Pre-launch — Gluecron is in final validation. Public signups and git hosting for non-owner users open after launch review.
CodeIssuesDiscussionsWikiPull RequestsProjectsCommitsActionsReleasesContributorsPulse● GatesSecuritySettingsDeploymentsPipelineInsightsAgents✨ Explain✨ Ask AI✨ Workspace✨ Spec✨ Tests▓ Debt Map✨ NL Search🏛 Archaeology
claude/adoring-hopper-5x74bqclaude/affectionate-feynman-ykrf1hclaude/architecture-audit-design-wxprenclaude/build-status-update-3MXsfclaude/charming-meitner-mllb5rclaude/compare-gate-gluecron-s4mFQclaude/confident-faraday-tikcwbclaude/continue-work-XMTlIclaude/crontech-gluecron-deploy-7MIECclaude/crontech-platform-setup-SeKfwclaude/design-2026claude/ecstatic-ptolemy-jMdigclaude/enhance-github-integration-QNHdGclaude/fix-aa-loop-issue-PonMQclaude/fix-actions-and-processclaude/fix-desktop-errors-XqoW8claude/fix-red-workflowsclaude/fix-website-access-6FKJNclaude/gatetest-integration-hardeningclaude/github-audit-improvements-bDFr9claude/gluecron-launch-status-FoMRlclaude/hopeful-lamport-olfCTclaude/issue-to-pr-and-protectionsclaude/jolly-heisenberg-2sg1Qclaude/launch-preparation-QmTb6claude/new-session-xk1l7claude/plan-platform-architecture-kkN4yclaude/platform-analysis-roadmap-1nUGLclaude/platform-launch-assessment-8dWV8claude/polish-platform-release-AeDrUclaude/resume-previous-work-KzyLwclaude/review-crontech-handoff-qYEVqclaude/review-project-completeness-lHhS2claude/review-readme-docs-ulqPKclaude/serene-edison-rj87weclaude/setup-multi-repo-dev-BCwNQclaude/ship-fixes-and-tests-Jvz1cclaude/site-audit-competitive-pctlwgclaude/site-migration-vercel-XstpKclaude/standalone-product-repos-XHFTDcopilot/feat-smart-empty-states-keyboard-first-enhancementcopilot/feat-smart-morning-digest-review-context-restorecopilot/fix-and-process-workflowscopilot/update-ai-powered-code-reviewfeat/debt-mapfeat/push-policy-codeowners-hardeningfeat/smart-digest-contextfeat/stage-impactfeat/t1-secret-migrationfeat/u-polishfeat/w-self-hostfeat/w2-claude-configfix/agent-journey-orphan-sweepgatetest/auto-fix-1776586424172gatetest/auto-fix-1776586534814gatetest/auto-fix-1776590685143gatetest/auto-fix-1776590808199mainops/redeploy-retriggerstyle/dxt-cta-themeworktree-agent-a3377aad30d55da26worktree-agent-a7ef607b7ee1d6c74
badge.ts3.2 KB · 90 lines
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
/**
 * Health badge endpoint — public, no auth required.
 *
 * GET /badge/:owner/:repo
 *   Returns a shields.io-style SVG badge showing the repo's health grade.
 *   If no score has been computed yet, triggers a background computation
 *   and returns a grey "computing" badge.
 *
 * Cache-Control headers allow CDNs to cache the badge for up to 1 hour.
 * The badge is suitable for embedding in GitHub READMEs and other
 * Markdown-rendered surfaces.
 */

import { Hono } from "hono";
import {
  getLatestHealthScore,
  computeAndStoreHealthScore,
  getBadgeColor,
} from "../lib/health-score";
import { loadRepoByPath } from "../lib/namespace";

const badge = new Hono();

/**
 * Generate a shields.io-style SVG badge.
 *
 * Left panel: "health" label on dark grey (#555), 62px wide.
 * Right panel: grade letter (A–F or "?") coloured by getBadgeColor, 28px wide.
 * Total: 90×20px, rounded corners rx=3.
 * Font: DejaVu Sans 11px with 1px drop shadow.
 */
function makeBadgeSvg(grade: string, color: string): string {
  return `<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="90" height="20">
  <linearGradient id="s" x2="0" y2="100%">
    <stop offset="0" stop-color="#bbb" stop-opacity=".1"/>
    <stop offset="1" stop-opacity=".1"/>
  </linearGradient>
  <clipPath id="r"><rect width="90" height="20" rx="3" fill="#fff"/></clipPath>
  <g clip-path="url(#r)">
    <rect width="62" height="20" fill="#555"/>
    <rect x="62" width="28" height="20" fill="${color}"/>
    <rect width="90" height="20" fill="url(#s)"/>
  </g>
  <g fill="#fff" text-anchor="middle" font-family="DejaVu Sans,Verdana,Geneva,sans-serif" font-size="11">
    <text x="32" y="15" fill="#010101" fill-opacity=".3" lengthAdjust="spacing">health</text>
    <text x="32" y="14" lengthAdjust="spacing">health</text>
    <text x="76" y="15" fill="#010101" fill-opacity=".3" font-weight="bold">${grade}</text>
    <text x="76" y="14" font-weight="bold">${grade}</text>
  </g>
</svg>`;
}

badge.get("/badge/:owner/:repo", async (c) => {
  const { owner, repo } = c.req.param();

  // Set SVG content type and cache headers up front — we always return SVG.
  c.header("Content-Type", "image/svg+xml");
  c.header("Cache-Control", "max-age=3600, s-maxage=3600");
  c.header("X-Content-Type-Options", "nosniff");

  // Load the repo — for public repos no auth is required.
  const repoRow = await loadRepoByPath(owner, repo);

  if (!repoRow) {
    // Unknown repo — return a grey "unknown" badge rather than 404 so the
    // image tag doesn't break in READMEs.
    return c.body(makeBadgeSvg("?", "#9f9f9f"), 200);
  }

  // Private repos don't expose their health score publicly.
  if (repoRow.isPrivate) {
    return c.body(makeBadgeSvg("?", "#9f9f9f"), 200);
  }

  // Try to load an existing score.
  const scoreRow = await getLatestHealthScore(repoRow.id);

  if (!scoreRow) {
    // No score yet — fire a background computation and show a computing badge.
    computeAndStoreHealthScore(repoRow.id, owner, repo).catch((err) => {
      console.error("[badge] background compute failed:", err);
    });
    return c.body(makeBadgeSvg("?", "#9f9f9f"), 200);
  }

  const color = getBadgeColor(scoreRow.grade);
  return c.body(makeBadgeSvg(scoreRow.grade, color), 200);
});

export default badge;