Sync upstream Centaur with TipLink deployment compatibility - #59

Merged

GoonMachine merged 154 commits into

mainfrom

codex/upstream-sync-20260627

Jun 28, 2026

Commits on Jun 16, 2026

feat: add GitHub OAuth app provider (#613)
mslipper
authored
412d4fc
fix: resolve secret grant conflicts across types so direct grants win (#617)
mslipper
authored
2a6b838
fix: deconflict wildcard host secret grants (#618)
mslipper
authored
a90453b

Commits on Jun 17, 2026

fix: expose company_context tool CLI
akshaan
authored
4d79cc0
test: specify googleapis secret deconfliction (#620)
mslipper
authored
f01e0c0
feat: add Centaur Postgres read-only role (#586)
goksu
authored
b9b34a3
fix: migration name patch for readonly role add (#623)
goksu
authored
89c1584
fix(proxy): allow Railway project token header (#615)
odyslam
authored
2331eda
feat: label tool credential secrets (#624)
mslipper
authored
e12b9d9
Use replace mode for Slack tool secrets (#629)

gakonst
and
Centaur AI
authored
efb7143
feat: record sandbox startup visibility (#622)
goksu
authored
993355b
fix: add slackbot handoff observability (#634)
goksu
authored
f1de2c9
feat: add Centaur thread investigator tool (#631)
goksu
authored
3064b1c
fix: release worker permit for cancelled tasks (#635)
akshaan
authored
a492ccd
Expose Slack thread context via API (#633)

gakonst
and
Centaur AI
authored
18d84f4
test: add API integration test CI (#580)
goksu
authored
a7b9499
feat: log Slack render recovery health (#632)
goksu
authored
1653238
Remove stale Centaur API key guidance (#636)

gakonst
and
Centaur AI
authored
1819152
feat: enforce ETL context RLS policies (#630)
akshaan
authored
41fe9ae
fix: terminally skip permanent Slack backfill jobs (#643)
akshaan
authored
b76970d
fix: correct company context DSN database
akshaan
authored
70294bf
fix: deconflict session sqlx migrations
akshaan
authored
fe94a2c
fix: restore investigator readonly Postgres queries (#639)
goksu
authored
e51fa4f
[codex] Add Slackbot v2 Prometheus metrics (#641)
Zygimantass
authored
5402e87
[codex] migrate CI workflows to Depot (#645)
Zygimantass
authored
31adf03
ci: add aggregate CI success check (#646)

decofe
and
Zygimantass
authored
775daae
ci: add aggregate required checks (#651)
decofe
authored
1da7008
fix: keep publish image builds running (#650)
mslipper
authored
0e4d67a
feat: add qa smoke skill (#648)
mslipper
authored
ca8809a

Commits on Jun 18, 2026

Require descriptive git-branch slugs (#654)
decofe
authored
865f01b
fix: route shared postgres dsn through iron proxy (#653)
mslipper
authored
af192c3
chore: remove session stdout output caps (#655)
decofe
authored
4046fc2
fix: remove db-backed slack admin access (#659)
akshaan
authored
85832dc
fix: cold start slack sync from full lookback (#663)
akshaan
authored
742be5a
Instruct agents to hyperlink GitHub refs (#666)
decofe
authored
4594059
Add Reth mainnet RPC URLs to sandbox instructions (#664)
decofe
authored
38c1b7c
fix: isolate slack live workflow queue (#669)
akshaan
authored
83f12a1
feat: add workflow allowlist policy (#670)
akshaan
authored
bd75557
fix: emit Slack health gauges from Slack workflows
akshaan
authored
ee31092
feat: track Slack ETL rate limits (#674)
akshaan
authored
4fae063

Commits on Jun 19, 2026

fix: read company context watermark from absurd (#678)
akshaan
authored
002c3a3
fix: allow readonly role through etl rls
akshaan
authored
bdde739
fix: allow disabling infra secret sync (#677)
mslipper
authored
585320b
docs: update workflow scheduler references (#681)
akshaan
authored
8519b91
fix: harden iron control secret registration (#672)

akshaan
and
mslipper
authored
c9f46df
fix: preserve Slack channel creation timestamp
akshaan
authored
04e0c4c
fix(api-rs): split startup health from readiness
akshaan
authored
d32c89c
feat: add AWS Bedrock as an opt-in Codex model provider (#671)

0xdiid
and
claude
authored
728e881
chore: bump vulnerable npm dependencies (#667)
decofe
authored
7088375
fix(slackbotv2): stop garbled final answers; reconcile diverged live renders (#673)
goksu
authored
1298b57
fix: extend iron-proxy upstream header timeout (#658)
decofe
authored
0691b1a
feat(workflows): make per-queue worker concurrency configurable (#661)

tarrencev
and
Tarrence van As
authored
8770d85
Improve QA skill report format (#684)

gakonst
and
Centaur AI
authored
b34edf3

Commits on Jun 21, 2026

feat: add role grant management UI (#686)
mslipper
authored
1f94452

Commits on Jun 22, 2026

[codex] patch state-pg expired cache leases (#688)
Zygimantass
authored
f666468
fix: omit chat task output before rendering (#689)
Zygimantass
authored
d8c1bd8
Preserve Slack channel IDs in Codex prompts (#690)
decofe
authored
b711559
Require explicit channel IDs for slack channel (#691)
decofe
authored
5fe994d
[codex] fix harness Codex Laminar cost traces
Zygimantass
authored
da503dd
Add AI thread SLA metrics (#693)
Zygimantass
authored
feda49f
[codex] fix session pipe attach race (#694)
Zygimantass
authored
14c3ee1
[codex] bound Slackbot stale render recovery (#696)
Zygimantass
authored
5920dda
fix(workflows): include IDs in result events (#697)
goksu
authored
c1fa4c3
Fix Slack upload single-file default context (#699)

gakonst
and
Centaur AI
authored
1233ff7
feat: add Slack archive import API
akshaan
authored
bbb8795

Commits on Jun 23, 2026

fix: unify tool overlay publishing (#705)

gakonst
and
mslipper
authored
b147f37
[codex] Set managed iron-proxy timeout to 120s (#701)
Zygimantass
authored
36cf7d5
Add X API-backed twitter tool (#460)

decofe
and
Zygimantass
authored
adecaf3
[codex] Seal rotated Slack progress segments (#709)
Zygimantass
authored
affcbdd
[codex] Default Claude to Opus 4.8 (#710)
Zygimantass
authored
c1421cd
[codex] Fix Twitter X API secret metadata (#711)
Zygimantass
authored
71f1d1f
Fix Twitter X API bearer injection (#712)

Zygimantass
and
Centaur AI
authored
eb709b2
feat: support deployment default personas (#700)

goksu
and
ampagent
authored
fab0ee0
[codex] Bound slackbotv2 handoff network waits (#714)
Zygimantass
authored
d121cd0
[codex] Fix Slack inbound display text fallback (#713)
Zygimantass
authored
195da0d
feat: add Slack archive import ingestion (#717)
akshaan
authored
5fc0a37
fix(iron-proxy): allow content-encoding header so private git clone works (#715)

goksu
and
pkobielak
authored
4902e26
Add Amplitude product analytics tool (#698)

authored
91201bb
fix: preserve manual iron-control role revocations (#719)
akshaan
authored
f51239e
feat: add Slack archive import console (#720)
akshaan
authored
10511aa
feat: Linear chat ingress (linearbot) (#541)

0xdiid
and
claude
authored
f333ef6
fix(discordbot): inline image attachments instead of passing raw CDN URLs (#706)

authored
72c9ef6
feat: add gcp id token secret support (#726)
mslipper
authored
b9ea8af

Commits on Jun 24, 2026

Scope YouTube API key injection (#727)

gakonst
and
Centaur AI
authored
6e16cc6
fix: reconcile gcp id token secrets (#728)
mslipper
authored
70bb8ba
fix: preserve hidden Slack links in agent prompts
akshaan
authored
6310312
Expose Attio meeting APIs for LP prep (#732)

gakonst
and
Centaur AI
authored
8173489
fix: install workflow python deps in api image (#733)
akshaan
authored
9bd8a8c
feat: support Password Grant broker credentials (#735)
mslipper
authored
42982bf
Fix Discord CLI read commands hanging (#736)
decofe
authored
f065908
Rename tool call docs to direct CLI syntax (#745)
decofe
authored
9067c1c
Revert "Fix Slack upload single-file default context (#699)" (#744)
goksu
authored
b44c973
revert: undo slack upload default context change
akshaan
authored
f086a02
fix: use presigned archive downloads (#747)
akshaan
authored
7f56c34
feat: Microsoft Teams client (#665)

authored
486fb7f
fix: pass api url to workflow host sandboxes (#748)
akshaan
authored
9a09da6
feat(discord): add thread creation (#722)

0xdiid
and
claude
authored
cbd900a
Fix Slack bot-authored mention handling (#749)

authored
d9c0ad0
Wait for iron-proxy principal before cold sandbox startup (#751)

authored
cc0c4c0
Add Preqin tool diagnostics (#734)

gakonst
and
Centaur AI
authored
da780e2
Fix Preqin credential handling (#752)

gakonst
and
Centaur AI
authored
3906ba2
fix: clean up session sandboxes (#725)
goksu
authored
74a7578
Allow api-rs egress to iron-proxy management port (#754)

gakonst
and
Centaur AI
authored
157d00d
feat: add Slack DM sync RLS tables
akshaan
authored
38154bc
feat: add validated workflow webhook edge filters (#753)

authored
fb89b95
feat: auto grant matched oauth credentials
akshaan
authored
6e29733
feat: support reply_broadcast in workflow Slack posts (#626)
smartcontracts
authored
4f649dc
fix: allow console access to api-rs
akshaan
authored
b41ad35

Commits on Jun 25, 2026

Update QA skill for AI team regressions (#762)

gakonst
and
Centaur AI
authored
f4f043c
feat: sync Slack DMs from OAuth credentials
akshaan
authored
d113125
fix: configure Slack DM OAuth slug (#764)
akshaan
authored
7363709
fix: prefix Slack DM sync env (#765)
akshaan
authored
af2c878
fix: wire console worker to api-rs (#767)
akshaan
authored
fe6aa16
feat: add Preqin broker credential grant (#763)
mslipper
authored
980940e
Support injected auth in Preqin health check (#769)

gakonst
and
Centaur AI
authored
88681a3
fix: allow console worker to reach api-rs (#770)
akshaan
authored
c799a95
Clarify QA skill checks (#771)

gakonst
and
Centaur AI
authored
26c4414
[codex] add Claude/Amp Laminar usage traces (#695)
Zygimantass
authored
73ef909
[codex] restore stdout pump reattach after EOF (#773)
Zygimantass
authored
1c9a5d6
Install kache in sandbox image (#774)
decofe
authored
d855e63
fix(linear): list org-wide labels without crashing (#776)
0xdiid
authored
0abfc33
fix(discord): bot User-Agent + suppress_embeds on post_message (#768)
0xdiid
authored
61186db
fix: require explicit Slack upload destination (#777)
akshaan
authored
fad2ad7
feat: add Slack DM search projection (#775)
akshaan
authored
f0c2ba6
fix: broaden company context retrieval
akshaan
authored
3b20e12
fix: expose Slack upload context to agents (#779)
akshaan
authored
984f898
feat: add Slack DM context search tool (#778)
akshaan
authored
3410e7a
docs: update api-rs tool guidance (#781)
goksu
authored
19da9c5
fix(harness-server): retry codex turns that fail on transient engine warmup (#755)

0xdiid
and
claude
authored
a1d96df
fix(sandbox): honor TOOL_ALLOWLIST when installing/shimming tools (#756)
tarrencev
authored
7e99a5c
feat: add tool CLI health commands (#782)
mslipper
authored
e2878b9
chore: add tool CLI packaging checker (#783)
mslipper
authored
17d1741
fix: attribute Slack PR requesters (#785)
mslipper
authored
a870b8d
feat: add principal sandbox access toggles
akshaan
authored
ba8265e
Add PVC storage mode for repo cache (#789)
smartcontracts
authored
65f7a38

Commits on Jun 26, 2026

fix: emit Slack user ID in Slackbot usage logs (#791)
mslipper
authored
767679e
fix: configure postgres shared memory volume (#795)
mslipper
authored
79138d2
feat: add google docs oauth sync schema
akshaan
authored
ea9d69f
fix: propagate google oauth identity to principals
akshaan
authored
550ee89
feat: add slack retention workflow
akshaan
authored
91db99c
chore: update copy (#800)
mslipper
authored
ed66973
fix: repair missing sandbox iron proxies on reuse (#798)

goksu
and
ampagent
authored
7e300f0
chore: add curl to api-rs image (#801)
mslipper
authored
c603d0d
Fix vmetrics series and health checks (#797)

svc-paradigm
and
Centaur AI
authored
dce009a
feat: add slack retention metrics
akshaan
authored
4b153c4
feat: add google docs oauth ingest
akshaan
authored
aaac577
feat: enforce principal sandbox capabilities
akshaan
authored
845d033
fix: disable tools bootstrap without repo cache (#805)
akshaan
authored
4998abd
fix: keep base tools without repo cache (#806)
akshaan
authored
141e68b

Commits on Jun 27, 2026

Sync upstream Centaur with TipLink compatibility
fin-sa
committed
51a8d48

Commits on Jun 28, 2026

Address CodeQL findings in upstream sync
fin-sa
committed
3a886f7
Address CodeQL secret handling alerts
fin-sa
committed
2dfabef
Revert "Address CodeQL secret handling alerts"
fin-sa
committed
f58f115
Revert "Address CodeQL findings in upstream sync"
fin-sa
committed
6b0c3b0