@sentry/junior-github 0.181.1 → 0.183.0

package/dist/plugin.d.ts

@@ -1,7 +1,7 @@
 /**
  * GitHub plugin runtime boundary.
  *
- * This module composes GitHub hooks and owns GitHub egress policy.
+ * This module composes GitHub hooks, resource events, and credentials.
  */
 import { type PluginRegistration } from "@sentry/junior-plugin-api";
 import { type GitHubAppPermissions } from "./permissions.js";

package/dist/pull-request-outcomes/store.d.ts

@@ -19,6 +19,7 @@ declare const githubPullRequestOutcomeInputSchema: z.ZodObject<{
         merged: "merged";
         closed_unmerged: "closed_unmerged";
     }>;
+    title: z.ZodOptional<z.ZodString>;
     updatedAt: z.ZodDate;
 }, z.core.$strict>;
 export type GitHubPullRequestOutcomeInput = z.output<typeof githubPullRequestOutcomeInputSchema>;

package/dist/resource-events/pull-request.d.ts

@@ -1,4 +1,4 @@
-import type { SubscribableResource } from "@sentry/junior-plugin-api";
+import { type SubscribableResource } from "@sentry/junior-plugin-api";
 export declare const GITHUB_PULL_REQUEST_EVENTS: readonly ["pull_request.checks.failed", "pull_request.checks.recovered", "pull_request.comment.created", "pull_request.opened", "pull_request.ready_for_review", "pull_request.review.approved", "pull_request.review.changes_requested", "pull_request.review.commented", "pull_request.review_comment.created", "pull_request.merged", "pull_request.closed_unmerged"];
 export type GitHubPullRequestEvent = (typeof GITHUB_PULL_REQUEST_EVENTS)[number];
 /** App-configured pull request resource event behavior. */
@@ -14,6 +14,12 @@ export interface GitHubPullRequestSubscriptionConfig {
     intent: string;
 }
 export declare const GITHUB_PULL_REQUEST_SUGGESTED_EVENTS: readonly ["pull_request.checks.failed", "pull_request.comment.created", "pull_request.ready_for_review", "pull_request.review.changes_requested", "pull_request.review.commented", "pull_request.review_comment.created", "pull_request.merged", "pull_request.closed_unmerged"];
+/** Exact values GitHub may set on pull request event data. Missing keys do not match. */
+export declare const GITHUB_PULL_REQUEST_MATCH_FIELDS: Record<string, {
+    kind: "string" | "number" | "boolean";
+    description: string;
+    enum?: string[] | undefined;
+}>;
 /** Build the stable pull request identity shared by tools and webhooks. */
 export declare function gitHubPullRequestResource(input: {
     number: number;

package/dist/testing.js

@@ -1,6 +1,6 @@
 import {
   normalizeGitHubResourceEvents
-} from "./chunk-GXZVNEIB.js";
+} from "./chunk-KXAUXJ3Q.js";
 export {
   normalizeGitHubResourceEvents
 };

package/dist/webhooks/check-suite.d.ts

@@ -0,0 +1,80 @@
+/**
+ * GitHub check suite resource events.
+ */
+import type { ResourceEventInput } from "@sentry/junior-plugin-api";
+export type GitHubFailingCheck = {
+    checkRunId: number;
+    conclusion: string;
+    htmlUrl?: string;
+    name: string;
+};
+/** Pull request values filled in when a match filter needs them. */
+export type GitHubCheckSuitePullRequestFacts = {
+    authorEmail?: string;
+    authorUsername?: string;
+    isDraft?: boolean;
+};
+/** Optional values for one check suite event. */
+export type GitHubCheckSuiteFacts = {
+    failingChecks?: GitHubFailingCheck[];
+    /** Pull request values by number when a match filter needs them. */
+    pullRequestFactsByNumber?: Record<number, GitHubCheckSuitePullRequestFacts>;
+};
+/** Build a browser URL for one check suite. GitHub does not send html_url. */
+export declare function buildCheckSuiteUrl(args: {
+    checkSuiteId: number;
+    headSha: string;
+    repo: string;
+}): string;
+/** Build the trusted data and summary for one check-suite PR event. */
+export declare function buildCheckSuiteResourceEvent(args: {
+    appName?: string;
+    authorEmail?: string;
+    authorUsername?: string;
+    checkSuiteId?: number;
+    deliveryId: string;
+    eventType: "pull_request.checks.failed" | "pull_request.checks.recovered";
+    failingChecks?: GitHubFailingCheck[];
+    headSha?: string;
+    isDraft?: boolean;
+    latestCheckRunsCount?: number;
+    pullRequestNumber: number;
+    repo: string;
+    suiteConclusion: string;
+}): ResourceEventInput;
+/** Keep only failed check runs from one suite. */
+export declare function selectFailingChecks(checkRuns: unknown, options?: {
+    checkSuiteId?: number;
+}): GitHubFailingCheck[];
+/** Normalize a completed check suite for each attached pull request. */
+export declare function normalizeCheckSuiteEvents(deliveryId: string, body: unknown, options?: GitHubCheckSuiteFacts): ResourceEventInput[];
+/** Identifiers and event types one completed check suite may publish. */
+export declare function parseCheckSuitePublishTargets(body: unknown): {
+    eventTypes: string[];
+    identifiers: string[];
+} | undefined;
+/** Read which check suite values still need a GitHub API load. */
+export declare function parseCheckSuiteFactsTarget(body: unknown, options?: {
+    loadPullRequestFacts?: boolean;
+}): {
+    checkSuiteId: number;
+    headSha: string;
+    loadFailingChecks: boolean;
+    loadPullRequestFacts: boolean;
+    owner: string;
+    pullRequestNumbers: number[];
+    repoName: string;
+} | undefined;
+/** True when active match filters need pull request fields from the API. */
+export declare function needsCheckSuitePullRequestFacts(matchKeys: Iterable<string>): boolean;
+/** Load failed check runs and optional pull request match fields. */
+export declare function loadCheckSuiteFacts(args: {
+    appIdEnv: string;
+    body: unknown;
+    installationIdEnv: string;
+    loadPullRequestFacts?: boolean;
+    log?: {
+        error(message: string, metadata?: Record<string, unknown>): void;
+    };
+    privateKeyEnv: string;
+}): Promise<GitHubCheckSuiteFacts | undefined>;

package/dist/webhooks/handler.d.ts

@@ -1,19 +1,21 @@
-import type { PluginConversationAnnotations, PluginLogger, PluginRoute, ResourceEventPublisher } from "@sentry/junior-plugin-api";
+import type { CodeChangePublisher, PluginConversationAnnotations, PluginLogger, PluginRoute, ResourceEventPublisher } from "@sentry/junior-plugin-api";
 import type { GitHubDb } from "../db/database.js";
 import type { GitHubPullRequestCommitComposition } from "../db/schema.js";
-import { type GitHubFailingCheck } from "./resource-events.js";
 /** Create the public, signed GitHub webhook route owned by the plugin. */
 export declare function createGitHubWebhookRoute(args: {
     annotations: PluginConversationAnnotations;
+    appIdEnv: string;
     botEmail(): string | undefined;
     classifyPullRequestCommits?(input: {
         number: number;
         repositoryFullName: string;
     }): Promise<GitHubPullRequestCommitComposition | undefined>;
+    codeChanges: CodeChangePublisher;
     db: GitHubDb;
     installationId(): string | undefined;
-    loadFailingChecks?(body: unknown): Promise<GitHubFailingCheck[] | undefined>;
+    installationIdEnv: string;
     log?: Pick<PluginLogger, "error">;
+    privateKeyEnv: string;
     resourceEvents: ResourceEventPublisher;
     webhookSecret(): string | undefined;
 }): PluginRoute;

package/dist/webhooks/resource-events.d.ts

@@ -1,44 +1,12 @@
 import type { ResourceEventInput } from "@sentry/junior-plugin-api";
-export type GitHubFailingCheck = {
-    checkRunId: number;
-    conclusion: string;
-    htmlUrl?: string;
-    name: string;
-};
-/** Build a browser URL for one check suite. GitHub does not send html_url. */
-export declare function buildCheckSuiteUrl(args: {
-    checkSuiteId: number;
-    headSha: string;
-    repo: string;
-}): string;
-/** Build the trusted data and summary for one check-suite PR event. */
-export declare function buildCheckSuiteResourceEvent(args: {
-    appName?: string;
-    checkSuiteId?: number;
-    deliveryId: string;
-    eventType: "pull_request.checks.failed" | "pull_request.checks.recovered";
-    failingChecks?: GitHubFailingCheck[];
-    headSha?: string;
-    latestCheckRunsCount?: number;
-    pullRequestNumber: number;
-    repo: string;
-    suiteConclusion: string;
-}): ResourceEventInput;
-/** Keep only failed check runs from one suite. */
-export declare function selectFailingChecks(checkRuns: unknown, options?: {
-    checkSuiteId?: number;
-}): GitHubFailingCheck[];
-/** Read the check suite target used to load failed check runs. */
-export declare function parseCheckSuiteEnrichmentTarget(body: unknown): {
-    checkSuiteId: number;
-    headSha: string;
-    owner: string;
-    repoName: string;
-} | undefined;
+import { type GitHubCheckSuiteFacts } from "./check-suite.js";
+export type { GitHubCheckSuiteFacts, GitHubCheckSuitePullRequestFacts, GitHubFailingCheck, } from "./check-suite.js";
+export { buildCheckSuiteResourceEvent, buildCheckSuiteUrl, loadCheckSuiteFacts, needsCheckSuitePullRequestFacts, parseCheckSuiteFactsTarget, parseCheckSuitePublishTargets, selectFailingChecks, } from "./check-suite.js";
+/** Read the check suite target used to load missing suite facts. */
 /** Normalize one verified GitHub delivery into conversation resource events. */
 export declare function normalizeGitHubResourceEvents(args: {
     body: unknown;
+    checkSuiteFacts?: GitHubCheckSuiteFacts;
     deliveryId: string;
     eventName: string;
-    failingChecks?: GitHubFailingCheck[];
 }): ResourceEventInput[];

package/migrations/0008_native_code_backfill.sql

@@ -0,0 +1,74 @@
+INSERT INTO junior_code_repositories (
+  id,
+  name,
+  provider,
+  provider_id,
+  url,
+  updated_at
+)
+SELECT DISTINCT ON (repository_id)
+  gen_random_uuid(),
+  repository_full_name,
+  'github',
+  repository_id,
+  'https://github.com/' || repository_full_name,
+  updated_at
+FROM junior_github_pull_requests
+ORDER BY repository_id, updated_at DESC
+ON CONFLICT (provider, provider_id) DO UPDATE SET
+  name = EXCLUDED.name,
+  url = EXCLUDED.url,
+  updated_at = EXCLUDED.updated_at
+WHERE junior_code_repositories.updated_at <= EXCLUDED.updated_at;
+--> statement-breakpoint
+INSERT INTO junior_code_changes (
+  id,
+  closed_at,
+  conversation_ids,
+  merged_at,
+  number,
+  opened_at,
+  provider,
+  provider_id,
+  repository_id,
+  state,
+  updated_at,
+  url
+)
+SELECT
+  gen_random_uuid(),
+  github_change.closed_at,
+  github_change.conversation_ids,
+  github_change.merged_at,
+  github_change.number,
+  github_change.opened_at,
+  'github',
+  github_change.pull_request_id,
+  repository.id,
+  CASE github_change.state
+    WHEN 'closed_unmerged' THEN 'closed'
+    ELSE github_change.state
+  END,
+  github_change.updated_at,
+  'https://github.com/' || github_change.repository_full_name || '/pull/' || github_change.number
+FROM junior_github_pull_requests AS github_change
+JOIN junior_code_repositories AS repository
+  ON repository.provider = 'github'
+  AND repository.provider_id = github_change.repository_id
+ON CONFLICT (provider, provider_id) DO UPDATE SET
+  closed_at = EXCLUDED.closed_at,
+  conversation_ids = ARRAY(
+    SELECT DISTINCT value
+    FROM unnest(
+      junior_code_changes.conversation_ids || EXCLUDED.conversation_ids
+    ) AS value
+    ORDER BY value
+  ),
+  merged_at = EXCLUDED.merged_at,
+  number = EXCLUDED.number,
+  opened_at = EXCLUDED.opened_at,
+  repository_id = EXCLUDED.repository_id,
+  state = EXCLUDED.state,
+  updated_at = EXCLUDED.updated_at,
+  url = EXCLUDED.url
+WHERE junior_code_changes.updated_at <= EXCLUDED.updated_at;

package/migrations/meta/0008_snapshot.json

@@ -0,0 +1,348 @@
+{
+  "id": "da9cceed-a211-4f1b-a5b8-ac4237b9caf5",
+  "prevId": "a54d392c-28bb-4cd3-ba14-1bcfa793fcce",
+  "version": "7",
+  "dialect": "postgresql",
+  "tables": {
+    "public.junior_github_issues": {
+      "name": "junior_github_issues",
+      "schema": "",
+      "columns": {
+        "issue_id": {
+          "name": "issue_id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "repository_id": {
+          "name": "repository_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "repository_full_name": {
+          "name": "repository_full_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "number": {
+          "name": "number",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "state": {
+          "name": "state",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "state_reason": {
+          "name": "state_reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "conversation_ids": {
+          "name": "conversation_ids",
+          "type": "text[]",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "ARRAY[]::text[]"
+        },
+        "opened_at": {
+          "name": "opened_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "closed_at": {
+          "name": "closed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {
+        "junior_github_issues_opened_at_idx": {
+          "name": "junior_github_issues_opened_at_idx",
+          "columns": [
+            {
+              "expression": "opened_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "with": {},
+          "method": "btree",
+          "concurrently": false
+        },
+        "junior_github_issues_closed_at_idx": {
+          "name": "junior_github_issues_closed_at_idx",
+          "columns": [
+            {
+              "expression": "closed_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "with": {},
+          "method": "btree",
+          "concurrently": false
+        },
+        "junior_github_issues_open_idx": {
+          "name": "junior_github_issues_open_idx",
+          "columns": [
+            {
+              "expression": "issue_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "with": {},
+          "method": "btree",
+          "where": "\"junior_github_issues\".\"state\" = 'open'",
+          "concurrently": false
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.junior_github_pull_request_issues": {
+      "name": "junior_github_pull_request_issues",
+      "schema": "",
+      "columns": {
+        "pull_request_id": {
+          "name": "pull_request_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "issue_repository_full_name": {
+          "name": "issue_repository_full_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "issue_number": {
+          "name": "issue_number",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "junior_github_pull_request_issues_pull_request_id_junior_github_pull_requests_pull_request_id_fk": {
+          "name": "junior_github_pull_request_issues_pull_request_id_junior_github_pull_requests_pull_request_id_fk",
+          "tableFrom": "junior_github_pull_request_issues",
+          "columnsFrom": ["pull_request_id"],
+          "tableTo": "junior_github_pull_requests",
+          "columnsTo": ["pull_request_id"],
+          "onUpdate": "no action",
+          "onDelete": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {
+        "junior_github_pull_request_issues_pull_request_id_issue_repository_full_name_issue_number_pk": {
+          "name": "junior_github_pull_request_issues_pull_request_id_issue_repository_full_name_issue_number_pk",
+          "columns": [
+            "pull_request_id",
+            "issue_repository_full_name",
+            "issue_number"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.junior_github_pull_requests": {
+      "name": "junior_github_pull_requests",
+      "schema": "",
+      "columns": {
+        "pull_request_id": {
+          "name": "pull_request_id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "repository_id": {
+          "name": "repository_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "repository_full_name": {
+          "name": "repository_full_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "number": {
+          "name": "number",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "state": {
+          "name": "state",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "commit_composition": {
+          "name": "commit_composition",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "conversation_ids": {
+          "name": "conversation_ids",
+          "type": "text[]",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "ARRAY[]::text[]"
+        },
+        "opened_at": {
+          "name": "opened_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "merged_at": {
+          "name": "merged_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "closed_at": {
+          "name": "closed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {
+        "junior_github_pull_requests_opened_at_idx": {
+          "name": "junior_github_pull_requests_opened_at_idx",
+          "columns": [
+            {
+              "expression": "opened_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "with": {},
+          "method": "btree",
+          "concurrently": false
+        },
+        "junior_github_pull_requests_merged_at_idx": {
+          "name": "junior_github_pull_requests_merged_at_idx",
+          "columns": [
+            {
+              "expression": "merged_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "with": {},
+          "method": "btree",
+          "concurrently": false
+        },
+        "junior_github_pull_requests_closed_at_idx": {
+          "name": "junior_github_pull_requests_closed_at_idx",
+          "columns": [
+            {
+              "expression": "closed_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "with": {},
+          "method": "btree",
+          "concurrently": false
+        },
+        "junior_github_pull_requests_open_idx": {
+          "name": "junior_github_pull_requests_open_idx",
+          "columns": [
+            {
+              "expression": "pull_request_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "with": {},
+          "method": "btree",
+          "where": "\"junior_github_pull_requests\".\"state\" = 'open'",
+          "concurrently": false
+        },
+        "junior_github_pull_requests_unmerged_conversations_idx": {
+          "name": "junior_github_pull_requests_unmerged_conversations_idx",
+          "columns": [
+            {
+              "expression": "conversation_ids",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "with": {},
+          "method": "gin",
+          "where": "\"junior_github_pull_requests\".\"state\" <> 'merged'",
+          "concurrently": false
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    }
+  },
+  "enums": {},
+  "schemas": {},
+  "views": {},
+  "sequences": {},
+  "roles": {},
+  "policies": {},
+  "_meta": {
+    "columns": {},
+    "schemas": {},
+    "tables": {}
+  }
+}

package/migrations/meta/_journal.json

@@ -57,6 +57,13 @@
       "when": 1786486305688,
       "tag": "0007_shallow_millenium_guard",
       "breakpoints": true
+    },
+    {
+      "idx": 8,
+      "version": "7",
+      "when": 1787598510781,
+      "tag": "0008_native_code_backfill",
+      "breakpoints": true
     }
   ]
-}
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sentry/junior-github",
-  "version": "0.181.1",
+  "version": "0.183.0",
   "private": false,
   "publishConfig": {
     "access": "public"
@@ -31,7 +31,7 @@
     "@sinclair/typebox": "^0.34.49",
     "drizzle-orm": "^0.45.2",
     "zod": "^4.4.3",
-    "@sentry/junior-plugin-api": "0.181.1"
+    "@sentry/junior-plugin-api": "0.183.0"
   },
   "devDependencies": {
     "@oxlint/plugins": "1.79.0",

package/skills/github-code/SKILL.md

@@ -71,7 +71,7 @@ PR titles use the same conventional form as commits: `<type>(<scope>): <Subject>
 
 Write the PR body for a reviewer who knows the product but not this change. Use ASD-STE100 English: short sentences, common words, active voice, and one idea per sentence. Avoid dense academic prose and unnecessary jargon.
 
-Explain what this PR changes and why it matters. Add only context the diff cannot show. Keep the body short by default; add structure only when it helps. Omit empty or `N/A` sections, file-by-file narration, copied commit logs, and redundant diff summaries.
+Explain what this PR changes and why it matters. Add only context the diff cannot show. Keep the body short by default; add structure only when it helps. Omit empty or `N/A` sections, file-by-file narration, copied commit logs, and redundant diff summaries. Do not put `Checks`, `Verification`, `Test plan`, or similar validation sections in the PR body; put local check results only in the final user report.
 
 Treat the current title, body, and commit messages as fallible context. After material follow-up commits, re-check the title and rewrite the body against the current diff with `github_updatePullRequest`. Never include customer data, PII, secrets, or sensitive thread context, especially in public repositories. Resolve requested assignee/reviewer handles from evidence; skip unconfirmed identities.
 
@@ -81,4 +81,4 @@ If PR creation or update is blocked, report the exact failed command/tool call a
 
 When PR creation returns a subscribable resource hint, subscribe to suggested review/CI events. Report only actionable feedback addressed, build failures fixed, fully green/ready state, or merge.
 
-Return: repo, branch, PR URL/number, checks and results, pre-existing failures, and anything not run with the reason.
+Return to the user (not the PR body): repo, branch, PR URL/number, local check results, pre-existing failures, and anything not run with the reason.