fix: add zstd check for authentication tarball extraction

registry/coder-labs/modules/codex/README.md

@@ -13,7 +13,7 @@ Run Codex CLI in your workspace to access OpenAI's models through the Codex inte
 ```tf
 module "codex" {
   source         = "registry.coder.com/coder-labs/codex/coder"
-  version        = "2.1.1"
+  version        = "2.1.0"
   agent_id       = coder_agent.example.id
   openai_api_key = var.openai_api_key
   folder         = "/home/coder/project"
@@ -33,7 +33,7 @@ module "codex" {
 module "codex" {
   count          = data.coder_workspace.me.start_count
   source         = "registry.coder.com/coder-labs/codex/coder"
-  version        = "2.1.1"
+  version        = "2.1.0"
   agent_id       = coder_agent.example.id
   openai_api_key = "..."
   folder         = "/home/coder/project"
@@ -60,7 +60,7 @@ module "coder-login" {
 
 module "codex" {
   source         = "registry.coder.com/coder-labs/codex/coder"
-  version        = "2.1.1"
+  version        = "2.1.0"
   agent_id       = coder_agent.example.id
   openai_api_key = "..."
   ai_prompt      = data.coder_parameter.ai_prompt.value
@@ -106,7 +106,7 @@ For custom Codex configuration, use `base_config_toml` and/or `additional_mcp_se
 ```tf
 module "codex" {
   source  = "registry.coder.com/coder-labs/codex/coder"
-  version = "2.1.1"
+  version = "2.1.0"
   # ... other variables ...
 
   # Override default configuration

registry/coder-labs/modules/codex/main.tf

@@ -131,7 +131,6 @@ module "agentapi" {
   version = "1.2.0"
 
   agent_id             = var.agent_id
-  folder               = var.folder
   web_app_slug         = local.app_slug
   web_app_order        = var.order
   web_app_group        = var.group

registry/coder/modules/claude-code/README.md

@@ -13,7 +13,7 @@ Run the [Claude Code](https://docs.anthropic.com/en/docs/agents-and-tools/claude
 ```tf
 module "claude-code" {
   source         = "registry.coder.com/coder/claude-code/coder"
-  version        = "3.1.1"
+  version        = "3.1.0"
   agent_id       = coder_agent.example.id
   workdir        = "/home/coder/project"
   claude_api_key = "xxxx-xxxxx-xxxx"
@@ -49,7 +49,7 @@ data "coder_parameter" "ai_prompt" {
 
 module "claude-code" {
   source   = "registry.coder.com/coder/claude-code/coder"
-  version  = "3.1.1"
+  version  = "3.1.0"
   agent_id = coder_agent.example.id
   workdir  = "/home/coder/project"
 
@@ -85,7 +85,7 @@ Run and configure Claude Code as a standalone CLI in your workspace.
 ```tf
 module "claude-code" {
   source              = "registry.coder.com/coder/claude-code/coder"
-  version             = "3.1.1"
+  version             = "3.1.0"
   agent_id            = coder_agent.example.id
   workdir             = "/home/coder"
   install_claude_code = true
@@ -108,168 +108,13 @@ variable "claude_code_oauth_token" {
 
 module "claude-code" {
   source                  = "registry.coder.com/coder/claude-code/coder"
-  version                 = "3.1.1"
+  version                 = "3.0.3"
   agent_id                = coder_agent.example.id
   workdir                 = "/home/coder/project"
   claude_code_oauth_token = var.claude_code_oauth_token
 }
 ```
 
-### Usage with AWS Bedrock
-
-#### Prerequisites
-
-AWS account with Bedrock access, Claude models enabled in Bedrock console, appropriate IAM permissions.
-
-Configure Claude Code to use AWS Bedrock for accessing Claude models through your AWS infrastructure.
-
-```tf
-resource "coder_env" "bedrock_use" {
-  agent_id = coder_agent.example.id
-  name     = "CLAUDE_CODE_USE_BEDROCK"
-  value    = "1"
-}
-
-resource "coder_env" "aws_region" {
-  agent_id = coder_agent.example.id
-  name     = "AWS_REGION"
-  value    = "us-east-1" # Choose your preferred region
-}
-
-# Option 1: Using AWS credentials
-
-variable "aws_access_key_id" {
-  type        = string
-  description = "Your AWS access key ID. Create this in the AWS IAM console under 'Security credentials'."
-  sensitive   = true
-  value       = "xxxx-xxx-xxxx"
-}
-
-variable "aws_secret_access_key" {
-  type        = string
-  description = "Your AWS secret access key. This is shown once when you create an access key in the AWS IAM console."
-  sensitive   = true
-  value       = "xxxx-xxx-xxxx"
-}
-
-resource "coder_env" "aws_access_key_id" {
-  agent_id = coder_agent.example.id
-  name     = "AWS_ACCESS_KEY_ID"
-  value    = var.aws_access_key_id
-}
-
-resource "coder_env" "aws_secret_access_key" {
-  agent_id = coder_agent.example.id
-  name     = "AWS_SECRET_ACCESS_KEY"
-  value    = var.aws_secret_access_key
-}
-
-# Option 2: Using Bedrock API key (simpler)
-
-variable "aws_bearer_token_bedrock" {
-  type        = string
-  description = "Your AWS Bedrock bearer token. This provides access to Bedrock without needing separate access key and secret key."
-  sensitive   = true
-  value       = "xxxx-xxx-xxxx"
-}
-
-resource "coder_env" "bedrock_api_key" {
-  agent_id = coder_agent.example.id
-  name     = "AWS_BEARER_TOKEN_BEDROCK"
-  value    = var.aws_bearer_token_bedrock
-}
-
-module "claude-code" {
-  source   = "registry.coder.com/coder/claude-code/coder"
-  version  = "3.1.1"
-  agent_id = coder_agent.example.id
-  workdir  = "/home/coder/project"
-  model    = "global.anthropic.claude-sonnet-4-5-20250929-v1:0"
-}
-```
-
-> [!NOTE]
-> For additional Bedrock configuration options (model selection, token limits, region overrides, etc.), see the [Claude Code Bedrock documentation](https://docs.claude.com/en/docs/claude-code/amazon-bedrock).
-
-### Usage with Google Vertex AI
-
-#### Prerequisites
-
-GCP project with Vertex AI API enabled, Claude models enabled through Model Garden, service account with Vertex AI permissions, appropriate IAM permissions (Vertex AI User role).
-
-Configure Claude Code to use Google Vertex AI for accessing Claude models through Google Cloud Platform.
-
-```tf
-variable "vertex_sa_json" {
-  type        = string
-  description = "The complete JSON content of your Google Cloud service account key file. Create a service account in the GCP Console under 'IAM & Admin > Service Accounts', then create and download a JSON key. Copy the entire JSON content into this variable."
-  sensitive   = true
-}
-
-resource "coder_env" "vertex_use" {
-  agent_id = coder_agent.example.id
-  name     = "CLAUDE_CODE_USE_VERTEX"
-  value    = "1"
-}
-
-resource "coder_env" "vertex_project_id" {
-  agent_id = coder_agent.example.id
-  name     = "ANTHROPIC_VERTEX_PROJECT_ID"
-  value    = "your-gcp-project-id"
-}
-
-resource "coder_env" "cloud_ml_region" {
-  agent_id = coder_agent.example.id
-  name     = "CLOUD_ML_REGION"
-  value    = "global"
-}
-
-resource "coder_env" "vertex_sa_json" {
-  agent_id = coder_agent.example.id
-  name     = "VERTEX_SA_JSON"
-  value    = var.vertex_sa_json
-}
-
-resource "coder_env" "google_application_credentials" {
-  agent_id = coder_agent.example.id
-  name     = "GOOGLE_APPLICATION_CREDENTIALS"
-  value    = "/tmp/gcp-sa.json"
-}
-
-module "claude-code" {
-  source   = "registry.coder.com/coder/claude-code/coder"
-  version  = "3.1.1"
-  agent_id = coder_agent.example.id
-  workdir  = "/home/coder/project"
-  model    = "claude-sonnet-4@20250514"
-
-  pre_install_script = <<-EOT
-    #!/bin/bash
-    # Write the service account JSON to a file
-    echo "$VERTEX_SA_JSON" > /tmp/gcp-sa.json
-
-    # Install prerequisite packages
-    sudo apt-get update
-    sudo apt-get install -y apt-transport-https ca-certificates gnupg curl
-
-    # Add Google Cloud public key
-    curl https://packages.cloud.google.com/apt/doc/apt-key.gpg | sudo gpg --dearmor -o /usr/share/keyrings/cloud.google.gpg
-
-    # Add Google Cloud SDK repo to apt sources
-    echo "deb [signed-by=/usr/share/keyrings/cloud.google.gpg] https://packages.cloud.google.com/apt cloud-sdk main" | sudo tee /etc/apt/sources.list.d/google-cloud-sdk.list
-
-    # Update and install the Google Cloud SDK
-    sudo apt-get update && sudo apt-get install -y google-cloud-cli
-
-    # Authenticate gcloud with the service account
-    gcloud auth activate-service-account --key-file=/tmp/gcp-sa.json
-  EOT
-}
-```
-
-> [!NOTE]
-> For additional Vertex AI configuration options (model selection, token limits, region overrides, etc.), see the [Claude Code Vertex AI documentation](https://docs.claude.com/en/docs/claude-code/google-vertex-ai).
-
 ## Troubleshooting
 
 If you encounter any issues, check the log files in the `~/.claude-module` directory within your workspace for detailed information.

registry/coder/modules/git-clone/README.md

@@ -14,7 +14,7 @@ This module allows you to automatically clone a repository by URL and skip if it
 module "git-clone" {
   count    = data.coder_workspace.me.start_count
   source   = "registry.coder.com/coder/git-clone/coder"
-  version  = "1.2.0"
+  version  = "1.1.2"
   agent_id = coder_agent.example.id
   url      = "https://github.com/coder/coder"
 }
@@ -28,7 +28,7 @@ module "git-clone" {
 module "git-clone" {
   count    = data.coder_workspace.me.start_count
   source   = "registry.coder.com/coder/git-clone/coder"
-  version  = "1.2.0"
+  version  = "1.1.2"
   agent_id = coder_agent.example.id
   url      = "https://github.com/coder/coder"
   base_dir = "~/projects/coder"
@@ -43,7 +43,7 @@ To use with [Git Authentication](https://coder.com/docs/v2/latest/admin/git-prov
 module "git-clone" {
   count    = data.coder_workspace.me.start_count
   source   = "registry.coder.com/coder/git-clone/coder"
-  version  = "1.2.0"
+  version  = "1.1.2"
   agent_id = coder_agent.example.id
   url      = "https://github.com/coder/coder"
 }
@@ -69,7 +69,7 @@ data "coder_parameter" "git_repo" {
 module "git_clone" {
   count    = data.coder_workspace.me.start_count
   source   = "registry.coder.com/coder/git-clone/coder"
-  version  = "1.2.0"
+  version  = "1.1.2"
   agent_id = coder_agent.example.id
   url      = data.coder_parameter.git_repo.value
 }
@@ -103,7 +103,7 @@ Configuring `git-clone` for a self-hosted GitHub Enterprise Server running at `g
 module "git-clone" {
   count    = data.coder_workspace.me.start_count
   source   = "registry.coder.com/coder/git-clone/coder"
-  version  = "1.2.0"
+  version  = "1.1.2"
   agent_id = coder_agent.example.id
   url      = "https://github.example.com/coder/coder/tree/feat/example"
   git_providers = {
@@ -122,7 +122,7 @@ To GitLab clone with a specific branch like `feat/example`
 module "git-clone" {
   count    = data.coder_workspace.me.start_count
   source   = "registry.coder.com/coder/git-clone/coder"
-  version  = "1.2.0"
+  version  = "1.1.2"
   agent_id = coder_agent.example.id
   url      = "https://gitlab.com/coder/coder/-/tree/feat/example"
 }
@@ -134,7 +134,7 @@ Configuring `git-clone` for a self-hosted GitLab running at `gitlab.example.com`
 module "git-clone" {
   count    = data.coder_workspace.me.start_count
   source   = "registry.coder.com/coder/git-clone/coder"
-  version  = "1.2.0"
+  version  = "1.1.2"
   agent_id = coder_agent.example.id
   url      = "https://gitlab.example.com/coder/coder/-/tree/feat/example"
   git_providers = {
@@ -155,7 +155,7 @@ For example, to clone the `feat/example` branch:
 module "git-clone" {
   count       = data.coder_workspace.me.start_count
   source      = "registry.coder.com/coder/git-clone/coder"
-  version     = "1.2.0"
+  version     = "1.1.2"
   agent_id    = coder_agent.example.id
   url         = "https://github.com/coder/coder"
   branch_name = "feat/example"
@@ -173,7 +173,7 @@ For example, this will clone into the `~/projects/coder/coder-dev` folder:
 module "git-clone" {
   count       = data.coder_workspace.me.start_count
   source      = "registry.coder.com/coder/git-clone/coder"
-  version     = "1.2.0"
+  version     = "1.1.2"
   agent_id    = coder_agent.example.id
   url         = "https://github.com/coder/coder"
   folder_name = "coder-dev"
@@ -192,32 +192,9 @@ If not defined, the default, `0`, performs a full clone.
 module "git-clone" {
   count    = data.coder_workspace.me.start_count
   source   = "registry.coder.com/modules/git-clone/coder"
-  version  = "1.2.0"
+  version  = "1.1.0"
   agent_id = coder_agent.example.id
   url      = "https://github.com/coder/coder"
   depth    = 1
 }
 ```
-
-## Post-clone script
-
-Run a custom script after cloning the repository by setting the `post_clone_script` variable.
-This is useful for running initialization tasks like installing dependencies or setting up the environment.
-
-```tf
-module "git-clone" {
-  count             = data.coder_workspace.me.start_count
-  source            = "registry.coder.com/coder/git-clone/coder"
-  version           = "1.2.0"
-  agent_id          = coder_agent.example.id
-  url               = "https://github.com/coder/coder"
-  post_clone_script = <<-EOT
-    #!/bin/bash
-    echo "Repository cloned successfully!"
-    # Install dependencies
-    npm install
-    # Run any other initialization tasks
-    make setup
-  EOT
-}
-```

registry/coder/modules/git-clone/main.test.ts

@@ -30,12 +30,11 @@ describe("git-clone", async () => {
       url: "fake-url",
     });
     const output = await executeScriptInContainer(state, "alpine/git");
+    expect(output.exitCode).toBe(128);
     expect(output.stdout).toEqual([
       "Creating directory ~/fake-url...",
       "Cloning fake-url to ~/fake-url...",
     ]);
-    expect(output.stderr.join(" ")).toContain("fatal");
-    expect(output.stderr.join(" ")).toContain("fake-url");
   });
 
   it("repo_dir should match repo name for https", async () => {
@@ -245,20 +244,4 @@ describe("git-clone", async () => {
       "Cloning https://github.com/michaelbrewer/repo-tests.log to ~/repo-tests.log on branch feat/branch...",
     ]);
   });
-
-  it("runs post-clone script", async () => {
-    const state = await runTerraformApply(import.meta.dir, {
-      agent_id: "foo",
-      url: "fake-url",
-      post_clone_script: "echo 'Post-clone script executed'",
-    });
-    const output = await executeScriptInContainer(
-      state,
-      "alpine/git",
-      "sh",
-      "mkdir -p ~/fake-url && echo 'existing' > ~/fake-url/file.txt",
-    );
-    expect(output.stdout).toContain("Running post-clone script...");
-    expect(output.stdout).toContain("Post-clone script executed");
-  });
 });

registry/coder/modules/git-clone/main.tf

@@ -62,12 +62,6 @@ variable "depth" {
   default     = 0
 }
 
-variable "post_clone_script" {
-  description = "Custom script to run after cloning the repository. Runs always after git clone, even if the repository already exists."
-  type        = string
-  default     = null
-}
-
 locals {
   # Remove query parameters and fragments from the URL
   url = replace(replace(var.url, "/\\?.*/", ""), "/#.*/", "")
@@ -87,8 +81,6 @@ locals {
   clone_path = var.base_dir != "" ? join("/", [var.base_dir, local.folder_name]) : join("/", ["~", local.folder_name])
   # Construct the web URL
   web_url = startswith(local.clone_url, "git@") ? replace(replace(local.clone_url, ":", "/"), "git@", "https://") : local.clone_url
-  # Encode the post_clone_script for passing to the shell script
-  encoded_post_clone_script = var.post_clone_script != null ? base64encode(var.post_clone_script) : ""
 }
 
 output "repo_dir" {
@@ -128,7 +120,6 @@ resource "coder_script" "git_clone" {
     REPO_URL : local.clone_url,
     BRANCH_NAME : local.branch_name,
     DEPTH = var.depth,
-    POST_CLONE_SCRIPT : local.encoded_post_clone_script,
   })
   display_name       = "Git Clone"
   icon               = "/icon/git.svg"

registry/coder/modules/git-clone/run.sh

@@ -6,7 +6,6 @@ BRANCH_NAME="${BRANCH_NAME}"
 # Expand home if it's specified!
 CLONE_PATH="$${CLONE_PATH/#\~/$${HOME}}"
 DEPTH="${DEPTH}"
-POST_CLONE_SCRIPT="${POST_CLONE_SCRIPT}"
 
 # Check if the variable is empty...
 if [ -z "$REPO_URL" ]; then
@@ -53,14 +52,5 @@ if [ -z "$(ls -A "$CLONE_PATH")" ]; then
   fi
 else
   echo "$CLONE_PATH already exists and isn't empty, skipping clone!"
-fi
-
-# Run post-clone script if provided
-if [ -n "$POST_CLONE_SCRIPT" ]; then
-  echo "Running post-clone script..."
-  echo "$POST_CLONE_SCRIPT" | base64 -d > /tmp/post_clone.sh
-  chmod +x /tmp/post_clone.sh
-  cd "$CLONE_PATH"
-  /tmp/post_clone.sh
-  rm /tmp/post_clone.sh
+  exit 0
 fi

registry/coder/modules/goose/README.md

@@ -13,7 +13,7 @@ Run the [Goose](https://block.github.io/goose/) agent in your workspace to gener
 ```tf
 module "goose" {
   source           = "registry.coder.com/coder/goose/coder"
-  version          = "2.2.1"
+  version          = "2.2.0"
   agent_id         = coder_agent.example.id
   folder           = "/home/coder"
   install_goose    = true
@@ -79,7 +79,7 @@ resource "coder_agent" "main" {
 module "goose" {
   count            = data.coder_workspace.me.start_count
   source           = "registry.coder.com/coder/goose/coder"
-  version          = "2.2.1"
+  version          = "2.2.0"
   agent_id         = coder_agent.example.id
   folder           = "/home/coder"
   install_goose    = true

registry/coder/modules/goose/main.tf

@@ -135,7 +135,6 @@ EOT
   install_script        = file("${path.module}/scripts/install.sh")
   start_script          = file("${path.module}/scripts/start.sh")
   module_dir_name       = ".goose-module"
-  folder                = trimsuffix(var.folder, "/")
 }
 
 module "agentapi" {
@@ -157,7 +156,6 @@ module "agentapi" {
   pre_install_script   = var.pre_install_script
   post_install_script  = var.post_install_script
   start_script         = local.start_script
-  folder               = local.folder
   install_script       = <<-EOT
     #!/bin/bash
     set -o errexit