apps/web/app/routes/repo/settings-branches.tsx · flagon-io/g1t

1

import { ChevronRight, ShieldCheck } from "lucide-react";

2

import { Form, Link } from "react-router";

3

4

import type { Route } from "./+types/settings-branches";

5

import { page } from "../../lib/meta";

6

import { AddCiPrompt } from "../../components/add-ci";

7

import { RepoSettingsHeading } from "../../components/repo-settings-heading";

8

import { RequiredChecksPicker } from "../../components/required-checks";

9

import { SettingChoice as Choice, SettingsSection as Section, SettingToggle as Toggle } from "../../components/settings-section";

10

import { ErrorText, SubmitButton, TimeAgo } from "../../components/ui";

11

import { actions, repos, work } from "../../lib/services.server";

12

import { assertSameOrigin, getViewer, requireUser, unwrap } from "../../lib/session.server";

13

import { requireCapability, requireInsider } from "../../lib/access.server";

14

15

export function meta({ params, ...args }: Route.MetaArgs) {

16

return page(args, { title: `Branches and merging · ${params.owner}/${params.repo} · g1t` });

17

}

18

19

export async function loader({ params, context }: Route.LoaderArgs) {

20

const viewer = getViewer(context);

21

// Maintain and up; to anyone without a role here the page does not exist.

22

const { access } = await requireInsider(context, params, "manage_protection");

23

const path = { namespace: params.owner, name: params.repo };

24

const [repo, settings, seen, workflows] = await Promise.all([

25

repos.get(path, viewer),

26

work.getSettings(path, viewer),

27

work.seenChecks(path, viewer),

28

actions.workflows(path, viewer),

]);

return {

repo: unwrap(repo),

settings: unwrap(settings),

33

// The names to choose required checks from: what reported lately.

34

seen: seen.ok ? seen.value : [],

35

// Nothing to require until something runs: the page offers to add CI.

36

noChecks: workflows.ok && workflows.value.length === 0 && seen.ok && seen.value.length === 0,

37

canPush: access.can.push,

};

}

/** A whole number from a form field, kept within `min` and `max`. */

42

function count(value: FormDataEntryValue | null, min: number, max: number): number {

43

const number = Math.trunc(Number(value));

44

return Number.isFinite(number) ? Math.min(Math.max(number, min), max) : min;

45

}

46

47

export async function action({ request, params, context }: Route.ActionArgs) {

48

assertSameOrigin(request);

49

const user = requireUser(context, request);

50

await requireCapability(context, params, "manage_protection");

51

const form = await request.formData();

52

const path = { namespace: params.owner, name: params.repo };

53

const on = (name: string) => form.get(name) === "on";

54

// Protection belongs to the repository and how its pull requests are

55

// handled to the work service; the page is one form over both.

56

const repo = await repos.update(user, path, { protected: on("protected") });

57

if (!repo.ok) return { saved: false, error: repo.error.message };

58

const settings = await work.updateSettings(user, path, {

59

autoMerge: on("autoMerge"),

60

requiredChecks: form.getAll("requiredChecks").map(String),

61

requireUpToDate: on("requireUpToDate"),

62

requiredApprovals: count(form.get("requiredApprovals"), 0, 6),

63

countAgentApprovals: on("countAgentApprovals"),

64

allowIgnoringChecks: on("bypassChecks"),

65

agentReview: on("agentReview"),

66

maxRevisions: count(form.get("maxRevisions"), 0, 5),

67

mergeQueue: on("mergeQueue"),

68

holdLowConfidence: on("holdLowConfidence"),

69

});

70

return settings.ok ? { saved: true, error: null } : { saved: false, error: settings.error.message };

71

}

72

73

export default function BranchSettings({ loaderData, actionData }: Route.ComponentProps) {

74

const { repo, settings, seen, noChecks, canPush } = loaderData;

75

const branch = repo.defaultBranch;

76

const base = `/${repo.namespace}/${repo.name}`;

77

const archived = Boolean(repo.archivedAt);

return (

<>

{/* Its own form, so outside the settings one. */}

{noChecks && (

</div>

)}

Pushing to {branch} is refused, for members and agents alike, and git says why. Changes reach it only by

92

merging a pull request. The first push to an empty repository is still allowed.

93

</Toggle>

94

<RequiredChecksPicker

95

required={settings.requiredChecks ?? []}

96

seen={seen}

97

mergeQueue={settings.mergeQueue}

disabled={archived}

/>

Someone who may merge can tick a box to merge although a required check failed or has not finished, and

102

the pull request says who did. With this off, nobody can, and auto-merge never does.

103

</Toggle>

104

<Toggle

105

name="requireUpToDate"

106

on={settings.requireUpToDate}

107

title="Require branches to be up to date before merging"

108

>

109

With this off, a pull request can be merged after {branch} has moved: g1t brings it up to date as part of

110

merging, and asks you only if there is a conflict it cannot resolve. With it on, it has to catch up first

111

and its required checks pass again on the result, so what lands is exactly what was checked.

112

</Toggle>

113

<Choice

114

name="requiredApprovals"

115

value={settings.requiredApprovals}

116

title="Required approvals"

options={[

[0, "None"],

[1, "1"],

[2, "2"],

[3, "3"],

]}

>

How many reviewers must approve before a pull request can merge. A reviewer who has since asked for

125

changes blocks it, and nobody approves their own.

126

</Choice>

127

128

With this off, required approvals have to come from people, and an agent's review is advice.

129

</Toggle>

130

131

Merging adds a pull request to the queue instead of changing {branch} at once. g1t builds it together with

132

every pull request ahead of it, several combinations at a time, and runs the workflows that run on{" "}

133

<code className="text-fg">merge_group</code> on each. {branch} only ever moves to a combination whose

134

required checks passed. One that fails leaves the queue and goes back to its author.

</Toggle>

</Section>

<Section

title="g1t"

about="What happens to a pull request g1t makes, from the moment it is ready. Its checks are the same workflows, and the rules above hold."

141

>

142

143

A different agent reads each change and posts comments on lines, a summary and a verdict. If it asks for

144

changes, the author is sent back to make them. With this off, review is left to people.

</Toggle>

<Choice

name="maxRevisions"

value={settings.maxRevisions}

149

title="Revisions before asking you"

options={[

[0, "None"],

[1, "1"],

[2, "2"],

[3, "3"],

[5, "5"],

]}

>

How many times an agent is sent back to fix a failed check, with what its jobs printed, or to address a

159

review, before g1t stops and the pull request says it needs you. After that, only a required check that

160

still fails holds it.

161

</Choice>

162

163

A pull request g1t made lands without anyone pressing merge once every rule above is met, its required

164

checks included. With this off, it waits for a member. Pull requests from people and from other agents

always wait.

</Toggle>

<Toggle

name="holdLowConfidence"

169

on={settings.holdLowConfidence}

170

title="Ask a person before merging low-confidence changes"

171

>

172

g1t rates how sure it is of each change an agent finishes, from its required checks, revisions, review,

173

tests, size and guardrails. One it rates low waits for a member to approve it, instead of merging by itself

174

or joining the queue, and shows on Mission control as needing you.

175

</Toggle>

176

<Link

177

to={`${base}/settings/guardrails`}

178

className="group flex items-center gap-3 rounded-xl border border-line p-4 transition-colors hover:border-line-strong hover:bg-surface"

>

<span className="block text-sm font-medium">Guardrails</span>

183

184

What agents may reach, run and spend while they work on this repository.

</span>

</span>

</Link>

</Section>

Save settings

</SubmitButton>

{actionData?.saved && <span className="text-sm text-muted">Saved.</span>}

196

<ErrorText>{actionData?.error}</ErrorText>

197

{settings.updatedBy && settings.updatedAt && !actionData && (

198

199

Merge rules last changed by <span className="font-mono">{settings.updatedBy}</span>{" "}

</span>

)}

</div>

</fieldset>

</Form>

</>

);

}