
-  ["MISSING_CSP_HEADER" /* MissingCspHeader */]: cspHeaderValue,
-  ["MISSING_X_FRAME_OPTIONS" /* MissingXFrameOptions */]: xFrameOptionsValue,
-  ["HARDCODED_DOMAIN_IN_HTML" /* HardcodedDomainInHtml */]: hardcodedDomainInHtml,
-  ["CSRF" /* Csrf */]: csrf2
+  ["CMDi"]: commandInjection3,
+  ["GRAPHQL_DEPTH_LIMIT"]: graphqlDepthLimit,
+  ["INSECURE_RANDOMNESS"]: insecureRandomness2,
+  ["SSRF"]: ssrf4,
+  ["TYPE_CONFUSION"]: typeConfusion,
+  ["INCOMPLETE_URL_SANITIZATION"]: incompleteUrlSanitization,
+  ["LOG_FORGING"]: logForging4,
+  ["XSS"]: xss3,
+  ["OPEN_REDIRECT"]: openRedirect2,
+  ["SYSTEM_INFORMATION_LEAK"]: sysLeak3,
+  ["SYSTEM_INFORMATION_LEAK_EXTERNAL"]: sysLeakExternal,
+  ["IFRAME_WITHOUT_SANDBOX"]: iframeWithoutSandbox,
+  ["PT"]: pt3,
+  ["HARDCODED_SECRETS"]: hardcodedSecrets2,
+  ["MISSING_HSTS_HEADER"]: headerMaxAge,
+  ["UNCHECKED_LOOP_CONDITION"]: uncheckedLoopCondition2,
+  ["NO_LIMITS_OR_THROTTLING"]: noLimitsOrThrottling2,
+  ["MISSING_CSP_HEADER"]: cspHeaderValue,
+  ["MISSING_X_FRAME_OPTIONS"]: xFrameOptionsValue,
+  ["HARDCODED_DOMAIN_IN_HTML"]: hardcodedDomainInHtml,
+  ["CSRF"]: csrf2
 };
 var js_default = vulnerabilities15;
 
-// src/features/analysis/scm/shared/src/storedQuestionData/python/index.ts
-init_client_generates();
-
 // src/features/analysis/scm/shared/src/storedQuestionData/python/duplicatedStrings.ts
 var duplicatedStrings2 = {
   constantName: {
@@ -6836,19 +6171,16 @@ var uncheckedLoopCondition3 = {
 
 // src/features/analysis/scm/shared/src/storedQuestionData/python/index.ts
 var vulnerabilities16 = {
-  ["CSRF" /* Csrf */]: csrf2,
-  ["LOG_FORGING" /* LogForging */]: logForging5,
-  ["OPEN_REDIRECT" /* OpenRedirect */]: openRedirect3,
-  ["UNCHECKED_LOOP_CONDITION" /* UncheckedLoopCondition */]: uncheckedLoopCondition3,
-  ["DUPLICATED_STRINGS" /* DuplicatedStrings */]: duplicatedStrings2,
-  ["MISSING_ENCODING_FILE_OPEN" /* MissingEncodingFileOpen */]: missingEncoding,
-  ["SSRF" /* Ssrf */]: ssrf5
+  ["CSRF"]: csrf2,
+  ["LOG_FORGING"]: logForging5,
+  ["OPEN_REDIRECT"]: openRedirect3,
+  ["UNCHECKED_LOOP_CONDITION"]: uncheckedLoopCondition3,
+  ["DUPLICATED_STRINGS"]: duplicatedStrings2,
+  ["MISSING_ENCODING_FILE_OPEN"]: missingEncoding,
+  ["SSRF"]: ssrf5
 };
 var python_default2 = vulnerabilities16;
 
-// src/features/analysis/scm/shared/src/storedQuestionData/xml/index.ts
-init_client_generates();
-
 // src/features/analysis/scm/shared/src/storedQuestionData/xml/unboundedOccurrences.ts
 var unboundedOccurrences = {
   maxOccursLimit: {
@@ -6862,13 +6194,10 @@ A value too high will cause performance issues up to and including denial of ser
 
 // src/features/analysis/scm/shared/src/storedQuestionData/xml/index.ts
 var vulnerabilities17 = {
-  ["WEAK_XML_SCHEMA_UNBOUNDED_OCCURRENCES" /* WeakXmlSchemaUnboundedOccurrences */]: unboundedOccurrences
+  ["WEAK_XML_SCHEMA_UNBOUNDED_OCCURRENCES"]: unboundedOccurrences
 };
 var xml_default2 = vulnerabilities17;
 
-// src/features/analysis/scm/shared/src/storedQuestionData/yaml/index.ts
-init_client_generates();
-
 // src/features/analysis/scm/shared/src/storedQuestionData/yaml/noNewPrivileges.ts
 var noNewPrivileges = {
   requireNewPrivileges: {
@@ -6898,17 +6227,17 @@ var writableFilesystemService = {
 
 // src/features/analysis/scm/shared/src/storedQuestionData/yaml/index.ts
 var vulnerabilities18 = {
-  ["PORT_ALL_INTERFACES" /* PortAllInterfaces */]: portAllInterfaces,
-  ["WRITABLE_FILESYSTEM_SERVICE" /* WritableFilesystemService */]: writableFilesystemService,
-  ["NO_NEW_PRIVILEGES" /* NoNewPrivileges */]: noNewPrivileges
+  ["PORT_ALL_INTERFACES"]: portAllInterfaces,
+  ["WRITABLE_FILESYSTEM_SERVICE"]: writableFilesystemService,
+  ["NO_NEW_PRIVILEGES"]: noNewPrivileges
 };
 var yaml_default = vulnerabilities18;
 
 // src/features/analysis/scm/shared/src/storedQuestionData/index.ts
-var StoredQuestionDataItemZ = z11.object({
-  content: z11.function().args(z11.any()).returns(z11.string()),
-  description: z11.function().args(z11.any()).returns(z11.string()),
-  guidance: z11.function().args(z11.any()).returns(z11.string())
+var StoredQuestionDataItemZ = z10.object({
+  content: z10.function().args(z10.any()).returns(z10.string()),
+  description: z10.function().args(z10.any()).returns(z10.string()),
+  guidance: z10.function().args(z10.any()).returns(z10.string())
 });
 var languages2 = {
   ["Java" /* Java */]: java_default2,
@@ -6922,9 +6251,9 @@ var languages2 = {
 };
 
 // src/features/analysis/scm/shared/src/guidances.ts
-var IssueTypeAndLanguageZ = z12.object({
-  issueType: z12.nativeEnum(IssueType_Enum),
-  issueLanguage: z12.nativeEnum(IssueLanguage_Enum)
+var IssueTypeAndLanguageZ = z11.object({
+  issueType: SafeIssueTypeStringZ,
+  issueLanguage: z11.nativeEnum(IssueLanguage_Enum)
 });
 
 // src/features/analysis/scm/shared/src/index.ts
@@ -6934,19 +6263,19 @@ init_urlParser2();
 init_validations();
 
 // src/features/analysis/scm/types.ts
-import { z as z14 } from "zod";
+import { z as z13 } from "zod";
 var ReferenceType = /* @__PURE__ */ ((ReferenceType2) => {
   ReferenceType2["BRANCH"] = "BRANCH";
   ReferenceType2["COMMIT"] = "COMMIT";
   ReferenceType2["TAG"] = "TAG";
   return ReferenceType2;
 })(ReferenceType || {});
-var GithubFullShaZ = z14.string().regex(/^[a-f0-9]{40}$/);
-var MergedPrSurvivalMetadataZ = z14.object({
-  mergeCommitShas: z14.array(GithubFullShaZ).min(1).refine((shas) => new Set(shas).size === shas.length, {
+var GithubFullShaZ = z13.string().regex(/^[a-f0-9]{40}$/);
+var MergedPrSurvivalMetadataZ = z13.object({
+  mergeCommitShas: z13.array(GithubFullShaZ).min(1).refine((shas) => new Set(shas).size === shas.length, {
     message: "mergeCommitShas must contain unique SHAs"
   }),
-  targetBranch: z14.string().min(1)
+  targetBranch: z13.string().min(1)
 });
 var scmCloudHostname = {
   ["GitLab" /* GitLab */]: new URL(scmCloudUrl.GitLab).hostname,
@@ -6966,10 +6295,10 @@ var scmTypeToScmLibScmType = {
   ["Ado" /* Ado */]: "ADO" /* ADO */,
   ["Bitbucket" /* Bitbucket */]: "BITBUCKET" /* BITBUCKET */
 };
-var GetReferenceResultZ = z14.object({
-  date: z14.date().optional(),
-  sha: z14.string(),
-  type: z14.nativeEnum(ReferenceType)
+var GetReferenceResultZ = z13.object({
+  date: z13.date().optional(),
+  sha: z13.string(),
+  type: z13.nativeEnum(ReferenceType)
 });
 
 // src/features/analysis/scm/ado/constants.ts
@@ -6981,39 +6310,39 @@ init_env();
 import querystring from "querystring";
 import * as api from "azure-devops-node-api";
 import Debug3 from "debug";
-import { z as z18 } from "zod";
+import { z as z17 } from "zod";
 
 // src/features/analysis/scm/ado/validation.ts
-import { z as z17 } from "zod";
-var ValidPullRequestStatusZ = z17.union([
-  z17.literal(1 /* Active */),
-  z17.literal(2 /* Abandoned */),
-  z17.literal(3 /* Completed */)
+import { z as z16 } from "zod";
+var ValidPullRequestStatusZ = z16.union([
+  z16.literal(1 /* Active */),
+  z16.literal(2 /* Abandoned */),
+  z16.literal(3 /* Completed */)
 ]);
-var AdoAuthResultZ = z17.object({
-  access_token: z17.string().min(1),
-  token_type: z17.string().min(1),
-  refresh_token: z17.string().min(1)
+var AdoAuthResultZ = z16.object({
+  access_token: z16.string().min(1),
+  token_type: z16.string().min(1),
+  refresh_token: z16.string().min(1)
 });
 var AdoAuthResultWithOrgsZ = AdoAuthResultZ.extend({
-  scmOrgs: z17.array(z17.string())
+  scmOrgs: z16.array(z16.string())
 });
-var profileZ = z17.object({
-  displayName: z17.string(),
-  publicAlias: z17.string().min(1),
-  emailAddress: z17.string(),
-  coreRevision: z17.number(),
-  timeStamp: z17.string(),
-  id: z17.string(),
-  revision: z17.number()
+var profileZ = z16.object({
+  displayName: z16.string(),
+  publicAlias: z16.string().min(1),
+  emailAddress: z16.string(),
+  coreRevision: z16.number(),
+  timeStamp: z16.string(),
+  id: z16.string(),
+  revision: z16.number()
 });
-var accountsZ = z17.object({
-  count: z17.number(),
-  value: z17.array(
-    z17.object({
-      accountId: z17.string(),
-      accountUri: z17.string(),
-      accountName: z17.string()
+var accountsZ = z16.object({
+  count: z16.number(),
+  value: z16.array(
+    z16.object({
+      accountId: z16.string(),
+      accountUri: z16.string(),
+      accountName: z16.string()
     })
   )
 });
@@ -7034,39 +6363,39 @@ import querystring2 from "querystring";
 import * as bitbucketPkgNode from "bitbucket";
 import bitbucketPkg from "bitbucket";
 import Debug4 from "debug";
-import { z as z21 } from "zod";
+import { z as z20 } from "zod";
 
 // src/features/analysis/scm/bitbucket/validation.ts
-import { z as z20 } from "zod";
-var BitbucketAuthResultZ = z20.object({
-  access_token: z20.string(),
-  token_type: z20.string(),
-  refresh_token: z20.string()
+import { z as z19 } from "zod";
+var BitbucketAuthResultZ = z19.object({
+  access_token: z19.string(),
+  token_type: z19.string(),
+  refresh_token: z19.string()
 });
 
 // src/features/analysis/scm/bitbucket/bitbucket.ts
 var debug5 = Debug4("scm:bitbucket");
 var BITBUCKET_HOSTNAME = "bitbucket.org";
-var TokenExpiredErrorZ = z21.object({
-  status: z21.number(),
-  error: z21.object({
-    type: z21.string(),
-    error: z21.object({
-      message: z21.string()
+var TokenExpiredErrorZ = z20.object({
+  status: z20.number(),
+  error: z20.object({
+    type: z20.string(),
+    error: z20.object({
+      message: z20.string()
     })
   })
 });
 var BITBUCKET_ACCESS_TOKEN_URL = `https://${BITBUCKET_HOSTNAME}/site/oauth2/access_token`;
-var BitbucketParseResultZ = z21.object({
-  organization: z21.string(),
-  repoName: z21.string(),
-  hostname: z21.literal(BITBUCKET_HOSTNAME)
+var BitbucketParseResultZ = z20.object({
+  organization: z20.string(),
+  repoName: z20.string(),
+  hostname: z20.literal(BITBUCKET_HOSTNAME)
 });
-var UserWorkspacePermissionsRepositoriesResponseZ = z21.object({
-  values: z21.array(
-    z21.object({
-      repository: z21.object({
-        full_name: z21.string().optional()
+var UserWorkspacePermissionsRepositoriesResponseZ = z20.object({
+  values: z20.array(
+    z20.object({
+      repository: z20.object({
+        full_name: z20.string().optional()
       }).optional()
     })
   ).optional()
@@ -7074,7 +6403,7 @@ var UserWorkspacePermissionsRepositoriesResponseZ = z21.object({
 
 // src/features/analysis/scm/bitbucket/BitbucketSCMLib.ts
 import { setTimeout as setTimeout3 } from "timers/promises";
-import { z as z22 } from "zod";
+import { z as z21 } from "zod";
 
 // src/features/analysis/scm/constants.ts
 var REPORT_DEFAULT_FILE_NAME = "report.json";
@@ -7084,7 +6413,7 @@ init_env();
 
 // src/features/analysis/scm/github/GithubSCMLib.ts
 import pLimit3 from "p-limit";
-import { z as z23 } from "zod";
+import { z as z22 } from "zod";
 init_client_generates();
 
 // src/features/analysis/scm/github/github.ts
@@ -7117,11 +6446,11 @@ import {
 init_env();
 
 // src/features/analysis/scm/gitlab/types.ts
-import { z as z24 } from "zod";
-var GitlabAuthResultZ = z24.object({
-  access_token: z24.string(),
-  token_type: z24.string(),
-  refresh_token: z24.string()
+import { z as z23 } from "zod";
+var GitlabAuthResultZ = z23.object({
+  access_token: z23.string(),
+  token_type: z23.string(),
+  refresh_token: z23.string()
 });
 
 // src/features/analysis/scm/gitlab/gitlab.ts
@@ -7132,69 +6461,69 @@ import pLimit5 from "p-limit";
 init_client_generates();
 
 // src/features/analysis/scm/scmFactory.ts
-import { z as z25 } from "zod";
+import { z as z24 } from "zod";
 
 // src/features/analysis/graphql/gql.ts
 init_client_generates();
 
 // src/features/analysis/graphql/types.ts
 init_client_generates();
-import { z as z26 } from "zod";
-var VulnerabilityReportIssueCodeNodeZ = z26.object({
-  vulnerabilityReportIssueId: z26.string(),
-  path: z26.string(),
-  startLine: z26.number(),
-  vulnerabilityReportIssue: z26.object({
-    fixId: z26.string(),
-    category: z26.nativeEnum(Vulnerability_Report_Issue_Category_Enum),
-    safeIssueType: z26.string(),
-    vulnerabilityReportIssueTags: z26.array(
-      z26.object({
-        tag: z26.nativeEnum(Vulnerability_Report_Issue_Tag_Enum)
+import { z as z25 } from "zod";
+var VulnerabilityReportIssueCodeNodeZ = z25.object({
+  vulnerabilityReportIssueId: z25.string(),
+  path: z25.string(),
+  startLine: z25.number(),
+  vulnerabilityReportIssue: z25.object({
+    fixId: z25.string(),
+    category: z25.nativeEnum(Vulnerability_Report_Issue_Category_Enum),
+    safeIssueType: z25.string(),
+    vulnerabilityReportIssueTags: z25.array(
+      z25.object({
+        tag: z25.nativeEnum(Vulnerability_Report_Issue_Tag_Enum)
       })
     )
   })
 });
-var VulnerabilityReportIssueNoFixCodeNodeZ = z26.object({
-  vulnerabilityReportIssues: z26.array(
-    z26.object({
-      id: z26.string(),
-      fixId: z26.string().nullable(),
-      category: z26.nativeEnum(Vulnerability_Report_Issue_Category_Enum),
-      safeIssueType: z26.string(),
-      fpId: z26.string().uuid().nullable(),
-      codeNodes: z26.array(
-        z26.object({
-          path: z26.string(),
-          startLine: z26.number()
+var VulnerabilityReportIssueNoFixCodeNodeZ = z25.object({
+  vulnerabilityReportIssues: z25.array(
+    z25.object({
+      id: z25.string(),
+      fixId: z25.string().nullable(),
+      category: z25.nativeEnum(Vulnerability_Report_Issue_Category_Enum),
+      safeIssueType: z25.string(),
+      fpId: z25.string().uuid().nullable(),
+      codeNodes: z25.array(
+        z25.object({
+          path: z25.string(),
+          startLine: z25.number()
         })
       ),
-      vulnerabilityReportIssueTags: z26.array(
-        z26.object({
-          tag: z26.nativeEnum(Vulnerability_Report_Issue_Tag_Enum)
+      vulnerabilityReportIssueTags: z25.array(
+        z25.object({
+          tag: z25.nativeEnum(Vulnerability_Report_Issue_Tag_Enum)
         })
       )
     })
   )
 });
-var GetVulByNodesMetadataZ = z26.object({
-  vulnerabilityReportIssueCodeNodes: z26.array(VulnerabilityReportIssueCodeNodeZ),
-  nonFixablePrVuls: z26.object({
-    aggregate: z26.object({
-      count: z26.number()
+var GetVulByNodesMetadataZ = z25.object({
+  vulnerabilityReportIssueCodeNodes: z25.array(VulnerabilityReportIssueCodeNodeZ),
+  nonFixablePrVuls: z25.object({
+    aggregate: z25.object({
+      count: z25.number()
     })
   }),
-  fixablePrVuls: z26.object({
-    aggregate: z26.object({
-      count: z26.number()
+  fixablePrVuls: z25.object({
+    aggregate: z25.object({
+      count: z25.number()
     })
   }),
-  totalScanVulnerabilities: z26.object({
-    aggregate: z26.object({
-      count: z26.number()
+  totalScanVulnerabilities: z25.object({
+    aggregate: z25.object({
+      count: z25.number()
     })
   }),
-  irrelevantVulnerabilityReportIssue: z26.array(
+  irrelevantVulnerabilityReportIssue: z25.array(
     VulnerabilityReportIssueNoFixCodeNodeZ
   )
 });
@@ -7261,6 +6590,22 @@ var GQLClient = class {
     });
     this._clientSdk = getSdk(this._client);
   }
+  // Fetch the analyzer-owned issue-type catalog once and hydrate the shared
+  // in-memory cache so the synchronous display helpers serve analyzer labels
+  // and descriptions. NO FALLBACK: a fetch error or an empty response throws so
+  // the CLI fails loudly instead of silently rendering degraded labels.
+  async loadIssueTypeCatalog() {
+    if (isIssueTypeCatalogHydrated()) {
+      return;
+    }
+    const { issueTypes } = await this._clientSdk.IssueTypes();
+    if (issueTypes.length === 0) {
+      throw new Error(
+        "Issue-type catalog is empty: the issueTypes query returned no entries"
+      );
+    }
+    hydrateIssueTypeCatalog(issueTypes);
+  }
   async getUserInfo() {
     const { me } = await this._clientSdk.Me();
     return me;
@@ -8478,8 +7823,8 @@ var defaultLogger2 = {
     }
   }
 };
-var PromptItemZ = z27.object({
-  type: z27.enum([
+var PromptItemZ = z26.object({
+  type: z26.enum([
     "USER_PROMPT",
     "AI_RESPONSE",
     "TOOL_EXECUTION",
@@ -8487,32 +7832,32 @@ var PromptItemZ = z27.object({
     "MCP_TOOL_CALL"
     // MCP (Model Context Protocol) tool invocation
   ]),
-  attachedFiles: z27.array(
-    z27.object({
-      relativePath: z27.string(),
-      startLine: z27.number().optional()
+  attachedFiles: z26.array(
+    z26.object({
+      relativePath: z26.string(),
+      startLine: z26.number().optional()
     })
   ).optional(),
-  tokens: z27.object({
-    inputCount: z27.number(),
-    outputCount: z27.number()
+  tokens: z26.object({
+    inputCount: z26.number(),
+    outputCount: z26.number()
   }).optional(),
-  text: z27.string().optional(),
-  date: z27.date().optional(),
-  tool: z27.object({
-    name: z27.string(),
-    parameters: z27.string(),
-    result: z27.string(),
-    rawArguments: z27.string().optional(),
-    accepted: z27.boolean().optional(),
+  text: z26.string().optional(),
+  date: z26.date().optional(),
+  tool: z26.object({
+    name: z26.string(),
+    parameters: z26.string(),
+    result: z26.string(),
+    rawArguments: z26.string().optional(),
+    accepted: z26.boolean().optional(),
     // MCP-specific fields (only populated for MCP_TOOL_CALL type)
-    mcpServer: z27.string().optional(),
+    mcpServer: z26.string().optional(),
     // MCP server name (e.g., "datadog", "mobb-mcp")
-    mcpToolName: z27.string().optional()
+    mcpToolName: z26.string().optional()
     // MCP tool name without prefix (e.g., "scan_and_fix_vulnerabilities")
   }).optional()
 });
-var PromptItemArrayZ = z27.array(PromptItemZ);
+var PromptItemArrayZ = z26.array(PromptItemZ);
 var NULL_REPO_STATE = {
   repositoryUrl: null,
   branch: null,