Affected by GO-2026-5169 and 21 other vulnerabilities

GO-2026-5169: Coder: Unauthenticated SSRF via Azure Instance Identity Endpoint in github.com/coder/coder

GO-2026-5196: Coder: PKCS#7 signature bypass in Azure instance identity allows unauthenticated agent token theft in github.com/coder/coder

GO-2026-5906: Coder: User-admin role can reset owner account password in github.com/coder/coder

GO-2026-5907: Coder's OIDC email_verified type coercion bypass enables account takeover via unverified email linking in github.com/coder/coder

GO-2026-5908: Coder vulnerable to OIDC account takeover via email-based user matching and email_verified bypass in github.com/coder/coder

GO-2026-5909: Coder's workspace app upsert allows cross-workspace agent rebinding via user-controlled app ID in github.com/coder/coder

GO-2026-5911: Coder's unbounded memory allocation in provisioner file upload allows authenticated denial of service in github.com/coder/coder

GO-2026-5913: Coder vulnerable to SSH config injection via unsanitized server-supplied values in `coder config-ssh` in github.com/coder/coder

GO-2026-5915: Coder: Route hijacking through lack of validation of agent-supplied AllowedIPs in tailnet coordinator in github.com/coder/coder

GO-2026-5916: Coder: Zip upload decompression lacks aggregate size limit, enabling denial of service in github.com/coder/coder

GO-2026-5917: Coder's subdomain workspace app routing trusts unauthenticated X-Forwarded-Host header, enabling cross-app data access in github.com/coder/coder

GO-2026-5918: Coder's workspace app CORS origin check can be bypassed via UUID-based subdomain spoofing in github.com/coder/coder

GO-2026-5919: Coder vulnerable to stored HTML injection via workspace agent logs in AgentLogLine component in github.com/coder/coder

GO-2026-5920: Coder's AI Bridge Proxy skips TLS certificate verification in default configuration in github.com/coder/coder

GO-2026-5921: Coder vulnerable to denial of service via unbounded request body in AI Bridge provider endpoints in github.com/coder/coder

GO-2026-5922: Coder: Devcontainer recreate endpoint missing write authorization allows read-only roles to destroy containers in github.com/coder/coder

GO-2026-5923: Coder's workspace agent API insecure redirect handling allowed cross-agent file read and write in github.com/coder/coder

GO-2026-5924: Coder's session token leaked to arbitrary hosts via `coder open app` for external workspace apps in github.com/coder/coder

GO-2026-5925: Suspended Coder users retain access to AI Bridge LLM proxy endpoints in github.com/coder/coder

GO-2026-5926: Coder's sub-agent app registration bypasses template port-sharing policy enforcement in github.com/coder/coder

GO-2026-6265: Coder: Login endpoint user enumeration via timing-defense placeholder in password comparison in github.com/coder/coder

GO-2026-6267: Coder: Stored HTML injection via unescaped ApplicationName and LogoURL appearance settings in github.com/coder/coder

chatprompt

package

v2.33.1 Latest Latest Go to latest Published: May 6, 2026 License: AGPL-3.0 Imports: 16 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/coder/coder

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
func AppendUser(prompt []fantasy.Message, instruction string) []fantasy.Message
func ConvertMessagesWithFiles(ctx context.Context, messages []database.ChatMessage, resolver FileResolver, ...) ([]fantasy.Message, error)
func ExtractFileID(raw json.RawMessage) (uuid.UUID, error)
func ExtractToolCalls(parts []fantasy.MessagePart) []fantasy.ToolCallContent
func InsertSystem(prompt []fantasy.Message, instruction string) []fantasy.Message
func MarshalContent(blocks []fantasy.Content, fileIDs map[int]uuid.UUID) (pqtype.NullRawMessage, error)
func MarshalParts(parts []codersdk.ChatMessagePart) (pqtype.NullRawMessage, error)
func MarshalToolResult(toolCallID, toolName string, result json.RawMessage, isError bool, ...) (pqtype.NullRawMessage, error)
func ParseContent(msg database.ChatMessage) ([]codersdk.ChatMessagePart, error)
func PartFromContent(block fantasy.Content) codersdk.ChatMessagePart
func PartFromContentWithLogger(ctx context.Context, logger slog.Logger, block fantasy.Content) codersdk.ChatMessagePart
func PrependSystem(prompt []fantasy.Message, instruction string) []fantasy.Message
func ToolResultToPart(toolCallID, toolName string, result json.RawMessage, isError bool, ...) codersdk.ChatMessagePart
type FileData
type FileResolver

Constants ¶

View Source

const (
	// ContentVersionV0 is the legacy content format. Parsing uses
	// role-aware heuristics to distinguish fantasy envelope format
	// from SDK parts.
	ContentVersionV0 int16 = 0
	// ContentVersionV1 stores content as []codersdk.ChatMessagePart
	// JSON for all roles.
	ContentVersionV1 int16 = 1

	// CurrentContentVersion is the version used for new inserts.
	CurrentContentVersion = ContentVersionV1
)

Variables ¶

This section is empty.

Functions ¶

func AppendUser ¶

func AppendUser(prompt []fantasy.Message, instruction string) []fantasy.Message

AppendUser appends an instruction as a user message at the end of the prompt.

func ConvertMessagesWithFiles ¶

func ConvertMessagesWithFiles(
	ctx context.Context,
	messages []database.ChatMessage,
	resolver FileResolver,
	logger slog.Logger,
) ([]fantasy.Message, error)

ConvertMessagesWithFiles converts persisted chat messages into LLM prompt messages, resolving user file references via the provided resolver. Missing-data placeholders are emitted only for replayed user uploads; assistant-side and tool-side file metadata without bytes is dropped from later model turns.

func ExtractFileID ¶

func ExtractFileID(raw json.RawMessage) (uuid.UUID, error)

ExtractFileID parses the file_id from a serialized file content block envelope. Returns uuid.Nil and an error when the block is not a file-type block or has no file_id.

func ExtractToolCalls ¶

func ExtractToolCalls(parts []fantasy.MessagePart) []fantasy.ToolCallContent

ExtractToolCalls returns all tool call parts as content blocks.

func InsertSystem ¶

func InsertSystem(prompt []fantasy.Message, instruction string) []fantasy.Message

InsertSystem inserts a system message after the existing system block and before the first non-system message.

func MarshalContent ¶

func MarshalContent(blocks []fantasy.Content, fileIDs map[int]uuid.UUID) (pqtype.NullRawMessage, error)

MarshalContent encodes message content blocks in legacy fantasy envelope format. Retained for backward-compatible test fixtures that create legacy-format DB rows. Production write paths use MarshalParts instead.

func MarshalParts ¶

func MarshalParts(parts []codersdk.ChatMessagePart) (pqtype.NullRawMessage, error)

MarshalParts encodes SDK chat message parts for persistence. NUL characters in string fields are encoded as PUA sentinel pairs (U+E000 U+E001) before marshaling so the resulting JSON never contains \u0000 (rejected by PostgreSQL jsonb). The encoding operates on Go string values, not JSON bytes, so it survives jsonb text normalization.

func MarshalToolResult ¶

func MarshalToolResult(toolCallID, toolName string, result json.RawMessage, isError bool, isMedia bool, providerExecuted bool, providerMetadata fantasy.ProviderMetadata) (pqtype.NullRawMessage, error)

MarshalToolResult encodes a single tool result in the legacy tool-row format. Retained for test fixtures that create legacy-format DB rows. Production write paths use MarshalParts. The stored shape is [{"tool_call_id":…,"tool_name":…,"result":…,"is_error":…,"is_media":…}].

func ParseContent ¶

func ParseContent(msg database.ChatMessage) ([]codersdk.ChatMessagePart, error)

ParseContent decodes persisted chat message content blocks into SDK parts. Dispatches on content version: version 0 (legacy) uses a role-aware heuristic to distinguish fantasy envelope format from SDK parts, version 1 (current) unmarshals SDK-format []ChatMessagePart directly.

func PartFromContent ¶

func PartFromContent(block fantasy.Content) codersdk.ChatMessagePart

PartFromContent converts fantasy content into a SDK chat message part, preserving ProviderMetadata and ProviderExecuted fields.

func PartFromContentWithLogger ¶ added in v2.33.0

func PartFromContentWithLogger(
	ctx context.Context,
	logger slog.Logger,
	block fantasy.Content,
) codersdk.ChatMessagePart

PartFromContentWithLogger is for call sites that can surface malformed attachment metadata immediately instead of dropping it silently.

func PrependSystem ¶

func PrependSystem(prompt []fantasy.Message, instruction string) []fantasy.Message

PrependSystem prepends a system message unless an existing system message already mentions create_workspace guidance.

func ToolResultToPart ¶

func ToolResultToPart(toolCallID, toolName string, result json.RawMessage, isError bool, isMedia bool) codersdk.ChatMessagePart

ToolResultToPart converts a tool call ID, raw result, error flag, and media flag into a ChatMessagePart. This is the minimal conversion used both during streaming and when reading from the database.

Types ¶

type FileData ¶

type FileData struct {
	Name      string
	Data      []byte
	MediaType string
}

FileData holds resolved file content for LLM prompt building.

type FileResolver ¶

type FileResolver func(ctx context.Context, ids []uuid.UUID) (map[uuid.UUID]FileData, error)

FileResolver fetches file content by ID for LLM prompt building.

Source Files ¶

View all Source files

chatprompt.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL