Skip to content
Sign up

flagon-io/g1t

public
0
1,135 linesCodeBlameRaw

Pick any line to see why it is the way it is: the commit, the pull request and issue it came from, and what the agent was thinking.

Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships1//! The MCP server's tools: a few resource tools, each with an `action`.
2//!
3//! Every operation is one action of one tool. A call is dispatched to the
4//! operation it names, so permissions, the audit log, billing and outcomes
5//! are exactly those of the REST API. A token sees only the actions its
6//! scopes allow, and a tool none of whose actions it may use is not listed.
7//!
8//! The listed input schema is one flat object: `action`, then every field
9//! any of its actions takes. Which fields each action needs is in the
10//! `action` field's description and checked on every call. Claude's API,
11//! and so most MCP clients, refuse a tool whose input schema has `oneOf`
12//! at its top level, so the schema keyed by action, with each action's
13//! required fields, is [`discriminated`], published on the server's card
14//! and in the docs.
15
16use g1t_contracts::credentials::NEVER;
17use g1t_contracts::identity::AgentScope;
18use g1t_contracts::scopes::{Level, NO_SCOPE, TokenAccess, scope_for};
19use serde_json::{Map, Value, json};
20
Merge branch 'main' into worktree-agent-a69aeabc4b0deeb9721use crate::about::AboutOp;
The artifacts service is services/artifacts, the Worker g1t-artifacts, bound as ARTIFACTS by the API, the site and the agents; its live rooms move to it with a Durable Object transfer from g1t-docs-service, and its database, bucket, indexes and queue keep their names. The git store's binding and settings are GITSTORE, its ops scripts gitstore-*, and workflow run artifacts keep their compatible API under run_artifacts modules. The deploy tool puts a Worker that has never deployed before the Workers in its stage that bind to it, and the deploy guide gives the cutover runbook.22use crate::run_artifacts::ArtifactsOp;
Merge branch 'worktree-agent-a3b9b1f730f55b5bf'23use crate::caches::CachesOp;
Merge GitHub pull request #8 (claude/cool-newton-7nm8r9): Docker deployments on g1t.page behind a switch that stays off until Cloudflare's container APIs are checked live, workflows a workspace manages in its repositories, tarball and zipball downloads, refs/pull/* kept to g1t alone, framework detection for g1t.page builds, and a workflow's event payload matching GitHub's.24use crate::archives::ArchiveOp;
Merge branch 'worktree-agent-a5a5de74d8863d554' into worktree-agent-a16631325aecf58ca25use crate::deploy_keys::DeployKeysOp;
Merge branch 'main' into worktree-agent-a69aeabc4b0deeb9726use crate::deployments::DeploymentsOp;
Projects have Observability: their requests, logs, traces, metrics and errors, from apps on g1t.page with nothing to set up, and from software anywhere else over OpenTelemetry.27use crate::telemetry::TelemetryOp;
Merge packages: roles, Actions access, source label, soft delete, API28use crate::packages::PackagesOp;
Merge main into Artifacts Phase 229use crate::folios::FoliosOp;
Merge branch 'worktree-agent-a6ec0a89d7fe7a9ae'30use crate::coordination::CoordinationOp;
Merge branch 'worktree-agent-a3abfcce648e87dca'31use crate::protection::ProtectionOp;
API and MCP for a workspace's personal access token rules, members' tokens and approvals32use crate::token_policy::TokenOp;
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships33use crate::operations::Op;
Merge checks: statuses and check runs on every commit34use crate::checks::ChecksOp;
Merge rulesets: branch and tag rules, agent-first, enforced on push and merge35use crate::rules::RulesOp;
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar36use crate::security::SecurityOp;
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships37
38pub struct Action {
39 pub name: &'static str,
40 pub op: Op,
41 /// One line, for the `action` field's description.
42 pub summary: &'static str,
43}
44
45pub struct Tool {
46 pub name: &'static str,
47 pub title: &'static str,
48 /// What it is for, in a sentence or two.
49 pub description: &'static str,
50 pub actions: &'static [Action],
51 /// The action a call without one runs.
52 pub default_action: Option<&'static str>,
53}
54
55const fn a(name: &'static str, op: Op, summary: &'static str) -> Action {
56 Action { name, op, summary }
57}
58
59pub const TOOLS: &[Tool] = &[
60 Tool {
61 name: "search",
62 title: "Search",
The API and MCP server no longer offer g1t's own agents. g1t is what your coding agents work against, not an agent of its own, so the operations that drove hosted agents are gone: messaging an agent on a pull request (message_agent, take_messages, answer_message), assigning or delegating an issue to g1t (assign_issue, delegate), plans (plan_work, get_plan, apply_plan), the context hub (search_context, get_entity), model routes, agents' computers, AI Gateway requests, "Fix with g1t" on a security alert, and every Customize route (marketplaces, plugins, connectors). The callbacks the agent sandbox reported through (/agent-runs/*, /runs/:id/usage, /plans/:id, /reviews/:id) go with them, update_repo_settings stops accepting agent_review, max_revisions and hold_low_confidence, import_issue stops accepting assign, and an old agent token with no run behind it is refused.63 description: "Find things. `code` (the default) searches all of g1t you can see: repositories, code, issues, pull requests and people, with qualifiers like repo:owner/name, language:rust, is:issue. `ticket` reads a Jira, Linear or Sentry item the work refers to.",
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships64 default_action: Some("code"),
65 actions: &[
66 a("code", Op::Search, "Search all of g1t: repositories, code, issues, pull requests, people"),
67 a("ticket", Op::GetContext, "A Jira, Linear or Sentry item the work refers to, as it is now"),
68 ],
69 },
70 Tool {
71 name: "repository",
72 title: "Repositories",
Merge main into rm-agents: mirroring removal, open signups, free-tier limits, the g1t CLI and runner fixes, with the agent removal kept. The CLI's table of operations is regenerated from the API without the agent, customize and AI credit operations; no CLI command used them.73 description: "Repositories: find, read and create them, change their settings and rulesets (what may happen to branches and tags, and what a pull request needs to merge), check their CODEOWNERS file, manage their labels and milestones, see and dismiss their security alerts (secrets and vulnerable dependencies), read what their default branch says (languages, contributors, license), star them and publish releases. Name one as \"owner/name\". Deleting, transferring and changing visibility need `confirm`.",
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships74 default_action: None,
75 actions: &[
76 a("list", Op::ListRepos, "Repositories you can see"),
77 a("get", Op::GetRepo, "One repository"),
g1t coordinates the work and the person's own sessions do it: Ask g1t reads g1t with the same tools any agent gets, answers in one conversation shared with the @g1t direct message in Chat, and hands work to sessions in the person's own harness, whose subagents g1t records, ties to issues and pull requests, and lets see each other.78 a("commits", Op::ListCommits, "A branch's commits with their messages (why each was made); with path, the commit that last changed it"),
79 a("contents", Op::GetContents, "A file's text, or a directory's entries and README, at a branch, tag or commit"),
Merge GitHub pull request #8 (claude/cool-newton-7nm8r9): Docker deployments on g1t.page behind a switch that stays off until Cloudflare's container APIs are checked live, workflows a workspace manages in its repositories, tarball and zipball downloads, refs/pull/* kept to g1t alone, framework detection for g1t.page builds, and a workflow's event payload matching GitHub's.80 a("tarball", Op::Archives(ArchiveOp::DownloadTarball), "A 10-minute link to a branch, tag or commit as a .tar.gz"),
81 a("zipball", Op::Archives(ArchiveOp::DownloadZipball), "A 10-minute link to a branch, tag or commit as a .zip"),
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships82 a("create", Op::CreateRepo, "Create one, empty or copied from a public git URL"),
83 a("update", Op::UpdateRepo, "Change description, website, topics, default branch, protection"),
Merge rulesets: branch and tag rules, agent-first, enforced on push and merge84 a("get_settings", Op::GetRepoSettings, "How pull requests merge, and the default branch's protection as its rules stack"),
85 a("update_settings", Op::UpdateRepoSettings, "Change how pull requests merge and the default branch protection ruleset"),
86 a("check_names", Op::ListCheckNames, "Check names reported lately, to require in a ruleset"),
87 a("list_rulesets", Op::Rules(RulesOp::ListRepoRulesets), "Its rulesets, and its workspace's that hold in it"),
88 a("get_ruleset", Op::Rules(RulesOp::GetRepoRuleset), "One ruleset"),
89 a("create_ruleset", Op::Rules(RulesOp::CreateRepoRuleset), "Create a ruleset for its branches or tags"),
90 a("update_ruleset", Op::Rules(RulesOp::UpdateRepoRuleset), "Change a ruleset"),
91 a("delete_ruleset", Op::Rules(RulesOp::DeleteRepoRuleset), "Delete a ruleset"),
92 a("branch_rules", Op::Rules(RulesOp::GetBranchRules), "Every rule that holds for a branch or tag, and where it comes from"),
93 a("rule_evaluations", Op::Rules(RulesOp::ListRuleEvaluations), "How its rules judged pushes and merges, with insights"),
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar94 a("codeowners", Op::GetCodeownersErrors, "Problems in its CODEOWNERS file, by line"),
95 a("list_labels", Op::ListLabels, "Labels, with colors and how many issues and pull requests carry each"),
96 a("create_label", Op::CreateLabel, "Create a label"),
97 a("update_label", Op::UpdateLabel, "Rename a label or change its color or description"),
98 a("delete_label", Op::DeleteLabel, "Delete a label, from everything that carries it"),
99 a("add_default_labels", Op::AddDefaultLabels, "Add the default labels it is missing"),
100 a("list_milestones", Op::ListMilestones, "Milestones, with progress and due dates"),
101 a("get_milestone", Op::GetMilestone, "One milestone with its issues and pull requests"),
102 a("create_milestone", Op::CreateMilestone, "Create a milestone"),
103 a("update_milestone", Op::UpdateMilestone, "Change a milestone's title, description, due date or state"),
104 a("delete_milestone", Op::DeleteMilestone, "Delete a milestone"),
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships105 a("list_events", Op::ListEvents, "Timeline: pushes, issues, pull requests, comments"),
Merge branch 'main' into worktree-agent-a69aeabc4b0deeb97106 a("languages", Op::About(AboutOp::GetLanguages), "Its languages by bytes, with colors and percentages"),
107 a("contributors", Op::About(AboutOp::ListContributors), "Who made it: commits per person, agent and author, by week"),
108 a("license", Op::About(AboutOp::GetLicense), "The license its LICENSE file holds"),
109 a("stargazers", Op::About(AboutOp::ListStargazers), "Who starred it"),
110 a("starred", Op::About(AboutOp::CheckStarred), "Whether you starred it, and how many have"),
111 a("star", Op::About(AboutOp::Star), "Star it"),
112 a("unstar", Op::About(AboutOp::Unstar), "Take your star back"),
113 a("list_starred", Op::About(AboutOp::ListStarred), "Repositories you starred"),
114 a("list_releases", Op::About(AboutOp::ListReleases), "Releases, newest first"),
115 a("latest_release", Op::About(AboutOp::GetLatestRelease), "The latest release"),
116 a("get_release", Op::About(AboutOp::GetRelease), "One release by id"),
117 a("get_release_by_tag", Op::About(AboutOp::GetReleaseByTag), "The release of a tag"),
118 a("create_release", Op::About(AboutOp::CreateRelease), "Publish a release of a tag, making the tag if needed"),
119 a("update_release", Op::About(AboutOp::UpdateRelease), "Change a release's title, notes, draft or prerelease"),
120 a("delete_release", Op::About(AboutOp::DeleteRelease), "Delete a release; its tag stays"),
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships121 a("rename_branch", Op::RenameBranch, "Rename a branch"),
The Branches page does things to branches now. It has tabs (Overview, Yours, Active, Stale, All, kept in the address as ?tab=) and search; Overview shows the default branch, then the first five of your branches, the active ones and the stale ones, each linking to the rest. Each branch is a row with its name in a code chip with a copy button, who made its latest commit and when, that commit's checks, behind and ahead counts with bars drawn against the largest shown, and its pull request (the open one, else the newest merged or closed) with its state; on a phone the columns fold under the name. Yours is branches whose latest commit is the viewer's; stale is no commit in 90 days.122 a("create_branch", Op::CreateBranch, "Make a branch at a branch, tag or commit"),
123 a("delete_branch", Op::DeleteBranch, "Delete a branch; make it again at its commit to restore it"),
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships124 a("rename", Op::RenameRepo, "Rename it; old addresses redirect"),
125 a("transfer", Op::TransferRepo, "Move it to another workspace you own"),
126 a("archive", Op::ArchiveRepo, "Make it read-only"),
127 a("unarchive", Op::UnarchiveRepo, "Make it writable again"),
128 a("set_visibility", Op::SetRepoVisibility, "Make it public or private"),
129 a("delete", Op::DeleteRepo, "Delete it; restorable for 30 days"),
130 a("list_deleted", Op::ListDeletedRepos, "A workspace's deleted repositories"),
131 a("restore", Op::RestoreRepo, "Restore a deleted one"),
132 a("purge", Op::PurgeRepo, "Remove a deleted one for good"),
Merge branch 'worktree-agent-ab8033ab973f8d99a'133 a("why", Op::Why, "Why a line is the way it is: commit, pull request, issue, decisions, session"),
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships134 a("security_alerts", Op::ListSecurityAlerts, "Secret and dependency alerts, filtered by state"),
135 a("dismiss_alert", Op::DismissSecurityAlert, "Dismiss an alert with a reason"),
136 a("reopen_alert", Op::ReopenSecurityAlert, "Reopen a dismissed alert"),
137 ],
138 },
139 Tool {
140 name: "issue",
141 title: "Issues",
Merge branch 'worktree-agent-a6ec0a89d7fe7a9ae'142 description: "Issues: what should change. Before working on one, `work` gives everything about it (definition of done, who is on it, its pull requests, what it waits on); `claim` says you are on it (advisory and expiring, never a lock), `release` or `handoff` when you stop. `update` with blocked_by sets the issues that must land first. Issues and pull requests share numbers; `comment` works on either.",
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships143 default_action: None,
144 actions: &[
145 a("list", Op::ListIssues, "Issues on a repository, newest first"),
146 a("get", Op::GetIssue, "One issue with comments and its pull requests"),
147 a("create", Op::CreateIssue, "Open an issue"),
Merge branch 'worktree-agent-a6ec0a89d7fe7a9ae'148 a("update", Op::UpdateIssue, "Change title, body, labels, milestone, assignees or blocked_by"),
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar149 a("labels", Op::ListIssueLabels, "The labels an issue or pull request carries"),
150 a("add_labels", Op::AddIssueLabels, "Add labels to an issue or pull request"),
151 a("set_labels", Op::SetIssueLabels, "Replace the labels of an issue or pull request"),
152 a("remove_labels", Op::RemoveIssueLabels, "Take labels off an issue or pull request"),
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships153 a("close", Op::CloseIssue, "Close it without a pull request"),
154 a("reopen", Op::ReopenIssue, "Reopen it"),
155 a("comment", Op::AddComment, "Comment on an issue or pull request; path and line for one line of a change"),
Merge Actions: cross-repo workflows and actions, release and deployment triggers, step timeouts156 a("edit_comment", Op::EditComment, "Change a comment's text: your own, or any with the Maintain role"),
157 a("delete_comment", Op::DeleteComment, "Delete a comment: your own, or any with the Maintain role"),
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships158 a("import", Op::ImportIssue, "Open an issue from a Jira, Linear or Sentry item"),
Merge branch 'worktree-agent-a6ec0a89d7fe7a9ae'159 a("work", Op::Coordination(CoordinationOp::GetWork), "Everything to pick it up: done means, claims, sessions, pull requests, blockers, decisions, recent events"),
160 a("claim", Op::Coordination(CoordinationOp::ClaimIssue), "Say you are working on it; lists who else is, and what it is blocked by"),
161 a("release", Op::Coordination(CoordinationOp::ReleaseClaim), "Stop working on it"),
162 a("handoff", Op::Coordination(CoordinationOp::HandOffIssue), "Hand it off, to someone or anyone, with a note on where it stands"),
163 a("list_claims", Op::Coordination(CoordinationOp::ListClaims), "Claims on a repository's issues: who is working on what"),
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships164 ],
165 },
166 Tool {
167 name: "pull_request",
168 title: "Pull requests",
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar169 description: "Pull requests: start a change for an issue, record your session, mark it ready, ask people and teams to review, review and merge. Read `overlaps` and `behind` on `get` before going far, and `code_owners` for whose approval it needs.",
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships170 default_action: None,
171 actions: &[
172 a("list", Op::ListPullRequests, "Pull requests on a repository, newest first"),
173 a("get", Op::GetPullRequest, "Status, checks and required checks, reviews, overlaps, whether it is behind"),
174 a("changes", Op::GetPullRequestChanges, "Files and line-by-line diff"),
175 a("create", Op::CreatePullRequest, "Start a draft with its own fork to push to, or open one from a pushed branch"),
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar176 a("update", Op::UpdatePullRequest, "Change its base branch, labels, milestone, assignees or reviewers"),
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships177 a("record_session", Op::RecordSession, "Append prompt, reasoning and tool entries to its session"),
178 a("read_session", Op::ReadSession, "Its recorded session"),
Merge branch 'worktree-agent-ab8033ab973f8d99a'179 a("record_decision", Op::RecordDecision, "Record why: a proposal, claim, fix or note, kept as claimed"),
180 a("list_decisions", Op::ListDecisions, "Decision records on a pull request, or an issue and its pull requests"),
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships181 a("ready", Op::MarkPullRequestReady, "Mark a draft ready, with a summary"),
Merge Actions: cross-repo workflows and actions, release and deployment triggers, step timeouts182 a("draft", Op::ConvertPullRequestToDraft, "Turn it back into a draft"),
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar183 a("request_reviewers", Op::RequestReviewers, "Ask people or teams to review it"),
184 a("remove_requested_reviewers", Op::RemoveRequestedReviewers, "Stop asking people or teams to review it"),
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships185 a("review", Op::ReviewPullRequest, "Approve or request changes"),
186 a("close", Op::ClosePullRequest, "Close without merging"),
Merge Actions: cross-repo workflows and actions, release and deployment triggers, step timeouts187 a("reopen", Op::ReopenPullRequest, "Reopen a closed one"),
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships188 a("merge", Op::MergePullRequest, "Land it, or join the merge queue"),
189 a("merge_queue", Op::GetMergeQueue, "The repository's merge queue"),
190 ],
191 },
192 Tool {
Merge branch 'worktree-agent-a6ec0a89d7fe7a9ae'193 name: "session",
194 title: "Sessions",
g1t coordinates the work and the person's own sessions do it: Ask g1t reads g1t with the same tools any agent gets, answers in one conversation shared with the @g1t direct message in Chat, and hands work to sessions in the person's own harness, whose subagents g1t records, ties to issues and pull requests, and lets see each other.195 description: "Your harness session on a repository, so others see who is working on what: `start` once (idempotent on harness_session_id; a subagent starts its own with parent_id), `update` as a heartbeat or to attach an issue, pull request, branch or head commit, `record` prompts, reasoning, tool calls, skills used and what it touched (idempotent on key), `end` when done with what it reported. `list` with an issue, or a path, shows who else (sibling subagents too) is on the same work. `dispatch` starts work on an issue in a session on the person's own Claude. A session goes idle after 15 minutes without a heartbeat and ends after 2 hours.",
Merge branch 'worktree-agent-a6ec0a89d7fe7a9ae'196 default_action: None,
197 actions: &[
198 a("start", Op::Coordination(CoordinationOp::StartSession), "Start one, or get the one started with this harness_session_id"),
199 a("update", Op::Coordination(CoordinationOp::UpdateSession), "Heartbeat; or attach an issue, pull request, branch, head commit or title"),
200 a("record", Op::Coordination(CoordinationOp::RecordSessionEntries), "Record prompts, reasoning and tool calls; a key makes each idempotent"),
201 a("end", Op::Coordination(CoordinationOp::EndSession), "End it"),
202 a("get", Op::Coordination(CoordinationOp::GetSession), "One session and its entries"),
g1t coordinates the work and the person's own sessions do it: Ask g1t reads g1t with the same tools any agent gets, answers in one conversation shared with the @g1t direct message in Chat, and hands work to sessions in the person's own harness, whose subagents g1t records, ties to issues and pull requests, and lets see each other.203 a("list", Op::Coordination(CoordinationOp::ListSessions), "A repository's sessions: active, idle or ended, by issue, pull request or file touched; with subagents, each tree whole"),
204 a("dispatch", Op::Coordination(CoordinationOp::StartAgentSession), "Start work on an issue in a session on the person's own Claude (Managed Agents with the workspace's Anthropic key), or get a Claude Code hand-off"),
Merge branch 'worktree-agent-a6ec0a89d7fe7a9ae'205 ],
206 },
207 Tool {
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships208 name: "memory",
209 title: "Memory",
210 description: "What the project and its workspace remember for the next agent: how to build, conventions, decisions, traps. Recall before you start; remember one short fact at a time, never a secret.",
211 default_action: None,
212 actions: &[
213 a("recall", Op::Recall, "Search memory, or list it all"),
214 a("remember", Op::Remember, "Save one fact"),
215 ],
216 },
217 Tool {
218 name: "workflow",
219 title: "Workflows",
Merge branch 'worktree-agent-a3b9b1f730f55b5bf'220 description: "GitHub Actions workflows from .g1t/workflows: their runs, jobs and logs, and running, cancelling or rerunning them. Runs' artifacts: listing, a download link, deleting, and how long they are kept. The repository's actions/cache entries: listing them, what they hold against its 10 GiB, and deleting them. Deployments wherever they run (reported from any CI, made by jobs with an `environment:`, or built on g1t.page), their statuses and environments, and reporting your own; environments' protection rules, approving or rejecting the jobs they hold, approving a pull request's run from outside, the token's default permissions, repository dispatch, and the workflows a workspace runs in its repositories without a file in them. Checks on commits: statuses, check runs (a g1t Actions job is one) and check suites, to read where a commit stands or report on it from CI or an integration. Also the self-hosted runners they run on: a workspace's (`workspace`) or a repository's own (`repo`), and their groups.",
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships221 default_action: None,
222 actions: &[
223 a("list", Op::ListWorkflows, "Workflows on the default branch"),
Merge branch 'worktree-agent-a4db4b523bb973765'224 a("get", Op::GetWorkflow, "One workflow by id, file or name, with its file on a branch or tag"),
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships225 a("list_runs", Op::ListWorkflowRuns, "Runs, newest first"),
Merge Actions runs: summaries, attempts and re-runs, graceful cancel, log downloads, badges (actions 0009)226 a("get_run", Op::GetWorkflowRun, "One run with its jobs and steps; an earlier attempt with attempt"),
g1t coordinates the work and the person's own sessions do it: Ask g1t reads g1t with the same tools any agent gets, answers in one conversation shared with the @g1t direct message in Chat, and hands work to sessions in the person's own harness, whose subagents g1t records, ties to issues and pull requests, and lets see each other.227 a("job_logs", Op::GetJobLogs, "A job's log after a sequence number, or its last lines with tail (why it failed)"),
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships228 a("dispatch", Op::DispatchWorkflow, "Run a workflow_dispatch workflow"),
Merge Actions runs: summaries, attempts and re-runs, graceful cancel, log downloads, badges (actions 0009)229 a("cancel", Op::CancelWorkflowRun, "Cancel a run, letting its jobs clean up; force stops them outright"),
230 a("rerun", Op::RerunWorkflowRun, "Run a finished run again: all, failed_only, or one job; debug for debug logging"),
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships231 a("update", Op::UpdateWorkflow, "Turn a workflow on or off"),
Actions: OIDC tokens, the toolkit's cache and artifact services, and artifacts in R2232 a("list_artifacts", Op::Artifacts(ArtifactsOp::ListArtifacts), "A repository's artifacts, newest first; or a run's with run_artifacts"),
233 a("run_artifacts", Op::Artifacts(ArtifactsOp::ListRunArtifacts), "One run's artifacts"),
234 a("get_artifact", Op::Artifacts(ArtifactsOp::GetArtifact), "One artifact: size, digest, expiry, run"),
235 a("download_artifact", Op::Artifacts(ArtifactsOp::DownloadArtifact), "A 10-minute link to an artifact's zip"),
236 a("delete_artifact", Op::Artifacts(ArtifactsOp::DeleteArtifact), "Delete an artifact before it expires"),
237 a("artifact_retention", Op::Artifacts(ArtifactsOp::GetArtifactRetention), "Days the repository keeps artifacts"),
238 a("set_artifact_retention", Op::Artifacts(ArtifactsOp::SetArtifactRetention), "Change the days the repository keeps artifacts"),
Merge branch 'worktree-agent-a3b9b1f730f55b5bf'239 a("list_caches", Op::Caches(CachesOp::ListCaches), "The repository's actions/cache entries: by key prefix or ref, largest or least used first"),
240 a("cache_usage", Op::Caches(CachesOp::GetCacheUsage), "What the repository's cache entries hold, against its 10 GiB"),
241 a("delete_caches", Op::Caches(CachesOp::DeleteCachesByKey), "Delete the cache entries with a key, on every ref or one"),
242 a("delete_cache", Op::Caches(CachesOp::DeleteCache), "Delete one cache entry by its id"),
Merge checks: statuses and check runs on every commit243 a("combined_status", Op::Checks(ChecksOp::GetCombinedStatus), "A commit's statuses and the state they add up to"),
244 a("list_statuses", Op::Checks(ChecksOp::ListCommitStatuses), "A commit's statuses, newest first"),
245 a("set_status", Op::Checks(ChecksOp::CreateCommitStatus), "Set a status on a commit"),
246 a("list_check_runs", Op::Checks(ChecksOp::ListCheckRunsForRef), "A commit's check runs, g1t Actions jobs included"),
247 a("get_check_run", Op::Checks(ChecksOp::GetCheckRun), "One check run with its report"),
248 a("check_run_annotations", Op::Checks(ChecksOp::ListCheckRunAnnotations), "What a check run says about lines of files"),
249 a("create_check_run", Op::Checks(ChecksOp::CreateCheckRun), "Report a check run on a commit"),
250 a("update_check_run", Op::Checks(ChecksOp::UpdateCheckRun), "Move a check run on, complete it, add annotations"),
251 a("rerequest_check_run", Op::Checks(ChecksOp::RerequestCheckRun), "Ask for a check run to run again"),
252 a("list_check_suites", Op::Checks(ChecksOp::ListCheckSuitesForRef), "A commit's check suites, one per reporter or workflow run"),
253 a("get_check_suite", Op::Checks(ChecksOp::GetCheckSuite), "One check suite"),
254 a("rerequest_check_suite", Op::Checks(ChecksOp::RerequestCheckSuite), "Ask for a check suite to run again"),
Merge branch 'main' into worktree-agent-a69aeabc4b0deeb97255 a("list_deployments", Op::Deployments(DeploymentsOp::ListDeployments), "Deployments wherever they run, newest first, filtered"),
256 a("get_deployment", Op::Deployments(DeploymentsOp::GetDeployment), "One deployment with every status it has had"),
257 a("create_deployment", Op::Deployments(DeploymentsOp::CreateDeployment), "Report a deployment of a ref to an environment"),
258 a("deployment_statuses", Op::Deployments(DeploymentsOp::ListDeploymentStatuses), "A deployment's statuses, newest first"),
259 a("create_deployment_status", Op::Deployments(DeploymentsOp::CreateDeploymentStatus), "Report where a deployment is: in_progress, success, failure"),
260 a("list_environments", Op::Deployments(DeploymentsOp::ListEnvironments), "Environments with their current and latest deployments"),
Merge branch 'worktree-agent-a3abfcce648e87dca'261 a("get_environment", Op::Deployments(DeploymentsOp::GetEnvironment), "One environment by name, with its protection rules"),
Merge branch 'worktree-agent-a4d35ee70c50683d0' into claude/cool-newton-7nm8r9262 a("start_deployment_build", Op::Deployments(DeploymentsOp::StartDeploymentBuild), "From a workflow job: open a g1t.page build it runs itself"),
Merge branch 'worktree-agent-a3abfcce648e87dca'263 a("update_environment", Op::Protection(ProtectionOp::UpdateEnvironment), "Set an environment's reviewers, wait timer and branches"),
264 a("delete_environment", Op::Protection(ProtectionOp::DeleteEnvironment), "Remove an environment's protection rules"),
265 a("pending_deployments", Op::Protection(ProtectionOp::GetPendingDeployments), "The environments holding a run's jobs"),
266 a("review_deployments", Op::Protection(ProtectionOp::ReviewPendingDeployments), "Approve or reject a run's jobs for its environments"),
267 a("approve_run", Op::Protection(ProtectionOp::ApproveWorkflowRun), "Let a run of a pull request from outside start"),
268 a("get_permissions", Op::Protection(ProtectionOp::GetWorkflowPermissions), "What a job's token gets without `permissions:`"),
269 a("set_permissions", Op::Protection(ProtectionOp::SetWorkflowPermissions), "Set it: read or write"),
270 a("get_approval_policy", Op::Protection(ProtectionOp::GetForkPrApproval), "Which pull requests' runs wait for approval"),
271 a("set_approval_policy", Op::Protection(ProtectionOp::SetForkPrApproval), "Set which pull requests' runs wait for approval"),
Merge Actions: cross-repo workflows and actions, release and deployment triggers, step timeouts272 a("get_access", Op::Protection(ProtectionOp::GetActionsAccess), "Which repositories may use this one's actions and workflows"),
273 a("set_access", Op::Protection(ProtectionOp::SetActionsAccess), "Let the workspace's private repositories use them, or not"),
Merge branch 'worktree-agent-a3abfcce648e87dca'274 a("repository_dispatch", Op::Protection(ProtectionOp::CreateRepositoryDispatch), "Start repository_dispatch workflows with an event"),
275 a("get_workspace_permissions", Op::Protection(ProtectionOp::GetWorkspaceWorkflowPermissions), "A workspace's default and maximum token permissions"),
276 a("set_workspace_permissions", Op::Protection(ProtectionOp::SetWorkspaceWorkflowPermissions), "Set them, and whether jobs may open pull requests"),
Merge GitHub pull request #8 (claude/cool-newton-7nm8r9): Docker deployments on g1t.page behind a switch that stays off until Cloudflare's container APIs are checked live, workflows a workspace manages in its repositories, tarball and zipball downloads, refs/pull/* kept to g1t alone, framework detection for g1t.page builds, and a workflow's event payload matching GitHub's.277 a("list_managed_workflows", Op::Protection(ProtectionOp::ListWorkspaceManagedWorkflows), "The workflows a workspace runs in its repositories"),
278 a("add_managed_workflow", Op::Protection(ProtectionOp::CreateWorkspaceManagedWorkflow), "Run a workflow in the workspace's repositories, required or default"),
279 a("update_managed_workflow", Op::Protection(ProtectionOp::UpdateWorkspaceManagedWorkflow), "Change one's repositories or mode, or copy its source again"),
280 a("remove_managed_workflow", Op::Protection(ProtectionOp::DeleteWorkspaceManagedWorkflow), "Take one out of the workspace's repositories"),
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships281 a("list_runners", Op::ListRunners, "Self-hosted runners, with status, labels and what each is doing"),
282 a("create_runner_token", Op::CreateRunnerRegistrationToken, "A one-hour token for g1t-runner register"),
283 a("remove_runner", Op::RemoveRunner, "Remove a self-hosted runner"),
284 a("list_runner_groups", Op::ListRunnerGroups, "A workspace's runner groups"),
285 a("create_runner_group", Op::CreateRunnerGroup, "Make a group, for some repositories"),
286 a("update_runner_group", Op::UpdateRunnerGroup, "Rename a group or change its repositories"),
287 a("delete_runner_group", Op::DeleteRunnerGroup, "Delete a group; its runners join the default"),
The API and MCP server no longer offer g1t's own agents. g1t is what your coding agents work against, not an agent of its own, so the operations that drove hosted agents are gone: messaging an agent on a pull request (message_agent, take_messages, answer_message), assigning or delegating an issue to g1t (assign_issue, delegate), plans (plan_work, get_plan, apply_plan), the context hub (search_context, get_entity), model routes, agents' computers, AI Gateway requests, "Fix with g1t" on a security alert, and every Customize route (marketplaces, plugins, connectors). The callbacks the agent sandbox reported through (/agent-runs/*, /runs/:id/usage, /plans/:id, /reviews/:id) go with them, update_repo_settings stops accepting agent_review, max_revisions and hold_low_confidence, import_issue stops accepting assign, and an old agent token with no run behind it is refused.288 a("get_runner_settings", Op::GetRunnerSettings, "Where checks and the merge queue run; whether forks may use runners"),
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships289 a("update_runner_settings", Op::UpdateRunnerSettings, "Change them"),
290 ],
291 },
292 Tool {
Projects have Observability: their requests, logs, traces, metrics and errors, from apps on g1t.page with nothing to set up, and from software anywhere else over OpenTelemetry.293 name: "observability",
294 title: "Observability",
295 description: "What a project's running software did in production, to debug it: its requests, logs, traces, grouped errors and metrics, from its apps on g1t.page and from OpenTelemetry sent from anywhere. Name the project by workspace and project slug. Start with overview (error rate, latency, the routes and the deployment a regression began with) or errors, then follow a request or trace_id to its logs and spans. Times are RFC 3339 or Unix milliseconds; the last 24 hours unless you say. Needs a role of your own on the project's repository; resolving errors, Triage.",
296 default_action: None,
297 actions: &[
298 a("overview", Op::Telemetry(TelemetryOp::GetOverview), "Requests, errors, latency and CPU over a period, by route, deployment, service and region, against the period before"),
299 a("requests", Op::Telemetry(TelemetryOp::ListRequests), "Requests answered, newest first: q, status (5xx, 404), errors_only, route, min_duration_ms"),
300 a("request", Op::Telemetry(TelemetryOp::GetRequest), "One request with every log line it wrote"),
301 a("logs", Op::Telemetry(TelemetryOp::ListLogs), "Search a project's logs: words or a phrase in q, level (error,warn), trace_id, request_id"),
302 a("traces", Op::Telemetry(TelemetryOp::ListTraces), "Traces, newest first: q, errors_only, min_duration_ms"),
303 a("trace", Op::Telemetry(TelemetryOp::GetTrace), "One trace: every span, with its timing, status and attributes, and its logs"),
304 a("errors", Op::Telemetry(TelemetryOp::ListErrors), "Errors grouped by exception, most recent first, with the deployment that brought each in"),
305 a("update_error", Op::Telemetry(TelemetryOp::UpdateError), "Resolve, ignore or reopen an error group, or link the issue made for it"),
306 a("metrics", Op::Telemetry(TelemetryOp::ListMetrics), "The metrics the project's software sends"),
307 a("metric", Op::Telemetry(TelemetryOp::GetMetric), "One metric over time: aggregate (avg, sum, p95), group_by an attribute"),
308 ],
309 },
310 Tool {
Merge packages: roles, Actions access, source label, soft delete, API311 name: "package",
312 title: "Packages",
313 description: "A workspace's packages in every registry (container images, npm, Cargo, Maven, NuGet, RubyGems, Composer): their versions and downloads, deleting and restoring them within 30 days, their visibility and repository, who has a role on them, and which repositories' workflows may use them (Manage Actions access). Name one by workspace, package_type and package_name.",
314 default_action: None,
315 actions: &[
316 a("list", Op::Packages(PackagesOp::ListPackages), "A workspace's packages; state deleted for restorable ones"),
317 a("get", Op::Packages(PackagesOp::GetPackage), "One package: address, visibility, repository, downloads"),
318 a("versions", Op::Packages(PackagesOp::ListVersions), "Its versions with tags and downloads; state deleted too"),
319 a("get_version", Op::Packages(PackagesOp::GetVersion), "One version by id, version, digest or tag"),
320 a("update", Op::Packages(PackagesOp::UpdatePackage), "Set visibility, or inherit_access for a linked one"),
321 a("link", Op::Packages(PackagesOp::LinkPackage), "Link it to a repository of its workspace"),
322 a("unlink", Op::Packages(PackagesOp::UnlinkPackage), "Unlink it: the workspace's, private"),
323 a("access", Op::Packages(PackagesOp::ListAccess), "People and teams with a role on it"),
324 a("set_access", Op::Packages(PackagesOp::SetAccess), "Give a person or team read, write or admin"),
325 a("remove_access", Op::Packages(PackagesOp::RemoveAccess), "Take a person's or team's role away"),
326 a("actions_access", Op::Packages(PackagesOp::ListActionsAccess), "Repositories whose workflows may use it"),
327 a("set_actions_access", Op::Packages(PackagesOp::SetActionsAccess), "Let a repository's workflows read or write it"),
328 a("remove_actions_access", Op::Packages(PackagesOp::RemoveActionsAccess), "Stop a repository's workflows using it"),
329 a("delete", Op::Packages(PackagesOp::DeletePackage), "Delete it; restorable for 30 days"),
330 a("restore", Op::Packages(PackagesOp::RestorePackage), "Restore a deleted package"),
331 a("delete_version", Op::Packages(PackagesOp::DeleteVersion), "Delete a version; restorable for 30 days"),
332 a("restore_version", Op::Packages(PackagesOp::RestoreVersion), "Restore a deleted version"),
333 ],
334 },
335 Tool {
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships336 name: "secret",
337 title: "Secrets and variables",
338 description: "A repository's or workspace's secrets and variables, read by workflows and deployments. Secret values are never returned.",
339 default_action: None,
340 actions: &[
341 a("list_secrets", Op::ListActionsSecrets, "Secrets, without values"),
342 a("set_secret", Op::SetActionsSecret, "Add or change a secret"),
343 a("delete_secret", Op::DeleteActionsSecret, "Remove a secret"),
344 a("list_variables", Op::ListActionsVariables, "Variables, with values"),
345 a("set_variable", Op::SetActionsVariable, "Add or change a variable"),
346 a("delete_variable", Op::DeleteActionsVariable, "Remove a variable"),
347 ],
348 },
349 Tool {
350 name: "webhook",
351 title: "Webhooks",
352 description: "HTTPS addresses sent signed events as they happen, for a repository or a whole workspace.",
353 default_action: None,
354 actions: &[
355 a("list", Op::ListWebhooks, "Webhooks, without secrets"),
356 a("create", Op::CreateWebhook, "Register one; a ping is sent"),
357 a("update", Op::UpdateWebhook, "Change address, events or active"),
358 a("delete", Op::DeleteWebhook, "Remove one"),
359 a("ping", Op::PingWebhook, "Send a ping"),
360 a("list_deliveries", Op::ListWebhookDeliveries, "Latest deliveries"),
361 a("redeliver", Op::RedeliverWebhook, "Send a delivery again"),
362 ],
363 },
364 Tool {
365 name: "access",
366 title: "Who has access",
Merge branch 'worktree-agent-a5a5de74d8863d554' into worktree-agent-a16631325aecf58ca367 description: "Who has access to a repository and with which role (read, triage, write, maintain, admin), outside collaborators, a workspace's base permission, and a repository's deploy keys.",
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships368 default_action: None,
369 actions: &[
370 a("list_collaborators", Op::ListCollaborators, "Everyone with a role, and pending invitations"),
371 a("get_permission", Op::GetCollaboratorPermission, "One person's role and capabilities"),
372 a("add_collaborator", Op::AddCollaborator, "Give someone a role, by username or email"),
373 a("update_collaborator", Op::UpdateCollaborator, "Change a direct role"),
374 a("remove_collaborator", Op::RemoveCollaborator, "Take away a direct role"),
375 a("list_invitations", Op::ListRepoInvitations, "Pending invitations to a repository"),
376 a("revoke_invitation", Op::RevokeRepoInvitation, "Withdraw one"),
377 a("set_base_permission", Op::SetBasePermission, "What every member gets on each repository"),
378 a("list_outside_collaborators", Op::ListOutsideCollaborators, "People with roles who are not members"),
Merge branch 'worktree-agent-a5a5de74d8863d554' into worktree-agent-a16631325aecf58ca379 a("list_deploy_keys", Op::DeployKeys(DeployKeysOp::ListDeployKeys), "SSH keys that reach this one repository"),
380 a("get_deploy_key", Op::DeployKeys(DeployKeysOp::GetDeployKey), "One deploy key, by id"),
381 a("add_deploy_key", Op::DeployKeys(DeployKeysOp::CreateDeployKey), "Add one; read-only unless read_only is false"),
382 a("remove_deploy_key", Op::DeployKeys(DeployKeysOp::DeleteDeployKey), "Delete one"),
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships383 ],
384 },
385 Tool {
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar386 name: "team",
387 title: "Teams",
388 description: "Teams: groups of a workspace's members, given roles on repositories together, mentioned as @workspace/team and asked to review together. Name one by `workspace` and its slug (`team`). Any member may create a team; the workspace's owners and the team's maintainers manage it. A secret team is seen only by its people and the owners.",
389 default_action: None,
390 actions: &[
391 a("list", Op::ListTeams, "A workspace's teams you can see"),
392 a("get", Op::GetTeam, "One team"),
393 a("create", Op::CreateTeam, "Create a team; you become its maintainer"),
394 a("update", Op::UpdateTeam, "Change its name, slug, description, visibility, parent or notifications"),
395 a("delete", Op::DeleteTeam, "Delete it; its child teams move up"),
396 a("list_members", Op::ListTeamMembers, "Its people and their roles, child teams' with include_child_teams"),
397 a("set_member", Op::SetTeamMember, "Add a member of the workspace, or change their role"),
398 a("remove_member", Op::RemoveTeamMember, "Take someone out of it"),
399 a("list_child_teams", Op::ListChildTeams, "The teams nested under it"),
400 a("list_repos", Op::ListTeamRepos, "The repositories it has a role on"),
401 a("set_repo", Op::SetTeamRepo, "Give it a role on a repository"),
402 a("remove_repo", Op::RemoveTeamRepo, "Take its role on a repository away"),
403 a("set_review_assignment", Op::SetTeamReviewAssignment, "Whom it picks when asked to review"),
404 a("list_user_teams", Op::ListUserTeams, "The teams someone is in"),
405 ],
406 },
407 Tool {
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships408 name: "workspace",
409 title: "Workspaces",
g1t coordinates the work and the person's own sessions do it: Ask g1t reads g1t with the same tools any agent gets, answers in one conversation shared with the @g1t direct message in Chat, and hands work to sessions in the person's own harness, whose subagents g1t records, ties to issues and pull requests, and lets see each other.410 description: "Workspaces own repositories (g1t.sh/{workspace}/{repo}): read what happened across its repositories (`activity`: what merged, shipped and deployed, by whom, over a span), create, update or delete one, invite members, connect integrations, set rulesets that hold across its repositories, read and change its projects (what each is, where it runs, its links), and keep your own pinned projects at the top of its sidebar.",
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships411 default_action: None,
412 actions: &[
Merge branch 'worktree-agent-ad7c6d88d93adc817'413 a("get", Op::GetWorkspace, "A workspace's details and settings"),
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships414 a("create", Op::CreateWorkspace, "Create a workspace"),
415 a("delete", Op::DeleteWorkspace, "Delete a workspace and everything in it (support can restore it for 30 days)"),
Merge main (membership, two-factor, GitHub repo roles) into tokens416 a("update", Op::UpdateWorkspace, "Change its name, description, base permission, who may create teams, member privileges or the two-factor requirement"),
417 a("list_members", Op::ListMembers, "Its members, owners first, with their roles"),
418 a("update_member", Op::UpdateMember, "Make someone an owner or a member, billing manager or security manager"),
419 a("remove_member", Op::RemoveMember, "Remove someone from it"),
420 a("transfer_ownership", Op::TransferOwnership, "Hand it to another member: they become an owner, you a member"),
421 a("leave", Op::LeaveWorkspace, "Leave it yourself"),
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships422 a("list_invites", Op::ListWorkspaceInvites, "Its invites"),
Merge workspace invitations: nobody joins a workspace without saying yes, people are found by username, your own invites can bring someone in, and nobody is left without a workspace (identity 0040)423 a("invite_member", Op::InviteMember, "Invite someone by username or email address"),
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships424 a("revoke_invite", Op::RevokeWorkspaceInvite, "Revoke a pending invite"),
The contracts no longer describe g1t's own agents, and workspaces can keep their AI providers. Every consumer had already stopped using them, so the TypeScript and Rust contracts drop the workspace-agent, ability, look, skill-library, context, runner-agent and mention modules, the chat and docs RPCs agents posted and read through, the folio agent methods, the agent_waiting notification, agent.asked and memory.changed events, AI credit, token and gateway billing types, model routes and sessions, team agents, agent tokens, plan, review, message and confidence types, command rules, cost caps and confidence rules. The agents:run and models:* scopes are no longer offered by any preset, OAuth default or permission form, but a stored token or grant that names them still reads; and the removed operations are gone from the scope table, so the API's check that every operation has exactly one scope is strict again. What stored data needs in order to parse (old run and credential kinds, an agent team lead, retired rules and webhook events, old guardrail and integration settings) still parses, and a run's token is still PrincipalKind::Agent, which now means a run's token and the @g1t rows written before. The customize, marketplace, skills and claude-plugin contracts stay only until the mobile app drops its Customize screens.425 a("list_integrations", Op::ListIntegrations, "AI providers, alert sources and issue trackers"),
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships426 a("connect_integration", Op::ConnectIntegration, "Connect one"),
The API and MCP server no longer offer g1t's own agents. g1t is what your coding agents work against, not an agent of its own, so the operations that drove hosted agents are gone: messaging an agent on a pull request (message_agent, take_messages, answer_message), assigning or delegating an issue to g1t (assign_issue, delegate), plans (plan_work, get_plan, apply_plan), the context hub (search_context, get_entity), model routes, agents' computers, AI Gateway requests, "Fix with g1t" on a security alert, and every Customize route (marketplaces, plugins, connectors). The callbacks the agent sandbox reported through (/agent-runs/*, /runs/:id/usage, /plans/:id, /reviews/:id) go with them, update_repo_settings stops accepting agent_review, max_revisions and hold_low_confidence, import_issue stops accepting assign, and an old agent token with no run behind it is refused.427 a("update_integration", Op::UpdateIntegration, "Change one: rotate its key or its settings"),
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships428 a("disconnect_integration", Op::DisconnectIntegration, "Remove one"),
429 a("test_integration", Op::TestIntegration, "Check its credentials"),
g1t coordinates the work and the person's own sessions do it: Ask g1t reads g1t with the same tools any agent gets, answers in one conversation shared with the @g1t direct message in Chat, and hands work to sessions in the person's own harness, whose subagents g1t records, ties to issues and pull requests, and lets see each other.430 a("activity", Op::GetWorkspaceActivity, "What happened across its repositories over a span: merged pull requests, releases, deployments, pushes, issues; what shipped"),
Merge branch 'main' into worktree-agent-a69aeabc4b0deeb97431 a("list_projects", Op::ListProjects, "Its projects you can see: what each is, where it runs, its links"),
432 a("get_project", Op::GetProject, "One project"),
433 a("update_project", Op::UpdateProject, "Change a project's name, description, kind, where it runs or its links"),
API: pinned projects over REST and MCP434 a("list_pinned_projects", Op::ListPinnedProjects, "Your pinned projects in it, in your order"),
435 a("pin_project", Op::PinProject, "Pin a project, at a position or the end"),
436 a("unpin_project", Op::UnpinProject, "Unpin a project"),
437 a("reorder_pinned_projects", Op::ReorderPinnedProjects, "Put your pins in a new order"),
Merge rulesets: branch and tag rules, agent-first, enforced on push and merge438 a("list_rulesets", Op::Rules(RulesOp::ListWorkspaceRulesets), "Its rulesets, which hold across its repositories"),
439 a("get_ruleset", Op::Rules(RulesOp::GetWorkspaceRuleset), "One of its rulesets"),
440 a("create_ruleset", Op::Rules(RulesOp::CreateWorkspaceRuleset), "Create a ruleset for some or all of its repositories"),
441 a("update_ruleset", Op::Rules(RulesOp::UpdateWorkspaceRuleset), "Change one of its rulesets"),
442 a("delete_ruleset", Op::Rules(RulesOp::DeleteWorkspaceRuleset), "Delete one of its rulesets"),
443 a("rule_evaluations", Op::Rules(RulesOp::ListWorkspaceRuleEvaluations), "How rules judged changes across its repositories"),
API and MCP for a workspace's personal access token rules, members' tokens and approvals444 a("get_token_policy", Op::Tokens(TokenOp::GetTokenPolicy), "Its rules for personal access tokens"),
One kind of access token; presence and status; usernames keep their case; the tour is a miniature of the real app; icons for password managers445 a("set_token_policy", Op::Tokens(TokenOp::SetTokenPolicy), "Change them: which tokens reach it, approval, lifetime"),
API and MCP for a workspace's personal access token rules, members' tokens and approvals446 a("list_member_tokens", Op::Tokens(TokenOp::ListMemberTokens), "Members' personal access tokens that reach it"),
One kind of access token; presence and status; usernames keep their case; the tour is a miniature of the real app; icons for password managers447 a("list_token_requests", Op::Tokens(TokenOp::ListTokenRequests), "Tokens waiting for approval"),
API and MCP for a workspace's personal access token rules, members' tokens and approvals448 a("review_token_request", Op::Tokens(TokenOp::ReviewTokenRequest), "Approve or deny one"),
449 a("revoke_member_token", Op::Tokens(TokenOp::RevokeMemberToken), "Revoke a member's token in it"),
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships450 ],
451 },
452 Tool {
Usage, Billing settings and prepaid AI credit; fixes from the UX audit453 name: "billing",
454 title: "Billing",
Billing, integrations, security and identity no longer serve g1t's own agents. Billing stops metering agent runs, model tokens and AI Gateway requests, drops its model catalogue and price-keeper model prices, and stops selling AI credit, which only ever paid for those; credit bought earlier still pays toward what is owed. A usage report, statement or invoice that holds an old agent or model meter shows it as "Other usage" rather than failing, and the get_ai_credit and buy_ai_credit API operations and MCP billing actions go. Integrations no longer connects model providers or routes models, and no longer assigns imported issues or alerts to g1t; a model provider already connected can still be disconnected. Security drops "Fix with g1t". Identity no longer creates agent tokens or puts agents on teams, a team's lead is a person, and run credentials are issued only for checks, the merge queue, merge checks, deployments and bumps; tokens and credentials already issued keep working until they expire. The reserved names g1t and g1t-agent stay reserved. No tables are dropped.455 description: "A workspace's billing: its usage by product, project and day, its budget (the monthly spend limit, alerts and whether usage pauses at it) and its invoices. Amounts are whole millionths of a dollar (`_micros`), or cents (`_cents`) where named. Members read it; changing the budget is for owners, as people, and never for a run's token.",
Usage, Billing settings and prepaid AI credit; fixes from the UX audit456 default_action: Some("usage"),
457 actions: &[
458 a("usage", Op::GetUsage, "Usage over a range of days, by product, meter, project and day, and what paid for it"),
459 a("budget", Op::GetBudget, "The monthly spend limit, what was spent, alerts and whether usage pauses at the limit"),
460 a("set_budget", Op::SetBudget, "Change the spend limit, alerts, pausing or the alert webhook"),
461 a("invoices", Op::ListInvoices, "Every invoice, the itemised usage invoices, and the next one so far"),
462 a("billing_details", Op::GetBillingDetails, "Who invoices are made out to and the payment method on file"),
463 ],
464 },
465 Tool {
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar466 name: "security",
467 title: "Security",
The API and MCP server no longer offer g1t's own agents. g1t is what your coding agents work against, not an agent of its own, so the operations that drove hosted agents are gone: messaging an agent on a pull request (message_agent, take_messages, answer_message), assigning or delegating an issue to g1t (assign_issue, delegate), plans (plan_work, get_plan, apply_plan), the context hub (search_context, get_entity), model routes, agents' computers, AI Gateway requests, "Fix with g1t" on a security alert, and every Customize route (marketplaces, plugins, connectors). The callbacks the agent sandbox reported through (/agent-runs/*, /runs/:id/usage, /plans/:id, /reviews/:id) go with them, update_repo_settings stops accepting agent_review, max_revisions and hold_low_confidence, import_issue stops accepting assign, and an old agent token with no run behind it is refused.468 description: "A repository's security: secret scanning alerts and push protection bypasses, custom secret patterns, code scanning alerts and SARIF uploads, vulnerability alerts, the dependency graph and its SBOM, dependency review, settings, a workspace's overview, security advisories and private vulnerability reports. Findings are shown to those who can change the code only; published advisories to anyone who can see the repository. Give `repo` (owner/name), or `workspace` for lists across one.",
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar469 default_action: Some("secret_alerts"),
470 actions: &[
471 a("secret_alerts", Op::Security(SecurityOp::ListSecretAlerts), "Secret scanning alerts; by state, secret_type, validity, bypassed"),
472 a("secret_alert", Op::Security(SecurityOp::GetSecretAlert), "One secret alert, with where it was found and its bypass requests"),
473 a("update_secret_alert", Op::Security(SecurityOp::UpdateSecretAlert), "Dismiss a secret alert with a reason, or reopen it"),
474 a("secret_locations", Op::Security(SecurityOp::ListSecretLocations), "Every file, line and commit a secret is in"),
475 a("bypass", Op::Security(SecurityOp::BypassPushProtection), "Push past push protection with a reason, or ask to"),
476 a("check_validity", Op::Security(SecurityOp::CheckSecretValidity), "Ask a secret's issuer whether it still works"),
477 a("bypass_requests", Op::Security(SecurityOp::ListBypassRequests), "A workspace's push protection bypass requests"),
478 a("review_bypass", Op::Security(SecurityOp::ReviewBypassRequest), "Approve, deny or cancel a bypass request"),
479 a("patterns", Op::Security(SecurityOp::ListCustomPatterns), "Custom secret patterns of a repository or workspace"),
480 a("create_pattern", Op::Security(SecurityOp::CreateCustomPattern), "Create a custom secret pattern, as a draft or published"),
481 a("update_pattern", Op::Security(SecurityOp::UpdateCustomPattern), "Change, publish or unpublish a custom pattern"),
482 a("delete_pattern", Op::Security(SecurityOp::DeleteCustomPattern), "Delete a custom pattern"),
483 a("dry_run_pattern", Op::Security(SecurityOp::DryRunCustomPattern), "Run a pattern over the default branch without saving it"),
484 a("code_alerts", Op::Security(SecurityOp::ListCodeAlerts), "Code scanning alerts; by state, severity, tool, rule_id"),
485 a("code_alert", Op::Security(SecurityOp::GetCodeAlert), "One code scanning alert by number"),
486 a("update_code_alert", Op::Security(SecurityOp::UpdateCodeAlert), "Dismiss a code scanning alert with a reason, or reopen it"),
487 a("analyses", Op::Security(SecurityOp::ListAnalyses), "Code scanning analyses, newest first"),
488 a("upload_sarif", Op::Security(SecurityOp::UploadSarif), "Upload a SARIF file, gzipped and base64-encoded"),
489 a("sarif_upload", Op::Security(SecurityOp::GetSarifUpload), "Whether a SARIF upload was read, and its analyses"),
490 a("vulnerability_alerts", Op::Security(SecurityOp::ListVulnerabilityAlerts), "Vulnerable dependencies; by state, severity, ecosystem, package"),
491 a("vulnerability_alert", Op::Security(SecurityOp::GetVulnerabilityAlert), "One vulnerability alert"),
492 a("update_vulnerability_alert", Op::Security(SecurityOp::UpdateVulnerabilityAlert), "Dismiss a vulnerability alert with a reason, or reopen it"),
493 a("dependency_graph", Op::Security(SecurityOp::GetDependencyGraph), "Every package the lockfiles resolve, direct or transitive"),
494 a("sbom", Op::Security(SecurityOp::GetSbom), "The dependency graph as an SPDX 2.3 document"),
495 a("compare_dependencies", Op::Security(SecurityOp::CompareDependencies), "What changes in dependencies between base...head"),
496 a("settings", Op::Security(SecurityOp::GetSettings), "A repository's security settings"),
497 a("update_settings", Op::Security(SecurityOp::UpdateSettings), "Change when checks fail and dependency review's policy"),
498 a("workspace_settings", Op::Security(SecurityOp::GetWorkspaceSettings), "A workspace's delegated bypass and validity checks"),
499 a("update_workspace_settings", Op::Security(SecurityOp::UpdateWorkspaceSettings), "Turn delegated bypass or validity checks on or off"),
500 a("overview", Op::Security(SecurityOp::GetOverview), "A workspace's alerts, trends and coverage"),
Merge remote-tracking branch 'origin/claude/cool-newton-7nm8r9' into claude/cool-newton-7nm8r9501 a("advisories", Op::Security(SecurityOp::ListAdvisories), "A repository's security advisories; by state"),
502 a("advisory", Op::Security(SecurityOp::GetAdvisory), "One advisory by adv_… or G1TSA-… id"),
503 a("create_advisory", Op::Security(SecurityOp::CreateAdvisory), "Draft a security advisory"),
504 a("update_advisory", Op::Security(SecurityOp::UpdateAdvisory), "Change an advisory's fields"),
505 a("set_advisory_state", Op::Security(SecurityOp::SetAdvisoryState), "Publish or withdraw an advisory"),
506 a("reports", Op::Security(SecurityOp::ListReports), "Vulnerability reports sent to the maintainers; by state"),
507 a("report_vulnerability", Op::Security(SecurityOp::ReportVulnerability), "Report a vulnerability privately to a repository's maintainers"),
508 a("review_report", Op::Security(SecurityOp::ReviewReport), "Accept a report as a draft advisory, or decline it"),
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar509 ],
510 },
511 Tool {
API: notifications over REST and MCP, with notifications scopes512 name: "notifications",
513 title: "Notifications",
The API and MCP server no longer offer g1t's own agents. g1t is what your coding agents work against, not an agent of its own, so the operations that drove hosted agents are gone: messaging an agent on a pull request (message_agent, take_messages, answer_message), assigning or delegating an issue to g1t (assign_issue, delegate), plans (plan_work, get_plan, apply_plan), the context hub (search_context, get_entity), model routes, agents' computers, AI Gateway requests, "Fix with g1t" on a security alert, and every Customize route (marketplaces, plugins, connectors). The callbacks the agent sandbox reported through (/agent-runs/*, /runs/:id/usage, /plans/:id, /reviews/:id) go with them, update_repo_settings stops accepting agent_review, max_revisions and hold_low_confidence, import_issue stops accepting assign, and an old agent token with no run behind it is refused.514 description: "Your inbox: what needs you, and what you follow. One thread per issue, pull request, workflow or deployment, with why you were told (`reason`): a review asked of you, an assignment, a mention, your work's checks, or what you subscribe to and watch. Mark threads read or done once handled, and choose what you hear of with subscribe, unsubscribe and watch. Your own: a personal token.",
API: notifications over REST and MCP, with notifications scopes515 default_action: Some("list"),
516 actions: &[
517 a("list", Op::ListNotifications, "Unread threads, latest first; all, a view, a reason, a repository"),
518 a("get", Op::GetNotificationThread, "One thread with its recent activity and your subscription"),
519 a("mark_read", Op::MarkThreadRead, "Mark a thread read, or unread"),
520 a("mark_all_read", Op::MarkNotificationsRead, "Mark everything read up to a time, or one repository's"),
521 a("done", Op::MarkThreadDone, "Mark a thread done; new activity brings it back"),
522 a("save", Op::SaveThread, "Save a thread, or unsave it"),
523 a("snooze", Op::SnoozeThread, "Snooze a thread until a time, or bring it back"),
524 a("subscription", Op::GetThreadSubscription, "Your subscription to an issue or pull request"),
525 a("subscribe", Op::SetThreadSubscription, "Subscribe to an issue or pull request, or ignore it"),
526 a("unsubscribe", Op::DeleteThreadSubscription, "Unsubscribe until you comment or are mentioned"),
527 a("watching", Op::GetRepoSubscription, "How you watch a repository"),
528 a("watch", Op::SetRepoSubscription, "Watch a repository: participating, all, ignore or custom"),
529 a("unwatch", Op::DeleteRepoSubscription, "Stop watching a repository"),
530 a("watched", Op::ListWatchedRepos, "Repositories you watch other than the default way"),
531 ],
532 },
533 Tool {
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships534 name: "account",
535 title: "Your account",
Merge branch 'worktree-agent-a6da31375506fc440'536 description: "Who this token acts as and its workspaces (`whoami`), your email addresses, your invites to g1t, and invitations to workspaces and repositories waiting for you.",
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships537 default_action: Some("whoami"),
538 actions: &[
539 a("whoami", Op::Whoami, "Who the token acts as, and its workspaces"),
540 a("list_emails", Op::ListEmails, "Your addresses"),
541 a("add_email", Op::AddEmail, "Add an address"),
Merge email confirmation gate: a code and a link, nothing until confirmed (identity 0036)542 a("confirm_email", Op::ConfirmEmail, "Confirm an address with the code from its email"),
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships543 a("remove_email", Op::RemoveEmail, "Remove an address"),
544 a("update_email_settings", Op::UpdateEmailSettings, "Primary, backup and privacy"),
Merge branch 'worktree-agent-a6da31375506fc440'545 a("list_invites", Op::ListInvites, "Your invites to g1t, and how many are left"),
546 a("create_invite", Op::CreateInvite, "Invite a friend to g1t by email"),
547 a("revoke_invite", Op::RevokeInvite, "Revoke one; it comes back"),
548 a("resend_invite", Op::ResendInvite, "Send a pending one again"),
Merge workspace invitations: nobody joins a workspace without saying yes, people are found by username, your own invites can bring someone in, and nobody is left without a workspace (identity 0040)549 a("list_workspace_invitations", Op::ListInvitations, "Invitations to workspaces for you"),
550 a("accept_workspace_invitation", Op::AcceptInvitation, "Accept one and join"),
551 a("decline_workspace_invitation", Op::DeclineInvitation, "Decline one"),
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships552 a("list_repository_invitations", Op::ListMyRepoInvitations, "Invitations to repositories for you"),
553 a("accept_repository_invitation", Op::AcceptRepoInvitation, "Accept one"),
554 a("decline_repository_invitation", Op::DeclineRepoInvitation, "Decline one"),
555 ],
556 },
Merge main into Artifacts Phase 2557 Tool {
558 name: "artifact",
559 title: "Artifacts",
560 description: "A workspace's docs, slides, designs and dashboards (Artifacts mode), as you can open them: list, search and read them (a doc's content is Markdown, with block ids to target), make them, edit them (a change with the edit role, a suggestion with comment), move, trash and restore them, their versions, and who can open them. Name one by its id (fol_…) or its address. Not the `workflow` tool's run artifacts. Slides, designs and dashboards answer that they are not here yet.",
561 default_action: None,
562 actions: &[
563 a("list", Op::Folios(FoliosOp::List), "Artifacts you can open; tab, kind, space, q; state trashed for the trash"),
564 a("search", Op::Folios(FoliosOp::Search), "Search them by words and meaning, with the passage that matched"),
565 a("get", Op::Folios(FoliosOp::Get), "One artifact: kind, title, space, owner, your role, who it is shared with"),
566 a("read", Op::Folios(FoliosOp::GetContent), "Its content: a doc's Markdown and block ids, and what you may do"),
567 a("versions", Op::Folios(FoliosOp::ListVersions), "Its saved versions, newest first"),
568 a("access", Op::Folios(FoliosOp::GetAccess), "Who can open it, and how"),
569 a("templates", Op::Folios(FoliosOp::ListTemplates), "Templates to start one from"),
570 a("spaces", Op::Folios(FoliosOp::ListSpaces), "The spaces in your sidebar"),
571 a("query_data", Op::Folios(FoliosOp::QueryDataset), "Run a dataset query as you, over what you can read"),
572 a("create", Op::Folios(FoliosOp::Create), "Make one: in a space, under a doc, or in your Private"),
573 a("update", Op::Folios(FoliosOp::Update), "Rename it, change its icon, or move it"),
574 a("edit", Op::Folios(FoliosOp::Edit), "Change its content: append, replace it all, a section or blocks"),
575 a("trash", Op::Folios(FoliosOp::Trash), "Move it to the trash; restorable for 30 days"),
576 a("restore", Op::Folios(FoliosOp::Restore), "Bring it back from the trash"),
577 a("restore_version", Op::Folios(FoliosOp::RestoreVersion), "Make an earlier version its content again"),
578 a("share", Op::Folios(FoliosOp::SetAccess), "Share it, change general access, or take access away"),
579 a("purge", Op::Folios(FoliosOp::Purge), "Delete one in the trash for good"),
580 ],
581 },
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships582];
583
Projects have Observability: their requests, logs, traces, metrics and errors, from apps on g1t.page with nothing to set up, and from software anywhere else over OpenTelemetry.584/// Operations offered over REST alone, not as an action of any tool: how
585/// a project's telemetry is collected (settings, ingest tokens, exports,
586/// usage) is for people setting it up, not for agents debugging.
587pub const REST_ONLY: &[Op] = &[
588 Op::Telemetry(TelemetryOp::GetSettings),
589 Op::Telemetry(TelemetryOp::UpdateSettings),
590 Op::Telemetry(TelemetryOp::ListTokens),
591 Op::Telemetry(TelemetryOp::CreateToken),
592 Op::Telemetry(TelemetryOp::DeleteToken),
593 Op::Telemetry(TelemetryOp::ListExports),
594 Op::Telemetry(TelemetryOp::CreateExport),
595 Op::Telemetry(TelemetryOp::UpdateExport),
596 Op::Telemetry(TelemetryOp::DeleteExport),
597 Op::Telemetry(TelemetryOp::GetUsage),
598];
599
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships600/// Operations that cannot be undone, or reach beyond g1t's own records:
601/// clients ask before running a tool that has any of them.
602fn destructive(op: Op) -> bool {
603 matches!(
604 op,
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar605 Op::Security(SecurityOp::DeleteCustomPattern | SecurityOp::BypassPushProtection)
Merge rulesets: branch and tag rules, agent-first, enforced on push and merge606 | Op::Rules(RulesOp::DeleteRepoRuleset | RulesOp::DeleteWorkspaceRuleset)
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar607 | Op::DeleteWorkspace
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships608 | Op::UpdateWorkspace
API and MCP for a workspace's personal access token rules, members' tokens and approvals609 | Op::Tokens(TokenOp::RevokeMemberToken | TokenOp::SetTokenPolicy)
Merge main (membership, two-factor, GitHub repo roles) into tokens610 | Op::RemoveMember
611 | Op::TransferOwnership
612 | Op::LeaveWorkspace
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships613 | Op::DeleteRepo
614 | Op::PurgeRepo
615 | Op::TransferRepo
616 | Op::SetRepoVisibility
617 | Op::RemoveEmail
618 | Op::RemoveCollaborator
619 | Op::DisconnectIntegration
AI Gateway: OpenAI's format, open models, and your own providers620 | Op::UpdateIntegration
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships621 | Op::DeleteWebhook
622 | Op::DeleteActionsSecret
623 | Op::DeleteActionsVariable
624 | Op::SetActionsSecret
625 | Op::SetActionsVariable
626 | Op::SetBasePermission
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar627 | Op::DeleteTeam
628 | Op::RemoveTeamRepo
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships629 | Op::MergePullRequest
630 | Op::RemoveRunner
631 | Op::DeleteRunnerGroup
632 | Op::UpdateRunnerSettings
Merge main into Artifacts Phase 2633 | Op::Folios(FoliosOp::SetAccess | FoliosOp::Purge)
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships634 )
635}
636
637/// Whether an operation only reads.
638pub fn reads_only(op: Op) -> bool {
639 NO_SCOPE.contains(&op.name())
640 || scope_for(op.name()).is_some_and(|scope| scope.level() == Level::Read)
641}
642
643/// What decides which actions a caller sees.
644pub enum Gate<'a> {
645 /// No limit beyond the person's own role.
646 Everything,
The API and MCP server no longer offer g1t's own agents. g1t is what your coding agents work against, not an agent of its own, so the operations that drove hosted agents are gone: messaging an agent on a pull request (message_agent, take_messages, answer_message), assigning or delegating an issue to g1t (assign_issue, delegate), plans (plan_work, get_plan, apply_plan), the context hub (search_context, get_entity), model routes, agents' computers, AI Gateway requests, "Fix with g1t" on a security alert, and every Customize route (marketplaces, plugins, connectors). The callbacks the agent sandbox reported through (/agent-runs/*, /runs/:id/usage, /plans/:id, /reviews/:id) go with them, update_repo_settings stops accepting agent_review, max_revisions and hold_low_confidence, import_issue stops accepting assign, and an old agent token with no run behind it is refused.647 /// A run's token (a checks, merge queue or deploy job): the
648 /// operations its run lists.
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships649 Agent(&'a AgentScope),
650 /// An access token with scopes.
651 Token(&'a TokenAccess),
652}
653
654impl Gate<'_> {
655 pub fn allows(&self, op: Op) -> bool {
656 match self {
657 Gate::Everything => true,
658 Gate::Agent(scope) => op.allowed_by(scope) && !NEVER.contains(&op.name()),
659 Gate::Token(access) => {
660 if NO_SCOPE.contains(&op.name()) {
661 return true;
662 }
663 match scope_for(op.name()) {
664 Some(scope) => access.allows(scope),
665 None => access.scopes.is_none(),
666 }
667 }
668 }
669 }
670}
671
672impl Tool {
673 pub fn by_name(name: &str) -> Option<&'static Tool> {
674 TOOLS.iter().find(|tool| tool.name == name)
675 }
676
677 pub fn action(&self, name: &str) -> Option<&'static Action> {
678 // The tools are 'static; find through TOOLS to keep the lifetime.
679 TOOLS
680 .iter()
681 .find(|tool| tool.name == self.name)
682 .and_then(|tool| tool.actions.iter().find(|action| action.name == name))
683 }
684
685 pub fn visible(&self, gate: &Gate) -> Vec<&'static Action> {
686 TOOLS
687 .iter()
688 .find(|tool| tool.name == self.name)
689 .map(|tool| tool.actions.iter().filter(|action| gate.allows(action.op)).collect())
690 .unwrap_or_default()
691 }
692
693 /// The flat input schema of the actions given.
694 pub fn input_schema(&self, actions: &[&Action]) -> Value {
695 let mut properties = Map::new();
696 let lines: Vec<String> = actions
697 .iter()
698 .map(|action| {
699 let required: Vec<String> = action.op.required();
700 if required.is_empty() {
701 format!("{}: {}.", action.name, action.summary)
702 } else {
703 format!("{} ({}): {}.", action.name, required.join(", "), action.summary)
704 }
705 })
706 .collect();
707 let mut action_schema = json!({
708 "type": "string",
709 "enum": actions.iter().map(|action| action.name).collect::<Vec<_>>(),
710 "description": lines.join("\n"),
711 });
712 if let Some(default) = self.default_action.filter(|name| actions.iter().any(|action| action.name == *name)) {
713 action_schema["default"] = json!(default);
714 }
715 properties.insert("action".to_owned(), action_schema);
716 for action in actions {
717 for (name, schema) in action.op.properties() {
718 merge_property(&mut properties, name, schema);
719 }
720 }
721 let mut required = vec![];
722 if self.default_action.is_none() {
723 required.push("action");
724 }
725 let mut schema = json!({ "type": "object", "properties": properties });
726 if !required.is_empty() {
727 schema["required"] = json!(required);
728 }
729 schema
730 }
731
732 /// The input schema keyed by action: one `oneOf` branch per action,
733 /// each with its own fields and the ones it needs.
734 pub fn discriminated(&self, actions: &[&Action]) -> Value {
735 let branches: Vec<Value> = actions
736 .iter()
737 .map(|action| {
738 let mut properties = Map::new();
739 properties.insert("action".to_owned(), json!({ "const": action.name }));
740 properties.extend(action.op.properties());
741 let mut required = vec![Value::String("action".to_owned())];
742 // The default action may leave `action` out.
743 if self.default_action == Some(action.name) {
744 required.clear();
745 }
746 required.extend(action.op.required().into_iter().map(Value::String));
747 json!({
748 "title": action.name,
749 "description": action.summary,
750 "type": "object",
751 "properties": properties,
752 "required": required,
753 })
754 })
755 .collect();
756 json!({ "type": "object", "oneOf": branches })
757 }
758
759 /// MCP's hints about the actions given: whether the tool only reads,
760 /// whether it can destroy something, and whether calling it twice is
761 /// the same as once.
762 pub fn annotations(&self, actions: &[&Action]) -> Value {
763 let read_only = actions.iter().all(|action| reads_only(action.op));
764 json!({
765 "title": self.title,
766 "readOnlyHint": read_only,
767 "destructiveHint": !read_only && actions.iter().any(|action| destructive(action.op)),
768 "idempotentHint": read_only,
769 "openWorldHint": false,
770 })
771 }
772
773 /// The tool as `tools/list` gives it, for a caller behind `gate`, or
774 /// `None` when it may use none of its actions.
775 pub fn listed(&self, gate: &Gate) -> Option<Value> {
776 let actions = self.visible(gate);
777 if actions.is_empty() {
778 return None;
779 }
780 Some(json!({
781 "name": self.name,
782 "title": self.title,
783 "description": self.description,
784 "inputSchema": self.input_schema(&actions),
785 "annotations": self.annotations(&actions),
786 }))
787 }
788}
789
790/// Adds a property to a tool's flat schema. The first action to use a name
791/// describes it; a later one with other allowed values adds them.
792fn merge_property(properties: &mut Map<String, Value>, name: String, schema: Value) {
793 match properties.get_mut(&name) {
794 None => {
795 properties.insert(name, schema);
796 }
797 Some(existing) => {
798 if let (Some(Value::Array(had)), Some(Value::Array(more))) =
799 (existing.get("enum").cloned(), schema.get("enum"))
800 {
801 let mut merged = had;
802 for value in more {
803 if !merged.contains(value) {
804 merged.push(value.clone());
805 }
806 }
807 existing["enum"] = Value::Array(merged);
808 }
809 // Different kinds of value under one name: say less, accept both.
810 if existing.get("type") != schema.get("type")
811 && let Some(fields) = existing.as_object_mut()
812 {
813 fields.remove("type");
814 fields.remove("items");
815 }
816 }
817 }
818}
819
820/// What a call to a tool runs: the operation its action names, or why not.
821pub fn resolve(tool: &Tool, arguments: &Value) -> Result<Op, String> {
822 let names = || {
823 tool.actions
824 .iter()
825 .map(|action| action.name)
826 .collect::<Vec<_>>()
827 .join(", ")
828 };
829 let Some(name) = arguments["action"].as_str().or(tool.default_action) else {
830 return Err(format!("Give an action: one of {}.", names()));
831 };
832 let Some(action) = tool.action(name) else {
833 return Err(format!("{} has no action {name}. Its actions: {}.", tool.name, names()));
834 };
835 let missing: Vec<String> = action
836 .op
837 .required()
838 .into_iter()
839 .filter(|field| arguments.get(field).is_none_or(Value::is_null))
840 .collect();
841 if !missing.is_empty() {
842 return Err(format!("{}.{name} needs {}.", tool.name, missing.join(", ")));
843 }
844 Ok(action.op)
845}
846
847#[cfg(test)]
848mod tests {
849 use super::*;
850 use g1t_contracts::scopes::{Preset, Scope};
851
852 fn listed(gate: &Gate) -> Vec<Value> {
853 TOOLS.iter().filter_map(|tool| tool.listed(gate)).collect()
854 }
855
856 fn token(scopes: Option<Vec<Scope>>) -> TokenAccess {
857 TokenAccess {
858 token_id: "tok_1".to_owned(),
859 scopes: scopes.map(|scopes| scopes.iter().map(|scope| scope.as_str().to_owned()).collect()),
860 legacy: false,
Merge the AI Gateway: Anthropic's Messages API on a workspace's tokens861 name: None,
Merge branch 'worktree-agent-a3abfcce648e87dca'862 ..TokenAccess::default()
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships863 }
864 }
865
866 #[test]
867 fn every_operation_is_exactly_one_action_of_one_tool() {
868 for op in Op::ALL {
869 let count = TOOLS
870 .iter()
871 .flat_map(|tool| tool.actions.iter())
872 .filter(|action| action.op == op)
873 .count();
Projects have Observability: their requests, logs, traces, metrics and errors, from apps on g1t.page with nothing to set up, and from software anywhere else over OpenTelemetry.874 let expected = usize::from(!REST_ONLY.contains(&op));
875 assert_eq!(count, expected, "{} is {count} actions", op.name());
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships876 }
877 for tool in TOOLS {
878 let mut names = std::collections::HashSet::new();
879 for action in tool.actions {
880 assert!(names.insert(action.name), "{}.{} twice", tool.name, action.name);
881 }
882 if let Some(default) = tool.default_action {
883 assert!(tool.action(default).is_some(), "{}", tool.name);
884 }
885 }
Merge branch 'worktree-agent-a6ec0a89d7fe7a9ae'886 assert!(TOOLS.len() <= 19, "{} tools", TOOLS.len());
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships887 }
888
889 #[test]
890 fn every_operation_needs_exactly_one_scope_or_none() {
891 use g1t_contracts::scopes::OPERATIONS;
892 for op in Op::ALL {
893 let mapped = OPERATIONS.iter().filter(|(name, _)| *name == op.name()).count();
894 let free = NO_SCOPE.contains(&op.name());
895 assert_eq!(mapped + usize::from(free), 1, "{}", op.name());
896 }
897 for (name, _) in OPERATIONS {
The contracts no longer describe g1t's own agents, and workspaces can keep their AI providers. Every consumer had already stopped using them, so the TypeScript and Rust contracts drop the workspace-agent, ability, look, skill-library, context, runner-agent and mention modules, the chat and docs RPCs agents posted and read through, the folio agent methods, the agent_waiting notification, agent.asked and memory.changed events, AI credit, token and gateway billing types, model routes and sessions, team agents, agent tokens, plan, review, message and confidence types, command rules, cost caps and confidence rules. The agents:run and models:* scopes are no longer offered by any preset, OAuth default or permission form, but a stored token or grant that names them still reads; and the removed operations are gone from the scope table, so the API's check that every operation has exactly one scope is strict again. What stored data needs in order to parse (old run and credential kinds, an agent team lead, retired rules and webhook events, old guardrail and integration settings) still parses, and a run's token is still PrincipalKind::Agent, which now means a run's token and the @g1t rows written before. The customize, marketplace, skills and claude-plugin contracts stay only until the mobile app drops its Customize screens.898 assert!(Op::by_name(name).is_some(), "{name} is not an operation");
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships899 }
900 }
901
902 #[test]
903 fn each_tool_schema_is_valid_with_one_branch_per_action() {
904 for tool in TOOLS {
905 let actions: Vec<&Action> = tool.actions.iter().collect();
906 let flat = tool.input_schema(&actions);
907 assert_eq!(flat["type"], "object");
908 assert!(flat.get("oneOf").is_none(), "no oneOf at the top level");
909 let listed: Vec<&str> = flat["properties"]["action"]["enum"]
910 .as_array()
911 .unwrap()
912 .iter()
913 .map(|name| name.as_str().unwrap())
914 .collect();
915 assert_eq!(listed, tool.actions.iter().map(|action| action.name).collect::<Vec<_>>());
916 for action in tool.actions {
917 for field in action.op.required() {
918 assert!(flat["properties"].get(&field).is_some(), "{}.{}: {field}", tool.name, action.name);
919 }
920 }
921 let keyed = tool.discriminated(&actions);
922 let branches = keyed["oneOf"].as_array().unwrap();
923 assert_eq!(branches.len(), tool.actions.len());
924 for (branch, action) in branches.iter().zip(tool.actions) {
925 assert_eq!(branch["properties"]["action"]["const"], action.name);
926 for field in branch["required"].as_array().unwrap() {
927 assert!(branch["properties"].get(field.as_str().unwrap()).is_some(), "{}.{}: {field}", tool.name, action.name);
928 }
929 }
930 // A well-formed JSON Schema object throughout.
931 let text = serde_json::to_string(&flat).unwrap();
932 assert!(serde_json::from_str::<Value>(&text).is_ok());
933 }
934 }
935
936 #[test]
937 fn a_read_only_token_sees_read_actions_only() {
938 let access = token(Preset::ReadOnly.scopes());
939 let gate = Gate::Token(&access);
940 for tool in TOOLS {
941 for action in tool.visible(&gate) {
942 assert!(reads_only(action.op), "{}.{}", tool.name, action.name);
943 }
944 }
945 let tools = listed(&gate);
946 for tool in &tools {
947 assert_eq!(tool["annotations"]["readOnlyHint"], true, "{}", tool["name"]);
948 assert_eq!(tool["annotations"]["destructiveHint"], false);
949 }
950 let issue = tools.iter().find(|tool| tool["name"] == "issue").unwrap();
Merge branch 'worktree-agent-a6ec0a89d7fe7a9ae'951 assert_eq!(issue["inputSchema"]["properties"]["action"]["enum"], json!(["list", "get", "labels", "work", "list_claims"]));
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships952 }
953
954 #[test]
955 fn a_narrow_token_sees_only_its_tools() {
956 let access = token(Some(vec![Scope::IssuesWrite]));
957 let names: Vec<Value> = listed(&Gate::Token(&access)).into_iter().map(|tool| tool["name"].clone()).collect();
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar958 // Labels and milestones are the repository's, managed with issues:write.
The API and MCP server no longer offer g1t's own agents. g1t is what your coding agents work against, not an agent of its own, so the operations that drove hosted agents are gone: messaging an agent on a pull request (message_agent, take_messages, answer_message), assigning or delegating an issue to g1t (assign_issue, delegate), plans (plan_work, get_plan, apply_plan), the context hub (search_context, get_entity), model routes, agents' computers, AI Gateway requests, "Fix with g1t" on a security alert, and every Customize route (marketplaces, plugins, connectors). The callbacks the agent sandbox reported through (/agent-runs/*, /runs/:id/usage, /plans/:id, /reviews/:id) go with them, update_repo_settings stops accepting agent_review, max_revisions and hold_low_confidence, import_issue stops accepting assign, and an old agent token with no run behind it is refused.959 assert_eq!(names, vec![json!("repository"), json!("issue"), json!("account")]);
API: notifications over REST and MCP, with notifications scopes960 // Notifications are a resource of their own: reading them lists
961 // only what reads.
962 let reader = token(Some(vec![Scope::NotificationsRead]));
963 let tools = listed(&Gate::Token(&reader));
964 let notifications = tools.iter().find(|tool| tool["name"] == "notifications").unwrap();
965 assert_eq!(
966 notifications["inputSchema"]["properties"]["action"]["enum"],
967 json!(["list", "get", "subscription", "watching", "watched"])
968 );
969 assert_eq!(notifications["annotations"]["readOnlyHint"], true);
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships970 let full = token(None);
971 assert_eq!(listed(&Gate::Token(&full)).len(), TOOLS.len());
972 assert_eq!(listed(&Gate::Everything).len(), TOOLS.len());
973 }
974
975 #[test]
976 fn a_tool_that_can_destroy_says_so() {
977 let tools = listed(&Gate::Everything);
978 let repository = tools.iter().find(|tool| tool["name"] == "repository").unwrap();
979 assert_eq!(repository["annotations"]["destructiveHint"], true);
980 assert_eq!(repository["annotations"]["readOnlyHint"], false);
981 let memory = tools.iter().find(|tool| tool["name"] == "memory").unwrap();
982 assert_eq!(memory["annotations"]["destructiveHint"], false);
983 }
984
985 #[test]
986 fn calls_resolve_to_their_operation_or_say_what_is_missing() {
987 let issue = Tool::by_name("issue").unwrap();
988 assert_eq!(resolve(issue, &json!({ "action": "get", "repo": "a/b", "number": 1 })), Ok(Op::GetIssue));
989 assert_eq!(resolve(issue, &json!({ "action": "get", "repo": "a/b" })), Err("issue.get needs number.".to_owned()));
990 assert!(resolve(issue, &json!({})).unwrap_err().starts_with("Give an action"));
991 assert!(resolve(issue, &json!({ "action": "explode" })).unwrap_err().contains("no action explode"));
992 let search = Tool::by_name("search").unwrap();
993 assert_eq!(resolve(search, &json!({ "query": "x" })), Ok(Op::Search));
994 let account = Tool::by_name("account").unwrap();
995 assert_eq!(resolve(account, &json!({})), Ok(Op::Whoami));
996 }
997
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar998 #[test]
999 fn teams_are_one_tool_and_a_workspace_reader_sees_only_its_reads() {
1000 let team = Tool::by_name("team").unwrap();
1001 let names: Vec<&str> = team.actions.iter().map(|action| action.name).collect();
1002 assert_eq!(
1003 names,
1004 [
1005 "list",
1006 "get",
1007 "create",
1008 "update",
1009 "delete",
1010 "list_members",
1011 "set_member",
1012 "remove_member",
1013 "list_child_teams",
1014 "list_repos",
1015 "set_repo",
1016 "remove_repo",
1017 "set_review_assignment",
1018 "list_user_teams",
1019 ]
1020 );
1021 let reader = token(Some(vec![Scope::WorkspaceRead]));
1022 let tools = listed(&Gate::Token(&reader));
1023 let listed_team = tools.iter().find(|tool| tool["name"] == "team").unwrap();
1024 assert_eq!(
1025 listed_team["inputSchema"]["properties"]["action"]["enum"],
1026 json!(["list", "get", "list_members", "list_child_teams", "list_repos", "list_user_teams"])
1027 );
1028 assert_eq!(listed_team["annotations"]["readOnlyHint"], true);
1029 // A team's role on a repository is who has access.
1030 let admin = token(Some(vec![Scope::WorkspaceAdmin]));
1031 let tools = listed(&Gate::Token(&admin));
1032 let listed_team = tools.iter().find(|tool| tool["name"] == "team").unwrap();
1033 let actions = listed_team["inputSchema"]["properties"]["action"]["enum"].as_array().unwrap();
1034 assert!(actions.contains(&json!("set_review_assignment")) && !actions.contains(&json!("set_repo")));
1035 let access = token(Some(vec![Scope::AccessAdmin]));
1036 let tools = listed(&Gate::Token(&access));
1037 let listed_team = tools.iter().find(|tool| tool["name"] == "team").unwrap();
1038 assert_eq!(listed_team["inputSchema"]["properties"]["action"]["enum"], json!(["set_repo", "remove_repo"]));
1039 // Both kinds of role a schema names are offered.
1040 let roles = &listed(&Gate::Everything).into_iter().find(|tool| tool["name"] == "team").unwrap()["inputSchema"]
1041 ["properties"]["role"]["enum"];
1042 for role in ["member", "maintainer", "read", "admin"] {
1043 assert!(roles.as_array().unwrap().contains(&json!(role)), "{role}");
1044 }
1045 assert_eq!(
1046 resolve(team, &json!({ "action": "set_repo", "workspace": "acme", "team": "backend", "repo": "rocket" })),
1047 Err("team.set_repo needs role.".to_owned())
1048 );
1049 }
1050
1051 #[test]
1052 fn reviewers_and_code_owners_are_actions_of_their_tools() {
1053 let pull = Tool::by_name("pull_request").unwrap();
1054 assert_eq!(
1055 resolve(pull, &json!({ "action": "request_reviewers", "repo": "a/b", "number": 1, "team_reviewers": ["backend"] })),
1056 Ok(Op::RequestReviewers)
1057 );
1058 assert_eq!(pull.action("remove_requested_reviewers").map(|action| action.op), Some(Op::RemoveRequestedReviewers));
1059 let repository = Tool::by_name("repository").unwrap();
1060 assert_eq!(resolve(repository, &json!({ "action": "codeowners", "repo": "a/b" })), Ok(Op::GetCodeownersErrors));
1061 assert!(reads_only(Op::GetCodeownersErrors));
1062 assert!(!reads_only(Op::RequestReviewers));
1063 }
1064
Merge main into Artifacts Phase 21065 /// The `artifact` tool offers each token only what its artifacts scope
1066 /// allows: reading, then changing, then sharing and deleting for good.
1067 /// Workflow runs' artifacts are the `workflow` tool's, under their own
1068 /// scope, and neither scope reaches the other's.
1069 #[test]
1070 fn the_artifact_tool_offers_what_the_artifacts_scope_allows() {
1071 let actions = |scopes: Vec<Scope>| -> Option<Value> {
1072 let access = token(Some(scopes));
1073 Tool::by_name("artifact").unwrap().listed(&Gate::Token(&access)).map(|tool| tool["inputSchema"]["properties"]["action"]["enum"].clone())
1074 };
1075 let reads = json!(["list", "search", "get", "read", "versions", "access", "templates", "spaces", "query_data"]);
1076 assert_eq!(actions(vec![Scope::ArtifactsRead]), Some(reads.clone()));
1077 let writes = actions(vec![Scope::ArtifactsWrite]).unwrap();
1078 for action in ["create", "update", "edit", "trash", "restore", "restore_version"] {
1079 assert!(writes.as_array().unwrap().contains(&json!(action)), "{action}");
1080 }
1081 assert!(!writes.as_array().unwrap().contains(&json!("share")) && !writes.as_array().unwrap().contains(&json!("purge")));
1082 let admin = actions(vec![Scope::ArtifactsAdmin]).unwrap();
1083 assert_eq!(admin.as_array().unwrap().len(), Tool::by_name("artifact").unwrap().actions.len());
1084 // Without an artifacts scope there is no artifact tool at all.
1085 assert_eq!(actions(vec![Scope::WorkflowsWrite, Scope::IssuesWrite]), None);
1086 // And an artifacts scope shows nothing of workflow runs' artifacts.
1087 let access = token(Some(vec![Scope::ArtifactsAdmin]));
1088 assert!(Tool::by_name("workflow").unwrap().listed(&Gate::Token(&access)).is_none());
1089 // The read-only and agent presets read artifacts and change none.
1090 for preset in [Preset::ReadOnly, Preset::Agent] {
1091 let access = token(preset.scopes());
1092 let tool = Tool::by_name("artifact").unwrap().listed(&Gate::Token(&access)).unwrap();
1093 assert_eq!(tool["inputSchema"]["properties"]["action"]["enum"], reads, "{}", preset.as_str());
1094 assert_eq!(tool["annotations"]["readOnlyHint"], true);
1095 }
1096 // Sharing and deleting for good can't be undone the same way.
1097 let tools = listed(&Gate::Everything);
1098 let artifact = tools.iter().find(|tool| tool["name"] == "artifact").unwrap();
1099 assert_eq!(artifact["annotations"]["destructiveHint"], true);
1100 assert!(artifact["description"].as_str().unwrap().contains("Not the `workflow` tool's run artifacts"));
1101 let tool = Tool::by_name("artifact").unwrap();
1102 assert_eq!(resolve(tool, &json!({ "action": "read", "workspace": "acme" })), Err("artifact.read needs artifact_id.".to_owned()));
1103 assert_eq!(
1104 resolve(tool, &json!({ "action": "edit", "workspace": "acme", "artifact_id": "fol_1", "markdown": "x" })),
1105 Ok(Op::Folios(FoliosOp::Edit))
1106 );
1107 }
1108
Artifacts: an hourly view of operations and errors, and SSH must meter its git before it ships1109 /// How much smaller `tools/list` is than one tool per operation. Run
1110 /// with `--nocapture` to see the numbers.
1111 #[test]
1112 fn the_tool_list_is_much_smaller_than_one_tool_per_operation() {
1113 let before: Vec<Value> = Op::ALL
1114 .into_iter()
1115 .map(|op| json!({ "name": op.name(), "description": op.description(), "inputSchema": op.input() }))
1116 .collect();
1117 let after = listed(&Gate::Everything);
1118 let before_bytes = serde_json::to_string(&json!({ "tools": before })).unwrap().len();
1119 let after_bytes = serde_json::to_string(&json!({ "tools": after })).unwrap().len();
1120 let agent = token(Preset::Agent.scopes());
1121 let agent_bytes = serde_json::to_string(&json!({ "tools": listed(&Gate::Token(&agent)) })).unwrap().len();
1122 let read = token(Preset::ReadOnly.scopes());
1123 let read_bytes = serde_json::to_string(&json!({ "tools": listed(&Gate::Token(&read)) })).unwrap().len();
1124 println!(
1125 "tools/list: before {} tools, {before_bytes} bytes (~{} tokens); after {} tools, {after_bytes} bytes (~{} tokens); agent preset {agent_bytes} bytes (~{} tokens); read only {read_bytes} bytes (~{} tokens)",
1126 before.len(),
1127 before_bytes / 4,
1128 after.len(),
1129 after_bytes / 4,
1130 agent_bytes / 4,
1131 read_bytes / 4,
1132 );
1133 assert!(after_bytes * 2 < before_bytes, "{after_bytes} vs {before_bytes}");
1134 }
1135}

This file's history is long; its oldest lines are credited to the oldest commit read.