Function upsertSecurityFinding

services/security-sync/src/sync.ts:657–897

(
  db: Pick<WorkerDb, 'execute'>,
  params: {
    finding: ParsedSecurityFinding;
    owner: SecurityReviewOwner;
    platformIntegrationId: string;
    repoFullName: string;
    slaDueAt: string;
  }
)

    await releaseOwnerSyncLeaseLogged(db, owner, runId, chunkIndex, reason);
    return null;
  }

  const miss = await classifyOwnerMutationMiss(db, owner, runId, chunkIndex);
  if (miss?.kind === 'stale_chunk') {
    console.info('Security sync checkpoint clear rejected', {
      runId,
      chunkIndex,
      reason: 'stale_chunk',
    });
  } else if (miss?.kind !== 'completed') {
    console.info('Security sync checkpoint clear rejected', {
      runId,
      chunkIndex,
      reason: 'superseded',
    });
  }
  const reaction = reactToOwnerMutationMiss(miss, createEmptySyncResult(), {
    releaseOnSuperseded: true,
  });
  if (reaction.release) {
    await releaseOwnerSyncLeaseLogged(db, owner, runId, chunkIndex, reason);
  }
  return reaction.result;
}

function createAuthInvalidSyncResult(repositories: string[]): SyncResult {
  return {
    ...createEmptySyncResult(),
    authInvalid: repositories.length,
    authInvalidRepos: [...repositories],
    reauthRequired: true,
  };
}

function isOrgOwner(
  owner: SecurityReviewOwner
): owner is { organizationId: string; userId?: never } {
  return 'organizationId' in owner && Boolean(owner.organizationId);
}

function toSecurityAgentCommandOwner(owner: SecurityReviewOwner): SecurityAgentCommandOwner {
  return isOrgOwner(owner)
    ? { type: 'org', id: owner.organizationId }
    : { type: 'user', id: owner.userId };
}

function ownerFilter(owner: SecurityReviewOwner) {
  if (isOrgOwner(owner)) {
    return eq(agent_configs.owned_by_organization_id, owner.organizationId);
  }
  return eq(agent_configs.owned_by_user_id, owner.userId);
}

function integrationOwnerFilter(owner: SecurityReviewOwner) {
  if (isOrgOwner(owner)) {
    return eq(platform_integrations.owned_by_organization_id, owner.organizationId);
  }
  return eq(platform_integrations.owned_by_user_id, owner.userId);