feat: Add Bounties 💸

[raysubham]

What does this PR do?

1. Add /bounty command to create bounties for an issue. Only allows bounty on issues.
2. Whenever a PR gets merged and it has a linked issue, runs checks for the bounty validity and awards bounty if everything is correct.
3. Uses tremendous to dispatch bounty rewards and mails them to the user.
4. Adds a new bounties table to the db.

Fixes #74

Screen.Recording.2024-05-01.at.7.1.mp4

How should this be tested?

• Create a new tremendous sandbox account (https://developers.tremendous.com/docs/1-create-a-sandbox-account) and create a new API key. Also create a new campaign and copy the campaign id. Add these value in the .env file, copy them from the .env.example file.
• Create a issue, then assign a bounty on it. Then from a different GitHub account, raise a PR which mentions the issue in the PR description. Now merge it, the bounty will now be awarded and you will recieve a mail with the reward details.

Checklist

Required

• Filled out the "How to test" section in this PR
• Read How we Code at oss.gg
• Self-reviewed my own code
• Commented on my code in hard-to-understand bits
• Ran pnpm build
• Checked for warnings, there are none
• Removed all console.logs
• Merged the latest changes from main onto my branch with git pull origin main
• My changes don't cause any responsiveness issues

Appreciated

• If a UI change was made: Added a screen recording or screenshots to this PR
• Updated the Formbricks Docs if changes were necessary

[vercel]

@raysubham is attempting to deploy a commit to the formbricks Team on Vercel.

A member of the Team first needs to authorize it.

[github-actions]

Thank you for following the naming conventions for pull request titles! 🙏

[jobenjada]

Hey @raysubham

so cool! Thanks a lot also for the video and great PR description :))

I've applied for a prod API key from Tremendous. Maybe we can use the meanwhile to add a limit to the bounties which can be issued. It makes me a bit nervous to think that someone might exploit this to issue and reward a bunch of bounties to themselves.

The form is there already, can we introduce the max bounty amount?

Would only require the app to check if the /bounty exceeds the max amount and display a corresponding notifier, if it does 🤓

I'm aware that bounties are only paid out if a PR gets merged but it would still let me sleep a bit better 😉

Thanks a ton, this is great!

[raysubham]

Hey @raysubham

so cool! Thanks a lot also for the video and great PR description :))

I've applied for a prod API key from Tremendous. Maybe we can use the meanwhile to add a limit to the bounties which can be issued. It makes me a bit nervous to think that someone might exploit this to issue and reward a bunch of bounties to themselves.

The form is there already, can we introduce the max bounty amount?

Would only require the app to check if the /bounty exceeds the max amount and display a corresponding notifier, if it does 🤓

I'm aware that bounties are only paid out if a PR gets merged but it would still let me sleep a bit better 😉

Thanks a ton, this is great!

Totally agree, We should have proper guardrails in place to avoid exploiting this feature. Additionally, before awarding bounty, we also check whether the PR author is assigned the issue or not.
I'll make the max bounty setting changes by today.

[raysubham]

@jobenjada I have added the max bounty settings. Please review it.

Screen.Recording.2024-05-09.at.10.27.45.PM.mov

[jobenjada]

/award 800

[oss-gg]

Awarding raysubham: 800 points!