Distillation

Date: Sep 8, 2026

• 🟡 (03:33) src/modules/__tests__/ci-poller-input.js imports getCiPollerInput from ../ci-poller-input.js; fixtures use REVISION = "7e5ca7ed5581552de066e2a8bc295b8306be38ac" and an issue body for @byk, merge target (default), a toolkit changes link, and View check runs URL https://github.com/getsentry/toolkit/commit/${REVISION}/checks/.
• 🟡 (03:33) getCiPollerInput() is tested to resolve both title formats publish: getsentry/toolkit/cli@1.2.3 and publish: toolkit/packages/cli/v2@1.2.3 to { repo: "getsentry/toolkit", revision: REVISION, version: "1.2.3" }.
• 🟡 (03:33) CI poller workflow integration test requires .github/workflows/ci-poller.yml to contain name: Check out publish controller, path: .__publish__, and node .__publish__/src/publish/resolve-ci-poller-input.js; it must not contain grep -oP '(?<=commit/.
• 🟡 (03:33) getCiPollerInput() security tests reject unsafe repository identities -toolkit, ., .., and __proto__ before CI API calls with error Invalid publish issue repository.
• 🟡 (03:33) getCiPollerInput() rejects invalid release versions --config and 1.2 before CI API calls with error Invalid publish issue version.
• 🟡 (03:33) getCiPollerInput() rejects malformed titles publish: getsentry/@1.2.3 and publish: getsentry/toolkit$@1.2.3 with error Invalid publish issue title.
• 🟡 (03:33) getCiPollerInput() rejects unsafe publish paths in titles—../other, ./other, __proto__/other, and --config under getsentry/toolkit—before CI API calls with error Invalid publish issue path.