From fcc89ed5fcd97d3cac0d1a1fabb36582811b452f Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Mon, 29 Jun 2026 20:52:02 +0000
Subject: [PATCH 1/5] Add "Manage GitHub access" link to the account dropdown

Newly added repositories need the GitHub App granted access before the
app can read/write their issues. Add a "Manage GitHub access" item to the
signed-in user dropdown (next to "Sign out") that opens GitHub's
installed-apps settings (https://github.com/settings/installations),
where repository access for the app can be added or removed.

Tests + 100% coverage + lint all green (966 tests).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019VQjXJyM3EZPd4joy3EwaB
---
 src/github-auth.js        | 6 ++++++
 tests/github-auth.test.js | 9 +++++++++
 2 files changed, 15 insertions(+)

diff --git a/src/github-auth.js b/src/github-auth.js
index e7aba8f..12f9e6f 100644
--- a/src/github-auth.js
+++ b/src/github-auth.js
@@ -184,6 +184,12 @@ function toggleUserDropdown() {
     const dropdown = document.createElement('div');
     dropdown.className = 'user-dropdown absolute right-0 top-full mt-2 w-48 bg-white rounded-lg shadow-lg border border-gray-200 py-1 z-50';
     dropdown.innerHTML = `
+        <a href="https://github.com/settings/installations" target="_blank" rel="noopener noreferrer"
+           class="block px-4 py-2 text-sm text-gray-700 hover:bg-gray-100 flex items-center space-x-2">
+            <i class="fas fa-key text-xs"></i>
+            <span>Manage GitHub access</span>
+        </a>
+        <div class="border-t border-gray-100 my-1"></div>
         <button class="w-full text-left px-4 py-2 text-sm text-gray-700 hover:bg-gray-100 flex items-center space-x-2">
             <i class="fas fa-sign-out-alt text-xs"></i>
             <span>Sign out</span>
diff --git a/tests/github-auth.test.js b/tests/github-auth.test.js
index 81d674e..f243465 100644
--- a/tests/github-auth.test.js
+++ b/tests/github-auth.test.js
@@ -305,6 +305,15 @@ describe('GitHub Authentication (Clerk-only)', () => {
             expect(container.querySelector('.user-dropdown')).toBeNull();
         });
 
+        test('includes a link to manage the GitHub App repository access', () => {
+            window.GitHubAuth.toggleUserDropdown();
+
+            const link = container.querySelector('.user-dropdown a[href="https://github.com/settings/installations"]');
+            expect(link).not.toBeNull();
+            expect(link.getAttribute('target')).toBe('_blank');
+            expect(link.textContent).toContain('Manage GitHub access');
+        });
+
         test('Sign out triggers Clerk sign-out', () => {
             window.ClerkAuth = { signOut: jest.fn() };
             window.GitHubAuth.toggleUserDropdown();

From 555bce2863ad70404bf899e5383e031e26791cd0 Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Mon, 29 Jun 2026 21:14:44 +0000
Subject: [PATCH 2/5] Deep-link account-dropdown access link to the dashban
 GitHub App

Point the "Manage GitHub access" link at the dashban app's installation
target (github.com/apps/dashban/installations/select_target) so it lands
directly on the app's repo selection, instead of the generic installed-apps
list.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019VQjXJyM3EZPd4joy3EwaB
---
 src/github-auth.js        | 2 +-
 tests/github-auth.test.js | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/github-auth.js b/src/github-auth.js
index 12f9e6f..d0de2b1 100644
--- a/src/github-auth.js
+++ b/src/github-auth.js
@@ -184,7 +184,7 @@ function toggleUserDropdown() {
     const dropdown = document.createElement('div');
     dropdown.className = 'user-dropdown absolute right-0 top-full mt-2 w-48 bg-white rounded-lg shadow-lg border border-gray-200 py-1 z-50';
     dropdown.innerHTML = `
-        <a href="https://github.com/settings/installations" target="_blank" rel="noopener noreferrer"
+        <a href="https://github.com/apps/dashban/installations/select_target" target="_blank" rel="noopener noreferrer"
            class="block px-4 py-2 text-sm text-gray-700 hover:bg-gray-100 flex items-center space-x-2">
             <i class="fas fa-key text-xs"></i>
             <span>Manage GitHub access</span>
diff --git a/tests/github-auth.test.js b/tests/github-auth.test.js
index f243465..d313a01 100644
--- a/tests/github-auth.test.js
+++ b/tests/github-auth.test.js
@@ -308,7 +308,7 @@ describe('GitHub Authentication (Clerk-only)', () => {
         test('includes a link to manage the GitHub App repository access', () => {
             window.GitHubAuth.toggleUserDropdown();
 
-            const link = container.querySelector('.user-dropdown a[href="https://github.com/settings/installations"]');
+            const link = container.querySelector('.user-dropdown a[href="https://github.com/apps/dashban/installations/select_target"]');
             expect(link).not.toBeNull();
             expect(link.getAttribute('target')).toBe('_blank');
             expect(link.textContent).toContain('Manage GitHub access');

From 15dadced7cb5c0fd8fdfbf19331f85280603659b Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Mon, 29 Jun 2026 21:29:57 +0000
Subject: [PATCH 3/5] Keep the account-dropdown access link on one line

Widen the user dropdown (w-48 -> w-56) and add whitespace-nowrap so
"Manage GitHub access" no longer wraps to two lines.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019VQjXJyM3EZPd4joy3EwaB
---
 src/github-auth.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/github-auth.js b/src/github-auth.js
index d0de2b1..6148097 100644
--- a/src/github-auth.js
+++ b/src/github-auth.js
@@ -182,10 +182,10 @@ function toggleUserDropdown() {
 
     // Create dropdown
     const dropdown = document.createElement('div');
-    dropdown.className = 'user-dropdown absolute right-0 top-full mt-2 w-48 bg-white rounded-lg shadow-lg border border-gray-200 py-1 z-50';
+    dropdown.className = 'user-dropdown absolute right-0 top-full mt-2 w-56 bg-white rounded-lg shadow-lg border border-gray-200 py-1 z-50';
     dropdown.innerHTML = `
         <a href="https://github.com/apps/dashban/installations/select_target" target="_blank" rel="noopener noreferrer"
-           class="block px-4 py-2 text-sm text-gray-700 hover:bg-gray-100 flex items-center space-x-2">
+           class="px-4 py-2 text-sm text-gray-700 hover:bg-gray-100 flex items-center space-x-2 whitespace-nowrap">
             <i class="fas fa-key text-xs"></i>
             <span>Manage GitHub access</span>
         </a>

From 3905c36e6a6e732cc6ffdcfaf18b8c52bc9f7407 Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Mon, 29 Jun 2026 21:40:47 +0000
Subject: [PATCH 4/5] Point the access link at the dashban app page

select_target dumped the user on GitHub's account-picker. Link to the
app's page (github.com/apps/dashban) instead; one Configure click opens
the repo-access settings. (A static link can't reach the per-install
repo-access page directly without the installation id.)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019VQjXJyM3EZPd4joy3EwaB
---
 src/github-auth.js        | 2 +-
 tests/github-auth.test.js | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/github-auth.js b/src/github-auth.js
index 6148097..bde8c3c 100644
--- a/src/github-auth.js
+++ b/src/github-auth.js
@@ -184,7 +184,7 @@ function toggleUserDropdown() {
     const dropdown = document.createElement('div');
     dropdown.className = 'user-dropdown absolute right-0 top-full mt-2 w-56 bg-white rounded-lg shadow-lg border border-gray-200 py-1 z-50';
     dropdown.innerHTML = `
-        <a href="https://github.com/apps/dashban/installations/select_target" target="_blank" rel="noopener noreferrer"
+        <a href="https://github.com/apps/dashban" target="_blank" rel="noopener noreferrer"
            class="px-4 py-2 text-sm text-gray-700 hover:bg-gray-100 flex items-center space-x-2 whitespace-nowrap">
             <i class="fas fa-key text-xs"></i>
             <span>Manage GitHub access</span>
diff --git a/tests/github-auth.test.js b/tests/github-auth.test.js
index d313a01..20e1fc7 100644
--- a/tests/github-auth.test.js
+++ b/tests/github-auth.test.js
@@ -308,7 +308,7 @@ describe('GitHub Authentication (Clerk-only)', () => {
         test('includes a link to manage the GitHub App repository access', () => {
             window.GitHubAuth.toggleUserDropdown();
 
-            const link = container.querySelector('.user-dropdown a[href="https://github.com/apps/dashban/installations/select_target"]');
+            const link = container.querySelector('.user-dropdown a[href="https://github.com/apps/dashban"]');
             expect(link).not.toBeNull();
             expect(link.getAttribute('target')).toBe('_blank');
             expect(link.textContent).toContain('Manage GitHub access');

From b48e88ac0922f850ba393261f8956f644c1c3a32 Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Tue, 30 Jun 2026 14:27:24 +0000
Subject: [PATCH 5/5] Make "Manage GitHub access" a true one-click link to the
 repo settings
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Look up the user's dashban installation id (GET /user/installations via
the existing authenticated proxy) and point the link straight at
github.com/settings/installations/<id> — the page that lands directly on
the app's repository access. The result is cached after the first lookup;
until it resolves (or if the lookup fails / there's no install) the link
falls back to the app's page. No new backend endpoint — it reuses the
GitHub proxy.

Also switch the github-auth test's module reset to jest.resetModules();
the previous delete-require.cache was a no-op under Jest, which let
module-level state leak between tests.

Tests + 100% coverage + lint all green (973 tests).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019VQjXJyM3EZPd4joy3EwaB
---
 src/github-auth.js        | 44 ++++++++++++++++++--
 tests/github-auth.test.js | 85 +++++++++++++++++++++++++++++++++++++--
 2 files changed, 123 insertions(+), 6 deletions(-)

diff --git a/src/github-auth.js b/src/github-auth.js
index bde8c3c..bd8036a 100644
--- a/src/github-auth.js
+++ b/src/github-auth.js
@@ -12,7 +12,8 @@
 const GITHUB_CONFIG = {
     apiBaseUrl: 'https://api.github.com',
     owner: 'super3',
-    repo: 'dashban'
+    repo: 'dashban',
+    appSlug: 'dashban'
 };
 
 // Origin of the backend API. The frontend can be served three ways:
@@ -72,6 +73,36 @@ async function githubFetch(path, options = {}) {
     return fetch(url, { ...options, headers });
 }
 
+// "Manage GitHub access" deep link. GitHub's only page that lands directly on an
+// app's repository access is /settings/installations/<installation-id>, and that
+// id is unique to each user's installation — it can't be hardcoded. So we look it
+// up once (via the authenticated proxy: GET /user/installations) and cache it,
+// falling back to the app's public page until/unless the lookup succeeds.
+const MANAGE_ACCESS_FALLBACK_URL = `https://github.com/apps/${GITHUB_CONFIG.appSlug}`;
+let manageAccessUrl = MANAGE_ACCESS_FALLBACK_URL;
+
+async function refreshManageAccessUrl() {
+    // Already resolved to a real installation, or no session to look it up with.
+    if (manageAccessUrl !== MANAGE_ACCESS_FALLBACK_URL || !isGitHubAuthed()) {
+        return manageAccessUrl;
+    }
+    try {
+        const response = await githubFetch('/user/installations');
+        if (response.ok) {
+            const data = await response.json();
+            const installation = (data.installations || []).find(
+                (entry) => entry.app_slug === GITHUB_CONFIG.appSlug
+            );
+            if (installation) {
+                manageAccessUrl = `https://github.com/settings/installations/${installation.id}`;
+            }
+        }
+    } catch {
+        // Network/parse error — keep the fallback URL.
+    }
+    return manageAccessUrl;
+}
+
 // Initialize auth UI. Clerk (clerk-auth.js, kicked off by github.js) drives the
 // actual sign-in and calls back into updateGitHubSignInUI() when the session
 // changes; here we just render the initial signed-out state.
@@ -184,7 +215,7 @@ function toggleUserDropdown() {
     const dropdown = document.createElement('div');
     dropdown.className = 'user-dropdown absolute right-0 top-full mt-2 w-56 bg-white rounded-lg shadow-lg border border-gray-200 py-1 z-50';
     dropdown.innerHTML = `
-        <a href="https://github.com/apps/dashban" target="_blank" rel="noopener noreferrer"
+        <a id="manage-github-access" href="${manageAccessUrl}" target="_blank" rel="noopener noreferrer"
            class="px-4 py-2 text-sm text-gray-700 hover:bg-gray-100 flex items-center space-x-2 whitespace-nowrap">
             <i class="fas fa-key text-xs"></i>
             <span>Manage GitHub access</span>
@@ -213,6 +244,12 @@ function toggleUserDropdown() {
     }, 0);
 
     container.appendChild(dropdown);
+
+    // Look up the user's exact installation and upgrade the access link in place
+    // (and cache it, so the next open renders the direct link immediately).
+    refreshManageAccessUrl().then((url) => {
+        dropdown.querySelector('#manage-github-access').setAttribute('href', url);
+    });
 }
 
 // Function to update the header with repo name
@@ -247,5 +284,6 @@ window.GitHubAuth = {
 
     // UI functions
     toggleUserDropdown,
-    updateHeaderRepoName
+    updateHeaderRepoName,
+    refreshManageAccessUrl
 };
diff --git a/tests/github-auth.test.js b/tests/github-auth.test.js
index 20e1fc7..2b09a44 100644
--- a/tests/github-auth.test.js
+++ b/tests/github-auth.test.js
@@ -27,7 +27,7 @@ describe('GitHub Authentication (Clerk-only)', () => {
         document.body.appendChild(container);
 
         delete window.ClerkAuth;
-        delete require.cache[require.resolve('../src/github-auth.js')];
+        jest.resetModules();
         require('../src/github-auth.js');
 
         // Start signed out.
@@ -305,15 +305,31 @@ describe('GitHub Authentication (Clerk-only)', () => {
             expect(container.querySelector('.user-dropdown')).toBeNull();
         });
 
-        test('includes a link to manage the GitHub App repository access', () => {
+        test('includes a Manage GitHub access link (app page by default)', () => {
             window.GitHubAuth.toggleUserDropdown();
 
-            const link = container.querySelector('.user-dropdown a[href="https://github.com/apps/dashban"]');
+            const link = container.querySelector('.user-dropdown #manage-github-access');
             expect(link).not.toBeNull();
+            expect(link.getAttribute('href')).toBe('https://github.com/apps/dashban');
             expect(link.getAttribute('target')).toBe('_blank');
             expect(link.textContent).toContain('Manage GitHub access');
         });
 
+        test('upgrades the access link to the exact installation page once resolved', async () => {
+            window.ClerkAuth = { getToken: jest.fn().mockResolvedValue('jwt') };
+            global.fetch = jest.fn().mockResolvedValue({
+                ok: true,
+                json: async () => ({ installations: [{ app_slug: 'dashban', id: 9999 }] })
+            });
+
+            window.GitHubAuth.toggleUserDropdown();
+            // Let refreshManageAccessUrl()'s promise and the in-place href update settle.
+            await new Promise((resolve) => setTimeout(resolve, 0));
+
+            const link = container.querySelector('.user-dropdown #manage-github-access');
+            expect(link.getAttribute('href')).toBe('https://github.com/settings/installations/9999');
+        });
+
         test('Sign out triggers Clerk sign-out', () => {
             window.ClerkAuth = { signOut: jest.fn() };
             window.GitHubAuth.toggleUserDropdown();
@@ -348,6 +364,69 @@ describe('GitHub Authentication (Clerk-only)', () => {
         });
     });
 
+    describe('refreshManageAccessUrl', () => {
+        const FALLBACK = 'https://github.com/apps/dashban';
+
+        test('returns the app-page fallback when signed out', async () => {
+            await expect(window.GitHubAuth.refreshManageAccessUrl()).resolves.toBe(FALLBACK);
+        });
+
+        test('resolves to the exact installation settings page when found', async () => {
+            signInClerk();
+            window.ClerkAuth = { getToken: jest.fn().mockResolvedValue('jwt') };
+            global.fetch = jest.fn().mockResolvedValue({
+                ok: true,
+                json: async () => ({ installations: [{ app_slug: 'other', id: 1 }, { app_slug: 'dashban', id: 42 }] })
+            });
+
+            const url = await window.GitHubAuth.refreshManageAccessUrl();
+
+            expect(url).toBe('https://github.com/settings/installations/42');
+            expect(global.fetch).toHaveBeenCalledWith(
+                '/api/github/user/installations',
+                expect.objectContaining({ headers: expect.objectContaining({ Authorization: 'Bearer jwt' }) })
+            );
+        });
+
+        test('keeps the fallback when the dashban installation is not in the list', async () => {
+            signInClerk();
+            window.ClerkAuth = { getToken: jest.fn().mockResolvedValue('jwt') };
+            global.fetch = jest.fn().mockResolvedValue({ ok: true, json: async () => ({}) });
+
+            await expect(window.GitHubAuth.refreshManageAccessUrl()).resolves.toBe(FALLBACK);
+        });
+
+        test('keeps the fallback when the request is not ok', async () => {
+            signInClerk();
+            window.ClerkAuth = { getToken: jest.fn().mockResolvedValue('jwt') };
+            global.fetch = jest.fn().mockResolvedValue({ ok: false });
+
+            await expect(window.GitHubAuth.refreshManageAccessUrl()).resolves.toBe(FALLBACK);
+        });
+
+        test('keeps the fallback when the request throws', async () => {
+            signInClerk();
+            window.ClerkAuth = { getToken: jest.fn().mockResolvedValue('jwt') };
+            global.fetch = jest.fn().mockRejectedValue(new Error('network'));
+
+            await expect(window.GitHubAuth.refreshManageAccessUrl()).resolves.toBe(FALLBACK);
+        });
+
+        test('caches the resolved URL and does not look it up again', async () => {
+            signInClerk();
+            window.ClerkAuth = { getToken: jest.fn().mockResolvedValue('jwt') };
+            global.fetch = jest.fn().mockResolvedValue({
+                ok: true,
+                json: async () => ({ installations: [{ app_slug: 'dashban', id: 7 }] })
+            });
+
+            await window.GitHubAuth.refreshManageAccessUrl();
+            await window.GitHubAuth.refreshManageAccessUrl();
+
+            expect(global.fetch).toHaveBeenCalledTimes(1);
+        });
+    });
+
     describe('updateHeaderRepoName', () => {
         test('writes the repo name into the header', () => {
             document.getElementById('repo-name').textContent = 'stale';