Blame · Line-by-line history

`LAUNCH_ANNOUNCEMENT.md`

Each line is annotated with the commit that last touched it. Click any SHA to jump to that commit and see the surrounding change.

LAUNCH_ANNOUNCEMENT.mdBlame110 lines · 1 contributor

Normal view Raw

80bed05Claude	1	# Gluecron Launch Announcement Package
	2
	3	Prepared for the public launch on 2026-04-21. Placeholder URL throughout: `https://gluecron.fly.dev` (owner to replace once the final Fly app name is chosen).
	4
	5	---
	6
	7	## 1. Show HN post
	8
	9	Title: Show HN: Gluecron – a GitHub alternative with AI review on by default
	10
	11	Body:
	12
	13	Gluecron is a self-hostable code platform that tries to keep every push production-ready. It started as a weekend experiment in gluing an AI reviewer to a git server and grew into something closer to a full GitHub replacement.
	14
	15	What it does today: git Smart HTTP hosting (clone, push, fetch), pull requests with inline review, issues, discussions, wikis, gists, projects, releases, tags, a package registry speaking the npm protocol, and static page hosting from a `gh-pages` branch. Orgs, teams, CODEOWNERS with team-based resolution, 2FA/TOTP, WebAuthn passkeys, and OIDC SSO (Okta, Azure AD, Auth0, Google Workspace) are all in the box.
	16
	17	What makes it different:
	18
	19	- AI code review runs on every PR and can block merges when `requireAiApproval` is set on a branch protection rule. AI security review plus a 15-pattern secret scanner run on every push.
	20	- Repository rulesets enforce commit, branch, tag, blocked-path, file-size, and force-push policies at push time.
	21	- An autopilot background ticker handles mirror sync, merge-queue processing, weekly email digests, and advisory rescans. Opt out with `AUTOPILOT_DISABLED=1`.
	22	- A workflow runner discovers `.gluecron/workflows/*.yml` on push and executes each step as a Bun subprocess with per-step timeouts and size-capped logs.
	23	- Outbound HMAC-signed webhooks on push/issue/PR/star, an inbound GateTest callback, and a commit status API for external CI.
	24	- Everything AI-flavoured gracefully degrades without `ANTHROPIC_API_KEY`, so it is genuinely usable without paid keys.
	25
	26	Runs anywhere Bun runs. `fly.toml` and `Dockerfile` both ship in the repo. Backed by Neon Postgres.
	27
	28	Stack: Bun, Hono (with server-rendered JSX), Drizzle ORM, Neon PostgreSQL, git CLI subprocesses for the Smart HTTP protocol.
	29
	30	Live site: https://gluecron.fly.dev
	31	Source: https://gluecron.fly.dev/gluecron/gluecron
	32
	33	Happy to answer questions about the gate engine, the autopilot loop, or how the AI reviewer is wired into branch protection.
	34
	35	---
	36
	37	## 2. Tweet thread
	38
	39	1/ Gluecron is live. It is a GitHub alternative with AI review, a secret scanner, and push-time policy gates on by default. Self-hostable, one Bun process, Neon Postgres behind it. https://gluecron.fly.dev
	40
	41	2/ Every push runs an AI security review plus a 15-pattern secret scanner. Every PR runs an AI code reviewer that can block merges when `requireAiApproval` is set on a branch protection rule. Opt out per feature, never by default.
	42
	43	3/ Repository rulesets cover commit/branch/tag patterns, blocked paths, file-size caps, and force-push forbiddance. Workflows live at `.gluecron/workflows/*.yml` and run as Bun subprocesses with per-step timeouts and size-capped logs.
	44
	45	4/ Also shipped: orgs and teams, CODEOWNERS with team resolution, 2FA, passkeys, OIDC SSO, merge queues, required checks, discussions, wikis, projects, releases, an npm-protocol package registry, and `gh-pages` static hosting.
	46
	47	5/ Built on Bun, Hono with server-rendered JSX, Drizzle ORM, and Neon Postgres. Deploy target is Fly.io (`fly.toml` in repo) or any Docker host. Try it, break it, file an issue: https://gluecron.fly.dev
	48
	49	---
	50
	51	## 3. LinkedIn post
	52
	53	Gluecron is now publicly available at https://gluecron.fly.dev.
	54
	55	Gluecron is a self-hostable code platform that aims to keep every push production-ready. It provides git Smart HTTP hosting, pull requests with inline review, issues, discussions, wikis, projects, releases, an npm-protocol package registry, and static page hosting, alongside the governance layer teams usually have to assemble themselves.
	56
	57	The differentiator is that AI review, a push-time secret scanner, and repository rulesets are enabled by default rather than bolted on. An AI code reviewer runs on every pull request and can block merges when a branch protection rule requires approval. A 15-pattern secret scanner and an AI security review run on every push. Repository rulesets enforce commit, branch, tag, blocked-path, file-size, and force-push policies.
	58
	59	Platform features include organizations and teams, CODEOWNERS with team-based resolution, two-factor authentication, WebAuthn passkeys, OIDC single sign-on for Okta, Azure AD, Auth0, and Google Workspace, merge queues, required-check matrices, and a workflow runner for `.gluecron/workflows/*.yml` files.
	60
	61	Gluecron is built on Bun, Hono with server-rendered JSX, Drizzle ORM, and Neon PostgreSQL. It ships with a `fly.toml` for Fly.io and a `Dockerfile` for any container host. Features that depend on `ANTHROPIC_API_KEY` degrade gracefully when the key is absent.
	62
	63	Feedback, bug reports, and pull requests are welcome.
	64
	65	---
	66
	67	## 4. Demo video shot list (60 seconds)
	68
	69	- 0:00 – 0:07 Register. Landing page, click Register, fill in username and password, submit. Arrive on the personal dashboard.
	70	- 0:08 – 0:14 Create repo. Click New Repository. Name it `demo`, set visibility to public, click Create. Empty repo page renders with clone instructions.
	71	- 0:15 – 0:24 Push a buggy commit. Terminal window overlay. `git clone`, edit a file to introduce a hardcoded API key plus a simple bug, `git commit`, `git push`. The push output streams in real time.
	72	- 0:25 – 0:34 Gates run. Cut to the PR or commit page. The 15-pattern secret scanner flags the API key. The AI security review posts a finding. Rulesets show a pass/fail summary. Required checks list updates.
	73	- 0:35 – 0:44 AI review comments. Open the pull request. AI reviewer has left inline comments on the bug. Show a comment thread. Highlight the `requireAiApproval` badge on the branch protection rule.
	74	- 0:45 – 0:54 Merge and deploy webhook. Developer fixes the key and the bug, force-pushes the branch, AI review re-runs and approves. Click Merge. Cut to terminal tailing the deploy webhook receiver; a POST arrives with the HMAC signature.
	75	- 0:55 – 1:00 Status page goes green. Cut to `/status`. All checks green. Fade to the Gluecron wordmark and the URL `https://gluecron.fly.dev`.
	76
	77	---
	78
	79	## 5. Press kit
	80
	81	What is Gluecron (5-bullet cheatsheet):
	82
	83	- Gluecron is a self-hostable GitHub alternative built on Bun, Hono, Drizzle ORM, and Neon PostgreSQL, with git Smart HTTP served from the same process.
	84	- AI code review, AI security review, and a 15-pattern secret scanner are enabled by default; AI review can block merges through branch protection.
	85	- Repository rulesets enforce commit, branch, tag, blocked-path, file-size, and force-push policies at push time, independent of AI features.
	86	- Ships with organizations and teams, CODEOWNERS with team resolution, 2FA/TOTP, WebAuthn passkeys, OIDC SSO, merge queues, required checks, an npm-protocol package registry, and `gh-pages` static hosting.
	87	- Deploys via the included `fly.toml` on Fly.io or the included `Dockerfile` on any container host; AI features degrade gracefully when `ANTHROPIC_API_KEY` is absent.
	88
	89	Screenshot targets:
	90
	91	- Landing page (`/`) — logged-out hero view.
	92	- Repository file tree — a representative repo with directories, a README rendered below, branch switcher visible.
	93	- Pull request with an inline AI review comment thread visible on a diff hunk.
	94	- `/status` page showing all system checks green.
	95	- `/admin/autopilot` tick table showing the most recent autopilot ticks with mirror sync, merge-queue, digest, and advisory-rescan rows.
	96
	97	---
	98
	99	## 6. Changelog seed
	100
	101	### 2026-04-21 — Public launch
	102
	103	- Git Smart HTTP hosting with clone, push, and fetch over subprocess-backed git, plus SSH keys, personal access tokens, and an OAuth 2.0 provider.
	104	- Pull requests with inline review, draft PRs, merge queues, required-check matrices, and AI code review that can block merges via `requireAiApproval` branch protection.
	105	- Push-time policy enforcement: repository rulesets for commit, branch, tag, blocked-path, file-size, and force-push rules, plus a 15-pattern secret scanner and AI security review on every push.
	106	- Workflow runner that auto-discovers `.gluecron/workflows/*.yml` on push and executes steps as Bun subprocesses with per-step timeouts and size-capped logs; commit status API for external CI.
	107	- Collaboration surface: issues with labels and milestones, discussions, wikis with revision history, projects/kanban, gists, reactions, mentions, notifications, and closing-keyword auto-close on PR merge.
	108	- Platform layer: organizations and teams with team-based CODEOWNERS resolution, 2FA/TOTP with recovery codes, WebAuthn passkeys, OIDC SSO (Okta, Azure AD, Auth0, Google Workspace), an app marketplace with scoped install tokens, an npm-protocol package registry, `gh-pages` static hosting, and protected environments.
	109	- Autopilot background ticker covering mirror sync, merge-queue processing, weekly email digests, and advisory rescans; outbound HMAC-signed webhooks on push/issue/PR/star and an inbound GateTest callback.
	110	- Observability and admin: `/healthz`, `/readyz`, `/metrics`, request-ID tracing, rate limiting, per-repo and personal audit logs, traffic analytics, org-wide insights, and a site admin panel with registration lock, site banner, and read-only mode flags.