mobbdev 1.4.47 → 1.4.48

package/dist/args/commands/upload_ai_blame.mjs

@@ -150,7 +150,7 @@ function getSdk(client, withWrapper = defaultWrapper) {
     }
   };
 }
-var AiBlameInferenceType, FixQuestionInputType, Language, ManifestAction, Effort_To_Apply_Fix_Enum, Fix_Rating_Tag_Enum, Fix_Report_State_Enum, Fix_State_Enum, IssueLanguage_Enum, Pr_Status_Enum, Project_Role_Type_Enum, Vulnerability_Report_Issue_Category_Enum, Vulnerability_Report_Issue_State_Enum, Vulnerability_Report_Issue_Tag_Enum, Vulnerability_Report_Vendor_Enum, Vulnerability_Severity_Enum, FixDetailsFragmentDoc, FixReportSummaryFieldsFragmentDoc, MeDocument, GetLastOrgAndNamedProjectDocument, GetLastOrgDocument, GetEncryptedApiTokenDocument, FixReportStateDocument, GetVulnerabilityReportPathsDocument, GetAnalysisSubscriptionDocument, GetAnalysisDocument, GetFixesDocument, GetVulByNodesMetadataDocument, GetFalsePositiveDocument, UpdateScmTokenDocument, UploadS3BucketInfoDocument, GetTracyDiffUploadUrlDocument, AnalyzeCommitForExtensionAiBlameDocument, GetAiBlameInferenceDocument, GetAiBlameAttributionPromptDocument, GetPromptSummaryDocument, UploadAiBlameInferencesInitDocument, FinalizeAiBlameInferencesUploadDocument, UploadTracyRecordsDocument, GetTracyRawDataUploadUrlDocument, DigestVulnerabilityReportDocument, SubmitVulnerabilityReportDocument, CreateCommunityUserDocument, CreateCliLoginDocument, PerformCliLoginDocument, SetQuarantineEnabledDocument, CreateProjectDocument, ValidateRepoUrlDocument, GitReferenceDocument, AutoPrAnalysisDocument, GetFixWithAnswersDocument, GetFixReportsByRepoUrlDocument, GetReportFixesDocument, GetLatestReportByRepoUrlDocument, UpdateDownloadedFixDataDocument, GetUserMvsAutoFixDocument, StreamBlameAiAnalysisRequestsDocument, StreamCommitBlameRequestsDocument, ScanSkillDocument, SkillVerdictsByMd5Document, LogMvsEventDocument, GetMvsProjectDocument, IssueTypesDocument, defaultWrapper;
+var AiBlameInferenceType, FixQuestionInputType, Language, ManifestAction, Effort_To_Apply_Fix_Enum, Fix_Rating_Tag_Enum, Fix_Report_State_Enum, Fix_State_Enum, IssueLanguage_Enum, Pr_Status_Enum, Project_Role_Type_Enum, Scan_Source_Enum, Vulnerability_Report_Issue_Category_Enum, Vulnerability_Report_Issue_State_Enum, Vulnerability_Report_Issue_Tag_Enum, Vulnerability_Report_Vendor_Enum, Vulnerability_Severity_Enum, FixDetailsFragmentDoc, FixReportSummaryFieldsFragmentDoc, MeDocument, GetLastOrgAndNamedProjectDocument, GetLastOrgDocument, GetEncryptedApiTokenDocument, FixReportStateDocument, GetVulnerabilityReportPathsDocument, GetAnalysisSubscriptionDocument, GetAnalysisDocument, GetFixesDocument, GetVulByNodesMetadataDocument, GetFalsePositiveDocument, UpdateScmTokenDocument, UploadS3BucketInfoDocument, GetTracyDiffUploadUrlDocument, AnalyzeCommitForExtensionAiBlameDocument, GetAiBlameInferenceDocument, GetAiBlameAttributionPromptDocument, GetPromptSummaryDocument, UploadAiBlameInferencesInitDocument, FinalizeAiBlameInferencesUploadDocument, UploadTracyRecordsDocument, GetTracyRawDataUploadUrlDocument, DigestVulnerabilityReportDocument, SubmitVulnerabilityReportDocument, CreateCommunityUserDocument, CreateCliLoginDocument, PerformCliLoginDocument, SetQuarantineEnabledDocument, CreateProjectDocument, ValidateRepoUrlDocument, GitReferenceDocument, AutoPrAnalysisDocument, GetFixWithAnswersDocument, GetFixReportsByRepoUrlDocument, GetReportFixesDocument, GetLatestReportByRepoUrlDocument, UpdateDownloadedFixDataDocument, GetUserMvsAutoFixDocument, StreamBlameAiAnalysisRequestsDocument, StreamCommitBlameRequestsDocument, ScanSkillDocument, SkillVerdictsByMd5Document, LogMvsEventDocument, GetMvsProjectDocument, IssueTypesDocument, defaultWrapper;
 var init_client_generates = __esm({
   "src/features/analysis/scm/generates/client_generates.ts"() {
     "use strict";
@@ -250,6 +250,25 @@ var init_client_generates = __esm({
       Project_Role_Type_Enum2["Writer"] = "writer";
       return Project_Role_Type_Enum2;
     })(Project_Role_Type_Enum || {});
+    Scan_Source_Enum = /* @__PURE__ */ ((Scan_Source_Enum2) => {
+      Scan_Source_Enum2["Aspm"] = "ASPM";
+      Scan_Source_Enum2["AutoFixer"] = "AUTO_FIXER";
+      Scan_Source_Enum2["CiAzure"] = "CI_AZURE";
+      Scan_Source_Enum2["CiBamboo"] = "CI_BAMBOO";
+      Scan_Source_Enum2["CiCircleci"] = "CI_CIRCLECI";
+      Scan_Source_Enum2["CiGithub"] = "CI_GITHUB";
+      Scan_Source_Enum2["CiGitlab"] = "CI_GITLAB";
+      Scan_Source_Enum2["CiJenkins"] = "CI_JENKINS";
+      Scan_Source_Enum2["CiUnknown"] = "CI_UNKNOWN";
+      Scan_Source_Enum2["Cli"] = "CLI";
+      Scan_Source_Enum2["Mcp"] = "MCP";
+      Scan_Source_Enum2["WebUiCheckmarxIntegration"] = "WEB_UI_CHECKMARX_INTEGRATION";
+      Scan_Source_Enum2["WebUiFixOwnCode"] = "WEB_UI_FIX_OWN_CODE";
+      Scan_Source_Enum2["WebUiOnboarding"] = "WEB_UI_ONBOARDING";
+      Scan_Source_Enum2["WebUiRerunAnalysis"] = "WEB_UI_RERUN_ANALYSIS";
+      Scan_Source_Enum2["WebUiTryNow"] = "WEB_UI_TRY_NOW";
+      return Scan_Source_Enum2;
+    })(Scan_Source_Enum || {});
     Vulnerability_Report_Issue_Category_Enum = /* @__PURE__ */ ((Vulnerability_Report_Issue_Category_Enum2) => {
       Vulnerability_Report_Issue_Category_Enum2["FalsePositive"] = "FalsePositive";
       Vulnerability_Report_Issue_Category_Enum2["Filtered"] = "Filtered";
@@ -481,6 +500,7 @@ var init_client_generates = __esm({
       organization {
         id
         enableV2Fixes
+        isFixEnabled
         projects(where: {name: {_eq: $projectName}}) {
           name
           id
@@ -500,6 +520,7 @@ var init_client_generates = __esm({
       organization {
         id
         enableV2Fixes
+        isFixEnabled
       }
     }
   }
@@ -1895,6 +1916,8 @@ var init_types = __esm({
           reportSummaryUrl: z7.url().nullish(),
           computedVendor: z7.enum(Vulnerability_Report_Vendor_Enum).nullable(),
           vendor: z7.enum(Vulnerability_Report_Vendor_Enum).nullable(),
+          // Lets the waiting screen distinguish a first scan from a rescan.
+          scanSource: z7.enum(Scan_Source_Enum).nullable(),
           issuesWithKnownLanguage: z7.number().nullable(),
           scanDate: z7.string().nullable(),
           vendorReportId: z7.guid().nullable(),
@@ -5107,7 +5130,10 @@ var GQLClient = class {
     return {
       organizationId: organization.id,
       projectId,
-      enableV2Fixes: organization.enableV2Fixes === true
+      enableV2Fixes: organization.enableV2Fixes === true,
+      // NULL means "unset" and keeps the fix-enabled behaviour; only an
+      // explicit false puts the org in SAST-only mode.
+      isFixEnabled: organization.isFixEnabled !== false
     };
   }
   async getEncryptedApiToken(variables) {

package/dist/index.mjs

@@ -150,7 +150,7 @@ function getSdk(client, withWrapper = defaultWrapper) {
     }
   };
 }
-var AiBlameInferenceType, FixQuestionInputType, Language, ManifestAction, Effort_To_Apply_Fix_Enum, Fix_Rating_Tag_Enum, Fix_Report_State_Enum, Fix_State_Enum, IssueLanguage_Enum, Pr_Status_Enum, Project_Role_Type_Enum, Vulnerability_Report_Issue_Category_Enum, Vulnerability_Report_Issue_State_Enum, Vulnerability_Report_Issue_Tag_Enum, Vulnerability_Report_Vendor_Enum, Vulnerability_Severity_Enum, FixDetailsFragmentDoc, FixReportSummaryFieldsFragmentDoc, MeDocument, GetLastOrgAndNamedProjectDocument, GetLastOrgDocument, GetEncryptedApiTokenDocument, FixReportStateDocument, GetVulnerabilityReportPathsDocument, GetAnalysisSubscriptionDocument, GetAnalysisDocument, GetFixesDocument, GetVulByNodesMetadataDocument, GetFalsePositiveDocument, UpdateScmTokenDocument, UploadS3BucketInfoDocument, GetTracyDiffUploadUrlDocument, AnalyzeCommitForExtensionAiBlameDocument, GetAiBlameInferenceDocument, GetAiBlameAttributionPromptDocument, GetPromptSummaryDocument, UploadAiBlameInferencesInitDocument, FinalizeAiBlameInferencesUploadDocument, UploadTracyRecordsDocument, GetTracyRawDataUploadUrlDocument, DigestVulnerabilityReportDocument, SubmitVulnerabilityReportDocument, CreateCommunityUserDocument, CreateCliLoginDocument, PerformCliLoginDocument, SetQuarantineEnabledDocument, CreateProjectDocument, ValidateRepoUrlDocument, GitReferenceDocument, AutoPrAnalysisDocument, GetFixWithAnswersDocument, GetFixReportsByRepoUrlDocument, GetReportFixesDocument, GetLatestReportByRepoUrlDocument, UpdateDownloadedFixDataDocument, GetUserMvsAutoFixDocument, StreamBlameAiAnalysisRequestsDocument, StreamCommitBlameRequestsDocument, ScanSkillDocument, SkillVerdictsByMd5Document, LogMvsEventDocument, GetMvsProjectDocument, IssueTypesDocument, defaultWrapper;
+var AiBlameInferenceType, FixQuestionInputType, Language, ManifestAction, Effort_To_Apply_Fix_Enum, Fix_Rating_Tag_Enum, Fix_Report_State_Enum, Fix_State_Enum, IssueLanguage_Enum, Pr_Status_Enum, Project_Role_Type_Enum, Scan_Source_Enum, Vulnerability_Report_Issue_Category_Enum, Vulnerability_Report_Issue_State_Enum, Vulnerability_Report_Issue_Tag_Enum, Vulnerability_Report_Vendor_Enum, Vulnerability_Severity_Enum, FixDetailsFragmentDoc, FixReportSummaryFieldsFragmentDoc, MeDocument, GetLastOrgAndNamedProjectDocument, GetLastOrgDocument, GetEncryptedApiTokenDocument, FixReportStateDocument, GetVulnerabilityReportPathsDocument, GetAnalysisSubscriptionDocument, GetAnalysisDocument, GetFixesDocument, GetVulByNodesMetadataDocument, GetFalsePositiveDocument, UpdateScmTokenDocument, UploadS3BucketInfoDocument, GetTracyDiffUploadUrlDocument, AnalyzeCommitForExtensionAiBlameDocument, GetAiBlameInferenceDocument, GetAiBlameAttributionPromptDocument, GetPromptSummaryDocument, UploadAiBlameInferencesInitDocument, FinalizeAiBlameInferencesUploadDocument, UploadTracyRecordsDocument, GetTracyRawDataUploadUrlDocument, DigestVulnerabilityReportDocument, SubmitVulnerabilityReportDocument, CreateCommunityUserDocument, CreateCliLoginDocument, PerformCliLoginDocument, SetQuarantineEnabledDocument, CreateProjectDocument, ValidateRepoUrlDocument, GitReferenceDocument, AutoPrAnalysisDocument, GetFixWithAnswersDocument, GetFixReportsByRepoUrlDocument, GetReportFixesDocument, GetLatestReportByRepoUrlDocument, UpdateDownloadedFixDataDocument, GetUserMvsAutoFixDocument, StreamBlameAiAnalysisRequestsDocument, StreamCommitBlameRequestsDocument, ScanSkillDocument, SkillVerdictsByMd5Document, LogMvsEventDocument, GetMvsProjectDocument, IssueTypesDocument, defaultWrapper;
 var init_client_generates = __esm({
   "src/features/analysis/scm/generates/client_generates.ts"() {
     "use strict";
@@ -250,6 +250,25 @@ var init_client_generates = __esm({
       Project_Role_Type_Enum2["Writer"] = "writer";
       return Project_Role_Type_Enum2;
     })(Project_Role_Type_Enum || {});
+    Scan_Source_Enum = /* @__PURE__ */ ((Scan_Source_Enum2) => {
+      Scan_Source_Enum2["Aspm"] = "ASPM";
+      Scan_Source_Enum2["AutoFixer"] = "AUTO_FIXER";
+      Scan_Source_Enum2["CiAzure"] = "CI_AZURE";
+      Scan_Source_Enum2["CiBamboo"] = "CI_BAMBOO";
+      Scan_Source_Enum2["CiCircleci"] = "CI_CIRCLECI";
+      Scan_Source_Enum2["CiGithub"] = "CI_GITHUB";
+      Scan_Source_Enum2["CiGitlab"] = "CI_GITLAB";
+      Scan_Source_Enum2["CiJenkins"] = "CI_JENKINS";
+      Scan_Source_Enum2["CiUnknown"] = "CI_UNKNOWN";
+      Scan_Source_Enum2["Cli"] = "CLI";
+      Scan_Source_Enum2["Mcp"] = "MCP";
+      Scan_Source_Enum2["WebUiCheckmarxIntegration"] = "WEB_UI_CHECKMARX_INTEGRATION";
+      Scan_Source_Enum2["WebUiFixOwnCode"] = "WEB_UI_FIX_OWN_CODE";
+      Scan_Source_Enum2["WebUiOnboarding"] = "WEB_UI_ONBOARDING";
+      Scan_Source_Enum2["WebUiRerunAnalysis"] = "WEB_UI_RERUN_ANALYSIS";
+      Scan_Source_Enum2["WebUiTryNow"] = "WEB_UI_TRY_NOW";
+      return Scan_Source_Enum2;
+    })(Scan_Source_Enum || {});
     Vulnerability_Report_Issue_Category_Enum = /* @__PURE__ */ ((Vulnerability_Report_Issue_Category_Enum2) => {
       Vulnerability_Report_Issue_Category_Enum2["FalsePositive"] = "FalsePositive";
       Vulnerability_Report_Issue_Category_Enum2["Filtered"] = "Filtered";
@@ -481,6 +500,7 @@ var init_client_generates = __esm({
       organization {
         id
         enableV2Fixes
+        isFixEnabled
         projects(where: {name: {_eq: $projectName}}) {
           name
           id
@@ -500,6 +520,7 @@ var init_client_generates = __esm({
       organization {
         id
         enableV2Fixes
+        isFixEnabled
       }
     }
   }
@@ -1940,6 +1961,8 @@ var init_types = __esm({
           reportSummaryUrl: z7.url().nullish(),
           computedVendor: z7.enum(Vulnerability_Report_Vendor_Enum).nullable(),
           vendor: z7.enum(Vulnerability_Report_Vendor_Enum).nullable(),
+          // Lets the waiting screen distinguish a first scan from a rescan.
+          scanSource: z7.enum(Scan_Source_Enum).nullable(),
           issuesWithKnownLanguage: z7.number().nullable(),
           scanDate: z7.string().nullable(),
           vendorReportId: z7.guid().nullable(),
@@ -11847,7 +11870,10 @@ var GQLClient = class {
     return {
       organizationId: organization.id,
       projectId,
-      enableV2Fixes: organization.enableV2Fixes === true
+      enableV2Fixes: organization.enableV2Fixes === true,
+      // NULL means "unset" and keeps the fix-enabled behaviour; only an
+      // explicit false puts the org in SAST-only mode.
+      isFixEnabled: organization.isFixEnabled !== false
     };
   }
   async getEncryptedApiToken(variables) {
@@ -15068,7 +15094,7 @@ async function _scan(params, { skipPrompts = false } = {}) {
     pullRequest,
     polling,
     baselineCommit,
-    scanOnly
+    scanOnly: requestedScanOnly
   } = params;
   debug22("start %s %s", dirname, repo);
   const { createSpinner: createSpinner5 } = Spinner2({ ci });
@@ -15084,11 +15110,20 @@ async function _scan(params, { skipPrompts = false } = {}) {
   const {
     projectId,
     organizationId,
-    enableV2Fixes: orgEnableV2Fixes
+    enableV2Fixes: orgEnableV2Fixes,
+    isFixEnabled: orgIsFixEnabled
   } = await gqlClient.getLastOrgAndNamedProject({
     projectName: mobbProjectName,
     userDefinedOrganizationId: userOrganizationId
   });
+  const scanOnly = requestedScanOnly || !orgIsFixEnabled;
+  if (scanOnly && !requestedScanOnly) {
+    console.log(
+      chalk7.yellow(
+        "\u2139\uFE0F  Your organization is on Mobb Scan (scan-only): issues will be found and reported, but no fixes are generated. Contact support to enable Mobb Fixer."
+      )
+    );
+  }
   const {
     uploadS3BucketInfo: { repoUploadInfo, reportUploadInfo }
   } = await gqlClient.uploadS3BucketInfo();
@@ -18282,7 +18317,7 @@ function createLogger(config2) {
 
 // src/features/claude_code/hook_logger.ts
 var DD_RUM_TOKEN = true ? "pubf59c0182545bfb4c299175119f1abf9b" : "";
-var CLI_VERSION = true ? "1.4.47" : "unknown";
+var CLI_VERSION = true ? "1.4.48" : "unknown";
 var NAMESPACE = "mobbdev-claude-code-hook-logs";
 var claudeCodeVersion;
 function buildDdTags() {
@@ -20056,6 +20091,7 @@ var partitionInteractiveFixes = (fixes) => {
 };
 
 // src/mcp/services/McpGQLClient.ts
+var MVS_SCAN_ONLY_ERROR = "Mobb Vibe Shield is not available for your organization: it is on Mobb Scan (scan-only), which reports issues but does not generate fixes. Contact support to enable Mobb Fixer.";
 var McpGQLClient = class extends GQLClient {
   constructor(args) {
     super({
@@ -20235,12 +20271,16 @@ var McpGQLClient = class extends GQLClient {
         throw new Error("User email not found");
       }
       const orgRes = await this._clientSdk.getLastOrg({ email: userEmail });
-      const organizationId = orgRes.user?.[0]?.userOrganizationsAndUserOrganizationRoles?.[0]?.organization?.id;
+      const organization = orgRes.user?.[0]?.userOrganizationsAndUserOrganizationRoles?.[0]?.organization;
+      const organizationId = organization?.id;
       if (!organizationId) {
         throw new Error(
           `The user with email:${userEmail} is not associated with any organization`
         );
       }
+      if (organization.isFixEnabled === false) {
+        throw new Error(MVS_SCAN_ONLY_ERROR);
+      }
       const mvsRes = await this._clientSdk.getMvsProject({ organizationId });
       const projectId = mvsRes.getMvsProject?.projectId;
       if (!projectId) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mobbdev",
-  "version": "1.4.47",
+  "version": "1.4.48",
   "description": "Automated secure code remediation tool",
   "repository": "git+https://github.com/mobb-dev/bugsy.git",
   "main": "dist/index.mjs",