Ethan c275327fb7 feat: audit operational agent settings (#28369) ...

Depends on #28394.

Audit changes to seven operational agent settings through a typed
`chat_operational_settings` resource. Each handler serializes baseline
capture and mutation with a per-setting advisory lock, keeps both
operations in one transaction, and records field-specific diffs.

Effective no-op requests now skip both the database upsert and the
success audit, including absent rows whose effective value is already
the default. The change also retains the allowlisted raw `site_configs`
query, updates generated audit and API surfaces, adds failure and
concurrency coverage, and reuses the existing AuditPage resource-filter
story pattern.

Relates to CODAGT-720.

2026-08-24 11:53:47 +01:00

..

agentapi

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

agentmetrics

…

aibridge

refactor: share the AI Gateway price book contract (#28310)

2026-08-20 14:04:23 -04:00

aibridged

fix: treat a missing serve endpoint as a fatal dial error (#27864)

2026-08-19 13:19:20 +02:00

aibridgedserver

feat: add CTAs to AI budget admin notifications (#28138)

2026-08-20 14:38:33 +01:00

aibridgedtest

fix: remove unbound Client() method from aibridged.Server (#27845)

2026-08-04 16:57:16 +02:00

aiseats

refactor: rename Ai* database identifiers to AI* (AIGOV-369) (#26327)

2026-06-16 09:01:43 +00:00

apidoc

feat: audit operational agent settings (#28369)

2026-08-24 11:53:47 +01:00

apikey

…

appearance

…

audit

feat: audit operational agent settings (#28369)

2026-08-24 11:53:47 +01:00

authlink

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

autobuild

fix: reword autostop reminder to use relative countdown (#26948)

2026-07-01 21:24:42 -05:00

awsidentity

…

azureidentity

test: fix azureidentity Verify test by replacing with recent token (#26720)

2026-06-26 07:24:21 -04:00

boundaryusage

refactor: use sync.WaitGroup.Go in tests (#26671)

2026-06-25 15:41:09 -06:00

cachecompress

…

coderdtest

feat!: enforce organization scope for chat models (#27959)

2026-08-24 11:20:25 +01:00

connectionlog

feat: batch connection logs to avoid DB lock contention (#23727)

2026-04-03 15:47:26 -05:00

cryptokeys

feat: extend agent chat MCP tools for remote UAT evidence loops (#28233)

2026-08-18 19:15:30 +02:00

database

feat: audit operational agent settings (#28369)

2026-08-24 11:53:47 +01:00

devtunnel

…

dynamicparameters

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

entitlements

…

externalauth

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

files

…

gitsshkey

…

healthcheck

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

httpapi

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

httpmw

feat!: enforce organization scope for chat models (#27959)

2026-08-24 11:20:25 +01:00

idpsync

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

jobreaper

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

jwtutils

…

mcp

feat: add Coder Agents chat tools to the MCP toolsdk (#28025)

2026-08-13 18:32:47 +02:00

metricscache

…

notifications

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

oauth2provider

feat: register public clients without a secret (#28046)

2026-08-20 12:49:47 -07:00

oauthpki

…

portsharing

…

pproflabel

feat: add hourly hb_agent_runtime_v1 usage events for Coder Agent runtime (#27312)

2026-07-30 08:37:45 +01:00

prebuilds

fix: make prebuild claiming durable and idempotent (#23108)

2026-04-02 23:51:02 +02:00

prometheusmetrics

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

promoauth

feat: log rate-limited external auth token validation (#26754)

2026-08-10 14:43:16 -05:00

provisionerdserver

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

provisionerkey

…

proxyhealth

…

pubsub

feat: invalidate provisioner daemon sessions on key deletion (#26532)

2026-08-11 11:04:51 -05:00

rbac

feat: add chat model config RBAC resource (#27957)

2026-08-24 09:43:45 +00:00

render

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

runtimeconfig

…

schedule

feat: plumb time_til_autostop_notify template field (#26439)

2026-06-23 17:32:47 -05:00

searchquery

feat: add username and email user search filters (#27922)

2026-08-16 18:18:02 +05:00

taskname

fix(coderd/taskname): parse task name JSON with trailing text (#25005)

2026-05-07 17:10:50 +01:00

telemetry

feat!: scope chat model override settings to organizations (#28442)

2026-08-24 11:20:26 +01:00

templatebuilder

fix(coderd/templatebuilder): prompt for DigitalOcean base variables (#27268)

2026-07-15 14:05:18 -04:00

testdata

chore: remove coder_secret Terraform integration (#25512)

2026-05-21 09:19:29 -06:00

tracing

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

updatecheck

…

usage

feat: add hourly hb_agent_runtime_v1 usage events for Coder Agent runtime (#27312)

2026-07-30 08:37:45 +01:00

userpassword

fix: use a random value for a simulated hash for built-in users (#26205)

2026-06-10 02:18:44 -05:00

util

feat!: scope chat model override settings to organizations (#28442)

2026-08-24 11:20:26 +01:00

webpush

test: use httptest server.Client() to isolate transport (#26409)

2026-06-17 00:22:41 +10:00

workspaceapps

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

workspaceconnwatcher

feat: promote MinimumImplicitMember experiment to GA (#27472)

2026-08-03 15:56:56 -05:00

workspacestats

feat: add workspace agent session count protocol (#28125)

2026-08-21 03:14:55 +03:00

wsbuilder

chore: remove coder_secret Terraform integration (#25512)

2026-05-21 09:19:29 -06:00

wsbuildorchestrator

feat: add workspace restart functionality to API (#25757)

2026-07-07 09:18:30 -07:00

wspubsub

feat: add workspace restart functionality to API (#25757)

2026-07-07 09:18:30 -07:00

x

feat!: scope chat model override settings to organizations (#28442)

2026-08-24 11:20:26 +01:00

activitybump_test.go

…

ai_providers_backfill_test.go

refactor: drop chat_model_configs provider column (#26877)

2026-07-01 15:59:55 +03:00

ai_providers_backfill.go

feat: add custom AI provider icons and instance-based model picker grouping (#27026)

2026-07-06 23:00:09 +01:00

ai_providers_internal_test.go

feat: generate STS external ID for Bedrock role assumption (#26869)

2026-07-01 20:44:15 +00:00

ai_providers_migrate_test.go

feat: add custom AI provider icons and instance-based model picker grouping (#27026)

2026-07-06 23:00:09 +01:00

ai_providers_migrate.go

feat: add custom AI provider icons and instance-based model picker grouping (#27026)

2026-07-06 23:00:09 +01:00

ai_providers_pubsub_test.go

feat: hot-reload aibridged and aibridgeproxyd providers on DB changes (#25673)

2026-05-27 11:58:43 +02:00

ai_providers_test.go

fix: require bedrock model fields for the invoke-model protocol (#27846)

2026-08-04 15:21:23 -04:00

ai_providers.go

feat: add custom AI provider icons and instance-based model picker grouping (#27026)

2026-07-06 23:00:09 +01:00

aibridge_test.go

refactor: route TransportFor by provider name (#25650)

2026-05-25 18:04:12 +02:00

aibridged.go

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

aitasks_disabled_test.go

feat!: hide Coder Tasks behind the enable-ai-tasks flag (#28008)

2026-08-19 14:46:10 -05:00

aitasks_internal_test.go

…

aitasks_test.go

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

aitasks.go

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

apikey_scopes_validation_test.go

…

apikey_test.go

fix: persist session cookie to disk to prevent PWA logout (#23746)

2026-04-01 09:54:59 -04:00

apikey.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

apiroot.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

audit_internal_test.go

fix: improve chat audit log descriptions and diff rendering (#25728)

2026-05-28 18:37:57 +01:00

audit_test.go

feat: add organization picker to MCP server settings pages (#28150)

2026-08-19 19:46:23 +00:00

audit.go

feat: add organization picker to MCP server settings pages (#28150)

2026-08-19 19:46:23 +00:00

authorize_anyorg_test.go

perf(coderd): batch authcheck permissions via rbac.Filter (#27309)

2026-08-06 09:18:46 -04:00

authorize_test.go

perf(coderd): batch authcheck permissions via rbac.Filter (#27309)

2026-08-06 09:18:46 -04:00

authorize.go

perf(coderd): batch authcheck permissions via rbac.Filter (#27309)

2026-08-06 09:18:46 -04:00

boundary_logs_test.go

fix: create agent firewall sessions without requiring agent read access (#26990)

2026-07-07 10:42:01 +00:00

chat_testhooks.go

test(coderd): centralize chat test harness and stabilize flakes (#25171)

2026-05-12 22:13:55 +10:00

client_test.go

…

coderd_internal_test.go

refactor: deprecate AIGatewayRoutingEnabled, remove direct chat routing (#26862)

2026-07-01 20:15:03 +01:00

coderd_test.go

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

coderd.go

feat!: scope chat model override settings to organizations (#28442)

2026-08-24 11:20:26 +01:00

csp_test.go

fix: enforce max body size on CSP violation report endpoint (#27243)

2026-07-14 12:29:38 -07:00

csp.go

fix: bound request body size on JSON API endpoints (#28168)

2026-08-18 12:54:45 -07:00

debug_test.go

…

debug.go

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

deployment_test.go

…

deployment.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

deprecated.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

exp_chats_acl_test.go

refactor: clarify chat model resource names (#27958)

2026-08-24 09:43:45 +00:00

exp_chats_acl.go

feat: notify users when chats are shared (#26914)

2026-07-06 13:15:58 +01:00

exp_chats_chatstate_test.go

refactor: clarify chat model resource names (#27958)

2026-08-24 09:43:45 +00:00

exp_chats_hooks_test.go

refactor: clarify chat model resource names (#27958)

2026-08-24 09:43:45 +00:00

exp_chats_internal_test.go

feat: apply reasoning effort and surface thinking blocks for Google chat models (#28273)

2026-08-20 16:36:57 +02:00

exp_chats_model_acl_test.go

feat!: enforce organization scope for chat models (#27959)

2026-08-24 11:20:25 +01:00

exp_chats_model_acl.go

feat!: enforce organization scope for chat models (#27959)

2026-08-24 11:20:25 +01:00

exp_chats_model_audit_test.go

feat: audit chat model config changes (#28439)

2026-08-24 11:20:26 +01:00

exp_chats_model_config_list_test.go

refactor!: consolidate chat model availability (#28440)

2026-08-24 11:20:26 +01:00

exp_chats_test.go

feat: audit operational agent settings (#28369)

2026-08-24 11:53:47 +01:00

exp_chats.go

feat: audit operational agent settings (#28369)

2026-08-24 11:53:47 +01:00

experiments_test.go

…

experiments.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

export_test.go

refactor: remove legacy live-read and injected-history chat context paths (#26585)

2026-06-22 19:26:34 -06:00

externalauth_test.go

fix: prevent concurrent token refreshes (#26530)

2026-07-15 12:16:25 -08:00

externalauth.go

fix: add distributed protection for external auth refresh (#27479)

2026-08-19 13:00:31 -08:00

files_test.go

fix: reject oversized and invalid zip uploads (#25877)

2026-06-02 10:11:49 -07:00

files.go

fix: bound request body size on JSON API endpoints (#28168)

2026-08-18 12:54:45 -07:00

gitsshkey_test.go

…

gitsshkey.go

feat: encrypt gitsshkeys.private_key at rest via dbcrypt (#25872)

2026-06-02 08:36:01 -06:00

inboxnotifications_internal_test.go

feat: notify users when chats are shared (#26914)

2026-07-06 13:15:58 +01:00

inboxnotifications_test.go

…

inboxnotifications.go

feat: notify users when chats are shared (#26914)

2026-07-06 13:15:58 +01:00

initscript_test.go

…

initscript.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

insights_internal_test.go

…

insights_test.go

…

insights.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

latencycheck.go

…

mcp_acl.go

feat: add group and user ACLs to MCP server configs (#27944)

2026-08-19 19:25:18 +00:00

mcp_http.go

feat: add Coder Agents chat tools to the MCP toolsdk (#28025)

2026-08-13 18:32:47 +02:00

mcp_internal_test.go

feat: add user_oidc auth type for MCP servers (#24793)

2026-05-03 11:31:48 -04:00

mcp_ssrf_internal_test.go

fix(coderd): block SSRF in MCP OAuth2 discovery and client registration (#27989)

2026-08-11 12:02:34 +02:00

mcp_ssrf.go

fix(coderd): block SSRF in MCP OAuth2 discovery and client registration (#27989)

2026-08-11 12:02:34 +02:00

mcp_test.go

refactor: clarify chat model resource names (#27958)

2026-08-24 09:43:45 +00:00

mcp.go

fix: gate MCP user tokens on owner-scoped personal RBAC (#27945)

2026-08-19 19:36:59 +00:00

members_test.go

feat: make service accounts a Premium feature (#24020)

2026-04-07 12:25:32 -06:00

members.go

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

notifications_test.go

…

notifications.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

oauth2_error_compliance_test.go

feat!: add admin-controlled dynamic client registration toggle (#27316)

2026-07-28 16:59:33 -07:00

oauth2_metadata_test.go

…

oauth2_metadata_validation_test.go

feat!: add admin-controlled dynamic client registration toggle (#27316)

2026-07-28 16:59:33 -07:00

oauth2_provider_settings_test.go

feat!: add admin-controlled dynamic client registration toggle (#27316)

2026-07-28 16:59:33 -07:00

oauth2_security_test.go

fix: reject PKCE code_verifier below RFC 7636 length floor (#28003)

2026-08-12 13:36:52 -07:00

oauth2_test.go

feat: add oauth2 scope columns and single-use delete queries (#28007)

2026-08-13 09:58:51 -07:00

oauth2.go

feat!: add admin-controlled dynamic client registration toggle (#27316)

2026-07-28 16:59:33 -07:00

organizations_test.go

…

organizations.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

pagination_test.go

…

pagination.go

…

parameters_test.go

chore: remove coder_secret Terraform integration (#25512)

2026-05-21 09:19:29 -06:00

parameters.go

feat: add coderd_api_websocket_probes_total metric (#25012)

2026-06-03 10:46:07 +01:00

premiumfunnel_test.go

feat: add premium paywall conversion telemetry (#28425)

2026-08-21 10:31:01 -04:00

premiumfunnel.go

feat: add premium paywall conversion telemetry (#28425)

2026-08-21 10:31:01 -04:00

presets_test.go

…

presets.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

provisionerdaemons_test.go

…

provisionerdaemons.go

docs: wrap placeholder syntax in backticks in CLI help and swagger annotations (#27194)

2026-07-14 13:39:58 -04:00

provisionerjobs_internal_test.go

feat: add coderd_api_websocket_probes_total metric (#25012)

2026-06-03 10:46:07 +01:00

provisionerjobs_test.go

feat: add workspace build transition to provisioner job list (#24131)

2026-04-10 09:50:11 -05:00

provisionerjobs.go

docs: wrap placeholder syntax in backticks in CLI help and swagger annotations (#27194)

2026-07-14 13:39:58 -04:00

roles_test.go

…

roles.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

scopes_catalog_api_test.go

…

scopes_catalog.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

swagger_request_interceptor.js

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

tailnet_test.go

test: use typed atomics in test files (#25071)

2026-05-11 08:41:17 -06:00

tailnet.go

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

templatebuilder_compose_test.go

feat: add POST /api/v2/templatebuilder/compose endpoint (#26351)

2026-06-15 11:07:16 -04:00

templatebuilder_handler_test.go

feat: wire up Template Builder session telemetry endpoint (#27124)

2026-07-27 16:10:40 -04:00

templatebuilder_handler.go

chore: add agents_allowed to templates (#27284)

2026-08-06 14:04:23 +10:00

templates_meta_update_internal_test.go

feat: add per-template Coder Agents access control (#27285)

2026-08-06 14:14:37 +10:00

templates_meta_update.go

feat: add per-template Coder Agents access control (#27285)

2026-08-06 14:14:37 +10:00

templates_test.go

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

templates.go

feat: add per-template Coder Agents access control (#27285)

2026-08-06 14:14:37 +10:00

templateversions_test.go

fix: only create workspace agents for start builds (#28276)

2026-08-19 16:16:51 -06:00

templateversions.go

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

updatecheck_test.go

…

updatecheck.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

userauth_internal_test.go

fix!: reject OIDC login when email_verified claim is non-bool or absent (#25713)

2026-06-04 14:37:19 -04:00

userauth_test.go

fix: bound request body size on JSON API endpoints (#28168)

2026-08-18 12:54:45 -07:00

userauth.go

fix(coderd): harden oauth2 redirect validation (#27274)

2026-07-23 11:56:07 -06:00

users_test.go

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

users.go

feat: add username and email user search filters (#27922)

2026-08-16 18:18:02 +05:00

usersecrets_audit_test.go

feat: add enable/disable support for user secrets (#27537)

2026-07-28 09:58:33 -06:00

usersecrets_test.go

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

usersecrets.go

fix: bound request body size on JSON API endpoints (#28168)

2026-08-18 12:54:45 -07:00

usersecretsimport_test.go

fix: bound request body size on JSON API endpoints (#28168)

2026-08-18 12:54:45 -07:00

userskills_test.go

feat: support personal skills in chats (#25366)

2026-05-20 19:50:50 +02:00

userskills.go

fix: bound request body size on JSON API endpoints (#28168)

2026-08-18 12:54:45 -07:00

webpush_internal_test.go

fix(coderd): validate webpush subscription endpoints (#24347)

2026-04-15 11:31:43 +02:00

webpush_test.go

fix: recover web push subscriptions after PWA reinstall (#24720)

2026-04-26 14:49:10 -07:00

webpush.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

workspaceagentportshare_test.go

…

workspaceagentportshare.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

workspaceagents_active_chat_internal_test.go

refactor: drop chat_model_configs provider column (#26877)

2026-07-01 15:59:55 +03:00

workspaceagents_internal_test.go

fix: use backend-selected chat agent for desktop, git, terminal (#26959)

2026-07-14 13:50:25 +01:00

workspaceagents_test.go

feat: add workspace agent session count protocol (#28125)

2026-08-21 03:14:55 +03:00

workspaceagents.go

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

workspaceagentsrpc_internal_test.go

feat: event driven agent connection metric (#24355)

2026-05-11 14:27:40 -05:00

workspaceagentsrpc_test.go

…

workspaceagentsrpc.go

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

workspaceapps_test.go

fix(coderd): reject workspace proxy hostname prefixes (#27544)

2026-07-28 13:20:59 -07:00

workspaceapps.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

workspacebuilds_internal_test.go

perf(coderd): build the workspace build fan-out maps once per batch (#28074)

2026-08-18 11:33:01 -05:00

workspacebuilds_on_success_test.go

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

workspacebuilds_test.go

fix: only create workspace agents for start builds (#28276)

2026-08-19 16:16:51 -06:00

workspacebuilds.go

refactor(coderd): add related-data selection to workspace queries (#28302)

2026-08-20 10:40:31 +02:00

workspaceproxies_test.go

…

workspaceproxies.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

workspaceresourceauth_test.go

fix: soft-delete stale workspace agents on new build (#25207)

2026-05-18 08:33:29 -04:00

workspaceresourceauth.go

fix: verify PKCS7 signature on Azure instance identity tokens (#25286)

2026-05-13 14:14:07 +00:00

workspaces_scoped_test.go

fix: isolate test HTTP clients (#25038)

2026-05-11 11:03:38 +02:00

workspaces_test.go

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

workspaces.go

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

workspaceupdates_test.go

…

workspaceupdates.go

…

wsrelateddata_internal_test.go

refactor(coderd): add related-data selection to workspace queries (#28302)

2026-08-20 10:40:31 +02:00

wsrelateddata.go

refactor(coderd): add related-data selection to workspace queries (#28302)

2026-08-20 10:40:31 +02:00