OXYGENHUB
# 8a3334b7a364 oxygenhub / crates / hub / src / web / issues.rs
40.1 KiB · Rust · last changed Issue page: GitHub-style sidebar menus and a full-width comment box 1 month ago source blame history raw
1
//! Issues, labels and milestones (hub spec §8).
2
3
use super::settings::{csrf, require};
4
use super::{filters, lookup, lookup_role, Error, Page, RepoShell, Shell};
5
use crate::auth::{Access, Role, Viewer};
6
use crate::db::{self, accounts, issues as idb, notify as ndb};
7
use crate::notify::{self, Event};
8
use crate::render::{self, refs::Numbers};
9
use crate::repos::view;
10
use crate::Shared;
11
use askama::Template;
12
use axum::extract::{Form, Path, Query, State};
13
use axum::response::{IntoResponse, Redirect, Response};
14
use serde::Deserialize;
15
use std::collections::HashMap;
16
17
/// Markdown with cross references linked, for a repository; relative
18
/// links and images resolve against `reference` (the default bookmark for
19
/// issues and proposals, the tag for release notes).
20
pub async fn markdown(app: &Shared, row: &db::repos::RepoRow, reference: &str, text: &str) -> String {
21
    let repo_url = format!("/{}", row.slug());
22
    let (issues, proposals) = idb::numbers(&app.db, row.id).await.unwrap_or_default();
23
    let linked = render::refs::link(text, &Numbers { repo_url: &repo_url, issues: &issues, proposals: &proposals });
24
    render::markdown::render(&linked, &format!("{repo_url}/file/{reference}/"), &format!("{repo_url}/raw/{reference}/"))
25
}
26
27
/// Re-index a thread for search: title, body and every comment.
28
pub async fn reindex(app: &Shared, repo_id: i64, issue: &idb::IssueRow) {
29
    let comments = idb::comments(&app.db, issue.id).await.unwrap_or_default();
30
    let text = std::iter::once(issue.body.clone()).chain(comments.into_iter().map(|c| c.body)).collect::<Vec<_>>().join("\n\n");
31
    ndb::index(&app.db, "issue", repo_id, issue.id, issue.number, &issue.title, &text).await.ok();
32
}
33
34
// ------------------------------------------------------------------ list
35
36
pub struct IssueLine {
37
    pub issue: idb::IssueRow,
38
    pub labels: Vec<idb::Label>,
39
    pub assignees: Vec<String>,
40
    pub milestone: Option<String>,
41
    pub comments: i64,
42
}
43
44
#[derive(Template)]
45
#[template(path = "issues.html")]
46
pub struct IssuesPage {
47
    shell: Shell,
48
    repo: RepoShell,
49
    rows: Vec<IssueLine>,
50
    state: String,
51
    q: String,
52
    counts: (usize, usize),
53
    sort: String,
54
    pager: super::Pager,
55
}
56
57
#[derive(Deserialize)]
58
pub struct ListQuery {
59
    state: Option<String>,
60
    q: Option<String>,
61
    sort: Option<String>,
62
    page: Option<usize>,
63
}
64
65
/// The list's sort orders: `newest` (pinned first, the default),
66
/// `oldest`, `updated`, `comments`.
67
pub const SORTS: &[(&str, &str)] =
68
    &[("newest", "newest"), ("oldest", "oldest"), ("updated", "recently updated"), ("comments", "most comments")];
69
70
/// `label:bug assignee:andy milestone:v1 state:closed words…`
71
struct Filter {
72
    state: String,
73
    labels: Vec<String>,
74
    assignees: Vec<String>,
75
    authors: Vec<String>,
76
    milestone: Option<String>,
77
    words: Vec<String>,
78
}
79
80
fn parse_filter(state: Option<String>, q: &str) -> Filter {
81
    let mut f = Filter {
82
        state: state.unwrap_or_else(|| "open".into()),
83
        labels: vec![],
84
        assignees: vec![],
85
        authors: vec![],
86
        milestone: None,
87
        words: vec![],
88
    };
89
    for tok in q.split_whitespace() {
90
        match tok.split_once(':') {
91
            Some(("label", v)) => f.labels.push(v.to_lowercase()),
92
            Some(("assignee", v)) => f.assignees.push(v.to_lowercase()),
93
            Some(("author", v)) => f.authors.push(v.to_lowercase()),
94
            Some(("milestone", v)) => f.milestone = Some(v.to_lowercase()),
95
            Some(("state", v)) => f.state = v.to_string(),
96
            _ => f.words.push(tok.to_lowercase()),
97
        }
98
    }
99
    f
100
}
101
102
pub async fn list(
103
    State(app): State<Shared>,
104
    viewer: Viewer,
105
    Path((owner, name)): Path<(String, String)>,
106
    Query(q): Query<ListQuery>,
107
) -> Result<Page<IssuesPage>, Error> {
108
    let shell = Shell::new(&app, &format!("/{owner}/{name}/issues"), &viewer);
109
    let (_, row, role) = lookup(&app, &shell, &viewer, &owner, &name).await?;
110
    let e = |e| Error::from_db(shell.clone(), e);
111
    let all = idb::list(&app.db, row.id).await.map_err(e)?;
112
    let counts = (all.iter().filter(|i| i.state == "open").count(), all.iter().filter(|i| i.state == "closed").count());
113
    let qtext = q.q.clone().unwrap_or_default();
114
    let f = parse_filter(q.state, &qtext);
115
    let mut labels_by: HashMap<i64, Vec<idb::Label>> = HashMap::new();
116
    for (id, l) in idb::labels_by_issue(&app.db, row.id).await.map_err(e)? {
117
        labels_by.entry(id).or_default().push(l);
118
    }
119
    let mut assignees_by: HashMap<i64, Vec<String>> = HashMap::new();
120
    for (id, u) in idb::assignees_by_issue(&app.db, row.id).await.map_err(e)? {
121
        assignees_by.entry(id).or_default().push(u);
122
    }
123
    let milestones: HashMap<i64, String> =
124
        idb::milestones(&app.db, row.id).await.map_err(e)?.into_iter().map(|m| (m.id, m.title)).collect();
125
    let mut rows = Vec::new();
126
    for i in all {
127
        let labels = labels_by.remove(&i.id).unwrap_or_default();
128
        let assignees = assignees_by.remove(&i.id).unwrap_or_default();
129
        let milestone = i.milestone_id.and_then(|m| milestones.get(&m).cloned());
130
        let keep = (f.state == "all" || i.state == f.state)
131
            && f.labels.iter().all(|l| labels.iter().any(|x| x.name.to_lowercase() == *l))
132
            && f.assignees.iter().all(|a| assignees.iter().any(|x| x.to_lowercase() == *a))
133
            && (f.authors.is_empty() || f.authors.contains(&i.author.to_lowercase()))
134
            && f.milestone.as_ref().is_none_or(|m| milestone.as_ref().is_some_and(|x| x.to_lowercase() == *m))
135
            && f.words.iter().all(|w| i.title.to_lowercase().contains(w) || i.body.to_lowercase().contains(w));
136
        if keep {
137
            let comments: i64 = sqlx::query_scalar("SELECT COUNT(*) FROM issue_comments WHERE issue_id = ?")
138
                .bind(i.id)
139
                .fetch_one(&app.db)
140
                .await
141
                .map_err(e)?;
142
            rows.push(IssueLine { issue: i, labels, assignees, milestone, comments });
143
        }
144
    }
145
    let sort = q.sort.filter(|s| SORTS.iter().any(|(k, _)| k == s)).unwrap_or_else(|| "newest".into());
146
    match sort.as_str() {
147
        "oldest" => rows.sort_by_key(|r| r.issue.number),
148
        "updated" => rows.sort_by_key(|r| std::cmp::Reverse(r.issue.updated_ms)),
149
        "comments" => rows.sort_by_key(|r| (std::cmp::Reverse(r.comments), std::cmp::Reverse(r.issue.number))),
150
        _ => {}
151
    }
152
    let pager = super::Pager::new(rows.len(), q.page, &[("state", &f.state), ("q", &qtext), ("sort", &sort)]);
153
    let rows = pager.slice(rows);
154
    Ok(Page(IssuesPage {
155
        shell,
156
        repo: RepoShell::new(&app, &row, "issues").with_role(role),
157
        rows,
158
        state: f.state,
159
        q: qtext,
160
        counts,
161
        sort,
162
        pager,
163
    }))
164
}
165
166
// ------------------------------------------------------------------- new
167
168
#[derive(Template)]
169
#[template(path = "issue_new.html")]
170
pub struct NewIssuePage {
171
    shell: Shell,
172
    repo: RepoShell,
173
    templates: Vec<(String, String)>,
174
    template: String,
175
    error: Option<String>,
176
}
177
178
#[derive(Deserialize)]
179
pub struct NewQuery {
180
    template: Option<String>,
181
}
182
183
/// `.oxyhub/ISSUE_TEMPLATE/*.md` in the default bookmark's state.
184
async fn issue_templates(app: &Shared, repo: &crate::repos::RepoName, default: &str) -> Vec<(String, String)> {
185
    let default = default.to_string();
186
    app.repos
187
        .read(repo, move |r, cache| {
188
            let Ok(target) = view::resolve(r, cache, &default) else { return Ok(vec![]) };
189
            let loaded = cache.load(r, &target.heads)?;
190
            let mut out = Vec::new();
191
            for (path, f) in &loaded.snapshot.files {
192
                if let Some(rest) = path.strip_prefix(".oxyhub/ISSUE_TEMPLATE/") {
193
                    if let (Some(name), oxy_core::state::FileContent::Text { bytes, .. }) = (rest.strip_suffix(".md"), &f.content) {
194
                        out.push((name.to_string(), String::from_utf8_lossy(bytes).into_owned()));
195
                    }
196
                }
197
            }
198
            Ok(out)
199
        })
200
        .await
201
        .unwrap_or_default()
202
}
203
204
pub async fn new_form(
205
    State(app): State<Shared>,
206
    viewer: Viewer,
207
    Path((owner, name)): Path<(String, String)>,
208
    Query(q): Query<NewQuery>,
209
) -> Result<Page<NewIssuePage>, Error> {
210
    let shell = Shell::new(&app, &format!("/{owner}/{name}/issues/new"), &viewer);
211
    require(&viewer, &shell)?;
212
    let (repo, row, role) = lookup(&app, &shell, &viewer, &owner, &name).await?;
213
    let templates = issue_templates(&app, &repo, &row.default_bookmark).await;
214
    let template = match q.template.as_deref() {
215
        Some("blank") => " ".into(),
216
        Some(t) => templates.iter().find(|(n, _)| n == t).map(|(_, b)| b.clone()).unwrap_or_default(),
217
        None if templates.is_empty() => " ".into(),
218
        None => String::new(),
219
    };
220
    Ok(Page(NewIssuePage { shell, repo: RepoShell::new(&app, &row, "issues").with_role(role), templates, template, error: None }))
221
}
222
223
#[derive(Deserialize)]
224
pub struct NewIssueForm {
225
    #[serde(rename = "_csrf")]
226
    csrf_token: String,
227
    title: String,
228
    #[serde(default)]
229
    body: String,
230
}
231
232
pub async fn create(
233
    State(app): State<Shared>,
234
    viewer: Viewer,
235
    Path((owner, name)): Path<(String, String)>,
236
    Form(f): Form<NewIssueForm>,
237
) -> Result<Response, Error> {
238
    let shell = Shell::new(&app, &format!("/{owner}/{name}/issues/new"), &viewer);
239
    let me = require(&viewer, &shell)?;
240
    csrf(&viewer, &f.csrf_token, &shell)?;
241
    let (_, row, role) = lookup(&app, &shell, &viewer, &owner, &name).await?;
242
    if f.title.trim().is_empty() {
243
        return Ok(Page(NewIssuePage {
244
            shell,
245
            repo: RepoShell::new(&app, &row, "issues").with_role(role),
246
            templates: vec![],
247
            template: f.body,
248
            error: Some("Give the issue a title.".into()),
249
        })
250
        .into_response());
251
    }
252
    let issue = idb::create(
253
        &app.db,
254
        idb::NewIssue {
255
            repo_id: row.id,
256
            title: f.title.trim(),
257
            body: f.body.trim(),
258
            author_id: Some(me.account.id),
259
            author: &me.account.username,
260
        },
261
    )
262
    .await
263
    .map_err(|e| Error::from_db(shell.clone(), e))?;
264
    idb::add_event(&app.db, issue.id, &me.account.username, "opened", "").await.ok();
265
    reindex(&app, row.id, &issue).await;
266
    let url = format!("/{owner}/{name}/issue/{}", issue.number);
267
    notify::deliver(
268
        &app,
269
        Event {
270
            kind: "issue.opened",
271
            title: format!("{owner}/{name}#{}: {}", issue.number, issue.title),
272
            url: url.clone(),
273
            actor: &me.account,
274
            repo_id: row.id,
275
            thread: Some(("issue", issue.id)),
276
            mention_text: &f.body,
277
            direct: vec![],
278
        },
279
    )
280
    .await;
281
    crate::hooks::emit(
282
        &app,
283
        &row,
284
        "issue.opened",
285
        &me.account.username,
286
        serde_json::json!({ "issue": { "number": issue.number, "title": issue.title, "body": issue.body } }),
287
    )
288
    .await;
289
    Ok(Redirect::to(&url).into_response())
290
}
291
292
// ---------------------------------------------------------------- detail
293
294
pub enum Item {
295
    Comment(idb::IssueComment, String),
296
    Event(idb::IssueEvent),
297
}
298
299
#[derive(Template)]
300
#[template(path = "issue.html")]
301
pub struct IssuePage {
302
    shell: Shell,
303
    repo: RepoShell,
304
    i: idb::IssueRow,
305
    body_html: String,
306
    timeline: Vec<Item>,
307
    comments: Vec<idb::IssueComment>,
308
    labels: Vec<idb::Label>,
309
    all_labels: Vec<idb::Label>,
310
    assignees: Vec<String>,
311
    /// Who it can be assigned to, for triagers' menu (oxygenhub#82).
312
    assignable: Vec<String>,
313
    milestone: Option<idb::Milestone>,
314
    milestones: Vec<(idb::Milestone, bool)>,
315
    subscribed: bool,
316
    can_edit: bool,
317
    can_triage: bool,
318
    /// Projects this issue is on that the viewer may see, with the column.
319
    projects: Vec<(crate::db::projects::Project, String)>,
320
    /// Proposals whose description closes it.
321
    closed_by: Vec<super::chain::Link>,
322
    /// Projects the viewer may add it to.
323
    project_choices: Option<Vec<crate::db::projects::Project>>,
324
    notice: Option<String>,
325
    error: Option<String>,
326
}
327
328
/// The page assembler every action ends in.
329
#[allow(clippy::too_many_arguments)]
330
async fn detail(
331
    app: &Shared,
332
    shell: Shell,
333
    viewer: &Viewer,
334
    owner: &str,
335
    name: &str,
336
    number: i64,
337
    notice: Option<String>,
338
    error: Option<String>,
339
) -> Result<Page<IssuePage>, Error> {
340
    let (_, row, role) = lookup(app, &shell, viewer, owner, name).await?;
341
    let e = |e| Error::from_db(shell.clone(), e);
342
    let i = idb::get(&app.db, row.id, number).await.map_err(e)?.ok_or_else(|| Error::not_found(shell.clone()))?;
343
    let body_html = markdown(app, &row, &row.default_bookmark, &i.body).await;
344
    let comments = idb::comments(&app.db, i.id).await.map_err(e)?;
345
    let events = idb::events(&app.db, i.id).await.map_err(e)?;
346
    let mut timeline: Vec<(i64, Item)> = Vec::new();
347
    for c in &comments {
348
        timeline.push((c.created_ms, Item::Comment(c.clone(), markdown(app, &row, &row.default_bookmark, &c.body).await)));
349
    }
350
    for ev in events {
351
        if ev.event != "opened" {
352
            timeline.push((ev.at_ms, Item::Event(ev)));
353
        }
354
    }
355
    timeline.sort_by_key(|(t, _)| *t);
356
    let labels = idb::issue_labels(&app.db, i.id).await.map_err(e)?;
357
    let all_labels = idb::labels(&app.db, row.id).await.map_err(e)?;
358
    let assignees = idb::assignees(&app.db, i.id).await.map_err(e)?;
359
    let milestones: Vec<(idb::Milestone, bool)> = idb::milestones(&app.db, row.id)
360
        .await
361
        .map_err(e)?
362
        .into_iter()
363
        .map(|m| {
364
            let sel = i.milestone_id == Some(m.id);
365
            (m, sel)
366
        })
367
        .collect();
368
    let milestone = match i.milestone_id {
369
        Some(id) => idb::milestone(&app.db, id).await.map_err(e)?,
370
        None => None,
371
    };
372
    let me = viewer.account();
373
    let subscribed = match me {
374
        Some(a) => ndb::subscribed(&app.db, a.id, "issue", i.id).await.map_err(e)?,
375
        None => false,
376
    };
377
    let can_triage = role >= Role::Triage;
378
    let can_edit = me.is_some_and(|a| Some(a.id) == i.author_id) || can_triage;
379
    let projects = super::projects::placements_for(app, viewer, &row, i.number).await;
380
    let closed_by = super::chain::proposals_closing(app, &row, i.number).await;
381
    let project_choices = super::projects::project_choices(app, viewer, &row, &projects).await;
382
    let mut assignable = if can_triage { accounts::assignable(&app.db, row.id, &row.owner).await.map_err(e)? } else { Vec::new() };
383
    for a in &assignees {
384
        if !assignable.iter().any(|x| x.eq_ignore_ascii_case(a)) {
385
            assignable.push(a.clone());
386
        }
387
    }
388
    Ok(Page(IssuePage {
389
        shell,
390
        repo: RepoShell::new(app, &row, "issues").with_role(role),
391
        i,
392
        closed_by,
393
        project_choices,
394
        body_html,
395
        timeline: timeline.into_iter().map(|(_, it)| it).collect(),
396
        comments,
397
        labels,
398
        all_labels,
399
        assignees,
400
        assignable,
401
        milestone,
402
        milestones,
403
        subscribed,
404
        can_edit,
405
        can_triage,
406
        projects,
407
        notice,
408
        error,
409
    }))
410
}
411
412
pub async fn show(
413
    State(app): State<Shared>,
414
    viewer: Viewer,
415
    Path((owner, name, number)): Path<(String, String, i64)>,
416
) -> Result<Response, Error> {
417
    let shell = Shell::new(&app, &format!("/{owner}/{name}/issue/{number}"), &viewer);
418
    // A number that belongs to a proposal goes there (shared number space).
419
    let (_, row, _) = lookup(&app, &shell, &viewer, &owner, &name).await?;
420
    if idb::get(&app.db, row.id, number).await.map_err(|e| Error::from_db(shell.clone(), e))?.is_none()
421
        && db::proposals::get(&app.db, row.id, number).await.map_err(|e| Error::from_db(shell.clone(), e))?.is_some()
422
    {
423
        return Ok(Redirect::to(&format!("/{owner}/{name}/proposal/{number}")).into_response());
424
    }
425
    Ok(detail(&app, shell, &viewer, &owner, &name, number, None, None).await?.into_response())
426
}
427
428
// ---------------------------------------------------------------- actions
429
430
async fn issue_for(
431
    app: &Shared,
432
    shell: &Shell,
433
    viewer: &Viewer,
434
    owner: &str,
435
    name: &str,
436
    number: i64,
437
    access: Access,
438
) -> Result<(db::repos::RepoRow, idb::IssueRow, Role), Error> {
439
    let (_, row, role) = lookup_role(app, shell, viewer, owner, name, access).await?;
440
    let i = idb::get(&app.db, row.id, number)
441
        .await
442
        .map_err(|e| Error::from_db(shell.clone(), e))?
443
        .ok_or_else(|| Error::not_found(shell.clone()))?;
444
    Ok((row, i, role))
445
}
446
447
#[derive(Deserialize)]
448
pub struct CommentForm {
449
    #[serde(rename = "_csrf")]
450
    csrf_token: String,
451
    body: String,
452
    #[serde(default)]
453
    close: Option<String>,
454
    #[serde(default)]
455
    reopen: Option<String>,
456
}
457
458
pub async fn comment(
459
    State(app): State<Shared>,
460
    viewer: Viewer,
461
    Path((owner, name, number)): Path<(String, String, i64)>,
462
    Form(f): Form<CommentForm>,
463
) -> Result<Page<IssuePage>, Error> {
464
    let shell = Shell::new(&app, &format!("/{owner}/{name}/issue/{number}"), &viewer);
465
    let me = require(&viewer, &shell)?;
466
    csrf(&viewer, &f.csrf_token, &shell)?;
467
    let (row, i, role) = issue_for(&app, &shell, &viewer, &owner, &name, number, Access::Read).await?;
468
    if i.locked && role < Role::Triage {
469
        return detail(&app, shell, &viewer, &owner, &name, number, None, Some("This issue is locked.".into())).await;
470
    }
471
    if f.body.trim().is_empty() {
472
        return detail(&app, shell, &viewer, &owner, &name, number, None, Some("An empty comment says nothing.".into())).await;
473
    }
474
    let e = |e| Error::from_db(shell.clone(), e);
475
    idb::add_comment(&app.db, i.id, Some(me.account.id), &me.account.username, f.body.trim()).await.map_err(e)?;
476
    let url = format!("/{owner}/{name}/issue/{number}");
477
    let mut kind = "issue.comment";
478
    let may_close = Some(me.account.id) == i.author_id || role >= Role::Triage;
479
    if f.close.is_some() && i.state == "open" && may_close {
480
        idb::set_state(&app.db, i.id, "closed", "completed").await.map_err(e)?;
481
        idb::add_event(&app.db, i.id, &me.account.username, "closed", "").await.ok();
482
        kind = "issue.closed";
483
    } else if f.reopen.is_some() && i.state == "closed" && may_close {
484
        idb::set_state(&app.db, i.id, "open", "").await.map_err(e)?;
485
        idb::add_event(&app.db, i.id, &me.account.username, "reopened", "").await.ok();
486
        kind = "issue.reopened";
487
    }
488
    reindex(&app, row.id, &i).await;
489
    let hook_event = if kind == "issue.comment" { "comment.issue" } else { kind };
490
    crate::hooks::emit(
491
        &app,
492
        &row,
493
        hook_event,
494
        &me.account.username,
495
        serde_json::json!({ "number": number, "issue": { "number": number, "title": i.title }, "comment": { "body": f.body.trim() } }),
496
    )
497
    .await;
498
    let direct = i.author_id.into_iter().collect();
499
    notify::deliver(
500
        &app,
501
        Event {
502
            kind,
503
            title: format!("{owner}/{name}#{number}: {}", i.title),
504
            url,
505
            actor: &me.account,
506
            repo_id: row.id,
507
            thread: Some(("issue", i.id)),
508
            mention_text: &f.body,
509
            direct,
510
        },
511
    )
512
    .await;
513
    detail(&app, shell, &viewer, &owner, &name, number, None, None).await
514
}
515
516
pub async fn delete_comment(
517
    State(app): State<Shared>,
518
    viewer: Viewer,
519
    Path((owner, name, number, id)): Path<(String, String, i64, i64)>,
520
    Form(f): Form<super::session::CsrfForm>,
521
) -> Result<Page<IssuePage>, Error> {
522
    let shell = Shell::new(&app, &format!("/{owner}/{name}/issue/{number}"), &viewer);
523
    let me = require(&viewer, &shell)?;
524
    csrf(&viewer, &f.csrf, &shell)?;
525
    let (row, i, role) = issue_for(&app, &shell, &viewer, &owner, &name, number, Access::Read).await?;
526
    let c = idb::comments(&app.db, i.id).await.map_err(|e| Error::from_db(shell.clone(), e))?.into_iter().find(|c| c.id == id);
527
    if let Some(c) = c {
528
        if c.author_id == Some(me.account.id) || role >= Role::Triage {
529
            idb::delete_comment(&app.db, id).await.map_err(|e| Error::from_db(shell.clone(), e))?;
530
            idb::add_event(&app.db, i.id, &me.account.username, "deleted a comment", "").await.ok();
531
            reindex(&app, row.id, &i).await;
532
        }
533
    }
534
    detail(&app, shell, &viewer, &owner, &name, number, None, None).await
535
}
536
537
#[derive(Deserialize)]
538
pub struct EditForm {
539
    #[serde(rename = "_csrf")]
540
    csrf_token: String,
541
    title: String,
542
    #[serde(default)]
543
    body: String,
544
}
545
546
pub async fn edit(
547
    State(app): State<Shared>,
548
    viewer: Viewer,
549
    Path((owner, name, number)): Path<(String, String, i64)>,
550
    Form(f): Form<EditForm>,
551
) -> Result<Page<IssuePage>, Error> {
552
    let shell = Shell::new(&app, &format!("/{owner}/{name}/issue/{number}"), &viewer);
553
    let me = require(&viewer, &shell)?;
554
    csrf(&viewer, &f.csrf_token, &shell)?;
555
    let (row, i, role) = issue_for(&app, &shell, &viewer, &owner, &name, number, Access::Read).await?;
556
    if Some(me.account.id) != i.author_id && role < Role::Triage {
557
        return Err(Error::not_found(shell));
558
    }
559
    if f.title.trim().is_empty() {
560
        return detail(&app, shell, &viewer, &owner, &name, number, None, Some("An issue keeps a title.".into())).await;
561
    }
562
    idb::edit(&app.db, i.id, f.title.trim(), f.body.trim()).await.map_err(|e| Error::from_db(shell.clone(), e))?;
563
    idb::add_event(&app.db, i.id, &me.account.username, "edited", "").await.ok();
564
    if let Ok(Some(fresh)) = idb::get(&app.db, row.id, number).await {
565
        reindex(&app, row.id, &fresh).await;
566
    }
567
    detail(&app, shell, &viewer, &owner, &name, number, Some("Saved.".into()), None).await
568
}
569
570
#[derive(Deserialize)]
571
pub struct StateForm {
572
    #[serde(rename = "_csrf")]
573
    csrf_token: String,
574
    action: String,
575
}
576
577
pub async fn state(
578
    State(app): State<Shared>,
579
    viewer: Viewer,
580
    Path((owner, name, number)): Path<(String, String, i64)>,
581
    Form(f): Form<StateForm>,
582
) -> Result<Page<IssuePage>, Error> {
583
    let shell = Shell::new(&app, &format!("/{owner}/{name}/issue/{number}"), &viewer);
584
    let me = require(&viewer, &shell)?;
585
    csrf(&viewer, &f.csrf_token, &shell)?;
586
    let (row, i, _) = issue_for(&app, &shell, &viewer, &owner, &name, number, Access::Read).await?;
587
    let role = crate::auth::roles::role_for(&app.db, Some(&me.account), &row).await.map_err(|e| Error::from_db(shell.clone(), e))?;
588
    if !crate::auth::roles::allows(role, Access::Read) || (role < Some(Role::Triage) && Some(me.account.id) != i.author_id) {
589
        return Err(Error::not_found(shell));
590
    }
591
    let e = |e| Error::from_db(shell.clone(), e);
592
    let (event, kind) = match f.action.as_str() {
593
        "close" => {
594
            idb::set_state(&app.db, i.id, "closed", "completed").await.map_err(e)?;
595
            ("closed", "issue.closed")
596
        }
597
        "not_planned" => {
598
            idb::set_state(&app.db, i.id, "closed", "not_planned").await.map_err(e)?;
599
            ("closed as not planned", "issue.closed")
600
        }
601
        "reopen" => {
602
            idb::set_state(&app.db, i.id, "open", "").await.map_err(e)?;
603
            ("reopened", "issue.reopened")
604
        }
605
        "lock" if role >= Some(Role::Triage) => {
606
            idb::set_flags(&app.db, i.id, Some(true), None).await.map_err(e)?;
607
            ("locked", "")
608
        }
609
        "unlock" if role >= Some(Role::Triage) => {
610
            idb::set_flags(&app.db, i.id, Some(false), None).await.map_err(e)?;
611
            ("unlocked", "")
612
        }
613
        "pin" if role >= Some(Role::Triage) => {
614
            idb::set_flags(&app.db, i.id, None, Some(true)).await.map_err(e)?;
615
            ("pinned", "")
616
        }
617
        "unpin" if role >= Some(Role::Triage) => {
618
            idb::set_flags(&app.db, i.id, None, Some(false)).await.map_err(e)?;
619
            ("unpinned", "")
620
        }
621
        _ => return Err(Error::bad(shell, "unknown action")),
622
    };
623
    idb::add_event(&app.db, i.id, &me.account.username, event, "").await.ok();
624
    if !kind.is_empty() {
625
        crate::hooks::emit(
626
            &app,
627
            &row,
628
            kind,
629
            &me.account.username,
630
            serde_json::json!({ "issue": { "number": number, "title": i.title }, "reason": event }),
631
        )
632
        .await;
633
        let direct = i.author_id.into_iter().collect();
634
        notify::deliver(
635
            &app,
636
            Event {
637
                kind,
638
                title: format!("{owner}/{name}#{number}: {}", i.title),
639
                url: format!("/{owner}/{name}/issue/{number}"),
640
                actor: &me.account,
641
                repo_id: row.id,
642
                thread: Some(("issue", i.id)),
643
                mention_text: "",
644
                direct,
645
            },
646
        )
647
        .await;
648
    }
649
    detail(&app, shell, &viewer, &owner, &name, number, None, None).await
650
}
651
652
#[derive(Deserialize)]
653
pub struct LabelsForm {
654
    #[serde(rename = "_csrf")]
655
    csrf_token: String,
656
    #[serde(default)]
657
    label: Vec<i64>,
658
}
659
660
pub async fn set_labels(
661
    State(app): State<Shared>,
662
    viewer: Viewer,
663
    Path((owner, name, number)): Path<(String, String, i64)>,
664
    axum_extra::extract::Form(f): axum_extra::extract::Form<LabelsForm>,
665
) -> Result<Page<IssuePage>, Error> {
666
    let shell = Shell::new(&app, &format!("/{owner}/{name}/issue/{number}"), &viewer);
667
    let me = require(&viewer, &shell)?;
668
    csrf(&viewer, &f.csrf_token, &shell)?;
669
    let (row, i, _) = issue_for(&app, &shell, &viewer, &owner, &name, number, Access::Read).await?;
670
    let role = crate::auth::roles::role_for(&app.db, Some(&me.account), &row).await.map_err(|e| Error::from_db(shell.clone(), e))?;
671
    if role < Some(Role::Triage) {
672
        return Err(Error::not_found(shell));
673
    }
674
    let e = |e| Error::from_db(shell.clone(), e);
675
    for l in idb::labels(&app.db, row.id).await.map_err(e)? {
676
        idb::set_issue_label(&app.db, i.id, l.id, f.label.contains(&l.id)).await.map_err(e)?;
677
    }
678
    idb::add_event(&app.db, i.id, &me.account.username, "set labels", "").await.ok();
679
    detail(&app, shell, &viewer, &owner, &name, number, None, None).await
680
}
681
682
#[derive(Deserialize)]
683
pub struct AssignForm {
684
    #[serde(rename = "_csrf")]
685
    csrf_token: String,
686
    /// One or more; with `set`, the whole list of assignees.
687
    #[serde(default)]
688
    username: Vec<String>,
689
    /// `add`, `remove`, or `set` (the menu: exactly these).
690
    action: String,
691
}
692
693
pub async fn assign(
694
    State(app): State<Shared>,
695
    viewer: Viewer,
696
    Path((owner, name, number)): Path<(String, String, i64)>,
697
    axum_extra::extract::Form(f): axum_extra::extract::Form<AssignForm>,
698
) -> Result<Page<IssuePage>, Error> {
699
    let shell = Shell::new(&app, &format!("/{owner}/{name}/issue/{number}"), &viewer);
700
    let me = require(&viewer, &shell)?;
701
    csrf(&viewer, &f.csrf_token, &shell)?;
702
    let (row, i, role) = issue_for(&app, &shell, &viewer, &owner, &name, number, Access::Read).await?;
703
    if role < Role::Triage {
704
        return Err(Error::not_found(shell));
705
    }
706
    let e = |e| Error::from_db(shell.clone(), e);
707
    let mut named = Vec::new();
708
    for n in f.username.iter().map(|n| n.trim()).filter(|n| !n.is_empty()) {
709
        match accounts::account_by_name(&app.db, n).await.map_err(e)? {
710
            Some(a) => named.push(a),
711
            None => return detail(&app, shell, &viewer, &owner, &name, number, None, Some(format!("No account {n}."))).await,
712
        }
713
    }
714
    let current = idb::assignees(&app.db, i.id).await.map_err(e)?;
715
    let has = |a: &accounts::Account| current.iter().any(|c| c.eq_ignore_ascii_case(&a.username));
716
    // What to add and to take off: one or more names, or (from the menu)
717
    // the whole list, compared with who is assigned now.
718
    let (add, remove): (Vec<&accounts::Account>, Vec<String>) = match f.action.as_str() {
719
        "add" => (named.iter().filter(|a| !has(a)).collect(), Vec::new()),
720
        "remove" => (Vec::new(), named.iter().filter(|a| has(a)).map(|a| a.username.clone()).collect()),
721
        "set" => (
722
            named.iter().filter(|a| !has(a)).collect(),
723
            current.iter().filter(|c| !named.iter().any(|a| a.username.eq_ignore_ascii_case(c))).cloned().collect(),
724
        ),
725
        _ => return Err(Error::bad(shell, "unknown action")),
726
    };
727
    for n in &remove {
728
        if let Some(a) = accounts::account_by_name(&app.db, n).await.map_err(e)? {
729
            idb::set_assignee(&app.db, i.id, a.id, false).await.map_err(e)?;
730
            idb::add_event(&app.db, i.id, &me.account.username, "unassigned", &a.username).await.ok();
731
        }
732
    }
733
    for target in add {
734
        idb::set_assignee(&app.db, i.id, target.id, true).await.map_err(e)?;
735
        idb::add_event(&app.db, i.id, &me.account.username, "assigned", &target.username).await.ok();
736
        notify::deliver(
737
            &app,
738
            Event {
739
                kind: "issue.assigned",
740
                title: format!("{owner}/{name}#{number}: {}", i.title),
741
                url: format!("/{owner}/{name}/issue/{number}"),
742
                actor: &me.account,
743
                repo_id: row.id,
744
                thread: None,
745
                mention_text: "",
746
                direct: vec![target.id],
747
            },
748
        )
749
        .await;
750
        ndb::subscribe(&app.db, target.id, "issue", i.id).await.ok();
751
    }
752
    detail(&app, shell, &viewer, &owner, &name, number, None, None).await
753
}
754
755
#[derive(Deserialize)]
756
pub struct MilestoneForm {
757
    #[serde(rename = "_csrf")]
758
    csrf_token: String,
759
    #[serde(default)]
760
    milestone: String,
761
}
762
763
pub async fn set_milestone(
764
    State(app): State<Shared>,
765
    viewer: Viewer,
766
    Path((owner, name, number)): Path<(String, String, i64)>,
767
    Form(f): Form<MilestoneForm>,
768
) -> Result<Page<IssuePage>, Error> {
769
    let shell = Shell::new(&app, &format!("/{owner}/{name}/issue/{number}"), &viewer);
770
    let me = require(&viewer, &shell)?;
771
    csrf(&viewer, &f.csrf_token, &shell)?;
772
    let (_, i, role) = issue_for(&app, &shell, &viewer, &owner, &name, number, Access::Read).await?;
773
    if role < Role::Triage {
774
        return Err(Error::not_found(shell));
775
    }
776
    let id = f.milestone.trim().parse::<i64>().ok();
777
    idb::set_milestone(&app.db, i.id, id).await.map_err(|e| Error::from_db(shell.clone(), e))?;
778
    idb::add_event(&app.db, i.id, &me.account.username, "set milestone", "").await.ok();
779
    detail(&app, shell, &viewer, &owner, &name, number, None, None).await
780
}
781
782
pub async fn subscribe(
783
    State(app): State<Shared>,
784
    viewer: Viewer,
785
    Path((owner, name, number)): Path<(String, String, i64)>,
786
    Form(f): Form<super::session::CsrfForm>,
787
) -> Result<Page<IssuePage>, Error> {
788
    let shell = Shell::new(&app, &format!("/{owner}/{name}/issue/{number}"), &viewer);
789
    let me = require(&viewer, &shell)?;
790
    csrf(&viewer, &f.csrf, &shell)?;
791
    let (_, i, _) = issue_for(&app, &shell, &viewer, &owner, &name, number, Access::Read).await?;
792
    let e = |e| Error::from_db(shell.clone(), e);
793
    if ndb::subscribed(&app.db, me.account.id, "issue", i.id).await.map_err(e)? {
794
        ndb::unsubscribe(&app.db, me.account.id, "issue", i.id).await.map_err(e)?;
795
    } else {
796
        ndb::subscribe(&app.db, me.account.id, "issue", i.id).await.map_err(e)?;
797
    }
798
    detail(&app, shell, &viewer, &owner, &name, number, None, None).await
799
}
800
801
// ---------------------------------------------------------------- labels
802
803
#[derive(Template)]
804
#[template(path = "labels.html")]
805
pub struct LabelsPage {
806
    shell: Shell,
807
    repo: RepoShell,
808
    labels: Vec<idb::Label>,
809
    can_triage: bool,
810
    notice: Option<String>,
811
}
812
813
pub async fn labels(
814
    State(app): State<Shared>,
815
    viewer: Viewer,
816
    Path((owner, name)): Path<(String, String)>,
817
) -> Result<Page<LabelsPage>, Error> {
818
    let shell = Shell::new(&app, &format!("/{owner}/{name}/labels"), &viewer);
819
    let (_, row, role) = lookup(&app, &shell, &viewer, &owner, &name).await?;
820
    let labels = idb::labels(&app.db, row.id).await.map_err(|e| Error::from_db(shell.clone(), e))?;
821
    Ok(Page(LabelsPage {
822
        shell,
823
        repo: RepoShell::new(&app, &row, "issues").with_role(role),
824
        labels,
825
        can_triage: role >= Role::Triage,
826
        notice: None,
827
    }))
828
}
829
830
#[derive(Deserialize)]
831
pub struct LabelForm {
832
    #[serde(rename = "_csrf")]
833
    csrf_token: String,
834
    name: String,
835
    #[serde(default = "default_colour")]
836
    colour: String,
837
    #[serde(default)]
838
    description: String,
839
    #[serde(default)]
840
    delete: Option<String>,
841
}
842
843
fn default_colour() -> String {
844
    "#0072ff".into()
845
}
846
847
pub async fn save_label(
848
    State(app): State<Shared>,
849
    viewer: Viewer,
850
    Path((owner, name)): Path<(String, String)>,
851
    Form(f): Form<LabelForm>,
852
) -> Result<Page<LabelsPage>, Error> {
853
    let shell = Shell::new(&app, &format!("/{owner}/{name}/labels"), &viewer);
854
    require(&viewer, &shell)?;
855
    csrf(&viewer, &f.csrf_token, &shell)?;
856
    let (_, row, role) = lookup(&app, &shell, &viewer, &owner, &name).await?;
857
    if role < Role::Triage {
858
        return Err(Error::not_found(shell));
859
    }
860
    let e = |e| Error::from_db(shell.clone(), e);
861
    let notice = if f.delete.is_some() {
862
        if let Some(l) = idb::label_by_name(&app.db, row.id, f.name.trim()).await.map_err(e)? {
863
            idb::delete_label(&app.db, l.id).await.map_err(e)?;
864
        }
865
        format!("Deleted {}.", f.name.trim())
866
    } else {
867
        let colour = if regex::Regex::new(r"^#[0-9a-fA-F]{6}$").unwrap().is_match(&f.colour) { f.colour.clone() } else { default_colour() };
868
        idb::upsert_label(&app.db, row.id, f.name.trim(), &colour, f.description.trim()).await.map_err(e)?;
869
        format!("Saved {}.", f.name.trim())
870
    };
871
    let labels = idb::labels(&app.db, row.id).await.map_err(e)?;
872
    Ok(Page(LabelsPage {
873
        shell,
874
        repo: RepoShell::new(&app, &row, "issues").with_role(role),
875
        labels,
876
        can_triage: true,
877
        notice: Some(notice),
878
    }))
879
}
880
881
// ------------------------------------------------------------ milestones
882
883
#[derive(Template)]
884
#[template(path = "milestones.html")]
885
pub struct MilestonesPage {
886
    shell: Shell,
887
    repo: RepoShell,
888
    rows: Vec<(idb::Milestone, i64, i64)>,
889
    can_triage: bool,
890
    notice: Option<String>,
891
}
892
893
async fn milestones_page(
894
    app: &Shared,
895
    shell: Shell,
896
    row: db::repos::RepoRow,
897
    role: Role,
898
    notice: Option<String>,
899
) -> Result<Page<MilestonesPage>, Error> {
900
    let mut rows = Vec::new();
901
    for m in idb::milestones(&app.db, row.id).await.map_err(|e| Error::from_db(shell.clone(), e))? {
902
        let (open, closed) = idb::milestone_counts(&app.db, m.id).await.map_err(|e| Error::from_db(shell.clone(), e))?;
903
        rows.push((m, open, closed));
904
    }
905
    Ok(Page(MilestonesPage {
906
        shell,
907
        repo: RepoShell::new(app, &row, "issues").with_role(role),
908
        rows,
909
        can_triage: role >= Role::Triage,
910
        notice,
911
    }))
912
}
913
914
pub async fn milestones(
915
    State(app): State<Shared>,
916
    viewer: Viewer,
917
    Path((owner, name)): Path<(String, String)>,
918
) -> Result<Page<MilestonesPage>, Error> {
919
    let shell = Shell::new(&app, &format!("/{owner}/{name}/milestones"), &viewer);
920
    let (_, row, role) = lookup(&app, &shell, &viewer, &owner, &name).await?;
921
    milestones_page(&app, shell, row, role, None).await
922
}
923
924
#[derive(Deserialize)]
925
pub struct MilestoneSaveForm {
926
    #[serde(rename = "_csrf")]
927
    csrf_token: String,
928
    title: String,
929
    #[serde(default)]
930
    description: String,
931
    #[serde(default)]
932
    due: String,
933
    #[serde(default)]
934
    state: Option<String>,
935
}
936
937
pub async fn save_milestone(
938
    State(app): State<Shared>,
939
    viewer: Viewer,
940
    Path((owner, name)): Path<(String, String)>,
941
    Form(f): Form<MilestoneSaveForm>,
942
) -> Result<Page<MilestonesPage>, Error> {
943
    let shell = Shell::new(&app, &format!("/{owner}/{name}/milestones"), &viewer);
944
    require(&viewer, &shell)?;
945
    csrf(&viewer, &f.csrf_token, &shell)?;
946
    let (_, row, role) = lookup(&app, &shell, &viewer, &owner, &name).await?;
947
    if role < Role::Triage {
948
        return Err(Error::not_found(shell));
949
    }
950
    let e = |e| Error::from_db(shell.clone(), e);
951
    if let Some(state) = f.state.as_deref() {
952
        if let Some(m) = idb::milestones(&app.db, row.id).await.map_err(e)?.into_iter().find(|m| m.title == f.title) {
953
            idb::set_milestone_state(&app.db, m.id, if state == "closed" { "closed" } else { "open" }).await.map_err(e)?;
954
        }
955
        return milestones_page(&app, shell, row, role, Some("Updated.".into())).await;
956
    }
957
    let due_ms = time::Date::parse(f.due.trim(), &time::macros::format_description!("[year]-[month]-[day]"))
958
        .ok()
959
        .map(|d| d.midnight().assume_utc().unix_timestamp() * 1000);
960
    idb::upsert_milestone(&app.db, row.id, f.title.trim(), f.description.trim(), due_ms).await.map_err(e)?;
961
    milestones_page(&app, shell, row, role, Some("Saved.".into())).await
962
}
963
964
// ----------------------------------------------------------------- watch
965
966
pub async fn watch(
967
    State(app): State<Shared>,
968
    viewer: Viewer,
969
    Path((owner, name)): Path<(String, String)>,
970
    Form(f): Form<super::session::CsrfForm>,
971
) -> Result<Response, Error> {
972
    let shell = Shell::new(&app, &format!("/{owner}/{name}"), &viewer);
973
    let me = require(&viewer, &shell)?;
974
    csrf(&viewer, &f.csrf, &shell)?;
975
    let (_, row, _) = lookup(&app, &shell, &viewer, &owner, &name).await?;
976
    let on = !ndb::watching(&app.db, me.account.id, row.id).await.map_err(|e| Error::from_db(shell.clone(), e))?;
977
    ndb::set_watch(&app.db, me.account.id, row.id, on).await.map_err(|e| Error::from_db(shell.clone(), e))?;
978
    Ok(Redirect::to(&format!("/{owner}/{name}")).into_response())
979
}
980
981
/// Star or unstar a repository.
982
pub async fn star(
983
    State(app): State<Shared>,
984
    viewer: Viewer,
985
    Path((owner, name)): Path<(String, String)>,
986
    Form(f): Form<super::session::CsrfForm>,
987
) -> Result<Response, Error> {
988
    let shell = Shell::new(&app, &format!("/{owner}/{name}"), &viewer);
989
    let me = require(&viewer, &shell)?;
990
    csrf(&viewer, &f.csrf, &shell)?;
991
    let (_, row, _) = lookup(&app, &shell, &viewer, &owner, &name).await?;
992
    db::repos::toggle_star(&app.db, me.account.id, row.id).await.map_err(|e| Error::from_db(shell.clone(), e))?;
993
    Ok(Redirect::to(&format!("/{owner}/{name}")).into_response())
994
}
995
996
/// Put `#N` references of pushed changes on the timelines of those issues
997
/// and proposals: "referenced by change <hash> on <bookmark>".
998
pub async fn references_from_messages(app: &Shared, row: &db::repos::RepoRow, messages: &[(String, String)], bookmark: &str, actor: &str) {
999
    let Ok((issues, proposals)) = idb::numbers(&app.db, row.id).await else { return };
1000
    for (hash, message) in messages {
1001
        let detail = format!("{} on {bookmark}", &hash[..12.min(hash.len())]);
1002
        for n in render::refs::references(message) {
1003
            if issues.contains(&n) {
1004
                if let Ok(Some(i)) = idb::get(&app.db, row.id, n).await {
1005
                    idb::add_event(&app.db, i.id, actor, "referenced by change", &detail).await.ok();
1006
                }
1007
            } else if proposals.contains(&n) {
1008
                if let Ok(Some(p)) = db::proposals::get(&app.db, row.id, n).await {
1009
                    db::proposals::add_event(&app.db, p.id, actor, "referenced by change", &detail).await.ok();
1010
                }
1011
            }
1012
        }
1013
    }
1014
}
1015
1016
/// Close issues a landed change's message names (`closes #12`), when the
1017
/// landing reached the default bookmark. Called from the push hook and
1018
/// the hub's own landing.
1019
pub async fn close_from_messages(app: &Shared, row: &db::repos::RepoRow, messages: &[(String, String)]) {
1020
    for (hash, message) in messages {
1021
        for n in render::refs::closes(message) {
1022
            if let Ok(Some(i)) = idb::get(&app.db, row.id, n).await {
1023
                if i.state == "open" {
1024
                    idb::set_state(&app.db, i.id, "closed", "completed").await.ok();
1025
                    idb::add_event(&app.db, i.id, "", "closed by change", &hash[..12.min(hash.len())]).await.ok();
1026
                    for id in ndb::subscribers(&app.db, "issue", i.id).await.unwrap_or_default() {
1027
                        let title = format!("{}#{}: {} (closed by {})", row.slug(), i.number, i.title, &hash[..12.min(hash.len())]);
1028
                        let url = format!("/{}/issue/{}", row.slug(), i.number);
1029
                        ndb::add(
1030
                            &app.db,
1031
                            ndb::New {
1032
                                account_id: id,
1033
                                repo_id: Some(row.id),
1034
                                reason: ndb::Reason::Participating,
1035
                                kind: "issue.closed",
1036
                                title: &title,
1037
                                url: &url,
1038
                                actor: "",
1039
                            },
1040
                        )
1041
                        .await
1042
                        .ok();
1043
                    }
1044
                }
1045
            }
1046
        }
1047
    }
1048
}