fix: harden PR title generation

Generated-By: PostHog Code
Task-Id: 40b5cfd6-d4c2-4751-b6c4-e1fb31a78bc2

Author: MattPua

apps/web/src/web-sessions-clients.ts

@@ -32,10 +32,18 @@ export const webReadFileAsBase64: ReadFileAsBase64 = (filePath: string) =>
 
 export const webGithubPrTitleClient: GithubPrTitleClient = {
   getGithubPullRequestTitle: async ({ owner, repo, number }) => {
-    const response = await fetch(
-      `https://api.github.com/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/pulls/${number}`,
-      { headers: { Accept: "application/vnd.github+json" } },
-    );
+    let response: Response;
+    try {
+      response = await fetch(
+        `https://api.github.com/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/pulls/${number}`,
+        {
+          headers: { Accept: "application/vnd.github+json" },
+          signal: AbortSignal.timeout(5_000),
+        },
+      );
+    } catch {
+      return null;
+    }
     if (!response.ok) return null;
     const payload: unknown = await response.json();
     if (

packages/ui/src/features/sessions/hooks/useChatTitleGenerator.test.ts

@@ -10,6 +10,9 @@ const mockEnrichDescription = vi.hoisted(() =>
 const mockGenerateTitle = vi.hoisted(() => vi.fn());
 const mockGetQueriesData = vi.hoisted(() => vi.fn(() => [] as unknown[]));
 const mockIsAuthenticated = vi.hoisted(() => ({ value: true }));
+const mockCurrentUser = vi.hoisted(() => ({
+  value: { id: 1 } as { id: number } | undefined,
+}));
 const mockUpdateTask = vi.hoisted(() => vi.fn().mockResolvedValue(undefined));
 const mockSetQueriesData = vi.hoisted(() => vi.fn());
 const mockSetQueryData = vi.hoisted(() => vi.fn());
@@ -48,6 +51,10 @@ vi.mock("@posthog/ui/features/auth/store", () => ({
     ),
 }));
 
+vi.mock("@posthog/ui/features/auth/useCurrentUser", () => ({
+  useCurrentUser: () => ({ data: mockCurrentUser.value }),
+}));
+
 vi.mock("@posthog/core/sessions/sessionEvents", () => ({
   extractUserPromptsFromEvents: () => mockPrompts.value,
 }));
@@ -116,6 +123,11 @@ function createTask(overrides: Partial<Task> = {}): Task {
     created_at: "2026-05-28T00:00:00.000Z",
     updated_at: "2026-05-28T00:00:00.000Z",
     origin_product: "user_created",
+    created_by: {
+      id: 1,
+      uuid: "user-1",
+      email: "user@example.com",
+    },
     ...overrides,
   } as Task;
 }
@@ -136,6 +148,7 @@ describe("useChatTitleGenerator", () => {
     vi.clearAllMocks();
     useTitleGenerationStore.setState({ byTaskId: {} });
     mockIsAuthenticated.value = true;
+    mockCurrentUser.value = { id: 1 };
     mockPrompts.value = [];
     mockSessionSummary.value = undefined;
     mockTitleAttachmentPaths.value = [];
@@ -152,6 +165,14 @@ describe("useChatTitleGenerator", () => {
     expect(mockGenerateTitle).not.toHaveBeenCalled();
   });
 
+  it("waits for task creator identity before generating", () => {
+    mockCurrentUser.value = undefined;
+
+    renderHook(() => useChatTitleGenerator(createTask()));
+
+    expect(mockGenerateTitle).not.toHaveBeenCalled();
+  });
+
   it("generates title from the saved task description before prompt events arrive", async () => {
     mockGenerateTitle.mockResolvedValue({
       title: "Fix login bug",
@@ -171,6 +192,34 @@ describe("useChatTitleGenerator", () => {
         title: "Fix login bug",
       });
     });
+    expect(mockGenerateTitle).toHaveBeenCalledWith("Fix the login bug", {
+      resolveGithubPrTitles: true,
+    });
+  });
+
+  it("does not resolve GitHub metadata from a teammate's description", async () => {
+    mockGenerateTitle.mockResolvedValue({
+      title: "Review PR #123",
+      summary: "Reviewing a pull request",
+    });
+
+    renderHook(() =>
+      useChatTitleGenerator(
+        createTask({
+          created_by: {
+            id: 2,
+            uuid: "user-2",
+            email: "teammate@example.com",
+          },
+        }),
+      ),
+    );
+
+    await waitFor(() => {
+      expect(mockGenerateTitle).toHaveBeenCalledWith("Fix the login bug", {
+        resolveGithubPrTitles: false,
+      });
+    });
   });
 
   it("generates title when the task has no title yet", async () => {

packages/ui/src/features/sessions/hooks/useChatTitleGenerator.ts

@@ -15,6 +15,7 @@ import { useService } from "@posthog/di/react";
 import type { Task } from "@posthog/shared/domain-types";
 import { useOptionalAuthenticatedClient } from "@posthog/ui/features/auth/authClient";
 import { useAuthStateValue } from "@posthog/ui/features/auth/store";
+import { useCurrentUser } from "@posthog/ui/features/auth/useCurrentUser";
 import {
   sessionStoreSetters,
   useSessionStore,
@@ -49,6 +50,7 @@ export function useChatTitleGenerator(task: Task): void {
   );
   const queryClient = useQueryClient();
   const client = useOptionalAuthenticatedClient();
+  const { data: currentUser } = useCurrentUser({ client });
   const isAuthenticated = useAuthStateValue(
     (state) => state.status === "authenticated" && !!state.cloudRegion,
   );
@@ -62,7 +64,7 @@ export function useChatTitleGenerator(task: Task): void {
   });
 
   useEffect(() => {
-    if (!isAuthenticated) return;
+    if (!isAuthenticated || (task.created_by && !currentUser)) return;
 
     const bookkeeping = titleGenerationStoreApi.get(taskId);
     if (bookkeeping.inFlight) return;
@@ -111,7 +113,9 @@ export function useChatTitleGenerator(task: Task): void {
           attachmentPaths,
         );
         const result = await titleGenerator.generateTitleAndSummary(content, {
-          resolveGithubPrTitles: shouldGenerateFromPrompts,
+          resolveGithubPrTitles:
+            shouldGenerateFromPrompts ||
+            (!!currentUser && task.created_by?.id === currentUser.id),
         });
         if (result) {
           // Drop the stash once a title has been successfully produced so the
@@ -197,5 +201,6 @@ export function useChatTitleGenerator(task: Task): void {
     queryClient,
     sessionService,
     titleGenerator,
+    currentUser,
   ]);
 }