@wular/coder 0.4.12 → 0.5.0

package/dist/dash/standalone/server/modules-server-server-react-server/src/agent/event-json.856d33f567e58d0e.js

@@ -0,0 +1,30 @@
+export const unxml = (text) => text.replace(/&(amp|lt|gt);/g, (_, name) => ({
+	amp: "&",
+	lt: "<",
+	gt: ">"
+})[name]);
+/** Read event JSON, optionally alongside a turn's history or other text. */
+export function eventJsons(prompt = "", embedded = false) {
+	const event = /<event>\n([^]*?)\n<\/event>/g;
+	if (!embedded && (!prompt.trimStart().startsWith("<event>") || prompt.replace(event, "").trim())) return;
+	const events = [];
+	for (const [, body] of prompt.matchAll(event)) {
+		try {
+			const json = JSON.parse(unxml(body));
+			if (!json || typeof json !== "object" || Array.isArray(json)) {
+				if (!embedded) return;
+				continue;
+			}
+			events.push(json);
+		} catch (error) {
+			console.error("coder: unreadable event prompt", error);
+			if (!embedded) return;
+		}
+	}
+	return events.length ? events : undefined;
+}
+/** Any event in a turn or its live steers can require a reply. */
+export function replyRequired(prompt, fallback, steers = []) {
+	const asks = [prompt ?? "", ...steers].flatMap((text) => (eventJsons(text, true) ?? []).flatMap((json) => typeof json.mustReply === "boolean" ? [json.mustReply] : []));
+	return asks.length ? asks.includes(true) : fallback;
+}

package/dist/dash/standalone/server/modules-server-server-react-server/src/client/http.e78b470f4ecf125b.js

@@ -0,0 +1,58 @@
+/** Server URLs and Server-Sent Events parsing, free of dependencies so the dashboard imports it. */
+import { CoderError } from "../core/errors.200335e62a9d9564.js";
+export function isLoopbackServer(server) {
+	try {
+		const host = new URL(server).hostname.toLowerCase();
+		return host === "localhost" || host === "[::1]" || /^127(?:\.\d{1,3}){3}$/.test(host);
+	} catch {
+		return false;
+	}
+}
+/** A cloud task's server socket, served by its runner; none outside a cloud task. */
+export function taskSocket() {
+	const server = process.env.CODER_SERVER;
+	return process.env.CODER_MCP_MODE === "cloud" && server?.startsWith("unix:") ? server.slice("unix:".length) : undefined;
+}
+export function validateUrl(raw) {
+	let url;
+	try {
+		url = new URL(raw);
+	} catch {
+		throw new CoderError("invalid-option", "Give the server as a URL, e.g. https://agents.example.com.");
+	}
+	if (url.protocol !== "https:" && !(url.protocol === "http:" && isLoopbackServer(url.origin))) throw new CoderError("invalid-option", "Coder servers require HTTPS unless they are loopback.", { hint: "Use https://, or http://localhost for a local server." });
+	if (url.username || url.password || url.search || url.hash) throw new CoderError("invalid-option", "The server must be an origin without credentials, query, or fragment.");
+	return url.toString().replace(/\/+$/, "");
+}
+export const queryPath = (path, options) => {
+	const query = new URLSearchParams();
+	if ("cursor" in options && typeof options.cursor === "string") query.set("cursor", options.cursor);
+	for (const [key, value] of Object.entries(options)) if (key !== "cursor" && value !== undefined && value !== false && value !== "") query.set(key, value === true ? "1" : Array.isArray(value) ? value.join(",") : String(value));
+	return `${path}?${query}`;
+};
+/** Server-Sent Events from a response body, one `{ event, data }` per message. */
+export async function* serverEvents(body) {
+	const decoder = new TextDecoder();
+	let buffer = "";
+	for await (const chunk of body) {
+		buffer += decoder.decode(chunk, { stream: true });
+		let end;
+		while ((end = buffer.indexOf("\n\n")) >= 0) {
+			const block = buffer.slice(0, end);
+			buffer = buffer.slice(end + 2);
+			let event = "message";
+			let id;
+			const data = [];
+			for (const line of block.split("\n")) {
+				if (line.startsWith("event: ")) event = line.slice(7);
+				else if (line.startsWith("data: ")) data.push(line.slice(6));
+				else if (line.startsWith("id: ")) id = line.slice(4);
+			}
+			if (data.length || id) yield {
+				event,
+				data: data.join("\n"),
+				...id ? { id } : {}
+			};
+		}
+	}
+}

package/dist/dash/standalone/server/modules-server-server-react-server/src/client/{index.0de14cb4e30bd70d.js → index.54c45900f2153d34.js}

@@ -1,4 +1,5 @@
-import { CoderError } from "../core/errors.0a735590a5412ea6.js";
+import { CoderError } from "../core/errors.200335e62a9d9564.js";
+import { serverEvents, queryPath, validateUrl } from "./http.e78b470f4ecf125b.js";
 export class ClientError extends CoderError {
 	authenticate;
 	needs;
@@ -11,31 +12,6 @@ export class ClientError extends CoderError {
 		this.needs = needs;
 	}
 }
-export function isLoopbackServer(server) {
-	try {
-		const host = new URL(server).hostname.toLowerCase();
-		return host === "localhost" || host === "[::1]" || /^127(?:\.\d{1,3}){3}$/.test(host);
-	} catch {
-		return false;
-	}
-}
-export function validateUrl(raw) {
-	let url;
-	try {
-		url = new URL(raw);
-	} catch {
-		throw new CoderError("invalid-option", "Give the server as a URL, e.g. https://agents.example.com.");
-	}
-	if (url.protocol !== "https:" && !(url.protocol === "http:" && isLoopbackServer(url.origin))) throw new CoderError("invalid-option", "Coder servers require HTTPS unless they are loopback.", { hint: "Use https://, or http://localhost for a local server." });
-	if (url.username || url.password || url.search || url.hash) throw new CoderError("invalid-option", "The server must be an origin without credentials, query, or fragment.");
-	return url.toString().replace(/\/+$/, "");
-}
-const queryPath = (path, options) => {
-	const query = new URLSearchParams();
-	if ("cursor" in options && typeof options.cursor === "string") query.set("cursor", options.cursor);
-	for (const [key, value] of Object.entries(options)) if (key !== "cursor" && value !== undefined && value !== false && value !== "") query.set(key, value === true ? "1" : Array.isArray(value) ? value.join(",") : String(value));
-	return `${path}?${query}`;
-};
 const DONE = new Set([
 	"completed",
 	"failed",
@@ -82,6 +58,15 @@ export class ServerClient {
 			if (response.ok) throw new CoderError("server", `The server answered ${response.status} with a body that is not JSON.`);
 			if (this.cookie && text) plain = text;
 		}
+		// 202 Accepted: the change waits for a person to approve it.
+		if (response.status === 202 && body.pending) {
+			const { approval, reason, changes } = body;
+			throw new CoderError("approval-pending", reason, { approval: {
+				id: approval,
+				reason,
+				actions: changes
+			} });
+		}
 		if (!response.ok) {
 			const error = new ClientError(response.status, body.error ?? body.message ?? plain ?? `The server answered ${response.status}.`, response.headers.get("www-authenticate") ?? "", body.hint, body.needs === "key" ? body.needs : undefined);
 			this.onError?.(error);
@@ -92,7 +77,7 @@ export class ServerClient {
 	send(path, init) {
 		const headers = new Headers(init.headers);
 		if (init.body && !headers.has("content-type")) headers.set("content-type", "application/json");
-		if (!this.cookie) headers.set("authorization", `Bearer ${this.token}`);
+		if (this.token) headers.set("authorization", `Bearer ${this.token}`);
 		if (this.organization) headers.set("x-coder-organization", this.organization);
 		return this.fetchImpl(`${this.url}${path}`, {
 			...init,
@@ -113,24 +98,16 @@ export class ServerClient {
 	me() {
 		return this.request("/me");
 	}
-	info() {
-		return this.request("/api/auth/capabilities");
-	}
-	linkAccount(token) {
-		return this.post("/connect", { token });
-	}
 	signOut() {
 		return this.post("/api/auth/sign-out", {});
 	}
 	agents = {
-		list: (options) => this.request(queryPath("/admin/agents", {
-			...options,
-			...options?.connect ? { connect: 1 } : {}
-		})),
+		list: (options) => this.request(queryPath("/admin/agents", options ?? {})),
 		get: (slug, options) => this.request(queryPath(`/admin/agents/${encodeURIComponent(slug)}`, {
 			...options?.versions === false ? { versions: 0 } : {},
 			...options?.content === false ? { content: 0 } : {},
-			...options?.handles ? { handles: 1 } : {}
+			...options?.handles ? { handles: 1 } : {},
+			...options?.installations ? { installations: 1 } : {}
 		})),
 		versions: (slug, options = {}) => this.request(queryPath(`/admin/agents/${encodeURIComponent(slug)}/versions`, options)),
 		remove: (slug) => this.request(`/admin/agents/${encodeURIComponent(slug)}`, { method: "DELETE" }),
@@ -177,7 +154,8 @@ export class ServerClient {
 			...options,
 			...options?.archived ? { archived: 1 } : {},
 			...options?.summary ? { summary: 1 } : {},
-			...options?.counts ? { counts: 1 } : {}
+			...options?.counts ? { counts: 1 } : {},
+			...options?.approvals ? { approvals: 1 } : {}
 		})),
 		get: (id) => this.request(`/admin/tasks/${encodeURIComponent(id)}`),
 		logs: (id, after = -1, limit) => this.request(queryPath(`/admin/tasks/${encodeURIComponent(id)}/logs`, {
@@ -202,20 +180,32 @@ export class ServerClient {
 			text,
 			...options
 		}),
-		ask: (id, question) => this.post(`/admin/tasks/${encodeURIComponent(id)}/ask`, { question }),
-		approve: (id, approvalId, decision) => this.post(`/admin/tasks/${encodeURIComponent(id)}/approve`, {
+		ask: (id, question, options = {}) => this.post(`/admin/tasks/${encodeURIComponent(id)}/ask`, {
+			question,
+			...options
+		}),
+		approve: (id, approvalId, decision, options = {}) => this.post(`/admin/tasks/${encodeURIComponent(id)}/approve`, {
 			approvalId,
-			decision
+			decision,
+			...options
 		}),
+		/** Approve, deny or ask an admin about a change the task asked for; `scope` where the approver picks another. */
+		request: (id, approvalId, decision, options = {}) => this.post(`/admin/tasks/${encodeURIComponent(id)}/requests/${encodeURIComponent(approvalId)}`, {
+			decision,
+			...options
+		}),
+		/** Changes waiting for an admin's approval. */
+		pendingApprovals: () => this.request("/admin/approvals/pending"),
 		archive: (id) => this.post(`/admin/tasks/${encodeURIComponent(id)}/archive`),
 		delete: (id) => this.request(`/admin/tasks/${encodeURIComponent(id)}`, { method: "DELETE" }),
 		/** Start a task from a prompt, or a flow with `flow` and `args`. */
 		create: (input) => this.post("/admin/tasks", input),
-		/** Follow the task's event stream until it ends; `onLog` sees each log line as it lands. */
+		/** Follow the task's event stream until it ends or waits on an approval; `onLog` sees each log line as it lands. */
 		wait: async (id, options = {}) => {
 			let after = -1;
 			for (;;) {
-				const response = await this.tasks.stream(id, after);
+				const abort = new AbortController();
+				const response = await this.tasks.stream(id, after, abort.signal);
 				if (!response.ok || !response.body) {
 					// `get` renews an expired token before the stream is asked again.
 					const status = await this.tasks.get(id);
@@ -229,8 +219,12 @@ export class ServerClient {
 						const line = JSON.parse(event.data);
 						after = line.seq;
 						options.onLog?.(line);
-					} else if (event.event === "end") ended = true;
+					} else if (event.event === "end" || event.event === "approval") {
+						ended = true;
+						break;
+					}
 				}
+				// Leaving the loop cancels the body; aborting first surfaces as "This operation was aborted".
 				if (ended) return this.tasks.get(id);
 			}
 		}
@@ -294,13 +288,21 @@ list: (agent) => this.request(queryPath("/admin/integrations", { agent })) };
 		apps: () => this.request("/admin/operator/apps"),
 		/** The create page for `integration`'s built-in app; `name` is what the platform shows. */
 		setUp: (integration, body) => this.post(`/admin/operator/apps/${encodeURIComponent(integration)}`, body),
-		audit: () => this.request("/admin/operator/audit")
+		audit: () => this.request("/admin/operator/audit"),
+		/** What to change on the platform for the built-in app on `integration`. */
+		drift: (integration) => this.request(`/admin/operator/apps/${encodeURIComponent(integration)}/drift`),
+		/** Pushes the built-in app on `integration`, or records its values were entered by hand. */
+		update: (integration) => this.post(`/admin/operator/apps/${encodeURIComponent(integration)}/update`, {})
+	};
+	installations = {
+		list: (agent, options = {}) => this.request(queryPath("/admin/installations", {
+			agent,
+			limit: options.limit,
+			...options.active ? { active: 1 } : {}
+		})),
+		/** Uninstalls the app on its platform, then ends the installation here. */
+		uninstall: (id) => this.request(`/admin/installations/${encodeURIComponent(id)}`, { method: "DELETE" })
 	};
-	installations = { list: (agent, options = {}) => this.request(queryPath("/admin/installations", {
-		agent,
-		limit: options.limit,
-		...options.active ? { active: 1 } : {}
-	})) };
 	connections = {
 		list: (authorization, wait) => this.request(queryPath("/admin/connections", {
 			authorization,
@@ -329,6 +331,10 @@ list: (agent) => this.request(queryPath("/admin/integrations", { agent })) };
 		add: (body) => this.post("/admin/models", body),
 		probe: (body) => this.post("/admin/models/probe", body),
 		remove: (name) => this.request(`/admin/models/${encodeURIComponent(name)}`, { method: "DELETE" }),
+		update: (name, body) => this.request(`/admin/models/${encodeURIComponent(name)}`, {
+			method: "PATCH",
+			body: JSON.stringify(body)
+		}),
 		alias: (name, spec) => this.post(`/admin/models/${encodeURIComponent(name)}/alias`, { spec }),
 		enable: (name) => this.post(`/admin/models/${encodeURIComponent(name)}/enable`),
 		disable: (name) => this.post(`/admin/models/${encodeURIComponent(name)}/disable`)
@@ -352,29 +358,3 @@ list: (agent) => this.request(queryPath("/admin/integrations", { agent })) };
 		return this.request(queryPath("/admin/usage", { installation }));
 	}
 }
-/** Server-Sent Events from a response body, one `{ event, data }` per message. */
-export async function* serverEvents(body) {
-	const decoder = new TextDecoder();
-	let buffer = "";
-	for await (const chunk of body) {
-		buffer += decoder.decode(chunk, { stream: true });
-		let end;
-		while ((end = buffer.indexOf("\n\n")) >= 0) {
-			const block = buffer.slice(0, end);
-			buffer = buffer.slice(end + 2);
-			let event = "message";
-			let id;
-			const data = [];
-			for (const line of block.split("\n")) {
-				if (line.startsWith("event: ")) event = line.slice(7);
-				else if (line.startsWith("data: ")) data.push(line.slice(6));
-				else if (line.startsWith("id: ")) id = line.slice(4);
-			}
-			if (data.length || id) yield {
-				event,
-				data: data.join("\n"),
-				...id ? { id } : {}
-			};
-		}
-	}
-}

package/dist/dash/standalone/server/modules-server-server-react-server/src/core/task/{log-view.60308a11f7001eb7.js → view.e20379d8f741754a.js}

@@ -1,3 +1,10 @@
+import { eventJsons } from "../../agent/event-json.856d33f567e58d0e.js";
+/** The final message that posts nothing. */
+export const EMPTY_MESSAGE = "__EMPTY__";
+/** The task log line when the agent declined to reply. */
+export const SKIPPED = "Skipped: the agent chose not to reply.";
+/** What the platform gets when the agent declined a reply that was due. */
+export const EMPTY_MESSAGE_NOTICE = "The agent returned no reply.";
 export function addTokens(a, b) {
 	if (!b) return a;
 	if (!a) return { ...b };
@@ -8,7 +15,12 @@ export function addTokens(a, b) {
 		total: a.total + b.total
 	};
 }
-export const isApproval = (kind) => kind.includes("approval") || kind === "sidecar-decision" || kind === "auto-review";
+export const isApproval = (kind) => [
+	"approval-escalated",
+	"approval-answered",
+	"approval-decision",
+	"auto-review"
+].includes(kind);
 const ANSI = /\x1b\[[0-9;?]*[ -/]*[@-~]|\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)/g;
 export function stripCwd(text, cwd) {
 	return cwd ? text.split(`${cwd}/`).join("").split(cwd).join(".") : text;
@@ -40,7 +52,6 @@ export class LogView {
 	openCalls = [];
 	// Engine invocation ids, so concurrent calls of one tool close with their own results.
 	callIds = new WeakMap();
-	approval;
 	approvals = new Map();
 	lastUsageTotal = 0;
 	constructor(cwd, opts = {}) {
@@ -54,7 +65,7 @@ export class LogView {
 	reduce(record) {
 		const entry = record.entry;
 		const sourceKind = entry ? String(entry.kind ?? "status") : "line";
-		const earlier = !entry ? undefined : sourceKind === "tool-result" ? this.close(record, entry) : isApproval(sourceKind) ? this.decide(record, entry, sourceKind) : undefined;
+		const earlier = !entry ? undefined : sourceKind === "tool-result" ? this.close(record, entry) : sourceKind === "approval-answered" ? this.decide(record, entry) : undefined;
 		if (earlier) {
 			this.prevKind = sourceKind;
 			return [earlier];
@@ -84,30 +95,41 @@ export class LogView {
 			this.lastUsageTotal = tokens.total;
 			row.kind = "usage";
 			row.tokens = tokens;
-			row.title = `ctx ${tokenCount(tokens.input + tokens.cachedInput)} · out ${tokenCount(tokens.output)}`;
-		} else if (sourceKind === "approval-decision" && entry.decision === "escalate" || sourceKind === "approval-escalated") {
-			const summary = stripCwd(entry.summary ? String(entry.summary) : "", this.cwd);
-			const target = /^(?:run command: |Run command\. |Apply file changes\. |\w+: )?([\s\S]*)$/.exec(summary)[1];
-			const method = String(entry.method ?? "");
-			const name = method && !method.includes("/") ? method : this.openCalls.at(-1)?.tool;
-			const word = target.startsWith("{") ? "" : target.split(/\s+/)[0];
+			// The engine's last request is the context; the turn's summed input overstates it (codex counts cached input twice over).
+			const context = typeof entry.context === "number" ? entry.context : tokens.input + tokens.cachedInput;
+			row.title = `ctx ${tokenCount(context)} · out ${tokenCount(tokens.output)}`;
+		} else if (sourceKind === "approval-escalated") {
+			const actions = Array.isArray(entry.actions) ? entry.actions.map(String) : [];
 			const reason = stripCwd(entry.reason ? String(entry.reason) : "", this.cwd);
 			row.kind = "approval";
-			row.title = ["Approval", [name, word].filter(Boolean).join(" ")].filter(Boolean).join(" · ");
-			row.detail = [target, reason && `Policy · ${reason}`].filter(Boolean).join("\n");
-			row.state = sourceKind === "approval-escalated" ? "waiting" : "escalated";
-			if (sourceKind === "approval-escalated") this.approvals.set(String(entry.approvalId), row);
-			else this.approval = row;
-		} else if (isApproval(sourceKind) && (entry.decision || !entry.message)) {
+			row.title = [
+				"Approval needed",
+				reason,
+				`${actions.length} action${actions.length === 1 ? "" : "s"}`
+			].filter(Boolean).join(" · ");
+			row.detail = stripCwd(actions.map((action, index) => `${index + 1}. ${action.replaceAll("\n", "\n   ")}`).join("\n"), this.cwd);
+			row.state = "waiting";
+			this.approvals.set(String(entry.approvalId), row);
+		} else if (sourceKind === "approval-answered") {
+			row.kind = "approval";
+			row.title = "Approval";
+			Object.assign(row, settle(row, record, entry));
+		} else if (sourceKind === "approval-decision") {
+			const summary = stripCwd(entry.summary ? String(entry.summary) : "", this.cwd);
+			const allowed = entry.decision === "accept";
+			row.kind = "approval";
+			row.title = [allowed ? "Allowed as approved" : "Refused by the reviewer", summary].filter(Boolean).join(" · ");
+			row.detail = stripCwd(entry.reason ? String(entry.reason) : "", this.cwd);
+			if (!allowed) row.tone = "error";
+		} else if (sourceKind === "auto-review") {
 			row.kind = "approval";
-			const label = sourceKind === "sidecar-decision" ? "sidecar" : sourceKind === "auto-review" ? "auto-review" : "approval";
 			const risk = entry.riskLevel ? `(${String(entry.riskLevel)} risk)` : "";
 			const summary = stripCwd(entry.summary ? String(entry.summary) : "", this.cwd);
 			const target = summary.slice(summary.indexOf(": ") + 2);
 			const shown = summary && target && this.lastToolText.includes(target) ? "" : summary;
 			const method = shown ? "" : String(entry.method ?? "");
 			row.title = `${[
-				label,
+				"auto-review",
 				String(entry.decision ?? ""),
 				risk,
 				method
@@ -124,6 +146,8 @@ export class LogView {
 			} else if (sourceKind === "error" || sourceKind === "steer") {
 				row.kind = sourceKind;
 				row.tone = sourceKind === "error" ? "error" : "warning";
+			} else if (sourceKind === "warning") {
+				row.tone = "warning";
 			} else if (sourceKind === "reasoning") {
 				row.kind = "reasoning";
 				row.durationMs = typeof entry.durationMs === "number" ? entry.durationMs : 0;
@@ -172,46 +196,23 @@ export class LogView {
 			}
 		};
 	}
-	// Sidecar verdicts and escalations follow the policy verdict before them; answers carry the approval id.
-	decide(record, entry, kind) {
-		const id = String(entry.approvalId ?? "");
-		const accepted = entry.decision === "accept";
-		if (kind === "sidecar-decision" && this.approval) {
-			const reason = stripCwd(entry.reason ? String(entry.reason) : "", this.cwd);
-			const row = {
-				...this.approval,
-				detail: [this.approval.detail, reason && `Sidecar · ${reason}`].filter(Boolean).join("\n")
-			};
-			if (entry.decision === "escalate") return this.approval = row;
-			this.approval = undefined;
-			return settle(row, record, `${accepted ? "accepted" : "denied"} by sidecar`, accepted);
-		}
-		if (kind === "approval-escalated" && this.approval) {
-			const row = {
-				...this.approval,
-				state: "waiting"
-			};
-			this.approval = undefined;
-			this.approvals.set(id, row);
-			return row;
-		}
-		const open = this.approvals.get(id);
-		if (!open || kind !== "approval-answered" && kind !== "approval-timeout") return undefined;
-		this.approvals.delete(id);
-		return kind === "approval-timeout" ? settle(open, record, "timed out", false) : settle(open, record, `${accepted ? "accepted" : "denied"} by reviewer`, accepted);
+	decide(record, entry) {
+		const open = this.approvals.get(String(entry.approvalId));
+		return open ? settle(open, record, entry) : undefined;
 	}
 	output(text) {
 		return stripCwd(this.opts.keepAnsi ? text : text.replace(ANSI, ""), this.cwd);
 	}
 }
-function settle(row, record, state, ok) {
+function settle(row, record, entry) {
+	const ok = entry.decision === "accept";
 	return {
 		...row,
-		state,
+		state: `${ok ? "approved" : "denied"} ${entry.by ? `by ${String(entry.by)}` : "in Coder"}`,
 		result: {
 			ok,
 			durationMs: Math.max(0, record.at - row.at || 0),
-			detail: ""
+			detail: !ok && entry.reason ? String(entry.reason) : ""
 		}
 	};
 }
@@ -220,3 +221,32 @@ function tokenCount(n) {
 	if (n < 1e6) return `${(n / 1e3).toFixed(n < 1e4 ? 1 : 0)}k`;
 	return `${(n / 1e6).toFixed(1)}M`;
 }
+/** The default task list's groups: failed first, then active, then other stopped, then completed. */
+export const listRank = (status) => status === "failed" ? 0 : status === "completed" ? 3 : status === "cancelled" ? 2 : 1;
+/** Whether a task waits on a person: its turn waits, or an escalation is open whatever its turn does. */
+export const awaitsApproval = (status, approvals) => status === "waiting" || Boolean(approvals?.some((approval) => !approval.response));
+/** Ids in byte order, as Postgres `collate "C"` compares them. */
+export const byId = (a, b) => a < b ? -1 : a > b ? 1 : 0;
+/** The task list order: `listRank` groups, newest start first, ties broken by id. */
+export const byListKey = (a, b) => a.rank - b.rank || b.createdAt - a.createdAt || byId(b.id, a.id);
+/** A platform turn's messages from its `<event>` prompt; undefined for any other prompt. */
+export function eventMessages(prompt) {
+	return eventJsons(prompt)?.flatMap((json) => {
+		if (json.reactions) return json.reactions.map(({ emoji, by }) => ({
+			author: by.join(", "),
+			text: `reacted ${emoji}`,
+			reaction: true
+		}));
+		return (json.messages ?? (json.message ? [json.message] : [])).map(({ text, author }) => ({
+			// A platform that knows no name repeats the raw id, which shows as nothing.
+			author: [author.handle, author.name].find((name) => name && name !== author.id) ?? "",
+			text: text || (json.event ?? "")
+		}));
+	});
+}
+/** A prompt as a title: a platform prompt by its event text, else its first message. */
+export function promptTitle(prompt, eventText) {
+	const text = prompt?.trim();
+	if (text && !eventMessages(text)) return text;
+	return eventText?.trim() || eventMessages(text)?.find((message) => !message.reaction)?.text.trim();
+}

package/dist/dash/standalone/server/modules-server-server-react-server/src/core/types.5bf5a41cedb54154.js

@@ -0,0 +1,37 @@
+/** Built-in config every file and flag merges over; import-free so the shipped dashboard can read it. */
+export const DEFAULT_CONFIG = {
+	// Models are tried in order; the first is the default, each next one the fallback
+	// when the one before fails to start (missing binary, auth, quota, rate limit).
+	version: 1,
+	chain: ["codex/sol", "claude/opus"],
+	reviewModel: "codex/astra/medium",
+	models: {},
+	network: { allowedHosts: [] }
+};
+/** RFC 7396 merge patch: objects merge, null deletes, anything else replaces; `__proto__` stays a plain key. */
+export function mergePatch(target, patch) {
+	if (!patch || typeof patch !== "object" || Array.isArray(patch)) return patch;
+	const result = target && typeof target === "object" && !Array.isArray(target) ? Object.fromEntries(Object.entries(target)) : {};
+	for (const [key, value] of Object.entries(patch)) {
+		if (value === null) delete result[key];
+		else Object.defineProperty(result, key, {
+			value: mergePatch(Object.hasOwn(result, key) ? result[key] : undefined, value),
+			writable: true,
+			enumerable: true,
+			configurable: true
+		});
+	}
+	return result;
+}
+export const NOT_REINVOKED = "Background processes will not re-invoke you.";
+export const SHELL_WAIT = "Wait on each task with `coder task result <task-id> --wait` in its own background shell, one per task, never several tasks in one call, so each approval and answer reaches you.";
+/** The error a task stopped by `coder task stop` or the dashboard records. */
+export const STOPPED_BY_USER = "Stopped by user.";
+export const TERMINAL_STATUSES = [
+	"completed",
+	"failed",
+	"cancelled"
+];
+export const ACTIVE_STATUSES = ["queued", "running"];
+/** Logged when a resumed turn cannot load its engine conversation and starts a new one. */
+export const HISTORY_LOST = "History lost, starting fresh";

package/dist/dash/standalone/server/modules-server-server-react-server/src/server/dash/api/{load.be791a5eaf328738.js → load.252f972b42c690e2.js}

@@ -1,10 +1,21 @@
-import { ServerClient, ClientError } from "../../../client/index.0de14cb4e30bd70d.js";
-import { CoderError } from "../../../core/errors.0a735590a5412ea6.js";
-import { DEFAULT_ENGINE } from "../../../core/defaults.1b615366c56838a1.js";
-import { NO_MODELS, modelsByEngine } from "../app/dash/[org]/settings/model-options.a96c11d11674f598.js";
+import { ServerClient, ClientError } from "../../../client/index.54c45900f2153d34.js";
+import { CoderError } from "../../../core/errors.200335e62a9d9564.js";
+import { NO_MODELS } from "../app/dash/[org]/settings/model-options.dc630cb6e2cbf83a.js";
 export function encodeDefinition(definition) {
 	return Buffer.from(JSON.stringify(definition), "utf8").toString("base64url");
 }
+/** Where creating `agent`'s app on `integration` starts; a repo agent's app follows its apps' branch. */
+export function createUrl(agent, apps, integration) {
+	const params = new URLSearchParams({
+		agent: agent.id,
+		def: agent.definition ? encodeDefinition(agent.definition) : ""
+	});
+	if (agent.source === "repo" && agent.repo) {
+		params.set("repo", agent.repo);
+		params.set("branch", apps.find((app) => app.branch)?.branch ?? "main");
+	}
+	return `/create/${encodeURIComponent(integration)}?${params}`;
+}
 const clientKey = Symbol("coder.dashboard.client");
 /** One client per render request, with shared in-process GETs and the caller's cookie, scope and organization. */
 export function load(request) {
@@ -50,14 +61,10 @@ export function loadAgent(request, slug) {
 		handles: true
 	});
 }
-/** Each engine's models, and what an agent runs with when it sets nothing. */
+/** The workspace's models, and the chain an agent runs when it sets no model. */
 export function loadRunDefaults(request) {
 	return Promise.all([load(request).models.list().catch(() => NO_MODELS), load(request).config.get().catch(() => undefined)]).then(([shape, shown]) => ({
-		models: modelsByEngine(shape),
-		defaults: {
-			engine: shown?.effective.chain?.[0] ?? DEFAULT_ENGINE,
-			engines: shown?.effective.engines ?? {},
-			builtin: shape.builtin
-		}
+		shape,
+		defaults: { chain: shown?.effective.chain ?? [] }
 	}));
 }

package/dist/dash/standalone/server/modules-server-server-react-server/src/server/dash/app/create/[id]/{page.70913bd4075da914.js → page.11efd0e175db9053.js}

@@ -1,11 +1,14 @@
 import { dynamic } from "../../../../../../../../node_modules/@wular/pnext/src/api/dynamic.tsx";
+import { redirect } from "../../../../../../../../node_modules/@wular/pnext/src/api/navigation.ts";
+import { load } from "../../../api/load.252f972b42c690e2.js";
 import { AuthPanel } from "../../../comps/frame/auth-panel.5712a8d190b003b4.js";
-import { Outcome, readOutcome } from "../../dash/[org]/setup/outcome.cbbc8cd1bbbee01b.js";
+import { Button, LinkButton } from "../../../comps/ui/button.b62fa52e18fa338b.js";
+import { Outcome, readOutcome } from "../../dash/[org]/setup/outcome.22a83d756e4020a7.js";
 import { jsx as _jsx } from "../../../../../../../../node_modules/preact/jsx-runtime/dist/jsxRuntime.mjs";
-const CreateLink = dynamic(() => import("../../dash/[org]/setup/create-link.ff95e4b6977d0474.js").then((m) => m.CreateLink), undefined, {
+const CreateLink = dynamic(() => import("../../dash/[org]/setup/create-link.18bd2b92cd23b73f.js").then((m) => m.CreateLink), undefined, {
 	"file": decodeURIComponent(new URL("../../../../../../../../../../../src/server/dash/app/dash/[org]/setup/create-link.tsx", import.meta.url).pathname),
 	"exportName": "CreateLink",
-	"id": "c-1b8b8de475"
+	"id": "c-da3eb23c73"
 });
 /** A signed link from `coder server app create`: its transaction alone authorizes it, with no workspace, and shows how it ended. */
 export default async function ServerAppPage({ request, params }) {
@@ -14,13 +17,30 @@ export default async function ServerAppPage({ request, params }) {
 	const integration = Array.isArray(raw) ? raw[0] : raw;
 	const search = new URL(request.url).searchParams;
 	const outcome = readOutcome(search);
+	// Signed in: where the app is connected next; a link from the CLI may come without a session.
+	const me = outcome ? await load(request).me().catch(() => undefined) : undefined;
+	const org = me?.organization?.slug;
+	// An operator ends on the Operator page with the outcome as a dialog; the panel is for links opened without one.
+	if (outcome && org && me?.operator) {
+		const query = new URLSearchParams(search);
+		query.delete("tx");
+		redirect(`/dash/${encodeURIComponent(org)}/operator?${query}`);
+	}
 	return /* @__PURE__ */ _jsx(AuthPanel, {
 		tag: "server app",
 		title: "Create app",
 		lead: "This app is shared by every workspace on this server.",
 		children: outcome ? /* @__PURE__ */ _jsx(Outcome, {
 			outcome,
-			catalog: []
+			catalog: [],
+			children: org ? /* @__PURE__ */ _jsx(LinkButton, {
+				href: "/dash/[org]/agents",
+				params: { org },
+				children: "Connect it in your workspace"
+			}) : /* @__PURE__ */ _jsx(Button, {
+				href: "/dash",
+				children: "Open dashboard"
+			})
 		}) : /* @__PURE__ */ _jsx(CreateLink, {
 			integration,
 			state: Object.fromEntries(search)

package/dist/dash/standalone/server/modules-server-server-react-server/src/server/dash/app/dash/[org]/account/{loading.e348ec45e9ed951b.js → loading.56c14183236be231.js}

@@ -1,5 +1,5 @@
-import { Loading } from "../../../../comps/ui/card.9f0d45b73bc78b4f.js";
-import { Page, PageHead } from "../../../../comps/frame/page-head.85f15db7b648d48c.js";
+import { Loading } from "../../../../comps/ui/card.c0030eafd76587e3.js";
+import { Page, PageHead } from "../../../../comps/frame/page-head.2eb1e0213eb50349.js";
 import { jsx as _jsx, jsxs as _jsxs } from "../../../../../../../../../node_modules/preact/jsx-runtime/dist/jsxRuntime.mjs";
 export default function AccountLoading() {
 	return /* @__PURE__ */ _jsxs(Page, { children: [/* @__PURE__ */ _jsx(PageHead, {