facts.graphql

# SPDX-FileCopyrightText: 2026 Emily <hello@emily.moe>
#
# SPDX-License-Identifier: MIT

fragment ActorInfo on Actor {
  ... on Node {
    id
  }
  login
}

fragment RepositoryInfo on Repository {
  id
  owner {
    ...ActorInfo
  }
  name
}

fragment CommitSignatureInfo on Commit {
  signature {
    __typename
    ... on GpgSignature {
      payload
      signature
    }
  }
}

fragment PullRequestInfo on PullRequest {
  id
  number
  state
  author {
    ...ActorInfo
  }
  createdAt
  updatedAt
  baseRepository {
    id
  }
  headRefName
  headRefOid
  headRepository {
    ...RepositoryInfo
  }
  commits(last: 1) {
    nodes {
      commit {
        ...CommitSignatureInfo
      }
    }
  }
  mergedBy {
    ...ActorInfo
  }
  mergeCommit {
    oid
    ...CommitSignatureInfo
  }
  latestOpinionatedReviews(first: 15, writersOnly: true) {
    nodes {
      author {
        ...ActorInfo
      }
      commit {
        oid
      }
      state
    }
  }
}

query BasicFacts($nixpkgsCIActorID: ID!, $githubActionsActorID: ID!) {
  # These are the repositories that the @NixOS/nixpkgs-committers team
  # had write access to during the risk period.

  nixpkgsRepository: repository(owner: "NixOS", name: "nixpkgs") {
    ...RepositoryInfo
  }

  nixosHardwareRepository: repository(owner: "NixOS", name: "nixos-hardware") {
    ...RepositoryInfo
  }

  nixosWeeklyRepository: repository(owner: "NixOS", name: "nixos-weekly") {
    ...RepositoryInfo
  }

  nixIdeaRepository: repository(owner: "NixOS", name: "nix-idea") {
    ...RepositoryInfo
  }

  nixPillsRepository: repository(owner: "NixOS", name: "nix-pills") {
    ...RepositoryInfo
  }

  # These are the specific users relevant to the audit.

  affectedUser: user(login: "Scrumplex") {
    ...ActorInfo
  }

  webFlowUser: user(login: "web-flow") {
    ...ActorInfo
  }

  rRyantmUser: user(login: "r-ryantm") {
    ...ActorInfo
  }

  # The GraphQL API has no way to query directly for a bot account, so
  # we need to bounce these through the REST API. (The GraphQL API
  # omits the `[bot]` suffix from the acocunt logins while the REST API
  # requires it, so although this is redundant to the information
  # returned by the REST API, it’s good to be consistent.)

  nixpkgsCIActor: node(id: $nixpkgsCIActorID) {
    __typename
    ...ActorInfo
  }

  githubActionsActor: node(id: $githubActionsActorID) {
    __typename
    ...ActorInfo
  }
}

query Committers($cursor: String) {
  organization(login: "NixOS") {
    team(slug: "nixpkgs-committers") {
      members(first: 100, after: $cursor) {
        nodes {
          ...ActorInfo
        }
        pageInfo {
          hasNextPage
          endCursor
        }
      }
    }
  }
}

query PullRequestForMergeCommit($repositoryID: ID!, $oid: GitObjectID!) {
  node(id: $repositoryID) {
    __typename
    ... on Repository {
      object(oid: $oid) {
        __typename
        ... on Commit {
          associatedPullRequests(first: 1) {
            nodes {
              ...PullRequestInfo
            }
            pageInfo {
              hasNextPage
            }
          }
        }
      }
    }
  }
}

query MergeBotMergesSince($periodStart: DateTime!, $cursor: String) {
  repository(owner: "NixOS", name: "nixpkgs") {
    # mergebot: Successful merges
    # <https://github.com/NixOS/nixpkgs/issues/306934>
    issue(number: 306934) {
      timelineItems(
        itemTypes: [CROSS_REFERENCED_EVENT]
        since: $periodStart
        last: 100
        before: $cursor
      ) {
        nodes {
          __typename
          ... on CrossReferencedEvent {
            actor {
              ...ActorInfo
            }
            source {
              __typename
              ...PullRequestInfo
            }
          }
        }
        pageInfo {
          hasPreviousPage
          startCursor
        }
      }
    }
  }
}

query UnmergedPullRequests($repositoryID: ID!, $cursor: String) {
  node(id: $repositoryID) {
    __typename
    ... on Repository {
      pullRequests(
        states: [OPEN, CLOSED]
        orderBy: { field: UPDATED_AT, direction: DESC }
        first: 100
        after: $cursor
      ) {
        nodes {
          ...PullRequestInfo
        }
        pageInfo {
          hasNextPage
          endCursor
        }
      }
    }
  }
}