@wular/coder 0.4.3 → 0.4.4

package/dist/prompt-K7-bKcTC.js

@@ -0,0 +1,7 @@
+import{Mt as e,St as t}from"./dispatch-YW1aqjEg.js";import{p as n,x as r,y as i}from"./output-BKeyLbvt.js";import a from"node:path";import o from"node:process";import s from"node:fs";import{spawn as c}from"node:child_process";var l=class extends t{authenticate;constructor(e,t,n=``,r){super(`server`,t,{status:e,...r?{hint:r}:{}}),this.authenticate=n}};function u(e){try{let t=new URL(e).hostname.toLowerCase();return t===`localhost`||t===`[::1]`||/^127(?:\.\d{1,3}){3}$/.test(t)}catch{return!1}}function d(e){let n;try{n=new URL(e)}catch{throw new t(`invalid-option`,`Give the server as a URL, e.g. https://agents.example.com.`)}if(n.protocol!==`https:`&&!(n.protocol===`http:`&&u(n.origin)))throw new t(`invalid-option`,`Coder servers require HTTPS unless they are loopback.`,{hint:`Use https://, or http://localhost for a local server.`});if(n.username||n.password||n.search||n.hash)throw new t(`invalid-option`,`The server must be an origin without credentials, query, or fragment.`);return n.toString().replace(/\/+$/,``)}const f=(e,t,n)=>`/admin/credentials/${encodeURIComponent(e)}${t}${n?`?workspace`:``}`,p=(e,t)=>{let n=new URLSearchParams;`cursor`in t&&typeof t.cursor==`string`&&n.set(`cursor`,t.cursor);for(let[e,r]of Object.entries(t))e!==`cursor`&&r!==void 0&&r!==!1&&r!==``&&n.set(e,r===!0?`1`:Array.isArray(r)?r.join(`,`):String(r));return`${e}?${n}`},m=new Set([`completed`,`failed`,`cancelled`]);var h=class{url;fetchImpl;organization;renewal;onError;token;cookie;constructor(e,n,r={}){if(this.cookie=`cookie`in n,this.url=e?d(e):``,!this.cookie&&!this.url)throw new t(`invalid-option`,`Bearer clients need a server URL.`);this.token=`token`in n?n.token:void 0,this.fetchImpl=r.fetch??((e,t)=>fetch(e,t)),this.organization=r.organization,this.renewal=r.renewal,this.onError=r.onError}request(e,t={}){let n=this.read(e,t);return n.catch(()=>{}),n}async read(e,n){this.renewal&&this.renewal.expiresAt()-Date.now()<3e4&&(this.token=await this.renewal.renew());let r=await this.send(e,n);r.status===401&&this.renewal&&/invalid_token/.test(r.headers.get(`www-authenticate`)??``)&&(this.token=await this.renewal.renew(),r=await this.send(e,n));let i=await r.text().catch(()=>``),a={},o;try{i&&r.status!==204&&(a=JSON.parse(i))}catch{if(r.ok)throw new t(`server`,`The server answered ${r.status} with a body that is not JSON.`);this.cookie&&i&&(o=i)}if(!r.ok){let e=new l(r.status,a.error??a.message??o??`The server answered ${r.status}.`,r.headers.get(`www-authenticate`)??``,a.hint);throw this.onError?.(e),e}return a}send(e,n){let r=new Headers(n.headers);return n.body&&!r.has(`content-type`)&&r.set(`content-type`,`application/json`),this.cookie||r.set(`authorization`,`Bearer ${this.token}`),this.organization&&r.set(`x-coder-organization`,this.organization),this.fetchImpl(`${this.url}${e}`,{...n,headers:r,...this.cookie?{credentials:`same-origin`}:{}}).catch(e=>{throw e instanceof t||e.name===`AbortError`?e:new t(`server`,this.url?`No Coder server answers at ${this.url}: ${e.message}`:`The server did not answer. Check the connection and try again.`)})}post(e,t){return this.request(e,{method:`POST`,...t===void 0?{}:{body:JSON.stringify(t)}})}me(){return this.request(`/me`)}info(){return this.request(`/api/auth/capabilities`)}linkAccount(e){return this.post(`/connect`,{token:e})}signOut(){return this.post(`/api/auth/sign-out`,{})}agents={list:e=>this.request(p(`/admin/agents`,{...e,...e?.connect?{connect:1}:{}})),get:(e,t)=>this.request(p(`/admin/agents/${encodeURIComponent(e)}`,{...t?.versions===!1?{versions:0}:{},...t?.content===!1?{content:0}:{}})),versions:(e,t={})=>this.request(p(`/admin/agents/${encodeURIComponent(e)}/versions`,t)),remove:e=>this.request(`/admin/agents/${encodeURIComponent(e)}`,{method:`DELETE`}),preview:(e,t)=>this.request(p(`/admin/agents/import`,{repo:e,ref:t})),version:(e,t)=>this.request(`/admin/agents/${encodeURIComponent(e)}/versions/${t}`),put:(e,t)=>this.request(`/admin/agents/${encodeURIComponent(e)}`,{method:`PUT`,body:JSON.stringify(t)}).then(t=>({id:e,version:t.version,unchanged:t.unchanged})),settings:(e,t)=>this.request(`/admin/agents/${encodeURIComponent(e)}/settings`,{method:`PATCH`,body:JSON.stringify(t)}),import:(e,t,n)=>this.post(`/admin/agents/import`,{repo:e,ref:t,...n?{agents:n}:{}})};folders={list:()=>this.request(`/admin/folders`),check:e=>this.post(`/admin/folders/check`,{path:e}),clone:e=>this.post(`/admin/folders/clone`,{url:e}),pick:()=>this.post(`/admin/folders/pick`,{})};tasks={run:e=>this.post(`/admin/tasks`,e),list:e=>this.request(p(`/admin/tasks`,{limit:20,...e,...e?.archived?{archived:1}:{},...e?.summary?{summary:1}:{},...e?.counts?{counts:1}:{}})),get:e=>this.request(`/admin/tasks/${encodeURIComponent(e)}`),logs:(e,t=-1,n)=>this.request(p(`/admin/tasks/${encodeURIComponent(e)}/logs`,{after:t,limit:n})),stream:(e,t=-1,n)=>this.send(`/admin/tasks/${encodeURIComponent(e)}/stream?after=${t}`,{headers:{accept:`text/event-stream`},signal:n}),events:(e,t,n)=>this.send(p(`/admin/events`,{tasks:e}),{headers:{accept:`text/event-stream`,...t?{"last-event-id":t}:{}},signal:n}),cancel:e=>this.post(`/admin/tasks/${encodeURIComponent(e)}/cancel`),steer:(e,t,n={})=>this.post(`/admin/tasks/${encodeURIComponent(e)}/steer`,{text:t,...n}),ask:(e,t)=>this.post(`/admin/tasks/${encodeURIComponent(e)}/ask`,{question:t}),approve:(e,t,n)=>this.post(`/admin/tasks/${encodeURIComponent(e)}/approve`,{approvalId:t,decision:n}),archive:e=>this.post(`/admin/tasks/${encodeURIComponent(e)}/archive`),delete:e=>this.request(`/admin/tasks/${encodeURIComponent(e)}`,{method:`DELETE`}),create:e=>this.post(`/admin/tasks`,e),wait:async(e,n={})=>{let r=-1;for(;;){let i=await this.tasks.stream(e,r);if(!i.ok||!i.body){let n=await this.tasks.get(e);if(m.has(n.status))return n;if(i.status===401)continue;throw new t(`server`,`The task stream answered ${i.status}.`)}let a=!1;for await(let e of g(i.body))if(e.event===`log`){let t=JSON.parse(e.data);r=t.seq,n.onLog?.(t)}else e.event===`end`&&(a=!0);if(a)return this.tasks.get(e)}}};credentials={list:e=>this.request(p(`/admin/credentials`,e??{})),add:e=>this.post(`/admin/credentials`,e),remove:(e,{workspace:t}={})=>this.request(f(e,``,t),{method:`DELETE`}),setDefault:(e,{workspace:t}={})=>this.post(f(e,`/default`,t)),login:e=>this.post(`/admin/logins`,{engine:e}),loginStatus:e=>this.request(`/admin/logins/${encodeURIComponent(e)}`),loginCode:(e,t)=>this.post(`/admin/logins/${encodeURIComponent(e)}`,{code:t}),cancelLogin:e=>this.request(`/admin/logins/${encodeURIComponent(e)}`,{method:`DELETE`})};runners={list:()=>this.request(`/admin/runners`),add:e=>this.post(`/admin/runners`,e),pair:e=>this.post(`/admin/runners/pair`,e),update:(e,t)=>this.request(`/admin/runners/${encodeURIComponent(e)}`,{method:`PATCH`,body:JSON.stringify(t)}),test:e=>this.post(`/admin/runners/${encodeURIComponent(e)}/test`,{}),remove:e=>this.request(`/admin/runners/${encodeURIComponent(e)}`,{method:`DELETE`})};integrations={list:()=>this.request(`/admin/integrations`)};repositories={list:()=>this.request(`/admin/repositories`)};engines={status:()=>this.request(`/admin/engines/status`),login:e=>this.post(`/admin/engines/${encodeURIComponent(e)}/login`,{}),logout:e=>this.post(`/admin/engines/${encodeURIComponent(e)}/logout`,{})};apps={list:e=>this.request(p(`/admin/apps`,{agent:e})),install:(e,t)=>this.post(p(`/admin/apps/${encodeURIComponent(e)}/install`,{back:t}))};installations={list:e=>this.request(p(`/admin/installations`,{agent:e}))};connections={add:e=>this.post(`/admin/connections`,e)};config={get:()=>this.request(`/admin/config`),put:e=>this.request(`/admin/config`,{method:`PUT`,body:JSON.stringify(e)}),patch:e=>this.request(`/admin/config`,{method:`PATCH`,headers:{"content-type":`application/merge-patch+json`},body:JSON.stringify(e)})};models={list:()=>this.request(`/admin/models`),add:e=>this.post(`/admin/models`,e),probe:e=>this.post(`/admin/models/probe`,e),remove:e=>this.request(`/admin/models/${encodeURIComponent(e)}`,{method:`DELETE`}),alias:(e,t)=>this.post(`/admin/models/${encodeURIComponent(e)}/alias`,{spec:t}),enable:e=>this.post(`/admin/models/${encodeURIComponent(e)}/enable`),disable:e=>this.post(`/admin/models/${encodeURIComponent(e)}/disable`)};mcp={list:()=>this.request(`/admin/mcp`),add:e=>this.post(`/admin/mcp`,e),remove:e=>this.request(`/admin/mcp/${encodeURIComponent(e)}`,{method:`DELETE`}),search:e=>this.request(p(`/admin/mcp-registry`,{q:e}))};flows={list:e=>this.request(p(`/admin/flows`,{repo:e})),run:(e,t)=>this.post(`/admin/flows/${encodeURIComponent(e)}/run`,t)};pulls={list:e=>this.request(p(`/admin/pulls`,{repo:e}))};review(e){return this.post(`/admin/review`,e)}usage(e={}){return this.request(p(`/admin/usage/totals`,{...e,since:e.since??Date.now()-6048e5}))}usageRows(e){return this.request(p(`/admin/usage`,{installation:e}))}};async function*g(e){let t=new TextDecoder,n=``;for await(let r of e){n+=t.decode(r,{stream:!0});let e;for(;(e=n.indexOf(`
+
+`))>=0;){let t=n.slice(0,e);n=n.slice(e+2);let r=`message`,i,a=[];for(let e of t.split(`
+`))e.startsWith(`event: `)?r=e.slice(7):e.startsWith(`data: `)?a.push(e.slice(6)):e.startsWith(`id: `)&&(i=e.slice(4));(a.length||i)&&(yield{event:r,data:a.join(`
+`),...i?{id:i}:{}})}}}function _(){return e(`session.json`)}function v(){try{let e=JSON.parse(s.readFileSync(_(),`utf8`));return Object.fromEntries(Object.entries(e).filter(e=>!!(e[1].token&&e[1].refreshToken&&e[1].user)))}catch{return{}}}function y(){try{return JSON.parse(s.readFileSync(_(),`utf8`))}catch{return{}}}const b=e=>e.replace(/\/+$/,``),x=`https://coder.wular.ai`,S=e=>b((e===!0?void 0:e)??process.env.CODER_SERVER??`https://coder.wular.ai`);function C(e){return d(S(e))}function w(e){let t=b(e);return t===`https://coder.wular.ai`||!!y()[t]}function T(e){let t=y(),n=b(e),r=t[n]??{};O({...t,[n]:{...r,confirmedAt:Date.now()}})}function E(e){return v()[b(e)]}function D(e){let t=y(),n=Object.fromEntries(Object.entries(t).map(([e,t])=>[e,{confirmedAt:t.confirmedAt??Date.now()}]));O(Object.fromEntries(Object.entries({...n,...e}).map(([e,n])=>[e,{...n,...t[e]?{confirmedAt:t[e].confirmedAt??Date.now()}:{}}])))}function O(e){let t=_();s.mkdirSync(a.dirname(t),{recursive:!0}),s.writeFileSync(t,`${JSON.stringify(e,null,2)}\n`,{mode:384}),s.chmodSync(t,384)}function k(e){let t=i()??80;return Math.max(1,Math.ceil(r(e)/t))}const A={tab:[`	`],up:[`\x1B[A`,`k`],down:[`\x1B[B`,`j`],enter:[`\r`,`
+`],space:[` `],backspace:[``,`\b`],cancel:[``,`\x1B`]};var j=class extends Error{constructor(){super(`Cancelled.`)}};function M(){return!!(o.stdin.isTTY&&o.stdout.isTTY)}function N(e){let t=[];for(let n=0;n<e.length;)if(e[n]===`\x1B`&&e[n+1]===`[`){let r=n+2;for(;r<e.length&&!/[@-~]/.test(e[r]);)r++;t.push(e.slice(n,r+1)),n=r+1}else t.push(e[n]),n++;return t}const P=[];function F(){return P.length?Promise.resolve(P.shift()):new Promise(e=>{let t=n=>{o.stdin.off(`data`,t);let r=N(n.toString(`utf8`));P.push(...r.slice(1)),e(r[0])};o.stdin.on(`data`,t)})}async function I(e){return(await L(e)).values}async function L(e){let t=n,r=o.stdout,i=Math.max(3,e.window??8),a=new Set(e.selected??[]),s=Math.max(0,e.options.findIndex(e=>a.has(e.value))),c=0,l=``,u=0,d=``,f=new Map(e.options.flatMap(e=>e.input?.value?[[e.value,e.input.value]]:[])),p=!1,m=e.options.some(e=>e.input),h=()=>e.options.filter(e=>!l||e.value.toLowerCase().includes(l.toLowerCase())||(e.label??``).toLowerCase().includes(l.toLowerCase())),g=(n=!1)=>{u&&r.write(`\x1b[${u}A\x1b[J`);let o=h();s=Math.min(s,Math.max(0,o.length-1)),s<c&&(c=s),s>=c+i&&(c=s-i+1);let g=m?` · tab to edit`:``,_=p?`type to edit · enter when done · esc to discard`:e.multi?`↑↓ to move · space to toggle · type to filter${g} · enter to continue · esc to cancel`:`↑↓ to move · type to filter${g} · enter to choose · esc to cancel`,v=[`${t.bold(e.title)}  ${t.dim(_)}`];if(n){let n=[...a].map(e=>f.get(e)?`${e} (${f.get(e)})`:e).join(`, `)||`-`;r.write(`${t.green(`✔`)} ${t.bold(e.title)}  ${t.cyan(n)}\n\n`),u=0;return}e.hint&&v.push(`  ${t.light(e.hint)}`),e.multi&&v.push(`  ${t.light(`selected:`)} ${[...a].join(`, `)||t.dim(`none`)}`),l&&v.push(`  ${t.light(`filter:`)} ${l}${t.dim(`▏`)}`),o.length||v.push(`  ${t.dim(`no matches`)}`),c>0&&v.push(`  ${t.dim(`↑ ${c} more`)}`);let y=Math.max(0,...o.map(e=>(e.label??e.value).length));o.slice(c,c+i).forEach((n,r)=>{let i=c+r===s,o=`${e.multi?a.has(n.value)?`◉`:`◯`:i?`●`:`○`} ${(n.label??n.value).padEnd(y)}${n.hint?`  ${t.light(n.hint)}`:``}`,l=f.get(n.value)??``,u=n.input&&(l||i&&p)?`  ${t.light(`${n.input.label}:`)} ${l}${i&&p?t.dim(`▏`):``}`:n.input&&i&&n.input.placeholder?`  ${t.dim(n.input.placeholder)}`:``;v.push(`${i?t.cyan(`❯ `):`  `}${i?t.cyan(o):o}${u}`)});let b=o.length-(c+i);b>0&&v.push(`  ${t.dim(`↓ ${b} more`)}`),d&&v.push(`  ${t.red(d)}`),r.write(`${v.join(`
+`)}\n`),u=v.reduce((e,t)=>e+k(t),0)},_=o.stdin,v=_.isRaw;_.setRawMode(!0),_.resume(),r.write(`\x1B[?25l`);try{for(g();;){let t=await F();d=``;let n=h(),r=n[s];if(p&&r?.input){let e=f.get(r.value)??``;if(A.cancel.includes(t))f.delete(r.value),p=!1;else if(A.enter.includes(t)){let t=e?r.input.validate?.(e):void 0;t?d=t:p=!1}else A.backspace.includes(t)?f.set(r.value,e.slice(0,-1)):t.length===1&&t>=` `&&f.set(r.value,e+t);g();continue}if(A.cancel.includes(t))throw new j;if(A.tab.includes(t)&&r?.input){p=!0,e.multi&&a.add(r.value),g();continue}if(A.up.includes(t)&&!(t===`k`&&l))s=Math.max(0,s-1);else if(A.down.includes(t)&&!(t===`j`&&l))s=Math.min(n.length-1,s+1);else if(A.enter.includes(t))if(!e.multi&&n[s]&&(a.clear(),a.add(n[s].value)),e.required&&!a.size)d=`Pick at least one.`;else{g(!0);let e={};for(let[t,n]of f)n&&a.has(t)&&(e[t]=n);return{values:[...a],inputs:e}}else if(e.multi&&A.space.includes(t)&&n[s]){let e=n[s].value;a.has(e)?a.delete(e):a.add(e)}else A.backspace.includes(t)?l=l.slice(0,-1):t.length===1&&t>=` `&&t!==` `&&(l+=t,s=0,c=0);g()}}finally{r.write(`\x1B[?25h`),_.setRawMode(!!v),_.pause()}}async function R(e,t=``,r,i){let a=n;i&&o.stdout.write(`${a.bold(e)}\n  ${a.light(i)}\n`);let s=(await import(`node:readline/promises`)).createInterface({input:o.stdin,output:o.stdout}),c=i?k(e)+k(`  ${i}`):0;try{for(;;){let n=i?`  ${t?a.dim(`[${t}] `):``}`:`${a.bold(e)} ${t?a.dim(`[${t}] `):``}`,l=(await s.question(n)).trim()||t;c+=k(`${i?`  `:`${e} `}${t?`[${t}] `:``}${l}`);let u=r?.(l);if(!u)return o.stdout.write(`\x1b[${c}A\x1b[J${a.green(`✔`)} ${a.bold(e)}  ${a.cyan(l||`-`)}\n\n`),l;o.stdout.write(`  ${a.red(u)}\n`),c+=k(`  ${u}`)}}finally{s?.close()}}function z(e){let t=o.env.BROWSER;if(t===`none`||o.env.CI||o.env.NODE_ENV===`test`)return!1;let[n,r]=t?o.platform===`darwin`?[`open`,[`-a`,t,e]]:[t,[e]]:o.platform===`darwin`?[`open`,[e]]:o.platform===`win32`?[`cmd`,[`/c`,`start`,``,e]]:[`xdg-open`,[e]];try{return c(n,r,{detached:!0,stdio:`ignore`}).unref(),!0}catch{return!1}}export{I as a,w as c,v as d,_ as f,u as g,h,z as i,T as l,D as m,R as n,L as o,C as p,M as r,x as s,j as t,E as u};

package/dist/push-Cg7-XT5h.js

@@ -0,0 +1 @@
+import{i as e,r as t}from"./cli-msOzZFXW.js";import{p as n}from"./output-BKeyLbvt.js";import{i as r,n as i,s as a,t as o}from"./args-DEMOfLz2.js";import s from"node:process";const c=e({name:`agent push`,help:{usage:`coder agent push [id] [--server [url]] [--json] [--cwd <dir>]`,summary:`Upload one workspace agent, or every agent in .coder/agents when no id is given. The server creates a new immutable version only when its definition, prompt, or files changed.`,flags:[t],examples:[[`coder agent push helper`,`upload helper`]]},options:{...o,server:r,workspace:a,yes:i},args:1,run:async({options:e,args:[t],cwd:n})=>{let{agents:r}=await import(`./agent-BcXXkOmD.js`).then(e=>e.t);return r.push(t,{...e,cwd:n,organization:e.workspace})},print:e=>{for(let t of e)s.stdout.write(t.unchanged?`Pushed ${n.bold(t.id)} unchanged (version ${t.version})\n`:`Pushed ${n.bold(t.id)} as version ${t.version}\n`)}});export{c as commandAgentPush};

package/dist/queue-yo-Z8TaE.js

@@ -0,0 +1,117 @@
+import{Ct as e,pn as t,xt as n}from"./dispatch-YW1aqjEg.js";import{Hn as r,a as i,u as a}from"./store-qp7UE2ES.js";import{_ as o,g as s,h as c,i as l,m as u,o as d,p as f,s as p}from"./schema-DoNO0dPh.js";import{i as m,r as h,t as g}from"./client-31YzOj-i.js";import{b as _,c as v,f as y,m as b,v as x,y as S}from"./shared-TznJgMFW.js";import{randomBytes as C}from"node:crypto";import{and as w,asc as T,desc as E,eq as D,getTableColumns as O,gt as k,ilike as A,inArray as j,isNotNull as M,isNull as N,lt as P,or as F,sql as I}from"drizzle-orm";import{CasingCache as L}from"drizzle-orm/casing";function R(e,t){if(typeof t==`number`)return I`to_jsonb(coalesce(case when jsonb_typeof(${e}) = 'number' then (${e} #>> '{}')::numeric end, 0) + ${t}::numeric)`;if(!t||typeof t!=`object`||Array.isArray(t))return e;let n=Object.entries(t).map(([t,n])=>I`${t}::text, ${R(I`(${e} -> ${t}::text)`,n)}`);return I`(case when jsonb_typeof(${e}) = 'object' then ${e} else '{}'::jsonb end || jsonb_build_object(${I.join(n,I`, `)}))`}const z=e=>I`(case ${e} ${I.join([...i,...t].map(e=>I`when ${e} then ${I.raw(String(n(e)))}`),I` `)} end)`,B=e=>I`date_trunc('milliseconds', ${e})`,V=e=>[T(z(e.status)),E(B(e.createdAt)),E(e.publicId)];var H=class{db;constructor(e){this.db=e}async metrics(e,t){let n=await this.db.select({status:f.status,total:I`count(*)::int`,recent:I`count(*) filter (where ${f.createdAt} >= ${new Date(t).toISOString()}::timestamptz)::int`}).from(f).where(D(f.organizationId,e)).groupBy(f.status),r={tasks:{queued:0,running:0,waiting:0,completed:0,failed:0,cancelled:0},queueDepth:0};for(let e of n)r.tasks[e.status]=e.recent,e.status===`queued`&&(r.queueDepth=e.total);return r}where(e,t){return w(D(f.organizationId,e),D(f.publicId,t))}fence(e,t,n={}){return w(this.where(e,t),n.generation===void 0?void 0:D(f.generation,n.generation),n.attempts===void 0?void 0:D(f.attempts,n.attempts),n.tokenHash===void 0?void 0:n.tokenHash===null?N(f.tokenHash):D(f.tokenHash,n.tokenHash),n.handle===void 0?void 0:n.handle===null?N(f.handle):D(f.handle,n.handle),n.lastSeenAt===void 0?void 0:n.lastSeenAt===null?N(f.lastSeenAt):D(f.lastSeenAt,new Date(n.lastSeenAt)),n.updatedAt===void 0?void 0:D(f.updatedAt,new Date(n.updatedAt)),n.statuses?j(f.status,n.statuses):void 0)}async enqueue(e,t,n,r,i){let a=this.insertion(e,t,n,r,i),[o]=i===void 0?await b(this.db,a):await h(this.db,[I`select pg_advisory_xact_lock(1, hashtext(${e}))`],a);if(!o?.allowed)throw Error(`Organization task queue is full`);return!!o.inserted}insertion(e,t,n,r,i,a){let o=t.event,s=new Date(n).toISOString(),c=e=>I`${e===void 0?null:JSON.stringify(e)}::jsonb`,m=r?I`
+      receipt as (
+        insert into ${l} (key, value, expires_at)
+        select ${x(e,`delivery`,r.key)}, ${c({at:n})}, ${new Date(n+r.ttlMs).toISOString()}::timestamptz
+        from capacity where allowed ${a?I`and (${a.create} or exists (select 1 from target))`:I``}
+        on conflict (key) do update set value = excluded.value, expires_at = excluded.expires_at
+          where ${l.expiresAt} <= ${s}::timestamptz
+        returning key
+      ),`:I``;return I`
+      with ${a?I`target as materialized (${a.target}),`:I``} capacity as (
+        select ${i===void 0?I`true`:I`(select count(*) from ${f} where organization_id = ${e} and status = 'queued') < ${i} ${r?I`or exists (select 1 from ${l} where key = ${x(e,`delivery`,r.key)} and expires_at > ${s}::timestamptz)`:I``}`} ${a?I`or exists (select 1 from target) or not ${a.create}`:I``} as allowed
+      ), ${m} ${a?I`advanced as (
+        update ${f} set inbox_seq = inbox_seq + 1, updated_at = ${s}::timestamptz where id in (select id from target) and exists (select 1 from receipt)
+        returning id, inbox_seq, generation
+      ), forwarded as (
+        insert into ${u} (organization_id, task_id, seq, generation, at, kind, value)
+        select ${e}, id, inbox_seq, generation, ${s}::timestamptz, 'steer', ${c({text:o?.text})} from advanced returning seq
+      ),`:I``} inserted as (
+        insert into ${f} (organization_id, public_id, source, status, agent, flow, runner, permissions,
+          app_id, installation_id, event, prompt, args, mcp, author, definition, credential, requester,
+          runner_id, usage, tools, tool_scopes, context, files, attempts, created_at, updated_at)
+        select ${e}, ${t.id}, ${t.source}, 'queued', ${t.agent}, ${t.flow}, ${t.runner}, ${t.permissions??null},
+          ${o?I`coalesce((select id from ${d} where key = ${o.appId} and organization_id in (${e}, '')), 0)`:I`null`},
+          ${o?I`coalesce((select id from ${p} where key = ${`${o.appId}:${o.installationId}`} and organization_id = ${e}), 0)`:I`null`},
+          ${c(o)}, ${t.prompt??null}, ${c(t.args)}, ${c(t.mcp)}, ${t.author??null}, ${c(t.definition)},
+          ${t.credential??null}, ${t.requester??null}, ${t.runnerId??null}, ${c(t.usage)}, ${c(t.tools)},
+          ${c(t.toolScopes)}, ${c(t.context)}, ${c(t.files)}, 0, ${s}::timestamptz, ${s}::timestamptz
+        from capacity where allowed ${a?I`and ${a.create} and not exists (select 1 from target)`:I``} ${r?I`and exists (select 1 from receipt)`:I``}
+        returning id
+      ) select allowed, exists (select 1 from inserted) as inserted ${a?I`, exists (select 1 from forwarded) as steered`:I``} from capacity`}async deliver(e,t,n,r,i,o,s=!0){if(!i)return s&&await this.enqueue(e,t,n,r,o)?{taskId:t.id}:{};let c=t.event,l=I`select id from ${f} where organization_id = ${e} and status in ('queued', 'running', 'waiting')
+      and agent = ${t.agent} and source = ${t.source} and flow = 'default'
+      and requester is not distinct from ${t.requester??null}
+      and event->>'appId' is not distinct from ${c?.appId??null}
+      and event->>'installationId' is not distinct from ${c?.installationId??null}
+      and event->'chat'->'thread'->>'id' is not distinct from ${c?.chat?.thread.id??null}
+      and event->'actor'->>'id' = ${c?.actor.id||null}
+      order by created_at desc, public_id desc limit 1 for update`,u=this.insertion(e,t,n,r,o,{target:l,create:s}),d=[I`select pg_advisory_xact_lock(3, hashtext(${JSON.stringify([e,a(t)])}))`];o!==void 0&&s&&d.push(I`select pg_advisory_xact_lock(1, hashtext(${e}))`);let[p]=await h(this.db,d,u);if(!p?.allowed)throw Error(`Organization task queue is full`);return p.inserted?{taskId:t.id}:p.steered?{steered:!0}:{}}async claim(e,t,n=!1,i){let a=i===void 0?I`true`:I`(select count(*) from ${f} active where active.organization_id = ${f.organizationId} and active.status in ('running', 'waiting')) < ${i}`;if(!n){let[e]=await m(this.db,()=>b(this.db,I`select exists (select 1 from ${f} where status = 'queued' and ${a})
+        and ${t===void 0?I`true`:I`(select count(*) from ${f} where status in ('running', 'waiting')) < ${t}`} as ready`));if(!e?.ready)return}let o=C(32).toString(`base64url`),s=I`translate(rtrim(replace(encode(convert_to(format('{"task":%s,"organization":%s,"attempt":%s}',
+      to_json(public_id), to_json(organization_id), attempts + 1), 'UTF8'), 'base64'), E'\\n', ''), '='), '+/', '-_') || '.' || ${o}`,c=I`with stamp as materialized (select date_trunc('milliseconds', clock_timestamp()) as at), picked as materialized (
+      select id, ${s} as bearer from ${f} where status = 'queued'
+        and ${a}
+        ${t===void 0?I``:I`and (select count(*) from ${f} where status in ('running', 'waiting')) < ${t}`}
+        order by created_at, id limit 1 for update
+      ), claimed as (
+        update ${f} set status = 'running', attempts = attempts + 1, locked_at = (select at from stamp),
+          started_at = (select at from stamp), updated_at = (select at from stamp), last_seen_at = (select at from stamp),
+          token_hash = translate(rtrim(encode(sha256(convert_to(picked.bearer, 'UTF8')), 'base64'), '='), '+/', '-_')
+        from picked where ${f.id} = picked.id returning ${f}.*
+      ) select to_jsonb(claimed) as record, exists (select 1 from ${f} where status = 'queued' and id <> claimed.id
+        and ${i===void 0?I`true`:I`(select count(*) from ${f} active where active.organization_id = ${f.organizationId} and active.status in ('running', 'waiting')) + case when ${f.organizationId} = claimed.organization_id then 1 else 0 end < ${i}`})
+        and ${t===void 0?I`true`:I`(select count(*) from ${f} where status in ('running', 'waiting')) + 1 < ${t}`} as more from claimed`,[l]=await h(this.db,t===void 0&&i===void 0?[]:[I`select pg_advisory_xact_lock(2, 0)`],c);if(!l)return;let u=new L(g),d=Object.fromEntries(Object.entries(O(f)).map(([e,t])=>{let n=l.record[u.getColumnCasing(t)];return[e,n===null?null:t.mapFromDriverValue(n)]}));return{organizationId:d.organizationId,status:_(d),token:r(d.publicId,d.organizationId,d.attempts,o).token,more:l.more}}async touch(e,t,n,r,i,a=!1){let o=j(f.status,[`running`,`waiting`]),s=new Date(i).toISOString(),[c]=await this.db.update(f).set({lastSeenAt:I`case when ${o} then ${s}::timestamptz else ${f.lastSeenAt} end`,updatedAt:I`case when ${o} then ${s}::timestamptz else ${f.updatedAt} end`}).where(this.fence(e,t,{tokenHash:n,attempts:r,statuses:a?[`running`,`waiting`,`completed`,`failed`,`cancelled`]:[`running`,`waiting`]})).returning();return c&&_(c)}async patchTask(e,t,n,r,i={}){let{answer:a,archivedAt:o,autoArchived:s,lastSeenAt:c,...l}=n,[u]=await this.db.update(f).set({...Object.fromEntries(Object.entries(l).map(([e,t])=>[e,t??null])),...a===void 0?{}:{answer:I`coalesce(${f.answer}, '[]'::jsonb) || ${JSON.stringify([a])}::jsonb`},...Object.hasOwn(n,`archivedAt`)?{archivedAt:o===void 0?null:new Date(o)}:{},...Object.hasOwn(n,`lastSeenAt`)?{lastSeenAt:c===void 0?null:new Date(c)}:{},updatedAt:new Date(r)}).where(this.fence(e,t,i)).returning({id:f.id});return!!u}async archiveStopped(n,r,i){await this.db.update(f).set({archivedAt:new Date(r)}).where(w(D(f.organizationId,n),i?j(f.publicId,i):void 0,N(f.archivedAt),j(f.status,[...t]),P(I`coalesce(${f.finishedAt}, ${f.updatedAt})`,new Date(r-e))))}async requeue(e,t,n,r={}){let[i]=await this.db.update(f).set({status:`queued`,lockedAt:null,handle:null,tokenHash:null,lastSeenAt:null,updatedAt:new Date(n)}).where(this.fence(e,t,{...r,statuses:[`running`,`waiting`]})).returning({id:f.id});return!!i}async finish(e,t,n,r,i={}){let a=new Date(r),[o]=await this.db.update(f).set({status:n.status,result:n.result??null,error:n.error??null,tokens:n.tokens??null,lastSeenAt:a,lockedAt:null,finishedAt:a,updatedAt:a}).where(this.fence(e,t,{...i,statuses:[`queued`,`running`,`waiting`]})).returning({id:f.id});return!!o}async continueTask(e,t,n,r,i){let a=I`(select value from ${l} where key = ${S(e,`note`)} ||
+      case when ${f.source} = ${f.event}->>'integration' then
+        (${f.event}->>'appId') || ':' || (${f.event}->>'installationId') || ':' || coalesce(${f.event}->'chat'->'thread'->>'id', ${f.event}->>'deliveryId')
+        else 'task:' || ${f.publicId} end
+      and (${l.expiresAt} is null or ${l.expiresAt} > ${new Date(r).toISOString()}::timestamptz))`,o=I`(${JSON.stringify(n.context??{})}::jsonb - 'note') || jsonb_strip_nulls(jsonb_build_object('note', nullif(${a}, '""'::jsonb)))`,[s]=await this.db.update(f).set({prompt:n.prompt??null,context:o,status:`queued`,attempts:0,generation:I`${f.generation} + 1`,inboxAck:-1,result:null,error:null,tokens:null,handle:null,tokenHash:null,lastSeenAt:null,logCursor:null,lockedAt:null,startedAt:null,finishedAt:null,cancelRequestedAt:null,approval:null,answer:null,archivedAt:null,updatedAt:new Date(r)}).where(this.fence(e,t,{...i,statuses:[`completed`,`failed`,`cancelled`]})).returning({context:f.context});return s&&(n.context=s.context??void 0),!!s}async completeTask(e,t,n,r){let{outcome:i,usage:a,note:s}=n,c=new Date(r).toISOString(),d=s&&x(e,`note`,s.key),p=s?s.value?I`, note as (
+      insert into ${l} (key, value, expires_at)
+      select ${d}, ${JSON.stringify(s.value)}::jsonb, ${new Date(r+s.ttlMs).toISOString()}::timestamptz from finished
+      on conflict (key) do update set value = excluded.value, expires_at = excluded.expires_at
+    )`:I`, note as (delete from ${l} where key = ${d} and exists (select 1 from finished))`:I``,[m]=await b(this.db,I`
+      with finished as (
+        update ${f} set status = ${i.status}, result = ${JSON.stringify(i.result??null)}::jsonb,
+          error = ${i.error??null}, tokens = ${JSON.stringify(i.tokens??null)}::jsonb,
+          last_seen_at = ${c}::timestamptz, locked_at = null, finished_at = ${c}::timestamptz, updated_at = ${c}::timestamptz
+        where ${this.fence(e,t,{attempts:n.attempts,tokenHash:n.tokenHash,statuses:[`running`,`waiting`]})}
+        returning id, installation_id, generation
+      ), inbox as (delete from ${u} where (task_id, generation) in (select id, generation from finished)), recorded as (
+        insert into ${o} (organization_id, task_id, installation_id, agent, target, engine, model, credential, runner_ms, tokens, at, updated_at)
+        select ${e}, id, installation_id, ${a.agent}, ${a.target}, ${a.engine??null}, ${a.model??null},
+          ${a.credential}, ${a.runnerElapsedMs}, ${JSON.stringify(a.tokens??null)}::jsonb, ${new Date(a.at).toISOString()}::timestamptz, ${c}::timestamptz from finished
+        on conflict (task_id) do update set installation_id = excluded.installation_id, agent = excluded.agent, target = excluded.target,
+          engine = excluded.engine, model = excluded.model, credential = excluded.credential, runner_ms = ${o.runnerMs} + excluded.runner_ms,
+          tokens = ${R(I`${o.tokens}`,a.tokens)}, at = excluded.at, updated_at = excluded.updated_at
+      ) ${p}
+      select exists (select 1 from finished) as completed`);return!!m?.completed}async cancel(e,t,n,r={}){let a=new Date(n).toISOString(),[o]=await b(this.db,I`
+      with cancelled as (
+        update ${f} set status = case when status = 'queued' then 'cancelled' else status end,
+          finished_at = case when status = 'queued' then ${a}::timestamptz else finished_at end,
+          inbox_seq = case when status = 'queued' then inbox_seq else inbox_seq + 1 end,
+          cancel_requested_at = ${a}::timestamptz, updated_at = ${a}::timestamptz
+        where ${this.fence(e,t,{...r,statuses:i})} returning id, generation, inbox_seq, status
+      ), message as (
+        insert into ${u} (organization_id, task_id, seq, generation, kind, value, at)
+        select ${e}, id, inbox_seq, generation, 'cancel', 'null'::jsonb, ${a}::timestamptz from cancelled where status in ('running', 'waiting')
+      ) select exists(select 1 from cancelled) as accepted`);return!!o?.accepted}async cancelRequested(e,t){let[n]=await m(this.db,()=>this.db.select({at:f.cancelRequestedAt}).from(f).where(this.where(e,t)));return!!n?.at}filter(e,t){let n=t.status?[t.status]:t.statuses,r=t.q?.trim(),i=r&&`%${r.replace(/[\\%_]/g,`\\$&`)}%`;return w(D(f.organizationId,e),n?j(f.status,n):void 0,t.agent?D(f.agent,t.agent):void 0,t.source?D(f.source,t.source):void 0,t.archived===void 0?void 0:t.archived?M(f.archivedAt):N(f.archivedAt),i?F(A(I`${f.event}->>'text'`,i),A(f.prompt,i),A(f.agent,i),A(f.publicId,i)):void 0)}pageQuery(e,t){let{before:n}=t,r=t.summary?{publicId:f.publicId,source:f.source,agent:f.agent,flow:f.flow,prompt:f.prompt,event:I`case when ${f.event} is not null then jsonb_build_object('integration', ${f.event}->>'integration', 'type', ${f.event}->>'type', 'text', ${f.event}->>'text') end`.as(`event`),status:f.status,attempts:f.attempts,createdAt:f.createdAt,startedAt:f.startedAt,finishedAt:f.finishedAt}:O(f),i=this.db.select(r).from(f).where(w(this.filter(e,t),n?this.after(n):void 0)).orderBy(...V(f));return t.limit===void 0?i:i.limit(t.limit)}after(e){let t=I`(${B(f.createdAt)}, ${f.publicId}) < (${new Date(e.createdAt).toISOString()}::timestamptz, ${e.id})`;return F(k(z(f.status),e.rank),w(D(z(f.status),e.rank),t))}record(e,t){return t?v({task:v({id:e.publicId,source:e.source,agent:e.agent,flow:e.flow,prompt:e.prompt,event:e.event}),status:e.status,attempts:e.attempts,createdAt:y(e.createdAt),startedAt:e.startedAt?y(e.startedAt):void 0,finishedAt:e.finishedAt?y(e.finishedAt):void 0}):_(e)}async list(e,t={}){return(await m(this.db,()=>this.pageQuery(e,t))).map(e=>this.record(e,t.summary))}async changes(e,t){if(!e.length)return{rows:[],deleted:[]};let n=e.map(e=>e.organizationId),r=e.flatMap(e=>e.ids.map(()=>e.organizationId)),i=e.flatMap(e=>e.ids),a=i.length?I`(${f.organizationId}, ${f.publicId}) in (select * from unnest(${I.param(r)}::text[], ${I.param(i)}::text[]))`:I`false`,[o,c]=await Promise.all([m(this.db,()=>this.db.select({organizationId:f.organizationId,publicId:f.publicId,source:f.source,agent:f.agent,flow:f.flow,status:f.status,approval:f.approval,answer:I`case when ${a} then ${f.answer} end`,result:I`case when ${a} then ${f.result} end`,error:I`case when ${a} then ${f.error} end`,attempts:f.attempts,archivedAt:f.archivedAt,createdAt:f.createdAt,startedAt:f.startedAt,finishedAt:f.finishedAt,updatedAt:f.updatedAt}).from(f).where(F(w(j(f.organizationId,n),k(f.updatedAt,new Date(t))),i.length?a:void 0))),m(this.db,()=>this.db.select().from(s).where(w(j(s.organizationId,n),k(s.deletedAt,new Date(t)))))]);return{rows:o.map(e=>({organizationId:e.organizationId,status:v({task:{id:e.publicId,source:e.source,agent:e.agent,flow:e.flow},status:e.status,approval:e.approval,answer:Array.isArray(e.answer)?e.answer:void 0,result:e.result,error:e.error,attempts:e.attempts,archivedAt:e.archivedAt&&y(e.archivedAt),createdAt:y(e.createdAt),startedAt:e.startedAt&&y(e.startedAt),finishedAt:e.finishedAt&&y(e.finishedAt),updatedAt:y(e.updatedAt)})})),deleted:c.map(e=>({organizationId:e.organizationId,id:e.publicId,at:y(e.deletedAt)}))}}countQuery(e,t){return this.db.select({all:I`count(*)::int`.as(`all`),active:I`(count(*) filter (where ${j(f.status,i)}))::int`.as(`active`),waiting:I`(count(*) filter (where ${D(f.status,`waiting`)}))::int`.as(`waiting`)}).from(f).where(this.filter(e,t))}async counts(e,t={}){let[n]=await m(this.db,()=>this.countQuery(e,t));return n??{all:0,active:0,waiting:0}}async listWithCounts(e,t){let n=this.db.$with(`totals`).as(this.countQuery(e,t)),r=this.db.$with(`page`).as(this.pageQuery(e,{...t,limit:t.limit??20})),i=Object.fromEntries(Object.keys(r._.selectedFields).map(e=>[e,r[e]])),a=await m(this.db,()=>this.db.with(n,r).select({...i,all:n.all,active:n.active,waiting:n.waiting}).from(n).leftJoin(r,I`true`).orderBy(...V({status:i.status,createdAt:i.createdAt,publicId:i.publicId}))),{all:o=0,active:s=0,waiting:c=0}=a[0]??{};return{items:a.filter(e=>e.publicId!==null&&e.publicId!==void 0).map(e=>this.record(e,t.summary)),counts:{all:o,active:s,waiting:c}}}async runningCount(){let[e]=await m(this.db,()=>this.db.select({value:I`count(*)::int`}).from(f).where(j(f.status,[`running`,`waiting`])));return e?.value??0}async running(){return(await m(this.db,()=>this.db.select().from(f).where(j(f.status,[`running`,`waiting`])))).map(e=>({organizationId:e.organizationId,status:_(e)}))}async appendLogs(e,t,n,r,i,a,o){let s=n.length?I`, inserted as (
+      insert into ${c} (organization_id, task_id, seq, at, level, line)
+      select ${e}, accepted.id, entry.seq, to_timestamp(entry.at / 1000.0), entry.level, entry.line
+      from accepted cross join jsonb_to_recordset(${JSON.stringify(n)}::jsonb) as entry(seq int, at bigint, level text, line text)
+    )`:I``,[l]=await b(this.db,I`
+      with accepted as (
+        update ${f} set log_cursor = ${i.cursor}, log_seq = ${i.seq}, log_bytes = ${i.bytes}, updated_at = ${new Date(a).toISOString()}::timestamptz
+        where ${this.fence(e,t,o)} and coalesce(log_seq, 0) = ${r.seq} and coalesce(log_cursor, -1) = ${r.cursor}
+        returning id
+      ) ${s} select exists (select 1 from accepted) as accepted`);return!!l?.accepted}async readInbox(e,t,n,r){return(await m(this.db,()=>this.db.select({seq:u.seq,generation:u.generation,at:u.at,kind:u.kind,value:u.value}).from(u).innerJoin(f,D(f.id,u.taskId)).where(w(this.where(e,t),D(f.generation,n),j(f.status,i),D(u.generation,n),I`${u.seq} > ${r}`)).orderBy(T(u.seq)).limit(100))).map(e=>({...e,at:y(e.at)}))}async appendInbox(e,t,n,r,a,o){let[s]=await b(this.db,I`
+      with next as (
+        update ${f} set inbox_seq = inbox_seq + 1, updated_at = ${new Date(a).toISOString()}::timestamptz where ${this.fence(e,t,{generation:o,statuses:i})} returning id, inbox_seq, generation
+      ) insert into ${u} (organization_id, task_id, seq, generation, kind, value, at)
+        select ${e}, id, inbox_seq, generation, ${n}, ${JSON.stringify(r??null)}::jsonb, ${new Date(a).toISOString()}::timestamptz from next returning seq`);return s&&{seq:s.seq,generation:o,at:a,kind:n,value:r}}async fetchInbox(e,t,n,r,i){let[a]=await m(this.db,()=>b(this.db,I`
+      select coalesce(jsonb_agg(jsonb_build_object('seq', i.seq, 'generation', i.generation, 'at', extract(epoch from i.at) * 1000, 'kind', i.kind, 'value', i.value) order by i.seq) filter (where i.seq is not null), '[]'::jsonb) as entries
+      from ${f} left join ${u} i on i.task_id = ${f.id} and i.generation = ${f.generation} and i.seq > ${i}
+      where ${this.fence(e,t,{tokenHash:n,attempts:r,statuses:[`running`,`waiting`]})} group by ${f.id}`));return a?.entries}async ackInbox(e,t,n,r){if(r.generation!==void 0&&r.generation!==n.generation)return!1;let[i]=await b(this.db,I`
+      with current as (
+        select id from ${f} where ${this.fence(e,t,{...r,generation:n.generation,statuses:void 0})}
+          and inbox_seq >= ${n.seq} and (status in ('running', 'waiting') or (status in ('completed', 'failed', 'cancelled') and inbox_ack >= ${n.seq})) for update
+      ), applied as (
+        delete from ${u} where task_id in (select id from current) and generation = ${n.generation} and seq <= ${n.seq} returning seq, kind, value
+      ), answers as (
+        select jsonb_agg(a.value order by a.seq) as value from jsonb_to_recordset(${JSON.stringify(n.answers??[])}::jsonb) a(seq int, value jsonb)
+        where exists (select 1 from applied where applied.seq = a.seq and applied.kind = 'ask')
+      ), updated as (
+        update ${f} set inbox_ack = greatest(inbox_ack, ${n.seq}), answer = coalesce(answer, '[]'::jsonb) || coalesce(answers.value, '[]'::jsonb),
+          status = case when exists(select 1 from applied where kind = 'cancel') then 'cancelled'
+            when exists(select 1 from applied where kind = 'approve' and value->>'approvalId' = ${f.approval}->>'id') then 'running' else status end,
+          approval = case when exists(select 1 from applied where kind = 'approve' and value->>'approvalId' = ${f.approval}->>'id') then null else approval end,
+          finished_at = case when exists(select 1 from applied where kind = 'cancel') then now() else finished_at end,
+          updated_at = now()
+        from answers where id in (select id from current)
+      ) select exists (select 1 from current) as accepted`);return!!i?.accepted}async pendingInbox(){return(await m(this.db,()=>this.db.select().from(f).where(w(j(f.status,[`running`,`waiting`]),I`exists (select 1 from ${u} where ${u.taskId} = ${f.id} and ${u.generation} = ${f.generation})`)))).map(e=>({organizationId:e.organizationId,status:_(e)}))}};export{H as DrizzleQueue};

package/dist/refresh-CmBQALAW.js

@@ -0,0 +1 @@
+import{E as e,wn as t}from"./dispatch-YW1aqjEg.js";import{i as n}from"./cli-msOzZFXW.js";const r=n({name:`upgrade refresh`,options:{},run:()=>e(t())});export{r as commandRefreshUpdate};

package/dist/remote-AcWWfKVS.js

@@ -0,0 +1 @@
+import{t as e}from"./rolldown-runtime-DT7IzrpZ.js";import{St as t}from"./dispatch-YW1aqjEg.js";import{c as n,d as r,f as i,g as a,h as o,i as s,l as c,m as l,p as u,u as ee}from"./prompt-K7-bKcTC.js";import{a as d}from"./load-DDZfByUe.js";import{t as f}from"./integrations-B2CavXR1.js";import p from"node:path";import m from"node:process";import h from"node:fs";import{execFile as g}from"node:child_process";import{createHash as _}from"node:crypto";import v from"node:fs/promises";import{promisify as y}from"node:util";import te from"node:http";import*as b from"openid-client";const x={"**/":`(?:.*/)?`,"/**":`/.*`,"**":`.*`,"*":`[^/]*`,"?":`[^/]`};function S(e){return e.split(/\r?\n/).flatMap(e=>{let t=e.trimEnd();if(!t||t.startsWith(`#`))return[];let n=t.startsWith(`!`);n&&(t=t.slice(1));let r=t.endsWith(`/`);r&&(t=t.slice(0,-1));let i=t.replace(/^\//,``).replace(/[.+^${}()|[\]\\]/g,`\\$&`).replace(/\*\*\/|\/\*\*$|\*\*|\*|\?/g,e=>x[e]),a=t.includes(`/`);return[{pattern:RegExp(a?`^${i}$`:`^(?:.*/)?${i}$`),negate:n,directory:r}]})}const C=(e,t,n)=>e.reduce((e,r)=>(!r.directory||n)&&r.pattern.test(t)?!r.negate:e,!1);async function w(e,t,n=``){let r=[];for(let i of await v.readdir(p.join(e,n),{withFileTypes:!0})){let a=n?`${n}/${i.name}`:i.name;i.isDirectory()&&!C(t,a,!0)?r.push(...await w(e,t,a)):i.isFile()&&!C(t,a,!1)&&r.push(a)}return r}async function T(e){return(await y(g)(`git`,[`-C`,e,`ls-files`,`--cached`,`--others`,`--exclude-standard`,`-z`,`--`,`.`],{maxBuffer:67108864}).catch(()=>void 0))?.stdout.split(`\0`).filter(Boolean)}async function E(e){let t=await T(e)??await w(e,S(await v.readFile(p.join(e,`.gitignore`),`utf8`).catch(()=>``))),n={};for(let r of t){if(r===`agent.json`||r===`system.md`)continue;let t=p.join(e,r);(await v.lstat(t).catch(()=>void 0))?.isFile()&&(n[r]=await v.readFile(t,`utf8`))}return n}var D=e({deviceSignIn:()=>P,hasBrowser:()=>ne,logoutSession:()=>z,loopbackSignIn:()=>N,refreshSignIn:()=>F,revokeSignIn:()=>I,selectLoginOrganization:()=>L,sessions:()=>B,signIn:()=>R});const O=`openid profile email offline_access organizations:read`,k=e=>`${e}/.well-known/oauth-cli-client.json`;async function A(e,n){let r=new URL(e).origin,i=await fetch(`${r}/.well-known/oauth-protected-resource`).catch(n=>{throw new t(`login-failed`,`No Coder server answers at ${e}: ${n.message}`)}),a=await i.json().catch(()=>({})),o=Array.isArray(a.authorization_servers)?a.authorization_servers[0]:void 0;if(!i.ok||a.resource!==r||typeof o!=`string`)throw new t(`login-failed`,`${e} does not offer sign-in.`,{hint:`Sign-in needs a Postgres-backed server; see coder docs self-host`});if(n!==void 0&&o!==n)throw new t(`login-failed`,`The server's sign-in issuer has changed. Sign in again before using this session.`);return{config:await b.discovery(new URL(o),k(e),void 0,b.None(),new URL(o).protocol===`http:`?{execute:[b.allowInsecureRequests]}:void 0).catch(e=>{throw new t(`login-failed`,`Wular Auth at ${o} did not answer: ${e.message}`)}),resource:r}}function j(e,n,r){let i=n.claims(),a=n.refresh_token??r?.refreshToken;if(!a)throw new t(`login-failed`,`Wular Auth returned no refresh token.`);return{token:n.access_token,refreshToken:a,expiresAt:Date.now()+(n.expires_in??600)*1e3,issuer:e.serverMetadata().issuer,user:i?{name:typeof i.name==`string`?i.name:``,email:typeof i.email==`string`?i.email:``}:r?.user??{name:``,email:``}}}const M=e=>new t(`login-failed`,e instanceof b.ResponseBodyError||e instanceof b.AuthorizationResponseError?e.error===`access_denied`?`Sign-in was denied in the browser.`:e.error_description??e.error:e instanceof Error?e.message:String(e));async function N(e,n){let{config:r,resource:i}=await A(e),a=b.randomPKCECodeVerifier(),o=b.randomState(),s=te.createServer();await new Promise(e=>s.listen(0,`127.0.0.1`,e));let{port:c}=s.address(),l=`http://127.0.0.1:${c}/callback`;try{let e=new Promise((e,n)=>{let r=setTimeout(()=>n(new t(`login-failed`,`Sign-in timed out.`)),3e5);s.on(`request`,(t,n)=>{let i=new URL(t.url??`/`,l);if(i.pathname!==`/callback`||i.searchParams.get(`state`)!==o){n.writeHead(404).end();return}n.writeHead(200,{"content-type":`text/plain; charset=utf-8`}).end(i.searchParams.has(`error`)?`Sign-in failed. You can close this tab and return to the terminal.`:`Signed in. You can close this tab and return to the terminal.`),clearTimeout(r),e(i)})});return n(b.buildAuthorizationUrl(r,{redirect_uri:l,scope:O,resource:i,code_challenge:await b.calculatePKCECodeChallenge(a),code_challenge_method:`S256`,state:o}).href),j(r,await b.authorizationCodeGrant(r,await e,{pkceCodeVerifier:a,expectedState:o},{resource:i}).catch(e=>{throw M(e)}))}finally{s.close(),s.closeAllConnections()}}async function P(e,t){let{config:n,resource:r}=await A(e);try{let e=await b.initiateDeviceAuthorization(n,{scope:O,resource:r});return t(e.user_code,e.verification_uri_complete??e.verification_uri),j(n,await b.pollDeviceAuthorizationGrant(n,e,{resource:r}))}catch(e){throw M(e)}}async function F(e,n){let{config:r,resource:i}=await A(e,n.issuer);try{return j(r,await b.refreshTokenGrant(r,n.refreshToken,{resource:i}),n)}catch(e){if(e instanceof b.ResponseBodyError&&(e.error===`invalid_grant`||e.error===`invalid_client`))return;throw new t(`server`,`Wular Auth did not refresh the session: ${e instanceof Error?e.message:String(e)}`)}}async function I(e,t){let{config:n}=await A(e,t.issuer);n.serverMetadata().revocation_endpoint&&await b.tokenRevocation(n,t.refreshToken,{token_type_hint:`refresh_token`})}async function L(e,n,r){if(!e.length)throw new t(`login-failed`,`This account belongs to no workspace.`);if(n){let r=e.find(e=>e.slug===n);if(!r)throw new t(`login-failed`,`You are not a member of workspace "${n}".`);return r}if(e.length<=1)return e[0];if(!r)throw new t(`login-failed`,`Choose a workspace for this server.`,{hint:`Pass --workspace <slug>.`});let i=await r(e);return e.find(e=>e.slug===i)}const ne=()=>!m.env.SSH_CONNECTION&&(m.platform!==`linux`||!!(m.env.DISPLAY||m.env.WAYLAND_DISPLAY));async function R(e,n={}){let r=n.device?await P(e,n.onCode??(()=>{})):await N(e,n.open??s),i=await fetch(`${e}/me`,{headers:{authorization:`Bearer ${r.token}`}}).catch(n=>{throw new t(`login-failed`,`No Coder server answers at ${e}: ${n.message}`)}),a=await i.json().catch(()=>({}));if(!i.ok)throw new t(`login-failed`,`Signed in, but the server refused the token.`);let o=await L(a.organizations??[],n.organization,n.chooseOrganization);return{...r,...o?{organization:o}:{},at:Date.now()}}async function z(e){let n=r(),i=n[e];if(!i)throw new t(`login-failed`,`Not signed in to ${e}.`);return await I(e,i).catch(()=>void 0),delete n[e],l(n),{ok:!0,server:e}}const B={async login(e={}){let t=G(e),n=await R(t,e);return e.save!==!1&&l({...r(),[t]:n}),{...n,server:t}},logout:(e={})=>z(G(e)),status:()=>Object.fromEntries(Object.entries(r()).map(([e,t])=>[e,{user:t.user,organization:t.organization,at:t.at}]))};function V(e,t){let n=t,r;return{expiresAt:()=>n.expiresAt,async renew(){return r||=H(e,n).finally(()=>{r=void 0}),n=await r,n.token}}}async function H(e,t){let n=_(`sha256`).update(e).digest(`hex`),r=`${i()}.${n}.lock`;for(h.mkdirSync(p.dirname(r),{recursive:!0});;)try{let e=h.openSync(r,`wx`,384);try{h.writeFileSync(e,String(process.pid))}catch(e){throw h.unlinkSync(r),e}finally{h.closeSync(e)}break}catch(e){if(e.code!==`EEXIST`)throw e;try{let e=Number(h.readFileSync(r,`utf8`));e?process.kill(e,0):Date.now()-h.statSync(r).mtimeMs>3e4&&h.unlinkSync(r)}catch(e){if(e.code===`ESRCH`)try{h.unlinkSync(r)}catch{}}await new Promise(e=>setTimeout(e,25))}try{return await U(e,t)}finally{h.unlinkSync(r)}}async function U(e,n){let i=e=>e&&e.refreshToken!==n.refreshToken?e:void 0,a=i(r()[e]);if(a&&a.expiresAt>n.expiresAt)return a;let o=await F(e,n),s=r();if(o){let t={...n,...o};return l({...s,[e]:t}),t}let c=i(s[e]);if(c)return c;throw delete s[e],l(s),new t(`login-failed`,`Signed out of ${e}.`,{hint:`Sign in again: coder auth login`})}var W=e({addCredential:()=>Q,coderClient:()=>q,connect:()=>K,loginCredential:()=>$,pushAgents:()=>J,serverFor:()=>G});function G(e={}){let r=u(e.server);if(!n(r)){if(!e.yes)throw new t(`invalid-option`,`First use of Coder server ${new URL(r).origin} needs confirmation.`,{hint:`Inspect the origin, then pass yes: true.`});c(r)}return r}function K(e={}){let t=G(e);return q(t,{token:e.token,missingHint:`auth.login({ server: '${t}' })`,organization:e.organization})}function q(e,{token:n,missingHint:r,organization:i}={}){let s=u(e),c=ee(s),l=c?.token,d=m.env.ADMIN_TOKEN,f=n??l??d;if(f&&f===d&&!a(s))throw new t(`invalid-option`,`ADMIN_TOKEN cannot be sent to a non-loopback server.`);if(!f)throw new t(`login-failed`,`Not signed in to ${s}.`,{...r?{hint:r}:{}});return new o(s,{token:f},{organization:i??c?.organization?.slug,renewal:c&&f===l?V(s,c):void 0})}async function J(e,n,r){let i=(await d(n,f)).filter(e=>!e.builtin),a=r?i.filter(e=>e.id===r):i;if(r&&!a.length)throw new t(`invalid-option`,`No workspace agent named "${r}".`);let o=[];for(let t of a)o.push(await e.agents.put(t.id,{definition:t.definition,systemPrompt:await v.readFile(p.join(t.dir,`system.md`),`utf8`).catch(()=>``),files:await E(t.dir),name:t.name,description:t.definition.description}));return o}const Y=/^[A-Za-z_][A-Za-z0-9_]*$/,X=[`claude`,`codex`,`custom`],Z=(e,n)=>new t(`invalid-option`,e,n?{hint:n}:{}),re=()=>new Promise(e=>setTimeout(e,1e3));async function ie(){let e=``;for await(let t of m.stdin)e+=t.toString();return e.replace(/\r?\n$/,``)}async function Q(e,t){let n=Array.isArray(t.env)?t.env:Object.keys(t.env);for(let e of n)if(!Y.test(e))throw Z(`Invalid environment variable name ${JSON.stringify(e)}.`);if(!t.engine)throw Z(`Missing required --engine.`,`Use claude, codex, or custom`);let r=X.find(e=>e===t.engine);if(!r)throw Z(`Invalid --engine value.`,`Use claude, codex, or custom`);if(!n.length)throw Z(`At least one --env NAME is required.`);if(t.value!==void 0&&n.length!==1)throw Z(`--value requires exactly one --env NAME.`);let i=Array.isArray(t.env)?Object.fromEntries(await Promise.all(n.map(async e=>{let n=t.value===`-`?await ie():t.value??m.env[e];if(!n)throw Z(`Environment variable ${e} is not set.`);return[e,n]}))):t.env;return K(t).credentials.add({...e?{label:e}:{},env:i,engine:r,workspace:t.workspace,noCheck:t.noCheck,default:t.default})}async function $(e,t={}){if(e!==`claude`&&e!==`codex`)throw Z(`Name the engine to sign in to.`,`Usage: coder credentials login <claude|codex>`);let n=K(t).credentials,r=await n.login(e);t.onStart?.(()=>n.cancelLogin(r.id));let i=async e=>{for(;!e(r.state);)await re(),r=await n.loginStatus(r.id)};return await i(e=>e!==`starting`),t.onOpen?.(r),e===`claude`&&r.state===`open`&&t.code&&await n.loginCode(r.id,await t.code()),await i(e=>e===`done`||e===`failed`),r}export{W as a,D as c,J as i,K as n,G as o,$ as r,B as s,Q as t};

package/dist/remove-BuaShRZ3.js

@@ -0,0 +1 @@
+import{ot as e}from"./dispatch-YW1aqjEg.js";import{i as t}from"./cli-msOzZFXW.js";import{n,t as r}from"./args-DEMOfLz2.js";import i from"node:process";const a=t({name:`mcp remove`,helpName:`mcp rm`,help:{usage:`coder mcp rm <name> [--user] [--cwd <dir>]`,summary:"Remove `mcp.<name>` from the repo config (or the user config with --user).",flags:[[`--user`,`edit ~/.coder config`]]},options:{...r,user:n},args:1,run:({options:t,args:[n],cwd:r})=>e(r,n,t),print:({name:e,file:t})=>i.stdout.write(`Removed MCP server "${e}" from ${t}.\n`)});export{a as commandMcpRemove};

package/dist/remove-C8Rm8KP-.js

@@ -0,0 +1 @@
+import{t as e}from"./rolldown-runtime-DT7IzrpZ.js";import{i as t}from"./cli-msOzZFXW.js";import{p as n}from"./output-BKeyLbvt.js";import{i as r}from"./models-DGPrMV51.js";import{n as i}from"./add-cdKdz3K0.js";import a from"node:process";var o=e({commandModelRemove:()=>s,printModelChange:()=>c});const s=t({name:`model remove`,help:{usage:`coder model remove <name>`,summary:`Remove a configured custom model.`,flags:[[`--workspace`,`target <repo>/.coder/config.json instead of the user file`]]},options:i,args:1,run:({options:e,args:[t],cwd:n})=>r(n,t,e),print:e=>c(`removed`,e.removed,e.file)});function c(e,t,r){a.stdout.write(`${e} ${n.cyan(t)}  ${n.dim(`(${r})`)}\n`)}export{o as n,c as t};

package/dist/remove-CcMma1x3.js

@@ -0,0 +1 @@
+import{St as e}from"./dispatch-YW1aqjEg.js";import{i as t,t as n}from"./cli-msOzZFXW.js";import{p as r}from"./output-BKeyLbvt.js";import{n as i,o as a}from"./args-DEMOfLz2.js";import o from"node:process";const s={json:i,server:a,yes:i},c=t({name:`runner remove`,globalFlags:{cwd:!1},help:{usage:`coder runner remove <id> [--server [url]] [--json]`,flags:[n]},options:s,args:1,async run({options:t,args:[n]}){let{removeRunner:r}=await import(`./runner-c-2w6Eoj.js`).then(e=>e.a);if(!n)throw new e(`invalid-option`,`Missing runner id.`);return r(n,t)},print:(e,{args:[t]})=>o.stdout.write(`Removed ${r.bold(t)}.\n`)});export{c as commandRunnerRemove,s as runnerOptions};

package/dist/remove-DgMg_OOu.js

@@ -0,0 +1 @@
+import{St as e}from"./dispatch-YW1aqjEg.js";import{i as t,t as n}from"./cli-msOzZFXW.js";import{p as r}from"./output-BKeyLbvt.js";import{n as i,o as a}from"./args-DEMOfLz2.js";import o from"node:process";const s={json:i,server:a,workspace:i,yes:i},c=()=>new e(`invalid-option`,`Missing credential label.`),l=t({name:`credentials remove`,globalFlags:{cwd:!1},help:{usage:`coder credentials remove <label> [--workspace] [--server [url]] [--json]`,flags:[[`--workspace`,`the workspace credential of that label`],n]},options:s,args:1,async run({options:e,args:[t]}){let{connect:n}=await import(`./remote-AcWWfKVS.js`).then(e=>e.a);if(!t)throw c();return n(e).credentials.remove(t,e)},print:(e,{args:[t]})=>o.stdout.write(`Removed ${r.bold(t)}.\n`)});export{l as commandCredentialsRemove,s as credentialOptions,c as missingLabel};

package/dist/rename-C0vNcl8e.js

@@ -0,0 +1 @@
+import{St as e}from"./dispatch-YW1aqjEg.js";import{i as t,t as n}from"./cli-msOzZFXW.js";import{p as r}from"./output-BKeyLbvt.js";import{runnerOptions as i}from"./remove-CcMma1x3.js";import a from"node:process";const o=t({name:`runner rename`,globalFlags:{cwd:!1},help:{usage:`coder runner rename <id> <name> [--server [url]] [--json]`,flags:[n]},options:i,args:2,async run({options:t,args:[n,r]}){let{updateRunner:i}=await import(`./runner-c-2w6Eoj.js`).then(e=>e.a);if(!n||!r)throw new e(`invalid-option`,`Usage: coder runner rename <id> <name>`);return i(n,{name:r},t)},print:(e,{args:[t]})=>a.stdout.write(`Renamed ${t} to ${r.bold(e.name)}.\n`)});export{o as commandRunnerRename};

package/dist/result-C6ovl_Dn.js

@@ -0,0 +1,5 @@
+import{St as e,pn as t}from"./dispatch-YW1aqjEg.js";import{i as n}from"./cli-msOzZFXW.js";import{c as r,m as i,p as a,s as o}from"./output-BKeyLbvt.js";import{l as s,t as c}from"./args-DEMOfLz2.js";import{gateLine as l,gateRunningLine as u,paintPlain as d,printLedger as f,resultJson as p,stepSymbol as m,taskLabel as h,taskLine as g}from"./watch-DDmHonTf.js";import _ from"node:process";const v=n({name:`flow result`,help:{usage:`coder flow result [run-id] [--tail <n|all>] [--json]`,summary:`Show a flow run's status and result, with its tasks, gates, and token ledger.
+--tail <n> caps the step rows (0 for the result alone). Defaults to the most
+recent run. To watch a run live, prefer \`coder flow watch\`.`,flags:[[`--tail <n|all>`,`show the last n step rows (default: all; 0 hides them)`]],examples:[[`coder flow result --tail 0`,`the most recent run's result, no step rows`]]},options:{...c,tail:s},args:1,async run({options:t,args:[n]}){let{runResult:r}=await import(`./executor-HWnIIYUL.js`).then(e=>e.b),i=r(n);if(!i&&!t.json)throw new e(`flow-failed`,n?`No flow run "${n}".`:`No flow runs yet.`,{hint:`Run one: coder flow run <name>`});return i},json:e=>e&&p(e),print:(e,{options:t})=>b(e,t.tail)});function y(e,t=!1){let n=a;if(t)return e.map(d);let r=(t,n)=>{for(let r=t+1;r<e.length;r+=1){let t=e[r].depth;if(t<n)return!1;if(t===n)return!0}return!1};return e.map((e,t)=>{let i=``;for(let n=0;n<e.depth;n+=1)i+=r(t,n)?`│    `:`     `;return i+=e.log?`│ `:r(t,e.depth)?`├─`:`└─`,`${n.dim(i)} ${e.body}`})}function b(e,n=`all`){let s=a,c=!_.stdout.isTTY;_.stdout.write(`${s.bold(`Flow`)} ${s.cyan(e.name)} ${s.dim(`(${e.runId})`)}. ${s.bold(i(e.status))}\n`);let d=e.steps,p=d.filter(e=>t.includes(e.status)).length,v=e.status===`running`?`${p}/${d.length} tasks`:`${e.taskCount} tasks`;if(_.stdout.write(`${s.dim(`started ${e.startedAt}${e.endedAt?` · ended ${e.endedAt}`:``} · ${v}`)}\n`),n!==0){let t=new Map,r=new Map,i=new Map,a=[];for(let n of e.events)if(n.kind===`task-start`){let e={name:h(n.name,n.prompt),engine:n.engine,depth:n.depth??0};t.set(n.taskId,e),r.set(n.taskId,e)}else if(n.kind===`task-end`){r.delete(n.taskId);let e=t.get(n.taskId);a.push({depth:e?.depth??0,body:g(m(n.status,c),e?.name??null,n.taskId,n.tokens,e?.engine)})}else if(n.kind===`gate-start`)i.set(n.gateId,{cmd:n.cmd,depth:n.depth??0});else if(n.kind===`gate`)n.gateId&&i.delete(n.gateId),a.push({depth:n.depth??0,body:l(n,c)});else if(n.kind===`log`)for(let e of n.message.split(`
+`))a.push({depth:n.depth??0,body:s.light(e),log:!0});else n.kind===`flow-start`&&a.push({depth:n.depth-1,body:s.bold(`flow ${n.name}`)});for(let[e,t]of r)a.push({depth:t.depth??0,body:g(m(`running`,c),t.name,e,null,t.engine)+(c?``:` ${s.light(`running`)}`)});for(let e of i.values())a.push({depth:e.depth,body:u(e.cmd,m(`running`,c))+(c?``:` ${s.light(`running`)}`)});if(!a.length)for(let e of n===`all`?d:d.slice(-n))a.push({depth:0,body:g(m(e.status,c),e.name,e.taskId??`-`,e.tokens)});let o=y(a,c),f=n===`all`?o:o.slice(-n);f.length&&_.stdout.write(`\n${f.join(`
+`)}\n`)}e.endedAt&&e.result!==void 0&&_.stdout.write(`\n${s.bold(`Result:`)}\n${r(e.result)}\n`),e.error&&_.stdout.write(`\n${s.red(`error:`)} ${e.error}\n`),f(e.ledger);let b=e.status===`running`?[`Follow live: coder flow watch ${e.runId}`,`Stop it: coder flow stop ${e.runId}`]:e.status===`stopped`||e.status===`failed`?[`Resume: coder flow resume ${e.runId}`]:[];b.length&&_.stdout.write(`\n${o(b,s)}\n`)}export{v as commandResult};

package/dist/result-oQey_hdw.js

@@ -0,0 +1,18 @@
+import{t as e}from"./rolldown-runtime-DT7IzrpZ.js";import{Ft as t,Tt as n,fn as r,jn as i}from"./dispatch-YW1aqjEg.js";import{i as a,r as o}from"./cli-msOzZFXW.js";import{S as s,a as c,d as l,m as u,o as d,p as f,s as p,u as m,x as h,y as g}from"./output-BKeyLbvt.js";import{i as _,l as v,n as y,s as b,t as x}from"./args-DEMOfLz2.js";import S from"node:process";var C=e({LogRenderer:()=>z,OUTPUT_PREVIEW_CHARS:()=>500,commandResult:()=>q,finalMessageLine:()=>T,finishedHints:()=>U,printOutcome:()=>W,promptBlock:()=>D,replyOf:()=>H,statusStyle:()=>B,taskHeaderLines:()=>A,taskSummaryLines:()=>M,trimStep:()=>N});const w={server:_,workspace:b,yes:y};function T(e,t,n,r=f){let i=e?.error?.message??t;return e?.finalMessage||(i?`${r.red(`error:`)} ${i}`:n)}const E=1e3;function D(e,t=f,{truncate:n=!0}={}){let r=e=>e.split(`
+`).map(e=>`  ${t.dim(e)}`);return!n||e.length<=E?[t.dim(`prompt:`),...r(e)]:[t.dim(`prompt:`),...r(e.slice(0,500).trimEnd()),t.light(`  … <${e.length-E} chars trimmed> …`),...r(e.slice(-500).trimStart())]}function O(e,t=f){let n=[];e.permissions&&n.push([`perms`,e.permissions]),e.cwd&&n.push([`cwd`,e.cwd]);for(let t of e.addDirs??[])n.push([`add-dir`,t]);return n.map(([e,n])=>`${t.dim(e.padEnd(8))} ${n}`)}function k(e,t){if(t)return e.createdAt?`started ${c(n(e.createdAt))} ago`:``;let r=e.createdAt&&e.completedAt?Date.parse(e.completedAt)-Date.parse(e.createdAt):null;return[e.completedAt?`finished ${c(n(e.completedAt))} ago`:``,r!==null&&r>=0?`took ${c(r)}`:``].filter(Boolean).join(` · `)}function A(e,{status:n,tokens:i,tokenModel:a,files:o,live:s=!1,style:c=f}){let d=k(e,r.includes(e.status)||n===`waiting-approval`),p=e=>c.dim(e.padEnd(8));return[`${p(`task`)} ${c.cyan(e.id)}`,...e.name?[`${p(`name`)} ${e.name}`]:[],`${p(`status`)} ${u(n)}${d?` ${c.dim(`(${d})`)}`:``}`,`${p(`engine`)} ${t(e)}`,...O(e,c),...i?[`${p(`tokens`)} ${s?l(i):m(i,a??e.model)}${s?c.dim(` (so far)`):``}`]:[],...j(o,p,c)]}const j=(e,t,n)=>e?.length?[`${t(`files`)} ${e.join(`, `)} ${n.dim(`(shell edits not included)`)}`]:[];function M(e,{tokens:t,tokenModel:n,files:r,statusChanged:i=!0,style:a=f}){let o=e=>a.dim(e.padEnd(8)),s=e.createdAt&&e.completedAt?Date.parse(e.completedAt)-Date.parse(e.createdAt):null;return[...i?[`${o(`status`)} ${u(e.status)}${s!==null&&s>=0?` ${a.dim(`(took ${c(s)})`)}`:``}`]:[],...t?[`${o(`tokens`)} ${m(t,n??e.model)}`]:[],...j(r,o,a)]}function N(e,t=300,{plain:n=!1,style:r=f}={}){if(e.length<=t)return e;let i=`<${e.length-t} more chars>`;return`${e.slice(0,t)} ${n?i:r.dim(i)}`}const P=` `.repeat(8),F={assistant:`●`,reasoning:`✻`,tool:`→`,"tool-result":` `,usage:`·`,status:`·`,info:`·`,error:`✘`,steer:`⚑`};function I(e,t){let n=/^\x1b\[[0-9;]*m/.exec(t(``))?.[0];return t(n&&e.includes(L)?e.split(L).join(`${L}${n}`):e)}const L=`\x1B[0m`;function R(e,t,n,r,i=r.dim){if(!e)return``;let a=(e.length>t?e.slice(0,t):e).split(`
+`).map(e=>I(e,i));return e.length>t&&(a[a.length-1]+=` ${r.light(`<${e.length-t} more chars>`)}`),a.length>n?[...a.slice(0,n),r.light(`… +${a.length-n} more lines`)].join(`
+`):a.join(`
+`)}var z=class e{opts;presentation;separated=!1;entryAt=null;lastTool;lastCall=``;seq=0;view;style;static async create(t={}){return new e(t,await import(`./log-view-DeJstSkw.js`).then(e=>e.n))}constructor(e,t){this.opts=e,this.presentation=t,this.view=new t.LogView(e.cwd,{keepAnsi:!0}),this.style=e.style??f}get lastAssistantMessage(){return this.view.lastAssistantMessage}render(e){let t=Date.parse(String(e.at??``));this.entryAt=Number.isFinite(t)?t:null;let n=this.seq++,[r]=this.view.reduce({seq:n,at:t,level:`out`,line:``,entry:e});if(!r)return[];this.separated=r.separated&&r.seq===n;let i=this.style,a=r.sourceKind,o=r.title,s=this.opts.trim??500,l=this.opts.explicitTrim||s===1/0?1/0:6;if(r.kind===`usage`)return this.compose(a,i.dim(o),!1);if(r.kind===`approval`&&r.state){let t=e=>this.presentation.stripCwd(String(e??``),this.opts.cwd),i=t(e.summary),s=i.slice(i.indexOf(`: `)+2),l=i&&!this.lastCall.includes(s)?` · ${i}`:``,u=r.result&&r.result.durationMs>=1e3?` · ${c(r.result.durationMs)}`:``,d=r.seq===n?`${o} ${r.state}${l}`:`${r.state}${u}`;return this.compose(a,this.approval(d,t(e.reason??e.message)),!1)}if(r.kind===`approval`)return this.compose(a,this.approval(o,r.detail??``),!1);if(r.kind===`assistant`)return this.compose(a,o,!0);if(r.kind===`steer`)return this.compose(a,i.yellow(o),!0);if(r.kind===`error`)return this.compose(a,i.red(o),!0);if(r.kind===`reasoning`){let e=Math.round((r.durationMs??0)/1e3),t=e>=1?`thought ${c(e*1e3)} · `:``,n=l===1/0?`${i.dim(t)}${R(o,s,1/0,i)}`:this.clip(`${t}${o.split(`
+`)[0]??``}`,3,i.dim);return this.compose(a,n,!1)}if(r.kind===`tool`&&r.seq===n)return this.lastTool=r.tool,this.lastCall=o,this.compose(a,this.clip(o.replace(/\s*\n\s*/g,` `),2,i.light),!1);if(r.kind===`tool`||r.kind===`tool-result`){let e=r.result??{ok:r.tone!==`error`,exitCode:r.exitCode,durationMs:r.durationMs??0,detail:o},t=[r.tool&&r.tool!==this.lastTool?i.dim(`from ${r.tool}`):``,e.ok?``:i.red(e.exitCode===void 0?`failed`:`exit ${e.exitCode}`),e.durationMs>=3e3?i.dim(c(e.durationMs)):``].filter(Boolean),n=R(e.detail,s,l,i),a=[...t.length?[t.join(i.dim(` · `))]:[],...n?[n]:[]];return a.length?this.compose(`tool-result`,a.join(`
+`),!1):[]}return this.compose(a,this.clip(o,3,i.dim),!1)}approval(e,t){let n=this.style,r=this.opts.width?this.opts.width-P.length:1/0,i=`${e}${t?`. ${t}`:``}`;return!t||h(i)<=r?`${n.light(e)}${t?n.dim(`. ${t}`):``}`:[this.clip(e,1,n.light),this.clip(t,2,n.dim)].join(`
+`)}clip(e,t,n){let r=this.opts.trim??500;if(this.opts.explicitTrim||r===1/0)return R(e,r,1/0,this.style,n);let i=this.opts.width;return i?s(e,Math.max(i-P.length,24),t).map(e=>I(e,n)).join(`
+`):n(e)}compose(e,t,n){let r=this.separated?[``]:[],i=F[e]??(this.presentation.isApproval(e)?`⚑`:`·`),[a=``,...o]=t.split(`
+`);return[...r,`${this.gutter(e)}${this.style.dim(i)} ${a}`,...o.map(e=>n?e:`${P}${e}`)]}gutter(e){let t=` `.repeat(6);return e===`tool-result`||!this.opts.startedAt||this.entryAt===null?t:`${this.style.dim(d(this.entryAt-this.opts.startedAt).padStart(5))} `}};const B=(e,t)=>e===`completed`?t.green(e):e===`failed`?t.red(e):e===`running`?t.yellow(e):t.dim(e);function V(e){return e.startedAt===void 0?``:c((e.finishedAt??Date.now())-e.startedAt)}function H(e){let t=(e.result?.output??``).trim().split(`
+`);for(let e=t.length-1;e>=0;--e){let n=t[e].trim();if(n.startsWith(`{`))try{let e=JSON.parse(n).reply;return typeof e==`string`?e:void 0}catch{return}}}function U(e,t,n=!1){return p([`Continue on the same task: coder task steer ${e} "<follow-up>"${n?` --server`:``}`],t)}function W(e,t){S.stdout.write(`${t.bold(e.task.id)}  ${B(e.status,t)}${e.error?`  ${t.red(e.error)}`:``}${V(e)?`  ${t.dim(`took ${V(e)}`)}`:``}\n`),e.credential&&S.stdout.write(`${t.dim(`credential`)}  ${e.credential}\n`);let n=H(e);n&&S.stdout.write(`\n${t.bold(`Reply`)}\n${n.trim()}\n`),[`completed`,`failed`,`cancelled`].includes(e.status)&&S.stdout.write(`\n${U(e.task.id,t,!0)}\n`)}function G(e,t=!1){let{task:n,steps:r,result:i}=e;return{taskId:n.id,name:n.name??null,prompt:n.prompt??null,system:n.system??null,status:e.status,engine:n.engine,model:n.model??null,effort:n.effort??null,permissions:n.permissions??null,cwd:n.cwd??null,addDirs:n.addDirs??[],createdAt:n.createdAt??null,completedAt:n.completedAt??null,...e.idleMs===void 0?{}:{idleMs:e.idleMs,lastActivityAt:e.lastActivityAt??null,stalled:e.stalled},pendingApprovals:e.pendingApprovals,...r.length?{steps:r}:{},turnCount:e.turns.length,...t?{turns:e.turns}:{},result:i}}async function K(e,t,n={}){let{task:a,steps:o,result:s,turns:l,pendingApprovals:u}=e,d=f,m=r.includes(a.status),h=A(a,{status:e.status,tokens:s?.tokens??e.liveTokens??null,tokenModel:s?.model,files:s?.touchedFiles?.map(e=>i(a.cwd??t,e)),live:!s?.tokens&&!!e.liveTokens,style:d});if(a.prompt&&h.push(...D(a.prompt,d)),u.length){h.push(``,d.dim(`pending approvals:`));for(let e of u)h.push(`  ${d.cyan(e.id)}  ${e.summary}`),e.cwd&&h.push(`  ${d.dim(`runs in ${e.cwd}`)}`),h.push(`  ${d.bold(`coder task approve ${a.id} ${e.id}`)}  ${d.dim(`(--deny to reject)`)}`)}if(o.length){h.push(``,d.dim(`steps:`));let e=await z.create({cwd:a.cwd??t,startedAt:Date.parse(a.createdAt??``)||void 0,width:g(),style:d}),n=s?.finalMessage&&String(o.at(-1)?.message??``).trim()===String(s.finalMessage).trim()?o.slice(0,-1):o;for(let t of n)h.push(...e.render(t))}if(h.push(``),n.turns&&l.length)l.forEach((e,t)=>{t&&h.push(``),h.push(d.dim(`Turn ${t+1} of ${l.length}. ${N(String(e.prompt??``))}`)),h.push(String(e.finalMessage||d.dim(`(no final message)`)))});else if(s)h.push(T({...s,error:s.error??void 0},a.error,`(no final message)`,d)),l.length>1&&h.push(d.dim(`Turn ${l.length} of ${l.length}. All answers are in coder task result ${a.id} --turns.`));else if(m){let{lastLog:t}=e;h.push(d.dim(e.stalled?`Result pending. No progress for ${c(e.idleMs??0)}. The task may be stalled.${t?` Last: ${N(t.message??t.kind??``)}`:``}`:`Result pending. The task is still running.`))}else h.push(d.dim(`(no result)`));if(m||h.push(``,U(a.id,d)),m&&!n.wait){let t=[`Wait in its own background shell, one per task; do not poll: coder task result ${a.id} --wait`,`Follow live: coder task watch ${a.id}`];e.stalled&&t.push(`Check the transcript: coder task result ${a.id} --tail all`),h.push(``,p(t,d))}S.stdout.write(`${h.join(`
+`)}\n`)}const q=a({name:`task result`,help:{usage:`coder task result [task-id] [--server [url]]`,summary:`Show a task's status and its final answer (result pending while it runs), plus
+any pending approvals. --wait blocks until it finishes, then prints. --tail <n>
+includes the last n progress-log steps (--tail all for the whole transcript).
+Defaults to the most recent task. Shortcut: \`coder result\`.
+
+Run each --wait in its own background shell, one per task. Never wait on several
+tasks in one call, or their approvals and answers never reach you one by one.`,flags:[[`--wait`,`block until the task finishes or needs an approval, then print`],[`--turns`,`every turn's answer (a steered task accretes turns)`],[`--tail <n|all>`,`include the last n progress-log steps (default: 0, final result only)`],o],exitCodes:[[`0`,`The task completed successfully.`],[`1`,`The task failed or was cancelled.`],[`4`,`An approval is pending; answer it, then run --wait again.`]],examples:[[`coder result <task-id> --wait`,`block until the task finishes, print the answer`],[`coder result <task-id> --turns`,`every turn's answer for a steered task`]]},options:{...x,tail:v,wait:y,turns:y,...w},args:1,run:async({options:e,args:[t]})=>{let{tasks:n}=await import(`./task-DEp3GHwH.js`).then(e=>e.t);return n.result(t,{...e,organization:e.workspace,onWaiting:e=>S.stderr.write(`${f.dim(`[coder] waiting for task ${e} to finish...`)}\n`)})},json:(e,{options:t})=>`attempts`in e?e:G(e,t.turns),print:(e,{options:t,cwd:n})=>`attempts`in e?W(e,f):K(e,n,t),exit:(e,{options:t})=>t.wait&&!(`attempts`in e)?e.task.status===`completed`?0:1:void 0});export{D as a,B as c,N as d,W as i,A as l,T as n,H as o,U as r,C as s,z as t,M as u};

package/dist/resume-T_TXWfqE.js

@@ -0,0 +1,3 @@
+import{i as e}from"./cli-msOzZFXW.js";import{printFollow as t,printRunSummary as n}from"./watch-DDmHonTf.js";import{RUN_FLAGS as r,hooks as i,parseRunArgs as a,printDetached as o,runOptions as s}from"./run-BFYg-zZt.js";const c=e({name:`flow resume`,help:{usage:`coder flow resume [run-id] [--wait] [--json] [--dry-run]`,summary:`Re-run a flow from its journal: finished steps replay instantly, the first
+changed or new step onward runs live. Defaults to the most recent run.
+Accepts the same flags as flow run.`,flags:[[`--wait`,`follow the run in the foreground (Ctrl-C detaches; it keeps running)`],[`--concurrency <n>`,`tasks running at once`],[`--max-tasks <n>`,`total tasks the run may dispatch`]],examples:[[`coder flow resume`,`continue the most recent run`]]},options:r,args:1,async run({options:e,args:[n],cwd:r}){let{resumeRun:o}=await import(`./executor-HWnIIYUL.js`).then(e=>e.b),c=await o(n,{...s(e,r),...e.args===void 0?{}:{args:a(e.args,[])}},i(e));return c.status===`running`&&c.watch&&await t(c.watch,e),c},print:e=>e.status===`running`?o(e):n(e)});export{c as commandResume};

package/dist/review-CCs6XUSO.js

@@ -0,0 +1,7 @@
+import{St as e}from"./dispatch-YW1aqjEg.js";import{i as t}from"./cli-msOzZFXW.js";import{c as n,n as r,s as i,t as a}from"./args-DEMOfLz2.js";import o from"node:process";import*as s from"zod/mini";function c(e){let{summary:t}=e,n=`\`${t.baseSha}\`${t.worktree?` through the working tree`:`..\`${t.headSha}\``}`,r=(t.warnings??[]).flatMap(e=>[e,``]);if(t.worktree&&!t.files)return`${[`# Coder review`,``,`Nothing to review from ${n}.`,``,...r,`Flow run: \`${e.runId}\``].join(`
+`)}\n`;let i=[`# Coder review`,``,`Reviewed ${n}${t.model?` with ${t.model}`:``} in ${(t.elapsedMs/1e3).toFixed(1)}s.`,``,...r,...e.findings.length?e.findings.flatMap(e=>[`- **${e.severity.toUpperCase()}** [\`${e.file}:${e.line}\`]. ${e.summary}`,`  ${e.failure_scenario}`]):[`No findings after checking against the repository.`]];return t.posted!==void 0&&i.push(``,`Posted ${t.posted} new inline comment${t.posted===1?``:`s`}.`),i.push(``,`Flow run: \`${e.runId}\``),`${i.join(`
+`)}\n`}const l=t({name:`review`,help:{usage:`coder review [--base <ref>] [--head <ref>] [--pr <n|url>] [--since <sha>] [--path <p>]... [--exclude <p>]... [--post] [--json|--md] [--engine <name>] [--model <alias|slug>] [--effort <low|medium|high>] [--cwd <dir>]`,summary:`Review changed code with a read-only agent. Every reported finding is checked
+against the repository. Runs the built-in \`review\` flow. A local review covers
+everything since the merge-base with the origin default branch, including
+uncommitted and untracked files. Changed submodules are reviewed file by file.
+PR reviews can post deduplicated inline comments.`,flags:[[`--base <ref>`,`local comparison base (default: merge-base with origin default)`],[`--head <ref>`,`review commits through this ref only (default: the working tree)`],[`--pr <n|url>`,`review a pull request by number (origin repo) or URL; GitHub via gh for now`],[`--since <sha>`,`keep only PR files and hunks changed since this commit`],[`--path <p>`,`review only this path, relative to cwd (repeatable)`],[`--exclude <p>`,`leave this path out, relative to cwd (repeatable)`],[`--post`,`post deduplicated inline comments and sticky PR summary`],[`--md`,`markdown output (the default)`],[`--engine <name>`,`codex, claude, or custom`],[`--model <alias|slug>`,`model for the review task`],[`--effort <low|medium|high>`,`reasoning effort and review depth (default: medium depth)`]],examples:[[`coder review`,`review the branch plus uncommitted work`],[`coder review --base main`,`review everything since main locally`],[`coder review --path src --exclude src/gen`,`review src without generated code`],[`coder review --pr 42 --post`,`review and post to pull request 42`]],seeAlso:`flow watch · docs review`},options:{...a,base:i,head:i,pr:i,since:i,path:n,exclude:n,post:r,md:r,engine:i,model:i,effort:s.optional(s.enum([`low`,`medium`,`high`],{error:`expected "low", "medium", or "high"`}))},async run({options:t,cwd:n}){let{runFlowByName:r}=await import(`./executor-HWnIIYUL.js`).then(e=>e.t);if(t.json&&t.md)throw new e(`invalid-option`,`--json and --md are mutually exclusive.`);let i=await r(`review`,{cwd:n,args:{...t,cwd:n}});return{...i.result,runId:i.runId}},print:e=>o.stdout.write(c(e))});export{l as commandReview};

package/dist/rotate-key-CYimsQR5.js

@@ -0,0 +1 @@
+import{i as e}from"./cli-msOzZFXW.js";import{n as t}from"./args-DEMOfLz2.js";import n from"node:process";const r=e({name:`server rotate-key`,globalFlags:{cwd:!1},help:{usage:`coder server rotate-key [--json]`,summary:`Re-seal stored app, installation, engine, and linked user secrets with the current key.`,env:[[`SERVER_ENCRYPTION_KEY`,`the new key`],[`SERVER_ENCRYPTION_KEY_PREVIOUS`,`the old key, still accepted while rotating`]]},options:{json:t},run:async()=>{let{rotateKey:e}=await import(`./maintenance-Bg_FzXSq.js`).then(e=>e.t);return e()},json:({moved:e})=>({ok:!0,moved:e}),print:({moved:e})=>n.stdout.write(`Re-sealed ${e} secret${e===1?``:`s`}.\n`)});export{r as commandServerRotateKey};

package/dist/run-BFYg-zZt.js

@@ -0,0 +1,5 @@
+import{St as e}from"./dispatch-YW1aqjEg.js";import{i as t}from"./cli-msOzZFXW.js";import{p as n,s as r}from"./output-BKeyLbvt.js";import{n as i,s as a,t as o}from"./args-DEMOfLz2.js";import{FlowStepRenderer as s,printFollow as c,printRunSummary as l}from"./watch-DDmHonTf.js";import u from"node:process";const d={...o,args:a,wait:i,concurrency:a,"max-tasks":a,"dry-run":i};function f(t){let n={};for(let r of t){let t=r.indexOf(`=`);if(t===-1)throw new e(`invalid-option`,`Invalid argument "${r}": expected key=value.`,{hint:`Help: coder flow run --help`});let i=r.slice(0,t),a=r.slice(t+1);try{n[i]=JSON.parse(a)}catch{n[i]=a}}return n}function p(t,n){if(t!==void 0)try{return JSON.parse(t)}catch(t){throw new e(`invalid-option`,`Invalid --args JSON: ${t instanceof Error?t.message:String(t)}`)}return n.length?f(n):{}}const m=e=>e?Number(e):void 0,h=(e,t)=>({cwd:t,dryRun:e[`dry-run`],concurrency:m(e.concurrency),maxTasks:m(e[`max-tasks`]),argv:u.argv.slice(2),wait:e.wait}),g=e=>e[`dry-run`]&&!e.json?v():{},_=t({name:`flow run`,help:{usage:`coder flow run <name|path> [--args '<json>' | key=value...] [--wait] [--concurrency N] [--max-tasks N] [--json] [--dry-run]`,summary:`Run a flow: a TypeScript file that orchestrates many coder tasks with gates,
+journaling, and resume. Prints the run id and orchestrates in the background;
+--wait follows the run in the foreground with live progress (Ctrl-C detaches;
+it keeps running), and \`coder flow watch\` shows the same lines any time.
+Stop a run with \`coder flow stop\`.`,flags:[[`--wait`,`follow the run in the foreground (Ctrl-C detaches; it keeps running)`],[`--args <json>`,`the flow's input as a JSON value (or pass bare key=value pairs)`],[`--concurrency <n>`,`tasks running at once (default: CPU count)`],[`--max-tasks <n>`,`total tasks the run may dispatch (default: CPU count x 10)`],[`--dry-run`,`print every resolved prompt and gate command without dispatching`]],examples:[[`coder flow run audit-routes --wait`,`run a discovered flow`],[`coder flow run ./scratch/one-off.ts --wait`,`run a flow by path`],[`coder flow run verify --args '{"clusters":["a","b"]}' --wait`,`pass structured input`]]},options:d,args:1/0,async run({options:t,args:[n,...r],cwd:i}){let{startRun:a}=await import(`./executor-HWnIIYUL.js`).then(e=>e.b);if(!n)throw new e(`invalid-option`,`Missing flow name or path.`,{hint:[`Usage: coder flow run <name|path>`,`List: coder flow discover`]});let o=await a(n,{...h(t,i),args:p(t.args,r)},g(t));return o.status===`running`&&o.watch&&await c(o.watch,t),o},print:e=>e.status===`running`?y(e):l(e)});function v(){let e=new s,t=t=>e.emit(t);return{onTaskStart:e=>t({kind:`task-start`,...e}),onTaskEnd:e=>t({kind:`task-end`,...e}),onGateStart:e=>t({kind:`gate-start`,...e}),onGate:e=>t({kind:`gate`,...e}),onLog:(e,n)=>t({kind:`log`,message:e,depth:n}),onFlowStart:e=>t({kind:`flow-start`,...e}),onReplay:e=>t({kind:`replay`,count:e})}}function y(e){u.stdout.write(`${n.dim(`[flow]`)} run ${n.cyan(e.runId)} started in the background (running).\n`),u.stdout.write(`\n${r([`Result: coder flow result ${e.runId}`,`Runs: coder flow list`],n)}\n`)}export{d as RUN_FLAGS,_ as commandRun,g as hooks,p as parseRunArgs,y as printDetached,h as runOptions};

package/dist/run-D7F7JPV6.js

@@ -0,0 +1,2 @@
+import{p as e}from"./prompt-K7-bKcTC.js";import{i as t,r as n}from"./cli-msOzZFXW.js";import{p as r,s as i}from"./output-BKeyLbvt.js";import{i as a,n as o,s,t as c}from"./args-DEMOfLz2.js";import{i as l}from"./result-oQey_hdw.js";import{printLine as u}from"./watch-DYkC6Q2q.js";import d from"node:process";const f={...c,flow:s,server:a,workspace:s,wait:o,task:s,yes:o},p=t({name:`agent run --task`,options:f,run:async({options:e,cwd:t})=>{let{agents:n}=await import(`./agent-BcXXkOmD.js`).then(e=>e.t);return n.runTask(e.task,{cwd:t})}}),m=t({name:`agent run`,help:{usage:`coder agent run <agent> <file> [--server [url] [--wait]] [--flow <name>] [--json] [--cwd <dir>]`,summary:`Run a recorded platform event (AgentEvent JSON) through an agent. With --server it goes through your Coder server exactly like a webhook: real app, tokens, runner, and the reply is posted. Without it the engine runs here on the agent's prompt and this checkout, platform tools off, and the reply is printed.`,flags:[n,[`--wait`,`with --server: follow the task log here until it finishes, then print the reply`],[`--flow <name>`,`override the matched flow`]],examples:[[`coder agent run helper sample-slack-mention.json`,`offline: print what the agent would reply`],[`coder agent run helper event.json --server`,`for real, through the server`]]},options:f,args:2,run:async({options:e,args:[t,n],cwd:i})=>{let{agents:a}=await import(`./agent-BcXXkOmD.js`).then(e=>e.t);return a.run(t,n,{...e,cwd:i,organization:e.workspace,...e.json?{}:{onLog:e=>u(e,r),onDone:e=>l(e,r)}})},json:e=>Array.isArray(e)&&e.length===1?e[0]:e,print(t,{options:n}){if(!Array.isArray(t)){if(`tasks`in t){if(!t.tasks.length)return void d.stdout.write(`The server accepted the event but no agent matched it.
+`);d.stdout.write(`${r.bold(`Queued on the server`)} as task ${t.tasks.join(`, `)}.\n\n${i([`Watch it: coder task watch ${t.tasks[0]} --server ${e(n.server)}`],r)}\n`);return}t.reply===void 0?t.result!==void 0&&d.stdout.write(`${JSON.stringify(t.result,null,2)}\n`):d.stdout.write(`${t.reply.trim()}\n`)}}}),h=Object.assign(e=>(e.some(e=>e===`--task`||e.startsWith(`--task=`))?p:m)(e),{commandName:`agent run`,help:m.help});export{h as commandAgentRun};

package/dist/run-hiPyO7js.js

@@ -0,0 +1,2 @@
+import{d as e,i as t,n,p as r}from"./cli-msOzZFXW.js";import{p as i,r as a,s as o,u as s}from"./output-BKeyLbvt.js";import{c,i as l,n as u,s as d,t as f}from"./args-DEMOfLz2.js";import{i as p,r as m}from"./result-oQey_hdw.js";import{printLine as h}from"./watch-DYkC6Q2q.js";import{TASK_FLAGS as g}from"./task-CyrDqqf8.js";import _ from"node:process";function v(t){let n=e([{usage:`coder task result ${t} --wait`,blurb:`run this in its own background shell, one per task (never wait on several tasks in one call). Returns with the answer or a pending approval.`},{usage:`coder task steer ${t} "<follow-up>"`,blurb:`steer the task with a message (use 'ask' without interrupting main thread)`},{usage:`coder task stop ${t}`,blurb:`stop the task`},{usage:`coder task list`,blurb:`recent tasks`},{usage:`coder task --help`,blurb:`all task commands`}],i,i.blue);return[...r(`Next step`,n.slice(0,1),i),...r(`Related`,n.slice(1),i)].join(`
+`)}function y(e,t){_.stdout.write(`${i.dim(`[coder]`)} task ${i.blue(e)} started in the background (${t}).\n`),_.stdout.write(`${v(e)}\n`)}function b(e){_.stderr.write(`${i.dim(`[coder]`)} Task ${i.cyan(e)} started and is waiting to finish. Press Ctrl-C to detach. It keeps running.\n`),_.stderr.write(`${v(e)}\n`)}function x(e){_.stderr.write(`\n${i.dim(`[coder] Detached. The task is still running.`)}\n\n${o([`Wait in its own background shell, one per task: coder task result ${e} --wait`],a)}\n`)}function S(e){_.stdout.write(`\n${e.finalMessage||(e.error?`${i.red(`error:`)} ${e.error}`:`(no final message)`)}\n\n`);let t=e.tokens?` tokens=${s(e.tokens,e.model)}`:``;_.stderr.write(`${i.dim(`[coder] task=${e.taskId} status=${e.status}${t}`)}\n\n${m(e.taskId,a)}\n`)}const C=t({name:`task run`,help:{usage:`coder task run "<task text>"`,summary:`Dispatch a coding task to the configured engine. Backgrounds by default and\nprints a task id; --wait runs in the foreground and prints the answer.\nShortcut: \`coder run "<text>"\`.\n\nWriting a task: one task per focused goal, independent goals as parallel runs.\nThe worker starts with nothing but the text, so include the goal, file paths,\nconstraints and any context only you have. Delegate rather than doing the work\nyourself first, however small it looks.\n\nWaiting: run \`coder task result <task-id> --wait\` in its own background shell, one\nper task. Never wait on several tasks in one call, or their approvals and answers\nnever reach you one by one.\n\n${n}`,flags:[[`--output-schema <json>`,`JSON Schema for the task answer`],[`--name <name>`,`label the task (shown in list/result)`],[`--agent <id>`,`run as that agent: its system.md, engine settings, MCP servers and flows; flags override them`],[`--system <text>`,`standing instructions prepended to the task (kept out of prompt previews)`],...g,[`--server [url] [--workspace <slug>]`,`run the task on your Coder server and follow it here (--background prints its id)`],[`--repo <owner/name>`,`with --server: check out a repo from the workspace's installs`],[`--runner <name>`,`with --server: where it runs (a runner kind or a registered runner)`]],exitCodes:[[`0`,`The task started, or --wait printed a successful answer.`],[`1`,`Dispatch or the task failed.`],[`3`,`No engine could start; follow fallback.instructions in the JSON payload.`],[`4`,`An approval is pending; answer it, then run result --wait again.`],[`130`,`The foreground wait was detached and the task is still running.`]],examples:[[`coder run "add a /health endpoint"`,`dispatch in the background, print a task id`],[`coder result <task-id> --wait`,`then block until it finishes and print the answer`],[`coder run --wait "fix the failing test"`,`or block on the run itself`],[`coder task run --model luna --system "tests live in test/, don't touch anything outside of it" "rename foo to bar"`,`pick an engine via its model alias; --system adds standing instructions`],[`coder task run --agent reviewer "review the last commit"`,`run a repo agent from .coder/agents/reviewer`],[`coder run --add-dir ../api --add-dir ../shared "update the client for the new endpoint"`,`let the task reach sibling repos too`]]},options:{...f,agent:d,"output-schema":d,engine:d,model:d,effort:d,permissions:d,host:d,name:d,system:d,mcp:d,"add-dir":c,background:u,wait:u,"simulate-approval":u,server:l,workspace:d,yes:u,repo:d,runner:d},args:1/0,async run({options:e,args:t}){let{tasks:n}=await import(`./task-DEp3GHwH.js`).then(e=>e.t),r=e.json,a;return _.on(`SIGINT`,()=>{a&&x(a),_.exit(130)}),n.run(t.join(` `).trim(),{cwd:e.cwd,agent:e.agent,outputSchema:e[`output-schema`]?JSON.parse(e[`output-schema`]):void 0,engine:e.engine,model:e.model,effort:e.effort,permissions:e.permissions,name:e.name,system:e.system,mcp:e.mcp,addDirs:e[`add-dir`],wait:e.server===void 0?e.wait:!e.background,simulateApproval:e[`simulate-approval`],repo:e.repo,runner:e.runner,server:e.server,yes:e.yes,organization:e.workspace,onFallback:({engine:e,detail:t,next:n})=>_.stderr.write(`[coder] ${e} failed to start (${t}); falling back to ${n}.\n`),onNote:e=>_.stderr.write(`[coder] ${e}\n`),onWaiting:e=>{a=e,r||b(e)},onLog:e=>r?_.stdout.write(`${JSON.stringify(e,null,2)}\n`):h(e,i)})},print(e,{options:t}){if(`attempts`in e)return t.background?void _.stdout.write(`${e.task.id}\n`):p(e,i);t.wait?S(e):y(e.taskId,e.status)},exit:(e,{options:t})=>(`attempts`in e?!t.background:t.wait)?e.status===`completed`?0:1:void 0});export{C as commandTask};

package/dist/runner-D5jaEfhG.js

@@ -0,0 +1 @@
+import{s as e}from"./cli-msOzZFXW.js";const t=e(`runner`,{add:async()=>(await import(`./add-Bz8uaOcu.js`)).commandRunnerAdd,default:async()=>(await import(`./default-aLeIO8IR.js`)).commandRunnerDefault,test:async()=>(await import(`./test-BcFQUHRo.js`)).commandRunnerTest,serve:async()=>(await import(`./serve-BgGXjT_O.js`)).commandRunnerServe,list:async()=>(await import(`./list-BdiYneg5.js`)).commandRunnerList,rename:async()=>(await import(`./rename-C0vNcl8e.js`)).commandRunnerRename,remove:async()=>(await import(`./remove-CcMma1x3.js`)).commandRunnerRemove},{menu:[{usage:`add <kind>`,blurb:`connect a runner`},{usage:`default <id>`,blurb:`set the default in its scope`},{usage:`test <id>`,blurb:`check a runner connection`},{usage:`serve --url <public url>`,blurb:`run your server's tasks on this machine`},{usage:`list`,blurb:`list your runners and the workspace's`},{usage:`rename <id> <name>`,blurb:`rename a runner`},{usage:`remove <id>`,blurb:`remove a runner`}],description:[`Run your Coder server's tasks on your own machine, reached through any tunnel.`],exampleCommand:`runner serve`});export{t as commandRunner};

package/dist/runner-c-2w6Eoj.js

@@ -0,0 +1 @@
+import{t as e}from"./rolldown-runtime-DT7IzrpZ.js";import{St as t}from"./dispatch-YW1aqjEg.js";import{n}from"./remote-AcWWfKVS.js";var r=e({addRunner:()=>a,addRunnerFields:()=>u,listRunners:()=>i,pairRunner:()=>o,removeRunner:()=>l,testRunner:()=>c,updateRunner:()=>s});const i=(e={})=>n(e).runners.list(),a=(e,t={})=>n(t).runners.add(e),o=(e,t={})=>n(t).runners.pair(e),s=(e,t,r={})=>n(r).runners.update(e,t),c=(e,t={})=>n(t).runners.test(e),l=(e,t={})=>n(t).runners.remove(e);async function u(e,r){let i=n(r),{catalog:a}=await i.runners.list(),o=a.find(t=>t.kind===e);if(!o)throw new t(`invalid-option`,`Unknown runner kind.`);if(!o.available)throw new t(`invalid-option`,o.reason??`Runner unavailable.`);let s={};for(let e of r.field??[]){let n=e.indexOf(`=`);if(n<1)throw new t(`invalid-option`,`Use --field key=value.`);let r=e.slice(0,n),i=e.slice(n+1),a=o.fields.find(e=>e.key===r);if(!a)throw new t(`invalid-option`,`Unknown runner field ${r}.`);if(a.secret){if(!/^env:[A-Z_][A-Z0-9_]*$/.test(i)||!process.env[i.slice(4)])throw new t(`invalid-option`,`Read ${r} from the environment with --field ${r}=env:VARIABLE.`);s[r]=process.env[i.slice(4)]}else s[r]=i}let c=r.scope??((await i.me()).user?`personal`:`workspace`);if(c!==`personal`&&c!==`workspace`)throw new t(`invalid-option`,`Scope must be personal or workspace.`);return o.connect===`pair`?i.runners.pair({name:r.name,scope:c}):i.runners.add({kind:o.kind,name:r.name??o.name,scope:c,config:s})}export{r as a,l as i,i as n,c as o,o as r,s,a as t};

package/dist/sdk.d.ts

@@ -1,6 +1,6 @@
 import { C as CoderConfig, D as McpConfigEntry, E as McpAddOptions, O as Permission, S as TaskTurn, T as Effort, _ as RunnerPairing, b as RunnerTest, c as TaskStatus$1, d as TokenUsage, f as LocalFolder, g as RunnerKind, h as RunnerInput, l as TurnResult, m as ProbeResult, n as Availability, p as LocalFolders, s as Task, t as Approval, u as TaskLogEntry, v as RunnerRow, w as CustomModelConfig, x as RunnerUpdate, y as RunnerSpec } from "./types-DMGBYB_K.js";
 import { ReviewArgs, ReviewResult } from "./flow/builtin/review.js";
-import { a as readTurnResults, b as FlowRecord, c as archiveRuns, d as RunSummary, f as StopSummary, i as readTask, l as deleteRuns, n as flowSdk, o as CoderError, r as TaskResult, s as RunResult$1, u as RunOptions, v as DiscoveredFlow, x as FlowStep, y as FlowEvent } from "./index-B1L4zXZH.js";
+import { C as FlowStep, a as readTurnResults, b as FlowEvent, c as archiveRuns, d as RunSummary, f as StopSummary, i as readTask, l as deleteRuns, n as flowSdk, o as CoderError, r as TaskResult, s as RunResult$1, u as RunOptions, x as FlowRecord, y as DiscoveredFlow } from "./index-Xe8n_t2Z.js";
 import "zod/mini";
 import { Message, SerializedMessage, SerializedThread } from "chat";
 import "drizzle-orm";
@@ -407,7 +407,6 @@ interface TaskRunOptions {
   permissions?: string;
   name?: string;
   system?: string;
-  resume?: string;
   /** Extra directories the task may reach, resolved against cwd. */
   addDirs?: string[];
   /** MCP servers to attach, by name from config. */

package/dist/sdk.js

@@ -1 +1 @@
-import{Ct as e,T as t,X as n,Z as r,it as i,ot as a,rt as o,st as s,w as c}from"./dispatch-BsW_1m7e.js";import{n as l,r as u,s as d,t as f}from"./remote-CxFnEjZl.js";import{n as p}from"./executor-vMppVLB6.js";import{n as m}from"./agent-BlQ_dNNm.js";import{t as h}from"./docs-DKROso-4.js";import{a as g,i as _,n as v,o as y,r as b,s as x,t as S}from"./models-C-S7HqSb.js";import{n as C}from"./task-CvSqiwxo.js";import w from"./flow/index.js";import{i as T,n as E,o as D,r as O,s as k,t as A}from"./runner-wDYhkVsM.js";import{t as j}from"./serve-yjSw0B1a.js";import{t as M}from"./github-actions-C_NkHVJq.js";import{n as N}from"./apps-CU2YalX8.js";import{n as P,r as F}from"./maintenance-BAzr9Jlr.js";import{r as I,t as L}from"./serve-BJ_Mbm2m.js";import R from"node:path";import ee from"node:process";function z(e){return e?R.resolve(e):ee.cwd()}const B=C,V={add:(e,t)=>S(z(t.cwd),e,t),update:(e,t)=>x(z(t.cwd),e,t),remove:(e,t={})=>_(z(t.cwd),e,t),list:(e={})=>b(z(e.cwd)),alias:(e,t,n={})=>v(z(n.cwd),e,t,n),unalias:(e,t={})=>y(z(t.cwd),e,t),disable:(e,t={})=>g(z(t.cwd),e,!0,t),enable:(e,t={})=>g(z(t.cwd),e,!1,t)},H={get:(e,t={})=>n(z(t.cwd),e),set:(e,t,n={})=>r(z(n.cwd),e,t,n)},U={add:(e,t)=>o(z(t.cwd),e,t),addJson:(e,t,n={})=>i(z(n.cwd),e,t,n),list:(e={})=>a(z(e.cwd)),remove:(e,t={})=>s(z(t.cwd),e,t)};function W(e=[],t={}){return c(z(t.cwd),{hosts:e})}function G(e={}){return t(e)}function K(e,t={}){return h(e,t)}const q={async run(e={}){let t=await p(`review`,{cwd:e.cwd,args:e});return{...t.result,runId:t.runId}}},J=d,Y={serve:L,migrate:P,rotateKey:F,workflow:()=>M,app:{create:N},handler:I},X={list:(e={})=>l(e).credentials.list(),add:f,remove:(e,t={})=>l(t).credentials.remove(e,t),default:(e,t={})=>l(t).credentials.setDefault(e,t),login:u},Z={list:(e={})=>l(e).folders.list(),check:(e,t={})=>l(t).folders.check(e)},Q={list:E,add:A,pair:O,update:k,default:(e,t={})=>k(e,{default:!0},t),test:D,rename:(e,t,n={})=>k(e,{name:t},n),remove:T,serve:j},$=m;var te={task:B,flow:w,model:V,config:H,mcp:U,setupHost:W,upgrade:G,docs:K,review:q,auth:J,agent:$,credentials:X,folders:Z,runner:Q,server:Y};export{e as CoderError,$ as agent,J as auth,H as config,X as credentials,te as default,K as docs,w as flow,Z as folders,U as mcp,V as model,q as review,Q as runner,Y as server,W as setupHost,B as task,G as upgrade};
+import{C as e,St as t,X as n,Y as r,at as i,nt as a,ot as o,rt as s,w as c}from"./dispatch-YW1aqjEg.js";import{n as l,r as u,s as ee,t as d}from"./remote-AcWWfKVS.js";import{n as f}from"./executor-HWnIIYUL.js";import{n as p}from"./agent-BcXXkOmD.js";import{t as m}from"./docs-Byrpar10.js";import{a as h,i as g,n as _,o as v,r as y,s as b,t as x}from"./models-DGPrMV51.js";import{n as S}from"./task-DEp3GHwH.js";import C from"./flow/index.js";import{i as w,n as T,o as E,r as D,s as O,t as k}from"./runner-c-2w6Eoj.js";import{t as A}from"./serve-xMihn4g-.js";import{t as j}from"./github-actions-CvLya8ve.js";import{n as M}from"./apps-eueTmHR5.js";import{n as N,r as P}from"./maintenance-Bg_FzXSq.js";import{r as F,t as I}from"./serve-GIK3fqKA.js";import L from"node:path";import R from"node:process";function z(e){return e?L.resolve(e):R.cwd()}const B=S,V={add:(e,t)=>x(z(t.cwd),e,t),update:(e,t)=>b(z(t.cwd),e,t),remove:(e,t={})=>g(z(t.cwd),e,t),list:(e={})=>y(z(e.cwd)),alias:(e,t,n={})=>_(z(n.cwd),e,t,n),unalias:(e,t={})=>v(z(t.cwd),e,t),disable:(e,t={})=>h(z(t.cwd),e,!0,t),enable:(e,t={})=>h(z(t.cwd),e,!1,t)},H={get:(e,t={})=>r(z(t.cwd),e),set:(e,t,r={})=>n(z(r.cwd),e,t,r)},U={add:(e,t)=>a(z(t.cwd),e,t),addJson:(e,t,n={})=>s(z(n.cwd),e,t,n),list:(e={})=>i(z(e.cwd)),remove:(e,t={})=>o(z(t.cwd),e,t)};function W(t=[],n={}){return e(z(n.cwd),{hosts:t})}function G(e={}){return c(e)}function K(e,t={}){return m(e,t)}const q={async run(e={}){let t=await f(`review`,{cwd:e.cwd,args:e});return{...t.result,runId:t.runId}}},J=ee,Y={serve:I,migrate:N,rotateKey:P,workflow:()=>j,app:{create:M},handler:F},X={list:(e={})=>l(e).credentials.list(),add:d,remove:(e,t={})=>l(t).credentials.remove(e,t),default:(e,t={})=>l(t).credentials.setDefault(e,t),login:u},Z={list:(e={})=>l(e).folders.list(),check:(e,t={})=>l(t).folders.check(e)},Q={list:T,add:k,pair:D,update:O,default:(e,t={})=>O(e,{default:!0},t),test:E,rename:(e,t,n={})=>O(e,{name:t},n),remove:w,serve:A},$=p;var te={task:B,flow:C,model:V,config:H,mcp:U,setupHost:W,upgrade:G,docs:K,review:q,auth:J,agent:$,credentials:X,folders:Z,runner:Q,server:Y};export{t as CoderError,$ as agent,J as auth,H as config,X as credentials,te as default,K as docs,C as flow,Z as folders,U as mcp,V as model,q as review,Q as runner,Y as server,W as setupHost,B as task,G as upgrade};

package/dist/serve-BgGXjT_O.js

@@ -0,0 +1 @@
+import{i as e,t}from"./cli-msOzZFXW.js";import{p as n,s as r}from"./output-BKeyLbvt.js";import{n as i,o as a,s as o,t as s}from"./args-DEMOfLz2.js";import c from"node:process";import*as l from"zod/mini";const u=e({name:`runner serve`,help:{usage:`coder runner serve --url <public url> [--token <token>] [--runner-url <url>] [--port <n>] [--name <name>] [--workspace] [--server [url]] [--json]`,summary:`Run tasks on this machine with its own claude and codex logins. Expose the port with any tunnel (cloudflared, ngrok, Tailscale Funnel or a public VS Code port) and pass the tunnel's URL; each start registers the current URL, so a changing tunnel URL is fine. Choose a default with coder runner default. Tasks use their named runner, the agent setting, your default, the workspace default, then the server default.`,flags:[[`--url <public url>`,`the HTTPS address the server reaches this runner at`],[`--token <token>`,`one-use pairing token, --url is the Coder server`],[`--runner-url <url>`,`public tunnel address when pairing, or CODER_RUNNER_URL`],[`--port <n>`,`local port the tunnel forwards to (default 4100)`],[`--name <name>`,`shown in the dashboard (default: this machine's hostname)`],[`--workspace`,`run every member's tasks, not only yours (owners and admins)`],t],examples:[[`cloudflared tunnel --url http://localhost:4100`,`expose the port in one terminal`],[`coder runner serve --url https://abc.trycloudflare.com`,`then serve through it`]]},options:{...s,port:l.optional(l.coerce.number().check(l.int(),l.positive())),url:o,name:o,token:o,"runner-url":o,workspace:i,server:a,yes:i},async run({options:e}){let{serveRunner:t}=await import(`./serve-xMihn4g-.js`).then(e=>e.n),n=await t({...e,runnerUrl:e[`runner-url`]}),r=()=>void n.close().finally(()=>c.exit(0));return c.once(`SIGINT`,r),c.once(`SIGTERM`,r),n},json:({server:e,close:t,...n})=>({ok:!0,...n}),print:e=>c.stdout.write(`Runner ${n.bold(e.name)} serves ${e.server} at ${n.cyan(e.config.url??``)} (${e.scope}), listening on localhost:${e.port}.\n${r([`Tasks run here with this machine's own claude and codex logins`,`Stop with Ctrl-C; the server marks the runner offline`],n,n.cyan)}\n`)});export{u as commandRunnerServe};

package/dist/serve-C-AD60Wa.js

@@ -0,0 +1,12 @@
+import{An as e,Et as t,Mn as n,Vt as r,W as i,_ as a,an as o,nn as s,tt as c,v as l,wn as u,y as d}from"./dispatch-YW1aqjEg.js";import{i as f}from"./cli-msOzZFXW.js";import{s as p}from"./args-DEMOfLz2.js";import{n as m}from"./mcp-server-DGzme0YX.js";import h from"node:path";import g from"node:fs";import{spawn as _}from"node:child_process";import{randomUUID as v}from"node:crypto";function y(e){return h.join(e,`sidecar.json`)}function b(t){return e(y(t))??{sessionId:null,declineStreak:0}}async function x(e){let t=h.join(e,`sidecar.lock`),n=Date.now()+12e4;for(;;)try{return g.mkdirSync(t),()=>{try{g.rmdirSync(t)}catch{}}}catch{try{if(Date.now()-g.statSync(t).mtimeMs>9e4){g.rmdirSync(t);continue}}catch{continue}if(Date.now()>n)throw Error(`sidecar lock wait timed out`);await new Promise(e=>setTimeout(e,250))}}function S(e,t,n,r){return[`-p`,r,`--output-format`,`json`,`--model`,`sonnet`,`--effort`,`low`,`--strict-mcp-config`,`--no-chrome`,`--mcp-config`,`{"mcpServers":{}}`,`--settings`,`{"disableClaudeAiConnectors":true}`,n?`--resume`:`--session-id`,t,...i,`--add-dir`,e]}function C(e,t,n,r,i){let a=S(t,n,r,i);return new Promise((t,n)=>{let r=_(`claude`,a,{cwd:e,stdio:[`ignore`,`pipe`,`pipe`]}),i=``,o=``,s=setTimeout(()=>{r.kill(`SIGKILL`),n(Error(`sidecar call timed out`))},12e4);r.stdout.on(`data`,e=>i+=e),r.stderr.on(`data`,e=>o+=e),r.on(`error`,e=>{clearTimeout(s),n(e)}),r.on(`close`,e=>{if(clearTimeout(s),e!==0){n(Error(`sidecar claude exited ${e}: ${o.trim().slice(0,200)}`));return}try{let e=JSON.parse(i);if(e.is_error){n(Error(`sidecar turn errored: ${String(e.result??``).slice(0,200)}`));return}t(String(e.result??``))}catch{n(Error(`sidecar returned unparseable output`))}})})}function w(e){let t=e.match(/\{[^{}]*"decision"[^{}]*\}/);if(!t)return null;try{let e=JSON.parse(t[0]);if(e.decision===`accept`||e.decision===`decline`||e.decision===`escalate`)return{decision:e.decision,reason:String(e.reason??``)}}catch{}return null}async function T(e,t,r){let i=null;try{i=await x(t);let a=b(t);if(a.declineStreak>=3)return{decision:`escalate`,reason:`sidecar decline streak; needs human review`};if(!a.sessionId){let i=v();await C(e,t,i,!1,`You are the approval reviewer for a "coder" background coding task. The task runs inside an OS sandbox; you review only actions that escape it.
+
+Rules:
+- git stays read-only: decline any git write (commit/push/checkout/reset/...).
+- Decline anything destructive or system-level (sudo, rm -rf outside workspace, killing processes, changing system config, piping downloads to shells).
+- Temp locations (/tmp, \$TMPDIR, os temp dirs) and paths this task created are workspace scratch. They can be deleted after checking the progress log.
+- Accept actions clearly needed for the task goal (package installs in the workspace, running tests/builds/linters, reading system info, network to well-known package registries).
+- Escalate when genuinely uncertain, when the action is irreversible beyond the workspace, or when it touches credentials/secrets.
+
+You may Read/Grep workspace files and the task progress log to inform a decision. Do this only when the action line alone is not enough. Most decisions should not need it.
+
+Reply with ONLY one line of JSON: {"decision":"accept"|"decline"|"escalate","reason":"<short>"}. Acknowledge now with {"decision":"escalate","reason":"ready"}.${r.taskGoal?`\n\nTask goal: ${r.taskGoal.replace(/\s+/g,` `).slice(0,500)}`:``}${`\nTask progress log: ${h.join(t,`log.jsonl`)}`}`),a.sessionId=i,n(y(t),a)}let o=w(await C(e,t,a.sessionId,!0,`action: ${r.summary.slice(0,500)}`));return o?.decision===`decline`?a.declineStreak+=1:o?.decision===`accept`&&(a.declineStreak=0),n(y(t),a),o??{decision:`escalate`,reason:`sidecar verdict unparseable`}}catch(e){return{decision:`escalate`,reason:`sidecar unavailable: ${e instanceof Error?e.message:String(e)}`}}finally{i?.()}}const E=new Set([`Write`,`Edit`,`MultiEdit`,`NotebookEdit`]);async function D(e,n,i){let u=String(i.tool_name??``),f=i.input??i.tool_input??{},p=o(e),m=s(e,n),h=c(e),g=r=>t(e,n,r),_,v;if(u===`Bash`){let e=String(f.command??``);v=`run command: ${e||`(unknown command)`}`,_=a(e,{allowedNetworkHosts:h.approvals.allowedNetworkHosts})}else if(E.has(u)){let e=String(f.file_path??f.notebook_path??``);v=`${u}: ${e||`(unknown path)`}`,_=l(e?[e]:[],p)}else v=`${u||`(unknown tool)`}: ${JSON.stringify(f).slice(0,200)}`,_={decision:`escalate`,reason:`tool needs approval: ${u}`};g({kind:`approval-decision`,method:u,decision:_.decision,reason:_.reason,summary:v});let y=_.decision,b=_.reason;if(y===`escalate`){let t=await T(e,m,{taskGoal:r(e,n)?.prompt??null,summary:v});g({kind:`sidecar-decision`,decision:t.decision,reason:t.reason,summary:v}),t.decision===`escalate`?(y=await d(m,{method:`claude/${u}`,summary:v,params:{tool_name:u,input:f}},{timeoutMs:h.approvals.escalationTimeoutMs,onEvent:g}),b=`escalated for human review`):(y=t.decision,b=t.reason)}return y===`accept`?{behavior:`allow`,updatedInput:f}:{behavior:`deny`,message:`Denied by coder policy: ${b}`}}const O={approval_prompt:{description:`Coder approval policy for claude permission prompts.`,inputSchema:{type:`object`,additionalProperties:!0},handler:(e,{cwd:t,taskId:n})=>D(t,n,e).catch(e=>({behavior:`deny`,message:`coder mcp tool failed: ${e instanceof Error?e.message:String(e)}`}))}},k=f({name:`mcp serve`,options:{cwd:p},args:1,run:({args:e,cwd:t})=>m(`coder`,O,{cwd:t,taskId:e[0]},void 0,u())});export{k as commandMcp};