Pre-launch — Gluecron is in final validation. Public signups and git hosting for non-owner users open after launch review.
CodeIssuesDiscussionsWikiPull RequestsProjectsCommitsActionsReleasesContributorsPulse● GatesSecuritySettingsDeploymentsPipelineInsightsAgents✨ Explain✨ Ask AI✨ Workspace✨ Spec✨ Tests▓ Debt Map✨ NL Search🏛 Archaeology
claude/adoring-hopper-5x74bqclaude/affectionate-feynman-ykrf1hclaude/architecture-audit-design-wxprenclaude/build-status-update-3MXsfclaude/charming-meitner-mllb5rclaude/compare-gate-gluecron-s4mFQclaude/confident-faraday-tikcwbclaude/continue-work-XMTlIclaude/crontech-gluecron-deploy-7MIECclaude/crontech-platform-setup-SeKfwclaude/design-2026claude/ecstatic-ptolemy-jMdigclaude/enhance-github-integration-QNHdGclaude/fix-aa-loop-issue-PonMQclaude/fix-actions-and-processclaude/fix-desktop-errors-XqoW8claude/fix-red-workflowsclaude/fix-website-access-6FKJNclaude/gatetest-integration-hardeningclaude/github-audit-improvements-bDFr9claude/gluecron-launch-status-FoMRlclaude/hopeful-lamport-olfCTclaude/issue-to-pr-and-protectionsclaude/jolly-heisenberg-2sg1Qclaude/launch-preparation-QmTb6claude/new-session-xk1l7claude/plan-platform-architecture-kkN4yclaude/platform-analysis-roadmap-1nUGLclaude/platform-launch-assessment-8dWV8claude/polish-platform-release-AeDrUclaude/resume-previous-work-KzyLwclaude/review-crontech-handoff-qYEVqclaude/review-project-completeness-lHhS2claude/review-readme-docs-ulqPKclaude/serene-edison-rj87weclaude/setup-multi-repo-dev-BCwNQclaude/ship-fixes-and-tests-Jvz1cclaude/site-audit-competitive-pctlwgclaude/site-migration-vercel-XstpKclaude/standalone-product-repos-XHFTDcopilot/feat-smart-empty-states-keyboard-first-enhancementcopilot/feat-smart-morning-digest-review-context-restorecopilot/fix-and-process-workflowscopilot/update-ai-powered-code-reviewfeat/debt-mapfeat/push-policy-codeowners-hardeningfeat/smart-digest-contextfeat/stage-impactfeat/t1-secret-migrationfeat/u-polishfeat/w-self-hostfeat/w2-claude-configfix/agent-journey-orphan-sweepgatetest/auto-fix-1776586424172gatetest/auto-fix-1776586534814gatetest/auto-fix-1776590685143gatetest/auto-fix-1776590808199mainops/redeploy-retriggerstyle/dxt-cta-themeworktree-agent-a3377aad30d55da26worktree-agent-a7ef607b7ee1d6c74
branch-rules.ts3.1 KB · 98 lines
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
/**
 * Branch rules — higher-level wrapper around the existing `branch_protection`
 * table + `pr_reviews` table. Provides `checkMergeEligible` for the merge
 * route to call, and `getBranchRules` for the repo-settings UI.
 *
 * The underlying enforcement engine lives in `src/lib/branch-protection.ts`.
 * This module exposes a simplified interface used by the route layer.
 */

import { eq } from "drizzle-orm";
import { db } from "../db";
import { branchProtection, prReviews } from "../db/schema";
import {
  matchProtection,
  countHumanApprovals,
} from "./branch-protection";

export interface BranchRule {
  id: string;
  pattern: string; // branch name pattern (e.g. "main", "release/*")
  requiredReviews: number; // 0 = no requirement
  requireCodeownerReview: boolean;
  dismissStaleReviews: boolean;
}

/**
 * Return all branch-protection rules for a repository, mapped to the
 * simplified BranchRule interface the UI and merge-check use.
 */
export async function getBranchRules(repoId: string): Promise<BranchRule[]> {
  try {
    const rows = await db
      .select()
      .from(branchProtection)
      .where(eq(branchProtection.repositoryId, repoId));

    return rows.map((r) => ({
      id: r.id,
      pattern: r.pattern,
      requiredReviews: r.requiredApprovals,
      requireCodeownerReview: r.requireHumanReview, // closest semantic match
      dismissStaleReviews: r.dismissStaleReviews,
    }));
  } catch {
    return [];
  }
}

export interface MergeEligibleResult {
  eligible: boolean;
  reason?: string;
  approvalCount: number;
  requiredCount: number;
}

/**
 * Check whether a PR is eligible to be merged, based on the branch-protection
 * rules for `targetBranch`. This supplements (does not replace) the full gate
 * check in the merge route — it specifically handles the human-review count
 * requirement coming from `branch_protection.required_approvals`.
 *
 * Returns `eligible: true` when:
 *   - No rule matches the target branch, OR
 *   - The rule's `requiredApprovals` threshold is satisfied.
 */
export async function checkMergeEligible(
  prId: string,
  repoId: string,
  targetBranch: string
): Promise<MergeEligibleResult> {
  try {
    const rule = await matchProtection(repoId, targetBranch);

    if (!rule || rule.requiredApprovals === 0) {
      // Count anyway for informational display
      const approvalCount = await countHumanApprovals(prId);
      return { eligible: true, approvalCount, requiredCount: 0 };
    }

    const approvalCount = await countHumanApprovals(prId);
    const requiredCount = rule.requiredApprovals;

    if (approvalCount < requiredCount) {
      return {
        eligible: false,
        reason: `This PR requires ${requiredCount} approval${requiredCount !== 1 ? "s" : ""} before merging. Currently: ${approvalCount} approval${approvalCount !== 1 ? "s" : ""}.`,
        approvalCount,
        requiredCount,
      };
    }

    return { eligible: true, approvalCount, requiredCount };
  } catch {
    // On error, allow the merge to proceed — the full gate check is the
    // primary enforcement mechanism.
    return { eligible: true, approvalCount: 0, requiredCount: 0 };
  }
}