@wular/coder 0.4.8 → 0.4.9

package/dist/{rotate-key-CfeZ6Rg7.js → rotate-key-Dpx_WmuU.js}

@@ -1 +1 @@
-import{i as e}from"./cli-D5hyqGq0.js";import{n as t}from"./args-CxsMr9Un.js";import n from"node:process";const r=e({name:`server rotate-key`,globalFlags:{cwd:!1},help:{usage:`coder server rotate-key [--json]`,summary:`Re-seal stored app, installation, engine, and linked user secrets with the current key.`,env:[[`SERVER_ENCRYPTION_KEY`,`the new key`],[`SERVER_ENCRYPTION_KEY_PREVIOUS`,`the old key, still accepted while rotating`]]},options:{json:t},run:async()=>{let{rotateKey:e}=await import(`./maintenance-B_79IJ_E.js`).then(e=>e.t);return e()},json:({moved:e})=>({ok:!0,moved:e}),print:({moved:e})=>n.stdout.write(`Re-sealed ${e} secret${e===1?``:`s`}.\n`)});export{r as commandServerRotateKey};
+import{i as e}from"./cli-ZUdhZnuW.js";import{n as t}from"./args-CxsMr9Un.js";import n from"node:process";const r=e({name:`server rotate-key`,globalFlags:{cwd:!1},help:{usage:`coder server rotate-key [--json]`,summary:`Re-seal stored app, installation, engine, and linked user secrets with the current key.`,env:[[`SERVER_ENCRYPTION_KEY`,`the new key`],[`SERVER_ENCRYPTION_KEY_PREVIOUS`,`the old key, still accepted while rotating`]]},options:{json:t},run:async()=>{let{rotateKey:e}=await import(`./maintenance-DuIspk-y.js`).then(e=>e.t);return e()},json:({moved:e})=>({ok:!0,moved:e}),print:({moved:e})=>n.stdout.write(`Re-sealed ${e} secret${e===1?``:`s`}.\n`)});export{r as commandServerRotateKey};

package/dist/{run-VOuS-hHe.js → run-CLy9a2MO.js}

@@ -1,2 +1,2 @@
-import{m as e}from"./prompt-C--TI1qn.js";import{i as t,r as n}from"./cli-D5hyqGq0.js";import{p as r,s as i}from"./output-BKeyLbvt.js";import{i as a,n as o,s,t as c}from"./args-CxsMr9Un.js";import{i as l}from"./result-DXL9N9Ip.js";import{printLine as u}from"./watch-BMuVZorc.js";import d from"node:process";const f={...c,flow:s,server:a,workspace:s,wait:o,task:s,yes:o},p=t({name:`agent run --task`,options:f,run:async({options:e,cwd:t})=>{let{agents:n}=await import(`./agent-C1HI4JlI.js`).then(e=>e.t);return n.runTask(e.task,{cwd:t})}}),m=t({name:`agent run`,help:{usage:`coder agent run <agent> <file> [--server [url] [--wait]] [--flow <name>] [--json] [--cwd <dir>]`,summary:`Run a recorded platform event (AgentEvent JSON) through an agent. With --server it goes through your Coder server exactly like a webhook: real app, tokens, runner, and the reply is posted. Without it the engine runs here on the agent's prompt and this checkout, platform tools off, and the reply is printed.`,flags:[n,[`--wait`,`with --server: follow the task log here until it finishes, then print the reply`],[`--flow <name>`,`override the matched flow`]],examples:[[`coder agent run helper sample-slack-mention.json`,`offline: print what the agent would reply`],[`coder agent run helper event.json --server`,`for real, through the server`]]},options:f,args:2,run:async({options:e,args:[t,n],cwd:i})=>{let{agents:a}=await import(`./agent-C1HI4JlI.js`).then(e=>e.t);return a.run(t,n,{...e,cwd:i,organization:e.workspace,...e.json?{}:{onLog:e=>u(e,r),onDone:e=>l(e,r)}})},json:e=>Array.isArray(e)&&e.length===1?e[0]:e,print(t,{options:n}){if(!Array.isArray(t)){if(`tasks`in t){if(!t.tasks.length)return void d.stdout.write(`The server accepted the event but no agent matched it.
+import{m as e}from"./prompt-C--TI1qn.js";import{i as t,r as n}from"./cli-ZUdhZnuW.js";import{p as r,s as i}from"./output-BKeyLbvt.js";import{i as a,n as o,s,t as c}from"./args-CxsMr9Un.js";import{i as l}from"./result-jeiRJTzA.js";import{printLine as u}from"./watch-IL2eEgwD.js";import d from"node:process";const f={...c,flow:s,server:a,workspace:s,wait:o,task:s,yes:o},p=t({name:`agent run --task`,options:f,run:async({options:e,cwd:t})=>{let{agents:n}=await import(`./agent-ChnedLBv.js`).then(e=>e.t);return n.runTask(e.task,{cwd:t})}}),m=t({name:`agent run`,help:{usage:`coder agent run <agent> <file> [--server [url] [--wait]] [--flow <name>] [--json] [--cwd <dir>]`,summary:`Run a recorded platform event (AgentEvent JSON) through an agent. With --server it goes through your Coder server exactly like a webhook: real app, tokens, runner, and the reply is posted. Without it the engine runs here on the agent's prompt and this checkout, platform tools off, and the reply is printed.`,flags:[n,[`--wait`,`with --server: follow the task log here until it finishes, then print the reply`],[`--flow <name>`,`override the matched flow`]],examples:[[`coder agent run helper sample-slack-mention.json`,`offline: print what the agent would reply`],[`coder agent run helper event.json --server`,`for real, through the server`]]},options:f,args:2,run:async({options:e,args:[t,n],cwd:i})=>{let{agents:a}=await import(`./agent-ChnedLBv.js`).then(e=>e.t);return a.run(t,n,{...e,cwd:i,organization:e.workspace,...e.json?{}:{onLog:e=>u(e,r),onDone:e=>l(e,r)}})},json:e=>Array.isArray(e)&&e.length===1?e[0]:e,print(t,{options:n}){if(!Array.isArray(t)){if(`tasks`in t){if(!t.tasks.length)return void d.stdout.write(`The server accepted the event but no agent matched it.
 `);d.stdout.write(`${r.bold(`Queued on the server`)} as task ${t.tasks.join(`, `)}.\n\n${i([`Watch it: coder task watch ${t.tasks[0]} --server ${e(n.server)}`],r)}\n`);return}t.reply===void 0?t.result!==void 0&&d.stdout.write(`${JSON.stringify(t.result,null,2)}\n`):d.stdout.write(`${t.reply.trim()}\n`)}}}),h=Object.assign(e=>(e.some(e=>e===`--task`||e.startsWith(`--task=`))?p:m)(e),{commandName:`agent run`,help:m.help});export{h as commandAgentRun};

package/dist/{run-CoTg7SkY.js → run-DU4G8gNw.js}

@@ -1,2 +1,2 @@
-import{d as e,i as t,n,p as r}from"./cli-D5hyqGq0.js";import{p as i,r as a,s as o,u as s}from"./output-BKeyLbvt.js";import{c,i as l,n as u,s as d,t as f}from"./args-CxsMr9Un.js";import{i as p,r as m}from"./result-DXL9N9Ip.js";import{printLine as h}from"./watch-BMuVZorc.js";import{TASK_FLAGS as g}from"./task-4gw9OZun.js";import _ from"node:process";function v(t){let n=e([{usage:`coder task result ${t} --wait`,blurb:`run this in its own background shell, one per task (never wait on several tasks in one call). Returns with the answer or a pending approval.`},{usage:`coder task steer ${t} "<follow-up>"`,blurb:`steer the task with a message (use 'ask' without interrupting main thread)`},{usage:`coder task stop ${t}`,blurb:`stop the task`},{usage:`coder task list`,blurb:`recent tasks`},{usage:`coder task --help`,blurb:`all task commands`}],i,i.blue);return[...r(`Next step`,n.slice(0,1),i),...r(`Related`,n.slice(1),i)].join(`
+import{d as e,i as t,n,p as r}from"./cli-ZUdhZnuW.js";import{p as i,r as a,s as o,u as s}from"./output-BKeyLbvt.js";import{c,i as l,n as u,s as d,t as f}from"./args-CxsMr9Un.js";import{i as p,r as m}from"./result-jeiRJTzA.js";import{printLine as h}from"./watch-IL2eEgwD.js";import{TASK_FLAGS as g}from"./task-DTN_fIGC.js";import _ from"node:process";function v(t){let n=e([{usage:`coder task result ${t} --wait`,blurb:`run this in its own background shell, one per task (never wait on several tasks in one call). Returns with the answer or a pending approval.`},{usage:`coder task steer ${t} "<follow-up>"`,blurb:`steer the task with a message (use 'ask' without interrupting main thread)`},{usage:`coder task stop ${t}`,blurb:`stop the task`},{usage:`coder task list`,blurb:`recent tasks`},{usage:`coder task --help`,blurb:`all task commands`}],i,i.blue);return[...r(`Next step`,n.slice(0,1),i),...r(`Related`,n.slice(1),i)].join(`
 `)}function y(e,t){_.stdout.write(`${i.dim(`[coder]`)} task ${i.blue(e)} started in the background (${t}).\n`),_.stdout.write(`${v(e)}\n`)}function b(e){_.stderr.write(`${i.dim(`[coder]`)} Task ${i.cyan(e)} started and is waiting to finish. Press Ctrl-C to detach. It keeps running.\n`),_.stderr.write(`${v(e)}\n`)}function x(e){_.stderr.write(`\n${i.dim(`[coder] Detached. The task is still running.`)}\n\n${o([`Wait in its own background shell, one per task: coder task result ${e} --wait`],a)}\n`)}function S(e){_.stdout.write(`\n${e.finalMessage||(e.error?`${i.red(`error:`)} ${e.error}`:`(no final message)`)}\n\n`);let t=e.tokens?` tokens=${s(e.tokens,e.model)}`:``;_.stderr.write(`${i.dim(`[coder] task=${e.taskId} status=${e.status}${t}`)}\n\n${m(e.taskId,a)}\n`)}const C=t({name:`task run`,help:{usage:`coder task run "<task text>"`,summary:`Dispatch a coding task to the configured engine. Backgrounds by default and\nprints a task id; --wait runs in the foreground and prints the answer.\nShortcut: \`coder run "<text>"\`.\n\nWriting a task: one task per focused goal, independent goals as parallel runs.\nThe worker starts with nothing but the text, so include the goal, file paths,\nconstraints and any context only you have. Delegate rather than doing the work\nyourself first, however small it looks.\n\nWaiting: run \`coder task result <task-id> --wait\` in its own background shell, one\nper task. Never wait on several tasks in one call, or their approvals and answers\nnever reach you one by one.\n\n${n}`,flags:[[`--output-schema <json>`,`JSON Schema for the task answer`],[`--name <name>`,`label the task (shown in list/result)`],[`--agent <id>`,`run as that agent: its system.md, engine settings, MCP servers and flows; flags override them`],[`--system <text>`,`standing instructions prepended to the task (kept out of prompt previews)`],...g,[`--server [url] [--workspace <slug>]`,`run the task on your Coder server and follow it here (--background prints its id)`],[`--repo <owner/name>`,`with --server: check out a repo from the workspace's installs`],[`--runner <name>`,`with --server: where it runs (a runner kind or a registered runner)`]],exitCodes:[[`0`,`The task started, or --wait printed a successful answer.`],[`1`,`Dispatch or the task failed.`],[`3`,`No engine could start; follow fallback.instructions in the JSON payload.`],[`4`,`An approval is pending; answer it, then run result --wait again.`],[`130`,`The foreground wait was detached and the task is still running.`]],examples:[[`coder run "add a /health endpoint"`,`dispatch in the background, print a task id`],[`coder result <task-id> --wait`,`then block until it finishes and print the answer`],[`coder run --wait "fix the failing test"`,`or block on the run itself`],[`coder task run --model luna --system "tests live in test/, don't touch anything outside of it" "rename foo to bar"`,`pick an engine via its model alias; --system adds standing instructions`],[`coder task run --agent reviewer "review the last commit"`,`run a repo agent from .coder/agents/reviewer`],[`coder run --add-dir ../api --add-dir ../shared "update the client for the new endpoint"`,`let the task reach sibling repos too`]]},options:{...f,agent:d,"output-schema":d,engine:d,model:d,effort:d,permissions:d,host:d,name:d,system:d,mcp:d,connections:d,"add-dir":c,background:u,wait:u,"simulate-approval":u,server:l,workspace:d,yes:u,repo:d,runner:d},args:1/0,async run({options:e,args:t}){let{tasks:n}=await import(`./task-IoBYe7ok.js`).then(e=>e.t),r=e.json,a;return _.on(`SIGINT`,()=>{a&&x(a),_.exit(130)}),n.run(t.join(` `).trim(),{cwd:e.cwd,agent:e.agent,outputSchema:e[`output-schema`]?JSON.parse(e[`output-schema`]):void 0,engine:e.engine,model:e.model,effort:e.effort,permissions:e.permissions,name:e.name,system:e.system,mcp:e.mcp,connections:e.connections?.split(`,`).map(e=>e.trim()).filter(Boolean),addDirs:e[`add-dir`],wait:e.server===void 0?e.wait:!e.background,simulateApproval:e[`simulate-approval`],repo:e.repo,runner:e.runner,server:e.server,yes:e.yes,organization:e.workspace,onFallback:({engine:e,detail:t,next:n})=>_.stderr.write(`[coder] ${e} failed to start (${t}); falling back to ${n}.\n`),onNote:e=>_.stderr.write(`[coder] ${e}\n`),onWaiting:e=>{a=e,r||b(e)},onLog:e=>r?_.stdout.write(`${JSON.stringify(e,null,2)}\n`):h(e,i)})},print(e,{options:t}){if(`attempts`in e)return t.background?void _.stdout.write(`${e.task.id}\n`):p(e,i);t.wait?S(e):y(e.taskId,e.status)},exit:(e,{options:t})=>(`attempts`in e?!t.background:t.wait)?e.status===`completed`?0:1:void 0});export{C as commandTask};

package/dist/{run-CvdayZfK.js → run-D_pl9GF_.js}

@@ -1,4 +1,4 @@
-import{H as e}from"./dispatch-D3Dqxijf.js";import{i as t}from"./cli-D5hyqGq0.js";import{p as n,s as r}from"./output-BKeyLbvt.js";import{n as i,s as a,t as o}from"./args-CxsMr9Un.js";import{FlowStepRenderer as s,printFollow as c,printRunSummary as l}from"./watch-Bl_pCGfq.js";import u from"node:process";const d={...o,args:a,wait:i,concurrency:a,"max-tasks":a,"dry-run":i};function f(t){let n={};for(let r of t){let t=r.indexOf(`=`);if(t===-1)throw new e(`invalid-option`,`Invalid argument "${r}": expected key=value.`,{hint:`Help: coder flow run --help`});let i=r.slice(0,t),a=r.slice(t+1);try{n[i]=JSON.parse(a)}catch{n[i]=a}}return n}function p(t,n){if(t!==void 0)try{return JSON.parse(t)}catch(t){throw new e(`invalid-option`,`Invalid --args JSON: ${t instanceof Error?t.message:String(t)}`)}return n.length?f(n):{}}const m=e=>e?Number(e):void 0,h=(e,t)=>({cwd:t,dryRun:e[`dry-run`],concurrency:m(e.concurrency),maxTasks:m(e[`max-tasks`]),argv:u.argv.slice(2),wait:e.wait}),g=e=>e[`dry-run`]&&!e.json?v():{},_=t({name:`flow run`,help:{usage:`coder flow run <name|path> [--args '<json>' | key=value...] [--wait] [--concurrency N] [--max-tasks N] [--json] [--dry-run]`,summary:`Run a flow: a TypeScript file that orchestrates many coder tasks with gates,
+import{H as e}from"./dispatch-D3Dqxijf.js";import{i as t}from"./cli-ZUdhZnuW.js";import{p as n,s as r}from"./output-BKeyLbvt.js";import{n as i,s as a,t as o}from"./args-CxsMr9Un.js";import{FlowStepRenderer as s,printFollow as c,printRunSummary as l}from"./watch-qfr7aSfo.js";import u from"node:process";const d={...o,args:a,wait:i,concurrency:a,"max-tasks":a,"dry-run":i};function f(t){let n={};for(let r of t){let t=r.indexOf(`=`);if(t===-1)throw new e(`invalid-option`,`Invalid argument "${r}": expected key=value.`,{hint:`Help: coder flow run --help`});let i=r.slice(0,t),a=r.slice(t+1);try{n[i]=JSON.parse(a)}catch{n[i]=a}}return n}function p(t,n){if(t!==void 0)try{return JSON.parse(t)}catch(t){throw new e(`invalid-option`,`Invalid --args JSON: ${t instanceof Error?t.message:String(t)}`)}return n.length?f(n):{}}const m=e=>e?Number(e):void 0,h=(e,t)=>({cwd:t,dryRun:e[`dry-run`],concurrency:m(e.concurrency),maxTasks:m(e[`max-tasks`]),argv:u.argv.slice(2),wait:e.wait}),g=e=>e[`dry-run`]&&!e.json?v():{},_=t({name:`flow run`,help:{usage:`coder flow run <name|path> [--args '<json>' | key=value...] [--wait] [--concurrency N] [--max-tasks N] [--json] [--dry-run]`,summary:`Run a flow: a TypeScript file that orchestrates many coder tasks with gates,
 journaling, and resume. Prints the run id and orchestrates in the background;
 --wait follows the run in the foreground with live progress (Ctrl-C detaches;
 it keeps running), and \`coder flow watch\` shows the same lines any time.

package/dist/runner-zT5Oyrfr.js

@@ -0,0 +1 @@
+import{s as e}from"./cli-ZUdhZnuW.js";const t=e(`runner`,{add:async()=>(await import(`./add-CXAGrCnC.js`)).commandRunnerAdd,default:async()=>(await import(`./default-EXRzdZUY.js`)).commandRunnerDefault,test:async()=>(await import(`./test-BTkKFbnx.js`)).commandRunnerTest,serve:async()=>(await import(`./serve-UE1fcf4t.js`)).commandRunnerServe,list:async()=>(await import(`./list-CaFQOnfI.js`)).commandRunnerList,rename:async()=>(await import(`./rename-lyssPQfD.js`)).commandRunnerRename,remove:async()=>(await import(`./remove-BZCA-gdU.js`)).commandRunnerRemove},{menu:[{usage:`add <kind>`,blurb:`connect a runner`},{usage:`default <id>`,blurb:`set the default in its scope`},{usage:`test <id>`,blurb:`check a runner connection`},{usage:`serve --url <public url>`,blurb:`run your server's tasks on this machine`},{usage:`list`,blurb:`list your runners and the workspace's`},{usage:`rename <id> <name>`,blurb:`rename a runner`},{usage:`remove <id>`,blurb:`remove a runner`}],description:[`Run your Coder server's tasks on your own machine, reached through any tunnel.`],exampleCommand:`runner serve`});export{t as commandRunner};

package/dist/{runners-UNKPlmYE.js → runners-CNhxPjg8.js}

@@ -1,4 +1,4 @@
-import{Rt as e,qi as t}from"./core-DwsAMCnL.js";import{Hn as n,In as r,Yt as i,c as a,zn as o}from"./config-D2FxHWwi.js";import{u as s}from"./slack-C_RlVDz7.js";import{t as c}from"./integrations-D3OgJk6Y.js";import{n as l,t as u}from"./task-CB-j4EO8.js";import{a as d,i as f,n as p,r as ee,t as te}from"./local-XNsjb-UM.js";import m from"node:process";import{execFile as h}from"node:child_process";import{createCipheriv as g,createDecipheriv as _,createHash as v,createHmac as ne,randomBytes as y,randomUUID as b}from"node:crypto";import x,{isIP as S}from"node:net";import{lookup as re}from"node:dns/promises";import{request as ie}from"node:https";const ae=r({env:o(n(),n().check(e(1)))}),C=`plain`;function w(e,t=`SERVER_ENCRYPTION_KEY`){if(!e)return;let n=Buffer.from(e,`base64`);if(n.length!==32)throw Error(`${t} must be a base64-encoded 32-byte key`);return n}function T(e){return w(e.encryptionKey)}function E(e){let t=w(e);return t?v(`sha256`).update(t).digest().readInt32BE(0):0}function D(e){return[[e.encryptionKey,`SERVER_ENCRYPTION_KEY`],[e.previousEncryptionKey,`SERVER_ENCRYPTION_KEY_PREVIOUS`]].filter(e=>!!e[0]).map(([e,t])=>({value:w(e,t),version:E(e)}))}function O(e){let t=ae.safeParse(e);if(!t.success||!Object.keys(t.data.env).length)throw Error(`Invalid engine credential`);return t.data}function oe(e,t){let n=T(e);if(!n)return{iv:C,tag:``,ciphertext:Buffer.from(JSON.stringify(O(t))).toString(`base64`)};let r=y(12),i=g(`aes-256-gcm`,n,r),a=Buffer.concat([i.update(JSON.stringify(O(t)),`utf8`),i.final()]);return{iv:r.toString(`base64`),tag:i.getAuthTag().toString(`base64`),ciphertext:a.toString(`base64`)}}function se(e,t){if(t.iv===C)return O(JSON.parse(Buffer.from(t.ciphertext,`base64`).toString(`utf8`)));for(let n of D(e))try{let e=_(`aes-256-gcm`,n.value,Buffer.from(t.iv,`base64`));return e.setAuthTag(Buffer.from(t.tag,`base64`)),O(JSON.parse(Buffer.concat([e.update(Buffer.from(t.ciphertext,`base64`)),e.final()]).toString(`utf8`)))}catch{}throw Error(`Stored credential was sealed with an unavailable encryption key`)}function ce(e,t){let n=T(e);if(!n)return`${C}.${Buffer.from(JSON.stringify(t)).toString(`base64`)}`;let r=y(12),i=g(`aes-256-gcm`,n,r),a=Buffer.concat([i.update(JSON.stringify(t),`utf8`),i.final()]);return[r,i.getAuthTag(),a].map(e=>e.toString(`base64`)).join(`.`)}function k(e,t){if(t.startsWith(`${C}.`))return JSON.parse(Buffer.from(t.slice(6),`base64`).toString(`utf8`));let[n,r,i]=t.split(`.`).map(e=>Buffer.from(e,`base64`));for(let t of D(e))try{let e=_(`aes-256-gcm`,t.value,n);return e.setAuthTag(r),JSON.parse(Buffer.concat([e.update(i),e.final()]).toString(`utf8`))}catch{}throw Error(`Stored secret was sealed with an unavailable encryption key`)}function A(e,t){if(t.startsWith(`${C}.`))return 0;let[n,r,i]=t.split(`.`).map(e=>Buffer.from(e,`base64`));for(let t of D(e))try{let e=_(`aes-256-gcm`,t.value,n);return e.setAuthTag(r),e.update(i),e.final(),t.version}catch{}throw Error(`Stored secret was sealed with an unavailable encryption key`)}function le(e,t,n={}){let r=`coder-${e.id.replace(/[^a-zA-Z0-9_.-]/g,`-`).slice(0,48)}-${Date.now()}`;n.tarballUrl&&(t={...t,CODER_RUNNER_TARBALL_URL:n.tarballUrl});let i=Object.keys(t).flatMap(e=>[`-e`,e]);return{args:[`run`,`-d`,`--name`,r,`--memory`,String(n.memory??`4g`),`--cpus`,String(n.cpus??2),`--pids-limit`,String(n.pidsLimit??512),`--network`,n.network??`bridge`,...i,n.image??`ghcr.io/muzam1l/coder-runner:latest`,`sh`,`-c`,q(),`coder-task`,e.id,K],env:t}}var ue=class{options;kind=`local-docker`;constructor(e={}){this.options=e}async start(e,t){let n=this.options.image??`ghcr.io/muzam1l/coder-runner:latest`,r=await p(`docker`,[`run`,`--rm`,`--network`,`none`,`--entrypoint`,`sh`,n,`-c`,`for binary in node bun git curl tar claude codex github-mcp-server; do command -v "$binary" >/dev/null 2>&1 || { printf "%s\\n" "$binary"; exit 127; }; done`],{PATH:m.env.PATH??``});if(r.code!==0)throw r.code===127&&r.stdout.trim()?Error(`Docker image ${n} is missing required binary ${r.stdout.trim()}`):Error(`Docker image ${n} validation failed: ${r.stderr.trim()||`docker run failed`}`);let i=le(e,{...t,CODER_INBOX_SOCKET:l},this.options),a=await p(`docker`,i.args,{PATH:m.env.PATH??``,...i.env});if(a.code!==0)throw Error(a.stderr.trim()||`docker run failed`);return a.stdout.trim()}async status(e){let t=await p(`docker`,[`inspect`,`--format`,`{{.State.Running}} {{.State.ExitCode}}`,e],{PATH:m.env.PATH??``});if(t.code!==0)return{state:`exited`};let[n,r]=t.stdout.trim().split(/\s+/);return n===`true`?{state:`running`}:{state:`exited`,code:Number(r)||0}}async stop(e){await p(`docker`,[`rm`,`-f`,e],{PATH:m.env.PATH??``})}async push(e,t){let n=await p(`docker`,[`exec`,`-e`,`CODER_INBOX_MESSAGES`,e,`node`,`-e`,u],{PATH:m.env.PATH??``,CODER_INBOX_MESSAGES:JSON.stringify(t)});if(n.code!==0)throw Error(`Docker inbox delivery failed`);return JSON.parse(n.stdout)}},de=t({GithubActionsRunner:()=>N,actionsWorkflow:()=>j});function j(){return`name: Coder agent
+import{Rt as e,qi as t}from"./core-DwsAMCnL.js";import{Hn as n,In as r,Yt as i,c as a,zn as o}from"./config-D2FxHWwi.js";import{u as s}from"./slack-C_RlVDz7.js";import{t as c}from"./integrations-D3OgJk6Y.js";import{n as l,t as u}from"./task-DXHKWB_J.js";import{a as d,i as f,n as p,r as ee,t as te}from"./local-ccKBhpQc.js";import m from"node:process";import{execFile as h}from"node:child_process";import{createCipheriv as g,createDecipheriv as _,createHash as v,createHmac as ne,randomBytes as y,randomUUID as b}from"node:crypto";import x,{isIP as S}from"node:net";import{lookup as re}from"node:dns/promises";import{request as ie}from"node:https";const ae=r({env:o(n(),n().check(e(1)))}),C=`plain`;function w(e,t=`SERVER_ENCRYPTION_KEY`){if(!e)return;let n=Buffer.from(e,`base64`);if(n.length!==32)throw Error(`${t} must be a base64-encoded 32-byte key`);return n}function T(e){return w(e.encryptionKey)}function E(e){let t=w(e);return t?v(`sha256`).update(t).digest().readInt32BE(0):0}function D(e){return[[e.encryptionKey,`SERVER_ENCRYPTION_KEY`],[e.previousEncryptionKey,`SERVER_ENCRYPTION_KEY_PREVIOUS`]].filter(e=>!!e[0]).map(([e,t])=>({value:w(e,t),version:E(e)}))}function O(e){let t=ae.safeParse(e);if(!t.success||!Object.keys(t.data.env).length)throw Error(`Invalid engine credential`);return t.data}function oe(e,t){let n=T(e);if(!n)return{iv:C,tag:``,ciphertext:Buffer.from(JSON.stringify(O(t))).toString(`base64`)};let r=y(12),i=g(`aes-256-gcm`,n,r),a=Buffer.concat([i.update(JSON.stringify(O(t)),`utf8`),i.final()]);return{iv:r.toString(`base64`),tag:i.getAuthTag().toString(`base64`),ciphertext:a.toString(`base64`)}}function se(e,t){if(t.iv===C)return O(JSON.parse(Buffer.from(t.ciphertext,`base64`).toString(`utf8`)));for(let n of D(e))try{let e=_(`aes-256-gcm`,n.value,Buffer.from(t.iv,`base64`));return e.setAuthTag(Buffer.from(t.tag,`base64`)),O(JSON.parse(Buffer.concat([e.update(Buffer.from(t.ciphertext,`base64`)),e.final()]).toString(`utf8`)))}catch{}throw Error(`Stored credential was sealed with an unavailable encryption key`)}function ce(e,t){let n=T(e);if(!n)return`${C}.${Buffer.from(JSON.stringify(t)).toString(`base64`)}`;let r=y(12),i=g(`aes-256-gcm`,n,r),a=Buffer.concat([i.update(JSON.stringify(t),`utf8`),i.final()]);return[r,i.getAuthTag(),a].map(e=>e.toString(`base64`)).join(`.`)}function k(e,t){if(t.startsWith(`${C}.`))return JSON.parse(Buffer.from(t.slice(6),`base64`).toString(`utf8`));let[n,r,i]=t.split(`.`).map(e=>Buffer.from(e,`base64`));for(let t of D(e))try{let e=_(`aes-256-gcm`,t.value,n);return e.setAuthTag(r),JSON.parse(Buffer.concat([e.update(i),e.final()]).toString(`utf8`))}catch{}throw Error(`Stored secret was sealed with an unavailable encryption key`)}function A(e,t){if(t.startsWith(`${C}.`))return 0;let[n,r,i]=t.split(`.`).map(e=>Buffer.from(e,`base64`));for(let t of D(e))try{let e=_(`aes-256-gcm`,t.value,n);return e.setAuthTag(r),e.update(i),e.final(),t.version}catch{}throw Error(`Stored secret was sealed with an unavailable encryption key`)}function le(e,t,n={}){let r=`coder-${e.id.replace(/[^a-zA-Z0-9_.-]/g,`-`).slice(0,48)}-${Date.now()}`;n.tarballUrl&&(t={...t,CODER_RUNNER_TARBALL_URL:n.tarballUrl});let i=Object.keys(t).flatMap(e=>[`-e`,e]);return{args:[`run`,`-d`,`--name`,r,`--memory`,String(n.memory??`4g`),`--cpus`,String(n.cpus??2),`--pids-limit`,String(n.pidsLimit??512),`--network`,n.network??`bridge`,...i,n.image??`ghcr.io/muzam1l/coder-runner:latest`,`sh`,`-c`,q(),`coder-task`,e.id,K],env:t}}var ue=class{options;kind=`local-docker`;constructor(e={}){this.options=e}async start(e,t){let n=this.options.image??`ghcr.io/muzam1l/coder-runner:latest`,r=await p(`docker`,[`run`,`--rm`,`--network`,`none`,`--entrypoint`,`sh`,n,`-c`,`for binary in node bun git curl tar claude codex github-mcp-server; do command -v "$binary" >/dev/null 2>&1 || { printf "%s\\n" "$binary"; exit 127; }; done`],{PATH:m.env.PATH??``});if(r.code!==0)throw r.code===127&&r.stdout.trim()?Error(`Docker image ${n} is missing required binary ${r.stdout.trim()}`):Error(`Docker image ${n} validation failed: ${r.stderr.trim()||`docker run failed`}`);let i=le(e,{...t,CODER_INBOX_SOCKET:l},this.options),a=await p(`docker`,i.args,{PATH:m.env.PATH??``,...i.env});if(a.code!==0)throw Error(a.stderr.trim()||`docker run failed`);return a.stdout.trim()}async status(e){let t=await p(`docker`,[`inspect`,`--format`,`{{.State.Running}} {{.State.ExitCode}}`,e],{PATH:m.env.PATH??``});if(t.code!==0)return{state:`exited`};let[n,r]=t.stdout.trim().split(/\s+/);return n===`true`?{state:`running`}:{state:`exited`,code:Number(r)||0}}async stop(e){await p(`docker`,[`rm`,`-f`,e],{PATH:m.env.PATH??``})}async push(e,t){let n=await p(`docker`,[`exec`,`-e`,`CODER_INBOX_MESSAGES`,e,`node`,`-e`,u],{PATH:m.env.PATH??``,CODER_INBOX_MESSAGES:JSON.stringify(t)});if(n.code!==0)throw Error(`Docker inbox delivery failed`);return JSON.parse(n.stdout)}},de=t({GithubActionsRunner:()=>N,actionsWorkflow:()=>j});function j(){return`name: Coder agent
 run-name: Coder agent \${{ inputs.task }}
 on:
   workflow_dispatch:

package/dist/schema.d.ts

@@ -1,2 +1,2 @@
-import { A as platformLink, C as agentVersion, D as engineCredential, E as coder, F as taskInbox, I as taskLog, L as taskTombstone, M as secret, N as tables, O as integrationApp, P as task, R as usage, S as agent, T as chatState, j as runner, k as integrationAppInstallation, w as chatItem } from "./sdk-4Vjo5Q6R.js";
+import { A as platformLink, C as agentVersion, D as engineCredential, E as coder, F as taskInbox, I as taskLog, L as taskTombstone, M as secret, N as tables, O as integrationApp, P as task, R as usage, S as agent, T as chatState, j as runner, k as integrationAppInstallation, w as chatItem } from "./sdk-CWerLcF5.js";
 export { agent, agentVersion, chatItem, chatState, coder, engineCredential, integrationApp, integrationAppInstallation, platformLink, runner, secret, tables, task, taskInbox, taskLog, taskTombstone, usage };

package/dist/{sdk-4Vjo5Q6R.d.ts → sdk-CWerLcF5.d.ts}

@@ -1,6 +1,6 @@
-import { A as InstallationLink, C as RunnerUpdate, D as AgentEvent, E as AgentDefinition, F as CoderConfig, I as CustomModelConfig, M as Preset, N as TaskContext, O as AgentTask, P as TaskSource, S as RunnerTest, T as Agent, _ as RunnerInput, b as RunnerRow, c as TaskStatus$1, d as TokenUsage, f as AppSync, g as ProbeResult, h as LocalFolders, j as InstallationSettings, k as AgentUsage, m as LocalFolder, n as Availability, p as ConnectionRow, s as Task, u as TaskLogEntry, v as RunnerKind, w as TaskTurn, x as RunnerSpec, y as RunnerPairing } from "./types-BktBEKW5.js";
-import { a as readTurnResults, b as FlowEvent, c as archiveRuns, d as RunSummary, f as StopSummary, i as readTask, l as deleteRuns, s as RunResult$1, u as RunOptions, x as FlowRecord, y as DiscoveredFlow } from "./index-CVjkwYeS.js";
-import { i as ReviewArgs, u as ReviewResult } from "./review-D-U_2KyT.js";
+import { A as InstallationLink, C as RunnerUpdate, D as AgentEvent, E as AgentDefinition, F as CoderConfig, I as CustomModelConfig, M as Preset, N as TaskContext, O as AgentTask, P as TaskSource, S as RunnerTest, T as Agent, _ as RunnerInput, b as RunnerRow, c as TaskStatus$1, d as TokenUsage, f as AppSync, g as ProbeResult, h as LocalFolders, j as InstallationSettings, k as AgentUsage, m as LocalFolder, n as Availability, p as ConnectionRow, s as Task, u as TaskLogEntry, v as RunnerKind, w as TaskTurn, x as RunnerSpec, y as RunnerPairing } from "./types-C1tWi5lP.js";
+import { a as readTurnResults, b as FlowEvent, c as archiveRuns, d as RunSummary, f as StopSummary, i as readTask, l as deleteRuns, s as RunResult$1, u as RunOptions, x as FlowRecord, y as DiscoveredFlow } from "./index-vd37q3fn.js";
+import { i as ReviewArgs, u as ReviewResult } from "./review-CJS59vO-.js";
 import "zod/mini";
 //#region src/core/engines/codex/index.d.ts
 declare function getCodexAvailability(cwd: string): Availability;
@@ -5294,7 +5294,7 @@ declare const secret: PgTableWithColumns<{
       tableName: "secret";
       dataType: "string";
       columnType: "PgText";
-      data: "app" | "installation" | "engine" | "runner";
+      data: "engine" | "runner" | "installation" | "app";
       driverParam: string;
       notNull: true;
       hasDefault: false;
@@ -5306,7 +5306,7 @@ declare const secret: PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {
-      $type: "app" | "installation" | "engine" | "runner";
+      $type: "engine" | "runner" | "installation" | "app";
     }>;
     iv: PgColumn<{
       name: "iv";
@@ -5999,7 +5999,7 @@ declare const engineCredential: PgTableWithColumns<{
       tableName: "engine_credential";
       dataType: "string";
       columnType: "PgText";
-      data: "custom" | "claude" | "codex";
+      data: "custom" | "codex" | "claude";
       driverParam: string;
       notNull: true;
       hasDefault: false;
@@ -6011,7 +6011,7 @@ declare const engineCredential: PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {
-      $type: "custom" | "claude" | "codex";
+      $type: "custom" | "codex" | "claude";
     }>;
     label: PgColumn<{
       name: "label";
@@ -6223,7 +6223,7 @@ declare const runner$1: PgTableWithColumns<{
       tableName: "runner";
       dataType: "string";
       columnType: "PgText";
-      data: "personal" | "workspace";
+      data: "workspace" | "personal";
       driverParam: string;
       notNull: true;
       hasDefault: false;
@@ -6235,7 +6235,7 @@ declare const runner$1: PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {
-      $type: "personal" | "workspace";
+      $type: "workspace" | "personal";
     }>;
     config: PgColumn<{
       name: "config";
@@ -8509,7 +8509,7 @@ declare const tables: {
         tableName: "secret";
         dataType: "string";
         columnType: "PgText";
-        data: "app" | "installation" | "engine" | "runner";
+        data: "engine" | "runner" | "installation" | "app";
         driverParam: string;
         notNull: true;
         hasDefault: false;
@@ -8521,7 +8521,7 @@ declare const tables: {
         identity: undefined;
         generated: undefined;
       }, {}, {
-        $type: "app" | "installation" | "engine" | "runner";
+        $type: "engine" | "runner" | "installation" | "app";
       }>;
       iv: PgColumn<{
         name: "iv";
@@ -9211,7 +9211,7 @@ declare const tables: {
         tableName: "engine_credential";
         dataType: "string";
         columnType: "PgText";
-        data: "custom" | "claude" | "codex";
+        data: "custom" | "codex" | "claude";
         driverParam: string;
         notNull: true;
         hasDefault: false;
@@ -9223,7 +9223,7 @@ declare const tables: {
         identity: undefined;
         generated: undefined;
       }, {}, {
-        $type: "custom" | "claude" | "codex";
+        $type: "custom" | "codex" | "claude";
       }>;
       label: PgColumn<{
         name: "label";
@@ -9434,7 +9434,7 @@ declare const tables: {
         tableName: "runner";
         dataType: "string";
         columnType: "PgText";
-        data: "personal" | "workspace";
+        data: "workspace" | "personal";
         driverParam: string;
         notNull: true;
         hasDefault: false;
@@ -9446,7 +9446,7 @@ declare const tables: {
         identity: undefined;
         generated: undefined;
       }, {}, {
-        $type: "personal" | "workspace";
+        $type: "workspace" | "personal";
       }>;
       config: PgColumn<{
         name: "config";
@@ -11596,7 +11596,7 @@ declare const task: {
   }) => Promise<TaskWatch>;
   stream: (id?: string, opts?: TaskOptions & {
     tail?: number | "all";
-  }) => AsyncGenerator<TaskLogLine | TaskLogEntry, void, any>;
+  }) => AsyncGenerator<TaskLogEntry | TaskLogLine, void, any>;
   steer: (id: string, text: string, opts?: TaskOptions & {
     model?: string;
     effort?: string;
@@ -11715,7 +11715,7 @@ declare const model: {
     workspace?: boolean;
     cwd?: string;
   }) => {
-    provider: "claude" | "codex";
+    provider: "codex" | "claude";
     model: string;
     effort?: "low" | "medium" | "high" | undefined;
     disabled?: boolean | undefined;
@@ -11993,7 +11993,7 @@ declare const _default: {
     }) => Promise<TaskWatch>;
     stream: (id?: string, opts?: TaskOptions & {
       tail?: number | "all";
-    }) => AsyncGenerator<TaskLogLine | TaskLogEntry, void, any>;
+    }) => AsyncGenerator<TaskLogEntry | TaskLogLine, void, any>;
     steer: (id: string, text: string, opts?: TaskOptions & {
       model?: string;
       effort?: string;
@@ -12131,7 +12131,7 @@ declare const _default: {
       workspace?: boolean;
       cwd?: string;
     }) => {
-      provider: "claude" | "codex";
+      provider: "codex" | "claude";
       model: string;
       effort?: "low" | "medium" | "high" | undefined;
       disabled?: boolean | undefined;

package/dist/sdk.d.ts

@@ -1,5 +1,5 @@
-import { C as RunnerUpdate, S as RunnerTest, _ as RunnerInput, b as RunnerRow, h as LocalFolders, l as TurnResult, m as LocalFolder, p as ConnectionRow, s as Task, t as Approval, u as TaskLogEntry, v as RunnerKind, x as RunnerSpec, y as RunnerPairing } from "./types-BktBEKW5.js";
-import { C as FlowStep, b as FlowEvent, n as flowSdk, o as CoderError, r as TaskResult } from "./index-CVjkwYeS.js";
-import { i as ReviewArgs, u as ReviewResult } from "./review-D-U_2KyT.js";
-import { _ as ConnectionOptions, a as connection, b as TaskRunOptions, c as folders, d as runner, f as server, g as ConnectionAddOptions, h as upgrade, i as config, l as model, m as task, n as agent, o as credentials, p as setupHost, r as auth, s as docs, t as _default, u as review, v as DeclaredServer, x as ServerOptions, y as Session, z as SteerOutcome } from "./sdk-4Vjo5Q6R.js";
+import { C as RunnerUpdate, S as RunnerTest, _ as RunnerInput, b as RunnerRow, h as LocalFolders, l as TurnResult, m as LocalFolder, p as ConnectionRow, s as Task, t as Approval, u as TaskLogEntry, v as RunnerKind, x as RunnerSpec, y as RunnerPairing } from "./types-C1tWi5lP.js";
+import { C as FlowStep, b as FlowEvent, n as flowSdk, o as CoderError, r as TaskResult } from "./index-vd37q3fn.js";
+import { i as ReviewArgs, u as ReviewResult } from "./review-CJS59vO-.js";
+import { _ as ConnectionOptions, a as connection, b as TaskRunOptions, c as folders, d as runner, f as server, g as ConnectionAddOptions, h as upgrade, i as config, l as model, m as task, n as agent, o as credentials, p as setupHost, r as auth, s as docs, t as _default, u as review, v as DeclaredServer, x as ServerOptions, y as Session, z as SteerOutcome } from "./sdk-CWerLcF5.js";
 export { type Approval, CoderError, type ConnectionAddOptions, type ConnectionOptions, type ConnectionRow, type DeclaredServer, type FlowEvent, type FlowStep, type LocalFolder, type LocalFolders, type ReviewArgs, type ReviewResult, type RunnerInput, type RunnerKind, type RunnerPairing, type RunnerRow, type RunnerSpec, type RunnerTest, type RunnerUpdate, type ServerOptions, type Session, type SteerOutcome, type Task, type TaskLogEntry, type TaskResult, type TaskRunOptions, type TurnResult, agent, auth, config, connection, credentials, _default as default, docs, flowSdk as flow, folders, model, review, runner, server, setupHost, task, upgrade };

package/dist/sdk.js

@@ -1 +1 @@
-import{m as e,p as t}from"./config-D2FxHWwi.js";import{E as n,H as r,T as i}from"./dispatch-D3Dqxijf.js";import{n as a,r as o,s,t as c}from"./remote-oQs6My_3.js";import{n as l}from"./executor-5j-Ewzzb.js";import{n as u}from"./agent-C1HI4JlI.js";import{t as d}from"./connection-wq0CJZKh.js";import{t as f}from"./docs-3SW1O9iS.js";import{a as p,i as m,n as h,o as g,r as _,s as v,t as y}from"./models-CdvmuaLv.js";import{n as b}from"./task-IoBYe7ok.js";import x from"./flow/index.js";import{i as S,n as C,o as w,r as T,s as E,t as D}from"./runner-DME7ohjt.js";import{t as O}from"./serve-BQsv2KZs.js";import{n as k}from"./apps-aj_JtpAm.js";import{_ as A}from"./runners-UNKPlmYE.js";import{n as j}from"./maintenance-B_79IJ_E.js";import{r as M,t as N}from"./serve-HNXk3HMY.js";import P from"node:path";import F from"node:process";function I(e){return e?P.resolve(e):F.cwd()}const L=b,R={add:(e,t)=>y(I(t.cwd),e,t),update:(e,t)=>v(I(t.cwd),e,t),remove:(e,t={})=>m(I(t.cwd),e,t),list:(e={})=>_(I(e.cwd)),alias:(e,t,n={})=>h(I(n.cwd),e,t,n),unalias:(e,t={})=>g(I(t.cwd),e,t),disable:(e,t={})=>p(I(t.cwd),e,!0,t),enable:(e,t={})=>p(I(t.cwd),e,!1,t)},z={get:(e,n={})=>t(I(n.cwd),e),set:(t,n,r={})=>e(I(r.cwd),t,n,r)},B=d;function V(e=[],t={}){return i(I(t.cwd),{hosts:e})}function H(e={}){return n(e)}function U(e,t={}){return f(e,t)}const W={async run(e={}){let t=await l(`review`,{cwd:e.cwd,args:e});return{...t.result,runId:t.runId}}},G=s,K={serve:N,rotateKey:j,workflow:A,app:{create:k},handler:M},q={list:(e={})=>a(e).credentials.list(),add:c,remove:(e,t={})=>a(t).credentials.remove(e,t),default:(e,t={})=>a(t).credentials.setDefault(e,t),login:o},J={list:(e={})=>a(e).folders.list(),check:(e,t={})=>a(t).folders.check(e)},Y={list:C,add:D,pair:T,update:E,default:(e,t={})=>E(e,{default:!0},t),test:w,rename:(e,t,n={})=>E(e,{name:t},n),remove:S,serve:O},X=u;var Z={task:L,flow:x,model:R,config:z,connection:B,setupHost:V,upgrade:H,docs:U,review:W,auth:G,agent:X,credentials:q,folders:J,runner:Y,server:K};export{r as CoderError,X as agent,G as auth,z as config,B as connection,q as credentials,Z as default,U as docs,x as flow,J as folders,R as model,W as review,Y as runner,K as server,V as setupHost,L as task,H as upgrade};
+import{m as e,p as t}from"./config-D2FxHWwi.js";import{E as n,H as r,T as i}from"./dispatch-D3Dqxijf.js";import{n as a,r as o,s,t as c}from"./remote-oQs6My_3.js";import{n as l}from"./executor-5j-Ewzzb.js";import{n as u}from"./agent-ChnedLBv.js";import{t as d}from"./connection-BCRJHTgp.js";import{t as f}from"./docs-3SW1O9iS.js";import{a as p,i as m,n as h,o as g,r as _,s as v,t as y}from"./models-CdvmuaLv.js";import{n as b}from"./task-IoBYe7ok.js";import x from"./flow/index.js";import{i as S,n as C,o as w,r as T,s as E,t as D}from"./runner-DME7ohjt.js";import{t as O}from"./serve-wQgyxwdY.js";import{n as k}from"./apps-B60OpAHX.js";import{_ as A}from"./runners-CNhxPjg8.js";import{n as j}from"./maintenance-DuIspk-y.js";import{r as M,t as N}from"./serve-FG2LgXxM.js";import P from"node:path";import F from"node:process";function I(e){return e?P.resolve(e):F.cwd()}const L=b,R={add:(e,t)=>y(I(t.cwd),e,t),update:(e,t)=>v(I(t.cwd),e,t),remove:(e,t={})=>m(I(t.cwd),e,t),list:(e={})=>_(I(e.cwd)),alias:(e,t,n={})=>h(I(n.cwd),e,t,n),unalias:(e,t={})=>g(I(t.cwd),e,t),disable:(e,t={})=>p(I(t.cwd),e,!0,t),enable:(e,t={})=>p(I(t.cwd),e,!1,t)},z={get:(e,n={})=>t(I(n.cwd),e),set:(t,n,r={})=>e(I(r.cwd),t,n,r)},B=d;function V(e=[],t={}){return i(I(t.cwd),{hosts:e})}function H(e={}){return n(e)}function U(e,t={}){return f(e,t)}const W={async run(e={}){let t=await l(`review`,{cwd:e.cwd,args:e});return{...t.result,runId:t.runId}}},G=s,K={serve:N,rotateKey:j,workflow:A,app:{create:k},handler:M},q={list:(e={})=>a(e).credentials.list(),add:c,remove:(e,t={})=>a(t).credentials.remove(e,t),default:(e,t={})=>a(t).credentials.setDefault(e,t),login:o},J={list:(e={})=>a(e).folders.list(),check:(e,t={})=>a(t).folders.check(e)},Y={list:C,add:D,pair:T,update:E,default:(e,t={})=>E(e,{default:!0},t),test:w,rename:(e,t,n={})=>E(e,{name:t},n),remove:S,serve:O},X=u;var Z={task:L,flow:x,model:R,config:z,connection:B,setupHost:V,upgrade:H,docs:U,review:W,auth:G,agent:X,credentials:q,folders:J,runner:Y,server:K};export{r as CoderError,X as agent,G as auth,z as config,B as connection,q as credentials,Z as default,U as docs,x as flow,J as folders,R as model,W as review,Y as runner,K as server,V as setupHost,L as task,H as upgrade};

package/dist/{serve-HNXk3HMY.js → serve-FG2LgXxM.js}

@@ -1,9 +1,9 @@
-import{qi as e}from"./core-DwsAMCnL.js";import{$ as t,B as n,Cn as r,Ct as i,Q as a,R as o,S as s,_ as c,ct as l,g as u,j as d,n as f,o as p,s as m,t as h,v as g,w as _}from"./config-D2FxHWwi.js";import{H as v}from"./dispatch-D3Dqxijf.js";import{i as y,n as b,p as x,r as ee,s as S,t as C}from"./load-CRmQB1LD.js";import{s as w,u as T}from"./slack-C_RlVDz7.js";import{n as E}from"./integrations-D3OgJk6Y.js";import{i as D,t as te}from"./discover-CBP4Uw0N.js";import{c as ne}from"./models-CdvmuaLv.js";import{a as re}from"./local-XNsjb-UM.js";import{a as O,d as ie,f as ae,l as k,n as oe,o as se,p as ce,r as le,s as ue,t as de,u as fe}from"./http-BYMXT_p6.js";import{$ as pe,$n as A,$t as me,A as he,An as ge,Ar as _e,B as ve,Bn as ye,Bt as be,C as xe,D as Se,Dn as Ce,Dr as j,Dt as we,E as Te,En as Ee,Er as M,Et as De,F as Oe,Fn as ke,Ft as Ae,G as je,Gn as Me,Gt as Ne,H as Pe,Hn as Fe,Ht as Ie,I as Le,In as Re,It as N,J as ze,Jn as Be,Jt as Ve,K as He,Kn as Ue,Kt as We,L as Ge,Ln as Ke,Lt as qe,M as Je,Mn as Ye,Mt as Xe,N as Ze,Nn as Qe,Nt as $e,O as P,On as et,Or as F,Ot as I,P as tt,Pn as nt,Pt as rt,Q as it,Qn as L,Qt as at,R as ot,Rn as st,Rt as R,S as z,Sn as ct,Sr as lt,St as ut,T as dt,Tn as ft,Tr as pt,Tt as mt,U as ht,Un as gt,Ut as _t,V as vt,Vt as yt,W as bt,Wn as xt,Wt as St,X as Ct,Xn as wt,Xt as Tt,Y as Et,Yn as Dt,Yt as Ot,Z as kt,Zn as At,Zt as jt,_ as Mt,_r as Nt,_t as Pt,a as Ft,an as It,ar as Lt,at as Rt,b as zt,bn as Bt,br as Vt,bt as Ht,c as B,cn as Ut,cr as Wt,ct as Gt,d as Kt,dn as qt,dr as Jt,dt as V,en as Yt,er as Xt,et as Zt,f as Qt,fn as $t,fr as en,ft as tn,g as nn,gn as rn,gr as an,gt as on,h as H,hn as sn,hr as cn,i as ln,in as un,ir as dn,it as fn,j as U,jn as pn,jt as mn,k as hn,kn as gn,kr as _n,kt as W,l as vn,ln as yn,lr as bn,lt as xn,m as Sn,mn as Cn,mr as wn,mt as Tn,nn as En,nr as G,nt as Dn,o as On,on as kn,or as An,ot as jn,p as Mn,pn as Nn,pr as Pn,pt as Fn,q as In,qn as Ln,qt as Rn,r as zn,rn as Bn,rr as Vn,rt as Hn,s as Un,sn as Wn,sr as Gn,tn as Kn,tr as qn,tt as Jn,u as Yn,un as Xn,ur as Zn,ut as Qn,v as $n,vr as er,vt as tr,w as nr,wn as rr,wt as ir,x as ar,xr as or,xt as sr,y as cr,yn as lr,yr as ur,zn as dr,zt as fr}from"./apps-aj_JtpAm.js";import{n as pr,r as mr}from"./env-C_DoQYl5.js";import{S as hr,a as gr,b as K,h as _r,i as vr,n as yr,p as br,x as xr}from"./runners-UNKPlmYE.js";import{X as Sr}from"./schema-BSlHRFSP.js";import q from"node:path";import J from"node:process";import Cr from"node:fs";import{spawnSync as wr}from"node:child_process";import{createHash as Tr,randomBytes as Er,randomUUID as Dr}from"node:crypto";import Y from"node:fs/promises";import{isDeepStrictEqual as Or}from"node:util";import kr from"node:http";async function Ar(e){try{return await Y.readdir(e,{withFileTypes:!0})}catch(e){if(e.code===`ENOENT`)return[];throw e}}async function X(e){try{return await Y.lstat(e),!0}catch(e){if(e.code===`ENOENT`)return!1;throw e}}async function jr(e,t){if(e===t||!await X(e))return 0;let n=await Ar(e),i=n.filter(e=>e.isDirectory()).length;if(!await X(t))return await r(e,t),i;for(let i of n)await r(q.join(e,i.name),q.join(t,i.name));return await Y.rmdir(e),i}async function Mr(e){let t=q.dirname(e),n=q.basename(e);for(let e of await Ar(t)){let r=e.name.startsWith(n)?e.name.slice(n.length):``;if(!e.isFile()||!(r===`.tmp`||/^\.\d+(?:\.[a-f0-9-]{36})?\.tmp$/.test(r)))continue;let i=Number(e.name.slice(n.length+1).split(`.`)[0]);if(Number.isInteger(i)&&i>0)try{process.kill(i,0);continue}catch(e){if(e.code!==`ESRCH`)continue}await Y.unlink(q.join(t,e.name)).catch(e=>{if(e.code!==`ENOENT`)throw e})}}async function Nr(e,t){if(await Mr(e),e===t||!await X(e))return 0;if(!await X(t))return await r(e,t),1;let n=JSON.parse(await Y.readFile(e,`utf8`)),i=JSON.parse(await Y.readFile(t,`utf8`)),a={...n,...i,...n.rows||i.rows?{rows:{...n.rows,...i.rows}}:{}},o=`${t}.${process.pid}.${Dr()}.tmp`;try{await Y.writeFile(o,`${JSON.stringify(a)}\n`,{mode:384,flag:`wx`}),await Y.rename(o,t),await Y.unlink(e)}finally{await Y.rm(o,{force:!0})}return 1}async function Pr(){let e=a(),n=t(`state`),r=a(`archive`),i=a(`flows-archived`),o=a(`usage.json`),s=a(`runner`,`usage.json`),c={from:t(`checkouts`),to:a(`checkouts`)},l={from:t(`update-check.json`),to:a(`update-check.json`)},u={cache:e,tasks:0,flows:0,files:0},d=(await Ar(n)).filter(e=>e.isDirectory()).map(e=>({archive:t(`state`,e.name,`archive`),flows:t(`state`,e.name,`flows-archived`),usage:t(`state`,e.name,`usage.json`),runnerUsage:t(`state`,e.name,`runner`,`usage.json`)}));await Mr(o),await Mr(s);for(let e of d)u.tasks+=await jr(e.archive,r),u.flows+=await jr(e.flows,i),u.files+=await Nr(e.usage,o),u.files+=await Nr(e.runnerUsage,s);return await jr(c.from,c.to),u.files+=await Nr(l.from,l.to),u}async function Fr(e){let t=(e.now??Date.now)(),n=await e.store.list(`runner`);return{online:1+n.filter(({value:e})=>e.lastSeen!==void 0&&t-e.lastSeen<3e5).length,total:1+n.length}}async function Ir(e){let t=(e.now??Date.now)(),n=e.healthyAt!==void 0&&t-e.healthyAt<5e3,r=n||await Lr(e);return e.healthyAt=r?n?e.healthyAt:t:void 0,O({ok:r},r?200:503,{"cache-control":`no-store`})}async function Lr(e){return e.config.store===`postgres`?e.databaseHealth?e.databaseHealth().then(()=>!0,()=>!1):!1:!0}async function Rr(e){let t=(e.now??Date.now)();if(e.queue.metrics&&!e.local)return{...await e.queue.metrics(e.organizationId,t-864e5),runnersOnline:(await Fr(e)).online,requests:e.limits?.requests??0,rateLimitRejections:e.limits?.rejections??0};let n=await e.queue.list(e.organizationId),r=e.local?[...W(e.local.cwd,!1),...W(e.local.cwd,!0)]:[],i=new Map([...r,...n.map(e=>e.status===`queued`?e:r.find(t=>t.task.id===e.task.id)??e)].map(e=>[e.task.id,e])),a={queued:0,running:0,waiting:0,completed:0,failed:0,cancelled:0},o=0;for(let e of i.values())e.createdAt>=t-864e5&&a[e.status]++,e.status===`queued`&&o++;return{tasks:a,queueDepth:o,runnersOnline:(await Fr(e)).online,requests:e.limits?.requests??0,rateLimitRejections:e.limits?.rejections??0}}async function zr(e,t,n,r){let i=t.session.user.id;n.id;let a=(await e.json().catch(()=>({}))).engine??``;if(!Wr.has(a)||!t.config.subscriptions?.[a])return O({error:`Sign in with ${a||`that engine`} is off on this server.`},403);let o=t.runners[t.config.runner];if(!o||o.kind===`github-actions`)return O({error:`Sign-in cannot run on the ${t.config.runner} runner.`},409);let s=(await t.store.list(`login`)).find(({value:e})=>e.owner===i&&e.engine===a&&e.state!==`done`&&e.state!==`failed`&&e.expiresAt>Z(t));if(s)return O(Kr(s.id,s.value));let c=`login-${Er(12).toString(`base64url`)}`,l=rn(c,t.organizationId,0),u={owner:i,engine:a,state:`starting`,tokenHash:l.hash,runner:o.kind,createdAt:Z(t),expiresAt:Z(t)+Ur};await Gr(t,c,u);let d;try{let e=await o.start({id:c},{CODER_SERVER:t.config.publicUrl??``,CODER_TASK_TOKEN:l.token,CODER_LOGIN:a},void 0,{timeoutMs:Ur,hosts:[br[a].api,...br[a].account]}),n=await t.store.patchLogin(c,{handle:e},{tokenHash:u.tokenHash});if(!n)return await o.stop(e).catch(()=>{}),O({error:`This sign-in is gone. Start again.`},409);d=n}catch(e){return await t.store.delete(`login`,c),O({error:e instanceof Error?e.message:String(e)},502)}return O(Kr(c,d),201)}async function Br(e,t,n,r){t.session.user.id;let i=n.id??``,a=i&&!i.includes(`/`)?await qr(t,i):void 0;return a?O(Kr(i,a)):O({error:`This sign-in is gone. Start again.`},404)}async function Vr(e,t,n,r){t.session.user.id;let i=n.id??``,a=i&&!i.includes(`/`)?await qr(t,i):void 0;if(!a)return O({error:`This sign-in is gone. Start again.`},404);let o=await e.json().catch(()=>({})),s=typeof o.code==`string`?o.code.trim():``;return a.engine!==`claude`||a.state!==`open`||!s||!await t.store.patchLogin(i,{state:`verifying`,input:hr(t.config,s)},{state:`open`,tokenHash:a.tokenHash})?O({error:`This sign-in is not waiting for a code.`},409):O({ok:!0})}async function Hr(e,t,n,r){t.session.user.id;let i=n.id??``,a=i&&!i.includes(`/`)?await qr(t,i):void 0;return a?(await t.store.delete(`login`,i),a.handle&&await t.runners[a.runner]?.stop(a.handle).catch(()=>{}),O({ok:!0})):O({error:`This sign-in is gone. Start again.`},404)}const Ur=6e5,Wr=new Set([`claude`,`codex`]),Z=e=>(e.now??Date.now)();function Gr(e,t,n){return e.store.put(`login`,t,n,{ttlMs:Math.max(1,n.expiresAt-Z(e))})}function Kr(e,t){return{id:e,engine:t.engine,state:t.state,expiresAt:t.expiresAt,...t.url?{url:t.url}:{},...t.code?{code:t.code}:{},...t.error?{error:t.error}:{},...t.label?{label:t.label}:{}}}async function qr(e,t){let n=await e.store.get(`login`,t);return n&&n.owner===e.session?.user.id?n:void 0}function Jr(e,t){let n=t.handle&&e.runners[t.runner]?.stop(t.handle);if(!n)return;let r=n.catch(e=>console.error(`coder server: could not stop the machine of a finished ${t.engine} sign-in`,e));e.waitUntil?.(r)}async function Yr(e,t,n,r){let i=n.id,a=t.callbackLogin,o=Date.now()+25e3;for(;!a.input&&Date.now()<o&&!e.signal.aborted;){await new Promise(e=>setTimeout(e,250));let e=await t.store.get(`login`,i);if(!e)return new Response(`Unauthorized`,{status:401});a=e}if(!a.input)return O({});let s=await t.store.patchLogin(i,{input:null},{input:a.input,tokenHash:a.tokenHash});return O(s?{code:K(t.config,a.input)}:{})}async function Xr(e,t,n,r){n.id;let i=t.callbackLogin;return O({engine:i.engine})}async function Zr(e,t,n,r){let i=n.id,a=t.callbackLogin,o=await e.json().catch(()=>({}));if(a.state===`done`||a.state===`failed`)return O({ok:!0});let s={state:[`starting`,`open`,`verifying`],tokenHash:a.tokenHash};if(typeof o.error==`string`)return await t.store.patchLogin(i,{state:`failed`,error:o.error.slice(0,500)},s)&&Jr(t,a),O({ok:!0});let c=o.result?.env;if(c){let e=a.engine===`claude`?`CLAUDE_CODE_OAUTH_TOKEN`:`CODEX_AUTH_JSON`;if(Object.keys(c).join()!==e||typeof c[e]!=`string`)return O({error:`Invalid sign-in result`},400);let n=`${a.engine}-subscription`,r=o.result?.account;return await t.store.completeLogin(i,a.tokenHash,n,{...xr(t.config,{env:c}),engine:a.engine,createdAt:(t.now??Date.now)(),...r?.email||r?.plan?{account:{...typeof r.email==`string`?{email:r.email}:{},...typeof r.plan==`string`?{plan:r.plan}:{}}}:{}})?(Jr(t,a),O({ok:!0})):O({error:`This sign-in changed. Try again.`},409)}let l={...typeof o.url==`string`&&/^https:\/\//.test(o.url)?{url:o.url}:{},...typeof o.code==`string`?{code:o.code.slice(0,64)}:{}};return(a.state===`starting`?await t.store.patchLogin(i,{...l,state:`open`},{state:`starting`,tokenHash:a.tokenHash})??await t.store.patchLogin(i,l,{...s,state:[`open`,`verifying`]}):await t.store.patchLogin(i,l,s))?O({ok:!0}):O({error:`This sign-in changed. Try again.`},409)}const Qr=e=>`audit:${String(9999999999999-e).padStart(13,`0`)}:${Er(4).toString(`hex`)}`,$r=e=>e.config.name??`Wular`,ei=e=>wn(e,e.serverOrganizationId??e.organizationId);async function ti(e,t,n){let r=(e.now??Date.now)(),i=e.session?.user,a={at:r,actor:i?{id:i.id,name:i.name,email:i.email}:{id:`admin-token`},action:t,target:n};await ei(e).store.put(`snapshot`,Qr(r),a)}async function ni(e,t){let n=await ei(t).store.list(`app`),r=Object.values(t.integrations).filter(e=>e.app.builtin===`shared`).map(e=>{let t=n.find(({value:t})=>t.builtin&&t.integration===e.id)?.value;return{integration:e.id,name:e.name,brand:e.brand,organizationApps:e.organizationApps===!0,...t?{app:{id:t.id,name:t.name,createdAt:t.createdAt}}:{}}}),i=t.config.publicUrl,a=!!i&&H.has(new URL(i).hostname);return O({name:$r(t),platforms:r,...a?{unreachable:!0}:{}})}async function ri(e,t,n){let r=t.integrations[n.integration];if(!r)return O({error:`Unknown integration "${n.integration}".`},404);if(r.app.builtin!==`shared`)return O({error:`Create ${r.name} apps in your workspace from the agent's Platforms tab.`},400);if(!t.config.publicUrl)return O({error:`Set PUBLIC_URL on this server first. Platforms call it.`},400);let i=await e.json().catch(()=>void 0),a=e=>typeof e==`string`&&e.trim()||void 0,o=a(i?.name)??$r(t),s=r.organizationApps?a(i?.owner):void 0,c=await zn(ei(t),r.id,{name:o,owner:s});return await ti(t,`Started setting up a shared app`,`${o} on ${r.name}`),O({url:c})}async function ii(e,t){let n=await ei(t).store.list(`snapshot`,{prefix:`audit:`,limit:100});return O(n.map(e=>e.value))}const ai=e=>`create-finished:${T(e)}`;async function oi(e,t){let n=await e.store.get(`delivery`,ai(t));return n&&`target`in n?n.target:void 0}async function si(e,t,n){let r=e.operatorApp??!1,i=r?`*`:e.session?.user.id??`anonymous`;if(!e.integrations[t])return{error:`Unknown integration "${t}"; run coder agent integrations list to see them`,status:404};if(!e.config.publicUrl)return{error:`PUBLIC_URL is not set on this server; set it to the address platforms should call and restart`,status:400};if(r&&e.integrations[t].app.builtin!==`shared`)return{error:`Create this app in your workspace from the agent's Platforms tab.`,status:400};let a=Yn(n);if(!a)return{error:`Setup link is missing or malformed; start again from the agent's Platforms tab`,status:400};if(!a.definition.integrations[t])return{error:`This agent declares no ${t} integration in its agent.json`,status:400};if(a.state.public&&!r&&!e.integrations[t].publicApps)return{error:`${e.integrations[t].name} apps cannot be public here. Create a private one.`,status:400};let o=On(t,a.state),s=a.state.tx?await _n(e,a.state.tx,`create`,i)===o?a.state.tx:void 0:await _e(e,`create`,i,o);return s?{state:{...a.state,tx:s},definition:a.definition}:{error:`This app creation link is invalid, expired, or already used`,status:403}}async function ci(e,t,n,r){if(!/^[a-z0-9_-]+$/.test(r.pathname.split(`/`)[2]))return;let i=r.searchParams.get(`tx`);if(t.operatorApp&&i&&(await _n(t,i,`create`,`*`)||await oi(t,i)===n.id))return await or(e,void 0,t.dashboardHosts)??new Response(`UI is not built`,{status:503});let a=new URLSearchParams(r.searchParams);return a.set(`create`,n.id),ce(`${Un(t)}${Qt(Sn(t),`/setup`)}?${a}`)}async function li(e,t,n){let r=await si(e,t,n);if(`error`in r)return O({error:r.error},r.status);let{app:i}=e.integrations[t],a=r.state.tx,o=i.createStep&&(e.operatorApp||r.state.public)?i.createStep(e.config.publicUrl,{name:r.definition.name,public:r.state.public}):void 0,s=e.config.publicUrl;if(i.createPost&&H.has(new URL(s).hostname))return O({error:`${e.integrations[t].name} cannot reach ${s}. Set a public address first.`},400);let c=e.operatorApp?void 0:vn(e,r.state.agent),l=i.createPost?.({publicUrl:s,...r,encodedState:re({tx:a,...c?{back:c}:{}})});return O({tx:a,...l?{post:l}:{},...o?{create:o}:{}})}async function ui(e,t,n,r){if(/^[a-z0-9_-]+$/.test(r.pathname.split(`/`)[2]))return li(t,n.id,r.searchParams)}async function di(e,t,n){let r=await e.json().catch(()=>void 0);return li(t,n.integration,new URLSearchParams(r&&typeof r==`object`?r:{}))}async function fi(e,t,n,r,i){let a=t.operatorApp??!1,o=a?`*`:t.session?.user.id??`anonymous`,s=t.integrations[n];if(!s)return B(t,`unknown-integration`,{platform:n},i);if(a&&s.app.builtin!==`shared`)return O({error:`Create this app in your workspace from the agent's Platforms tab.`},400);let c=t.config.publicUrl;if(!c)return B(t,`no-public-url`,{},i);let l=r?await Kt(t,r,n,o):void 0;if(!l)return B(t,`create-expired`,{platform:n},i);a&&await t.store.put(`delivery`,ai(r),{at:t.now?.()??Date.now(),target:n},{ttlMs:6e5});let u=a?`/create/${n}`:vn(t,l.state.agent),d=a?{tx:r}:{},f=a?void 0:(await ln(t)).find(e=>e.integration===n),p=await s.app.createCallback(e,{publicUrl:c,...l,fetch:t.fetch??fetch,...f?{shared:K(t.config,f.credentials)}:{}}).catch(r=>r instanceof w&&r.code===`invalid-field`&&e.headers.get(`accept`)===`application/json`?O({error:r.message},400):r instanceof w?B(t,r.code,{platform:n,error:r.error,...d},u):(console.error(`coder server: creating the ${n} app failed`,r),B(t,`failed`,{platform:n,...d},u)));if(p instanceof Response)return p;let m={id:`${n}:${p.platformAppId}`,integration:n,agent:l.state.agent,name:p.name,...l.state.repo?{agentsRepo:l.state.repo}:{},...l.state.repo?{branch:l.state.branch??`main`}:{},...a?{builtin:!0}:{},...`shared`in p?{shared:f.id,credentials:``}:{credentials:hr(t.config,p.credentials)},createdAt:t.now?.()??Date.now()};if(await t.store.put(`app`,m.id,m),s.app.values&&await t.store.put(`delivery`,Be(m.id),{version:0,manifest:s.app.values(m,{publicUrl:c,definition:l.definition}).lines,changed:!1}),a)return await ti(t,`Created the shared app`,`${p.name} on ${s.name}`),B(t,`created`,{platform:n,app:p.name,...d},u);let h=await _e(t,`install`,o,m.id);return ce(`${c}/install/${n}?app=${encodeURIComponent(m.id)}&state=${re({tx:h,back:u})}`)}async function pi(e,t,n,r){if(!/^[a-z0-9_-]+$/.test(r.pathname.split(`/`)[2]))return;let i=le(r.searchParams.get(`state`));return fi(e,t,n.id,i?.tx,Ft(i?.back))}async function mi(e,t,n,r){if(!/^[a-z0-9_-]+$/.test(r.pathname.split(`/`)[2]))return;let i=new URLSearchParams(await e.clone().text()).get(`tx`),a=await fi(e,t,n.id,i,void 0),o=a.headers.get(`location`);return o&&e.headers.get(`accept`)===`application/json`?O({url:o}):a}async function hi(e,t,n,r){if(t.source!==`repo`||!t.repo)return;let i=(await(r??e.store.list(`app`))).find(({value:e})=>e.agent===t.id&&e.agentsRepo===t.repo)?.value;return((i&&e.integrations[i.integration])??Object.values(e.integrations).find(e=>e.repos))?.repos?.url(t.repo,t.path,i?.branch??n?.commit)}async function gi(e,t,n){let r=await wt(e.store,t);return await qn(e.store,n,t,r)?wt(e.store,t):r}async function Q(e,t){let n=(e.now??Date.now)(),r=e.local?await Fe(e.store,e.local.cwd,e.integrations,t).catch(()=>void 0):void 0;return{now:n,local:r,loadCurrent:()=>r?Promise.resolve(r.find(({record:e})=>e.id===t)??{}):gi(e,t,n)}}async function _i(e,t,{after:n,q:r,source:i,platform:a,limit:o}){return!t&&e.store.listAgentSummaries?(await e.store.listAgentSummaries({after:n,q:r,source:i,platform:a,limit:o})).map(({record:e})=>e):(t??(a?await At(e.store):(await e.store.list(`agent`)).map(({value:e})=>({record:e,version:void 0})))).filter(({version:e})=>!a||!!e?.definition?.integrations?.[a]).map(({record:e})=>e).filter(e=>(!n||e.id>n)&&(!i||e.source===i)&&(!r||[e.id,e.name,e.description,e.repo].some(e=>e?.toLowerCase().includes(r)))).sort((e,t)=>e.id.localeCompare(t.id)).slice(0,o)}async function vi(e,t,n,r){let i=n.slug;if(n.version&&Number(n.version),n.version&&!/^\d+$/.test(r.pathname.split(`/`).at(-1)))return k();let a=r.searchParams.get(`fields`);if(a&&![`id`,`id,name`].includes(a))return O({error:`Invalid fields`},400);let{now:o,local:s,loadCurrent:c}=await Q(t,i);if(!s&&t.store.listAgentSummaries&&(await G(t.store,o),ae(r)&&!a))return O(await Ci(t,r));let l=ie(r,200);if(a){!s&&!t.store.listAgentSummaries&&await G(t.store,o);let e=await _i(t,s,{after:oe(r),q:r.searchParams.get(`q`)?.trim().toLowerCase(),source:Si[r.searchParams.get(`type`)??``],platform:r.searchParams.get(`platform`)??void 0,limit:l+ +!!ae(r)}),n=e=>a===`id`?{id:e.id}:{id:e.id,name:e.name},i=fe(e,l,e=>e.id);return O(ae(r)?{...i,items:i.items.map(n)}:e.map(n))}let u=s??(t.store.listAgentSummaries?await t.store.listAgentSummaries({limit:l}):await At(t.store));if(!s&&!t.store.listAgentSummaries&&await G(t.store,o,u)&&(u=await At(t.store)),ae(r))return O(await Ci(t,r,u));let d,f=y();return O(await Promise.all(u.slice(0,l).map(async({record:e,version:n})=>{e.source===`repo`&&e.repo&&(d??=t.store.list(`app`));let r=await hi(t,e,n,d);return{...e,...e.id===f?{default:!0}:{},definition:n?.definition,...r?{sourceUrl:r}:{}}})))}async function yi(e,t,n,r){let i=n.slug;if(n.version&&Number(n.version),n.version&&!/^\d+$/.test(r.pathname.split(`/`).at(-1)))return k();let{now:a,local:o,loadCurrent:s}=await Q(t,i),c=ie(r,10,50),l=oe(r),[u,d]=await Promise.all([o?s().then(e=>e.record):L(t.store,i),o?Promise.resolve(o.flatMap(({version:e})=>e?[{value:e}]:[])):t.store.listVersions?.(i,c+1,l)]);return u?O(await wi(t,u,c,l??u.currentVersion+1,d)):O({error:`No agent named "${i}"`},404)}async function bi(e,t,n,r){let i=n.slug,a=n.version?Number(n.version):void 0;if(n.version&&!/^\d+$/.test(r.pathname.split(`/`).at(-1)))return k();let{now:o,local:s,loadCurrent:c}=await Q(t,i),l=s?s.find(({version:e})=>e?.version===a)?.version:await A(t.store,i,a);return l?O(l):O({error:`No version ${a} for agent "${i}"`},404)}async function xi(e,t,r,i){let a=r.slug;if(r.version&&Number(r.version),r.version&&!/^\d+$/.test(i.pathname.split(`/`).at(-1)))return k();let{now:o,local:s,loadCurrent:c}=await Q(t,a),l=i.searchParams.get(`versions`)!==`0`,u=i.searchParams.get(`content`)!==`0`,d=i.searchParams.get(`handles`)===`1`,f=t.session?.user.id,[{record:p,version:m},h,g,_,v]=await Promise.all([!u&&!s&&t.store.listAgentSummaries&&!ee()[a]?t.store.listAgentSummaries({slug:a}).then(e=>e[0]??{}):c(),l?s?s.flatMap(({version:e})=>e?[{value:e}]:[]):t.store.listVersions?t.store.listVersions(a):t.store.list(`agentversion`,{prefix:`${a}:`}):[],d?pn(t,a):[],d?Cn(t.store,a):void 0,d?t.store.listCredentials?t.store.listCredentials({owner:f}):t.store.list(`credential`):void 0]);if(!p)return O({error:`No agent named "${a}"`},404);let y=p.settings?.engine??m?.definition.engine??n,b=v!==void 0&&!v.some(({value:e})=>e.engine===y&&(!e.owner||e.owner===f))&&!await mn(t,p.settings?.engine??m?.definition.engine),x=m?.definition.integrations??{},S=e=>{let t=x[e]?.events;return Array.isArray(t)?t.includes(`mention`):!!(t&&`mention`in t)},C=[],w=Object.keys(t.integrations),T=(e,t)=>w.indexOf(e.value.integration)-w.indexOf(t.value.integration);for(let{value:e}of[...g].sort(T))S(e.integration)&&!C.some(t=>t.integration===e.integration&&t.name.toLowerCase()===e.name.toLowerCase())&&C.push({name:e.name,integration:e.integration,platform:t.integrations[e.integration]?.name??e.integration});let E=h.map(({value:e})=>{let{systemPrompt:t,files:n,...r}=e;return r}),D=await hi(t,p,m);return O({...p,...m?{definition:m.definition,...u&&`systemPrompt`in m?{systemPrompt:m.systemPrompt,...m.files?{files:m.files}:{}}:{}}:{},...D?{sourceUrl:D}:{},...l?{versions:E}:{},...C.length?{handles:C}:{},..._?.failed?{deliveries:{failed:_.failed,recent:_.recent.map(e=>({at:e.at,platform:t.integrations[e.integration]?.name??e.integration,...e.type?{type:e.type}:{},error:e.error,...e.url?{url:e.url}:{}}))}}:{},...b?{needsModel:!0}:{}})}const Si={builtin:`builtin`,dashboard:`upload`,repository:`repo`};async function Ci(e,t,n){let r=ie(t,24,100),i=oe(t),a=t.searchParams.get(`q`)?.trim().toLowerCase(),o=Si[t.searchParams.get(`type`)??``],s=t.searchParams.get(`platform`),c=t.searchParams.get(`connect`)===`1`,l=e.serverOrganizationId,u=e.store.list(`app`),[d,f,p,m]=await Promise.all([u,e.store.list(`installation`),c&&l!==void 0&&l!==e.organizationId&&e.scope?e.scope(l).store.list(`app`):[],n?n.filter(({record:e})=>(!i||e.id>i)&&(!o||e.source===o)&&(!a||[e.id,e.name,e.description,e.repo].some(e=>e?.toLowerCase().includes(a)))):e.store.listAgentSummaries({after:i,source:o,q:a,platform:s??void 0,limit:r+1})]),h=new Set(f.filter(({value:e})=>!e.deletedAt).map(({value:e})=>e.app)),g=(e,t)=>{let n=d.filter(({value:n})=>n.agent===e&&n.integration===t);return n.length?n.some(({value:e})=>h.has(e.id))?`installed`:`created`:`none`},_=[];for(let{record:e,version:t}of m){let n=Object.keys(t?.definition?.integrations??{}).sort();if(!(s&&!n.includes(s))&&(_.push({record:e,version:t,ids:n}),_.length>r))break}let v=fe(_,r,e=>e.record.id),b=y();return{...v,...c?{connectable:[...d,...p].filter(({value:t})=>t.builtin&&e.integrations[t.integration]?.app.builtin===`shared`&&!h.has(t.id)).map(({value:e})=>({id:e.id,integration:e.integration,agent:e.agent}))}:{},items:await Promise.all(v.items.map(async({record:t,version:n,ids:r})=>{let i=await hi(e,t,n,u);return{...t,...t.id===b?{default:!0}:{},definition:n?.definition,...i?{sourceUrl:i}:{},platforms:r.map(e=>({id:e,state:g(t.id,e)}))}}))}}async function wi(e,t,n,r,i){let a=r-n-2,o=(i??await e.store.list(`agentversion`,{prefix:`${t.id}:`,...a>0?{after:Lt(t.id,a)}:{},limit:n+1})).map(({value:e})=>{let{systemPrompt:t,files:n,definition:r,...i}=e;return i}).filter(e=>e.version<r).reverse();return fe(o,n,e=>e.version)}var Ti=class{options;entries=new Map;pending=new Map;constructor(e={ttlMs:6e5,max:100}){this.options=e}get size(){return this.entries.size}get inFlight(){return this.pending.size}has(e){return this.entries.has(e)}keys(){return this.entries.keys()}async get(e,t){let n=this.options.now??Date.now,r=n(),i=this.entries.get(e);if(i&&r-i.at<this.options.ttlMs)return i.value;for(let[t,n]of this.entries)t!==e&&r-n.at>=this.options.ttlMs&&this.entries.delete(t);let a=this.pending.get(e);return a||(a=Promise.resolve().then(t).then(t=>{if(t===void 0)return i?.value;if(this.options.accept&&!this.options.accept(t))return i?.value??t;this.entries.set(e,{value:t,at:n()});let r=this.entries.keys().next().value;return this.entries.size>this.options.max&&r!==void 0&&this.entries.delete(r),t}).catch(()=>i?.value).finally(()=>this.pending.delete(e)),this.pending.set(e,a)),a}};const Ei=/^[a-z0-9][a-z0-9-]*$/,Di=new Set([`openrouter.ai`,`ai-gateway.vercel.sh`,`api.groq.com`,`api.together.xyz`]);function Oi(e){return{builtin:{codex:m,claude:f},models:e.models??{}}}async function ki(e,t){let{baseUrl:n,envKey:r,key:i}=await qe(e);if(!n||!/^https?:\/\//.test(n)||!URL.canParse(n))return O({error:`An http or https base URL is required`},400);let a=!i&&r&&await Ai(t,n,r)?await tr(t,r):void 0,o=i||a,s=t.settings??={},c=s.probes??=new Ti({ttlMs:6e5,max:100,now:t.now,accept:e=>e.reachable}),l=`${new URL(n).host}|${r??``}|${T(String(o??``))}`;return O(await c.get(l,()=>ne({baseUrl:n},{key:o,fetch:t.fetch})))}async function Ai(e,t,n){let r=new URL(t).host;if(Di.has(r))return!0;let i=(await _t(e)).models??{};return Object.values(i).some(e=>`baseUrl`in e&&e.envKey===n&&new URL(e.baseUrl).host===r)}async function ji(e,t,n,r){return O(Oi(await _t(t)))}async function Mi(e,t,n,r){let{name:i=``,...a}=await qe(e);return!Ei.test(i)||c(i)?O({error:`Invalid model name "${i}"`},400):R(t,e=>{if(e.models?.[i])throw new N(`"${i}" already exists`);e.models={...e.models,[i]:a}})}async function Ni(e,t,n,r){let i=n.name;return R(t,e=>{if(!e.models?.[i])throw new N(`No model "${i}"`);_(e,i)})}async function Pi(e,t,n,r){let i=n.name,{spec:a}=await qe(e);return R(t,e=>{if(!Ei.test(i))throw new N(`Invalid alias name "${i}"`);let t=e.models?.[i];if(t&&g(t))throw new N(`"${i}" is a custom model name`);let n=s(a,d(e));if(!n?.model||n.engine===`custom`)throw new N(`"${a}" does not name a codex or claude model`);let r=n.engine===`claude`?f:m,o=a.split(`:`).some(e=>p.has(e)||h.has(e));e.models={...e.models,[i]:{provider:n.engine,model:r[n.model]??n.model,...o&&n.effort?{effort:n.effort}:{}}}})}async function Fi(e,t,n,r){let i=n.name;return R(t,e=>{let t=e.models??={},n=t[i];n&&(g(n)||u(n))?n.disabled=!0:t[i]={disabled:!0}})}async function Ii(e,t,n,r){let i=n.name;return R(t,e=>{let t=e.models??={},n=t[i];n&&(g(n)||u(n))?delete n.disabled:delete t[i]})}async function Li(e,t){let{now:n,local:r}=await Q(t);r||await G(t.store,n);let[i,a,o]=await Promise.all([_i(t,r,{limit:200}),_t(t),t.store.list(`runner`)]),s=y(),c=i.filter(e=>!e.settings?.disabled).sort((e,t)=>Number(t.id===s)-Number(e.id===s)).map(({id:e,name:t})=>({id:e,name:t,...e===s?{default:!0}:{}})),l=fr(t,a),u=Object.values(t.integrations).find(e=>e.repos);return O({agents:c,...l.chain?.[0]?{engine:l.chain[0]}:{},engines:l.engines??{},models:Oi(a),runners:fn(t,o,n).map(({id:e,name:t,default:n})=>({id:e,name:t,default:n})),flows:D(te(),`builtin`).map(e=>e.name),...t.local?{folders:Wt(t.local.cwd)}:{},...u?{connectLabel:u.installLabel??`Connect ${u.id}`}:{}})}async function Ri(e,t){let n=(await e.store.list(`installation`)).filter(({value:t})=>!t.deletedAt&&e.integrations[t.integration]?.repos),r=new Map((await dr(e.store,n.map(({value:e})=>e.app))).map(({id:e,value:t})=>[e,t]));for(let{value:i}of n){let n=e.integrations[i.integration];if(i.deletedAt||!n?.repos)continue;let a=r.get(i.app);if(!(!a||a.integration!==n.id))try{let r=i.token?{...i,token:K(e.config,i.token)}:i,o=await n.auth.token(r,K(e.config,a.credentials));if((await n.repos.list(r,o)).includes(t))return{contents:n,token:o,app:a,installation:i}}catch{}}}async function zi(e,t,n){let r=await Ri(e,t);if(!r)return O({error:`No installed app can read ${t}`},400);let i=await r.contents.repos.listDir(t,xt,r.token,n).catch(()=>[]),a=await Promise.all(i.map(async i=>{let a=await r.contents.repos.readFile(t,`${xt}/${i}/agent.json`,r.token,n).catch(()=>void 0);if(a===void 0)return;let s={};try{let e=JSON.parse(a);e&&typeof e==`object`&&(s=e)}catch{}let c=Object.entries(s.mcp&&typeof s.mcp==`object`&&!Array.isArray(s.mcp)?s.mcp:{}).flatMap(([e,t])=>o(e,t)),l=await L(e.store,i),u=l?.source===`repo`&&l.repo===t,d=u?await A(e.store,i):void 0;return{id:i,name:typeof s.name==`string`?s.name:i,...c.length?{warnings:c}:{},...typeof s.description==`string`?{description:s.description}:{},...u?{version:l.currentVersion,...d?.source?{commit:d.source.commit}:{}}:{},...l&&!u?{taken:!0}:{}}}));return O({repo:t,agents:a.filter(Boolean)})}async function Bi(e,t,n,r){let i=r.searchParams.get(`repo`);return i?zi(t,i,r.searchParams.get(`ref`)||`HEAD`):O({error:`repo is required`},400)}async function Vi(e,t,n,r){let i=await e.json().catch(()=>void 0),a=i?.agents;if(typeof i?.repo!=`string`||i.ref!==void 0&&typeof i.ref!=`string`||a!==void 0&&!(Array.isArray(a)&&a.every(e=>typeof e==`string`)))return O({error:`repo is required, ref must be a string and agents a list of ids`},400);try{let e=await Ri(t,i.repo);if(!e)return O({error:`No installed app can read ${i.repo}`},400);let n=i.ref??`HEAD`,r=a??await e.contents.repos.listDir(i.repo,`.coder/agents`,e.token,n);for(let e of r){let n=await L(t.store,e);if(n&&(n.source!==`repo`||n.repo!==i.repo))return O({error:`Agent id "${e}" is already taken`},409)}let o=await Me(t.store,e.contents,i.repo,n,e.token,(t.now??Date.now)(),{slugs:r});return await Dt(t,o),O({imported:o.map(e=>e.agent)})}catch(e){return O({error:e instanceof Error?e.message:String(e)},400)}}function Hi(e){if(!e||Array.isArray(e)||typeof e!=`object`)return!1;let t=Object.entries(e);if(t.length>100)return!1;let n=0;for(let[e,r]of t){if(typeof r!=`string`||e.startsWith(`/`)||e.includes(`\\`)||e.includes(`\0`)||e.split(`/`).includes(`..`)||e===`agent.json`||e===`system.md`)return!1;n+=Buffer.byteLength(e)+Buffer.byteLength(r)}return n<=262144}async function Ui(e,t){return(await Ln(e,[t])).flatMap(({app:e,error:t,check:n})=>{let r={id:e.id,integration:e.integration,name:e.name};return t?[{...r,error:t}]:n?n.changed?[{...r,drift:!0}]:[]:[{...r,updated:!0}]})}async function Wi(e,t,n,r){let i=n.slug;if(n.version&&Number(n.version),n.version&&!/^\d+$/.test(r.pathname.split(`/`).at(-1)))return k();let{now:a,local:o,loadCurrent:s}=await Q(t,i),c=await e.json().catch(()=>void 0);try{let e=x({[i]:c})[i];if(!e||typeof e!=`object`)throw Error(`settings must be an object`);let{disabled:n,...r}=e,a=n?{...r,disabled:n}:r,{record:o,version:l}=await s();if(!o||!l)throw Error(`No agent named "${i}".`);if(dn({...o,settings:void 0},l,r,t.integrations),t.local){let e=S(t.local.cwd,i,!!n);return e?O({error:`Agent "${i}" is ${n?`enabled`:`disabled`} by agents.${i} in ${e}. Change it there.`},409):(await St(t,e=>{e.agents={...e.agents,[i]:a}}),await Fe(t.store,t.local.cwd,t.integrations),O(await L(t.store,i)))}return O(await Vn(t.store,i,a,(t.now??Date.now)()))}catch(e){return O({error:e instanceof Error?e.message:String(e)},400)}}async function Gi(e,t,n,r){let i=n.slug;if(n.version&&Number(n.version),n.version&&!/^\d+$/.test(r.pathname.split(`/`).at(-1)))return k();let{now:a,local:o,loadCurrent:s}=await Q(t,i),{record:c}=await s();if(!c)return O({error:`No agent named "${i}"`},404);if(c.source===`builtin`)return O({error:`Built-in agents cannot be deleted.`},400);if(t.local&&!await ye(t.local.cwd,t.integrations,i))return O({error:`Delete .coder/agents/${i} in the repo`},409);for(let{id:e}of await t.store.list(`agentversion`,{prefix:`${i}:`}))await t.store.delete(`agentversion`,e);return await t.store.delete(`agent`,i),O({ok:!0})}async function Ki(e,t,n,r){let i=n.slug;if(n.version&&Number(n.version),n.version&&!/^\d+$/.test(r.pathname.split(`/`).at(-1)))return k();let{now:a,local:o,loadCurrent:s}=await Q(t,i),c=await e.json().catch(()=>void 0);if(!c||typeof c.systemPrompt!=`string`||c.files!==void 0&&!Hi(c.files)||c.name!==void 0&&typeof c.name!=`string`||c.description!==void 0&&typeof c.description!=`string`)return O({error:`definition and systemPrompt are required; files must contain strings`},400);try{b([i]);let[e]=C({definitions:{[i]:{json:c.definition,builtin:!1}},usage:void 0},t.integrations);if(!e)throw Error(`No agent named "${i}".`);let n=t.local?await L(t.store,i):void 0,r=t.local&&n?await A(t.store,i):void 0,a=c.files;t.local&&(await gt(t.local.cwd,t.integrations,i,{definition:{...c.definition,...c.name===void 0?{}:{name:c.name},...c.description===void 0?{}:{description:c.description}},systemPrompt:c.systemPrompt,...a?{files:a}:{}}),await Fe(t.store,t.local.cwd,t.integrations));let o=t.local?void 0:await Xt(t.store,{id:i,name:c.name??e.name,description:c.description??e.definition.description,source:`upload`,definition:e.definition,systemPrompt:c.systemPrompt,files:a,importedFrom:`upload`},(t.now??Date.now)()),s=o?.version??await A(t.store,i),l=o?.unchanged??Or(r&&{...r,createdAt:0},{...s,createdAt:0}),u=await Ui(t,s),d=o?.record??await L(t.store,i);return O({...d,definition:s.definition,version:s.version,unchanged:l,apps:u})}catch(e){return O({error:e instanceof Error?e.message:String(e)},400)}}async function qi(e,t,n,r){let i=n.id,a=Number(r.searchParams.get(`after`)??-1),o=Number.isFinite(a)?a:-1;r.searchParams.has(`limit`)&&ie(r,500,2e3);let s=await t.store.get(`task`,i);if(!s||t.local&&s.handle?.startsWith(`cli:`)&&s.task.flow==="default"){let n=s?.task.cwd??t.local?.cwd;if(!n||!I(n,i,!1))return O({error:`No task "${i}"`},404);{let r=Number(e.headers.get(`last-event-id`)??o);return ta(e,t,`cli:${n}:${i}`,Number.isFinite(r)?r:o,async e=>{let t=I(n,i);if(t)return{status:t,lines:we(n,i,e,500),pendingResult:Ji(n,t,!t.result)}})}}let c=Number(e.headers.get(`last-event-id`)??o),l=t.statementTimeout??((e,t)=>t());return ta(e,t,i,Number.isFinite(c)?c:o,e=>l($i,async()=>{let n=await t.store.get(`task`,i);if(n)return{status:await rr(t,n),lines:await sn(t.store,i,e,500)}}))}function Ji(e,t,n=!1){if(!Ne.has(t.status)||t.error||t.status===`cancelled`)return!1;let r=l(e,t.task.id),a=Date.parse(r?.resumedAt??r?.createdAt??``)||0;return n||(Cr.statSync(q.join(i(e,t.task.id),`result.json`),{throwIfNoEntry:!1})?.mtimeMs??0)<a}const Yi=1e3,$=3e4;function Xi(e,t,n,r){let i=[...new Set((r.searchParams.get(`tasks`)??``).split(`,`).filter(Boolean))].slice(0,100),a=Date.now(),o=t.taskWatcher??new Qi,s=o.tag(t),[c,l]=(e.headers.get(`last-event-id`)??``).split(`-`),u=Number(c),d=u>0&&`-${l}`===s,f=d?Math.min(Math.max(u,a-29e4),a):a,p=u>0&&(!d||u<f)?`event: reset
+import{qi as e}from"./core-DwsAMCnL.js";import{$ as t,B as n,Cn as r,Ct as i,Q as a,R as o,S as s,_ as c,ct as l,g as u,j as d,n as f,o as p,s as m,t as h,v as g,w as _}from"./config-D2FxHWwi.js";import{H as v}from"./dispatch-D3Dqxijf.js";import{i as y,n as b,p as x,r as ee,s as S,t as C}from"./load-CRmQB1LD.js";import{s as w,u as T}from"./slack-C_RlVDz7.js";import{n as E}from"./integrations-D3OgJk6Y.js";import{i as D,t as te}from"./discover-CBP4Uw0N.js";import{c as ne}from"./models-CdvmuaLv.js";import{a as re}from"./local-ccKBhpQc.js";import{a as O,d as ie,f as ae,l as k,n as oe,o as se,p as ce,r as le,s as ue,t as de,u as fe}from"./http-Cg_wYcZT.js";import{$ as pe,$n as A,$t as me,A as he,An as ge,Ar as _e,B as ve,Bn as ye,Bt as be,C as xe,D as Se,Dn as Ce,Dr as j,Dt as we,E as Te,En as Ee,Er as M,Et as De,F as Oe,Fn as ke,Ft as Ae,G as je,Gn as Me,Gt as Ne,H as Pe,Hn as Fe,Ht as Ie,I as Le,In as Re,It as N,J as ze,Jn as Be,Jt as Ve,K as He,Kn as Ue,Kt as We,L as Ge,Ln as Ke,Lt as qe,M as Je,Mn as Ye,Mt as Xe,N as Ze,Nn as Qe,Nt as $e,O as P,On as et,Or as F,Ot as I,P as tt,Pn as nt,Pt as rt,Q as it,Qn as L,Qt as at,R as ot,Rn as st,Rt as R,S as z,Sn as ct,Sr as lt,St as ut,T as dt,Tn as ft,Tr as pt,Tt as mt,U as ht,Un as gt,Ut as _t,V as vt,Vt as yt,W as bt,Wn as xt,Wt as St,X as Ct,Xn as wt,Xt as Tt,Y as Et,Yn as Dt,Yt as Ot,Z as kt,Zn as At,Zt as jt,_ as Mt,_r as Nt,_t as Pt,a as Ft,an as It,ar as Lt,at as Rt,b as zt,bn as Bt,br as Vt,bt as Ht,c as B,cn as Ut,cr as Wt,ct as Gt,d as Kt,dn as qt,dr as Jt,dt as V,en as Yt,er as Xt,et as Zt,f as Qt,fn as $t,fr as en,ft as tn,g as nn,gn as rn,gr as an,gt as on,h as H,hn as sn,hr as cn,i as ln,in as un,ir as dn,it as fn,j as U,jn as pn,jt as mn,k as hn,kn as gn,kr as _n,kt as W,l as vn,ln as yn,lr as bn,lt as xn,m as Sn,mn as Cn,mr as wn,mt as Tn,nn as En,nr as G,nt as Dn,o as On,on as kn,or as An,ot as jn,p as Mn,pn as Nn,pr as Pn,pt as Fn,q as In,qn as Ln,qt as Rn,r as zn,rn as Bn,rr as Vn,rt as Hn,s as Un,sn as Wn,sr as Gn,tn as Kn,tr as qn,tt as Jn,u as Yn,un as Xn,ur as Zn,ut as Qn,v as $n,vr as er,vt as tr,w as nr,wn as rr,wt as ir,x as ar,xr as or,xt as sr,y as cr,yn as lr,yr as ur,zn as dr,zt as fr}from"./apps-B60OpAHX.js";import{n as pr,r as mr}from"./env-C_DoQYl5.js";import{S as hr,a as gr,b as K,h as _r,i as vr,n as yr,p as br,x as xr}from"./runners-CNhxPjg8.js";import{X as Sr}from"./schema-BSlHRFSP.js";import q from"node:path";import J from"node:process";import Cr from"node:fs";import{spawnSync as wr}from"node:child_process";import{createHash as Tr,randomBytes as Er,randomUUID as Dr}from"node:crypto";import Y from"node:fs/promises";import{isDeepStrictEqual as Or}from"node:util";import kr from"node:http";async function Ar(e){try{return await Y.readdir(e,{withFileTypes:!0})}catch(e){if(e.code===`ENOENT`)return[];throw e}}async function X(e){try{return await Y.lstat(e),!0}catch(e){if(e.code===`ENOENT`)return!1;throw e}}async function jr(e,t){if(e===t||!await X(e))return 0;let n=await Ar(e),i=n.filter(e=>e.isDirectory()).length;if(!await X(t))return await r(e,t),i;for(let i of n)await r(q.join(e,i.name),q.join(t,i.name));return await Y.rmdir(e),i}async function Mr(e){let t=q.dirname(e),n=q.basename(e);for(let e of await Ar(t)){let r=e.name.startsWith(n)?e.name.slice(n.length):``;if(!e.isFile()||!(r===`.tmp`||/^\.\d+(?:\.[a-f0-9-]{36})?\.tmp$/.test(r)))continue;let i=Number(e.name.slice(n.length+1).split(`.`)[0]);if(Number.isInteger(i)&&i>0)try{process.kill(i,0);continue}catch(e){if(e.code!==`ESRCH`)continue}await Y.unlink(q.join(t,e.name)).catch(e=>{if(e.code!==`ENOENT`)throw e})}}async function Nr(e,t){if(await Mr(e),e===t||!await X(e))return 0;if(!await X(t))return await r(e,t),1;let n=JSON.parse(await Y.readFile(e,`utf8`)),i=JSON.parse(await Y.readFile(t,`utf8`)),a={...n,...i,...n.rows||i.rows?{rows:{...n.rows,...i.rows}}:{}},o=`${t}.${process.pid}.${Dr()}.tmp`;try{await Y.writeFile(o,`${JSON.stringify(a)}\n`,{mode:384,flag:`wx`}),await Y.rename(o,t),await Y.unlink(e)}finally{await Y.rm(o,{force:!0})}return 1}async function Pr(){let e=a(),n=t(`state`),r=a(`archive`),i=a(`flows-archived`),o=a(`usage.json`),s=a(`runner`,`usage.json`),c={from:t(`checkouts`),to:a(`checkouts`)},l={from:t(`update-check.json`),to:a(`update-check.json`)},u={cache:e,tasks:0,flows:0,files:0},d=(await Ar(n)).filter(e=>e.isDirectory()).map(e=>({archive:t(`state`,e.name,`archive`),flows:t(`state`,e.name,`flows-archived`),usage:t(`state`,e.name,`usage.json`),runnerUsage:t(`state`,e.name,`runner`,`usage.json`)}));await Mr(o),await Mr(s);for(let e of d)u.tasks+=await jr(e.archive,r),u.flows+=await jr(e.flows,i),u.files+=await Nr(e.usage,o),u.files+=await Nr(e.runnerUsage,s);return await jr(c.from,c.to),u.files+=await Nr(l.from,l.to),u}async function Fr(e){let t=(e.now??Date.now)(),n=await e.store.list(`runner`);return{online:1+n.filter(({value:e})=>e.lastSeen!==void 0&&t-e.lastSeen<3e5).length,total:1+n.length}}async function Ir(e){let t=(e.now??Date.now)(),n=e.healthyAt!==void 0&&t-e.healthyAt<5e3,r=n||await Lr(e);return e.healthyAt=r?n?e.healthyAt:t:void 0,O({ok:r},r?200:503,{"cache-control":`no-store`})}async function Lr(e){return e.config.store===`postgres`?e.databaseHealth?e.databaseHealth().then(()=>!0,()=>!1):!1:!0}async function Rr(e){let t=(e.now??Date.now)();if(e.queue.metrics&&!e.local)return{...await e.queue.metrics(e.organizationId,t-864e5),runnersOnline:(await Fr(e)).online,requests:e.limits?.requests??0,rateLimitRejections:e.limits?.rejections??0};let n=await e.queue.list(e.organizationId),r=e.local?[...W(e.local.cwd,!1),...W(e.local.cwd,!0)]:[],i=new Map([...r,...n.map(e=>e.status===`queued`?e:r.find(t=>t.task.id===e.task.id)??e)].map(e=>[e.task.id,e])),a={queued:0,running:0,waiting:0,completed:0,failed:0,cancelled:0},o=0;for(let e of i.values())e.createdAt>=t-864e5&&a[e.status]++,e.status===`queued`&&o++;return{tasks:a,queueDepth:o,runnersOnline:(await Fr(e)).online,requests:e.limits?.requests??0,rateLimitRejections:e.limits?.rejections??0}}async function zr(e,t,n,r){let i=t.session.user.id;n.id;let a=(await e.json().catch(()=>({}))).engine??``;if(!Wr.has(a)||!t.config.subscriptions?.[a])return O({error:`Sign in with ${a||`that engine`} is off on this server.`},403);let o=t.runners[t.config.runner];if(!o||o.kind===`github-actions`)return O({error:`Sign-in cannot run on the ${t.config.runner} runner.`},409);let s=(await t.store.list(`login`)).find(({value:e})=>e.owner===i&&e.engine===a&&e.state!==`done`&&e.state!==`failed`&&e.expiresAt>Z(t));if(s)return O(Kr(s.id,s.value));let c=`login-${Er(12).toString(`base64url`)}`,l=rn(c,t.organizationId,0),u={owner:i,engine:a,state:`starting`,tokenHash:l.hash,runner:o.kind,createdAt:Z(t),expiresAt:Z(t)+Ur};await Gr(t,c,u);let d;try{let e=await o.start({id:c},{CODER_SERVER:t.config.publicUrl??``,CODER_TASK_TOKEN:l.token,CODER_LOGIN:a},void 0,{timeoutMs:Ur,hosts:[br[a].api,...br[a].account]}),n=await t.store.patchLogin(c,{handle:e},{tokenHash:u.tokenHash});if(!n)return await o.stop(e).catch(()=>{}),O({error:`This sign-in is gone. Start again.`},409);d=n}catch(e){return await t.store.delete(`login`,c),O({error:e instanceof Error?e.message:String(e)},502)}return O(Kr(c,d),201)}async function Br(e,t,n,r){t.session.user.id;let i=n.id??``,a=i&&!i.includes(`/`)?await qr(t,i):void 0;return a?O(Kr(i,a)):O({error:`This sign-in is gone. Start again.`},404)}async function Vr(e,t,n,r){t.session.user.id;let i=n.id??``,a=i&&!i.includes(`/`)?await qr(t,i):void 0;if(!a)return O({error:`This sign-in is gone. Start again.`},404);let o=await e.json().catch(()=>({})),s=typeof o.code==`string`?o.code.trim():``;return a.engine!==`claude`||a.state!==`open`||!s||!await t.store.patchLogin(i,{state:`verifying`,input:hr(t.config,s)},{state:`open`,tokenHash:a.tokenHash})?O({error:`This sign-in is not waiting for a code.`},409):O({ok:!0})}async function Hr(e,t,n,r){t.session.user.id;let i=n.id??``,a=i&&!i.includes(`/`)?await qr(t,i):void 0;return a?(await t.store.delete(`login`,i),a.handle&&await t.runners[a.runner]?.stop(a.handle).catch(()=>{}),O({ok:!0})):O({error:`This sign-in is gone. Start again.`},404)}const Ur=6e5,Wr=new Set([`claude`,`codex`]),Z=e=>(e.now??Date.now)();function Gr(e,t,n){return e.store.put(`login`,t,n,{ttlMs:Math.max(1,n.expiresAt-Z(e))})}function Kr(e,t){return{id:e,engine:t.engine,state:t.state,expiresAt:t.expiresAt,...t.url?{url:t.url}:{},...t.code?{code:t.code}:{},...t.error?{error:t.error}:{},...t.label?{label:t.label}:{}}}async function qr(e,t){let n=await e.store.get(`login`,t);return n&&n.owner===e.session?.user.id?n:void 0}function Jr(e,t){let n=t.handle&&e.runners[t.runner]?.stop(t.handle);if(!n)return;let r=n.catch(e=>console.error(`coder server: could not stop the machine of a finished ${t.engine} sign-in`,e));e.waitUntil?.(r)}async function Yr(e,t,n,r){let i=n.id,a=t.callbackLogin,o=Date.now()+25e3;for(;!a.input&&Date.now()<o&&!e.signal.aborted;){await new Promise(e=>setTimeout(e,250));let e=await t.store.get(`login`,i);if(!e)return new Response(`Unauthorized`,{status:401});a=e}if(!a.input)return O({});let s=await t.store.patchLogin(i,{input:null},{input:a.input,tokenHash:a.tokenHash});return O(s?{code:K(t.config,a.input)}:{})}async function Xr(e,t,n,r){n.id;let i=t.callbackLogin;return O({engine:i.engine})}async function Zr(e,t,n,r){let i=n.id,a=t.callbackLogin,o=await e.json().catch(()=>({}));if(a.state===`done`||a.state===`failed`)return O({ok:!0});let s={state:[`starting`,`open`,`verifying`],tokenHash:a.tokenHash};if(typeof o.error==`string`)return await t.store.patchLogin(i,{state:`failed`,error:o.error.slice(0,500)},s)&&Jr(t,a),O({ok:!0});let c=o.result?.env;if(c){let e=a.engine===`claude`?`CLAUDE_CODE_OAUTH_TOKEN`:`CODEX_AUTH_JSON`;if(Object.keys(c).join()!==e||typeof c[e]!=`string`)return O({error:`Invalid sign-in result`},400);let n=`${a.engine}-subscription`,r=o.result?.account;return await t.store.completeLogin(i,a.tokenHash,n,{...xr(t.config,{env:c}),engine:a.engine,createdAt:(t.now??Date.now)(),...r?.email||r?.plan?{account:{...typeof r.email==`string`?{email:r.email}:{},...typeof r.plan==`string`?{plan:r.plan}:{}}}:{}})?(Jr(t,a),O({ok:!0})):O({error:`This sign-in changed. Try again.`},409)}let l={...typeof o.url==`string`&&/^https:\/\//.test(o.url)?{url:o.url}:{},...typeof o.code==`string`?{code:o.code.slice(0,64)}:{}};return await t.store.patchLogin(i,l.url?{...l,state:`open`}:l,s)?O({ok:!0}):O({error:`This sign-in changed. Try again.`},409)}const Qr=e=>`audit:${String(9999999999999-e).padStart(13,`0`)}:${Er(4).toString(`hex`)}`,$r=e=>e.config.name??`Wular`,ei=e=>wn(e,e.serverOrganizationId??e.organizationId);async function ti(e,t,n){let r=(e.now??Date.now)(),i=e.session?.user,a={at:r,actor:i?{id:i.id,name:i.name,email:i.email}:{id:`admin-token`},action:t,target:n};await ei(e).store.put(`snapshot`,Qr(r),a)}async function ni(e,t){let n=await ei(t).store.list(`app`),r=Object.values(t.integrations).filter(e=>e.app.builtin===`shared`).map(e=>{let t=n.find(({value:t})=>t.builtin&&t.integration===e.id)?.value;return{integration:e.id,name:e.name,brand:e.brand,organizationApps:e.organizationApps===!0,...t?{app:{id:t.id,name:t.name,createdAt:t.createdAt}}:{}}}),i=t.config.publicUrl,a=!!i&&H.has(new URL(i).hostname);return O({name:$r(t),platforms:r,...a?{unreachable:!0}:{}})}async function ri(e,t,n){let r=t.integrations[n.integration];if(!r)return O({error:`Unknown integration "${n.integration}".`},404);if(r.app.builtin!==`shared`)return O({error:`Create ${r.name} apps in your workspace from the agent's Platforms tab.`},400);if(!t.config.publicUrl)return O({error:`Set PUBLIC_URL on this server first. Platforms call it.`},400);let i=await e.json().catch(()=>void 0),a=e=>typeof e==`string`&&e.trim()||void 0,o=a(i?.name)??$r(t),s=r.organizationApps?a(i?.owner):void 0,c=await zn(ei(t),r.id,{name:o,owner:s});return await ti(t,`Started setting up a shared app`,`${o} on ${r.name}`),O({url:c})}async function ii(e,t){let n=await ei(t).store.list(`snapshot`,{prefix:`audit:`,limit:100});return O(n.map(e=>e.value))}const ai=e=>`create-finished:${T(e)}`;async function oi(e,t){let n=await e.store.get(`delivery`,ai(t));return n&&`target`in n?n.target:void 0}async function si(e,t,n){let r=e.operatorApp??!1,i=r?`*`:e.session?.user.id??`anonymous`;if(!e.integrations[t])return{error:`Unknown integration "${t}"; run coder agent integrations list to see them`,status:404};if(!e.config.publicUrl)return{error:`PUBLIC_URL is not set on this server; set it to the address platforms should call and restart`,status:400};if(r&&e.integrations[t].app.builtin!==`shared`)return{error:`Create this app in your workspace from the agent's Platforms tab.`,status:400};let a=Yn(n);if(!a)return{error:`Setup link is missing or malformed; start again from the agent's Platforms tab`,status:400};if(!a.definition.integrations[t])return{error:`This agent declares no ${t} integration in its agent.json`,status:400};if(a.state.public&&!r&&!e.integrations[t].publicApps)return{error:`${e.integrations[t].name} apps cannot be public here. Create a private one.`,status:400};let o=On(t,a.state),s=a.state.tx?await _n(e,a.state.tx,`create`,i)===o?a.state.tx:void 0:await _e(e,`create`,i,o);return s?{state:{...a.state,tx:s},definition:a.definition}:{error:`This app creation link is invalid, expired, or already used`,status:403}}async function ci(e,t,n,r){if(!/^[a-z0-9_-]+$/.test(r.pathname.split(`/`)[2]))return;let i=r.searchParams.get(`tx`);if(t.operatorApp&&i&&(await _n(t,i,`create`,`*`)||await oi(t,i)===n.id))return await or(e,void 0,t.dashboardHosts)??new Response(`UI is not built`,{status:503});let a=new URLSearchParams(r.searchParams);return a.set(`create`,n.id),ce(`${Un(t)}${Qt(Sn(t),`/setup`)}?${a}`)}async function li(e,t,n){let r=await si(e,t,n);if(`error`in r)return O({error:r.error},r.status);let{app:i}=e.integrations[t],a=r.state.tx,o=i.createStep&&(e.operatorApp||r.state.public)?i.createStep(e.config.publicUrl,{name:r.definition.name,public:r.state.public}):void 0,s=e.config.publicUrl;if(i.createPost&&H.has(new URL(s).hostname))return O({error:`${e.integrations[t].name} cannot reach ${s}. Set a public address first.`},400);let c=e.operatorApp?void 0:vn(e,r.state.agent),l=i.createPost?.({publicUrl:s,...r,encodedState:re({tx:a,...c?{back:c}:{}})});return O({tx:a,...l?{post:l}:{},...o?{create:o}:{}})}async function ui(e,t,n,r){if(/^[a-z0-9_-]+$/.test(r.pathname.split(`/`)[2]))return li(t,n.id,r.searchParams)}async function di(e,t,n){let r=await e.json().catch(()=>void 0);return li(t,n.integration,new URLSearchParams(r&&typeof r==`object`?r:{}))}async function fi(e,t,n,r,i){let a=t.operatorApp??!1,o=a?`*`:t.session?.user.id??`anonymous`,s=t.integrations[n];if(!s)return B(t,`unknown-integration`,{platform:n},i);if(a&&s.app.builtin!==`shared`)return O({error:`Create this app in your workspace from the agent's Platforms tab.`},400);let c=t.config.publicUrl;if(!c)return B(t,`no-public-url`,{},i);let l=r?await Kt(t,r,n,o):void 0;if(!l)return B(t,`create-expired`,{platform:n},i);a&&await t.store.put(`delivery`,ai(r),{at:t.now?.()??Date.now(),target:n},{ttlMs:6e5});let u=a?`/create/${n}`:vn(t,l.state.agent),d=a?{tx:r}:{},f=a?void 0:(await ln(t)).find(e=>e.integration===n),p=await s.app.createCallback(e,{publicUrl:c,...l,fetch:t.fetch??fetch,...f?{shared:K(t.config,f.credentials)}:{}}).catch(r=>r instanceof w&&r.code===`invalid-field`&&e.headers.get(`accept`)===`application/json`?O({error:r.message},400):r instanceof w?B(t,r.code,{platform:n,error:r.error,...d},u):(console.error(`coder server: creating the ${n} app failed`,r),B(t,`failed`,{platform:n,...d},u)));if(p instanceof Response)return p;let m={id:`${n}:${p.platformAppId}`,integration:n,agent:l.state.agent,name:p.name,...l.state.repo?{agentsRepo:l.state.repo}:{},...l.state.repo?{branch:l.state.branch??`main`}:{},...a?{builtin:!0}:{},...`shared`in p?{shared:f.id,credentials:``}:{credentials:hr(t.config,p.credentials)},createdAt:t.now?.()??Date.now()};if(await t.store.put(`app`,m.id,m),s.app.values&&await t.store.put(`delivery`,Be(m.id),{version:0,manifest:s.app.values(m,{publicUrl:c,definition:l.definition}).lines,changed:!1}),a)return await ti(t,`Created the shared app`,`${p.name} on ${s.name}`),B(t,`created`,{platform:n,app:p.name,...d},u);let h=await _e(t,`install`,o,m.id);return ce(`${c}/install/${n}?app=${encodeURIComponent(m.id)}&state=${re({tx:h,back:u})}`)}async function pi(e,t,n,r){if(!/^[a-z0-9_-]+$/.test(r.pathname.split(`/`)[2]))return;let i=le(r.searchParams.get(`state`));return fi(e,t,n.id,i?.tx,Ft(i?.back))}async function mi(e,t,n,r){if(!/^[a-z0-9_-]+$/.test(r.pathname.split(`/`)[2]))return;let i=new URLSearchParams(await e.clone().text()).get(`tx`),a=await fi(e,t,n.id,i,void 0),o=a.headers.get(`location`);return o&&e.headers.get(`accept`)===`application/json`?O({url:o}):a}async function hi(e,t,n,r){if(t.source!==`repo`||!t.repo)return;let i=(await(r??e.store.list(`app`))).find(({value:e})=>e.agent===t.id&&e.agentsRepo===t.repo)?.value;return((i&&e.integrations[i.integration])??Object.values(e.integrations).find(e=>e.repos))?.repos?.url(t.repo,t.path,i?.branch??n?.commit)}async function gi(e,t,n){let r=await wt(e.store,t);return await qn(e.store,n,t,r)?wt(e.store,t):r}async function Q(e,t){let n=(e.now??Date.now)(),r=e.local?await Fe(e.store,e.local.cwd,e.integrations,t).catch(()=>void 0):void 0;return{now:n,local:r,loadCurrent:()=>r?Promise.resolve(r.find(({record:e})=>e.id===t)??{}):gi(e,t,n)}}async function _i(e,t,{after:n,q:r,source:i,platform:a,limit:o}){return!t&&e.store.listAgentSummaries?(await e.store.listAgentSummaries({after:n,q:r,source:i,platform:a,limit:o})).map(({record:e})=>e):(t??(a?await At(e.store):(await e.store.list(`agent`)).map(({value:e})=>({record:e,version:void 0})))).filter(({version:e})=>!a||!!e?.definition?.integrations?.[a]).map(({record:e})=>e).filter(e=>(!n||e.id>n)&&(!i||e.source===i)&&(!r||[e.id,e.name,e.description,e.repo].some(e=>e?.toLowerCase().includes(r)))).sort((e,t)=>e.id.localeCompare(t.id)).slice(0,o)}async function vi(e,t,n,r){let i=n.slug;if(n.version&&Number(n.version),n.version&&!/^\d+$/.test(r.pathname.split(`/`).at(-1)))return k();let a=r.searchParams.get(`fields`);if(a&&![`id`,`id,name`].includes(a))return O({error:`Invalid fields`},400);let{now:o,local:s,loadCurrent:c}=await Q(t,i);if(!s&&t.store.listAgentSummaries&&(await G(t.store,o),ae(r)&&!a))return O(await Ci(t,r));let l=ie(r,200);if(a){!s&&!t.store.listAgentSummaries&&await G(t.store,o);let e=await _i(t,s,{after:oe(r),q:r.searchParams.get(`q`)?.trim().toLowerCase(),source:Si[r.searchParams.get(`type`)??``],platform:r.searchParams.get(`platform`)??void 0,limit:l+ +!!ae(r)}),n=e=>a===`id`?{id:e.id}:{id:e.id,name:e.name},i=fe(e,l,e=>e.id);return O(ae(r)?{...i,items:i.items.map(n)}:e.map(n))}let u=s??(t.store.listAgentSummaries?await t.store.listAgentSummaries({limit:l}):await At(t.store));if(!s&&!t.store.listAgentSummaries&&await G(t.store,o,u)&&(u=await At(t.store)),ae(r))return O(await Ci(t,r,u));let d,f=y();return O(await Promise.all(u.slice(0,l).map(async({record:e,version:n})=>{e.source===`repo`&&e.repo&&(d??=t.store.list(`app`));let r=await hi(t,e,n,d);return{...e,...e.id===f?{default:!0}:{},definition:n?.definition,...r?{sourceUrl:r}:{}}})))}async function yi(e,t,n,r){let i=n.slug;if(n.version&&Number(n.version),n.version&&!/^\d+$/.test(r.pathname.split(`/`).at(-1)))return k();let{now:a,local:o,loadCurrent:s}=await Q(t,i),c=ie(r,10,50),l=oe(r),[u,d]=await Promise.all([o?s().then(e=>e.record):L(t.store,i),o?Promise.resolve(o.flatMap(({version:e})=>e?[{value:e}]:[])):t.store.listVersions?.(i,c+1,l)]);return u?O(await wi(t,u,c,l??u.currentVersion+1,d)):O({error:`No agent named "${i}"`},404)}async function bi(e,t,n,r){let i=n.slug,a=n.version?Number(n.version):void 0;if(n.version&&!/^\d+$/.test(r.pathname.split(`/`).at(-1)))return k();let{now:o,local:s,loadCurrent:c}=await Q(t,i),l=s?s.find(({version:e})=>e?.version===a)?.version:await A(t.store,i,a);return l?O(l):O({error:`No version ${a} for agent "${i}"`},404)}async function xi(e,t,r,i){let a=r.slug;if(r.version&&Number(r.version),r.version&&!/^\d+$/.test(i.pathname.split(`/`).at(-1)))return k();let{now:o,local:s,loadCurrent:c}=await Q(t,a),l=i.searchParams.get(`versions`)!==`0`,u=i.searchParams.get(`content`)!==`0`,d=i.searchParams.get(`handles`)===`1`,f=t.session?.user.id,[{record:p,version:m},h,g,_,v]=await Promise.all([!u&&!s&&t.store.listAgentSummaries&&!ee()[a]?t.store.listAgentSummaries({slug:a}).then(e=>e[0]??{}):c(),l?s?s.flatMap(({version:e})=>e?[{value:e}]:[]):t.store.listVersions?t.store.listVersions(a):t.store.list(`agentversion`,{prefix:`${a}:`}):[],d?pn(t,a):[],d?Cn(t.store,a):void 0,d?t.store.listCredentials?t.store.listCredentials({owner:f}):t.store.list(`credential`):void 0]);if(!p)return O({error:`No agent named "${a}"`},404);let y=p.settings?.engine??m?.definition.engine??n,b=v!==void 0&&!v.some(({value:e})=>e.engine===y&&(!e.owner||e.owner===f))&&!await mn(t,p.settings?.engine??m?.definition.engine),x=m?.definition.integrations??{},S=e=>{let t=x[e]?.events;return Array.isArray(t)?t.includes(`mention`):!!(t&&`mention`in t)},C=[],w=Object.keys(t.integrations),T=(e,t)=>w.indexOf(e.value.integration)-w.indexOf(t.value.integration);for(let{value:e}of[...g].sort(T))S(e.integration)&&!C.some(t=>t.integration===e.integration&&t.name.toLowerCase()===e.name.toLowerCase())&&C.push({name:e.name,integration:e.integration,platform:t.integrations[e.integration]?.name??e.integration});let E=h.map(({value:e})=>{let{systemPrompt:t,files:n,...r}=e;return r}),D=await hi(t,p,m);return O({...p,...m?{definition:m.definition,...u&&`systemPrompt`in m?{systemPrompt:m.systemPrompt,...m.files?{files:m.files}:{}}:{}}:{},...D?{sourceUrl:D}:{},...l?{versions:E}:{},...C.length?{handles:C}:{},..._?.failed?{deliveries:{failed:_.failed,recent:_.recent.map(e=>({at:e.at,platform:t.integrations[e.integration]?.name??e.integration,...e.type?{type:e.type}:{},error:e.error,...e.url?{url:e.url}:{}}))}}:{},...b?{needsModel:!0}:{}})}const Si={builtin:`builtin`,dashboard:`upload`,repository:`repo`};async function Ci(e,t,n){let r=ie(t,24,100),i=oe(t),a=t.searchParams.get(`q`)?.trim().toLowerCase(),o=Si[t.searchParams.get(`type`)??``],s=t.searchParams.get(`platform`),c=t.searchParams.get(`connect`)===`1`,l=e.serverOrganizationId,u=e.store.list(`app`),[d,f,p,m]=await Promise.all([u,e.store.list(`installation`),c&&l!==void 0&&l!==e.organizationId&&e.scope?e.scope(l).store.list(`app`):[],n?n.filter(({record:e})=>(!i||e.id>i)&&(!o||e.source===o)&&(!a||[e.id,e.name,e.description,e.repo].some(e=>e?.toLowerCase().includes(a)))):e.store.listAgentSummaries({after:i,source:o,q:a,platform:s??void 0,limit:r+1})]),h=new Set(f.filter(({value:e})=>!e.deletedAt).map(({value:e})=>e.app)),g=(e,t)=>{let n=d.filter(({value:n})=>n.agent===e&&n.integration===t);return n.length?n.some(({value:e})=>h.has(e.id))?`installed`:`created`:`none`},_=[];for(let{record:e,version:t}of m){let n=Object.keys(t?.definition?.integrations??{}).sort();if(!(s&&!n.includes(s))&&(_.push({record:e,version:t,ids:n}),_.length>r))break}let v=fe(_,r,e=>e.record.id),b=y();return{...v,...c?{connectable:[...d,...p].filter(({value:t})=>t.builtin&&e.integrations[t.integration]?.app.builtin===`shared`&&!h.has(t.id)).map(({value:e})=>({id:e.id,integration:e.integration,agent:e.agent}))}:{},items:await Promise.all(v.items.map(async({record:t,version:n,ids:r})=>{let i=await hi(e,t,n,u);return{...t,...t.id===b?{default:!0}:{},definition:n?.definition,...i?{sourceUrl:i}:{},platforms:r.map(e=>({id:e,state:g(t.id,e)}))}}))}}async function wi(e,t,n,r,i){let a=r-n-2,o=(i??await e.store.list(`agentversion`,{prefix:`${t.id}:`,...a>0?{after:Lt(t.id,a)}:{},limit:n+1})).map(({value:e})=>{let{systemPrompt:t,files:n,definition:r,...i}=e;return i}).filter(e=>e.version<r).reverse();return fe(o,n,e=>e.version)}var Ti=class{options;entries=new Map;pending=new Map;constructor(e={ttlMs:6e5,max:100}){this.options=e}get size(){return this.entries.size}get inFlight(){return this.pending.size}has(e){return this.entries.has(e)}keys(){return this.entries.keys()}async get(e,t){let n=this.options.now??Date.now,r=n(),i=this.entries.get(e);if(i&&r-i.at<this.options.ttlMs)return i.value;for(let[t,n]of this.entries)t!==e&&r-n.at>=this.options.ttlMs&&this.entries.delete(t);let a=this.pending.get(e);return a||(a=Promise.resolve().then(t).then(t=>{if(t===void 0)return i?.value;if(this.options.accept&&!this.options.accept(t))return i?.value??t;this.entries.set(e,{value:t,at:n()});let r=this.entries.keys().next().value;return this.entries.size>this.options.max&&r!==void 0&&this.entries.delete(r),t}).catch(()=>i?.value).finally(()=>this.pending.delete(e)),this.pending.set(e,a)),a}};const Ei=/^[a-z0-9][a-z0-9-]*$/,Di=new Set([`openrouter.ai`,`ai-gateway.vercel.sh`,`api.groq.com`,`api.together.xyz`]);function Oi(e){return{builtin:{codex:m,claude:f},models:e.models??{}}}async function ki(e,t){let{baseUrl:n,envKey:r,key:i}=await qe(e);if(!n||!/^https?:\/\//.test(n)||!URL.canParse(n))return O({error:`An http or https base URL is required`},400);let a=!i&&r&&await Ai(t,n,r)?await tr(t,r):void 0,o=i||a,s=t.settings??={},c=s.probes??=new Ti({ttlMs:6e5,max:100,now:t.now,accept:e=>e.reachable}),l=`${new URL(n).host}|${r??``}|${T(String(o??``))}`;return O(await c.get(l,()=>ne({baseUrl:n},{key:o,fetch:t.fetch})))}async function Ai(e,t,n){let r=new URL(t).host;if(Di.has(r))return!0;let i=(await _t(e)).models??{};return Object.values(i).some(e=>`baseUrl`in e&&e.envKey===n&&new URL(e.baseUrl).host===r)}async function ji(e,t,n,r){return O(Oi(await _t(t)))}async function Mi(e,t,n,r){let{name:i=``,...a}=await qe(e);return!Ei.test(i)||c(i)?O({error:`Invalid model name "${i}"`},400):R(t,e=>{if(e.models?.[i])throw new N(`"${i}" already exists`);e.models={...e.models,[i]:a}})}async function Ni(e,t,n,r){let i=n.name;return R(t,e=>{if(!e.models?.[i])throw new N(`No model "${i}"`);_(e,i)})}async function Pi(e,t,n,r){let i=n.name,{spec:a}=await qe(e);return R(t,e=>{if(!Ei.test(i))throw new N(`Invalid alias name "${i}"`);let t=e.models?.[i];if(t&&g(t))throw new N(`"${i}" is a custom model name`);let n=s(a,d(e));if(!n?.model||n.engine===`custom`)throw new N(`"${a}" does not name a codex or claude model`);let r=n.engine===`claude`?f:m,o=a.split(`:`).some(e=>p.has(e)||h.has(e));e.models={...e.models,[i]:{provider:n.engine,model:r[n.model]??n.model,...o&&n.effort?{effort:n.effort}:{}}}})}async function Fi(e,t,n,r){let i=n.name;return R(t,e=>{let t=e.models??={},n=t[i];n&&(g(n)||u(n))?n.disabled=!0:t[i]={disabled:!0}})}async function Ii(e,t,n,r){let i=n.name;return R(t,e=>{let t=e.models??={},n=t[i];n&&(g(n)||u(n))?delete n.disabled:delete t[i]})}async function Li(e,t){let{now:n,local:r}=await Q(t);r||await G(t.store,n);let[i,a,o]=await Promise.all([_i(t,r,{limit:200}),_t(t),t.store.list(`runner`)]),s=y(),c=i.filter(e=>!e.settings?.disabled).sort((e,t)=>Number(t.id===s)-Number(e.id===s)).map(({id:e,name:t})=>({id:e,name:t,...e===s?{default:!0}:{}})),l=fr(t,a),u=Object.values(t.integrations).find(e=>e.repos);return O({agents:c,...l.chain?.[0]?{engine:l.chain[0]}:{},engines:l.engines??{},models:Oi(a),runners:fn(t,o,n).map(({id:e,name:t,default:n})=>({id:e,name:t,default:n})),flows:D(te(),`builtin`).map(e=>e.name),...t.local?{folders:Wt(t.local.cwd)}:{},...u?{connectLabel:u.installLabel??`Connect ${u.id}`}:{}})}async function Ri(e,t){let n=(await e.store.list(`installation`)).filter(({value:t})=>!t.deletedAt&&e.integrations[t.integration]?.repos),r=new Map((await dr(e.store,n.map(({value:e})=>e.app))).map(({id:e,value:t})=>[e,t]));for(let{value:i}of n){let n=e.integrations[i.integration];if(i.deletedAt||!n?.repos)continue;let a=r.get(i.app);if(!(!a||a.integration!==n.id))try{let r=i.token?{...i,token:K(e.config,i.token)}:i,o=await n.auth.token(r,K(e.config,a.credentials));if((await n.repos.list(r,o)).includes(t))return{contents:n,token:o,app:a,installation:i}}catch{}}}async function zi(e,t,n){let r=await Ri(e,t);if(!r)return O({error:`No installed app can read ${t}`},400);let i=await r.contents.repos.listDir(t,xt,r.token,n).catch(()=>[]),a=await Promise.all(i.map(async i=>{let a=await r.contents.repos.readFile(t,`${xt}/${i}/agent.json`,r.token,n).catch(()=>void 0);if(a===void 0)return;let s={};try{let e=JSON.parse(a);e&&typeof e==`object`&&(s=e)}catch{}let c=Object.entries(s.mcp&&typeof s.mcp==`object`&&!Array.isArray(s.mcp)?s.mcp:{}).flatMap(([e,t])=>o(e,t)),l=await L(e.store,i),u=l?.source===`repo`&&l.repo===t,d=u?await A(e.store,i):void 0;return{id:i,name:typeof s.name==`string`?s.name:i,...c.length?{warnings:c}:{},...typeof s.description==`string`?{description:s.description}:{},...u?{version:l.currentVersion,...d?.source?{commit:d.source.commit}:{}}:{},...l&&!u?{taken:!0}:{}}}));return O({repo:t,agents:a.filter(Boolean)})}async function Bi(e,t,n,r){let i=r.searchParams.get(`repo`);return i?zi(t,i,r.searchParams.get(`ref`)||`HEAD`):O({error:`repo is required`},400)}async function Vi(e,t,n,r){let i=await e.json().catch(()=>void 0),a=i?.agents;if(typeof i?.repo!=`string`||i.ref!==void 0&&typeof i.ref!=`string`||a!==void 0&&!(Array.isArray(a)&&a.every(e=>typeof e==`string`)))return O({error:`repo is required, ref must be a string and agents a list of ids`},400);try{let e=await Ri(t,i.repo);if(!e)return O({error:`No installed app can read ${i.repo}`},400);let n=i.ref??`HEAD`,r=a??await e.contents.repos.listDir(i.repo,`.coder/agents`,e.token,n);for(let e of r){let n=await L(t.store,e);if(n&&(n.source!==`repo`||n.repo!==i.repo))return O({error:`Agent id "${e}" is already taken`},409)}let o=await Me(t.store,e.contents,i.repo,n,e.token,(t.now??Date.now)(),{slugs:r});return await Dt(t,o),O({imported:o.map(e=>e.agent)})}catch(e){return O({error:e instanceof Error?e.message:String(e)},400)}}function Hi(e){if(!e||Array.isArray(e)||typeof e!=`object`)return!1;let t=Object.entries(e);if(t.length>100)return!1;let n=0;for(let[e,r]of t){if(typeof r!=`string`||e.startsWith(`/`)||e.includes(`\\`)||e.includes(`\0`)||e.split(`/`).includes(`..`)||e===`agent.json`||e===`system.md`)return!1;n+=Buffer.byteLength(e)+Buffer.byteLength(r)}return n<=262144}async function Ui(e,t){return(await Ln(e,[t])).flatMap(({app:e,error:t,check:n})=>{let r={id:e.id,integration:e.integration,name:e.name};return t?[{...r,error:t}]:n?n.changed?[{...r,drift:!0}]:[]:[{...r,updated:!0}]})}async function Wi(e,t,n,r){let i=n.slug;if(n.version&&Number(n.version),n.version&&!/^\d+$/.test(r.pathname.split(`/`).at(-1)))return k();let{now:a,local:o,loadCurrent:s}=await Q(t,i),c=await e.json().catch(()=>void 0);try{let e=x({[i]:c})[i];if(!e||typeof e!=`object`)throw Error(`settings must be an object`);let{disabled:n,...r}=e,a=n?{...r,disabled:n}:r,{record:o,version:l}=await s();if(!o||!l)throw Error(`No agent named "${i}".`);if(dn({...o,settings:void 0},l,r,t.integrations),t.local){let e=S(t.local.cwd,i,!!n);return e?O({error:`Agent "${i}" is ${n?`enabled`:`disabled`} by agents.${i} in ${e}. Change it there.`},409):(await St(t,e=>{e.agents={...e.agents,[i]:a}}),await Fe(t.store,t.local.cwd,t.integrations),O(await L(t.store,i)))}return O(await Vn(t.store,i,a,(t.now??Date.now)()))}catch(e){return O({error:e instanceof Error?e.message:String(e)},400)}}async function Gi(e,t,n,r){let i=n.slug;if(n.version&&Number(n.version),n.version&&!/^\d+$/.test(r.pathname.split(`/`).at(-1)))return k();let{now:a,local:o,loadCurrent:s}=await Q(t,i),{record:c}=await s();if(!c)return O({error:`No agent named "${i}"`},404);if(c.source===`builtin`)return O({error:`Built-in agents cannot be deleted.`},400);if(t.local&&!await ye(t.local.cwd,t.integrations,i))return O({error:`Delete .coder/agents/${i} in the repo`},409);for(let{id:e}of await t.store.list(`agentversion`,{prefix:`${i}:`}))await t.store.delete(`agentversion`,e);return await t.store.delete(`agent`,i),O({ok:!0})}async function Ki(e,t,n,r){let i=n.slug;if(n.version&&Number(n.version),n.version&&!/^\d+$/.test(r.pathname.split(`/`).at(-1)))return k();let{now:a,local:o,loadCurrent:s}=await Q(t,i),c=await e.json().catch(()=>void 0);if(!c||typeof c.systemPrompt!=`string`||c.files!==void 0&&!Hi(c.files)||c.name!==void 0&&typeof c.name!=`string`||c.description!==void 0&&typeof c.description!=`string`)return O({error:`definition and systemPrompt are required; files must contain strings`},400);try{b([i]);let[e]=C({definitions:{[i]:{json:c.definition,builtin:!1}},usage:void 0},t.integrations);if(!e)throw Error(`No agent named "${i}".`);let n=t.local?await L(t.store,i):void 0,r=t.local&&n?await A(t.store,i):void 0,a=c.files;t.local&&(await gt(t.local.cwd,t.integrations,i,{definition:{...c.definition,...c.name===void 0?{}:{name:c.name},...c.description===void 0?{}:{description:c.description}},systemPrompt:c.systemPrompt,...a?{files:a}:{}}),await Fe(t.store,t.local.cwd,t.integrations));let o=t.local?void 0:await Xt(t.store,{id:i,name:c.name??e.name,description:c.description??e.definition.description,source:`upload`,definition:e.definition,systemPrompt:c.systemPrompt,files:a,importedFrom:`upload`},(t.now??Date.now)()),s=o?.version??await A(t.store,i),l=o?.unchanged??Or(r&&{...r,createdAt:0},{...s,createdAt:0}),u=await Ui(t,s),d=o?.record??await L(t.store,i);return O({...d,definition:s.definition,version:s.version,unchanged:l,apps:u})}catch(e){return O({error:e instanceof Error?e.message:String(e)},400)}}async function qi(e,t,n,r){let i=n.id,a=Number(r.searchParams.get(`after`)??-1),o=Number.isFinite(a)?a:-1;r.searchParams.has(`limit`)&&ie(r,500,2e3);let s=await t.store.get(`task`,i);if(!s||t.local&&s.handle?.startsWith(`cli:`)&&s.task.flow==="default"){let n=s?.task.cwd??t.local?.cwd;if(!n||!I(n,i,!1))return O({error:`No task "${i}"`},404);{let r=Number(e.headers.get(`last-event-id`)??o);return ta(e,t,`cli:${n}:${i}`,Number.isFinite(r)?r:o,async e=>{let t=I(n,i);if(t)return{status:t,lines:we(n,i,e,500),pendingResult:Ji(n,t,!t.result)}})}}let c=Number(e.headers.get(`last-event-id`)??o),l=t.statementTimeout??((e,t)=>t());return ta(e,t,i,Number.isFinite(c)?c:o,e=>l($i,async()=>{let n=await t.store.get(`task`,i);if(n)return{status:await rr(t,n),lines:await sn(t.store,i,e,500)}}))}function Ji(e,t,n=!1){if(!Ne.has(t.status)||t.error||t.status===`cancelled`)return!1;let r=l(e,t.task.id),a=Date.parse(r?.resumedAt??r?.createdAt??``)||0;return n||(Cr.statSync(q.join(i(e,t.task.id),`result.json`),{throwIfNoEntry:!1})?.mtimeMs??0)<a}const Yi=1e3,$=3e4;function Xi(e,t,n,r){let i=[...new Set((r.searchParams.get(`tasks`)??``).split(`,`).filter(Boolean))].slice(0,100),a=Date.now(),o=t.taskWatcher??new Qi,s=o.tag(t),[c,l]=(e.headers.get(`last-event-id`)??``).split(`-`),u=Number(c),d=u>0&&`-${l}`===s,f=d?Math.min(Math.max(u,a-29e4),a):a,p=u>0&&(!d||u<f)?`event: reset
 data: {}
 
 `:``,m=new TextEncoder,h=()=>{},g=new ReadableStream({start(n){n.enqueue(m.encode(`retry: ${Yi}\nid: ${f}${s}\n\n${p}`)),h=o.watch(t,i,f,e=>n.enqueue(m.encode(e)),()=>n.close(),d);let r=()=>{h();try{n.close()}catch{}};e.signal.aborted?r():e.signal.addEventListener(`abort`,r)},cancel(){h()}});return new Response(g,{headers:{"content-type":`text/event-stream; charset=utf-8`,"cache-control":`no-cache, no-transform`}})}function Zi(e,t){let{task:n,approval:r,archivedAt:i,createdAt:a,startedAt:o,finishedAt:s}=e;return{id:n.id,agent:n.agent,status:e.status,approval:r??null,archivedAt:e.autoArchived&&!t?void 0:i,createdAt:a,startedAt:o,finishedAt:s,...t?{result:e.result??null,error:e.error??null,answer:e.answer??null}:{}}}var Qi=class{options;watches=new Set;timer;counts=new Map;runners=new Map;reading=!1;closed=!1;last=Date.now();scans=new Map;left=new Map;archived=new Map;reads=0;generation=Dr().slice(0,8);constructor(e={}){this.options=e}watch(e,t,n,r,i,a=!1){if(this.closed)return queueMicrotask(i),()=>{};let o=Date.now();this.watches.size||(this.last=o);let s={ctx:e,ids:new Set(t),sent:new Map,gone:new Set,from:n,fresh:!0,...a?{runners:``}:{},tag:this.tag(e),beat:o,marked:o,until:o+(this.options.lifeMs??29e4),send:r,close:i};return this.watches.add(s),this.timer||(this.timer=setInterval(()=>this.tick(),this.options.pollMs??1e3),this.timer.unref?.()),this.tick(),()=>this.drop(s)}tag(e){return`-${Tr(`sha256`).update(e.organizationId).digest(`hex`).slice(0,8)}${e.queue instanceof jn?`.${this.generation}`:``}`}runnersChanged(e){this.runners.delete(e)}close(){this.closed=!0;for(let e of[...this.watches]){this.drop(e);try{e.close()}catch{}}}drop(e){this.watches.delete(e)&&([...this.watches].some(t=>t.ctx.organizationId===e.ctx.organizationId)||(this.counts.delete(e.ctx.organizationId),this.runners.delete(e.ctx.organizationId)),this.watches.size||(clearInterval(this.timer),this.timer=void 0,this.counts.clear(),this.runners.clear()))}tick(){let e=Date.now();for(let t of[...this.watches])if(e>=t.until){this.drop(t);try{t.close()}catch{}}else e-t.beat>=(this.options.heartbeatMs??2e4)&&(t.beat=e,this.send(t,`: ping
 
 `));this.reading||!this.watches.size||(this.reading=!0,this.read(e).finally(()=>this.reading=!1))}send(e,t){try{e.send(t)}catch{this.drop(e)}}async read(e){let t=[...this.watches],n=new Map;for(let e of t){let t=n.get(e.ctx.organizationId)??{ctx:e.ctx,ids:new Set};for(let n of e.ids)t.ids.add(n);n.set(e.ctx.organizationId,t)}let r=Math.min(this.last,...t.flatMap(e=>e.fresh?[e.from]:[]));this.reads++;let i=await this.changes(n,r-$,e).catch(e=>{console.error(`coder server: task events failed`,e)});if(i){this.last=e;try{for(let[e,{ctx:t}]of n){let n=this.counts.get(e),r=JSON.stringify([[...i.rows.get(e)??[]].map(([e,t])=>[e,t.status,t.archivedAt]).sort(),[...i.deleted.get(e)?.keys()??[]].sort()]),a=n?.fingerprint!==r,o=t.local?[...i.rows.get(e)?.values()??[]].filter(e=>!e.archivedAt&&[`queued`,`running`,`waiting`].includes(e.status)).length:a?(await t.queue.counts(e,{archived:!1,statuses:[`queued`,`running`,`waiting`]})).active:n.active;[...this.watches].some(t=>t.ctx.organizationId===e)&&this.counts.set(e,{active:o,fingerprint:r})}}catch(e){console.error(`coder server: task counts failed`,e);return}await Promise.all([...n].filter(([t])=>e-(this.runners.get(t)?.at??-1/0)>=15e3).map(async([t,{ctx:n}])=>{try{this.runners.set(t,{at:e,records:await n.store.list(`runner`)})}catch(e){console.error(`coder server: runner events failed`,e)}}));for(let n of t){if(!this.watches.has(n))continue;let t=[];try{t=this.news(n,i,e);let r=this.counts.get(n.ctx.organizationId)?.active;r!==void 0&&r!==n.active&&(n.active=r,t.push(`id: ${e}${n.tag}\nevent: counts\ndata: ${JSON.stringify({active:r})}\n\n`)),t.push(...this.runnerNews(n,e))}catch{}!t.length&&e-n.marked>=(this.options.heartbeatMs??2e4)&&t.push(`id: ${e}${n.tag}\n\n`),t.length&&(n.marked=e,this.send(n,t.join(``)))}}}runnerNews(e,t){let n=this.runners.get(e.ctx.organizationId);if(!n)return[];let r=fn(e.ctx,n.records,t),i=JSON.stringify(r.map(({lastSeen:e,...t})=>t.online?t:{...t,lastSeen:e})),a=e.runners;return e.runners=i,a===void 0||a===i?[]:[`id: ${t}${e.tag}\nevent: runners\ndata: ${JSON.stringify({items:r})}\n\n`]}async changes(e,t,n){let r=await[...e.values()][0].ctx.queue.changes([...e].map(([e,t])=>({organizationId:e,ids:[...t.ids]})),t),i=new Map;for(let{organizationId:e,status:t}of r.rows){let n=i.get(e)??new Map;i.set(e,n.set(t.task.id,t))}let a=new Map;for(let{organizationId:e,id:t,at:n}of r.deleted){let r=a.get(e)??new Map;a.set(e,r.set(t,n))}for(let[t,{ctx:r}]of e){if(!r.local)continue;let e=[...i.get(t)?.values()??[]],a=this.scans.get(r.local.cwd);if(!a||n-a.at>=(this.options.localScanMs??4e3)||e.some(e=>e.updatedAt>a.at)){let e=!a||n-a.archivedAt>=(this.options.archiveScanMs??15e3);await rt(r,r.local.cwd);let t=e?W(r.local.cwd,!0):a.archived,i=W(r.local.cwd,!1),o=new Set(i.map(e=>e.task.id)),s=[...i,...t.filter(e=>!o.has(e.task.id))],c=new Set(s.map(e=>e.task.id)),u=this.left.get(r.local.cwd)??new Map;for(let e of a?.rows??[])c.has(e.task.id)||u.set(e.task.id,a.at);for(let[e,t]of u)(t<n-6e5||c.has(e))&&u.delete(e);let d=this.archived.get(r.local.cwd)??new Set;for(let e of d)c.has(e)?d.delete(e):l(r.local.cwd,e)||(u.set(e,a?.at??n),d.delete(e));this.left.set(r.local.cwd,u),this.scans.set(r.local.cwd,a={at:n,rows:s,archived:t,archivedAt:e?n:a.archivedAt})}i.set(t,new Map(at(r.local.cwd,a.rows,e).map(e=>[e.task.id,e])))}return{rows:i,deleted:a}}news(e,{rows:t,deleted:n},r){let{ctx:i}=e,a=t.get(i.organizationId)??new Map,o=[],s=(t,n)=>{let i=JSON.stringify(n);e.sent.get(t)!==i&&(e.sent.set(t,i),o.push(`id: ${r}${e.tag}\nevent: task\ndata: ${i}\n\n`))},c=e=>({id:e,deleted:!0}),l=t=>{let n=i.local&&I(i.local.cwd,t,e.ids.has(t));if(s(t,n?Zi(n,e.ids.has(t)):c(t)),e.gone.add(t),n&&i.local){let e=this.archived.get(i.local.cwd)??new Set;this.archived.set(i.local.cwd,e.add(t))}};for(let[t,n]of a){let a=e.ids.has(t);e.gone.delete(t);let o=Zi(a&&i.local&&n.local&&Ne.has(n.status)?I(i.local.cwd,t)??n:n,a);if(i.local&&n.local&&e.sent.get(t)!==JSON.stringify(o)&&r-(n.finishedAt??0)<$&&Ji(i.local.cwd,n)){e.sent.has(t)||e.sent.set(t,``);continue}a||i.local&&!e.fresh||n.updatedAt>e.from-$?s(t,o):e.fresh&&e.sent.set(t,JSON.stringify(o))}for(let t of e.ids)a.has(t)||l(t);for(let[t,r]of n.get(i.organizationId)??[])r>e.from-$&&s(t,c(t));if(i.local){for(let t of e.sent.keys())!a.has(t)&&!e.ids.has(t)&&!e.gone.has(t)&&l(t);for(let[t,n]of this.left.get(i.local.cwd)??[])n>e.from-$&&!a.has(t)&&e.sent.get(t)!==JSON.stringify(c(t))&&l(t)}return e.fresh=!1,e.from=r,o}};const $i=1e4;var ea=class{options;feeds=new Map;closed=!1;reads=0;constructor(e={}){this.options=e}watch(e,t,n,r,i){if(this.closed)return queueMicrotask(i),()=>{};let a=this.feeds.get(e),o=a?.reading!==void 0&&Date.now()-a.reading>=(this.options.stallMs??1e4);if(!a||o){let t={key:e,read:n,watches:new Set,head:1/0};if(a){clearTimeout(a.timer);for(let e of a.watches)t.watches.add(Object.assign(e,{feed:t}));a.watches.clear()}this.feeds.set(e,a=t)}let s={cursor:t,feed:a,timers:[],send:r,close:i};s.timers=[setTimeout(()=>this.end(s),this.options.lifeMs??5e4),setInterval(()=>this.send(s,`: ping
 
-`),this.options.heartbeatMs??2e4)];for(let e of s.timers)e.unref?.();return a.watches.add(s),a.reading===void 0&&t<a.head&&(clearTimeout(a.timer),this.read(a)),()=>this.drop(s)}close(){this.closed=!0;for(let e of[...this.feeds.values()])for(let t of[...e.watches])this.end(t)}drop(e){let{feed:t}=e;for(let t of e.timers)clearTimeout(t);!t.watches.delete(e)||t.watches.size||(clearTimeout(t.timer),this.feeds.get(t.key)===t&&this.feeds.delete(t.key))}end(e,t=``){try{t&&e.send(t),e.close()}catch{}this.drop(e)}send(e,t){try{e.send(t)}catch{this.drop(e)}}async read(e){if(e.timer=void 0,this.feeds.get(e.key)!==e||!e.watches.size)return;let t=[...e.watches],n=Math.min(...t.map(e=>e.cursor));e.reading=Date.now(),this.reads++;let r=await e.read(n).catch(()=>null);if(e.reading=void 0,this.feeds.get(e.key)!==e)return;let i=t.filter(t=>e.watches.has(t)),a=i.length<e.watches.size?0:this.options.pollMs??1e3;if(r===void 0)for(let e of i)this.end(e);else if(r){let{status:t,lines:o,pendingLogs:s,pendingResult:c}=r,l=o.length===500,u=Ne.has(t.status)&&!l&&!s&&!c,d=o.map(e=>[e.seq,`id: ${e.seq}\nevent: log\ndata: ${JSON.stringify(e)}\n\n`]);e.head=Math.max(n,o.at(-1)?.seq??n),l&&(a=0);for(let e of i){let t=d.flatMap(([t,n])=>t>e.cursor?[n]:[]).join(``);e.cursor=Math.max(e.cursor,o.at(-1)?.seq??-1),u?this.end(e,`${t}event: end\ndata: {}\n\n`):t&&this.send(e,t)}}this.feeds.get(e.key)===e&&(e.timer=setTimeout(()=>void this.read(e),a),e.timer.unref?.())}};function ta(e,t,n,r,i){let a=t.logWatcher??new ea,o=new TextEncoder,s=()=>{},c=new ReadableStream({start(c){c.enqueue(o.encode(`retry: ${Yi}\n\n`)),s=a.watch(`${t.organizationId}:${n}`,r,i,e=>c.enqueue(o.encode(e)),()=>c.close());let l=()=>{s();try{c.close()}catch{}};e.signal.aborted?l():e.signal.addEventListener(`abort`,l)},cancel(){s()}});return new Response(c,{headers:{"content-type":`text/event-stream; charset=utf-8`,"cache-control":`no-cache, no-transform`}})}const na={npm:[`npx`,`-y`],pypi:[`uvx`],oci:[`docker`,`run`,`-i`,`--rm`]},ra=(e=[])=>e.map(({name:e,description:t,isRequired:n,isSecret:r,value:i,default:a})=>({name:e,...t?{description:t}:{},...i??a?{placeholder:i??a}:{},required:n===!0,secret:r===!0}));function ia(e=[],t,n){return e.flatMap((e,r)=>{let i=`${t}:${r}`,a=Object.entries(e.variables??{}),o=e.value??e.default,s=(e,t,r)=>{let[i]=ra([{...r,name:e}]);return n.push({...i,label:t}),`{${e}}`};if(a.length)for(let[e,t]of a)o=o?.replaceAll(`{${e}}`,s(`${i}:${e}`,e,t));else o===void 0&&(e.valueHint||e.isRequired)&&(o=s(i,e.valueHint??e.name??i,e));return[...e.type===`named`&&e.name?[e.name]:[],...o===void 0?[]:[o]]})}function aa(e){let t=e.remotes?.find(e=>e.type===`streamable-http`||e.type===`sse`);if(t)return{type:t.type===`sse`?`sse`:`http`,url:t.url,env:[],headers:ra(t.headers)};let n=e.packages?.find(e=>na[e.registryType]&&(e.transport?.type??`stdio`)===`stdio`);if(!n)return;let[r,...i]=na[n.registryType],a=[],o=ia(n.runtimeArguments,`runtime`,a),s=ia(n.packageArguments,`package`,a);return{type:`stdio`,command:n.runtimeHint??r,args:[...!n.runtimeHint||n.runtimeHint===r?i:[],...o,n.identifier,...s],...a.length?{argumentInputs:a}:{},env:ra(n.environmentVariables),headers:[]}}function oa(e,t){let[n=``,r]=e.replace(/^v/,``).split(`+`)[0].split(/-(.*)/),[i=``,a]=t.replace(/^v/,``).split(`+`)[0].split(/-(.*)/),o=n.localeCompare(i,`en`,{numeric:!0});if(o)return o;if(r===void 0||a===void 0)return Number(r===void 0)-Number(a===void 0);let s=r.split(`.`),c=a.split(`.`);for(let e=0;e<Math.max(s.length,c.length);e++){let t=s[e],n=c[e];if(t===void 0||n===void 0)return Number(t!==void 0)-Number(n!==void 0);let r=/^\d+$/.test(t),i=/^\d+$/.test(n),a=r===i?t.localeCompare(n,`en`,{numeric:r}):Number(i)-Number(r);if(a)return a}return 0}var sa=class{sources=[{url:`https://api.mcp.github.com/v0.1/servers`,curated:!0,rows:new Map,ready:!1,failed:!1},{url:`https://registry.modelcontextprotocol.io/v0.1/servers`,curated:!1,rows:new Map,ready:!1,failed:!1}];refreshAt=0;timer;controller;closed=!1;inFlight;response(e,t){if((e.now??Date.now)()>=this.refreshAt&&this.refresh(e),!this.inFlight&&this.sources.some(e=>e.failed)&&!this.sources.some(e=>[...e.rows.values()].some(e=>e.found)))return O({error:`The MCP registry did not answer. Try again.`},502);let n=t.trim().toLowerCase(),r=new Set,i=this.sources.flatMap(e=>[...e.rows].flatMap(([t,{found:i}],a)=>{if(r.has(t)||(r.add(t),!i))return[];let o=[i.name.split(`/`).pop(),i.title].map(e=>e.toLowerCase()),s=!n||o.includes(n)?0:o.some(e=>e.startsWith(n))?1:o.some(e=>e.includes(n))?2:i.description.toLowerCase().includes(n)?3:4;if(s===4)return[];let c=n&&i.verified&&s<3?0:1;return[{found:i,curated:e.curated,order:a,vendor:c,quality:s}]})),a=e=>Number(e===3);return i.sort((e,t)=>a(e.quality)-a(t.quality)||Number(t.curated)-Number(e.curated)||(e.curated?e.order-t.order:e.vendor-t.vendor||e.quality-t.quality||e.found.name.localeCompare(t.found.name))),O(i.slice(0,30).map(({found:e})=>e),200,this.sources.every(e=>e.ready)?{}:{partial:`true`})}refresh(e){if(this.inFlight||this.closed)return;this.timer&&clearTimeout(this.timer);let t=this.controller=new AbortController;this.inFlight=Promise.all(this.sources.map(n=>this.fill(e,n,t.signal))).then(()=>{}).finally(()=>{this.inFlight=void 0,this.refreshAt=(e.now??Date.now)()+36e5,this.closed||(this.timer=setTimeout(()=>this.refresh(e),36e5),this.timer.unref())}),e.waitUntil?.(this.inFlight)}async fill(e,t,n){let r=new Map,i=new Set,a;try{do{let o=new URLSearchParams({limit:`100`});a&&o.set(`cursor`,a);let s=await(e.fetch??fetch)(`${t.url}?${o}`,{headers:{accept:`application/json`},signal:AbortSignal.any([n,AbortSignal.timeout(2e4)])});if(!s.ok)throw Error(`Registry unavailable`);let{servers:c,metadata:l}=await s.json();for(let{server:e,_meta:n}of c){let i=n?.[`io.modelcontextprotocol.registry/official`]?.isLatest===!0,a=e.version??``,o=r.get(e.name);if(o&&(o.latest===i?oa(o.version,a)>=0:o.latest))continue;let s=aa(e),c=/^[a-z0-9-]+(?:\.[a-z0-9-]+)+\//i.test(e.name)&&!/^io\.github(?:\.|\/)/i.test(e.name);r.set(e.name,{version:a,latest:i,found:s?{name:e.name,title:e._meta?.[`io.modelcontextprotocol.registry/publisher-provided`]?.github?.displayName??e.title??e.name.split(`/`).pop()??e.name,description:e.description??``,...c?{verified:!0}:{},...t.curated?{curated:!0}:{},...s}:void 0})}if(t.ready||(t.rows=new Map(r)),a=l?.nextCursor,a&&i.has(a))throw Error(`Registry cursor repeated`);a&&i.add(a)}while(a);t.rows=r,t.ready=!0,t.failed=!1}catch{t.failed=!0}}close(){this.closed=!0,this.timer&&clearTimeout(this.timer),this.controller?.abort()}};async function ca(e,t,n){let r=t.settings??={};return(r.registry??=new sa).response(t,n.searchParams.get(`q`)??``)}const la=`/api/auth/callback`,ua=`/.well-known/oauth-client.json`,da=`/.well-known/oauth-cli-client.json`,fa=`openid profile email offline_access organizations:read`;function pa(e,t){return{client_id:`${e}${ua}`,client_name:`Coder at ${new URL(e).host}`,redirect_uris:[`${e}${la}`],post_logout_redirect_uris:[`${e}/?signed_out=1`],grant_types:[`authorization_code`,`refresh_token`],response_types:[`code`],token_endpoint_auth_method:`private_key_jwt`,token_endpoint_auth_signing_alg:`ES256`,jwks:t,scope:fa}}function ma(e){return{client_id:`${e}${da}`,client_name:`Coder CLI for ${new URL(e).host}`,redirect_uris:[`http://127.0.0.1/callback`],grant_types:[`authorization_code`,`refresh_token`,`urn:ietf:params:oauth:grant-type:device_code`],response_types:[`code`],token_endpoint_auth_method:`none`,scope:fa}}function ha(e,t){return{resource:new URL(e).origin,authorization_servers:[t],bearer_methods_supported:[`header`],scopes_supported:fa.split(` `)}}function ga(e){let t=O(e);return t.headers.set(`cache-control`,`public, max-age=3600`),t}function _a(e,t,n,r){return t.config.publicUrl&&t.auth?ga(pa(t.config.publicUrl,t.auth.jwks)):void 0}function va(e,t,n,r){return t.config.publicUrl&&t.auth?ga(ma(t.config.publicUrl)):void 0}function ya(e,t,n,r){return t.config.publicUrl&&t.auth?ga(ha(t.config.publicUrl,t.auth.issuer)):void 0}const ba=[F(`GET`,Zn,en),F(`GET`,ua,_a,Ze),F(`GET`,da,va,Ze),F(`GET`,`/.well-known/oauth-protected-resource`,ya,Ze),F(`GET`,`/health`,(e,t)=>Ir(t)),F(`GET`,`/`,er,Ge),F(`GET`,`/login`,lt,vt),...j(`/login`,ur,vt).filter(e=>e.method!==`GET`),F(`POST`,`/dash/token`,Nt,dt),...j(`/dash/:org/operator`,an,Le),...j(`/dash`,an,nr)],xa=[F(`GET`,`/api/auth/capabilities`,(e,t)=>O({wular:t.auth?.issuer??null})),...j(`/api/auth`,(e,t)=>t.auth.handler(e),cr),F(`GET`,`/me`,Mn,nn)],Sa=[...M(`/tasks`,[F(`GET`,`/:id/messages`,ze,Se),F(`POST`,`/:id/ack`,je,Se),F(`POST`,`/:id/heartbeat`,He,Se),F(`POST`,`/:id/logs`,Ct,zt),F(`POST`,`/:id/result`,kt,zt),F(`POST`,`/:id/credential`,Et,zt),F(`GET`,`/:id`,In,ht)]),...M(`/logins`,[F(`GET`,`/:id/input`,Yr,Je),F(`GET`,`/:id`,Xr,Je),F(`POST`,`/:id`,Zr,Je)]),...M(`/runners`,[F(`POST`,`/register`,Hn)])],Ca=[...M(`/create`,[F(`GET`,`/:id`,ci,z),F(`POST`,`/:id`,ui,z),F(`GET`,`/:id/callback`,pi,z),F(`POST`,`/:id/callback`,mi,z)]),...M(`/install`,[F(`GET`,`/:id`,yn,P),F(`POST`,`/:id`,yn,P),F(`GET`,`/:id/callback`,Ut,P),F(`POST`,`/:id/callback`,Ut,P)])],wa=M(`/connect`,[F(`GET`,``,Nn,bt),F(`POST`,``,qt,bt),F(`GET`,`/:integration`,$t,tt),F(`GET`,`/:integration/callback`,Xn,tt)]),Ta=[...M(`/hooks`,[F(`POST`,`/*`,(e,t,n)=>Bn(e,t,n[`*`]),(e,t,n)=>t.integrations[n[`*`]]?t:k())]),...Ca,...wa],Ea=[F(`GET`,`/metrics`,async(e,t)=>O(await Rr(t),200,{"cache-control":`no-store`}),$n),F(`GET`,`/usage`,lr),F(`GET`,`/usage/totals`,Bt)],Da=M(``,[F(`GET`,`/folders`,(e,t)=>O(Wt(t.local.cwd))),F(`POST`,`/folders/check`,async(e,t)=>{let n=await e.json().catch(()=>void 0);return O(An(n?.path))}),F(`POST`,`/folders/clone`,async(e,t)=>{let n=await e.json().catch(()=>void 0);return O(await Gn(n?.url))}),F(`POST`,`/folders/pick`,async(e,t)=>O(await bn()))],he),Oa=M(``,[F(`GET`,`/engines/status`,async(e,t)=>O(await De())),F(`POST`,`/engines/:engine/login`,ir),F(`POST`,`/engines/:engine/logout`,mt)],Te),ka=[F(`POST`,`/apps/:id/install`,(e,t,n,r)=>gn(e,t,n.id,r.searchParams.get(`back`),r.searchParams.get(`link`))),F(`POST`,`/apps/create/:integration`,di),F(`GET`,`/apps`,Qe),F(`DELETE`,`/apps/:id`,Re),F(`GET`,`/apps/:id/drift`,ke),F(`POST`,`/apps/:id/update`,Ke),F(`GET`,`/installations`,nt),F(`GET`,`/connections`,Tn,V),F(`POST`,`/connections`,tn,V),F(`PATCH`,`/connections/:id`,on,V),F(`DELETE`,`/connections/:id`,Fn,V),F(`POST`,`/connections/:id/authorize`,Qn,V),F(`GET`,`/integrations`,(e,t,n,r)=>Ye(t,r)),F(`GET`,`/repositories`,(e,t)=>ge(t)),F(`POST`,`/repositories/refresh`,(e,t)=>ge(t,!0))],Aa=[F(`GET`,`/agents/import`,Bi),F(`POST`,`/agents/import`,Vi),F(`GET`,`/agents`,vi),F(`PATCH`,`/agents/:slug/settings`,Wi),F(`GET`,`/agents/:slug/versions`,yi),F(`GET`,`/agents/:slug/versions/:version`,bi),F(`GET`,`/agents/:slug`,xi),F(`DELETE`,`/agents/:slug`,Gi,(e,t)=>ot(t,`Only an owner or admin can delete an agent.`)),F(`PUT`,`/agents/:slug`,Ki)],ja=[F(`GET`,`/credentials`,ut),F(`POST`,`/credentials`,Pt,xe),F(`POST`,`/credentials/:label/default`,Ht),F(`DELETE`,`/credentials/:label`,sr),F(`POST`,`/logins`,zr,U),F(`GET`,`/logins/:id`,Br,U),F(`POST`,`/logins/:id`,Vr,U),F(`DELETE`,`/logins/:id`,Hr,U)],Ma=[F(`GET`,`/runners`,Jn),F(`POST`,`/runners`,pe),F(`POST`,`/runners/pair`,Dn),F(`POST`,`/runners/:id/test`,it),F(`PATCH`,`/runners/:id`,Rt),F(`DELETE`,`/runners/:id`,Zt)],Na=[F(`GET`,`/composer`,Li),F(`GET`,`/tasks`,jt),F(`POST`,`/tasks`,We),F(`GET`,`/tasks/:id`,me),F(`DELETE`,`/tasks/:id`,Yt),F(`GET`,`/tasks/:id/logs`,En),F(`GET`,`/tasks/:id/stream`,qi),F(`POST`,`/tasks/:id/steer`,Kn),F(`POST`,`/tasks/:id/ask`,Ot),F(`POST`,`/tasks/:id/approve`,Rn),F(`POST`,`/tasks/:id/cancel`,Tt),F(`POST`,`/tasks/:id/archive`,Ve),F(`GET`,`/events`,Xi)],Pa=[F(`GET`,`/config`,yt),F(`PATCH`,`/config`,be),F(`PUT`,`/config`,Ie)],Fa=[F(`POST`,`/models/probe`,(e,t)=>ki(e,t)),F(`GET`,`/models`,ji),F(`POST`,`/models`,Mi),F(`DELETE`,`/models/:name`,Ni),F(`POST`,`/models/:name/alias`,Pi),F(`POST`,`/models/:name/disable`,Fi),F(`POST`,`/models/:name/enable`,Ii)],Ia=[F(`GET`,`/mcp-registry`,(e,t,n,r)=>ca(e,t,r))],La=M(`/operator`,[F(`GET`,`/apps`,ni),F(`POST`,`/apps/:integration`,ri),F(`GET`,`/audit`,ii)],Oe),Ra=[F(`GET`,`/flows`,un),F(`GET`,`/pulls`,It),F(`POST`,`/flows/:name/run`,Wn),F(`POST`,`/review`,kn)],za=M(`/admin`,[...Ea,...Da,...Oa,...ka,...Aa,...ja,...Ma,...Na,...Pa,...Fa,...Ia,...Ra,...La]).map(e=>({...e,guard:Mt(e.guard)})),Ba=[F(`GET`,`/connections/oauth/callback`,(e,t,n,r)=>Jt(e,t,r),ar),...Sa,...za,...xa,...Ta,...ba];async function Va(e,t,n){if(!hn(e,t))return k();let r=new URL(e.url);return n.scope instanceof Response?n.scope:(t=n.scope??t,await pt(Ba,e,t,r)??Vt(e,t,r))}const Ha=`x-coder-request-scope`;function Ua(e,{sessions:t,operators:n,cookies:r}){let i=e.auth;return i?{...e,auth:{...i,session(e,n){let a=JSON.stringify([...[`cookie`,`authorization`].map(t=>e.get(t)),!!n]),o=t.get(a);if(!o){let s=new Headers(e);s.delete(`x-coder-organization`),o=i.session(s,n,r),t.set(a,o)}let s=e.get(`x-coder-organization`);return s?o.then(e=>e&&(e.stale?e:Pn(e,s))):o},setOrganization:(e,t)=>i.setOrganization(e,t,r),operator(e){let t=e.get(`cookie`)??``,a=n.get(t);return a||(a=i.operator(e,r),n.set(t,a)),a}}}:e}function Wa(e,t,n){let r=t.requestScopes??=new Map,i=e.headers.get(Ha),a=n&&i?r.get(i):void 0;if(a)return{req:e,ctx:Ua(t,a),end(){}};let o=new Headers(e.headers);if(o.delete(Ha),!t.auth)return{req:i?new Request(e,{headers:o}):e,ctx:t,end(){}};let s=Dr(),c={sessions:new Map,operators:new Map,cookies:[]};return r.set(s,c),o.set(Ha,s),{req:new Request(e,{headers:o}),ctx:Ua(t,c),cookies:c.cookies,end:()=>r.delete(s)}}async function Ga(e,t,n={}){t.limits??=new Ce((t.now??Date.now)()),t.limits.requests++,t.settings??={},t.taskWatcher??=new Qi,t.logWatcher??=new ea,t.dashboardHosts??=new cn;let r=()=>Ka(e,t,n);return t.dbProfile?t.dbProfile.request(n.inProcess===!0,r):r()}async function Ka(e,t,n){let r=await se(e,de(new URL(e.url).pathname));if(r instanceof Response)return r;let i=Wa(r,t,n.inProcess===!0),a=!1;try{let r=n.clientIp??`unknown`,o=await et(i.req,i.ctx,r),s=qa(o instanceof Response?o:await Va(i.req,i.ctx,o),i.cookies),c=new URL(e.url).pathname.split(`/`),l=c[1]===`tasks`,u=c[1]===`admin`&&c[2]===`tasks`;if(e.method!==`GET`&&s.ok&&![`hooks`,`tasks`,`logins`].includes(c[1])&&!(o instanceof Response)){let e=o.scope instanceof Response?void 0:o.scope??i.ctx;e&&xn(e,e.organizationId)}return e.method!==`GET`&&s.ok&&!(l&&c.length===4&&c[2]&&[`heartbeat`,`logs`].includes(c[3]))&&!(u&&c.length===5&&c[3]&&[`steer`,`ask`,`approve`,`archive`].includes(c[4]))&&(l||u||c[1]===`admin`&&c[2]===`review`||c[1]===`admin`&&c[2]===`flows`&&c.length===5&&c[3]&&c[4]===`run`)&&Ee(t,u&&c.length===3&&e.method===`POST`),a=!!s.body&&(s.headers.get(`content-type`)??``).includes(`text/html`),a?Ja(s,i.end):s}finally{a||i.end()}}function qa(e,t=[]){if(!t.length)return e;let n=new Headers(e.headers);for(let e of t)n.append(`set-cookie`,e);return new Response(e.body,{status:e.status,statusText:e.statusText,headers:n})}function Ja(e,t){let n=e.body.getReader(),r=new ReadableStream({async pull(e){try{let{done:r,value:i}=await n.read();r?(t(),e.close()):e.enqueue(i)}catch(n){t(),e.error(n)}},cancel(e){return t(),n.cancel(e)}});return new Response(r,e)}async function Ya(e={}){let t=e.env??J.env,n=pr(t,e.host??`node`),r=e.runner??n.runner;if((e.host===`vercel`||t.VERCEL)&&(r===`local`||r===`local-docker`))throw new v(`invalid-option`,`The ${r} runner cannot run on Vercel.`,{hint:`Leave RUNNER unset to use vercel-sandbox.`});if(n.store===`memory`&&r!==`local`&&r!==`local-docker`)throw new v(`invalid-option`,`The ${r} runner needs a database.`,{hint:`Set DATABASE_URL, or use RUNNER=local for a memory server.`});if(!n.publicUrl)throw new v(`invalid-option`,`PUBLIC_URL is required to start a Coder server.`,{hint:`Set PUBLIC_URL to the address platforms and browsers use.`});let i=[];if(n.store===`memory`&&!e.local&&i.push(`test server, not for production: everything is in memory, nothing survives a restart, no sign-in; set DATABASE_URL for a real deployment`),!t.SERVER_ENCRYPTION_KEY&&!e.local&&i.push(`secrets are stored unencrypted; set SERVER_ENCRYPTION_KEY (openssl rand -base64 32)`),n.store===`postgres`&&!n.encryptionKey)throw new v(`invalid-option`,`SERVER_ENCRYPTION_KEY is required for a Postgres server.`,{hint:`Set SERVER_ENCRYPTION_KEY (openssl rand -base64 32); sign-in keys derive from it.`});let a=E(n.integrations),o=n.store===`memory`&&!n.adminToken?Er(18).toString(`base64url`):void 0;n.store===`postgres`&&n.adminToken&&i.push(`ADMIN_TOKEN is ignored with Postgres; owners and admins sign in with coder auth login`);let s={...n,...n.store===`postgres`?{adminToken:void 0}:{},...o?{adminToken:o}:{},...e.runner?{runner:e.runner}:{}},c=await st(s,{local:!!e.local});try{s.store===`memory`&&await G(c.store(c.defaultOrganizationId),Date.now());let n=c.connection&&s.auth?await(await import(`./auth-B3RiDPMI.js`)).createAuth(c.connection.db,s):void 0,r=e.cwd??J.cwd(),l=c.store(c.defaultOrganizationId),u=vr({kind:s.runner,workDir:s.workDir,config:s.runnerConfig,local:!(e.host===`vercel`||t.VERCEL),sandbox:{region:_r(s.databaseUrl),snapshots:gr(l)}});if(!u[s.runner])throw await c.close(),new v(`invalid-option`,`Runner ${s.runner} is not configured.`,{hint:`Set RUNNER_CONFIG to JSON containing url and secret.`});let d=new cn,f=new Ce,p=new sa,m=new Map,h=new Map,g=new Qi,_=new ea,y=t=>{let i=m.get(t);if(i)return i;let o=c.store(t),l=new Map,v={limits:f,...c.connection?{databaseHealth:async()=>{await c.connection.db.execute(Sr`select 1`)},statementTimeout:c.connection.statementTimeout}:{},config:s,settings:{registry:p},organizationId:t,integrations:a,runners:u,store:o,queue:c.queue,requestScopes:h,taskWatcher:g,logWatcher:_,dashboardHosts:d,dbProfile:c.connection?.profile,chatState:c.chatState,fileReads:l,repositoryLists:new Map,loadAgent:Ue(a,{cwd:r,config:s,store:o,fileReads:l}),...n?{auth:n}:{},scope:y,webhookTarget:(e,t)=>c.webhookTarget(e,t),appRecord:e=>c.appRecord(e),apps:e=>c.apps(e),installationOrganization:e=>c.installationOrganization(e),installations:e=>c.installations(e),serverOrganizationId:c.defaultOrganizationId,taskOrganization:(e,t)=>c.taskOrganization(e,t),...e.local?{local:e.local}:{}};return m.set(t,v),v};globalThis.__coder={handle:e=>Ga(e,y(c.defaultOrganizationId),{inProcess:!0})};let b=y(c.defaultOrganizationId),x;return e.local&&(await Xe(b),x=setImmediate(()=>{Ae(b).catch(()=>void 0)})),{config:s,context:y,defaultContext:b,warnings:i,...o?{mintedToken:o}:{},sweep:c.sweep,close:async()=>{p.close(),g.close(),_.close(),x&&clearImmediate(x),await b.local?.usageSync?.catch(()=>void 0),await $e(b),await c.close()}}}catch(e){throw await c.close(),e}}var Xa=e({serve:()=>no,serverHandler:()=>Qa});function Za(e){try{let t=new URL(e);return H.has(t.hostname)?Number(t.port||(t.protocol===`https:`?443:80)):void 0}catch{return}}function Qa(e=J.env,t=e.VERCEL?`vercel`:`node`){mr();let n,r=()=>n??=Ya({env:e,host:t}).catch(e=>{throw n=void 0,e});return Object.assign(async(t,n)=>{let i=await r(),a=n?e=>n(e):e=>void e.catch(()=>{}),o=e=>({...i.context(e),waitUntil:a,scope:o});return Ga(t,o(i.defaultContext.organizationId),{clientIp:e.VERCEL?t.headers.get(`x-forwarded-for`)?.split(`,`,1)[0]?.trim():void 0})},{scheduled:async()=>{let e=await r();await Promise.all([e.sweep(),ft(e.defaultContext,!1,!0),Gt(e.defaultContext)])},close:async()=>{let e=n;n=void 0,await(await e)?.close()}})}function $a(e){let t=wr(`lsof`,[`-nP`,`-iTCP:${e}`,`-sTCP:LISTEN`,`-t`],{encoding:`utf8`}),n=Number(t.stdout?.split(`
+`),this.options.heartbeatMs??2e4)];for(let e of s.timers)e.unref?.();return a.watches.add(s),a.reading===void 0&&t<a.head&&(clearTimeout(a.timer),this.read(a)),()=>this.drop(s)}close(){this.closed=!0;for(let e of[...this.feeds.values()])for(let t of[...e.watches])this.end(t)}drop(e){let{feed:t}=e;for(let t of e.timers)clearTimeout(t);!t.watches.delete(e)||t.watches.size||(clearTimeout(t.timer),this.feeds.get(t.key)===t&&this.feeds.delete(t.key))}end(e,t=``){try{t&&e.send(t),e.close()}catch{}this.drop(e)}send(e,t){try{e.send(t)}catch{this.drop(e)}}async read(e){if(e.timer=void 0,this.feeds.get(e.key)!==e||!e.watches.size)return;let t=[...e.watches],n=Math.min(...t.map(e=>e.cursor));e.reading=Date.now(),this.reads++;let r=await e.read(n).catch(()=>null);if(e.reading=void 0,this.feeds.get(e.key)!==e)return;let i=t.filter(t=>e.watches.has(t)),a=i.length<e.watches.size?0:this.options.pollMs??1e3;if(r===void 0)for(let e of i)this.end(e);else if(r){let{status:t,lines:o,pendingLogs:s,pendingResult:c}=r,l=o.length===500,u=Ne.has(t.status)&&!l&&!s&&!c,d=o.map(e=>[e.seq,`id: ${e.seq}\nevent: log\ndata: ${JSON.stringify(e)}\n\n`]);e.head=Math.max(n,o.at(-1)?.seq??n),l&&(a=0);for(let e of i){let t=d.flatMap(([t,n])=>t>e.cursor?[n]:[]).join(``);e.cursor=Math.max(e.cursor,o.at(-1)?.seq??-1),u?this.end(e,`${t}event: end\ndata: {}\n\n`):t&&this.send(e,t)}}this.feeds.get(e.key)===e&&(e.timer=setTimeout(()=>void this.read(e),a),e.timer.unref?.())}};function ta(e,t,n,r,i){let a=t.logWatcher??new ea,o=new TextEncoder,s=()=>{},c=new ReadableStream({start(c){c.enqueue(o.encode(`retry: ${Yi}\n\n`)),s=a.watch(`${t.organizationId}:${n}`,r,i,e=>c.enqueue(o.encode(e)),()=>c.close());let l=()=>{s();try{c.close()}catch{}};e.signal.aborted?l():e.signal.addEventListener(`abort`,l)},cancel(){s()}});return new Response(c,{headers:{"content-type":`text/event-stream; charset=utf-8`,"cache-control":`no-cache, no-transform`}})}const na={npm:[`npx`,`-y`],pypi:[`uvx`],oci:[`docker`,`run`,`-i`,`--rm`]},ra=(e=[])=>e.map(({name:e,description:t,isRequired:n,isSecret:r,value:i,default:a})=>({name:e,...t?{description:t}:{},...i??a?{placeholder:i??a}:{},required:n===!0,secret:r===!0}));function ia(e=[],t,n){return e.flatMap((e,r)=>{let i=`${t}:${r}`,a=Object.entries(e.variables??{}),o=e.value??e.default,s=(e,t,r)=>{let[i]=ra([{...r,name:e}]);return n.push({...i,label:t}),`{${e}}`};if(a.length)for(let[e,t]of a)o=o?.replaceAll(`{${e}}`,s(`${i}:${e}`,e,t));else o===void 0&&(e.valueHint||e.isRequired)&&(o=s(i,e.valueHint??e.name??i,e));return[...e.type===`named`&&e.name?[e.name]:[],...o===void 0?[]:[o]]})}function aa(e){let t=e.remotes?.find(e=>e.type===`streamable-http`||e.type===`sse`);if(t)return{type:t.type===`sse`?`sse`:`http`,url:t.url,env:[],headers:ra(t.headers)};let n=e.packages?.find(e=>na[e.registryType]&&(e.transport?.type??`stdio`)===`stdio`);if(!n)return;let[r,...i]=na[n.registryType],a=[],o=ia(n.runtimeArguments,`runtime`,a),s=ia(n.packageArguments,`package`,a);return{type:`stdio`,command:n.runtimeHint??r,args:[...!n.runtimeHint||n.runtimeHint===r?i:[],...o,n.identifier,...s],...a.length?{argumentInputs:a}:{},env:ra(n.environmentVariables),headers:[]}}function oa(e,t){let[n=``,r]=e.replace(/^v/,``).split(`+`)[0].split(/-(.*)/),[i=``,a]=t.replace(/^v/,``).split(`+`)[0].split(/-(.*)/),o=n.localeCompare(i,`en`,{numeric:!0});if(o)return o;if(r===void 0||a===void 0)return Number(r===void 0)-Number(a===void 0);let s=r.split(`.`),c=a.split(`.`);for(let e=0;e<Math.max(s.length,c.length);e++){let t=s[e],n=c[e];if(t===void 0||n===void 0)return Number(t!==void 0)-Number(n!==void 0);let r=/^\d+$/.test(t),i=/^\d+$/.test(n),a=r===i?t.localeCompare(n,`en`,{numeric:r}):Number(i)-Number(r);if(a)return a}return 0}var sa=class{sources=[{url:`https://api.mcp.github.com/v0.1/servers`,curated:!0,rows:new Map,ready:!1,failed:!1},{url:`https://registry.modelcontextprotocol.io/v0.1/servers`,curated:!1,rows:new Map,ready:!1,failed:!1}];refreshAt=0;timer;controller;closed=!1;inFlight;response(e,t){if((e.now??Date.now)()>=this.refreshAt&&this.refresh(e),!this.inFlight&&this.sources.some(e=>e.failed)&&!this.sources.some(e=>[...e.rows.values()].some(e=>e.found)))return O({error:`The MCP registry did not answer. Try again.`},502);let n=t.trim().toLowerCase(),r=new Set,i=this.sources.flatMap(e=>[...e.rows].flatMap(([t,{found:i}],a)=>{if(r.has(t)||(r.add(t),!i))return[];let o=[i.name.split(`/`).pop(),i.title].map(e=>e.toLowerCase()),s=!n||o.includes(n)?0:o.some(e=>e.startsWith(n))?1:o.some(e=>e.includes(n))?2:i.description.toLowerCase().includes(n)?3:4;if(s===4)return[];let c=n&&i.verified&&s<3?0:1;return[{found:i,curated:e.curated,order:a,vendor:c,quality:s}]})),a=e=>Number(e===3);return i.sort((e,t)=>a(e.quality)-a(t.quality)||Number(t.curated)-Number(e.curated)||(e.curated?e.order-t.order:e.vendor-t.vendor||e.quality-t.quality||e.found.name.localeCompare(t.found.name))),O(i.slice(0,30).map(({found:e})=>e),200,this.sources.every(e=>e.ready)?{}:{partial:`true`})}refresh(e){if(this.inFlight||this.closed)return;this.timer&&clearTimeout(this.timer);let t=this.controller=new AbortController;this.inFlight=Promise.all(this.sources.map(n=>this.fill(e,n,t.signal))).then(()=>{}).finally(()=>{this.inFlight=void 0,this.refreshAt=(e.now??Date.now)()+36e5,this.closed||(this.timer=setTimeout(()=>this.refresh(e),36e5),this.timer.unref())}),e.waitUntil?.(this.inFlight)}async fill(e,t,n){let r=new Map,i=new Set,a;try{do{let o=new URLSearchParams({limit:`100`});a&&o.set(`cursor`,a);let s=await(e.fetch??fetch)(`${t.url}?${o}`,{headers:{accept:`application/json`},signal:AbortSignal.any([n,AbortSignal.timeout(2e4)])});if(!s.ok)throw Error(`Registry unavailable`);let{servers:c,metadata:l}=await s.json();for(let{server:e,_meta:n}of c){let i=n?.[`io.modelcontextprotocol.registry/official`]?.isLatest===!0,a=e.version??``,o=r.get(e.name);if(o&&(o.latest===i?oa(o.version,a)>=0:o.latest))continue;let s=aa(e),c=/^[a-z0-9-]+(?:\.[a-z0-9-]+)+\//i.test(e.name)&&!/^io\.github(?:\.|\/)/i.test(e.name);r.set(e.name,{version:a,latest:i,found:s?{name:e.name,title:e._meta?.[`io.modelcontextprotocol.registry/publisher-provided`]?.github?.displayName??e.title??e.name.split(`/`).pop()??e.name,description:e.description??``,...c?{verified:!0}:{},...t.curated?{curated:!0}:{},...s}:void 0})}if(t.ready||(t.rows=new Map(r)),a=l?.nextCursor,a&&i.has(a))throw Error(`Registry cursor repeated`);a&&i.add(a)}while(a);t.rows=r,t.ready=!0,t.failed=!1}catch{t.failed=!0}}close(){this.closed=!0,this.timer&&clearTimeout(this.timer),this.controller?.abort()}};async function ca(e,t,n){let r=t.settings??={};return(r.registry??=new sa).response(t,n.searchParams.get(`q`)??``)}const la=`/api/auth/callback`,ua=`/.well-known/oauth-client.json`,da=`/.well-known/oauth-cli-client.json`,fa=`openid profile email offline_access organizations:read`;function pa(e,t){return{client_id:`${e}${ua}`,client_name:`Coder at ${new URL(e).host}`,redirect_uris:[`${e}${la}`],post_logout_redirect_uris:[`${e}/?signed_out=1`],grant_types:[`authorization_code`,`refresh_token`],response_types:[`code`],token_endpoint_auth_method:`private_key_jwt`,token_endpoint_auth_signing_alg:`ES256`,jwks:t,scope:fa}}function ma(e){return{client_id:`${e}${da}`,client_name:`Coder CLI for ${new URL(e).host}`,redirect_uris:[`http://127.0.0.1/callback`],grant_types:[`authorization_code`,`refresh_token`,`urn:ietf:params:oauth:grant-type:device_code`],response_types:[`code`],token_endpoint_auth_method:`none`,scope:fa}}function ha(e,t){return{resource:new URL(e).origin,authorization_servers:[t],bearer_methods_supported:[`header`],scopes_supported:fa.split(` `)}}function ga(e){let t=O(e);return t.headers.set(`cache-control`,`public, max-age=3600`),t}function _a(e,t,n,r){return t.config.publicUrl&&t.auth?ga(pa(t.config.publicUrl,t.auth.jwks)):void 0}function va(e,t,n,r){return t.config.publicUrl&&t.auth?ga(ma(t.config.publicUrl)):void 0}function ya(e,t,n,r){return t.config.publicUrl&&t.auth?ga(ha(t.config.publicUrl,t.auth.issuer)):void 0}const ba=[F(`GET`,Zn,en),F(`GET`,ua,_a,Ze),F(`GET`,da,va,Ze),F(`GET`,`/.well-known/oauth-protected-resource`,ya,Ze),F(`GET`,`/health`,(e,t)=>Ir(t)),F(`GET`,`/`,er,Ge),F(`GET`,`/login`,lt,vt),...j(`/login`,ur,vt).filter(e=>e.method!==`GET`),F(`POST`,`/dash/token`,Nt,dt),...j(`/dash/:org/operator`,an,Le),...j(`/dash`,an,nr)],xa=[F(`GET`,`/api/auth/capabilities`,(e,t)=>O({wular:t.auth?.issuer??null})),...j(`/api/auth`,(e,t)=>t.auth.handler(e),cr),F(`GET`,`/me`,Mn,nn)],Sa=[...M(`/tasks`,[F(`GET`,`/:id/messages`,ze,Se),F(`POST`,`/:id/ack`,je,Se),F(`POST`,`/:id/heartbeat`,He,Se),F(`POST`,`/:id/logs`,Ct,zt),F(`POST`,`/:id/result`,kt,zt),F(`POST`,`/:id/credential`,Et,zt),F(`GET`,`/:id`,In,ht)]),...M(`/logins`,[F(`GET`,`/:id/input`,Yr,Je),F(`GET`,`/:id`,Xr,Je),F(`POST`,`/:id`,Zr,Je)]),...M(`/runners`,[F(`POST`,`/register`,Hn)])],Ca=[...M(`/create`,[F(`GET`,`/:id`,ci,z),F(`POST`,`/:id`,ui,z),F(`GET`,`/:id/callback`,pi,z),F(`POST`,`/:id/callback`,mi,z)]),...M(`/install`,[F(`GET`,`/:id`,yn,P),F(`POST`,`/:id`,yn,P),F(`GET`,`/:id/callback`,Ut,P),F(`POST`,`/:id/callback`,Ut,P)])],wa=M(`/connect`,[F(`GET`,``,Nn,bt),F(`POST`,``,qt,bt),F(`GET`,`/:integration`,$t,tt),F(`GET`,`/:integration/callback`,Xn,tt)]),Ta=[...M(`/hooks`,[F(`POST`,`/*`,(e,t,n)=>Bn(e,t,n[`*`]),(e,t,n)=>t.integrations[n[`*`]]?t:k())]),...Ca,...wa],Ea=[F(`GET`,`/metrics`,async(e,t)=>O(await Rr(t),200,{"cache-control":`no-store`}),$n),F(`GET`,`/usage`,lr),F(`GET`,`/usage/totals`,Bt)],Da=M(``,[F(`GET`,`/folders`,(e,t)=>O(Wt(t.local.cwd))),F(`POST`,`/folders/check`,async(e,t)=>{let n=await e.json().catch(()=>void 0);return O(An(n?.path))}),F(`POST`,`/folders/clone`,async(e,t)=>{let n=await e.json().catch(()=>void 0);return O(await Gn(n?.url))}),F(`POST`,`/folders/pick`,async(e,t)=>O(await bn()))],he),Oa=M(``,[F(`GET`,`/engines/status`,async(e,t)=>O(await De())),F(`POST`,`/engines/:engine/login`,ir),F(`POST`,`/engines/:engine/logout`,mt)],Te),ka=[F(`POST`,`/apps/:id/install`,(e,t,n,r)=>gn(e,t,n.id,r.searchParams.get(`back`),r.searchParams.get(`link`))),F(`POST`,`/apps/create/:integration`,di),F(`GET`,`/apps`,Qe),F(`DELETE`,`/apps/:id`,Re),F(`GET`,`/apps/:id/drift`,ke),F(`POST`,`/apps/:id/update`,Ke),F(`GET`,`/installations`,nt),F(`GET`,`/connections`,Tn,V),F(`POST`,`/connections`,tn,V),F(`PATCH`,`/connections/:id`,on,V),F(`DELETE`,`/connections/:id`,Fn,V),F(`POST`,`/connections/:id/authorize`,Qn,V),F(`GET`,`/integrations`,(e,t,n,r)=>Ye(t,r)),F(`GET`,`/repositories`,(e,t)=>ge(t)),F(`POST`,`/repositories/refresh`,(e,t)=>ge(t,!0))],Aa=[F(`GET`,`/agents/import`,Bi),F(`POST`,`/agents/import`,Vi),F(`GET`,`/agents`,vi),F(`PATCH`,`/agents/:slug/settings`,Wi),F(`GET`,`/agents/:slug/versions`,yi),F(`GET`,`/agents/:slug/versions/:version`,bi),F(`GET`,`/agents/:slug`,xi),F(`DELETE`,`/agents/:slug`,Gi,(e,t)=>ot(t,`Only an owner or admin can delete an agent.`)),F(`PUT`,`/agents/:slug`,Ki)],ja=[F(`GET`,`/credentials`,ut),F(`POST`,`/credentials`,Pt,xe),F(`POST`,`/credentials/:label/default`,Ht),F(`DELETE`,`/credentials/:label`,sr),F(`POST`,`/logins`,zr,U),F(`GET`,`/logins/:id`,Br,U),F(`POST`,`/logins/:id`,Vr,U),F(`DELETE`,`/logins/:id`,Hr,U)],Ma=[F(`GET`,`/runners`,Jn),F(`POST`,`/runners`,pe),F(`POST`,`/runners/pair`,Dn),F(`POST`,`/runners/:id/test`,it),F(`PATCH`,`/runners/:id`,Rt),F(`DELETE`,`/runners/:id`,Zt)],Na=[F(`GET`,`/composer`,Li),F(`GET`,`/tasks`,jt),F(`POST`,`/tasks`,We),F(`GET`,`/tasks/:id`,me),F(`DELETE`,`/tasks/:id`,Yt),F(`GET`,`/tasks/:id/logs`,En),F(`GET`,`/tasks/:id/stream`,qi),F(`POST`,`/tasks/:id/steer`,Kn),F(`POST`,`/tasks/:id/ask`,Ot),F(`POST`,`/tasks/:id/approve`,Rn),F(`POST`,`/tasks/:id/cancel`,Tt),F(`POST`,`/tasks/:id/archive`,Ve),F(`GET`,`/events`,Xi)],Pa=[F(`GET`,`/config`,yt),F(`PATCH`,`/config`,be),F(`PUT`,`/config`,Ie)],Fa=[F(`POST`,`/models/probe`,(e,t)=>ki(e,t)),F(`GET`,`/models`,ji),F(`POST`,`/models`,Mi),F(`DELETE`,`/models/:name`,Ni),F(`POST`,`/models/:name/alias`,Pi),F(`POST`,`/models/:name/disable`,Fi),F(`POST`,`/models/:name/enable`,Ii)],Ia=[F(`GET`,`/mcp-registry`,(e,t,n,r)=>ca(e,t,r))],La=M(`/operator`,[F(`GET`,`/apps`,ni),F(`POST`,`/apps/:integration`,ri),F(`GET`,`/audit`,ii)],Oe),Ra=[F(`GET`,`/flows`,un),F(`GET`,`/pulls`,It),F(`POST`,`/flows/:name/run`,Wn),F(`POST`,`/review`,kn)],za=M(`/admin`,[...Ea,...Da,...Oa,...ka,...Aa,...ja,...Ma,...Na,...Pa,...Fa,...Ia,...Ra,...La]).map(e=>({...e,guard:Mt(e.guard)})),Ba=[F(`GET`,`/connections/oauth/callback`,(e,t,n,r)=>Jt(e,t,r),ar),...Sa,...za,...xa,...Ta,...ba];async function Va(e,t,n){if(!hn(e,t))return k();let r=new URL(e.url);return n.scope instanceof Response?n.scope:(t=n.scope??t,await pt(Ba,e,t,r)??Vt(e,t,r))}const Ha=`x-coder-request-scope`;function Ua(e,{sessions:t,operators:n,cookies:r}){let i=e.auth;return i?{...e,auth:{...i,session(e,n){let a=JSON.stringify([...[`cookie`,`authorization`].map(t=>e.get(t)),!!n]),o=t.get(a);if(!o){let s=new Headers(e);s.delete(`x-coder-organization`),o=i.session(s,n,r),t.set(a,o)}let s=e.get(`x-coder-organization`);return s?o.then(e=>e&&(e.stale?e:Pn(e,s))):o},setOrganization:(e,t)=>i.setOrganization(e,t,r),operator(e){let t=e.get(`cookie`)??``,a=n.get(t);return a||(a=i.operator(e,r),n.set(t,a)),a}}}:e}function Wa(e,t,n){let r=t.requestScopes??=new Map,i=e.headers.get(Ha),a=n&&i?r.get(i):void 0;if(a)return{req:e,ctx:Ua(t,a),end(){}};let o=new Headers(e.headers);if(o.delete(Ha),!t.auth)return{req:i?new Request(e,{headers:o}):e,ctx:t,end(){}};let s=Dr(),c={sessions:new Map,operators:new Map,cookies:[]};return r.set(s,c),o.set(Ha,s),{req:new Request(e,{headers:o}),ctx:Ua(t,c),cookies:c.cookies,end:()=>r.delete(s)}}async function Ga(e,t,n={}){t.limits??=new Ce((t.now??Date.now)()),t.limits.requests++,t.settings??={},t.taskWatcher??=new Qi,t.logWatcher??=new ea,t.dashboardHosts??=new cn;let r=()=>Ka(e,t,n);return t.dbProfile?t.dbProfile.request(n.inProcess===!0,r):r()}async function Ka(e,t,n){let r=await se(e,de(new URL(e.url).pathname));if(r instanceof Response)return r;let i=Wa(r,t,n.inProcess===!0),a=!1;try{let r=n.clientIp??`unknown`,o=await et(i.req,i.ctx,r),s=qa(o instanceof Response?o:await Va(i.req,i.ctx,o),i.cookies),c=new URL(e.url).pathname.split(`/`),l=c[1]===`tasks`,u=c[1]===`admin`&&c[2]===`tasks`;if(e.method!==`GET`&&s.ok&&![`hooks`,`tasks`,`logins`].includes(c[1])&&!(o instanceof Response)){let e=o.scope instanceof Response?void 0:o.scope??i.ctx;e&&xn(e,e.organizationId)}return e.method!==`GET`&&s.ok&&!(l&&c.length===4&&c[2]&&[`heartbeat`,`logs`].includes(c[3]))&&!(u&&c.length===5&&c[3]&&[`steer`,`ask`,`approve`,`archive`].includes(c[4]))&&(l||u||c[1]===`admin`&&c[2]===`review`||c[1]===`admin`&&c[2]===`flows`&&c.length===5&&c[3]&&c[4]===`run`)&&Ee(t,u&&c.length===3&&e.method===`POST`),a=!!s.body&&(s.headers.get(`content-type`)??``).includes(`text/html`),a?Ja(s,i.end):s}finally{a||i.end()}}function qa(e,t=[]){if(!t.length)return e;let n=new Headers(e.headers);for(let e of t)n.append(`set-cookie`,e);return new Response(e.body,{status:e.status,statusText:e.statusText,headers:n})}function Ja(e,t){let n=e.body.getReader(),r=new ReadableStream({async pull(e){try{let{done:r,value:i}=await n.read();r?(t(),e.close()):e.enqueue(i)}catch(n){t(),e.error(n)}},cancel(e){return t(),n.cancel(e)}});return new Response(r,e)}async function Ya(e={}){let t=e.env??J.env,n=pr(t,e.host??`node`),r=e.runner??n.runner;if((e.host===`vercel`||t.VERCEL)&&(r===`local`||r===`local-docker`))throw new v(`invalid-option`,`The ${r} runner cannot run on Vercel.`,{hint:`Leave RUNNER unset to use vercel-sandbox.`});if(n.store===`memory`&&r!==`local`&&r!==`local-docker`)throw new v(`invalid-option`,`The ${r} runner needs a database.`,{hint:`Set DATABASE_URL, or use RUNNER=local for a memory server.`});if(!n.publicUrl)throw new v(`invalid-option`,`PUBLIC_URL is required to start a Coder server.`,{hint:`Set PUBLIC_URL to the address platforms and browsers use.`});let i=[];if(n.store===`memory`&&!e.local&&i.push(`test server, not for production: everything is in memory, nothing survives a restart, no sign-in; set DATABASE_URL for a real deployment`),!t.SERVER_ENCRYPTION_KEY&&!e.local&&i.push(`secrets are stored unencrypted; set SERVER_ENCRYPTION_KEY (openssl rand -base64 32)`),n.store===`postgres`&&!n.encryptionKey)throw new v(`invalid-option`,`SERVER_ENCRYPTION_KEY is required for a Postgres server.`,{hint:`Set SERVER_ENCRYPTION_KEY (openssl rand -base64 32); sign-in keys derive from it.`});let a=E(n.integrations),o=n.store===`memory`&&!n.adminToken?Er(18).toString(`base64url`):void 0;n.store===`postgres`&&n.adminToken&&i.push(`ADMIN_TOKEN is ignored with Postgres; owners and admins sign in with coder auth login`);let s={...n,...n.store===`postgres`?{adminToken:void 0}:{},...o?{adminToken:o}:{},...e.runner?{runner:e.runner}:{}},c=await st(s,{local:!!e.local});try{s.store===`memory`&&await G(c.store(c.defaultOrganizationId),Date.now());let n=c.connection&&s.auth?await(await import(`./auth-CWzSsiSC.js`)).createAuth(c.connection.db,s):void 0,r=e.cwd??J.cwd(),l=c.store(c.defaultOrganizationId),u=vr({kind:s.runner,workDir:s.workDir,config:s.runnerConfig,local:!(e.host===`vercel`||t.VERCEL),sandbox:{region:_r(s.databaseUrl),snapshots:gr(l)}});if(!u[s.runner])throw await c.close(),new v(`invalid-option`,`Runner ${s.runner} is not configured.`,{hint:`Set RUNNER_CONFIG to JSON containing url and secret.`});let d=new cn,f=new Ce,p=new sa,m=new Map,h=new Map,g=new Qi,_=new ea,y=t=>{let i=m.get(t);if(i)return i;let o=c.store(t),l=new Map,v={limits:f,...c.connection?{databaseHealth:async()=>{await c.connection.db.execute(Sr`select 1`)},statementTimeout:c.connection.statementTimeout}:{},config:s,settings:{registry:p},organizationId:t,integrations:a,runners:u,store:o,queue:c.queue,requestScopes:h,taskWatcher:g,logWatcher:_,dashboardHosts:d,dbProfile:c.connection?.profile,chatState:c.chatState,fileReads:l,repositoryLists:new Map,loadAgent:Ue(a,{cwd:r,config:s,store:o,fileReads:l}),...n?{auth:n}:{},scope:y,webhookTarget:(e,t)=>c.webhookTarget(e,t),appRecord:e=>c.appRecord(e),apps:e=>c.apps(e),installationOrganization:e=>c.installationOrganization(e),installations:e=>c.installations(e),serverOrganizationId:c.defaultOrganizationId,taskOrganization:(e,t)=>c.taskOrganization(e,t),...e.local?{local:e.local}:{}};return m.set(t,v),v};globalThis.__coder={handle:e=>Ga(e,y(c.defaultOrganizationId),{inProcess:!0})};let b=y(c.defaultOrganizationId),x;return e.local&&(await Xe(b),x=setImmediate(()=>{Ae(b).catch(()=>void 0)})),{config:s,context:y,defaultContext:b,warnings:i,...o?{mintedToken:o}:{},sweep:c.sweep,close:async()=>{p.close(),g.close(),_.close(),x&&clearImmediate(x),await b.local?.usageSync?.catch(()=>void 0),await $e(b),await c.close()}}}catch(e){throw await c.close(),e}}var Xa=e({serve:()=>no,serverHandler:()=>Qa});function Za(e){try{let t=new URL(e);return H.has(t.hostname)?Number(t.port||(t.protocol===`https:`?443:80)):void 0}catch{return}}function Qa(e=J.env,t=e.VERCEL?`vercel`:`node`){mr();let n,r=()=>n??=Ya({env:e,host:t}).catch(e=>{throw n=void 0,e});return Object.assign(async(t,n)=>{let i=await r(),a=n?e=>n(e):e=>void e.catch(()=>{}),o=e=>({...i.context(e),waitUntil:a,scope:o});return Ga(t,o(i.defaultContext.organizationId),{clientIp:e.VERCEL?t.headers.get(`x-forwarded-for`)?.split(`,`,1)[0]?.trim():void 0})},{scheduled:async()=>{let e=await r();await Promise.all([e.sweep(),ft(e.defaultContext,!1,!0),Gt(e.defaultContext)])},close:async()=>{let e=n;n=void 0,await(await e)?.close()}})}function $a(e){let t=wr(`lsof`,[`-nP`,`-iTCP:${e}`,`-sTCP:LISTEN`,`-t`],{encoding:`utf8`}),n=Number(t.stdout?.split(`
 `)[0]);if(n)return{pid:n,command:wr(`ps`,[`-o`,`command=`,`-p`,String(n)],{encoding:`utf8`}).stdout?.trim().slice(0,120)||`another process`}}function eo(e){let t=$a(e),n=t&&/\bcoder (dash|server serve)\b/.test(t.command);return new v(`server`,t?n?`Coder is already running on port ${e} (pid ${t.pid}): http://localhost:${e}`:`Port ${e} is in use by ${t.command} (pid ${t.pid}).`:`Port ${e} is in use.`,{hint:t?`Stop it with \`kill ${t.pid}\`, or use another port: --port ${e+1}`:`Use another port: --port ${e+1}`})}async function to(e={}){mr();let t=e.env??J.env;if(e.runner&&!yr.includes(e.runner))throw new v(`invalid-option`,`Invalid --runner value: use ${yr.join(`, `)}`);if(e.port!==void 0&&(!Number.isInteger(e.port)||e.port<1||e.port>65535))throw new v(`invalid-option`,`Invalid port: use 1 through 65535.`);let n=t.PORT&&/^\d+$/.test(t.PORT)?Number(t.PORT):void 0,r=Za(t.PUBLIC_URL),i=e.port??n??r??8787;if(!Number.isInteger(i)||i<1||i>65535)throw new v(`invalid-option`,`Invalid PORT: use 1 through 65535.`);let a=t.PUBLIC_URL?t:{...t,PUBLIC_URL:`http://localhost:${i}`},o=!!(t.DATABASE_URL||t.POSTGRES_URL);if(o&&e.memory)throw new v(`invalid-option`,`A memory server cannot use DATABASE_URL.`,{hint:`Unset DATABASE_URL, or drop --memory.`});let s=(e.host??t.HOST??(o?void 0:`127.0.0.1`))?.replace(/^\[(.*)\]$/,`$1`),c=!o&&!e.memory;if(c&&!H.has(s))throw new v(`invalid-option`,`A local server listens on loopback only.`,{hint:`Reach it through a tunnel or a proxy on this machine; set DATABASE_URL for a deployment, or use --memory for a test server.`});if(e.memory&&t.VERCEL)throw new v(`invalid-option`,`A memory server cannot run on Vercel.`,{hint:`Set DATABASE_URL for a real deployment.`});let l,u,d=c?new Promise((e,t)=>{u=t,l=()=>{Pr().then(e,t)}}):void 0,f=d?.then(()=>void 0).catch(()=>void 0),p=c?{cwd:e.cwd??J.cwd(),port:i,cacheMaintenance:f}:void 0,m=await Ya({cwd:e.cwd,env:a,runner:e.runner,...p?{local:p}:{}}),h=m.defaultContext,g=()=>{m.sweep().catch(()=>{})};g();let _=setInterval(g,36e5);_.unref();let y=setInterval(()=>{ft(h,!1,!0).catch(()=>{}),Gt(h).catch(()=>{})},6e4);y.unref();let b=kr.createServer(ue((e,t)=>Ga(e,h,{clientIp:t}),{limit:de,admit:e=>o||Pe(e.socket.remoteAddress,e.url??`/`)})),x=m.config.publicUrl;r!==void 0&&r!==i&&m.warnings.push(`PUBLIC_URL points at port ${r} but the server listens on ${i}`),await new Promise((e,t)=>{b.once(`error`,t),b.listen(i,s,e)}).catch(async e=>{throw u?.(e),clearInterval(y),clearInterval(_),await m.close(),e.code===`EADDRINUSE`?eo(i):e});let ee=l?setTimeout(l,0):void 0,S=!1,C=async()=>{S||(S=!0,clearInterval(y),clearInterval(_),h.taskWatcher?.close(),h.logWatcher?.close(),await new Promise((e,t)=>b.close(n=>n?t(n):e())),await f,ee&&clearTimeout(ee),await m.close())},w=h.auth?`Wular Auth (${h.auth.issuer})`:void 0,T=`http://localhost:${i}`,E=ve(h),D=E===`local`?T:x,te=m.config.store===`memory`?m.mintedToken??t.ADMIN_TOKEN:void 0;return{address:T,publicUrl:x,warnings:m.warnings,close:C,runner:m.config.runner,store:m.config.store,mode:E,...d?{cacheMigration:d}:{},maxTasks:m.config.maxTasks??m.config.limits?.concurrentTasks??10,...w?{signIn:w}:{},...m.mintedToken?{mintedToken:m.mintedToken}:{},...m.config.store===`postgres`&&t.DATABASE_URL?{database:ct(t.DATABASE_URL)}:{},...H.has(new URL(D).hostname)?{dashboard:`${D}/dash${te?`#token=${encodeURIComponent(te)}`:``}`}:{}}}async function no(e={}){try{return await to(e)}catch(e){if(e instanceof v)throw e;let t=e instanceof Error&&e.cause instanceof Error?`: ${e.cause.message}`:``;throw new v(`server`,`${e instanceof Error?e.message:String(e)}${t}`)}}export{fa as a,la as i,Xa as n,ua as o,Qa as r,no as t};

package/dist/{serve-ByWMT5Gm.js → serve-UE1fcf4t.js}

@@ -1 +1 @@
-import{Zt as e}from"./core-DwsAMCnL.js";import{Dn as t,Ln as n,Mn as r}from"./config-D2FxHWwi.js";import{i,t as a}from"./cli-D5hyqGq0.js";import{p as o,s}from"./output-BKeyLbvt.js";import{n as c,o as l,s as u,t as d}from"./args-CxsMr9Un.js";import f from"node:process";const p=i({name:`runner serve`,help:{usage:`coder runner serve --url <public url> [--token <token>] [--runner-url <url>] [--port <n>] [--name <name>] [--workspace] [--server [url]] [--json]`,summary:`Run tasks on this machine with its own claude and codex logins. Expose the port with any tunnel (cloudflared, ngrok, Tailscale Funnel or a public VS Code port) and pass the tunnel's URL; each start registers the current URL, so a changing tunnel URL is fine. Choose a default with coder runner default. Tasks use their named runner, the agent setting, your default, the workspace default, then the server default.`,flags:[[`--url <public url>`,`the HTTPS address the server reaches this runner at`],[`--token <token>`,`one-use pairing token, --url is the Coder server`],[`--runner-url <url>`,`public tunnel address when pairing, or CODER_RUNNER_URL`],[`--port <n>`,`local port the tunnel forwards to (default 4100)`],[`--name <name>`,`shown in the dashboard (default: this machine's hostname)`],[`--workspace`,`run every member's tasks, not only yours (owners and admins)`],a],examples:[[`cloudflared tunnel --url http://localhost:4100`,`expose the port in one terminal`],[`coder runner serve --url https://abc.trycloudflare.com`,`then serve through it`]]},options:{...d,port:n(t().check(r(),e())),url:u,name:u,token:u,"runner-url":u,workspace:c,server:l,yes:c},async run({options:e}){let{serveRunner:t}=await import(`./serve-BQsv2KZs.js`).then(e=>e.n),n=await t({...e,runnerUrl:e[`runner-url`]}),r=()=>void n.close().finally(()=>f.exit(0));return f.once(`SIGINT`,r),f.once(`SIGTERM`,r),n},json:({server:e,close:t,...n})=>({ok:!0,...n}),print:e=>f.stdout.write(`Runner ${o.bold(e.name)} serves ${e.server} at ${o.cyan(e.config.url??``)} (${e.scope}), listening on localhost:${e.port}.\n${s([`Tasks run here with this machine's own claude and codex logins`,`Stop with Ctrl-C; the server marks the runner offline`],o,o.cyan)}\n`)});export{p as commandRunnerServe};
+import{Zt as e}from"./core-DwsAMCnL.js";import{Dn as t,Ln as n,Mn as r}from"./config-D2FxHWwi.js";import{i,t as a}from"./cli-ZUdhZnuW.js";import{p as o,s}from"./output-BKeyLbvt.js";import{n as c,o as l,s as u,t as d}from"./args-CxsMr9Un.js";import f from"node:process";const p=i({name:`runner serve`,help:{usage:`coder runner serve --url <public url> [--token <token>] [--runner-url <url>] [--port <n>] [--name <name>] [--workspace] [--server [url]] [--json]`,summary:`Run tasks on this machine with its own claude and codex logins. Expose the port with any tunnel (cloudflared, ngrok, Tailscale Funnel or a public VS Code port) and pass the tunnel's URL; each start registers the current URL, so a changing tunnel URL is fine. Choose a default with coder runner default. Tasks use their named runner, the agent setting, your default, the workspace default, then the server default.`,flags:[[`--url <public url>`,`the HTTPS address the server reaches this runner at`],[`--token <token>`,`one-use pairing token, --url is the Coder server`],[`--runner-url <url>`,`public tunnel address when pairing, or CODER_RUNNER_URL`],[`--port <n>`,`local port the tunnel forwards to (default 4100)`],[`--name <name>`,`shown in the dashboard (default: this machine's hostname)`],[`--workspace`,`run every member's tasks, not only yours (owners and admins)`],a],examples:[[`cloudflared tunnel --url http://localhost:4100`,`expose the port in one terminal`],[`coder runner serve --url https://abc.trycloudflare.com`,`then serve through it`]]},options:{...d,port:n(t().check(r(),e())),url:u,name:u,token:u,"runner-url":u,workspace:c,server:l,yes:c},async run({options:e}){let{serveRunner:t}=await import(`./serve-wQgyxwdY.js`).then(e=>e.n),n=await t({...e,runnerUrl:e[`runner-url`]}),r=()=>void n.close().finally(()=>f.exit(0));return f.once(`SIGINT`,r),f.once(`SIGTERM`,r),n},json:({server:e,close:t,...n})=>({ok:!0,...n}),print:e=>f.stdout.write(`Runner ${o.bold(e.name)} serves ${e.server} at ${o.cyan(e.config.url??``)} (${e.scope}), listening on localhost:${e.port}.\n${s([`Tasks run here with this machine's own claude and codex logins`,`Stop with Ctrl-C; the server marks the runner offline`],o,o.cyan)}\n`)});export{p as commandRunnerServe};