feat(web): add author filter to commit history view

The history subheader gets an "All users" dropdown that filters commits
by author. The top 100 authors (by commit count) are fetched via
listCommitAuthors and shown in a Popover + cmdk Command list with a
search input, checkmark on the selected author, and a "View commits for
all users" footer to clear. A "Filter on author <input>" row appears at
the top whenever search is non-empty, acting as an escape valve for
authors outside the top 100.

The filter survives pagination by threading the author query param
through CommitsPagination. Duplicate entries from the same email (git
shortlog groups by full author string, so name-variant spellings split
into multiple rows) are collapsed client-side with the name variant
having the most commits winning as canonical.

Document listCommits's --author and --grep as POSIX BRE regex and move
the literal-escape responsibility onto the caller; CommitsPanel escapes
the selected author via a BRE-safe helper before passing to git.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: brendan-kellam

docs/api-reference/sourcebot-public.openapi.json

@@ -1757,10 +1757,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "Filter commits by message content (case-insensitive)."
+              "description": "Filter commits by message content (case-insensitive). Interpreted as a POSIX BRE regex — escape metacharacters for literal matching."
             },
             "required": false,
-            "description": "Filter commits by message content (case-insensitive).",
+            "description": "Filter commits by message content (case-insensitive). Interpreted as a POSIX BRE regex — escape metacharacters for literal matching.",
             "name": "query",
             "in": "query"
           },
@@ -1787,10 +1787,10 @@
           {
             "schema": {
               "type": "string",
-              "description": "Filter commits by author name or email (case-insensitive)."
+              "description": "Filter commits by author name or email (case-insensitive). Interpreted as a POSIX BRE regex — escape metacharacters for literal matching."
             },
             "required": false,
-            "description": "Filter commits by author name or email (case-insensitive).",
+            "description": "Filter commits by author name or email (case-insensitive). Interpreted as a POSIX BRE regex — escape metacharacters for literal matching.",
             "name": "author",
             "in": "query"
           },

packages/web/src/app/(app)/browse/[...path]/components/authorFilter.tsx

@@ -0,0 +1,169 @@
+'use client';
+
+import { useCallback, useEffect, useMemo, useState } from "react";
+import { useRouter, usePathname, useSearchParams } from "next/navigation";
+import { Check, ChevronDown, Users } from "lucide-react";
+import { Button } from "@/components/ui/button";
+import {
+    Command,
+    CommandInput,
+    CommandItem,
+    CommandList,
+    CommandSeparator,
+} from "@/components/ui/command";
+import {
+    Popover,
+    PopoverContent,
+    PopoverTrigger,
+} from "@/components/ui/popover";
+import { UserAvatar } from "@/components/userAvatar";
+import { cn } from "@/lib/utils";
+import type { CommitAuthor } from "@/features/git";
+
+interface AuthorFilterProps {
+    authors: CommitAuthor[];
+    selectedAuthor?: string;
+}
+
+export const AuthorFilter = ({ authors, selectedAuthor }: AuthorFilterProps) => {
+    const router = useRouter();
+    const pathname = usePathname();
+    const searchParams = useSearchParams();
+
+    const [isOpen, setIsOpen] = useState(false);
+    const [search, setSearch] = useState('');
+
+    // Reset the search input when the popover (re)opens, so stale text from a
+    // prior session doesn't appear. Intentionally does NOT fire on close —
+    // mid-close re-renders race with Radix's close animation and cause the
+    // flash-open-then-close behavior.
+    useEffect(() => {
+        if (isOpen) {
+            setSearch('');
+        }
+    }, [isOpen]);
+
+    const selectedAuthorDisplay = useMemo(() => {
+        if (!selectedAuthor) {
+            return undefined;
+        }
+        const key = selectedAuthor.toLowerCase();
+        return authors.find((a) => a.email.toLowerCase() === key);
+    }, [authors, selectedAuthor]);
+
+    const filteredAuthors = useMemo(() => {
+        const term = search.trim().toLowerCase();
+        if (term.length === 0) {
+            return authors;
+        }
+        return authors.filter(
+            (a) =>
+                a.name.toLowerCase().includes(term) ||
+                a.email.toLowerCase().includes(term),
+        );
+    }, [authors, search]);
+
+    const navigateWithAuthor = useCallback((author: string | null) => {
+        const params = new URLSearchParams(searchParams);
+        if (author === null) {
+            params.delete('author');
+        } else {
+            params.set('author', author);
+        }
+        params.delete('page');
+        const query = params.toString();
+        // Close the popover before kicking off navigation so the close render
+        // commits cleanly; the search reset is deferred to the next open.
+        setIsOpen(false);
+        router.push(`${pathname}${query ? `?${query}` : ''}`);
+    }, [pathname, router, searchParams]);
+
+    const buttonLabel = selectedAuthor
+        ? selectedAuthorDisplay?.name ?? selectedAuthor
+        : 'All users';
+
+    return (
+        <Popover open={isOpen} onOpenChange={setIsOpen}>
+            <PopoverTrigger asChild>
+                <Button
+                    variant="outline"
+                    size="sm"
+                    className="h-8 gap-2 flex-shrink-0"
+                    aria-label="Filter by author"
+                >
+                    {selectedAuthorDisplay ? (
+                        <UserAvatar
+                            email={selectedAuthorDisplay.email}
+                            className="h-5 w-5 flex-shrink-0"
+                        />
+                    ) : (
+                        <Users className="h-4 w-4 flex-shrink-0" />
+                    )}
+                    <span className="text-sm truncate max-w-[160px]">{buttonLabel}</span>
+                    <ChevronDown className="h-3 w-3 flex-shrink-0 text-muted-foreground" />
+                </Button>
+            </PopoverTrigger>
+            <PopoverContent className="w-[320px] p-0" align="start">
+                <Command shouldFilter={false}>
+                    <CommandInput
+                        placeholder="Find a user..."
+                        value={search}
+                        onValueChange={setSearch}
+                    />
+                    <CommandList>
+                        {search.trim().length > 0 && (
+                            <CommandItem
+                                value={`__filter_${search}`}
+                                onSelect={() => navigateWithAuthor(search.trim())}
+                                className="cursor-pointer"
+                            >
+                                <span>
+                                    Filter on author <strong>{search.trim()}</strong>
+                                </span>
+                            </CommandItem>
+                        )}
+                        {filteredAuthors.map((a) => {
+                            const isSelected =
+                                !!selectedAuthor &&
+                                a.email.toLowerCase() === selectedAuthor.toLowerCase();
+                            return (
+                                <CommandItem
+                                    key={a.email}
+                                    value={a.email}
+                                    onSelect={() => navigateWithAuthor(a.email)}
+                                    className="cursor-pointer"
+                                >
+                                    <Check
+                                        className={cn(
+                                            "h-4 w-4 flex-shrink-0",
+                                            isSelected ? "opacity-100" : "opacity-0",
+                                        )}
+                                    />
+                                    <UserAvatar
+                                        email={a.email}
+                                        className="h-5 w-5 flex-shrink-0"
+                                    />
+                                    <span className="truncate font-medium">{a.name}</span>
+                                </CommandItem>
+                            );
+                        })}
+                    </CommandList>
+                    {selectedAuthor && (
+                        <>
+                            <CommandSeparator />
+                            <div className="p-1">
+                                <CommandItem
+                                    value="__clear"
+                                    onSelect={() => navigateWithAuthor(null)}
+                                    className="cursor-pointer justify-center text-primary"
+                                >
+                                    View commits for all users
+                                </CommandItem>
+                            </div>
+                        </>
+                    )}
+                </Command>
+            </PopoverContent>
+        </Popover>
+    );
+};

packages/web/src/app/(app)/browse/[...path]/components/commitAuthors.ts

@@ -1,4 +1,4 @@
-import type { Commit } from "@/features/git";
+import type { Commit, CommitAuthor } from "@/features/git";
 
 export type Author = { name: string; email: string };
 
@@ -28,6 +28,46 @@ export const getCommitAuthors = (commit: Commit): Author[] => {
     });
 };
 
+/**
+ * Collapses rows with the same lowercased email into a single entry.
+ * git shortlog groups by full author string (name + email), so one person
+ * who committed under multiple name spellings appears as multiple rows.
+ * The canonical name picked is the one with the most commits; counts are
+ * summed. Result is resorted by commitCount descending.
+ */
+export const dedupeCommitAuthorsByEmail = (authors: CommitAuthor[]): CommitAuthor[] => {
+    type Accum = CommitAuthor & { bestNameCount: number };
+    const byEmail = new Map<string, Accum>();
+    for (const a of authors) {
+        const key = a.email.toLowerCase();
+        const existing = byEmail.get(key);
+        if (!existing) {
+            byEmail.set(key, { ...a, bestNameCount: a.commitCount });
+        } else {
+            existing.commitCount += a.commitCount;
+            if (a.commitCount > existing.bestNameCount) {
+                existing.name = a.name;
+                existing.email = a.email;
+                existing.bestNameCount = a.commitCount;
+            }
+        }
+    }
+    return Array.from(byEmail.values())
+        .map(({ name, email, commitCount }) => ({ name, email, commitCount }))
+        .sort((a, b) => b.commitCount - a.commitCount);
+};
+
+/**
+ * Escapes a literal string so it matches verbatim under git's default regex
+ * (POSIX BRE with GNU extensions, used by `git log --author` and `--grep`).
+ *
+ * BRE treats `. [ ] ^ $ *` as metacharacters; `+ ? | ( ) { }` are literal
+ * in BRE (their `\` forms are the GNU extensions with meta meaning), so we
+ * do NOT escape them here.
+ */
+export const escapeGitBreLiteral = (s: string): string =>
+    s.replace(/[.[\]^$*\\]/g, '\\$&');
+
 export const formatAuthorsText = (authors: Author[]): string => {
     if (authors.length === 1) {
         return authors[0].name;

packages/web/src/app/(app)/browse/[...path]/components/commitsPagination.tsx

@@ -6,9 +6,23 @@ interface CommitsPaginationProps {
     page: number;
     perPage: number;
     totalCount: number;
+    extraParams?: Record<string, string | undefined>;
 }
 
-export const CommitsPagination = ({ page, perPage, totalCount }: CommitsPaginationProps) => {
+const buildHref = (page: number, extraParams?: Record<string, string | undefined>) => {
+    const params = new URLSearchParams();
+    params.set('page', String(page));
+    if (extraParams) {
+        for (const [key, value] of Object.entries(extraParams)) {
+            if (value !== undefined && value !== '') {
+                params.set(key, value);
+            }
+        }
+    }
+    return `?${params.toString()}`;
+};
+
+export const CommitsPagination = ({ page, perPage, totalCount, extraParams }: CommitsPaginationProps) => {
     const hasPrev = page > 1;
     const hasNext = page * perPage < totalCount;
 
@@ -22,7 +36,7 @@ export const CommitsPagination = ({ page, perPage, totalCount }: CommitsPaginati
     return (
         <div className="flex flex-row items-center justify-center gap-6 py-6">
             {hasPrev ? (
-                <Link href={`?page=${page - 1}`} className={linkClass}>
+                <Link href={buildHref(page - 1, extraParams)} className={linkClass}>
                     <ChevronLeft className="h-4 w-4" />
                     Previous
                 </Link>
@@ -33,7 +47,7 @@ export const CommitsPagination = ({ page, perPage, totalCount }: CommitsPaginati
                 </span>
             )}
             {hasNext ? (
-                <Link href={`?page=${page + 1}`} className={linkClass}>
+                <Link href={buildHref(page + 1, extraParams)} className={linkClass}>
                     Next
                     <ChevronRight className="h-4 w-4" />
                 </Link>