apps/web/app/routes/repo/settings-branches.tsx · flagon-io/g1t

1

import { ChevronRight, ShieldCheck } from "lucide-react";

2

import { Form, Link, useNavigation } from "react-router";

3

4

import type { Route } from "./+types/settings-branches";

5

import { page } from "../../lib/meta";

6

import { AddCiPrompt } from "../../components/add-ci";

7

import { RepoSettingsHeading } from "../../components/repo-settings-heading";

8

import { RequiredChecksPicker } from "../../components/required-checks";

9

import { SettingChoice as Choice, SettingsSection as Section, SettingToggle as Toggle } from "../../components/settings-section";

10

import { Button, ErrorText, TimeAgo } from "../../components/ui";

11

import { actions, repos, work } from "../../lib/services.server";

12

import { assertSameOrigin, getViewer, requireUser, unwrap } from "../../lib/session.server";

13

import { requireCapability, requireInsider } from "../../lib/access.server";

14

15

export function meta({ params, ...args }: Route.MetaArgs) {

16

return page(args, { title: `Branches and merging · ${params.owner}/${params.repo} · g1t` });

17

}

18

19

export async function loader({ params, context }: Route.LoaderArgs) {

20

const viewer = getViewer(context);

21

// Maintain and up; to anyone without a role here the page does not exist.

22

const { access } = await requireInsider(context, params, "manage_protection");

23

const path = { namespace: params.owner, name: params.repo };

24

const [repo, settings, seen, workflows] = await Promise.all([

25

repos.get(path, viewer),

26

work.getSettings(path, viewer),

27

work.seenChecks(path, viewer),

28

actions.workflows(path, viewer),

]);

return {

repo: unwrap(repo),

settings: unwrap(settings),

33

// The names to choose required checks from: what reported lately.

34

seen: seen.ok ? seen.value : [],

35

// Nothing to require until something runs: the page offers to add CI.

36

noChecks: workflows.ok && workflows.value.length === 0 && seen.ok && seen.value.length === 0,

37

canPush: access.can.push,

};

}

/** A whole number from a form field, kept within `min` and `max`. */

42

function count(value: FormDataEntryValue | null, min: number, max: number): number {

43

const number = Math.trunc(Number(value));

44

return Number.isFinite(number) ? Math.min(Math.max(number, min), max) : min;

45

}

46

47

export async function action({ request, params, context }: Route.ActionArgs) {

48

assertSameOrigin(request);

49

const user = requireUser(context, request);

50

await requireCapability(context, params, "manage_protection");

51

const form = await request.formData();

52

const path = { namespace: params.owner, name: params.repo };

53

const on = (name: string) => form.get(name) === "on";

54

// Protection belongs to the repository and how its pull requests are

55

// handled to the work service; the page is one form over both.

56

const repo = await repos.update(user, path, { protected: on("protected") });

57

if (!repo.ok) return { saved: false, error: repo.error.message };

58

const settings = await work.updateSettings(user, path, {

59

autoMerge: on("autoMerge"),

60

requiredChecks: form.getAll("requiredChecks").map(String),

61

requireUpToDate: on("requireUpToDate"),

62

requiredApprovals: count(form.get("requiredApprovals"), 0, 6),

63

countAgentApprovals: on("countAgentApprovals"),

64

allowIgnoringChecks: on("bypassChecks"),

65

agentReview: on("agentReview"),

66

maxRevisions: count(form.get("maxRevisions"), 0, 5),

67

mergeQueue: on("mergeQueue"),

68

holdLowConfidence: on("holdLowConfidence"),

69

});

70

return settings.ok ? { saved: true, error: null } : { saved: false, error: settings.error.message };

71

}

72

73

export default function BranchSettings({ loaderData, actionData }: Route.ComponentProps) {

74

const { repo, settings, seen, noChecks, canPush } = loaderData;

75

const saving = useNavigation().state === "submitting";

76

const branch = repo.defaultBranch;

77

const base = `/${repo.namespace}/${repo.name}`;

78

const archived = Boolean(repo.archivedAt);

return (

<>

{/* Its own form, so outside the settings one. */}

{noChecks && (

</div>

)}

Pushing to {branch} is refused, for members and agents alike, and git says why. Changes reach it only by

93

merging a pull request. The first push to an empty repository is still allowed.

94

</Toggle>

95

<RequiredChecksPicker

96

required={settings.requiredChecks ?? []}

97

seen={seen}

98

mergeQueue={settings.mergeQueue}

disabled={archived}

/>

Someone who may merge can tick a box to merge although a required check failed or has not finished, and

103

the pull request says who did. With this off, nobody can, and auto-merge never does.

104

</Toggle>

105

<Toggle

106

name="requireUpToDate"

107

on={settings.requireUpToDate}

108

title="Require branches to be up to date before merging"

109

>

110

With this off, a pull request can be merged after {branch} has moved: g1t brings it up to date as part of

111

merging, and asks you only if there is a conflict it cannot resolve. With it on, it has to catch up first

112

and its required checks pass again on the result, so what lands is exactly what was checked.

113

</Toggle>

114

<Choice

115

name="requiredApprovals"

116

value={settings.requiredApprovals}

117

title="Required approvals"

options={[

[0, "None"],

[1, "1"],

[2, "2"],

[3, "3"],

]}

>

How many reviewers must approve before a pull request can merge. A reviewer who has since asked for

126

changes blocks it, and nobody approves their own.

127

</Choice>

128

129

With this off, required approvals have to come from people, and an agent's review is advice.

130

</Toggle>

131

132

Merging adds a pull request to the queue instead of changing {branch} at once. g1t builds it together with

133

every pull request ahead of it, several combinations at a time, and runs the workflows that run on{" "}

134

<code className="text-fg">merge_group</code> on each. {branch} only ever moves to a combination whose

135

required checks passed. One that fails leaves the queue and goes back to its author.

</Toggle>

</Section>

<Section

title="g1t"

about="What happens to a pull request g1t makes, from the moment it is ready. Its checks are the same workflows, and the rules above hold."

142

>

143

144

A different agent reads each change and posts comments on lines, a summary and a verdict. If it asks for

145

changes, the author is sent back to make them. With this off, review is left to people.

</Toggle>

<Choice

name="maxRevisions"

value={settings.maxRevisions}

150

title="Revisions before asking you"

options={[

[0, "None"],

[1, "1"],

[2, "2"],

[3, "3"],

[5, "5"],

]}

>

How many times an agent is sent back to fix a failed check, with what its jobs printed, or to address a

160

review, before g1t stops and the pull request says it needs you. After that, only a required check that

161

still fails holds it.

162

</Choice>

163

164

A pull request g1t made lands without anyone pressing merge once every rule above is met, its required

165

checks included. With this off, it waits for a member. Pull requests from people and from other agents

always wait.

</Toggle>

<Toggle

name="holdLowConfidence"

170

on={settings.holdLowConfidence}

171

title="Ask a person before merging low-confidence changes"

172

>

173

g1t rates how sure it is of each change an agent finishes, from its required checks, revisions, review,

174

tests, size and guardrails. One it rates low waits for a member to approve it, instead of merging by itself

175

or joining the queue, and shows on Mission control as needing you.

176

</Toggle>

177

<Link

178

to={`${base}/settings/guardrails`}

179

className="group flex items-center gap-3 rounded-xl border border-line p-4 transition-colors hover:border-line-strong hover:bg-surface"

>

<span className="block text-sm font-medium">Guardrails</span>

184

185

What agents may reach, run and spend while they work on this repository.

</span>

</span>

</Link>

</Section>

{saving ? "Saving…" : "Save settings"}

195

</Button>

196

{actionData?.saved && <span className="text-sm text-muted">Saved.</span>}

197

<ErrorText>{actionData?.error}</ErrorText>

198

{settings.updatedBy && settings.updatedAt && !actionData && (

199

200

Merge rules last changed by <span className="font-mono">{settings.updatedBy}</span>{" "}

</span>

)}

</div>

</fieldset>

</Form>

</>

);

}