@sentry/junior-github 0.126.1 → 0.128.0

package/dist/index.js

@@ -1,8 +1,16 @@
 import {
+  GITHUB_DEPLOYMENT_EVENTS,
+  GITHUB_DEPLOYMENT_SUGGESTED_EVENTS,
+  GITHUB_ISSUE_EVENTS,
+  GITHUB_ISSUE_SUGGESTED_EVENTS,
+  GITHUB_PULL_REQUEST_EVENTS,
+  GITHUB_PULL_REQUEST_SUGGESTED_EVENTS,
   gitHubDeploymentSourceSubscribable,
+  gitHubIssueSubscribable,
   gitHubPullRequestSubscribable,
+  gitHubRepositorySubscribable,
   normalizeGitHubResourceEvents
-} from "./chunk-NNSOXVGR.js";
+} from "./chunk-25NTEYYB.js";
 
 // src/plugin.ts
 import {
@@ -71,7 +79,8 @@ import {
   definePluginTool,
   EgressAuthRequired,
   PluginToolInputError as PluginToolInputError2,
-  pluginToolResultSchema
+  subscribableResourceSchema,
+  pluginToolOutputSchema
 } from "@sentry/junior-plugin-api";
 import { Type } from "@sinclair/typebox";
 import { Value } from "@sinclair/typebox/value";
@@ -120,7 +129,7 @@ function githubConversationFooter(conversationId, dashboardUrl) {
   const id = nonEmptyString(conversationId, "conversationId");
   const normalizedDashboardUrl = dashboardUrl?.trim();
   const sentryUrl = sentryConversationUrl(id);
-  const sessionLinks = normalizedDashboardUrl ? `[View Junior Session](${normalizedDashboardUrl})${sentryUrl ? ` [Sentry](${sentryUrl})` : ""}` : sentryUrl ? `[View Junior Session in Sentry](${sentryUrl})` : void 0;
+  const sessionLinks = normalizedDashboardUrl ? `[View Junior Session](${normalizedDashboardUrl})${sentryUrl ? ` [[Sentry]](${sentryUrl})` : ""}` : sentryUrl ? `[View Junior Session in Sentry](${sentryUrl})` : void 0;
   if (!sessionLinks) {
     return void 0;
   }
@@ -293,23 +302,23 @@ var createIssueStateSchema = Type.Union([
 ]);
 var gitHubIssueDataSchema = z.object({
   number: z.number(),
+  subscribable: subscribableResourceSchema.optional(),
   url: z.string()
 });
-var gitHubIssueOutputSchema = pluginToolResultSchema.extend({
-  ok: z.literal(true),
-  status: z.literal("success"),
+var gitHubIssueOutputSchema = pluginToolOutputSchema.extend({
   target: z.literal("createIssue"),
-  data: gitHubIssueDataSchema,
-  number: z.number(),
-  url: z.string()
+  ...gitHubIssueDataSchema.shape
 });
-function gitHubIssueToolResult(result) {
+function gitHubIssueToolResult(input, result, canSubscribe) {
+  const repo = parseRepo(input.repo);
+  const subscribable = canSubscribe ? gitHubIssueSubscribable({
+    number: result.number,
+    repo: `${repo.owner}/${repo.name}`
+  }) : void 0;
+  const data = { ...result, ...subscribable ? { subscribable } : {} };
   return {
-    ok: true,
-    status: "success",
     target: "createIssue",
-    data: result,
-    ...result
+    ...data
   };
 }
 function parseCreateIssueInput(input) {
@@ -479,7 +488,11 @@ function createGitHubIssueTool(ctx) {
               url: state.url
             };
             await annotateIssue(ctx, completedInput, completedResult);
-            return gitHubIssueToolResult(completedResult);
+            return gitHubIssueToolResult(
+              completedInput,
+              completedResult,
+              ctx.resourceEvents.canSubscribe
+            );
           }
           if (state?.status === "pending") {
             throw new Error(
@@ -518,7 +531,11 @@ function createGitHubIssueTool(ctx) {
               );
             }
             await annotateIssue(ctx, parsedInput, result);
-            return gitHubIssueToolResult(result);
+            return gitHubIssueToolResult(
+              parsedInput,
+              result,
+              ctx.resourceEvents.canSubscribe
+            );
           } catch (error) {
             if (isEgressAuthRequired(error) || isDefinitiveGitHubIssueCreateRejection(error)) {
               await ctx.state.delete(key);
@@ -535,8 +552,8 @@ function createGitHubIssueTool(ctx) {
 import {
   definePluginTool as definePluginTool2,
   PluginToolInputError as PluginToolInputError3,
-  pluginToolResultSchema as pluginToolResultSchema2,
-  subscribableResourceSchema
+  pluginToolOutputSchema as pluginToolOutputSchema2,
+  subscribableResourceSchema as subscribableResourceSchema2
 } from "@sentry/junior-plugin-api";
 import { z as z2 } from "zod";
 var commitShaSchema = z2.string().regex(/^[0-9a-f]{40}$/i);
@@ -575,12 +592,9 @@ var deploymentSourceSchema = z2.object({
   deployment: deploymentSchema.nullable(),
   environment: z2.string().nullable(),
   repo: z2.string(),
-  subscribable: subscribableResourceSchema.optional()
+  subscribable: subscribableResourceSchema2.optional()
 }).strict();
-var outputSchema = pluginToolResultSchema2.extend({
-  data: deploymentSourceSchema,
-  ok: z2.literal(true),
-  status: z2.literal("success"),
+var outputSchema = pluginToolOutputSchema2.extend({
   target: z2.literal("getDeployment"),
   ...deploymentSourceSchema.shape
 }).strict();
@@ -715,11 +729,11 @@ function createGitHubGetDeploymentTool(ctx) {
           url: `https://github.com/${repo.ref}/deployments`
         };
       }
-      const subscribable = gitHubDeploymentSourceSubscribable({
+      const subscribable = ctx.resourceEvents.canSubscribe ? gitHubDeploymentSourceSubscribable({
         commitSha,
         environment: input.environment,
         repo: repo.ref
-      });
+      }) : void 0;
       const data = {
         commitSha,
         deployment,
@@ -728,9 +742,6 @@ function createGitHubGetDeploymentTool(ctx) {
         ...subscribable ? { subscribable } : {}
       };
       return {
-        data,
-        ok: true,
-        status: "success",
         target: "getDeployment",
         ...data
       };
@@ -743,12 +754,12 @@ import {
   definePluginTool as definePluginTool3,
   EgressAuthRequired as EgressAuthRequired2,
   PluginToolInputError as PluginToolInputError4,
-  pluginToolResultSchema as pluginToolResultSchema3
+  pluginToolOutputSchema as pluginToolOutputSchema3
 } from "@sentry/junior-plugin-api";
 import { Type as Type2 } from "@sinclair/typebox";
 import { Value as Value2 } from "@sinclair/typebox/value";
 import { z as z3 } from "zod";
-import { subscribableResourceSchema as subscribableResourceSchema2 } from "@sentry/junior-plugin-api";
+import { subscribableResourceSchema as subscribableResourceSchema3 } from "@sentry/junior-plugin-api";
 var GITHUB_PULL_REQUEST_CREATE_IDEMPOTENCY_TTL_MS = 30 * 24 * 60 * 60 * 1e3;
 var GITHUB_PULL_REQUEST_CREATE_LOCK_TTL_MS = 6e4;
 var GitHubPullRequestCreateRejectedError = class extends Error {
@@ -817,16 +828,11 @@ var createPullRequestStateSchema = Type2.Union([
 var gitHubPullRequestDataSchema = z3.object({
   number: z3.number(),
   url: z3.string(),
-  subscribable: subscribableResourceSchema2.optional()
+  subscribable: subscribableResourceSchema3.optional()
 });
-var gitHubPullRequestOutputSchema = pluginToolResultSchema3.extend({
-  ok: z3.literal(true),
-  status: z3.literal("success"),
+var gitHubPullRequestOutputSchema = pluginToolOutputSchema3.extend({
   target: z3.literal("createPullRequest"),
-  data: gitHubPullRequestDataSchema,
-  number: z3.number(),
-  url: z3.string(),
-  subscribable: subscribableResourceSchema2.optional()
+  ...gitHubPullRequestDataSchema.shape
 });
 function parseCreatePullRequestInput(input) {
   try {
@@ -975,12 +981,12 @@ async function createGitHubPullRequest(ctx, request) {
     url: pullRequest.html_url
   };
 }
-function gitHubPullRequestToolResult(input, result) {
+function gitHubPullRequestToolResult(input, result, canSubscribe) {
   const repo = parseRepo3(input.repo);
-  const subscribable = gitHubPullRequestSubscribable({
+  const subscribable = canSubscribe ? gitHubPullRequestSubscribable({
     number: result.number,
     repo: `${repo.owner}/${repo.name}`
-  });
+  }) : void 0;
   return { ...result, ...subscribable ? { subscribable } : {} };
 }
 async function annotatePullRequest(ctx, input, result) {
@@ -993,13 +999,10 @@ async function annotatePullRequest(ctx, input, result) {
     status: input.draft ? "draft" : "open"
   });
 }
-function gitHubPullRequestStructuredResult(input, result) {
-  const data = gitHubPullRequestToolResult(input, result);
+function gitHubPullRequestStructuredResult(input, result, canSubscribe) {
+  const data = gitHubPullRequestToolResult(input, result, canSubscribe);
   return {
-    ok: true,
-    status: "success",
     target: "createPullRequest",
-    data,
     ...data
   };
 }
@@ -1036,7 +1039,8 @@ function createGitHubPullRequestTool(ctx) {
             await annotatePullRequest(ctx, completedInput, completedResult);
             return gitHubPullRequestStructuredResult(
               completedInput,
-              completedResult
+              completedResult,
+              ctx.resourceEvents.canSubscribe
             );
           }
           if (state?.status === "pending") {
@@ -1076,7 +1080,11 @@ function createGitHubPullRequestTool(ctx) {
               );
             }
             await annotatePullRequest(ctx, parsedInput, result);
-            return gitHubPullRequestStructuredResult(parsedInput, result);
+            return gitHubPullRequestStructuredResult(
+              parsedInput,
+              result,
+              ctx.resourceEvents.canSubscribe
+            );
           } catch (error) {
             if (isEgressAuthRequired2(error) || isDefinitiveGitHubPullRequestCreateRejection(error)) {
               await ctx.state.delete(key);
@@ -1093,10 +1101,10 @@ function createGitHubPullRequestTool(ctx) {
 import {
   definePluginTool as definePluginTool4,
   PluginToolInputError as PluginToolInputError5,
-  pluginToolResultSchema as pluginToolResultSchema4
+  pluginToolOutputSchema as pluginToolOutputSchema4
 } from "@sentry/junior-plugin-api";
 import { z as z4 } from "zod";
-import { subscribableResourceSchema as subscribableResourceSchema3 } from "@sentry/junior-plugin-api";
+import { subscribableResourceSchema as subscribableResourceSchema4 } from "@sentry/junior-plugin-api";
 var commitShaSchema2 = z4.string().regex(/^[0-9a-f]{40}$/i);
 var inputSchema2 = z4.object({
   repo: z4.string().describe('Repository in "owner/name" format.'),
@@ -1110,15 +1118,12 @@ var pullRequestSchema = z4.object({
   merged: z4.boolean(),
   number: z4.number(),
   state: z4.string(),
-  subscribable: subscribableResourceSchema3.optional(),
+  subscribable: subscribableResourceSchema4.optional(),
   title: z4.string(),
   url: z4.string()
 });
-var outputSchema2 = pluginToolResultSchema4.extend({
-  ok: z4.literal(true),
-  status: z4.literal("success"),
+var outputSchema2 = pluginToolOutputSchema4.extend({
   target: z4.literal("getPullRequest"),
-  data: pullRequestSchema,
   ...pullRequestSchema.shape
 });
 function parseRepo4(value) {
@@ -1178,10 +1183,10 @@ function createGitHubGetPullRequestTool(ctx) {
         state: z4.string(),
         title: z4.string()
       }).parse(parsed);
-      const subscribable = gitHubPullRequestSubscribable({
+      const subscribable = ctx.resourceEvents.canSubscribe ? gitHubPullRequestSubscribable({
         number: providerResult.number,
         repo: repo.ref
-      });
+      }) : void 0;
       const data = {
         base: providerResult.base.ref,
         draft: providerResult.draft,
@@ -1195,68 +1200,159 @@ function createGitHubGetPullRequestTool(ctx) {
         url: providerResult.html_url
       };
       return {
-        ok: true,
-        status: "success",
         target: "getPullRequest",
-        data,
         ...data
       };
     }
   });
 }
 
-// src/tools/update-pull-request.ts
+// src/tools/get-repository.ts
 import {
   definePluginTool as definePluginTool5,
   PluginToolInputError as PluginToolInputError6,
-  pluginToolResultSchema as pluginToolResultSchema5
+  pluginToolOutputSchema as pluginToolOutputSchema5,
+  subscribableResourceSchema as subscribableResourceSchema5
 } from "@sentry/junior-plugin-api";
 import { z as z5 } from "zod";
-import { subscribableResourceSchema as subscribableResourceSchema4 } from "@sentry/junior-plugin-api";
 var inputSchema3 = z5.object({
-  repo: z5.string().describe('Repository in "owner/name" format.'),
-  number: z5.number().int().positive().describe("Pull request number."),
-  title: z5.string().trim().min(1).optional().describe("Replacement pull request title."),
-  body: z5.string().optional().describe(
+  repo: z5.string().describe('Repository in "owner/name" format.')
+}).strict();
+var repositorySchema = z5.object({
+  defaultBranch: z5.string(),
+  description: z5.string().nullable(),
+  fullName: z5.string(),
+  private: z5.boolean(),
+  subscribable: subscribableResourceSchema5.optional(),
+  url: z5.string()
+});
+var outputSchema3 = pluginToolOutputSchema5.extend({
+  target: z5.literal("getRepository"),
+  ...repositorySchema.shape
+});
+function parseRepo5(value) {
+  const parts = value.split("/").map((part) => part.trim());
+  if (parts.length !== 2 || !parts[0] || !parts[1]) {
+    throw new PluginToolInputError6('repo must use "owner/name" format');
+  }
+  return { owner: parts[0], name: parts[1] };
+}
+async function readJson3(response) {
+  const text2 = await response.text();
+  if (!text2) return void 0;
+  try {
+    return JSON.parse(text2);
+  } catch {
+    return text2;
+  }
+}
+function createGitHubGetRepositoryTool(ctx) {
+  return definePluginTool5({
+    annotations: {
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: true,
+      readOnlyHint: true
+    },
+    description: "Get a GitHub repository. Use this when repository-wide issue activity may need resource-event monitoring; the result includes a subscribable hint when GitHub webhooks are configured.",
+    inputSchema: inputSchema3,
+    outputSchema: outputSchema3,
+    async execute(input) {
+      const repo = parseRepo5(input.repo);
+      const response = await ctx.egress.fetch({
+        provider: "github",
+        operation: "github.repository.get",
+        request: new Request(
+          `https://api.github.com/repos/${encodeURIComponent(repo.owner)}/${encodeURIComponent(repo.name)}`,
+          {
+            headers: {
+              Accept: "application/vnd.github+json",
+              "X-GitHub-Api-Version": "2022-11-28"
+            }
+          }
+        )
+      });
+      const parsed = await readJson3(response);
+      if (!response.ok) {
+        throw new PluginToolInputError6(
+          `GitHub repository lookup failed with HTTP ${response.status}`
+        );
+      }
+      const providerResult = z5.object({
+        default_branch: z5.string(),
+        description: z5.string().nullable(),
+        full_name: z5.string(),
+        html_url: z5.string(),
+        private: z5.boolean()
+      }).parse(parsed);
+      const subscribable = ctx.resourceEvents.canSubscribe ? gitHubRepositorySubscribable({
+        repo: providerResult.full_name
+      }) : void 0;
+      const data = {
+        defaultBranch: providerResult.default_branch,
+        description: providerResult.description,
+        fullName: providerResult.full_name,
+        private: providerResult.private,
+        ...subscribable ? { subscribable } : {},
+        url: providerResult.html_url
+      };
+      return {
+        target: "getRepository",
+        ...data
+      };
+    }
+  });
+}
+
+// src/tools/update-pull-request.ts
+import {
+  definePluginTool as definePluginTool6,
+  PluginToolInputError as PluginToolInputError7,
+  pluginToolOutputSchema as pluginToolOutputSchema6
+} from "@sentry/junior-plugin-api";
+import { z as z6 } from "zod";
+import { subscribableResourceSchema as subscribableResourceSchema6 } from "@sentry/junior-plugin-api";
+var inputSchema4 = z6.object({
+  repo: z6.string().describe('Repository in "owner/name" format.'),
+  number: z6.number().int().positive().describe("Pull request number."),
+  title: z6.string().trim().min(1).optional().describe("Replacement pull request title."),
+  body: z6.string().optional().describe(
     "Replacement pull request body. Junior appends requester attribution and the conversation footer."
   ),
-  base: z5.string().trim().min(1).optional().describe("Replacement base branch."),
-  state: z5.enum(["open", "closed"]).optional().describe("Replacement pull request state.")
+  base: z6.string().trim().min(1).optional().describe("Replacement base branch."),
+  state: z6.enum(["open", "closed"]).optional().describe("Replacement pull request state.")
 }).strict().refine(
   ({ title, body, base, state }) => title !== void 0 || body !== void 0 || base !== void 0 || state !== void 0,
   { message: "At least one pull request field must be provided." }
 );
-var pullRequestSchema2 = z5.object({
-  base: z5.string(),
-  body: z5.string().nullable(),
-  draft: z5.boolean(),
-  number: z5.number(),
-  state: z5.string(),
-  subscribable: subscribableResourceSchema4.optional(),
-  title: z5.string(),
-  url: z5.string()
+var pullRequestSchema2 = z6.object({
+  base: z6.string(),
+  body: z6.string().nullable(),
+  draft: z6.boolean(),
+  number: z6.number(),
+  state: z6.string(),
+  subscribable: subscribableResourceSchema6.optional(),
+  title: z6.string(),
+  url: z6.string()
 });
-var outputSchema3 = pluginToolResultSchema5.extend({
-  ok: z5.literal(true),
-  status: z5.literal("success"),
-  target: z5.literal("updatePullRequest"),
-  data: pullRequestSchema2,
+var outputSchema4 = pluginToolOutputSchema6.extend({
+  target: z6.literal("updatePullRequest"),
   ...pullRequestSchema2.shape
 });
 function nonEmptyString4(value, name) {
   if (!value?.trim()) {
-    throw new PluginToolInputError6(`${name} is required`);
+    throw new PluginToolInputError7(`${name} is required`);
   }
   return value.trim();
 }
-function parseRepo5(value) {
+function parseRepo6(value) {
   const parts = value.split("/").map((part) => part.trim());
   if (parts.length !== 2 || !parts[0] || !parts[1]) {
-    throw new PluginToolInputError6('repo must use "owner/name" format');
+    throw new PluginToolInputError7('repo must use "owner/name" format');
   }
   return { owner: parts[0], name: parts[1], ref: `${parts[0]}/${parts[1]}` };
 }
-async function readJson3(response) {
+async function readJson4(response) {
   const text2 = await response.text();
   if (!text2) return void 0;
   try {
@@ -1274,7 +1370,7 @@ function githubApiErrorMessage3(payload) {
   return "GitHub request failed";
 }
 function createGitHubUpdatePullRequestTool(ctx) {
-  return definePluginTool5({
+  return definePluginTool6({
     annotations: {
       destructiveHint: true,
       idempotentHint: true,
@@ -1282,18 +1378,18 @@ function createGitHubUpdatePullRequestTool(ctx) {
       readOnlyHint: false
     },
     description: "Update an existing GitHub pull request's title, body, base branch, or open/closed state. Use this instead of raw GitHub API calls when changing PR metadata.",
-    inputSchema: inputSchema3,
-    outputSchema: outputSchema3,
+    inputSchema: inputSchema4,
+    outputSchema: outputSchema4,
     async execute(input) {
-      const parsedInput = inputSchema3.safeParse(input);
+      const parsedInput = inputSchema4.safeParse(input);
       if (!parsedInput.success) {
-        throw new PluginToolInputError6(
+        throw new PluginToolInputError7(
           "Invalid GitHub updatePullRequest input.",
           { cause: parsedInput.error }
         );
       }
       const update = parsedInput.data;
-      const repo = parseRepo5(update.repo);
+      const repo = parseRepo6(update.repo);
       const payload = {
         ...update.title !== void 0 ? { title: update.title } : {},
         ...update.body !== void 0 ? {
@@ -1322,25 +1418,25 @@ function createGitHubUpdatePullRequestTool(ctx) {
           }
         )
       });
-      const parsed = await readJson3(response);
+      const parsed = await readJson4(response);
       if (!response.ok) {
         throw new Error(
           `GitHub pull request update failed with HTTP ${response.status}: ${githubApiErrorMessage3(parsed)}`
         );
       }
-      const providerResult = z5.object({
-        base: z5.object({ ref: z5.string() }),
-        body: z5.string().nullable().optional().default(null),
-        draft: z5.boolean(),
-        html_url: z5.string(),
-        number: z5.number(),
-        state: z5.string(),
-        title: z5.string()
+      const providerResult = z6.object({
+        base: z6.object({ ref: z6.string() }),
+        body: z6.string().nullable().optional().default(null),
+        draft: z6.boolean(),
+        html_url: z6.string(),
+        number: z6.number(),
+        state: z6.string(),
+        title: z6.string()
       }).parse(parsed);
-      const subscribable = gitHubPullRequestSubscribable({
+      const subscribable = ctx.resourceEvents.canSubscribe ? gitHubPullRequestSubscribable({
         number: providerResult.number,
         repo: repo.ref
-      });
+      }) : void 0;
       const data = {
         base: providerResult.base.ref,
         body: providerResult.body,
@@ -1352,10 +1448,7 @@ function createGitHubUpdatePullRequestTool(ctx) {
         url: providerResult.html_url
       };
       return {
-        ok: true,
-        status: "success",
         target: "updatePullRequest",
-        data,
         ...data
       };
     }
@@ -1369,6 +1462,7 @@ function createGitHubTools(ctx) {
     createPullRequest: createGitHubPullRequestTool(ctx),
     getDeployment: createGitHubGetDeploymentTool(ctx),
     getPullRequest: createGitHubGetPullRequestTool(ctx),
+    getRepository: createGitHubGetRepositoryTool(ctx),
     updatePullRequest: createGitHubUpdatePullRequestTool(ctx)
   };
 }
@@ -1378,7 +1472,7 @@ import { createHmac, timingSafeEqual } from "crypto";
 
 // src/issue-outcomes/store.ts
 import { and, eq, lte, sql as sql2 } from "drizzle-orm";
-import { z as z7 } from "zod";
+import { z as z8 } from "zod";
 
 // src/db/schema.ts
 import { sql } from "drizzle-orm";
@@ -1390,18 +1484,18 @@ import {
   text,
   timestamp
 } from "drizzle-orm/pg-core";
-import { z as z6 } from "zod";
-var githubPullRequestStateSchema = z6.enum([
+import { z as z7 } from "zod";
+var githubPullRequestStateSchema = z7.enum([
   "closed_unmerged",
   "merged",
   "open"
 ]);
-var githubPullRequestCommitCompositionSchema = z6.enum([
+var githubPullRequestCommitCompositionSchema = z7.enum([
   "junior_only",
   "mixed"
 ]);
-var githubIssueStateSchema = z6.enum(["closed", "open"]);
-var githubIssueStateReasonSchema = z6.enum([
+var githubIssueStateSchema = z7.enum(["closed", "open"]);
+var githubIssueStateReasonSchema = z7.enum([
   "completed",
   "duplicate",
   "not_planned",
@@ -1470,21 +1564,21 @@ var juniorGitHubPullRequestIssues = pgTable(
 );
 
 // src/issue-outcomes/store.ts
-var githubIssueOutcomeInputSchema = z7.object({
-  candidateOwned: z7.boolean(),
-  closedAt: z7.date().optional(),
-  issueId: z7.string().min(1),
-  number: z7.number().int().positive(),
-  openedAt: z7.date(),
-  repositoryFullName: z7.string().min(1),
-  repositoryId: z7.string().min(1),
+var githubIssueOutcomeInputSchema = z8.object({
+  candidateOwned: z8.boolean(),
+  closedAt: z8.date().optional(),
+  issueId: z8.string().min(1),
+  number: z8.number().int().positive(),
+  openedAt: z8.date(),
+  repositoryFullName: z8.string().min(1),
+  repositoryId: z8.string().min(1),
   state: githubIssueStateSchema,
   stateReason: githubIssueStateReasonSchema.optional(),
-  updatedAt: z7.date()
+  updatedAt: z8.date()
 }).strict();
-var githubIssueConversationsInputSchema = z7.object({
-  conversationIds: z7.array(z7.string().min(1)).min(1),
-  issueId: z7.string().min(1)
+var githubIssueConversationsInputSchema = z8.object({
+  conversationIds: z8.array(z8.string().min(1)).min(1),
+  issueId: z8.string().min(1)
 }).strict();
 function projectionValues(input) {
   return {
@@ -1537,32 +1631,32 @@ async function recordGitHubIssueConversations(db, input) {
 
 // src/pull-request-outcomes/store.ts
 import { and as and2, eq as eq2, lte as lte2, sql as sql3 } from "drizzle-orm";
-import { z as z8 } from "zod";
-var githubPullRequestOutcomeInputSchema = z8.object({
-  candidateOwned: z8.boolean(),
-  closedAt: z8.date().optional(),
+import { z as z9 } from "zod";
+var githubPullRequestOutcomeInputSchema = z9.object({
+  candidateOwned: z9.boolean(),
+  closedAt: z9.date().optional(),
   commitComposition: githubPullRequestCommitCompositionSchema.optional(),
-  mergedAt: z8.date().optional(),
-  number: z8.number().int().positive(),
-  openedAt: z8.date(),
-  pullRequestId: z8.string().min(1),
-  repositoryFullName: z8.string().min(1),
-  repositoryId: z8.string().min(1),
+  mergedAt: z9.date().optional(),
+  number: z9.number().int().positive(),
+  openedAt: z9.date(),
+  pullRequestId: z9.string().min(1),
+  repositoryFullName: z9.string().min(1),
+  repositoryId: z9.string().min(1),
   state: githubPullRequestStateSchema,
-  updatedAt: z8.date()
+  updatedAt: z9.date()
 }).strict();
-var githubPullRequestConversationsInputSchema = z8.object({
-  conversationIds: z8.array(z8.string().min(1)).min(1),
-  pullRequestId: z8.string().min(1)
+var githubPullRequestConversationsInputSchema = z9.object({
+  conversationIds: z9.array(z9.string().min(1)).min(1),
+  pullRequestId: z9.string().min(1)
 }).strict();
-var githubPullRequestLinkedIssuesInputSchema = z8.object({
-  linkedIssues: z8.array(
-    z8.object({
-      number: z8.number().int().positive(),
-      repositoryFullName: z8.string().min(1)
+var githubPullRequestLinkedIssuesInputSchema = z9.object({
+  linkedIssues: z9.array(
+    z9.object({
+      number: z9.number().int().positive(),
+      repositoryFullName: z9.string().min(1)
     }).strict()
   ).min(1),
-  pullRequestId: z8.string().min(1)
+  pullRequestId: z9.string().min(1)
 }).strict();
 function projectionValues2(input) {
   return {
@@ -1652,7 +1746,7 @@ async function recordGitHubPullRequestLinkedIssues(db, input) {
 }
 
 // src/webhooks/issue-outcome.ts
-import { z as z9 } from "zod";
+import { z as z10 } from "zod";
 
 // src/webhooks/ownership.ts
 var GITHUB_NOREPLY_DOMAIN = "users.noreply.github.com";
@@ -1669,38 +1763,38 @@ function botLoginFromEmail(value) {
 }
 
 // src/webhooks/issue-outcome.ts
-var canonicalIssueOutcomeSchema = z9.object({
-  action: z9.enum(["opened", "closed", "reopened"]),
-  issue: z9.object({
-    body: z9.string().nullable().optional(),
-    closed_at: z9.string().nullable().optional(),
-    created_at: z9.string(),
-    id: z9.number().int().positive(),
-    number: z9.number().int().positive(),
+var canonicalIssueOutcomeSchema = z10.object({
+  action: z10.enum(["opened", "closed", "reopened"]),
+  issue: z10.object({
+    body: z10.string().nullable().optional(),
+    closed_at: z10.string().nullable().optional(),
+    created_at: z10.string(),
+    id: z10.number().int().positive(),
+    number: z10.number().int().positive(),
     state_reason: githubIssueStateReasonSchema.nullable().optional(),
-    updated_at: z9.string(),
-    user: z9.object({ login: z9.string().min(1) }).strict()
+    updated_at: z10.string(),
+    user: z10.object({ login: z10.string().min(1) }).strict()
   }).strict(),
-  repository: z9.object({
-    full_name: z9.string().min(1),
-    id: z9.number().int().positive()
+  repository: z10.object({
+    full_name: z10.string().min(1),
+    id: z10.number().int().positive()
   }).strict()
 }).strict();
-var issueOutcomeSchema = z9.object({
-  action: z9.enum(["opened", "closed", "reopened"]),
-  issue: z9.object({
-    body: z9.string().nullable().optional(),
-    closed_at: z9.string().nullable().optional(),
-    created_at: z9.string(),
-    id: z9.number().int().positive(),
-    number: z9.number().int().positive(),
+var issueOutcomeSchema = z10.object({
+  action: z10.enum(["opened", "closed", "reopened"]),
+  issue: z10.object({
+    body: z10.string().nullable().optional(),
+    closed_at: z10.string().nullable().optional(),
+    created_at: z10.string(),
+    id: z10.number().int().positive(),
+    number: z10.number().int().positive(),
     state_reason: githubIssueStateReasonSchema.nullable().optional(),
-    updated_at: z9.string(),
-    user: z9.object({ login: z9.string().min(1) }).passthrough()
+    updated_at: z10.string(),
+    user: z10.object({ login: z10.string().min(1) }).passthrough()
   }).passthrough(),
-  repository: z9.object({
-    full_name: z9.string().min(1),
-    id: z9.number().int().positive()
+  repository: z10.object({
+    full_name: z10.string().min(1),
+    id: z10.number().int().positive()
   }).passthrough()
 }).passthrough().transform(
   (provider) => canonicalIssueOutcomeSchema.parse({
@@ -1721,7 +1815,7 @@ var issueOutcomeSchema = z9.object({
     }
   })
 );
-var issueLifecycleActionSchema = z9.object({ action: z9.string() }).passthrough();
+var issueLifecycleActionSchema = z10.object({ action: z10.string() }).passthrough();
 function timestamp2(value) {
   if (!value) return void 0;
   const parsed = new Date(value);
@@ -1767,21 +1861,21 @@ function normalizeGitHubIssueOutcome(args) {
     updatedAt
   };
 }
-var canonicalIssueConversationSchema = z9.object({
-  issue: z9.object({
-    body: z9.string().nullable().optional(),
-    id: z9.number().int().positive(),
-    user: z9.object({ login: z9.string().min(1) }).strict()
+var canonicalIssueConversationSchema = z10.object({
+  issue: z10.object({
+    body: z10.string().nullable().optional(),
+    id: z10.number().int().positive(),
+    user: z10.object({ login: z10.string().min(1) }).strict()
   }).strict(),
-  sender: z9.object({ login: z9.string().min(1) }).strict().optional()
+  sender: z10.object({ login: z10.string().min(1) }).strict().optional()
 }).strict();
-var issueConversationSchema = z9.object({
-  issue: z9.object({
-    body: z9.string().nullable().optional(),
-    id: z9.number().int().positive(),
-    user: z9.object({ login: z9.string().min(1) }).passthrough()
+var issueConversationSchema = z10.object({
+  issue: z10.object({
+    body: z10.string().nullable().optional(),
+    id: z10.number().int().positive(),
+    user: z10.object({ login: z10.string().min(1) }).passthrough()
   }).passthrough(),
-  sender: z9.object({ login: z9.string().min(1) }).passthrough().optional()
+  sender: z10.object({ login: z10.string().min(1) }).passthrough().optional()
 }).passthrough().transform(
   (provider) => canonicalIssueConversationSchema.parse({
     issue: {
@@ -1808,41 +1902,41 @@ function normalizeGitHubIssueConversations(args) {
 }
 
 // src/webhooks/pull-request-outcome.ts
-import { z as z10 } from "zod";
-var canonicalPullRequestOutcomeSchema = z10.object({
-  action: z10.enum(["opened", "closed", "reopened"]),
-  pull_request: z10.object({
-    body: z10.string().nullable().optional(),
-    closed_at: z10.string().nullable().optional(),
-    created_at: z10.string(),
-    id: z10.number().int().positive(),
-    merged: z10.boolean(),
-    merged_at: z10.string().nullable().optional(),
-    number: z10.number().int().positive(),
-    updated_at: z10.string(),
-    user: z10.object({ login: z10.string().min(1) }).strict()
+import { z as z11 } from "zod";
+var canonicalPullRequestOutcomeSchema = z11.object({
+  action: z11.enum(["opened", "closed", "reopened"]),
+  pull_request: z11.object({
+    body: z11.string().nullable().optional(),
+    closed_at: z11.string().nullable().optional(),
+    created_at: z11.string(),
+    id: z11.number().int().positive(),
+    merged: z11.boolean(),
+    merged_at: z11.string().nullable().optional(),
+    number: z11.number().int().positive(),
+    updated_at: z11.string(),
+    user: z11.object({ login: z11.string().min(1) }).strict()
   }).strict(),
-  repository: z10.object({
-    full_name: z10.string().min(1),
-    id: z10.number().int().positive()
+  repository: z11.object({
+    full_name: z11.string().min(1),
+    id: z11.number().int().positive()
   }).strict()
 }).strict();
-var pullRequestOutcomeSchema = z10.object({
-  action: z10.enum(["opened", "closed", "reopened"]),
-  pull_request: z10.object({
-    body: z10.string().nullable().optional(),
-    closed_at: z10.string().nullable().optional(),
-    created_at: z10.string(),
-    id: z10.number().int().positive(),
-    merged: z10.boolean(),
-    merged_at: z10.string().nullable().optional(),
-    number: z10.number().int().positive(),
-    updated_at: z10.string(),
-    user: z10.object({ login: z10.string().min(1) }).passthrough()
+var pullRequestOutcomeSchema = z11.object({
+  action: z11.enum(["opened", "closed", "reopened"]),
+  pull_request: z11.object({
+    body: z11.string().nullable().optional(),
+    closed_at: z11.string().nullable().optional(),
+    created_at: z11.string(),
+    id: z11.number().int().positive(),
+    merged: z11.boolean(),
+    merged_at: z11.string().nullable().optional(),
+    number: z11.number().int().positive(),
+    updated_at: z11.string(),
+    user: z11.object({ login: z11.string().min(1) }).passthrough()
   }).passthrough(),
-  repository: z10.object({
-    full_name: z10.string().min(1),
-    id: z10.number().int().positive()
+  repository: z11.object({
+    full_name: z11.string().min(1),
+    id: z11.number().int().positive()
   }).passthrough()
 }).passthrough().transform(
   (provider) => canonicalPullRequestOutcomeSchema.parse({
@@ -1864,24 +1958,24 @@ var pullRequestOutcomeSchema = z10.object({
     }
   })
 );
-var pullRequestLifecycleActionSchema = z10.object({ action: z10.string() }).passthrough();
-var canonicalPullRequestConversationSchema = z10.object({
-  pull_request: z10.object({
-    body: z10.string().nullable().optional(),
-    id: z10.number().int().positive(),
-    user: z10.object({ login: z10.string().min(1) }).strict()
+var pullRequestLifecycleActionSchema = z11.object({ action: z11.string() }).passthrough();
+var canonicalPullRequestConversationSchema = z11.object({
+  pull_request: z11.object({
+    body: z11.string().nullable().optional(),
+    id: z11.number().int().positive(),
+    user: z11.object({ login: z11.string().min(1) }).strict()
   }).strict(),
-  repository: z10.object({ full_name: z10.string().min(1) }).strict(),
-  sender: z10.object({ login: z10.string().min(1) }).strict()
+  repository: z11.object({ full_name: z11.string().min(1) }).strict(),
+  sender: z11.object({ login: z11.string().min(1) }).strict()
 }).strict();
-var pullRequestConversationSchema = z10.object({
-  pull_request: z10.object({
-    body: z10.string().nullable().optional(),
-    id: z10.number().int().positive(),
-    user: z10.object({ login: z10.string().min(1) }).passthrough()
+var pullRequestConversationSchema = z11.object({
+  pull_request: z11.object({
+    body: z11.string().nullable().optional(),
+    id: z11.number().int().positive(),
+    user: z11.object({ login: z11.string().min(1) }).passthrough()
   }).passthrough(),
-  repository: z10.object({ full_name: z10.string().min(1) }).passthrough(),
-  sender: z10.object({ login: z10.string().min(1) }).passthrough()
+  repository: z11.object({ full_name: z11.string().min(1) }).passthrough(),
+  sender: z11.object({ login: z11.string().min(1) }).passthrough()
 }).passthrough().transform(
   (provider) => canonicalPullRequestConversationSchema.parse({
     pull_request: {
@@ -1986,6 +2080,20 @@ function parseJson(body) {
     return void 0;
   }
 }
+function parseInstallationId(value) {
+  const parsed = typeof value === "string" && /^\d+$/.test(value) ? Number(value) : value;
+  return typeof parsed === "number" && Number.isSafeInteger(parsed) && parsed > 0 ? parsed : void 0;
+}
+function webhookInstallationId(body) {
+  if (!body || typeof body !== "object" || Array.isArray(body)) {
+    return void 0;
+  }
+  const installation = body.installation;
+  if (!installation || typeof installation !== "object" || Array.isArray(installation)) {
+    return void 0;
+  }
+  return parseInstallationId(installation.id);
+}
 function createGitHubWebhookRoute(args) {
   return {
     method: "POST",
@@ -2002,6 +2110,15 @@ function createGitHubWebhookRoute(args) {
         return new Response("Malformed GitHub webhook", { status: 400 });
       }
       const body = parseJson(rawBody);
+      const installationId = parseInstallationId(args.installationId());
+      if (!installationId) {
+        return new Response("GitHub webhook installation is not configured", {
+          status: 503
+        });
+      }
+      if (webhookInstallationId(body) !== installationId) {
+        return new Response("Ignored", { status: 202 });
+      }
       const botEmail = args.botEmail();
       const pullRequestOutcome = eventName === "pull_request" ? normalizeGitHubPullRequestOutcome({ body, botEmail }) : void 0;
       const issueOutcome = eventName === "issues" ? normalizeGitHubIssueOutcome({ body, botEmail }) : void 0;
@@ -2066,18 +2183,18 @@ function createGitHubWebhookRoute(args) {
 
 // src/outcomes/report.ts
 import { sql as sql5 } from "drizzle-orm";
-import { z as z12 } from "zod";
+import { z as z13 } from "zod";
 
 // src/outcomes/cost.ts
 import { sql as sql4 } from "drizzle-orm";
-import { z as z11 } from "zod";
+import { z as z12 } from "zod";
 var DAY_MS = 24 * 60 * 60 * 1e3;
-var costWindowSchema = z11.object({
-  days: z11.number().int().positive(),
-  issueCostUsd: z11.number().nonnegative().nullable(),
-  medianIssueCostUsd: z11.number().nonnegative().nullable(),
-  medianPullRequestCostUsd: z11.number().nonnegative().nullable(),
-  pullRequestCostUsd: z11.number().nonnegative().nullable()
+var costWindowSchema = z12.object({
+  days: z12.number().int().positive(),
+  issueCostUsd: z12.number().nonnegative().nullable(),
+  medianIssueCostUsd: z12.number().nonnegative().nullable(),
+  medianPullRequestCostUsd: z12.number().nonnegative().nullable(),
+  pullRequestCostUsd: z12.number().nonnegative().nullable()
 }).strict().transform((row) => ({
   days: row.days,
   issueCostUsd: row.issueCostUsd ?? void 0,
@@ -2085,12 +2202,12 @@ var costWindowSchema = z11.object({
   medianPullRequestCostUsd: row.medianPullRequestCostUsd ?? void 0,
   pullRequestCostUsd: row.pullRequestCostUsd ?? void 0
 }));
-var repositoryCostSchema = z11.object({
-  issueCostUsd: z11.number().nonnegative().nullable(),
-  medianIssueCostUsd: z11.number().nonnegative().nullable(),
-  medianPullRequestCostUsd: z11.number().nonnegative().nullable(),
-  pullRequestCostUsd: z11.number().nonnegative().nullable(),
-  repository: z11.string().min(1)
+var repositoryCostSchema = z12.object({
+  issueCostUsd: z12.number().nonnegative().nullable(),
+  medianIssueCostUsd: z12.number().nonnegative().nullable(),
+  medianPullRequestCostUsd: z12.number().nonnegative().nullable(),
+  pullRequestCostUsd: z12.number().nonnegative().nullable(),
+  repository: z12.string().min(1)
 }).strict().transform((row) => ({
   issueCostUsd: row.issueCostUsd ?? void 0,
   medianIssueCostUsd: row.medianIssueCostUsd ?? void 0,
@@ -2295,7 +2412,7 @@ async function aggregateGitHubCostWindows(args) {
     INNER JOIN issue_window ON issue_window.days = pull_request_window.days
     ORDER BY pull_request_window.days
   `);
-  return z11.array(costWindowSchema).parse(queryRows(result));
+  return z12.array(costWindowSchema).parse(queryRows(result));
 }
 async function aggregateGitHubRepositoryCosts(args) {
   if (!await hasConversationUsageTable(args.db)) {
@@ -2393,7 +2510,7 @@ async function aggregateGitHubRepositoryCosts(args) {
       ON issue_totals.repository = repositories.repository
     ORDER BY "repository" ASC
   `);
-  return z11.array(repositoryCostSchema).parse(queryRows(result));
+  return z12.array(repositoryCostSchema).parse(queryRows(result));
 }
 function formatCostUsd(value) {
   if (value === void 0) return "\u2014";
@@ -2408,12 +2525,12 @@ function formatCostUsd(value) {
 // src/outcomes/report.ts
 var DAY_MS2 = 24 * 60 * 60 * 1e3;
 var WINDOWS = [7, 30, 90];
-var pullRequestStatsSchema = z12.object({
-  closed: z12.number().int().nonnegative(),
-  created: z12.number().int().nonnegative(),
-  days: z12.number().int().positive(),
-  medianMergeTimeMs: z12.number().nonnegative().nullable(),
-  merged: z12.number().int().nonnegative()
+var pullRequestStatsSchema = z13.object({
+  closed: z13.number().int().nonnegative(),
+  created: z13.number().int().nonnegative(),
+  days: z13.number().int().positive(),
+  medianMergeTimeMs: z13.number().nonnegative().nullable(),
+  merged: z13.number().int().nonnegative()
 }).strict().transform((row) => {
   const terminal = row.merged + row.closed;
   return {
@@ -2422,12 +2539,12 @@ var pullRequestStatsSchema = z12.object({
     mergeRate: terminal > 0 ? row.merged / terminal : void 0
   };
 });
-var pullRequestRepositoryStatsSchema = z12.object({
-  closed: z12.number().int().nonnegative(),
-  created: z12.number().int().nonnegative(),
-  juniorOnly: z12.number().int().nonnegative(),
-  merged: z12.number().int().nonnegative(),
-  repository: z12.string().min(1)
+var pullRequestRepositoryStatsSchema = z13.object({
+  closed: z13.number().int().nonnegative(),
+  created: z13.number().int().nonnegative(),
+  juniorOnly: z13.number().int().nonnegative(),
+  merged: z13.number().int().nonnegative(),
+  repository: z13.string().min(1)
 }).strict().transform((row) => {
   const terminal = row.merged + row.closed;
   return {
@@ -2435,33 +2552,33 @@ var pullRequestRepositoryStatsSchema = z12.object({
     mergeRate: terminal > 0 ? row.merged / terminal : void 0
   };
 });
-var issueStatsSchema = z12.object({
-  closedCompleted: z12.number().int().nonnegative(),
-  closedDuplicate: z12.number().int().nonnegative(),
-  closedNotPlanned: z12.number().int().nonnegative(),
-  closedUnknown: z12.number().int().nonnegative(),
-  created: z12.number().int().nonnegative(),
-  days: z12.number().int().positive(),
-  medianCloseTimeMs: z12.number().nonnegative().nullable()
+var issueStatsSchema = z13.object({
+  closedCompleted: z13.number().int().nonnegative(),
+  closedDuplicate: z13.number().int().nonnegative(),
+  closedNotPlanned: z13.number().int().nonnegative(),
+  closedUnknown: z13.number().int().nonnegative(),
+  created: z13.number().int().nonnegative(),
+  days: z13.number().int().positive(),
+  medianCloseTimeMs: z13.number().nonnegative().nullable()
 }).strict().transform((row) => ({
   ...row,
   medianCloseTimeMs: row.medianCloseTimeMs ?? void 0
 }));
-var pullRequestDaySchema = z12.object({
-  created: z12.number().int().nonnegative(),
-  date: z12.string().date()
+var pullRequestDaySchema = z13.object({
+  created: z13.number().int().nonnegative(),
+  date: z13.string().date()
 }).strict();
-var issueDaySchema = z12.object({
-  created: z12.number().int().nonnegative(),
-  date: z12.string().date()
+var issueDaySchema = z13.object({
+  created: z13.number().int().nonnegative(),
+  date: z13.string().date()
 }).strict();
-var issueRepositoryStatsSchema = z12.object({
-  closedCompleted: z12.number().int().nonnegative(),
-  closedDuplicate: z12.number().int().nonnegative(),
-  closedNotPlanned: z12.number().int().nonnegative(),
-  closedUnknown: z12.number().int().nonnegative(),
-  created: z12.number().int().nonnegative(),
-  repository: z12.string().min(1)
+var issueRepositoryStatsSchema = z13.object({
+  closedCompleted: z13.number().int().nonnegative(),
+  closedDuplicate: z13.number().int().nonnegative(),
+  closedNotPlanned: z13.number().int().nonnegative(),
+  closedUnknown: z13.number().int().nonnegative(),
+  created: z13.number().int().nonnegative(),
+  repository: z13.string().min(1)
 }).strict();
 function queryRows2(result) {
   if (typeof result !== "object" || result === null || !("rows" in result) || !Array.isArray(result.rows)) {
@@ -2525,7 +2642,7 @@ async function aggregatePullRequestWindows(args) {
     GROUP BY windows.days
     ORDER BY windows.days
   `);
-  return z12.array(pullRequestStatsSchema).parse(queryRows2(result));
+  return z13.array(pullRequestStatsSchema).parse(queryRows2(result));
 }
 async function aggregatePullRequestDays(args) {
   const end = new Date(args.nowMs);
@@ -2553,7 +2670,7 @@ async function aggregatePullRequestDays(args) {
     LEFT JOIN daily ON daily.day = days.day
     ORDER BY days.day
   `);
-  return z12.array(pullRequestDaySchema).parse(queryRows2(result));
+  return z13.array(pullRequestDaySchema).parse(queryRows2(result));
 }
 async function aggregatePullRequestRepositories(args) {
   const start = new Date(args.nowMs - 30 * DAY_MS2);
@@ -2583,7 +2700,7 @@ async function aggregatePullRequestRepositories(args) {
     ORDER BY "merged" DESC, "created" DESC, "repository" ASC
     LIMIT 25
   `);
-  return z12.array(pullRequestRepositoryStatsSchema).parse(queryRows2(result));
+  return z13.array(pullRequestRepositoryStatsSchema).parse(queryRows2(result));
 }
 async function aggregateIssueWindows(args) {
   const starts = WINDOWS.map(
@@ -2652,7 +2769,7 @@ async function aggregateIssueWindows(args) {
     GROUP BY windows.days
     ORDER BY windows.days
   `);
-  return z12.array(issueStatsSchema).parse(queryRows2(result));
+  return z13.array(issueStatsSchema).parse(queryRows2(result));
 }
 async function aggregateIssueDays(args) {
   const end = new Date(args.nowMs);
@@ -2680,7 +2797,7 @@ async function aggregateIssueDays(args) {
     LEFT JOIN daily ON daily.day = days.day
     ORDER BY days.day
   `);
-  return z12.array(issueDaySchema).parse(queryRows2(result));
+  return z13.array(issueDaySchema).parse(queryRows2(result));
 }
 async function aggregateIssueRepositories(args) {
   const start = new Date(args.nowMs - 30 * DAY_MS2);
@@ -2717,7 +2834,7 @@ async function aggregateIssueRepositories(args) {
     ORDER BY "created" DESC, "closedCompleted" DESC, "repository" ASC
     LIMIT 25
   `);
-  return z12.array(issueRepositoryStatsSchema).parse(queryRows2(result));
+  return z13.array(issueRepositoryStatsSchema).parse(queryRows2(result));
 }
 function formatPercent(value) {
   return value === void 0 ? "\u2014" : `${Math.round(value * 100)}%`;
@@ -2881,18 +2998,18 @@ async function buildGitHubOutcomeReport(args) {
 }
 
 // src/pull-request-outcomes/commit-composition.ts
-import { z as z13 } from "zod";
-var canonicalCommitSchema = z13.object({
-  authorEmail: z13.string().nullable(),
-  authorLogin: z13.string().nullable()
+import { z as z14 } from "zod";
+var canonicalCommitSchema = z14.object({
+  authorEmail: z14.string().nullable(),
+  authorLogin: z14.string().nullable()
 }).strict();
-var providerCommitSchema = z13.object({
-  author: z13.object({ login: z13.string() }).passthrough().nullable(),
-  commit: z13.object({
-    author: z13.object({ email: z13.string() }).passthrough().nullable()
+var providerCommitSchema = z14.object({
+  author: z14.object({ login: z14.string() }).passthrough().nullable(),
+  commit: z14.object({
+    author: z14.object({ email: z14.string() }).passthrough().nullable()
   }).passthrough()
 }).passthrough();
-var commitPageSchema = z13.array(providerCommitSchema).transform(
+var commitPageSchema = z14.array(providerCommitSchema).transform(
   (commits) => commits.map(
     (commit) => canonicalCommitSchema.parse({
       authorEmail: commit.commit.author?.email ?? null,
@@ -4090,6 +4207,32 @@ function githubPlugin(options = {}) {
   const userScope = userScopes.length ? userScopes.join(" ") : void 0;
   return defineJuniorPlugin({
     packageName: "@sentry/junior-github",
+    resourceEvents: {
+      resourceTypes: [
+        {
+          type: "deployment_source",
+          supportedEvents: [...GITHUB_DEPLOYMENT_EVENTS],
+          suggestedEvents: [...GITHUB_DEPLOYMENT_SUGGESTED_EVENTS]
+        },
+        {
+          type: "issue",
+          supportedEvents: [...GITHUB_ISSUE_EVENTS],
+          suggestedEvents: [...GITHUB_ISSUE_SUGGESTED_EVENTS]
+        },
+        {
+          type: "pull_request",
+          supportedEvents: [...GITHUB_PULL_REQUEST_EVENTS],
+          suggestedEvents: [...GITHUB_PULL_REQUEST_SUGGESTED_EVENTS]
+        },
+        {
+          type: "repository",
+          supportedEvents: [...GITHUB_ISSUE_EVENTS],
+          suggestedEvents: ["issue.opened", ...GITHUB_ISSUE_SUGGESTED_EVENTS]
+        }
+      ],
+      isEnabled: () => Boolean(readEnv("GITHUB_WEBHOOK_SECRET")),
+      normalizeIdentifier: (identifier) => identifier.toLowerCase()
+    },
     manifest: {
       name: "github",
       displayName: "GitHub",
@@ -4168,6 +4311,7 @@ function githubPlugin(options = {}) {
               });
             },
             db: ctx.db,
+            installationId: () => readEnv(installationIdEnv),
             log: ctx.log,
             resourceEvents: ctx.resourceEvents,
             webhookSecret: () => readEnv("GITHUB_WEBHOOK_SECRET")