Pick any line to see why it is the way it is: the commit, the pull request and issue it came from, and what the agent was thinking.
| Merge branch 'worktree-agent-a6a121745e81f639f' | 1 | { |
| 2 | "$schema": "../../node_modules/wrangler/config-schema.json", | |
| 3 | "name": "g1t-identity", | |
| 4 | "account_id": "1e6f2cffa3f445920836e8ebe446bb58", | |
| 5 | "compatibility_date": "2026-09-26", | |
| 6 | // Runs next to its database: a request makes several queries in turn, | |
| 7 | // and each would otherwise cross the distance to it. | |
| 8 | "placement": { "mode": "off" }, | |
| 9 | "main": "build/index.js", | |
| Merge main into rm-agents: mirroring removal, open signups, free-tier limits, the g1t CLI and runner fixes, with the agent removal kept. The CLI's table of operations is regenerated from the API without the agent, customize and AI credit operations; no CLI command used them. | 10 | // Purging deleted workspaces and accounts once their restore window |
| 11 | // passes (src/lib.rs `scheduled`). | |
| Merge branch 'worktree-agent-a6a121745e81f639f' | 12 | "triggers": { "crons": ["*/15 * * * *"] }, |
| 13 | "build": { "command": "node ../../scripts/build-rust-worker.mjs" }, | |
| 14 | // Reached only through service bindings. | |
| 15 | "workers_dev": false, | |
| 16 | "d1_databases": [ | |
| 17 | { | |
| 18 | "binding": "DB", | |
| 19 | "database_name": "g1t", | |
| 20 | "database_id": "b7d49c93-2666-4006-a3c3-073a01838dc9", | |
| 21 | "migrations_dir": "migrations" | |
| 22 | } | |
| 23 | ], | |
| 24 | "send_email": [{ "name": "EMAIL", "remote": true }], | |
| 25 | // Uploaded avatars, keyed by the SHA-256 of their bytes. Only this | |
| 26 | // service writes them; the site reads them to serve /avatars/<hash>. | |
| 27 | "kv_namespaces": [{ "binding": "AVATARS", "id": "e627b571f07047e187c03e1fc2b3bbdd" }], | |
| 28 | // Renaming a workspace publishes workspace.renamed, so every service | |
| 29 | // moves what it keeps under the old slug. | |
| 30 | "services": [ | |
| 31 | { "binding": "EVENTS", "service": "g1t-events" }, | |
| 32 | // Deleting a workspace counts what goes with it, and has billing | |
| 33 | // settle it first; staff restores and purges are recorded in sudo's | |
| 34 | // audit log, which billing keeps (src/deletion.rs). | |
| 35 | { "binding": "REPOS", "service": "g1t-repos" }, | |
| 36 | { "binding": "PROJECTS", "service": "g1t-projects" }, | |
| 37 | { "binding": "BILLING", "service": "g1t-billing" } | |
| 38 | ], | |
| 39 | // Signing in with GitHub (src/github.rs), through g1t's GitHub App. | |
| 40 | // Its client ID is public. Secrets: GITHUB_APP_CLIENT_SECRET, the app's | |
| 41 | // client secret, and IDENTITY_KEY, 64 hex characters, which seals the | |
| 42 | // GitHub user tokens kept for each linked account. Without the client ID | |
| 43 | // and secret, nobody is offered GitHub sign-in. | |
| 44 | // | |
| Merge main into rm-agents: mirroring removal, open signups, free-tier limits, the g1t CLI and runner fixes, with the agent removal kept. The CLI's table of operations is regenerated from the API without the agent, customize and AI credit operations; no CLI command used them. | 45 | // Invites (src/invites.rs): anyone may register. An invitation sent to |
| 46 | // an address without an account carries an invite code, working | |
| 47 | // INVITE_TTL_DAYS. IDENTITY_KEY also seals invite codes so their makers | |
| Merge branch 'worktree-agent-a6a121745e81f639f' | 48 | // can copy them again. |
| 49 | // | |
| 50 | // PROTECTED_WORKSPACES: workspaces nobody can ever delete, by owner, | |
| 51 | // token or staff, as comma-separated slugs or workspace ids. flagon-io | |
| 52 | // is protected whatever this says (src/deletion.rs). | |
| Merge account deletion: soft delete for 30 days, staff restore and purge, ghost for what remains (identity 0037) | 53 | // |
| 54 | // PROTECTED_ACCOUNTS: accounts nobody can ever delete, by the person or | |
| 55 | // staff, as comma-separated usernames or user ids. g1t, g1t-agent and | |
| 56 | // ghost are protected whatever this says (src/account_deletion.rs). | |
| Merge branch 'worktree-agent-a6a121745e81f639f' | 57 | "vars": { |
| 58 | "PROTECTED_WORKSPACES": "flagon-io", | |
| Merge account deletion: soft delete for 30 days, staff restore and purge, ghost for what remains (identity 0037) | 59 | "PROTECTED_ACCOUNTS": "", |
| Merge branch 'worktree-agent-a6a121745e81f639f' | 60 | "GITHUB_APP_CLIENT_ID": "Iv23liZS94alfjIUn1eW", |
| Merge main into rm-agents: mirroring removal, open signups, free-tier limits, the g1t CLI and runner fixes, with the agent removal kept. The CLI's table of operations is regenerated from the API without the agent, customize and AI credit operations; no CLI command used them. | 61 | "INVITE_TTL_DAYS": "30" |
| Merge branch 'worktree-agent-a6a121745e81f639f' | 62 | }, |
| Merge branch 'worktree-agent-a8752162fea25f63f' into spend-guardrails | 63 | // Every log kept: sign-ins and tokens, where every failure matters. |
| 64 | "observability": { "enabled": true, "head_sampling_rate": 1 } | |
| Merge branch 'worktree-agent-a6a121745e81f639f' | 65 | } |
This file's history is long; its oldest lines are credited to the oldest commit read.