chore(coder-labs/templates/tasks-docker): remove the Tasks on Docker template - #1045
chore(coder-labs/templates/tasks-docker): remove the Tasks on Docker template#1045david-fraley wants to merge 9 commits into
Conversation
…template Coder Tasks is deprecated as of Coder v2.36 and is hidden by default, so this template cannot be used on a default deployment. Remove the template, its orphaned screenshot, and the two references that pointed at it.
…warnings Coder Tasks is deprecated as of Coder v2.36. Remove the Tasks docs links, the coder_ai_task and coder_task provider entries, and the task-oriented templates section from the templates skill. In the claude-code and codex upgrade warnings, unlink the deleted Tasks docs page and scope the follow-up promise to Boundary only.
Module Scorecard Check
|
| Theme | Before | After |
|---|---|---|
| Presentation & Onboarding | 17.5 / 25 | 17.5 / 25 |
| Integration | 12.5 / 25 | 12.5 / 25 |
| Credential Hygiene | 18 / 20 | 18 / 20 |
| Restricted-Environment | 7.5 / 20 | 7 / 20 |
| Engineering Quality | 8 / 10 | 10 / 10 |
| Overall | 64 / 100 | 65 / 100 |
Full scorecard for this PR
| Presentation & Onboarding | Agent Integration | Credential Hygiene | Restricted-Environment Readiness | Engineering Quality | Overall |
|---|---|---|---|---|---|
| 17.5 / 25 | 12.5 / 25 | 18 / 20 | 7 / 20 | 10 / 10 | 65 / 100 |
Drilldown
Presentation & Onboarding — 17.5 / 25
| Criterion | Max | Score | Notes |
|---|---|---|---|
| Configuration-mode examples | 12 | 12 | README provides documented examples for multiple major modes: standalone with API key, AI Gateway, Bedrock, Vertex AI, custom gateway, OAuth token, api_key_helper, managed settings, telemetry. Each has sensible defaults and clear context. |
| Coder-context framing | 8 | 5.5 | README names both Coder and Claude Code, explains what the module adds (install, configure, authenticate), but does not clearly show where Coder fits in the flow or how users interact with Claude Code after installation. The launcher app example helps but flow is not explicit. |
| Visual preview | 5 | 0 | No image, GIF, or video in README. Icon reference does not count. |
Agent Integration — 12.5 / 25
| Criterion | Max | Score | Notes |
|---|---|---|---|
| AI governance | 10 | 5 | AI Gateway support is documented with enable_ai_gateway and a dedicated example showing authentication via session token. Agent Firewall support was explicitly dropped in v5 per the WARNING callout ("drops support for...Boundary"). Only one of two governance mechanisms documented = half credit. |
| Dashboard entry point | 5 | 5 | Documented coder_app example in "Standalone mode with a launcher app" section shows proper command-based launch with open_in = "slim-window". |
| Session continuity | 5 | 0 | No documentation of resuming existing Claude Code sessions across reconnects or using persistent session managers (tmux, screen, boo). |
| Managed configuration | 5 | 2.5 | managed_settings input is documented with example showing permissions policy and env vars written to /etc/claude-code/managed-settings.d/. However, no documentation of managed MCP configuration (MCP servers are added at user scope, not managed/enforced scope). Partial support = half credit. |
Credential Hygiene — 18 / 20
| Criterion | Max | Score | Notes |
|---|---|---|---|
| Secrets marked sensitive | 16 | 14 | anthropic_api_key and claude_code_oauth_token inputs are marked sensitive = true. However, README examples inline placeholder secrets (anthropic_api_key = "xxxx-xxxxx-xxxx", claude_code_oauth_token = "xxxxx-xxxx-xxxx") which caps this at 14/16 per rubric. |
| Non-hardcoded auth path | 4 | 4 | api_key_helper example shows short-lived credentials from Vault/AWS Secrets Manager. AI Gateway uses session token. Both avoid raw keys in templates. |
Restricted-Environment Readiness — 7 / 20
| Criterion | Max | Score | Notes |
|---|---|---|---|
| Mirrorable artifact source | 10 | 0 | No module input variable overrides the Claude Code download URL. The official installer is invoked via curl from claude.ai/install.sh with no URL override mechanism. claude_code_version pins a version but does not change the source URL. |
| Bring-your-own binary | 5 | 5 | install_claude_code = false is documented in "Advanced Configuration" example with note that claude_binary_path can be customized when install is disabled. Clear path to skip download when tool is pre-baked. |
| Egress transparency | 3 | 0 | No dedicated README section enumerating external endpoints. Endpoints are scattered across examples (claude.ai/install.sh, Anthropic API, Bedrock, Vertex, remote MCP URLs) but not consolidated. Per rubric, scattered mentions earn at most half, but without a dedicated section, score 0. |
| Runs without sudo | 2 | 2 | install.sh.tftpl uses sudo only for writing to /etc/claude-code/managed-settings.d/ with explicit fallback: "if command_exists sudo; then sudo mkdir... else mkdir..." and "if ! mkdir... 2>/dev/null; then echo Warning...". Core functionality (install, configure, auth) works without sudo. Full credit. |
Engineering Quality — 10 / 10
| Criterion | Max | Score | Notes |
|---|---|---|---|
| Input quality | 6 | 6 | Inputs have clear descriptions, sensible defaults (install_claude_code = true, claude_code_version = "latest", workdir = null). Validation blocks enforce mutual exclusivity (enable_ai_gateway vs anthropic_api_key, use_bedrock vs use_vertex, api_key_helper vs other auth). |
| Test coverage | 4 | 4 | main.tftest.hcl covers business logic (auth modes, validation, env vars, script outputs). main.test.ts provides end-to-end tests in containers covering install, auth, MCP, managed settings, telemetry, Bedrock/Vertex modes, api_key_helper. Clear testing story. |
Overall — 65 / 100
Scored against SCORECARD.md with claude-sonnet-4-5. Language-model scores are advisory.
…eprecated Drop the link to the deleted Coder Tasks docs page and warn that the wiring only applies to Coder versions before v2.36. The module still exposes task_app_id and report_tasks, so the example stays for those deployments.
|
|
||
| > [!WARNING] | ||
| > If upgrading from v4.x.x of this module: v5 is a major refactor that drops support for [Coder Tasks](https://coder.com/docs/ai-coder/tasks) and [Boundary](https://coder.com/docs/ai-coder/agent-firewall). Keep using v4.x.x if you depend on them. See the [PR description](https://github.com/coder/registry/pull/879) for a full migration guide. | ||
| > If upgrading from v4.x.x of this module: v5 is a major refactor that drops support for Coder Tasks and [Boundary](https://coder.com/docs/ai-coder/agent-firewall). Keep using v4.x.x if you depend on them. See the [PR description](https://github.com/coder/registry/pull/879) for a full migration guide. |
There was a problem hiding this comment.
Also mention Coder version 2.34 here maybe.
There was a problem hiding this comment.
Not sure why we need to call out 2.34. I'm just removing the dead link!
There was a problem hiding this comment.
Done in 47f5f4d. The warning now reads: "Coder Tasks was deprecated in Coder v2.34 and is not available by default from Coder v2.36."
Comment generated by Coder Agents on behalf of @david-fraley.
There was a problem hiding this comment.
Reverted in 0148b9c. We decided not to put the Coder version note in this warning after all, so the sentence is out. The only remaining change here is unlinking the deleted Tasks docs page.
Comment generated by Coder Agents on behalf of @david-fraley.
Related: coder/coder#28008, which deprecates Coder Tasks as of Coder v2.36, hides it behind the internal
CODER_ENABLE_AI_TASKSflag, and removes the Tasks docs and the equivalent in-repo example template.Removes the
coder-labs/tasks-dockertemplate and the Coder Tasks guidance that pointed at it.The template exists only to demo Coder Tasks: it declares
coder_ai_taskand readsdata "coder_task". On a v2.36 deployment with default settings the Tasks UI,/tasksroutes and Tasks API are unavailable, so the template has no working entry point.Changes
registry/coder-labs/templates/tasks-docker/(README.md,main.tf).registry/coder-labs/.images/tasks-screenshot.png, which only that README used..agents/skills/coder-templates/SKILL.md: drop the Coder Tasks guidance, so the skill stops teaching agents to build templates against a deprecated feature.Tasksdocs link,coder_ai_taskresource andcoder_taskdata source rows in the provider tables,### Task-Oriented Templatessection.Taskcolumn header in the Commands table stays; it is a plain table heading, not Coder Tasks.registry/sharkymark/templates/docker-claude/README.md: remove the link to the deletedmain.tfand the deadcoder.com/docs/ai-coder/taskslink. That template never declaredcoder_ai_task, so Tasks docs were the wrong reference for it regardless.registry/coder/modules/claude-code/README.md: in the v5 upgrade warning, unlink the deleted Tasks docs page, and change "We plan to add those back in a follow-up" to "We plan to add Boundary support back in a follow-up", since Tasks support is not coming back.registry/coder-labs/modules/codex/README.md: unlink the same deleted page.registry/harleylrn/modules/kiro-cli/README.md: unlink the same deleted page and delete the whole### Coder Tasks Integrationsection, which documentedcoder_task,coder_ai_taskandreport_taskswiring.Module versions
Three module READMEs changed, so each gets a patch bump via
./.github/scripts/version-bump.sh patch:coder-labs/codexcoder/claude-codeharleylrn/kiro-cliEffect
The template disappears from registry.coder.com. Anyone who already created a Coder template from it is unaffected; template versions live in their own deployment, not here.
Not in this PR
kiro-cli's Coder Tasks implementation inmain.tf: areport_tasksinput, atask_app_idoutput,ai_promptwiring and MCP task reporting in its default system prompt. Removing that means a behavioural change and a larger release, so only the docs are removed here. Flagged for the module owners as follow-up..icons/tasks.svg, kept in case anything external references it.Validation
go build ./cmd/readmevalidation && ./readmevalidation: passes, all relative README URLs still valid.bun x prettier --check .: passes../.github/scripts/version-bump.sh --ci patch origin/main: passes, versions match.Authored by Coder Agents on behalf of @david-fraley.