/** * /help — public quickstart + API cheatsheet for owners migrating their * products onto gluecron. Covers the first five minutes (register, clone, * push), integration surfaces (SSH, import, webhooks, tokens), and the * AI-native extras (gates + AI review). Linked from the landing page nav. * * Uses softAuth so the nav bar renders with the signed-in user's session * cookie when present; the page itself is reachable without auth. */ import { Hono } from "hono"; import { Layout } from "../views/layout"; import { softAuth } from "../middleware/auth"; import type { AuthEnv } from "../middleware/auth"; const help = new Hono(); help.use("*", softAuth); help.get("/help", (c) => { const user = c.get("user"); return c.html(

Help & quickstart

Everything an owner migrating a product onto gluecron needs in one page. If something's unclear, open an issue — link at the bottom.

Getting started

1. Register an account.{" "} Head to /register, pick a username, and set a password. Usernames are your public handle and appear in every repo URL.
2. Verify your email.{" "} We send a one-time link the first time you sign in. Verified addresses can receive issue, PR, and gate-run notifications.
3. Create your first repo.{" "} From the dashboard hit New repository, or visit /new. Pick public or private, add a README, and you're ready to clone.

Git over HTTPS

HTTPS works out of the box. Authenticate with your account password or, better, a personal access token.

Clone 
{`git clone https:////.git`}
Push 
{`git push origin main`}
Pull 
{`git pull origin main`}

Git over SSH

SSH avoids typing credentials and is recommended for day-to-day work.

1. Add your key.{" "} Copy your public key (usually{" "} ~/.ssh/id_ed25519.pub) and paste it into{" "} /settings/keys. Keys take effect immediately.
2. Clone using the SSH URL. 
{`git clone git@:/.git`}
3. Rotate or revoke any key from the same settings page — useful when a laptop walks off.

Importing from GitHub

Visit /import, paste the source URL, and gluecron will mirror the repository — full history, branches, and tags. The mirror is a one-time copy; subsequent pushes land on gluecron, not the source. Private sources need a PAT on the source side.

Webhooks

Per-repo webhooks live at{" "} /:owner/:repo/settings/webhooks. Register a URL, pick events (push, issue, pr, star), and set a secret.

HMAC signature.{" "} Every delivery includes{" "} X-Gluecron-Signature: sha256=<hex>.{" "} Compute HMAC-SHA256 over the raw request body using your secret and compare in constant time.
Payload shape. 
{`{
  "event": "push",
  "repo": { "owner": "acme", "name": "api" },
  "ref": "refs/heads/main",
  "before": "",
  "after": "",
  "commits": [ /* ... */ ],
  "sender": { "username": "kit" }
}`}
Deliveries are retried with exponential backoff; inspect the last N attempts from the webhook's settings page.

Personal access tokens

Tokens authenticate CLI clients, CI jobs, and scripts. Create them at /settings/tokens; the value is shown once, so copy it immediately. Tokens start with{" "} glc_.

Example: list your repos via the API. 
{`curl -H "Authorization: Bearer glc_your_token_here" \\
  https:///api/v2/repos`}
Tokens can also authenticate git over HTTPS — use the token as the password in place of your account password.

Gates & AI review

Every push to the default branch (usually main) triggers a gate run: GateTest scans the diff for secrets, dependency advisories, and policy violations, while the AI reviewer reads the patch and comments on any PRs that touch the same files. Failing gates block the push by default; results appear on the commit page and in the repo's{" "} Gate runs tab. Configure gate policy per-repo in Settings → Gates.

Keyboard shortcuts

gluecron ships a full keyboard-first mode — see{" "} /shortcuts for the complete cheat sheet. Press ? on any page to pop the overlay.

API

Full REST + GraphQL reference lives at{" "} /api/docs. The GraphQL explorer is at{" "} /api/graphql.

Something missing? Open an issue on gluecron's source repo.

); }); export default help;