Skip to content

Where people and agents ship software together. The open-source git platform for the whole job: issues, agents, checks and deploys to the edge.

g1t.sh
189 linesCodeBlameRaw

Pick any line to see why it is the way it is: the commit, the pull request and issue it came from, and what the agent was thinking.

Security: postcss-selector-parser 7.1.6 and basic-ftp 6.2.2, pinned by overrides1import type { User, Viewer } from "./identity";
2import type { RepoPath } from "./repos";
3import type { Result } from "./result";
4
5/**
6 * Events, delivered to the addresses a repository or a workspace registers.
7 * Mirrors `crates/contracts/src/webhooks.rs`.
8 */
9
10/** Every event a webhook can be sent, in the order people are shown them. */
11export const EVENT_TYPES = [
12 "git.push",
Merge branch 'worktree-agent-a8b78c62188153aa3' into claude/cool-newton-7nm8r913 "git.deleted",
Security: postcss-selector-parser 7.1.6 and basic-ftp 6.2.2, pinned by overrides14 "branch.renamed",
15 "repo.created",
16 "repo.forked",
17 "repo.updated",
18 "repo.visibility_changed",
19 "repo.renamed",
20 "repo.transferred",
21 "repo.default_branch_changed",
22 "repo.archived",
23 "repo.unarchived",
24 "repo.deleted",
25 "repo.restored",
26 "repo.purged",
27 "repo.collaborator_added",
28 "repo.collaborator_removed",
29 "repo.collaborator_role_changed",
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar30 "team.created",
31 "team.edited",
32 "team.deleted",
33 "team.member_added",
34 "team.member_role_changed",
35 "team.member_removed",
36 "team.repo_added",
37 "team.repo_role_changed",
38 "team.repo_removed",
@g1t welcomes you when you join a workspace, and that is the one introduction any agent makes. Identity now says when a person becomes a member, workspace.member_joined, by invitation, by an invite code, or by creating the workspace, and webhooks can hear it; the agents service hears it too, and for anyone who joined, never the creator, the workspace's @g1t opens your direct message and says in its own voice who it is, what to ask it, how agents answer, and where things are, once per person per workspace and charged to @g1t like any reply, with a fixed welcome when no model can be used. The agents, workspaces, authentication and webhooks guides say so.39 "workspace.member_joined",
Merge rulesets: branch and tag rules, agent-first, enforced on push and merge40 "ruleset.created",
41 "ruleset.updated",
42 "ruleset.deleted",
Security: postcss-selector-parser 7.1.6 and basic-ftp 6.2.2, pinned by overrides43 "issue.opened",
44 "issue.updated",
45 "issue.assigned",
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar46 "issue.labeled",
47 "issue.unlabeled",
48 "issue.milestoned",
49 "issue.demilestoned",
Security: postcss-selector-parser 7.1.6 and basic-ftp 6.2.2, pinned by overrides50 "issue.closed",
51 "issue.reopened",
52 "comment.created",
Merge Actions: cross-repo workflows and actions, release and deployment triggers, step timeouts53 "comment.edited",
54 "comment.deleted",
Security: postcss-selector-parser 7.1.6 and basic-ftp 6.2.2, pinned by overrides55 "pull.opened",
56 "pull.ready",
57 "pull.updated",
58 "pull.merge_requested",
59 "pull.merged",
60 "pull.closed",
Merge Actions: cross-repo workflows and actions, release and deployment triggers, step timeouts61 "pull.reopened",
62 "pull.converted_to_draft",
Events: review requests, assignments, stops and deployments are published63 "pull.assigned",
64 "pull.review_requested",
65 "pull.review_request_removed",
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar66 "pull.labeled",
67 "pull.unlabeled",
68 "pull.milestoned",
69 "pull.demilestoned",
70 "pull.base_changed",
Events: review requests, assignments, stops and deployments are published71 "pull.stalled",
72 "pull.resumed",
Merge Actions: cross-repo workflows and actions, release and deployment triggers, step timeouts73 "release.created",
74 "release.published",
75 "release.released",
76 "release.prereleased",
77 "release.edited",
78 "release.unpublished",
79 "release.deleted",
Security: postcss-selector-parser 7.1.6 and basic-ftp 6.2.2, pinned by overrides80 "checks.completed",
Merge checks: statuses and check runs on every commit81 "status.created",
82 "check_run.created",
83 "check_run.completed",
84 "check_run.rerequested",
85 "check_run.requested_action",
86 "check_suite.completed",
87 "check_suite.rerequested",
Security: postcss-selector-parser 7.1.6 and basic-ftp 6.2.2, pinned by overrides88 "workflow.completed",
Events: review requests, assignments, stops and deployments are published89 "deployment.succeeded",
90 "deployment.failed",
Merge branch 'main' into worktree-agent-a69aeabc4b0deeb9791 "deployment.created",
92 "deployment_status.created",
Security: postcss-selector-parser 7.1.6 and basic-ftp 6.2.2, pinned by overrides93 "queue.changed",
Merge branch 'worktree-agent-ab8033ab973f8d99a'94 "integration.failed",
95 "integration.passed",
96 "decision.recorded",
Security: postcss-selector-parser 7.1.6 and basic-ftp 6.2.2, pinned by overrides97 "session.appended",
Merge branch 'worktree-agent-a6ec0a89d7fe7a9ae'98 "session.started",
99 "session.ended",
100 "work.claimed",
101 "work.released",
102 "work.claim_expired",
103 "work.handoff_requested",
104 "dependency.changed",
105 "overlap.detected",
Security: postcss-selector-parser 7.1.6 and basic-ftp 6.2.2, pinned by overrides106 "package.published",
107 "package.version_deleted",
108 "package.deleted",
109 "package.visibility_changed",
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar110 "secret_scanning_alert.created",
111 "secret_scanning_alert.fixed",
112 "secret_scanning_alert.dismissed",
113 "secret_scanning_alert.reopened",
114 "secret_scanning.bypass_requested",
115 "secret_scanning.bypass_reviewed",
116 "code_scanning_alert.created",
117 "code_scanning_alert.fixed",
118 "code_scanning_alert.dismissed",
119 "code_scanning_alert.reopened",
120 "vulnerability_alert.created",
121 "vulnerability_alert.fixed",
122 "vulnerability_alert.dismissed",
Merge remote-tracking branch 'origin/claude/cool-newton-7nm8r9' into claude/cool-newton-7nm8r9123 "secret_scanning_alert.summary",
124 "code_scanning_alert.summary",
Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar125 "vulnerability_alert.reopened",
Merge remote-tracking branch 'origin/claude/cool-newton-7nm8r9' into claude/cool-newton-7nm8r9126 "vulnerability_alert.summary",
127 "security_advisory.published",
128 "security_advisory.withdrawn",
129 "security_advisory.reported",
Security: postcss-selector-parser 7.1.6 and basic-ftp 6.2.2, pinned by overrides130] as const;
131
The contracts no longer describe g1t's own agents, and workspaces can keep their AI providers. Every consumer had already stopped using them, so the TypeScript and Rust contracts drop the workspace-agent, ability, look, skill-library, context, runner-agent and mention modules, the chat and docs RPCs agents posted and read through, the folio agent methods, the agent_waiting notification, agent.asked and memory.changed events, AI credit, token and gateway billing types, model routes and sessions, team agents, agent tokens, plan, review, message and confidence types, command rules, cost caps and confidence rules. The agents:run and models:* scopes are no longer offered by any preset, OAuth default or permission form, but a stored token or grant that names them still reads; and the removed operations are gone from the scope table, so the API's check that every operation has exactly one scope is strict again. What stored data needs in order to parse (old run and credential kinds, an agent team lead, retired rules and webhook events, old guardrail and integration settings) still parses, and a run's token is still PrincipalKind::Agent, which now means a run's token and the @g1t rows written before. The customize, marketplace, skills and claude-plugin contracts stay only until the mobile app drops its Customize screens.132/**
133 * Event types webhooks were once offered that g1t no longer sends (from
134 * g1t's own agents, since removed). A webhook saved with one still reads;
135 * saving its list again leaves them out. Mirrors `RETIRED_EVENT_TYPES`.
136 */
137export const RETIRED_EVENT_TYPES: readonly string[] = ["agent.asked", "review.completed"];
138
Security: postcss-selector-parser 7.1.6 and basic-ftp 6.2.2, pinned by overrides139export type Hook = {
140 id: string;
141 scope: "repo" | "workspace";
142 workspace: string;
143 /** For a repository's webhook: `owner/name`. */
144 repo: string | null;
145 url: string;
146 /** Event types, or `["*"]` for all. */
147 events: string[];
148 active: boolean;
149 secretHint: string;
150 createdBy: string;
151 createdAt: string;
152 lastStatus: "delivered" | "pending" | "failed" | null;
153 lastDeliveredAt: string | null;
154};
155
156export type HookDelivery = {
157 id: string;
158 hookId: string;
159 eventId: string;
160 event: string;
161 status: "pending" | "delivered" | "failed";
162 attempts: number;
163 responseStatus: number | null;
164 responseBody: string | null;
165 error: string | null;
166 durationMs: number | null;
167 /** The JSON that was sent. */
168 payload: string;
169 createdAt: string;
170 deliveredAt: string | null;
171 nextAttemptAt: string | null;
172};
173
174/** A repository's webhooks, or with `repo` left out, the workspace's own. */
175export type HookOwner = { workspace: string; repo?: RepoPath };
176
177export interface WebhooksApi {
178 list(viewer: Viewer, owner: HookOwner): Promise<Result<Hook[]>>;
179 create(
180 actor: User,
181 owner: HookOwner,
182 input: { url: string; events?: string[]; secret?: string },
183 ): Promise<Result<{ hook: Hook; secret: string | null }>>;
184 update(actor: User, owner: HookOwner, id: string, input: { url?: string; events?: string[]; active?: boolean }): Promise<Result<Hook>>;
185 delete(actor: User, owner: HookOwner, id: string): Promise<Result<boolean>>;
186 ping(actor: User, owner: HookOwner, id: string): Promise<Result<HookDelivery>>;
187 deliveries(viewer: Viewer, owner: HookOwner, id: string): Promise<Result<HookDelivery[]>>;
188 redeliver(actor: User, owner: HookOwner, deliveryId: string): Promise<Result<HookDelivery>>;
189}

This file's history is long; its oldest lines are credited to the oldest commit read.