Sync upstream main: 9ab0c5d

.github/dependabot.yml

@@ -0,0 +1,88 @@
+version: 2
+updates:
+  - package-ecosystem: bundler
+    directory: /services/console
+    schedule:
+      interval: weekly
+      day: monday
+      time: "09:00"
+      timezone: America/Denver
+    commit-message:
+      prefix: chore
+      include: scope
+    open-pull-requests-limit: 5
+    groups:
+      ruby-dependencies:
+        patterns:
+          - "*"
+
+  - package-ecosystem: cargo
+    directory: /services/api-rs
+    schedule:
+      interval: weekly
+      day: monday
+      time: "09:00"
+      timezone: America/Denver
+    commit-message:
+      prefix: chore
+      include: scope
+    open-pull-requests-limit: 5
+    groups:
+      api-rs-dependencies:
+        patterns:
+          - "*"
+
+  - package-ecosystem: cargo
+    directory: /crates/harness-server
+    schedule:
+      interval: weekly
+      day: monday
+      time: "09:00"
+      timezone: America/Denver
+    commit-message:
+      prefix: chore
+      include: scope
+    open-pull-requests-limit: 5
+    groups:
+      harness-server-dependencies:
+        patterns:
+          - "*"
+
+  - package-ecosystem: npm
+    directories:
+      - /
+      - /packages/*
+      - /services/linearbot
+      - /services/slackbotv2
+      - /services/discordbot
+      - /services/teamsbot
+      - /services/githubbot
+    schedule:
+      interval: weekly
+      day: monday
+      time: "09:00"
+      timezone: America/Denver
+    commit-message:
+      prefix: chore
+      include: scope
+    open-pull-requests-limit: 5
+    groups:
+      typescript-dependencies:
+        patterns:
+          - "*"
+
+  - package-ecosystem: npm
+    directory: /docs
+    schedule:
+      interval: weekly
+      day: monday
+      time: "09:00"
+      timezone: America/Denver
+    commit-message:
+      prefix: chore
+      include: scope
+    open-pull-requests-limit: 5
+    groups:
+      docs-dependencies:
+        patterns:
+          - "*"

.github/workflows/ci.yml

@@ -19,6 +19,7 @@ jobs:
     outputs:
       migration_order: ${{ steps.filter.outputs.migration_order }}
       rust_api: ${{ steps.filter.outputs.rust_api }}
+      sandbox_tests: ${{ steps.filter.outputs.sandbox_tests }}
       slackbotv2_tests: ${{ steps.filter.outputs.slackbotv2_tests }}
       discordbot_checks: ${{ steps.filter.outputs.discordbot_checks }}
       githubbot_checks: ${{ steps.filter.outputs.githubbot_checks }}
@@ -70,6 +71,9 @@ jobs:
           set_output rust_api \
             '^services/api-rs/' \
             '^\.github/workflows/ci\.yml$'
+          set_output sandbox_tests \
+            '^services/sandbox/' \
+            '^\.github/workflows/ci\.yml$'
           set_output slackbotv2_tests \
             '^services/slackbotv2/' \
             '^package\.json$' \
@@ -215,6 +219,26 @@ jobs:
           fi
           docker rm -f centaur-api-integration-test-postgres || true
 
+  sandbox-tests:
+    name: Sandbox Python tests
+    runs-on: ubuntu-latest
+    needs: ci_changes
+    if: needs.ci_changes.outputs.sandbox_tests == 'true'
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        with:
+          persist-credentials: false
+
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
+        with:
+          python-version: "3.11"
+
+      - name: Sandbox Python tests
+        env:
+          GIT_CONFIG_GLOBAL: /dev/null
+          PYTHONPATH: ${{ github.workspace }}
+        run: python -m unittest discover -s services/sandbox -p 'test_*.py'
+
   slackbotv2-tests:
     name: Slackbot v2 tests
     runs-on: depot-ubuntu-24.04-16
@@ -381,6 +405,7 @@ jobs:
       - ci_changes
       - migration-order
       - rust-api
+      - sandbox-tests
       - slackbotv2-tests
       - discordbot-checks
       - githubbot-checks
@@ -390,5 +415,5 @@ jobs:
       - name: Decide whether the needed jobs succeeded or failed
         uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # release/v1
         with:
-          allowed-skips: migration-order, rust-api, slackbotv2-tests, discordbot-checks, githubbot-checks, teamsbot-checks
+          allowed-skips: migration-order, rust-api, sandbox-tests, slackbotv2-tests, discordbot-checks, githubbot-checks, teamsbot-checks
           jobs: ${{ toJSON(needs) }}

.github/workflows/console-ci.yml

@@ -62,9 +62,6 @@ jobs:
       - name: Scan for common Rails security vulnerabilities using static analysis
         run: bin/brakeman --no-pager
 
-      - name: Scan for known security vulnerabilities in gems used
-        run: bin/bundler-audit
-
   scan_js:
     runs-on: depot-ubuntu-24.04-16
     needs: console_changes

.github/workflows/console-gem-audit.yml

@@ -0,0 +1,31 @@
+name: Console Gem Audit
+
+on:
+  push:
+    branches: [ main ]
+
+permissions:
+  contents: read
+
+defaults:
+  run:
+    working-directory: services/console
+
+jobs:
+  scan_gems:
+    runs-on: depot-ubuntu-24.04-16
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        with:
+          persist-credentials: false
+
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@12fd324f1d0b43274fdc8130f6980590a667c455 # v1.312.0
+        with:
+          working-directory: services/console
+          bundler-cache: true
+
+      - name: Scan for known security vulnerabilities in gems used
+        run: bin/bundler-audit

centaur_sdk/__init__.py

@@ -8,6 +8,10 @@
 
 from centaur_sdk.tool_sdk import (
     ToolContext,
+    current_chat_destination,
+    current_discord_thread,
+    current_github_thread,
+    current_linear_thread,
     current_session_context,
     current_slack_thread,
     current_thread_key,
@@ -21,6 +25,10 @@
 
 __all__ = [
     "ToolContext",
+    "current_chat_destination",
+    "current_discord_thread",
+    "current_github_thread",
+    "current_linear_thread",
     "current_session_context",
     "current_slack_thread",
     "current_thread_key",