| 1 | { |
| 2 | "$schema": "../../node_modules/wrangler/config-schema.json", |
| 3 | "name": "g1t-runner", |
| 4 | "account_id": "1e6f2cffa3f445920836e8ebe446bb58", |
| 5 | "compatibility_date": "2026-09-26", |
| 6 | "main": "./src/index.ts", |
| 7 | "workers_dev": false, |
| 8 | // One image (the base plus the runner binary), on three machine sizes. |
| 9 | // scripts/deploy.mjs deploys with each image set to the reference it |
| 10 | // built and pushed (docs/DEPLOYING.md, "The runner's images"), so a |
| 11 | // deploy builds nothing; "./Dockerfile" here is for building by hand. |
| 12 | "containers": [ |
| 13 | { |
| 14 | "class_name": "AttemptSandbox", |
| 15 | "image": "./Dockerfile", |
| 16 | "instance_type": "standard-1", |
| 17 | "max_instances": 20, |
| 18 | // A deploy replaces sandboxes. Ones that are busy are given this |
| 19 | // long, in seconds, to finish first, so shipping g1t does not |
| 20 | // kill agents in the middle of their work. |
| 21 | "rollout_active_grace_period": 7200 |
| 22 | }, |
| 23 | { |
| 24 | // Workflow jobs with `runs-on: g1t-2core`: 2 vCPU, 8 GiB, 16 GB. |
| 25 | "class_name": "Sandbox2Core", |
| 26 | "image": "./Dockerfile", |
| 27 | "instance_type": "standard-3", |
| 28 | "max_instances": 10, |
| 29 | "rollout_active_grace_period": 7200 |
| 30 | }, |
| 31 | { |
| 32 | // Workflow jobs with `runs-on: g1t-4core`: 4 vCPU, 12 GiB, 20 GB. |
| 33 | "class_name": "Sandbox4Core", |
| 34 | "image": "./Dockerfile", |
| 35 | "instance_type": "standard-4", |
| 36 | "max_instances": 10, |
| 37 | "rollout_active_grace_period": 7200 |
| 38 | } |
| 39 | ], |
| 40 | "durable_objects": { |
| 41 | "bindings": [ |
| 42 | { "name": "SANDBOX", "class_name": "AttemptSandbox" }, |
| 43 | { "name": "SANDBOX_2CORE", "class_name": "Sandbox2Core" }, |
| 44 | { "name": "SANDBOX_4CORE", "class_name": "Sandbox4Core" } |
| 45 | ] |
| 46 | }, |
| 47 | "migrations": [ |
| 48 | { "tag": "v1", "new_sqlite_classes": ["AttemptSandbox"] }, |
| 49 | { "tag": "v2", "new_sqlite_classes": ["Sandbox2Core", "Sandbox4Core"] } |
| 50 | ], |
| 51 | "services": [ |
| 52 | { "binding": "IDENTITY", "service": "g1t-identity" }, |
| 53 | { "binding": "REPOS", "service": "g1t-repos" }, |
| 54 | { "binding": "WORK", "service": "g1t-work" }, |
| 55 | { "binding": "BILLING", "service": "g1t-billing" }, |
| 56 | { "binding": "INTEGRATIONS", "service": "g1t-integrations" }, |
| 57 | { "binding": "ACTIONS", "service": "g1t-actions" }, |
| 58 | { "binding": "DEPLOYMENTS", "service": "g1t-deployments" }, |
| 59 | { "binding": "PROJECTS", "service": "g1t-projects" }, |
| 60 | // The context hub: the Context section every agent run starts with. |
| 61 | { "binding": "CONTEXT", "service": "g1t-context" }, |
| 62 | // The event bus: abuse.flagged, when a sandbox looks like it is mining. |
| 63 | { "binding": "EVENTS", "service": "g1t-events" } |
| 64 | ], |
| 65 | // A sweep for lifecycle steps whose trigger was missed or whose sandbox |
| 66 | // died before reporting. |
| 67 | "triggers": { "crons": ["*/5 * * * *"] }, |
| 68 | // Events it reacts to: a pull request ready for review, or its head moving. |
| 69 | "queues": { |
| 70 | "consumers": [{ "queue": "g1t-events-runner", "max_batch_size": 20, "max_batch_timeout": 1 }] |
| 71 | }, |
| 72 | "vars": { |
| 73 | // Each workspace chooses where its agents' model spend goes: its own |
| 74 | // provider (under Integrations) or g1t's hosted models, paid from its |
| 75 | // credit. While billing takes no real money, hosted models are open |
| 76 | // only to these workspaces; once it does, to every workspace. |
| 77 | "HOSTED_AGENT_WORKSPACES": "flagon-io", |
| 78 | // How g1t routes the work it pays the model for. Nobody assigning an |
| 79 | // agent chooses; this is g1t's policy (AgentRouting in src/model-env.ts). |
| 80 | // "tiers": the model behind each tier; "modelName" is shown to people in |
| 81 | // the session, "model" is sent to the provider. "tasks": the tier of each |
| 82 | // kind of work; "change" reviews a change of at most "smallChange" that |
| 83 | // touches nothing sensitive, for an issue without one of "largeLabels", |
| 84 | // on the small tier, and anything else on the large. A retry after a |
| 85 | // failed attempt always runs on the large tier. |
| 86 | "AGENT_ROUTING": "{\"tiers\":{\"small\":{\"modelName\":\"Claude Haiku 4.5\",\"model\":\"claude-haiku-4-5-20251001\"},\"large\":{\"modelName\":\"Claude Sonnet 5.5\",\"model\":\"claude-sonnet-5-5\"}},\"tasks\":{\"implement\":\"large\",\"review\":\"change\",\"update\":\"small\",\"plan\":\"small\"},\"smallChange\":{\"files\":10,\"lines\":200},\"largeLabels\":[\"security\"]}", |
| 87 | // Where sandboxes send model requests, with a token for their run. |
| 88 | // The proxy holds the keys: g1t's gateway's, or the workspace's own. |
| 89 | "MODELS_URL": "https://models.g1t.sh", |
| 90 | // Set to a Cloudflare AI Gateway id to route model traffic through it. |
| 91 | // Used only when MODELS_URL is unset. |
| 92 | "AI_GATEWAY_ID": "g1t", |
| 93 | "CLOUDFLARE_ACCOUNT_ID": "1e6f2cffa3f445920836e8ebe446bb58", |
| 94 | // Guardrails' network list is enforced by starting sandboxes without |
| 95 | // internet and passing their HTTP(S) through this Worker. "off" opens |
| 96 | // every sandbox's network again, whatever its guardrails say. |
| 97 | "EGRESS": "enforce", |
| 98 | // Sandboxes stop themselves when they look like they are mining |
| 99 | // (crates/runner abuse.rs). "off" turns the CPU watch off; miners |
| 100 | // named in commands are refused either way. |
| 101 | "ABUSE_WATCH": "on" |
| 102 | }, |
| 103 | "observability": { "enabled": true } |
| 104 | } |