Skip to content
Sign up

flagon-io/g1t

public
0
1,182 linesCodeBlameRaw

Pick any line to see why it is the way it is: the commit, the pull request and issue it came from, and what the agent was thinking.

g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights1//! The MCP server's tools: a few resource tools, each with an `action`.
2//!
3//! Every operation is one action of one tool. A call is dispatched to the
4//! operation it names, so permissions, the audit log, billing and outcomes
5//! are exactly those of the REST API. A token sees only the actions its
6//! scopes allow, and a tool none of whose actions it may use is not listed.
7//!
8//! The listed input schema is one flat object: `action`, then every field
9//! any of its actions takes. Which fields each action needs is in the
10//! `action` field's description and checked on every call. Claude's API,
11//! and so most MCP clients, refuse a tool whose input schema has `oneOf`
12//! at its top level, so the schema keyed by action, with each action's
13//! required fields, is [`discriminated`], published on the server's card
14//! and in the docs.
15
16use g1t_contracts::credentials::NEVER;
17use g1t_contracts::identity::AgentScope;
18use g1t_contracts::scopes::{Level, NO_SCOPE, TokenAccess, scope_for};
19use serde_json::{Map, Value, json};
20
Merge branch 'main' into worktree-agent-a69aeabc4b0deeb9721use crate::about::AboutOp;
The artifacts service is services/artifacts, the Worker g1t-artifacts, bound as ARTIFACTS by the API, the site and the agents; its live rooms move to it with a Durable Object transfer from g1t-docs-service, and its database, bucket, indexes and queue keep their names. The git store's binding and settings are GITSTORE, its ops scripts gitstore-*, and workflow run artifacts keep their compatible API under run_artifacts modules. The deploy tool puts a Worker that has never deployed before the Workers in its stage that bind to it, and the deploy guide gives the cutover runbook.22use crate::run_artifacts::ArtifactsOp;
Merge GitHub pull request #8 (claude/cool-newton-7nm8r9): Docker deployments on g1t.page behind a switch that stays off until Cloudflare's container APIs are checked live, workflows a workspace manages in its repositories, tarball and zipball downloads, refs/pull/* kept to g1t alone, framework detection for g1t.page builds, and a workflow's event payload matching GitHub's.23use crate::archives::ArchiveOp;
Merge remote-tracking branch 'origin/claude/cool-newton-7nm8r9' into claude/cool-newton-7nm8r924use crate::customize::CustomizeOp;
Merge branch 'worktree-agent-a5a5de74d8863d554' into worktree-agent-a16631325aecf58ca25use crate::deploy_keys::DeployKeysOp;
Merge branch 'mirroring' into artifacts-mode26use crate::mirrors::MirrorsOp;
Merge branch 'main' into worktree-agent-a69aeabc4b0deeb9727use crate::deployments::DeploymentsOp;
Projects have Observability: their requests, logs, traces, metrics and errors, from apps on g1t.page with nothing to set up, and from software anywhere else over OpenTelemetry.28use crate::telemetry::TelemetryOp;
Merge packages: roles, Actions access, source label, soft delete, API29use crate::packages::PackagesOp;
Merge main into Artifacts Phase 230use crate::folios::FoliosOp;
Merge branch 'worktree-agent-a3abfcce648e87dca'31use crate::protection::ProtectionOp;
API and MCP for a workspace's personal access token rules, members' tokens and approvals32use crate::token_policy::TokenOp;
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights33use crate::operations::Op;
Merge checks: statuses and check runs on every commit34use crate::checks::ChecksOp;
Merge rulesets: branch and tag rules, agent-first, enforced on push and merge35use crate::rules::RulesOp;
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar36use crate::security::SecurityOp;
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights37
38pub struct Action {
39 pub name: &'static str,
40 pub op: Op,
41 /// One line, for the `action` field's description.
42 pub summary: &'static str,
43}
44
45pub struct Tool {
46 pub name: &'static str,
47 pub title: &'static str,
48 /// What it is for, in a sentence or two.
49 pub description: &'static str,
50 pub actions: &'static [Action],
51 /// The action a call without one runs.
52 pub default_action: Option<&'static str>,
53}
54
55const fn a(name: &'static str, op: Op, summary: &'static str) -> Action {
56 Action { name, op, summary }
57}
58
59pub const TOOLS: &[Tool] = &[
60 Tool {
61 name: "search",
62 title: "Search",
63 description: "Find things. `code` (the default) searches all of g1t you can see: repositories, code, issues, pull requests and people, with qualifiers like repo:owner/name, language:rust, is:issue. `context` searches one workspace's catalog, docs, issues and memory by meaning.",
64 default_action: Some("code"),
65 actions: &[
66 a("code", Op::Search, "Search all of g1t: repositories, code, issues, pull requests, people"),
67 a("context", Op::SearchContext, "Search a workspace's context hub by meaning"),
68 a("entity", Op::GetEntity, "One catalog entry and its relations"),
69 a("ticket", Op::GetContext, "A Jira, Linear or Sentry item the work refers to, as it is now"),
70 ],
71 },
72 Tool {
73 name: "repository",
74 title: "Repositories",
Merge branch 'mirroring' into artifacts-mode75 description: "Repositories: find, read and create them, change their settings and rulesets (what may happen to branches and tags, and what a pull request needs to merge), check their CODEOWNERS file, manage their labels and milestones, see and dismiss their security alerts (secrets and vulnerable dependencies), read what their default branch says (languages, contributors, license), star them, publish releases, and look after their mirroring (take a mirror over, hand it back, or move it to g1t for good). Name one as \"owner/name\". Deleting, transferring and changing visibility need `confirm`.",
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights76 default_action: None,
77 actions: &[
78 a("list", Op::ListRepos, "Repositories you can see"),
79 a("get", Op::GetRepo, "One repository"),
Merge GitHub pull request #8 (claude/cool-newton-7nm8r9): Docker deployments on g1t.page behind a switch that stays off until Cloudflare's container APIs are checked live, workflows a workspace manages in its repositories, tarball and zipball downloads, refs/pull/* kept to g1t alone, framework detection for g1t.page builds, and a workflow's event payload matching GitHub's.80 a("tarball", Op::Archives(ArchiveOp::DownloadTarball), "A 10-minute link to a branch, tag or commit as a .tar.gz"),
81 a("zipball", Op::Archives(ArchiveOp::DownloadZipball), "A 10-minute link to a branch, tag or commit as a .zip"),
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights82 a("create", Op::CreateRepo, "Create one, empty or copied from a public git URL"),
83 a("update", Op::UpdateRepo, "Change description, website, topics, default branch, protection"),
Merge rulesets: branch and tag rules, agent-first, enforced on push and merge84 a("get_settings", Op::GetRepoSettings, "How pull requests merge, and the default branch's protection as its rules stack"),
85 a("update_settings", Op::UpdateRepoSettings, "Change how pull requests merge and the default branch protection ruleset"),
86 a("check_names", Op::ListCheckNames, "Check names reported lately, to require in a ruleset"),
87 a("list_rulesets", Op::Rules(RulesOp::ListRepoRulesets), "Its rulesets, and its workspace's that hold in it"),
88 a("get_ruleset", Op::Rules(RulesOp::GetRepoRuleset), "One ruleset"),
89 a("create_ruleset", Op::Rules(RulesOp::CreateRepoRuleset), "Create a ruleset for its branches or tags"),
90 a("update_ruleset", Op::Rules(RulesOp::UpdateRepoRuleset), "Change a ruleset"),
91 a("delete_ruleset", Op::Rules(RulesOp::DeleteRepoRuleset), "Delete a ruleset"),
92 a("branch_rules", Op::Rules(RulesOp::GetBranchRules), "Every rule that holds for a branch or tag, and where it comes from"),
93 a("rule_evaluations", Op::Rules(RulesOp::ListRuleEvaluations), "How its rules judged pushes and merges, with insights"),
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar94 a("codeowners", Op::GetCodeownersErrors, "Problems in its CODEOWNERS file, by line"),
95 a("list_labels", Op::ListLabels, "Labels, with colors and how many issues and pull requests carry each"),
96 a("create_label", Op::CreateLabel, "Create a label"),
97 a("update_label", Op::UpdateLabel, "Rename a label or change its color or description"),
98 a("delete_label", Op::DeleteLabel, "Delete a label, from everything that carries it"),
99 a("add_default_labels", Op::AddDefaultLabels, "Add the default labels it is missing"),
100 a("list_milestones", Op::ListMilestones, "Milestones, with progress and due dates"),
101 a("get_milestone", Op::GetMilestone, "One milestone with its issues and pull requests"),
102 a("create_milestone", Op::CreateMilestone, "Create a milestone"),
103 a("update_milestone", Op::UpdateMilestone, "Change a milestone's title, description, due date or state"),
104 a("delete_milestone", Op::DeleteMilestone, "Delete a milestone"),
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights105 a("list_events", Op::ListEvents, "Timeline: pushes, issues, pull requests, comments"),
Merge branch 'main' into worktree-agent-a69aeabc4b0deeb97106 a("languages", Op::About(AboutOp::GetLanguages), "Its languages by bytes, with colors and percentages"),
107 a("contributors", Op::About(AboutOp::ListContributors), "Who made it: commits per person, agent and author, by week"),
108 a("license", Op::About(AboutOp::GetLicense), "The license its LICENSE file holds"),
109 a("stargazers", Op::About(AboutOp::ListStargazers), "Who starred it"),
110 a("starred", Op::About(AboutOp::CheckStarred), "Whether you starred it, and how many have"),
111 a("star", Op::About(AboutOp::Star), "Star it"),
112 a("unstar", Op::About(AboutOp::Unstar), "Take your star back"),
113 a("list_starred", Op::About(AboutOp::ListStarred), "Repositories you starred"),
114 a("list_releases", Op::About(AboutOp::ListReleases), "Releases, newest first"),
115 a("latest_release", Op::About(AboutOp::GetLatestRelease), "The latest release"),
116 a("get_release", Op::About(AboutOp::GetRelease), "One release by id"),
117 a("get_release_by_tag", Op::About(AboutOp::GetReleaseByTag), "The release of a tag"),
118 a("create_release", Op::About(AboutOp::CreateRelease), "Publish a release of a tag, making the tag if needed"),
119 a("update_release", Op::About(AboutOp::UpdateRelease), "Change a release's title, notes, draft or prerelease"),
120 a("delete_release", Op::About(AboutOp::DeleteRelease), "Delete a release; its tag stays"),
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights121 a("rename_branch", Op::RenameBranch, "Rename a branch"),
The Branches page does things to branches now. It has tabs (Overview, Yours, Active, Stale, All, kept in the address as ?tab=) and search; Overview shows the default branch, then the first five of your branches, the active ones and the stale ones, each linking to the rest. Each branch is a row with its name in a code chip with a copy button, who made its latest commit and when, that commit's checks, behind and ahead counts with bars drawn against the largest shown, and its pull request (the open one, else the newest merged or closed) with its state; on a phone the columns fold under the name. Yours is branches whose latest commit is the viewer's; stale is no commit in 90 days.122 a("create_branch", Op::CreateBranch, "Make a branch at a branch, tag or commit"),
123 a("delete_branch", Op::DeleteBranch, "Delete a branch; make it again at its commit to restore it"),
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights124 a("rename", Op::RenameRepo, "Rename it; old addresses redirect"),
125 a("transfer", Op::TransferRepo, "Move it to another workspace you own"),
Merge branch 'mirroring' into artifacts-mode126 a("mirror", Op::Mirrors(MirrorsOp::GetMirror), "Its remotes: what it mirrors or is mirrored to"),
127 a("mirror_hand_back_plan", Op::Mirrors(MirrorsOp::GetHandBackPlan), "What handing a takeover back would do, ref by ref"),
128 a("mirror_take_over", Op::Mirrors(MirrorsOp::TakeOver), "Make g1t lead a mirror for now"),
129 a("mirror_ci", Op::Mirrors(MirrorsOp::SetCiFailover), "Run a mirror's workflows on g1t (on), or stop (off)"),
130 a("mirror_hand_back", Op::Mirrors(MirrorsOp::HandBack), "Send a takeover back, deciding diverged refs"),
131 a("mirror_move_to_g1t", Op::Mirrors(MirrorsOp::MoveToG1t), "Stop tracking the remote; g1t leads for good"),
132 a("mirror_sync", Op::Mirrors(MirrorsOp::SyncMirror), "Bring its remotes in step now"),
133 a("mirror_add_remote", Op::Mirrors(MirrorsOp::AddRemote), "Link another g1t or git host"),
134 a("mirror_update_remote", Op::Mirrors(MirrorsOp::UpdateRemote), "Change a remote's settings"),
135 a("mirror_remove_remote", Op::Mirrors(MirrorsOp::RemoveRemote), "Unlink a remote"),
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights136 a("archive", Op::ArchiveRepo, "Make it read-only"),
137 a("unarchive", Op::UnarchiveRepo, "Make it writable again"),
138 a("set_visibility", Op::SetRepoVisibility, "Make it public or private"),
139 a("delete", Op::DeleteRepo, "Delete it; restorable for 30 days"),
140 a("list_deleted", Op::ListDeletedRepos, "A workspace's deleted repositories"),
141 a("restore", Op::RestoreRepo, "Restore a deleted one"),
142 a("purge", Op::PurgeRepo, "Remove a deleted one for good"),
143 a("security_alerts", Op::ListSecurityAlerts, "Secret and dependency alerts, filtered by state"),
144 a("dismiss_alert", Op::DismissSecurityAlert, "Dismiss an alert with a reason"),
145 a("reopen_alert", Op::ReopenSecurityAlert, "Reopen a dismissed alert"),
146 ],
147 },
148 Tool {
149 name: "issue",
150 title: "Issues",
151 description: "Issues: what should change. Read one before working on it to see the pull requests already made for it. Issues and pull requests share numbers; `comment` works on either.",
152 default_action: None,
153 actions: &[
154 a("list", Op::ListIssues, "Issues on a repository, newest first"),
155 a("get", Op::GetIssue, "One issue with comments and its pull requests"),
156 a("create", Op::CreateIssue, "Open an issue"),
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar157 a("update", Op::UpdateIssue, "Change title, body, labels, milestone or assignees"),
158 a("labels", Op::ListIssueLabels, "The labels an issue or pull request carries"),
159 a("add_labels", Op::AddIssueLabels, "Add labels to an issue or pull request"),
160 a("set_labels", Op::SetIssueLabels, "Replace the labels of an issue or pull request"),
161 a("remove_labels", Op::RemoveIssueLabels, "Take labels off an issue or pull request"),
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights162 a("close", Op::CloseIssue, "Close it without a pull request"),
163 a("reopen", Op::ReopenIssue, "Reopen it"),
164 a("comment", Op::AddComment, "Comment on an issue or pull request; path and line for one line of a change"),
Merge Actions: cross-repo workflows and actions, release and deployment triggers, step timeouts165 a("edit_comment", Op::EditComment, "Change a comment's text: your own, or any with the Maintain role"),
166 a("delete_comment", Op::DeleteComment, "Delete a comment: your own, or any with the Maintain role"),
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights167 a("import", Op::ImportIssue, "Open an issue from a Jira, Linear or Sentry item"),
168 ],
169 },
170 Tool {
171 name: "pull_request",
172 title: "Pull requests",
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar173 description: "Pull requests: start a change for an issue, record your session, mark it ready, ask people and teams to review, review and merge. Read `overlaps` and `behind` on `get` before going far, and `code_owners` for whose approval it needs.",
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights174 default_action: None,
175 actions: &[
176 a("list", Op::ListPullRequests, "Pull requests on a repository, newest first"),
177 a("get", Op::GetPullRequest, "Status, checks and required checks, reviews, overlaps, whether it is behind"),
178 a("changes", Op::GetPullRequestChanges, "Files and line-by-line diff"),
179 a("create", Op::CreatePullRequest, "Start a draft with its own fork to push to, or open one from a pushed branch"),
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar180 a("update", Op::UpdatePullRequest, "Change its base branch, labels, milestone, assignees or reviewers"),
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights181 a("record_session", Op::RecordSession, "Append prompt, reasoning and tool entries to its session"),
182 a("read_session", Op::ReadSession, "Its recorded session"),
183 a("ready", Op::MarkPullRequestReady, "Mark a draft ready, with a summary"),
Merge Actions: cross-repo workflows and actions, release and deployment triggers, step timeouts184 a("draft", Op::ConvertPullRequestToDraft, "Turn it back into a draft"),
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar185 a("request_reviewers", Op::RequestReviewers, "Ask people or teams to review it"),
186 a("remove_requested_reviewers", Op::RemoveRequestedReviewers, "Stop asking people or teams to review it"),
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights187 a("review", Op::ReviewPullRequest, "Approve or request changes"),
188 a("close", Op::ClosePullRequest, "Close without merging"),
Merge Actions: cross-repo workflows and actions, release and deployment triggers, step timeouts189 a("reopen", Op::ReopenPullRequest, "Reopen a closed one"),
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights190 a("merge", Op::MergePullRequest, "Land it, or join the merge queue"),
191 a("merge_queue", Op::GetMergeQueue, "The repository's merge queue"),
192 ],
193 },
194 Tool {
195 name: "agent",
196 title: "g1t agents",
197 description: "Put g1t's agent to work and talk to it. One agent per issue; to do more at once, use more issues. Starting an agent uses the workspace's money.",
198 default_action: None,
199 actions: &[
200 a("delegate", Op::Delegate, "Open an issue and put an agent on it in one step"),
201 a("assign", Op::AssignIssue, "Put an agent on an existing issue"),
202 a("message", Op::MessageAgent, "Tell the agent on a pull request something, or ask another agent"),
203 a("answer", Op::AnswerMessage, "Answer a question or handoff sent to you"),
204 a("take_messages", Op::TakeMessages, "For a g1t agent: messages not seen yet"),
Every agent can have its own computer. A session that needs one wakes it: a home of its own on g1t cloud, one per agent and never shared, where it runs commands, reads and writes files and keeps what it made, with each session working in its own folder under a shared home; after ten idle minutes it sleeps, its home kept as a snapshot and restored when it wakes, and Reset wipes the home while memory and artifacts stay. Its shell and files are abilities with the usual choices, Alone, Alone when asked, Ask first or Never, offered only inside sessions and never to a chat reply; every command shows on the session with its output, and the agent's new Computer tab shows the state, the disk used of the five gigabytes included, the recent commands, and Wake, Put to sleep and Reset. Machine time counts only while it is awake, on the sandbox lines of the ledger that name the agent and who asked, held to the same spend caps as the session; the disk itself costs nothing in this version. The runner gained a long-lived supervisor that answers the computer's requests inside the container, and the runner service a computer per agent that keeps its snapshot in the agent homes bucket when one is attached, and says so when none is. The REST API and the agent tool can read a computer, wake it, put it to sleep and reset it. The agents, abilities, sessions, runners, billing and deploy guides say how it works and what an operator sets up; pinning a computer to your own runner, its browser and take-over come next.205 a("computer", Op::GetAgentComputer, "A workspace agent's own computer: state, disk, recent commands"),
206 a("wake_computer", Op::WakeAgentComputer, "Wake a workspace agent's computer (metered until it sleeps)"),
207 a("sleep_computer", Op::SleepAgentComputer, "Save its home and put it to sleep"),
208 a("reset_computer", Op::ResetAgentComputer, "Wipe its home; memory and artifacts are kept"),
209 a("computer_commands", Op::ListAgentComputerCommands, "The commands it ran most recently, with output"),
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights210 ],
211 },
212 Tool {
213 name: "plan",
214 title: "Plans",
215 description: "Turn an outcome into issues: an agent proposes them with what done means and their dependencies; nothing opens until you apply the plan.",
216 default_action: None,
217 actions: &[
218 a("create", Op::PlanWork, "Ask an agent for a plan; read it with get until ready"),
219 a("get", Op::GetPlan, "A plan and the issues it proposes"),
220 a("apply", Op::ApplyPlan, "Open its issues; with assign, agents start in dependency order"),
221 ],
222 },
223 Tool {
224 name: "memory",
225 title: "Memory",
226 description: "What the project and its workspace remember for the next agent: how to build, conventions, decisions, traps. Recall before you start; remember one short fact at a time, never a secret.",
227 default_action: None,
228 actions: &[
229 a("recall", Op::Recall, "Search memory, or list it all"),
230 a("remember", Op::Remember, "Save one fact"),
231 ],
232 },
233 Tool {
234 name: "workflow",
235 title: "Workflows",
Merge GitHub pull request #8 (claude/cool-newton-7nm8r9): Docker deployments on g1t.page behind a switch that stays off until Cloudflare's container APIs are checked live, workflows a workspace manages in its repositories, tarball and zipball downloads, refs/pull/* kept to g1t alone, framework detection for g1t.page builds, and a workflow's event payload matching GitHub's.236 description: "GitHub Actions workflows from .g1t/workflows: their runs, jobs and logs, and running, cancelling or rerunning them. Runs' artifacts: listing, a download link, deleting, and how long they are kept. Deployments wherever they run (reported from any CI, made by jobs with an `environment:`, or built on g1t.page), their statuses and environments, and reporting your own; environments' protection rules, approving or rejecting the jobs they hold, approving a pull request's run from outside, the token's default permissions, repository dispatch, and the workflows a workspace runs in its repositories without a file in them. Checks on commits: statuses, check runs (a g1t Actions job is one) and check suites, to read where a commit stands or report on it from CI or an integration. Also the self-hosted runners they run on: a workspace's (`workspace`) or a repository's own (`repo`), their groups, and where agent work runs.",
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights237 default_action: None,
238 actions: &[
239 a("list", Op::ListWorkflows, "Workflows on the default branch"),
240 a("list_runs", Op::ListWorkflowRuns, "Runs, newest first"),
Merge Actions runs: summaries, attempts and re-runs, graceful cancel, log downloads, badges (actions 0009)241 a("get_run", Op::GetWorkflowRun, "One run with its jobs and steps; an earlier attempt with attempt"),
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights242 a("job_logs", Op::GetJobLogs, "A job's log after a sequence number"),
243 a("dispatch", Op::DispatchWorkflow, "Run a workflow_dispatch workflow"),
Merge Actions runs: summaries, attempts and re-runs, graceful cancel, log downloads, badges (actions 0009)244 a("cancel", Op::CancelWorkflowRun, "Cancel a run, letting its jobs clean up; force stops them outright"),
245 a("rerun", Op::RerunWorkflowRun, "Run a finished run again: all, failed_only, or one job; debug for debug logging"),
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights246 a("update", Op::UpdateWorkflow, "Turn a workflow on or off"),
Actions: OIDC tokens, the toolkit's cache and artifact services, and artifacts in R2247 a("list_artifacts", Op::Artifacts(ArtifactsOp::ListArtifacts), "A repository's artifacts, newest first; or a run's with run_artifacts"),
248 a("run_artifacts", Op::Artifacts(ArtifactsOp::ListRunArtifacts), "One run's artifacts"),
249 a("get_artifact", Op::Artifacts(ArtifactsOp::GetArtifact), "One artifact: size, digest, expiry, run"),
250 a("download_artifact", Op::Artifacts(ArtifactsOp::DownloadArtifact), "A 10-minute link to an artifact's zip"),
251 a("delete_artifact", Op::Artifacts(ArtifactsOp::DeleteArtifact), "Delete an artifact before it expires"),
252 a("artifact_retention", Op::Artifacts(ArtifactsOp::GetArtifactRetention), "Days the repository keeps artifacts"),
253 a("set_artifact_retention", Op::Artifacts(ArtifactsOp::SetArtifactRetention), "Change the days the repository keeps artifacts"),
Merge checks: statuses and check runs on every commit254 a("combined_status", Op::Checks(ChecksOp::GetCombinedStatus), "A commit's statuses and the state they add up to"),
255 a("list_statuses", Op::Checks(ChecksOp::ListCommitStatuses), "A commit's statuses, newest first"),
256 a("set_status", Op::Checks(ChecksOp::CreateCommitStatus), "Set a status on a commit"),
257 a("list_check_runs", Op::Checks(ChecksOp::ListCheckRunsForRef), "A commit's check runs, g1t Actions jobs included"),
258 a("get_check_run", Op::Checks(ChecksOp::GetCheckRun), "One check run with its report"),
259 a("check_run_annotations", Op::Checks(ChecksOp::ListCheckRunAnnotations), "What a check run says about lines of files"),
260 a("create_check_run", Op::Checks(ChecksOp::CreateCheckRun), "Report a check run on a commit"),
261 a("update_check_run", Op::Checks(ChecksOp::UpdateCheckRun), "Move a check run on, complete it, add annotations"),
262 a("rerequest_check_run", Op::Checks(ChecksOp::RerequestCheckRun), "Ask for a check run to run again"),
263 a("list_check_suites", Op::Checks(ChecksOp::ListCheckSuitesForRef), "A commit's check suites, one per reporter or workflow run"),
264 a("get_check_suite", Op::Checks(ChecksOp::GetCheckSuite), "One check suite"),
265 a("rerequest_check_suite", Op::Checks(ChecksOp::RerequestCheckSuite), "Ask for a check suite to run again"),
Merge branch 'main' into worktree-agent-a69aeabc4b0deeb97266 a("list_deployments", Op::Deployments(DeploymentsOp::ListDeployments), "Deployments wherever they run, newest first, filtered"),
267 a("get_deployment", Op::Deployments(DeploymentsOp::GetDeployment), "One deployment with every status it has had"),
268 a("create_deployment", Op::Deployments(DeploymentsOp::CreateDeployment), "Report a deployment of a ref to an environment"),
269 a("deployment_statuses", Op::Deployments(DeploymentsOp::ListDeploymentStatuses), "A deployment's statuses, newest first"),
270 a("create_deployment_status", Op::Deployments(DeploymentsOp::CreateDeploymentStatus), "Report where a deployment is: in_progress, success, failure"),
271 a("list_environments", Op::Deployments(DeploymentsOp::ListEnvironments), "Environments with their current and latest deployments"),
Merge branch 'worktree-agent-a3abfcce648e87dca'272 a("get_environment", Op::Deployments(DeploymentsOp::GetEnvironment), "One environment by name, with its protection rules"),
Merge branch 'worktree-agent-a4d35ee70c50683d0' into claude/cool-newton-7nm8r9273 a("start_deployment_build", Op::Deployments(DeploymentsOp::StartDeploymentBuild), "From a workflow job: open a g1t.page build it runs itself"),
Merge branch 'worktree-agent-a3abfcce648e87dca'274 a("update_environment", Op::Protection(ProtectionOp::UpdateEnvironment), "Set an environment's reviewers, wait timer and branches"),
275 a("delete_environment", Op::Protection(ProtectionOp::DeleteEnvironment), "Remove an environment's protection rules"),
276 a("pending_deployments", Op::Protection(ProtectionOp::GetPendingDeployments), "The environments holding a run's jobs"),
277 a("review_deployments", Op::Protection(ProtectionOp::ReviewPendingDeployments), "Approve or reject a run's jobs for its environments"),
278 a("approve_run", Op::Protection(ProtectionOp::ApproveWorkflowRun), "Let a run of a pull request from outside start"),
279 a("get_permissions", Op::Protection(ProtectionOp::GetWorkflowPermissions), "What a job's token gets without `permissions:`"),
280 a("set_permissions", Op::Protection(ProtectionOp::SetWorkflowPermissions), "Set it: read or write"),
281 a("get_approval_policy", Op::Protection(ProtectionOp::GetForkPrApproval), "Which pull requests' runs wait for approval"),
282 a("set_approval_policy", Op::Protection(ProtectionOp::SetForkPrApproval), "Set which pull requests' runs wait for approval"),
Merge Actions: cross-repo workflows and actions, release and deployment triggers, step timeouts283 a("get_access", Op::Protection(ProtectionOp::GetActionsAccess), "Which repositories may use this one's actions and workflows"),
284 a("set_access", Op::Protection(ProtectionOp::SetActionsAccess), "Let the workspace's private repositories use them, or not"),
Merge branch 'worktree-agent-a3abfcce648e87dca'285 a("repository_dispatch", Op::Protection(ProtectionOp::CreateRepositoryDispatch), "Start repository_dispatch workflows with an event"),
286 a("get_workspace_permissions", Op::Protection(ProtectionOp::GetWorkspaceWorkflowPermissions), "A workspace's default and maximum token permissions"),
287 a("set_workspace_permissions", Op::Protection(ProtectionOp::SetWorkspaceWorkflowPermissions), "Set them, and whether jobs may open pull requests"),
Merge GitHub pull request #8 (claude/cool-newton-7nm8r9): Docker deployments on g1t.page behind a switch that stays off until Cloudflare's container APIs are checked live, workflows a workspace manages in its repositories, tarball and zipball downloads, refs/pull/* kept to g1t alone, framework detection for g1t.page builds, and a workflow's event payload matching GitHub's.288 a("list_managed_workflows", Op::Protection(ProtectionOp::ListWorkspaceManagedWorkflows), "The workflows a workspace runs in its repositories"),
289 a("add_managed_workflow", Op::Protection(ProtectionOp::CreateWorkspaceManagedWorkflow), "Run a workflow in the workspace's repositories, required or default"),
290 a("update_managed_workflow", Op::Protection(ProtectionOp::UpdateWorkspaceManagedWorkflow), "Change one's repositories or mode, or copy its source again"),
291 a("remove_managed_workflow", Op::Protection(ProtectionOp::DeleteWorkspaceManagedWorkflow), "Take one out of the workspace's repositories"),
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights292 a("list_runners", Op::ListRunners, "Self-hosted runners, with status, labels and what each is doing"),
293 a("create_runner_token", Op::CreateRunnerRegistrationToken, "A one-hour token for g1t-runner register"),
294 a("remove_runner", Op::RemoveRunner, "Remove a self-hosted runner"),
295 a("list_runner_groups", Op::ListRunnerGroups, "A workspace's runner groups"),
296 a("create_runner_group", Op::CreateRunnerGroup, "Make a group, for some repositories"),
297 a("update_runner_group", Op::UpdateRunnerGroup, "Rename a group or change its repositories"),
298 a("delete_runner_group", Op::DeleteRunnerGroup, "Delete a group; its runners join the default"),
299 a("get_runner_settings", Op::GetRunnerSettings, "Where agent work runs; whether forks may use runners"),
300 a("update_runner_settings", Op::UpdateRunnerSettings, "Change them"),
301 ],
302 },
303 Tool {
Projects have Observability: their requests, logs, traces, metrics and errors, from apps on g1t.page with nothing to set up, and from software anywhere else over OpenTelemetry.304 name: "observability",
305 title: "Observability",
306 description: "What a project's running software did in production, to debug it: its requests, logs, traces, grouped errors and metrics, from its apps on g1t.page and from OpenTelemetry sent from anywhere. Name the project by workspace and project slug. Start with overview (error rate, latency, the routes and the deployment a regression began with) or errors, then follow a request or trace_id to its logs and spans. Times are RFC 3339 or Unix milliseconds; the last 24 hours unless you say. Needs a role of your own on the project's repository; resolving errors, Triage.",
307 default_action: None,
308 actions: &[
309 a("overview", Op::Telemetry(TelemetryOp::GetOverview), "Requests, errors, latency and CPU over a period, by route, deployment, service and region, against the period before"),
310 a("requests", Op::Telemetry(TelemetryOp::ListRequests), "Requests answered, newest first: q, status (5xx, 404), errors_only, route, min_duration_ms"),
311 a("request", Op::Telemetry(TelemetryOp::GetRequest), "One request with every log line it wrote"),
312 a("logs", Op::Telemetry(TelemetryOp::ListLogs), "Search a project's logs: words or a phrase in q, level (error,warn), trace_id, request_id"),
313 a("traces", Op::Telemetry(TelemetryOp::ListTraces), "Traces, newest first: q, errors_only, min_duration_ms"),
314 a("trace", Op::Telemetry(TelemetryOp::GetTrace), "One trace: every span, with its timing, status and attributes, and its logs"),
315 a("errors", Op::Telemetry(TelemetryOp::ListErrors), "Errors grouped by exception, most recent first, with the deployment that brought each in"),
316 a("update_error", Op::Telemetry(TelemetryOp::UpdateError), "Resolve, ignore or reopen an error group, or link the issue made for it"),
317 a("metrics", Op::Telemetry(TelemetryOp::ListMetrics), "The metrics the project's software sends"),
318 a("metric", Op::Telemetry(TelemetryOp::GetMetric), "One metric over time: aggregate (avg, sum, p95), group_by an attribute"),
319 ],
320 },
321 Tool {
Merge packages: roles, Actions access, source label, soft delete, API322 name: "package",
323 title: "Packages",
324 description: "A workspace's packages in every registry (container images, npm, Cargo, Maven, NuGet, RubyGems, Composer): their versions and downloads, deleting and restoring them within 30 days, their visibility and repository, who has a role on them, and which repositories' workflows may use them (Manage Actions access). Name one by workspace, package_type and package_name.",
325 default_action: None,
326 actions: &[
327 a("list", Op::Packages(PackagesOp::ListPackages), "A workspace's packages; state deleted for restorable ones"),
328 a("get", Op::Packages(PackagesOp::GetPackage), "One package: address, visibility, repository, downloads"),
329 a("versions", Op::Packages(PackagesOp::ListVersions), "Its versions with tags and downloads; state deleted too"),
330 a("get_version", Op::Packages(PackagesOp::GetVersion), "One version by id, version, digest or tag"),
331 a("update", Op::Packages(PackagesOp::UpdatePackage), "Set visibility, or inherit_access for a linked one"),
332 a("link", Op::Packages(PackagesOp::LinkPackage), "Link it to a repository of its workspace"),
333 a("unlink", Op::Packages(PackagesOp::UnlinkPackage), "Unlink it: the workspace's, private"),
334 a("access", Op::Packages(PackagesOp::ListAccess), "People and teams with a role on it"),
335 a("set_access", Op::Packages(PackagesOp::SetAccess), "Give a person or team read, write or admin"),
336 a("remove_access", Op::Packages(PackagesOp::RemoveAccess), "Take a person's or team's role away"),
337 a("actions_access", Op::Packages(PackagesOp::ListActionsAccess), "Repositories whose workflows may use it"),
338 a("set_actions_access", Op::Packages(PackagesOp::SetActionsAccess), "Let a repository's workflows read or write it"),
339 a("remove_actions_access", Op::Packages(PackagesOp::RemoveActionsAccess), "Stop a repository's workflows using it"),
340 a("delete", Op::Packages(PackagesOp::DeletePackage), "Delete it; restorable for 30 days"),
341 a("restore", Op::Packages(PackagesOp::RestorePackage), "Restore a deleted package"),
342 a("delete_version", Op::Packages(PackagesOp::DeleteVersion), "Delete a version; restorable for 30 days"),
343 a("restore_version", Op::Packages(PackagesOp::RestoreVersion), "Restore a deleted version"),
344 ],
345 },
346 Tool {
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights347 name: "secret",
348 title: "Secrets and variables",
349 description: "A repository's or workspace's secrets and variables, read by workflows and deployments. Secret values are never returned.",
350 default_action: None,
351 actions: &[
352 a("list_secrets", Op::ListActionsSecrets, "Secrets, without values"),
353 a("set_secret", Op::SetActionsSecret, "Add or change a secret"),
354 a("delete_secret", Op::DeleteActionsSecret, "Remove a secret"),
355 a("list_variables", Op::ListActionsVariables, "Variables, with values"),
356 a("set_variable", Op::SetActionsVariable, "Add or change a variable"),
357 a("delete_variable", Op::DeleteActionsVariable, "Remove a variable"),
358 ],
359 },
360 Tool {
361 name: "webhook",
362 title: "Webhooks",
363 description: "HTTPS addresses sent signed events as they happen, for a repository or a whole workspace.",
364 default_action: None,
365 actions: &[
366 a("list", Op::ListWebhooks, "Webhooks, without secrets"),
367 a("create", Op::CreateWebhook, "Register one; a ping is sent"),
368 a("update", Op::UpdateWebhook, "Change address, events or active"),
369 a("delete", Op::DeleteWebhook, "Remove one"),
370 a("ping", Op::PingWebhook, "Send a ping"),
371 a("list_deliveries", Op::ListWebhookDeliveries, "Latest deliveries"),
372 a("redeliver", Op::RedeliverWebhook, "Send a delivery again"),
373 ],
374 },
375 Tool {
376 name: "access",
377 title: "Who has access",
Merge branch 'worktree-agent-a5a5de74d8863d554' into worktree-agent-a16631325aecf58ca378 description: "Who has access to a repository and with which role (read, triage, write, maintain, admin), outside collaborators, a workspace's base permission, and a repository's deploy keys.",
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights379 default_action: None,
380 actions: &[
381 a("list_collaborators", Op::ListCollaborators, "Everyone with a role, and pending invitations"),
382 a("get_permission", Op::GetCollaboratorPermission, "One person's role and capabilities"),
383 a("add_collaborator", Op::AddCollaborator, "Give someone a role, by username or email"),
384 a("update_collaborator", Op::UpdateCollaborator, "Change a direct role"),
385 a("remove_collaborator", Op::RemoveCollaborator, "Take away a direct role"),
386 a("list_invitations", Op::ListRepoInvitations, "Pending invitations to a repository"),
387 a("revoke_invitation", Op::RevokeRepoInvitation, "Withdraw one"),
388 a("set_base_permission", Op::SetBasePermission, "What every member gets on each repository"),
389 a("list_outside_collaborators", Op::ListOutsideCollaborators, "People with roles who are not members"),
Merge branch 'worktree-agent-a5a5de74d8863d554' into worktree-agent-a16631325aecf58ca390 a("list_deploy_keys", Op::DeployKeys(DeployKeysOp::ListDeployKeys), "SSH keys that reach this one repository"),
391 a("get_deploy_key", Op::DeployKeys(DeployKeysOp::GetDeployKey), "One deploy key, by id"),
392 a("add_deploy_key", Op::DeployKeys(DeployKeysOp::CreateDeployKey), "Add one; read-only unless read_only is false"),
393 a("remove_deploy_key", Op::DeployKeys(DeployKeysOp::DeleteDeployKey), "Delete one"),
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights394 ],
395 },
396 Tool {
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar397 name: "team",
398 title: "Teams",
399 description: "Teams: groups of a workspace's members, given roles on repositories together, mentioned as @workspace/team and asked to review together. Name one by `workspace` and its slug (`team`). Any member may create a team; the workspace's owners and the team's maintainers manage it. A secret team is seen only by its people and the owners.",
400 default_action: None,
401 actions: &[
402 a("list", Op::ListTeams, "A workspace's teams you can see"),
403 a("get", Op::GetTeam, "One team"),
404 a("create", Op::CreateTeam, "Create a team; you become its maintainer"),
405 a("update", Op::UpdateTeam, "Change its name, slug, description, visibility, parent or notifications"),
406 a("delete", Op::DeleteTeam, "Delete it; its child teams move up"),
407 a("list_members", Op::ListTeamMembers, "Its people and their roles, child teams' with include_child_teams"),
408 a("set_member", Op::SetTeamMember, "Add a member of the workspace, or change their role"),
409 a("remove_member", Op::RemoveTeamMember, "Take someone out of it"),
410 a("list_child_teams", Op::ListChildTeams, "The teams nested under it"),
411 a("list_repos", Op::ListTeamRepos, "The repositories it has a role on"),
412 a("set_repo", Op::SetTeamRepo, "Give it a role on a repository"),
413 a("remove_repo", Op::RemoveTeamRepo, "Take its role on a repository away"),
414 a("set_review_assignment", Op::SetTeamReviewAssignment, "Whom it picks when asked to review"),
415 a("list_user_teams", Op::ListUserTeams, "The teams someone is in"),
416 ],
417 },
418 Tool {
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights419 name: "workspace",
420 title: "Workspaces",
Merge branch 'main' into worktree-agent-a69aeabc4b0deeb97421 description: "Workspaces own repositories (g1t.sh/{workspace}/{repo}): create, update or delete one, invite members, connect integrations and model providers, set rulesets that hold across its repositories, read and change its projects (what each is, where it runs, its links), and keep your own pinned projects at the top of its sidebar.",
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights422 default_action: None,
423 actions: &[
Merge branch 'worktree-agent-ad7c6d88d93adc817'424 a("get", Op::GetWorkspace, "A workspace's details and settings"),
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights425 a("create", Op::CreateWorkspace, "Create a workspace"),
Packages, with a container registry on g1t.sh; workspaces deleted whole and kept 30 days; Members for every member426 a("delete", Op::DeleteWorkspace, "Delete a workspace and everything in it (support can restore it for 30 days)"),
Merge main (membership, two-factor, GitHub repo roles) into tokens427 a("update", Op::UpdateWorkspace, "Change its name, description, base permission, who may create teams, member privileges or the two-factor requirement"),
428 a("list_members", Op::ListMembers, "Its members, owners first, with their roles"),
429 a("update_member", Op::UpdateMember, "Make someone an owner or a member, billing manager or security manager"),
430 a("remove_member", Op::RemoveMember, "Remove someone from it"),
431 a("transfer_ownership", Op::TransferOwnership, "Hand it to another member: they become an owner, you a member"),
432 a("leave", Op::LeaveWorkspace, "Leave it yourself"),
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights433 a("list_invites", Op::ListWorkspaceInvites, "Its invites"),
Merge workspace invitations: nobody joins a workspace without saying yes, people are found by username, your own invites can bring someone in, and nobody is left without a workspace (identity 0040)434 a("invite_member", Op::InviteMember, "Invite someone by username or email address"),
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights435 a("revoke_invite", Op::RevokeWorkspaceInvite, "Revoke a pending invite"),
436 a("list_integrations", Op::ListIntegrations, "Model providers, alert sources, trackers"),
437 a("connect_integration", Op::ConnectIntegration, "Connect one"),
AI Gateway: OpenAI's format, open models, and your own providers438 a("update_integration", Op::UpdateIntegration, "Change one: rotate its key, choose its AI Gateway models"),
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights439 a("disconnect_integration", Op::DisconnectIntegration, "Remove one"),
440 a("test_integration", Op::TestIntegration, "Check its credentials"),
441 a("get_model_routes", Op::GetModelRoutes, "Where each kind of work's model requests go"),
442 a("set_model_routes", Op::SetModelRoutes, "Replace them"),
Merge branch 'main' into worktree-agent-a69aeabc4b0deeb97443 a("list_projects", Op::ListProjects, "Its projects you can see: what each is, where it runs, its links"),
444 a("get_project", Op::GetProject, "One project"),
445 a("update_project", Op::UpdateProject, "Change a project's name, description, kind, where it runs or its links"),
API: pinned projects over REST and MCP446 a("list_pinned_projects", Op::ListPinnedProjects, "Your pinned projects in it, in your order"),
447 a("pin_project", Op::PinProject, "Pin a project, at a position or the end"),
448 a("unpin_project", Op::UnpinProject, "Unpin a project"),
449 a("reorder_pinned_projects", Op::ReorderPinnedProjects, "Put your pins in a new order"),
Merge rulesets: branch and tag rules, agent-first, enforced on push and merge450 a("list_rulesets", Op::Rules(RulesOp::ListWorkspaceRulesets), "Its rulesets, which hold across its repositories"),
451 a("get_ruleset", Op::Rules(RulesOp::GetWorkspaceRuleset), "One of its rulesets"),
452 a("create_ruleset", Op::Rules(RulesOp::CreateWorkspaceRuleset), "Create a ruleset for some or all of its repositories"),
453 a("update_ruleset", Op::Rules(RulesOp::UpdateWorkspaceRuleset), "Change one of its rulesets"),
454 a("delete_ruleset", Op::Rules(RulesOp::DeleteWorkspaceRuleset), "Delete one of its rulesets"),
455 a("rule_evaluations", Op::Rules(RulesOp::ListWorkspaceRuleEvaluations), "How rules judged changes across its repositories"),
API and MCP for a workspace's personal access token rules, members' tokens and approvals456 a("get_token_policy", Op::Tokens(TokenOp::GetTokenPolicy), "Its rules for personal access tokens"),
One kind of access token; presence and status; usernames keep their case; the tour is a miniature of the real app; icons for password managers457 a("set_token_policy", Op::Tokens(TokenOp::SetTokenPolicy), "Change them: which tokens reach it, approval, lifetime"),
API and MCP for a workspace's personal access token rules, members' tokens and approvals458 a("list_member_tokens", Op::Tokens(TokenOp::ListMemberTokens), "Members' personal access tokens that reach it"),
One kind of access token; presence and status; usernames keep their case; the tour is a miniature of the real app; icons for password managers459 a("list_token_requests", Op::Tokens(TokenOp::ListTokenRequests), "Tokens waiting for approval"),
API and MCP for a workspace's personal access token rules, members' tokens and approvals460 a("review_token_request", Op::Tokens(TokenOp::ReviewTokenRequest), "Approve or deny one"),
461 a("revoke_member_token", Op::Tokens(TokenOp::RevokeMemberToken), "Revoke a member's token in it"),
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights462 ],
463 },
464 Tool {
Merge remote-tracking branch 'origin/claude/cool-newton-7nm8r9' into claude/cool-newton-7nm8r9465 name: "customize",
466 title: "Customize",
467 description: "What shapes how a workspace's agents work, in the formats Claude Code reads: the marketplaces it reads plugins from (`.claude-plugin/marketplace.json`), what Discover lists, the plugins it installed as `name@marketplace` (their skills join the library as `plugin:skill`, their subagents become templates, their remote MCP servers become connectors), and its connectors: MCP servers connected once with a key or a sign-in, then given to every agent, a team or one agent. Members read; owners change. `bundle` is what a job's Claude Code loads on a runner, for the job's own token.",
468 default_action: None,
469 actions: &[
470 a("list_marketplaces", Op::Customize(CustomizeOp::ListMarketplaces), "The marketplaces it reads plugins from"),
471 a("add_marketplace", Op::Customize(CustomizeOp::AddMarketplace), "Add one by owner/repo, workspace/name, a git address or a marketplace.json link"),
472 a("remove_marketplace", Op::Customize(CustomizeOp::RemoveMarketplace), "Remove one; its installed plugins stay"),
473 a("refresh_marketplace", Op::Customize(CustomizeOp::RefreshMarketplace), "Read its manifest again now"),
474 a("discover", Op::Customize(CustomizeOp::Discover), "Every plugin and skill it can add, with availability"),
475 a("list_plugins", Op::Customize(CustomizeOp::ListPlugins), "Installed plugins: pinned commit, components, updates"),
476 a("get_plugin", Op::Customize(CustomizeOp::GetPlugin), "One plugin's listing, install, components, README and agents"),
477 a("install_plugin", Op::Customize(CustomizeOp::InstallPlugin), "Install one at its listed commit"),
478 a("set_plugin_enabled", Op::Customize(CustomizeOp::SetPluginEnabled), "Switch an installed one on or off"),
479 a("uninstall_plugin", Op::Customize(CustomizeOp::UninstallPlugin), "Uninstall one, with its skills, templates and connectors"),
480 a("update_plugin", Op::Customize(CustomizeOp::UpdatePlugin), "Read one again at its marketplace's current commit"),
481 a("list_plugin_agents", Op::Customize(CustomizeOp::ListPluginAgents), "Subagents plugins brought, as templates to hire from"),
482 a("list_connectors", Op::Customize(CustomizeOp::ListConnectors), "MCP servers connected to the workspace, with state, tools and grants"),
483 a("get_connector", Op::Customize(CustomizeOp::GetConnector), "One connector"),
484 a("add_connector", Op::Customize(CustomizeOp::AddConnector), "Add one from the directory, a plugin's server or an address"),
485 a("set_connector_key", Op::Customize(CustomizeOp::SetConnectorKey), "Put a key on one; never returned"),
486 a("remove_connector", Op::Customize(CustomizeOp::RemoveConnector), "Remove one with its secrets and grants"),
487 a("refresh_connector", Op::Customize(CustomizeOp::RefreshConnector), "List its tools again now"),
488 a("grant_connector", Op::Customize(CustomizeOp::GrantConnector), "Give it to every agent, a team or one agent"),
489 a("revoke_connector", Op::Customize(CustomizeOp::RevokeConnector), "Take one grant back"),
490 a("bundle", Op::Customize(CustomizeOp::Bundle), "What a job's Claude Code loads: plugins, library skills, connectors with headers"),
491 ],
492 },
493 Tool {
Usage, Billing settings and prepaid AI credit; fixes from the UX audit494 name: "billing",
495 title: "Billing",
Merge the AI Gateway: Anthropic's Messages API on a workspace's tokens496 description: "A workspace's billing: its usage by product, project and day, its budget (the monthly spend limit, alerts and whether usage pauses at it), its AI credit, its invoices, and its AI Gateway requests. Amounts are whole millionths of a dollar (`_micros`), or cents (`_cents`) where named. Members read it; changing the budget and buying credit are for owners, as people, and never for g1t's agents.",
Usage, Billing settings and prepaid AI credit; fixes from the UX audit497 default_action: Some("usage"),
498 actions: &[
499 a("usage", Op::GetUsage, "Usage over a range of days, by product, meter, project and day, and what paid for it"),
500 a("budget", Op::GetBudget, "The monthly spend limit, what was spent, alerts and whether usage pauses at the limit"),
501 a("set_budget", Op::SetBudget, "Change the spend limit, alerts, pausing or the alert webhook"),
502 a("ai_credit", Op::GetAiCredit, "AI credit left, its grants, auto-reload and how to buy more"),
503 a("buy_ai_credit", Op::BuyAiCredit, "A payment page to buy AI credit, for a person to open"),
504 a("invoices", Op::ListInvoices, "Every invoice, the itemised usage invoices, and the next one so far"),
505 a("billing_details", Op::GetBillingDetails, "Who invoices are made out to and the payment method on file"),
Merge the AI Gateway: Anthropic's Messages API on a workspace's tokens506 a("gateway_requests", Op::ListGatewayRequests, "Recent AI Gateway requests: model, tokens, cost, status and token"),
Usage, Billing settings and prepaid AI credit; fixes from the UX audit507 ],
508 },
509 Tool {
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar510 name: "security",
511 title: "Security",
Merge remote-tracking branch 'origin/claude/cool-newton-7nm8r9' into claude/cool-newton-7nm8r9512 description: "A repository's security: secret scanning alerts and push protection bypasses, custom secret patterns, code scanning alerts and SARIF uploads, vulnerability alerts, the dependency graph and its SBOM, dependency review, settings, a workspace's overview, security advisories and private vulnerability reports. Fix an alert with g1t. Findings are shown to those who can change the code only; published advisories to anyone who can see the repository. Give `repo` (owner/name), or `workspace` for lists across one.",
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar513 default_action: Some("secret_alerts"),
514 actions: &[
515 a("secret_alerts", Op::Security(SecurityOp::ListSecretAlerts), "Secret scanning alerts; by state, secret_type, validity, bypassed"),
516 a("secret_alert", Op::Security(SecurityOp::GetSecretAlert), "One secret alert, with where it was found and its bypass requests"),
517 a("update_secret_alert", Op::Security(SecurityOp::UpdateSecretAlert), "Dismiss a secret alert with a reason, or reopen it"),
518 a("secret_locations", Op::Security(SecurityOp::ListSecretLocations), "Every file, line and commit a secret is in"),
519 a("bypass", Op::Security(SecurityOp::BypassPushProtection), "Push past push protection with a reason, or ask to"),
520 a("check_validity", Op::Security(SecurityOp::CheckSecretValidity), "Ask a secret's issuer whether it still works"),
521 a("bypass_requests", Op::Security(SecurityOp::ListBypassRequests), "A workspace's push protection bypass requests"),
522 a("review_bypass", Op::Security(SecurityOp::ReviewBypassRequest), "Approve, deny or cancel a bypass request"),
523 a("patterns", Op::Security(SecurityOp::ListCustomPatterns), "Custom secret patterns of a repository or workspace"),
524 a("create_pattern", Op::Security(SecurityOp::CreateCustomPattern), "Create a custom secret pattern, as a draft or published"),
525 a("update_pattern", Op::Security(SecurityOp::UpdateCustomPattern), "Change, publish or unpublish a custom pattern"),
526 a("delete_pattern", Op::Security(SecurityOp::DeleteCustomPattern), "Delete a custom pattern"),
527 a("dry_run_pattern", Op::Security(SecurityOp::DryRunCustomPattern), "Run a pattern over the default branch without saving it"),
528 a("code_alerts", Op::Security(SecurityOp::ListCodeAlerts), "Code scanning alerts; by state, severity, tool, rule_id"),
529 a("code_alert", Op::Security(SecurityOp::GetCodeAlert), "One code scanning alert by number"),
530 a("update_code_alert", Op::Security(SecurityOp::UpdateCodeAlert), "Dismiss a code scanning alert with a reason, or reopen it"),
531 a("analyses", Op::Security(SecurityOp::ListAnalyses), "Code scanning analyses, newest first"),
532 a("upload_sarif", Op::Security(SecurityOp::UploadSarif), "Upload a SARIF file, gzipped and base64-encoded"),
533 a("sarif_upload", Op::Security(SecurityOp::GetSarifUpload), "Whether a SARIF upload was read, and its analyses"),
534 a("vulnerability_alerts", Op::Security(SecurityOp::ListVulnerabilityAlerts), "Vulnerable dependencies; by state, severity, ecosystem, package"),
535 a("vulnerability_alert", Op::Security(SecurityOp::GetVulnerabilityAlert), "One vulnerability alert"),
536 a("update_vulnerability_alert", Op::Security(SecurityOp::UpdateVulnerabilityAlert), "Dismiss a vulnerability alert with a reason, or reopen it"),
537 a("fix", Op::Security(SecurityOp::FixAlert), "Put g1t on an issue to fix an alert"),
538 a("dependency_graph", Op::Security(SecurityOp::GetDependencyGraph), "Every package the lockfiles resolve, direct or transitive"),
539 a("sbom", Op::Security(SecurityOp::GetSbom), "The dependency graph as an SPDX 2.3 document"),
540 a("compare_dependencies", Op::Security(SecurityOp::CompareDependencies), "What changes in dependencies between base...head"),
541 a("settings", Op::Security(SecurityOp::GetSettings), "A repository's security settings"),
542 a("update_settings", Op::Security(SecurityOp::UpdateSettings), "Change when checks fail and dependency review's policy"),
543 a("workspace_settings", Op::Security(SecurityOp::GetWorkspaceSettings), "A workspace's delegated bypass and validity checks"),
544 a("update_workspace_settings", Op::Security(SecurityOp::UpdateWorkspaceSettings), "Turn delegated bypass or validity checks on or off"),
545 a("overview", Op::Security(SecurityOp::GetOverview), "A workspace's alerts, trends and coverage"),
Merge remote-tracking branch 'origin/claude/cool-newton-7nm8r9' into claude/cool-newton-7nm8r9546 a("advisories", Op::Security(SecurityOp::ListAdvisories), "A repository's security advisories; by state"),
547 a("advisory", Op::Security(SecurityOp::GetAdvisory), "One advisory by adv_… or G1TSA-… id"),
548 a("create_advisory", Op::Security(SecurityOp::CreateAdvisory), "Draft a security advisory"),
549 a("update_advisory", Op::Security(SecurityOp::UpdateAdvisory), "Change an advisory's fields"),
550 a("set_advisory_state", Op::Security(SecurityOp::SetAdvisoryState), "Publish or withdraw an advisory"),
551 a("reports", Op::Security(SecurityOp::ListReports), "Vulnerability reports sent to the maintainers; by state"),
552 a("report_vulnerability", Op::Security(SecurityOp::ReportVulnerability), "Report a vulnerability privately to a repository's maintainers"),
553 a("review_report", Op::Security(SecurityOp::ReviewReport), "Accept a report as a draft advisory, or decline it"),
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar554 ],
555 },
556 Tool {
API: notifications over REST and MCP, with notifications scopes557 name: "notifications",
558 title: "Notifications",
559 description: "Your inbox: what needs you, and what you follow. One thread per issue, pull request, workflow or deployment, with why you were told (`reason`): an agent waiting on you, a review asked of you, an assignment, a mention, your work's checks, or what you subscribe to and watch. Mark threads read or done once handled, and choose what you hear of with subscribe, unsubscribe and watch. Your own: a personal token.",
560 default_action: Some("list"),
561 actions: &[
562 a("list", Op::ListNotifications, "Unread threads, latest first; all, a view, a reason, a repository"),
563 a("get", Op::GetNotificationThread, "One thread with its recent activity and your subscription"),
564 a("mark_read", Op::MarkThreadRead, "Mark a thread read, or unread"),
565 a("mark_all_read", Op::MarkNotificationsRead, "Mark everything read up to a time, or one repository's"),
566 a("done", Op::MarkThreadDone, "Mark a thread done; new activity brings it back"),
567 a("save", Op::SaveThread, "Save a thread, or unsave it"),
568 a("snooze", Op::SnoozeThread, "Snooze a thread until a time, or bring it back"),
569 a("subscription", Op::GetThreadSubscription, "Your subscription to an issue or pull request"),
570 a("subscribe", Op::SetThreadSubscription, "Subscribe to an issue or pull request, or ignore it"),
571 a("unsubscribe", Op::DeleteThreadSubscription, "Unsubscribe until you comment or are mentioned"),
572 a("watching", Op::GetRepoSubscription, "How you watch a repository"),
573 a("watch", Op::SetRepoSubscription, "Watch a repository: participating, all, ignore or custom"),
574 a("unwatch", Op::DeleteRepoSubscription, "Stop watching a repository"),
575 a("watched", Op::ListWatchedRepos, "Repositories you watch other than the default way"),
576 ],
577 },
578 Tool {
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights579 name: "account",
580 title: "Your account",
Merge workspace invitations: nobody joins a workspace without saying yes, people are found by username, your own invites can bring someone in, and nobody is left without a workspace (identity 0040)581 description: "Who this token acts as and its workspaces (`whoami`), your email addresses, your invites, and invitations to workspaces and repositories waiting for you.",
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights582 default_action: Some("whoami"),
583 actions: &[
584 a("whoami", Op::Whoami, "Who the token acts as, and its workspaces"),
585 a("list_emails", Op::ListEmails, "Your addresses"),
586 a("add_email", Op::AddEmail, "Add an address"),
Merge email confirmation gate: a code and a link, nothing until confirmed (identity 0036)587 a("confirm_email", Op::ConfirmEmail, "Confirm an address with the code from its email"),
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights588 a("remove_email", Op::RemoveEmail, "Remove an address"),
589 a("update_email_settings", Op::UpdateEmailSettings, "Primary, backup and privacy"),
590 a("list_invites", Op::ListInvites, "Your invites to g1t"),
591 a("create_invite", Op::CreateInvite, "Make an invite"),
592 a("revoke_invite", Op::RevokeInvite, "Revoke one"),
Merge workspace invitations: nobody joins a workspace without saying yes, people are found by username, your own invites can bring someone in, and nobody is left without a workspace (identity 0040)593 a("list_workspace_invitations", Op::ListInvitations, "Invitations to workspaces for you"),
594 a("accept_workspace_invitation", Op::AcceptInvitation, "Accept one and join"),
595 a("decline_workspace_invitation", Op::DeclineInvitation, "Decline one"),
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights596 a("list_repository_invitations", Op::ListMyRepoInvitations, "Invitations to repositories for you"),
597 a("accept_repository_invitation", Op::AcceptRepoInvitation, "Accept one"),
598 a("decline_repository_invitation", Op::DeclineRepoInvitation, "Decline one"),
599 ],
600 },
Merge main into Artifacts Phase 2601 Tool {
602 name: "artifact",
603 title: "Artifacts",
604 description: "A workspace's docs, slides, designs and dashboards (Artifacts mode), as you can open them: list, search and read them (a doc's content is Markdown, with block ids to target), make them, edit them (a change with the edit role, a suggestion with comment), move, trash and restore them, their versions, and who can open them. Name one by its id (fol_…) or its address. Not the `workflow` tool's run artifacts. Slides, designs and dashboards answer that they are not here yet.",
605 default_action: None,
606 actions: &[
607 a("list", Op::Folios(FoliosOp::List), "Artifacts you can open; tab, kind, space, q; state trashed for the trash"),
608 a("search", Op::Folios(FoliosOp::Search), "Search them by words and meaning, with the passage that matched"),
609 a("get", Op::Folios(FoliosOp::Get), "One artifact: kind, title, space, owner, your role, who it is shared with"),
610 a("read", Op::Folios(FoliosOp::GetContent), "Its content: a doc's Markdown and block ids, and what you may do"),
611 a("versions", Op::Folios(FoliosOp::ListVersions), "Its saved versions, newest first"),
612 a("access", Op::Folios(FoliosOp::GetAccess), "Who can open it, and how"),
613 a("templates", Op::Folios(FoliosOp::ListTemplates), "Templates to start one from"),
614 a("spaces", Op::Folios(FoliosOp::ListSpaces), "The spaces in your sidebar"),
615 a("query_data", Op::Folios(FoliosOp::QueryDataset), "Run a dataset query as you, over what you can read"),
616 a("create", Op::Folios(FoliosOp::Create), "Make one: in a space, under a doc, or in your Private"),
617 a("update", Op::Folios(FoliosOp::Update), "Rename it, change its icon, or move it"),
618 a("edit", Op::Folios(FoliosOp::Edit), "Change its content: append, replace it all, a section or blocks"),
619 a("trash", Op::Folios(FoliosOp::Trash), "Move it to the trash; restorable for 30 days"),
620 a("restore", Op::Folios(FoliosOp::Restore), "Bring it back from the trash"),
621 a("restore_version", Op::Folios(FoliosOp::RestoreVersion), "Make an earlier version its content again"),
622 a("share", Op::Folios(FoliosOp::SetAccess), "Share it, change general access, or take access away"),
623 a("purge", Op::Folios(FoliosOp::Purge), "Delete one in the trash for good"),
624 ],
625 },
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights626];
627
Projects have Observability: their requests, logs, traces, metrics and errors, from apps on g1t.page with nothing to set up, and from software anywhere else over OpenTelemetry.628/// Operations offered over REST alone, not as an action of any tool: how
629/// a project's telemetry is collected (settings, ingest tokens, exports,
630/// usage) is for people setting it up, not for agents debugging.
631pub const REST_ONLY: &[Op] = &[
632 Op::Telemetry(TelemetryOp::GetSettings),
633 Op::Telemetry(TelemetryOp::UpdateSettings),
634 Op::Telemetry(TelemetryOp::ListTokens),
635 Op::Telemetry(TelemetryOp::CreateToken),
636 Op::Telemetry(TelemetryOp::DeleteToken),
637 Op::Telemetry(TelemetryOp::ListExports),
638 Op::Telemetry(TelemetryOp::CreateExport),
639 Op::Telemetry(TelemetryOp::UpdateExport),
640 Op::Telemetry(TelemetryOp::DeleteExport),
641 Op::Telemetry(TelemetryOp::GetUsage),
642];
643
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights644/// Operations that cannot be undone, or reach beyond g1t's own records:
645/// clients ask before running a tool that has any of them.
646fn destructive(op: Op) -> bool {
647 matches!(
648 op,
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar649 Op::Security(SecurityOp::DeleteCustomPattern | SecurityOp::BypassPushProtection)
Merge rulesets: branch and tag rules, agent-first, enforced on push and merge650 | Op::Rules(RulesOp::DeleteRepoRuleset | RulesOp::DeleteWorkspaceRuleset)
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar651 | Op::DeleteWorkspace
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights652 | Op::UpdateWorkspace
API and MCP for a workspace's personal access token rules, members' tokens and approvals653 | Op::Tokens(TokenOp::RevokeMemberToken | TokenOp::SetTokenPolicy)
Merge main (membership, two-factor, GitHub repo roles) into tokens654 | Op::RemoveMember
655 | Op::TransferOwnership
656 | Op::LeaveWorkspace
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights657 | Op::DeleteRepo
658 | Op::PurgeRepo
659 | Op::TransferRepo
660 | Op::SetRepoVisibility
661 | Op::RemoveEmail
662 | Op::RemoveCollaborator
663 | Op::DisconnectIntegration
AI Gateway: OpenAI's format, open models, and your own providers664 | Op::UpdateIntegration
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights665 | Op::DeleteWebhook
666 | Op::DeleteActionsSecret
667 | Op::DeleteActionsVariable
668 | Op::SetActionsSecret
669 | Op::SetActionsVariable
670 | Op::SetModelRoutes
671 | Op::SetBasePermission
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar672 | Op::DeleteTeam
673 | Op::RemoveTeamRepo
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights674 | Op::MergePullRequest
675 | Op::RemoveRunner
676 | Op::DeleteRunnerGroup
677 | Op::UpdateRunnerSettings
Merge main into Artifacts Phase 2678 | Op::Folios(FoliosOp::SetAccess | FoliosOp::Purge)
Merge remote-tracking branch 'origin/claude/cool-newton-7nm8r9' into claude/cool-newton-7nm8r9679 | Op::Customize(CustomizeOp::RemoveMarketplace | CustomizeOp::UninstallPlugin | CustomizeOp::RemoveConnector)
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights680 )
681}
682
683/// Whether an operation only reads.
684pub fn reads_only(op: Op) -> bool {
685 NO_SCOPE.contains(&op.name())
686 || scope_for(op.name()).is_some_and(|scope| scope.level() == Level::Read)
687}
688
689/// What decides which actions a caller sees.
690pub enum Gate<'a> {
691 /// No limit beyond the person's own role.
692 Everything,
693 /// A g1t agent's token: the operations its run lists.
694 Agent(&'a AgentScope),
695 /// An access token with scopes.
696 Token(&'a TokenAccess),
697}
698
699impl Gate<'_> {
700 pub fn allows(&self, op: Op) -> bool {
701 match self {
702 Gate::Everything => true,
703 Gate::Agent(scope) => op.allowed_by(scope) && !NEVER.contains(&op.name()),
704 Gate::Token(access) => {
705 if NO_SCOPE.contains(&op.name()) {
706 return true;
707 }
708 match scope_for(op.name()) {
709 Some(scope) => access.allows(scope),
710 None => access.scopes.is_none(),
711 }
712 }
713 }
714 }
715}
716
717impl Tool {
718 pub fn by_name(name: &str) -> Option<&'static Tool> {
719 TOOLS.iter().find(|tool| tool.name == name)
720 }
721
722 pub fn action(&self, name: &str) -> Option<&'static Action> {
723 // The tools are 'static; find through TOOLS to keep the lifetime.
724 TOOLS
725 .iter()
726 .find(|tool| tool.name == self.name)
727 .and_then(|tool| tool.actions.iter().find(|action| action.name == name))
728 }
729
730 pub fn visible(&self, gate: &Gate) -> Vec<&'static Action> {
731 TOOLS
732 .iter()
733 .find(|tool| tool.name == self.name)
734 .map(|tool| tool.actions.iter().filter(|action| gate.allows(action.op)).collect())
735 .unwrap_or_default()
736 }
737
738 /// The flat input schema of the actions given.
739 pub fn input_schema(&self, actions: &[&Action]) -> Value {
740 let mut properties = Map::new();
741 let lines: Vec<String> = actions
742 .iter()
743 .map(|action| {
744 let required: Vec<String> = action.op.required();
745 if required.is_empty() {
746 format!("{}: {}.", action.name, action.summary)
747 } else {
748 format!("{} ({}): {}.", action.name, required.join(", "), action.summary)
749 }
750 })
751 .collect();
752 let mut action_schema = json!({
753 "type": "string",
754 "enum": actions.iter().map(|action| action.name).collect::<Vec<_>>(),
755 "description": lines.join("\n"),
756 });
757 if let Some(default) = self.default_action.filter(|name| actions.iter().any(|action| action.name == *name)) {
758 action_schema["default"] = json!(default);
759 }
760 properties.insert("action".to_owned(), action_schema);
761 for action in actions {
762 for (name, schema) in action.op.properties() {
763 merge_property(&mut properties, name, schema);
764 }
765 }
766 let mut required = vec![];
767 if self.default_action.is_none() {
768 required.push("action");
769 }
770 let mut schema = json!({ "type": "object", "properties": properties });
771 if !required.is_empty() {
772 schema["required"] = json!(required);
773 }
774 schema
775 }
776
777 /// The input schema keyed by action: one `oneOf` branch per action,
778 /// each with its own fields and the ones it needs.
779 pub fn discriminated(&self, actions: &[&Action]) -> Value {
780 let branches: Vec<Value> = actions
781 .iter()
782 .map(|action| {
783 let mut properties = Map::new();
784 properties.insert("action".to_owned(), json!({ "const": action.name }));
785 properties.extend(action.op.properties());
786 let mut required = vec![Value::String("action".to_owned())];
787 // The default action may leave `action` out.
788 if self.default_action == Some(action.name) {
789 required.clear();
790 }
791 required.extend(action.op.required().into_iter().map(Value::String));
792 json!({
793 "title": action.name,
794 "description": action.summary,
795 "type": "object",
796 "properties": properties,
797 "required": required,
798 })
799 })
800 .collect();
801 json!({ "type": "object", "oneOf": branches })
802 }
803
804 /// MCP's hints about the actions given: whether the tool only reads,
805 /// whether it can destroy something, and whether calling it twice is
806 /// the same as once.
807 pub fn annotations(&self, actions: &[&Action]) -> Value {
808 let read_only = actions.iter().all(|action| reads_only(action.op));
809 json!({
810 "title": self.title,
811 "readOnlyHint": read_only,
812 "destructiveHint": !read_only && actions.iter().any(|action| destructive(action.op)),
813 "idempotentHint": read_only,
814 "openWorldHint": false,
815 })
816 }
817
818 /// The tool as `tools/list` gives it, for a caller behind `gate`, or
819 /// `None` when it may use none of its actions.
820 pub fn listed(&self, gate: &Gate) -> Option<Value> {
821 let actions = self.visible(gate);
822 if actions.is_empty() {
823 return None;
824 }
825 Some(json!({
826 "name": self.name,
827 "title": self.title,
828 "description": self.description,
829 "inputSchema": self.input_schema(&actions),
830 "annotations": self.annotations(&actions),
831 }))
832 }
833}
834
835/// Adds a property to a tool's flat schema. The first action to use a name
836/// describes it; a later one with other allowed values adds them.
837fn merge_property(properties: &mut Map<String, Value>, name: String, schema: Value) {
838 match properties.get_mut(&name) {
839 None => {
840 properties.insert(name, schema);
841 }
842 Some(existing) => {
843 if let (Some(Value::Array(had)), Some(Value::Array(more))) =
844 (existing.get("enum").cloned(), schema.get("enum"))
845 {
846 let mut merged = had;
847 for value in more {
848 if !merged.contains(value) {
849 merged.push(value.clone());
850 }
851 }
852 existing["enum"] = Value::Array(merged);
853 }
854 // Different kinds of value under one name: say less, accept both.
855 if existing.get("type") != schema.get("type")
856 && let Some(fields) = existing.as_object_mut()
857 {
858 fields.remove("type");
859 fields.remove("items");
860 }
861 }
862 }
863}
864
865/// What a call to a tool runs: the operation its action names, or why not.
866pub fn resolve(tool: &Tool, arguments: &Value) -> Result<Op, String> {
867 let names = || {
868 tool.actions
869 .iter()
870 .map(|action| action.name)
871 .collect::<Vec<_>>()
872 .join(", ")
873 };
874 let Some(name) = arguments["action"].as_str().or(tool.default_action) else {
875 return Err(format!("Give an action: one of {}.", names()));
876 };
877 let Some(action) = tool.action(name) else {
878 return Err(format!("{} has no action {name}. Its actions: {}.", tool.name, names()));
879 };
880 let missing: Vec<String> = action
881 .op
882 .required()
883 .into_iter()
884 .filter(|field| arguments.get(field).is_none_or(Value::is_null))
885 .collect();
886 if !missing.is_empty() {
887 return Err(format!("{}.{name} needs {}.", tool.name, missing.join(", ")));
888 }
889 Ok(action.op)
890}
891
892#[cfg(test)]
893mod tests {
894 use super::*;
895 use g1t_contracts::scopes::{Preset, Scope};
896
897 fn listed(gate: &Gate) -> Vec<Value> {
898 TOOLS.iter().filter_map(|tool| tool.listed(gate)).collect()
899 }
900
901 fn token(scopes: Option<Vec<Scope>>) -> TokenAccess {
902 TokenAccess {
903 token_id: "tok_1".to_owned(),
904 scopes: scopes.map(|scopes| scopes.iter().map(|scope| scope.as_str().to_owned()).collect()),
905 legacy: false,
Merge the AI Gateway: Anthropic's Messages API on a workspace's tokens906 name: None,
Merge branch 'worktree-agent-a3abfcce648e87dca'907 ..TokenAccess::default()
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights908 }
909 }
910
911 #[test]
912 fn every_operation_is_exactly_one_action_of_one_tool() {
913 for op in Op::ALL {
914 let count = TOOLS
915 .iter()
916 .flat_map(|tool| tool.actions.iter())
917 .filter(|action| action.op == op)
918 .count();
Projects have Observability: their requests, logs, traces, metrics and errors, from apps on g1t.page with nothing to set up, and from software anywhere else over OpenTelemetry.919 let expected = usize::from(!REST_ONLY.contains(&op));
920 assert_eq!(count, expected, "{} is {count} actions", op.name());
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights921 }
922 for tool in TOOLS {
923 let mut names = std::collections::HashSet::new();
924 for action in tool.actions {
925 assert!(names.insert(action.name), "{}.{} twice", tool.name, action.name);
926 }
927 if let Some(default) = tool.default_action {
928 assert!(tool.action(default).is_some(), "{}", tool.name);
929 }
930 }
Projects have Observability: their requests, logs, traces, metrics and errors, from apps on g1t.page with nothing to set up, and from software anywhere else over OpenTelemetry.931 assert!(TOOLS.len() <= 21, "{} tools", TOOLS.len());
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights932 }
933
934 #[test]
935 fn every_operation_needs_exactly_one_scope_or_none() {
936 use g1t_contracts::scopes::OPERATIONS;
937 for op in Op::ALL {
938 let mapped = OPERATIONS.iter().filter(|(name, _)| *name == op.name()).count();
939 let free = NO_SCOPE.contains(&op.name());
940 assert_eq!(mapped + usize::from(free), 1, "{}", op.name());
941 }
942 for (name, _) in OPERATIONS {
943 assert!(Op::by_name(name).is_some(), "{name} is not an operation");
944 }
945 }
946
947 #[test]
948 fn each_tool_schema_is_valid_with_one_branch_per_action() {
949 for tool in TOOLS {
950 let actions: Vec<&Action> = tool.actions.iter().collect();
951 let flat = tool.input_schema(&actions);
952 assert_eq!(flat["type"], "object");
953 assert!(flat.get("oneOf").is_none(), "no oneOf at the top level");
954 let listed: Vec<&str> = flat["properties"]["action"]["enum"]
955 .as_array()
956 .unwrap()
957 .iter()
958 .map(|name| name.as_str().unwrap())
959 .collect();
960 assert_eq!(listed, tool.actions.iter().map(|action| action.name).collect::<Vec<_>>());
961 for action in tool.actions {
962 for field in action.op.required() {
963 assert!(flat["properties"].get(&field).is_some(), "{}.{}: {field}", tool.name, action.name);
964 }
965 }
966 let keyed = tool.discriminated(&actions);
967 let branches = keyed["oneOf"].as_array().unwrap();
968 assert_eq!(branches.len(), tool.actions.len());
969 for (branch, action) in branches.iter().zip(tool.actions) {
970 assert_eq!(branch["properties"]["action"]["const"], action.name);
971 for field in branch["required"].as_array().unwrap() {
972 assert!(branch["properties"].get(field.as_str().unwrap()).is_some(), "{}.{}: {field}", tool.name, action.name);
973 }
974 }
975 // A well-formed JSON Schema object throughout.
976 let text = serde_json::to_string(&flat).unwrap();
977 assert!(serde_json::from_str::<Value>(&text).is_ok());
978 }
979 }
980
981 #[test]
982 fn a_read_only_token_sees_read_actions_only() {
983 let access = token(Preset::ReadOnly.scopes());
984 let gate = Gate::Token(&access);
985 for tool in TOOLS {
986 for action in tool.visible(&gate) {
987 assert!(reads_only(action.op), "{}.{}", tool.name, action.name);
988 }
989 }
990 let tools = listed(&gate);
991 for tool in &tools {
992 assert_eq!(tool["annotations"]["readOnlyHint"], true, "{}", tool["name"]);
993 assert_eq!(tool["annotations"]["destructiveHint"], false);
994 }
995 let issue = tools.iter().find(|tool| tool["name"] == "issue").unwrap();
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar996 assert_eq!(issue["inputSchema"]["properties"]["action"]["enum"], json!(["list", "get", "labels"]));
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights997 // Nothing of the agent tool is a read.
998 assert!(!tools.iter().any(|tool| tool["name"] == "agent"));
999 }
1000
1001 #[test]
1002 fn a_narrow_token_sees_only_its_tools() {
1003 let access = token(Some(vec![Scope::IssuesWrite]));
1004 let names: Vec<Value> = listed(&Gate::Token(&access)).into_iter().map(|tool| tool["name"].clone()).collect();
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar1005 // Labels and milestones are the repository's, managed with issues:write.
1006 assert_eq!(names, vec![json!("repository"), json!("issue"), json!("plan"), json!("account")]);
API: notifications over REST and MCP, with notifications scopes1007 // Notifications are a resource of their own: reading them lists
1008 // only what reads.
1009 let reader = token(Some(vec![Scope::NotificationsRead]));
1010 let tools = listed(&Gate::Token(&reader));
1011 let notifications = tools.iter().find(|tool| tool["name"] == "notifications").unwrap();
1012 assert_eq!(
1013 notifications["inputSchema"]["properties"]["action"]["enum"],
1014 json!(["list", "get", "subscription", "watching", "watched"])
1015 );
1016 assert_eq!(notifications["annotations"]["readOnlyHint"], true);
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights1017 let full = token(None);
1018 assert_eq!(listed(&Gate::Token(&full)).len(), TOOLS.len());
1019 assert_eq!(listed(&Gate::Everything).len(), TOOLS.len());
1020 }
1021
1022 #[test]
1023 fn a_tool_that_can_destroy_says_so() {
1024 let tools = listed(&Gate::Everything);
1025 let repository = tools.iter().find(|tool| tool["name"] == "repository").unwrap();
1026 assert_eq!(repository["annotations"]["destructiveHint"], true);
1027 assert_eq!(repository["annotations"]["readOnlyHint"], false);
1028 let memory = tools.iter().find(|tool| tool["name"] == "memory").unwrap();
1029 assert_eq!(memory["annotations"]["destructiveHint"], false);
1030 }
1031
1032 #[test]
1033 fn calls_resolve_to_their_operation_or_say_what_is_missing() {
1034 let issue = Tool::by_name("issue").unwrap();
1035 assert_eq!(resolve(issue, &json!({ "action": "get", "repo": "a/b", "number": 1 })), Ok(Op::GetIssue));
1036 assert_eq!(resolve(issue, &json!({ "action": "get", "repo": "a/b" })), Err("issue.get needs number.".to_owned()));
1037 assert!(resolve(issue, &json!({})).unwrap_err().starts_with("Give an action"));
1038 assert!(resolve(issue, &json!({ "action": "explode" })).unwrap_err().contains("no action explode"));
1039 let search = Tool::by_name("search").unwrap();
1040 assert_eq!(resolve(search, &json!({ "query": "x" })), Ok(Op::Search));
1041 let account = Tool::by_name("account").unwrap();
1042 assert_eq!(resolve(account, &json!({})), Ok(Op::Whoami));
1043 }
1044
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar1045 #[test]
1046 fn teams_are_one_tool_and_a_workspace_reader_sees_only_its_reads() {
1047 let team = Tool::by_name("team").unwrap();
1048 let names: Vec<&str> = team.actions.iter().map(|action| action.name).collect();
1049 assert_eq!(
1050 names,
1051 [
1052 "list",
1053 "get",
1054 "create",
1055 "update",
1056 "delete",
1057 "list_members",
1058 "set_member",
1059 "remove_member",
1060 "list_child_teams",
1061 "list_repos",
1062 "set_repo",
1063 "remove_repo",
1064 "set_review_assignment",
1065 "list_user_teams",
1066 ]
1067 );
1068 let reader = token(Some(vec![Scope::WorkspaceRead]));
1069 let tools = listed(&Gate::Token(&reader));
1070 let listed_team = tools.iter().find(|tool| tool["name"] == "team").unwrap();
1071 assert_eq!(
1072 listed_team["inputSchema"]["properties"]["action"]["enum"],
1073 json!(["list", "get", "list_members", "list_child_teams", "list_repos", "list_user_teams"])
1074 );
1075 assert_eq!(listed_team["annotations"]["readOnlyHint"], true);
1076 // A team's role on a repository is who has access.
1077 let admin = token(Some(vec![Scope::WorkspaceAdmin]));
1078 let tools = listed(&Gate::Token(&admin));
1079 let listed_team = tools.iter().find(|tool| tool["name"] == "team").unwrap();
1080 let actions = listed_team["inputSchema"]["properties"]["action"]["enum"].as_array().unwrap();
1081 assert!(actions.contains(&json!("set_review_assignment")) && !actions.contains(&json!("set_repo")));
1082 let access = token(Some(vec![Scope::AccessAdmin]));
1083 let tools = listed(&Gate::Token(&access));
1084 let listed_team = tools.iter().find(|tool| tool["name"] == "team").unwrap();
1085 assert_eq!(listed_team["inputSchema"]["properties"]["action"]["enum"], json!(["set_repo", "remove_repo"]));
1086 // Both kinds of role a schema names are offered.
1087 let roles = &listed(&Gate::Everything).into_iter().find(|tool| tool["name"] == "team").unwrap()["inputSchema"]
1088 ["properties"]["role"]["enum"];
1089 for role in ["member", "maintainer", "read", "admin"] {
1090 assert!(roles.as_array().unwrap().contains(&json!(role)), "{role}");
1091 }
1092 assert_eq!(
1093 resolve(team, &json!({ "action": "set_repo", "workspace": "acme", "team": "backend", "repo": "rocket" })),
1094 Err("team.set_repo needs role.".to_owned())
1095 );
1096 }
1097
1098 #[test]
1099 fn reviewers_and_code_owners_are_actions_of_their_tools() {
1100 let pull = Tool::by_name("pull_request").unwrap();
1101 assert_eq!(
1102 resolve(pull, &json!({ "action": "request_reviewers", "repo": "a/b", "number": 1, "team_reviewers": ["backend"] })),
1103 Ok(Op::RequestReviewers)
1104 );
1105 assert_eq!(pull.action("remove_requested_reviewers").map(|action| action.op), Some(Op::RemoveRequestedReviewers));
1106 let repository = Tool::by_name("repository").unwrap();
1107 assert_eq!(resolve(repository, &json!({ "action": "codeowners", "repo": "a/b" })), Ok(Op::GetCodeownersErrors));
1108 assert!(reads_only(Op::GetCodeownersErrors));
1109 assert!(!reads_only(Op::RequestReviewers));
1110 }
1111
Merge main into Artifacts Phase 21112 /// The `artifact` tool offers each token only what its artifacts scope
1113 /// allows: reading, then changing, then sharing and deleting for good.
1114 /// Workflow runs' artifacts are the `workflow` tool's, under their own
1115 /// scope, and neither scope reaches the other's.
1116 #[test]
1117 fn the_artifact_tool_offers_what_the_artifacts_scope_allows() {
1118 let actions = |scopes: Vec<Scope>| -> Option<Value> {
1119 let access = token(Some(scopes));
1120 Tool::by_name("artifact").unwrap().listed(&Gate::Token(&access)).map(|tool| tool["inputSchema"]["properties"]["action"]["enum"].clone())
1121 };
1122 let reads = json!(["list", "search", "get", "read", "versions", "access", "templates", "spaces", "query_data"]);
1123 assert_eq!(actions(vec![Scope::ArtifactsRead]), Some(reads.clone()));
1124 let writes = actions(vec![Scope::ArtifactsWrite]).unwrap();
1125 for action in ["create", "update", "edit", "trash", "restore", "restore_version"] {
1126 assert!(writes.as_array().unwrap().contains(&json!(action)), "{action}");
1127 }
1128 assert!(!writes.as_array().unwrap().contains(&json!("share")) && !writes.as_array().unwrap().contains(&json!("purge")));
1129 let admin = actions(vec![Scope::ArtifactsAdmin]).unwrap();
1130 assert_eq!(admin.as_array().unwrap().len(), Tool::by_name("artifact").unwrap().actions.len());
1131 // Without an artifacts scope there is no artifact tool at all.
1132 assert_eq!(actions(vec![Scope::WorkflowsWrite, Scope::IssuesWrite]), None);
1133 // And an artifacts scope shows nothing of workflow runs' artifacts.
1134 let access = token(Some(vec![Scope::ArtifactsAdmin]));
1135 assert!(Tool::by_name("workflow").unwrap().listed(&Gate::Token(&access)).is_none());
1136 // The read-only and agent presets read artifacts and change none.
1137 for preset in [Preset::ReadOnly, Preset::Agent] {
1138 let access = token(preset.scopes());
1139 let tool = Tool::by_name("artifact").unwrap().listed(&Gate::Token(&access)).unwrap();
1140 assert_eq!(tool["inputSchema"]["properties"]["action"]["enum"], reads, "{}", preset.as_str());
1141 assert_eq!(tool["annotations"]["readOnlyHint"], true);
1142 }
1143 // Sharing and deleting for good can't be undone the same way.
1144 let tools = listed(&Gate::Everything);
1145 let artifact = tools.iter().find(|tool| tool["name"] == "artifact").unwrap();
1146 assert_eq!(artifact["annotations"]["destructiveHint"], true);
1147 assert!(artifact["description"].as_str().unwrap().contains("Not the `workflow` tool's run artifacts"));
1148 let tool = Tool::by_name("artifact").unwrap();
1149 assert_eq!(resolve(tool, &json!({ "action": "read", "workspace": "acme" })), Err("artifact.read needs artifact_id.".to_owned()));
1150 assert_eq!(
1151 resolve(tool, &json!({ "action": "edit", "workspace": "acme", "artifact_id": "fol_1", "markdown": "x" })),
1152 Ok(Op::Folios(FoliosOp::Edit))
1153 );
1154 }
1155
g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights1156 /// How much smaller `tools/list` is than one tool per operation. Run
1157 /// with `--nocapture` to see the numbers.
1158 #[test]
1159 fn the_tool_list_is_much_smaller_than_one_tool_per_operation() {
1160 let before: Vec<Value> = Op::ALL
1161 .into_iter()
1162 .map(|op| json!({ "name": op.name(), "description": op.description(), "inputSchema": op.input() }))
1163 .collect();
1164 let after = listed(&Gate::Everything);
1165 let before_bytes = serde_json::to_string(&json!({ "tools": before })).unwrap().len();
1166 let after_bytes = serde_json::to_string(&json!({ "tools": after })).unwrap().len();
1167 let agent = token(Preset::Agent.scopes());
1168 let agent_bytes = serde_json::to_string(&json!({ "tools": listed(&Gate::Token(&agent)) })).unwrap().len();
1169 let read = token(Preset::ReadOnly.scopes());
1170 let read_bytes = serde_json::to_string(&json!({ "tools": listed(&Gate::Token(&read)) })).unwrap().len();
1171 println!(
1172 "tools/list: before {} tools, {before_bytes} bytes (~{} tokens); after {} tools, {after_bytes} bytes (~{} tokens); agent preset {agent_bytes} bytes (~{} tokens); read only {read_bytes} bytes (~{} tokens)",
1173 before.len(),
1174 before_bytes / 4,
1175 after.len(),
1176 after_bytes / 4,
1177 agent_bytes / 4,
1178 read_bytes / 4,
1179 );
1180 assert!(after_bytes * 2 < before_bytes, "{after_bytes} vs {before_bytes}");
1181 }
1182}

This file's history is long; its oldest lines are credited to the oldest commit read.