Pick any line to see why it is the way it is: the commit, the pull request and issue it came from, and what the agent was thinking.
| Agents get guardrails, run credentials, an audit log, a context hub, repository instructions and mentions; security upkeep; snake_case API | 1 | { |
| 2 | "name": "g1t-monorepo", | |
| 3 | "private": true, | |
| 4 | "type": "module", | |
| Git storage hardened, pages in tens of milliseconds, honest security alerts, and costs reconciled daily | 5 | "engines": { |
| The phone app with your own g1t, on g1t.sh/download until Google Play, and Node 24 (#5) | 6 | "node": ">=24" |
| Git storage hardened, pages in tens of milliseconds, honest security alerts, and costs reconciled daily | 7 | }, |
| Agents get guardrails, run credentials, an audit log, a context hub, repository instructions and mentions; security upkeep; snake_case API | 8 | "workspaces": [ |
| 9 | "apps/*", | |
| 10 | "services/*", | |
| 11 | "packages/*" | |
| 12 | ], | |
| 13 | "scripts": { | |
| 14 | "typecheck": "npm run typecheck --workspaces --if-present", | |
| Deploys as code: a manifest of every Worker, a deploy tool that ships only what changed in parallel stages, and a g1t Actions workflow | 15 | "deploy": "npm run deploy -w @g1t/web", |
| Merge branch 'worktree-agent-ac5b181a013e54348' | 16 | "test:deploy": "node --test \"scripts/deploy/*.test.mjs\"", |
| preparing for cloud work | 17 | "test:ops": "node --test \"scripts/ops/*.test.mjs\"", |
| The phone app with your own g1t, on g1t.sh/download until Google Play, and Node 24 (#5) | 18 | "test:release": "node --test \"scripts/desktop-release.test.mjs\" \"scripts/mobile-release.test.mjs\"" |
| Agents get guardrails, run credentials, an audit log, a context hub, repository instructions and mentions; security upkeep; snake_case API | 19 | }, |
| 20 | "devDependencies": { | |
| 21 | "typescript": "^5.9.3", | |
| 22 | "wrangler": "^4.146.0" | |
| 23 | }, | |
| 24 | "overrides": { | |
| Security: postcss-selector-parser 7.1.6 and basic-ftp 6.2.2, pinned by overrides | 25 | "basic-ftp": "^6.2.1", |
| 26 | "fflate": "^0.7.5", | |
| The three open dependency updates land together (#29, #33, #35): katex resolves to 0.19.0 everywhere, mermaid's nested copy included; query-string moves to 9.5.1, which takes decode-uri-component to 0.5.0; and the uuid that xcode locks moves from 7.0.3 to 11.1.1, which still loads under xcode's require. The ops tests' annotated tags carry their own git identity, so they run where git has none configured. | 27 | "katex": "^0.19.0", |
| Security: sharp is pinned to 0.35.5 everywhere (librsvg CVE-2026-96889) | 28 | "postcss-selector-parser": "^7.1.6", |
| The three open dependency updates land together (#29, #33, #35): katex resolves to 0.19.0 everywhere, mermaid's nested copy included; query-string moves to 9.5.1, which takes decode-uri-component to 0.5.0; and the uuid that xcode locks moves from 7.0.3 to 11.1.1, which still loads under xcode's require. The ops tests' annotated tags carry their own git identity, so they run where git has none configured. | 29 | "query-string": "^9.5.1", |
| 30 | "sharp": "^0.35.5", | |
| 31 | "xcode": { | |
| 32 | "uuid": "^11.1.1" | |
| 33 | } | |
| Agents get guardrails, run credentials, an audit log, a context hub, repository instructions and mentions; security upkeep; snake_case API | 34 | } |
| 35 | } |
This file's history is long; its oldest lines are credited to the oldest commit read.