mobbdev 1.4.41 → 1.4.43

package/dist/index.mjs

@@ -1350,7 +1350,7 @@ var init_getIssueType = __esm({
       ["Unfixable" /* Unfixable */]: "Unfixable",
       ["Unsupported" /* Unsupported */]: "Unsupported"
     };
-    statusZ = z.nativeEnum(Vulnerability_Report_Issue_State_Enum);
+    statusZ = z.enum(Vulnerability_Report_Issue_State_Enum);
     issueDescription = {
       ["AUTOGENERATED_CODE" /* AutogeneratedCode */]: "The flagged code is generated automatically by tools or frameworks as part of the build or runtime process. This categorization highlights that **the issue resides in non-manual code**, which often requires tool-specific solutions or exemptions.",
       ["AUXILIARY_CODE" /* AuxiliaryCode */]: "The flagged code is auxiliary or supporting code, such as configuration files, build scripts, or other non-application logic. This categorization indicates that the issue is not directly related to the application's core functionality.",
@@ -1371,7 +1371,7 @@ var init_shared = __esm({
   "src/features/analysis/scm/shared/src/types/shared.ts"() {
     "use strict";
     init_client_generates();
-    ParsedSeverityZ = z2.nativeEnum(Vulnerability_Severity_Enum).nullish().transform((i) => i ?? "low" /* Low */);
+    ParsedSeverityZ = z2.enum(Vulnerability_Severity_Enum).nullish().transform((i) => i ?? "low" /* Low */);
     ScmSubmitFixRequestsZ = z2.array(
       z2.object({
         scmSubmitFixRequest: z2.object({
@@ -1382,7 +1382,7 @@ var init_shared = __esm({
             targetBranchName: z2.string().default("")
           }),
           prUrl: z2.string().nullable(),
-          prStatus: z2.nativeEnum(Pr_Status_Enum).nullable(),
+          prStatus: z2.enum(Pr_Status_Enum).nullable(),
           commitUrl: z2.string().nullable(),
           scmId: z2.string()
         })
@@ -1405,8 +1405,8 @@ var init_fix = __esm({
       envName: z3.string().nullable()
     });
     ManifestActionRequiredZ = z3.object({
-      action: z3.nativeEnum(ManifestAction),
-      language: z3.nativeEnum(Language),
+      action: z3.enum(ManifestAction),
+      language: z3.enum(Language),
       lib: PackageInfoZ,
       typesLib: PackageInfoZ.nullable()
     });
@@ -1442,7 +1442,7 @@ var init_fix = __esm({
           index: z3.number(),
           defaultValue: z3.string(),
           value: z3.string().nullable(),
-          inputType: z3.nativeEnum(FixQuestionInputType),
+          inputType: z3.enum(FixQuestionInputType),
           options: z3.array(z3.string()),
           // E-2015: analyzer-served question text. default('') so a query that
           // omits these still parses (-> ''), while the output type stays a required
@@ -1457,7 +1457,7 @@ var init_fix = __esm({
     });
     FixRatingZ = z3.object({
       voteScore: z3.number(),
-      fixRatingTag: z3.nativeEnum(Fix_Rating_Tag_Enum).nullable().default(null),
+      fixRatingTag: z3.enum(Fix_Rating_Tag_Enum).nullable().default(null),
       comment: z3.string().nullable().default(null),
       updatedDate: z3.string().nullable(),
       user: z3.object({
@@ -1487,7 +1487,7 @@ var init_fix = __esm({
       issueRatings: z3.array(IssueRatingZ).default([])
     }).nullable();
     FixSharedStateZ = z3.object({
-      state: z3.nativeEnum(Fix_State_Enum),
+      state: z3.enum(Fix_State_Enum),
       isArchived: z3.boolean(),
       scmSubmitFixRequests: ScmSubmitFixRequestsZ,
       fixRatings: z3.array(FixRatingZ).default([])
@@ -1501,14 +1501,14 @@ var init_fix = __esm({
     );
     FixQueryZ = z3.object({
       __typename: z3.literal("fix").optional(),
-      id: z3.string().uuid(),
+      id: z3.guid(),
       sharedState: FixSharedStateZ,
       modifiedBy: z3.string().nullable(),
       gitBlameLogin: z3.string().nullable(),
       safeIssueLanguage: z3.string(),
       safeIssueType: z3.string(),
       confidence: z3.number(),
-      fixReportId: z3.string().uuid(),
+      fixReportId: z3.guid(),
       isExpired: z3.boolean().default(false),
       fixFiles: z3.array(
         z3.object({
@@ -1516,23 +1516,23 @@ var init_fix = __esm({
         })
       ),
       numberOfVulnerabilityIssues: z3.number(),
-      severityText: z3.nativeEnum(Vulnerability_Severity_Enum),
+      severityText: z3.enum(Vulnerability_Severity_Enum),
       vulnerabilityReportIssues: z3.array(
         z3.object({
           vendorIssueId: z3.string(),
           issueLanguage: z3.string(),
           parsedSeverity: ParsedSeverityZ,
           sharedState: z3.object({
-            id: z3.string().uuid(),
+            id: z3.guid(),
             isArchived: z3.boolean(),
-            ticketIntegrationId: z3.string().uuid().nullable()
+            ticketIntegrationId: z3.guid().nullable()
           }).nullable()
         })
       ),
       patchAndQuestions: PatchAndQuestionsZ,
-      effortToApplyFix: z3.nativeEnum(Effort_To_Apply_Fix_Enum).nullable()
+      effortToApplyFix: z3.enum(Effort_To_Apply_Fix_Enum).nullable()
     });
-    FixPartsForFixScreenZ = FixQueryZ.merge(
+    FixPartsForFixScreenZ = FixQueryZ.extend(
       z3.object({
         vulnerabilityReportIssues: z3.array(
           z3.object({
@@ -1542,7 +1542,7 @@ var init_fix = __esm({
             sharedState: IssueSharedStateZ
           })
         )
-      })
+      }).shape
     );
   }
 });
@@ -1556,10 +1556,10 @@ var init_analysis = __esm({
     init_client_generates();
     init_client_generates();
     FixPageFixReportZ = z4.object({
-      id: z4.string().uuid(),
+      id: z4.guid(),
       analysisUrl: z4.string(),
       createdOn: z4.string(),
-      state: z4.nativeEnum(Fix_Report_State_Enum),
+      state: z4.enum(Fix_Report_State_Enum),
       repo: z4.object({
         name: z4.string().nullable(),
         originalUrl: z4.string(),
@@ -1576,12 +1576,12 @@ var init_analysis = __esm({
         }
       ),
       vulnerabilityReport: z4.object({
-        id: z4.string().uuid(),
-        vendor: z4.nativeEnum(Vulnerability_Report_Vendor_Enum),
-        computedVendor: z4.nativeEnum(Vulnerability_Report_Vendor_Enum),
-        projectId: z4.string().uuid(),
+        id: z4.guid(),
+        vendor: z4.enum(Vulnerability_Report_Vendor_Enum),
+        computedVendor: z4.enum(Vulnerability_Report_Vendor_Enum),
+        projectId: z4.guid(),
         project: z4.object({
-          organizationId: z4.string().uuid()
+          organizationId: z4.guid()
         })
       })
     });
@@ -1609,10 +1609,10 @@ var init_issue = __esm({
       })
     });
     VulnerabilityReportIssueSharedStateZ = z5.object({
-      id: z5.string().uuid(),
+      id: z5.guid(),
       createdAt: z5.string(),
       isArchived: z5.boolean(),
-      ticketIntegrationId: z5.string().uuid().nullable(),
+      ticketIntegrationId: z5.guid().nullable(),
       ticketIntegrations: z5.array(
         z5.object({
           url: z5.string()
@@ -1621,12 +1621,12 @@ var init_issue = __esm({
       issueRatings: z5.array(VulnerabilityReportIssueRatingZ).default([])
     }).nullish();
     BaseIssuePartsZ = z5.object({
-      id: z5.string().uuid(),
+      id: z5.guid(),
       safeIssueType: z5.string(),
       safeIssueLanguage: z5.string(),
       createdAt: z5.string(),
       parsedSeverity: ParsedSeverityZ,
-      category: z5.nativeEnum(Vulnerability_Report_Issue_Category_Enum),
+      category: z5.enum(Vulnerability_Report_Issue_Category_Enum),
       extraData: z5.object({
         missing_files: z5.string().array().nullish(),
         error_files: z5.string().array().nullish(),
@@ -1634,7 +1634,7 @@ var init_issue = __esm({
       }),
       vulnerabilityReportIssueTags: z5.array(
         z5.object({
-          tag: z5.nativeEnum(Vulnerability_Report_Issue_Tag_Enum)
+          tag: z5.enum(Vulnerability_Report_Issue_Tag_Enum)
         })
       ),
       codeNodes: z5.array(
@@ -1674,7 +1674,7 @@ var init_issue = __esm({
         })
       }).nullish(),
       sharedState: VulnerabilityReportIssueSharedStateZ,
-      unfixableId: z5.string().uuid().nullish()
+      unfixableId: z5.guid().nullish()
     });
     FalsePositivePartsZ = z5.object({
       extraContext: z5.array(z5.object({ key: z5.string(), value: z5.string() })),
@@ -1684,20 +1684,20 @@ var init_issue = __esm({
       extraContext: z5.array(z5.object({ key: z5.string(), value: z5.string() })),
       fixDescription: z5.string()
     });
-    IssuePartsWithFixZ = BaseIssuePartsZ.merge(
+    IssuePartsWithFixZ = BaseIssuePartsZ.extend(
       z5.object({
         category: z5.literal("Irrelevant" /* Irrelevant */),
         fix: FixPartsForFixScreenZ.nullish()
-      })
+      }).shape
     );
-    IssuePartsFpZ = BaseIssuePartsZ.merge(
+    IssuePartsFpZ = BaseIssuePartsZ.extend(
       z5.object({
         category: z5.literal("FalsePositive" /* FalsePositive */),
-        fpId: z5.string().uuid(),
+        fpId: z5.guid(),
         getFalsePositive: FalsePositivePartsZ
-      })
+      }).shape
     );
-    GeneralIssueZ = BaseIssuePartsZ.merge(
+    GeneralIssueZ = BaseIssuePartsZ.extend(
       z5.object({
         category: z5.union([
           z5.literal("NoFix" /* NoFix */),
@@ -1707,7 +1707,7 @@ var init_issue = __esm({
           z5.literal("Pending" /* Pending */)
         ]),
         getUnfixable: UnfixablePartsZ.nullish()
-      })
+      }).shape
     );
     IssuePartsZ = z5.union([
       IssuePartsFpZ,
@@ -1718,10 +1718,10 @@ var init_issue = __esm({
       currentIndex: z5.number(),
       totalIssues: z5.number(),
       nextIssue: z5.object({
-        id: z5.string().uuid()
+        id: z5.guid()
       }).nullish(),
       prevIssue: z5.object({
-        id: z5.string().uuid()
+        id: z5.guid()
       }).nullish()
     });
     GetIssueScreenDataZ = z5.object({
@@ -1805,29 +1805,29 @@ var init_types = __esm({
     init_issue();
     init_shared();
     OrganizationScreenQueryParamsZ = z7.object({
-      organizationId: z7.string().uuid()
+      organizationId: z7.guid()
     });
     ProjectPageQueryParamsZ = z7.object({
-      organizationId: z7.string().uuid(),
-      projectId: z7.string().uuid()
+      organizationId: z7.guid(),
+      projectId: z7.guid()
     });
     AnalysisPageQueryParamsZ = ProjectPageQueryParamsZ.extend({
-      reportId: z7.string().uuid()
+      reportId: z7.guid()
     });
     FixPageQueryParamsZ = AnalysisPageQueryParamsZ.extend({
-      fixId: z7.string().uuid()
+      fixId: z7.guid()
     });
     IssuePageQueryParamsZ = AnalysisPageQueryParamsZ.extend({
-      issueId: z7.string().uuid()
+      issueId: z7.guid()
     });
     CliLoginPageQueryParamsZ = z7.object({
-      loginId: z7.string().uuid()
+      loginId: z7.guid()
     });
     AnalysisReportDigestedZ = z7.object({
-      id: z7.string().uuid(),
-      state: z7.nativeEnum(Fix_Report_State_Enum),
+      id: z7.guid(),
+      state: z7.enum(Fix_Report_State_Enum),
       vulnerabilityReport: z7.object({
-        reportSummaryUrl: z7.string().url().nullish(),
+        reportSummaryUrl: z7.url().nullish(),
         scanDate: z7.string().nullable(),
         supported: z7.object({
           aggregate: z7.object({
@@ -1839,17 +1839,17 @@ var init_types = __esm({
             count: z7.number()
           })
         }),
-        vendor: z7.nativeEnum(Vulnerability_Report_Vendor_Enum),
+        vendor: z7.enum(Vulnerability_Report_Vendor_Enum),
         project: z7.object({
-          organizationId: z7.string().uuid()
+          organizationId: z7.guid()
         })
       })
     });
     IssueSharedStateZ2 = z7.object({
-      id: z7.string().uuid(),
+      id: z7.guid(),
       createdAt: z7.string(),
       isArchived: z7.boolean(),
-      ticketIntegrationId: z7.string().uuid().nullable(),
+      ticketIntegrationId: z7.guid().nullable(),
       ticketIntegrations: z7.array(
         z7.object({
           url: z7.string()
@@ -1858,7 +1858,7 @@ var init_types = __esm({
     }).nullable();
     ReportQueryResultZ = z7.object({
       fixReport_by_pk: z7.object({
-        id: z7.string().uuid(),
+        id: z7.guid(),
         analysisUrl: z7.string(),
         fixesCommitted: z7.object({
           aggregate: z7.object({ count: z7.number() })
@@ -1877,19 +1877,19 @@ var init_types = __esm({
         vulnerabilitySeverities: z7.record(z7.string(), z7.number()).nullable(),
         createdOn: z7.string(),
         expirationOn: z7.string().nullable(),
-        state: z7.nativeEnum(Fix_Report_State_Enum),
+        state: z7.enum(Fix_Report_State_Enum),
         failReason: z7.string().nullable(),
         candidateToRerun: z7.boolean(),
         fixes: z7.array(
           z7.object({
-            id: z7.string().uuid(),
+            id: z7.guid(),
             safeIssueLanguage: z7.string(),
             safeIssueType: z7.string(),
             confidence: z7.number(),
-            effortToApplyFix: z7.nativeEnum(Effort_To_Apply_Fix_Enum).nullable(),
+            effortToApplyFix: z7.enum(Effort_To_Apply_Fix_Enum).nullable(),
             modifiedBy: z7.string().nullable(),
             gitBlameLogin: z7.string().nullable(),
-            fixReportId: z7.string().uuid(),
+            fixReportId: z7.guid(),
             filePaths: z7.array(
               z7.object({
                 fileRepoRelativePath: z7.string()
@@ -1897,13 +1897,13 @@ var init_types = __esm({
             ),
             sharedState: FixSharedStateZ,
             numberOfVulnerabilityIssues: z7.number(),
-            severityText: z7.nativeEnum(Vulnerability_Severity_Enum),
+            severityText: z7.enum(Vulnerability_Severity_Enum),
             vulnerabilityReportIssues: z7.array(
               z7.object({
-                id: z7.string().uuid(),
+                id: z7.guid(),
                 issueType: z7.string(),
                 issueLanguage: z7.string(),
-                category: z7.nativeEnum(Vulnerability_Report_Issue_Category_Enum),
+                category: z7.enum(Vulnerability_Report_Issue_Category_Enum),
                 sharedState: IssueSharedStateZ2
               })
             )
@@ -1930,19 +1930,19 @@ var init_types = __esm({
           })
         }),
         vulnerabilityReport: z7.object({
-          id: z7.string().uuid(),
-          reportSummaryUrl: z7.string().url().nullish(),
-          computedVendor: z7.nativeEnum(Vulnerability_Report_Vendor_Enum).nullable(),
-          vendor: z7.nativeEnum(Vulnerability_Report_Vendor_Enum).nullable(),
+          id: z7.guid(),
+          reportSummaryUrl: z7.url().nullish(),
+          computedVendor: z7.enum(Vulnerability_Report_Vendor_Enum).nullable(),
+          vendor: z7.enum(Vulnerability_Report_Vendor_Enum).nullable(),
           issuesWithKnownLanguage: z7.number().nullable(),
           scanDate: z7.string().nullable(),
-          vendorReportId: z7.string().uuid().nullable(),
-          projectId: z7.string().uuid(),
+          vendorReportId: z7.guid().nullable(),
+          projectId: z7.guid(),
           project: z7.object({
-            organizationId: z7.string().uuid()
+            organizationId: z7.guid()
           }),
           file: z7.object({
-            id: z7.string().uuid(),
+            id: z7.guid(),
             path: z7.string()
           }).nullable(),
           pending: z7.object({
@@ -1986,7 +1986,7 @@ var init_types = __esm({
             })
           }),
           vulnerabilityReportIssues: z7.object({
-            id: z7.string().uuid(),
+            id: z7.guid(),
             extraData: z7.object({
               missing_files: z7.string().array().nullish(),
               large_files: z7.string().array().nullish(),
@@ -1998,21 +1998,21 @@ var init_types = __esm({
       })
     });
     ReportFixesQueryFixZ = z7.object({
-      id: z7.string().uuid(),
+      id: z7.guid(),
       sharedState: FixSharedStateZ,
       confidence: z7.number(),
       gitBlameLogin: z7.string().nullable(),
-      effortToApplyFix: z7.nativeEnum(Effort_To_Apply_Fix_Enum).nullable(),
+      effortToApplyFix: z7.enum(Effort_To_Apply_Fix_Enum).nullable(),
       safeIssueLanguage: z7.string(),
       safeIssueType: z7.string(),
-      fixReportId: z7.string().uuid(),
+      fixReportId: z7.guid(),
       filePaths: z7.array(
         z7.object({
           fileRepoRelativePath: z7.string()
         })
       ),
       numberOfVulnerabilityIssues: z7.number(),
-      severityText: z7.nativeEnum(Vulnerability_Severity_Enum),
+      severityText: z7.enum(Vulnerability_Severity_Enum),
       vulnerabilityReportIssues: z7.array(
         z7.object({
           issueType: z7.string(),
@@ -2022,9 +2022,9 @@ var init_types = __esm({
       ).min(1)
     });
     BaseVulnerabilityReportIssueZ = z7.object({
-      id: z7.string().uuid(),
+      id: z7.guid(),
       createdAt: z7.string(),
-      state: z7.nativeEnum(Vulnerability_Report_Issue_State_Enum),
+      state: z7.enum(Vulnerability_Report_Issue_State_Enum),
       safeIssueType: z7.string(),
       safeIssueLanguage: z7.string(),
       extraData: z7.object({
@@ -2035,7 +2035,7 @@ var init_types = __esm({
       }),
       fix: ReportFixesQueryFixZ.nullable(),
       falsePositive: z7.object({
-        id: z7.string().uuid()
+        id: z7.guid()
       }).nullable(),
       parsedSeverity: ParsedSeverityZ,
       severity: z7.string(),
@@ -2048,20 +2048,20 @@ var init_types = __esm({
       ),
       sharedState: VulnerabilityReportIssueSharedStateZ
     });
-    VulnerabilityReportIssueZ = BaseVulnerabilityReportIssueZ.merge(
+    VulnerabilityReportIssueZ = BaseVulnerabilityReportIssueZ.extend(
       z7.object({
         codeNodes: z7.array(z7.object({ path: z7.string() }))
-      })
+      }).shape
     );
-    VulnerabilityReportIssueWithCodeFilePathZ = BaseVulnerabilityReportIssueZ.merge(
+    VulnerabilityReportIssueWithCodeFilePathZ = BaseVulnerabilityReportIssueZ.extend(
       z7.object({
         codeFilePath: z7.string().nullable()
-      })
+      }).shape
     );
     GetReportIssuesQueryZ = z7.object({
       fixReport: z7.object({
         vulnerabilityReport: z7.object({
-          id: z7.string().uuid(),
+          id: z7.guid(),
           lastIssueUpdatedAt: z7.string(),
           vulnerabilityReportIssues_aggregate: z7.object({
             aggregate: z7.object({ count: z7.number() })
@@ -2076,7 +2076,7 @@ var init_types = __esm({
       project_by_pk: z7.object({
         vulnerabilityReports: z7.array(
           z7.object({
-            fixReport: z7.object({ id: z7.string().uuid() }).nullable()
+            fixReport: z7.object({ id: z7.guid() }).nullable()
           })
         )
       })
@@ -2086,8 +2086,8 @@ var init_types = __esm({
       fix_by_pk: FixPartsForFixScreenZ,
       fixesWithSameIssueType: z7.array(
         z7.object({
-          id: z7.string().uuid(),
-          sharedState: z7.object({ state: z7.nativeEnum(Fix_State_Enum) }).nullable().default({ state: "Ready" /* Ready */ })
+          id: z7.guid(),
+          sharedState: z7.object({ state: z7.enum(Fix_State_Enum) }).nullable().default({ state: "Ready" /* Ready */ })
         })
       ),
       relevantIssue: IssuePartsZ.nullish()
@@ -2124,8 +2124,8 @@ var init_types = __esm({
     }).nullish();
     GetFixReportStatsQueryZ = z7.object({
       fixReport_by_pk: z7.object({
-        id: z7.string().uuid(),
-        vulnerabilitySeverities: z7.record(z7.nativeEnum(Vulnerability_Severity_Enum), z7.number()).nullable(),
+        id: z7.guid(),
+        vulnerabilitySeverities: z7.partialRecord(z7.enum(Vulnerability_Severity_Enum), z7.number()).nullable(),
         vulnerabilityReportIrrelevantIssuesCount: z7.object({
           vulnerabilityReportIssues_aggregate: z7.object({
             aggregate: z7.object({ count: z7.number() })
@@ -2134,15 +2134,16 @@ var init_types = __esm({
       }).nullable()
     });
     ProjectVulnerabilityReport = z7.object({
-      id: z7.string().uuid(),
+      id: z7.guid(),
       name: z7.string().nullable(),
-      vendor: z7.nativeEnum(Vulnerability_Report_Vendor_Enum).nullable(),
-      computedVendor: z7.nativeEnum(Vulnerability_Report_Vendor_Enum).nullable(),
+      vendor: z7.enum(Vulnerability_Report_Vendor_Enum).nullable(),
+      computedVendor: z7.enum(Vulnerability_Report_Vendor_Enum).nullable(),
       fixReport: z7.object({
-        id: z7.string().uuid(),
+        id: z7.guid(),
         createdOn: z7.string(),
         issueTypes: z7.record(z7.string(), z7.number()).nullable(),
-        issueLanguages: z7.record(z7.nativeEnum(IssueLanguage_Enum), z7.number()).nullable(),
+        // reports only contain the languages actually found in the repo
+        issueLanguages: z7.partialRecord(z7.enum(IssueLanguage_Enum), z7.number()).nullable(),
         repo: z7.object({
           originalUrl: z7.string(),
           reference: z7.string(),
@@ -2157,7 +2158,7 @@ var init_types = __esm({
         createdByUser: z7.object({
           email: z7.string()
         }).nullable(),
-        state: z7.nativeEnum(Fix_Report_State_Enum),
+        state: z7.enum(Fix_Report_State_Enum),
         expirationOn: z7.string()
       })
     });
@@ -2166,7 +2167,7 @@ var init_types = __esm({
         id: z7.string(),
         projects: z7.array(
           z7.object({
-            id: z7.string().uuid(),
+            id: z7.guid(),
             name: z7.string(),
             numberOfUniqueRepos: z7.number()
           })
@@ -2175,16 +2176,16 @@ var init_types = __esm({
     });
     ProjectPageQueryResultZ = z7.object({
       name: z7.string(),
-      id: z7.string().uuid(),
+      id: z7.guid(),
       isDefault: z7.boolean().default(false),
-      organizationId: z7.string().uuid(),
+      organizationId: z7.guid(),
       vulnerabilityReports: z7.array(ProjectVulnerabilityReport),
       autoPrIncludeAiFixes: z7.preprocess(
         (val) => val === null || val === void 0 ? false : val,
         z7.boolean()
       ),
       projectIssueTypeSettings: z7.array(
-        IssueTypeSettingZ.merge(z7.object({ id: z7.string() }))
+        IssueTypeSettingZ.extend(z7.object({ id: z7.string() }).shape)
       )
     });
     GetProjectMembersDataZ = z7.object({
@@ -2195,21 +2196,21 @@ var init_types = __esm({
           z7.object({
             projectToRole: z7.object({
               projectRole: z7.object({
-                type: z7.nativeEnum(Project_Role_Type_Enum)
+                type: z7.enum(Project_Role_Type_Enum)
               })
             }),
             user: z7.object({
-              id: z7.string().uuid(),
+              id: z7.guid(),
               picture: z7.string().nullable().optional(),
               name: z7.string().nullish(),
-              email: z7.string().email()
+              email: z7.email()
             })
           })
         )
       })
     });
     RepoArgsZ = z7.object({
-      originalUrl: z7.string().url(),
+      originalUrl: z7.url(),
       branch: z7.string(),
       commitSha: z7.string()
     });
@@ -2914,8 +2915,8 @@ var init_gitBlameTypes = __esm({
       userEmail: z14.string().optional()
     });
     VulnerabilityAttributionMessageZ = z14.object({
-      fixReportId: z14.string().uuid(),
-      vulnerabilityAttributionRequestId: z14.string().uuid(),
+      fixReportId: z14.guid(),
+      vulnerabilityAttributionRequestId: z14.guid(),
       userEmail: z14.string()
     });
   }
@@ -4256,6 +4257,12 @@ var contextLogger = {
   }
 };
 
+// src/features/analysis/scm/constants.ts
+var MOBB_ICON_IMG = "https://app.mobb.ai/gh-action/Logo_Rounded_Icon.svg";
+var MAX_BRANCHES_FETCH = 1e3;
+var MAX_ACTIVE_BRANCHES_SCAN = 250;
+var REPORT_DEFAULT_FILE_NAME = "report.json";
+
 // src/features/analysis/scm/errors.ts
 var InvalidAccessTokenError = class extends Error {
   constructor(m, scmType) {
@@ -4541,7 +4548,7 @@ var scmTypeToScmLibScmType = {
 var GetReferenceResultZ = z9.object({
   date: z9.date().optional(),
   sha: z9.string(),
-  type: z9.nativeEnum(ReferenceType)
+  type: z9.enum(ReferenceType)
 });
 
 // src/features/analysis/scm/utils/scm.ts
@@ -4688,7 +4695,7 @@ function shouldValidateUrl(repoUrl) {
   return repoUrl && isUrlHasPath(repoUrl);
 }
 function isBrokerUrl(url) {
-  return z10.string().uuid().safeParse(new URL(url).host).success;
+  return z10.guid().safeParse(new URL(url).host).success;
 }
 function buildAuthorizedRepoUrl(args) {
   const { url, username, password } = args;
@@ -4724,7 +4731,7 @@ function getCloudScmLibTypeFromUrl(url) {
   return void 0;
 }
 function getScmLibTypeFromScmType(scmType) {
-  const parsedScmType = z10.nativeEnum(ScmType).parse(scmType);
+  const parsedScmType = z10.enum(ScmType).parse(scmType);
   return scmTypeToScmLibScmType[parsedScmType];
 }
 function getScmConfig({
@@ -5378,19 +5385,7 @@ async function getAdoSdk(params) {
       const defaultBranch = repository.defaultBranch?.replace("refs/heads/", "");
       const byEmail = /* @__PURE__ */ new Map();
       const PAGE = 100;
-      let skip = 0;
-      while (true) {
-        const page = await git.getCommits(
-          repo,
-          {
-            fromDate: since,
-            itemVersion: defaultBranch ? { version: defaultBranch } : void 0,
-            $top: PAGE,
-            $skip: skip
-          },
-          projectName
-        );
-        if (!page || page.length === 0) break;
+      const accumulate = (page) => {
         for (const c of page) {
           const email = c.author?.email;
           if (!email) continue;
@@ -5407,8 +5402,51 @@ async function getAdoSdk(params) {
             });
           }
         }
-        if (page.length < PAGE) break;
-        skip += PAGE;
+      };
+      const walk = async (branch) => {
+        let skip = 0;
+        let hasMore = true;
+        while (hasMore) {
+          const page = await git.getCommits(
+            repo,
+            {
+              fromDate: since,
+              itemVersion: branch ? { version: branch } : void 0,
+              $top: PAGE,
+              $skip: skip
+            },
+            projectName
+          );
+          const count = page?.length ?? 0;
+          if (count > 0) {
+            accumulate(page);
+          }
+          hasMore = count === PAGE;
+          skip += PAGE;
+        }
+      };
+      await walk(defaultBranch);
+      try {
+        const sinceMs = new Date(since).getTime();
+        const branches = await git.getBranches(repo, projectName);
+        const active = (branches ?? []).filter(
+          (b) => !!b.name && b.name !== defaultBranch && !!b.commit?.committer?.date && b.commit.committer.date.getTime() >= sinceMs
+        ).sort(
+          (a, b) => (b.commit?.committer?.date?.getTime() ?? 0) - (a.commit?.committer?.date?.getTime() ?? 0)
+        ).map((b) => b.name);
+        if (active.length > MAX_ACTIVE_BRANCHES_SCAN) {
+          console.warn(
+            `[ADO] active-branch scan hit cap (${MAX_ACTIVE_BRANCHES_SCAN}) for ${repoUrl}; some branches skipped`
+          );
+        }
+        for (const branch of active.slice(0, MAX_ACTIVE_BRANCHES_SCAN)) {
+          await walk(branch);
+        }
+      } catch (err) {
+        console.warn(
+          `[ADO] all-branch author scan failed for ${repoUrl}; using default-branch count`,
+          err instanceof Error ? err.message : String(err)
+        );
       }
       return [...byEmail.values()];
     },
@@ -6443,7 +6481,7 @@ function getBitbucketSdk(params) {
     async getDownloadUrl({ url, sha }) {
       this.getReferenceData({ ref: sha, url });
       const repoRes = await this.getRepo({ repoUrl: url });
-      const parsedRepoUrl = z16.string().url().parse(repoRes.links?.html?.href);
+      const parsedRepoUrl = z16.url().parse(repoRes.links?.html?.href);
       return `${parsedRepoUrl}/get/${sha}.zip`;
     },
     async getPullRequest(params2) {
@@ -6553,49 +6591,93 @@ function getBitbucketSdk(params) {
     async streamRecentCommitAuthors(params2) {
       const sinceMs = new Date(params2.since).getTime();
       const byKey = /* @__PURE__ */ new Map();
-      let page = 1;
       const HARD_PAGE_CEILING = 1e4;
-      while (page <= HARD_PAGE_CEILING) {
-        const res = await bitbucketClient.repositories.listCommits({
-          repo_slug: params2.repo_slug,
-          workspace: params2.workspace,
-          page: String(page),
-          pagelen: 100
-        });
-        const data = res.data;
-        const commits = data?.values ?? [];
-        if (commits.length === 0) break;
-        let sawInWindow = false;
-        for (const commit of commits) {
-          const record = commit;
-          const dateStr = record["date"];
-          if (dateStr && new Date(dateStr).getTime() < sinceMs) {
-            continue;
+      const walkRef = async (include) => {
+        let page = 1;
+        while (page <= HARD_PAGE_CEILING) {
+          const res = await bitbucketClient.repositories.listCommits({
+            repo_slug: params2.repo_slug,
+            workspace: params2.workspace,
+            page: String(page),
+            pagelen: 100,
+            ...include ? { include } : {}
+          });
+          const data = res.data;
+          const commits = data?.values ?? [];
+          if (commits.length === 0) break;
+          let sawInWindow = false;
+          for (const commit of commits) {
+            const record = commit;
+            const dateStr = record["date"];
+            if (dateStr && new Date(dateStr).getTime() < sinceMs) {
+              continue;
+            }
+            sawInWindow = true;
+            const author = record["author"];
+            if (!author?.raw) continue;
+            const match = author.raw.match(/^(.+?)\s*<([^>]+)>/);
+            if (!match) continue;
+            const [, name, email] = match;
+            if (!email) continue;
+            const externalId = author.user?.account_id ?? null;
+            const date = dateStr ?? params2.since;
+            const key = externalId ?? email.toLowerCase();
+            const prev = byKey.get(key);
+            if (!prev || new Date(date).getTime() > new Date(prev.date).getTime()) {
+              byKey.set(key, {
+                email: email.toLowerCase(),
+                name: name.trim() || null,
+                date,
+                externalId,
+                isBot: false
+              });
+            }
           }
-          sawInWindow = true;
-          const author = record["author"];
-          if (!author?.raw) continue;
-          const match = author.raw.match(/^(.+?)\s*<([^>]+)>/);
-          if (!match) continue;
-          const [, name, email] = match;
-          if (!email) continue;
-          const externalId = author.user?.account_id ?? null;
-          const date = dateStr ?? params2.since;
-          const key = externalId ?? email.toLowerCase();
-          const prev = byKey.get(key);
-          if (!prev || new Date(date).getTime() > new Date(prev.date).getTime()) {
-            byKey.set(key, {
-              email: email.toLowerCase(),
-              name: name.trim() || null,
-              date,
-              externalId,
-              isBot: false
-            });
+          if (!sawInWindow) break;
+          if (!data?.next) break;
+          page++;
+        }
+      };
+      await walkRef(void 0);
+      try {
+        const branches = [];
+        let bpage = 1;
+        let bdone = false;
+        while (!bdone && branches.length < MAX_ACTIVE_BRANCHES_SCAN) {
+          const branchRes = await bitbucketClient.refs.listBranches({
+            repo_slug: params2.repo_slug,
+            workspace: params2.workspace,
+            pagelen: 100,
+            page: String(bpage),
+            sort: "-target.date"
+          });
+          const vals = branchRes.data.values ?? [];
+          if (vals.length === 0) break;
+          for (const b of vals) {
+            const d = b.target?.date;
+            if (!d || new Date(d).getTime() < sinceMs) {
+              bdone = true;
+              break;
+            }
+            if (b.name) branches.push(b.name);
+            if (branches.length >= MAX_ACTIVE_BRANCHES_SCAN) break;
           }
+          if (!branchRes.data.next) break;
+          bpage++;
         }
-        if (!sawInWindow) break;
-        if (!data?.next) break;
-        page++;
+        if (branches.length >= MAX_ACTIVE_BRANCHES_SCAN) {
+          console.warn(
+            `[Bitbucket] active-branch scan hit cap (${MAX_ACTIVE_BRANCHES_SCAN}) for ${params2.workspace}/${params2.repo_slug}; some branches skipped`
+          );
+        }
+        for (const branch of branches) {
+          await walkRef(branch);
+        }
+      } catch (err) {
+        console.warn(
+          `[Bitbucket] all-branch author scan failed for ${params2.workspace}/${params2.repo_slug}; using main-branch count`,
+          err instanceof Error ? err.message : String(err)
+        );
       }
       return [...byKey.values()];
     },
@@ -7088,11 +7170,6 @@ var BitbucketSCMLib = class extends SCMLib {
   }
 };
 
-// src/features/analysis/scm/constants.ts
-var MOBB_ICON_IMG = "https://app.mobb.ai/gh-action/Logo_Rounded_Icon.svg";
-var MAX_BRANCHES_FETCH = 1e3;
-var REPORT_DEFAULT_FILE_NAME = "report.json";
-
 // src/features/analysis/scm/index.ts
 init_env();
 
@@ -7404,6 +7481,25 @@ async function executeBatchGraphQL(octokit, owner, repo, config2) {
   });
   return result;
 }
+var RECENT_BRANCHES_QUERY = `
+  query ($owner: String!, $repo: String!, $cursor: String) {
+    repository(owner: $owner, name: $repo) {
+      defaultBranchRef { name }
+      refs(
+        refPrefix: "refs/heads/"
+        first: 100
+        after: $cursor
+        orderBy: { field: TAG_COMMIT_DATE, direction: DESC }
+      ) {
+        pageInfo { hasNextPage endCursor }
+        nodes {
+          name
+          target { ... on Commit { committedDate } }
+        }
+      }
+    }
+  }
+`;
 function getGithubSdk(params = {}) {
   const octokit = getOctoKit(params);
   async function openPrWithFiles(params2) {
@@ -7872,21 +7968,14 @@ function getGithubSdk(params = {}) {
     // commit volume, and the walk is uncapped so the 90-day count is exact even
     // for a repo with hundreds of thousands of commits.
     async streamRecentCommitAuthors(params2) {
+      const { owner, repo, since } = params2;
       const byAuthor = /* @__PURE__ */ new Map();
-      for await (const { data } of octokit.paginate.iterator(
-        octokit.rest.repos.listCommits,
-        {
-          owner: params2.owner,
-          repo: params2.repo,
-          since: params2.since,
-          per_page: 100
-        }
-      )) {
+      const accumulate = (data) => {
         for (const c of data) {
           const email = c.commit?.author?.email;
           if (!email) continue;
           const externalId = c.author?.id != null ? String(c.author.id) : null;
-          const date = c.commit?.committer?.date ?? c.commit?.author?.date ?? params2.since;
+          const date = c.commit?.committer?.date ?? c.commit?.author?.date ?? since;
           const key = externalId ?? email.toLowerCase();
           const prev = byAuthor.get(key);
           if (!prev || new Date(date).getTime() > new Date(prev.date).getTime()) {
@@ -7899,6 +7988,64 @@ function getGithubSdk(params = {}) {
             });
           }
         }
+      };
+      const walkBranch = async (branch) => {
+        for await (const { data } of octokit.paginate.iterator(
+          octokit.rest.repos.listCommits,
+          {
+            owner,
+            repo,
+            since,
+            per_page: 100,
+            ...branch ? { sha: branch } : {}
+          }
+        )) {
+          accumulate(data);
+        }
+      };
+      await walkBranch(void 0);
+      try {
+        const sinceMs = new Date(since).getTime();
+        const activeBranches = [];
+        let cursor = null;
+        let defaultBranch = null;
+        let done = false;
+        while (!done && activeBranches.length < MAX_ACTIVE_BRANCHES_SCAN) {
+          const resp = await octokit.graphql(
+            RECENT_BRANCHES_QUERY,
+            { owner, repo, cursor }
+          );
+          defaultBranch = defaultBranch ?? resp.repository?.defaultBranchRef?.name ?? null;
+          const refs = resp.repository?.refs;
+          if (!refs) break;
+          for (const node of refs.nodes) {
+            const committedDate = node.target?.committedDate;
+            if (committedDate && new Date(committedDate).getTime() < sinceMs) {
+              done = true;
+              break;
+            }
+            if (!committedDate) continue;
+            if (node.name !== defaultBranch) {
+              activeBranches.push(node.name);
+            }
+            if (activeBranches.length >= MAX_ACTIVE_BRANCHES_SCAN) break;
+          }
+          if (!refs.pageInfo.hasNextPage) break;
+          cursor = refs.pageInfo.endCursor;
+        }
+        if (activeBranches.length >= MAX_ACTIVE_BRANCHES_SCAN) {
+          console.warn(
+            `[GitHub] active-branch scan hit cap (${MAX_ACTIVE_BRANCHES_SCAN}) for ${owner}/${repo}; some branches skipped`
+          );
+        }
+        for (const branch of activeBranches) {
+          await walkBranch(branch);
+        }
+      } catch (err) {
+        console.warn(
+          `[GitHub] all-branch author scan failed for ${owner}/${repo}; using default-branch count`,
+          err instanceof Error ? err.message : String(err)
+        );
       }
       return [...byAuthor.values()];
     },
@@ -8127,19 +8274,6 @@ function getGithubSdk(params = {}) {
       cache?.set(getProfileParams.username, data);
       return data;
     },
-    async getLatestRepoCommitByAuthor(params2) {
-      try {
-        const { data } = await octokit.rest.repos.listCommits({
-          owner: params2.owner,
-          repo: params2.repo,
-          author: params2.author,
-          per_page: 1
-        });
-        return data[0] ?? null;
-      } catch {
-        return null;
-      }
-    },
     async getAuthenticatedUser() {
       try {
         const { data } = await octokit.rest.users.getAuthenticated();
@@ -8157,49 +8291,6 @@ function getGithubSdk(params = {}) {
       } catch {
         return [];
       }
-    },
-    async getEmailFromPublicEvents(params2) {
-      try {
-        const { data: events } = await octokit.rest.activity.listPublicEventsForUser({
-          username: params2.username,
-          per_page: 30
-        });
-        let fallback = null;
-        for (const event of events) {
-          if (event.type !== "PushEvent") continue;
-          const payload = event.payload;
-          if (!payload.commits) continue;
-          for (const commit of payload.commits) {
-            const email = commit.author?.email;
-            if (!email) continue;
-            if (!email.includes("noreply")) return email;
-            if (!fallback) fallback = email;
-          }
-        }
-        return fallback;
-      } catch {
-        return null;
-      }
-    },
-    async getEmailFromCommitSearch(params2) {
-      try {
-        const { data } = await octokit.rest.search.commits({
-          q: `author:${params2.username}`,
-          sort: "author-date",
-          order: "desc",
-          per_page: 5
-        });
-        let fallback = null;
-        for (const item of data.items) {
-          const email = item.commit?.author?.email;
-          if (!email) continue;
-          if (!email.includes("noreply")) return email;
-          if (!fallback) fallback = email;
-        }
-        return fallback;
-      } catch {
-        return null;
-      }
     }
   };
 }
@@ -8411,24 +8502,18 @@ var GithubSCMLib = class extends SCMLib {
     const enriched = await Promise.all(
       collaborators.map(
         (c) => enrichLimit(async () => {
-          let profileEmail = c.email ?? null;
+          let email = c.email ?? null;
           let displayName = c.login ?? null;
-          let emailSource = profileEmail ? "collaborator_api" : "none";
-          if (!profileEmail && authUser && authUserPrimaryEmail && c.id === authUser.id) {
-            profileEmail = authUserPrimaryEmail;
-            emailSource = "authenticated_user";
+          if (!email && authUser && authUserPrimaryEmail && c.id === authUser.id) {
+            email = authUserPrimaryEmail;
           }
-          const isRealEmail = (e) => e && !e.includes("noreply");
-          let noreplyFallback = null;
-          let noreplySource = "";
           if (c.login) {
             try {
               const profile = await this.githubSdk.getUserProfile({
                 username: c.login
               });
               if (profile.email) {
-                profileEmail = profile.email;
-                emailSource = "user_profile";
+                email = profile.email;
               }
               displayName = profile.name ?? displayName;
             } catch (err) {
@@ -8437,112 +8522,12 @@ var GithubSCMLib = class extends SCMLib {
                 error: err instanceof Error ? err.message : String(err)
               });
             }
-            if (!isRealEmail(profileEmail)) {
-              if (profileEmail && !noreplyFallback) {
-                noreplyFallback = profileEmail;
-                noreplySource = emailSource;
-              }
-              try {
-                const commit = await this.githubSdk.getLatestRepoCommitByAuthor(
-                  {
-                    owner,
-                    repo,
-                    author: c.login
-                  }
-                );
-                const commitAuthor = commit?.commit?.author;
-                const commitEmail = commitAuthor?.email;
-                if (commitAuthor?.name && displayName === c.login) {
-                  displayName = commitAuthor.name;
-                }
-                if (commitEmail) {
-                  if (isRealEmail(commitEmail)) {
-                    profileEmail = commitEmail;
-                    emailSource = "commit_author";
-                  } else if (!noreplyFallback) {
-                    noreplyFallback = commitEmail;
-                    noreplySource = "commit_noreply";
-                  }
-                }
-              } catch (err) {
-                contextLogger.warn(
-                  "[GitHub] getLatestRepoCommitByAuthor failed",
-                  {
-                    username: c.login,
-                    owner,
-                    repo,
-                    error: err instanceof Error ? err.message : String(err)
-                  }
-                );
-              }
-            }
-            if (!isRealEmail(profileEmail)) {
-              try {
-                const eventEmail = await this.githubSdk.getEmailFromPublicEvents({
-                  username: c.login
-                });
-                if (eventEmail) {
-                  if (isRealEmail(eventEmail)) {
-                    profileEmail = eventEmail;
-                    emailSource = "public_events";
-                  } else if (!noreplyFallback) {
-                    noreplyFallback = eventEmail;
-                    noreplySource = "events_noreply";
-                  }
-                }
-              } catch (err) {
-                contextLogger.warn("[GitHub] getEmailFromPublicEvents failed", {
-                  username: c.login,
-                  error: err instanceof Error ? err.message : String(err)
-                });
-              }
-            }
-            if (!isRealEmail(profileEmail)) {
-              try {
-                const searchEmail = await this.githubSdk.getEmailFromCommitSearch({
-                  username: c.login
-                });
-                if (searchEmail) {
-                  if (isRealEmail(searchEmail)) {
-                    profileEmail = searchEmail;
-                    emailSource = "commit_search";
-                  } else if (!noreplyFallback) {
-                    noreplyFallback = searchEmail;
-                    noreplySource = "search_noreply";
-                  }
-                }
-              } catch (err) {
-                contextLogger.warn("[GitHub] getEmailFromCommitSearch failed", {
-                  username: c.login,
-                  error: err instanceof Error ? err.message : String(err)
-                });
-              }
-            }
-            if (!isRealEmail(profileEmail) && noreplyFallback) {
-              profileEmail = noreplyFallback;
-              emailSource = noreplySource;
-            }
-          }
-          if (profileEmail) {
-            contextLogger.info("[GitHub] Resolved contributor email", {
-              username: c.login,
-              emailSource
-            });
-          } else {
-            contextLogger.debug("[GitHub] No email resolved for contributor", {
-              username: c.login
-            });
           }
-          contextLogger.info("[GitHub] Contributor resolved", {
-            username: c.login,
-            profileName: displayName,
-            displayNameIsNull: displayName === null
-          });
           return {
             externalId: String(c.id),
             username: c.login ?? null,
             displayName,
-            email: profileEmail,
+            email,
             accessLevel: c.role_name ?? null
           };
         })
@@ -9587,6 +9572,7 @@ async function getGitlabRecentCommitAuthors({
   while (hasMore) {
     const response = await api2.Commits.all(projectPath, {
       since,
+      all: true,
       perPage,
       page,
       showExpanded: true
@@ -9752,19 +9738,6 @@ async function listGitlabProjectMembers({
   }
   return projectMembers;
 }
-async function getGitlabUserPublicEmail({
-  repoUrl,
-  accessToken,
-  userId
-}) {
-  try {
-    const api2 = getGitBeaker({ url: repoUrl, gitlabAuthToken: accessToken });
-    const user = await api2.Users.show(userId);
-    return user["public_email"];
-  } catch {
-    return null;
-  }
-}
 async function listGitlabRepoContributors({
   repoUrl,
   accessToken
@@ -9796,7 +9769,6 @@ async function getGitlabAuthenticatedUser({
 }
 
 // src/features/analysis/scm/gitlab/GitlabSCMLib.ts
-import pLimit5 from "p-limit";
 init_client_generates();
 var GitlabSCMLib = class extends SCMLib {
   constructor(url, accessToken, scmOrg) {
@@ -10197,65 +10169,27 @@ var GitlabSCMLib = class extends SCMLib {
       memberCount: members.length,
       repoContributorCount: repoContributors.length
     });
-    const enrichLimit = pLimit5(5);
-    const enriched = await Promise.all(
-      members.map(
-        (m) => enrichLimit(async () => {
-          let email = null;
-          let emailSource = "none";
-          if (authUser?.email && authUser.id === m.id) {
-            email = authUser.email;
-            emailSource = "authenticated_user";
-          }
-          if (!email) {
-            try {
-              email = await getGitlabUserPublicEmail({
-                repoUrl: this.url,
-                accessToken: this.accessToken,
-                userId: m.id
-              });
-              if (email) emailSource = "public_email";
-            } catch (err) {
-              contextLogger.warn("[GitLab] getGitlabUserPublicEmail failed", {
-                username: m.username,
-                userId: m.id,
-                error: err instanceof Error ? err.message : String(err)
-              });
-            }
-          }
-          if (!email && m.username) {
-            const match = repoContributors.find(
-              (rc) => rc.name?.toLowerCase() === m.username?.toLowerCase() || rc.name?.toLowerCase() === m.name?.toLowerCase()
-            );
-            if (match?.email) {
-              email = match.email;
-              emailSource = match.email.includes("noreply") ? "commit_noreply" : "commit_author";
-            } else {
-              contextLogger.debug(
-                "[GitLab] No commit author match for member",
-                {
-                  username: m.username,
-                  displayName: m.name
-                }
-              );
-            }
-          }
-          if (email) {
-            contextLogger.info("[GitLab] Resolved contributor email", {
-              username: m.username,
-              emailSource
-            });
-          }
-          return {
-            externalId: String(m.id),
-            username: m.username ?? null,
-            displayName: m.name ?? null,
-            email,
-            accessLevel: m.access_level != null ? String(m.access_level) : null
-          };
-        })
-      )
-    );
+    const enriched = members.map((m) => {
+      let email = null;
+      if (authUser?.email && authUser.id === m.id) {
+        email = authUser.email;
+      }
+      if (!email && m.username) {
+        const match = repoContributors.find(
+          (rc) => rc.name?.toLowerCase() === m.username?.toLowerCase() || rc.name?.toLowerCase() === m.name?.toLowerCase()
+        );
+        if (match?.email) {
+          email = match.email;
+        }
+      }
+      return {
+        externalId: String(m.id),
+        username: m.username ?? null,
+        displayName: m.name ?? null,
+        email,
+        accessLevel: m.access_level != null ? String(m.access_level) : null
+      };
+    });
     if (enriched.length === 0 && repoContributors.length > 0) {
       return repoContributors.filter((rc) => rc.email || rc.name).map((rc) => ({
         // Synthetic key namespaced away from real numeric member ids so a
@@ -10434,7 +10368,7 @@ async function createScmLib({ url, accessToken, scmType, scmOrg }, {
     if (e instanceof InvalidRepoUrlError && url) {
       throw new RepoNoTokenAccessError(
         "no access to repo",
-        scmLibScmTypeToScmType[z20.nativeEnum(ScmLibScmType).parse(scmType)]
+        scmLibScmTypeToScmType[z20.enum(ScmLibScmType).parse(scmType)]
       );
     }
     console.error(`error validating scm: ${scmType} `, e);
@@ -11640,11 +11574,11 @@ var VulnerabilityReportIssueCodeNodeZ = z22.object({
   startLine: z22.number(),
   vulnerabilityReportIssue: z22.object({
     fixId: z22.string(),
-    category: z22.nativeEnum(Vulnerability_Report_Issue_Category_Enum),
+    category: z22.enum(Vulnerability_Report_Issue_Category_Enum),
     safeIssueType: z22.string(),
     vulnerabilityReportIssueTags: z22.array(
       z22.object({
-        tag: z22.nativeEnum(Vulnerability_Report_Issue_Tag_Enum)
+        tag: z22.enum(Vulnerability_Report_Issue_Tag_Enum)
       })
     )
   })
@@ -11654,9 +11588,9 @@ var VulnerabilityReportIssueNoFixCodeNodeZ = z22.object({
     z22.object({
       id: z22.string(),
       fixId: z22.string().nullable(),
-      category: z22.nativeEnum(Vulnerability_Report_Issue_Category_Enum),
+      category: z22.enum(Vulnerability_Report_Issue_Category_Enum),
       safeIssueType: z22.string(),
-      fpId: z22.string().uuid().nullable(),
+      fpId: z22.guid().nullable(),
       codeNodes: z22.array(
         z22.object({
           path: z22.string(),
@@ -11665,7 +11599,7 @@ var VulnerabilityReportIssueNoFixCodeNodeZ = z22.object({
       ),
       vulnerabilityReportIssueTags: z22.array(
         z22.object({
-          tag: z22.nativeEnum(Vulnerability_Report_Issue_Tag_Enum)
+          tag: z22.enum(Vulnerability_Report_Issue_Tag_Enum)
         })
       )
     })
@@ -13859,8 +13793,8 @@ function buildFixCommentBody({
   const title = `# ${MobbIconMarkdown} ${issueType} fix is ready`;
   const validFixParseRes = z24.object({
     patchAndQuestions: PatchAndQuestionsZ,
-    safeIssueLanguage: z24.nativeEnum(IssueLanguage_Enum),
-    severityText: z24.nativeEnum(Vulnerability_Severity_Enum),
+    safeIssueLanguage: z24.enum(IssueLanguage_Enum),
+    severityText: z24.enum(Vulnerability_Severity_Enum),
     safeIssueType: SafeIssueTypeStringZ
   }).safeParse(fix);
   if (!validFixParseRes.success) {
@@ -15540,7 +15474,7 @@ async function waitForAnaysisAndReviewPr({
   polling
 }) {
   const params = z27.object({
-    repo: z27.string().url(),
+    repo: z27.url(),
     githubActionToken: z27.string()
   }).parse({ repo, githubActionToken });
   const scm = await createScmLib(
@@ -15559,7 +15493,7 @@ async function waitForAnaysisAndReviewPr({
       analysisId: analysisId2,
       gqlClient,
       scm,
-      scanner: z27.nativeEnum(SCANNERS).parse(scanner)
+      scanner: z27.enum(SCANNERS).parse(scanner)
     });
   };
   if (polling) {
@@ -15893,10 +15827,10 @@ Example:
   throw new CliError(formattedErrorMessage);
 }
 var UrlZ = z28.string({
-  invalid_type_error: `is not a valid ${Object.values(ScmType).join("/ ")} URL`
+  error: (issue) => issue.code === "invalid_type" ? `is not a valid ${Object.values(ScmType).join("/ ")} URL` : void 0
 });
 function validateOrganizationId(organizationId) {
-  const orgIdValidation = z28.string().uuid().nullish().safeParse(organizationId);
+  const orgIdValidation = z28.guid().nullish().safeParse(organizationId);
   if (!orgIdValidation.success) {
     throw new CliError(`organizationId: ${organizationId} is not a valid UUID`);
   }
@@ -16040,7 +15974,7 @@ import path15 from "path";
 import { createHash } from "crypto";
 import path13 from "path";
 import AdmZip3 from "adm-zip";
-import pLimit6 from "p-limit";
+import pLimit5 from "p-limit";
 var SANITIZE_CONCURRENCY = 5;
 function md5Hex(data) {
   return createHash("md5").update(typeof data === "string" ? Buffer.from(data, "utf-8") : data).digest("hex");
@@ -16052,7 +15986,7 @@ async function sanitizeFileContent(content) {
   return sanitizedData;
 }
 async function processContextFiles(regularFiles, skillGroups) {
-  const limit = pLimit6(SANITIZE_CONCURRENCY);
+  const limit = pLimit5(SANITIZE_CONCURRENCY);
   const processedFiles = await Promise.all(
     regularFiles.map(
       (entry) => limit(async () => {
@@ -17513,7 +17447,7 @@ import { promisify } from "util";
 
 // src/features/analysis/context_file_uploader.ts
 import { setTimeout as sleep3 } from "timers/promises";
-import pLimit7 from "p-limit";
+import pLimit6 from "p-limit";
 init_client_generates();
 var UPLOAD_CONCURRENCY = 5;
 var UPLOAD_MAX_ATTEMPTS = 2;
@@ -17555,7 +17489,7 @@ async function uploadContextRecords(opts) {
   const uploadedSkillGroups = [];
   const failedFiles = [];
   const failedSkillGroups = [];
-  const limit = pLimit7(UPLOAD_CONCURRENCY);
+  const limit = pLimit6(UPLOAD_CONCURRENCY);
   const extraFields = {
     ...repositoryUrl !== void 0 && { repositoryUrl },
     ...branch !== void 0 && { branch },
@@ -18043,7 +17977,7 @@ function createLogger(config2) {
 
 // src/features/claude_code/hook_logger.ts
 var DD_RUM_TOKEN = true ? "pubf59c0182545bfb4c299175119f1abf9b" : "";
-var CLI_VERSION = true ? "1.4.41" : "unknown";
+var CLI_VERSION = true ? "1.4.43" : "unknown";
 var NAMESPACE = "mobbdev-claude-code-hook-logs";
 var claudeCodeVersion;
 function buildDdTags() {
@@ -19579,26 +19513,26 @@ var ScanAndFixVulnerabilitiesToolSchema = z29.object({
   path: z29.string()
 });
 var VulnerabilityReportIssueTagSchema = z29.object({
-  vulnerability_report_issue_tag_value: z29.nativeEnum(
+  vulnerability_report_issue_tag_value: z29.enum(
     Vulnerability_Report_Issue_Tag_Enum
   )
 });
 var VulnerabilityReportIssueSchema = z29.object({
   category: z29.any().optional().nullable(),
   parsedIssueType: SafeIssueTypeStringZ.nullable().optional(),
-  parsedSeverity: z29.nativeEnum(Vulnerability_Severity_Enum).nullable().optional(),
+  parsedSeverity: z29.enum(Vulnerability_Severity_Enum).nullable().optional(),
   vulnerabilityReportIssueTags: z29.array(VulnerabilityReportIssueTagSchema)
 });
 var SharedStateSchema = z29.object({
   __typename: z29.literal("fix_shared_state").optional(),
-  id: z29.any(),
+  id: z29.any().optional(),
   // GraphQL uses `any` type for UUID
   downloadedBy: z29.array(z29.any().nullable()).optional().nullable()
 });
 var UnstructuredFixExtraContextSchema = z29.object({
   __typename: z29.literal("UnstructuredFixExtraContext").optional(),
   key: z29.string(),
-  value: z29.any()
+  value: z29.any().optional()
   // GraphQL JSON type
 });
 var FixExtraContextResponseSchema = z29.object({
@@ -19612,7 +19546,7 @@ var FixQuestionSchema = z29.object({
   name: z29.string(),
   defaultValue: z29.string(),
   value: z29.string().nullable().optional(),
-  inputType: z29.nativeEnum(FixQuestionInputType),
+  inputType: z29.enum(FixQuestionInputType),
   options: z29.array(z29.string()),
   index: z29.number(),
   // E-2015: analyzer-served question text. default('') so a query that omits it
@@ -19635,7 +19569,7 @@ var GetFixNoFixErrorSchema = z29.object({
 var PatchAndQuestionsSchema = z29.union([FixDataSchema, GetFixNoFixErrorSchema]);
 var McpFixSchema = z29.object({
   __typename: z29.literal("fix").optional(),
-  id: z29.any(),
+  id: z29.any().optional(),
   // GraphQL uses `any` type for UUID
   confidence: z29.number(),
   safeIssueType: z29.string().nullable(),
@@ -19670,13 +19604,13 @@ var RepoSchema = z29.object({
   originalUrl: z29.string()
 });
 var ProjectSchema = z29.object({
-  id: z29.any(),
+  id: z29.any().optional(),
   // GraphQL uses `any` type for UUID
-  organizationId: z29.any()
+  organizationId: z29.any().optional()
   // GraphQL uses `any` type for UUID
 });
 var VulnerabilityReportSchema = z29.object({
-  scanDate: z29.any().nullable(),
+  scanDate: z29.any().nullish(),
   // GraphQL uses `any` type for timestamp
   vendor: z29.string(),
   // GraphQL generates as string, not enum
@@ -19688,12 +19622,12 @@ var VulnerabilityReportSchema = z29.object({
 });
 var FixReportSummarySchema = z29.object({
   __typename: z29.literal("fixReport").optional(),
-  id: z29.any(),
+  id: z29.any().optional(),
   // GraphQL uses `any` type for UUID
-  createdOn: z29.any(),
+  createdOn: z29.any().optional(),
   // GraphQL uses `any` type for timestamp
   repo: RepoSchema.nullable(),
-  issueTypes: z29.any().nullable(),
+  issueTypes: z29.any().nullish(),
   // GraphQL uses `any` type for JSON
   CRITICAL: FixAggregateSchema,
   HIGH: FixAggregateSchema,
@@ -19708,9 +19642,9 @@ var FixReportSummarySchema = z29.object({
 });
 var ExpiredReportSchema = z29.object({
   __typename: z29.literal("fixReport").optional(),
-  id: z29.any(),
+  id: z29.any().optional(),
   // GraphQL uses `any` type for UUID
-  expirationOn: z29.any().nullable()
+  expirationOn: z29.any().nullish()
   // GraphQL uses `any` type for timestamp
 });
 var GetLatestReportByRepoUrlResponseSchema = z29.object({
@@ -21559,9 +21493,10 @@ var BasePrompt = class {
       return this.argumentsValidationSchema.parse(argsToValidate);
     } catch (error) {
       if (error instanceof z30.ZodError) {
-        const errorDetails = error.errors.map((e) => {
+        const errorDetails = error.issues.map((e) => {
           const fieldPath = e.path.length > 0 ? e.path.join(".") : "root";
-          const message = e.message === "Required" ? `Missing required argument '${fieldPath}'` : `Invalid value for '${fieldPath}': ${e.message}`;
+          const isMissing = e.code === "invalid_type" && e.message.endsWith("received undefined");
+          const message = isMissing ? `Missing required argument '${fieldPath}'` : `Invalid value for '${fieldPath}': ${e.message}`;
           return message;
         });
         const errorMessage3 = `Invalid arguments: ${errorDetails.join(", ")}`;
@@ -23309,9 +23244,10 @@ var BaseTool = class {
       return this.inputValidationSchema.parse(args);
     } catch (error) {
       if (error instanceof z36.ZodError) {
-        const errorDetails = error.errors.map((e) => {
+        const errorDetails = error.issues.map((e) => {
           const fieldPath = e.path.length > 0 ? e.path.join(".") : "root";
-          const message = e.message === "Required" ? `Missing required parameter '${fieldPath}'` : `Invalid value for '${fieldPath}': ${e.message}`;
+          const isMissing = e.code === "invalid_type" && e.message.endsWith("received undefined");
+          const message = isMissing ? `Missing required parameter '${fieldPath}'` : `Invalid value for '${fieldPath}': ${e.message}`;
           return message;
         });
         const errorMessage3 = `Invalid arguments: ${errorDetails.join(", ")}`;