shiplog 0.1.0 → 0.2.0

data/config/locales/en.yml

@@ -1,4 +1,8 @@
 en:
+  activerecord:
+    attributes:
+      shiplog/entry:
+        changelog_kind: Category
   shiplog:
     columns:
       in_progress: In progress
@@ -15,6 +19,18 @@ en:
     roadmap:
       title: Roadmap
       lede: What we're working on and what comes next.
+      parts:
+        one: Includes %{count} part
+        other: Includes %{count} parts
+      shipped_heading: Recently shipped
+      shipped_date_format: "%-d %B"
+      full_changelog: See the full changelog
+      footnote: ""
+      suggest: Suggest a feature
+    switcher:
+      label: Product updates
+      roadmap: Roadmap
+      changelog: Changelog
     changelog:
       title: Changelog
       lede: New features and improvements, as they ship.
@@ -22,6 +38,14 @@ en:
         label: Pagination
         older: Older
         newer: Newer
+      search:
+        label: Search the changelog
+        submit: Search
+        summary:
+          one: "%{count} result for “%{query}”"
+          other: "%{count} results for “%{query}”"
+        clear: Clear search
+        empty: "No entries match “%{query}”."
     admin:
       title: Shiplog admin
       nav:
@@ -56,6 +80,9 @@ en:
         public_text: Public text
         source: GitHub source
         back: Back to drafts
+        category_options:
+          feature: New feature
+          change: Improvement
         statuses:
           draft: Drafts
           approved: Approved
@@ -73,6 +100,7 @@ en:
           title: Title
           body: Text
           released_on: Released on
+          category: Category
           reason: Reason
       board:
         title: Roadmap board

data/db/migrate/20261027000001_create_shiplog_pull_request_upgrades.rb

@@ -0,0 +1,30 @@
+class CreateShiplogPullRequestUpgrades < ActiveRecord::Migration[8.1]
+  def change
+    # What upgrade detection needs from the pull request, and its "checked" marker: a pull request with
+    # no tracked upgrade has no upgrade row, so only a column can say "inspected, nothing found".
+    change_table :shiplog_pull_requests do |t|
+      t.string :base_oid
+      t.string :merge_oid
+      t.boolean :lockfile_changed, null: false, default: false
+      t.datetime :upgrades_checked_at
+      # Transient failures while inspecting it; the detector gives up (marks it checked) after a few.
+      t.integer :upgrade_check_attempts, null: false, default: 0
+    end
+
+    create_table :shiplog_pull_request_upgrades do |t|
+      t.references :pull_request, null: false, foreign_key: { to_table: :shiplog_pull_requests }, index: false
+      t.string :gem_name, null: false
+      t.string :from_ref
+      t.string :to_ref
+      t.string :gem_repository
+      # Not `changes`: that name belongs to ActiveModel::Dirty and Active Record refuses it as an attribute.
+      t.jsonb :gem_changes, null: false, default: []
+      t.timestamps
+      t.index [ :pull_request_id, :gem_name ], unique: true
+    end
+
+    # The changelog and the roadmap's recently shipped list read approved entries newest release first:
+    # `status = 'approved' ... ORDER BY released_on DESC`. Equality column first, then the sort column.
+    add_index :shiplog_entries, [ :status, :released_on ]
+  end
+end

data/lib/generators/shiplog/install/install_generator.rb

@@ -17,9 +17,12 @@ module Shiplog
         page_header: "mb-8",
         page_title: "text-3xl font-semibold tracking-tight",
         page_lede: "mt-2 text-gray-600 dark:text-gray-400",
+        switcher: "mt-6 inline-flex gap-1 rounded-full bg-gray-100 p-1 text-sm font-medium dark:bg-gray-900",
+        switcher_link: "rounded-full px-4 py-1.5 text-gray-600 transition-colors hover:text-gray-900 focus-visible:outline-2 focus-visible:outline-offset-2 focus-visible:outline-indigo-600 aria-[current=page]:bg-white aria-[current=page]:text-gray-900 aria-[current=page]:shadow-sm dark:text-gray-400 dark:hover:text-white dark:aria-[current=page]:bg-gray-700 dark:aria-[current=page]:text-white",
         columns: "grid gap-6 md:grid-cols-3",
         column: "rounded-xl border border-gray-200 bg-gray-50 p-4 dark:border-gray-800 dark:bg-gray-900/50",
         column_header: "mb-4 border-b border-gray-200 pb-3 dark:border-gray-800",
+        column_marker: "mr-2 inline-block h-2 w-2 rounded-full bg-gray-400 in-[.shiplog-column--in-progress]:bg-indigo-600 in-[.shiplog-column--coming-soon]:bg-indigo-300",
         column_title: "inline text-base font-semibold",
         column_count: "ml-2 rounded-full bg-gray-200 px-2 py-0.5 text-xs font-medium text-gray-700 dark:bg-gray-800 dark:text-gray-300",
         column_description: "mt-1 text-sm text-gray-500 dark:text-gray-400",
@@ -28,6 +31,16 @@ module Shiplog
         card: "rounded-lg border border-gray-200 bg-white p-3 shadow-sm transition hover:border-indigo-400 hover:shadow dark:border-gray-800 dark:bg-gray-900 dark:hover:border-indigo-500",
         card_title: "font-medium",
         card_body: "mt-1 text-sm text-gray-600 dark:text-gray-400",
+        card_meta: "mt-3 flex flex-wrap items-center gap-2 text-xs font-medium text-gray-500 dark:text-gray-400",
+        card_tag: "rounded-md bg-gray-100 px-2 py-0.5 text-gray-700 dark:bg-white/10 dark:text-gray-300",
+        shipped: "mt-12 grid grid-cols-[1fr_auto] items-baseline gap-x-6 gap-y-4 border-t border-gray-200 pt-8 dark:border-gray-800",
+        shipped_title: "text-lg font-semibold",
+        shipped_list: "col-span-2 grid gap-6 sm:grid-cols-2 lg:grid-cols-4",
+        shipped_item: "flex flex-col gap-1",
+        shipped_date: "text-xs tabular-nums text-gray-500 dark:text-gray-400",
+        shipped_link: "text-sm font-semibold text-gray-900 hover:text-indigo-600 dark:text-white dark:hover:text-indigo-400",
+        footnote: "mt-10 border-t border-gray-200 pt-6 text-center text-sm text-gray-500 dark:border-gray-800 dark:text-gray-400",
+        footnote_link: "font-medium text-indigo-600 hover:underline dark:text-indigo-400",
         months: "space-y-10",
         month: "border-l-2 border-gray-200 pl-6 dark:border-gray-800",
         month_title: "mb-4 text-lg font-semibold",
@@ -40,7 +53,13 @@ module Shiplog
         entry_date: "text-xs text-gray-500 dark:text-gray-400",
         pagination: "mt-8 flex justify-between",
         pagination_link: "text-sm font-medium text-indigo-600 hover:underline dark:text-indigo-400",
-        empty: "text-gray-500 dark:text-gray-400"
+        empty: "text-gray-500 dark:text-gray-400",
+        search: "my-4 flex gap-2",
+        search_input: "min-w-0 flex-1 rounded-md border border-gray-300 bg-white px-3 py-1.5 text-sm dark:border-gray-700 dark:bg-gray-900",
+        search_button: "rounded-md bg-indigo-600 px-3 py-1.5 text-sm font-medium text-white hover:bg-indigo-500",
+        search_summary: "mb-4 text-sm text-gray-500 dark:text-gray-400",
+        search_clear: "ml-2 font-medium text-indigo-600 hover:underline dark:text-indigo-400",
+        search_empty: "text-gray-500 dark:text-gray-400"
       }.freeze
 
       def copy_initializer

data/lib/generators/shiplog/install/templates/initializer.rb.tt

@@ -2,6 +2,21 @@ Shiplog.configure do |config|
   # GitHub repositories to sync ("owner/name"). Sub-issues may cross repositories of the same owner.
   config.repositories = %w[acme/app acme/app-ios]
 
+  # A repository can also be a Hash with options:
+  #   changelog: false  keep the repository on the roadmap, but never draft changelog entries from its PRs or commits
+  #   gem: "name"       the gem's name in your Gemfile.lock. When a merged PR upgrades it, the changelog gets one
+  #                     entry for the upgrade, built from the gem's changes. Needed because names differ
+  #                     (a "trackberry-produce" gem can live in acme/produce) and a public gem of the same name
+  #                     is not your repository.
+  # config.repositories = [
+  #   "acme/app",
+  #   { name: "acme/app-ios" },
+  #   { name: "acme/pricing", changelog: false, gem: "acme-pricing" }
+  # ]
+
+  # Lockfile read in merged pull requests to detect gem upgrades (change it for a monorepo).
+  # config.lockfile_path = "Gemfile.lock"
+
   # A String, or a callable evaluated on every GitHub request (e.g. to mint a GitHub App installation token).
   config.github_token = -> { Rails.application.credentials.dig(:github, :shiplog_token) }
 
@@ -83,4 +98,26 @@ Shiplog.configure do |config|
   # Public paths, read when routes are drawn.
   # config.roadmap_path = "roadmap"
   # config.changelog_path = "changelog"
+
+  # Pages added to the Roadmap / Changelog switcher. label and path are Strings, or callables evaluated in the
+  # view (route helpers, I18n). Render the same switcher on your own pages with `helper Shiplog::SwitcherHelper`
+  # and `<%%= shiplog_switcher %>`.
+  # config.extra_pages = [ { label: "News", path: -> { main_app.news_path } } ]
+
+  # Names shown on roadmap cards for the repository an item lives in (Strings or callables).
+  # config.repository_labels = { "acme/app-ios" => "iPhone & iPad" }
+
+  # How many recently shipped changelog entries the roadmap lists; 0 hides the section.
+  # config.roadmap_shipped_count = 4
+
+  # Where the roadmap's "Suggest a feature" link goes (String or callable); no link while nil. Add a footnote
+  # next to it with the shiplog.roadmap.footnote translation.
+  # config.feedback_path = -> { main_app.new_feedback_path }
+
+  # The public changelog's search box and ?q= filtering. Set to false to turn search off.
+  # config.changelog_search = true
+
+  # Callables above cannot be part of the public pages' ETag. Bump this when the output of a callable you
+  # configured changes (a new label, another path) so cached pages are refreshed.
+  # config.cache_version = nil
 end

data/lib/shiplog/classes.rb

@@ -7,9 +7,12 @@ module Shiplog
       page_header: "shiplog-page__header",
       page_title: "shiplog-page__title",
       page_lede: "shiplog-page__lede",
+      switcher: "shiplog-switcher",
+      switcher_link: "shiplog-switcher__link",
       columns: "shiplog-columns",
       column: "shiplog-column",
       column_header: "shiplog-column__header",
+      column_marker: "shiplog-column__marker",
       column_title: "shiplog-column__title",
       column_count: "shiplog-column__count",
       column_description: "shiplog-column__description",
@@ -18,6 +21,16 @@ module Shiplog
       card: "shiplog-card",
       card_title: "shiplog-card__title",
       card_body: "shiplog-card__body",
+      card_meta: "shiplog-card__meta",
+      card_tag: "shiplog-card__tag",
+      shipped: "shiplog-shipped",
+      shipped_title: "shiplog-shipped__title",
+      shipped_list: "shiplog-shipped__list",
+      shipped_item: "shiplog-shipped__item",
+      shipped_date: "shiplog-shipped__date",
+      shipped_link: "shiplog-shipped__link",
+      footnote: "shiplog-footnote",
+      footnote_link: "shiplog-footnote__link",
       months: "shiplog-months",
       month: "shiplog-month",
       month_title: "shiplog-month__title",
@@ -30,7 +43,13 @@ module Shiplog
       entry_date: "shiplog-entry__date",
       pagination: "shiplog-pagination",
       pagination_link: "shiplog-pagination__link",
-      empty: "shiplog-empty"
+      empty: "shiplog-empty",
+      search: "shiplog-search",
+      search_input: "shiplog-search__input",
+      search_button: "shiplog-search__button",
+      search_summary: "shiplog-search__summary",
+      search_clear: "shiplog-search__clear",
+      search_empty: "shiplog-search__empty"
     }.freeze
 
     KEYS = BEM.keys.freeze

data/lib/shiplog/configuration.rb

@@ -1,6 +1,6 @@
 module Shiplog
   class Configuration
-    attr_accessor :repositories, :github_token, :webhook_secret,
+    attr_accessor :github_token, :webhook_secret,
       :public_label, :soon_labels, :excluded_labels, :excluded_authors, :commit_types,
       :rewriter, :product_name, :audience, :tone, :prompt_builder,
       :public_layout, :admin_layout,
@@ -8,9 +8,90 @@ module Shiplog
       :roadmap_path, :changelog_path
 
     ADMIN_CHROMES = %i[standalone hosted].freeze
+    # Segments of only dots ("." and "..") are path traversal, not names.
+    REPOSITORY_NAME = %r{\A(?!\.+/)[\w.-]+/(?!\.+\z)[\w.-]+\z}
+    REPOSITORY_OPTION_KEYS = %i[name changelog gem].freeze
+
+    attr_reader :repositories
+    # Path of the lockfile read in merged pull requests to detect gem upgrades (see config.repositories `gem:`).
+    attr_accessor :lockfile_path
 
     attr_reader :admin_chrome, :classes, :public_parent_controller, :admin_parent_controller
 
+    # Product updates navigation and roadmap options.
+    attr_accessor :feedback_path
+    # Whether the public changelog has a search box and honours ?q= (default true).
+    attr_accessor :changelog_search
+    # Bump it when the output of a callable you configured changes (extra_pages, repository_labels, feedback_path):
+    # callables cannot be part of the ETag, so this is how cached public pages learn about it.
+    attr_accessor :cache_version
+    attr_reader :extra_pages, :repository_labels, :roadmap_shipped_count
+
+    EXTRA_PAGE_KEYS = %i[label path].freeze
+
+    # A path (not "//host", "/\host" or "/ x", which browsers read as other targets), an http(s) URL or mailto:.
+    SAFE_URL = %r{\A(?:/(?![/\\\s])|https?://|mailto:)}i
+
+    # Whether a link target is safe to render: a path, an http(s) URL or a mailto: address.
+    def self.safe_url?(value)
+      value.is_a?(String) && SAFE_URL.match?(value.strip) && !value.match?(/[[:cntrl:]]/)
+    end
+
+    # A digest of everything configured that changes the public markup, stable across processes and servers
+    # (no Object#hash). Callables are represented by a marker; see cache_version.
+    def render_digest
+      stable = ->(value) { value.respond_to?(:call) ? "callable" : value }
+      data = [
+        classes.sort_by { |key, _| key.to_s }.map { |key, value| [ key.to_s, Array(value).map(&:to_s) ] },
+        stylesheet, roadmap_shipped_count, cache_version,
+        extra_pages.map { |page| [ stable.(page[:label]), stable.(page[:path]) ] },
+        repository_labels.sort_by { |name, _| name.to_s }.map { |name, label| [ name, stable.(label) ] },
+        stable.(feedback_path), changelog_search
+      ]
+      Digest::SHA256.hexdigest(JSON.generate(data))
+    end
+
+    # Pages added to the switcher after Roadmap and Changelog: [{ label:, path: }]. Each is a String, or a callable
+    # evaluated in the view (instance_exec), e.g. `path: -> { main_app.news_path }`.
+    def extra_pages=(value)
+      raise ArgumentError, "extra_pages must be an Array of { label:, path: } Hashes, got #{value.inspect}" unless value.nil? || value.is_a?(Array)
+      pages = (value || []).map do |page|
+        raise ArgumentError, "Each extra page must be a Hash with :label and :path, got #{page.inspect}" unless page.is_a?(Hash)
+        page = page.to_h.transform_keys { |key| key.to_s.to_sym }
+        unless page.keys.sort == EXTRA_PAGE_KEYS
+          raise ArgumentError, "An extra page needs exactly the keys :label and :path, got #{page.keys.inspect}"
+        end
+        page.each do |key, item|
+          valid = item.respond_to?(:call) || (item.is_a?(String) && item.present?)
+          raise ArgumentError, "Extra page #{key} must be a non-empty String or a callable, got #{item.inspect}" unless valid
+          if key == :path && item.is_a?(String) && !self.class.safe_url?(item)
+            raise ArgumentError, "Extra page path must be relative (/...), http(s):// or mailto:, got #{item.inspect}"
+          end
+        end
+        { label: page[:label], path: page[:path] }.freeze
+      end
+      @extra_pages = pages.freeze
+    end
+
+    # Display names for repositories on roadmap cards: { "owner/name" => "iPhone & iPad" }. Values are Strings or
+    # callables evaluated in the view.
+    def repository_labels=(value)
+      labels = value.nil? ? {} : value
+      raise ArgumentError, "repository_labels must be a Hash, got #{value.inspect}" unless labels.is_a?(Hash)
+      labels.each do |name, label|
+        unless label.respond_to?(:call) || label.is_a?(String)
+          raise ArgumentError, "repository_labels[#{name.inspect}] must be a String or a callable, got #{label.inspect}"
+        end
+      end
+      @repository_labels = labels.transform_keys(&:to_s).freeze
+    end
+
+    # How many recently shipped changelog entries the roadmap lists; 0 hides the section.
+    def roadmap_shipped_count=(value)
+      raise ArgumentError, "roadmap_shipped_count must be a non-negative Integer, got #{value.inspect}" unless value.is_a?(Integer) && value >= 0
+      @roadmap_shipped_count = value
+    end
+
     # :standalone (default) wraps the admin in Shiplog's own page chrome; :hosted renders it inside the
     # layout of config.admin_layout (compact sub-nav, no page chrome of its own).
     def admin_chrome=(value)
@@ -44,8 +125,17 @@ module Shiplog
       @admin_parent_controller = value
     end
 
+    # Strings ("owner/name") or Hashes: { name:, changelog: true, gem: nil }. `changelog: false` keeps a repository
+    # on the roadmap but never drafts changelog entries from its pull requests or commits. `gem:` is the gem's
+    # name in the host's lockfile.
+    def repositories=(value)
+      warn_double_drafting(normalize_repositories(value))
+      @repositories = value
+    end
+
     def initialize
       @repositories = []
+      @lockfile_path = "Gemfile.lock"
       @public_label = "public"
       @soon_labels = %w[soon]
       @excluded_labels = %w[internal dependencies refactor chore]
@@ -64,6 +154,10 @@ module Shiplog
       @current_admin = ->(controller) { controller.try(:current_user)&.try(:email) }
       @roadmap_path = "roadmap"
       @changelog_path = "changelog"
+      @extra_pages = [].freeze
+      @repository_labels = {}.freeze
+      @roadmap_shipped_count = 4
+      @changelog_search = true
     end
 
     def resolved_github_token
@@ -73,7 +167,27 @@ module Shiplog
     # The configured spelling of a repository name (matched case-insensitively), or nil.
     def repository_configured?(name)
       return if name.blank?
-      repositories.find { |configured| configured.casecmp?(name.to_s) }
+      repository_names.find { |configured| configured.casecmp?(name.to_s) }
+    end
+
+    # Normalised options of every configured repository: [{ name:, changelog:, gem: }].
+    def repository_entries = normalize_repositories(repositories)
+
+    def repository_names = repository_entries.map { |entry| entry[:name] }
+
+    def repository_options(name)
+      return if name.blank?
+      repository_entries.find { |entry| entry[:name].casecmp?(name.to_s) }
+    end
+
+    # False for roadmap-only repositories. Unknown repositories count as changelog sources.
+    def changelog_repository?(name)
+      repository_options(name)&.fetch(:changelog) != false
+    end
+
+    # { "gem name in the lockfile" => "owner/name" } for repositories with `gem:`.
+    def tracked_gems
+      repository_entries.select { |entry| entry[:gem] }.to_h { |entry| [ entry[:gem], entry[:name] ] }
     end
 
     def excluded_author?(login)
@@ -82,6 +196,45 @@ module Shiplog
 
     private
 
+    def normalize_repositories(value)
+      raise ArgumentError, "config.repositories must be an Array, got #{value.inspect}" unless value.is_a?(Array)
+
+      value.map { |item| normalize_repository(item) }
+    end
+
+    # A gem repository that also drafts its own changelog entries announces each change twice: once from its own
+    # pull requests and once from the host's upgrade pull request.
+    def warn_double_drafting(entries)
+      entries.select { |entry| entry[:gem] && entry[:changelog] }.each do |entry|
+        Rails.logger&.warn("[shiplog] Repository #{entry[:name]} has gem: #{entry[:gem].inspect} and changelog: true, so its changes " \
+          "are drafted twice (from its own pull requests and from the host's upgrade pull request). Set changelog: false.")
+      end
+    end
+
+    def normalize_repository(item)
+      return { name: valid_repository_name!(item), changelog: true, gem: nil } if item.is_a?(String) && item.present?
+      raise ArgumentError, "Invalid repository #{item.inspect}: expected \"owner/name\" or a Hash" unless item.is_a?(Hash)
+
+      options = item.transform_keys { |key| key.to_s.to_sym }
+      unknown = options.keys - REPOSITORY_OPTION_KEYS
+      raise ArgumentError, "Unknown repository option(s) #{unknown.map(&:inspect).join(", ")}. Valid: #{REPOSITORY_OPTION_KEYS.map(&:inspect).join(", ")}" if unknown.any?
+
+      name, changelog, gem = options.values_at(:name, :changelog, :gem)
+      changelog = true if changelog.nil?
+      raise ArgumentError, "Repository #{item.inspect} needs a :name (\"owner/name\")" unless name.is_a?(String) && name.present?
+      valid_repository_name!(name)
+      raise ArgumentError, "Repository #{name}: changelog must be true or false" unless [ true, false ].include?(changelog)
+      raise ArgumentError, "Repository #{name}: gem must be a non-empty String" unless gem.nil? || (gem.is_a?(String) && gem.present?)
+
+      { name:, changelog:, gem: }
+    end
+
+    def valid_repository_name!(name)
+      raise ArgumentError, "Invalid repository name #{name.inspect}: expected \"owner/name\"" unless REPOSITORY_NAME.match?(name)
+
+      name
+    end
+
     def ensure_controller_not_loaded!(setting, namespace, name)
       return unless namespace.const_defined?(name, false) && !namespace.autoload?(name)
 

data/lib/shiplog/github/client.rb

@@ -6,6 +6,7 @@ module Shiplog
   module Github
     class Client
       ENDPOINT = URI("https://api.github.com/graphql")
+      REST_ROOT = "https://api.github.com".freeze
       RETRYABLE_STATUSES = [ 502, 503, 504 ].freeze
       NETWORK_ERRORS = [
         Net::OpenTimeout, Net::ReadTimeout, Errno::ECONNRESET, Errno::ECONNREFUSED,
@@ -25,40 +26,72 @@ module Shiplog
         handle(response)
       end
 
+      # REST GET (e.g. "/repos/owner/name/compare/a...b") with the same auth, errors and rate-limit
+      # handling as #query. Returns the parsed JSON body; a 404 raises NotFound.
+      def get(path)
+        raise Error, "No GitHub token configured (Shiplog.config.github_token)" if @token.blank?
+
+        uri = URI("#{REST_ROOT}#{path}")
+        response = perform(retried: false) { build_get(uri) }
+        check_status(response)
+        JSON.parse(response.body)
+      rescue JSON::ParserError
+        raise Error, "GitHub returned an unparseable response"
+      end
+
       private
 
-      def post(payload, retried: false)
-        response = request(payload)
+      def post(payload) = perform(retried: false) { build_request(payload) }
+
+      def perform(retried:, &build)
+        response = request(build.call)
         return response unless RETRYABLE_STATUSES.include?(response.code.to_i) && !retried
 
         sleep @retry_delay
-        post(payload, retried: true)
+        perform(retried: true, &build)
       end
 
-      def request(payload)
-        http = Net::HTTP.new(ENDPOINT.host, ENDPOINT.port)
+      def request(http_request)
+        uri = http_request.uri
+        http = Net::HTTP.new(uri.host, uri.port)
         http.use_ssl = true
         http.open_timeout = 10
         http.read_timeout = 30
-        http.request(build_request(payload))
+        http.request(http_request)
       rescue *NETWORK_ERRORS => error
         raise Transient, "#{error.class}: #{error.message}"
       end
 
       def build_request(payload)
         Net::HTTP::Post.new(ENDPOINT).tap do |req|
-          req["Authorization"] = "Bearer #{@token}"
+          authorize(req)
           req["Content-Type"] = "application/json"
-          req["User-Agent"] = "shiplog/#{Shiplog::VERSION}"
           req.body = payload
         end
       end
 
-      def handle(response)
+      def build_get(uri)
+        Net::HTTP::Get.new(uri).tap do |req|
+          authorize(req)
+          req["Accept"] = "application/vnd.github+json"
+        end
+      end
+
+      def authorize(req)
+        req["Authorization"] = "Bearer #{@token}"
+        req["User-Agent"] = "shiplog/#{Shiplog::VERSION}"
+      end
+
+      def check_status(response)
         status = response.code.to_i
         raise_rate_limited(response) if rate_limited?(response, status)
         raise Transient, "GitHub responded with HTTP #{status}" if status >= 500
+        raise NotFound, "GitHub responded with HTTP 404" if status == 404
         raise Error, "GitHub responded with HTTP #{status}" unless status.between?(200, 299)
+      end
+
+      def handle(response)
+        check_status(response)
 
         body = JSON.parse(response.body)
         errors = body["errors"].to_a

data/lib/shiplog/github/errors.rb

@@ -5,6 +5,9 @@ module Shiplog
     # Network failures and 5xx responses; safe to retry later.
     class Transient < Error; end
 
+    # HTTP 404: the resource does not exist, or the token cannot see it.
+    class NotFound < Error; end
+
     class RateLimited < Error
       attr_reader :reset_at
 

data/lib/shiplog/github/queries.rb

@@ -27,6 +27,9 @@ module Shiplog
       PULL_REQUEST_WITH_ISSUES = <<~GRAPHQL.freeze
         fragment PullRequestWithIssues on PullRequest {
           ...PullRequestFields
+          baseRefOid
+          mergeCommit { oid parents(first: 1) { nodes { oid } } }
+          files(first: 100) { pageInfo { hasNextPage } nodes { path } }
           closingIssuesReferences(first: 20) {
             pageInfo { hasNextPage }
             nodes { id }
@@ -102,7 +105,35 @@ module Shiplog
         }
       GRAPHQL
 
-      ALL = { ISSUES:, PULL_REQUESTS:, ISSUE:, PULL_REQUEST:, COMMITS: }.freeze
+      # A file's text at a commit (`$expression` is "<oid>:<path>"); `object` is null when the file is absent.
+      BLOB_TEXT = <<~GRAPHQL.freeze
+        query($owner: String!, $name: String!, $expression: String!) {
+          repository(owner: $owner, name: $name) {
+            object(expression: $expression) {
+              ... on Blob { text isTruncated }
+            }
+          }
+        }
+      GRAPHQL
+
+      # The pull requests that introduced each commit (`$ids` are commit node ids, at most 100).
+      COMMIT_PULL_REQUESTS = <<~GRAPHQL.freeze
+        query($ids: [ID!]!) {
+          nodes(ids: $ids) {
+            ... on Commit {
+              oid
+              associatedPullRequests(first: 5) {
+                nodes {
+                  number title body url state
+                  repository { nameWithOwner }
+                }
+              }
+            }
+          }
+        }
+      GRAPHQL
+
+      ALL = { ISSUES:, PULL_REQUESTS:, ISSUE:, PULL_REQUEST:, COMMITS:, BLOB_TEXT:, COMMIT_PULL_REQUESTS: }.freeze
     end
   end
 end

data/lib/shiplog/version.rb

@@ -1,3 +1,3 @@
 module Shiplog
-  VERSION = "0.1.0"
+  VERSION = "0.2.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: shiplog
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.2.0
 platform: ruby
 authors:
 - Trackberry
@@ -45,6 +45,7 @@ files:
 - app/controllers/shiplog/admin/entries/discards_controller.rb
 - app/controllers/shiplog/admin/entries/rewrites_controller.rb
 - app/controllers/shiplog/admin/entries_controller.rb
+- app/controllers/shiplog/admin/inbox_filters.rb
 - app/controllers/shiplog/admin/syncs_controller.rb
 - app/controllers/shiplog/application_controller.rb
 - app/controllers/shiplog/changelogs_controller.rb
@@ -54,12 +55,16 @@ files:
 - app/controllers/shiplog/webhooks_controller.rb
 - app/frontend/shiplog/admin.css
 - app/frontend/shiplog/board.js
+- app/frontend/shiplog/inbox.js
 - app/frontend/shiplog/shiplog.css
 - app/helpers/shiplog/admin/entries_helper.rb
 - app/helpers/shiplog/application_helper.rb
+- app/helpers/shiplog/callable_helper.rb
 - app/helpers/shiplog/frontend_helper.rb
 - app/helpers/shiplog/host_routes_helper.rb
+- app/helpers/shiplog/roadmap_helper.rb
 - app/helpers/shiplog/styling_helper.rb
+- app/helpers/shiplog/switcher_helper.rb
 - app/jobs/shiplog/application_job.rb
 - app/jobs/shiplog/refresh_job.rb
 - app/jobs/shiplog/rewrite_entry_job.rb
@@ -75,6 +80,7 @@ files:
 - app/models/shiplog/issue_form.rb
 - app/models/shiplog/issue_link.rb
 - app/models/shiplog/pull_request.rb
+- app/models/shiplog/pull_request_upgrade.rb
 - app/models/shiplog/repository.rb
 - app/models/shiplog/rewriter.rb
 - app/models/shiplog/rewriter/prompt.rb
@@ -85,6 +91,7 @@ files:
 - app/models/shiplog/sync/node_attributes.rb
 - app/models/shiplog/sync/pull_request_importer.rb
 - app/models/shiplog/sync/repository_sync.rb
+- app/models/shiplog/sync/upgrade_detector.rb
 - app/models/shiplog/webhook_delivery.rb
 - app/models/shiplog/webhook_signature.rb
 - app/views/layouts/shiplog/admin.html.erb
@@ -93,6 +100,7 @@ files:
 - app/views/shiplog/_page.html.erb
 - app/views/shiplog/_page_header.html.erb
 - app/views/shiplog/_pagination.html.erb
+- app/views/shiplog/_switcher.html.erb
 - app/views/shiplog/admin/_assets.html.erb
 - app/views/shiplog/admin/_custom_head.html.erb
 - app/views/shiplog/admin/_nav.html.erb
@@ -106,14 +114,17 @@ files:
 - app/views/shiplog/admin/syncs/show.html.erb
 - app/views/shiplog/changelogs/_entry.html.erb
 - app/views/shiplog/changelogs/_month.html.erb
+- app/views/shiplog/changelogs/_search.html.erb
 - app/views/shiplog/changelogs/show.html.erb
 - app/views/shiplog/roadmaps/_card.html.erb
 - app/views/shiplog/roadmaps/_column.html.erb
+- app/views/shiplog/roadmaps/_shipped.html.erb
 - app/views/shiplog/roadmaps/show.html.erb
 - config/admin_routes.rb
 - config/locales/en.yml
 - config/routes.rb
 - db/migrate/20261026000001_create_shiplog_tables.rb
+- db/migrate/20261027000001_create_shiplog_pull_request_upgrades.rb
 - lib/generators/shiplog/install/install_generator.rb
 - lib/generators/shiplog/install/templates/initializer.rb.tt
 - lib/generators/shiplog/install/templates/shiplog-feature.yml