@sentry/junior-github 0.199.0 → 0.200.0

package/dist/index.js

@@ -1001,7 +1001,9 @@ var createPullRequestToolInputSchema = z4.object({
   title: z4.string().describe("Pull request title."),
   head: z4.string().describe("Head branch or owner:branch ref."),
   base: z4.string().describe("Base branch."),
-  body: z4.string().describe("Pull request body. The runtime appends the conversation footer.").optional(),
+  body: z4.string().describe(
+    "Pull request body. The runtime appends the conversation footer."
+  ).optional(),
   draft: z4.boolean().describe("Whether to open the pull request as a draft.").optional()
 }).strict();
 var createPullRequestStateSchema = Type2.Union([
@@ -1252,6 +1254,7 @@ function createGitHubPullRequestTool(ctx, subscriptionConfig) {
       readOnlyHint: false
     },
     description: "Create a GitHub pull request with a runtime-owned conversation footer. Use this instead of shelling out to gh pr create when creating pull requests.",
+    exposure: "direct",
     inputSchema: createPullRequestToolInputSchema,
     outputSchema: gitHubPullRequestOutputSchema,
     async execute(input, options) {
@@ -2191,6 +2194,129 @@ function createGitHubResolvePullRequestReviewThreadTool(ctx, botEmail) {
   });
 }
 
+// src/tools/submit-pull-request-review.ts
+import {
+  definePluginTool as definePluginTool11,
+  PluginToolInputError as PluginToolInputError12,
+  pluginToolOutputSchema as pluginToolOutputSchema11
+} from "@sentry/junior-plugin-api";
+import { z as z11 } from "zod";
+var reviewCommentSchema = z11.object({
+  path: z11.string().trim().min(1).describe("File path in the pull request."),
+  body: z11.string().trim().min(1).describe("Inline review comment."),
+  line: z11.number().int().positive().describe("Line in the pull request diff."),
+  side: z11.enum(["LEFT", "RIGHT"]).describe("Side of the pull request diff."),
+  startLine: z11.number().int().positive().optional().describe("First line of a multi-line comment."),
+  startSide: z11.enum(["LEFT", "RIGHT"]).optional().describe("First side of a multi-line comment.")
+}).strict().refine(
+  ({ startLine, startSide }) => startLine === void 0 === (startSide === void 0),
+  { message: "startLine and startSide must be provided together." }
+);
+var inputSchema9 = z11.object({
+  repo: z11.string().describe('Repository in "owner/name" format.'),
+  number: z11.number().int().positive().describe("Pull request number."),
+  event: z11.enum(["COMMENT", "REQUEST_CHANGES"]).describe("Review result. Junior cannot approve pull requests."),
+  body: z11.string().trim().min(1).describe("Review summary."),
+  comments: z11.array(reviewCommentSchema).optional().describe("Optional inline review comments.")
+}).strict();
+var outputSchema9 = pluginToolOutputSchema11.extend({
+  target: z11.literal("submitPullRequestReview"),
+  repo: z11.string(),
+  number: z11.number(),
+  reviewId: z11.number(),
+  state: z11.string(),
+  url: z11.string()
+});
+function parseRepo11(value) {
+  const parts = value.split("/").map((part) => part.trim());
+  if (parts.length !== 2 || !parts[0] || !parts[1]) {
+    throw new PluginToolInputError12('repo must use "owner/name" format');
+  }
+  return { owner: parts[0], name: parts[1], ref: `${parts[0]}/${parts[1]}` };
+}
+async function readJson8(response) {
+  const text2 = await response.text();
+  if (!text2) return void 0;
+  try {
+    return JSON.parse(text2);
+  } catch {
+    return text2;
+  }
+}
+function githubError2(body) {
+  if (body && typeof body === "object" && !Array.isArray(body)) {
+    const message = body.message;
+    if (typeof message === "string" && message.trim()) return message.trim();
+  }
+  if (typeof body === "string" && body.trim()) return body.trim();
+  return "GitHub request failed";
+}
+function throwReviewError(status, body) {
+  const message = `GitHub pull request review failed with HTTP ${status}: ${githubError2(body)}`;
+  if (status === 404 || status === 422) {
+    throw new PluginToolInputError12(message);
+  }
+  throw new Error(message);
+}
+function createGitHubSubmitPullRequestReviewTool(egress) {
+  return definePluginTool11({
+    annotations: {
+      destructiveHint: true,
+      idempotentHint: false,
+      openWorldHint: true,
+      readOnlyHint: false
+    },
+    description: "Submit a GitHub pull request review as a comment or change request. Use this instead of `gh pr review`, GraphQL, or direct REST calls. Junior cannot approve pull requests.",
+    exposure: "direct",
+    inputSchema: inputSchema9,
+    outputSchema: outputSchema9,
+    async execute(review) {
+      const repo = parseRepo11(review.repo);
+      const comments = review.comments?.map((comment) => ({
+        path: comment.path,
+        body: comment.body,
+        line: comment.line,
+        side: comment.side,
+        ...comment.startLine !== void 0 ? { start_line: comment.startLine } : void 0,
+        ...comment.startSide !== void 0 ? { start_side: comment.startSide } : void 0
+      }));
+      const response = await egress.fetch({
+        provider: "github",
+        operation: "github.pull.review.create",
+        request: new Request(
+          `https://api.github.com/repos/${encodeURIComponent(repo.owner)}/${encodeURIComponent(repo.name)}/pulls/${review.number}/reviews`,
+          {
+            method: "POST",
+            headers: {
+              Accept: "application/vnd.github+json",
+              "Content-Type": "application/json",
+              "X-GitHub-Api-Version": "2022-11-28"
+            },
+            body: JSON.stringify({
+              body: review.body,
+              event: review.event,
+              ...comments ? { comments } : void 0
+            })
+          }
+        )
+      });
+      const parsed = await readJson8(response);
+      if (!response.ok) {
+        throwReviewError(response.status, parsed);
+      }
+      const providerResult = z11.object({ id: z11.number(), html_url: z11.string(), state: z11.string() }).parse(parsed);
+      return {
+        target: "submitPullRequestReview",
+        repo: repo.ref,
+        number: review.number,
+        reviewId: providerResult.id,
+        state: providerResult.state,
+        url: providerResult.html_url
+      };
+    }
+  });
+}
+
 // src/tools.ts
 function createGitHubTools(ctx, botEmail, pullRequestSubscription) {
   return {
@@ -2205,6 +2331,9 @@ function createGitHubTools(ctx, botEmail, pullRequestSubscription) {
     getRelease: createGitHubGetReleaseTool(ctx),
     getRepository: createGitHubGetRepositoryTool(ctx),
     resolvePullRequestReviewThread: createGitHubResolvePullRequestReviewThreadTool(ctx, botEmail),
+    submitPullRequestReview: createGitHubSubmitPullRequestReviewTool(
+      ctx.egress
+    ),
     updateIssue: createGitHubUpdateIssueTool(ctx),
     updatePullRequest: createGitHubUpdatePullRequestTool(ctx)
   };
@@ -2215,7 +2344,7 @@ import { createHmac, timingSafeEqual } from "crypto";
 
 // src/issue-outcomes/store.ts
 import { and, eq, lte, sql as sql2 } from "drizzle-orm";
-import { z as z12 } from "zod";
+import { z as z13 } from "zod";
 
 // src/db/schema.ts
 import { sql } from "drizzle-orm";
@@ -2227,18 +2356,18 @@ import {
   text,
   timestamp
 } from "drizzle-orm/pg-core";
-import { z as z11 } from "zod";
-var githubPullRequestStateSchema = z11.enum([
+import { z as z12 } from "zod";
+var githubPullRequestStateSchema = z12.enum([
   "closed_unmerged",
   "merged",
   "open"
 ]);
-var githubPullRequestCommitCompositionSchema = z11.enum([
+var githubPullRequestCommitCompositionSchema = z12.enum([
   "junior_only",
   "mixed"
 ]);
-var githubIssueStateSchema = z11.enum(["closed", "open"]);
-var githubIssueStateReasonSchema = z11.enum([
+var githubIssueStateSchema = z12.enum(["closed", "open"]);
+var githubIssueStateReasonSchema = z12.enum([
   "completed",
   "duplicate",
   "not_planned",
@@ -2308,21 +2437,21 @@ var juniorGitHubPullRequestIssues = pgTable(
 );
 
 // src/issue-outcomes/store.ts
-var githubIssueOutcomeInputSchema = z12.object({
-  candidateOwned: z12.boolean(),
-  closedAt: z12.date().optional(),
-  issueId: z12.string().min(1),
-  number: z12.number().int().positive(),
-  openedAt: z12.date(),
-  repositoryFullName: z12.string().min(1),
-  repositoryId: z12.string().min(1),
+var githubIssueOutcomeInputSchema = z13.object({
+  candidateOwned: z13.boolean(),
+  closedAt: z13.date().optional(),
+  issueId: z13.string().min(1),
+  number: z13.number().int().positive(),
+  openedAt: z13.date(),
+  repositoryFullName: z13.string().min(1),
+  repositoryId: z13.string().min(1),
   state: githubIssueStateSchema,
   stateReason: githubIssueStateReasonSchema.optional(),
-  updatedAt: z12.date()
+  updatedAt: z13.date()
 }).strict();
-var githubIssueConversationsInputSchema = z12.object({
-  conversationIds: z12.array(z12.string().min(1)).min(1),
-  issueId: z12.string().min(1)
+var githubIssueConversationsInputSchema = z13.object({
+  conversationIds: z13.array(z13.string().min(1)).min(1),
+  issueId: z13.string().min(1)
 }).strict();
 function projectionValues(input) {
   return {
@@ -2386,33 +2515,33 @@ async function recordGitHubIssueConversations(db, input) {
 
 // src/pull-request-outcomes/store.ts
 import { and as and2, eq as eq2, lte as lte2, ne, sql as sql3 } from "drizzle-orm";
-import { z as z13 } from "zod";
-var githubPullRequestOutcomeInputSchema = z13.object({
-  candidateOwned: z13.boolean(),
-  closedAt: z13.date().optional(),
+import { z as z14 } from "zod";
+var githubPullRequestOutcomeInputSchema = z14.object({
+  candidateOwned: z14.boolean(),
+  closedAt: z14.date().optional(),
   commitComposition: githubPullRequestCommitCompositionSchema.optional(),
-  mergedAt: z13.date().optional(),
-  number: z13.number().int().positive(),
-  openedAt: z13.date(),
-  pullRequestId: z13.string().min(1),
-  repositoryFullName: z13.string().min(1),
-  repositoryId: z13.string().min(1),
+  mergedAt: z14.date().optional(),
+  number: z14.number().int().positive(),
+  openedAt: z14.date(),
+  pullRequestId: z14.string().min(1),
+  repositoryFullName: z14.string().min(1),
+  repositoryId: z14.string().min(1),
   state: githubPullRequestStateSchema,
-  title: z13.string().min(1).optional(),
-  updatedAt: z13.date()
+  title: z14.string().min(1).optional(),
+  updatedAt: z14.date()
 }).strict();
-var githubPullRequestConversationsInputSchema = z13.object({
-  conversationIds: z13.array(z13.string().min(1)).min(1),
-  pullRequestId: z13.string().min(1)
+var githubPullRequestConversationsInputSchema = z14.object({
+  conversationIds: z14.array(z14.string().min(1)).min(1),
+  pullRequestId: z14.string().min(1)
 }).strict();
-var githubPullRequestLinkedIssuesInputSchema = z13.object({
-  linkedIssues: z13.array(
-    z13.object({
-      number: z13.number().int().positive(),
-      repositoryFullName: z13.string().min(1)
+var githubPullRequestLinkedIssuesInputSchema = z14.object({
+  linkedIssues: z14.array(
+    z14.object({
+      number: z14.number().int().positive(),
+      repositoryFullName: z14.string().min(1)
     }).strict()
   ).min(1),
-  pullRequestId: z13.string().min(1)
+  pullRequestId: z14.string().min(1)
 }).strict();
 function projectionValues2(input) {
   return {
@@ -2577,39 +2706,39 @@ async function recordGitHubPullRequestLinkedIssues(db, input) {
 }
 
 // src/webhooks/issue-outcome.ts
-import { z as z14 } from "zod";
-var canonicalIssueOutcomeSchema = z14.object({
-  action: z14.enum(["opened", "closed", "reopened"]),
-  issue: z14.object({
-    body: z14.string().nullable().optional(),
-    closed_at: z14.string().nullable().optional(),
-    created_at: z14.string(),
-    id: z14.number().int().positive(),
-    number: z14.number().int().positive(),
+import { z as z15 } from "zod";
+var canonicalIssueOutcomeSchema = z15.object({
+  action: z15.enum(["opened", "closed", "reopened"]),
+  issue: z15.object({
+    body: z15.string().nullable().optional(),
+    closed_at: z15.string().nullable().optional(),
+    created_at: z15.string(),
+    id: z15.number().int().positive(),
+    number: z15.number().int().positive(),
     state_reason: githubIssueStateReasonSchema.nullable().optional(),
-    updated_at: z14.string(),
-    user: z14.object({ login: z14.string().min(1) }).strict()
+    updated_at: z15.string(),
+    user: z15.object({ login: z15.string().min(1) }).strict()
   }).strict(),
-  repository: z14.object({
-    full_name: z14.string().min(1),
-    id: z14.number().int().positive()
+  repository: z15.object({
+    full_name: z15.string().min(1),
+    id: z15.number().int().positive()
   }).strict()
 }).strict();
-var issueOutcomeSchema = z14.object({
-  action: z14.enum(["opened", "closed", "reopened"]),
-  issue: z14.object({
-    body: z14.string().nullable().optional(),
-    closed_at: z14.string().nullable().optional(),
-    created_at: z14.string(),
-    id: z14.number().int().positive(),
-    number: z14.number().int().positive(),
+var issueOutcomeSchema = z15.object({
+  action: z15.enum(["opened", "closed", "reopened"]),
+  issue: z15.object({
+    body: z15.string().nullable().optional(),
+    closed_at: z15.string().nullable().optional(),
+    created_at: z15.string(),
+    id: z15.number().int().positive(),
+    number: z15.number().int().positive(),
     state_reason: githubIssueStateReasonSchema.nullable().optional(),
-    updated_at: z14.string(),
-    user: z14.object({ login: z14.string().min(1) }).passthrough()
+    updated_at: z15.string(),
+    user: z15.object({ login: z15.string().min(1) }).passthrough()
   }).passthrough(),
-  repository: z14.object({
-    full_name: z14.string().min(1),
-    id: z14.number().int().positive()
+  repository: z15.object({
+    full_name: z15.string().min(1),
+    id: z15.number().int().positive()
   }).passthrough()
 }).passthrough().transform(
   (provider) => canonicalIssueOutcomeSchema.parse({
@@ -2630,7 +2759,7 @@ var issueOutcomeSchema = z14.object({
     }
   })
 );
-var issueLifecycleActionSchema = z14.object({ action: z14.string() }).passthrough();
+var issueLifecycleActionSchema = z15.object({ action: z15.string() }).passthrough();
 function timestamp2(value) {
   if (!value) return void 0;
   const parsed = new Date(value);
@@ -2676,21 +2805,21 @@ function normalizeGitHubIssueOutcome(args) {
     updatedAt
   };
 }
-var canonicalIssueConversationSchema = z14.object({
-  issue: z14.object({
-    body: z14.string().nullable().optional(),
-    id: z14.number().int().positive(),
-    user: z14.object({ login: z14.string().min(1) }).strict()
+var canonicalIssueConversationSchema = z15.object({
+  issue: z15.object({
+    body: z15.string().nullable().optional(),
+    id: z15.number().int().positive(),
+    user: z15.object({ login: z15.string().min(1) }).strict()
   }).strict(),
-  sender: z14.object({ login: z14.string().min(1) }).strict().optional()
+  sender: z15.object({ login: z15.string().min(1) }).strict().optional()
 }).strict();
-var issueConversationSchema = z14.object({
-  issue: z14.object({
-    body: z14.string().nullable().optional(),
-    id: z14.number().int().positive(),
-    user: z14.object({ login: z14.string().min(1) }).passthrough()
+var issueConversationSchema = z15.object({
+  issue: z15.object({
+    body: z15.string().nullable().optional(),
+    id: z15.number().int().positive(),
+    user: z15.object({ login: z15.string().min(1) }).passthrough()
   }).passthrough(),
-  sender: z14.object({ login: z14.string().min(1) }).passthrough().optional()
+  sender: z15.object({ login: z15.string().min(1) }).passthrough().optional()
 }).passthrough().transform(
   (provider) => canonicalIssueConversationSchema.parse({
     issue: {
@@ -2717,43 +2846,43 @@ function normalizeGitHubIssueConversations(args) {
 }
 
 // src/webhooks/pull-request-outcome.ts
-import { z as z15 } from "zod";
-var canonicalPullRequestOutcomeSchema = z15.object({
-  action: z15.enum(["opened", "closed", "reopened"]),
-  pull_request: z15.object({
-    body: z15.string().nullable().optional(),
-    closed_at: z15.string().nullable().optional(),
-    created_at: z15.string(),
-    id: z15.number().int().positive(),
-    merged: z15.boolean(),
-    merged_at: z15.string().nullable().optional(),
-    number: z15.number().int().positive(),
-    title: z15.string().min(1).optional(),
-    updated_at: z15.string(),
-    user: z15.object({ login: z15.string().min(1) }).strict()
+import { z as z16 } from "zod";
+var canonicalPullRequestOutcomeSchema = z16.object({
+  action: z16.enum(["opened", "closed", "reopened"]),
+  pull_request: z16.object({
+    body: z16.string().nullable().optional(),
+    closed_at: z16.string().nullable().optional(),
+    created_at: z16.string(),
+    id: z16.number().int().positive(),
+    merged: z16.boolean(),
+    merged_at: z16.string().nullable().optional(),
+    number: z16.number().int().positive(),
+    title: z16.string().min(1).optional(),
+    updated_at: z16.string(),
+    user: z16.object({ login: z16.string().min(1) }).strict()
   }).strict(),
-  repository: z15.object({
-    full_name: z15.string().min(1),
-    id: z15.number().int().positive()
+  repository: z16.object({
+    full_name: z16.string().min(1),
+    id: z16.number().int().positive()
   }).strict()
 }).strict();
-var pullRequestOutcomeSchema = z15.object({
-  action: z15.enum(["opened", "closed", "reopened"]),
-  pull_request: z15.object({
-    body: z15.string().nullable().optional(),
-    closed_at: z15.string().nullable().optional(),
-    created_at: z15.string(),
-    id: z15.number().int().positive(),
-    merged: z15.boolean(),
-    merged_at: z15.string().nullable().optional(),
-    number: z15.number().int().positive(),
-    title: z15.string().min(1).optional(),
-    updated_at: z15.string(),
-    user: z15.object({ login: z15.string().min(1) }).passthrough()
+var pullRequestOutcomeSchema = z16.object({
+  action: z16.enum(["opened", "closed", "reopened"]),
+  pull_request: z16.object({
+    body: z16.string().nullable().optional(),
+    closed_at: z16.string().nullable().optional(),
+    created_at: z16.string(),
+    id: z16.number().int().positive(),
+    merged: z16.boolean(),
+    merged_at: z16.string().nullable().optional(),
+    number: z16.number().int().positive(),
+    title: z16.string().min(1).optional(),
+    updated_at: z16.string(),
+    user: z16.object({ login: z16.string().min(1) }).passthrough()
   }).passthrough(),
-  repository: z15.object({
-    full_name: z15.string().min(1),
-    id: z15.number().int().positive()
+  repository: z16.object({
+    full_name: z16.string().min(1),
+    id: z16.number().int().positive()
   }).passthrough()
 }).passthrough().transform(
   (provider) => canonicalPullRequestOutcomeSchema.parse({
@@ -2776,24 +2905,24 @@ var pullRequestOutcomeSchema = z15.object({
     }
   })
 );
-var pullRequestLifecycleActionSchema = z15.object({ action: z15.string() }).passthrough();
-var canonicalPullRequestConversationSchema = z15.object({
-  pull_request: z15.object({
-    body: z15.string().nullable().optional(),
-    id: z15.number().int().positive(),
-    user: z15.object({ login: z15.string().min(1) }).strict()
+var pullRequestLifecycleActionSchema = z16.object({ action: z16.string() }).passthrough();
+var canonicalPullRequestConversationSchema = z16.object({
+  pull_request: z16.object({
+    body: z16.string().nullable().optional(),
+    id: z16.number().int().positive(),
+    user: z16.object({ login: z16.string().min(1) }).strict()
   }).strict(),
-  repository: z15.object({ full_name: z15.string().min(1) }).strict(),
-  sender: z15.object({ login: z15.string().min(1) }).strict()
+  repository: z16.object({ full_name: z16.string().min(1) }).strict(),
+  sender: z16.object({ login: z16.string().min(1) }).strict()
 }).strict();
-var pullRequestConversationSchema = z15.object({
-  pull_request: z15.object({
-    body: z15.string().nullable().optional(),
-    id: z15.number().int().positive(),
-    user: z15.object({ login: z15.string().min(1) }).passthrough()
+var pullRequestConversationSchema = z16.object({
+  pull_request: z16.object({
+    body: z16.string().nullable().optional(),
+    id: z16.number().int().positive(),
+    user: z16.object({ login: z16.string().min(1) }).passthrough()
   }).passthrough(),
-  repository: z15.object({ full_name: z15.string().min(1) }).passthrough(),
-  sender: z15.object({ login: z15.string().min(1) }).passthrough()
+  repository: z16.object({ full_name: z16.string().min(1) }).passthrough(),
+  sender: z16.object({ login: z16.string().min(1) }).passthrough()
 }).passthrough().transform(
   (provider) => canonicalPullRequestConversationSchema.parse({
     pull_request: {
@@ -3075,18 +3204,18 @@ function createGitHubWebhookRoute(args) {
 }
 
 // src/pull-request-outcomes/commit-composition.ts
-import { z as z16 } from "zod";
-var canonicalCommitSchema = z16.object({
-  authorEmail: z16.string().nullable(),
-  authorLogin: z16.string().nullable()
+import { z as z17 } from "zod";
+var canonicalCommitSchema = z17.object({
+  authorEmail: z17.string().nullable(),
+  authorLogin: z17.string().nullable()
 }).strict();
-var providerCommitSchema = z16.object({
-  author: z16.object({ login: z16.string() }).passthrough().nullable(),
-  commit: z16.object({
-    author: z16.object({ email: z16.string() }).passthrough().nullable()
+var providerCommitSchema = z17.object({
+  author: z17.object({ login: z17.string() }).passthrough().nullable(),
+  commit: z17.object({
+    author: z17.object({ email: z17.string() }).passthrough().nullable()
   }).passthrough()
 }).passthrough();
-var commitPageSchema = z16.array(providerCommitSchema).transform(
+var commitPageSchema = z17.array(providerCommitSchema).transform(
   (commits) => commits.map(
     (commit) => canonicalCommitSchema.parse({
       authorEmail: commit.commit.author?.email ?? null,
@@ -3965,6 +4094,13 @@ var GITHUB_BODY_WRITES = [
     operation: "github.pull.create",
     restPath: /^\/repos\/[^/]+\/[^/]+\/pulls$/
   },
+  {
+    denialMessage: `GitHub pull request reviews must use the github_submitPullRequestReview tool. The tool posts to /repos/{owner}/{repo}/pulls/{number}/reviews. ${CREATE_TOOL_ROUTING_GUIDANCE}`,
+    graphqlField: "addPullRequestReview",
+    method: "POST",
+    operation: "github.pull.review.create",
+    restPath: /^\/repos\/[^/]+\/[^/]+\/pulls\/[^/]+\/reviews$/
+  },
   {
     denialMessage: `GitHub issue updates must use the github_updateIssue tool so Junior can own requester attribution and the conversation footer. ${CREATE_TOOL_ROUTING_GUIDANCE}`,
     graphqlField: "updateIssue",
@@ -4087,7 +4223,7 @@ function requireRepositoryTarget(upstreamUrl) {
     return;
   }
   throw new EgressPolicyDenied2(
-    "GitHub write request does not identify a target repository."
+    "GitHub write request has no repository in its URL. Use a /repos/{owner}/{repo}/... URL or a GitHub tool for the operation."
   );
 }
 async function githubGrantForEgress(ctx) {
@@ -4154,7 +4290,7 @@ async function githubGrantForEgress(ctx) {
   if (graphqlAccess) {
     if (graphqlAccess === "write") {
       throw new EgressPolicyDenied2(
-        "GitHub GraphQL mutations are not enabled for runtime credentials."
+        "GitHub GraphQL mutations are not enabled for runtime credentials. Use the matching GitHub tool or a supported REST endpoint. For pull request reviews, use github_submitPullRequestReview. It posts to /repos/{owner}/{repo}/pulls/{number}/reviews."
       );
     }
     return grantForAccess(
@@ -4166,7 +4302,7 @@ async function githubGrantForEgress(ctx) {
   const access = HTTP_READ_METHODS.has(method) ? "read" : "write";
   if (access === "write") {
     throw new EgressPolicyDenied2(
-      "GitHub write request is not an explicitly allowed Junior operation."
+      "Junior does not support this GitHub write request. Use the matching GitHub tool or a supported REST endpoint."
     );
   }
   return grantForAccess(access, "github.api-read", "installation-read");

package/dist/tools/submit-pull-request-review.d.ts

@@ -0,0 +1,42 @@
+import { type PluginEgress } from "@sentry/junior-plugin-api";
+/** Submit a comment or change-request review through GitHub's REST API. */
+export declare function createGitHubSubmitPullRequestReviewTool(egress: PluginEgress): import("@sentry/junior-plugin-api").PluginToolDefinition<{
+    repo: string;
+    number: number;
+    event: "COMMENT" | "REQUEST_CHANGES";
+    body: string;
+    comments?: {
+        path: string;
+        body: string;
+        line: number;
+        side: "LEFT" | "RIGHT";
+        startLine?: number | undefined;
+        startSide?: "LEFT" | "RIGHT" | undefined;
+    }[] | undefined;
+}, {
+    [x: string]: unknown;
+    target: "submitPullRequestReview";
+    repo: string;
+    number: number;
+    reviewId: number;
+    state: string;
+    url: string;
+    truncated?: boolean | undefined;
+    continuation?: {
+        arguments: Record<string, unknown>;
+        reason?: string | undefined;
+    } | undefined;
+}, {
+    [x: string]: unknown;
+    target: "submitPullRequestReview";
+    repo: string;
+    number: number;
+    reviewId: number;
+    state: string;
+    url: string;
+    truncated?: boolean | undefined;
+    continuation?: {
+        arguments: Record<string, unknown>;
+        reason?: string | undefined;
+    } | undefined;
+}>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sentry/junior-github",
-  "version": "0.199.0",
+  "version": "0.200.0",
   "private": false,
   "publishConfig": {
     "access": "public"
@@ -31,7 +31,7 @@
     "@sinclair/typebox": "^0.34.49",
     "drizzle-orm": "^0.45.2",
     "zod": "^4.5.4",
-    "@sentry/junior-plugin-api": "0.199.0"
+    "@sentry/junior-plugin-api": "0.200.0"
   },
   "devDependencies": {
     "@oxlint/plugins": "1.79.0",

package/skills/github-code/SKILL.md

@@ -3,36 +3,37 @@ name: github-code
 description: Work with GitHub repositories, source code, branches, commits, pull requests, reviews, diffs, CI, and repository credentials. Use for implementation, source investigation, clone/fetch/branch workflows, PR creation or updates, review feedback, GitHub Actions checks, and repository permission failures. Prefer this skill for repository tasks even when they concern a Sentry product.
 ---
 
-# GitHub Code Operations
+# GitHub code
 
 Use `git` and `gh` for repository work.
 
-| Action | Tool / command |
-| --- | --- |
-| Create PR | `github_createPullRequest` (not `gh pr create`) |
-| Update PR title/body/base/state | `github_updatePullRequest` (not raw PATCH / `gh pr edit`) |
-| Resolve review thread | `github_resolvePullRequestReviewThread` (not raw GraphQL) |
-| Clone missing repo | `github_cloneRepository`; on Workspace match error use `switchWorkspace` |
+| Action                          | Tool / command                                                           |
+| ------------------------------- | ------------------------------------------------------------------------ |
+| Create PR                       | `github_createPullRequest` (not `gh pr create`)                          |
+| Update PR title/body/base/state | `github_updatePullRequest`                                               |
+| Submit PR review                | `github_submitPullRequestReview`                                         |
+| Resolve review thread           | `github_resolvePullRequestReviewThread`                                  |
+| Clone missing repo              | `github_cloneRepository`; on Workspace match error use `switchWorkspace` |
 
 ## Open when needed
 
-| Need | Read |
-| --- | --- |
-| Commands, permissions, allowlist | [references/api-surface.md](references/api-surface.md) |
-| Edit → verify → PR packaging | [references/workflow.md](references/workflow.md) |
-| Failed command or permission recovery | [references/troubleshooting-workarounds.md](references/troubleshooting-workarounds.md) |
+| Need                          | Read                                                                                   |
+| ----------------------------- | -------------------------------------------------------------------------------------- |
+| Commands and permissions      | [references/api-surface.md](references/api-surface.md)                                 |
+| Edit, verify, and open a PR   | [references/workflow.md](references/workflow.md)                                       |
+| Command or permission failure | [references/troubleshooting-workarounds.md](references/troubleshooting-workarounds.md) |
 
 ## Always
 
-- Resolve repo from the request, then `github.repo`. Run `jr-rpc config get github.repo` standalone.
-- Keep `--repo owner/repo` explicit on `gh`; use `git -C PATH` for local repos.
-- Read applicable `AGENTS.md` before editing. Narrower repo/task instructions win.
-- Preserve unrelated work. Never force-push, delete refs, or do destructive merges.
-- Base conclusions on repository evidence. Do not claim a check ran unless it did.
-- Push the branch before creating a bot-owned PR. Runtime injects installation credentials; never ask for a user token for bot pushes.
-- Tool-routing denials need the named tool. Only upstream denials justify permission remediation.
-- Stop for ambiguous targets, missing access, destructive ops, or unresolved upstream permission failures.
-- Unless the user opts out, finish completed edits with a pushed branch and PR (draft by default).
-- Report to the user: repo, branch, PR URL/number, local check results, and anything not run.
-
-Do not install or repair the GitHub plugin runtime from this skill. The plugin manifest owns that.
+- Use the requested repo. Otherwise read `github.repo` with standalone `jr-rpc config get github.repo`.
+- Pass `--repo owner/repo` to `gh`. Use `git -C PATH` for local repos.
+- Read each applicable `AGENTS.md` before edits.
+- Keep unrelated work. Never force-push, delete refs, or make destructive merges.
+- Use repository evidence. Report only checks you ran.
+- Push before `github_createPullRequest`. Never ask for a token for bot pushes.
+- When an error names a tool, use it. Change permissions only when GitHub rejected the request.
+- Stop for an unclear target, missing access, destructive work, or a GitHub permission failure.
+- Unless the user opts out, push completed work and open a draft PR.
+- Report repo, branch, PR, checks, and skipped checks.
+
+Do not install or repair the GitHub plugin from this skill.

package/skills/github-code/references/api-surface.md

@@ -1,56 +1,56 @@
-# GitHub API surface — code and pull requests
+# GitHub commands and permissions
 
-PR create/update and review-thread resolve use the tools named in `SKILL.md`. Other supported mutations use allowlisted REST through `gh api`. Generic GraphQL-backed `gh pr` mutations are not supported.
+Use the tools in `SKILL.md` to create or update a PR, submit a review, or resolve a review thread. Use supported REST endpoints for other writes. Do not use GraphQL mutations.
 
 ## Repo targeting
 
-When the user omits `owner/repo`, resolve with standalone `jr-rpc config get github.repo`, then pass `--repo owner/repo` on the next `gh`/`git` command. Explicit repo flags target the command; they are not a credential scope.
+If the user omits `owner/repo`, run `jr-rpc config get github.repo`. Then pass `--repo owner/repo` to `gh`.
 
 ## Permissions
 
-| Capability | Commands |
-| --- | --- |
-| `github.actions.read` | `gh run list`, `gh run view`, `gh run watch`, `gh workflow list`, `gh workflow view` |
-| `github.actions.write` | `gh workflow run`, `gh run rerun`, `gh run cancel` |
-| `github.contents.read` | `gh repo clone`, `git fetch` |
-| `github.contents.write` | Git smart-HTTP `git push` only |
-| `github.workflows.write` | Workflow-file changes on push |
-| `github.pull-requests.read` | `gh pr view`, `gh pr list`, `gh pr diff`, `gh pr checks` |
-| `github.pull-requests.write` | Typed PR create and allowlisted REST PR lifecycle |
+| Capability                   | Commands                                                                             |
+| ---------------------------- | ------------------------------------------------------------------------------------ |
+| `github.actions.read`        | `gh run list`, `gh run view`, `gh run watch`, `gh workflow list`, `gh workflow view` |
+| `github.actions.write`       | `gh workflow run`, `gh run rerun`, `gh run cancel`                                   |
+| `github.contents.read`       | `gh repo clone`, `git fetch`                                                         |
+| `github.contents.write`      | Git smart-HTTP `git push` only                                                       |
+| `github.workflows.write`     | Workflow-file changes on push                                                        |
+| `github.pull-requests.read`  | `gh pr view`, `gh pr list`, `gh pr diff`, `gh pr checks`                             |
+| `github.pull-requests.write` | GitHub tools and supported REST writes                                               |
 
 ## Commands
 
-| Operation | Command |
-| --- | --- |
-| Clone (default shallow) | `gh repo clone owner/repo [DIR] -- --depth=1` |
-| Fetch bounded base | `git -C DIR fetch --depth=N origin BASE:refs/remotes/origin/BASE` |
-| Deepen base | `git -C DIR fetch --deepen=N origin BASE:refs/remotes/origin/BASE` |
-| Unshallow | `git -C DIR fetch --unshallow origin` |
-| Shallow check | `git -C DIR rev-parse --is-shallow-repository` |
-| Branch / status | `git -C DIR branch --show-current` / `git -C DIR status --short --branch` |
-| Log / diff vs base | `git -C DIR log origin/BASE..HEAD --oneline` / `git -C DIR diff origin/BASE...HEAD` |
-| Default branch | `gh repo view owner/repo --json defaultBranchRef --jq .defaultBranchRef.name` |
-| Create branch | `git -C DIR checkout -b BRANCH` |
-| Commit | `git -C DIR add -A && git -C DIR commit -m "message"` |
-| Push | `git -C DIR push -u origin BRANCH` |
-| Workflow dispatch | `gh workflow run WORKFLOW --repo owner/repo --ref REF [-f key=value]` |
-| Rerun / cancel | `gh run rerun RUN_ID -R owner/repo [--failed]` / `gh run cancel RUN_ID -R owner/repo` |
-| Ready for review | `gh api repos/owner/repo/pulls/NUMBER/ready_for_review --method POST` |
-| Request reviewers | `gh api repos/owner/repo/pulls/NUMBER/requested_reviewers --method POST --input reviewers.json` |
-| Submit review | `gh api repos/owner/repo/pulls/NUMBER/reviews --method POST --input review.json` |
-| Inline review comment | `gh api repos/owner/repo/pulls/NUMBER/comments --method POST --input comment.json` |
-| View PR / checks | `gh pr view NUMBER --repo owner/repo` / `gh pr checks NUMBER --repo owner/repo` |
-| Diff PR | `gh pr diff NUMBER --repo owner/repo` |
-| List runs | `gh run list -R owner/repo --workflow WORKFLOW` |
-| View / watch run | `gh run view RUN_ID -R owner/repo` / `gh run watch RUN_ID -R owner/repo --exit-status` |
+| Operation               | Command                                                                                         |
+| ----------------------- | ----------------------------------------------------------------------------------------------- |
+| Clone (default shallow) | `gh repo clone owner/repo [DIR] -- --depth=1`                                                   |
+| Fetch bounded base      | `git -C DIR fetch --depth=N origin BASE:refs/remotes/origin/BASE`                               |
+| Deepen base             | `git -C DIR fetch --deepen=N origin BASE:refs/remotes/origin/BASE`                              |
+| Unshallow               | `git -C DIR fetch --unshallow origin`                                                           |
+| Shallow check           | `git -C DIR rev-parse --is-shallow-repository`                                                  |
+| Branch / status         | `git -C DIR branch --show-current` / `git -C DIR status --short --branch`                       |
+| Log / diff vs base      | `git -C DIR log origin/BASE..HEAD --oneline` / `git -C DIR diff origin/BASE...HEAD`             |
+| Default branch          | `gh repo view owner/repo --json defaultBranchRef --jq .defaultBranchRef.name`                   |
+| Create branch           | `git -C DIR checkout -b BRANCH`                                                                 |
+| Commit                  | `git -C DIR add -A && git -C DIR commit -m "message"`                                           |
+| Push                    | `git -C DIR push -u origin BRANCH`                                                              |
+| Workflow dispatch       | `gh workflow run WORKFLOW --repo owner/repo --ref REF [-f key=value]`                           |
+| Rerun / cancel          | `gh run rerun RUN_ID -R owner/repo [--failed]` / `gh run cancel RUN_ID -R owner/repo`           |
+| Ready for review        | `gh api repos/owner/repo/pulls/NUMBER/ready_for_review --method POST`                           |
+| Request reviewers       | `gh api repos/owner/repo/pulls/NUMBER/requested_reviewers --method POST --input reviewers.json` |
+| Submit review           | `github_submitPullRequestReview`                                                                |
+| Inline review comment   | `gh api repos/owner/repo/pulls/NUMBER/comments --method POST --input comment.json`              |
+| View PR / checks        | `gh pr view NUMBER --repo owner/repo` / `gh pr checks NUMBER --repo owner/repo`                 |
+| Diff PR                 | `gh pr diff NUMBER --repo owner/repo`                                                           |
+| List runs               | `gh run list -R owner/repo --workflow WORKFLOW`                                                 |
+| View / watch run        | `gh run view RUN_ID -R owner/repo` / `gh run watch RUN_ID -R owner/repo --exit-status`          |
 
 ## Notes
 
 - Prefer `--json` where available. Pass clone flags after `--`.
-- Local commit does not call GitHub. Push uses installation credentials (`contents.write`; workflow files also need `workflows.write`).
-- Before history-dependent git work, deepen shallow clones; never force-push around missing ancestry.
-- Push head and resolve default `base` before `github_createPullRequest`.
-- Denied: merge, forks, REST contents/Git database writes, repo admin, raw PR PATCH, raw GraphQL mutations.
-- Reviews and inline comments post as the App bot via `installation-write`.
+- A local commit does not call GitHub. A push uses installation credentials. Workflow changes also need `workflows.write`.
+- Deepen a shallow clone before work that needs old history. Do not force-push to work around missing history.
+- Push `head` and read the default `base` before `github_createPullRequest`.
+- Junior does not support merges, forks, repository administration, REST content or Git database writes, direct PR update or review writes, or GraphQL mutations.
+- Reviews and inline comments use the App bot.
 - PR comments/labels/assignees use issue endpoints; load `github-issues` for those.
 - Embed local images with `publishImage` first (public URL). Do not use private Slack file links.

package/skills/github-code/references/troubleshooting-workarounds.md

@@ -1,33 +1,32 @@
-# GitHub CLI troubleshooting — code and pull requests
+# GitHub troubleshooting
 
-| Symptom | Likely cause | Fix |
-| --- | --- | --- |
-| `unknown command` from `gh` | Runtime `gh` missing or too old | Report GitHub plugin runtime dependency unavailable |
-| `unknown flag: --depth` on clone | Clone flags before `--` | `gh repo clone owner/repo -- --depth=1` |
-| Missing `--repo` | No explicit target | Resolve `github.repo`, pass `--repo owner/repo` |
-| Wrong repo authenticated | Stale default | Pass `--repo owner/repo` or update `github.repo` |
-| GraphQL: could not resolve repository | Bad slug or no access | Validate `owner/repo` and App install |
-| 401 Unauthorized | Credential rejected | Confirm target; distinguish user OAuth vs installation setup |
-| `junior-auth-required` `user-write` | Missing/stale user OAuth | Follow private OAuth prompt; never ask for pasted tokens |
-| `git push` 401/403 | Install scope, remote, or permissions | Verify remote/repo, retry once, then report install scope |
-| `permission_denied` `source: "upstream"` | GitHub 403 after inject | Not a local runtime block; use grant/account/SSO fields |
-| 403 without upstream `permission_denied` | Local policy denial | Read body; follow required-tool guidance |
-| `Token scopes: none` on `gh auth status` | Normal for App user tokens | Use App permissions / accepted-permissions headers |
-| `github_createPullRequest` 401/403 | Install/repo lacks write | Report install scope; do not fall back to user OAuth |
-| Create PR 422 on `head` | Branch not pushed | Push branch; retry with explicit head/base |
-| Create/update PR 422 on `base` | Base missing | Resolve default branch; retry |
-| 403 names `github_updatePullRequest` | Raw PR PATCH blocked | Use `github_updatePullRequest` |
-| GraphQL mutations not enabled | Raw resolve blocked | Use `github_resolvePullRequestReviewThread` (bot-authored PRs only) |
-| Missing blame/old history | Shallow clone | Deepen needed refs; `--unshallow` only if required |
-| Odd ancestry / rebase fails | Base ref missing locally | Fetch `BASE:refs/remotes/origin/BASE`, deepen, use `origin/BASE` |
-| Missing deps in tests | Not installed | Frozen/immutable install for the lockfile; do not rewrite lockfile |
-| Frozen install fails | Drift or registry | Report exact failure |
-| `dnf install gh failed` | Plugin bootstrap | Report runtime bootstrap failure; do not repair from skill |
+| Problem                                                    | Action                                                                                    |
+| ---------------------------------------------------------- | ----------------------------------------------------------------------------------------- |
+| `gh` reports an unknown command                            | Report that the GitHub plugin is unavailable. Do not install it.                          |
+| Clone rejects `--depth`                                    | Put clone flags after `--`: `gh repo clone owner/repo -- --depth=1`.                      |
+| Repository is missing or wrong                             | Read `github.repo`, then pass `--repo owner/repo`.                                        |
+| GraphQL cannot find the repository                         | Check `owner/repo` and the GitHub App installation.                                       |
+| `junior-auth-required` with `user-write`                   | Follow the private OAuth prompt. Never ask for a pasted token.                            |
+| `git push` returns 401 or 403                              | Check the remote and repository. Retry once, then report the installation access failure. |
+| `permission_denied` has `source: "upstream"`               | GitHub rejected the request. Report the grant, account, or SSO details.                   |
+| Other 403 response                                         | Read the error and use the tool it names.                                                 |
+| `gh auth status` shows no token scopes                     | This is normal for GitHub App user tokens. Check App permissions instead.                 |
+| `github_createPullRequest` returns 401 or 403              | Report the installation access failure. Do not use user OAuth.                            |
+| PR creation returns 422 for `head`                         | Push the branch, then retry with explicit `head` and `base`.                              |
+| PR create or update returns 422 for `base`                 | Read the default branch, then retry.                                                      |
+| 403 names `github_updatePullRequest`                       | Use `github_updatePullRequest`.                                                           |
+| PR review reports blocked GraphQL mutations                | Use `github_submitPullRequestReview`.                                                     |
+| Review-thread resolution reports blocked GraphQL mutations | Use `github_resolvePullRequestReviewThread`. It works only on bot-authored PRs.           |
+| Blame or old history is missing                            | Deepen the needed refs. Unshallow only when required.                                     |
+| Rebase has missing ancestry                                | Fetch `BASE:refs/remotes/origin/BASE`, deepen it, and use `origin/BASE`.                  |
+| Dependencies are missing                                   | Run the frozen install. Do not change the lockfile.                                       |
+| Frozen install fails                                       | Report the exact failure.                                                                 |
+| Plugin setup fails                                         | Report the setup failure. Do not repair it from the skill.                                |
 
 ## Retry rules
 
-- Retry once for transient transport after verifying repo context.
-- Do not loop on repeated 401/403/404 validation errors.
-- `user-read`/`user-write` gaps → private App OAuth. `installation-*` failures → App permission/install/host setup only.
-- Prefer `permission_denied` structured fields over guessing.
-- Persistent permission problems: report remediation and stop.
+- Retry a transport failure once after you check the repository.
+- Do not repeat 401, 403, 404, or validation failures.
+- A `user-read` or `user-write` failure needs private App OAuth.
+- An `installation-*` failure needs an App permission or installation fix.
+- Use structured `permission_denied` details when present.