GeezerVison

Delete no longer runs the disable update first, which required update
permission. It deletes the row and then removes every queued message
of the automation; the promotion guard discards any message whose
automation no longer exists, so deleting the row is the cutoff.

Add POST /api/experimental/chat-automations/{automation}/events. The
caller authenticates with the automation's webhook secret, compared in
constant time; unknown ids, other kinds, and wrong secrets get the same
401. After the secret matches, the chat-automations experiment is
checked for the automation owner and the body (at most 256 KiB of JSON)
is read.

chatd's PublishAutomationWebhook sends the saved prompt and a separate,
labeled untrusted event-data part to the target chat as the owner,
always with the queue busy behavior. Its AdmitInTx callback locks the
automation and rechecks enabled, secret version, single-use state,
target, and owner permissions, applies When busy (skip refuses a busy
chat; queue caps automation messages at half the chat queue), consumes
single-use webhooks, and returns the provenance. new_chat targets answer
501 until a follow-up change.

Part of CODAGT-1210 (1 of 2).

…agt-1210-automations-webhooks

…agt-1210-automations-webhooks

- A chat with no enabled model now gets the same 400 as a person's
  message instead of a 500 that senders retry.
- The 429 for a full automation queue share names the share instead of
  repeating the internal error chain.
- The 400 for a body that fails to parse names the parser's cause, such
  as nesting deeper than the parser accepts.
- The event data part starts with a blank line so clients that join
  text parts verbatim do not run it into the prompt.

The Unauthorized case sent a wrong secret and an unknown id twice to
compare their bodies. Compare each case's body with the first inside the
loop instead, which also covers missing secrets and session tokens.

chatgpt-codex-connector Bot left a comment

- Limit webhook event requests per caller across all automation ids, in
  addition to the per-path limiter, so cycling random ids no longer gets
  a fresh bucket per request (new httpmw.RateLimitByEndpointKey).
- Refuse an already-used single-use webhook before SendMessage, so a
  repeated request never reaches the user_prompt_submit hooks. The
  locked recheck in admitAutomation still handles races.
- Report a target chat deleted between the pre-send check and the send
  as ErrAutomationTargetUnavailable instead of an internal error.
- Drop the body @PARAM that declared the event as an object; the body
  can be any JSON value. Regenerated the swagger docs.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

chatgpt-codex-connector Bot left a comment

…tions

- Refuse a webhook request whose secret was rotated before SendMessage,
  so its payload never reaches the user_prompt_submit hooks. The check
  under lock still catches a rotation during the send.
- In the admission callback, read the chat's queued rows first and lock
  this automation together with the queued rows' automations in one
  ascending-id call, the order promotion uses, to avoid deadlocks
  between deliveries to chats that queue each other's rows.
- Count only queued automation rows that promotion would still deliver
  (automation present, enabled, same queue generation) toward the
  automations' queue share, so stale rows no longer refuse deliveries.
- Remove the now unused CountChatQueuedAutomationMessagesByChatID query.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

chatgpt-codex-connector Bot left a comment

- Admission is decided by one checkAdmission function, called on
  unlocked reads before SendMessage and again on the locked rows in the
  admission callback. It covers enabled, webhook kind and secret
  version, single-use consumption, the target, when-busy skip and the
  queue share, so no refusal that the callback can make reaches the
  prompt hooks first.
- A chat is busy, and the automations' share is counted, only from
  queued rows promotion would keep, so a chat whose queue holds only
  stale automation rows counts as idle.
- Register the webhook events route outside the /api/experimental group
  so only its per-caller limiter applies; the group's limiter keys
  unauthenticated callers by path.
- Document the event body as an unconstrained JSON schema.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

chatgpt-codex-connector Bot left a comment

The events section now says that the route sits outside the
/api/experimental group with a fixed-key limiter, that the admission
checks run before the send so refused events never reach hooks, that
the callback locks the automation together with the chat's queued
automations in one call, and that only promotable queued rows count
toward busy and the queue share.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

…ble-rotate' into HEAD

…tk/codagt-1210-automations-webhooks

coderd/x/chatd/chatd.go conflicted in the Config struct, where main
added TracerProvider next to the automation Authorizer field. Both
fields are kept. Webhook publishing goes through Server.SendMessage,
so it picks up main's chat_turn span and queue-wait recording without
further changes. make gen produced no diff.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

…tk/codagt-1210-automations-webhooks

No conflicts. make gen produced no diff.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

ibetitsmike left a comment

…tk/codagt-1210-automations-webhooks

No conflicts. make gen produced no diff.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

ibetitsmike left a comment

…tk/codagt-1210-automations-webhooks

Resolved conflicts in coderd/apidoc/docs.go coderd/apidoc/swagger.json coderd/database/dbauthz/dbauthz_test.go : hand-written files keep both sides,
generated files come from make gen. make gen regenerated coderd/apidoc/docs.go coderd/apidoc/swagger.json

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

ibetitsmike left a comment

…tk/codagt-1210-automations-webhooks

No conflicts. make gen produced no diff.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

…tk/codagt-1210-automations-webhooks

No conflicts. make gen produced no diff.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

…tk/codagt-1210-automations-webhooks

No conflicts. make gen produced no diff.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

…automations-webhooks

Brings main ff158c0 into this layer. No conflicts.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_