GeezerVison

Add the management API for chat automations under
/api/experimental/organizations/{organization}/chat-automations
(list, create, get, PATCH, delete). There is no /api/v2 alias.

- Register chat-automations as a user-scoped experiment (ExperimentsKnown,
  ExperimentsUserScoped, and the ruleguard rule). Routes decide it per
  caller through the experiment evaluator and return 404 when it is off,
  including after a runtime rule change without a restart.
- Add --chat-max-automations-per-owner (default 50). Creating one more
  automation than the cap, counted across all organizations, fails with
  409.
- Add chatd CreateAutomation, UpdateAutomation, DeleteAutomation, and
  AutomationNextRuns with per-field validation shared by create and
  PATCH. Only the owner can PATCH; org admins and site owners can list,
  get, and delete. Kind and target mode cannot change.
- Webhook secrets are returned only by create; only their SHA-256 hash
  is stored.
- Add cron.Standard for general five-field specs in an IANA time zone.
- Add queries GetChatAutomationsByOrganizationID,
  CountChatAutomationsByOwnerID, and UpdateChatAutomationByID with
  dbauthz, SDK types, and experimental client methods.

Refs CODAGT-1209, CODAGT-1217

Add a chatAutomationResponse helper for the four handlers that convert a
row with its upcoming runs, and drop a redundant deleted check on model
configs: GetChatModelConfigByID already filters deleted rows.

Signed-off-by: Thomas Kosiewski <[email protected]>

…rectly

Strengthen the chat automation route tests where assertions passed for
the wrong reason or left branches unexercised:

- Compare the stored webhook secret hash with an independent SHA-256 of
  the returned secret instead of only checking the plaintext is absent.
- Create as the site owner, who can read the member's chat and a model
  config in another organization, so the ownership and organization
  checks are reached instead of the lookup denial.
- Assert an automation is not found under another organization's path.
- Assert a prompt change bumps schedule_revision.

The 409 for the per-owner cap no longer repeats wrapped internal errors;
it states the configured limit. Document that restricting both day
fields matches either one, as in standard cron.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

…guard' into tk/codagt-1209-automations-mgmt-routes

chatgpt-codex-connector Bot left a comment

An empty reasoning_effort in PATCH clears the override, so new chats
use the model default again. Before, null was ignored and an empty
string was rejected, so the override could not be removed.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

…dagt-1209-automations-mgmt-routes

codersdk/deployment.go conflicted where main added the chat-board and
chat-stage-metrics experiments next to chat-automations. The resolution
keeps all three in the Experiment constants, DisplayName and
ExperimentsKnown, with main's entries first. Generated files (apidoc,
API schema docs, typesGenerated.ts) were regenerated with make gen
instead of being merged by hand.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

…dagt-1209-automations-mgmt-routes

No conflicts. make gen produced no diff.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

ibetitsmike left a comment

…dagt-1209-automations-mgmt-routes

No conflicts. make gen produced no diff.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

…gRuns

A prompt edit also sets the flag, and it drives the schedule revision
bump that invalidates pending scheduled work, so name it for that.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

ibetitsmike left a comment

…dagt-1209-automations-mgmt-routes

Resolved conflicts:
- coderd/coderd.go: kept this layer's /organizations/{organization}/chat-automations
  route group and main's new /organizations/{organization} group that mounts the
  chat projects routes. Chi matches the static chat-automations segment first,
  so both route groups stay reachable.
- dbauthz_test.go: kept both sides.
- Generated apidoc and API docs were regenerated with make gen.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

ibetitsmike left a comment

…dagt-1209-automations-mgmt-routes

No conflicts. make gen regenerated docs/admin/setup/configuration-reference.md:
main's new configuration reference generator now also lists this layer's
chat max-automations-per-owner option in its format.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

ibetitsmike left a comment

Main's TestExperimentDisplayNames requires an expected display name for
every known experiment. This layer adds chat-automations as the
twentieth, so the expected map now includes it.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

ibetitsmike left a comment

…dagt-1209-automations-mgmt-routes

No conflicts. make gen produced no diff.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

…ations-mgmt-routes

Brings main ff158c0 into this layer. No conflicts.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_