Pre-launch — Gluecron is in final validation. Public signups and git hosting for non-owner users open after launch review.
ccantynz/Gluecron.com
Commit24cf2caunknown_key

feat(BLOCK-A): templates, saved replies, deployments UI, email notifications

feat(BLOCK-A): templates, saved replies, deployments UI, email notifications

A5 — Issue + PR templates: auto-prefill from .github/*_TEMPLATE.md on the
default branch; YAML frontmatter stripped; 16KB cap; returns null on any
git failure so forms always render. New lib `src/lib/templates.ts`; wired
into issues + pulls new-form routes.

A6 — Saved replies: per-user canned comment templates with unique
shortcut. Full CRUD at /settings/replies plus JSON picker endpoint
/api/user/replies. New table `saved_replies` + migration
`drizzle/0002_saved_replies_and_email.sql`.

A7 — Environments + deployment history UI: /:owner/:repo/deployments
groups deploys by environment, shows last status + success rate across
the most recent 20 runs, and links to a per-deploy detail page.

A8 — Email notifications: provider-pluggable `src/lib/email.ts`
(`log` default, `resend` in prod). `sendEmail()` is total — always
resolves, never throws. `notify()` fans out email to opted-in recipients
for `mention|review_requested|assigned|gate_failed`. Opt-out UI at
/settings. New env vars: EMAIL_PROVIDER, EMAIL_FROM, RESEND_API_KEY,
APP_BASE_URL.

Block A is now complete. 99/99 tests pass. BUILD_BIBLE scorecard +
locked-files list + invariants updated to reflect shipped state.

https://claude.ai/code/session_01U6sj9ezKCpmiwx7cXGZmS6
Claude committed on April 14, 2026Parent: 6fc53bd
16 files changed+1176−1524cf2ca97753b71b0b7db8c40287b42bdded397b
16 changed files+1176−15
Modified.env.example+7−0View fileUnifiedSplit
1010GATETEST_HMAC_SECRET=
1111CRONTECH_DEPLOY_URL=https://crontech.ai/api/trpc/tenant.deploy
1212ANTHROPIC_API_KEY=
13# Email (Block A8). Provider=log just writes to stderr (safe default).
14# Switch to "resend" in prod and set RESEND_API_KEY.
15EMAIL_PROVIDER=log
16EMAIL_FROM=gluecron <no-reply@gluecron.local>
17RESEND_API_KEY=
18# Used to build absolute URLs in outbound emails + webhooks.
19APP_BASE_URL=http://localhost:3000
ModifiedBUILD_BIBLE.md+25−12View fileUnifiedSplit
9292| Reactions (emoji) | ✅ | 8 reactions, toggle via `POST /api/reactions/:t/:id/:emoji/toggle` on issues + PRs + comments |
9393| Mentions + notifications | ✅ | `src/routes/notifications.tsx` |
9494| Code owners | ✅ | `src/lib/codeowners.ts` |
95| Issue templates | ❌ | |
96| PR templates | ❌ | |
97| Saved replies | ❌ | |
95| Issue templates | ✅ | `.github/ISSUE_TEMPLATE.md` auto-prefills new issues; frontmatter stripped; `src/lib/templates.ts` |
96| PR templates | ✅ | `.github/PULL_REQUEST_TEMPLATE.md` auto-prefills new PRs; `src/lib/templates.ts` |
97| Saved replies | ✅ | per-user canned comments, unique-shortcut, `/settings/replies`, `/api/user/replies` |
9898| Discussions / forums | ❌ | |
9999| Wikis | ❌ | |
100100| Projects / kanban | ❌ | |
142142| Gists | ❌ | |
143143| Sponsors | ❌ | |
144144| Marketplace | ❌ | |
145| Environments / deployment tracking | 🟡 | `deployments` table, no UI |
145| Environments / deployment tracking | ✅ | `src/routes/deployments.tsx` — grouped by env, success-rate rollup, per-deploy detail |
146146| Merge queues | ❌ | |
147147| Required checks matrix | 🟡 | branch_protection has single flag, no matrix |
148148
155155| Audit log (table) | ✅ | `audit_log` table |
156156| Audit log UI | ✅ | `/settings/audit` (personal) + `/:owner/:repo/settings/audit` (per-repo, owner-only) |
157157| Traffic analytics per repo | ❌ | |
158| Email notifications | ❌ | in-app only |
158| Email notifications | ✅ | opt-in per kind (mention/assign/gate-fail) via `/settings`; provider-pluggable `src/lib/email.ts` (log default, resend in prod) |
159159| Email digest | ❌ | |
160160| Mobile PWA | 🟡 | responsive CSS, no manifest |
161161| Native mobile apps | ❌ | |
176176- **A2** — Audit log UI page (`/settings/audit` + `/:owner/:repo/settings/audit`) ✅
177177- **A3** — Reactions UI on issues / PRs / comments (data exists) ✅
178178- **A4** — Draft PR toggle + filter ✅
179- **A5** — Issue + PR templates (`.github/*_TEMPLATE.md` auto-prefill)
180- **A6** — Saved replies per user
181- **A7** — Environments + deployment history UI (`deployments` table)
182- **A8** — Email notifications (opt-in, SMTP via env)
179- **A5** — Issue + PR templates (`.github/*_TEMPLATE.md` auto-prefill) ✅
180- **A6** — Saved replies per user ✅
181- **A7** — Environments + deployment history UI (`deployments` table) ✅
182- **A8** — Email notifications (opt-in, provider-pluggable) ✅
183
184**BLOCK A COMPLETE.** Next: BLOCK B (Identity + orgs).
183185
184186### BLOCK B — Identity + orgs
185187- **B1** — Organizations (schema: `organizations`, `org_members`, `teams`, `team_members`)
273275- `src/lib/merge-resolver.ts` — AI merge conflict resolution
274276
275277### 4.5 Platform (locked)
276- `src/lib/notify.ts` — notification creation + audit log (swallow-failures pattern)
278- `src/lib/notify.ts` — notification creation + audit log (swallow-failures pattern). Also fans out email to opted-in recipients for `mention|review_requested|assigned|gate_failed`. Exports `__internal` for tests.
279- `src/lib/email.ts` — provider-pluggable email sender (`log`|`resend`). `sendEmail()` never throws. `absoluteUrl()` joins paths against `APP_BASE_URL`.
280- `src/lib/templates.ts` — `loadIssueTemplate` / `loadPrTemplate`. Checks standard paths (`.github/`, `.gluecron/`, root, `docs/`) on the default branch, strips YAML frontmatter, 16KB cap, returns null on any failure.
277281- `src/lib/unread.ts` — unread count helper (never throws)
278282- `src/lib/repo-bootstrap.ts` — green defaults on repo creation
279283- `src/lib/gate.ts` — gate orchestration + persistence
286290- `src/routes/hooks.ts` — `POST /api/hooks/gatetest` (bearer/HMAC), `GET /api/hooks/ping`, `POST /api/v1/gate-runs` (PAT backup), `GET /api/v1/gate-runs`. See `GATETEST_HOOK.md`.
287291- `src/routes/theme.ts` — `GET /theme/toggle`, `GET /theme/set?mode=`. Writes `theme` cookie (`dark`|`light`, 1-year). Layout reads via pre-paint inline script.
288292- `src/routes/audit.tsx` — `GET /settings/audit` (personal) + `GET /:owner/:repo/settings/audit` (owner-only).
293- `src/routes/saved-replies.tsx` — `GET/POST /settings/replies`, `POST /settings/replies/:id`, `POST /settings/replies/:id/delete`, `GET /api/user/replies`. Unique constraint `saved_replies_user_shortcut`.
294- `src/routes/deployments.tsx` — `GET /:owner/:repo/deployments` (grouped by env, success-rate rollup), `GET /:owner/:repo/deployments/:id` (detail).
289295- `src/routes/reactions.ts` — `POST /api/reactions/:targetType/:targetId/:emoji/toggle` (authed, form- or fetch-compatible), `GET /api/reactions/:targetType/:targetId`. Targets: `issue|pr|issue_comment|pr_comment`. Emojis: 8 canonical.
290296- `src/routes/auth.tsx` — register / login / logout
291297- `src/routes/web.tsx` — home / new / browse / blob / commits / raw / blame / star / search / profile
293299- `src/routes/pulls.tsx` — PR CRUD + review + merge + close
294300- `src/routes/editor.tsx` — web file editor
295301- `src/routes/compare.tsx` — base...head diff
296- `src/routes/settings.tsx` — profile + password
302- `src/routes/settings.tsx` — profile + password + email notification preferences (`POST /settings/notifications`)
297303- `src/routes/repo-settings.tsx` — repo settings + delete
298304- `src/routes/webhooks.tsx` — webhook CRUD + test + `fireWebhooks`
299305- `src/routes/fork.ts` — fork
330336- Theme routes live outside `/settings/*` (they must work for logged-out visitors). Cookie name: `theme`, values: `dark|light`.
331337- Draft PRs cannot be merged — `/pulls/:n/merge` returns a redirect with the draft error when `pr.isDraft=true`.
332338- Reactions API accepts only `ALLOWED_EMOJIS` and `ALLOWED_TARGETS`. Toggle is idempotent per (user, target, emoji).
339- `sendEmail()` never throws — always resolves to `{ ok, provider, ... }`. Email failures never break notification delivery or the primary request path.
340- Email fan-out in `notify()` is scoped to kinds in `EMAIL_ELIGIBLE` (mention / review_requested / assigned / gate_failed). Each eligible kind maps to exactly one user preference column.
341- Issue + PR template loading must return `null` on any git-subprocess failure (templates are a convenience, not a requirement). Forms always render.
333342
334343---
335344
339348```bash
340349bun install
341350bun dev # hot reload
342bun test # 91 tests currently pass
351bun test # 99 tests currently pass
343352bun run db:migrate
344353```
345354
348357- `ANTHROPIC_API_KEY` — unlocks AI features
349358- `GIT_REPOS_PATH` — default `./repos`
350359- `PORT` — default 3000
360- `EMAIL_PROVIDER` — `log` (default, stderr-only) or `resend`
361- `EMAIL_FROM` — sender address for outbound mail
362- `RESEND_API_KEY` — required when `EMAIL_PROVIDER=resend`
363- `APP_BASE_URL` — canonical URL used to build absolute links in emails
351364
352365### 5.3 Models
353366- `claude-sonnet-4-20250514` — code review, security, chat
Addeddrizzle/0002_saved_replies_and_email.sql+26−0View fileUnifiedSplit
1-- Gluecron migration 0002:
2-- - saved_replies (Block A6)
3-- - users.notify_email_on_mention, users.notify_email_on_assign (Block A8)
4
5--> statement-breakpoint
6CREATE TABLE IF NOT EXISTS "saved_replies" (
7 "id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
8 "user_id" uuid NOT NULL,
9 "shortcut" text NOT NULL,
10 "body" text NOT NULL,
11 "created_at" timestamp DEFAULT now() NOT NULL,
12 "updated_at" timestamp DEFAULT now() NOT NULL,
13 CONSTRAINT "saved_replies_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "users"("id") ON DELETE cascade
14);
15
16--> statement-breakpoint
17CREATE UNIQUE INDEX IF NOT EXISTS "saved_replies_user_shortcut" ON "saved_replies" ("user_id", "shortcut");
18
19--> statement-breakpoint
20ALTER TABLE "users" ADD COLUMN IF NOT EXISTS "notify_email_on_mention" boolean DEFAULT true NOT NULL;
21
22--> statement-breakpoint
23ALTER TABLE "users" ADD COLUMN IF NOT EXISTS "notify_email_on_assign" boolean DEFAULT true NOT NULL;
24
25--> statement-breakpoint
26ALTER TABLE "users" ADD COLUMN IF NOT EXISTS "notify_email_on_gate_fail" boolean DEFAULT true NOT NULL;
Modifiedsrc/__tests__/green-ecosystem.test.ts+81−0View fileUnifiedSplit
2121 ALLOWED_EMOJIS,
2222 EMOJI_GLYPH,
2323} from "../lib/reactions";
24import { sendEmail, absoluteUrl } from "../lib/email";
25import { __internal as notifyInternal } from "../lib/notify";
2426
2527describe("secret scanner", () => {
2628 it("detects AWS access keys", () => {
321323 expect(loc.startsWith("/login")).toBe(true);
322324 });
323325});
326
327describe("email", () => {
328 it("sendEmail in log mode never throws and returns ok", async () => {
329 const prev = process.env.EMAIL_PROVIDER;
330 process.env.EMAIL_PROVIDER = "log";
331 const res = await sendEmail({
332 to: "test@gluecron.local",
333 subject: "hello",
334 text: "body",
335 });
336 expect(res.ok).toBe(true);
337 expect(res.provider).toBe("log");
338 if (prev === undefined) delete process.env.EMAIL_PROVIDER;
339 else process.env.EMAIL_PROVIDER = prev;
340 });
341
342 it("sendEmail rejects invalid recipient without throwing", async () => {
343 const res = await sendEmail({
344 to: "not-an-email",
345 subject: "x",
346 text: "y",
347 });
348 expect(res.ok).toBe(false);
349 expect(res.skipped).toBeTruthy();
350 });
351
352 it("sendEmail rejects empty subject/body without throwing", async () => {
353 const res = await sendEmail({ to: "a@b.co", subject: "", text: "" });
354 expect(res.ok).toBe(false);
355 });
356
357 it("absoluteUrl joins paths against APP_BASE_URL", () => {
358 const prev = process.env.APP_BASE_URL;
359 process.env.APP_BASE_URL = "https://gluecron.example/";
360 expect(absoluteUrl("/x")).toBe("https://gluecron.example/x");
361 expect(absoluteUrl("x")).toBe("https://gluecron.example/x");
362 expect(absoluteUrl("https://other/y")).toBe("https://other/y");
363 if (prev === undefined) delete process.env.APP_BASE_URL;
364 else process.env.APP_BASE_URL = prev;
365 });
366
367 it("notify email-eligible set only includes user-opt-in kinds", () => {
368 // Any kind in EMAIL_ELIGIBLE must map to a preference column
369 for (const k of notifyInternal.EMAIL_ELIGIBLE) {
370 expect(notifyInternal.prefFor(k)).not.toBeNull();
371 }
372 // gate_passed is not eligible (too spammy; only gate_failed is)
373 expect(notifyInternal.EMAIL_ELIGIBLE.has("gate_passed" as any)).toBe(false);
374 expect(notifyInternal.EMAIL_ELIGIBLE.has("deploy_failed" as any)).toBe(
375 false
376 );
377 });
378
379 it("notify email subject is tagged and truncated", () => {
380 const subj = notifyInternal.subjectFor("gate_failed", "x".repeat(300));
381 expect(subj.startsWith("[gate failed]")).toBe(true);
382 expect(subj.length).toBeLessThanOrEqual(180);
383 });
384});
385
386describe("settings email preferences", () => {
387 it("GET /settings redirects unauthenticated users to /login", async () => {
388 const res = await app.request("/settings");
389 expect([301, 302, 303, 307]).toContain(res.status);
390 const loc = res.headers.get("location") || "";
391 expect(loc.startsWith("/login")).toBe(true);
392 });
393
394 it("POST /settings/notifications redirects unauthenticated users to /login", async () => {
395 const res = await app.request("/settings/notifications", {
396 method: "POST",
397 headers: { "content-type": "application/x-www-form-urlencoded" },
398 body: "notify_email_on_mention=1",
399 });
400 expect([301, 302, 303, 307]).toContain(res.status);
401 const loc = res.headers.get("location") || "";
402 expect(loc.startsWith("/login")).toBe(true);
403 });
404});
Modifiedsrc/app.tsx+8−0View fileUnifiedSplit
3131import themeRoutes from "./routes/theme";
3232import auditRoutes from "./routes/audit";
3333import reactionRoutes from "./routes/reactions";
34import savedReplyRoutes from "./routes/saved-replies";
35import deploymentRoutes from "./routes/deployments";
3436import webRoutes from "./routes/web";
3537
3638const app = new Hono();
7779// Reactions API (issues, PRs, comments)
7880app.route("/", reactionRoutes);
7981
82// Saved replies (per-user canned comment templates)
83app.route("/", savedReplyRoutes);
84
85// Environments + deployment history UI
86app.route("/", deploymentRoutes);
87
8088// API tokens
8189app.route("/", tokenRoutes);
8290
Modifiedsrc/db/schema.ts+27−0View fileUnifiedSplit
1818 passwordHash: text("password_hash").notNull(),
1919 avatarUrl: text("avatar_url"),
2020 bio: text("bio"),
21 // Email notification preferences (Block A8). Default on; opt-out via /settings.
22 notifyEmailOnMention: boolean("notify_email_on_mention").default(true).notNull(),
23 notifyEmailOnAssign: boolean("notify_email_on_assign").default(true).notNull(),
24 notifyEmailOnGateFail: boolean("notify_email_on_gate_fail").default(true).notNull(),
2125 createdAt: timestamp("created_at").defaultNow().notNull(),
2226 updatedAt: timestamp("updated_at").defaultNow().notNull(),
2327});
638642export type AiChat = typeof aiChats.$inferSelect;
639643export type AuditLogEntry = typeof auditLog.$inferSelect;
640644export type Deployment = typeof deployments.$inferSelect;
645
646/**
647 * Saved replies — per-user canned responses, insertable into any
648 * issue / PR comment textarea. Shortcut name must be unique per user.
649 */
650export const savedReplies = pgTable(
651 "saved_replies",
652 {
653 id: uuid("id").primaryKey().defaultRandom(),
654 userId: uuid("user_id")
655 .notNull()
656 .references(() => users.id, { onDelete: "cascade" }),
657 shortcut: text("shortcut").notNull(),
658 body: text("body").notNull(),
659 createdAt: timestamp("created_at").defaultNow().notNull(),
660 updatedAt: timestamp("updated_at").defaultNow().notNull(),
661 },
662 (table) => [
663 uniqueIndex("saved_replies_user_shortcut").on(table.userId, table.shortcut),
664 ]
665);
666
667export type SavedReply = typeof savedReplies.$inferSelect;
Modifiedsrc/lib/config.ts+20−0View fileUnifiedSplit
2525 get anthropicApiKey() {
2626 return process.env.ANTHROPIC_API_KEY || "";
2727 },
28 /** Email provider: "log" (dev, writes to stderr) or "resend" (HTTPS). */
29 get emailProvider() {
30 const v = (process.env.EMAIL_PROVIDER || "log").toLowerCase();
31 return v === "resend" ? "resend" : "log";
32 },
33 /** "From" address for outbound email. */
34 get emailFrom() {
35 return process.env.EMAIL_FROM || "gluecron <no-reply@gluecron.local>";
36 },
37 /** Resend API key (only used when EMAIL_PROVIDER=resend). */
38 get resendApiKey() {
39 return process.env.RESEND_API_KEY || "";
40 },
41 /** Canonical base URL for outbound links in emails + webhooks. */
42 get appBaseUrl() {
43 return (process.env.APP_BASE_URL || "http://localhost:3000").replace(
44 /\/+$/,
45 ""
46 );
47 },
2848};
Addedsrc/lib/email.ts+132−0View fileUnifiedSplit
1/**
2 * Email sending — provider-pluggable, never-throws.
3 *
4 * Providers:
5 * log — writes a formatted message to stderr (default, dev-safe)
6 * resend — POSTs to api.resend.com using RESEND_API_KEY
7 *
8 * Configured via:
9 * EMAIL_PROVIDER=log|resend
10 * EMAIL_FROM="gluecron <no-reply@gluecron.app>"
11 * RESEND_API_KEY=...
12 * APP_BASE_URL=https://gluecron.com
13 *
14 * Contract: sendEmail() must never reject. Failures are logged and swallowed
15 * so a downed email provider never breaks the primary request path. Callers
16 * await the returned promise to preserve ordering but may ignore the result.
17 */
18
19import { config } from "./config";
20
21export interface EmailMessage {
22 to: string;
23 subject: string;
24 text: string;
25 html?: string;
26}
27
28export interface EmailResult {
29 ok: boolean;
30 provider: "log" | "resend" | "none";
31 skipped?: string;
32 error?: string;
33 id?: string;
34}
35
36function looksLikeEmail(s: string): boolean {
37 return /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(s.trim());
38}
39
40function renderPlainFallback(text: string): string {
41 // Minimal HTML fallback when caller didn't supply one.
42 const escaped = text
43 .replace(/&/g, "&amp;")
44 .replace(/</g, "&lt;")
45 .replace(/>/g, "&gt;");
46 return `<pre style="font-family:ui-monospace,SF-Mono,Menlo,monospace;font-size:13px;white-space:pre-wrap;color:#c9d1d9;background:#0d1117;padding:16px;border-radius:6px">${escaped}</pre>`;
47}
48
49async function sendViaResend(msg: EmailMessage): Promise<EmailResult> {
50 if (!config.resendApiKey) {
51 return { ok: false, provider: "resend", skipped: "RESEND_API_KEY unset" };
52 }
53 try {
54 const res = await fetch("https://api.resend.com/emails", {
55 method: "POST",
56 headers: {
57 authorization: `Bearer ${config.resendApiKey}`,
58 "content-type": "application/json",
59 },
60 body: JSON.stringify({
61 from: config.emailFrom,
62 to: [msg.to],
63 subject: msg.subject,
64 text: msg.text,
65 html: msg.html || renderPlainFallback(msg.text),
66 }),
67 });
68 if (!res.ok) {
69 const body = await res.text();
70 return {
71 ok: false,
72 provider: "resend",
73 error: `resend ${res.status}: ${body.slice(0, 200)}`,
74 };
75 }
76 const body = (await res.json().catch(() => ({}))) as { id?: string };
77 return { ok: true, provider: "resend", id: body.id };
78 } catch (err) {
79 return {
80 ok: false,
81 provider: "resend",
82 error: String((err as Error)?.message || err),
83 };
84 }
85}
86
87function sendViaLog(msg: EmailMessage): EmailResult {
88 // Structured, grep-able log. Written to stderr so prod log collectors pick it up.
89 console.error(
90 `[email:log] to=${msg.to} subject=${JSON.stringify(msg.subject)}\n` +
91 msg.text.split("\n").map((l) => " " + l).join("\n")
92 );
93 return { ok: true, provider: "log" };
94}
95
96/**
97 * Send an email. Always resolves — never throws, never rejects.
98 * Returns { ok, provider, ... } so callers can surface errors in admin UIs
99 * without having to wrap in try/catch.
100 */
101export async function sendEmail(msg: EmailMessage): Promise<EmailResult> {
102 if (!msg.to || !looksLikeEmail(msg.to)) {
103 return { ok: false, provider: "none", skipped: "invalid recipient" };
104 }
105 if (!msg.subject || !msg.text) {
106 return { ok: false, provider: "none", skipped: "missing subject or body" };
107 }
108 try {
109 if (config.emailProvider === "resend") {
110 return await sendViaResend(msg);
111 }
112 return sendViaLog(msg);
113 } catch (err) {
114 // Defence-in-depth — provider handlers already swallow, but just in case.
115 return {
116 ok: false,
117 provider: config.emailProvider,
118 error: String((err as Error)?.message || err),
119 };
120 }
121}
122
123/**
124 * Build a fully-qualified URL from a path, using APP_BASE_URL.
125 * Safe with relative or absolute inputs.
126 */
127export function absoluteUrl(pathOrUrl: string | undefined | null): string {
128 if (!pathOrUrl) return config.appBaseUrl;
129 if (/^https?:\/\//i.test(pathOrUrl)) return pathOrUrl;
130 const suffix = pathOrUrl.startsWith("/") ? pathOrUrl : "/" + pathOrUrl;
131 return config.appBaseUrl + suffix;
132}
Modifiedsrc/lib/notify.ts+120−1View fileUnifiedSplit
11/**
22 * Notifications + audit log helpers.
33 * Swallows DB failures so notifications never break the primary request path.
4 *
5 * Email fan-out (Block A8):
6 * For certain kinds (mention / assigned / gate_failed / review_requested)
7 * we ALSO send an email, if the recipient has opted in via their profile
8 * preferences. Email failures are logged and swallowed.
49 */
510
11import { inArray, eq } from "drizzle-orm";
612import { db } from "../db";
7import { notifications, auditLog } from "../db/schema";
13import { notifications, auditLog, users } from "../db/schema";
14import { sendEmail, absoluteUrl } from "./email";
815
916export type NotificationKind =
1017 | "mention"
2532 | "release_published"
2633 | "repo_archived";
2734
35/** Kinds that can trigger email delivery. Keep this list conservative — any
36 * kind here must map to a user preference column on the users table. */
37const EMAIL_ELIGIBLE: ReadonlySet<NotificationKind> = new Set([
38 "mention",
39 "review_requested",
40 "assigned",
41 "gate_failed",
42]);
43
44/** Map notification kind → user preference column name. */
45function prefFor(kind: NotificationKind):
46 | "notifyEmailOnMention"
47 | "notifyEmailOnAssign"
48 | "notifyEmailOnGateFail"
49 | null {
50 switch (kind) {
51 case "mention":
52 case "review_requested":
53 return "notifyEmailOnMention";
54 case "assigned":
55 return "notifyEmailOnAssign";
56 case "gate_failed":
57 return "notifyEmailOnGateFail";
58 default:
59 return null;
60 }
61}
62
63function subjectFor(kind: NotificationKind, title: string): string {
64 const tag =
65 kind === "gate_failed"
66 ? "[gate failed]"
67 : kind === "assigned"
68 ? "[assigned]"
69 : kind === "review_requested"
70 ? "[review requested]"
71 : kind === "mention"
72 ? "[mention]"
73 : `[${kind}]`;
74 return `${tag} ${title}`.slice(0, 180);
75}
76
77function bodyFor(title: string, body: string | undefined, url: string | undefined): string {
78 const lines = [title];
79 if (body) lines.push("", body);
80 if (url) lines.push("", absoluteUrl(url));
81 lines.push("", "—", "You can opt out of these emails at /settings.");
82 return lines.join("\n");
83}
84
85async function maybeEmail(
86 userIds: string[],
87 kind: NotificationKind,
88 opts: { title: string; body?: string; url?: string }
89): Promise<void> {
90 if (!EMAIL_ELIGIBLE.has(kind)) return;
91 const prefCol = prefFor(kind);
92 if (!prefCol) return;
93 if (userIds.length === 0) return;
94
95 let recipients: Array<{ email: string; pref: boolean }> = [];
96 try {
97 const rows = await db
98 .select({
99 id: users.id,
100 email: users.email,
101 mention: users.notifyEmailOnMention,
102 assign: users.notifyEmailOnAssign,
103 gate: users.notifyEmailOnGateFail,
104 })
105 .from(users)
106 .where(inArray(users.id, userIds));
107 recipients = rows.map((r) => ({
108 email: r.email,
109 pref:
110 prefCol === "notifyEmailOnMention"
111 ? r.mention
112 : prefCol === "notifyEmailOnAssign"
113 ? r.assign
114 : r.gate,
115 }));
116 } catch (err) {
117 console.error("[notify] email recipient lookup failed:", err);
118 return;
119 }
120
121 const subject = subjectFor(kind, opts.title);
122 const text = bodyFor(opts.title, opts.body, opts.url);
123
124 // Fire in parallel; each call swallows its own errors.
125 await Promise.all(
126 recipients
127 .filter((r) => r.pref && r.email)
128 .map((r) =>
129 sendEmail({ to: r.email, subject, text }).catch((err) => {
130 console.error("[notify] sendEmail threw:", err);
131 return { ok: false as const, provider: "none" as const };
132 })
133 )
134 );
135}
136
28137export async function notify(
29138 userId: string,
30139 opts: {
47156 } catch (err) {
48157 console.error("[notify] failed:", err);
49158 }
159 await maybeEmail([userId], opts.kind, opts);
50160}
51161
52162export async function notifyMany(
75185 } catch (err) {
76186 console.error("[notify] batch failed:", err);
77187 }
188 await maybeEmail(unique, opts.kind, opts);
78189}
79190
80191export async function audit(opts: {
103214 console.error("[audit] failed:", err);
104215 }
105216}
217
218/** Test-only hook so unit tests can assert the kind→pref mapping. */
219export const __internal = {
220 EMAIL_ELIGIBLE,
221 prefFor,
222 subjectFor,
223 bodyFor,
224};
Addedsrc/lib/templates.ts+86−0View fileUnifiedSplit
1/**
2 * Issue + PR template loader. Looks for the standard locations and
3 * returns the first match. Fails silently (returns null) so new-issue /
4 * new-PR forms always render — templates are a convenience, not a
5 * requirement.
6 */
7
8import { getBlob, getDefaultBranch } from "../git/repository";
9
10const ISSUE_PATHS = [
11 ".github/ISSUE_TEMPLATE.md",
12 ".github/issue_template.md",
13 ".gluecron/ISSUE_TEMPLATE.md",
14 "ISSUE_TEMPLATE.md",
15 "docs/ISSUE_TEMPLATE.md",
16];
17
18const PR_PATHS = [
19 ".github/PULL_REQUEST_TEMPLATE.md",
20 ".github/pull_request_template.md",
21 ".gluecron/PULL_REQUEST_TEMPLATE.md",
22 "PULL_REQUEST_TEMPLATE.md",
23 "docs/PULL_REQUEST_TEMPLATE.md",
24];
25
26const MAX_TEMPLATE_BYTES = 16 * 1024;
27
28async function loadFirst(
29 owner: string,
30 repo: string,
31 ref: string,
32 paths: string[]
33): Promise<string | null> {
34 for (const p of paths) {
35 try {
36 const blob = await getBlob(owner, repo, ref, p);
37 if (blob && !blob.isBinary && blob.content) {
38 // Guard against someone committing a 5MB template.
39 if (blob.content.length > MAX_TEMPLATE_BYTES) {
40 return blob.content.slice(0, MAX_TEMPLATE_BYTES);
41 }
42 return stripFrontmatter(blob.content);
43 }
44 } catch {
45 // keep looking
46 }
47 }
48 return null;
49}
50
51/**
52 * GitHub-style templates can have YAML frontmatter (---\nname: ...\n---).
53 * Strip it — we don't use the name/about fields here.
54 */
55function stripFrontmatter(content: string): string {
56 if (!content.startsWith("---\n")) return content;
57 const end = content.indexOf("\n---", 4);
58 if (end < 0) return content;
59 return content.slice(end + 4).replace(/^\n+/, "");
60}
61
62export async function loadIssueTemplate(
63 owner: string,
64 repo: string
65): Promise<string | null> {
66 try {
67 const ref = (await getDefaultBranch(owner, repo)) || "HEAD";
68 return await loadFirst(owner, repo, ref, ISSUE_PATHS);
69 } catch {
70 return null;
71 }
72}
73
74export async function loadPrTemplate(
75 owner: string,
76 repo: string
77): Promise<string | null> {
78 try {
79 const ref = (await getDefaultBranch(owner, repo)) || "HEAD";
80 return await loadFirst(owner, repo, ref, PR_PATHS);
81 } catch {
82 return null;
83 }
84}
85
86export { stripFrontmatter as _stripFrontmatterForTest };
Addedsrc/routes/deployments.tsx+305−0View fileUnifiedSplit
1/**
2 * Environments + deployment history UI.
3 *
4 * Routes:
5 * GET /:owner/:repo/deployments full deploy history per env
6 * GET /:owner/:repo/deployments/:id single deployment detail
7 *
8 * Data comes from the `deployments` table populated by Crontech / gate
9 * logic on successful push to the default branch.
10 */
11
12import { Hono } from "hono";
13import { desc, eq, and } from "drizzle-orm";
14import { db } from "../db";
15import { deployments, repositories, users } from "../db/schema";
16import type { AuthEnv } from "../middleware/auth";
17import { softAuth } from "../middleware/auth";
18import { Layout } from "../views/layout";
19import { RepoHeader } from "../views/components";
20
21const dep = new Hono<AuthEnv>();
22
23dep.use("/:owner/:repo/deployments", softAuth);
24dep.use("/:owner/:repo/deployments/*", softAuth);
25
26type Row = typeof deployments.$inferSelect & { triggeredByName: string | null };
27
28async function resolveRepo(owner: string, name: string) {
29 try {
30 const [row] = await db
31 .select({
32 id: repositories.id,
33 name: repositories.name,
34 })
35 .from(repositories)
36 .innerJoin(users, eq(users.id, repositories.ownerId))
37 .where(and(eq(users.username, owner), eq(repositories.name, name)))
38 .limit(1);
39 return row || null;
40 } catch {
41 return null;
42 }
43}
44
45function statusBadgeClass(status: string): string {
46 switch (status) {
47 case "success":
48 return "gate-status passed";
49 case "failed":
50 return "gate-status failed";
51 case "blocked":
52 return "gate-status skipped";
53 case "running":
54 case "pending":
55 return "gate-status running";
56 default:
57 return "gate-status";
58 }
59}
60
61function fmtTs(t: Date | null | undefined): string {
62 if (!t) return "—";
63 return new Date(t).toISOString().replace("T", " ").slice(0, 19) + "Z";
64}
65
66function groupByEnv(rows: Row[]): Record<string, Row[]> {
67 const out: Record<string, Row[]> = {};
68 for (const r of rows) {
69 (out[r.environment] ||= []).push(r);
70 }
71 return out;
72}
73
74function envSummary(rows: Row[]): { last: Row | undefined; successRate: number } {
75 const last = rows[0];
76 const recent = rows.slice(0, 20);
77 const successes = recent.filter((r) => r.status === "success").length;
78 const rate = recent.length ? successes / recent.length : 1;
79 return { last, successRate: rate };
80}
81
82dep.get("/:owner/:repo/deployments", async (c) => {
83 const { owner, repo } = c.req.param();
84 const user = c.get("user");
85 const repoRow = await resolveRepo(owner, repo);
86 if (!repoRow) return c.notFound();
87
88 let rows: Row[] = [];
89 try {
90 rows = (await db
91 .select({
92 id: deployments.id,
93 repositoryId: deployments.repositoryId,
94 environment: deployments.environment,
95 commitSha: deployments.commitSha,
96 ref: deployments.ref,
97 status: deployments.status,
98 blockedReason: deployments.blockedReason,
99 target: deployments.target,
100 triggeredBy: deployments.triggeredBy,
101 createdAt: deployments.createdAt,
102 completedAt: deployments.completedAt,
103 triggeredByName: users.username,
104 })
105 .from(deployments)
106 .leftJoin(users, eq(users.id, deployments.triggeredBy))
107 .where(eq(deployments.repositoryId, repoRow.id))
108 .orderBy(desc(deployments.createdAt))
109 .limit(500)) as Row[];
110 } catch (err) {
111 console.error("[deployments] list:", err);
112 }
113
114 const envs = groupByEnv(rows);
115 const envNames = Object.keys(envs).sort();
116
117 return c.html(
118 <Layout title={`${owner}/${repo} — deployments`} user={user}>
119 <RepoHeader owner={owner} repo={repo} />
120 <div style="max-width: 1000px">
121 <h2>Deployments</h2>
122 <p style="color: var(--text-muted); font-size: 14px; margin-bottom: 16px">
123 Every deploy to every environment, newest first. Rolled up by
124 environment with the latest status and success rate across the last
125 20 runs.
126 </p>
127
128 {envNames.length === 0 && (
129 <div class="empty-state">
130 <h2>No deployments yet</h2>
131 <p>
132 When a green push reaches the default branch and a deploy
133 target is configured, the deploy will show up here.
134 </p>
135 </div>
136 )}
137
138 {envNames.map((env) => {
139 const envRows = envs[env];
140 const { last, successRate } = envSummary(envRows);
141 return (
142 <div
143 style="border: 1px solid var(--border); border-radius: var(--radius); background: var(--bg-secondary); margin-bottom: 16px; overflow: hidden"
144 >
145 <div
146 style="padding: 12px 16px; display: flex; justify-content: space-between; align-items: center; background: var(--bg-tertiary); border-bottom: 1px solid var(--border)"
147 >
148 <h3 style="margin: 0; font-size: 15px">{env}</h3>
149 <div style="display: flex; gap: 12px; align-items: center; font-size: 12px">
150 {last && (
151 <span class={statusBadgeClass(last.status)}>
152 {last.status}
153 </span>
154 )}
155 <span style="color: var(--text-muted)">
156 {Math.round(successRate * 100)}% green · {envRows.length} total
157 </span>
158 </div>
159 </div>
160 <div class="gate-list" style="border: none; border-radius: 0">
161 {envRows.slice(0, 10).map((r) => (
162 <div class="gate-run-row">
163 <span class={statusBadgeClass(r.status)}>{r.status}</span>
164 <code
165 style="font-family: var(--font-mono); font-size: 12px"
166 >
167 {r.commitSha.slice(0, 7)}
168 </code>
169 <span style="color: var(--text-muted); font-size: 12px">
170 {r.ref.replace(/^refs\/heads\//, "")}
171 </span>
172 <span style="color: var(--text-muted); font-size: 12px; margin-left: auto">
173 {r.target || "—"}
174 </span>
175 <span style="color: var(--text-muted); font-size: 12px">
176 by {r.triggeredByName || "system"}
177 </span>
178 <span style="color: var(--text-muted); font-size: 12px">
179 {fmtTs(r.createdAt)}
180 </span>
181 <a
182 href={`/${owner}/${repo}/deployments/${r.id}`}
183 style="font-size: 12px"
184 >
185 details
186 </a>
187 </div>
188 ))}
189 {envRows.length > 10 && (
190 <div class="gate-run-row" style="color: var(--text-muted); font-size: 12px">
191 + {envRows.length - 10} more{"\u2026"}
192 </div>
193 )}
194 </div>
195 </div>
196 );
197 })}
198 </div>
199 </Layout>
200 );
201});
202
203dep.get("/:owner/:repo/deployments/:id", async (c) => {
204 const { owner, repo, id } = c.req.param();
205 const user = c.get("user");
206 const repoRow = await resolveRepo(owner, repo);
207 if (!repoRow) return c.notFound();
208
209 let row: Row | null = null;
210 try {
211 const [r] = await db
212 .select({
213 id: deployments.id,
214 repositoryId: deployments.repositoryId,
215 environment: deployments.environment,
216 commitSha: deployments.commitSha,
217 ref: deployments.ref,
218 status: deployments.status,
219 blockedReason: deployments.blockedReason,
220 target: deployments.target,
221 triggeredBy: deployments.triggeredBy,
222 createdAt: deployments.createdAt,
223 completedAt: deployments.completedAt,
224 triggeredByName: users.username,
225 })
226 .from(deployments)
227 .leftJoin(users, eq(users.id, deployments.triggeredBy))
228 .where(
229 and(eq(deployments.id, id), eq(deployments.repositoryId, repoRow.id))
230 )
231 .limit(1);
232 row = (r as Row) || null;
233 } catch (err) {
234 console.error("[deployments] detail:", err);
235 }
236
237 if (!row) return c.notFound();
238
239 return c.html(
240 <Layout
241 title={`Deploy ${row.commitSha.slice(0, 7)} → ${row.environment}`}
242 user={user}
243 >
244 <RepoHeader owner={owner} repo={repo} />
245 <div style="max-width: 700px">
246 <div class="breadcrumb">
247 <a href={`/${owner}/${repo}/deployments`}>deployments</a>
248 <span>/</span>
249 <span>{row.id.slice(0, 8)}</span>
250 </div>
251 <h2>
252 <span class={statusBadgeClass(row.status)}>{row.status}</span>{" "}
253 <span style="font-family: var(--font-mono); font-size: 16px">
254 {row.commitSha.slice(0, 7)}
255 </span>{" "}
256 <span style="color: var(--text-muted); font-weight: 400">
257 &rarr; {row.environment}
258 </span>
259 </h2>
260 <table class="audit-table" style="margin-top: 16px">
261 <tbody>
262 <tr>
263 <th style="width: 140px">Target</th>
264 <td>{row.target || "—"}</td>
265 </tr>
266 <tr>
267 <th>Ref</th>
268 <td>
269 <code>{row.ref}</code>
270 </td>
271 </tr>
272 <tr>
273 <th>Commit</th>
274 <td>
275 <a href={`/${owner}/${repo}/commit/${row.commitSha}`}>
276 <code>{row.commitSha}</code>
277 </a>
278 </td>
279 </tr>
280 <tr>
281 <th>Triggered by</th>
282 <td>{row.triggeredByName || "system"}</td>
283 </tr>
284 <tr>
285 <th>Created</th>
286 <td>{fmtTs(row.createdAt)}</td>
287 </tr>
288 <tr>
289 <th>Completed</th>
290 <td>{fmtTs(row.completedAt)}</td>
291 </tr>
292 {row.blockedReason && (
293 <tr>
294 <th>Blocked reason</th>
295 <td style="color: var(--red)">{row.blockedReason}</td>
296 </tr>
297 )}
298 </tbody>
299 </table>
300 </div>
301 </Layout>
302 );
303});
304
305export default dep;
Modifiedsrc/routes/issues.tsx+10−1View fileUnifiedSplit
1717import { RepoHeader, RepoNav } from "../views/components";
1818import { ReactionsBar } from "../views/reactions";
1919import { summariseReactions } from "../lib/reactions";
20import { loadIssueTemplate } from "../lib/templates";
2021import { renderMarkdown } from "../lib/markdown";
2122import { softAuth, requireAuth } from "../middleware/auth";
2223import type { AuthEnv } from "../middleware/auth";
165166 const { owner: ownerName, repo: repoName } = c.req.param();
166167 const user = c.get("user")!;
167168 const error = c.req.query("error");
169 const template = await loadIssueTemplate(ownerName, repoName);
168170
169171 return c.html(
170172 <Layout title={`New issue — ${ownerName}/${repoName}`} user={user}>
172174 <IssueNav owner={ownerName} repo={repoName} active="issues" />
173175 <div style="max-width: 800px">
174176 <h2 style="margin-bottom: 16px">New issue</h2>
177 {template && (
178 <div style="font-size: 12px; color: var(--text-muted); margin-bottom: 8px">
179 Using <code>ISSUE_TEMPLATE.md</code> from the default branch.
180 </div>
181 )}
175182 {error && (
176183 <div class="auth-error">{decodeURIComponent(error)}</div>
177184 )}
191198 rows={12}
192199 placeholder="Leave a comment... (Markdown supported)"
193200 style="font-family: var(--font-mono); font-size: 13px"
194 />
201 >
202 {template || ""}
203 </textarea>
195204 </div>
196205 <button type="submit" class="btn btn-primary">
197206 Submit new issue
Modifiedsrc/routes/pulls.tsx+10−1View fileUnifiedSplit
1515import { RepoHeader, DiffView } from "../views/components";
1616import { ReactionsBar } from "../views/reactions";
1717import { summariseReactions } from "../lib/reactions";
18import { loadPrTemplate } from "../lib/templates";
1819import { renderMarkdown } from "../lib/markdown";
1920import { softAuth, requireAuth } from "../middleware/auth";
2021import type { AuthEnv } from "../middleware/auth";
227228 const branches = await listBranches(ownerName, repoName);
228229 const error = c.req.query("error");
229230 const defaultBase = branches.includes("main") ? "main" : branches[0] || "";
231 const template = await loadPrTemplate(ownerName, repoName);
230232
231233 return c.html(
232234 <Layout title={`New PR — ${ownerName}/${repoName}`} user={user}>
234236 <PrNav owner={ownerName} repo={repoName} active="pulls" />
235237 <div style="max-width: 800px">
236238 <h2 style="margin-bottom: 16px">Open a pull request</h2>
239 {template && (
240 <div style="font-size: 12px; color: var(--text-muted); margin-bottom: 8px">
241 Using <code>PULL_REQUEST_TEMPLATE.md</code> from the default branch.
242 </div>
243 )}
237244 {error && (
238245 <div class="auth-error">{decodeURIComponent(error)}</div>
239246 )}
271278 rows={8}
272279 placeholder="Description (Markdown supported)"
273280 style="font-family: var(--font-mono); font-size: 13px"
274 />
281 >
282 {template || ""}
283 </textarea>
275284 </div>
276285 <div style="display: flex; gap: 8px">
277286 <button type="submit" class="btn btn-primary">
Addedsrc/routes/saved-replies.tsx+242−0View fileUnifiedSplit
1/**
2 * Saved replies — per-user canned comment templates.
3 *
4 * Routes:
5 * GET /settings/replies list + create form
6 * POST /settings/replies create
7 * POST /settings/replies/:id/delete delete
8 * POST /settings/replies/:id update
9 * GET /api/user/replies JSON list for the insertion picker
10 */
11
12import { Hono } from "hono";
13import { and, eq, asc } from "drizzle-orm";
14import { db } from "../db";
15import { savedReplies } from "../db/schema";
16import type { AuthEnv } from "../middleware/auth";
17import { requireAuth } from "../middleware/auth";
18import { Layout } from "../views/layout";
19
20const replies = new Hono<AuthEnv>();
21
22replies.use("/settings/replies", requireAuth);
23replies.use("/settings/replies/*", requireAuth);
24replies.use("/api/user/replies", requireAuth);
25
26function trimBounded(s: string, max: number): string {
27 const t = s.trim();
28 return t.length > max ? t.slice(0, max) : t;
29}
30
31async function listForUser(userId: string) {
32 try {
33 return await db
34 .select()
35 .from(savedReplies)
36 .where(eq(savedReplies.userId, userId))
37 .orderBy(asc(savedReplies.shortcut));
38 } catch (err) {
39 console.error("[saved-replies] list:", err);
40 return [];
41 }
42}
43
44replies.get("/settings/replies", async (c) => {
45 const user = c.get("user")!;
46 const rows = await listForUser(user.id);
47 const error = c.req.query("error");
48 const success = c.req.query("success");
49
50 return c.html(
51 <Layout title="Saved replies" user={user}>
52 <div class="settings-container" style="max-width: 720px">
53 <h2>Saved replies</h2>
54 <p style="color: var(--text-muted); font-size: 14px; margin-bottom: 16px">
55 Canned responses you can insert into any issue or PR comment. The
56 shortcut is a nickname only you see.
57 </p>
58
59 {error && <div class="auth-error">{decodeURIComponent(error)}</div>}
60 {success && (
61 <div class="auth-success">{decodeURIComponent(success)}</div>
62 )}
63
64 <form method="POST" action="/settings/replies" style="margin-bottom: 24px">
65 <div class="form-group">
66 <label for="shortcut">Shortcut</label>
67 <input
68 type="text"
69 id="shortcut"
70 name="shortcut"
71 required
72 maxLength={64}
73 placeholder="lgtm"
74 />
75 </div>
76 <div class="form-group">
77 <label for="body">Reply body</label>
78 <textarea
79 id="body"
80 name="body"
81 rows={4}
82 required
83 maxLength={4096}
84 placeholder="LGTM! Thanks for the PR."
85 style="font-family: var(--font-mono); font-size: 13px"
86 />
87 </div>
88 <button type="submit" class="btn btn-primary">
89 Add saved reply
90 </button>
91 </form>
92
93 {rows.length > 0 && (
94 <div>
95 <h3 style="font-size: 16px; margin-bottom: 12px">
96 Your replies ({rows.length})
97 </h3>
98 <div class="saved-replies-list">
99 {rows.map((r) => (
100 <details class="saved-reply-item">
101 <summary>
102 <code>{r.shortcut}</code>
103 <span style="color: var(--text-muted); font-size: 12px; margin-left: 8px">
104 {r.body.slice(0, 80).replace(/\n/g, " ")}
105 {r.body.length > 80 ? "\u2026" : ""}
106 </span>
107 </summary>
108 <div style="padding: 12px 16px; background: var(--bg-secondary); border-top: 1px solid var(--border)">
109 <form method="POST" action={`/settings/replies/${r.id}`}>
110 <div class="form-group">
111 <label>Shortcut</label>
112 <input
113 type="text"
114 name="shortcut"
115 required
116 value={r.shortcut}
117 maxLength={64}
118 />
119 </div>
120 <div class="form-group">
121 <label>Body</label>
122 <textarea
123 name="body"
124 rows={4}
125 required
126 maxLength={4096}
127 style="font-family: var(--font-mono); font-size: 13px"
128 >
129 {r.body}
130 </textarea>
131 </div>
132 <div style="display: flex; gap: 8px">
133 <button type="submit" class="btn btn-primary">
134 Save
135 </button>
136 <button
137 type="submit"
138 formaction={`/settings/replies/${r.id}/delete`}
139 class="btn btn-danger"
140 onclick="return confirm('Delete this saved reply?')"
141 >
142 Delete
143 </button>
144 </div>
145 </form>
146 </div>
147 </details>
148 ))}
149 </div>
150 </div>
151 )}
152 </div>
153 </Layout>
154 );
155});
156
157replies.post("/settings/replies", async (c) => {
158 const user = c.get("user")!;
159 const body = await c.req.parseBody();
160 const shortcut = trimBounded(String(body.shortcut || ""), 64);
161 const text = trimBounded(String(body.body || ""), 4096);
162 if (!shortcut || !text) {
163 return c.redirect(
164 "/settings/replies?error=" + encodeURIComponent("Shortcut and body are required")
165 );
166 }
167 try {
168 await db.insert(savedReplies).values({
169 userId: user.id,
170 shortcut,
171 body: text,
172 });
173 } catch (err: any) {
174 if (String(err?.message || err).includes("saved_replies_user_shortcut")) {
175 return c.redirect(
176 "/settings/replies?error=" +
177 encodeURIComponent("You already have a reply with that shortcut")
178 );
179 }
180 console.error("[saved-replies] create:", err);
181 return c.redirect(
182 "/settings/replies?error=" + encodeURIComponent("Failed to save")
183 );
184 }
185 return c.redirect(
186 "/settings/replies?success=" + encodeURIComponent("Reply saved")
187 );
188});
189
190replies.post("/settings/replies/:id", async (c) => {
191 const user = c.get("user")!;
192 const id = c.req.param("id");
193 const body = await c.req.parseBody();
194 const shortcut = trimBounded(String(body.shortcut || ""), 64);
195 const text = trimBounded(String(body.body || ""), 4096);
196 if (!shortcut || !text) {
197 return c.redirect(
198 "/settings/replies?error=" + encodeURIComponent("Shortcut and body are required")
199 );
200 }
201 try {
202 await db
203 .update(savedReplies)
204 .set({ shortcut, body: text, updatedAt: new Date() })
205 .where(and(eq(savedReplies.id, id), eq(savedReplies.userId, user.id)));
206 } catch (err) {
207 console.error("[saved-replies] update:", err);
208 }
209 return c.redirect(
210 "/settings/replies?success=" + encodeURIComponent("Reply updated")
211 );
212});
213
214replies.post("/settings/replies/:id/delete", async (c) => {
215 const user = c.get("user")!;
216 const id = c.req.param("id");
217 try {
218 await db
219 .delete(savedReplies)
220 .where(and(eq(savedReplies.id, id), eq(savedReplies.userId, user.id)));
221 } catch (err) {
222 console.error("[saved-replies] delete:", err);
223 }
224 return c.redirect(
225 "/settings/replies?success=" + encodeURIComponent("Reply deleted")
226 );
227});
228
229replies.get("/api/user/replies", async (c) => {
230 const user = c.get("user")!;
231 const rows = await listForUser(user.id);
232 return c.json({
233 ok: true,
234 replies: rows.map((r) => ({
235 id: r.id,
236 shortcut: r.shortcut,
237 body: r.body,
238 })),
239 });
240});
241
242export default replies;
Modifiedsrc/routes/settings.tsx+62−0View fileUnifiedSplit
7676 Update profile
7777 </button>
7878 </form>
79
80 <h3 style="margin-top: 32px; font-size: 16px">Email notifications</h3>
81 <p style="color: var(--text-muted); font-size: 13px; margin-bottom: 12px">
82 Opt out of individual email categories. In-app notifications are
83 unaffected and continue to appear in your inbox.
84 </p>
85 <form method="POST" action="/settings/notifications">
86 <label
87 style="display: flex; gap: 8px; align-items: center; margin-bottom: 8px; font-size: 14px"
88 >
89 <input
90 type="checkbox"
91 name="notify_email_on_mention"
92 value="1"
93 checked={user.notifyEmailOnMention}
94 />
95 <span>
96 Someone <code>@mentions</code> me or requests a review
97 </span>
98 </label>
99 <label
100 style="display: flex; gap: 8px; align-items: center; margin-bottom: 8px; font-size: 14px"
101 >
102 <input
103 type="checkbox"
104 name="notify_email_on_assign"
105 value="1"
106 checked={user.notifyEmailOnAssign}
107 />
108 <span>I am assigned to an issue or PR</span>
109 </label>
110 <label
111 style="display: flex; gap: 8px; align-items: center; margin-bottom: 12px; font-size: 14px"
112 >
113 <input
114 type="checkbox"
115 name="notify_email_on_gate_fail"
116 value="1"
117 checked={user.notifyEmailOnGateFail}
118 />
119 <span>A gate fails on one of my repositories</span>
120 </label>
121 <button type="submit" class="btn btn-primary">
122 Save preferences
123 </button>
124 </form>
79125 </div>
80126 </Layout>
81127 );
82128});
83129
130settings.post("/settings/notifications", async (c) => {
131 const user = c.get("user")!;
132 const body = await c.req.parseBody();
133 await db
134 .update(users)
135 .set({
136 notifyEmailOnMention: String(body.notify_email_on_mention || "") === "1",
137 notifyEmailOnAssign: String(body.notify_email_on_assign || "") === "1",
138 notifyEmailOnGateFail:
139 String(body.notify_email_on_gate_fail || "") === "1",
140 updatedAt: new Date(),
141 })
142 .where(eq(users.id, user.id));
143 return c.redirect("/settings?success=Email+preferences+updated");
144});
145
84146settings.post("/settings/profile", async (c) => {
85147 const user = c.get("user")!;
86148 const body = await c.req.parseBody();
Modifiedsrc/views/layout.tsx+15−0View fileUnifiedSplit
959959 .reaction-picker form { display: inline; }
960960 .reaction-count { font-size: 11px; font-weight: 600; }
961961
962 /* Saved replies */
963 .saved-replies-list { border: 1px solid var(--border); border-radius: var(--radius); overflow: hidden; }
964 .saved-reply-item { border-bottom: 1px solid var(--border); background: var(--bg); }
965 .saved-reply-item:last-child { border-bottom: none; }
966 .saved-reply-item > summary {
967 padding: 10px 16px;
968 cursor: pointer;
969 list-style: none;
970 display: flex;
971 align-items: center;
972 }
973 .saved-reply-item > summary::-webkit-details-marker { display: none; }
974 .saved-reply-item > summary:hover { background: var(--bg-secondary); }
975 .saved-reply-item code { font-family: var(--font-mono); font-size: 12px; color: var(--text-link); }
976
962977 /* Draft PR */
963978 .draft-badge {
964979 background: rgba(139, 148, 158, 0.15);
965980