Skip to content
Sign up

flagon-io/g1t

public
00

Where people and agents ship software together. The open-source git platform for the whole job: issues, agents, checks and deploys to the edge.

g1t.sh
gitagentscloudflarerustforgemcp
306 linesCodeBlameRaw

Pick any line to see why it is the way it is: the commit, the pull request and issue it came from, and what the agent was thinking.

Cache hits are counted, not only their bytes1//! The webhooks service: events, delivered to the addresses a repository or
2//! a workspace registers.
3//!
4//! Every event g1t publishes can be delivered: an HTTPS `POST` of JSON,
5//! signed with the webhook's secret in `X-G1t-Signature-256`, and retried
6//! with growing waits when the receiver does not answer with a 2xx. Each
7//! delivery is kept, with what was sent and what came back, and can be sent
8//! again.
9//!
10//! Mirrors `packages/contracts/src/webhooks.ts`.
11
12use serde::{Deserialize, Serialize};
13
14use crate::repos::RepoPath;
15use crate::{User, Viewer};
16
17/// Every event a webhook can be sent, in the order people are shown them.
The contracts no longer describe g1t's own agents, and workspaces can keep their AI providers. Every consumer had already stopped using them, so the TypeScript and Rust contracts drop the workspace-agent, ability, look, skill-library, context, runner-agent and mention modules, the chat and docs RPCs agents posted and read through, the folio agent methods, the agent_waiting notification, agent.asked and memory.changed events, AI credit, token and gateway billing types, model routes and sessions, team agents, agent tokens, plan, review, message and confidence types, command rules, cost caps and confidence rules. The agents:run and models:* scopes are no longer offered by any preset, OAuth default or permission form, but a stored token or grant that names them still reads; and the removed operations are gone from the scope table, so the API's check that every operation has exactly one scope is strict again. What stored data needs in order to parse (old run and credential kinds, an agent team lead, retired rules and webhook events, old guardrail and integration settings) still parses, and a run's token is still PrincipalKind::Agent, which now means a run's token and the @g1t rows written before. The customize, marketplace, skills and claude-plugin contracts stay only until the mobile app drops its Customize screens.18pub const EVENT_TYPES: [&str; 107] = [
Cache hits are counted, not only their bytes19 "git.push",
Merge branch 'worktree-agent-a8b78c62188153aa3' into claude/cool-newton-7nm8r920 "git.deleted",
Cache hits are counted, not only their bytes21 "branch.renamed",
22 "repo.created",
23 "repo.forked",
24 "repo.updated",
25 "repo.visibility_changed",
26 "repo.renamed",
27 "repo.transferred",
28 "repo.default_branch_changed",
29 "repo.archived",
30 "repo.unarchived",
31 "repo.deleted",
32 "repo.restored",
33 "repo.purged",
34 "repo.collaborator_added",
35 "repo.collaborator_removed",
36 "repo.collaborator_role_changed",
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar37 "team.created",
38 "team.edited",
39 "team.deleted",
40 "team.member_added",
41 "team.member_role_changed",
42 "team.member_removed",
43 "team.repo_added",
44 "team.repo_role_changed",
45 "team.repo_removed",
@g1t welcomes you when you join a workspace, and that is the one introduction any agent makes. Identity now says when a person becomes a member, workspace.member_joined, by invitation, by an invite code, or by creating the workspace, and webhooks can hear it; the agents service hears it too, and for anyone who joined, never the creator, the workspace's @g1t opens your direct message and says in its own voice who it is, what to ask it, how agents answer, and where things are, once per person per workspace and charged to @g1t like any reply, with a fixed welcome when no model can be used. The agents, workspaces, authentication and webhooks guides say so.46 "workspace.member_joined",
Merge rulesets: branch and tag rules, agent-first, enforced on push and merge47 "ruleset.created",
48 "ruleset.updated",
49 "ruleset.deleted",
Cache hits are counted, not only their bytes50 "issue.opened",
51 "issue.updated",
52 "issue.assigned",
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar53 "issue.labeled",
54 "issue.unlabeled",
55 "issue.milestoned",
56 "issue.demilestoned",
Cache hits are counted, not only their bytes57 "issue.closed",
58 "issue.reopened",
59 "comment.created",
Merge Actions: cross-repo workflows and actions, release and deployment triggers, step timeouts60 "comment.edited",
61 "comment.deleted",
Cache hits are counted, not only their bytes62 "pull.opened",
63 "pull.ready",
64 "pull.updated",
65 "pull.merge_requested",
66 "pull.merged",
67 "pull.closed",
Merge Actions: cross-repo workflows and actions, release and deployment triggers, step timeouts68 "pull.reopened",
69 "pull.converted_to_draft",
Events: review requests, assignments, stops and deployments are published70 "pull.assigned",
71 "pull.review_requested",
72 "pull.review_request_removed",
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar73 "pull.labeled",
74 "pull.unlabeled",
75 "pull.milestoned",
76 "pull.demilestoned",
77 "pull.base_changed",
Events: review requests, assignments, stops and deployments are published78 "pull.stalled",
79 "pull.resumed",
Merge Actions: cross-repo workflows and actions, release and deployment triggers, step timeouts80 "release.created",
81 "release.published",
82 "release.released",
83 "release.prereleased",
84 "release.edited",
85 "release.unpublished",
86 "release.deleted",
Cache hits are counted, not only their bytes87 "checks.completed",
Merge checks: statuses and check runs on every commit88 "status.created",
89 "check_run.created",
90 "check_run.completed",
91 "check_run.rerequested",
92 "check_run.requested_action",
93 "check_suite.completed",
94 "check_suite.rerequested",
Cache hits are counted, not only their bytes95 "workflow.completed",
Events: review requests, assignments, stops and deployments are published96 "deployment.succeeded",
97 "deployment.failed",
Merge branch 'main' into worktree-agent-a69aeabc4b0deeb9798 "deployment.created",
99 "deployment_status.created",
Cache hits are counted, not only their bytes100 "queue.changed",
101 "session.appended",
102 "package.published",
103 "package.version_deleted",
104 "package.deleted",
105 "package.visibility_changed",
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar106 "secret_scanning_alert.created",
107 "secret_scanning_alert.fixed",
108 "secret_scanning_alert.dismissed",
109 "secret_scanning_alert.reopened",
110 "secret_scanning.bypass_requested",
111 "secret_scanning.bypass_reviewed",
112 "code_scanning_alert.created",
113 "code_scanning_alert.fixed",
114 "code_scanning_alert.dismissed",
115 "code_scanning_alert.reopened",
116 "vulnerability_alert.created",
117 "vulnerability_alert.fixed",
118 "vulnerability_alert.dismissed",
Merge remote-tracking branch 'origin/claude/cool-newton-7nm8r9' into claude/cool-newton-7nm8r9119 "secret_scanning_alert.summary",
120 "code_scanning_alert.summary",
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar121 "vulnerability_alert.reopened",
Merge remote-tracking branch 'origin/claude/cool-newton-7nm8r9' into claude/cool-newton-7nm8r9122 "vulnerability_alert.summary",
123 "security_advisory.published",
124 "security_advisory.withdrawn",
125 "security_advisory.reported",
Cache hits are counted, not only their bytes126];
127
The contracts no longer describe g1t's own agents, and workspaces can keep their AI providers. Every consumer had already stopped using them, so the TypeScript and Rust contracts drop the workspace-agent, ability, look, skill-library, context, runner-agent and mention modules, the chat and docs RPCs agents posted and read through, the folio agent methods, the agent_waiting notification, agent.asked and memory.changed events, AI credit, token and gateway billing types, model routes and sessions, team agents, agent tokens, plan, review, message and confidence types, command rules, cost caps and confidence rules. The agents:run and models:* scopes are no longer offered by any preset, OAuth default or permission form, but a stored token or grant that names them still reads; and the removed operations are gone from the scope table, so the API's check that every operation has exactly one scope is strict again. What stored data needs in order to parse (old run and credential kinds, an agent team lead, retired rules and webhook events, old guardrail and integration settings) still parses, and a run's token is still PrincipalKind::Agent, which now means a run's token and the @g1t rows written before. The customize, marketplace, skills and claude-plugin contracts stay only until the mobile app drops its Customize screens.128/// Event types webhooks were once offered that g1t no longer sends: they
129/// came from g1t's own agents, since removed. A webhook saved with one
130/// still reads, and saving its list again leaves them out.
131pub const RETIRED_EVENT_TYPES: [&str; 2] = ["agent.asked", "review.completed"];
132
Cache hits are counted, not only their bytes133/// What a webhook belongs to.
134#[derive(Clone, Copy, Debug, PartialEq, Eq, Serialize, Deserialize)]
135#[serde(rename_all = "snake_case")]
136pub enum HookScope {
137 /// One repository's events.
138 Repo,
139 /// The events of every repository in a workspace.
140 Workspace,
141}
142
143#[derive(Clone, Debug, Serialize, Deserialize)]
144#[serde(rename_all = "camelCase")]
145pub struct Hook {
146 pub id: String,
147 pub scope: HookScope,
148 pub workspace: String,
149 /// For a repository's webhook: `owner/name`.
150 pub repo: Option<String>,
151 pub url: String,
152 /// The event types it is sent, or `["*"]` for all.
153 pub events: Vec<String>,
154 pub active: bool,
155 /// The last four characters of its secret.
156 pub secret_hint: String,
157 pub created_by: String,
158 /// RFC 3339.
159 pub created_at: String,
160 /// How its latest delivery went: `delivered`, `pending` or `failed`.
161 pub last_status: Option<String>,
162 pub last_delivered_at: Option<String>,
163}
164
165/// One event sent, or being sent, to a webhook.
166#[derive(Clone, Debug, Serialize, Deserialize)]
167#[serde(rename_all = "camelCase")]
168pub struct HookDelivery {
169 pub id: String,
170 pub hook_id: String,
171 /// The event's id, or empty for a ping.
172 pub event_id: String,
173 pub event: String,
174 /// `pending` while it will be tried again, `delivered`, or `failed` once
175 /// it has been tried as often as it will be.
176 pub status: String,
177 pub attempts: u32,
178 /// The receiver's HTTP status, the last time it answered.
179 pub response_status: Option<u16>,
180 /// The start of what it answered.
181 pub response_body: Option<String>,
182 /// Why the last attempt failed, when the receiver could not be reached.
183 pub error: Option<String>,
184 pub duration_ms: Option<u32>,
185 /// The JSON that was sent.
186 pub payload: String,
187 /// RFC 3339.
188 pub created_at: String,
189 pub delivered_at: Option<String>,
190 pub next_attempt_at: Option<String>,
191}
192
193/// Which webhooks a call is about: a repository's, or with `repo` left out,
194/// the workspace's own.
195#[derive(Clone, Debug, Serialize, Deserialize)]
196pub struct HookOwner {
197 pub workspace: String,
198 #[serde(default)]
199 pub repo: Option<RepoPath>,
200}
201
202/// `list`. Returns `Outcome<Vec<Hook>>`. Members of the workspace only.
203#[derive(Debug, Serialize, Deserialize)]
204pub struct ListArgs {
205 pub viewer: Viewer,
206 #[serde(flatten)]
207 pub owner: HookOwner,
208}
209
210/// `create`. Returns `Outcome<CreatedHook>`. Members, for a repository's
211/// webhooks; owners, for the workspace's.
212#[derive(Debug, Serialize, Deserialize)]
213pub struct CreateArgs {
214 pub actor: User,
215 #[serde(flatten)]
216 pub owner: HookOwner,
217 pub url: String,
218 /// Event types, or `["*"]` for all. All when empty.
219 #[serde(default)]
220 pub events: Vec<String>,
221 /// Made by g1t when left out.
222 #[serde(default)]
223 pub secret: Option<String>,
224}
225
226#[derive(Clone, Debug, Serialize, Deserialize)]
227pub struct CreatedHook {
228 pub hook: Hook,
229 /// The secret, when g1t made it: shown this once.
230 pub secret: Option<String>,
231}
232
233/// `update`: only the fields given change. Returns `Outcome<Hook>`.
234#[derive(Debug, Serialize, Deserialize)]
235pub struct UpdateArgs {
236 pub actor: User,
237 #[serde(flatten)]
238 pub owner: HookOwner,
239 pub id: String,
240 #[serde(default)]
241 pub url: Option<String>,
242 #[serde(default)]
243 pub events: Option<Vec<String>>,
244 #[serde(default)]
245 pub active: Option<bool>,
246}
247
248/// `delete` (returns `Outcome<bool>`) and `ping` (sends a `ping` event and
249/// returns `Outcome<HookDelivery>`).
250#[derive(Debug, Serialize, Deserialize)]
251pub struct HookArgs {
252 pub actor: User,
253 #[serde(flatten)]
254 pub owner: HookOwner,
255 pub id: String,
256}
257
258/// `deliveries`: a webhook's latest deliveries, newest first. Returns
259/// `Outcome<Vec<HookDelivery>>`.
260#[derive(Debug, Serialize, Deserialize)]
261pub struct DeliveriesArgs {
262 pub viewer: Viewer,
263 #[serde(flatten)]
264 pub owner: HookOwner,
265 pub id: String,
266}
267
268/// `redeliver`: sends a delivery's payload again, as a new delivery.
269/// Returns `Outcome<HookDelivery>`.
270#[derive(Debug, Serialize, Deserialize)]
271#[serde(rename_all = "camelCase")]
272pub struct RedeliverArgs {
273 pub actor: User,
274 #[serde(flatten)]
275 pub owner: HookOwner,
276 pub delivery_id: String,
277}
278
279#[cfg(test)]
280mod tests {
The contracts no longer describe g1t's own agents, and workspaces can keep their AI providers. Every consumer had already stopped using them, so the TypeScript and Rust contracts drop the workspace-agent, ability, look, skill-library, context, runner-agent and mention modules, the chat and docs RPCs agents posted and read through, the folio agent methods, the agent_waiting notification, agent.asked and memory.changed events, AI credit, token and gateway billing types, model routes and sessions, team agents, agent tokens, plan, review, message and confidence types, command rules, cost caps and confidence rules. The agents:run and models:* scopes are no longer offered by any preset, OAuth default or permission form, but a stored token or grant that names them still reads; and the removed operations are gone from the scope table, so the API's check that every operation has exactly one scope is strict again. What stored data needs in order to parse (old run and credential kinds, an agent team lead, retired rules and webhook events, old guardrail and integration settings) still parses, and a run's token is still PrincipalKind::Agent, which now means a run's token and the @g1t rows written before. The customize, marketplace, skills and claude-plugin contracts stay only until the mobile app drops its Customize screens.281 use super::{EVENT_TYPES, RETIRED_EVENT_TYPES};
282
283 #[test]
284 fn retired_events_are_not_offered() {
285 for kind in RETIRED_EVENT_TYPES {
286 assert!(!EVENT_TYPES.contains(&kind), "{kind}");
287 }
288 }
Cache hits are counted, not only their bytes289
290 /// The TypeScript mirror lists the same events, in the same order.
291 #[test]
292 fn the_typescript_mirror_lists_the_same_events() {
293 let ts = include_str!("../../../packages/contracts/src/webhooks.ts");
294 let list = ts
295 .split_once("export const EVENT_TYPES = [")
296 .and_then(|(_, rest)| rest.split_once("] as const"))
297 .map(|(list, _)| list)
298 .expect("EVENT_TYPES in webhooks.ts");
299 let mirrored: Vec<&str> = list
300 .split(',')
301 .map(|item| item.trim().trim_matches('"'))
302 .filter(|item| !item.is_empty())
303 .collect();
304 assert_eq!(mirrored, EVENT_TYPES);
305 }
306}

This file's history is long; its oldest lines are credited to the oldest commit read.