@wular/coder 0.4.12 → 0.5.0

package/docs/self-host.md

@@ -1,6 +1,10 @@
+---
+description: Running a Coder server with its database, sign-in, apps and runners.
+---
+
 # Self-hosting
 
-Run your own instance of the Coder server. A server holds the agents and their platform apps, every task with its output, and the dashboard. Platforms deliver events to it, runners report back to it, and the CLI and SDK reach it with `--server`. The hosted service at `coder.wular.ai` is the default.
+A self-hosted Coder server holds the agents and their platform apps, every task with its output, and the dashboard. Platforms deliver events to it, runners report back to it, and the CLI and SDK reach it with `--server`. The hosted service at `coder.wular.ai` is the default.
 
 ## Deploy
 
@@ -8,42 +12,42 @@ One server, one database, any number of agents, running on Bun. The server is co
 
 Required variables carry a *.
 
-| Variable                                   | Type                                                                       | Default                                         | Purpose                                                                                                                                                                                                                                                                                                                                                                                                                                             |
-| ------------------------------------------ | -------------------------------------------------------------------------- | ----------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `PUBLIC_URL`<sup><b>*</b></sup>            | url without a path                                                         |                                                 | The address platforms and browsers reach the server at. Written into every app as its webhook and callback address, and the only origin sign-in trusts. Inferred on Vercel; `serve` defaults to `http://localhost:<port>`                                                                                                                                                                                                                           |
-| `DATABASE_URL` or `POSTGRES_URL`           | url                                                                        |                                                 | Postgres. Everything lives in a `coder` schema, so the database can be shared with other apps. Run the database setup command below before the first start and after upgrades. Without it `coder server serve` runs the local dashboard; `--memory` selects a throwaway test server. Statements are prepared on each connection, so a query costs one round trip; add `?prepare=false` to the URL for a pooler that cannot keep prepared statements |
-| `SERVER_ENCRYPTION_KEY`<sup><b>*</b></sup> | base64 32 bytes                                                            |                                                 | Encrypts app keys, tokens, and engine credentials at rest (`openssl rand -base64 32`), and derives the session cookie key and the sign-in client key with HKDF. Required with Postgres                                                                                                                                                                                                                                                              |
-| `AUTH_WULAR_URL`                           | url                                                                        | `https://auth.wular.ai`                         | Wular Auth OpenID issuer, the only identity provider, including for a self-hosted Wular Auth deployment                                                                                                                                                                                                                                                                                                                                             |
-| `RUNNER`                                   | `local`\| `local-docker` \| `vercel-sandbox` \| `github-actions` \| `http` | `local`, `vercel-sandbox` on Vercel             | Where tasks execute. `local` and `local-docker` run them on the server's own machine and work with the memory store, and are refused on Vercel. The other three run them elsewhere and need Postgres. Members' own machines add to this ([Your own machine](#your-own-machine))                                                                                                                                                                     |
-| `RUNNER_CONFIG`                            | JSON                                                                       | `{}`                                            | Options for the chosen runner ([Runners](#runners)). Required for `http` and `github-actions`                                                                                                                                                                                                                                                                                                                                                       |
-| `SERVER_ENCRYPTION_KEY_PREVIOUS`           | base64 32 bytes                                                            |                                                 | The old key, accepted until `coder server rotate-key` has re-sealed everything. While set, its sign-in key stays published and its session cookies still open, so rotation keeps everyone signed in                                                                                                                                                                                                                                                 |
-| `PORT`                                     | number                                                                     | `8787`, or the port of a localhost `PUBLIC_URL` | Listen port                                                                                                                                                                                                                                                                                                                                                                                                                                         |
-| `HOST`                                     | address                                                                    | `127.0.0.1` without a database, else all        | Listen address. A local server listens on loopback only ([Modes](#modes))                                                                                                                                                                                                                                                                                                                                                                           |
-| `ADMIN_TOKEN`                              | string                                                                     | minted and printed per run                      | Local and memory servers. The bearer the CLI and dashboard use, accepted from loopback only. Ignored with Postgres                                                                                                                                                                                                                                                                                                                                  |
-| `CODER_CACHE_HOME`                         | path                                                                       | OS cache directory for `wular-coder`            | Archived tasks, flows and usage                                                                                                                                                                                                                                                                                                                                                                                                                     |
-| `WORK_DIR`                                 | path                                                                       | `<tmp>/coder`                                   | Where the local runner checks out repositories                                                                                                                                                                                                                                                                                                                                                                                                      |
-| `SERVER_NAME`                              | string                                                                     | `Coder`                                         | What the dashboard calls this server, in its sidebar server menu                                                                                                                                                                                                                                                                                                                                                                                    |
-| `ISSUES_URL`                               | URL                                                                        | `https://github.com/muzam1l/coder/issues/new`   | Where the dashboard sends bug reports from its Report issue button                                                                                                                                                                                                                                                                                                                                                                                  |
-| `SERVER_LIMITS`                            | JSON                                                                       | `{}`                                            | Request rates and task slots ([Limits and monitoring](#limits-and-monitoring))                                                                                                                                                                                                                                                                                                                                                                      |
-| `CLAUDE_SUBSCRIPTIONS`                     | `1`                                                                        | off                                             | Offer "Sign in with Claude" for personal credentials                                                                                                                                                                                                                                                                                                                                                                                                |
-| `CODEX_SUBSCRIPTIONS`                      | `1`                                                                        | off                                             | Offer "Sign in with Codex" for personal credentials                                                                                                                                                                                                                                                                                                                                                                                                 |
-| `MAX_TASKS`                                | number                                                                     | unset                                           | Optional deployment-wide runner slot cap, in addition to `limits.concurrentTasks`                                                                                                                                                                                                                                                                                                                                                                   |
-| `MAX_QUEUED`                               | number                                                                     | `1000`                                          | Tasks a workspace may have waiting                                                                                                                                                                                                                                                                                                                                                                                                                  |
-| `TASK_TIMEOUT`                             | ms                                                                         | `1800000` (30 minutes)                          | Longest a task may run                                                                                                                                                                                                                                                                                                                                                                                                                              |
-| `TASK_STALL`                               | ms                                                                         | `300000` (5 minutes)                            | Silence before the runner is asked whether the task is still alive                                                                                                                                                                                                                                                                                                                                                                                  |
-| `TASK_ATTEMPTS`                            | number                                                                     | `2`                                             | Times a runner start is retried                                                                                                                                                                                                                                                                                                                                                                                                                     |
-| `SERVER_INTEGRATIONS`                      | comma-separated ids                                                        | every platform                                  | The platforms this server offers, from `github`, `slack` and `linear`.                   Others get no webhook, catalog entry or app creation. An unknown id stops the server                                                                                                                                                                                                                                                                       |
-| `SERVER_OPERATORS`                         | comma-separated Wular Auth user ids                                        | none                                            | Postgres servers. Who may open the operator area. Only this variable grants it                                                                                                                                                                                                                                                                                                                                                                      |
+| Variable | Type | Default | Purpose |
+| --- | --- | --- | --- |
+| `PUBLIC_URL`<sup><b>*</b></sup> | url without a path |  | The address platforms and browsers reach the server at. Written into every app as its webhook and callback address, and the only origin sign-in trusts. Inferred on Vercel; `serve` defaults to `http://localhost:<port>` |
+| `DATABASE_URL` or `POSTGRES_URL` | url |  | Postgres. Everything lives in a `coder` schema, so the database can be shared with other apps. Run the database setup command below before the first start and after upgrades. Without it `coder server serve` runs the local dashboard; `--memory` selects a throwaway test server. Statements are prepared on each connection, so a query costs one round trip; add `?prepare=false` to the URL for a pooler that cannot keep prepared statements |
+| `SERVER_ENCRYPTION_KEY`<sup><b>*</b></sup> | base64 32 bytes |  | Encrypts app keys, tokens, and engine credentials at rest (`openssl rand -base64 32`), and derives the session cookie key and the sign-in client key with HKDF. Required with Postgres |
+| `AUTH_WULAR_URL` | url | `https://auth.wular.ai` | Wular Auth OpenID issuer, the only identity provider, including for a self-hosted Wular Auth deployment |
+| `RUNNER` | `local` \| `local-docker` \| `vercel-sandbox` \| `github-actions` \| `http` | `local`, `vercel-sandbox` on Vercel | Where tasks execute. `local` and `local-docker` run them on the server's own machine and work with the memory store, and are refused on Vercel. The other three run them elsewhere and need Postgres. Members' own machines add to this ([Runners](runners.md)) |
+| `RUNNER_CONFIG` | JSON | `{}` | Options for the chosen runner ([Runners](#runners)). Required for `http` and `github-actions` |
+| `SERVER_ENCRYPTION_KEY_PREVIOUS` | base64 32 bytes |  | The old key, accepted until `coder server rotate-key` has re-sealed everything. While set, its sign-in key stays published and its session cookies still open, so rotation keeps everyone signed in |
+| `PORT` | number | `8787`, or the port of a localhost `PUBLIC_URL` | Listen port |
+| `HOST` | address | `127.0.0.1` without a database, else all | Listen address. A local server listens on loopback only ([Modes](#modes)) |
+| `ADMIN_TOKEN` | string | minted and printed per run | Local and memory servers. The bearer the CLI and dashboard use, accepted from loopback only. Ignored with Postgres |
+| `CODER_CACHE_HOME` | path | OS cache directory for `wular-coder` | Archived tasks, flows and usage |
+| `WORK_DIR` | path | `~/.coder/state/global/server-tasks` | Where the local runner keeps each task's work folder: its working directory, or its checkout with a repository. The folder stays across turns and goes with `task delete` |
+| `SERVER_NAME` | string | `Coder` | What the dashboard calls this server, in its sidebar server menu |
+| `ISSUES_URL` | URL | `https://github.com/muzam1l/coder/issues/new` | Where the dashboard sends bug reports from its Report issue button |
+| `SERVER_LIMITS` | JSON | `{}` | Request rates and task slots ([Limits and monitoring](#limits-and-monitoring)) |
+| `CLAUDE_SUBSCRIPTIONS` | `1` | off | Offer **[Sign in with Claude]** for personal credentials |
+| `CODEX_SUBSCRIPTIONS` | `1` | off | Offer **[Sign in with Codex]** for personal credentials |
+| `MAX_TASKS` | number | unset | Optional deployment-wide runner slot cap, in addition to `limits.concurrentTasks` |
+| `MAX_QUEUED` | number | `1000` | Tasks a workspace may have waiting |
+| `TASK_TIMEOUT` | ms | `1800000` (30 minutes) | Longest a task may run |
+| `TASK_STALL` | ms | `300000` (5 minutes) | Silence before the runner is asked whether the task is still alive |
+| `TASK_ATTEMPTS` | number | `2` | Times a runner start is retried |
+| `SERVER_INTEGRATIONS` | comma-separated ids | every platform | The platforms this server offers, from `github`, `slack` and `linear`. Others get no webhook, catalog entry or app creation. An unknown id stops the server |
+| `SERVER_OPERATORS` | comma-separated Wular Auth user ids | none | Postgres servers. Who may open the operator area. Only this variable grants it |
 
 Settings, sign-in, pairings and live tasks live in ~/.coder (CODER_HOME). Archived tasks, flows and usage live in the OS cache directory, ~/Library/Caches/wular-coder on macOS, ~/.cache/wular-coder on Linux (CODER_CACHE_HOME overrides). Nothing is ever pruned.
 
 ### Modes
 
-| Started with   | Mode                                                                                   |
-| -------------- | -------------------------------------------------------------------------------------- |
-| `DATABASE_URL` | Cloud: sign-in with Wular Auth, workspaces, Postgres                                   |
-| `--memory`     | Test server: everything in memory, the admin token, and a "not for production" warning |
-| neither        | Local: the [dashboard](dash.md) for this machine's CLI, on loopback only               |
+| Started with | Mode |
+| --- | --- |
+| `DATABASE_URL` | Cloud: sign-in with Wular Auth, workspaces, Postgres |
+| `--memory` | Test server: everything in memory, the admin token, and a "not for production" warning |
+| neither | Local: the [dashboard](dash.md) for this machine's CLI, on loopback only |
 
 A memory server refuses to start on Vercel. Without a database, a connection from another machine reaches only the platform endpoints (`/hooks/`, `/create/`, `/install/`, `/connect/`), so `--host 0.0.0.0` lets platforms reach a memory server directly while the dashboard and `/admin` stay on this machine.
 
@@ -74,7 +78,7 @@ Completed tasks, their logs and usage remain until a task is explicitly deleted.
 
 Before the first start and each upgrade, set `DATABASE_URL` and run `npx --yes --package=drizzle-kit@0.31.11 --package=drizzle-orm@0.45.2 --package=postgres@3.4.9 drizzle-kit push --config=./node_modules/@wular/coder/dist/schema.config.js` from the directory where Coder is installed. Run it as a deploy step for serverless hosts.
 
-### Your own host
+### A plain host
 
 Install Bun and `@wular/coder`, set the variables above, set up the database as above, then run `coder server serve`. The command starts the server under Bun, listens on `PORT` (default 8787), and answers `/health`. Keep it alive with whatever supervises processes on that host. It listens on every interface, as containers and load balancers need; behind a proxy on the same machine, `--host 127.0.0.1` keeps it private. From code, `server.serve()` and `server.rotateKey()` do the same.
 
@@ -84,13 +88,13 @@ Open `PUBLIC_URL` and sign in with Wular Auth. Workspaces and roles come from Wu
 
 Add an engine [credential](#credentials), or the first task will only reply with a link asking for one.
 
-Create the built-in agent's apps once per server with `coder server app create <integration>`, such as `github` or `linear`, run where the server's `DATABASE_URL` and `PUBLIC_URL` are set. Each opens a one-time page that posts the app's manifest to the platform; `--org <org>` creates the GitHub App under an organization you admin. These apps are public and shared by every workspace, and the app's credentials go straight to the server. Linear apps need public distribution turned on before other workspaces can add them.
+Create the built-in agent's apps once per server with `coder server app create <integration>`, such as `github` or `linear`, run where the server's `DATABASE_URL` and `PUBLIC_URL` are set. Each opens a one-time page that posts the app's manifest to the platform; `--org <org>` creates the GitHub App under an organization the caller administers. These apps are public and shared by every workspace, and the app's credentials go straight to the server. Linear apps need public distribution turned on before other workspaces can add them.
 
 ## Apps and installs
 
-An agent's handle on a platform is its app. The built-in agent `coder` uses shared apps on GitHub and Linear; create its Slack app in your workspace from its Platforms tab by pasting a Slack configuration refresh token. A custom agent gets its own app from its Platforms tab in the dashboard, under your own GitHub account or an organization whose apps you manage. Private apps install only on their owner; an app made public on its platform installs on any account.
+An agent's handle on a platform is its app. The built-in agent `coder` uses shared apps on GitHub and Linear; create its Slack app in the Slack workspace from **# Agents → coder → (Platforms)** by pasting a Slack configuration refresh token. A custom agent gets its own app from **# Agents → *agent* → (Platforms)** in the dashboard, under the member's own GitHub account or an organization whose apps they manage. Private apps install only on their owner; an app made public on its platform installs on any account.
 
-Installs start from the dashboard. "Connect GitHub" adds the shared GitHub app, and the Platforms tab creates or installs an agent's workspace app. The server binds an install to the workspace that started it with a one-time, expiring state. On GitHub it also requires the installer to authorize the app and checks that the installation appears in their own `GET /user/installations`; on Slack it uses "Add to Slack" OAuth keyed by team. An install started on GitHub asks the installer to sign in and binds only if they are a member of the app's workspace. An install belongs to exactly one workspace, and webhooks route by installation. Removing or suspending an install on the platform stops it.
+Installs start from the dashboard. **[Connect GitHub]** adds the shared GitHub app, and **# Agents → *agent* → (Platforms)** creates or installs an agent's workspace app. The server binds an install to the workspace that started it with a one-time, expiring state. On GitHub it also requires the installer to authorize the app and checks that the installation appears in their own `GET /user/installations`; on Slack it uses **[Add to Slack]** OAuth keyed by team. An install started on GitHub asks the installer to sign in and binds only if they are a member of the app's workspace. An install belongs to exactly one workspace, and webhooks route by installation. Removing or suspending an install on the platform stops it.
 
 Operators set up the shared apps in the dashboard's Operator area at `/dash/<workspace>/operator`, one per platform, named `SERVER_NAME` or Wular unless they pick a name, and every operator action lands in its audit log. Entering it asks for a fresh Wular Auth sign-in and lasts an hour, or 15 minutes without activity; on local and memory servers the admin token holder is the operator.
 
@@ -102,7 +106,7 @@ Credentials are subscriptions and API keys. A subscription is a member's own Cla
 
 Each engine uses its subscription, else its key (`ANTHROPIC_API_KEY` for Claude, `OPENAI_API_KEY` for Codex), the requester's own before the workspace's; a custom model uses the variable it names. Tasks with no known requester use the workspace's only, and without a credential the agent replies with a link to the Credentials page.
 
-From a terminal, `coder credentials` adds, lists, removes and signs in credentials; it reads secrets from the environment or stdin and never prints them.
+Manage them under **# Settings → (Credentials)** or with `coder credentials add`, `list`, `login` and `remove`, which read secrets from the environment or stdin and never print them.
 
 ## Tasks
 
@@ -110,42 +114,46 @@ A task starts from the dashboard, `coder task run --server`, or a platform event
 
 A task is a conversation: steer it or ask it a question while it runs, and continue it once it has finished. Its output streams over Server-Sent Events, and a repo task's result includes the diff of its changes. The CLI's task commands take `--server` to do the same as the dashboard. A repo's own `.coder/config.json` can only narrow the workspace's config.
 
+Only the requester of a 1:1 DM task and the workspace's owners and admins see it, in the dashboard, CLI, SDK and API. Its requester steers it, and admins can view, stop and delete it. When the requester hasn't connected that platform account, only admins see it.
+
 ## Sign-in and workspaces
 
 Wular Auth is the only identity provider. Coder is an OpenID Connect client with no accounts of its own and signs its requests with a key derived from `SERVER_ENCRYPTION_KEY`, so there is no client secret to register. Sessions refresh themselves as Wular Auth's tokens expire, and signing out also ends the Wular Auth session.
 
-Workspaces come from Wular Auth, where members and roles are managed; the members page links there. Wular Auth sends an account in no workspace through its onboarding before it signs them in to Coder. Apps, installations, tasks, and credentials all belong to the selected workspace. Every member may see and use everything in the workspace; only owners and admins change workspace credentials.
+Workspaces come from Wular Auth, where members and roles are managed; the members page links there. Wular Auth sends an account in no workspace through its onboarding before it signs them in to Coder. Apps, installations, tasks, and credentials all belong to the selected workspace. Every member may see and use everything in the workspace except another member's [DM tasks](#tasks); only owners and admins change workspace credentials.
 
 From a terminal, `coder auth login` signs in with Wular Auth (`--device` shows a code to approve elsewhere) and keeps the session in `~/.coder/session.json`. Its tokens are issued for this server only. `--workspace <slug>` picks a workspace and `--server <url>` another instance. Servers must use HTTPS unless they are loopback, and the CLI confirms a new origin the first time it sees it (`--yes` acknowledges it in scripts).
 
-A platform user who addresses an agent must be linked to a member of the workspace that owns the install, or trusted by the platform there, such as a GitHub user with write access to the repository; trusted users get the workspace's connections only. Anyone else gets a link the first time they ask: on Slack a private one-time link, on GitHub a link that signs them in with the app's own GitHub authorization, so no secret appears in a public comment. Write actions on GitHub also need the person's write access to the repository, checked with GitHub. Installing an app links the installer the same way. A trigger with `"actAs": "requester"` runs its tasks with the requester's own GitHub token, kept encrypted and refreshed.
+Anyone the platform lets write where they ask, such as a GitHub user with write access to the repository, starts and steers tasks. Installing an app connects the installer.
 
 ## Runners
 
+What members and admins do with runners, such as pairing their own machine and choosing defaults, is in [Runners](runners.md). This section is the operator's side.
+
 `RUNNER_CONFIG` is a JSON object read by the chosen runner. Every field is optional unless marked.
 
-| Runner           | Field               | Default                         | Purpose                                                                                                                                                       |
-| ---------------- | ------------------- | ------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `local`          |                     |                                 | none                                                                                                                                                          |
-| `local-docker`   | `image`             | `ghcr.io/muzam1l/coder-runner:latest` | Image the task runs in                                                                                                            |
-|                  | `memory`            | `4g`                            | `--memory`                                                                                                                                                    |
-|                  | `cpus`              | `2`                             | `--cpus`                                                                                                                                                      |
-|                  | `pidsLimit`         | `512`                           | `--pids-limit`                                                                                                                                                |
-|                  | `network`           | `bridge`                        | `--network`                                                                                                                                                   |
-| `vercel-sandbox` | `image`             | the SDK's default image              | Image the task starts from                                                                                                        |
-|                  | `token`             | deployment OIDC                 | Vercel access token for Sandbox; install `@vercel/sandbox` in the adapter app                                                                                 |
-|                  | `team`              | `VERCEL_TEAM_ID`                | Team ID for access-token authentication                                                                                                                       |
-|                  | `projectId`         | `VERCEL_PROJECT_ID`             | Project ID for access-token authentication                                                                                                                    |
-|                  | `region`            | the database's region           | Sandbox region; inferred from an AWS region in the database host, else Vercel's default                                                                       |
-|                  | `timeoutMs`         | `1800000`                       | Sandbox lifetime                                                                                                                                              |
-|                  | `vcpus`             | `1`                                  | Sandbox size                                                                                                                      |
-| `github-actions` | `token` (required)  |                                      | GitHub token that may dispatch the workflow and read its status                                                                   |
-|                  | `repo`              | the event's repository          | `owner/name` holding the workflow                                                                                                                             |
-|                  | `workflow`          | `coder-agent.yml`               | Workflow file to dispatch (`coder server workflow` prints it)                                                                                                 |
-|                  | `ref`               | the repository's default branch | Branch to dispatch on                                                                                                                                         |
-| `http`           | `url` (required)    |                                      | Your controller's base URL; it implements `POST /start`, `POST /messages/<handle>`, `GET /status/<handle>`, `POST /stop/<handle>` |
-|                  | `secret` (required) |                                 | Shared secret that signs every request over body, timestamp, and nonce                                                                                        |
-|                  | `headers`           | `{}`                            | Extra headers sent with every request                                                                                                                         |
+| Runner | Field | Default | Purpose |
+| --- | --- | --- | --- |
+| `local` |  |  | none |
+| `local-docker` | `image` | `ghcr.io/muzam1l/coder-runner:latest` | Image the task runs in |
+|  | `memory` | `4g` | `--memory` |
+|  | `cpus` | `2` | `--cpus` |
+|  | `pidsLimit` | `512` | `--pids-limit` |
+|  | `network` | `bridge` | `--network` |
+| `vercel-sandbox` | `image` | the SDK's default image | Image the task starts from |
+|  | `token` | deployment OIDC | Vercel access token for Sandbox; install `@vercel/sandbox` in the adapter app |
+|  | `team` | `VERCEL_TEAM_ID` | Team ID for access-token authentication |
+|  | `projectId` | `VERCEL_PROJECT_ID` | Project ID for access-token authentication |
+|  | `region` | the database's region | Sandbox region; inferred from an AWS region in the database host, else Vercel's default |
+|  | `timeoutMs` | `1800000` | Sandbox lifetime |
+|  | `vcpus` | `1` | Sandbox size |
+| `github-actions` | `token` (required) |  | GitHub token that may dispatch the workflow and read its status |
+|  | `repo` | the event's repository | `owner/name` holding the workflow |
+|  | `workflow` | `coder-agent.yml` | Workflow file to dispatch (`coder server workflow` prints it) |
+|  | `ref` | the repository's default branch | Branch to dispatch on |
+| `http` | `url` (required) |  | The controller's base URL; it implements `POST /start`, `POST /messages/<handle>`, `GET /status/<handle>`, `POST /stop/<handle>` |
+|  | `secret` (required) |  | Shared secret that signs every request over body, timestamp, and nonce |
+|  | `headers` | `{}` | Extra headers sent with every request |
 
 `local-docker` and `github-actions` run in the runner image, which holds the engines and tools. A custom `image` needs `node`, `bun`, `git`, `curl`, `tar`, `claude`, `codex` and `github-mcp-server`.
 
@@ -153,38 +161,28 @@ A platform user who addresses an agent must be linked to a member of the workspa
 
 On `vercel-sandbox` each task uses the universal image's engines without their own sandbox, and its machine stops when the task ends. Repository snapshots hold the checkout and its installed dependencies. The default is 1 CPU and 2 GB memory; `vcpus` selects a larger machine.
 
-Access-token authentication needs a token, team ID and project ID. Settings → Runners accepts the IDs directly, or the adapter app can supply `VERCEL_TEAM_ID` and `VERCEL_PROJECT_ID`. The firewall injects engine API keys into provider requests, and the task sees a placeholder. Below `auto`, a task's machine reaches only this server, its engine, integrations, connections, MCP servers and `allowedNetworkHosts`.
+Access-token authentication needs a token, team ID and project ID. **# Settings → (Runners)** accepts the IDs directly, or the adapter app can supply `VERCEL_TEAM_ID` and `VERCEL_PROJECT_ID`. The firewall injects engine API keys into provider requests, and the task sees a placeholder. Below `auto`, a task's machine reaches only this server, its engine, integrations, connections, MCP servers and `network.allowedHosts`.
 
 For GitHub Actions, save the output of `coder server workflow` as `.github/workflows/coder-agent.yml` on the workflow repository's default branch. Save it again after each Coder upgrade. It accepts `task`, `server`, `token`, `mode` and `tarball`, names each run `Coder agent <task ID>`, and runs the task in the runner image with the callback URL and attempt token in the environment. The workflow token needs repository Actions read and write; a classic token for a private repository needs `repo`. A result returns through the authenticated task callback. No result artifact is required.
 
 Every runner sends the task's log to the server while it runs, and the dashboard shows the stored log.
 
-The server stores steer, ask, approval and cancel messages before delivering them. Local workers receive them over a private Unix socket; HTTP controllers use the same signed requests as task starts, Docker uses the daemon's exec channel, and Vercel Sandbox uses `runCommand`. Workers acknowledge the applied sequence and save it across restarts. Unacknowledged messages retry on server events and the sweep, with backoff. A reconnect fetches pending messages once.
-
-A runner adapter declares delivery support through its optional `push` method. The start environment tells the worker which mode to use. GitHub Actions has no inbound delivery channel, so it checks every four seconds with one indexed query that returns immediately. Four seconds balances interactive response time and request volume. All workers send a separate heartbeat every 30 seconds; idle push workers make no message requests after reconnect.
-
-### Your own machine
-
-A member runs the server's tasks on their own machine with `coder runner serve`. It uses the machine's own `claude` and `codex` logins, so no credential is needed. Expose its port with any tunnel, such as `cloudflared tunnel --url http://localhost:4100`, `ngrok http 4100`, `tailscale funnel 4100` or a public VS Code port, and pass the tunnel's address with `--url`. Each start registers the current address with the server as you (`coder auth login`), and stopping marks the runner offline, so a changing tunnel address is fine. Every request to it is signed with its own secret, kept in `~/.coder/runners.json`.
-
-A runner runs only its owner's tasks. An owner or admin can register one with `--workspace` for every member. A task runs on the runner it names, else its agent's runner, the requester's default, the workspace default, then `RUNNER`. Choose a default with `coder runner default <id>`. `coder runner list`, `rename` and `remove`, and the dashboard's Settings, manage them.
-
 ## Security
 
-The server only verifies, dedupes, and dispatches; agents run in the runner with one checkout, one short-lived platform token, and one engine credential. `permissions` is enforced by the engine sandbox, on `vercel-sandbox` by the machine and its firewall, `tools` by the app's permissions and the MCP allowlist. App credentials are encrypted at rest.
+The server only verifies, dedupes, and dispatches; agents run in the runner with one checkout, one short-lived platform token, and one engine credential. `access` is enforced by the engine sandbox, on `vercel-sandbox` by the machine and its firewall, `tools` by the app's permissions and the MCP allowlist. App credentials are encrypted at rest.
 
 ## Limits and monitoring
 
 `SERVER_LIMITS` is a JSON object stored under `limits` in the server config. Each value is a positive integer. Unset keys use these defaults.
 
-| Config key                  | Default | Purpose                                                                                                  |
-| --------------------------- | ------- | -------------------------------------------------------------------------------------------------------- |
-| `limits.principalPerMinute` | `300`   | Requests per minute for each signed-in user, the memory server's admin token, or an authenticated runner |
-| `limits.ipPerMinute`        | `60`    | Requests per minute for each unauthenticated IP                                                          |
-| `limits.authPerMinute`      | `20`    | Sign-in, token and login requests per minute for each IP, on top of `ipPerMinute`                        |
-| `limits.registerPerMinute`  | `10`    | Runner registrations per minute for each IP; includes pairing and returning-runner heartbeats                       |
-| `limits.pairingPerMinute`   | `5`     | Pairing tokens per minute for each principal at `/admin/runners/pair`                                    |
-| `limits.concurrentTasks`    | `10`    | Active task slots per workspace in cloud mode, or per server in local and memory modes                   |
+| Config key | Default | Purpose |
+| --- | --- | --- |
+| `limits.principalPerMinute` | `300` | Requests per minute for each signed-in user, the memory server's admin token, or an authenticated runner |
+| `limits.ipPerMinute` | `60` | Requests per minute for each unauthenticated IP |
+| `limits.authPerMinute` | `20` | Sign-in, token and login requests per minute for each IP, on top of `ipPerMinute` |
+| `limits.registerPerMinute` | `10` | Runner registrations per minute for each IP; includes pairing and returning-runner heartbeats |
+| `limits.pairingPerMinute` | `5` | Pairing tokens per minute for each principal at `/admin/runners/pair` |
+| `limits.concurrentTasks` | `10` | Active task slots per workspace in cloud mode, or per server in local and memory modes |
 
 For example, `SERVER_LIMITS='{"principalPerMinute":300,"ipPerMinute":60,"authPerMinute":20,"registerPerMinute":10,"pairingPerMinute":5,"concurrentTasks":10}'` sets every default explicitly. All `/admin/*`, `/runners/*`, sign-in and pairing requests use the same token-bucket implementation. A bucket starts full and refills continuously over a minute. A refused request returns `429`, a readable JSON `error` and `Retry-After` in seconds. Buckets and counters belong to each server process and reset on restart; serverless instances keep their own buckets.
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@wular/coder",
-  "version": "0.4.12",
-  "description": "Delegating coding-agent runtime",
+  "version": "0.5.0",
+  "description": "The runtime for agents, your rules, any model, everywhere.",
   "type": "module",
   "main": "./dist/sdk.js",
   "types": "./dist/sdk.d.ts",
@@ -34,7 +34,7 @@
     "version-bump:patch": "node scripts/bump.mjs patch",
     "version-bump:minor": "node scripts/bump.mjs minor",
     "version-bump:major": "node scripts/bump.mjs major",
-    "format": "prettier --write \"src/**/*.{ts,tsx}\" \"scripts/**/*.ts\" \"*.md\" \"docs/**/*.md\""
+    "format": "prettier --write \"src/**/*.{ts,tsx}\" \"scripts/**/*.ts\" \"*.md\""
   },
   "files": [
     "bin",
@@ -70,14 +70,13 @@
     "@types/node": "^26.1.2",
     "@wular/pnext": "0.1.9",
     "chat": "4.41.1",
-    "contextjsx": "0.2.2",
+    "contextjsx": "0.2.6",
     "drizzle-kit": "0.31.11",
     "drizzle-orm": "0.45.2",
     "jose": "6.2.12",
     "openid-client": "6.8.8",
     "postgres": "3.4.9",
     "preact": "10.29.2",
-    "preact-render-to-string": "6.7.0",
     "prettier": "^3.6.2",
     "tsdown": "^0.22.13",
     "typescript": "^5.9.3",

package/plugins/agents/skills/coder/SKILL.md

@@ -13,7 +13,7 @@ You dispatch coding tasks through the `coder` runtime instead of implementing th
 
 ## Overview
 
-Coder delegates coding to supervised subagents of any model - Codex, Claude, or any OpenAI-compatible or local endpoint - from one runtime on every host. Implementation details live in the subagents, so your context stays clean and handoffs are instant. Every task runs sandboxed under unified permissions (read-only, workspace-write, auto), is steerable mid-run, and falls back down the configured chain when an engine cannot start.
+Coder delegates coding to supervised subagents of any model - Codex, Claude, or any OpenAI-compatible or local endpoint - from one runtime on every host. Implementation details live in the subagents, so your context stays clean and handoffs are instant. Every task runs sandboxed under one access setting (read-only or auto), is steerable mid-run, and falls back down the configured chain when an engine cannot start.
 
 ## Setup
 
@@ -21,7 +21,7 @@ If `coder` is not on PATH, install it yourself without asking: `npm install -g @
 
 ## Use Coder over MCP
 
-Each coder command is also an MCP tool with the same arguments, such as `task/run` or `flow/run`; `load_skill` loads a guide.
+Each coder command is also an MCP tool with the same arguments, such as `task/run` or `flow/run`; `load_skill` loads a doc.
 
 Setup: `coder setup-host` adds the server. By hand:
 
@@ -35,7 +35,7 @@ Restart running sessions after adding it.
 ## Using the CLI
 
 - The CLI is the reference. `coder --help` and every subcommand's `--help` list the flags and exit codes, and each command prints the recommended next step when it returns. Follow it.
-- `coder docs` lists the deeper guides; `coder docs <topic>` prints one.
+- `coder docs` lists the docs; `coder docs <topic>` prints one.
 - Wait on each task with `coder task result <task-id> --wait` in its own background shell, one per task, never several tasks in one call, so each approval and answer reaches you.
 - If your harness sandboxes or gates terminal commands (Codex does both), run every `coder` command with escalated permissions; the runtime is a supervisor with its own sandbox and approval policy.
 

package/plugins/claude/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "coder",
-  "version": "0.4.12",
+  "version": "0.4.13",
   "description": "Delegate coding tasks to supervised Coder subagents running on Codex, Claude, or any OpenAI-compatible model. Your main context stays clean.",
   "author": {
     "name": "muzam1l"

package/plugins/claude/skills/dispatch/SKILL.md

@@ -13,7 +13,7 @@ You dispatch coding tasks through the `coder` runtime instead of implementing th
 
 ## Overview
 
-Coder delegates coding to supervised subagents of any model - Codex, Claude, or any OpenAI-compatible or local endpoint - from one runtime on every host. Implementation details live in the subagents, so your context stays clean and handoffs are instant. Every task runs sandboxed under unified permissions (read-only, workspace-write, auto), is steerable mid-run, and falls back down the configured chain when an engine cannot start.
+Coder delegates coding to supervised subagents of any model - Codex, Claude, or any OpenAI-compatible or local endpoint - from one runtime on every host. Implementation details live in the subagents, so your context stays clean and handoffs are instant. Every task runs sandboxed under one access setting (read-only or auto), is steerable mid-run, and falls back down the configured chain when an engine cannot start.
 
 ## Setup
 
@@ -21,7 +21,7 @@ If `coder` is not on PATH, install it yourself without asking: `npm install -g @
 
 ## Use Coder over MCP
 
-Each coder command is also an MCP tool with the same arguments, such as `task/run` or `flow/run`; `load_skill` loads a guide.
+Each coder command is also an MCP tool with the same arguments, such as `task/run` or `flow/run`; `load_skill` loads a doc.
 
 Setup: `coder setup-host` adds the server. By hand:
 
@@ -35,7 +35,7 @@ Restart running sessions after adding it.
 ## Using the CLI
 
 - The CLI is the reference. `coder --help` and every subcommand's `--help` list the flags and exit codes, and each command prints the recommended next step when it returns. Follow it.
-- `coder docs` lists the deeper guides; `coder docs <topic>` prints one.
+- `coder docs` lists the docs; `coder docs <topic>` prints one.
 - Run each `coder task result <task-id> --wait` as its own background Bash call (run_in_background), one per task, never several tasks in one call, so each approval and answer re-invokes you.
 
 ## Running tasks

package/plugins/cursor/.cursor-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "coder",
   "displayName": "Coder",
-  "version": "0.4.12",
+  "version": "0.4.13",
   "description": "Delegate coding tasks to supervised Coder subagents running on Codex, Claude, or any OpenAI-compatible model. Your main context stays clean.",
   "author": {
     "name": "muzam1l"

package/plugins/cursor/README.md

@@ -13,7 +13,7 @@
 - **Clean context.** Your conversation stays about intent and orchestration; implementation details live in the subagents.
 - **Fast dispatch.** Handoffs are instant, and light enough to spin up a large number of subagents at once.
 - **Steerable tasks.** Full visibility into every task, from live progress to mid-run course corrections.
-- **Unified permissions.** Three modes across all engines: _Read-only_, _Workspace-write_, and _Auto_.
+- **One access setting.** _Auto_ or _Read-only_, the same on every engine.
 
 ## Get started
 
@@ -58,8 +58,8 @@ Machine defaults live in `~/.coder/config.json`; a `coder.config.json` in a repo
 {
   "chain": ["codex", "claude"],
   "engines": {
-    "codex": { "model": "sol", "effort": "high", "permissions": "auto" },
-    "claude": { "model": "opus", "effort": "medium", "permissions": "auto" }
+    "codex": { "model": "sol", "effort": "high" },
+    "claude": { "model": "opus", "effort": "medium" }
   },
   "models": {
     "qwen": { "baseUrl": "http://localhost:11434/v1", "model": "qwen2.5-coder:32b" }

package/plugins/cursor/skills/coder/SKILL.md

@@ -13,7 +13,7 @@ You dispatch coding tasks through the `coder` runtime instead of implementing th
 
 ## Overview
 
-Coder delegates coding to supervised subagents of any model - Codex, Claude, or any OpenAI-compatible or local endpoint - from one runtime on every host. Implementation details live in the subagents, so your context stays clean and handoffs are instant. Every task runs sandboxed under unified permissions (read-only, workspace-write, auto), is steerable mid-run, and falls back down the configured chain when an engine cannot start.
+Coder delegates coding to supervised subagents of any model - Codex, Claude, or any OpenAI-compatible or local endpoint - from one runtime on every host. Implementation details live in the subagents, so your context stays clean and handoffs are instant. Every task runs sandboxed under one access setting (read-only or auto), is steerable mid-run, and falls back down the configured chain when an engine cannot start.
 
 ## Setup
 
@@ -21,7 +21,7 @@ If `coder` is not on PATH, install it yourself without asking: `npm install -g @
 
 ## Use Coder over MCP
 
-Each coder command is also an MCP tool with the same arguments, such as `task/run` or `flow/run`; `load_skill` loads a guide.
+Each coder command is also an MCP tool with the same arguments, such as `task/run` or `flow/run`; `load_skill` loads a doc.
 
 Setup: `coder setup-host` adds the server. By hand:
 
@@ -35,7 +35,7 @@ Restart running sessions after adding it.
 ## Using the CLI
 
 - The CLI is the reference. `coder --help` and every subcommand's `--help` list the flags and exit codes, and each command prints the recommended next step when it returns. Follow it.
-- `coder docs` lists the deeper guides; `coder docs <topic>` prints one.
+- `coder docs` lists the docs; `coder docs <topic>` prints one.
 - Wait on each task with `coder task result <task-id> --wait` in its own background shell, one per task, never several tasks in one call, so each approval and answer reaches you.
 - If Cursor asks before running `coder` commands, approve or allowlist `coder`; the runtime is a supervisor with its own sandbox and approval policy.
 

package/dist/actions-BT7_eKXm.js

@@ -1,10 +0,0 @@
-import{$ as e,A as t,At as n,Bt as r,C as i,D as a,E as o,En as s,I as c,K as l,L as u,M as d,O as f,Q as p,Sn as m,U as h,X as g,Z as _,at as v,d as y,et as b,f as x,it as S,j as ee,ot as te,p as ne,q as re,s as ie,v as ae,yn as oe}from"./errors-XBA-Ls4n.js";import{A as se,Ct as ce,G as le,H as C,J as w,Jt as T,K as E,M as D,N as O,St as k,Yt as A,Zt as j,at as M,it as N,jt as P,kt as F,nt as I,q as L,rt as R,st as z,yt as B}from"./output-D95NoAA9.js";import{i as V,r as H}from"./prompts-B8pKhMcu.js";import U from"node:path";import W from"node:process";import G from"node:fs";import K,{randomUUID as ue}from"node:crypto";import de from"node:readline";import fe from"node:http";function q(e){let t=[];typeof e.instructions==`string`&&e.instructions&&t.push({role:`system`,content:e.instructions});let n=Array.isArray(e.input)?e.input:[];for(let e of n)switch(e?.type){case`message`:{let n=Array.isArray(e.content)?e.content.map(e=>e?.text??``).join(``):String(e.content??``);t.push({role:e.role===`developer`?`system`:e.role,content:n});break}case`function_call`:{let n={id:e.call_id,type:`function`,function:{name:e.name,arguments:e.arguments??`{}`}},r=t.at(-1);r?.role===`assistant`&&r.tool_calls?r.tool_calls.push(n):t.push({role:`assistant`,content:null,tool_calls:[n]});break}case`function_call_output`:{let n=e.output;t.push({role:`tool`,tool_call_id:e.call_id,content:typeof n==`string`?n:JSON.stringify(n??``)});break}}return t}function pe(e){let t=(Array.isArray(e.tools)?e.tools:[]).filter(e=>e?.type===`function`).map(e=>({type:`function`,function:{name:e.name,description:e.description??``,parameters:e.parameters??{type:`object`,properties:{}}}})),n=e.text?.format;return{model:e.model,messages:q(e),...t.length?{tools:t,tool_choice:e.tool_choice??`auto`}:{},...typeof e.parallel_tool_calls==`boolean`?{parallel_tool_calls:e.parallel_tool_calls}:{},...n?.type===`json_schema`?{response_format:{type:`json_schema`,json_schema:{name:n.name,schema:n.schema,strict:n.strict??!1}}}:{},stream:!0,stream_options:{include_usage:!0}}}var me=class{send;model;responseId=`resp_bridge_${K.randomUUID()}`;text=``;textOpen=!1;toolCalls=new Map;usage=null;buffer=``;constructor(e,t){this.model=e,this.send=t,this.send({type:`response.created`,response:{id:this.responseId,object:`response`,status:`in_progress`,model:e,output:[]}})}push(e){this.buffer+=e;let t=this.buffer.split(`
-`);this.buffer=t.pop()??``;for(let e of t){let t=e.trim();if(!t.startsWith(`data:`))continue;let n=t.slice(5).trim();if(!n||n===`[DONE]`)continue;let r;try{r=JSON.parse(n)}catch{continue}r.usage&&(this.usage=r.usage);let i=r.choices?.[0]?.delta;if(i){typeof i.content==`string`&&i.content&&(this.textOpen||(this.textOpen=!0,this.send({type:`response.output_item.added`,output_index:0,item:{type:`message`,id:`msg_bridge_0`,status:`in_progress`,role:`assistant`,content:[]}})),this.text+=i.content,this.send({type:`response.output_text.delta`,item_id:`msg_bridge_0`,output_index:0,content_index:0,delta:i.content}));for(let e of i.tool_calls??[]){let t=this.toolCalls.get(e.index)??{id:``,name:``,args:``};e.id&&(t.id=e.id),e.function?.name&&(t.name+=e.function.name),e.function?.arguments&&(t.args+=e.function.arguments),this.toolCalls.set(e.index,t)}}}}finish(){let e=[];if(this.text){let t={type:`message`,id:`msg_bridge_0`,status:`completed`,role:`assistant`,content:[{type:`output_text`,text:this.text,annotations:[]}]};e.push(t),this.send({type:`response.output_item.done`,output_index:0,item:t})}let t=e.length;for(let n of this.toolCalls.values()){let r={type:`function_call`,id:`fc_bridge_${t}`,call_id:n.id||`call_bridge_${t}`,name:n.name,arguments:n.args||`{}`,status:`completed`};e.push(r),this.send({type:`response.output_item.done`,output_index:t,item:r}),t+=1}this.send({type:`response.completed`,response:{id:this.responseId,object:`response`,status:`completed`,model:this.model,output:e,usage:{input_tokens:this.usage?.prompt_tokens??0,input_tokens_details:{cached_tokens:this.usage?.prompt_tokens_details?.cached_tokens??0},output_tokens:this.usage?.completion_tokens??0,output_tokens_details:{reasoning_tokens:this.usage?.completion_tokens_details?.reasoning_tokens??0},total_tokens:this.usage?.total_tokens??0}}})}};async function J(e,t=`chat`){let n=t===`responses`,r=B(e.baseUrl,n?`responses`:`chat/completions`),i=null,a=!0,o=e.envKey?W.env[e.envKey]:void 0;async function s(e){let t=i?[i]:r,n=null;for(let r of t)if(n=await fetch(r,{method:`POST`,headers:{"content-type":`application/json`,...o?{authorization:`Bearer ${o}`}:{}},body:e}),n.status!==404)return i=r,n;return n}async function c(e){let t=e.text?.format,r=n?e:pe(e),i=()=>{let i=V(t.schema);if(n){let{format:t,...n}=e.text;return{...e,text:n,input:[...e.input??[],{type:`message`,role:`user`,content:[{type:`input_text`,text:i}]}]}}let{response_format:a,...o}=r;return{...o,messages:[...q(e),{role:`user`,content:i}]}};if(t?.type!==`json_schema`)return s(JSON.stringify(r));if(!a)return s(JSON.stringify(i()));let o=await s(JSON.stringify(r));if(![400,422,501].includes(o.status))return o;let c=await o.clone().text();return/(invalid.{0,30}schema|schema.{0,30}invalid|unsupported.{0,30}(keyword|constraint)|(keyword|constraint).{0,30}unsupported)/i.test(c)||!/(response_format|json_schema|text[.\s]format)/i.test(c)||!/(not supported|unsupported|unknown parameter|unrecognized|not available)/i.test(c)?o:(a=!1,await o.body?.cancel(),s(JSON.stringify(i())))}let l=K.randomBytes(16).toString(`hex`),u=fe.createServer((e,t)=>{if(e.method!==`POST`||!e.url?.startsWith(`/${l}/`)||!e.url.replace(/\/+$/,``).endsWith(`/responses`)){t.writeHead(404,{"content-type":`application/json`}),t.end(JSON.stringify({error:{message:`coder chat bridge: only POST /responses is supported`}}));return}let r=``;e.on(`data`,e=>r+=e),e.on(`end`,async()=>{let e;try{e=JSON.parse(r)}catch{t.writeHead(400,{"content-type":`application/json`}),t.end(JSON.stringify({error:{message:`invalid JSON`}}));return}try{if(n){let n=await c(e);if(t.writeHead(n.status,{"content-type":n.headers.get(`content-type`)??`application/json`,"cache-control":`no-store`}),n.body)for await(let e of n.body)t.write(e);t.end();return}let r=await c(e);if(!r.ok||!r.body){let e=await r.text().catch(()=>``);t.writeHead(r.status,{"content-type":`application/json`}),t.end(e||JSON.stringify({error:{message:`upstream HTTP ${r.status}`}}));return}t.writeHead(200,{"content-type":`text/event-stream`,"cache-control":`no-store`});let i=new me(e.model,e=>t.write(`data: ${JSON.stringify(e)}\n\n`)),a=new TextDecoder;for await(let e of r.body)i.push(a.decode(e,{stream:!0}));i.finish(),t.end()}catch(e){let n=e instanceof Error?e.message:String(e);t.writeHead(502,{"content-type":`application/json`}),t.end(JSON.stringify({error:{message:`coder chat bridge: ${n}`}}))}})});await new Promise(e=>u.listen(0,`127.0.0.1`,e));let d=u.address();return{url:`http://127.0.0.1:${typeof d==`object`&&d?d.port:0}/${l}/v1`,close:()=>new Promise(e=>{u.close(()=>e()),u.closeAllConnections?.()})}}const he=/^[A-Za-z0-9-]{1,128}$/;function Y(e){return[...new Set([...e.previousThreadIds??[],...e.threadId?[e.threadId]:[]])]}async function X(e,t){if(!/^[a-zA-Z0-9_-]+$/.test(t))return[];let n=e.engine===`claude`,r=n?L():v(),i=e.id?U.join(h(e.cwd??``,e.id),`history-files.json`):void 0,a=JSON.stringify([e.engine,r,t]),o=i?m(i)??{}:{},c=o[a];if(c?.length&&c.every(e=>e.startsWith(`${r}${U.sep}`)&&G.existsSync(e)))return c;let l=[],u=async(e,r)=>{for(let i of await G.promises.readdir(e,{withFileTypes:!0}).catch(()=>[])){let a=U.join(e,i.name);i.isDirectory()&&r?await u(a,r-1):i.isFile()&&(n?i.name===`${t}.jsonl`:i.name.endsWith(`-${t}.jsonl`))&&l.push(a)}};return n?await u(r,1):(await u(U.join(r,`sessions`),3),await u(U.join(r,`archived_sessions`),0)),i&&l.length&&s(i,{...o,[a]:l}),l}function ge(e,t){let n=t?e.message:e.type===`response_item`?e.payload:void 0;if(!n||!t&&n.type===`reasoning`)return;let r=n.content,i=Array.isArray(r)?r:[],a=n.role??(n.type?.endsWith(`_output`)?`tool`:`assistant`),o=i.filter(e=>e.type===`tool_use`).map(e=>String(e.id)),s=i.filter(e=>e.type===`tool_result`).map(e=>String(e.tool_use_id));[`function_call`,`custom_tool_call`].includes(n.type)&&o.push(String(n.call_id)),[`function_call_output`,`custom_tool_call_output`].includes(n.type)&&s.push(String(n.call_id));let c=typeof r==`string`?r:i.length?i.map(e=>typeof e.text==`string`?e.text:JSON.stringify(e)).join(`
-`):JSON.stringify(n);return{speaker:s.length&&!o.length?`tool`:a,time:String(e.timestamp??``),text:c,calls:o,results:s,startsExchange:a===`user`&&!s.length,reply:a===`assistant`&&(t?i.some(e=>e.type===`text`)||typeof r==`string`:n.type===`message`)}}async function*Z(e,t){for(let n of await X(e,t)){let t=G.createReadStream(n,{encoding:`utf8`}),r=de.createInterface({input:t,crlfDelay:1/0});try{for await(let t of r){let n;try{n=JSON.parse(t)}catch{continue}let r=ge(n,e.engine===`claude`);r&&(yield r)}}finally{r.close(),t.destroy()}}}async function _e(e,{exchanges:t=6,maxBytes:n=2e4}={}){if(!e.threadId)return{text:``,exchanges:0};let r=[],i=``,a=0,o=!1,s=new Set,c=()=>{if(a>n)r.length=0;else if(i&&o&&!s.size)for(r.push(i);r.length>t||Buffer.byteLength(r.join(`
-
-`))>n;)r.shift();i=``,a=0,o=!1,s.clear()};for await(let t of Z(e,e.threadId)){if(t.startsExchange&&!s.size&&c(),!i&&!t.startsExchange)continue;for(let e of t.calls)s.add(e);for(let e of t.results)s.delete(e);t.reply&&(o=!0);let e=`[${t.time}] ${t.speaker}\n${t.text}`;a+=Buffer.byteLength(e)+2,a<=n?i+=`${i?`
-
-`:``}${e}`:i=`[exchange exceeds the recent history budget]`}return a>n&&(i=``),c(),{text:r.join(`
-
-`),exchanges:r.length}}async function ve(e,{query:t,from:n=0,limit:r=10}={}){if(t!==void 0&&(typeof t!=`string`||!t.length||t.length>500))throw Error(`Provide a query of 1 to 500 characters`);if(!Number.isSafeInteger(n)||n<0)throw Error(`Provide from as a nonnegative message index`);if(!Number.isInteger(r)||r<1||r>20)throw Error(`Provide a limit of 1 to 20 messages`);let i=[],a=t?.toLowerCase(),o=0;for(let t of Y(e))for await(let s of Z(e,t)){let e=o++;if(e<n)continue;let t=a===void 0?0:s.text.toLowerCase().indexOf(a);if(t<0)continue;if(i.length===r)return{messages:i,next:i[i.length-1].index+1};let c=Math.max(0,t-200);i.push({index:e,speaker:s.speaker,time:s.time,text:s.text.slice(c,c+1200)})}return{messages:i}}function ye(e,t,r=e=>e){return async i=>({...n(Object.fromEntries(se(e,W.env,t).flatMap(e=>{let t=e.connection??e.name;return i.includes(t)?[[t,r(e)]]:[]}))),warnings:[]})}async function be(e,t,n,r,i={}){if(t.status!==`running`)return null;let a=t.engine===`claude`?await(i.claude??E)(t.steerEndpoint,n,void 0,r):await(i.codex??N)(e,{endpoint:t.steerEndpoint,threadId:t.threadId,turnId:t.turnId,text:n,command:r});if(a.steered)return y(e,t.id,{kind:`steer`,message:`${ie}${n}`}),{taskId:t.id,steered:`live`};if(!a.retryable)throw y(e,t.id,{kind:`error`,message:`Live steer failed: ${a.detail}`}),Error(`Could not steer running task ${t.id}: ${a.detail}`);return null}function xe(e,t,n){ae(e,t,n),y(e,t,{kind:`steer`,message:`Steer queued for the next turn:\n${n}`})}async function Q(e,t,n,r={},i={}){let a=f(e,t.id)??t;if(t=a.rollingOver?c(e,a):a,!t.threadId)throw new j(`invalid-option`,`Task ${t.id} has no thread to steer yet (status: ${t.status}).`,{hint:`Wait for it to start: coder task watch ${t.id}`});let o=await be(e,t,n,r.command,i);if(o){let n=f(e,t.id)??t;return n.archived&&g(e,n),o}return{taskId:t.id,steered:await Ce(e,t,n,r)}}function Se(e){let n=G.mkdtempSync(`${e}-`),r=`${W.pid}-${t(W.pid)??0}-${ue()}`;G.mkdirSync(U.join(n,r));try{for(let r=0;r<2;r++){try{return G.renameSync(n,e),!0}catch(e){if(![`EEXIST`,`ENOTEMPTY`,`ENOTDIR`].includes(e.code??``))throw e}try{if(G.statSync(e).isFile()){if(Date.now()-G.statSync(e).mtimeMs<6e4)return!1;G.unlinkSync(e);continue}for(let n of G.readdirSync(e)){let r=n.split(`-`),i=Number(r[0]),a=Number(r[1]),o=!1;if(Number.isInteger(i)&&i>0)try{W.kill(i,0),o=!0}catch(e){o=e.code===`EPERM`}let s=o?t(i):null;if(o&&(!a||s===null||s===a))return!1;G.rmdirSync(U.join(e,n))}G.rmdirSync(e)}catch(e){if(![`ENOENT`,`ENOTEMPTY`].includes(e.code??``))throw e}}return!1}finally{G.rmSync(n,{recursive:!0,force:!0})}}async function Ce(t,n,a,o){if(n.connectionSource===`server`&&!o.resolveConnections)throw Error(`Server connection resolver is required to resume this task`);let s=await p(t,n.id,()=>{let e=f(t,n.id)??n,r=[e?.completedAt,e?.resumedAt].map(e=>Date.parse(e??``)||0),o=U.join(h(t,n.id),`resume-${r.join(`-`)}`);if(e&&!e.steerClosed&&(b.includes(e.status)||e.rollingOver&&c(t,e).rollingOver||e.status===`completed`&&e.steerClosed===!1&&i(e.pid))||!Se(o)){e.archived&&g(t,e),xe(t,n.id,a);return}return{fresh:e,claim:o}});if(!s)return`queued`;let{fresh:l,claim:u}=s;n=l??n;let d=!1;try{for(let e of G.readdirSync(h(t,n.id)))/^resume-\d+-\d+$/.test(e)&&e!==U.basename(u)&&G.rmSync(U.join(h(t,n.id),e),{recursive:!0,force:!0});let i=n.agentId?await(await import(`./exec-iFssTO5V.js`).then(e=>e.i)).localAgentPrompt(t,n.agentId):void 0,s=o.resolveConnections?await o.resolveConnections(n.connections??[]):await r(void 0,n.connections??[],void 0,i?.access),c=n.mcp?.map(e=>{let t=e.connection??(e.resolved&&n.connections?.includes(e.name)?e.name:void 0);return t?{...e,connection:t,resolved:!1}:e})??[],l=n.mcpBindings??c.filter(e=>e.connection).map(({name:e,connection:t,tools:n})=>({name:e,connection:t,...n?{tools:n}:{}})),f=new Set(l.map(e=>e.connection)),p=D([...l,...c.filter(e=>!f.has(e.connection))],{},{},s.mcp);n.archived&&g(t,n),e(t,n.id,{...i?.developer&&n.promptParts?{promptParts:{...n.promptParts,developer:{...i.developer,notes:n.promptParts.developer?.notes}}}:{},mcp:p.mcp,mcpBindings:l,status:`queued`,pid:null,steerClosed:!1,resumedAt:new Date().toISOString(),currentPrompt:a,...o.outputSchema?{outputSchema:o.outputSchema}:{},resumeThreadId:n.threadId,steerEndpoint:null,model:o.model??n.model??null,effort:o.effort??n.effort??null,permissions:o.permissions??n.permissions,error:void 0}),d=!0,y(t,n.id,{kind:`steer`,message:`Resuming with steer:\n${a}`});for(let e of[...s.warnings,...p.warnings??[]])y(t,n.id,{kind:`status`,message:e});let m=O(n.cwd??t,n.id,s.env);o.onWorker?.(m)}catch(r){throw d&&e(t,n.id,{status:l?.status??n.status,resumedAt:l?.resumedAt,currentPrompt:l?.currentPrompt??null,resumeThreadId:l?.resumeThreadId??null,error:l?.error}),G.rmSync(U.join(h(t,n.id),U.basename(u)),{recursive:!0,force:!0}),r}return`resumed`}const we=[`Read`,`Glob`,`Grep`];function Te(e,t,n,r){return{prompt:n,model:r.model??e.model,effort:r.effort,permissions:`read-only`,additionalDirectories:[t],taskRoot:t,readOnlyAllowedTools:we}}async function Ee(e,t,n,r={}){let i=h(e,t.id),a=H(t,{log:U.join(i,`log.jsonl`),result:U.join(i,`result.json`),worker:U.join(i,`worker.log`)},n,r.command?z(r.command):void 0),o=r.command?e=>{let t=U.join(i,`inbox-control`);G.mkdirSync(t,{recursive:!0}),G.appendFileSync(U.join(t,`${z(r.command)}.transcript.jsonl`),JSON.stringify({command:r.command,result:e.finalMessage??e.error?.message??``})+`
-`)}:void 0,s=r.effort??t.effort??null;if(t.engine===`claude`)return le(t.cwd??e,{...Te(t,i,a,{model:r.model,effort:s}),command:r.command,onResult:o});let c=ce(e),l=r.model??t.model,u=l?c.models?.[l]:void 0,d=u&&k(u)?u:void 0;if(d?.envKey&&!W.env[d.envKey])throw Error(`Missing environment variable: \`${d.envKey}\`.`);let f=d?await J(d,d.wireApi??`chat`):null,p=P(c,l,f??void 0);try{return await R(t.cwd??e,{prompt:a,model:p?.model??F(l??null),modelProvider:p?.modelProvider??null,configOverrides:p?.configOverrides??null,effort:s,sandbox:`read-only`,approvalPolicy:`never`,ephemeral:!0,onResult:o})}finally{await f?.close()}}function De(e){return a(e).filter(e=>b.includes(e.status)).flatMap(t=>C(h(e,t.id)).filter(e=>!e.response).map(e=>({taskId:t.id,id:e.id,summary:String(e.summary??``),createdAt:e.createdAt?String(e.createdAt):void 0})))}function $(e){return a(e).filter(t=>!S.includes(t.status)||!x(Date.parse(t.completedAt??t.updatedAt??t.createdAt??``))||(ne(e,t,{auto:!0}),!1))}function Oe(e,t={}){let n=t.limit===`all`?void 0:t.limit,r=e=>S.includes(e.status),i=d(e),a=new Set(i.map(e=>e.id)),s=e=>e.filter(e=>!a.has(e.id)),c=[...s($(e)),...i.filter(e=>!e.archived)];if(t.archived?c=[...s(o(e)),...i.filter(e=>e.archived)]:t.running?c=c.filter(e=>b.includes(e.status)):t.stopped&&(c=c.filter(r)),t.dir){let e=l(U.resolve(String(t.dir))),n=new Map;c=c.filter(t=>t.cwd?(n.has(t.cwd)||n.set(t.cwd,l(t.cwd)),n.get(t.cwd)===e):!1)}let u=e=>({rank:A(e.status),createdAt:Date.parse(e.createdAt??``)||0,id:e.id});c=[...c].sort((e,t)=>T(u(e),u(t)));let f=n===void 0?0:Math.max(0,c.length-n);return n!==void 0&&(c=c.slice(0,n)),{tasks:c,clipped:f}}async function*ke(e,t,n={}){let r=_(e,t);try{let i=ee(),a=f(e,t);if(!a)throw Error(`No task found for "${t}".`);let o=n.tail??1,s=oe(U.join(h(e,t),`log.jsonl`)),l=!0,u=()=>{let e=s().map(e=>{try{return JSON.parse(e)}catch{return{message:e}}});return l?(l=!1,o===`all`?e:re(e,o)):e};for(yield*u();a=c(e,f(e,t)??a,i),!S.includes(a.status);)await r.wait(1e3),yield*u();yield*u()}finally{r.close()}}async function Ae(t,n,r={}){let i=n.engine===`claude`?{detail:`claude worker terminated`}:await(r.interrupt??I)(t,{endpoint:n.steerEndpoint,threadId:n.threadId,turnId:n.turnId});if(n.engine!==`claude`&&M(n.steerEndpoint),n.pid&&n.status===`running`)try{W.kill(n.pid,`SIGTERM`)}catch{}return e(t,n.id,{status:`cancelled`,error:`Stopped by user.`,steerEndpoint:null,completedAt:new Date().toISOString()}),{taskId:n.id,status:`cancelled`,interrupt:i.detail}}function je(e,t){for(let n of Y(t))t.engine===`claude`?w(n):te(e,n);return u(e,t.id)}export{ye as a,Ae as c,Y as d,ve as f,J as h,je as i,ke as l,X as m,De as n,$ as o,_e as p,Oe as r,Q as s,Ee as t,he as u};

package/dist/adapter-BT8ECcRG.js

@@ -1 +0,0 @@
-import{f as e,l as t,u as n}from"./slack-Bo5l13Rs.js";import{l as r}from"./dist-DAnSqY1s.js";import{createGitHubAdapter as i}from"./dist-B2jiMMxZ.js";function a(a){let o=a.credentials?.webhookSecret,s=a.installationId,c,l=i({userName:a.name,apiUrl:`https://api.github.com`,botUserId:0,installationToken:()=>s?c??=a.token(s,{tools:n.read}):Promise.reject(Error(`The webhook names no GitHub installation`)),webhookVerifier:(e,n)=>t(n,e.headers.get(`x-hub-signature-256`),o),logger:new r(`error`)});return e(l.octokit,a.fetch),l}export{a as githubAdapter};

package/dist/agent-BA6xr8QY.js

@@ -1,8 +0,0 @@
-import{qi as e}from"./core-DwsAMCnL.js";import{Zt as t}from"./output-D95NoAA9.js";import{o as n}from"./load-zhcrwSRF.js";import{r,t as i}from"./remote-CDm0YUU3.js";import{t as a}from"./types-D_xnfP7m.js";import{t as o}from"./integrations-DyInAa5g.js";import{l as s,r as c}from"./exec-iFssTO5V.js";import{c as l,o as u,u as d}from"./task-BU1JEK9X.js";import{r as f}from"./match-Bq4sDuCy.js";import p from"node:path";import m from"node:process";import h from"node:fs";import{spawn as g}from"node:child_process";import _ from"node:os";import v from"node:fs/promises";const y=[`SIGTERM`,`SIGINT`],b=/\x1b\[[0-9;?]*[ -/]*[@-~]|\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)|\x1b[()][A-Z0-9]|\r/g;function x(e,t){if(e===`codex`)return{file:`codex`,args:[`login`,`--device-auth`],env:{CODEX_HOME:t}};let n=`stty cols 4000 rows 50 2>/dev/null; exec claude setup-token`;return{file:`sh`,args:[`-c`,`cat | { ${m.platform===`darwin`?`script -q /dev/null sh -c '${n}'`:`script -qfec '${n}' /dev/null`}; kill 0; }`],env:{CLAUDE_CONFIG_DIR:t,BROWSER:`true`}}}function S(e){try{return JSON.parse(Buffer.from(String(e).split(`.`)[1]??``,`base64url`).toString())}catch{return{}}}function C(e){let t=S(JSON.parse(e).tokens?.id_token),n=t[`https://api.openai.com/auth`];return{...typeof t.email==`string`?{email:t.email}:{},...typeof n?.chatgpt_plan_type==`string`?{plan:n.chatgpt_plan_type}:{}}}function w(e,t){let n=t.replace(b,``),r=/\x1b\]8;[^;]*;(https:\/\/[^\x07\x1b]+)(?:\x07|\x1b\\)/.exec(t)?.[1],i=e===`claude`?r??/https:\/\/\S*(?:oauth|authorize)\S*(?=\s)/.exec(n)?.[0]:/https:\/\/\S+(?=\s)/.exec(n)?.[0],a=e===`codex`?/\b[A-Z0-9]{4,}-[A-Z0-9]{4,}\b/.exec(n)?.[0]:void 0;if(!(!i||e===`codex`&&!a))return{url:i,...a?{code:a}:{}}}const T=/sk-ant-oat[\w-]+/,E=e=>e.replace(/[\w#.%-]{20,}|\b[A-Z0-9]{4,}-[A-Z0-9]{4,}\b/g,`…`).slice(-600),D=/\x1b(?:\[([0-9;?<>=]*)[ -/]*([@-~])|\][^\x07\x1b]*(?:\x07|\x1b\\)|[()][\s\S]|[^[\]()])/y;var O=class{height;rows=[[]];row=0;col=0;saved=[0,0];rest=``;constructor(e=50){this.height=e}write(e){let t=this.rest+e;this.rest=``;for(let e=0;e<t.length;){if(t[e]===`\x1B`){D.lastIndex=e;let n=D.exec(t);if(!n){this.rest=t.slice(e,e+4096);return}n[2]&&!/^[?<>=]/.test(n[1])?this.csi(n[1].split(`;`),n[2]):n[0]===`\x1B7`?this.saved=[this.row,this.col]:n[0]===`\x1B8`&&([this.row,this.col]=this.saved),e+=n[0].length;continue}let n=t.codePointAt(e),r=String.fromCodePoint(n);e+=r.length,r===`\r`?this.col=0:r===`
-`?this.down():r===`\b`?this.col=Math.max(0,this.col-1):n>=32&&n!==127&&(this.line()[this.col++]=r)}}text(){return this.rows.map(e=>Array.from(e,e=>e??` `).join(``).trimEnd()).join(`
-`)}line(){return this.rows[this.row]??=[]}down(){this.row<this.height-1?this.row++:this.rows.splice(0,this.rows.length-this.height+1)}csi(e,t){let n=(t=0)=>Number(e[t])||1,r=Number(e[0])||0,i=this.height-1;if(t===`A`)this.row=Math.max(0,this.row-n());else if(t===`B`)this.row=Math.min(i,this.row+n());else if(t===`C`)this.col+=n();else if(t===`D`)this.col=Math.max(0,this.col-n());else if(t===`E`||t===`F`)this.row=Math.max(0,Math.min(i,this.row+(t===`E`?n():-n()))),this.col=0;else if(t===`G`)this.col=n()-1;else if(t===`d`)this.row=Math.min(i,n()-1);else if(t===`H`||t===`f`)this.row=Math.min(i,n()-1),this.col=n(1)-1;else if(t===`K`){let e=this.line();r===0?e.length=Math.min(e.length,this.col):r===1?e.fill(` `,0,this.col+1):e.length=0}else t===`J`?r===0?(this.line().length=Math.min(this.line().length,this.col),this.rows.length=Math.min(this.rows.length,this.row+1)):r>=2&&(this.rows=[]):t===`s`?this.saved=[this.row,this.col]:t===`u`&&([this.row,this.col]=this.saved)}};async function k(e,t){let{server:n,token:r}=d();delete m.env.CODER_TASK_TOKEN,delete m.env.CODER_LOGIN;let i=new AbortController,a=async(t,a)=>{let o=t?i.signal:void 0;for(let i=1;;i++){let s=await fetch(`${n}/logins/${encodeURIComponent(e)}${t}`,{method:a===void 0?`GET`:`POST`,...o?{signal:o}:{},headers:{authorization:`Bearer ${r}`,...a===void 0?{}:{"content-type":`application/json`}},...a===void 0?{}:{body:JSON.stringify(a)}}).catch(e=>{if(o?.aborted||t===`/input`||i>=10)throw e;console.error(`coder runner: Coder server did not answer: ${e.message}`)});if(s?.ok)return await s.json();if(s&&(s.status<500||i>=10))throw Error(`Coder server answered ${s.status}`);s&&console.error(`coder runner: Coder server answered ${s.status}`),await new Promise(e=>setTimeout(e,1e3))}},{engine:o}=await a(``),s=await v.mkdtemp(p.join(t,`.login-`)),c=x(o,s),l=g(c.file,c.args,{env:{...m.env,...c.env},stdio:[`pipe`,`pipe`,`pipe`],detached:!0}),u=()=>{try{m.kill(-l.pid,`SIGTERM`)}catch{}},f=``,h=new O,_=!1,S=!1,D=0,k,A,j,M=new Promise((e,t)=>{l.once(`error`,t),l.once(`close`,e)}),N=setTimeout(u,6e5);for(let e of y)m.once(e,u);let P=async()=>{for(;!i.signal.aborted;){let{code:e}=await a(`/input`);if(e){k=f.length,l.stdin.write(e),await new Promise(e=>setTimeout(e,500)),l.stdin.write(`\r`),m.stdout.write(`Sign-in code typed
-`);let t=k;setTimeout(()=>{k===t&&!_&&console.error(`coder runner: claude has not answered the code: ${JSON.stringify(E(h.text()))}`)},2e4).unref();return}}},F=e=>{if(f+=e,h.write(e),!S){let e=w(o,f.slice(D));e&&(S=!0,clearInterval(A),m.stdout.write(`Sign-in link ready
-`),a(``,e).catch(()=>u()),o===`claude`&&P().catch(()=>{i.signal.aborted||u()}))}o===`claude`&&!_&&T.test(h.text())&&(_=!0,m.stdout.write(`Sign-in token shown
-`),j=setTimeout(u,2e3)),(k===void 0?``:f.slice(k).replace(b,``).replace(/\s/g,``)).includes(`PressEntertoretry`)&&(m.stdout.write(`Sign-in code rejected; asking claude for a new link
-`),k=void 0,D=f.length,S=!1,A=setInterval(()=>l.stdin.write(`\r`),1e3))};l.stdout.setEncoding(`utf8`).on(`data`,F),l.stderr.setEncoding(`utf8`).on(`data`,F);try{let e=await M;i.abort();let t=h.text(),n=T.exec(t)?.[0];if(o===`claude`&&n){let e=/[\w.+-]+@[\w-]+(?:\.[\w-]+)+/.exec(t)?.[0];await a(``,{result:{env:{CLAUDE_CODE_OAUTH_TOKEN:n},...e?{account:{email:e}}:{}}})}else if(o===`codex`&&e===0){let e=await v.readFile(p.join(s,`auth.json`),`utf8`);await a(``,{result:{env:{CODEX_AUTH_JSON:e},account:C(e)}})}else console.error(`coder runner: ${o} sign-in ended (exit ${e}): ${JSON.stringify(E(t))}`),await a(``,{error:S?`Sign-in did not finish. Start again.`:`${o} sign-in could not start.`}).catch(()=>{});m.stdout.write(`Sign-in finished
-`)}finally{clearTimeout(N),clearTimeout(j),clearInterval(A);for(let e of y)m.off(e,u);i.abort(),u(),await v.rm(s,{recursive:!0,force:!0})}}var A=e({agentIdError:()=>P,agents:()=>z,regexError:()=>F});const j=e=>e.cwd?p.resolve(e.cwd):m.cwd(),M=e=>(Array.isArray(e)?e:(e??``).split(`,`)).map(e=>e.trim()).filter(Boolean),N=/^[a-z0-9][a-z0-9_-]*$/;function P(e,t){if(!N.test(t))return`Use lowercase letters, digits, - or _, starting with a letter or digit.`;let n=p.join(e,`.coder`,`agents`,t);if(h.existsSync(n)&&h.readdirSync(n).length>0)return`${p.relative(e,n)} is not empty; clear it to start over, or edit what is there.`}function F(e){try{new RegExp(e);return}catch{return`Not a valid regular expression.`}}function I(e,t){let n=o[e]?.sample;return{integration:e,type:t,appId:`${e}:sample`,installationId:`sample`,deliveryId:`sample-1`,actor:{id:`user-1`,login:`someone`,role:`member`},text:`Replace me with the text a real event would carry.`,...n?{chat:{thread:{_type:`chat:Thread`,adapterName:e,channelId:n.slice(0,n.lastIndexOf(`:`)),id:n,isDM:!1}}}:{}}}async function L(e,n={}){let r=j(n);if(!e&&n.askId&&(e=await n.askId(e=>P(r,e))),!e)throw new t(`invalid-option`,`Missing agent id.`,{hint:`Usage: coder agent init <id>`});let i=P(r,e);if(i)throw new t(`invalid-option`,i.includes(`not empty`)?i:`Agent id "${e}": ${i}`);let s=p.join(r,`.coder`,`agents`,e),c=n.askPicks?await n.askPicks(e):{...n.name?{name:n.name}:{},integrations:M(n.integrations).length?M(n.integrations):[Object.keys(o)[0]],events:{},matches:{},access:n.access??`write`};if(!a.includes(c.access))throw new t(`invalid-option`,`Unknown access "${c.access}"; valid: ${a.join(`, `)}`);let l={},u=M(n.events),d=e=>Object.keys(o[e]?.events??{});for(let e of c.integrations)if(!o[e])throw new t(`invalid-option`,`Unknown integration "${e}"; valid: ${Object.keys(o).join(`, `)}`);for(let e of u)if(!c.integrations.some(t=>d(t).includes(e)))throw new t(`invalid-option`,`No chosen integration has event "${e}".`,{hint:`Events per integration: coder agent integrations show <id>`});let f=Object.fromEntries(M(n.match).map(e=>{let n=e.indexOf(`=`);if(n<1)throw new t(`invalid-option`,`Bad --match "${e}"; use event=regex.`);let r=e.slice(n+1);if(F(r))throw new t(`invalid-option`,`Bad --match for ${e.slice(0,n)}: ${F(r)}`);return[e.slice(0,n),r]}));for(let e of c.integrations){let n=d(e),r=c.events[e]??(u.length?u.filter(e=>n.includes(e)):[n.includes(`mention`)?`mention`:n[0]]);for(let i of r)if(!n.includes(i))throw new t(`invalid-option`,`${e} has no event "${i}"; valid: ${n.join(`, `)}`);let i={...f,...c.matches[e]??{}},a=r.filter(e=>i[e]);r.length&&(l[e]={events:a.length?Object.fromEntries(r.map(e=>[e,!i[e]||{match:i[e]}])):r})}let m={...c.name?{name:c.name}:{},...n.description?{description:n.description}:{},permissions:n.permissions??`auto`,access:c.access,integrations:l};await v.mkdir(s,{recursive:!0}),await v.writeFile(p.join(s,`agent.json`),`${JSON.stringify(m,null,2)}\n`),await v.writeFile(p.join(s,`system.md`),``);let h=p.join(_.tmpdir(),`coder-agent-samples`,e),g=[];for(let[e,t]of Object.entries(l)){let n=(Array.isArray(t.events)?t.events:Object.keys(t.events??{}))[0];await v.mkdir(h,{recursive:!0});let r=p.join(h,`sample-${e}-${n}.json`);await v.writeFile(r,`${JSON.stringify(I(e,n),null,2)}\n`),g.push(r)}return{id:e,dir:s,files:[`agent.json`,`system.md`],samples:g,integrations:Object.keys(l)}}function R(e){if(e===void 0||typeof e==`number`)return e;if(/^\d+$/.test(e))return Number(e);let n=/^(\d+)([dh])$/.exec(e);if(!n)throw new t(`invalid-option`,`Invalid --since value.`,{hint:`Use 7d, 24h, or milliseconds since epoch`});return Date.now()-Number(n[1])*(n[2]===`d`?864e5:36e5)}const z={list:(e={})=>e.server===void 0?n(j(e),o):i(e).agents.list(),async show(e,r={}){if(!e)throw new t(`invalid-option`,`Missing agent id.`,{hint:`Usage: coder agent show <id>`});if(r.server===void 0){let i=(await n(j(r),o)).find(t=>t.id===e);if(!i)throw new t(`invalid-option`,`No agent named "${e}".`,{hint:`List agents: coder agent list`});return i}let a=i(r),s=await a.agents.get(e),c=await a.agents.version(e,s.currentVersion);return{...s,definition:c.definition}},init:L,push:(e,t={})=>r(i(t),j(t),e),async run(e,r,a={}){if(a.wait&&a.server===void 0)throw new t(`invalid-option`,`--wait needs --server.`,{hint:`Offline runs print their reply as they finish`});if(!e||!r)throw new t(`invalid-option`,`Missing agent id or event file.`,{hint:`Usage: coder agent run <agent> <event.json>`});let l=j(a),u=typeof r==`string`?JSON.parse(await v.readFile(p.resolve(l,r),`utf8`)):r;if(a.server!==void 0){let t=i(a),n=await t.tasks.create({agent:e,event:u});if(!a.wait||!n.tasks.length)return n;let r=[];for(let e of n.tasks){let n=await t.tasks.wait(e,{onLog:a.onLog});r.push(n),a.onDone?.(n)}return r}let d=await n(l,o),m=d.find(t=>t.id===e);if(!m)throw new t(`invalid-option`,`No agent named "${e}".`);let h=f(u,d).find(t=>t.agent.id===e),g=a.flow??h?.flow;if(!g)throw new t(`invalid-option`,`Agent "${e}" does not match event "${u.type}".`);return c({cwd:l,agent:e,flow:g,task:{...s(m,g,u),tools:{},...h?.permissions?{permissions:h.permissions}:{}},post:!1})},runTask(e,t={}){let n=j(t);return m.env.CODER_LOGIN?k(e,n):m.env.CODER_PREPARE?u(e,n):l(e,n)},async usage(e={}){if(e.by&&![`agent`,`installation`,`engine`].includes(e.by))throw new t(`invalid-option`,`Invalid --by value.`,{hint:`Use agent, installation, or engine`});let n=e.by;if(e.server!==void 0)return i(e).usage({since:R(e.since),by:n});let[{localUsage:r},{usageSummary:a}]=await Promise.all([import(`./apps-D-v5sQJk.js`).then(e=>e.Ft),import(`./apps-D-v5sQJk.js`).then(e=>e.wn)]);return a(r(j(e)).map(([,e])=>e),R(e.since)??0,n)},integrations:{list:()=>Object.entries(o).map(([e,t])=>({id:e,description:t.description,events:Object.keys(t.events),tools:t.tools.presets.write})),show(e){if(!e)throw new t(`invalid-option`,`Missing integration id.`,{hint:`Usage: coder agent integrations show <id>`});let n=o[e];if(!n)throw new t(`invalid-option`,`Unknown integration "${e}".`,{hint:`List integrations: coder agent integrations list`});return{id:e,events:Object.fromEntries(Object.entries(n.events).map(([e,t])=>[e,t.description])),tools:n.tools.presets}}}};export{z as n,A as t};