feat(github): terminate Devin sessions when PR is closed/merged (#2014)

* feat(github): terminate Devin sessions when PR is closed/merged

- Add PR closed webhook handler that finds and terminates linked Devin sessions
- Implement smart pagination for session lookup based on PR creation date
- Add tests for the webhook handler with mocked Devin API responses

Co-Authored-By: yujonglee <[email protected]>

* fix(github): remove early-exit assumption and paginate through all sessions

- Remove prCreatedAt parameter and early-exit logic that assumed descending order
- Add per-page sorting by created_at descending as suggested in review
- Continue paginating until match found or all pages exhausted
- Add tests for multi-page pagination and out-of-order sessions

Co-Authored-By: yujonglee <[email protected]>

---------

Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>

Author: yujonglee

apps/github/package.json

@@ -0,0 +1,25 @@
+{
+  "name": "@hypr/github",
+  "version": "1.0.0",
+  "private": true,
+  "scripts": {
+    "build": "tsc",
+    "typecheck": "tsc --noEmit",
+    "start": "probot run ./lib/index.js",
+    "test": "vitest run"
+  },
+  "dependencies": {
+    "probot": "^13.4.5"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "nock": "^14.0.5",
+    "smee-client": "^2.0.0",
+    "vitest": "^2.0.0",
+    "typescript": "^5.8.3"
+  },
+  "engines": {
+    "node": ">= 18"
+  },
+  "type": "module"
+}

apps/github/src/index.ts

@@ -0,0 +1,150 @@
+import { ApplicationFunctionOptions, Probot } from "probot";
+
+interface DevinSession {
+  session_id: string;
+  status: string;
+  title: string;
+  created_at: string;
+  updated_at: string;
+  snapshot_id: string | null;
+  playbook_id: string | null;
+  pull_request: {
+    url: string;
+  } | null;
+}
+
+interface ListSessionsResponse {
+  sessions: DevinSession[];
+}
+
+async function listDevinSessions(
+  apiKey: string,
+  limit: number = 100,
+  offset: number = 0,
+): Promise<ListSessionsResponse> {
+  const url = new URL("https://api.devin.ai/v1/sessions");
+  url.searchParams.set("limit", limit.toString());
+  url.searchParams.set("offset", offset.toString());
+
+  const response = await fetch(url.toString(), {
+    method: "GET",
+    headers: {
+      Authorization: `Bearer ${apiKey}`,
+    },
+  });
+
+  if (!response.ok) {
+    throw new Error(
+      `Failed to list sessions: ${response.status} ${response.statusText}`,
+    );
+  }
+
+  return response.json() as Promise<ListSessionsResponse>;
+}
+
+async function terminateDevinSession(
+  apiKey: string,
+  sessionId: string,
+): Promise<void> {
+  const response = await fetch(
+    `https://api.devin.ai/v1/sessions/${sessionId}`,
+    {
+      method: "DELETE",
+      headers: {
+        Authorization: `Bearer ${apiKey}`,
+      },
+    },
+  );
+
+  if (!response.ok) {
+    throw new Error(
+      `Failed to terminate session: ${response.status} ${response.statusText}`,
+    );
+  }
+}
+
+async function findDevinSessionForPR(
+  apiKey: string,
+  prUrl: string,
+): Promise<DevinSession | null> {
+  const limit = 100;
+  let offset = 0;
+  const maxIterations = 50;
+
+  for (let i = 0; i < maxIterations; i++) {
+    const { sessions } = await listDevinSessions(apiKey, limit, offset);
+
+    if (sessions.length === 0) {
+      break;
+    }
+
+    const sorted = [...sessions].sort(
+      (a, b) =>
+        new Date(b.created_at).getTime() - new Date(a.created_at).getTime(),
+    );
+
+    const match = sorted.find((s) => s.pull_request?.url === prUrl);
+    if (match) {
+      return match;
+    }
+
+    if (sessions.length < limit) {
+      break;
+    }
+
+    offset += limit;
+  }
+
+  return null;
+}
+
+export default (app: Probot, { getRouter }: ApplicationFunctionOptions) => {
+  if (getRouter) {
+    const router = getRouter("/");
+
+    router.get("/health", (_req, res) => {
+      res.send("OK");
+    });
+  }
+
+  app.on("pull_request.closed", async (context) => {
+    const apiKey = process.env.DEVIN_API_KEY;
+    if (!apiKey) {
+      context.log.warn("DEVIN_API_KEY not set, skipping session termination");
+      return;
+    }
+
+    const pr = context.payload.pull_request;
+    const prUrl = pr.html_url;
+
+    context.log.info(`PR closed: ${prUrl} (merged: ${pr.merged})`);
+
+    try {
+      const session = await findDevinSessionForPR(apiKey, prUrl);
+
+      if (!session) {
+        context.log.info(`No Devin session found for PR: ${prUrl}`);
+        return;
+      }
+
+      if (session.status !== "running") {
+        context.log.info(
+          `Devin session ${session.session_id} is not running (status: ${session.status}), skipping termination`,
+        );
+        return;
+      }
+
+      context.log.info(
+        `Terminating Devin session ${session.session_id} for PR: ${prUrl}`,
+      );
+      await terminateDevinSession(apiKey, session.session_id);
+      context.log.info(
+        `Successfully terminated Devin session ${session.session_id}`,
+      );
+    } catch (error) {
+      context.log.error(
+        `Failed to terminate Devin session for PR ${prUrl}: ${error}`,
+      );
+    }
+  });
+};

apps/github/test/fixtures/pull_request.closed.json

@@ -0,0 +1,21 @@
+{
+  "action": "closed",
+  "number": 123,
+  "pull_request": {
+    "html_url": "https://github.com/example/repo/pull/123",
+    "created_at": "2024-01-01T00:00:00Z",
+    "merged": true
+  },
+  "repository": {
+    "id": 1,
+    "node_id": "MDEwOlJlcG9zaXRvcnkx",
+    "name": "testing-things",
+    "full_name": "hiimbex/testing-things",
+    "owner": {
+      "login": "hiimbex"
+    }
+  },
+  "installation": {
+    "id": 2
+  }
+}