Function fetchAllDependabotAlerts

services/security-sync/src/sync.ts:467–540

(
  token: string,
  repoOwner: string,
  repoName: string
)

  db: WorkerDb,
  owner: SecurityReviewOwner,
  progress: SyncRunProgressWrite
): Promise<{ written: boolean }> {
  const progressJson = JSON.stringify(progress);
  const completedReposJson = JSON.stringify(progress.completedRepos);
  const rows = await db
    .update(agent_configs)
    .set({
      runtime_state: sql`jsonb_set(
        COALESCE(${agent_configs.runtime_state}, '{}'::jsonb),
        '{sync_run}',
        ${progressJson}::jsonb || jsonb_build_object(
          'completedRepos',
          (
            SELECT COALESCE(jsonb_agg(DISTINCT elem), '[]'::jsonb)
            FROM jsonb_array_elements_text(
              COALESCE(${agent_configs.runtime_state}->'sync_run'->'completedRepos', '[]'::jsonb)
              || ${completedReposJson}::jsonb
            ) AS elem
          )
        ),
        true
      )`,
    })
    .where(
      and(
        eq(agent_configs.agent_type, 'security_scan'),
        eq(agent_configs.platform, 'github'),
        ownerFilter(owner),
        sql`${agent_configs.runtime_state}->'sync_lease'->>'runId' = ${progress.runId}`,
        sql`${agent_configs.runtime_state}->'sync_run'->>'runId' = ${progress.runId}`,
        sql`COALESCE((${agent_configs.runtime_state}->'sync_lease'->>'chunkIndex')::int, -1) <= ${progress.chunkIndex}`,
        sql`(${agent_configs.runtime_state}->'sync_run'->'chunkIndex' IS NULL OR (${agent_configs.runtime_state}->'sync_run'->>'chunkIndex')::int <= ${progress.chunkIndex})`
      )
    )
    .returning({ id: agent_configs.id });
  return { written: rows.length > 0 };
}

export async function clearSyncRunProgress(
  db: WorkerDb,
  owner: SecurityReviewOwner,
  runId: string,
  chunkIndex: number
): Promise<{ cleared: boolean }> {
  const rows = await db
    .update(agent_configs)
    .set({
      runtime_state: sql`COALESCE(${agent_configs.runtime_state}, '{}'::jsonb) - 'sync_run'`,
    })
    .where(
      and(
        eq(agent_configs.agent_type, 'security_scan'),
        eq(agent_configs.platform, 'github'),
        ownerFilter(owner),
        sql`${agent_configs.runtime_state}->'sync_run'->>'runId' = ${runId}`,
        sql`${agent_configs.runtime_state}->'sync_lease'->>'runId' = ${runId}`,
        sql`COALESCE((${agent_configs.runtime_state}->'sync_lease'->>'chunkIndex')::int, -1) <= ${chunkIndex}`,
        sql`(${agent_configs.runtime_state}->'sync_run'->'chunkIndex' IS NULL OR (${agent_configs.runtime_state}->'sync_run'->>'chunkIndex')::int <= ${chunkIndex})`