Pre-launch — Gluecron is in final validation. Public signups and git hosting for non-owner users open after launch review.
ccantynz/Gluecron.com
Commit71cd5ecunknown_key

feat(BLOCK-I): I1 archive + I2 templates + I3 transfer + I4 cmd palette

feat(BLOCK-I): I1 archive + I2 templates + I3 transfer + I4 cmd palette

I1 — Archive/unarchive toggle in /:owner/:repo/settings; RepoHeader renders
an "Archived" badge. Uses the pre-existing repositories.is_archived column.

I2 — Template repositories. drizzle/0022_repo_templates.sql adds
is_template (partial index where true). src/routes/templates.ts serves
POST /:owner/:repo/use-template — validates the source has is_template=true,
clones --bare into the caller's namespace, bootstraps green-ecosystem
defaults. Settings gains a "Mark as template" toggle. Public repo page
shows a prominent "Use this template" CTA for non-owners.

I3 — Repository transfer. Same migration adds repo_transfers audit table
(from_owner_id, to_owner_id, initiated_by, created_at). Transfer form in
settings: validates target user exists, rejects name conflicts, swaps
owner_id, logs the transfer. Redirects to /<new-owner>/<repo>.

I4 — Generic Cmd+K command palette. src/views/layout.tsx injects a
backdrop + modal + input + list. ~20 canonical destinations (Dashboard,
Explore, Notifications, Ask, New repo, Marketplace, Installed apps,
Register app, Shortcuts, Settings, 2FA, Passkeys, PATs, Billing, Audit,
Gists, GraphQL explorer, Admin, Theme). Fuzzy match, ↑↓ nav, Enter to go,
Esc/backdrop to close.

Tests — 6 new tests covering archive/template/transfer auth gates +
Layout palette markup + COMMANDS list presence. Full suite: 549 pass, 0
fail.

https://claude.ai/code/session_01U6sj9ezKCpmiwx7cXGZmS6
Claude committed on April 15, 2026Parent: 06139e6
10 files changed+733−1671cd5ecd2600a67b27d8346f14659ac02a3c0478
10 changed files+733−16
ModifiedBUILD_BIBLE.md+14−7View fileUnifiedSplit
6868| Forking | ✅ | `src/routes/fork.ts` |
6969| Stars | ✅ | `stars` table, `/:owner/:repo/star` |
7070| Topics | ✅ | `repo_topics` table |
71| Archive / disable repo | ❌ | schema has flags; no UI |
72| Repository transfer | ❌ | — |
73| Template repositories | ❌ | — |
71| Archive / disable repo | ✅ | I1 — `src/routes/repo-settings.tsx` archive toggle; `RepoHeader` renders an "Archived" badge when `is_archived=true`. |
72| Repository transfer | ✅ | I3 — `src/routes/repo-settings.tsx` transfer form + `POST /:owner/:repo/settings/transfer`; ownership change recorded in `repo_transfers` audit table. Reject conflicts (target owner already has a repo by that name) with a redirect. |
73| Template repositories | ✅ | I2 — `drizzle/0022_repo_templates.sql` adds `is_template`. `src/routes/templates.ts` serves `POST /:owner/:repo/use-template` (git clone --bare into caller's namespace). "Use this template" CTA rendered on the public repo page. |
7474| Repository mirroring | ❌ | — |
7575
7676### 2.2 Code browsing
144144| Personal access tokens | ✅ | SHA-256 hashed |
145145| OAuth app provider | ✅ | `src/routes/oauth.tsx`, `src/routes/developer-apps.tsx`, `src/lib/oauth.ts`; `oauth_apps` + `oauth_authorizations` + `oauth_access_tokens` tables |
146146| GitHub Apps equivalent | ✅ | H2 — `src/lib/marketplace.ts` `generateBearerToken`/`verifyInstallToken` (1h TTL, `ghi_` prefix, sha256 hashed). Each app gets a `<slug>[bot]` identity (`app_bots`). Permissions enforced via `hasPermission` (write implies read). |
147| GraphQL API | ❌ | REST only |
147| GraphQL API | ✅ | G2 — see 2.6 |
148148| Organizations + teams | ✅ | B1+B2+B3 shipped: `src/routes/orgs.tsx`, `src/lib/orgs.ts`; org-owned repos (`repositories.orgId`); team-based CODEOWNERS (`@org/team` resolution) |
149149| Enterprise SAML / SSO | ❌ | |
150150| 2FA / TOTP | ✅ | `src/routes/settings-2fa.tsx`, `src/lib/totp.ts`; `user_totp` + `user_recovery_codes` tables |
181181| Dark mode | ✅ | default |
182182| Light-mode toggle | ✅ | `/theme/toggle` + `theme` cookie, pre-paint script avoids FOUC, nav sun/moon icon |
183183| Keyboard shortcuts | ✅ | `/shortcuts` page |
184| Command palette | 🟡 | Cmd+K → Ask AI, no generic palette |
184| Command palette | ✅ | I4 — `src/views/layout.tsx` injects a Cmd+K palette with ~20 canonical destinations, arrow-key navigation + fuzzy match. Backdrop click or Esc closes. |
185185
186186---
187187
266266- **G3** — Official CLI (`gluecron`) → ✅ shipped. `cli/gluecron.ts` is a Bun-compilable single-file CLI. Commands: `login`, `whoami`, `repo ls/show/create`, `issues ls`, `gql`, `host`, `version`. Config in `~/.gluecron/config.json` (0600). Talks to the server via REST + GraphQL.
267267- **G4** — VS Code extension → ✅ shipped. `vscode-extension/` contains package.json + `src/extension.ts`. Commands: `gluecron.explainFile`, `gluecron.openOnWeb`, `gluecron.searchSemantic`, `gluecron.generateTests`. Detects Gluecron remotes via `git config remote.origin.url`. Settings: `gluecron.host` + `gluecron.token`.
268268
269### BLOCK I — Filling parity gaps
270- **I1** — Archive / unarchive repository → ✅ shipped. `src/routes/repo-settings.tsx` archive/unarchive toggle (existing `repositories.is_archived` column). `RepoHeader` surfaces an "Archived" badge.
271- **I2** — Template repositories → ✅ shipped. `drizzle/0022_repo_templates.sql` adds `is_template` column + partial index. `src/routes/templates.ts` serves `POST /:owner/:repo/use-template` (git clone --bare into caller's namespace, fresh `activity_feed` entry). Settings UI gains a "Mark as template" toggle. Public repo page renders a prominent "Use this template" CTA for non-owners.
272- **I3** — Repository transfer → ✅ shipped. `drizzle/0022_repo_templates.sql` adds `repo_transfers` audit table. `src/routes/repo-settings.tsx` `POST /:owner/:repo/settings/transfer` (validate target user exists, reject name conflicts, update `owner_id`, log to `repo_transfers`).
273- **I4** — Generic command palette → ✅ shipped. `src/views/layout.tsx` injects a Cmd+K palette with ~20 canonical destinations (Dashboard, Explore, Notifications, Ask AI, Create repo, Marketplace, Installed apps, Register app, Shortcuts, Settings, 2FA, Passkeys, PATs, Billing, Audit, Gists, GraphQL, Admin, Theme). Fuzzy-match, arrow-key navigation, Esc/backdrop to close.
274
269275### BLOCK H — Marketplace
270276- **H1** — App marketplace → ✅ shipped. `src/routes/marketplace.tsx` + `src/lib/marketplace.ts` + `drizzle/0021_marketplace_and_apps.sql` (5 tables: `apps`, `app_installations`, `app_bots`, `app_install_tokens`, `app_events`). Routes: `GET /marketplace` (public directory with search), `GET /marketplace/:slug` (detail + install CTA), `POST /marketplace/:slug/install` (user-target install in v1), `POST /marketplace/installations/:id/uninstall`, `GET /settings/apps` (personal list), `GET+POST /developer/apps-new` (register), `GET /developer/apps/:slug/manage` (event log + install count), `POST /developer/apps/:slug/tokens/new` (show-once token). Install idempotent via soft-update on existing non-uninstalled row.
271277- **H2** — GitHub Apps equivalent (bot identities + installation tokens) → ✅ shipped. Same schema as H1: every app gets a `<slug>[bot]` row in `app_bots`. `generateBearerToken()` produces `ghi_`-prefixed bearers; `hashBearer` (sha256) is the only form persisted. `verifyInstallToken(token)` returns `{installation, app, botUsername, permissions}` or `null` (checks revoked/expired/uninstalled/suspended). Permission vocabulary: `contents:read/write`, `issues:read/write`, `pulls:read/write`, `checks:read/write`, `deployments:read/write`, `metadata:read` — `hasPermission` implements write→read implication.
280286- `src/app.tsx` — route composition, middleware order, error handlers
281287- `src/index.ts` — Bun server entry
282288- `src/lib/config.ts` — env getters (late-binding)
283- `src/db/schema.ts` — 78 tables. New tables only via new migration.
289- `src/db/schema.ts` — 79 tables. New tables only via new migration.
284290- `src/db/index.ts` — lazy proxy DB connection
285291- `src/db/migrate.ts` — migration runner
286292- `drizzle/0000_initial.sql`, `drizzle/0001_green_ecosystem.sql` — migrations
302308- `drizzle/0019_protected_tags.sql` (Block E7) — migration, never edited in place. Adds `protected_tags`.
303309- `drizzle/0020_analytics_and_admin.sql` (Block F) — migration, never edited in place. Adds `repo_traffic_events`, `system_flags`, `site_admins`, `billing_plans` (seeded free/pro/team/enterprise), `user_quotas`.
304310- `drizzle/0021_marketplace_and_apps.sql` (Block H) — migration, never edited in place. Adds `apps`, `app_installations` (partial unique index on `(app_id, target_type, target_id) WHERE uninstalled_at IS NULL`), `app_bots` (one-per-app, `<slug>[bot]` username), `app_install_tokens` (sha256 hash, expires_at, revoked_at), `app_events` (audit trail).
311- `drizzle/0022_repo_templates.sql` (Block I2+I3) — migration, never edited in place. Adds `repositories.is_template` (partial index where true) + `repo_transfers` audit table.
305312
306313### 4.2 Git layer (locked)
307314- `src/git/repository.ts` — tree / blob / commits / diff / branches / blame / search / raw / tags / commitsBetween
454461```bash
455462bun install
456463bun dev # hot reload
457bun test # 543 tests currently pass
464bun test # 549 tests currently pass
458465bun run db:migrate
459466```
460467
Addeddrizzle/0022_repo_templates.sql+34−0View fileUnifiedSplit
1-- Gluecron migration 0022: Template repositories + transfer history.
2--
3-- I2 — Template repositories. Owners can flag a repo as a "template" via
4-- settings; other users can then click "Use this template" to create a new
5-- repo seeded from the template's disk state. The seed flow is handled in
6-- application code (repositories.ts); this migration just adds the column.
7--
8-- I3 — Repository transfer history (audit trail of ownership changes). The
9-- primary `repositories.owner_id` / `org_id` fields carry the current owner;
10-- this table records prior owners so a transferred repo can prove provenance.
11
12--> statement-breakpoint
13ALTER TABLE "repositories"
14 ADD COLUMN IF NOT EXISTS "is_template" boolean NOT NULL DEFAULT false;
15
16--> statement-breakpoint
17CREATE INDEX IF NOT EXISTS "repos_is_template" ON "repositories" ("is_template") WHERE "is_template" = true;
18
19--> statement-breakpoint
20CREATE TABLE IF NOT EXISTS "repo_transfers" (
21 "id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
22 "repository_id" uuid NOT NULL,
23 "from_owner_id" uuid NOT NULL,
24 "from_org_id" uuid,
25 "to_owner_id" uuid NOT NULL,
26 "to_org_id" uuid,
27 "initiated_by" uuid NOT NULL,
28 "created_at" timestamp DEFAULT now() NOT NULL,
29 CONSTRAINT "repo_transfers_repo_fk" FOREIGN KEY ("repository_id") REFERENCES "repositories"("id") ON DELETE cascade,
30 CONSTRAINT "repo_transfers_init_fk" FOREIGN KEY ("initiated_by") REFERENCES "users"("id") ON DELETE cascade
31);
32
33--> statement-breakpoint
34CREATE INDEX IF NOT EXISTS "repo_transfers_repo" ON "repo_transfers" ("repository_id", "created_at");
Addedsrc/__tests__/repo-lifecycle.test.ts+75−0View fileUnifiedSplit
1/**
2 * Block I1+I2+I3 — Archive, template, transfer route auth smoke.
3 * Also asserts the command palette payload is injected into Layout output.
4 */
5
6import { describe, it, expect } from "bun:test";
7import app from "../app";
8import { Layout } from "../views/layout";
9
10describe("repo-lifecycle — archive", () => {
11 it("POST /:owner/:repo/settings/archive without auth → 302 /login", async () => {
12 const res = await app.request("/alice/repo/settings/archive", {
13 method: "POST",
14 body: new URLSearchParams({ archive: "1" }),
15 headers: { "content-type": "application/x-www-form-urlencoded" },
16 });
17 expect(res.status).toBe(302);
18 expect(res.headers.get("location") || "").toContain("/login");
19 });
20});
21
22describe("repo-lifecycle — template", () => {
23 it("POST /:owner/:repo/settings/template without auth → 302 /login", async () => {
24 const res = await app.request("/alice/repo/settings/template", {
25 method: "POST",
26 body: new URLSearchParams({ template: "1" }),
27 headers: { "content-type": "application/x-www-form-urlencoded" },
28 });
29 expect(res.status).toBe(302);
30 expect(res.headers.get("location") || "").toContain("/login");
31 });
32
33 it("POST /:owner/:repo/use-template without auth → 302 /login", async () => {
34 const res = await app.request("/alice/repo/use-template", {
35 method: "POST",
36 body: new URLSearchParams({ name: "new-repo" }),
37 headers: { "content-type": "application/x-www-form-urlencoded" },
38 });
39 expect(res.status).toBe(302);
40 expect(res.headers.get("location") || "").toContain("/login");
41 });
42});
43
44describe("repo-lifecycle — transfer", () => {
45 it("POST /:owner/:repo/settings/transfer without auth → 302 /login", async () => {
46 const res = await app.request("/alice/repo/settings/transfer", {
47 method: "POST",
48 body: new URLSearchParams({ new_owner: "bob" }),
49 headers: { "content-type": "application/x-www-form-urlencoded" },
50 });
51 expect(res.status).toBe(302);
52 expect(res.headers.get("location") || "").toContain("/login");
53 });
54});
55
56describe("command palette — Layout markup", () => {
57 it("renders cmdk-backdrop + cmdk-panel + cmdk-input in every layout", () => {
58 const vnode = Layout({ title: "Test", children: "x" } as any);
59 // vnode.toString() renders JSX to HTML in Hono's JSX runtime
60 const html = String(vnode);
61 expect(html).toContain("cmdk-backdrop");
62 expect(html).toContain("cmdk-panel");
63 expect(html).toContain("cmdk-input");
64 expect(html).toContain("cmdk-list");
65 });
66
67 it("command palette script registers COMMANDS list", () => {
68 const vnode = Layout({ title: "Test", children: "x" } as any);
69 const html = String(vnode);
70 // Script body should mention some canonical destinations
71 expect(html).toContain("Go to Dashboard");
72 expect(html).toContain("Marketplace");
73 expect(html).toContain("GraphQL explorer");
74 });
75});
Modifiedsrc/app.tsx+4−0View fileUnifiedSplit
6363import pwaRoutes from "./routes/pwa";
6464import graphqlRoutes from "./routes/graphql";
6565import marketplaceRoutes from "./routes/marketplace";
66import templatesRoutes from "./routes/templates";
6667import webRoutes from "./routes/web";
6768
6869const app = new Hono();
214215// Marketplace + app installations + bot identities (Block H1 + H2)
215216app.route("/", marketplaceRoutes);
216217
218// Template repositories — POST /:owner/:repo/use-template (Block I2)
219app.route("/", templatesRoutes);
220
217221// Insights + milestones
218222app.route("/", insightsRoutes);
219223
Modifiedsrc/db/schema.ts+26−0View fileUnifiedSplit
5656 description: text("description"),
5757 isPrivate: boolean("is_private").default(false).notNull(),
5858 isArchived: boolean("is_archived").default(false).notNull(),
59 isTemplate: boolean("is_template").default(false).notNull(),
5960 defaultBranch: text("default_branch").default("main").notNull(),
6061 diskPath: text("disk_path").notNull(),
6162 forkedFromId: uuid("forked_from_id").references(() => repositories.id, {
18881889);
18891890
18901891export type AppEvent = typeof appEvents.$inferSelect;
1892
1893// ---------- Block I3 — Repository transfer history ----------
1894
1895export const repoTransfers = pgTable(
1896 "repo_transfers",
1897 {
1898 id: uuid("id").primaryKey().defaultRandom(),
1899 repositoryId: uuid("repository_id")
1900 .notNull()
1901 .references(() => repositories.id, { onDelete: "cascade" }),
1902 fromOwnerId: uuid("from_owner_id").notNull(),
1903 fromOrgId: uuid("from_org_id"),
1904 toOwnerId: uuid("to_owner_id").notNull(),
1905 toOrgId: uuid("to_org_id"),
1906 initiatedBy: uuid("initiated_by")
1907 .notNull()
1908 .references(() => users.id, { onDelete: "cascade" }),
1909 createdAt: timestamp("created_at").defaultNow().notNull(),
1910 },
1911 (table) => [
1912 index("repo_transfers_repo").on(table.repositoryId, table.createdAt),
1913 ]
1914);
1915
1916export type RepoTransfer = typeof repoTransfers.$inferSelect;
Modifiedsrc/routes/repo-settings.tsx+228−2View fileUnifiedSplit
55import { Hono } from "hono";
66import { eq, and } from "drizzle-orm";
77import { db } from "../db";
8import { repositories, users } from "../db/schema";
8import { repositories, users, repoTransfers } from "../db/schema";
99import { Layout } from "../views/layout";
1010import { RepoHeader } from "../views/components";
1111import { softAuth, requireAuth } from "../middleware/auth";
125125 </form>
126126
127127 <div
128 style="margin-top: 40px; padding: 20px; border: 1px solid var(--red); border-radius: var(--radius)"
128 style="margin-top: 32px; padding: 20px; border: 1px solid var(--border); border-radius: var(--radius)"
129 >
130 <h3 style="margin-bottom: 8px">Template repository</h3>
131 <p style="font-size: 14px; color: var(--text-muted); margin-bottom: 12px">
132 {repo.isTemplate
133 ? "This repository is a template. Users can click \u201cUse this template\u201d to create a new repository with the same files."
134 : "Mark this repository as a template so others can seed new repositories from its files."}
135 </p>
136 <form
137 method="POST"
138 action={`/${ownerName}/${repoName}/settings/template`}
139 >
140 <input
141 type="hidden"
142 name="template"
143 value={repo.isTemplate ? "0" : "1"}
144 />
145 <button type="submit" class="btn">
146 {repo.isTemplate
147 ? "Unmark as template"
148 : "Mark as template"}
149 </button>
150 </form>
151 </div>
152
153 <div
154 style="margin-top: 20px; padding: 20px; border: 1px solid var(--border); border-radius: var(--radius)"
155 >
156 <h3 style="margin-bottom: 8px">Transfer ownership</h3>
157 <p style="font-size: 14px; color: var(--text-muted); margin-bottom: 12px">
158 Transfer this repository to another user. The new owner can
159 accept or decline the transfer by attempting to view it.
160 </p>
161 <form
162 method="POST"
163 action={`/${ownerName}/${repoName}/settings/transfer`}
164 onsubmit="return confirm('Transfer this repository? The new owner will have full control.')"
165 >
166 <input
167 type="text"
168 name="new_owner"
169 placeholder="new-owner-username"
170 required
171 style="width:60%"
172 />{" "}
173 <button type="submit" class="btn">
174 Transfer
175 </button>
176 </form>
177 </div>
178
179 <div
180 style="margin-top: 20px; padding: 20px; border: 1px solid var(--border); border-radius: var(--radius)"
181 >
182 <h3 style="margin-bottom: 8px">
183 {repo.isArchived ? "Unarchive repository" : "Archive repository"}
184 </h3>
185 <p style="font-size: 14px; color: var(--text-muted); margin-bottom: 12px">
186 {repo.isArchived
187 ? "This repository is archived and read-only. Unarchive to allow pushes and issue/PR activity again."
188 : "Mark this repository as archived. It will become read-only — no pushes, no new issues or PRs. You can unarchive at any time."}
189 </p>
190 <form
191 method="POST"
192 action={`/${ownerName}/${repoName}/settings/archive`}
193 >
194 <input
195 type="hidden"
196 name="archive"
197 value={repo.isArchived ? "0" : "1"}
198 />
199 <button type="submit" class="btn">
200 {repo.isArchived ? "Unarchive" : "Archive"} this repository
201 </button>
202 </form>
203 </div>
204
205 <div
206 style="margin-top: 20px; padding: 20px; border: 1px solid var(--red); border-radius: var(--radius)"
129207 >
130208 <h3 style="color: var(--red); margin-bottom: 12px">Danger zone</h3>
131209 <p style="font-size: 14px; color: var(--text-muted); margin-bottom: 12px">
179257 );
180258});
181259
260// Toggle template flag
261repoSettings.post(
262 "/:owner/:repo/settings/template",
263 requireAuth,
264 async (c) => {
265 const { owner: ownerName, repo: repoName } = c.req.param();
266 const user = c.get("user")!;
267 const body = await c.req.parseBody();
268 const [owner] = await db
269 .select()
270 .from(users)
271 .where(eq(users.username, ownerName))
272 .limit(1);
273 if (!owner || owner.id !== user.id) {
274 return c.redirect(`/${ownerName}/${repoName}`);
275 }
276 const target = String(body.template || "1") === "1";
277 await db
278 .update(repositories)
279 .set({ isTemplate: target, updatedAt: new Date() })
280 .where(
281 and(
282 eq(repositories.ownerId, owner.id),
283 eq(repositories.name, repoName)
284 )
285 );
286 return c.redirect(
287 `/${ownerName}/${repoName}/settings?success=${
288 target ? "Marked+as+template" : "Unmarked+as+template"
289 }`
290 );
291 }
292);
293
294// Transfer repository to a new owner (by username)
295repoSettings.post(
296 "/:owner/:repo/settings/transfer",
297 requireAuth,
298 async (c) => {
299 const { owner: ownerName, repo: repoName } = c.req.param();
300 const user = c.get("user")!;
301 const body = await c.req.parseBody();
302 const newOwnerName = String(body.new_owner || "").trim();
303 if (!newOwnerName) {
304 return c.redirect(
305 `/${ownerName}/${repoName}/settings?error=New+owner+required`
306 );
307 }
308 const [owner] = await db
309 .select()
310 .from(users)
311 .where(eq(users.username, ownerName))
312 .limit(1);
313 if (!owner || owner.id !== user.id) {
314 return c.redirect(`/${ownerName}/${repoName}`);
315 }
316 const [newOwner] = await db
317 .select()
318 .from(users)
319 .where(eq(users.username, newOwnerName))
320 .limit(1);
321 if (!newOwner) {
322 return c.redirect(
323 `/${ownerName}/${repoName}/settings?error=User+not+found`
324 );
325 }
326 if (newOwner.id === owner.id) {
327 return c.redirect(
328 `/${ownerName}/${repoName}/settings?error=Same+owner`
329 );
330 }
331 // Reject if new owner already has a repo by this name
332 const [conflict] = await db
333 .select()
334 .from(repositories)
335 .where(
336 and(
337 eq(repositories.ownerId, newOwner.id),
338 eq(repositories.name, repoName)
339 )
340 )
341 .limit(1);
342 if (conflict) {
343 return c.redirect(
344 `/${ownerName}/${repoName}/settings?error=Target+owner+already+has+a+repo+by+that+name`
345 );
346 }
347 const [repo] = await db
348 .select()
349 .from(repositories)
350 .where(
351 and(
352 eq(repositories.ownerId, owner.id),
353 eq(repositories.name, repoName)
354 )
355 )
356 .limit(1);
357 if (!repo) return c.notFound();
358 await db
359 .update(repositories)
360 .set({ ownerId: newOwner.id, orgId: null, updatedAt: new Date() })
361 .where(eq(repositories.id, repo.id));
362 await db.insert(repoTransfers).values({
363 repositoryId: repo.id,
364 fromOwnerId: owner.id,
365 fromOrgId: repo.orgId,
366 toOwnerId: newOwner.id,
367 toOrgId: null,
368 initiatedBy: user.id,
369 });
370 return c.redirect(`/${newOwnerName}/${repoName}`);
371 }
372);
373
374// Archive / unarchive repository
375repoSettings.post(
376 "/:owner/:repo/settings/archive",
377 requireAuth,
378 async (c) => {
379 const { owner: ownerName, repo: repoName } = c.req.param();
380 const user = c.get("user")!;
381 const body = await c.req.parseBody();
382 const [owner] = await db
383 .select()
384 .from(users)
385 .where(eq(users.username, ownerName))
386 .limit(1);
387 if (!owner || owner.id !== user.id) {
388 return c.redirect(`/${ownerName}/${repoName}`);
389 }
390 const target = String(body.archive || "1") === "1";
391 await db
392 .update(repositories)
393 .set({ isArchived: target, updatedAt: new Date() })
394 .where(
395 and(
396 eq(repositories.ownerId, owner.id),
397 eq(repositories.name, repoName)
398 )
399 );
400 return c.redirect(
401 `/${ownerName}/${repoName}/settings?success=${
402 target ? "Repository+archived" : "Repository+unarchived"
403 }`
404 );
405 }
406);
407
182408// Delete repository
183409repoSettings.post(
184410 "/:owner/:repo/settings/delete",
Addedsrc/routes/templates.ts+122−0View fileUnifiedSplit
1/**
2 * Block I2 — Template repositories.
3 *
4 * POST /:owner/:repo/use-template — clone a template into a new repo owned
5 * by the current user. Similar to fork, but:
6 * - source must have `is_template = true`
7 * - destination is given a new name via the `name` form field
8 * - `forked_from_id` is NOT set (templates break lineage)
9 * - default branch is reset to a clean history (for now, we use the
10 * template's history, matching GitHub's optional `--include-all-branches`
11 * behavior from the template's default branch only)
12 */
13
14import { Hono } from "hono";
15import { and, eq } from "drizzle-orm";
16import { db } from "../db";
17import { activityFeed, repositories, users } from "../db/schema";
18import { softAuth, requireAuth } from "../middleware/auth";
19import type { AuthEnv } from "../middleware/auth";
20import { getRepoPath, repoExists } from "../git/repository";
21import { config } from "../lib/config";
22import { join } from "path";
23
24const templates = new Hono<AuthEnv>();
25templates.use("*", softAuth);
26
27templates.post("/:owner/:repo/use-template", requireAuth, async (c) => {
28 const { owner: ownerName, repo: repoName } = c.req.param();
29 const user = c.get("user")!;
30 const body = await c.req.parseBody();
31 const newName = String(body.name || "").trim();
32 if (!newName) {
33 return c.redirect(`/${ownerName}/${repoName}?error=Name+required`);
34 }
35 if (!/^[a-zA-Z0-9._-]+$/.test(newName)) {
36 return c.redirect(`/${ownerName}/${repoName}?error=Invalid+name`);
37 }
38
39 if (!(await repoExists(ownerName, repoName))) {
40 return c.redirect(`/${ownerName}/${repoName}`);
41 }
42
43 const [sourceOwner] = await db
44 .select()
45 .from(users)
46 .where(eq(users.username, ownerName))
47 .limit(1);
48 if (!sourceOwner) return c.redirect(`/${ownerName}/${repoName}`);
49
50 const [sourceRepo] = await db
51 .select()
52 .from(repositories)
53 .where(
54 and(
55 eq(repositories.ownerId, sourceOwner.id),
56 eq(repositories.name, repoName)
57 )
58 )
59 .limit(1);
60 if (!sourceRepo) return c.redirect(`/${ownerName}/${repoName}`);
61 if (!sourceRepo.isTemplate) {
62 return c.redirect(`/${ownerName}/${repoName}?error=Not+a+template`);
63 }
64
65 // Refuse if the user already has a repo by that name
66 if (await repoExists(user.username, newName)) {
67 return c.redirect(`/${user.username}/${newName}`);
68 }
69
70 const sourcePath = getRepoPath(ownerName, repoName);
71 const destPath = join(config.gitReposPath, user.username, `${newName}.git`);
72 const proc = Bun.spawn(["git", "clone", "--bare", sourcePath, destPath], {
73 stdout: "pipe",
74 stderr: "pipe",
75 });
76 await proc.exited;
77
78 const [newRepo] = await db
79 .insert(repositories)
80 .values({
81 name: newName,
82 ownerId: user.id,
83 description: sourceRepo.description
84 ? `Seeded from ${ownerName}/${repoName} template`
85 : `Seeded from ${ownerName}/${repoName} template`,
86 isPrivate: false,
87 defaultBranch: sourceRepo.defaultBranch,
88 diskPath: destPath,
89 // Intentionally no forkedFromId — templates break lineage
90 })
91 .returning();
92
93 if (newRepo) {
94 try {
95 const { bootstrapRepository } = await import("../lib/repo-bootstrap");
96 await bootstrapRepository({
97 repositoryId: newRepo.id,
98 ownerUserId: user.id,
99 defaultBranch: sourceRepo.defaultBranch,
100 skipWelcomeIssue: true,
101 });
102 } catch {
103 // bootstrap failures shouldn't break the primary create
104 }
105 try {
106 await db.insert(activityFeed).values({
107 repositoryId: newRepo.id,
108 userId: user.id,
109 action: "created",
110 metadata: JSON.stringify({
111 fromTemplate: `${ownerName}/${repoName}`,
112 }),
113 });
114 } catch {
115 // best effort
116 }
117 }
118
119 return c.redirect(`/${user.username}/${newName}`);
120});
121
122export default templates;
Modifiedsrc/routes/web.tsx+58−5View fileUnifiedSplit
352352 .from(users)
353353 .where(eq(users.username, owner))
354354 .limit(1);
355 if (!ownerUser) return { starCount: 0, starred: false };
355 if (!ownerUser)
356 return {
357 starCount: 0,
358 starred: false,
359 archived: false,
360 isTemplate: false,
361 };
356362 const [repoRow] = await db
357363 .select()
358364 .from(repositories)
363369 )
364370 )
365371 .limit(1);
366 if (!repoRow) return { starCount: 0, starred: false };
372 if (!repoRow)
373 return {
374 starCount: 0,
375 starred: false,
376 archived: false,
377 isTemplate: false,
378 };
367379 let starred = false;
368380 if (user) {
369381 const [star] = await db
378390 .limit(1);
379391 starred = !!star;
380392 }
381 return { starCount: repoRow.starCount, starred };
393 return {
394 starCount: repoRow.starCount,
395 starred,
396 archived: repoRow.isArchived,
397 isTemplate: repoRow.isTemplate,
398 };
382399 } catch {
383 return { starCount: 0, starred: false };
400 return {
401 starCount: 0,
402 starred: false,
403 archived: false,
404 isTemplate: false,
405 };
384406 }
385407 })(),
386408 ]);
387 const { starCount, starred } = starInfo;
409 const { starCount, starred, archived, isTemplate } = starInfo;
388410
389411 if (tree.length === 0) {
390412 return c.html(
395417 starCount={starCount}
396418 starred={starred}
397419 currentUser={user?.username}
420 archived={archived}
421 isTemplate={isTemplate}
398422 />
399423 <RepoNav owner={owner} repo={repo} active="code" />
400424 <div class="empty-state">
417441 starCount={starCount}
418442 starred={starred}
419443 currentUser={user?.username}
444 archived={archived}
445 isTemplate={isTemplate}
420446 />
447 {isTemplate && user && user.username !== owner && (
448 <div
449 class="panel"
450 style="margin-bottom:16px;padding:12px;display:flex;align-items:center;justify-content:space-between;gap:12px"
451 >
452 <div style="font-size:13px">
453 <strong>Template repository.</strong> Create a new repository from
454 this template's files.
455 </div>
456 <form
457 method="POST"
458 action={`/${owner}/${repo}/use-template`}
459 style="display:flex;gap:8px;align-items:center"
460 >
461 <input
462 type="text"
463 name="name"
464 placeholder="new-repo-name"
465 required
466 style="width:200px"
467 />
468 <button type="submit" class="btn btn-primary">
469 Use this template
470 </button>
471 </form>
472 </div>
473 )}
421474 <RepoNav owner={owner} repo={repo} active="code" />
422475 <BranchSwitcher
423476 owner={owner}
Modifiedsrc/views/components.tsx+31−1View fileUnifiedSplit
1111 forkCount?: number;
1212 currentUser?: string | null;
1313 forkedFrom?: string | null;
14}> = ({ owner, repo, starCount, starred, forkCount, currentUser, forkedFrom }) => (
14 archived?: boolean;
15 isTemplate?: boolean;
16}> = ({
17 owner,
18 repo,
19 starCount,
20 starred,
21 forkCount,
22 currentUser,
23 forkedFrom,
24 archived,
25 isTemplate,
26}) => (
1527 <div class="repo-header">
1628 <div>
1729 <div style="display: flex; align-items: center; gap: 8px; font-size: 20px">
2234 <a href={`/${owner}/${repo}`} class="name">
2335 {repo}
2436 </a>
37 {archived && (
38 <span
39 class="badge"
40 style="background:var(--bg-secondary);color:var(--text-muted);font-size:11px;padding:2px 8px;border-radius:10px;text-transform:uppercase;letter-spacing:0.5px"
41 title="Read-only: pushes and new issues/PRs disabled"
42 >
43 Archived
44 </span>
45 )}
46 {isTemplate && (
47 <span
48 class="badge"
49 style="background:var(--bg-secondary);color:var(--accent);font-size:11px;padding:2px 8px;border-radius:10px;text-transform:uppercase;letter-spacing:0.5px"
50 title="This repository can be used as a template"
51 >
52 Template
53 </span>
54 )}
2555 </div>
2656 {forkedFrom && (
2757 <div style="font-size: 12px; color: var(--text-muted); margin-top: 2px">
Modifiedsrc/views/layout.tsx+141−1View fileUnifiedSplit
100100 <footer>
101101 <span>gluecron — AI-native code intelligence</span>
102102 </footer>
103 <div
104 id="cmdk-backdrop"
105 style="display:none;position:fixed;inset:0;background:rgba(0,0,0,0.5);z-index:9998;backdrop-filter:blur(2px)"
106 />
107 <div
108 id="cmdk-panel"
109 role="dialog"
110 aria-label="Command palette"
111 style="display:none;position:fixed;top:15%;left:50%;transform:translateX(-50%);width:min(560px,90vw);background:var(--bg-secondary);border:1px solid var(--border);border-radius:8px;box-shadow:0 12px 40px rgba(0,0,0,0.5);z-index:9999;overflow:hidden"
112 >
113 <input
114 id="cmdk-input"
115 type="text"
116 placeholder="Jump to... (↑↓ navigate, Enter go, Esc close)"
117 autocomplete="off"
118 style="width:100%;box-sizing:border-box;padding:14px 16px;background:transparent;border:none;border-bottom:1px solid var(--border);font-size:15px;color:var(--text);outline:none"
119 />
120 <div
121 id="cmdk-list"
122 style="max-height:360px;overflow-y:auto;font-size:13px"
123 />
124 </div>
103125 <script>{navScript}</script>
104126 <script>{pwaRegisterScript}</script>
105127 </body>
139161 var tag = (t.tagName || '').toLowerCase();
140162 return tag === 'input' || tag === 'textarea' || t.isContentEditable;
141163 }
164
165 // ---------- Block I4 — Command palette ----------
166 var COMMANDS = [
167 { label: 'Go to Dashboard', href: '/dashboard', kw: 'home' },
168 { label: 'Go to Explore', href: '/explore', kw: 'browse discover' },
169 { label: 'Go to Notifications', href: '/notifications', kw: 'inbox' },
170 { label: 'Go to Ask AI', href: '/ask', kw: 'chat assistant' },
171 { label: 'Create new repository', href: '/new', kw: 'add create' },
172 { label: 'Marketplace', href: '/marketplace', kw: 'apps store' },
173 { label: 'Installed apps', href: '/settings/apps', kw: 'my apps' },
174 { label: 'Register new app', href: '/developer/apps-new', kw: 'developer create' },
175 { label: 'Keyboard shortcuts', href: '/shortcuts', kw: 'help keys' },
176 { label: 'Settings (profile)', href: '/settings', kw: 'account' },
177 { label: '2FA settings', href: '/settings/2fa', kw: 'two factor security' },
178 { label: 'Passkeys settings', href: '/settings/passkeys', kw: 'webauthn' },
179 { label: 'Personal access tokens', href: '/settings/tokens', kw: 'pat api' },
180 { label: 'Billing + quotas', href: '/settings/billing', kw: 'plans money' },
181 { label: 'Audit log (personal)', href: '/settings/audit', kw: 'history' },
182 { label: 'Gists', href: '/gists', kw: 'snippets' },
183 { label: 'GraphQL explorer', href: '/api/graphql', kw: 'api query' },
184 { label: 'Admin dashboard', href: '/admin', kw: 'superuser' },
185 { label: 'Toggle theme', href: '/theme/toggle', kw: 'dark light mode' }
186 ];
187
188 function fuzzyMatch(item, q){
189 if (!q) return true;
190 var hay = (item.label + ' ' + (item.kw||'') + ' ' + item.href).toLowerCase();
191 q = q.toLowerCase();
192 var qi = 0;
193 for (var i = 0; i < hay.length && qi < q.length; i++) {
194 if (hay[i] === q[qi]) qi++;
195 }
196 return qi === q.length;
197 }
198
199 var backdrop, panel, input, list, selected = 0, filtered = COMMANDS.slice();
200
201 function render(){
202 if (!list) return;
203 var html = '';
204 for (var i = 0; i < filtered.length; i++) {
205 var item = filtered[i];
206 var cls = i === selected ? 'cmdk-item cmdk-active' : 'cmdk-item';
207 var bg = i === selected ? 'background:var(--bg);' : '';
208 html += '<div class="' + cls + '" data-idx="' + i + '" data-href="' + item.href + '"' +
209 ' style="padding:10px 16px;cursor:pointer;border-bottom:1px solid var(--border);' + bg + '">' +
210 '<div>' + item.label + '</div>' +
211 '<div style="font-size:11px;color:var(--text-muted)">' + item.href + '</div>' +
212 '</div>';
213 }
214 if (filtered.length === 0) {
215 html = '<div style="padding:16px;color:var(--text-muted);text-align:center">No matches.</div>';
216 }
217 list.innerHTML = html;
218 }
219
220 function openPalette(){
221 backdrop = document.getElementById('cmdk-backdrop');
222 panel = document.getElementById('cmdk-panel');
223 input = document.getElementById('cmdk-input');
224 list = document.getElementById('cmdk-list');
225 if (!backdrop || !panel) return;
226 backdrop.style.display = 'block';
227 panel.style.display = 'block';
228 input.value = '';
229 selected = 0;
230 filtered = COMMANDS.slice();
231 render();
232 input.focus();
233 }
234 function closePalette(){
235 if (backdrop) backdrop.style.display = 'none';
236 if (panel) panel.style.display = 'none';
237 }
238 function go(href){ closePalette(); window.location.href = href; }
239
240 document.addEventListener('click', function(e){
241 var t = e.target;
242 if (t && t.id === 'cmdk-backdrop') { closePalette(); return; }
243 var item = t && t.closest && t.closest('.cmdk-item');
244 if (item) { go(item.getAttribute('data-href')); }
245 });
246
247 document.addEventListener('input', function(e){
248 if (e.target && e.target.id === 'cmdk-input') {
249 var q = e.target.value;
250 filtered = COMMANDS.filter(function(c){ return fuzzyMatch(c, q); });
251 selected = 0;
252 render();
253 }
254 });
255
142256 document.addEventListener('keydown', function(e){
257 // Palette-scoped keys take priority when open
258 if (panel && panel.style.display === 'block') {
259 if (e.key === 'Escape') { e.preventDefault(); closePalette(); return; }
260 if (e.key === 'ArrowDown') {
261 e.preventDefault();
262 selected = Math.min(filtered.length - 1, selected + 1);
263 render();
264 return;
265 }
266 if (e.key === 'ArrowUp') {
267 e.preventDefault();
268 selected = Math.max(0, selected - 1);
269 render();
270 return;
271 }
272 if (e.key === 'Enter') {
273 e.preventDefault();
274 var item = filtered[selected];
275 if (item) go(item.href);
276 return;
277 }
278 return;
279 }
280
143281 if (isTyping(e.target)) return;
144282 // Single key shortcuts
145283 if (e.key === '/') {
147285 if (el) { e.preventDefault(); el.focus(); return; }
148286 }
149287 if ((e.metaKey||e.ctrlKey) && e.key.toLowerCase() === 'k') {
150 e.preventDefault(); window.location.href = '/ask'; return;
288 e.preventDefault();
289 openPalette();
290 return;
151291 }
152292 if (e.key === '?' && !e.ctrlKey && !e.metaKey) {
153293 e.preventDefault(); window.location.href = '/shortcuts'; return;
154294