Merge Paradigm Centaur upstream through #1126

.github/workflows/console-ci.yml

@@ -65,9 +65,6 @@ jobs:
       - name: Scan for common Rails security vulnerabilities using static analysis
         run: bin/brakeman --no-pager
 
-      - name: Scan for known security vulnerabilities in gems used
-        run: bin/bundler-audit
-
   scan_js:
     runs-on: ubuntu-latest
     needs: console_changes

.github/workflows/console-gem-audit.yml

@@ -0,0 +1,31 @@
+name: Console Gem Audit
+
+on:
+  push:
+    branches: [ main ]
+
+permissions:
+  contents: read
+
+defaults:
+  run:
+    working-directory: services/console
+
+jobs:
+  scan_gems:
+    runs-on: depot-ubuntu-24.04-16
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        with:
+          persist-credentials: false
+
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@12fd324f1d0b43274fdc8130f6980590a667c455 # v1.312.0
+        with:
+          working-directory: services/console
+          bundler-cache: true
+
+      - name: Scan for known security vulnerabilities in gems used
+        run: bin/bundler-audit

centaur_sdk/__init__.py

@@ -8,6 +8,10 @@
 
 from centaur_sdk.tool_sdk import (
     ToolContext,
+    current_chat_destination,
+    current_discord_thread,
+    current_github_thread,
+    current_linear_thread,
     current_session_context,
     current_slack_thread,
     current_thread_key,
@@ -21,6 +25,10 @@
 
 __all__ = [
     "ToolContext",
+    "current_chat_destination",
+    "current_discord_thread",
+    "current_github_thread",
+    "current_linear_thread",
     "current_session_context",
     "current_slack_thread",
     "current_thread_key",

centaur_sdk/tests/test_tool_sdk.py

@@ -7,6 +7,10 @@
 
 from centaur_sdk import (
     ToolContext,
+    current_chat_destination,
+    current_discord_thread,
+    current_github_thread,
+    current_linear_thread,
     current_session_context,
     current_slack_thread,
     reset_tool_context,
@@ -157,6 +161,223 @@ def read(self) -> bytes:
         reset_tool_context(token)
 
 
+def _fake_context_response(payload: bytes):
+    class FakeResponse:
+        def __enter__(self):
+            return self
+
+        def __exit__(self, exc_type, exc, tb):
+            return False
+
+        def read(self) -> bytes:
+            return payload
+
+    return FakeResponse
+
+
+def _discord_context(thread_key: str, monkeypatch: pytest.MonkeyPatch):
+    payload = (
+        b'{"thread_key":"' + thread_key.encode() + b'","platform":"discord",'
+        b'"discord":{"guild_id":"111","channel_id":"222","thread_id":"333"}}'
+    )
+    monkeypatch.setattr(
+        "urllib.request.urlopen", lambda _request, timeout: _fake_context_response(payload)()
+    )
+    return set_tool_context(
+        ToolContext(
+            name="fake-tool",
+            thread_key=thread_key,
+            secrets={"CENTAUR_API_URL": "http://api:8000", "CENTAUR_API_KEY": ""},
+        )
+    )
+
+
+def test_current_discord_thread_returns_api_discord_destination(
+    monkeypatch: pytest.MonkeyPatch,
+):
+    token = _discord_context("discord:111:222:333", monkeypatch)
+    try:
+        assert current_discord_thread() == {
+            "guild_id": "111",
+            "channel_id": "222",
+            "thread_id": "333",
+        }
+    finally:
+        reset_tool_context(token)
+
+
+def test_current_chat_destination_tags_platform(monkeypatch: pytest.MonkeyPatch):
+    token = _discord_context("discord:111:222:333", monkeypatch)
+    try:
+        assert current_chat_destination() == {
+            "platform": "discord",
+            "guild_id": "111",
+            "channel_id": "222",
+            "thread_id": "333",
+        }
+    finally:
+        reset_tool_context(token)
+
+
+def _linear_context(thread_key: str, monkeypatch: pytest.MonkeyPatch):
+    payload = (
+        b'{"thread_key":"' + thread_key.encode() + b'","platform":"linear",'
+        b'"linear":{"issue_id":"ISSUE","comment_id":"CMT","agent_session_id":"SESS"}}'
+    )
+    monkeypatch.setattr(
+        "urllib.request.urlopen", lambda _request, timeout: _fake_context_response(payload)()
+    )
+    return set_tool_context(
+        ToolContext(
+            name="fake-tool",
+            thread_key=thread_key,
+            secrets={"CENTAUR_API_URL": "http://api:8000", "CENTAUR_API_KEY": ""},
+        )
+    )
+
+
+def test_current_linear_thread_returns_api_linear_destination(
+    monkeypatch: pytest.MonkeyPatch,
+):
+    token = _linear_context("linear:ISSUE:c:CMT:s:SESS", monkeypatch)
+    try:
+        assert current_linear_thread() == {
+            "issue_id": "ISSUE",
+            "comment_id": "CMT",
+            "agent_session_id": "SESS",
+        }
+    finally:
+        reset_tool_context(token)
+
+
+def test_current_chat_destination_tags_linear_platform(monkeypatch: pytest.MonkeyPatch):
+    token = _linear_context("linear:ISSUE:c:CMT:s:SESS", monkeypatch)
+    try:
+        assert current_chat_destination() == {
+            "platform": "linear",
+            "issue_id": "ISSUE",
+            "comment_id": "CMT",
+            "agent_session_id": "SESS",
+        }
+    finally:
+        reset_tool_context(token)
+
+
+def _github_context(thread_key: str, monkeypatch: pytest.MonkeyPatch):
+    payload = (
+        b'{"thread_key":"' + thread_key.encode() + b'","platform":"github",'
+        b'"github":{"owner":"0xSplits","repo":"centaur","number":704,'
+        b'"kind":"pr","review_comment_id":99}}'
+    )
+    monkeypatch.setattr(
+        "urllib.request.urlopen", lambda _request, timeout: _fake_context_response(payload)()
+    )
+    return set_tool_context(
+        ToolContext(
+            name="fake-tool",
+            thread_key=thread_key,
+            secrets={"CENTAUR_API_URL": "http://api:8000", "CENTAUR_API_KEY": ""},
+        )
+    )
+
+
+def test_current_github_thread_returns_api_github_destination(
+    monkeypatch: pytest.MonkeyPatch,
+):
+    token = _github_context("github:0xSplits/centaur:704:rc:99", monkeypatch)
+    try:
+        assert current_github_thread() == {
+            "owner": "0xSplits",
+            "repo": "centaur",
+            "number": 704,
+            "kind": "pr",
+            "review_comment_id": 99,
+        }
+    finally:
+        reset_tool_context(token)
+
+
+def test_current_chat_destination_tags_github_platform(monkeypatch: pytest.MonkeyPatch):
+    token = _github_context("github:0xSplits/centaur:704:rc:99", monkeypatch)
+    try:
+        assert current_chat_destination() == {
+            "platform": "github",
+            "owner": "0xSplits",
+            "repo": "centaur",
+            "number": 704,
+            "kind": "pr",
+            "review_comment_id": 99,
+        }
+    finally:
+        reset_tool_context(token)
+
+
+def test_current_github_thread_rejects_slack_thread(monkeypatch: pytest.MonkeyPatch):
+    payload = (
+        b'{"thread_key":"slack:C123:123.456","platform":"slack",'
+        b'"slack":{"channel_id":"C123","thread_ts":"123.456"}}'
+    )
+    monkeypatch.setattr(
+        "urllib.request.urlopen", lambda _request, timeout: _fake_context_response(payload)()
+    )
+    token = set_tool_context(
+        ToolContext(
+            name="fake-tool",
+            thread_key="slack:C123:123.456",
+            secrets={"CENTAUR_API_URL": "http://api:8000", "CENTAUR_API_KEY": ""},
+        )
+    )
+    try:
+        with pytest.raises(RuntimeError, match="not a GitHub thread"):
+            current_github_thread()
+    finally:
+        reset_tool_context(token)
+
+
+def test_current_linear_thread_rejects_slack_thread(monkeypatch: pytest.MonkeyPatch):
+    payload = (
+        b'{"thread_key":"slack:C123:123.456","platform":"slack",'
+        b'"slack":{"channel_id":"C123","thread_ts":"123.456"}}'
+    )
+    monkeypatch.setattr(
+        "urllib.request.urlopen", lambda _request, timeout: _fake_context_response(payload)()
+    )
+    token = set_tool_context(
+        ToolContext(
+            name="fake-tool",
+            thread_key="slack:C123:123.456",
+            secrets={"CENTAUR_API_URL": "http://api:8000", "CENTAUR_API_KEY": ""},
+        )
+    )
+    try:
+        with pytest.raises(RuntimeError, match="not a Linear thread"):
+            current_linear_thread()
+    finally:
+        reset_tool_context(token)
+
+
+def test_current_discord_thread_rejects_slack_thread(monkeypatch: pytest.MonkeyPatch):
+    payload = (
+        b'{"thread_key":"slack:C123:123.456","platform":"slack",'
+        b'"slack":{"channel_id":"C123","thread_ts":"123.456"}}'
+    )
+    monkeypatch.setattr(
+        "urllib.request.urlopen", lambda _request, timeout: _fake_context_response(payload)()
+    )
+    token = set_tool_context(
+        ToolContext(
+            name="fake-tool",
+            thread_key="slack:C123:123.456",
+            secrets={"CENTAUR_API_URL": "http://api:8000", "CENTAUR_API_KEY": ""},
+        )
+    )
+    try:
+        with pytest.raises(RuntimeError, match="not a Discord thread"):
+            current_discord_thread()
+    finally:
+        reset_tool_context(token)
+
+
 def test_save_attachment_writes_to_sandbox_uploads_dir(
     monkeypatch: pytest.MonkeyPatch, tmp_path
 ):