Compare 5bee8b1064f11f496e01df21a425b540ed642cb4...0c312ebdc32ddf16769736fccea6dc4820cf361e · flagon-io/g1t

+48−0View BlameViewed

1	+	# g1t brand files
2	+
3	+	The mark is "the fleet": three 1s stepping back in depth, the agents at work
4	+	behind the one change in front. The front 1 is `#ededef` (`--g1t-fg`), the two
5	+	behind it are lavender `#b6a8ff` (`--g1t-merged`) at 65% and 35%, on the very
6	+	dark gray base `#0f0f11` (`--g1t-bg`). On light backgrounds the front 1 is
7	+	`#161618` and the lavender deepens to `#6b56e8`.
8	+
9	+	These are the files to upload to Stripe and similar services. The site serves
10	+	its own copies from `apps/web/public` and `apps/docs/public`.
11	+
12	+	\| File \| Size \| Use \|
13	+	\| --- \| --- \| --- \|
14	+	\| `icon-512.png` \| 512×512, dark square \| Stripe branding icon (square, at least 128px), Slack, GitHub app avatars \|
15	+	\| `icon-1024.png` \| 1024×1024, dark square \| App stores and anywhere asking for a large square icon \|
16	+	\| `icon-transparent-1024.png` \| 1024×1024, transparent \| Placing the mark on a dark surface of your own \|
17	+	\| `logo-on-dark.png` \| 1056×642, dark background \| Stripe branding logo (wide), docs and decks on dark \|
18	+	\| `logo-on-light.png` \| 1056×642, white background \| Invoices, receipts and anywhere the background is light \|
19	+	\| `og-1200x630.png` \| 1200×630 \| Social and Open Graph card \|
20	+
21	+	## Sources
22	+
23	+	`svg/` holds the source of every file above and of the site's favicons:
24	+
25	+	\| File \| What it is \|
26	+	\| --- \| --- \|
27	+	\| `svg/mark.svg` \| The mark on transparent, for dark backgrounds (also `packages/theme/mark.svg`) \|
28	+	\| `svg/mark-on-light.svg` \| The mark on transparent, for light backgrounds \|
29	+	\| `svg/mark-small.svg` \| The 16px cut: pixel-aligned, with a notch between the front 1's flag and the bar behind it \|
30	+	\| `svg/icon-square.svg` \| The mark on a full-bleed dark square (`icon-512.png`, `icon-1024.png`) \|
31	+	\| `svg/icon-rounded.svg` \| The mark on a rounded dark tile (`favicon.ico` at 32 and 48, `brand/g1t-mark.*`) \|
32	+	\| `svg/icon-padded.svg` \| The mark with room for a circle crop (`apple-touch-icon.png`, `icon-192.png`, `icon-512.png` in the apps) \|
33	+	\| `svg/favicon.svg` \| The 16px cut with no tile, coloured for a light or dark browser (`favicon.svg` in the apps) \|
34	+	\| `svg/logo.svg`, `svg/logo-on-light.svg` \| The mark and the wordmark, transparent, for dark and light backgrounds \|
35	+	\| `svg/logo-dark-bg.svg`, `svg/logo-light-bg.svg` \| The same lockups with padding and a background \|
36	+	\| `svg/og.svg` \| The social card; its tagline uses Inter and JetBrains Mono as live text \|
37	+
38	+	The wordmark is "g1t" in Inter ExtraBold at -0.05em tracking, outlined to paths
39	+	so the files need no font.
40	+
41	+	## On the web
42	+
43	+	`apps/web/public/brand/` is served at `https://g1t.sh/brand/` for emails and
44	+	anything that links to the mark:
45	+
46	+	- `g1t-mark.svg`, `g1t-mark.png` (256px): the mark on a rounded dark tile, readable on any background
47	+	- `g1t-logo.svg`, `g1t-logo.png`: the lockup for light backgrounds, used in g1t's emails
48	+	- `g1t-logo-on-dark.svg`, `g1t-logo-on-dark.png`: the lockup for dark backgrounds

+0−0View BlameViewed

Binary or large file; its contents are not shown.

+0−0View BlameViewed

Binary or large file; its contents are not shown.

+0−0View BlameViewed

Binary or large file; its contents are not shown.

+0−0View BlameViewed

Binary or large file; its contents are not shown.

+0−0View BlameViewed

Binary or large file; its contents are not shown.

+0−0View BlameViewed

Binary or large file; its contents are not shown.

+1−0View BlameViewed

1

+

+1−0View BlameViewed

1

+

+1−0View BlameViewed

1

+

+1−0View BlameViewed

1

+

+1−0View BlameViewed

1

+

+1−0View BlameViewed

1

+

+1−0View BlameViewed

1

+

+1−0View BlameViewed

1

+

+1−0View BlameViewed

1

+

+1−0View BlameViewed

1

+

+1−0View BlameViewed

1

+

+1−0View BlameViewed

1

+

+3−0View BlameViewed

52	52		},
53	53		lastUpdated: true,
54	54		head: [
	55	+	{ tag: 'link', attrs: { rel: 'icon', href: '/favicon.ico', sizes: '32x32' } },
	56	+	{ tag: 'link', attrs: { rel: 'icon', type: 'image/png', sizes: '192x192', href: '/icon-192.png' } },
	57	+	{ tag: 'link', attrs: { rel: 'apple-touch-icon', href: '/apple-touch-icon.png' } },
55	58		{ tag: 'link', attrs: { rel: 'preconnect', href: 'https://fonts.googleapis.com' } },
56	59		{
57	60		tag: 'link',

+0−0View BlameViewed

Binary or large file; its contents are not shown.

+0−0View BlameViewed

Binary or large file; its contents are not shown.

+1−8View BlameViewed

1		−	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 32">
2		−	<rect width="32" height="32" rx="7" fill="#161618"/>
3		−	<g transform="translate(4.5 4.6) scale(0.72)">
4		−	<path d="M16 2.5 28 9.4 16 16.3 4 9.4Z" fill="#ededef"/>
5		−	<path d="M4 10.9 15.3 17.4V30.2L4 23.7Z" fill="#ededef" fill-opacity="0.55"/>
6		−	<path d="M28 10.9 16.7 17.4V30.2L28 23.7Z" fill="#ededef" fill-opacity="0.25"/>
7		−	</g>
8		−	</svg>
	1	+	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16"><style>.f{fill:#161618}.f.s{fill:none;stroke:#161618}.m{fill:#6b56e8}@media (prefers-color-scheme: dark){.f{fill:#ededef}.f.s{fill:none;stroke:#ededef}.m{fill:#b6a8ff}}</style><mask id="cut" maskUnits="userSpaceOnUse" x="0" y="0" width="16" height="16"><rect width="16" height="16" fill="#fff"/><path d="M10.5 3.5 8.5 5.4" stroke="#000" stroke-width="3.6" stroke-linecap="round"/></mask><g mask="url(#cut)"><rect class="m" x="3" y="5.5" width="2" height="8.5" rx="1" fill-opacity="0.5"/><rect class="m" x="6" y="4" width="2" height="10" rx="1" fill-opacity="0.85"/></g><rect class="f" x="9" y="2" width="3" height="12" rx="1.5"/><path class="f s" d="M10.5 3.5 8.5 5.4" stroke-width="2.2" stroke-linecap="round"/></svg>

+0−0View BlameViewed

Binary or large file; its contents are not shown.

+0−0View BlameViewed

Binary or large file; its contents are not shown.

+7−4View BlameViewed

1	1		---
2		−	// The cube, the name and "Docs": the same mark as g1t.sh, so the two read
	2	+	// The fleet, the name and "Docs": the same mark as g1t.sh, so the two read
3	3		// as one product.
4	4		---
5	5
6	6		<a href="/" class="g1t-title" aria-label="g1t docs home">
7	7		<svg viewBox="0 0 32 32" aria-hidden="true">
8		−	<path d="M16 2.5 28 9.4 16 16.3 4 9.4Z" fill="currentColor"></path>
9		−	<path d="M4 10.9 15.3 17.4V30.2L4 23.7Z" fill="currentColor" fill-opacity="0.55"></path>
10		−	<path d="M28 10.9 16.7 17.4V30.2L28 23.7Z" fill="currentColor" fill-opacity="0.25"></path>
	8	+	<g transform="translate(0.7 0.5)">
	9	+	<rect x="6.2" y="9.5" width="4.4" height="17" rx="2.2" fill="var(--g1t-merged)" fill-opacity="0.35"></rect>
	10	+	<rect x="12.4" y="7" width="4.8" height="19.5" rx="2.4" fill="var(--g1t-merged)" fill-opacity="0.65"></rect>
	11	+	<rect x="19" y="4.5" width="5.4" height="22" rx="2.7" fill="currentColor"></rect>
	12	+	<path d="M21.7 7.2 17.6 10.9" fill="none" stroke="currentColor" stroke-width="4.6" stroke-linecap="round"></path>
	13	+	</g>
11	14		</svg>
12	15		<span class="g1t-title-name">g1t</span>
13	16		<span class="g1t-title-docs">Docs</span>

+59−2View BlameViewed

69	69		\| A review by a g1t agent \| Yes \|
70	70		\| Catching up with `main` \| Yes, when it needed an agent \|
71	71		\| Planning an [outcome](/guides/outcomes/) \| Yes \|
72		−	\| Acceptance checks \| No \|
73		−	\| The [merge queue](/guides/merge-queue/) \| No \|
	72	+	\| Acceptance checks \| [Sandbox time](#sandbox-time) \|
	73	+	\| The [merge queue](/guides/merge-queue/) \| [Sandbox time](#sandbox-time) \|
	74	+	\| [Workflow](/guides/actions/) jobs \| [Sandbox time](#sandbox-time) \|
74	75		\| [Deployments](/guides/deployments/) \| The plan, and builds and usage past it. Never free. \|
75	76		\| Repositories, git, issues, pull requests, the API and MCP \| No \|
76	77
⋯
86	87		assigned the issue. That is why only members of a workspace can put g1t
87	88		agents to work on its repositories.
88	89
	90	+	## Sandbox time
	91	+
	92	+	Every sandbox g1t starts for a workspace runs on Cloudflare Containers, and
	93	+	Cloudflare charges g1t for every second of it. So each one is metered by
	94	+	the second, from start to stop, whatever it was for: agents, reviews,
	95	+	revisions, catch-ups, planning, acceptance checks, the merge queue and
	96	+	workflow jobs. It is charged to the workspace that owns the repository.
	97	+
	98	+	\| \| \|
	99	+	\| --- \| --- \|
	100	+	\| Free each month \| 500 minutes (calendar month, UTC) \|
	101	+	\| Past that \| $0.003 a minute, by the second \|
	102	+	\| What it costs g1t \| about $0.0013 a minute (Containers, standard-1) \|
	103	+
	104	+	Deploy builds are not counted here: [Deployments](/guides/deployments/)
	105	+	charges them by the second on its own plan.
	106	+
	107	+	Each sandbox is one line on the [statement](#the-statement), such as
	108	+	Checks on acme/api#12: 3m 12s of sandbox time, with whether it fell
	109	+	within the free minutes. While g1t is being built out it is recorded but
	110	+	not charged.
	111	+
	112	+	## Usage limits
	113	+
	114	+	Everything a workspace uses costs g1t money at Cloudflare or a model
	115	+	provider before the workspace pays for it. So, as Fly and Cloudflare do
	116	+	with new accounts, every workspace has a limit on usage not yet paid for.
	117	+	When it is reached, the workspace's work stops until it pays, or the
	118	+	month turns:
	119	+
	120	+	- No new sandboxes. Assigning an agent, planning, asking for a
	121	+	review and workflow jobs are refused with `402 payment_required` and the
	122	+	reason; acceptance checks and the merge queue wait. Runs already under
	123	+	way finish.
	124	+	- No new builds, and deployed apps pause: they answer with a page
	125	+	saying so (`402`) and run nothing. Once the workspace is under its limit
	126	+	again, g1t rebuilds each one from the commit it was serving, by itself.
	127	+
	128	+	What counts is this month's usage (UTC), each item at what it cost g1t or
	129	+	what it is charged, whichever is more, less what was paid this month. It
	130	+	counts while g1t is free too: free is a price of nothing, not a way around
	131	+	the limit.
	132	+
	133	+	\| Workspace \| Limit \|
	134	+	\| --- \| --- \|
	135	+	\| New: has not paid g1t yet \| $3: the free allowances and a little more \|
	136	+	\| Paid: has paid g1t \| twice what it has paid, from $25 up to $1,000 \|
	137	+	\| Reviewed \| what g1t set for it, after talking with you \|
	138	+
	139	+	Payments in test mode are not money, so they do not raise the limit. To
	140	+	go past $1,000, write to support.
	141	+
	142	+	At 80% the Billing page turns amber and says how close the workspace is.
	143	+	An owner can set a lower spend limit of their own under **Settings →
	144	+	Billing → Usage limit**; work stops at whichever is lower.
	145	+
89	146		## Add credit
90	147
91	148		Only an owner of the workspace can add credit.

+2−0View BlameViewed

24	24		name="description"
25	25		content="Every g1t API endpoint, with an explorer to call them from the page."
26	26		/>
	27	+	<link rel="icon" href="/favicon.ico" sizes="32x32" />
27	28		<link rel="icon" type="image/svg+xml" href="/favicon.svg" />
	29	+	<link rel="apple-touch-icon" href="/apple-touch-icon.png" />
28	30		<link rel="canonical" href="https://docs.g1t.sh/api/reference/" />
29	31		<link rel="preconnect" href="https://fonts.googleapis.com" />
30	32		<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />

+12−9View BlameViewed

1	1		/**
2		−	* g1t's mark: an isometric cube, the unit of work in its artwork. Three
3		−	* faces in three tones of the text colour, split by hairline gaps, so it
4		−	* holds at any size and on any background.
	2	+	* g1t's mark, "the fleet": three 1s stepping back in depth, the agents at
	3	+	* work behind the one change in front. The front 1 takes the text colour;
	4	+	* the two behind it fade into lavender. The same shapes as the favicon and
	5	+	* the brand files in .g1t/brand and public/brand.
5	6		*/
6	7		export function Mark({ className }: { className?: string }) {
7	8		return (
8	9		<svg viewBox="0 0 32 32" className={className} aria-hidden="true">
9		−	{/* Top face */}
10		−	<path d="M16 2.5 28 9.4 16 16.3 4 9.4Z" fill="currentColor" />
11		−	{/* Left face */}
12		−	<path d="M4 10.9 15.3 17.4V30.2L4 23.7Z" fill="currentColor" fillOpacity="0.55" />
13		−	{/* Right face */}
14		−	<path d="M28 10.9 16.7 17.4V30.2L28 23.7Z" fill="currentColor" fillOpacity="0.25" />
	10	+	<g transform="translate(0.7 0.5)">
	11	+	{/* The agents behind */}
	12	+	<rect x="6.2" y="9.5" width="4.4" height="17" rx="2.2" fill="var(--g1t-merged)" fillOpacity="0.35" />
	13	+	<rect x="12.4" y="7" width="4.8" height="19.5" rx="2.4" fill="var(--g1t-merged)" fillOpacity="0.65" />
	14	+	{/* The 1 in front */}
	15	+	<rect x="19" y="4.5" width="5.4" height="22" rx="2.7" fill="currentColor" />
	16	+	<path d="M21.7 7.2 17.6 10.9" fill="none" stroke="currentColor" strokeWidth="4.6" strokeLinecap="round" />
	17	+	</g>
15	18		</svg>
16	19		);
17	20		}

+3−0View BlameViewed

41	41		import { getViewer, roleIn, viewerMiddleware } from "./lib/session.server";
42	42
43	43		export const links: Route.LinksFunction = () => [
	44	+	{ rel: "icon", href: "/favicon.ico", sizes: "32x32" },
44	45		{ rel: "icon", type: "image/svg+xml", href: "/favicon.svg" },
	46	+	{ rel: "icon", type: "image/png", sizes: "192x192", href: "/icon-192.png" },
	47	+	{ rel: "apple-touch-icon", href: "/apple-touch-icon.png" },
45	48		{ rel: "preconnect", href: "https://fonts.googleapis.com" },
46	49		{
47	50		rel: "preconnect",

+102−4View BlameViewed

7	7		type DeployUsage,
8	8		type Feature,
9	9		type FeatureState,
	10	+	type Limit,
10	11		} from "@g1t/contracts";
11	12
12	13		import type { Route } from "./+types/billing";
⋯
46	47		await billing.confirm(slug, viewer, session);
47	48		throw redirect(`/${slug}/-/billing?added=1`);
48	49		}
49		−	const [account, ledger, features, deployUsage] = await Promise.all([
	50	+	const [account, ledger, features, deployUsage, limit] = await Promise.all([
50	51		billing.account(slug, viewer),
51	52		billing.ledger(slug, viewer),
52	53		billing.features(slug, viewer),
53	54		deployments.usage(slug, viewer),
	55	+	billing.limit(slug, viewer),
54	56		]);
55	57		return {
56	58		slug,
⋯
59	61		ledger: unwrap(ledger),
60	62		features: unwrap(features),
61	63		deployUsage: deployUsage.ok ? deployUsage.value : null,
	64	+	limit: limit.ok ? limit.value : null,
62	65		added: url.searchParams.has("added"),
63	66		subscribed: url.searchParams.has("subscribed"),
64	67		};
⋯
70	73		const form = await request.formData();
71	74		const page = `${new URL(request.url).origin}/${params.owner.toLowerCase()}/-/billing`;
72	75		const intent = form.get("intent");
	76	+	if (intent === "spend-limit" \|\| intent === "no-spend-limit") {
	77	+	const amount = Number(form.get("limit"));
	78	+	if (intent === "spend-limit" && !(Number.isFinite(amount) && amount >= 0)) {
	79	+	return { error: "A spend limit is a dollar amount." };
	80	+	}
	81	+	const set = await billing.setSpendLimit(
	82	+	user,
	83	+	params.owner,
	84	+	intent === "spend-limit" ? Math.round(amount * MICROS_PER_DOLLAR) : null,
	85	+	);
	86	+	return set.ok ? null : { error: set.error.message };
	87	+	}
73	88		if (intent === "subscribe" \|\| intent === "cancel" \|\| intent === "resume") {
74	89		const feature = String(form.get("feature")) as Feature;
75	90		if (intent !== "subscribe") {
⋯
99	114		}
100	115
101	116		export default function WorkspaceBilling({ loaderData, actionData }: Route.ComponentProps) {
102		−	const { slug, role, account, ledger, features, deployUsage, added, subscribed } = loaderData;
	117	+	const { slug, role, account, ledger, features, deployUsage, limit, added, subscribed } = loaderData;
103	118		const { status } = account;
104	119		const paying = useNavigation().state === "submitting";
105	120		const empty = account.balanceMicros <= 0;
⋯
117	132		</p>
118	133		</div>
119	134		)}
	135	+	{limit && account.status.enabled && (
	136	+	<LimitCard limit={limit} owner={role === "owner"} busy={paying} error={actionData?.error} />
	137	+	)}
	138	+
120	139		<h2 className="font-medium">Plans</h2>
121	140		<p className="mt-1 max-w-2xl text-sm text-muted">
122	141		Paid features are turned on per workspace with a monthly plan. They are never free, including while the rest of
⋯
143	162		<h2 className="mt-12 font-medium">Agent credit</h2>
144	163		<p className="mt-1 max-w-2xl text-sm text-muted">
145	164		g1t agents that work on this workspace's repositories are paid for from
146		−	its credit: what the model cost, plus {account.marginPercent}%. Checks run
147		−	free. With no credit, agents do not start.
	165	+	its credit: what the model cost, plus {account.marginPercent}%. Every sandbox, for agents, checks, the merge
	166	+	queue and workflows, is metered by the second past 500 free minutes a month. With no credit, agents do not
	167	+	start.
148	168		</p>
149	169
150	170		<div
⋯
414	434		</div>
415	435		);
416	436		}
	437	+
	438	+	const TRUST: Record<Limit["trust"], { label: string; detail: string }> = {
	439	+	new: {
	440	+	label: "New",
	441	+	detail: "No payment to g1t yet, so the limit is small: the free allowances and a little more. It grows once the workspace pays.",
	442	+	},
	443	+	paid: { label: "Paid", detail: "Twice what the workspace has paid g1t, from $25 up to $1,000." },
	444	+	reviewed: { label: "Reviewed", detail: "Set by g1t for this workspace." },
	445	+	internal: { label: "g1t", detail: "One of g1t's own workspaces: no limit." },
	446	+	};
	447	+
	448	+	/**
	449	+	* How far this month's unpaid usage has gone, and where work stops: g1t's
	450	+	* ceiling for the workspace, or the owners' own spend limit if lower.
	451	+	*/
	452	+	function LimitCard({ limit, owner, busy, error }: { limit: Limit; owner: boolean; busy: boolean; error?: string }) {
	453	+	const ceiling = limit.ceilingMicros;
	454	+	const share = ceiling ? Math.min(1, limit.exposureMicros / Math.max(ceiling, 1)) : 0;
	455	+	const tone =
	456	+	limit.state === "stopped" ? "border-danger/40 bg-danger/5" : limit.state === "warning" ? "border-warn/40 bg-warn/5" : "border-line bg-surface";
	457	+	const bar = limit.state === "stopped" ? "bg-danger" : limit.state === "warning" ? "bg-warn" : "bg-accent";
	458	+	const trust = TRUST[limit.trust];
	459	+	return (
	460	+	<section className={`mb-10 rounded-xl border p-5 ${tone}`}>
	461	+	<div className="flex flex-wrap items-baseline justify-between gap-2">
	462	+	<h2 className="font-medium">Usage limit</h2>
	463	+	<span className="rounded-full border border-line px-2 py-0.5 text-xs text-muted">{trust.label}</span>
	464	+	</div>
	465	+	<p className="mt-1 max-w-2xl text-sm text-muted">
	466	+	What this month's usage cost g1t, or is charged, whichever is more, less what was paid this month. At the limit,
	467	+	new sandboxes and builds stop and apps pause until the workspace pays or the month turns. Work already running
	468	+	finishes.
	469	+	</p>
	470	+	<p className="mt-4 text-2xl font-semibold tabular-nums tracking-tight">
	471	+	{dollars(limit.exposureMicros)}
	472	+	<span className="text-base font-normal text-muted"> {ceiling == null ? "· no limit" : `of ${dollars(ceiling)}`}</span>
	473	+	</p>
	474	+	{ceiling != null && (
	475	+	<div className="mt-3 h-1.5 overflow-hidden rounded-full bg-line" role="presentation">
	476	+	<div className={`h-full ${bar}`} style={{ width: `${Math.max(share * 100, share > 0 ? 2 : 0)}%` }} />
	477	+	</div>
	478	+	)}
	479	+	{limit.message && <p className="mt-3 text-sm">{limit.message}</p>}
	480	+	<p className="mt-3 text-xs text-faint">
	481	+	{trust.detail}
	482	+	{limit.trustCeilingMicros != null && limit.spendLimitMicros != null && ` g1t's limit is ${dollars(limit.trustCeilingMicros)}.`}
	483	+	</p>
	484	+	{owner && limit.trust !== "internal" && (
	485	+	<Form method="post" className="mt-4 flex flex-wrap items-end gap-2">
	486	+	<label className="text-sm">
	487	+	<span className="block text-xs text-muted">Your own monthly spend limit</span>
	488	+	<span className="mt-1 flex items-center rounded-md border border-line bg-bg px-2 focus-within:border-accent">
	489	+	<span className="text-muted">$</span>
	490	+	<input
	491	+	name="limit"
	492	+	type="number"
	493	+	min={0}
	494	+	step={1}
	495	+	defaultValue={limit.spendLimitMicros != null ? limit.spendLimitMicros / MICROS_PER_DOLLAR : ""}
	496	+	placeholder="None"
	497	+	className="w-24 bg-transparent px-1 py-1.5 tabular-nums outline-none"
	498	+	/>
	499	+	</span>
	500	+	</label>
	501	+	<Button variant="quiet" type="submit" name="intent" value="spend-limit" disabled={busy}>
	502	+	Set
	503	+	</Button>
	504	+	{limit.spendLimitMicros != null && (
	505	+	<Button variant="quiet" type="submit" name="intent" value="no-spend-limit" disabled={busy}>
	506	+	Remove
	507	+	</Button>
	508	+	)}
	509	+	<ErrorText>{error}</ErrorText>
	510	+	</Form>
	511	+	)}
	512	+	</section>
	513	+	);
	514	+	}

+0−0View BlameViewed

Binary or large file; its contents are not shown.

+0−0View BlameViewed

Binary or large file; its contents are not shown.

+1−0View BlameViewed

1

+

+0−0View BlameViewed

Binary or large file; its contents are not shown.

+1−0View BlameViewed

1

+

+0−0View BlameViewed

Binary or large file; its contents are not shown.

+1−0View BlameViewed

1

+

+0−0View BlameViewed

Binary or large file; its contents are not shown.

+1−8View BlameViewed

1		−	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 32">
2		−	<rect width="32" height="32" rx="7" fill="#161618"/>
3		−	<g transform="translate(4.5 4.6) scale(0.72)">
4		−	<path d="M16 2.5 28 9.4 16 16.3 4 9.4Z" fill="#ededef"/>
5		−	<path d="M4 10.9 15.3 17.4V30.2L4 23.7Z" fill="#ededef" fill-opacity="0.55"/>
6		−	<path d="M28 10.9 16.7 17.4V30.2L28 23.7Z" fill="#ededef" fill-opacity="0.25"/>
7		−	</g>
8		−	</svg>
	1	+	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16"><style>.f{fill:#161618}.f.s{fill:none;stroke:#161618}.m{fill:#6b56e8}@media (prefers-color-scheme: dark){.f{fill:#ededef}.f.s{fill:none;stroke:#ededef}.m{fill:#b6a8ff}}</style><mask id="cut" maskUnits="userSpaceOnUse" x="0" y="0" width="16" height="16"><rect width="16" height="16" fill="#fff"/><path d="M10.5 3.5 8.5 5.4" stroke="#000" stroke-width="3.6" stroke-linecap="round"/></mask><g mask="url(#cut)"><rect class="m" x="3" y="5.5" width="2" height="8.5" rx="1" fill-opacity="0.5"/><rect class="m" x="6" y="4" width="2" height="10" rx="1" fill-opacity="0.85"/></g><rect class="f" x="9" y="2" width="3" height="12" rx="1.5"/><path class="f s" d="M10.5 3.5 8.5 5.4" stroke-width="2.2" stroke-linecap="round"/></svg>

+0−0View BlameViewed

Binary or large file; its contents are not shown.

+0−0View BlameViewed

Binary or large file; its contents are not shown.

+104−0View BlameViewed

307	307		pub const MICROS_PER_BUILD_SECOND: i64 = 21;
308	308		}
309	309
	310	+	/// Sandbox time: every sandbox g1t starts for a workspace (agents,
	311	+	/// reviews, checks, the merge queue, workflow jobs) is metered by the
	312	+	/// second. Deploy builds are charged by the Deployments plan instead.
	313	+	pub mod sandbox_allowance {
	314	+	/// Free each calendar month (UTC): 500 minutes.
	315	+	pub const FREE_SECONDS: i64 = 30_000;
	316	+	/// What one second costs g1t (Cloudflare Containers, standard-1),
	317	+	/// rounded up. Recorded with every entry.
	318	+	pub const COST_MICROS_PER_SECOND: i64 = super::deployments_allowance::MICROS_PER_BUILD_SECOND;
	319	+	/// What one second past the free minutes is charged: $0.003 a minute.
	320	+	pub const MICROS_PER_SECOND: i64 = 50;
	321	+	}
	322	+
	323	+	/// `record_sandbox`: how long one sandbox ran for a workspace, reported by
	324	+	/// the runner when it stops. Recorded once per `reference`, with what it
	325	+	/// cost g1t; seconds past the month's free minutes are charged at
	326	+	/// `sandbox_allowance::MICROS_PER_SECOND`, unless `FREE_WHILE_BUILDING`.
	327	+	/// Returns `Outcome<bool>`: false if that reference was recorded before.
	328	+	#[derive(Debug, Serialize, Deserialize)]
	329	+	#[serde(rename_all = "camelCase")]
	330	+	pub struct RecordSandboxArgs {
	331	+	pub workspace: String,
	332	+	pub seconds: u32,
	333	+	/// What ran, e.g. `Checks on acme/api#12`.
	334	+	pub description: String,
	335	+	/// `namespace/name`.
	336	+	pub repo: Option<String>,
	337	+	/// Unique to the run.
	338	+	pub reference: String,
	339	+	}
	340	+
	341	+	/// How much a workspace has earned g1t's trust with money, which sets how
	342	+	/// far its unpaid usage can go before its work stops.
	343	+	#[derive(Clone, Copy, Debug, PartialEq, Eq, Serialize, Deserialize)]
	344	+	#[serde(rename_all = "snake_case")]
	345	+	pub enum Trust {
	346	+	/// No live payment yet: only a little past the free allowances.
	347	+	New,
	348	+	/// Has paid g1t real money: the ceiling grows with what it has paid.
	349	+	Paid,
	350	+	/// A ceiling g1t set by hand, after talking to the workspace.
	351	+	Reviewed,
	352	+	/// g1t's own workspaces: no ceiling.
	353	+	Internal,
	354	+	}
	355	+
	356	+	#[derive(Clone, Copy, Debug, PartialEq, Eq, Serialize, Deserialize)]
	357	+	#[serde(rename_all = "snake_case")]
	358	+	pub enum LimitState {
	359	+	Ok,
	360	+	/// Past 80% of the ceiling.
	361	+	Warning,
	362	+	/// At or past it: no new sandboxes, builds or app requests.
	363	+	Stopped,
	364	+	}
	365	+
	366	+	/// How far a workspace's unpaid usage has gone this month, and where its
	367	+	/// work stops: like Fly's or Cloudflare's limits for new accounts, so no
	368	+	/// one runs up costs g1t cannot collect. Usage counts at what it cost g1t
	369	+	/// or what it is charged, whichever is more, so it counts while g1t is
	370	+	/// free too.
	371	+	#[derive(Clone, Debug, Serialize, Deserialize)]
	372	+	#[serde(rename_all = "camelCase")]
	373	+	pub struct Limit {
	374	+	pub workspace: String,
	375	+	pub trust: Trust,
	376	+	/// Usage this month (UTC) less what was paid this month.
	377	+	pub exposure_micros: i64,
	378	+	/// Where work stops: the lower of g1t's ceiling and the owner's own
	379	+	/// spend limit. None for g1t's own workspaces.
	380	+	pub ceiling_micros: Option<i64>,
	381	+	/// The ceiling g1t sets from `trust`.
	382	+	pub trust_ceiling_micros: Option<i64>,
	383	+	/// The owner's own monthly limit, if they set one.
	384	+	pub spend_limit_micros: Option<i64>,
	385	+	pub state: LimitState,
	386	+	/// What to tell people when work is stopped or close to it.
	387	+	pub message: Option<String>,
	388	+	}
	389	+
	390	+	/// `limit`: a workspace's limit, for its members. Returns `Outcome<Limit>`.
	391	+	#[derive(Debug, Serialize, Deserialize)]
	392	+	pub struct LimitArgs {
	393	+	pub workspace: String,
	394	+	pub viewer: Viewer,
	395	+	}
	396	+
	397	+	/// `check_limit`: the same, for the services that enforce it. Returns
	398	+	/// `Outcome<Limit>`.
	399	+	#[derive(Debug, Serialize, Deserialize)]
	400	+	pub struct CheckLimitArgs {
	401	+	pub workspace: String,
	402	+	}
	403	+
	404	+	/// `set_spend_limit`: the owner's own monthly ceiling, under g1t's; None
	405	+	/// removes it. Owners only. Returns `Outcome<Limit>`.
	406	+	#[derive(Debug, Serialize, Deserialize)]
	407	+	#[serde(rename_all = "camelCase")]
	408	+	pub struct SetSpendLimitArgs {
	409	+	pub actor: User,
	410	+	pub workspace: String,
	411	+	pub spend_limit_micros: Option<i64>,
	412	+	}
	413	+
310	414		/// What a feature's plan costs and includes.
311	415		#[derive(Clone, Debug, Serialize, Deserialize)]
312	416		#[serde(rename_all = "camelCase")]

+39−0View BlameViewed

72	72		* open to them: a few dollars of model cost each, out of one pool, until a
73	73		* date. Mirrors `Trial` in `crates/contracts/src/billing.rs`.
74	74		*/
	75	+	/** How much a workspace has earned g1t's trust with money. */
	76	+	export type Trust = "new" \| "paid" \| "reviewed" \| "internal";
	77	+
	78	+	/**
	79	+	* How far a workspace's unpaid usage has gone this month, and where its
	80	+	* work stops: past `ceilingMicros`, no new sandboxes, builds or app
	81	+	* requests. Usage counts at its cost to g1t or its charge, whichever is
	82	+	* more, so it counts while g1t is free too.
	83	+	*/
	84	+	export type Limit = {
	85	+	workspace: string;
	86	+	trust: Trust;
	87	+	exposureMicros: number;
	88	+	/** The lower of g1t's ceiling and the owner's spend limit; null for g1t's own. */
	89	+	ceilingMicros: number \| null;
	90	+	trustCeilingMicros: number \| null;
	91	+	spendLimitMicros: number \| null;
	92	+	state: "ok" \| "warning" \| "stopped";
	93	+	message: string \| null;
	94	+	};
	95	+
75	96		export type Trial = {
76	97		open: boolean;
77	98		usedMicros: number;
⋯
184	205		repo?: string \| null;
185	206		reference: string;
186	207		}): Promise<Result<boolean>>;
	208	+	/** A workspace's limit, for its members. */
	209	+	limit(workspace: string, viewer: Viewer): Promise<Result<Limit>>;
	210	+	/** The same, for the services that enforce it. */
	211	+	checkLimit(workspace: string): Promise<Result<Limit>>;
	212	+	/** The owner's own monthly ceiling, under g1t's; null removes it. Owners only. */
	213	+	setSpendLimit(actor: User, workspace: string, spendLimitMicros: number \| null): Promise<Result<Limit>>;
	214	+	/**
	215	+	* How long a sandbox ran for a workspace, reported when it stops. Its
	216	+	* cost is always recorded; seconds past the month's free minutes are
	217	+	* charged. False if `reference` was recorded before.
	218	+	*/
	219	+	recordSandbox(usage: {
	220	+	workspace: string;
	221	+	seconds: number;
	222	+	description: string;
	223	+	repo?: string \| null;
	224	+	reference: string;
	225	+	}): Promise<Result<boolean>>;
187	226		startRun(run: {
188	227		workspace: string;
189	228		repo: RepoPath;

+5−0View BlameViewed

199	199		call("cancel_subscription", { actor, workspace, feature, resume }),
200	200		hasFeature: (workspace, feature) => call("has_feature", { workspace, feature }),
201	201		chargeFeature: (charge) => call("charge_feature", charge),
	202	+	recordSandbox: (usage) => call("record_sandbox", usage),
	203	+	limit: (workspace, viewer) => call("limit", { workspace, viewer }),
	204	+	checkLimit: (workspace) => call("check_limit", { workspace }),
	205	+	setSpendLimit: (actor, workspace, spendLimitMicros) =>
	206	+	call("set_spend_limit", { actor, workspace, spendLimitMicros }),
202	207		};
203	208		}
204	209

+1−8View BlameViewed

1		−	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 32">
2		−	<rect width="32" height="32" rx="7" fill="#161618"/>
3		−	<g transform="translate(4.5 4.6) scale(0.72)">
4		−	<path d="M16 2.5 28 9.4 16 16.3 4 9.4Z" fill="#ededef"/>
5		−	<path d="M4 10.9 15.3 17.4V30.2L4 23.7Z" fill="#ededef" fill-opacity="0.55"/>
6		−	<path d="M28 10.9 16.7 17.4V30.2L28 23.7Z" fill="#ededef" fill-opacity="0.25"/>
7		−	</g>
8		−	</svg>
	1	+	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16"><style>.f{fill:#161618}.f.s{fill:none;stroke:#161618}.m{fill:#6b56e8}@media (prefers-color-scheme: dark){.f{fill:#ededef}.f.s{fill:none;stroke:#ededef}.m{fill:#b6a8ff}}</style><mask id="cut" maskUnits="userSpaceOnUse" x="0" y="0" width="16" height="16"><rect width="16" height="16" fill="#fff"/><path d="M10.5 3.5 8.5 5.4" stroke="#000" stroke-width="3.6" stroke-linecap="round"/></mask><g mask="url(#cut)"><rect class="m" x="3" y="5.5" width="2" height="8.5" rx="1" fill-opacity="0.5"/><rect class="m" x="6" y="4" width="2" height="10" rx="1" fill-opacity="0.85"/></g><rect class="f" x="9" y="2" width="3" height="12" rx="1.5"/><path class="f s" d="M10.5 3.5 8.5 5.4" stroke-width="2.2" stroke-linecap="round"/></svg>

+1−5View BlameViewed

1		−	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 32">
2		−	<path d="M16 2.5 28 9.4 16 16.3 4 9.4Z" fill="#ededef"/>
3		−	<path d="M4 10.9 15.3 17.4V30.2L4 23.7Z" fill="#ededef" fill-opacity="0.55"/>
4		−	<path d="M28 10.9 16.7 17.4V30.2L28 23.7Z" fill="#ededef" fill-opacity="0.25"/>
5		−	</svg>
	1	+	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 32"><g transform="translate(0.7 0.5)"><rect x="6.2" y="9.5" width="4.4" height="17" rx="2.2" fill="#b6a8ff" fill-opacity="0.35"/><rect x="12.4" y="7" width="4.8" height="19.5" rx="2.4" fill="#b6a8ff" fill-opacity="0.65"/><rect x="19" y="4.5" width="5.4" height="22" rx="2.7" fill="#ededef"/><path d="M21.7 7.2 17.6 10.9" fill="none" stroke="#ededef" stroke-width="4.6" stroke-linecap="round"/></g></svg>

+11−0View BlameViewed

1	+	-- Sandbox time each workspace used, by calendar month (UTC), so that the
2	+	-- free minutes are counted before any second is charged.
3	+	CREATE TABLE sandbox_months (
4	+	workspace TEXT NOT NULL,
5	+	-- YYYY-MM.
6	+	month TEXT NOT NULL,
7	+	seconds INTEGER NOT NULL DEFAULT 0,
8	+	PRIMARY KEY (workspace, month)
9	+	);
10	+
11	+	CREATE INDEX IF NOT EXISTS ledger_by_reference ON ledger (reference);

+11−0View BlameViewed

1	+	-- Per-workspace limits on usage not yet paid for. A row only exists when
2	+	-- g1t set a ceiling by hand or an owner set a spend limit; everything
3	+	-- else is worked out from the ledger. See src/limits.rs.
4	+	CREATE TABLE limits (
5	+	workspace TEXT PRIMARY KEY,
6	+	-- Set by g1t after a review; replaces the ceiling trust would give.
7	+	ceiling_micros INTEGER,
8	+	-- The owner's own monthly limit, under g1t's.
9	+	spend_limit_micros INTEGER,
10	+	updated_at TEXT NOT NULL
11	+	);

+1−1View BlameViewed

61	61
62	62		/// Dollars to the cent, or finer for prices under a cent, so that a
63	63		/// build minute's $0.0015 does not read as nothing.
64		−	fn dollars(micros: i64) -> String {
	64	+	pub(crate) fn dollars(micros: i64) -> String {
65	65		let text = format!("{:.4}", micros as f64 / MICROS_PER_DOLLAR as f64);
66	66		let (whole, fraction) = text.split_once('.').unwrap_or((&text, ""));
67	67		let fraction = fraction.trim_end_matches('0');

+133−0View BlameViewed

17	17		//! the methods and their arguments.
18	18
19	19		mod features;
	20	+	mod limits;
20	21		mod stripe;
21	22
22	23		use g1t_contracts::billing::*;
⋯
134	135		trial: Option<TrialConfig>,
135	136		/// The Deployments plan's monthly price (`DEPLOYMENTS_MONTHLY_CENTS`).
136	137		deployments_monthly_cents: u32,
	138	+	/// How far unpaid usage may go; see `limits`.
	139	+	ceilings: limits::Ceilings,
137	140		}
138	141
139	142		/// `TRIAL_WORKSPACE_MICROS`, `TRIAL_TOTAL_MICROS` and `TRIAL_UNTIL`.
⋯
567	570		if self.stripe.is_none() {
568	571		return Ok(Outcome::Ok(true));
569	572		}
	573	+	if let Some(stopped) = self.stopped(&a.workspace).await? {
	574	+	return Ok(stopped);
	575	+	}
570	576		Ok(self
571	577		.out_of_credit(&a.workspace.to_lowercase())
572	578		.await?
⋯
578	584		return Ok(Outcome::Ok(None));
579	585		}
580	586		let workspace = a.workspace.to_lowercase();
	587	+	if let Some(stopped) = self.stopped(&workspace).await? {
	588	+	return Ok(stopped);
	589	+	}
581	590		if let Some(refused) = self.out_of_credit(&workspace).await? {
582	591		return Ok(refused);
583	592		}
⋯
673	682		}
674	683		}
675	684
	685	+	impl Billing {
	686	+	/// Records how long a sandbox ran: its cost always, and a charge for
	687	+	/// the seconds past the month's free minutes.
	688	+	async fn record_sandbox(&self, a: RecordSandboxArgs) -> Result<Outcome<bool>> {
	689	+	if self.stripe.is_none() \|\| a.seconds == 0 {
	690	+	return Ok(Outcome::Ok(false));
	691	+	}
	692	+	let workspace = a.workspace.to_lowercase();
	693	+	let seen = self
	694	+	.db
	695	+	.prepare("SELECT id FROM ledger WHERE reference = ?")
	696	+	.bind(&[a.reference.as_str().into()])?
	697	+	.first::<Touched>(None)
	698	+	.await?;
	699	+	if seen.is_some() {
	700	+	return Ok(Outcome::Ok(false));
	701	+	}
	702	+	let now = now_ms();
	703	+	let timestamp = rfc3339(now);
	704	+	let month = &timestamp[..7];
	705	+	#[derive(Deserialize)]
	706	+	struct Used {
	707	+	seconds: i64,
	708	+	}
	709	+	let seconds = i64::from(a.seconds);
	710	+	let after = self
	711	+	.db
	712	+	.prepare(
	713	+	"INSERT INTO sandbox_months (workspace, month, seconds) VALUES (?1, ?2, ?3)
	714	+	ON CONFLICT (workspace, month) DO UPDATE SET seconds = seconds + ?3
	715	+	RETURNING seconds",
	716	+	)
	717	+	.bind(&[workspace.as_str().into(), month.into(), (seconds as f64).into()])?
	718	+	.first::<Used>(None)
	719	+	.await?
	720	+	.map_or(seconds, \|used\| used.seconds);
	721	+	let billable = sandbox_billable(after - seconds, seconds);
	722	+	let charge = if self.free { 0 } else { billable * sandbox_allowance::MICROS_PER_SECOND };
	723	+	let mut description = format!("{}: {} of sandbox time", a.description, duration(seconds));
	724	+	if billable < seconds {
	725	+	description.push_str(if billable == 0 {
	726	+	", within the month's free minutes"
	727	+	} else {
	728	+	", partly within the month's free minutes"
	729	+	});
	730	+	}
	731	+	if self.free && billable > 0 {
	732	+	description.push_str(" (free while g1t is being built out)");
	733	+	}
	734	+	self.db
	735	+	.batch(vec![
	736	+	self.db
	737	+	.prepare(
	738	+	"INSERT INTO ledger
	739	+	(id, workspace, kind, amount_micros, description, repo, task,
	740	+	cost_micros, reference, created_at, billed_to)
	741	+	VALUES (?, ?, 'usage', ?, ?, ?, 'sandbox', ?, ?, ?, 'g1t')",
	742	+	)
	743	+	.bind(&[
	744	+	new_id("led", now).into(),
	745	+	workspace.as_str().into(),
	746	+	(-(charge as f64)).into(),
	747	+	description.as_str().into(),
	748	+	optional(a.repo.as_deref()),
	749	+	((seconds * sandbox_allowance::COST_MICROS_PER_SECOND) as f64).into(),
	750	+	a.reference.as_str().into(),
	751	+	timestamp.as_str().into(),
	752	+	])?,
	753	+	self.db
	754	+	.prepare(
	755	+	"INSERT INTO accounts (workspace, balance_micros, created_at)
	756	+	VALUES (?1, ?2, ?3)
	757	+	ON CONFLICT (workspace) DO UPDATE SET balance_micros = balance_micros + ?2",
	758	+	)
	759	+	.bind(&[
	760	+	workspace.as_str().into(),
	761	+	(-(charge as f64)).into(),
	762	+	timestamp.as_str().into(),
	763	+	])?,
	764	+	])
	765	+	.await?;
	766	+	Ok(Outcome::Ok(true))
	767	+	}
	768	+	}
	769	+
	770	+	/// Of `seconds` used after `before` this month, how many are past the
	771	+	/// free minutes.
	772	+	fn sandbox_billable(before: i64, seconds: i64) -> i64 {
	773	+	let free_left = (sandbox_allowance::FREE_SECONDS - before).max(0);
	774	+	(seconds - free_left).max(0)
	775	+	}
	776	+
	777	+	/// `1h 2m`, `3m 12s` or `40s`.
	778	+	fn duration(seconds: i64) -> String {
	779	+	let (h, m, s) = (seconds / 3600, seconds % 3600 / 60, seconds % 60);
	780	+	if h > 0 {
	781	+	format!("{h}h {m}m")
	782	+	} else if m > 0 {
	783	+	format!("{m}m {s}s")
	784	+	} else {
	785	+	format!("{s}s")
	786	+	}
	787	+	}
	788	+
676	789		fn members_only<T>() -> Outcome<T> {
677	790		Outcome::fail(
678	791		FailureCode::Forbidden,
⋯
705	818		.and_then(\|fee\| fee.to_string().parse().ok())
706	819		.unwrap_or(100_000),
707	820		free: env.var("FREE_WHILE_BUILDING").is_ok_and(\|v\| v.to_string() == "true"),
	821	+	ceilings: limits::Ceilings::from_env(&env),
708	822		deployments_monthly_cents: env
709	823		.var("DEPLOYMENTS_MONTHLY_CENTS")
710	824		.ok()
⋯
747	861		"cancel_subscription" => reply(&billing.cancel_subscription(args(body)?).await?),
748	862		"has_feature" => reply(&billing.has_feature(args(body)?).await?),
749	863		"charge_feature" => reply(&billing.charge_feature(args(body)?).await?),
	864	+	"record_sandbox" => reply(&billing.record_sandbox(args(body)?).await?),
	865	+	"limit" => reply(&billing.limit(args(body)?).await?),
	866	+	"check_limit" => reply(&billing.check_limit(args(body)?).await?),
	867	+	"set_spend_limit" => reply(&billing.set_spend_limit(args(body)?).await?),
750	868		_ => Response::error("Unknown method", 404),
751	869		}
752	870		}
⋯
771	889		}
772	890
773	891		#[test]
	892	+	fn sandbox_seconds_are_charged_only_past_the_free_minutes() {
	893	+	let free = sandbox_allowance::FREE_SECONDS;
	894	+	assert_eq!(sandbox_billable(0, 600), 0);
	895	+	assert_eq!(sandbox_billable(free - 100, 600), 500);
	896	+	assert_eq!(sandbox_billable(free + 5, 600), 600);
	897	+	}
	898	+
	899	+	#[test]
	900	+	fn durations_read_plainly() {
	901	+	assert_eq!(duration(40), "40s");
	902	+	assert_eq!(duration(192), "3m 12s");
	903	+	assert_eq!(duration(3720), "1h 2m");
	904	+	}
	905	+
	906	+	#[test]
774	907		fn an_absurd_cost_is_capped() {
775	908		assert_eq!(charge_micros(1e9, 20), 120 * MICROS_PER_DOLLAR);
776	909		}

+270−0View BlameViewed

1	+	//! How far a workspace can run up costs g1t has not been paid for.
2	+	//!
3	+	//! Every sandbox second, build, app request and model token costs g1t
4	+	//! money at Cloudflare or a model provider before the workspace pays for
5	+	//! it. So, like Fly or Cloudflare with new accounts, each workspace has a
6	+	//! ceiling on that unpaid usage, set by how much it has paid g1t before:
7	+	//!
8	+	//! - New: no live payment yet. A few dollars, enough for the free
9	+	//! allowances and a little more.
10	+	//! - Paid: twice what it has paid g1t, within bounds.
11	+	//! - Reviewed: a ceiling g1t set by hand.
12	+	//! - Internal: g1t's own workspaces, with none.
13	+	//!
14	+	//! An owner can set a lower spend limit of their own. Past 80% the
15	+	//! workspace is warned; at the ceiling its work stops: no new sandboxes,
16	+	//! builds or app requests, until it pays or the month turns. Runs already
17	+	//! under way finish.
18	+	//!
19	+	//! Usage counts at what it cost g1t or what it is charged, whichever is
20	+	//! more, so it counts while g1t is free too: free is a price, not an
21	+	//! exemption from the ceiling. Test-mode payments are not money, so they
22	+	//! do not raise trust.
23	+
24	+	use g1t_contracts::billing::{CheckLimitArgs, Limit, LimitArgs, LimitState, SetSpendLimitArgs, Trust};
25	+	use g1t_contracts::time::rfc3339;
26	+	use g1t_contracts::{FailureCode, Outcome, Role};
27	+	use g1t_kit::now_ms;
28	+	use serde::Deserialize;
29	+	use worker::wasm_bindgen::JsValue;
30	+	use worker::{Env, Result};
31	+
32	+	use crate::features::dollars as dollars_plain;
33	+	use crate::{Billing, members_only};
34	+
35	+	/// The ceilings, from the billing service's variables.
36	+	pub(crate) struct Ceilings {
37	+	/// `LIMIT_NEW_MICROS`.
38	+	pub new: i64,
39	+	/// `LIMIT_PAID_MIN_MICROS` and `LIMIT_PAID_MAX_MICROS`.
40	+	pub paid_min: i64,
41	+	pub paid_max: i64,
42	+	/// `LIMIT_EXEMPT`: g1t's own workspaces, comma-separated.
43	+	pub exempt: Vec<String>,
44	+	}
45	+
46	+	impl Ceilings {
47	+	pub(crate) fn from_env(env: &Env) -> Self {
48	+	let number = \|name: &str, default: i64\| {
49	+	env.var(name).ok().and_then(\|v\| v.to_string().parse::<i64>().ok()).unwrap_or(default)
50	+	};
51	+	Ceilings {
52	+	new: number("LIMIT_NEW_MICROS", 3_000_000),
53	+	paid_min: number("LIMIT_PAID_MIN_MICROS", 25_000_000),
54	+	paid_max: number("LIMIT_PAID_MAX_MICROS", 1_000_000_000),
55	+	exempt: env
56	+	.var("LIMIT_EXEMPT")
57	+	.map(\|v\| v.to_string())
58	+	.unwrap_or_default()
59	+	.split(',')
60	+	.map(\|name\| name.trim().to_lowercase())
61	+	.filter(\|name\| !name.is_empty())
62	+	.collect(),
63	+	}
64	+	}
65	+
66	+	/// The ceiling for a workspace that has paid `paid` in live money.
67	+	pub(crate) fn for_paid(&self, paid: i64) -> i64 {
68	+	(paid * 2).clamp(self.paid_min, self.paid_max)
69	+	}
70	+	}
71	+
72	+	/// Where a workspace stands against its ceiling.
73	+	pub(crate) fn state(exposure: i64, ceiling: Option<i64>) -> LimitState {
74	+	match ceiling {
75	+	Some(ceiling) if exposure >= ceiling => LimitState::Stopped,
76	+	Some(ceiling) if exposure * 5 >= ceiling * 4 => LimitState::Warning,
77	+	_ => LimitState::Ok,
78	+	}
79	+	}
80	+
81	+	#[derive(Deserialize)]
82	+	struct LimitRow {
83	+	ceiling_micros: Option<i64>,
84	+	spend_limit_micros: Option<i64>,
85	+	}
86	+
87	+	#[derive(Deserialize)]
88	+	struct Month {
89	+	used: Option<i64>,
90	+	paid: Option<i64>,
91	+	}
92	+
93	+	#[derive(Deserialize)]
94	+	struct Paid {
95	+	paid: Option<i64>,
96	+	}
97	+
98	+	impl Billing {
99	+	/// The workspace's limit, worked out from its ledger.
100	+	pub(crate) async fn limit_of(&self, workspace: &str) -> Result<Limit> {
101	+	let workspace = workspace.to_lowercase();
102	+	let row = self
103	+	.db
104	+	.prepare("SELECT ceiling_micros, spend_limit_micros FROM limits WHERE workspace = ?")
105	+	.bind(&[workspace.as_str().into()])?
106	+	.first::<LimitRow>(None)
107	+	.await?;
108	+	let month_start = format!("{}-01", &rfc3339(now_ms())[..7]);
109	+	// Each usage entry at its cost to g1t or its charge, whichever is
110	+	// more; on the workspace's own provider, only g1t's fee is g1t's.
111	+	let month = self
112	+	.db
113	+	.prepare(
114	+	"SELECT
115	+	SUM(CASE WHEN kind = 'usage' THEN
116	+	CASE WHEN COALESCE(billed_to, 'g1t') = 'g1t'
117	+	THEN MAX(COALESCE(cost_micros, 0), -amount_micros)
118	+	ELSE -amount_micros END
119	+	END) AS used,
120	+	SUM(CASE WHEN kind = 'top_up' THEN amount_micros END) AS paid
121	+	FROM ledger WHERE workspace = ?1 AND created_at >= ?2",
122	+	)
123	+	.bind(&[workspace.as_str().into(), month_start.as_str().into()])?
124	+	.first::<Month>(None)
125	+	.await?;
126	+	let (used, paid_month) = month.map_or((0, 0), \|m\| (m.used.unwrap_or(0), m.paid.unwrap_or(0)));
127	+	// Test-mode payments are not money: they pay nothing off.
128	+	let live = self.stripe.as_ref().is_some_and(crate::stripe::Stripe::live);
129	+	let exposure = (used - if live { paid_month } else { 0 }).max(0);
130	+
131	+	let (trust, trust_ceiling) = if self.ceilings.exempt.iter().any(\|name\| *name == workspace) {
132	+	(Trust::Internal, None)
133	+	} else if let Some(ceiling) = row.as_ref().and_then(\|row\| row.ceiling_micros) {
134	+	(Trust::Reviewed, Some(ceiling))
135	+	} else {
136	+	let paid = self.live_paid(&workspace).await?;
137	+	if paid > 0 {
138	+	(Trust::Paid, Some(self.ceilings.for_paid(paid)))
139	+	} else {
140	+	(Trust::New, Some(self.ceilings.new))
141	+	}
142	+	};
143	+	let spend_limit = row.and_then(\|row\| row.spend_limit_micros);
144	+	let ceiling = match (trust_ceiling, spend_limit) {
145	+	(Some(ceiling), Some(own)) => Some(ceiling.min(own)),
146	+	(None, Some(own)) => Some(own),
147	+	(ceiling, None) => ceiling,
148	+	};
149	+	let state = state(exposure, ceiling);
150	+	let message = match state {
151	+	LimitState::Ok => None,
152	+	LimitState::Warning => Some(format!(
153	+	"The {workspace} workspace has used {} of its {} limit this month. At the limit, its sandboxes, builds and apps stop until it pays or the month turns.",
154	+	dollars_plain(exposure),
155	+	dollars_plain(ceiling.unwrap_or_default()),
156	+	)),
157	+	LimitState::Stopped => Some(if spend_limit.is_some() && ceiling == spend_limit {
158	+	format!(
159	+	"The {workspace} workspace reached the {} spend limit its owners set for this month, so its sandboxes, builds and apps are stopped. An owner can raise it under Billing.",
160	+	dollars_plain(ceiling.unwrap_or_default()),
161	+	)
162	+	} else {
163	+	format!(
164	+	"The {workspace} workspace reached its {} limit for usage not yet paid for, so its sandboxes, builds and apps are stopped. The limit grows as a workspace pays g1t; an owner can pay under Billing, or write to support to have it raised.",
165	+	dollars_plain(ceiling.unwrap_or_default()),
166	+	)
167	+	}),
168	+	};
169	+	Ok(Limit {
170	+	workspace,
171	+	trust,
172	+	exposure_micros: exposure,
173	+	ceiling_micros: ceiling,
174	+	trust_ceiling_micros: trust_ceiling,
175	+	spend_limit_micros: spend_limit,
176	+	state,
177	+	message,
178	+	})
179	+	}
180	+
181	+	/// Real money the workspace has paid g1t. Nothing in test mode.
182	+	async fn live_paid(&self, workspace: &str) -> Result<i64> {
183	+	if !self.stripe.as_ref().is_some_and(crate::stripe::Stripe::live) {
184	+	return Ok(0);
185	+	}
186	+	Ok(self
187	+	.db
188	+	.prepare("SELECT SUM(amount_micros) AS paid FROM ledger WHERE workspace = ? AND kind = 'top_up'")
189	+	.bind(&[workspace.into()])?
190	+	.first::<Paid>(None)
191	+	.await?
192	+	.and_then(\|row\| row.paid)
193	+	.unwrap_or(0))
194	+	}
195	+
196	+	/// A refusal, with the reason, when the workspace's work is stopped.
197	+	/// None while billing is off: a g1t without payments has no limits.
198	+	pub(crate) async fn stopped<T>(&self, workspace: &str) -> Result<Option<Outcome<T>>> {
199	+	if self.stripe.is_none() {
200	+	return Ok(None);
201	+	}
202	+	let limit = self.limit_of(workspace).await?;
203	+	Ok((limit.state == LimitState::Stopped).then(\|\| {
204	+	Outcome::fail(
205	+	FailureCode::PaymentRequired,
206	+	limit.message.unwrap_or_else(\|\| "This workspace is over its limit.".to_owned()),
207	+	)
208	+	}))
209	+	}
210	+
211	+	pub(crate) async fn limit(&self, a: LimitArgs) -> Result<Outcome<Limit>> {
212	+	let workspace = a.workspace.to_lowercase();
213	+	if !a.viewer.is_some_and(\|viewer\| viewer.is_member(&workspace)) {
214	+	return Ok(members_only());
215	+	}
216	+	Ok(Outcome::Ok(self.limit_of(&workspace).await?))
217	+	}
218	+
219	+	pub(crate) async fn check_limit(&self, a: CheckLimitArgs) -> Result<Outcome<Limit>> {
220	+	Ok(Outcome::Ok(self.limit_of(&a.workspace).await?))
221	+	}
222	+
223	+	pub(crate) async fn set_spend_limit(&self, a: SetSpendLimitArgs) -> Result<Outcome<Limit>> {
224	+	let workspace = a.workspace.to_lowercase();
225	+	if a.actor.role_in(&workspace) != Some(Role::Owner) {
226	+	return Ok(Outcome::fail(
227	+	FailureCode::Forbidden,
228	+	"Only an owner can set the workspace's spend limit.",
229	+	));
230	+	}
231	+	if a.spend_limit_micros.is_some_and(\|limit\| limit < 0) {
232	+	return Ok(Outcome::fail(FailureCode::Invalid, "A spend limit cannot be negative."));
233	+	}
234	+	let limit = a.spend_limit_micros.map_or(JsValue::NULL, \|limit\| (limit as f64).into());
235	+	self.db
236	+	.prepare(
237	+	"INSERT INTO limits (workspace, spend_limit_micros, updated_at) VALUES (?1, ?2, ?3)
238	+	ON CONFLICT (workspace) DO UPDATE SET spend_limit_micros = ?2, updated_at = ?3",
239	+	)
240	+	.bind(&[workspace.as_str().into(), limit, rfc3339(now_ms()).into()])?
241	+	.run()
242	+	.await?;
243	+	Ok(Outcome::Ok(self.limit_of(&workspace).await?))
244	+	}
245	+	}
246	+
247	+	#[cfg(test)]
248	+	mod tests {
249	+	use super::*;
250	+
251	+	fn ceilings() -> Ceilings {
252	+	Ceilings { new: 3_000_000, paid_min: 25_000_000, paid_max: 1_000_000_000, exempt: vec![] }
253	+	}
254	+
255	+	#[test]
256	+	fn trust_grows_with_what_was_paid_within_bounds() {
257	+	assert_eq!(ceilings().for_paid(5_000_000), 25_000_000);
258	+	assert_eq!(ceilings().for_paid(100_000_000), 200_000_000);
259	+	assert_eq!(ceilings().for_paid(10_000_000_000), 1_000_000_000);
260	+	}
261	+
262	+	#[test]
263	+	fn work_warns_at_eighty_percent_and_stops_at_the_ceiling() {
264	+	assert_eq!(state(0, Some(100)), LimitState::Ok);
265	+	assert_eq!(state(79, Some(100)), LimitState::Ok);
266	+	assert_eq!(state(80, Some(100)), LimitState::Warning);
267	+	assert_eq!(state(100, Some(100)), LimitState::Stopped);
268	+	assert_eq!(state(1_000_000, None), LimitState::Ok);
269	+	}
270	+	}

+7−0View BlameViewed

30	30		// recorded with what they cost, and nothing is charged. Set to
31	31		// "false" when pricing starts.
32	32		"FREE_WHILE_BUILDING": "true",
	33	+	// How far a workspace's unpaid usage may go before its work stops
	34	+	// (see src/limits.rs): $3 before any live payment, then twice what
	35	+	// it has paid, between $25 and $1,000. LIMIT_EXEMPT is g1t's own.
	36	+	"LIMIT_NEW_MICROS": "3000000",
	37	+	"LIMIT_PAID_MIN_MICROS": "25000000",
	38	+	"LIMIT_PAID_MAX_MICROS": "1000000000",
	39	+	"LIMIT_EXEMPT": "syntaqx",
33	40		// A free allowance on g1t's hosted models, so people can try g1t's
34	41		// agents without a key of their own: each workspace may use this
35	42		// much model cost ($1), out of one pool for everyone ($40), until

+4−0View BlameViewed

1	+	-- When the app was paused because its workspace reached its limit for
2	+	-- usage not yet paid for. Paused apps answer with a notice; they are
3	+	-- rebuilt from the same commit once the workspace is under it again.
4	+	ALTER TABLE apps ADD COLUMN paused_at TEXT;

+26−7View BlameViewed

34	34		const ASSETS_ONLY = `export default { fetch(request, env) { return env.ASSETS.fetch(request); } };\n`;
35	35
36	36		/** What an app answers between being taken down and being gone. */
	37	+	const PAUSED = `export default {
	38	+	fetch() {
	39	+	return new Response("<!doctype html><meta charset=utf-8><meta name=robots content=noindex><title>Paused</title><body style='font:16px system-ui;background:#121214;color:#ececf1;display:grid;place-items:center;min-height:100vh;margin:0;padding:0 16px'><main style='max-width:32rem'><h1>This app is paused</h1><p style='color:#9a9aa6'>The workspace it belongs to reached its usage limit on g1t. It comes back by itself once the workspace is under it again.</p></main>", { status: 402, headers: { "content-type": "text/html; charset=utf-8", "x-robots-tag": "noindex", "cache-control": "no-store" } });
	40	+	},
	41	+	};`;
	42	+
37	43		const TAKEN_DOWN = `export default {
38	44		fetch() {
39	45		return new Response("<!doctype html><meta charset=utf-8><meta name=robots content=noindex><title>Not up</title><body style='font:16px system-ui;background:#121214;color:#ececf1;display:grid;place-items:center;min-height:100vh;margin:0'><main><h1>This app is not up</h1><p style='color:#9a9aa6'>It was taken down. Deploying it again brings it back.</p></main>", { status: 404, headers: { "content-type": "text/html; charset=utf-8", "x-robots-tag": "noindex", "cache-control": "no-store" } });
⋯
164	170		* reaches the edge as fast as any deploy, and deleted after.
165	171		*/
166	172		async deleteScript(script: string): Promise<void> {
167		−	const form = new FormData();
168		−	form.append(
169		−	"metadata",
170		−	JSON.stringify({ main_module: "index.js", compatibility_date: "2026-09-26", bindings: [], tags: ["taken-down"] }),
171		−	);
172		−	form.append("index.js", new File([TAKEN_DOWN], "index.js", { type: "application/javascript+module" }));
173		−	await this.call("PUT", this.scriptPath(script), form).catch(() => undefined);
	173	+	await this.placeholder(script, TAKEN_DOWN, "taken-down").catch(() => undefined);
174	174		try {
175	175		await this.call("DELETE", `${this.scriptPath(script)}?force=true`);
176	176		} catch (error) {
⋯
179	179		}
180	180
181	181		/**
	182	+	* Replaces an app with a notice that it is paused: its workspace reached
	183	+	* its limit. The notice costs next to nothing to answer with, and the app
	184	+	* comes back by being deployed again.
	185	+	*/
	186	+	async pauseScript(script: string): Promise<void> {
	187	+	await this.placeholder(script, PAUSED, "paused");
	188	+	}
	189	+
	190	+	private async placeholder(script: string, code: string, tag: string): Promise<void> {
	191	+	const form = new FormData();
	192	+	form.append(
	193	+	"metadata",
	194	+	JSON.stringify({ main_module: "index.js", compatibility_date: "2026-09-26", bindings: [], tags: [tag] }),
	195	+	);
	196	+	form.append("index.js", new File([code], "index.js", { type: "application/javascript+module" }));
	197	+	await this.call("PUT", this.scriptPath(script), form);
	198	+	}
	199	+
	200	+	/**
182	201		* Requests and CPU time per app over a period, from Workers analytics.
183	202		* Apps with no traffic are absent.
184	203		*/

+46−1View BlameViewed

147	147		deployed_at: string;
148	148		created_at: string;
149	149		last_request_at: string \| null;
	150	+	/** Set while its workspace is over its limit; see `holdToLimits`. */
	151	+	paused_at: string \| null;
150	152		};
151	153
152	154		function toDeployment(row: DeploymentRow): Deployment {
⋯
578	580		const id = newId("dpl");
579	581		const token = randomToken();
580	582		const plan = await billingClient(this.env.BILLING).hasFeature(project.workspace, "deployments");
	583	+	const limit = await billingClient(this.env.BILLING).checkLimit(project.workspace);
581	584		const cloudflare = this.cloudflare;
582	585		const refused = !plan.ok
583	586		? plan.error.message
	587	+	: limit.ok && limit.value.state === "stopped"
	588	+	? (limit.value.message ?? "The workspace reached its usage limit.")
584	589		: !cloudflare
585	590		? "Deployments are not set up on this g1t: it has no Cloudflare token."
586	591		: null;
⋯
784	789		.prepare(
785	790		`INSERT INTO apps (script, project_id, workspace, slug, kind, branch, number, commit_sha, deployed_at, created_at)
786	791		VALUES (?1, ?2, ?3, ?4, ?5, ?6, ?7, ?8, ?9, ?9)
787		−	ON CONFLICT (script) DO UPDATE SET commit_sha = ?8, number = ?7, deployed_at = ?9`,
	792	+	ON CONFLICT (script) DO UPDATE SET commit_sha = ?8, number = ?7, deployed_at = ?9, paused_at = NULL`,
788	793		)
789	794		.bind(row.script, row.project_id, row.workspace, row.slug, row.kind, row.branch, row.number, row.commit_sha, at),
790	795		]);
⋯
948	953
949	954		// Apps of workspaces whose plan has ended come down.
950	955		const billing = billingClient(this.env.BILLING);
	956	+	await this.holdToLimits(apps).catch((error) => console.error("could not apply limits", error));
951	957		for (const workspace of workspaces) {
952	958		const plan = await billing.hasFeature(workspace, "deployments");
953	959		if (!plan.ok && plan.error.code === "payment_required") {
⋯
961	967		await this.chargeMonths();
962	968		}
963	969
	970	+	/**
	971	+	* Pauses the apps of workspaces that reached their limit for usage not
	972	+	* yet paid for, and rebuilds them from the same commit once they are
	973	+	* under it again. Paused apps answer with a notice and run nothing.
	974	+	*/
	975	+	private async holdToLimits(apps: AppRow[]): Promise<void> {
	976	+	const cloudflare = this.cloudflare;
	977	+	if (!cloudflare) return;
	978	+	const billing = billingClient(this.env.BILLING);
	979	+	for (const workspace of [...new Set(apps.map((app) => app.workspace))]) {
	980	+	const limit = await billing.checkLimit(workspace);
	981	+	if (!limit.ok) continue;
	982	+	const theirs = apps.filter((app) => app.workspace === workspace);
	983	+	if (limit.value.state === "stopped") {
	984	+	for (const app of theirs.filter((a) => !a.paused_at)) {
	985	+	await cloudflare.pauseScript(app.script);
	986	+	await this.db.prepare("UPDATE apps SET paused_at = ? WHERE script = ?").bind(now(), app.script).run();
	987	+	}
	988	+	continue;
	989	+	}
	990	+	const paused = theirs.filter((a) => a.paused_at);
	991	+	if (paused.length === 0) continue;
	992	+	const actor = await this.workspaceActor(workspace);
	993	+	if (!actor) continue;
	994	+	for (const app of paused) {
	995	+	const project = await this.projects.get(workspace, app.slug, actor);
	996	+	if (!project.ok) continue;
	997	+	// A failed or refused rebuild leaves it paused, to try again next time.
	998	+	const rebuilt =
	999	+	app.kind === "production"
	1000	+	? await this.deployProduction(project.value, app.commit_sha, "g1t")
	1001	+	: app.number != null
	1002	+	? await this.deployPreview(project.value, app.number, "g1t", true)
	1003	+	: null;
	1004	+	if (rebuilt && !rebuilt.ok) console.log("could not resume", app.script, rebuilt.error.message);
	1005	+	}
	1006	+	}
	1007	+	}
	1008	+
964	1009		/** Scripts in the namespace that no app holds, such as ones renamed. */
965	1010		private async removeOrphans(apps: AppRow[]): Promise<void> {
966	1011		const cloudflare = this.cloudflare;

+1−1View BlameViewed

33	33		text: format!("{intro}\n\n{action}: {link}\n\n{footer}\n"),
34	34		html: format!(
35	35		"<div style=\"font-family:system-ui,sans-serif;max-width:480px;margin:0 auto;padding:32px 16px;color:#16150f\">\
36		−	<p style=\"font-size:20px;font-weight:600;margin:0 0 16px\">g1t</p>\
	36	+	<p style=\"margin:0 0 20px\"><img src=\"{SITE}/brand/g1t-logo.png\" width=\"69\" height=\"28\" alt=\"g1t\" style=\"display:block;border:0\"></p>\
37	37		<p style=\"font-size:15px;line-height:1.6\">{intro}</p>\
38	38		<p style=\"margin:24px 0\"><a href=\"{link}\" style=\"background:#16150f;color:#fff;text-decoration:none;padding:10px 18px;border-radius:6px;font-size:15px\">{action}</a></p>\
39	39		<p style=\"font-size:13px;line-height:1.6;color:#6e6a5e\">{footer}</p>\

+53−2View BlameViewed

112	112		\| { kind: "actions"; jobId: string; token: string }
113	113		/** A build of one commit, deployed to g1t.page. */
114	114		\| { kind: "deploy"; deployId: string; token: string };
115		−	type RunRequest = Run & { envVars: Record<string, string> };
	115	+	/** Whose sandbox time it is, reported when the sandbox stops. */
	116	+	type Meter = { workspace: string; repo: string; description: string };
	117	+	/** Deploy builds are metered by the Deployments plan, not here. */
	118	+	type RunRequest = Run & { envVars: Record<string, string>; meter?: Meter };
	119	+
	120	+	function meter(repo: RepoPath, description: string): Meter {
	121	+	return { workspace: repo.namespace, repo: `${repo.namespace}/${repo.name}`, description };
	122	+	}
116	123
117	124		/** What the deployments service asks a sandbox to build. */
118	125		type DeployJob = {
⋯
149	156		sleepAfter = "45m";
150	157
151	158		async run(request: RunRequest): Promise<void> {
152		−	const { envVars, ...run } = request;
	159	+	const { envVars, meter, ...run } = request;
153	160		await this.ctx.storage.put("run", run);
	161	+	if (meter) await this.ctx.storage.put("meter", { ...meter, started: Date.now() });
154	162		await this.start({ envVars, enableInternet: true });
155	163		}
156	164
	165	+	/** Reports how long the sandbox ran, once, whatever it exited with. */
	166	+	private async meterStop(): Promise<void> {
	167	+	const metered = await this.ctx.storage.get<Meter & { started: number }>("meter");
	168	+	if (!metered) return;
	169	+	await this.ctx.storage.delete("meter");
	170	+	const seconds = Math.max(1, Math.ceil((Date.now() - metered.started) / 1000));
	171	+	const recorded = await billingClient(this.env.BILLING)
	172	+	.recordSandbox({
	173	+	workspace: metered.workspace,
	174	+	seconds,
	175	+	description: metered.description,
	176	+	repo: metered.repo,
	177	+	reference: `sandbox/${this.ctx.id.toString()}/${metered.started}`,
	178	+	})
	179	+	.catch((error: unknown) => ({ ok: false as const, error: { message: String(error) } }));
	180	+	if (!recorded.ok) console.log("sandbox time not recorded", metered.workspace, seconds, recorded.error.message);
	181	+	}
	182	+
157	183		override async onStop({ exitCode, reason }: StopParams): Promise<void> {
	184	+	await this.meterStop();
158	185		if (exitCode === 0) return;
159	186		const run = await this.ctx.storage.get<Run>("run");
160	187		console.log("sandbox stopped", run?.kind, "exit", exitCode, reason);
⋯
677	704		repo: RepoPath;
678	705		timeoutMinutes: number;
679	706		}): Promise<Result<true>> {
	707	+	const over = await this.overLimit(args.repo.namespace);
	708	+	if (over) return { ok: false, error: { code: "payment_required", message: over } };
680	709		// The same workspaces that may use g1t's sandboxes for agents.
681	710		if (!(await this.workspaceAllowed(args.repo.namespace))) {
682	711		return {
⋯
694	723		kind: "actions",
695	724		jobId: args.job,
696	725		token: args.token,
	726	+	meter: meter(args.repo, `A workflow job in ${args.repo.namespace}/${args.repo.name}`),
697	727		envVars: {
698	728		MODE: "actions",
699	729		G1T_API: "https://api.g1t.sh",
⋯
759	789
760	790		/** Whether a workspace's repositories may use g1t's agents and sandboxes at all. */
761	791		private async workspaceAllowed(namespace: string): Promise<boolean> {
	792	+	if (await this.overLimit(namespace)) return false;
762	793		const access = await this.modelAccess(namespace);
763	794		return access.own != null \|\| access.hosted;
764	795		}
765	796
766	797		/**
	798	+	* Why the workspace can start no sandbox: it reached its limit for usage
	799	+	* not yet paid for. Null when it can, or when billing cannot say.
	800	+	*/
	801	+	private async overLimit(namespace: string): Promise<string \| null> {
	802	+	const limit = await billingClient(this.env.BILLING)
	803	+	.checkLimit(namespace)
	804	+	.catch(() => null);
	805	+	if (!limit?.ok \|\| limit.value.state !== "stopped") return null;
	806	+	return limit.value.message ?? `The ${namespace} workspace reached its usage limit.`;
	807	+	}
	808	+
	809	+	/**
767	810		* Whether `viewer` may put agents to work: in `repo`'s workspace, which
768	811		* must be allowed and theirs, or with no repo named, in any workspace of
769	812		* theirs that is allowed.
⋯
987	1030		kind: "queue",
988	1031		entryId: job.entryId,
989	1032		token: job.token,
	1033	+	meter: meter(job.repo, `Merge queue on ${job.repo.namespace}/${job.repo.name}`),
990	1034		envVars: {
991	1035		MODE: "queue",
992	1036		G1T_API: "https://api.g1t.sh",
⋯
1051	1095		await sandbox.run({
1052	1096		kind: "answer",
1053	1097		pullId: job.pullId,
	1098	+	meter: meter(job.repo, `Agent answering on ${job.repo.namespace}/${job.repo.name}#${job.number}`),
1054	1099		envVars: {
1055	1100		// Answered from its change as it stands: no merging in of the
1056	1101		// default branch, which would push a commit for a question.
⋯
1090	1135		await sandbox.run({
1091	1136		kind: "revise",
1092	1137		pullId: job.pullId,
	1138	+	meter: meter(job.repo, `Agent revising ${job.repo.namespace}/${job.repo.name}#${job.number}`),
1093	1139		envVars: {
1094	1140		MODE: "revise",
1095	1141		G1T_API: "https://api.g1t.sh",
⋯
1139	1185		kind: "checks",
1140	1186		runId: job.runId,
1141	1187		token: job.token,
	1188	+	meter: meter(job.repo, `Checks on ${job.repo.namespace}/${job.repo.name}#${job.number}`),
1142	1189		envVars: {
1143	1190		MODE: "checks",
1144	1191		G1T_API: "https://api.g1t.sh",
⋯
1249	1296		await sandbox.run({
1250	1297		kind: "update",
1251	1298		pullId: update.pullId,
	1299	+	meter: meter(repo, `Catching up ${repo.namespace}/${repo.name}#${number}`),
1252	1300		envVars: {
1253	1301		MODE: "update",
1254	1302		G1T_API: "https://api.g1t.sh",
⋯
1309	1357		kind: "review",
1310	1358		runId: job.runId,
1311	1359		token: job.token,
	1360	+	meter: meter(repo, `Review of ${repo.namespace}/${repo.name}#${number}`),
1312	1361		envVars: {
1313	1362		MODE: "review",
1314	1363		G1T_API: "https://api.g1t.sh",
⋯
1373	1422		kind: "plan",
1374	1423		planId: job.planId,
1375	1424		token: job.token,
	1425	+	meter: meter(repo, `Planning for ${repo.namespace}/${repo.name}`),
1376	1426		envVars: {
1377	1427		MODE: "plan",
1378	1428		G1T_API: "https://api.g1t.sh",
⋯
1453	1503		actor,
1454	1504		repo,
1455	1505		number: pull.number,
	1506	+	meter: meter(repo, `Agent on ${repo.namespace}/${repo.name}#${pull.number}`),
1456	1507		envVars: {
1457	1508		G1T_API: "https://api.g1t.sh",
1458	1509		G1T_TOKEN: token,

flagon-io/g1t

Compare changes

3 commits