@sentry/junior-github 0.181.1 → 0.182.0

package/dist/plugin.d.ts

@@ -1,7 +1,7 @@
 /**
  * GitHub plugin runtime boundary.
  *
- * This module composes GitHub hooks and owns GitHub egress policy.
+ * This module composes GitHub hooks, resource events, and credentials.
  */
 import { type PluginRegistration } from "@sentry/junior-plugin-api";
 import { type GitHubAppPermissions } from "./permissions.js";

package/dist/resource-events/pull-request.d.ts

@@ -1,4 +1,4 @@
-import type { SubscribableResource } from "@sentry/junior-plugin-api";
+import { type SubscribableResource } from "@sentry/junior-plugin-api";
 export declare const GITHUB_PULL_REQUEST_EVENTS: readonly ["pull_request.checks.failed", "pull_request.checks.recovered", "pull_request.comment.created", "pull_request.opened", "pull_request.ready_for_review", "pull_request.review.approved", "pull_request.review.changes_requested", "pull_request.review.commented", "pull_request.review_comment.created", "pull_request.merged", "pull_request.closed_unmerged"];
 export type GitHubPullRequestEvent = (typeof GITHUB_PULL_REQUEST_EVENTS)[number];
 /** App-configured pull request resource event behavior. */
@@ -14,6 +14,12 @@ export interface GitHubPullRequestSubscriptionConfig {
     intent: string;
 }
 export declare const GITHUB_PULL_REQUEST_SUGGESTED_EVENTS: readonly ["pull_request.checks.failed", "pull_request.comment.created", "pull_request.ready_for_review", "pull_request.review.changes_requested", "pull_request.review.commented", "pull_request.review_comment.created", "pull_request.merged", "pull_request.closed_unmerged"];
+/** Exact values GitHub may set on pull request event data. Missing keys do not match. */
+export declare const GITHUB_PULL_REQUEST_MATCH_FIELDS: Record<string, {
+    kind: "string" | "number" | "boolean";
+    description: string;
+    enum?: string[] | undefined;
+}>;
 /** Build the stable pull request identity shared by tools and webhooks. */
 export declare function gitHubPullRequestResource(input: {
     number: number;

package/dist/testing.js

@@ -1,6 +1,6 @@
 import {
   normalizeGitHubResourceEvents
-} from "./chunk-GXZVNEIB.js";
+} from "./chunk-JROTRF27.js";
 export {
   normalizeGitHubResourceEvents
 };

package/dist/webhooks/check-suite.d.ts

@@ -0,0 +1,69 @@
+/**
+ * GitHub check suite resource events.
+ */
+import type { ResourceEventInput } from "@sentry/junior-plugin-api";
+export type GitHubFailingCheck = {
+    checkRunId: number;
+    conclusion: string;
+    htmlUrl?: string;
+    name: string;
+};
+/** Pull request values filled in when the check suite body omits them. */
+export type GitHubCheckSuitePullRequestFacts = {
+    authorEmail?: string;
+    authorUsername?: string;
+    isDraft?: boolean;
+};
+/** Optional values for one check suite event. */
+export type GitHubCheckSuiteFacts = {
+    failingChecks?: GitHubFailingCheck[];
+    /** Pull request values by number when GitHub omitted them on the suite. */
+    pullRequestFactsByNumber?: Record<number, GitHubCheckSuitePullRequestFacts>;
+};
+/** Build a browser URL for one check suite. GitHub does not send html_url. */
+export declare function buildCheckSuiteUrl(args: {
+    checkSuiteId: number;
+    headSha: string;
+    repo: string;
+}): string;
+/** Build the trusted data and summary for one check-suite PR event. */
+export declare function buildCheckSuiteResourceEvent(args: {
+    appName?: string;
+    authorEmail?: string;
+    authorUsername?: string;
+    checkSuiteId?: number;
+    deliveryId: string;
+    eventType: "pull_request.checks.failed" | "pull_request.checks.recovered";
+    failingChecks?: GitHubFailingCheck[];
+    headSha?: string;
+    isDraft?: boolean;
+    latestCheckRunsCount?: number;
+    pullRequestNumber: number;
+    repo: string;
+    suiteConclusion: string;
+}): ResourceEventInput;
+/** Keep only failed check runs from one suite. */
+export declare function selectFailingChecks(checkRuns: unknown, options?: {
+    checkSuiteId?: number;
+}): GitHubFailingCheck[];
+/** Normalize a completed check suite for each attached pull request. */
+export declare function normalizeCheckSuiteEvents(deliveryId: string, body: unknown, options?: GitHubCheckSuiteFacts): ResourceEventInput[];
+/** Read which check suite values still need a GitHub API load. */
+export declare function parseCheckSuiteFactsTarget(body: unknown): {
+    checkSuiteId: number;
+    headSha: string;
+    loadFailingChecks: boolean;
+    owner: string;
+    pullRequestNumbers: number[];
+    repoName: string;
+} | undefined;
+/** Load missing values for one check suite event. */
+export declare function loadCheckSuiteFacts(args: {
+    appIdEnv: string;
+    body: unknown;
+    installationIdEnv: string;
+    log?: {
+        error(message: string, metadata?: Record<string, unknown>): void;
+    };
+    privateKeyEnv: string;
+}): Promise<GitHubCheckSuiteFacts | undefined>;

package/dist/webhooks/handler.d.ts

@@ -1,10 +1,10 @@
 import type { PluginConversationAnnotations, PluginLogger, PluginRoute, ResourceEventPublisher } from "@sentry/junior-plugin-api";
 import type { GitHubDb } from "../db/database.js";
 import type { GitHubPullRequestCommitComposition } from "../db/schema.js";
-import { type GitHubFailingCheck } from "./resource-events.js";
 /** Create the public, signed GitHub webhook route owned by the plugin. */
 export declare function createGitHubWebhookRoute(args: {
     annotations: PluginConversationAnnotations;
+    appIdEnv: string;
     botEmail(): string | undefined;
     classifyPullRequestCommits?(input: {
         number: number;
@@ -12,8 +12,9 @@ export declare function createGitHubWebhookRoute(args: {
     }): Promise<GitHubPullRequestCommitComposition | undefined>;
     db: GitHubDb;
     installationId(): string | undefined;
-    loadFailingChecks?(body: unknown): Promise<GitHubFailingCheck[] | undefined>;
+    installationIdEnv: string;
     log?: Pick<PluginLogger, "error">;
+    privateKeyEnv: string;
     resourceEvents: ResourceEventPublisher;
     webhookSecret(): string | undefined;
 }): PluginRoute;

package/dist/webhooks/resource-events.d.ts

@@ -1,44 +1,12 @@
 import type { ResourceEventInput } from "@sentry/junior-plugin-api";
-export type GitHubFailingCheck = {
-    checkRunId: number;
-    conclusion: string;
-    htmlUrl?: string;
-    name: string;
-};
-/** Build a browser URL for one check suite. GitHub does not send html_url. */
-export declare function buildCheckSuiteUrl(args: {
-    checkSuiteId: number;
-    headSha: string;
-    repo: string;
-}): string;
-/** Build the trusted data and summary for one check-suite PR event. */
-export declare function buildCheckSuiteResourceEvent(args: {
-    appName?: string;
-    checkSuiteId?: number;
-    deliveryId: string;
-    eventType: "pull_request.checks.failed" | "pull_request.checks.recovered";
-    failingChecks?: GitHubFailingCheck[];
-    headSha?: string;
-    latestCheckRunsCount?: number;
-    pullRequestNumber: number;
-    repo: string;
-    suiteConclusion: string;
-}): ResourceEventInput;
-/** Keep only failed check runs from one suite. */
-export declare function selectFailingChecks(checkRuns: unknown, options?: {
-    checkSuiteId?: number;
-}): GitHubFailingCheck[];
-/** Read the check suite target used to load failed check runs. */
-export declare function parseCheckSuiteEnrichmentTarget(body: unknown): {
-    checkSuiteId: number;
-    headSha: string;
-    owner: string;
-    repoName: string;
-} | undefined;
+import { type GitHubCheckSuiteFacts } from "./check-suite.js";
+export type { GitHubCheckSuiteFacts, GitHubCheckSuitePullRequestFacts, GitHubFailingCheck, } from "./check-suite.js";
+export { buildCheckSuiteResourceEvent, buildCheckSuiteUrl, loadCheckSuiteFacts, parseCheckSuiteFactsTarget, selectFailingChecks, } from "./check-suite.js";
+/** Read the check suite target used to load missing suite facts. */
 /** Normalize one verified GitHub delivery into conversation resource events. */
 export declare function normalizeGitHubResourceEvents(args: {
     body: unknown;
+    checkSuiteFacts?: GitHubCheckSuiteFacts;
     deliveryId: string;
     eventName: string;
-    failingChecks?: GitHubFailingCheck[];
 }): ResourceEventInput[];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sentry/junior-github",
-  "version": "0.181.1",
+  "version": "0.182.0",
   "private": false,
   "publishConfig": {
     "access": "public"
@@ -31,7 +31,7 @@
     "@sinclair/typebox": "^0.34.49",
     "drizzle-orm": "^0.45.2",
     "zod": "^4.4.3",
-    "@sentry/junior-plugin-api": "0.181.1"
+    "@sentry/junior-plugin-api": "0.182.0"
   },
   "devDependencies": {
     "@oxlint/plugins": "1.79.0",

package/skills/github-code/SKILL.md

@@ -71,7 +71,7 @@ PR titles use the same conventional form as commits: `<type>(<scope>): <Subject>
 
 Write the PR body for a reviewer who knows the product but not this change. Use ASD-STE100 English: short sentences, common words, active voice, and one idea per sentence. Avoid dense academic prose and unnecessary jargon.
 
-Explain what this PR changes and why it matters. Add only context the diff cannot show. Keep the body short by default; add structure only when it helps. Omit empty or `N/A` sections, file-by-file narration, copied commit logs, and redundant diff summaries.
+Explain what this PR changes and why it matters. Add only context the diff cannot show. Keep the body short by default; add structure only when it helps. Omit empty or `N/A` sections, file-by-file narration, copied commit logs, and redundant diff summaries. Do not put `Checks`, `Verification`, `Test plan`, or similar validation sections in the PR body; put local check results only in the final user report.
 
 Treat the current title, body, and commit messages as fallible context. After material follow-up commits, re-check the title and rewrite the body against the current diff with `github_updatePullRequest`. Never include customer data, PII, secrets, or sensitive thread context, especially in public repositories. Resolve requested assignee/reviewer handles from evidence; skip unconfirmed identities.
 
@@ -81,4 +81,4 @@ If PR creation or update is blocked, report the exact failed command/tool call a
 
 When PR creation returns a subscribable resource hint, subscribe to suggested review/CI events. Report only actionable feedback addressed, build failures fixed, fully green/ready state, or merge.
 
-Return: repo, branch, PR URL/number, checks and results, pre-existing failures, and anything not run with the reason.
+Return to the user (not the PR body): repo, branch, PR URL/number, local check results, pre-existing failures, and anything not run with the reason.

package/skills/github-code/SPEC.md

@@ -12,7 +12,7 @@ Guide evidence-first GitHub repository work from inspection through a reviewable
 - Install repository dependencies with the detected package manager's locked/frozen mode before verification when dependencies are absent.
 - For every completed repository edit, create or update a pushed PR unless the user explicitly opts out; default new PRs to draft while honoring explicit ready-for-review instructions.
 - Write conventional PR titles that match the current dominant change.
-- Write short reviewer-facing PR bodies in ASD-STE100 English; explain what changed and why, add only context the diff cannot show, and omit empty ceremony or fixed templates.
+- Write short reviewer-facing PR bodies in ASD-STE100 English; explain what changed and why, add only context the diff cannot show, omit empty ceremony or fixed templates, and keep Checks/Verification/Test plan style sections out of the PR body (report local checks to the user instead).
 - Treat existing PR metadata and commit messages as fallible context, and refresh the title/body against the current diff after material changes.
 - Report exact validation and permission failures without claiming partial work is complete.