Sync upstream main: 9ab0c5d by darkmatter[bot] · Pull Request #33 · darkmatter/centaur

darkmatter · 2026-07-24T10:34:21Z

Automated upstream-sync candidate published by the darkmatter upstream-sync product PR publisher.

Sync SHAs

Upstream tip (paradigmxyz/centaur:main): 9ab0c5dbc8ebe1fdbf4422499e0cbb3b0df7325c
Product base (darkmatter/centaur:main): 4fb2526b2bb78e689d833beda44508826ff48739
Candidate head (sync/upstream-main): 9ab0c5dbc8ebe1fdbf4422499e0cbb3b0df7325c

⚠️ Merge restrictions (human-only)

Only a human may merge this PR. Automated systems MUST NOT merge it.
A merge commit is required (merge-commit ancestry). Squash or rebase merges that rewrite the merge commit ancestry are NOT permitted; the validated merge commit SHA must descend from both the product base and the candidate.

This raw upstream candidate is published first so GitHub can surface any conflicts while the subsequent repair stage validates or rebuilds the same PR.

paradigmxyz#704)

…tself (paradigmxyz#945)

…it just put a PR up (paradigmxyz#959) Co-authored-by: Gerard <289036782+splits-gerard@users.noreply.github.com>

… model (paradigmxyz#1077)

Keep the sidebar and default chat selection scoped to chats owned by the signed-in user. Allow users to continue public and explicitly shared chats when the existing access policy permits them.

* feat: add LLM message override strategy * fix: log LLM message override failures * fix: classify overrides from Slack prompt text * Revert "fix: classify overrides from Slack prompt text" This reverts commit 0f553e6. * chore: bump Helm chart version * fix: avoid logging override response bodies * fix: map OpenAI key for Slackbot overrides * fix: make Slackbot OpenAI key optional * fix: align LLM sonnet model alias * fix: support explicit sonnet 5 override * fix: keep Slack override retries idempotent * fix: log successful override strategy responses

* fix: reduce slack override strategy log noise * refactor: accept full logger for slack override strategy

* feat: add workflow-scoped principals * feat: add workflow host sandbox helm value * chore: bump centaur chart * fix: default workflow host sandbox chart value off * fix: fail closed for workflow principals * fix: label workflow principals by kind * fix: simplify workflow principal labels

Closes paradigmxyz#1070

* fix: attach Laminar traces to thread roots * fix: use thread root for Codex OTLP fallback

* fix: install workflow analytics dependencies * fix: avoid apt packaging uninstall in workflow images

Co-authored-by: Osraka <98612432+Osraka@users.noreply.github.com>

* fix: clarify slackbot claude model selection * fix: support claude opus 4.7 strategy selection * fix: increase message override timeout --------- Co-authored-by: Perry Dime <260989497+svc-paradigm@users.noreply.github.com>

* feat: add native nanocodex harness * feat(harness): expose nanocodex child agents * test(slackbot): preserve default around nanocodex opt-in * fix(ci): avoid no-op chart change * fix: harden native nanocodex integration

Co-authored-by: Perry Dime <260989497+svc-paradigm@users.noreply.github.com>

* feat: add per-proxy labels * fix: satisfy rust proxy label clippy * chore: revert schema dump changes * chore: keep proxy labels in schema dump * fix: harden proxy label sync paths * fix: preserve proxy labels across reuse * refactor: simplify proxy config snapshots * refactor: remove obsolete proxy config paths

fix twitter API response handling

* fix: append mounted overlay system prompts * fix: make sandbox commit hook portable

fix: increase Codex project instruction limit Co-authored-by: Perry Dime <260989497+svc-paradigm@users.noreply.github.com>

Bridge WorkflowContext.wait_for_event through the Python host to Absurd's durable event primitive and support paired event emission. Closes paradigmxyz#990

Closes paradigmxyz#1046 Closes paradigmxyz#1024 Co-authored-by: Taren Marsaw <tarenitup@Tarens-iMac.local> Co-authored-by: blok <37964165+blokboy@users.noreply.github.com>

…th 6 updates (paradigmxyz#1168) chore(deps): bump the ruby-dependencies group Bumps the ruby-dependencies group in /services/console with 6 updates: | Package | From | To | | --- | --- | --- | | [tailwindcss-rails](https://github.com/rails/tailwindcss-rails) | `4.4.0` | `4.6.0` | | [lograge](https://github.com/roidrage/lograge) | `0.14.0` | `0.15.0` | | [solid_queue](https://github.com/rails/solid_queue) | `1.4.0` | `1.5.0` | | [solid_cable](https://github.com/rails/solid_cable) | `4.0.0` | `4.0.2` | | [thruster](https://github.com/basecamp/thruster) | `0.1.21` | `0.1.23` | | [selenium-webdriver](https://github.com/SeleniumHQ/selenium) | `4.44.0` | `4.46.0` | Updates `tailwindcss-rails` from 4.4.0 to 4.6.0 - [Release notes](https://github.com/rails/tailwindcss-rails/releases) - [Changelog](https://github.com/rails/tailwindcss-rails/blob/main/CHANGELOG.md) - [Commits](rails/tailwindcss-rails@v4.4.0...v4.6.0) Updates `lograge` from 0.14.0 to 0.15.0 - [Changelog](https://github.com/roidrage/lograge/blob/master/CHANGELOG.md) - [Commits](roidrage/lograge@v0.14.0...v0.15.0) Updates `solid_queue` from 1.4.0 to 1.5.0 - [Release notes](https://github.com/rails/solid_queue/releases) - [Commits](rails/solid_queue@v1.4.0...v1.5.0) Updates `solid_cable` from 4.0.0 to 4.0.2 - [Release notes](https://github.com/rails/solid_cable/releases) - [Commits](rails/solid_cable@v4.0.0...v4.0.2) Updates `thruster` from 0.1.21 to 0.1.23 - [Changelog](https://github.com/basecamp/thruster/blob/main/CHANGELOG.md) - [Commits](basecamp/thruster@v0.1.21...v0.1.23) Updates `selenium-webdriver` from 4.44.0 to 4.46.0 - [Release notes](https://github.com/SeleniumHQ/selenium/releases) - [Changelog](https://github.com/SeleniumHQ/selenium/blob/trunk/rb/CHANGES) - [Commits](SeleniumHQ/selenium@selenium-4.44.0...selenium-4.46.0) --- updated-dependencies: - dependency-name: tailwindcss-rails dependency-version: 4.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ruby-dependencies - dependency-name: lograge dependency-version: 0.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ruby-dependencies - dependency-name: solid_queue dependency-version: 1.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ruby-dependencies - dependency-name: solid_cable dependency-version: 4.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ruby-dependencies - dependency-name: thruster dependency-version: 0.1.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ruby-dependencies - dependency-name: selenium-webdriver dependency-version: 4.46.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: ruby-dependencies ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

zhygis (Zygimantass) and others added 30 commits July 16, 2026 17:47

fix: preserve postgres proxy credentials on resume (paradigmxyz#1099)

6e636e4

feat: Make the chat agent platform-aware (Slack/Discord/Linear/Github) (

7e7e823

paradigmxyz#704)

fix(linearbot): don't start an assignment turn when the bot assigns i…

dd984af

…tself (paradigmxyz#945)

fix(linearbot): Prevent Linearbot from marking issues as "done" when …

71b6e96

…it just put a PR up (paradigmxyz#959) Co-authored-by: Gerard <289036782+splits-gerard@users.noreply.github.com>

fix(harness-server): downscale oversized image attachments before the…

ce93b89

… model (paradigmxyz#1077)

fix: omit Slack client secret for PKCE login (paradigmxyz#1100)

05b20f7

fix: use confidential Slack OIDC login (paradigmxyz#1101)

3cf4b35

fix(console): separate chat discovery from access (paradigmxyz#1102)

1a79a51

Keep the sidebar and default chat selection scoped to chats owned by the signed-in user. Allow users to continue public and explicitly shared chats when the existing access policy permits them.

fix: reduce slack override strategy log noise (paradigmxyz#1104)

321dc9c

* fix: reduce slack override strategy log noise * refactor: accept full logger for slack override strategy

feat: render attached images in console chat (paradigmxyz#1105)

39c4e7b

fix(console): clean up chat detail rows (paradigmxyz#1108)

ad88a20

fix(console): speed up chat loading (paradigmxyz#1109)

7294798

feat(slackbotv2): dispatch Block Kit actions (paradigmxyz#1110)

a4b0976

Closes paradigmxyz#1070

fix: update vulnerable console sanitizers (paradigmxyz#1118)

a4f56e9

fix: attach Laminar traces to thread roots (paradigmxyz#1106)

62c4fa6

* fix: attach Laminar traces to thread roots * fix: use thread root for Codex OTLP fallback

ci: run console gem audit on main (paradigmxyz#1119)

751e4b9

feat(sandbox): install Google Cloud CLI (paradigmxyz#1124)

4743d49

fix: install workflow analytics dependencies (paradigmxyz#1125)

a49ea3e

* fix: install workflow analytics dependencies * fix: avoid apt packaging uninstall in workflow images

chore: bump iron-proxy image (paradigmxyz#1126)

22a036b

fix(session-runtime): avoid redacting sk inside words (paradigmxyz#1132)

81fc529

Co-authored-by: Osraka <98612432+Osraka@users.noreply.github.com>

feat(console): add system theme option (paradigmxyz#1131)

cd230d9

fix(console): show current theme in selector (paradigmxyz#1134)

d589fce

feat: add native Nanocodex harness (paradigmxyz#1130)

c979faf

* feat: add native nanocodex harness * feat(harness): expose nanocodex child agents * test(slackbot): preserve default around nanocodex opt-in * fix(ci): avoid no-op chart change * fix: harden native nanocodex integration

fix(slackbotv2): preserve pinned thread harness (paradigmxyz#1135)

29c5feb

Make Nanocodex commentary and subagents explicit (paradigmxyz#1136)

5c1e06e

Render Nanocodex commentary as Slack progress (paradigmxyz#1137)

433c3b4

fix: surface Granola MCP tool errors (paradigmxyz#1121)

86842e8

Co-authored-by: Perry Dime <260989497+svc-paradigm@users.noreply.github.com>

Matthew Slipper (mslipper) and others added 13 commits July 21, 2026 22:38

feat: support gsuite full-text Drive search (paradigmxyz#1142)

908afad

fix: use X search pagination token (paradigmxyz#1143)

62911d0

feat: expose quote and retweet lookups (paradigmxyz#1150)

a991946

Co-authored-by: Perry Dime <260989497+svc-paradigm@users.noreply.github.com>

Fix Twitter API response handling (paradigmxyz#1157)

772142e

fix twitter API response handling

fix: support proxy labels in pg dsn form (paradigmxyz#1158)

e006e06

fix: append mounted overlay system prompts (paradigmxyz#1161)

2e24b0e

* fix: append mounted overlay system prompts * fix: make sandbox commit hook portable

Increase Codex project instruction limit to 128 KiB (paradigmxyz#1162)

d290fec

fix: increase Codex project instruction limit Co-authored-by: Perry Dime <260989497+svc-paradigm@users.noreply.github.com>

fix: implement Python workflow event waits (paradigmxyz#1163)

e7e09c1

Bridge WorkflowContext.wait_for_event through the Python host to Absurd's durable event primitive and support paired event emission. Closes paradigmxyz#990

fix: label observable iron-proxy resources (paradigmxyz#1164)

17e17c4

Closes paradigmxyz#1046 Closes paradigmxyz#1024 Co-authored-by: Taren Marsaw <tarenitup@Tarens-iMac.local> Co-authored-by: blok <37964165+blokboy@users.noreply.github.com>

feat: support client credentials broker refresh (paradigmxyz#1165)

5ffdc70

chore: configure dependabot updates (paradigmxyz#1166)

6446276

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Sync upstream main: 9ab0c5d#33

Sync upstream main: 9ab0c5d#33
darkmatter[bot] wants to merge 43 commits into
mainfrom
sync/upstream-main

darkmatter Bot commented Jul 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

8 participants

Uh oh!

Conversation

darkmatter Bot commented Jul 24, 2026

Sync SHAs

⚠️ Merge restrictions (human-only)

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

8 participants