Method authAndDoWithTaskAppClient

coderd/aitasks.go:984–1090

authAndDoWithTaskAppClient centralizes the shared logic to: - Fetch the task workspace - Authorize ApplicationConnect on the workspace - Validate the AI task and task app health - Dial the agent and construct an HTTP client to the apps loopback URL The provided callback receives the context, an HT

(
	r *http.Request,
	task database.Task,
	do func(ctx context.Context, client *http.Client, appURL *url.URL) error,
)

// The provided callback receives the context, an HTTP client that dials via the
// agent, and the base app URL (as a value URL) to perform any request.
func (api *API) authAndDoWithTaskAppClient(
	r *http.Request,
	task database.Task,
	do func(ctx context.Context, client *http.Client, appURL *url.URL) error,
) error {
	ctx := r.Context()

	if task.Status != database.TaskStatusActive {
		// Return 409 Conflict for valid requests blocked by current state
		// (pending/initializing are transitional, paused requires resume).
		// Return 400 Bad Request for error/unknown states.
		switch task.Status {
		case database.TaskStatusPending, database.TaskStatusInitializing:
			return httperror.NewResponseError(http.StatusConflict, codersdk.Response{
				Message: fmt.Sprintf("Task is %s.", task.Status),
				Detail:  "The task is resuming. Wait for the task to become active before sending messages.",
			})
		case database.TaskStatusPaused:
			return httperror.NewResponseError(http.StatusConflict, codersdk.Response{
				Message: "Task is paused.",
				Detail:  "Resume the task to send messages.",
			})
		default:
			// Default handler for error and unknown status.
			return httperror.NewResponseError(http.StatusBadRequest, codersdk.Response{
				Message: "Task must be active.",
				Detail:  fmt.Sprintf("Task status is %q, it must be %q to interact with the task.", task.Status, codersdk.TaskStatusActive),
			})
		}
	}
	if !task.WorkspaceID.Valid {
		return httperror.NewResponseError(http.StatusBadRequest, codersdk.Response{
			Message: "Task does not have a workspace.",
		})
	}
	if !task.WorkspaceAppID.Valid {
		return httperror.NewResponseError(http.StatusBadRequest, codersdk.Response{
			Message: "Task does not have a workspace app.",
		})
	}

	workspace, err := api.Database.GetWorkspaceByID(ctx, task.WorkspaceID.UUID)
	if err != nil {
		if httpapi.Is404Error(err) {
			return httperror.ErrResourceNotFound
		}
		return httperror.NewResponseError(http.StatusInternalServerError, codersdk.Response{
			Message: "Internal error fetching workspace.",
			Detail:  err.Error(),
		})
	}

	// Connecting to applications requires ApplicationConnect on the workspace.
	if !api.Authorize(r, policy.ActionApplicationConnect, workspace) {
		return httperror.ErrResourceNotFound
	}

	apps, err := api.Database.GetWorkspaceAppsByAgentID(ctx, task.WorkspaceAgentID.UUID)