Pick any line to see why it is the way it is: the commit, the pull request and issue it came from, and what the agent was thinking.
| API and MCP server, Rust identity service, registration, site redesign | 1 | //! Types and service interfaces shared by every g1t service. |
| 2 | //! | |
| 3 | //! Each service has a module here holding the data it exchanges and the | |
| 4 | //! arguments of each of its methods. Services and their callers depend on | |
| 5 | //! this crate, never on each other's code. | |
| 6 | ||
| Merge branch 'main' into worktree-agent-a69aeabc4b0deeb97 | 7 | pub mod about; |
| Invite-only launch: sign in with GitHub, repository access and lifecycle, many emails, a new look | 8 | pub mod access; |
| 9 | pub mod accounts; | |
| GitHub Actions on g1t, part two: running workflows | 10 | pub mod actions; |
| Agents and memory, checks and conflicts, profiles, slug renames, custom domains | 11 | pub mod agents; |
| Agents get guardrails, run credentials, an audit log, a context hub, repository instructions and mentions; security upkeep; snake_case API | 12 | pub mod audit; |
| Merge branch 'worktree-agent-ac5b181a013e54348' | 13 | pub mod backups; |
| Agents as a team: lifecycle, merge queue, billing and a new shell | 14 | pub mod billing; |
| Agents get guardrails, run credentials, an audit log, a context hub, repository instructions and mentions; security upkeep; snake_case API | 15 | pub mod capture; |
| Merge checks: statuses and check runs on every commit | 16 | pub mod checks; |
| Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar | 17 | pub mod codeowners; |
| Agents get guardrails, run credentials, an audit log, a context hub, repository instructions and mentions; security upkeep; snake_case API | 18 | pub mod credentials; |
| Merge branch 'worktree-agent-a5a5de74d8863d554' into worktree-agent-a16631325aecf58ca | 19 | pub mod deploy_keys; |
| Rust repos service with shipping; pull requests kept in the model | 20 | pub mod events; |
| Workflow files need workflow_files:write from a token; fine-grained permission table | 21 | pub mod fine_grained; |
| Invite-only launch: sign in with GitHub, repository access and lifecycle, many emails, a new look | 22 | pub mod github; |
| Agents get guardrails, run credentials, an audit log, a context hub, repository instructions and mentions; security upkeep; snake_case API | 23 | pub mod guardrails; |
| API and MCP server, Rust identity service, registration, site redesign | 24 | pub mod identity; |
| Inbox: the events service tells people what needs them as events arrive | 25 | pub mod inbox; |
| Integrations: your own model provider, alerts that open issues, tickets agents read | 26 | pub mod integrations; |
| API and MCP server, Rust identity service, registration, site redesign | 27 | mod ids; |
| 28 | mod names; | |
| 29 | mod outcome; | |
| Packages, with a container registry on g1t.sh; workspaces deleted whole and kept 30 days; Members for every member | 30 | pub mod packages; |
| Projects: what a workspace builds and runs, first on every page | 31 | pub mod projects; |
| Rust repos service with shipping; pull requests kept in the model | 32 | pub mod repos; |
| Merge rulesets: branch and tag rules, agent-first, enforced on push and merge | 33 | pub mod rules; |
| Fast pages, required checks on the branch, self-hosted runners, honest incidents | 34 | pub mod runners; |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 35 | pub mod scopes; |
| Search across all of g1t, Explore, and a command palette | 36 | pub mod search; |
| Agents get guardrails, run credentials, an audit log, a context hub, repository instructions and mentions; security upkeep; snake_case API | 37 | pub mod security; |
| Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar | 38 | pub mod teams; |
| 39 | pub mod security_suite; | |
| RFC 3339 timestamps in identity and repos | 40 | pub mod time; |
| Fine-grained personal tokens, workspace token rules and approvals in identity | 41 | pub mod tokens; |
| Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar | 42 | pub mod updates; |
| Webhooks: every event, to your own addresses, signed and retried | 43 | pub mod webhooks; |
| Work service in Rust, with RFC 3339 timestamps | 44 | pub mod work; |
| API and MCP server, Rust identity service, registration, site redesign | 45 | |
| 46 | pub use ids::new_id; | |
| Merge branch 'worktree-agent-a8385d293d42c913a' | 47 | pub use names::{ |
| 48 | aliasable_name, claimable_namespace, is_namespace_shaped, is_reserved_name, is_route_name, is_valid_namespace, | |
| 49 | is_valid_repo_name, | |
| 50 | }; | |
| API and MCP server, Rust identity service, registration, site redesign | 51 | pub use outcome::{Failure, FailureCode, Outcome}; |
| 52 | ||
| 53 | use serde::{Deserialize, Serialize}; | |
| 54 | ||
| Workspaces own repositories | 55 | /// What a member may do in a workspace. |
| 56 | #[derive(Clone, Copy, Debug, PartialEq, Eq, Serialize, Deserialize)] | |
| 57 | #[serde(rename_all = "lowercase")] | |
| 58 | pub enum Role { | |
| 59 | /// Everything a member can, plus managing members. | |
| 60 | Owner, | |
| Issues and pull requests replace intents and attempts | 61 | /// Create repositories, push, manage issues and merge pull requests. |
| Workspaces own repositories | 62 | Member, |
| 63 | } | |
| 64 | ||
| 65 | /// One workspace a user belongs to. | |
| API and MCP server, Rust identity service, registration, site redesign | 66 | #[derive(Clone, Debug, Serialize, Deserialize)] |
| Workspaces own repositories | 67 | pub struct Membership { |
| 68 | /// The workspace's name in URLs: `g1t.sh/<slug>`. | |
| 69 | pub slug: String, | |
| 70 | pub role: Role, | |
| Workspace names and icons, and a component kit for every control | 71 | /// The workspace's display name, for showing it to people. Set when a |
| 72 | /// user is resolved from credentials; absent on principals made up by | |
| 73 | /// a service. | |
| 74 | #[serde(default, skip_serializing_if = "Option::is_none")] | |
| 75 | pub name: Option<String>, | |
| 76 | /// The workspace's uploaded icon: the SHA-256 of its bytes, served at | |
| 77 | /// `/avatars/<avatar>`. Absent means the generated letter avatar. | |
| 78 | #[serde(default, skip_serializing_if = "Option::is_none")] | |
| 79 | pub avatar: Option<String>, | |
| Invite-only launch: sign in with GitHub, repository access and lifecycle, many emails, a new look | 80 | /// What a member gets on each of the workspace's repositories: the |
| 81 | /// workspace's base permission. Set when a user is resolved from | |
| 82 | /// credentials; absent means the default, Write. Owners have Admin | |
| 83 | /// whatever it says. See [`access`]. | |
| 84 | #[serde(default, skip_serializing_if = "Option::is_none")] | |
| 85 | pub base_permission: Option<access::BasePermission>, | |
| Merge branch 'worktree-agent-ad7c6d88d93adc817' | 86 | /// Who may create the workspace's teams. Set when a user is resolved |
| 87 | /// from credentials; absent means the default, any member. See | |
| 88 | /// [`teams::TeamCreation`]. | |
| 89 | #[serde(default, skip_serializing_if = "Option::is_none")] | |
| 90 | pub team_creation: Option<teams::TeamCreation>, | |
| Workspaces own repositories | 91 | } |
| 92 | ||
| Workspace names and icons, and a component kit for every control | 93 | impl Membership { |
| 94 | /// A plain member of `slug`, as services act inside one workspace. | |
| 95 | pub fn member(slug: impl Into<String>) -> Self { | |
| 96 | Membership { | |
| 97 | slug: slug.into(), | |
| 98 | role: Role::Member, | |
| 99 | name: None, | |
| 100 | avatar: None, | |
| Invite-only launch: sign in with GitHub, repository access and lifecycle, many emails, a new look | 101 | base_permission: None, |
| Merge branch 'worktree-agent-ad7c6d88d93adc817' | 102 | team_creation: None, |
| Workspace names and icons, and a component kit for every control | 103 | } |
| 104 | } | |
| 105 | } | |
| 106 | ||
| Agents as a team: lifecycle, merge queue, billing and a new shell | 107 | /// What a set of credentials resolved to. |
| 108 | #[derive(Clone, Copy, Debug, Default, PartialEq, Eq, Serialize, Deserialize)] | |
| 109 | #[serde(rename_all = "lowercase")] | |
| 110 | pub enum PrincipalKind { | |
| 111 | /// A person's account. | |
| 112 | #[default] | |
| 113 | User, | |
| 114 | /// A workspace, acting through one of its own access tokens. Its `id` | |
| 115 | /// is the workspace's, its `username` the workspace's slug, and it is a | |
| 116 | /// member of that workspace and no other. | |
| 117 | Workspace, | |
| 118 | /// A g1t agent at work in a sandbox, acting through a token that lives | |
| 119 | /// as long as its run and can do only what that token's scope lists, in | |
| g1t is one name: its agent's work, commits and comments show as @g1t, and nobody can claim g1t or g1t-agent | 120 | /// one repository. Its `username` is `g1t`. |
| Agents as a team: lifecycle, merge queue, billing and a new shell | 121 | Agent, |
| Git storage hardened, pages in tens of milliseconds, honest security alerts, and costs reconciled daily | 122 | /// g1t itself: the platform acting on its own, as when it opens a |
| 123 | /// pull request to upgrade a vulnerable dependency or merges from the | |
| 124 | /// queue. Never resolved from credentials: only services make one, | |
| 125 | /// with [`User::system`]. Its `username` is `g1t`, which nobody can | |
| 126 | /// register. | |
| 127 | System, | |
| 128 | } | |
| 129 | ||
| 130 | /// g1t's own identity, as [`PrincipalKind::System`] work is recorded. | |
| 131 | pub mod system { | |
| 132 | /// Its id wherever an author or actor id is stored. | |
| 133 | pub const ID: &str = "g1t"; | |
| 134 | /// Its name, shown as the author of what it does. | |
| 135 | pub const USERNAME: &str = "g1t"; | |
| 136 | /// The address on the commits it makes, which no mailbox receives. | |
| 137 | pub const EMAIL: &str = "g1t@users.noreply.g1t.sh"; | |
| 138 | /// Ids that earlier versions stored for g1t's own actions, such as a | |
| 139 | /// merge its settings made. Read as g1t too. | |
| 140 | pub const LEGACY_IDS: [&str; 3] = ["g1t_policy", "svc_runner", "g1t_runner"]; | |
| 141 | ||
| 142 | /// Whether `id` is g1t's own. | |
| 143 | pub fn is_system_id(id: &str) -> bool { | |
| 144 | id == ID || LEGACY_IDS.contains(&id) | |
| 145 | } | |
| Agents as a team: lifecycle, merge queue, billing and a new shell | 146 | } |
| 147 | ||
| Workspaces own repositories | 148 | #[derive(Clone, Debug, Default, Serialize, Deserialize)] |
| API and MCP server, Rust identity service, registration, site redesign | 149 | pub struct User { |
| 150 | pub id: String, | |
| 151 | pub username: String, | |
| Agents as a team: lifecycle, merge queue, billing and a new shell | 152 | #[serde(default)] |
| 153 | pub kind: PrincipalKind, | |
| Email verification, password reset, and Git for AI scale positioning | 154 | /// Whether the account's email address has been confirmed. Unverified |
| 155 | /// accounts can sign in but cannot create or change anything. | |
| 156 | #[serde(default)] | |
| 157 | pub verified: bool, | |
| Workspaces own repositories | 158 | /// The workspaces this user belongs to. Filled in when a user is |
| 159 | /// resolved from credentials, so any service can authorize from it. | |
| 160 | #[serde(default)] | |
| 161 | pub workspaces: Vec<Membership>, | |
| Workspace names and icons, and a component kit for every control | 162 | /// The person's uploaded avatar: the SHA-256 of its bytes, served at |
| 163 | /// `/avatars/<avatar>`. Absent means the generated letter avatar. | |
| 164 | #[serde(default, skip_serializing_if = "Option::is_none")] | |
| 165 | pub avatar: Option<String>, | |
| Agents get guardrails, run credentials, an audit log, a context hub, repository instructions and mentions; security upkeep; snake_case API | 166 | /// Set on an agent resolved from its token: who it acts for, with which |
| 167 | /// credential, and what it may do. See [`credentials`]. | |
| 168 | #[serde(default, skip_serializing_if = "Option::is_none")] | |
| 169 | pub acting: Option<Box<credentials::Acting>>, | |
| Invite-only launch: sign in with GitHub, repository access and lifecycle, many emails, a new look | 170 | /// The repositories this user has been given a role on directly, |
| 171 | /// whether or not they belong to its workspace. Filled in with | |
| 172 | /// `workspaces`; see [`access`]. | |
| 173 | #[serde(default, skip_serializing_if = "Vec::is_empty")] | |
| 174 | pub grants: Vec<access::RepoGrant>, | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 175 | /// Set on a user resolved from an access token: its scopes and the |
| 176 | /// workspaces or repositories it is limited to. Absent on a signed-in | |
| 177 | /// session and on an agent (whose `acting` scope applies instead). | |
| 178 | /// See [`scopes`]. | |
| 179 | #[serde(default, skip_serializing_if = "Option::is_none")] | |
| 180 | pub token: Option<Box<scopes::TokenAccess>>, | |
| Workspaces own repositories | 181 | } |
| 182 | ||
| 183 | impl User { | |
| Git storage hardened, pages in tens of milliseconds, honest security alerts, and costs reconciled daily | 184 | /// g1t itself, acting in `workspace`: what the platform's own work, |
| 185 | /// such as security updates, is done and recorded as. | |
| 186 | pub fn system(workspace: &str) -> User { | |
| 187 | User { | |
| 188 | id: system::ID.to_owned(), | |
| 189 | username: system::USERNAME.to_owned(), | |
| 190 | kind: PrincipalKind::System, | |
| 191 | verified: true, | |
| 192 | workspaces: vec![Membership::member(workspace.to_lowercase())], | |
| 193 | ..User::default() | |
| 194 | } | |
| 195 | } | |
| 196 | ||
| 197 | /// Whether this is g1t itself. | |
| 198 | pub fn is_system(&self) -> bool { | |
| 199 | self.kind == PrincipalKind::System | |
| 200 | } | |
| 201 | ||
| Workspaces own repositories | 202 | pub fn role_in(&self, slug: &str) -> Option<Role> { |
| 203 | self.workspaces | |
| 204 | .iter() | |
| 205 | .find(|membership| membership.slug == slug) | |
| 206 | .map(|membership| membership.role) | |
| 207 | } | |
| 208 | ||
| 209 | pub fn is_member(&self, slug: &str) -> bool { | |
| 210 | self.role_in(slug).is_some() | |
| 211 | } | |
| API and MCP server, Rust identity service, registration, site redesign | 212 | } |
| 213 | ||
| 214 | /// Who is asking. Every read and write in every service takes one. | |
| 215 | pub type Viewer = Option<User>; |
This file's history is long; its oldest lines are credited to the oldest commit read.