@wular/coder 0.4.9 → 0.4.11

package/dist/{types-C1tWi5lP.d.ts → types-C6NAqGqn.d.ts}

@@ -1,9 +1,9 @@
 import * as z from "zod/mini";
 //#region src/core/config.d.ts
 declare const engineSchema: z.ZodMiniEnum<{
-  custom: "custom";
   codex: "codex";
   claude: "claude";
+  custom: "custom";
 }>;
 declare const effortSchema: z.ZodMiniEnum<{
   low: "low";
@@ -42,10 +42,11 @@ declare const mcpEntrySchema: z.ZodMiniObject<{
   description: z.ZodMiniOptional<z.ZodMiniString<string>>;
 }, z.core.$strict>;
 declare const effectiveConfigSchema: z.ZodMiniObject<{
+  conversationCompactTokens: z.ZodMiniNumber<number>;
   chain: z.ZodMiniArray<z.ZodMiniEnum<{
-    custom: "custom";
     codex: "codex";
     claude: "claude";
+    custom: "custom";
   }>>;
   engines: z.ZodMiniObject<{
     codex: z.ZodMiniOptional<z.ZodMiniObject<{
@@ -126,6 +127,10 @@ declare const effectiveConfigSchema: z.ZodMiniObject<{
       "workspace-write": "workspace-write";
       auto: "auto";
     }>>;
+    access: z.ZodMiniOptional<z.ZodMiniEnum<{
+      read: "read";
+      write: "write";
+    }>>;
     runner: z.ZodMiniOptional<z.ZodMiniEnum<{
       local: "local";
       "local-docker": "local-docker";
@@ -133,11 +138,6 @@ declare const effectiveConfigSchema: z.ZodMiniObject<{
       "github-actions": "github-actions";
     }>>;
     integrations: z.ZodMiniOptional<z.ZodMiniRecord<z.ZodMiniString<string>, z.ZodMiniObject<{
-      allowedTools: z.ZodMiniOptional<z.ZodMiniUnion<readonly [z.ZodMiniEnum<{
-        observe: "observe";
-        comment: "comment";
-        write: "write";
-      }>, z.ZodMiniArray<z.ZodMiniString<string>>]>>;
       allowedEvents: z.ZodMiniOptional<z.ZodMiniArray<z.ZodMiniString<string>>>;
     }, z.core.$strict>>>;
     connections: z.ZodMiniOptional<z.ZodMiniArray<z.ZodMiniString<string>>>;
@@ -171,6 +171,24 @@ type Effort = z.infer<typeof effortSchema>;
 type Permission = z.infer<typeof permissionSchema>;
 type CustomModelConfig = z.infer<typeof customModelSchema>;
 type CoderConfig = z.infer<typeof effectiveConfigSchema>;
+declare const config: {
+  /** A config value by dotted key (or the whole effective config). */
+  get: (key?: string, opts?: {
+    cwd?: string;
+  }) => unknown;
+  /** Set a config value; `workspace` targets the repo file instead of the user file. */
+  set: (key: string, value: unknown, opts?: {
+    workspace?: boolean;
+    cwd?: string;
+    unset?: boolean;
+  }) => {
+    file: string;
+    key: string;
+    effective: unknown;
+    value?: unknown;
+    unset?: boolean;
+  };
+};
 //#endregion
 //#region ../node_modules/.bun/@types+unist@3.0.3/node_modules/@types/unist/index.d.ts
 // ## Interfaces
@@ -1273,7 +1291,7 @@ interface SerializedThread {
 type ChannelVisibility = "private" | "workspace" | "external" | "unknown";
 //#endregion
 //#region src/agent/types.d.ts
-type Preset = 'observe' | 'comment' | 'write';
+type Preset = 'read' | 'write';
 /** Per-integration wiring in a definition. `events` list = default behavior, map = event -> flow. */
 /** Event value in a definition map: a flow name, or options. */
 interface AgentEventOptions {
@@ -1288,8 +1306,6 @@ interface AgentEventOptions {
 }
 interface AgentDefinitionIntegration {
   events?: string[] | Record<string, string | true | AgentEventOptions>;
-  /** Platform tools the agent uses: a preset or an explicit tool list. */
-  tools?: Preset | string[];
 }
 /** What an agent IS: `.coder/agents/<id>/agent.json` beside its system.md. */
 interface AgentDefinition {
@@ -1301,13 +1317,14 @@ interface AgentDefinition {
   model?: string;
   effort?: Effort;
   permissions?: Permission;
+  /** Read-only or Read-write on its handles and connections; defaults to `write`. */
+  access?: Preset;
   /** MCP servers every task of this agent attaches, in the `.mcp.json` entry shape. */
   mcp?: Record<string, McpConfigEntry>;
   integrations: Record<string, AgentDefinitionIntegration>;
 }
-/** Per-integration caps in usage: `allowedTools` and `allowedEvents` intersect the definition's. */
+/** Per-integration caps in usage: `allowedEvents` intersects the definition's. */
 interface AgentUsageIntegration {
-  allowedTools?: Preset | string[];
   allowedEvents?: string[];
 }
 /** How a repo RUNS an agent: one entry under `agents` in .coder/config.json. */
@@ -1316,6 +1333,8 @@ interface AgentUsage {
   model?: string;
   effort?: Effort;
   permissions?: Permission;
+  /** May only lower the definition's access. */
+  access?: Preset;
   integrations?: Record<string, AgentUsageIntegration>;
   /** Connections its tasks may use, by id; absent allows every connection the task is granted. */
   connections?: string[];
@@ -1360,23 +1379,28 @@ interface AgentEvent {
     thread: SerializedThread;
     message?: SerializedMessage;
   };
+  /** Whether the agent must answer: a mention, a 1:1 direct message, or a handle that answers every prompt. */
+  mustReply?: boolean;
+  /** The event's place in its conversation, gathered at dispatch; `more` counts messages past `since`'s cap. */
+  conversation?: {
+    index?: number;
+    since?: SinceMessage[];
+    more?: number;
+    /** Internal acknowledgement watermark of the recorded unseen snapshot. */
+    unseen?: {
+      version: number;
+      epoch?: string;
+    };
+  };
   repo?: {
     owner: string;
     name: string;
     cloneUrl: string;
-    ref: string;
     defaultBranch: string;
   };
 }
-/** A handle on another integration, linked to this installation at install time. */
-type InstallationLink = {
-  kind: 'installation';
-  id: string;
-};
 /** Per-installation settings a user sets from the platform (`/setup` in Slack). */
 interface InstallationSettings {
-  /** `owner/name` of the repo whose `.coder/` holds this agent's usage and instructions. */
-  configRepo?: string;
   model?: string;
   engine?: string;
   effort?: string;
@@ -1411,31 +1435,27 @@ interface AgentTask {
   definition: AgentDefinition;
   /** Frozen id of the credential selected for this task. */
   credential?: string;
+  /** The engine order for this task; a pinned engine has one entry. */
+  engineChain?: string[];
+  /** Applicable credentials frozen with the engine order, without their values. */
+  engineCredentials?: Record<string, string>;
   /** Wular user who asked, when known; their personal credential comes first. */
   requester?: string;
   /** Stored agent body for runners whose checkout does not contain the agent. */
   files?: Record<string, string>;
   usage?: AgentUsage;
-  /** Effective tools per integration the task may act on (event integration + connections). */
+  /** Effective tools per integration the agent declares, by its access mode; every installation of the agent's apps serves them. */
   tools: Record<string, string[]>;
-  /** Frozen per-integration write targets. Missing scope means read-only tools only. */
-  toolScopes?: Record<string, {
-    repo?: {
-      owner: string;
-      name: string;
-    };
-    /** Chat SDK thread id. */
-    thread?: string;
-    within?: string;
-  }>;
-  /** Conversation context gathered by the receiver: recent thread messages and the stored note. */
+  /** Context gathered by the receiver: notes for the turn and who asked. */
   context?: TaskContext;
-  /** What the platform thread gets when the run ends without an answer. */
+  /** What the platform thread gets when the run fails without an answer. */
   failureReply?: string;
+  /** The task's dashboard page, linked when the agent returns no reply where one is due. */
+  taskUrl?: string;
 }
 interface TaskContext {
   outputSchema?: object;
-  /** Most recent thread messages, oldest first. */
+  /** Earlier turns a dashboard continuation pastes in, oldest first. */
   messages?: Array<{
     user: string;
     text: string;
@@ -1443,10 +1463,12 @@ interface TaskContext {
   }>;
   /** Completed turns of this task, kept across dashboard continuations. */
   turns?: TaskTurn[];
-  /** Rolling note the agent wrote at the end of its previous turn in this thread. */
-  note?: string;
-  /** Extra instructions from the config repo (`.coder/<agent>.md`). */
+  /** Notes the receiver adds for the agent, such as a missing account connection. */
   instructions?: string;
+  /** Whether this turn requires a reply. */
+  mustReply?: boolean;
+  /** The last conversation batch each kind admitted, by steer or resume. */
+  admissions?: Partial<Record<'batch' | 'reactions', string>>;
   /** The Coder account behind the event's actor, when they connected it. */
   user?: {
     name: string;
@@ -1454,6 +1476,16 @@ interface TaskContext {
   };
 }
 //#endregion
+//#region src/integrations/types.d.ts
+/** A message the agent did not get as a turn, as `since` lists it. */
+interface SinceMessage {
+  /** The platform's message id, so a message counts once; not shown to the agent. */
+  id?: string;
+  author: string;
+  text: string;
+  sentAt: string;
+}
+//#endregion
 //#region src/client/types.d.ts
 /** What publishing did to one of the agent's apps: pushed it, failed to, or found it needs changes on the platform. */
 interface AppSync {
@@ -1531,7 +1563,8 @@ interface ConnectionRow {
   /** Set on a member's own connection; `mine` when that member is the viewer. */
   owner?: string;
   mine?: true;
-  access: 'observe' | 'write';
+  /** Absent follows the mode of the agent whose task uses it. */
+  access?: 'read' | 'write';
   auth: 'none' | 'key' | 'oauth';
   /** The remote server, or the stdio command, it is bound to. */
   url?: string;
@@ -1607,8 +1640,17 @@ interface McpServerSpec {
   };
   /** Tool allowlist; omit or empty for every tool the server offers. */
   tools?: string[];
+  /** Schemas load before the first prompt instead of behind tool search or the hub. */
+  alwaysLoad?: boolean;
+  /** Only tools the server marks read-only may be called. */
+  readOnly?: boolean;
+  /** The integration a platform tool server reaches, and the account of its installation. */
+  integration?: string;
+  account?: string;
+  /** What the server reaches and the access it allows, as the prompt lists it. */
+  description?: string;
+  access?: 'read' | 'write';
 }
-type TaskKind = 'task';
 type TaskStatus = 'queued' | 'running' | 'completed' | 'failed' | 'cancelled';
 /** A persisted task record (task.json). Most fields accrete over the lifecycle. */
 interface Task {
@@ -1616,24 +1658,35 @@ interface Task {
   createdAt: string;
   updatedAt?: string;
   status: TaskStatus;
-  kind?: TaskKind;
   name?: string | null;
   engine?: Engine;
   prompt?: string;
   outputSchema?: object;
   currentPrompt?: string | null;
   system?: string | null;
+  systemPrompt?: string;
   model?: string | null;
   effort?: Effort | null;
   permissions?: Permission;
   resumeThreadId?: string | null;
   cwd?: string;
-  background?: boolean;
   pid?: number | null;
   dispatchId?: string;
   threadId?: string | null;
+  previousThreadIds?: string[];
+  pendingRollover?: {
+    summary: string;
+    recent: string;
+    exchanges: number;
+  };
+  rollingOver?: boolean;
+  steerClosed?: boolean;
+  conversation?: boolean;
   turnId?: string | null;
   steerEndpoint?: string | null;
+  turnUsage?: Array<Pick<TurnResult, 'tokens' | 'model'> & {
+    at: string;
+  }>;
   completedAt?: string;
   resumedAt?: string;
   error?: string;
@@ -1666,6 +1719,7 @@ interface TurnResult {
   finalMessage?: string;
   touchedFiles?: string[];
   tokens?: TokenUsage | null;
+  contextTokens?: number;
   /** The model that ran the turn (tokens are only comparable per model). */
   model?: string | null;
   error?: {
@@ -1707,4 +1761,4 @@ interface CommandHelpSpec {
 /** A subcommand handler. Receives the argv slice after the command name. */
 type CommandHandler = (argv: string[]) => Promise<void> | void;
 //#endregion
-export { type InstallationLink as A, RunnerUpdate as C, type AgentEvent as D, type AgentDefinition as E, type CoderConfig as F, type CustomModelConfig as I, Preset as M, type TaskContext as N, type AgentTask as O, type TaskSource as P, type RunnerTest as S, type Agent as T, type RunnerInput as _, type HelpRow as a, type RunnerRow as b, type TaskStatus as c, type TokenUsage as d, type AppSync as f, type ProbeResult as g, type LocalFolders as h, type CommandHelpSpec as i, type InstallationSettings as j, type AgentUsage as k, type TurnResult as l, LocalFolder as m, type Availability as n, McpServerSpec as o, ConnectionRow as p, CommandHandler as r, Task as s, Approval as t, TaskLogEntry as u, RunnerKind as v, type TaskTurn as w, type RunnerSpec as x, type RunnerPairing as y };
+export { type InstallationSettings as A, RunnerUpdate as C, type AgentEvent as D, type AgentDefinition as E, type CustomModelConfig as F, type config as I, TaskContext as M, type TaskSource as N, type AgentTask as O, type CoderConfig as P, type RunnerTest as S, type Agent as T, type RunnerInput as _, type HelpRow as a, type RunnerRow as b, type TaskStatus as c, type TokenUsage as d, type AppSync as f, type ProbeResult as g, type LocalFolders as h, type CommandHelpSpec as i, type Preset as j, type AgentUsage as k, type TurnResult as l, LocalFolder as m, type Availability as n, McpServerSpec as o, ConnectionRow as p, CommandHandler as r, Task as s, Approval as t, TaskLogEntry as u, RunnerKind as v, type TaskTurn as w, type RunnerSpec as x, type RunnerPairing as y };

package/dist/{types-B42Oh0zF.js → types-D_xnfP7m.js}

@@ -1 +1 @@
-import{qi as e}from"./core-DwsAMCnL.js";var t=e({PRESETS:()=>n});const n=[`observe`,`comment`,`write`];export{t as n,n as t};
+import{qi as e}from"./core-DwsAMCnL.js";var t=e({PRESETS:()=>n});const n=[`read`,`write`];export{t as n,n as t};

package/dist/unalias-bL5t8Isc.js

@@ -0,0 +1 @@
+import{i as e}from"./cli-BBlH53hA.js";import{t}from"./models-Cb0ZTKZ7.js";import{n}from"./add-wC8ByRgM.js";import{t as r}from"./remove-CId1EwPg.js";const i=e({name:`model unalias`,help:{usage:`coder model unalias <name> [--workspace]`,summary:`Remove a user-defined alias.`,flags:[[`--workspace`,`target <repo>/.coder/config.json instead of the user file`]]},options:n,args:1,run:({options:e,args:[n],cwd:r})=>t.unalias(n,{...e,cwd:r}),print:e=>r(`unaliased`,e.unaliased,e.file)});export{i as commandModelUnalias};

package/dist/update-DIYW08ME.js

@@ -0,0 +1,2 @@
+import{i as e}from"./cli-BBlH53hA.js";import{t}from"./models-Cb0ZTKZ7.js";import{a as n,i as r,n as i,r as a}from"./add-wC8ByRgM.js";const o=e({name:`model update`,help:{usage:`coder model update <name> [--base-url <url>] [--model <id>] [--env-key VAR]`,summary:`Update a configured custom model. Only the flags you pass change; the endpoint
+is re-probed and the wire protocol re-detected.`,flags:[[`--base-url <url>`,`new API base`],[`--model <id>`,`new provider model id`],[`--env-key <VAR>`,`new API-key env var`],[`--workspace`,`write to <repo>/.coder/config.json instead of the user file`]]},options:i,args:1,run:({options:e,args:[r],cwd:i})=>t.update(r,{...n(e),cwd:i}),json:a,print:e=>r(e,`updated`)});export{o as commandModelUpdate};

package/dist/upgrade-3fH6dGJw.js

@@ -0,0 +1,2 @@
+import{D as e}from"./dispatch-CFZ9Crvg.js";import{i as t}from"./cli-BBlH53hA.js";import{f as n,p as r,t as i}from"./output-BKeyLbvt.js";import{c as a,n as o}from"./args-CURX44CA.js";import s from"node:process";const c=t({name:`upgrade`,globalFlags:{json:!1,cwd:!1},help:{usage:`coder upgrade [--cli-only] [--plugins-only] [--codex] [--claude] [--pm <mgr>]`,summary:`Update the coder CLI through whichever package manager installed it, then refresh
+the host plugins to match.`,flags:[[`--cli-only`,`update just the CLI`],[`--plugins-only`,`refresh just the host plugins`],[`--codex`,`limit the refresh to the Agent Skills copy (Codex, Pi, ...)`],[`--claude`,`limit the refresh to the Claude Code plugin`],[`--pm <npm|pnpm|yarn|bun>`,`force a package manager instead of auto-detecting`]]},options:{pm:a,"cli-only":o,"plugins-only":o,codex:o,claude:o},run:({options:t})=>e({...t,cliOnly:t[`cli-only`],pluginsOnly:t[`plugins-only`]},l),print:u});function l(e){s.stdout.write(`${r.bold(`Updating coder CLI`)} ${r.dim(`${e}...`)}\n`)}function u(e){let t=r.bold,a=r.dim,o=(e,n)=>n&&e&&n!==e?`${e} ${a(`->`)} ${t(n)}`:`${n??e??`?`} ${a(`(unchanged)`)}`,c=(e,t)=>`${t.installed?n(`${e} ${o(t.from,t.to)} ${a(`- ${t.note}`)}`):i(`${e} ${t.note}`)}\n`;e.cli&&s.stdout.write(e.cli.changed?`${n(`coder CLI  ${o(e.cli.from,e.cli.to)}`)}\n`:`${n(`coder CLI  ${e.cli.from} ${a(`(already latest)`)}`)}\n`),e.claudePlugin&&s.stdout.write(c(`claude plugin`,e.claudePlugin)),e.agentsSkill&&s.stdout.write(c(`agents skill `,e.agentsSkill))}const d=async()=>(await import(`./refresh-SHNJq9Cx.js`)).commandRefreshUpdate,f=Object.assign(async e=>e[0]===`refresh`?(await d())(e.slice(1)):c(e),c,{subcommands:{refresh:d}});export{f as commandUpgrade};

package/dist/usage-Dr8F0xt0.js

@@ -0,0 +1 @@
+import{i as e,r as t}from"./cli-BBlH53hA.js";import{g as n,p as r}from"./output-BKeyLbvt.js";import{c as i,s as a,t as o}from"./args-CURX44CA.js";import s from"node:process";function c(e,t){let i=Array.isArray(e.totals)?e.totals.map(e=>({group:t??``,...e})):Object.entries(e.totals).flatMap(([e,t])=>t.map(t=>({group:e,...t})));if(!i.length)return void s.stdout.write(`${r.dim(`No usage in this period.`)}\n`);s.stdout.write(`${n([{header:`by`,value:e=>e.group},{header:`key`,value:e=>e.key,paint:e=>r.cyan(e)},{header:`tasks`,value:e=>String(e.tasks)},{header:`runner ms`,value:e=>String(e.runnerMs)},{header:`tokens`,value:e=>e.tokens===void 0?``:JSON.stringify(e.tokens)}],i,r)}\n`)}const l=e({name:`agent usage`,help:{usage:`coder agent usage [--since 7d|24h|<ms>] [--by agent|installation|engine] [--server [url]] [--json] [--cwd <dir>]`,flags:[[`--since <period|ms>`,`period such as 7d or 24h, or milliseconds since epoch`],[`--by <group>`,`agent, installation, or engine`],t]},options:{...o,...a,since:i,by:i},run:async({options:e,cwd:t})=>{let{agents:n}=await import(`./agent-6GooVMsq.js`).then(e=>e.t);return n.usage({...e,cwd:t,organization:e.workspace,since:e.since??`7d`})},print:(e,{options:t})=>c(e,t.by)});export{l as commandAgentUsage};

package/dist/views-CE2d9x6T.js

@@ -0,0 +1,5 @@
+import{a as e,i as t,r as n,t as r}from"./slack-DhPhLuWb.js";const i=e=>({type:`mrkdwn`,text:e}),a=e=>({type:`section`,text:i(e.length>3e3?`${e.slice(0,2999)}…`:e)}),o=e=>e.replace(/&/g,`&amp;`).replace(/</g,`&lt;`).replace(/>/g,`&gt;`),s=(e,t)=>`<${e}|${o(t)}>`,c={queued:`Queued`,running:`Running`,waiting:`Needs approval`,completed:`Completed`,failed:`Failed`,cancelled:`Cancelled`},l=(e,t,n,i)=>({type:`button`,action_id:`${r}${e}`,text:{type:`plain_text`,text:n},url:t,...i?{style:`primary`}:{}});function u(e,r,i){let s=i?.slug??r,c=i?.listens.find(e=>e.integration===n.id)?.events??[],u=c.map(e=>n.events[e]?.description??e),d=t(o(r),c,`message it here`);return{type:`home`,blocks:[a([`*${o(i?.name??r)}*`,i?.description&&o(i.description)].filter(Boolean).join(`
+`)),...d?[a(`*Use it here*\n${d}`)]:[],...u.length?[a(`*Listens to*\n${u.join(`
+`)}`)]:[],{type:`divider`},{type:`actions`,elements:[l(`agent`,`${e.dash}/agents/${encodeURIComponent(s)}/platforms`,`Open in Coder`,!0),l(`coder`,e.home.replace(/\/$/,``),`Make your own agent`)]}]}}async function d(t,n){if(!t.publicUrl||!t.dashUrl||!t.installationId)return;let r=u({home:t.publicUrl,dash:t.dashUrl},t.name,await t.agent?.());await e(`views.publish`,{user_id:n,view:r},await t.token(t.installationId),t.fetch)}async function f(r,i,{open:s,setup:c}){if(!r.installationId)return;let u=await r.agent?.(),d=u?.name??r.name,f=t(o(r.name),u?u.listens.find(e=>e.integration===n.id)?.events??[]:[`mention`],`message it here`),p=[a([`*${o(d)} is in your workspace*`,u?.description&&o(u.description)].filter(Boolean).join(`
+`)),...f?[a(`*Use it*\n${f}`)]:[],...c?[a(`*One step left*\nAdd a model so ${o(d)} can start working.`)]:[],{type:`actions`,elements:[...c?[l(`model`,c,`Add a model`,!0)]:[],l(`agent`,s,`Open in Coder`,!c)]}];await e(`chat.postMessage`,{channel:i,text:`${d} is in your workspace`,blocks:p},await r.token(r.installationId),r.fetch)}function p(e,t){let n=Math.floor(t.startedAt/1e3),r=t.title.length>150?`${t.title.slice(0,149)}…`:t.title;return{blocks:[{...a(`*${s(e,r)}*`),fields:[i(`*Agent*\n${o(t.agent)}`),i(`*Status*\n${c[t.status]??t.status}`),i(`*From*\n${o(t.from)}`),i(`*Started*\n<!date^${n}^{date_short_pretty} at {time}|${new Date(t.startedAt).toISOString()}>`)]},{type:`context`,elements:[i(`Coder task ${o(t.id)}`)]}]}}function m(e,t){let r=t.listens.map(e=>e.name),c=t.listens.length===1&&t.listens[0].integration===n.id;return{blocks:[{...a([`*${s(e,t.name)}*`,t.description&&o(t.description)].filter(Boolean).join(`
+`)),...c?{}:{fields:[i(`*Listens on*\n${r.join(`, `)||`Nothing yet`}`)]}},{type:`context`,elements:[i(`Coder agent`)]}]}}async function h(e,t,n){let r;try{r=new URL(n)}catch{return}let i=`${t.pathname.replace(/\/$/,``)}/`;if(r.origin!==t.origin||!r.pathname.startsWith(i))return;let[a,o]=r.pathname.slice(i.length).split(`/`);if(!o)return;let s;try{s=decodeURIComponent(o)}catch{return}if(a===`tasks`){let t=await e.task?.(s);return t&&p(n,t)}if(a===`agents`){let t=await e.agent?.(s);return t&&m(n,t)}}async function g(t,n){if(!t.dashUrl||!t.installationId)return;let r=new URL(t.dashUrl),i=await Promise.all(n.links.map(async({url:e})=>[e,await h(t,r,e)])),a=Object.fromEntries(i.filter(([,e])=>e));if(!Object.keys(a).length)return;let o=n.unfurl_id&&n.source?{unfurl_id:n.unfurl_id,source:n.source}:{channel:n.channel,ts:n.message_ts};await e(`chat.unfurl`,{...o,unfurls:a},await t.token(t.installationId),t.fetch)}export{d as publishHome,g as unfurl,f as welcome};

package/dist/watch-BiyN4NxE.js

@@ -0,0 +1,5 @@
+import{dr as e,nn as t,or as n,qt as r}from"./prompts-Bj4Fbd_n.js";import{i}from"./cli-BBlH53hA.js";import{_ as a,a as o,b as s,c,h as l,l as u,n as d,p as f,s as p,u as m,v as h,y as g}from"./output-BKeyLbvt.js";import{t as _,u as v}from"./args-CURX44CA.js";import y from"node:path";import b from"node:process";import x from"node:fs";const S=i({name:`flow watch`,help:{usage:`coder flow watch [run-id] [--tail <n|all>] [--json]`,summary:`Watch a flow run live: replay its progress lines from the start, then keep
+following while it runs (Ctrl-C detaches; it keeps running). Blocks until it
+finishes; exits 0 on success, 1 otherwise. Defaults to the most recent run.
+For the result alone, prefer \`coder flow result\`. Alias: stream.`,flags:[[`--tail <n|all>`,`replay only the last n events first (default: all)`]],examples:[[`coder flow watch`,`follow the most recent run to completion`]]},options:{..._,tail:v},args:1,run:async({options:e,args:[t]})=>{let{watchRun:n}=await import(`./executor-3QMa-XRY.js`).then(e=>e.S);return R(n(t,{tail:e.tail}),{json:e.json,stream:!0})}}),C=[`⣾`,`⣽`,`⣻`,`⢿`,`⡿`,`⣟`,`⣯`,`⣷`];function w(e,t=!1){let n=f;return t?d(`[${E(e)}]`,10):e===`completed`?n.bold(n.green(`✔`)):e===`failed`||e===`cancelled`||e===`stopped`?n.bold(n.red(`✘`)):e===`running`?n.bold(n.cyan(`●`)):n.dim(`○`)}function T(){return d(`[start]`,10)}function E(e){return e===`completed`?`done`:e===`cancelled`?`failed`:e}function D(e,t){return e??t.replace(/\s+/g,` `).trim().slice(0,60)}function O(e,t,n,r,i,a){let o=f,s=d(t??n,32);return[`${e} ${a?o.bold(s):s}`,o.dim(d(n,24)),o.light(d(i??``,20)),r?o.light(`${u(r.total)} tok`):``].join(` `).trimEnd()}function k(e,t=!1){let n=f;return`${w(e.ok?`completed`:`failed`,t)} ${n.dim(`gate`)} ${n.light(e.cmd)}${e.ok?``:n.dim(` · exit ${e.code}`)}`}function A(e,t,n){let r=f,i=n!==void 0&&n>=1e3?r.dim(` · ${o(n)}`):``;return`${t} ${r.dim(`gate`)} ${r.light(e)}${i}`}function j(e,t=!1){return f.dim(`${`│    `.repeat(e)}${t?`└─`:`├─`}`)}function M(e){return f.dim(`${`│    `.repeat(e)}│ `)}function N(e){return`${`  `.repeat(e.depth)}${e.log?`${d(`[log]`,10)} `:``}${e.body}`}function P(e,t,n=!1){return n?N(e):`${e.log?M(e.depth):j(e.depth,t)} ${e.body}`}function F(e){return f.dim(`${`│    `.repeat(Math.max(0,e))}│`)}var I=class{stream;names=new Map;active=new Map;activeGates=new Map;pending;previews=new Map;tails=new Map;previewWatchers=new Map;frame=0;hasCommitted=!1;timer;tty;region;constructor(e=b.stdout){this.stream=e,this.tty=!!e.isTTY,this.region=new a(e)}emit(n){let r=f;switch(n.kind){case`task-start`:{let r={name:D(n.name,n.prompt),engine:n.engine,depth:n.depth??0};if(this.names.set(n.taskId,r),!this.tty){this.final(r.depth,O(T(),r.name,n.taskId,null,r.engine));return}this.active.set(n.taskId,r),this.previewWatchers.get(n.taskId)?.close(),this.previewWatchers.set(n.taskId,e(t(b.cwd(),n.taskId),e=>{e&&e!==`log.jsonl`||(this.refreshPreviews(n.taskId),this.repaint())})),this.refreshPreviews(n.taskId),this.spin(!0),this.repaint();return}case`task-end`:{this.active.delete(n.taskId),this.previews.delete(n.taskId),this.tails.delete(n.taskId),this.previewWatchers.get(n.taskId)?.close(),this.previewWatchers.delete(n.taskId),this.idle();let e=this.names.get(n.taskId);this.final(e?.depth??0,O(w(n.status,!this.tty),e?.name??null,n.taskId,n.tokens,e?.engine));return}case`gate-start`:{let e={cmd:n.cmd,depth:n.depth??0,startedAt:Date.now()};if(!this.tty){this.final(e.depth,A(e.cmd,T()));return}this.activeGates.set(n.gateId,e),this.spin(!0),this.repaint();return}case`gate`:n.gateId&&this.activeGates.delete(n.gateId),this.idle(),this.final(n.depth??0,k(n,!this.tty));return;case`log`:for(let e of n.message.split(`
+`))this.final(n.depth??0,r.light(e),!0);return;case`flow-start`:this.final(n.depth-1,r.bold(`flow ${n.name}`));return;case`replay`:this.final(0,r.dim(`replayed ${n.count} steps from journal`),!0)}}done(){this.spin(!1);for(let e of this.previewWatchers.values())e.close();this.previewWatchers.clear(),this.flush(0),this.tty&&this.repaint(),this.region.done()}flush(e){this.pending&&=(this.region.commit(`${P(this.pending,e<this.pending.depth,!this.tty)}\n`),this.hasCommitted=!0,void 0)}final(e,t,n=!1){if(!this.tty){this.region.commit(`${N({depth:e,body:t,log:n})}\n`),this.hasCommitted=!0;return}this.flush(e),this.pending={depth:e,body:t,log:n},this.tty&&this.repaint()}repaint(){let e=[],t=[];if(this.pending){let n=P(this.pending,!1);e.push(n),t.push(n)}let n=this.timer?f.bold(f.cyan(C[this.frame%C.length])):w(`running`);for(let[r,i]of this.active){let a=`${j(i.depth??0)} ${O(n,i.name,r,null,i.engine,!0)}`;(e.length||this.hasCommitted)&&e.push(F(i.depth??0)),e.push(a),t.push(a);let o=this.previews.get(r);o&&e.push(`${M(i.depth??0)} ${f.dim(o)}`)}for(let r of this.activeGates.values()){let i=`${j(r.depth)} ${A(r.cmd,n,Date.now()-r.startedAt)}`;(e.length||this.hasCommitted)&&e.push(F(r.depth)),e.push(i),t.push(i)}let r=(s(this.stream)??1/0)-1,i=e.length<=r?e:t;if(i.length>r){let e=Math.max(0,r-1);i=[f.dim(`… +${i.length-e} more running`),...i.slice(-e)]}this.region.set(i)}refreshPreviews(e){try{let i=this.tails.get(e),a;if(!i){let o=y.join(t(b.cwd(),e),`log.jsonl`),s=x.existsSync(o)?x.statSync(o).size:0;a=r(b.cwd(),e,1)[0],i=n(o,s),this.tails.set(e,i)}for(let e of i())try{a=JSON.parse(e)}catch{a={message:e}}let o=a?.message?.replace(/\s+/g,` `).trim();if(!o)return;let s=(g(this.stream)??120)-8;this.previews.set(e,o.length>s?`${o.slice(0,s-1)}…`:o)}catch{}}idle(){!this.active.size&&!this.activeGates.size&&this.spin(!1)}spin(e){e&&!this.timer?this.timer=setInterval(()=>{this.frame++,this.repaint()},120).unref():!e&&this.timer&&(clearInterval(this.timer),this.timer=void 0)}};function L(e,t){if(t){l(e);return}let n=!b.stdout.isTTY,r=n?``:`${f.dim(`└─`)} `;b.stdout.write(`${r}${w(`completed`,n)} run ${f.cyan(e.runId)} completed ${f.dim(`(${e.taskCount} tasks)`)}\n`),b.stdout.write(`\n${c(e.result)}\n`),z(e.tokens)}async function R(e,t){let{runId:n}=e.record,r=!!(t.stream&&t.json);!t.json&&e.record.status===`running`&&b.stderr.write(`${f.dim(`[flow]`)} Run ${f.cyan(n)} started and is waiting to finish. Press Ctrl-C to detach. It keeps running.\n\n`);let i=t.json?()=>{}:h(),a=()=>{i(),r||(b.stderr.write(`\n${f.dim(`[flow] Detached. The run is still going.`)}\n`),b.stderr.write(`\n${p([`Result: coder flow result ${n}`,`Stop it: coder flow stop ${n}`],f)}\n`)),b.exit(130)};b.on(`SIGINT`,a);let o=new I;for await(let n of e.events)r?b.stdout.write(`${JSON.stringify(n)}\n`):t.json||o.emit(n);o.done(),i(),b.off(`SIGINT`,a);let s=e.final();r&&(b.stdout.write(`${JSON.stringify(B(s))}\n`),b.exit(s.status===`completed`?0:1)),s.status===`completed`&&(L({runId:n,name:s.name,status:`completed`,result:s.result,tokens:s.ledger,taskCount:s.taskCount},t.json),b.exit(0)),s.status===`stopped`&&(t.json?l({runId:n,name:s.name,status:`stopped`,taskCount:s.taskCount}):b.stdout.write(`\n${f.dim(`[flow] Run ${n} stopped.`)}\n\n${p([`Resume: coder flow resume ${n}`],f)}\n`),b.exit(1)),b.stdout.write(`\n${f.red(`error:`)} ${s.error??`unknown error`}\n`),b.stdout.write(`\n${p([`Resume: coder flow resume ${n}`],f)}\n`),b.exit(1)}function z(e){let t=Object.keys(e);if(t.length){b.stdout.write(`\n${f.bold(`Tokens:`)}\n`);for(let n of t)b.stdout.write(`  ${f.dim(m(e[n],n))}\n`)}}function B(e){let{steps:t,events:n,...r}=e;return r}export{I as FlowStepRenderer,S as commandWatch,k as gateLine,A as gateRunningLine,N as paintPlain,R as printFollow,z as printLedger,L as printRunSummary,B as resultJson,w as stepSymbol,D as taskLabel,O as taskLine};

package/dist/watch-DJXu13jK.js

@@ -0,0 +1,9 @@
+import{Zt as e}from"./core-DwsAMCnL.js";import{br as t,jr as n,mr as r,pn as i,ur as a,wr as o,yr as s}from"./prompts-Bj4Fbd_n.js";import{i as c,r as l}from"./cli-BBlH53hA.js";import{p as u,y as d}from"./output-BKeyLbvt.js";import{s as f,t as p,u as m}from"./args-CURX44CA.js";import{a as h,c as g,i as _,l as v,n as y,t as b,u as x}from"./result-D0dpv2O_.js";import S from"node:process";function C(e,t){let n=e.level===`sys`?t.dim(`· ${e.line}`):e.level===`err`?t.light(e.line):e.line;S.stdout.write(`${n}\n`)}async function w(e,t,n){let r=n.trim===void 0?500:n.trim===`none`?1/0:n.trim;if(`attempts`in e.task){let{logEntry:i}=await import(`./log-view-CL3_S0IQ.js`).then(e=>e.r),a=await b.create({cwd:e.task.task.cwd??t,startedAt:e.task.startedAt??e.task.createdAt,trim:r,explicitTrim:n.trim!==void 0,width:d()});for await(let t of e.events){let e=t;if(n.json){S.stdout.write(`${JSON.stringify(e,null,2)}\n`);continue}let r=e.entry??i(e.line);if(!r){C(e,u);continue}let o=a.render({...r,at:r.at??new Date(e.at).toISOString()});o.length&&S.stdout.write(`${o.join(`
+`)}\n`)}let o=await e.final();n.json||_(o,u),S.exit(0)}let o=e.task,s=await b.create({cwd:o.cwd??t,startedAt:Date.parse(o.createdAt??``)||void 0,trim:r,explicitTrim:n.trim!==void 0,width:d()});if(!n.json){let e=[...g(o,{status:o.status}),...i.includes(o.status)?[u.dim(`Watching. Press Ctrl-C to stop.`)]:[],...o.prompt?h(o.prompt,u,{truncate:!1}):[],``];S.stdout.write(`${e.join(`
+`)}\n`)}let c=null,l=null,f=e=>{let t=s.render(e);t.length&&S.stdout.write(`${t.join(`
+`)}\n`)};for await(let t of e.events){let e=t;if(e.kind===`usage`&&e.tokens&&(c=e.tokens),n.json){let t=e.kind===`steer`?1/0:r,n=e.message?{...e,message:x(e.message,t,{plain:!0})}:e;S.stdout.write(`${JSON.stringify(n)}\n`);continue}e.kind!==`usage`&&(l&&=(f(l),null),e.kind===`assistant`?l=e:f(e))}let{status:p,result:m,task:w}=await e.final();if(n.json)S.stdout.write(`${JSON.stringify({taskId:o.id,status:p,result:m},null,2)}\n`);else{let e=p===`completed`?`(no final message)`:`(task ${p})`,n=v(w,{tokens:m?.tokens??c,tokenModel:m?.model,files:m?.touchedFiles?.map(e=>a(o.cwd??t,e)),statusChanged:p!==o.status});n.length&&S.stderr.write(`\n${n.join(`
+`)}\n`);let r=y(m,w.error,e),i=l?String(l.message??``):``;S.stdout.write(`\n${r.trim()?r:i}\n`)}S.exit(p===`completed`?0:1)}const T=c({name:`task watch`,help:{usage:`coder task watch [task-id] [--server [url]]`,summary:`Stream a running task's transcript live (for you/debugging), then print its
+final answer. Replays the last line first so the current step is visible;
+--tail <n> replays the last n lines (--tail all for the whole transcript).
+Blocks until it finishes; exits 0 on success, 1 otherwise. For the answer
+alone, prefer \`coder result\`. Alias: stream.`,flags:[[`--tail <n|all>`,`replay the last n log lines first (default: 1)`],[`--trim <n|none>`,`budget for tool output and thinking (default: 1200 chars, 12 lines)`],l],examples:[[`coder task watch`,`follow the most recent task to completion`]]},options:{...p,tail:m,trim:o(n([t(`none`),r().check(s(),e())],{error:`expected a positive integer or "none"`})),...f},args:1,async run({options:e,args:[t],cwd:n}){let{tasks:r}=await import(`./task-DJ6nruuA.js`).then(e=>e.t);await w(await r.watch(t,{...e,organization:e.workspace}),n,e)}});export{T as commandWatch,C as printLine};

package/dist/wire-nJ7sEi-M.js

@@ -0,0 +1 @@
+import{B as e}from"./prompts-Bj4Fbd_n.js";import t from"node:process";async function n(n,r,i){let a=n.envKey?t.env[n.envKey]:void 0,o=!1;for(let t of e(n.baseUrl,r))try{let e=await fetch(t,{method:`POST`,headers:{"content-type":`application/json`,...a?{Authorization:`Bearer ${a}`}:{}},body:JSON.stringify(i),signal:AbortSignal.timeout(5e3)});if(o=!0,e.status!==404&&e.status!==405&&e.status!==501)return{baseUrl:t.slice(0,-(r.length+1))}}catch{}return{reachable:o}}async function r(e){let t=await n(e,`responses`,{model:e.model,input:[],stream:!1});if(`baseUrl`in t)return{wireApi:`responses`,baseUrl:t.baseUrl};let r=await n(e,`chat/completions`,{model:e.model,messages:[],stream:!1});return`baseUrl`in r?{wireApi:`chat`,baseUrl:r.baseUrl}:t.reachable||r.reachable?{wireApi:`chat`}:null}export{r as t};

package/dist/worker-CHD_OiQS.js

@@ -0,0 +1 @@
+import{Vt as e}from"./prompts-Bj4Fbd_n.js";import{i as t}from"./cli-BBlH53hA.js";import{i as n}from"./output-BKeyLbvt.js";import{c as r}from"./args-CURX44CA.js";const i=t({name:`task worker`,options:{cwd:r},args:1,async run({args:[t],cwd:r}){let{startAgentMailbox:i}=await import(`./exec-Cprez703.js`).then(e=>e.i),{runWorker:a}=await import(`./worker-KfrTK_Dk.js`),o=e(r,t);o||n(`Worker: task ${t} not found.`),await a(r,o,i)}});export{i as commandWorker};

package/dist/worker-KfrTK_Dk.js

@@ -0,0 +1,2 @@
+import{$n as e,Dn as t,J as n,Ot as r,P as i,Q as a,U as o,Vt as s,W as c,X as l,Yn as u,Z as d,an as f,bt as p,cn as m,dn as h,fn as g,g as _,nn as v,or as y,pr as b,r as x,wt as S}from"./prompts-Bj4Fbd_n.js";import{F as C,I as w,M as T,S as E,b as D,h as O,s as k}from"./dispatch-CFZ9Crvg.js";import{t as A}from"./chat-bridge-BmqYsASZ.js";import{i as j}from"./history-C53URBjs.js";import{n as M,t as N}from"./log-view-CL3_S0IQ.js";import{c as P,r as F,t as I}from"./mcp-Dsl3Xdd3.js";import{t as L}from"./wire-nJ7sEi-M.js";import R from"node:path";import z from"node:process";import B from"node:fs";const V={claude:{CLAUDE_CODE_DISABLE_AUTO_MEMORY:`1`},codex:{"features.memories":!1}};function H(e){let t=e.currentPrompt??e.prompt??``;return e.resumeThreadId||!e.pendingRollover?t:_(e.pendingRollover,t)}async function U(n,r,i,a){let o=!!r.pendingRollover;g(n,r.id,{status:`running`,steerEndpoint:null,turnId:null,turnUsage:r.turnUsage??[]});let c=v(n,r.id),l=R.join(c,`log.jsonl`),u=y(l,B.existsSync(l)?B.statSync(l).size:0),d=o?{...r,resumeThreadId:null}:r,f,m=e=>{let i=u().flatMap(e=>{let t=M(e);return t?[t]:[]}),a=i.flatMap(e=>e.message?.startsWith(`Steer accepted live:
+`)?[e.message.slice(p.length)]:[]),o=i.filter(e=>e.kind===`reply`).at(-1)?.message;return t(`worker.record.start`,{taskId:r.id,finalized:!1}),J(n,r,e,{steers:a,lastReply:o})},h;try{h=await a(d,{privateTurn:!1,steerable:!o,onResult:e=>{!f&&e.status===0&&!e.error&&(f=m(e))}})}catch(e){throw o&&g(n,r.id,{threadId:r.threadId,resumeThreadId:r.threadId,steerEndpoint:null}),e}h.status!==0&&o&&(h={...h,threadId:r.threadId??null});let _=[...r.previousThreadIds??[]];h.status===0&&r.threadId&&h.threadId&&r.threadId!==h.threadId&&!_.includes(r.threadId)&&_.push(r.threadId);let C=h.status===0&&!!h.threadId&&Number(h.contextTokens)>i,w=new Date().toISOString();t(`worker.engine.closed`,{taskId:r.id}),f??=m(h),b(R.join(c,`result.json`),JSON.parse(e(h))),t(`worker.record.start`,{taskId:r.id,finalized:!0});let T=g(n,r.id,{turnUsage:[...s(n,r.id)?.turnUsage??[],{at:f,tokens:h.tokens,model:h.model}],status:h.status===0?`completed`:`failed`,completedAt:w,rollingOver:C,...C?{pid:z.pid}:{},threadId:h.threadId,resumeThreadId:h.threadId,previousThreadIds:_,...h.status===0?{pendingRollover:void 0}:{},steerEndpoint:null,turnId:h.turnId??null});if(t(`worker.result.recorded`,{taskId:r.id,finalized:!0}),o&&h.status===0&&S(n,r.id,{kind:`status`,message:`Context rolled over: summary plus the last ${r.pendingRollover.exchanges} exchanges`}),!C)return h;try{let t=await j(T),i=await a({...T,currentPrompt:x,outputSchema:void 0},{privateTurn:!0});if(!s(n,r.id))return h;if(i.tokens){let t=new Date(Math.max(Date.now(),Date.parse(f)+1)).toISOString();g(n,r.id,{turnUsage:[...s(n,r.id)?.turnUsage??[],{at:t,tokens:i.tokens,model:i.model}]}),h={...h,tokens:N(h.tokens??null,i.tokens)},b(R.join(c,`result.json`),JSON.parse(e(h)))}if(i.status!==0||!i.finalMessage?.trim())throw Error(i.error?.message??`Summary turn returned no summary`);if(Buffer.byteLength(i.finalMessage)>64e3)throw Error(`Summary exceeded the context budget`);if(s(n,r.id)?.status===`cancelled`)return h;g(n,r.id,{pendingRollover:{summary:i.finalMessage,recent:t.text,exchanges:t.exchanges}})}catch(e){S(n,r.id,{kind:`warning`,message:`Context rollover deferred: ${e instanceof Error?e.message:String(e)}`})}finally{s(n,r.id)&&g(n,r.id,{rollingOver:!1})}return h}function W(e,t){let n=0;return()=>{Date.now()-n>=1e4&&(n=Date.now(),m(e,t))}}function G(t,n,{echo:r}){let i=i=>{let a=JSON.parse(e(typeof i==`string`?{message:i}:i));S(t,n,a),r&&a.message&&z.stderr.write(`[coder] ${a.message}\n`)};for(let e of Object.keys(u()))z.env[e]!==void 0&&i({kind:`warning`,message:`${e} is temporarily unavailable; skipped for this task.`});return i}async function K(e,t,{echo:r,env:s={},privateTurn:u=!1,steerable:p=!u,onResult:m}){let h=f(e),_=v(e,t.id),y=c(e),b=G(e,t.id,{echo:r}),x=i[t.permissions??`auto`]??i.auto,E=x.approvalPolicy===`never`?void 0:O({workspaceRoot:h,taskDir:_,mode:x.approvalMode,escalationTimeoutMs:y.approvals.escalationTimeoutMs,allowedNetworkHosts:y.approvals.allowedNetworkHosts,onEvent:e=>b(e)}),D=t.model?y.models?.[t.model]:void 0,j=D&&o(D)?D:void 0;if(j&&!j.wireApi&&t.model){let r=await L(j);r&&(j={...j,...r},y.models[t.model]=j,n(e,t.model,r),S(e,t.id,{kind:`info`,message:`detected wire api for ${t.model}: ${r.wireApi} @ ${j.baseUrl}`}))}if(j?.envKey&&!z.env[j.envKey])throw Error(`Missing environment variable: \`${j.envKey}\`.`);let M=j?await A(j,j.wireApi??`chat`):null,N=a(y,t.model,M??void 0),I=w(e,t);try{return await T(e,{availabilityChecked:z.env.CODER_ENGINE_CHECKED===`1`,prompt:H(t),developerInstructions:t.systemPrompt,outputSchema:t.outputSchema,model:N?.model??l(t.model),modelProvider:N?.modelProvider??null,configOverrides:{...N?.configOverrides,...I||Object.keys(s).length?{"shell_environment_policy.set":{...s,...I?{[C]:I}:{}}}:{},...t.agentId?V.codex:{}},effort:t.effort,sandbox:x.sandbox,approvalPolicy:x.approvalPolicy,networkAccess:d(t.permissions??`auto`,y.engines.codex?.network),approvalsReviewer:x.approvalMode===`auto`?`auto_review`:null,mcpServers:F(e,t.id,P(t,_,k(t.mcp,z.env,void 0,{onWarning:e=>b({kind:`warning`,message:e})}))),nativeMcp:t.nativeMcp??!1,writableRoots:[...x.sandbox===`read-only`?[]:t.addDirs??[],...I?[I]:[]],onApprovalRequest:E,onHeartbeat:W(e,t.id),onResult:m,resumeThreadId:t.resumeThreadId??null,onControlReady:p?(n,r,i)=>{g(e,t.id,{status:`running`,steerEndpoint:n,threadId:r,turnId:i})}:void 0,onProgress:n=>{if(u||(b(n),!p))return;let r=typeof n==`object`?n.threadId:null,i=typeof n==`object`?n.turnId:null;(r||i)&&g(e,t.id,{status:`running`,...r?{threadId:r}:{},...i?{turnId:i}:{}})}})}finally{g(e,t.id,{steerEndpoint:null}),await M?.close()}}async function q(e,t,{echo:n,env:r={},privateTurn:a=!1,steerable:o=!a,onResult:s}){let l=v(e,t.id),u=c(e),d=G(e,t.id,{echo:n}),f=i[t.permissions??`auto`]??i.auto,p=w(e,t);try{return await E(e,{env:{...r,...p?{[C]:p}:{},...t.agentId?V.claude:{}},prompt:H(t),systemPrompt:t.systemPrompt,excludeDynamicSections:t.conversation,settingSources:t.agentId&&t.source&&![`cli`,`dashboard`,`schedule`].includes(t.source)?`project,local`:void 0,outputSchema:t.outputSchema,model:t.model,effort:t.effort,permissions:t.permissions,approvalTaskId:f.approvalMode===`auto`?t.id:null,allowedNetworkHosts:u.approvals.allowedNetworkHosts,additionalDirectories:t.addDirs,...p?{writableDirectories:[p]}:{},mcpServers:P(t,l,k(t.mcp,z.env,void 0,{onWarning:e=>d({kind:`warning`,message:e})})),nativeMcp:t.nativeMcp??!1,promptCacheTtl:t.conversation&&(r.ANTHROPIC_API_KEY||z.env.ANTHROPIC_API_KEY)?`1h`:void 0,taskRoot:l,resumeSessionId:t.resumeThreadId??null,onHeartbeat:W(e,t.id),onResult:s,onSteerReady:o?n=>{g(e,t.id,{status:`running`,steerEndpoint:n})}:void 0,onProgress:n=>{a||(d(n),o&&n.threadId&&g(e,t.id,{status:`running`,threadId:n.threadId}))}})}finally{g(e,t.id,{steerEndpoint:null})}}function J(n,r,i,a={}){let{steers:o=[],lastReply:s}=a,c=r.turnUsage?.at(-1)?.at,l=v(n,r.id);b(R.join(l,`result.json`),JSON.parse(e(i)));let u={at:new Date(Math.max(Date.now(),c?Date.parse(c)+1:0)).toISOString(),prompt:r.currentPrompt??r.prompt??null,...o.length?{steers:o}:{},...s?{lastReply:s}:{},...i};return B.appendFileSync(R.join(l,`results.jsonl`),`${e(u)}\n`,`utf8`),t(`worker.result.recorded`,{taskId:r.id,finalized:!1}),z.connected&&z.send?.(`result`),u.at}function Y(e){return async(e,t,n)=>{let r=await I(k(t.mcp,z.env,void 0,{onWarning:()=>{}}));try{let i=t.engine===`claude`?q:K;return await U(e,t,t.conversation?c(e).conversationCompactTokens:1/0,(t,a)=>i(e,t,{...n,...a,env:r.env}))}finally{await r.close()}}}async function X(e,t){for(;;){let n=await h(e,t,()=>{let n=s(e,t);if(!n)return[];let i=n.status===`failed`||n.status===`cancelled`?[]:r(e,t);return i.length||(g(e,t,{steerClosed:!0,steerEndpoint:null}),z.connected&&z.send?.(`settled`)),i});if(!n.length)return;for(let r of n){let n=g(e,t,{status:`running`,currentPrompt:r,resumeThreadId:s(e,t)?.threadId??null});S(e,t,{message:`Running steered follow-up.`});try{await Y(n)(e,n,{echo:!1})}catch(n){let r=n instanceof Error?n.message:String(n);g(e,t,{status:`failed`,error:r}),S(e,t,{kind:`error`,message:r});return}}}}async function Z(e,t,n){if(t.dispatchId&&!t.resumedAt)try{B.writeFileSync(R.join(v(e,t.id),`start-${t.dispatchId}`),``,{flag:`wx`})}catch(e){if(e.code===`EEXIST`)return;throw e}g(e,t.id,{status:`running`,pid:z.pid,steerClosed:!1});let r=()=>{},i;try{if(r=n(e,t),t.name?.startsWith(`agent:`)){let{startInboxControl:n,applyTaskMessage:r}=await import(`./task-bkoi8_NN.js`).then(e=>e.d);i=n(v(e,t.id),t.name.slice(6),n=>r(e,s(e,t.id)??t,n))}if(t.simulateApproval){let n=await D(v(e,t.id),{onEvent:n=>S(e,t.id,n)});if(S(e,t.id,{message:`simulated approval: ${n}`}),n===`decline`){g(e,t.id,{status:`cancelled`,completedAt:new Date().toISOString(),error:`simulated approval denied`});return}}await Y(t)(e,t,{echo:!1}),await X(e,t.id)}catch(n){let r=n instanceof Error?n.message:String(n);throw g(e,t.id,{status:`failed`,error:r}),S(e,t.id,{kind:`error`,message:r}),n}finally{await h(e,t.id,()=>{s(e,t.id)?.pid===z.pid&&(g(e,t.id,{steerClosed:!0,steerEndpoint:null}),z.connected&&z.send?.(`settled`))}),r(),await i?.close()}}export{Z as runWorker};

package/dist/{workflow-BKxG9OUk.js → workflow-C21qQ4rT.js}

@@ -1 +1 @@
-import{i as e}from"./cli-ZUdhZnuW.js";import t from"node:process";const n=e({name:`server workflow`,globalFlags:{json:!1,cwd:!1},help:{usage:`coder server workflow`,summary:`Print the workflow the github-actions runner dispatches. Save it as .github/workflows/coder-agent.yml in every repo the agent runs on, and set RUNNER=github-actions on the server.`,examples:[[`coder server workflow > .github/workflows/coder-agent.yml`,`add it to a repo`]]},options:{},run:async()=>{let{actionsWorkflow:e}=await import(`./runners-CNhxPjg8.js`).then(e=>e.v);return e()},print:e=>t.stdout.write(e)});export{n as commandServerWorkflow};
+import{i as e}from"./cli-BBlH53hA.js";import t from"node:process";const n=e({name:`server workflow`,globalFlags:{json:!1,cwd:!1},help:{usage:`coder server workflow`,summary:`Print the workflow the github-actions runner dispatches. Save it as .github/workflows/coder-agent.yml in every repo the agent runs on, and set RUNNER=github-actions on the server.`,examples:[[`coder server workflow > .github/workflows/coder-agent.yml`,`add it to a repo`]]},options:{},run:async()=>{let{actionsWorkflow:e}=await import(`./runners-DyLnqHKy.js`).then(e=>e.y);return e()},print:e=>t.stdout.write(e)});export{n as commandServerWorkflow};

package/docs/agents/coder.md

@@ -4,17 +4,17 @@ The built-in agent. On the hosted service it has an install link per platform; s
 
 ## On GitHub
 
-- A pull request opening, updating, or becoming ready runs the [review flow](../review.md) read-only and posts inline comments with a sticky summary. Reruns update the summary and never repeat a finding.
+- A pull request opening, updating, or becoming ready runs the [review flow](../review.md) read-only and posts inline comments with a sticky summary. Reruns update the summary and never repeat a finding, and a new push replaces a review that has not started yet.
 - A review request for the agent does the same.
-- A mention (`@<app>` from a repository owner or member) answers from the diff and the repository, or makes the requested change on a branch and links the pull request.
+- A mention (`@<app>` from a repository owner or member), in the conversation or in a finding's thread, answers from the diff and the repository, or makes the requested change on a branch and links the pull request.
 - An issue opening or edit reads the issue and the repository, then answers, makes the change and links the pull request, or asks one clarifying question.
 - An issue or pull-request comment that says "coder" does the same as a mention.
 
 ## On Slack
 
-- A mention, a direct message, or a message that says "coder" reads the thread and the linked repository, then answers, makes the change and links the pull request, or asks one clarifying question.
-- Slash commands and reactions wake it too.
-- Replies stay in the thread they were asked in, in Slack's style, with short paragraphs and code spans and no headings.
+- A mention, a direct message, or a channel message that says "coder" reads the thread and the linked repository, then answers, makes the change and links the pull request, or asks one clarifying question.
+- Slash commands wake it too.
+- Replies stay in the thread they were asked in.
 - When the workspace has connected GitHub from the [dashboard](../dash.md), it can read and change code there.
 
 ## On Linear
@@ -26,8 +26,8 @@ The built-in agent. On the hosted service it has an install link per platform; s
 |             |                                                                   |
 | ----------- | ----------------------------------------------------------------- |
 | Permissions | `workspace-write`; `read-only` for pull-request reviews           |
-| Tools       | GitHub `write`; Slack and Linear `comment`                        |
+| Tools       | GitHub `write`; Slack and Linear `read`                        |
 | Flows       | `review`                                                          |
-| Engine      | the workspace's default [credential](../self-host.md#credentials) |
+| Engine      | the workspace's [credential](../self-host.md#credentials)         |
 
 The definition is `src/agent/builtin/coder/{agent.json,system.md}` in the package; a custom agent is the same two files in your repo ([Your own agents](index.md#your-own-agents)).

package/docs/agents/index.md

@@ -1,14 +1,14 @@
 # Agents
 
-An agent is a reusable teammate. Its `system.md` holds the standing instructions every task starts from: who it is, what it knows, how it answers. Its definition adds engine, model, effort and permissions defaults, the MCP servers it attaches and the [flows](../flows.md) it may run. Run it from the CLI with `coder task run --agent <id> "…"`, where flags override the defaults, from the [dashboard](../dash.md), or from platform events like a Slack DM or a GitHub pull request.
+An agent is a reusable teammate. Its `system.md` holds the standing instructions every task starts from: who it is, what it knows, how it answers. Its definition adds engine, model, effort and permissions defaults, the MCP servers it attaches and the [flows](../flows.md) it may run. Run it from the CLI with `coder task run --agent <id> "…"`, where flags override the defaults, from the [dashboard](../dash.md), or from platform events like a Slack DM or a GitHub pull request. [Prompt](prompt.md) shows everything its engine gets, per task kind.
 
-Connected to a platform, an agent listens for the events it names. Each event runs as a task with a fresh checkout, the agent's instructions, the event as its request, and only the platform tools the agent declared; the reply goes back to the thread. A bigger task can run a flow instead, with the event as its `args`.
+Connected to a platform, an agent listens for the events it names. Each event runs as a task with the agent's instructions, the event as its request, and the platform tools of every installation of the agent's apps; a GitHub event also checks out its repository, and any task can clone the agent's GitHub repositories. The reply goes back to the thread. Later messages in that conversation, from anyone, steer its task while it runs and resume it once it has finished. A bigger task can run a flow instead, with the event as its `args`.
 
 On each platform an agent is its own app, a GitHub App or a Slack app for example, so it has its own handle and permissions and runs only where it is installed. Agents run on a Coder server: the hosted one, [your own](../self-host.md), or this machine's [dashboard](../dash.md).
 
 ## Connections
 
-A connection gives tasks access to an MCP service, your own account on an integration, or an API key passed as one environment variable, such as `GROQ_API_KEY`. Add one under Settings → Connections or with `coder connection add`; an API key is kept as a credential, so rotating the credential rotates the connection. Tasks started by members receive workspace connections and that member’s own connections, narrowed by the agent’s Connections setting and `coder task run --connections`; outsider events receive none.
+A connection gives tasks access to an MCP service, your own account on an integration, or an API key passed as one environment variable, such as `GROQ_API_KEY`. Add one under Settings → Connections or with `coder connection add`; an API key is kept as a credential, so rotating the credential rotates the connection. Tasks started by members receive workspace connections and that member’s own connections, narrowed by the agent’s Connections setting and `coder task run --connections`; outsider events receive none. A connection's access is Default, which follows the agent's, Read-only or Read-write.
 
 ## Built-in agent
 
@@ -19,7 +19,7 @@ A connection gives tasks access to an MCP service, your own account on an integr
 An agent comes from one of two sources:
 
 - **Dashboard**: made in the agent editor on the [dashboard](../dash.md).
-- **Repository**: `coder agent init` scaffolds one, asking its id, platforms, events and tools. It is a folder `.coder/agents/<id>/` with an `agent.json` and a `system.md`. A folder in `$CODER_HOME/agents/<id>/` (default `~/.coder/agents`) is yours in every repo, and a repo's folder of the same id wins.
+- **Repository**: `coder agent init` scaffolds one, asking its id, platforms, events and access. It is a folder `.coder/agents/<id>/` with an `agent.json` and a `system.md`. A folder in `$CODER_HOME/agents/<id>/` (default `~/.coder/agents`) is yours in every repo, and a repo's folder of the same id wins.
 
 Here is a helper that answers in Slack and on GitHub issues:
 
@@ -30,12 +30,10 @@ Here is a helper that answers in Slack and on GitHub issues:
   "name": "Helper",
   "description": "Answers engineering questions about acme/app.",
   "permissions": "read-only",
+  "access": "read",
   "integrations": {
-    "slack": {
-      "events": { "mention": true, "message": { "match": "^help\\b" } },
-      "tools": "comment"
-    },
-    "github": { "events": ["mention"], "tools": "observe" }
+    "slack": { "events": { "mention": true, "channel": { "match": "^help\\b" } } },
+    "github": { "events": ["mention"] }
   }
 }
 ```
@@ -65,10 +63,10 @@ Only pushes to the agents repo's configured branch are imported. An app created
 | `engine`, `model`, `effort` | As in `coder task run`                                                                                                                                                                                  | Engine defaults                                                                                                                                                                                                            |
 | `permissions`               | `read-only` (default), `workspace-write`, `auto`                                                                                                                                                        | Agent sandbox mode inside the checkout                                                                                                                                                                                     |
 | `integrations.<id>.events`  | Event names from the [integration](#integrations): a list, or a map of event → `true`, a flow name (repo `.coder/flows` or built-in such as `review`), or `{ "flow", "match", "permissions", "actAs" }` | A list or `true` runs the agent, a flow name runs that flow, `match` is a regex the event text must pass, `permissions` overrides the agent's for this event, `"actAs": "requester"` uses the requester's own GitHub token |
-| `integrations.<id>.tools`   | `observe` (default), `comment`, `write`, or tool names from the [integration](#integrations)                                                                                                            | Platform actions the agent uses; also the app's permissions                                                                                                                                                                |
+| `access`                    | `read` (Read-only) or `write` (Read-write, default)                                                                                                            | What it may do on its platforms and connections; also its apps' permissions                                                                                                                                                |
 | `mcp`                       | A map of MCP servers in the `.mcp.json` entry shape, as in [MCP](../mcp.md)                                                                                                                             | Servers every task of the agent attaches                                                                                                                                                                                   |
 
-`permissions` is about the checkout, `tools` is about the platform. An agent can run any [flow](../flows.md#flows-run-by-an-agent), and the tasks it starts never exceed the agent's `permissions`. The server versions imported definitions and activates a new version when their content changes; recreate the app only when `events` or `tools` change.
+`permissions` is about the checkout, `access` is about platforms and connections. An agent can run any [flow](../flows.md#flows-run-by-an-agent), and the tasks it starts never exceed the agent's `permissions`. The server versions imported definitions and activates a new version when their content changes; recreate the app only when `events` or `access` change.
 
 ## Usage
 
@@ -87,11 +85,11 @@ How a repo runs an agent goes under `agents` in its `.coder/config.json` ([Confi
 | ------------------------------------------ | ------------------- | ---------------------------------------------------------- |
 | `engine`, `model`, `effort`, `permissions` | As above            | Override the definition                                    |
 | `connections` | Connection id list | Narrow `agents.<id>.connections`; omit for all granted connections |
-| `integrations.<id>.allowedTools`           | Preset or tool list | Cap the definition's tools; omit to allow all it asks for  |
+| `access`                                   | `read`              | Lower the definition's access to Read-only                 |
 | `integrations.<id>.allowedEvents`          | Event names         | Cap the definition's events; omit to allow all it asks for |
 | `disabled`                                 | `true`              | Disable the agent and keep its other settings              |
 
-Unknown ids, integrations, events, tools, and keys fail validation. Usage is read from the repo the event came from.
+Unknown ids, integrations, events, and keys fail validation. Usage is read from the repo the event came from.
 
 Disable or Enable any agent, built-in ones included, in its Settings › Manage in the dashboard. A disabled agent answers no platform events and starts no tasks in that workspace; its apps, versions, settings and past tasks stay, and other workspaces are unaffected.
 
@@ -100,7 +98,7 @@ Disable or Enable any agent, built-in ones included, in its Settings › Manage
 | Command                                                             | Purpose                                                                |
 | ------------------------------------------------------------------- | ---------------------------------------------------------------------- |
 | `coder agent list [--server [url]]`                                 | List agents, with active versions on a server                          |
-| `coder agent show <id> [--server [url]]`                            | One agent in full: settings, integrations, events, tools               |
+| `coder agent show <id> [--server [url]]`                            | One agent in full: settings, access, integrations, events              |
 | `coder agent init [id]`                                             | Scaffold an agent folder; interactive without flags                    |
 | `coder agent push [id] [--server [url]]`                            | Upload one agent, or all of them, without a source repo                |
 | `coder agent run <agent> <event.json> [--server [url] [--wait]]`    | Run a recorded event through an agent, on a server or offline          |
@@ -113,15 +111,15 @@ Disable or Enable any agent, built-in ones included, in its Settings › Manage
 An integration gives an agent two things:
 
 1. **Chat.** The agent's own app on the platform. Its events start tasks, and the reply goes back to the same thread. Linked workspace members can address an agent, and so can anyone the platform lets write there (on GitHub, write access to the repository); they get the workspace's connections only.
-2. **Platform tools.** Actions beyond replying, through the platform's own MCP server or API. They run outside the agent's sandbox, with a token narrowed to the task, and the token never reaches the agent. The presets add up: `comment` includes `observe`, and `write` includes `comment`.
+2. **Platform tools.** Actions beyond replying, through each platform's MCP server, one per installation of the agent's apps. They run outside the agent's sandbox, with a token for that installation in the agent's access mode, and the token never reaches the agent. Read-only exposes only tools the platform server marks read-only; Read-write exposes all its tools. The prompt lists the servers; the engine loads a server's tools when it needs them. Replies, reactions and history work in both modes.
 
 | Platform        | App                                                                                                                                                                              | Events                                                     | Tools                                                                                                                  |
 | --------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------- |
-| GitHub          | A [GitHub App](https://docs.github.com/en/apps/sharing-github-apps/registering-a-github-app-from-a-manifest) per agent                                                           | `mention`, `pull_request`, `issue`, `comment`              | GitHub's [MCP server](https://github.com/github/github-mcp-server); `observe` runs it read-only                        |
-| Slack           | A [Slack app](https://api.slack.com/reference/manifests) per agent                                                                                                               | `mention`, `message`, `reaction`, `command`                | `slack_api(method, args)` over the [Web API](https://api.slack.com/methods), with writes limited to the event's thread |
-| Linear          | Your [Linear OAuth app](https://linear.app/developers/agents), with webhooks to `<PUBLIC_URL>/hooks/linear?app=<client id>`                                                      | `mention`: an agent session                                | None yet                                                                                                               |
+| GitHub          | A [GitHub App](https://docs.github.com/en/apps/sharing-github-apps/registering-a-github-app-from-a-manifest) per agent                                                           | `mention`, `pull_request`, `issue`, `comment`              | GitHub's [MCP server](https://github.com/github/github-mcp-server); `read` runs it read-only                        |
+| Slack           | A [Slack app](https://api.slack.com/reference/manifests) per agent                                                                                                               | `mention`, `dm`, `channel`, `command`                      | [Slack MCP server](https://github.com/korotovsky/slack-mcp-server), pinned to v1.3.0 with SHA256 verification |
+| Linear          | Your [Linear OAuth app](https://linear.app/developers/agents), with webhooks to `<PUBLIC_URL>/hooks/linear?app=<client id>`                                                      | `mention`: an agent session                                | [Official Linear MCP server](https://linear.app/docs/mcp) at `https://mcp.linear.app/mcp` |
 
-A Slack app's Home tab shows the agent and how to use it, and links to this server's tasks and agents unfurl into a short card.
+On Slack, `dm` takes every message in direct and group DMs with the agent, and `channel` every message in channels it is in, up to Slack's 30,000 events per workspace per app per hour. A Slack app's Home tab shows the agent and how to use it, and links to this server's tasks and agents unfurl into a short card.
 
 When an agent's app needs other events, permissions or settings, publishing the agent brings it up to date. Coder updates a Slack app itself and lists the changes to make on GitHub and Linear, and **Update on <platform>** in the handle's menu on the Platforms tab does the same later.