Skip to content
Sign up

flagon-io/g1t

public
0

Where people and agents ship software together. The open-source git platform for the whole job: issues, agents, checks and deploys to the edge.

g1t.sh
gitagentscloudflarerustforgemcp
73 linesCodeBlameRaw

Pick any line to see why it is the way it is: the commit, the pull request and issue it came from, and what the agent was thinking.

Keep g1t's own runs off the model proxy until it holds g1t's key1import assert from "node:assert/strict";
2import { test } from "node:test";
3
4import type { ModelUpstream } from "@g1t/contracts";
5
6import { presentedToken, upstreamRequest } from "./route.ts";
7
Mission control shows model usage, yours and the workspace's: tokens, cost, active days, cache share, each day, and the mix8const run = { workspace: "acme", repo: "acme/web", number: 7, task: "implement", session: "ms_abc", baseUrl: null, apiKey: null, authHeader: null, api: "anthropic" as const, model: null, official: false, provider: "g1t", requestedBy: null };
Keep g1t's own runs off the model proxy until it holds g1t's key9const hosted = { AI_GATEWAY_ID: "g1t", CLOUDFLARE_ACCOUNT_ID: "acct", AI_GATEWAY_TOKEN: "gw-token" };
10
11function incoming(): Headers {
12 return new Headers({
13 "x-api-key": "g1tm_run_token",
14 "anthropic-version": "2023-06-01",
15 "anthropic-beta": "tools-2024",
16 "content-type": "application/json",
17 });
18}
19
20test("the run's token is read from either header", () => {
21 assert.equal(presentedToken(new Headers({ "x-api-key": "g1tm_a" })), "g1tm_a");
22 assert.equal(presentedToken(new Headers({ authorization: "Bearer g1tm_b" })), "g1tm_b");
23 assert.equal(presentedToken(new Headers()), null);
24});
25
26test("g1t's runs go through its gateway, tagged, without the sandbox's token", () => {
27 const upstream: ModelUpstream = { ...run, route: "g1t" };
28 const { url, headers } = upstreamRequest(upstream, hosted, "/v1/messages?beta=true", incoming());
29 assert.equal(url, "https://gateway.ai.cloudflare.com/v1/acct/g1t/anthropic/v1/messages?beta=true");
30 assert.equal(headers.get("cf-aig-authorization"), "Bearer gw-token");
31 assert.equal(headers.get("x-api-key"), null);
32 assert.equal(headers.get("anthropic-beta"), "tools-2024");
33 assert.deepEqual(JSON.parse(headers.get("cf-aig-metadata") ?? "{}"), {
34 task: "implement",
35 workspace: "acme",
36 repo: "acme/web",
37 pull: 7,
Prices keep themselves current with what g1t pays38 session: "ms_abc",
Keep g1t's own runs off the model proxy until it holds g1t's key39 });
40});
41
Auto model routing: the cheapest tier that can do each piece of work, a retry goes up a tier, and each run records its tier42test("a run's tier is tagged at the gateway, so spend can be read per tier", () => {
43 const upstream: ModelUpstream = { ...run, route: "g1t", tier: "small" };
44 const { headers } = upstreamRequest(upstream, hosted, "/v1/messages", incoming());
45 const metadata = JSON.parse(headers.get("cf-aig-metadata") ?? "{}");
46 assert.deepEqual(metadata, {
47 task: "implement",
48 tier: "small",
49 repo: "acme/web",
50 pull: 7,
51 session: "ms_abc",
52 });
53 // The gateway keeps five entries; the session, which billing settles
54 // by, must be one of them.
55 assert.ok(Object.keys(metadata).length <= 5);
56});
57
Keep g1t's own runs off the model proxy until it holds g1t's key58test("a workspace's own Anthropic key goes to Anthropic, and only there", () => {
59 const upstream: ModelUpstream = { ...run, route: "anthropic", baseUrl: "https://api.anthropic.com", apiKey: "sk-ant-theirs", authHeader: "x-api-key" };
60 const { url, headers } = upstreamRequest(upstream, hosted, "/v1/messages", incoming());
61 assert.equal(url, "https://api.anthropic.com/v1/messages");
62 assert.equal(headers.get("x-api-key"), "sk-ant-theirs");
63 assert.equal(headers.get("cf-aig-authorization"), null);
64 assert.equal(headers.get("cf-aig-metadata"), null);
65});
66
67test("a workspace's own endpoint gets the key the way it asks for it", () => {
68 const upstream: ModelUpstream = { ...run, route: "endpoint", baseUrl: "https://llm.acme.dev/anthropic/", apiKey: "theirs", authHeader: "authorization" };
69 const { url, headers } = upstreamRequest(upstream, hosted, "/v1/messages", incoming());
70 assert.equal(url, "https://llm.acme.dev/anthropic/v1/messages");
71 assert.equal(headers.get("authorization"), "Bearer theirs");
72 assert.equal(headers.get("x-api-key"), null);
73});

This file's history is long; its oldest lines are credited to the oldest commit read.