Skip to content
Sign up

flagon-io/g1t

public
00

Where people and agents ship software together. The open-source git platform for the whole job: issues, agents, checks and deploys to the edge.

g1t.sh
gitagentscloudflarerustforgemcp
190 linesCodeBlameRaw

Pick any line to see why it is the way it is: the commit, the pull request and issue it came from, and what the agent was thinking.

API: notifications over REST and MCP, with notifications scopes1import type { User, Viewer } from "./identity";
2import type { RepoPath } from "./repos";
3import type { Result } from "./result";
4
5/**
6 * Events, delivered to the addresses a repository or a workspace registers.
7 * Mirrors `crates/contracts/src/webhooks.rs`.
8 */
9
10/** Every event a webhook can be sent, in the order people are shown them. */
11export const EVENT_TYPES = [
12 "git.push",
Merge branch 'worktree-agent-a8b78c62188153aa3' into claude/cool-newton-7nm8r913 "git.deleted",
API: notifications over REST and MCP, with notifications scopes14 "branch.renamed",
15 "repo.created",
16 "repo.forked",
17 "repo.updated",
18 "repo.visibility_changed",
19 "repo.renamed",
20 "repo.transferred",
21 "repo.default_branch_changed",
22 "repo.archived",
23 "repo.unarchived",
24 "repo.deleted",
25 "repo.restored",
26 "repo.purged",
27 "repo.collaborator_added",
28 "repo.collaborator_removed",
29 "repo.collaborator_role_changed",
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar30 "team.created",
31 "team.edited",
32 "team.deleted",
33 "team.member_added",
34 "team.member_role_changed",
35 "team.member_removed",
36 "team.repo_added",
37 "team.repo_role_changed",
38 "team.repo_removed",
@g1t welcomes you when you join a workspace, and that is the one introduction any agent makes. Identity now says when a person becomes a member, workspace.member_joined, by invitation, by an invite code, or by creating the workspace, and webhooks can hear it; the agents service hears it too, and for anyone who joined, never the creator, the workspace's @g1t opens your direct message and says in its own voice who it is, what to ask it, how agents answer, and where things are, once per person per workspace and charged to @g1t like any reply, with a fixed welcome when no model can be used. The agents, workspaces, authentication and webhooks guides say so.39 "workspace.member_joined",
Merge rulesets: branch and tag rules, agent-first, enforced on push and merge40 "ruleset.created",
41 "ruleset.updated",
42 "ruleset.deleted",
API: notifications over REST and MCP, with notifications scopes43 "issue.opened",
44 "issue.updated",
45 "issue.assigned",
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar46 "issue.labeled",
47 "issue.unlabeled",
48 "issue.milestoned",
49 "issue.demilestoned",
API: notifications over REST and MCP, with notifications scopes50 "issue.closed",
51 "issue.reopened",
52 "comment.created",
Merge Actions: cross-repo workflows and actions, release and deployment triggers, step timeouts53 "comment.edited",
54 "comment.deleted",
API: notifications over REST and MCP, with notifications scopes55 "pull.opened",
56 "pull.ready",
57 "pull.updated",
58 "pull.merge_requested",
59 "pull.merged",
60 "pull.closed",
Merge Actions: cross-repo workflows and actions, release and deployment triggers, step timeouts61 "pull.reopened",
62 "pull.converted_to_draft",
API: notifications over REST and MCP, with notifications scopes63 "pull.assigned",
64 "pull.review_requested",
65 "pull.review_request_removed",
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar66 "pull.labeled",
67 "pull.unlabeled",
68 "pull.milestoned",
69 "pull.demilestoned",
70 "pull.base_changed",
API: notifications over REST and MCP, with notifications scopes71 "pull.stalled",
72 "pull.resumed",
Merge Actions: cross-repo workflows and actions, release and deployment triggers, step timeouts73 "release.created",
74 "release.published",
75 "release.released",
76 "release.prereleased",
77 "release.edited",
78 "release.unpublished",
79 "release.deleted",
API: notifications over REST and MCP, with notifications scopes80 "checks.completed",
Merge checks: statuses and check runs on every commit81 "status.created",
82 "check_run.created",
83 "check_run.completed",
84 "check_run.rerequested",
85 "check_run.requested_action",
86 "check_suite.completed",
87 "check_suite.rerequested",
API: notifications over REST and MCP, with notifications scopes88 "workflow.completed",
89 "deployment.succeeded",
90 "deployment.failed",
Merge branch 'main' into worktree-agent-a69aeabc4b0deeb9791 "deployment.created",
92 "deployment_status.created",
API: notifications over REST and MCP, with notifications scopes93 "queue.changed",
Merge branch 'worktree-agent-ab8033ab973f8d99a'94 "integration.failed",
95 "integration.passed",
96 "decision.recorded",
API: notifications over REST and MCP, with notifications scopes97 "session.appended",
Merge branch 'worktree-agent-a6ec0a89d7fe7a9ae'98 "session.started",
99 "session.ended",
g1t coordinates the work and the person's own sessions do it: Ask g1t reads g1t with the same tools any agent gets, answers in one conversation shared with the @g1t direct message in Chat, and hands work to sessions in the person's own harness, whose subagents g1t records, ties to issues and pull requests, and lets see each other.100 "session.progressed",
Merge branch 'worktree-agent-a6ec0a89d7fe7a9ae'101 "work.claimed",
102 "work.released",
103 "work.claim_expired",
104 "work.handoff_requested",
105 "dependency.changed",
106 "overlap.detected",
API: notifications over REST and MCP, with notifications scopes107 "package.published",
108 "package.version_deleted",
109 "package.deleted",
110 "package.visibility_changed",
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar111 "secret_scanning_alert.created",
112 "secret_scanning_alert.fixed",
113 "secret_scanning_alert.dismissed",
114 "secret_scanning_alert.reopened",
115 "secret_scanning.bypass_requested",
116 "secret_scanning.bypass_reviewed",
117 "code_scanning_alert.created",
118 "code_scanning_alert.fixed",
119 "code_scanning_alert.dismissed",
120 "code_scanning_alert.reopened",
121 "vulnerability_alert.created",
122 "vulnerability_alert.fixed",
123 "vulnerability_alert.dismissed",
Merge remote-tracking branch 'origin/claude/cool-newton-7nm8r9' into claude/cool-newton-7nm8r9124 "secret_scanning_alert.summary",
125 "code_scanning_alert.summary",
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar126 "vulnerability_alert.reopened",
Merge remote-tracking branch 'origin/claude/cool-newton-7nm8r9' into claude/cool-newton-7nm8r9127 "vulnerability_alert.summary",
128 "security_advisory.published",
129 "security_advisory.withdrawn",
130 "security_advisory.reported",
API: notifications over REST and MCP, with notifications scopes131] as const;
132
The contracts no longer describe g1t's own agents, and workspaces can keep their AI providers. Every consumer had already stopped using them, so the TypeScript and Rust contracts drop the workspace-agent, ability, look, skill-library, context, runner-agent and mention modules, the chat and docs RPCs agents posted and read through, the folio agent methods, the agent_waiting notification, agent.asked and memory.changed events, AI credit, token and gateway billing types, model routes and sessions, team agents, agent tokens, plan, review, message and confidence types, command rules, cost caps and confidence rules. The agents:run and models:* scopes are no longer offered by any preset, OAuth default or permission form, but a stored token or grant that names them still reads; and the removed operations are gone from the scope table, so the API's check that every operation has exactly one scope is strict again. What stored data needs in order to parse (old run and credential kinds, an agent team lead, retired rules and webhook events, old guardrail and integration settings) still parses, and a run's token is still PrincipalKind::Agent, which now means a run's token and the @g1t rows written before. The customize, marketplace, skills and claude-plugin contracts stay only until the mobile app drops its Customize screens.133/**
134 * Event types webhooks were once offered that g1t no longer sends (from
135 * g1t's own agents, since removed). A webhook saved with one still reads;
136 * saving its list again leaves them out. Mirrors `RETIRED_EVENT_TYPES`.
137 */
138export const RETIRED_EVENT_TYPES: readonly string[] = ["agent.asked", "review.completed"];
139
API: notifications over REST and MCP, with notifications scopes140export type Hook = {
141 id: string;
142 scope: "repo" | "workspace";
143 workspace: string;
144 /** For a repository's webhook: `owner/name`. */
145 repo: string | null;
146 url: string;
147 /** Event types, or `["*"]` for all. */
148 events: string[];
149 active: boolean;
150 secretHint: string;
151 createdBy: string;
152 createdAt: string;
153 lastStatus: "delivered" | "pending" | "failed" | null;
154 lastDeliveredAt: string | null;
155};
156
157export type HookDelivery = {
158 id: string;
159 hookId: string;
160 eventId: string;
161 event: string;
162 status: "pending" | "delivered" | "failed";
163 attempts: number;
164 responseStatus: number | null;
165 responseBody: string | null;
166 error: string | null;
167 durationMs: number | null;
168 /** The JSON that was sent. */
169 payload: string;
170 createdAt: string;
171 deliveredAt: string | null;
172 nextAttemptAt: string | null;
173};
174
175/** A repository's webhooks, or with `repo` left out, the workspace's own. */
176export type HookOwner = { workspace: string; repo?: RepoPath };
177
178export interface WebhooksApi {
179 list(viewer: Viewer, owner: HookOwner): Promise<Result<Hook[]>>;
180 create(
181 actor: User,
182 owner: HookOwner,
183 input: { url: string; events?: string[]; secret?: string },
184 ): Promise<Result<{ hook: Hook; secret: string | null }>>;
185 update(actor: User, owner: HookOwner, id: string, input: { url?: string; events?: string[]; active?: boolean }): Promise<Result<Hook>>;
186 delete(actor: User, owner: HookOwner, id: string): Promise<Result<boolean>>;
187 ping(actor: User, owner: HookOwner, id: string): Promise<Result<HookDelivery>>;
188 deliveries(viewer: Viewer, owner: HookOwner, id: string): Promise<Result<HookDelivery[]>>;
189 redeliver(actor: User, owner: HookOwner, deliveryId: string): Promise<Result<HookDelivery>>;
190}

This file's history is long; its oldest lines are credited to the oldest commit read.