@wular/coder 0.4.11 → 0.4.13

package/docs/self-host.md

@@ -21,7 +21,7 @@ Required variables carry a *.
 | `HOST`                                     | address                                                                    | `127.0.0.1` without a database, else all        | Listen address. A local server listens on loopback only ([Modes](#modes))                                                                                                                                                                                                                                                                                                                                                                           |
 | `ADMIN_TOKEN`                              | string                                                                     | minted and printed per run                      | Local and memory servers. The bearer the CLI and dashboard use, accepted from loopback only. Ignored with Postgres                                                                                                                                                                                                                                                                                                                                  |
 | `CODER_CACHE_HOME`                         | path                                                                       | OS cache directory for `wular-coder`            | Archived tasks, flows and usage                                                                                                                                                                                                                                                                                                                                                                                                                     |
-| `WORK_DIR`                                 | path                                                                       | `<tmp>/coder`                                   | Where the local runner checks out repositories                                                                                                                                                                                                                                                                                                                                                                                                      |
+| `WORK_DIR`                                 | path                                                                       | `~/.coder/state/global/server-tasks`            | Where the local runner keeps each task's work folder: its working directory, or its checkout with a repository. The folder stays across turns and goes with `task delete`                                                                                                                                                                                                                                                                           |
 | `SERVER_NAME`                              | string                                                                     | `Coder`                                         | What the dashboard calls this server, in its sidebar server menu                                                                                                                                                                                                                                                                                                                                                                                    |
 | `ISSUES_URL`                               | URL                                                                        | `https://github.com/muzam1l/coder/issues/new`   | Where the dashboard sends bug reports from its Report issue button                                                                                                                                                                                                                                                                                                                                                                                  |
 | `SERVER_LIMITS`                            | JSON                                                                       | `{}`                                            | Request rates and task slots ([Limits and monitoring](#limits-and-monitoring))                                                                                                                                                                                                                                                                                                                                                                      |
@@ -32,7 +32,7 @@ Required variables carry a *.
 | `TASK_TIMEOUT`                             | ms                                                                         | `1800000` (30 minutes)                          | Longest a task may run                                                                                                                                                                                                                                                                                                                                                                                                                              |
 | `TASK_STALL`                               | ms                                                                         | `300000` (5 minutes)                            | Silence before the runner is asked whether the task is still alive                                                                                                                                                                                                                                                                                                                                                                                  |
 | `TASK_ATTEMPTS`                            | number                                                                     | `2`                                             | Times a runner start is retried                                                                                                                                                                                                                                                                                                                                                                                                                     |
-| `SERVER_INTEGRATIONS`                      | comma-separated ids                                                        | every platform                                  | The platforms this server offers, from `github`, `slack` and `linear`.                   Others get no webhook, catalog entry or app creation. An unknown id stops the server                                                                                                                                                                                                                                                                       |
+| `SERVER_INTEGRATIONS`                      | comma-separated ids                                                        | every platform                                  | The platforms this server offers, from `github`, `slack` and `linear`. Others get no webhook, catalog entry or app creation. An unknown id stops the server                                                                                                                                                                                                                                                                                         |
 | `SERVER_OPERATORS`                         | comma-separated Wular Auth user ids                                        | none                                            | Postgres servers. Who may open the operator area. Only this variable grants it                                                                                                                                                                                                                                                                                                                                                                      |
 
 Settings, sign-in, pairings and live tasks live in ~/.coder (CODER_HOME). Archived tasks, flows and usage live in the OS cache directory, ~/Library/Caches/wular-coder on macOS, ~/.cache/wular-coder on Linux (CODER_CACHE_HOME overrides). Nothing is ever pruned.
@@ -124,28 +124,28 @@ A platform user who addresses an agent must be linked to a member of the workspa
 
 `RUNNER_CONFIG` is a JSON object read by the chosen runner. Every field is optional unless marked.
 
-| Runner           | Field               | Default                         | Purpose                                                                                                                                                       |
-| ---------------- | ------------------- | ------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `local`          |                     |                                 | none                                                                                                                                                          |
+| Runner           | Field               | Default                               | Purpose                                                                                                                           |
+| ---------------- | ------------------- | ------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------- |
+| `local`          |                     |                                       | none                                                                                                                              |
 | `local-docker`   | `image`             | `ghcr.io/muzam1l/coder-runner:latest` | Image the task runs in                                                                                                            |
-|                  | `memory`            | `4g`                            | `--memory`                                                                                                                                                    |
-|                  | `cpus`              | `2`                             | `--cpus`                                                                                                                                                      |
-|                  | `pidsLimit`         | `512`                           | `--pids-limit`                                                                                                                                                |
-|                  | `network`           | `bridge`                        | `--network`                                                                                                                                                   |
-| `vercel-sandbox` | `image`             | the SDK's default image              | Image the task starts from                                                                                                        |
-|                  | `token`             | deployment OIDC                 | Vercel access token for Sandbox; install `@vercel/sandbox` in the adapter app                                                                                 |
-|                  | `team`              | `VERCEL_TEAM_ID`                | Team ID for access-token authentication                                                                                                                       |
-|                  | `projectId`         | `VERCEL_PROJECT_ID`             | Project ID for access-token authentication                                                                                                                    |
-|                  | `region`            | the database's region           | Sandbox region; inferred from an AWS region in the database host, else Vercel's default                                                                       |
-|                  | `timeoutMs`         | `1800000`                       | Sandbox lifetime                                                                                                                                              |
-|                  | `vcpus`             | `1`                                  | Sandbox size                                                                                                                      |
-| `github-actions` | `token` (required)  |                                      | GitHub token that may dispatch the workflow and read its status                                                                   |
-|                  | `repo`              | the event's repository          | `owner/name` holding the workflow                                                                                                                             |
-|                  | `workflow`          | `coder-agent.yml`               | Workflow file to dispatch (`coder server workflow` prints it)                                                                                                 |
-|                  | `ref`               | the repository's default branch | Branch to dispatch on                                                                                                                                         |
-| `http`           | `url` (required)    |                                      | Your controller's base URL; it implements `POST /start`, `POST /messages/<handle>`, `GET /status/<handle>`, `POST /stop/<handle>` |
-|                  | `secret` (required) |                                 | Shared secret that signs every request over body, timestamp, and nonce                                                                                        |
-|                  | `headers`           | `{}`                            | Extra headers sent with every request                                                                                                                         |
+|                  | `memory`            | `4g`                                  | `--memory`                                                                                                                        |
+|                  | `cpus`              | `2`                                   | `--cpus`                                                                                                                          |
+|                  | `pidsLimit`         | `512`                                 | `--pids-limit`                                                                                                                    |
+|                  | `network`           | `bridge`                              | `--network`                                                                                                                       |
+| `vercel-sandbox` | `image`             | the SDK's default image               | Image the task starts from                                                                                                        |
+|                  | `token`             | deployment OIDC                       | Vercel access token for Sandbox; install `@vercel/sandbox` in the adapter app                                                     |
+|                  | `team`              | `VERCEL_TEAM_ID`                      | Team ID for access-token authentication                                                                                           |
+|                  | `projectId`         | `VERCEL_PROJECT_ID`                   | Project ID for access-token authentication                                                                                        |
+|                  | `region`            | the database's region                 | Sandbox region; inferred from an AWS region in the database host, else Vercel's default                                           |
+|                  | `timeoutMs`         | `1800000`                             | Sandbox lifetime                                                                                                                  |
+|                  | `vcpus`             | `1`                                   | Sandbox size                                                                                                                      |
+| `github-actions` | `token` (required)  |                                       | GitHub token that may dispatch the workflow and read its status                                                                   |
+|                  | `repo`              | the event's repository                | `owner/name` holding the workflow                                                                                                 |
+|                  | `workflow`          | `coder-agent.yml`                     | Workflow file to dispatch (`coder server workflow` prints it)                                                                     |
+|                  | `ref`               | the repository's default branch       | Branch to dispatch on                                                                                                             |
+| `http`           | `url` (required)    |                                       | Your controller's base URL; it implements `POST /start`, `POST /messages/<handle>`, `GET /status/<handle>`, `POST /stop/<handle>` |
+|                  | `secret` (required) |                                       | Shared secret that signs every request over body, timestamp, and nonce                                                            |
+|                  | `headers`           | `{}`                                  | Extra headers sent with every request                                                                                             |
 
 `local-docker` and `github-actions` run in the runner image, which holds the engines and tools. A custom `image` needs `node`, `bun`, `git`, `curl`, `tar`, `claude`, `codex` and `github-mcp-server`.
 
@@ -165,7 +165,7 @@ A runner adapter declares delivery support through its optional `push` method. T
 
 ### Your own machine
 
-A member runs the server's tasks on their own machine with `coder runner serve`. It uses the machine's own `claude` and `codex` logins, so no credential is needed. Expose its port with any tunnel, such as `cloudflared tunnel --url http://localhost:4100`, `ngrok http 4100`, `tailscale funnel 4100` or a public VS Code port, and pass the tunnel's address with `--url`. Each start registers the current address with the server as you (`coder auth login`), and stopping marks the runner offline, so a changing tunnel address is fine. Every request to it is signed with its own secret, kept in `~/.coder/runners.json`.
+A member runs the server's tasks on their own machine with `coder runner serve`. It uses the machine's own `claude` and `codex` logins, so no credential is needed. Expose its port with any tunnel, such as `cloudflared tunnel --url http://localhost:4100`, `ngrok http 4100`, `tailscale funnel 4100` or a public VS Code port, and pass the tunnel's address with `--url`. Each start registers the current address with the server as you (`coder auth login`), and stopping marks the runner offline, so a changing tunnel address is fine. Every request to it is signed with its own secret, kept in `~/.coder/runners.json`. Each task keeps one work folder in `~/.coder/state/global/server-tasks/<task id>/work` across turns; deleting the task removes it at the runner's next registration, within a minute while it runs.
 
 A runner runs only its owner's tasks. An owner or admin can register one with `--workspace` for every member. A task runs on the runner it names, else its agent's runner, the requester's default, the workspace default, then `RUNNER`. Choose a default with `coder runner default <id>`. `coder runner list`, `rename` and `remove`, and the dashboard's Settings, manage them.
 
@@ -182,7 +182,7 @@ The server only verifies, dedupes, and dispatches; agents run in the runner with
 | `limits.principalPerMinute` | `300`   | Requests per minute for each signed-in user, the memory server's admin token, or an authenticated runner |
 | `limits.ipPerMinute`        | `60`    | Requests per minute for each unauthenticated IP                                                          |
 | `limits.authPerMinute`      | `20`    | Sign-in, token and login requests per minute for each IP, on top of `ipPerMinute`                        |
-| `limits.registerPerMinute`  | `10`    | Runner registrations per minute for each IP; includes pairing and returning-runner heartbeats                       |
+| `limits.registerPerMinute`  | `10`    | Runner registrations per minute for each IP; includes pairing and returning-runner heartbeats            |
 | `limits.pairingPerMinute`   | `5`     | Pairing tokens per minute for each principal at `/admin/runners/pair`                                    |
 | `limits.concurrentTasks`    | `10`    | Active task slots per workspace in cloud mode, or per server in local and memory modes                   |
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wular/coder",
-  "version": "0.4.11",
+  "version": "0.4.13",
   "description": "Delegating coding-agent runtime",
   "type": "module",
   "main": "./dist/sdk.js",
@@ -24,6 +24,7 @@
   },
   "scripts": {
     "build": "bun scripts/build.ts",
+    "emit": "bun scripts/emit.ts",
     "build:dash": "bun scripts/build.ts dash",
     "deploy:vercel": "bun scripts/deploy-vercel.ts",
     "dev:dash": "pnext dev src/server/dash",
@@ -69,6 +70,7 @@
     "@types/node": "^26.1.2",
     "@wular/pnext": "0.1.9",
     "chat": "4.41.1",
+    "contextjsx": "0.2.3",
     "drizzle-kit": "0.31.11",
     "drizzle-orm": "0.45.2",
     "jose": "6.2.12",

package/plugins/agents/skills/coder/SKILL.md

@@ -1,8 +1,10 @@
 ---
 name: coder
-description: Use Coder for coding, implementation, or investigation tasks - features, fixes, refactors, debugging, tests, code questions - one coder per focused goal, fanned out in parallel, waiting on each task. Use it when asked, when a task needs another engine (Claude, Codex, custom), or when a subagent is sufficient or required for the task.
+description: "Use Coder for coding, implementation, or investigation tasks - features, fixes, refactors, debugging, tests, code questions - one coder per focused goal, fanned out in parallel, waiting on each task. Use it when asked, when a task needs another engine (Claude, Codex, custom), or when a subagent is sufficient or required for the task."
 ---
 
+<!-- Generated by contextjsx from definitions. Edit the source, not this file. -->
+
 # Coder dispatch
 
 If `CODER_WORKER` is set in your environment, you are a coder worker. Skip this skill and do your assigned work directly; nested dispatch is disabled.
@@ -17,6 +19,19 @@ Coder delegates coding to supervised subagents of any model - Codex, Claude, or
 
 If `coder` is not on PATH, install it yourself without asking: `npm install -g @wular/coder`. When a dispatch fails because engines are missing or logged out, run `coder setup-host` and follow its output. It checks engines and auth, fixes what it can, prints the exact fix for the rest, and is safe to re-run. Ask the user before installing an engine CLI or changing auth; if it updated codex, tell the user to restart their codex session.
 
+## Use Coder over MCP
+
+Each coder command is also an MCP tool with the same arguments, such as `task/run` or `flow/run`; `load_skill` loads a guide.
+
+Setup: `coder setup-host` adds the server. By hand:
+
+```bash
+claude mcp add coder -- coder mcp
+codex mcp add coder -- coder mcp
+```
+
+Restart running sessions after adding it.
+
 ## Using the CLI
 
 - The CLI is the reference. `coder --help` and every subcommand's `--help` list the flags and exit codes, and each command prints the recommended next step when it returns. Follow it.

package/plugins/claude/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "coder",
-  "version": "0.4.11",
+  "version": "0.4.13",
   "description": "Delegate coding tasks to supervised Coder subagents running on Codex, Claude, or any OpenAI-compatible model. Your main context stays clean.",
   "author": {
     "name": "muzam1l"

package/plugins/claude/.mcp.json

@@ -0,0 +1,5 @@
+{
+  "mcpServers": {
+    "coder": { "command": "coder", "args": ["mcp"] }
+  }
+}

package/plugins/claude/skills/dispatch/SKILL.md

@@ -1,8 +1,10 @@
 ---
 name: dispatch
-description: Use Coder for coding, implementation, or investigation tasks - features, fixes, refactors, debugging, tests, code questions - one coder per focused goal, fanned out in parallel, waiting on each task. Use it when asked, when a task needs another engine (Claude, Codex, custom), or when a subagent is sufficient or required for the task.
+description: "Use Coder for coding, implementation, or investigation tasks - features, fixes, refactors, debugging, tests, code questions - one coder per focused goal, fanned out in parallel, waiting on each task. Use it when asked, when a task needs another engine (Claude, Codex, custom), or when a subagent is sufficient or required for the task."
 ---
 
+<!-- Generated by contextjsx from definitions. Edit the source, not this file. -->
+
 # Coder dispatch (Claude host)
 
 If `CODER_WORKER` is set in your environment, you are a coder worker. Skip this skill and do your assigned work directly; nested dispatch is disabled.
@@ -17,6 +19,19 @@ Coder delegates coding to supervised subagents of any model - Codex, Claude, or
 
 If `coder` is not on PATH, install it yourself without asking: `npm install -g @wular/coder`. When a dispatch fails because engines are missing or logged out, run `coder setup-host claude` and follow its output. It checks engines and auth, fixes what it can, prints the exact fix for the rest, and is safe to re-run. Ask the user before installing an engine CLI or changing auth; if it updated codex, tell the user to restart their codex session. For a guided setup, suggest `/coder:setup`.
 
+## Use Coder over MCP
+
+Each coder command is also an MCP tool with the same arguments, such as `task/run` or `flow/run`; `load_skill` loads a guide.
+
+Setup: `coder setup-host` adds the server. By hand:
+
+```bash
+claude mcp add coder -- coder mcp
+codex mcp add coder -- coder mcp
+```
+
+Restart running sessions after adding it.
+
 ## Using the CLI
 
 - The CLI is the reference. `coder --help` and every subcommand's `--help` list the flags and exit codes, and each command prints the recommended next step when it returns. Follow it.

package/plugins/cursor/.cursor-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "coder",
   "displayName": "Coder",
-  "version": "0.4.11",
+  "version": "0.4.13",
   "description": "Delegate coding tasks to supervised Coder subagents running on Codex, Claude, or any OpenAI-compatible model. Your main context stays clean.",
   "author": {
     "name": "muzam1l"

package/plugins/cursor/skills/coder/SKILL.md

@@ -1,8 +1,10 @@
 ---
 name: coder
-description: Use Coder for coding, implementation, or investigation tasks - features, fixes, refactors, debugging, tests, code questions - one coder per focused goal, fanned out in parallel, waiting on each task. Use it when asked, when a task needs another engine (Claude, Codex, custom), or when a subagent is sufficient or required for the task.
+description: "Use Coder for coding, implementation, or investigation tasks - features, fixes, refactors, debugging, tests, code questions - one coder per focused goal, fanned out in parallel, waiting on each task. Use it when asked, when a task needs another engine (Claude, Codex, custom), or when a subagent is sufficient or required for the task."
 ---
 
+<!-- Generated by contextjsx from definitions. Edit the source, not this file. -->
+
 # Coder dispatch (Cursor host)
 
 If `CODER_WORKER` is set in your environment, you are a coder worker. Skip this skill and do your assigned work directly; nested dispatch is disabled.
@@ -17,6 +19,19 @@ Coder delegates coding to supervised subagents of any model - Codex, Claude, or
 
 If `coder` is not on PATH, install it yourself without asking: `npm install -g @wular/coder`. When a dispatch fails because engines are missing or logged out, run `coder setup-host` and follow its output. It checks engines and auth, fixes what it can, prints the exact fix for the rest, and is safe to re-run. Ask the user before installing an engine CLI or changing auth; if it updated codex, tell the user to restart their codex session.
 
+## Use Coder over MCP
+
+Each coder command is also an MCP tool with the same arguments, such as `task/run` or `flow/run`; `load_skill` loads a guide.
+
+Setup: `coder setup-host` adds the server. By hand:
+
+```bash
+claude mcp add coder -- coder mcp
+codex mcp add coder -- coder mcp
+```
+
+Restart running sessions after adding it.
+
 ## Using the CLI
 
 - The CLI is the reference. `coder --help` and every subcommand's `--help` list the flags and exit codes, and each command prints the recommended next step when it returns. Follow it.

package/dist/actions-Cwe3IDVs.js

@@ -1,2 +0,0 @@
-import{Bn as e,Bt as t,Et as n,Gt as r,It as i,Q as a,Tt as o,U as s,Ut as c,Vt as l,W as u,Wt as d,X as f,Xn as p,Xt as m,Yt as h,_n as g,_t as _,an as v,bt as y,dn as b,fn as x,gt as S,hn as C,jt as ee,ln as w,nn as T,o as E,on as te,or as ne,pn as D,un as O,w as k,wt as A,zt as j}from"./prompts-Bj4Fbd_n.js";import{C as M,M as N,N as P,P as F,S as I,U as L,j as R,l as z,s as B,u as V,y as H,z as U}from"./dispatch-CFZ9Crvg.js";import{t as W}from"./chat-bridge-BmqYsASZ.js";import{n as G}from"./history-C53URBjs.js";import K from"node:path";import q from"node:process";import J from"node:fs";import{randomUUID as Y}from"node:crypto";function X(t,n,r=e=>e){return async i=>({...e(Object.fromEntries(B(t,q.env,n).flatMap(e=>{let t=e.connection??e.name;return i.includes(t)?[[t,r(e)]]:[]}))),warnings:[]})}async function Z(e,t,n,r,i={}){if(t.status!==`running`)return null;let a=t.engine===`claude`?await(i.claude??M)(t.steerEndpoint,n,void 0,r):await(i.codex??P)(e,{endpoint:t.steerEndpoint,threadId:t.threadId,turnId:t.turnId,text:n,command:r});if(a.steered)return A(e,t.id,{kind:`steer`,message:`${y}${n}`}),{taskId:t.id,steered:`live`};if(!a.retryable)throw A(e,t.id,{kind:`error`,message:`Live steer failed: ${a.detail}`}),Error(`Could not steer running task ${t.id}: ${a.detail}`);return null}function re(e,t,n){ee(e,t,n),A(e,t,{kind:`steer`,message:`Steer queued for the next turn:\n${n}`})}async function ie(e,t,n,r={},i={}){let a=l(e,t.id)??t;if(t=a.rollingOver?h(e,a):a,!t.threadId)throw new L(`invalid-option`,`Task ${t.id} has no thread to steer yet (status: ${t.status}).`,{hint:`Wait for it to start: coder task watch ${t.id}`});let o=await Z(e,t,n,r.command,i);if(o){let n=l(e,t.id)??t;return n.archived&&w(e,n),o}return{taskId:t.id,steered:await oe(e,t,n,r)}}function ae(e){let t=J.mkdtempSync(`${e}-`),n=`${q.pid}-${c(q.pid)??0}-${Y()}`;J.mkdirSync(K.join(t,n));try{for(let n=0;n<2;n++){try{return J.renameSync(t,e),!0}catch(e){if(![`EEXIST`,`ENOTEMPTY`,`ENOTDIR`].includes(e.code??``))throw e}try{if(J.statSync(e).isFile()){if(Date.now()-J.statSync(e).mtimeMs<6e4)return!1;J.unlinkSync(e);continue}for(let t of J.readdirSync(e)){let n=t.split(`-`),r=Number(n[0]),i=Number(n[1]),a=!1;if(Number.isInteger(r)&&r>0)try{q.kill(r,0),a=!0}catch(e){a=e.code===`EPERM`}let o=a?c(r):null;if(a&&(!i||o===null||o===i))return!1;J.rmdirSync(K.join(e,t))}J.rmdirSync(e)}catch(e){if(![`ENOENT`,`ENOTEMPTY`].includes(e.code??``))throw e}}return!1}finally{J.rmSync(t,{recursive:!0,force:!0})}}async function oe(e,t,n,r){if(t.connectionSource===`server`&&!r.resolveConnections)throw Error(`Server connection resolver is required to resume this task`);let a=await b(e,t.id,()=>{let r=l(e,t.id)??t,a=[r?.completedAt,r?.resumedAt].map(e=>Date.parse(e??``)||0),o=K.join(T(e,t.id),`resume-${a.join(`-`)}`);if(r&&!r.steerClosed&&(D.includes(r.status)||r.rollingOver&&h(e,r).rollingOver||r.status===`completed`&&r.steerClosed===!1&&i(r.pid))||!ae(o)){r.archived&&w(e,r),re(e,t.id,n);return}return{fresh:r,claim:o}});if(!a)return`queued`;let{fresh:o,claim:s}=a;t=o??t;let c=!1;try{for(let n of J.readdirSync(T(e,t.id)))/^resume-\d+-\d+$/.test(n)&&n!==K.basename(s)&&J.rmSync(K.join(T(e,t.id),n),{recursive:!0,force:!0});let i=r.resolveConnections?await r.resolveConnections(t.connections??[]):await p(void 0,t.connections??[],void 0,t.agentId?await(await import(`./exec-Cprez703.js`).then(e=>e.i)).localAgentAccess(e,t.agentId):void 0),a=t.mcp?.map(e=>{let n=e.connection??(e.resolved&&t.connections?.includes(e.name)?e.name:void 0);return n?{...e,connection:n,resolved:!1}:e})??[],o=t.mcpBindings??a.filter(e=>e.connection).map(({name:e,connection:t,tools:n})=>({name:e,connection:t,...n?{tools:n}:{}})),l=new Set(o.map(e=>e.connection)),u=z([...o,...a.filter(e=>!l.has(e.connection))],{},{},i.mcp);t.archived&&w(e,t),x(e,t.id,{mcp:u.mcp,mcpBindings:o,status:`queued`,pid:null,steerClosed:!1,resumedAt:new Date().toISOString(),currentPrompt:n,...r.outputSchema?{outputSchema:r.outputSchema}:{},resumeThreadId:t.threadId,steerEndpoint:null,model:r.model??t.model??null,effort:r.effort??t.effort??null,permissions:r.permissions??t.permissions,error:void 0}),c=!0,A(e,t.id,{kind:`steer`,message:`Resuming with steer:\n${n}`});for(let n of[...i.warnings,...u.warnings??[]])A(e,t.id,{kind:`status`,message:n});let d=V(t.cwd??e,t.id,i.env);r.onWorker?.(d)}catch(n){throw c&&x(e,t.id,{status:o?.status??t.status,resumedAt:o?.resumedAt,currentPrompt:o?.currentPrompt??null,resumeThreadId:o?.resumeThreadId??null,error:o?.error}),J.rmSync(K.join(T(e,t.id),K.basename(s)),{recursive:!0,force:!0}),n}return`resumed`}const se=[`Read`,`Glob`,`Grep`];function Q(e,t,n,r){return{prompt:n,model:r.model??e.model,effort:r.effort,permissions:`read-only`,additionalDirectories:[t],taskRoot:t,readOnlyAllowedTools:se}}async function ce(e,t,n,r={}){let i=T(e,t.id),o=E(t,i,n,r.command?U(r.command):void 0),c=r.command?e=>{let t=K.join(i,`inbox-control`);J.mkdirSync(t,{recursive:!0}),J.appendFileSync(K.join(t,`${U(r.command)}.transcript.jsonl`),JSON.stringify({command:r.command,result:e.finalMessage??e.error?.message??``})+`
-`)}:void 0,l=r.effort??t.effort??null;if(t.engine===`claude`)return I(t.cwd??e,{...Q(t,i,o,{model:r.model,effort:l}),command:r.command,onResult:c});let d=u(e),p=r.model??t.model,m=p?d.models?.[p]:void 0,h=m&&s(m)?m:void 0;if(h?.envKey&&!q.env[h.envKey])throw Error(`Missing environment variable: \`${h.envKey}\`.`);let g=h?await W(h,h.wireApi??`chat`):null,_=a(d,p,g??void 0);try{return await N(t.cwd??e,{prompt:o,model:_?.model??f(p??null),modelProvider:_?.modelProvider??null,configOverrides:_?.configOverrides??null,effort:l,sandbox:`read-only`,approvalPolicy:`never`,ephemeral:!0,onResult:c})}finally{await g?.close()}}function le(e){return t(e).filter(e=>D.includes(e.status)).flatMap(t=>H(T(e,t.id)).filter(e=>!e.response).map(e=>({taskId:t.id,id:e.id,summary:String(e.summary??``),createdAt:e.createdAt?String(e.createdAt):void 0})))}function $(e){return t(e).filter(t=>!C.includes(t.status)||!o(Date.parse(t.completedAt??t.updatedAt??t.createdAt??``))||(n(e,t,{auto:!0}),!1))}function ue(e,t={}){let n=t.limit===`all`?void 0:t.limit,i=e=>C.includes(e.status),a=r(e),o=new Set(a.map(e=>e.id)),s=e=>e.filter(e=>!o.has(e.id)),c=[...s($(e)),...a.filter(e=>!e.archived)];if(t.archived?c=[...s(j(e)),...a.filter(e=>e.archived)]:t.running?c=c.filter(e=>D.includes(e.status)):t.stopped&&(c=c.filter(i)),t.dir){let e=v(K.resolve(String(t.dir))),n=new Map;c=c.filter(t=>t.cwd?(n.has(t.cwd)||n.set(t.cwd,v(t.cwd)),n.get(t.cwd)===e):!1)}let l=e=>({rank:_(e.status),createdAt:Date.parse(e.createdAt??``)||0,id:e.id});c=[...c].sort((e,t)=>S(l(e),l(t)));let u=n===void 0?0:Math.max(0,c.length-n);return n!==void 0&&(c=c.slice(0,n)),{tasks:c,clipped:u}}async function*de(e,t,n={}){let r=O(e,t);try{let i=d(),a=l(e,t);if(!a)throw Error(`No task found for "${t}".`);let o=n.tail??1,s=ne(K.join(T(e,t),`log.jsonl`)),c=!0,u=()=>{let e=s().map(e=>{try{return JSON.parse(e)}catch{return{message:e}}});return c?(c=!1,o===`all`?e:te(e,o)):e};for(yield*u();a=h(e,l(e,t)??a,i),!C.includes(a.status);)await r.wait(1e3),yield*u();yield*u()}finally{r.close()}}async function fe(e,t,n={}){let r=t.engine===`claude`?{detail:`claude worker terminated`}:await(n.interrupt??R)(e,{endpoint:t.steerEndpoint,threadId:t.threadId,turnId:t.turnId});if(t.engine!==`claude`&&F(t.steerEndpoint),t.pid&&t.status===`running`)try{q.kill(t.pid,`SIGTERM`)}catch{}return x(e,t.id,{status:`cancelled`,steerEndpoint:null,completedAt:new Date().toISOString()}),{taskId:t.id,status:`cancelled`,interrupt:r.detail}}function pe(e,t){for(let n of G(t))t.engine===`claude`?k(n):g(e,n);return m(e,t.id)}export{X as a,fe as c,pe as i,de as l,le as n,$ as o,ue as r,ie as s,ce as t};

package/dist/adapter-Bi768A94.js

@@ -1 +0,0 @@
-import{f as e,l as t,u as n}from"./slack-DhPhLuWb.js";import{l as r}from"./dist-DAnSqY1s.js";import{createGitHubAdapter as i}from"./dist-B2jiMMxZ.js";function a(a){let o=a.credentials?.webhookSecret,s=a.installationId,c,l=i({userName:a.name,apiUrl:`https://api.github.com`,botUserId:0,installationToken:()=>s?c??=a.token(s,{tools:n.read}):Promise.reject(Error(`The webhook names no GitHub installation`)),webhookVerifier:(e,n)=>t(n,e.headers.get(`x-hub-signature-256`),o),logger:new r(`error`)});return e(l.octokit,a.fetch),l}export{a as githubAdapter};

package/dist/add-B6vPKZEr.js

@@ -1 +0,0 @@
-import{i as e,t}from"./cli-BBlH53hA.js";import{c as n,l as r}from"./args-CURX44CA.js";import{runnerOptions as i}from"./remove-DxCv9BB4.js";import a from"node:process";const o=e({name:`runner add`,globalFlags:{cwd:!1},args:1,required:[`<kind>`],help:{usage:`coder runner add <kind> [--name <name>] [--scope <scope>] [--field key=value …] [--server [url]] [--json]`,summary:`Connect a runner. Secret fields read environment variables with key=env:VARIABLE. Adding local prints a pairing command.`,flags:[[`--name <name>`,`runner display name`],[`--scope <scope>`,`personal or workspace`],[`--field key=value`,`repeat for each field, use env:VARIABLE for secrets`],t]},options:{...i,name:n,scope:n,field:r},async run({options:e,args:[t]}){let{addRunnerFields:n}=await import(`./runner-BM_98EQl.js`).then(e=>e.t);return n(t,e)},print:e=>a.stdout.write(`${`command`in e?e.command:`Added ${e.name} (${e.id}).`}\n`)});export{o as commandRunnerAdd};

package/dist/add-n6c9OINP.js

@@ -1,2 +0,0 @@
-import{i as e,r as t}from"./cli-BBlH53hA.js";import{p as n,r}from"./output-BKeyLbvt.js";import{c as i,n as a,s as o,t as s}from"./args-CURX44CA.js";import c from"node:process";async function l(e){let{openUrl:t}=await import(`./prompt-PEgcMJO7.js`).then(e=>e.s);c.stderr.write(`Sign in at ${r.cyan(e)}\n`),t(e)&&c.stderr.write(r.dim(`Opened it in your browser. Waiting...
-`))}async function u(){let{askSecret:e}=await import(`./prompt-PEgcMJO7.js`).then(e=>e.s);return e(`Key`)}function d(e){return e.provider===`env`?`API key ${e.env}`:e.provider===`mcp`?`MCP server ${e.url??e.command}`:`${e.provider} account${e.account?` ${e.account}`:``}`}const f=r=>e({name:`connection add`,help:{usage:`coder connection add <name> [--me] [--access read|write] (--env <NAME> | --url <url> [--header <NAME>] | [--env <NAME>] -- <command> [args...]) [--key] [--server [url]]`,summary:"Connect a platform account by its name (OAuth in the browser), an API key that tasks read from --env, or an MCP server at --url or started by the command after `--`. An API key is kept as a credential. A credential already holding the variable is used, else the value comes from that variable here, or from stdin or a prompt. A remote MCP server is checked for OAuth, open access or a key; a needed key is read from stdin or a prompt. With --key, the key goes in --header (default Authorization) or --env. Signing in needs --server.",flags:[[`--env <NAME>`,`the API key variable, or where a stdio server reads its key`],[`--url <url>`,`a remote MCP server (streamable HTTP by default)`],[`--transport <http|sse>`,`remote transport (default: http)`],[`--header <NAME>`,`the header a remote server reads its key from (default: Authorization)`],[`--key`,`read a key from stdin or a prompt, never from a flag value`],[`--auth <oauth|key|none>`,`override MCP authentication (default: detected for --url, none for a command)`],[`--access <read|write>`,`read keeps only read-only tools (default: the agent's mode, write for API keys)`],[`--tools <a,b>`,`tool allowlist; a read-only stdio server needs one`],[`--credential <id>`,`the credential an API key connection reads`],[`--me`,`your own connection instead of the workspace's`],t],examples:[[`GROQ_API_KEY=gsk_... coder connection add groq --env GROQ_API_KEY`,`an API key from this shell`],[`pbpaste | coder connection add docs --key --env DOCS_TOKEN --access write -- npx -y docs-mcp`,`a stdio server with its key from stdin`],[`coder connection add github --me --server`,`your GitHub account on your Coder server`]]},options:{...s,...o,env:i,url:i,transport:i,header:i,key:a,auth:i,access:i,tools:i,credential:i,me:a},args:1,run:async({options:e,args:[t],cwd:n})=>{let{connection:i}=await import(`./connection-B-IB8tlP.js`).then(e=>e.n);return i.add(t,{...e,cwd:n,command:r,transport:e.transport,auth:e.auth,access:e.access,tools:e.tools?.split(`,`).map(e=>e.trim()).filter(Boolean),key:e.key?await u():void 0,askKey:u,onAuthorize:l})},print:e=>c.stdout.write(`Connected ${n.bold(e.id)}, ${d(e)}.\n`)}),p=Object.assign(e=>{let t=e.indexOf(`--`);return f(t===-1?[]:e.slice(t+1))(t===-1?e:e.slice(0,t))},f([]));export{u as askKey,p as commandConnectionAdd,d as describe,l as openSignIn};

package/dist/add-v1Pv00HX.js

@@ -1 +0,0 @@
-import{i as e,t}from"./cli-BBlH53hA.js";import{p as n}from"./output-BKeyLbvt.js";import{c as r,n as i}from"./args-CURX44CA.js";import{credentialOptions as a}from"./remove-BZZgJq8Z.js";import o from"node:process";const s=e({name:`credentials add`,globalFlags:{cwd:!1},help:{usage:`coder credentials add --env <NAME> [--value <secret|->] [--workspace] [--no-check] [--server [url]]`,summary:`Store the key of one environment variable, encrypted on the server, as your own or with --workspace for every member. A key saved for that variable in the same scope is replaced. Where the server has subscription sign-in on, CLAUDE_CODE_OAUTH_TOKEN takes your own claude setup-token output.`,examples:[[`ANTHROPIC_API_KEY=sk-... coder credentials add --env ANTHROPIC_API_KEY`,`your own Claude key, read from the environment`],[`OPENAI_API_KEY=sk-... coder credentials add --env OPENAI_API_KEY --workspace`,`a workspace key every member's tasks can use`],[`pbpaste | coder credentials add --env OPENROUTER_API_KEY --value -`,`a key for custom models, value from stdin`]],flags:[[`--env <NAME>`,`the variable tasks read the key as (reads that variable by default)`],[`--value <secret|->`,`literal values land in shell history and are visible to other processes; use - for stdin or prefer environment variables`],[`--workspace`,`a workspace key; owners and admins only`],[`--no-check`,`skip the provider key check`],t]},options:{...a,env:r,value:r,"no-check":i},run:async({options:e})=>{let{addCredential:t}=await import(`./remote-D3JZ4MMQ.js`).then(e=>e.i);return t({...e,noCheck:e[`no-check`]})},print:(e,{options:t})=>o.stdout.write(`${e.replaced?`Replaced`:`Added`} ${t.workspace?`workspace`:`personal`} ${n.bold(e.name)}.\n`)});export{s as commandCredentialsAdd};

package/dist/add-wC8ByRgM.js

@@ -1,6 +0,0 @@
-import{qi as e}from"./core-DwsAMCnL.js";import{i as t}from"./cli-BBlH53hA.js";import{p as n}from"./output-BKeyLbvt.js";import{c as r,n as i,t as a}from"./args-CURX44CA.js";import{t as o}from"./models-Cb0ZTKZ7.js";import s from"node:process";var c=e({commandModelAdd:()=>d,modelOptions:()=>l,modelSavedJson:()=>f,printModelSaved:()=>p,writeOptions:()=>u});const l={...a,"base-url":r,model:r,"env-key":r,workspace:i},u=e=>({baseUrl:e[`base-url`],model:e.model,envKey:e[`env-key`],workspace:e.workspace}),d=t({name:`model add`,help:{usage:`coder model add <name> --base-url <url> --model <id> [--env-key VAR]`,summary:`Connect a custom model behind an OpenAI-compatible endpoint (Ollama, LM Studio,
-vLLM, OpenRouter, ...). It currently runs on the codex engine pointed at your
-URL and is usable anywhere a model is: --model <name>, --engine custom, or as an
-agent default in config. Alias: \`coder model setup\`.`,flags:[[`--base-url <url>`,`OpenAI-compatible API base (e.g. http://localhost:11434/v1)`],[`--model <id>`,`the provider's model id (e.g. qwen2.5-coder:32b)`],[`--env-key <VAR>`,`env var holding the API key (omit for keyless local endpoints)`],[`--workspace`,`write to <repo>/.coder/config.json instead of the user file`]],examples:[[`coder model add qwen --base-url http://localhost:11434/v1 --model qwen2.5-coder:32b`,`local Ollama model, no key`],[`coder model add kimi --base-url https://openrouter.ai/api/v1 --model moonshotai/kimi-k2 --env-key OPENROUTER_API_KEY`,`third-party provider via OpenRouter`],[`coder run --model qwen "explain this repo"`,`dispatch a task on it`]]},options:l,args:1,run:({options:e,args:[t],cwd:n})=>o.add(t,{...u(e),cwd:n}),json:f,print:e=>p(e,`saved`)});function f({name:e,entry:t,file:n,probe:r,codex:i,install:a,ready:o}){return{name:e,...t,file:n,probe:r,codex:i,...a?{codexInstall:a}:{},ready:o}}function p({name:e,entry:t,file:r,probe:i,codex:a,install:o,nativeResponses:c,keyMissing:l},u){let d=n,f=e=>`  ${d.green(`✔`)} ${e}`,p=e=>`  ${d.red(`✘`)} ${e}`,m=[`${u} ${d.cyan(e)} -> ${t.model} @ ${t.baseUrl}  ${d.dim(`(${r})`)}`,``,i.reachable?f(`${i.detail} ${d.dim(`(${c?`responses api, direct`:`chat api, auto-translated`})`)}`):p(i.detail),a.available?f(o?.installed?`${o.note} ${d.dim(`(${a.detail})`)}`:`codex engine ${d.dim(`(${a.detail})`)}`):p(o?.note??`codex CLI not installed - run: npm install -g @openai/codex`)];l&&m.push(p(`env var ${t.envKey} is not set in this shell`)),m.push(``,d.dim([`Use it:       coder run --model ${e} "<task>"`,`Make default: coder config set engines.custom.model ${e}`].join(`
-`))),s.stdout.write(`${m.join(`
-`)}\n`)}export{u as a,p as i,l as n,f as r,c as t};

package/dist/agent-BkxXgha0.js

@@ -1 +0,0 @@
-import{s as e}from"./cli-BBlH53hA.js";const t=e(`agent`,{tools:async()=>(await import(`./tools-CdWkwI1g.js`)).commandTools,list:async()=>(await import(`./list-gFnOS9Hk.js`)).commandAgentList,ls:async()=>(await import(`./list-gFnOS9Hk.js`)).commandAgentList,show:async()=>(await import(`./show-uyUpeqa9.js`)).commandAgentShow,run:async()=>(await import(`./run-BKUd6B8S.js`)).commandAgentRun,init:async()=>(await import(`./init-HdSVUozH.js`)).commandAgentInit,push:async()=>(await import(`./push-DpEW4XbQ.js`)).commandAgentPush,usage:async()=>(await import(`./usage-Dr8F0xt0.js`)).commandAgentUsage,integrations:async()=>(await import(`./integrations-BdLs4W6o.js`)).commandAgentIntegrations},{menu:[{usage:`list`,blurb:`list local or server-owned agents`},{usage:`show <id>`,blurb:`one agent in full: settings, integrations, events, tools`},{usage:`init [id]`,blurb:`scaffold an agent folder in .coder/agents`},{usage:`push [id]`,blurb:`upload workspace agents to a Coder server`},{usage:`integrations <list|show>`,blurb:`the integration catalog: coder agent integrations --help`},{usage:`run <agent> <event.json>`,blurb:`run a recorded event through an agent, offline or on a server`},{usage:`usage`,blurb:`aggregate usage by agent, installation, or engine`}],description:[`Define and run agents from the CLI, the dashboard, or on GitHub, Slack and other platforms.`]},{aliases:{ls:`list`},nested:[`integrations`]});export{t as commandAgent};

package/dist/alias-A8ObWElH.js

@@ -1,2 +0,0 @@
-import{i as e}from"./cli-BBlH53hA.js";import{p as t}from"./output-BKeyLbvt.js";import{t as n}from"./models-Cb0ZTKZ7.js";import{n as r}from"./add-wC8ByRgM.js";import i from"node:process";const a=e({name:`model alias`,help:{usage:`coder model alias <name> <spec> [--workspace]`,summary:`Save an alias for an engine spec, e.g. fast -> codex:luna. An alias may reuse a
-built-in name to override it.`,flags:[[`--workspace`,`target <repo>/.coder/config.json instead of the user file`]]},options:r,args:2,run:({options:e,args:[t,r],cwd:i})=>n.alias(t,r,{...e,cwd:i}),print:o});function o(e){let n=t,r=`${e.provider} ${e.model}${e.effort?` (${e.effort})`:``}`;i.stdout.write(`aliased ${n.cyan(e.alias)} -> ${e.provider}:${e.model}${e.effort?`:${e.effort}`:``} ${n.dim(`= ${r}`)}  ${n.dim(`(${e.file})`)}\n`)}export{a as commandModelAlias};

package/dist/app-CaxTL1H3.js

@@ -1 +0,0 @@
-import{s as e}from"./cli-BBlH53hA.js";const t=e(`server app`,{create:async()=>(await import(`./create-CP_JmJnh.js`)).commandServerAppCreate},{menu:[{usage:`create <integration>`,blurb:`create the built-in agent's public app`}],description:[`The built-in agent's apps, one per platform, shared by every workspace on this server.`],exampleCommand:`server app create`});export{t as commandServerApp};

package/dist/approvals-h5lytkey.js

@@ -1,2 +0,0 @@
-import{St as e}from"./prompts-Bj4Fbd_n.js";import{i as t,r as n}from"./cli-BBlH53hA.js";import{a as r,g as i,p as a,s as o}from"./output-BKeyLbvt.js";import{s,t as c}from"./args-CURX44CA.js";import l from"node:process";function u(e,t){let n=a;if(!t.length)return void l.stdout.write(`${n.dim(`No approvals for task ${e}.`)}\n`);for(let e of t){let t=e.answered??`pending`;l.stdout.write(`${n.cyan(e.id)}  ${t.padEnd(8)} ${n.dim(String(e.summary??``))}\n`)}let r=t.filter(e=>!e.answered);if(r.length){let e=r.length===1?r[0].id:`<approval-id>`;l.stdout.write(`\n${o([`Answer: coder task approve ${e} [--deny]`],n)}\n`)}}function d(t){let n=a;if(!t.length)return void l.stdout.write(`${n.dim(`No pending approvals.`)}\n\n${o([`Check tasks: coder task list`],n)}\n`);l.stdout.write(`${i([{header:`approval-id`,value:e=>e.id,paint:e=>n.cyan(e)},{header:`task-id`,value:e=>e.taskId,paint:e=>n.cyan(e)},{header:`age`,value:t=>t.createdAt?r(e(t.createdAt)):`-`},{header:`summary`,value:e=>e.summary,paint:e=>n.light(e)}],t,n)}\n`);let s=t.length===1?t[0].id:`<approval-id>`;l.stdout.write(`\n${o([`Answer: coder task approve ${s} [--deny]`],n)}\n`)}const f=t({name:`task approvals`,help:{usage:`coder task approvals [task-id] [--server [url]]`,summary:`Without a task id: pending approvals across all tasks. With one: that task's
-permission escalations and how each was answered.`,flags:[n]},options:{...c,...s},args:1,run:async({options:e,args:[t]})=>{let{tasks:n}=await import(`./task-DJ6nruuA.js`).then(e=>e.t);return n.approvals(t,{...e,organization:e.workspace})},json:(e,{options:t,args:[n]})=>t.server===void 0&&n?e.map(({taskId:e,...t})=>t):t.server===void 0?e.map(({taskId:e,id:t,summary:n,createdAt:r})=>({taskId:e,id:t,summary:n,createdAt:r})):e,print(e,{options:t,args:[n]}){if(t.server===void 0)return n?u(n,e):d(e);if(!e.length)return void l.stdout.write(`${a.dim(`No pending approvals.`)}\n\n${o([`Check tasks: coder task list`],a)}\n`);for(let t of e)l.stdout.write(`${t.taskId}  ${JSON.stringify(t)}\n`)}});export{f as commandApprovals};

package/dist/approve-BNhg0MLi.js

@@ -1,2 +0,0 @@
-import{i as e,r as t}from"./cli-BBlH53hA.js";import{p as n}from"./output-BKeyLbvt.js";import{n as r,s as i,t as a}from"./args-CURX44CA.js";import o from"node:process";const s=e({name:`task approve`,help:{usage:`coder task approve [task-id] <approval-id> [--deny] [--server [url]]`,summary:`Answer an escalated permission request. Accepts by default; --deny rejects it.
-Approval ids are unique, so the task id is optional.`,flags:[[`--deny`,`reject the request instead of accepting`],t]},options:{...a,deny:r,...i},args:2,run:async({options:e,args:[t,n]})=>{let{tasks:r}=await import(`./task-DJ6nruuA.js`).then(e=>e.t);return r.approve(t,n,{...e,organization:e.workspace})},print:(e,{options:t,args:r})=>o.stdout.write(t.server===void 0?`${t.deny?`Denied`:`Approved`} ${n.cyan(e.approvalId)} on task ${n.cyan(e.taskId)}.\n`:`${t.deny?`Denied`:`Approved`} ${n.cyan(r[1])}.\n`)});export{s as commandApprove};

package/dist/approve-BiHM8kSo.js

@@ -1 +0,0 @@
-import{i as e}from"./cli-BBlH53hA.js";import{c as t,t as n}from"./args-CURX44CA.js";import r from"node:process";const i=e({name:`connection approve`,help:{usage:`coder connection approve <name> [--agent <id>] [--cwd <dir>]`,summary:`Approve an MCP server this repository or one of its agents declares, on this machine. A changed endpoint or command needs approval again.`,flags:[[`--agent <id>`,`select the agent when names have different definitions`]]},options:{...n,agent:t},args:1,run:async({cwd:e,args:[t],options:n})=>{let{connection:r}=await import(`./connection-B-IB8tlP.js`).then(e=>e.n);return r.approve(t,{cwd:e,agent:n.agent})},print:({name:e})=>r.stdout.write(`Approved MCP server "${e}" on this machine.\n`)});export{i as commandConnectionApprove};