Skip to content
Sign in

flagon-io/g1t

public
0

g1t/services/identity/src/workspaces.rs

380 lines14,510 bytesCodeBlame

Pick any line to see why it is the way it is: the commit, the pull request and issue it came from, and what the agent was thinking.

Workspaces own repositories1//! Workspaces and their members.
2//!
3//! A workspace owns repositories and is the first segment of their URLs.
4//! There is one kind: a person's own space and a company's differ only in
5//! how many members they have. Nothing can be created outside one.
6
Invite-only launch: sign in with GitHub, repository access and lifecycle, many emails, a new look7use g1t_contracts::access::BasePermission;
Workspaces own repositories8use g1t_contracts::identity::*;
Merge branch 'worktree-agent-ad7c6d88d93adc817'9use g1t_contracts::teams::TeamCreation;
Workspaces own repositories10use g1t_contracts::time::rfc3339;
Agents as a team: lifecycle, merge queue, billing and a new shell11use g1t_contracts::{
g1t is one name: its agent's work, commits and comments show as @g1t, and nobody can claim g1t or g1t-agent12 FailureCode, Membership, Outcome, PrincipalKind, Role, User, claimable_namespace, new_id,
Agents as a team: lifecycle, merge queue, billing and a new shell13};
Workspaces own repositories14use g1t_kit::now_ms;
15use serde::Deserialize;
16use worker::Result;
17
18use crate::Identity;
19
20/// Enough for a person and their teams; stops one account claiming names in
21/// bulk.
22const MAX_WORKSPACES_PER_USER: usize = 10;
23
Agents as a team: lifecycle, merge queue, billing and a new shell24const MAX_NAME_LENGTH: usize = 80;
25const MAX_DESCRIPTION_LENGTH: usize = 160;
26
Workspaces own repositories27const WORKSPACE_COLUMNS: &str = "workspaces.id, workspaces.slug, workspaces.name,
Merge branch 'worktree-agent-ad7c6d88d93adc817'28 workspaces.description, workspaces.avatar, workspaces.created_at, workspaces.base_permission, workspaces.team_creation,
Workspaces own repositories29 (SELECT count(*) FROM workspace_members
30 WHERE workspace_members.workspace_id = workspaces.id) AS member_count";
31
32#[derive(Deserialize)]
33struct WorkspaceRow {
34 id: String,
35 slug: String,
36 name: String,
Agents as a team: lifecycle, merge queue, billing and a new shell37 description: Option<String>,
Workspace names and icons, and a component kit for every control38 avatar: Option<String>,
Workspaces own repositories39 created_at: String,
40 member_count: u32,
Invite-only launch: sign in with GitHub, repository access and lifecycle, many emails, a new look41 #[serde(default)]
42 base_permission: Option<String>,
Merge branch 'worktree-agent-ad7c6d88d93adc817'43 #[serde(default)]
44 team_creation: Option<String>,
Workspaces own repositories45}
46
47impl From<WorkspaceRow> for Workspace {
48 fn from(row: WorkspaceRow) -> Self {
49 Workspace {
50 id: row.id,
51 slug: row.slug,
52 name: row.name,
Agents as a team: lifecycle, merge queue, billing and a new shell53 description: row.description,
Workspaces own repositories54 created_at: row.created_at,
55 member_count: row.member_count,
Workspace names and icons, and a component kit for every control56 avatar: row.avatar,
Invite-only launch: sign in with GitHub, repository access and lifecycle, many emails, a new look57 base_permission: row
58 .base_permission
59 .as_deref()
60 .and_then(BasePermission::parse)
61 .unwrap_or_default(),
Merge branch 'worktree-agent-ad7c6d88d93adc817'62 team_creation: row
63 .team_creation
64 .as_deref()
65 .and_then(TeamCreation::parse)
66 .unwrap_or_default(),
Workspaces own repositories67 }
68 }
69}
70
71#[derive(Deserialize)]
72struct MemberRow {
73 username: String,
74 role: Role,
Invite-only launch: sign in with GitHub, repository access and lifecycle, many emails, a new look75 #[serde(default)]
76 name: Option<String>,
77 #[serde(default)]
78 avatar: Option<String>,
Workspaces own repositories79}
80
81impl Identity {
82 /// The workspaces a user belongs to, attached to every user resolved
Invite-only launch: sign in with GitHub, repository access and lifecycle, many emails, a new look83 /// from credentials, with what the site needs to show each one and
84 /// what members get on its repositories (access.rs).
Workspaces own repositories85 pub async fn memberships(&self, user_id: &str) -> Result<Vec<Membership>> {
86 self.db
87 .prepare(
Workspace names and icons, and a component kit for every control88 "SELECT workspaces.slug, workspace_members.role, workspaces.name,
Merge branch 'worktree-agent-ad7c6d88d93adc817'89 workspaces.avatar, workspaces.base_permission, workspaces.team_creation
Workspace names and icons, and a component kit for every control90 FROM workspace_members
Workspaces own repositories91 JOIN workspaces ON workspaces.id = workspace_members.workspace_id
Packages, with a container registry on g1t.sh; workspaces deleted whole and kept 30 days; Members for every member92 WHERE workspace_members.user_id = ? AND workspaces.deleted_at IS NULL
93 ORDER BY workspaces.slug",
Workspaces own repositories94 )
95 .bind(&[user_id.into()])?
96 .all()
97 .await?
98 .results::<Membership>()
99 }
100
101 pub async fn create_workspace(&self, a: CreateWorkspaceArgs) -> Result<Outcome<Workspace>> {
Agents as a team: lifecycle, merge queue, billing and a new shell102 if a.user.kind != PrincipalKind::User {
103 return Ok(Outcome::fail(
104 FailureCode::Forbidden,
105 "A workspace's access token cannot create workspaces. Sign in as a person.",
106 ));
107 }
Workspaces own repositories108 if !a.user.verified {
109 return Ok(Outcome::fail(
110 FailureCode::Forbidden,
111 "Confirm your email address before creating a workspace.",
112 ));
113 }
g1t is one name: its agent's work, commits and comments show as @g1t, and nobody can claim g1t or g1t-agent114 let Some(slug) = claimable_namespace(&a.slug) else {
Workspaces own repositories115 return Ok(Outcome::fail(
116 FailureCode::Invalid,
g1t is one name: its agent's work, commits and comments show as @g1t, and nobody can claim g1t or g1t-agent117 "Workspace names use lowercase letters, digits and single hyphens, up to 39 characters, and cannot be a reserved word.",
Workspaces own repositories118 ));
g1t is one name: its agent's work, commits and comments show as @g1t, and nobody can claim g1t or g1t-agent119 };
Workspaces own repositories120 if self.memberships(&a.user.id).await?.len() >= MAX_WORKSPACES_PER_USER {
121 return Ok(Outcome::fail(
122 FailureCode::Conflict,
123 "You belong to the maximum number of workspaces.",
124 ));
125 }
Agents as a team: lifecycle, merge queue, billing and a new shell126 // Usernames and workspaces share one namespace: a person's username
127 // is theirs to use for a workspace, and nobody else's.
128 let someone_elses_username = self
129 .db
130 .prepare("SELECT id FROM users WHERE username = ? AND id != ?")
131 .bind(&[slug.as_str().into(), a.user.id.as_str().into()])?
132 .first::<serde_json::Value>(None)
Workspaces own repositories133 .await?
Agents as a team: lifecycle, merge queue, billing and a new shell134 .is_some();
135 if someone_elses_username
Packages, with a container registry on g1t.sh; workspaces deleted whole and kept 30 days; Members for every member136 // A deleted workspace still holds its slug until it is purged.
137 || self.slug_in_use(&slug).await?
Agents and memory, checks and conflicts, profiles, slug renames, custom domains138 // A renamed workspace's old slug stays reserved for it a while.
139 || self.slug_held(&slug).await?
Invite-only launch: sign in with GitHub, repository access and lifecycle, many emails, a new look140 // A deleted workspace's slug is never given to anyone else; the
141 // person whose username it is may use it again.
142 || (self.slug_deleted(&slug).await?
143 && !crate::deletion::may_reclaim(&slug, &a.user.username))
Workspaces own repositories144 {
145 return Ok(Outcome::fail(
146 FailureCode::Conflict,
147 "That workspace name is taken.",
148 ));
149 }
150 let now = now_ms();
151 let workspace = Workspace {
152 id: new_id("wsp", now),
153 name: match a.name.trim() {
154 "" => slug.clone(),
Agents as a team: lifecycle, merge queue, billing and a new shell155 name => name.chars().take(MAX_NAME_LENGTH).collect(),
Workspaces own repositories156 },
Agents as a team: lifecycle, merge queue, billing and a new shell157 description: None,
Workspaces own repositories158 slug,
159 created_at: rfc3339(now),
160 member_count: 1,
Workspace names and icons, and a component kit for every control161 avatar: None,
Invite-only launch: sign in with GitHub, repository access and lifecycle, many emails, a new look162 base_permission: BasePermission::default(),
Merge branch 'worktree-agent-ad7c6d88d93adc817'163 team_creation: TeamCreation::default(),
Workspaces own repositories164 };
165 self.db
166 .batch(vec![
167 self.db
168 .prepare(
169 "INSERT INTO workspaces (id, slug, name, created_by, created_at)
170 VALUES (?, ?, ?, ?, ?)",
171 )
172 .bind(&[
173 workspace.id.as_str().into(),
174 workspace.slug.as_str().into(),
175 workspace.name.as_str().into(),
176 a.user.id.as_str().into(),
177 workspace.created_at.as_str().into(),
178 ])?,
179 self.db
180 .prepare(
181 "INSERT INTO workspace_members (workspace_id, user_id, role, created_at)
182 VALUES (?, ?, 'owner', ?)",
183 )
184 .bind(&[
185 workspace.id.as_str().into(),
186 a.user.id.as_str().into(),
187 workspace.created_at.as_str().into(),
188 ])?,
189 ])
190 .await?;
Invite-only launch: sign in with GitHub, repository access and lifecycle, many emails, a new look191 self.forget_deleted(&workspace.slug).await?;
Workspaces own repositories192 Ok(Outcome::Ok(workspace))
193 }
194
195 pub async fn get_workspace(&self, a: SlugArgs) -> Result<Option<Workspace>> {
196 Ok(self
197 .db
198 .prepare(format!(
Packages, with a container registry on g1t.sh; workspaces deleted whole and kept 30 days; Members for every member199 "SELECT {WORKSPACE_COLUMNS} FROM workspaces WHERE slug = ? AND deleted_at IS NULL"
Workspaces own repositories200 ))
201 .bind(&[a.slug.to_lowercase().into()])?
202 .first::<WorkspaceRow>(None)
203 .await?
204 .map(Workspace::from))
205 }
206
Agents as a team: lifecycle, merge queue, billing and a new shell207 pub async fn update_workspace(&self, a: UpdateWorkspaceArgs) -> Result<Outcome<Workspace>> {
208 let slug = a.slug.to_lowercase();
209 if a.actor.kind != PrincipalKind::User || a.actor.role_in(&slug) != Some(Role::Owner) {
210 return Ok(Outcome::fail(
211 FailureCode::Forbidden,
212 "Only an owner can change a workspace's details.",
213 ));
214 }
215 let name: String = match a.name.trim() {
216 "" => slug.clone(),
217 name => name.chars().take(MAX_NAME_LENGTH).collect(),
218 };
219 let description: String = a
220 .description
221 .trim()
222 .chars()
223 .take(MAX_DESCRIPTION_LENGTH)
224 .collect();
225 self.db
226 .prepare("UPDATE workspaces SET name = ?, description = ? WHERE slug = ?")
227 .bind(&[
228 name.into(),
229 if description.is_empty() {
230 worker::wasm_bindgen::JsValue::NULL
231 } else {
232 description.into()
233 },
234 slug.as_str().into(),
235 ])?
236 .run()
237 .await?;
238 Ok(match self.get_workspace(SlugArgs { slug }).await? {
239 Some(workspace) => Outcome::Ok(workspace),
240 None => Outcome::fail(FailureCode::NotFound, "Workspace not found."),
241 })
242 }
243
Workspaces own repositories244 pub async fn list_members(&self, a: ListMembersArgs) -> Result<Outcome<Vec<Member>>> {
245 let slug = a.slug.to_lowercase();
246 if !a.viewer.is_some_and(|viewer| viewer.is_member(&slug)) {
247 return Ok(Outcome::fail(
248 FailureCode::Forbidden,
249 "Only members can see who is in a workspace.",
250 ));
251 }
252 let rows = self
253 .db
254 .prepare(
Invite-only launch: sign in with GitHub, repository access and lifecycle, many emails, a new look255 "SELECT users.username, workspace_members.role, users.display_name AS name, users.avatar FROM workspace_members
Workspaces own repositories256 JOIN users ON users.id = workspace_members.user_id
257 JOIN workspaces ON workspaces.id = workspace_members.workspace_id
Packages, with a container registry on g1t.sh; workspaces deleted whole and kept 30 days; Members for every member258 WHERE workspaces.slug = ? AND workspaces.deleted_at IS NULL
Workspaces own repositories259 ORDER BY workspace_members.role DESC, users.username",
260 )
261 .bind(&[slug.into()])?
262 .all()
263 .await?
264 .results::<MemberRow>()?;
265 Ok(Outcome::Ok(
266 rows.into_iter()
267 .map(|row| Member {
268 username: row.username,
269 role: row.role,
Invite-only launch: sign in with GitHub, repository access and lifecycle, many emails, a new look270 name: row.name,
271 avatar: row.avatar,
Workspaces own repositories272 })
273 .collect(),
274 ))
275 }
276
277 /// The ids needed to change a workspace's members, if `actor` owns it
278 /// and `username` exists.
279 async fn member_target(&self, a: &MemberArgs) -> Result<Outcome<(String, User)>> {
280 let slug = a.slug.to_lowercase();
Agents as a team: lifecycle, merge queue, billing and a new shell281 if a.actor.kind != PrincipalKind::User || a.actor.role_in(&slug) != Some(Role::Owner) {
Workspaces own repositories282 return Ok(Outcome::fail(
283 FailureCode::Forbidden,
284 "Only an owner can change a workspace's members.",
285 ));
286 }
287 let Some(workspace) = self.get_workspace(SlugArgs { slug }).await? else {
288 return Ok(Outcome::fail(FailureCode::NotFound, "Workspace not found."));
289 };
290 let Some(user) = self
291 .find_public_user(
292 "SELECT id, username, email_verified_at IS NOT NULL AS verified
293 FROM users WHERE username = ?",
294 &a.username.trim().to_lowercase(),
295 )
296 .await?
297 else {
298 return Ok(Outcome::fail(
299 FailureCode::NotFound,
300 "There is no account with that username.",
301 ));
302 };
303 Ok(Outcome::Ok((workspace.id, user)))
304 }
305
306 pub async fn add_member(&self, a: MemberArgs) -> Result<Outcome<bool>> {
307 let (workspace_id, user) = match self.member_target(&a).await? {
308 Outcome::Ok(target) => target,
309 Outcome::Fail(failure) => return Ok(Outcome::Fail(failure)),
310 };
Invite-only launch: sign in with GitHub, repository access and lifecycle, many emails, a new look311 // What the workspace asks of its members (security.rs); nothing yet.
312 if let Some(why) = self.policy_refusal(&user.id, &a.slug.to_lowercase()).await? {
313 return Ok(Outcome::fail(FailureCode::Forbidden, why));
314 }
Workspaces own repositories315 self.db
316 .prepare(
317 "INSERT OR IGNORE INTO workspace_members (workspace_id, user_id, role, created_at)
318 VALUES (?, ?, 'member', ?)",
319 )
320 .bind(&[
321 workspace_id.into(),
322 user.id.into(),
323 rfc3339(now_ms()).into(),
324 ])?
325 .run()
326 .await?;
327 Ok(Outcome::Ok(true))
328 }
329
330 pub async fn remove_member(&self, a: MemberArgs) -> Result<Outcome<bool>> {
331 let (workspace_id, user) = match self.member_target(&a).await? {
332 Outcome::Ok(target) => target,
333 Outcome::Fail(failure) => return Ok(Outcome::Fail(failure)),
334 };
335 if user.id == a.actor.id {
336 return Ok(Outcome::fail(
337 FailureCode::Conflict,
338 "An owner cannot remove themselves.",
339 ));
340 }
Invite-only launch: sign in with GitHub, repository access and lifecycle, many emails, a new look341 // Leaving a workspace takes away every way into it: the person's
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar342 // roles on its repositories go too (access.rs), and their place in
343 // its teams (teams.rs). To keep someone on a repository, add them
344 // to it again as an outside collaborator.
Workspaces own repositories345 self.db
Invite-only launch: sign in with GitHub, repository access and lifecycle, many emails, a new look346 .batch(vec![
347 self.db
348 .prepare("DELETE FROM workspace_members WHERE workspace_id = ? AND user_id = ?")
349 .bind(&[workspace_id.as_str().into(), user.id.as_str().into()])?,
350 self.db
351 .prepare(
352 "DELETE FROM repo_grants
353 WHERE workspace_id = ? AND principal_kind = 'user' AND principal_id = ?",
354 )
355 .bind(&[workspace_id.as_str().into(), user.id.as_str().into()])?,
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar356 self.db
357 .prepare(
358 "DELETE FROM team_members
359 WHERE team_id IN (SELECT id FROM teams WHERE workspace_id = ?) AND user_id = ?",
360 )
361 .bind(&[workspace_id.as_str().into(), user.id.as_str().into()])?,
Invite-only launch: sign in with GitHub, repository access and lifecycle, many emails, a new look362 ])
Workspaces own repositories363 .await?;
364 Ok(Outcome::Ok(true))
365 }
366}
g1t is one name: its agent's work, commits and comments show as @g1t, and nobody can claim g1t or g1t-agent367
368#[cfg(test)]
369mod tests {
370 use super::*;
371
372 #[test]
373 fn no_workspace_is_created_with_g1ts_names() {
374 // What create_workspace takes the slug through, whatever its case.
375 for slug in ["g1t", "G1T", " g1t-agent ", "G1T-Agent"] {
376 assert_eq!(claimable_namespace(slug), None, "{slug}");
377 }
378 assert_eq!(claimable_namespace("Acme").as_deref(), Some("acme"));
379 }
380}

This file's history is long; its oldest lines are credited to the oldest commit read.