@harbinger-ai/harbinger 0.1.0

package/templates/docker/job-pi-coding-agent/entrypoint.sh

@@ -0,0 +1,163 @@
+#!/bin/bash
+set -e
+
+# Extract job ID from branch name (job/uuid -> uuid), fallback to random UUID
+if [[ "$BRANCH" == job/* ]]; then
+    JOB_ID="${BRANCH#job/}"
+else
+    JOB_ID=$(cat /proc/sys/kernel/random/uuid)
+fi
+echo "Job ID: ${JOB_ID}"
+
+# Export SECRETS (JSON) as flat env vars (GH_TOKEN, ANTHROPIC_API_KEY, etc.)
+# These are filtered from LLM's bash subprocess by env-sanitizer extension
+if [ -n "$SECRETS" ]; then
+    eval $(echo "$SECRETS" | jq -r 'to_entries | .[] | "export \(.key)=\(.value | @sh)"')
+fi
+
+# Export LLM_SECRETS (JSON) as flat env vars
+# These are NOT filtered - LLM can access these (browser logins, skill API keys, etc.)
+if [ -n "$LLM_SECRETS" ]; then
+    eval $(echo "$LLM_SECRETS" | jq -r 'to_entries | .[] | "export \(.key)=\(.value | @sh)"')
+fi
+
+# Git setup - derive identity from GitHub token
+gh auth setup-git
+GH_USER_JSON=$(gh api user -q '{name: .name, login: .login, email: .email, id: .id}')
+GH_USER_NAME=$(echo "$GH_USER_JSON" | jq -r '.name // .login')
+GH_USER_EMAIL=$(echo "$GH_USER_JSON" | jq -r '.email // "\(.id)+\(.login)@users.noreply.github.com"')
+git config --global user.name "$GH_USER_NAME"
+git config --global user.email "$GH_USER_EMAIL"
+
+# Clone branch
+if [ -n "$REPO_URL" ]; then
+    git clone --single-branch --branch "$BRANCH" --depth 1 "$REPO_URL" /job
+else
+    echo "No REPO_URL provided"
+fi
+
+cd /job
+
+# Create temp directory for agent use (gitignored via tmp/)
+mkdir -p /job/tmp
+
+# Install npm deps for active skills (native deps need correct Linux arch)
+for skill_dir in /job/skills/active/*/; do
+    if [ -f "${skill_dir}package.json" ]; then
+        echo "Installing skill deps: $(basename "$skill_dir")"
+        (cd "$skill_dir" && npm install --omit=dev --no-package-lock)
+    fi
+done
+
+# Start Chrome if available (installed by browser-tools skill via Puppeteer)
+CHROME_PID=""
+CHROME_BIN=$(find /root/.cache/puppeteer -name "chrome" -type f 2>/dev/null | head -1)
+if [ -n "$CHROME_BIN" ]; then
+    $CHROME_BIN --headless --no-sandbox --disable-gpu --remote-debugging-port=9222 2>/dev/null &
+    CHROME_PID=$!
+    sleep 2
+fi
+
+# Setup logs
+LOG_DIR="/job/logs/${JOB_ID}"
+mkdir -p "${LOG_DIR}"
+
+# 1. Build system prompt from config MD files
+SYSTEM_FILES=("SOUL.md" "AGENT.md")
+> /job/.pi/SYSTEM.md
+for i in "${!SYSTEM_FILES[@]}"; do
+    cat "/job/config/${SYSTEM_FILES[$i]}" >> /job/.pi/SYSTEM.md
+    if [ "$i" -lt $((${#SYSTEM_FILES[@]} - 1)) ]; then
+        echo -e "\n\n" >> /job/.pi/SYSTEM.md
+    fi
+done
+
+# Resolve {{datetime}} variable in SYSTEM.md
+sed -i "s/{{datetime}}/$(date -u +"%Y-%m-%dT%H:%M:%SZ")/g" /job/.pi/SYSTEM.md
+
+# Read job metadata from job.config.json
+JOB_CONFIG="/job/logs/${JOB_ID}/job.config.json"
+TITLE=$(jq -r '.title // empty' "$JOB_CONFIG")
+JOB_DESCRIPTION=$(jq -r '.job // empty' "$JOB_CONFIG")
+
+PROMPT="
+
+# Your Job
+
+${JOB_DESCRIPTION}"
+
+LLM_PROVIDER="${LLM_PROVIDER:-anthropic}"
+
+MODEL_FLAGS="--provider $LLM_PROVIDER"
+if [ -n "$LLM_MODEL" ]; then
+    MODEL_FLAGS="$MODEL_FLAGS --model $LLM_MODEL"
+fi
+
+# Generate models.json for custom provider (OpenAI-compatible endpoints like Ollama)
+if [ "$LLM_PROVIDER" = "custom" ] && [ -n "$OPENAI_BASE_URL" ]; then
+    # If no API key was provided, set a dummy so Pi doesn't send empty auth
+    if [ -z "$CUSTOM_API_KEY" ]; then
+        export CUSTOM_API_KEY="not-needed"
+    fi
+    cat > /root/.pi/agent/models.json <<MODELS
+{
+  "providers": {
+    "custom": {
+      "baseUrl": "$OPENAI_BASE_URL",
+      "api": "openai-completions",
+      "apiKey": "CUSTOM_API_KEY",
+      "models": [{ "id": "$LLM_MODEL" }]
+    }
+  }
+}
+MODELS
+fi
+
+# Copy custom models.json to PI's global config if present in repo (overrides generated)
+if [ -f "/job/.pi/agent/models.json" ]; then
+    mkdir -p /root/.pi/agent
+    cp /job/.pi/agent/models.json /root/.pi/agent/models.json
+fi
+
+# Run Pi — capture exit code instead of letting set -e kill the script
+set +e
+pi $MODEL_FLAGS -p "$PROMPT" --session-dir "${LOG_DIR}"
+PI_EXIT=$?
+
+# 2. Commit based on outcome
+if [ $PI_EXIT -ne 0 ]; then
+    # Pi failed — only commit session logs, not partial code changes
+    git reset || true
+    git add -f "${LOG_DIR}"
+    git commit -m "🤖 Agent Job: ${TITLE} (failed)" || true
+else
+    # Pi succeeded — commit everything
+    git add -A
+    git add -f "${LOG_DIR}"
+    git commit -m "🤖 Agent Job: ${TITLE}" || true
+fi
+
+git push origin
+set -e
+
+# 3. Merge (pi has memory of job via session)
+#if [ -n "$REPO_URL" ] && [ -f "/job/MERGE_JOB.md" ]; then
+#    echo "MERGED"
+#    pi -p "$(cat /job/MERGE_JOB.md)" --session-dir "${LOG_DIR}" --continue
+#fi
+
+# 5. Create PR (auto-merge handled by GitHub Actions workflow)
+gh pr create --title "🤖 Agent Job: ${TITLE}" --body "${JOB_DESCRIPTION}" --base main || true
+
+# Cleanup
+if [ -n "$CHROME_PID" ]; then
+    kill $CHROME_PID 2>/dev/null || true
+fi
+
+# Re-raise Pi's failure so the workflow reports it
+if [ $PI_EXIT -ne 0 ]; then
+    echo "Pi exited with code ${PI_EXIT}"
+    exit $PI_EXIT
+fi
+
+echo "Done. Job ID: ${JOB_ID}"

package/templates/docker-compose.yml

@@ -0,0 +1,63 @@
+services:
+  traefik:
+    image: traefik:v3
+    command:
+      - --providers.docker=true
+      - --providers.docker.exposedByDefault=false
+      - --entrypoints.web.address=:80
+      - --entrypoints.websecure.address=:443
+      ## Uncomment the following lines to enable TLS via Let's Encrypt
+      ## (requires LETSENCRYPT_EMAIL in .env):
+      # - --entrypoints.web.http.redirections.entrypoint.to=websecure
+      # - --entrypoints.web.http.redirections.entrypoint.scheme=https
+      # - --certificatesresolvers.letsencrypt.acme.email=${LETSENCRYPT_EMAIL}
+      # - --certificatesresolvers.letsencrypt.acme.storage=/letsencrypt/acme.json
+      # - --certificatesresolvers.letsencrypt.acme.httpchallenge.entrypoint=web
+    ports:
+      - "80:80"
+      - "443:443"
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+      - traefik_certs:/letsencrypt
+    restart: unless-stopped
+
+  event-handler:
+    container_name: thepopebot-event-handler
+    image: ${EVENT_HANDLER_IMAGE_URL:-stephengpope/thepopebot:event-handler-${THEPOPEBOT_VERSION:-latest}}
+    volumes:
+      - .:/app
+      - /app/node_modules
+    labels:
+      - traefik.enable=true
+      # Set APP_HOSTNAME in .env to the domain from APP_URL (e.g., mybot.example.com)
+      - traefik.http.routers.event-handler.rule=Host(`${APP_HOSTNAME}`)
+      - traefik.http.routers.event-handler.entrypoints=web
+      - traefik.http.services.event-handler.loadbalancer.server.port=80
+      ## Uncomment the following lines to enable TLS via Let's Encrypt:
+      # - traefik.http.routers.event-handler.entrypoints=websecure
+      # - traefik.http.routers.event-handler.tls.certresolver=letsencrypt
+    stop_grace_period: 120s
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:80/api/ping"]
+      interval: 10s
+      timeout: 3s
+      retries: 3
+      start_period: 30s
+    restart: unless-stopped
+
+  runner:
+    image: myoung34/github-runner:latest
+    deploy:
+      replicas: ${RUNNER_REPLICAS:-2}
+    environment:
+      REPO_URL: https://github.com/${GH_OWNER}/${GH_REPO}
+      ACCESS_TOKEN: ${GH_TOKEN}
+      RUNNER_SCOPE: repo
+      LABELS: self-hosted
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+      - .:/project:ro
+    restart: unless-stopped
+
+volumes:
+  traefik_certs:

package/templates/instrumentation.js

@@ -0,0 +1,6 @@
+export async function register() {
+  if (process.env.NEXT_RUNTIME === 'nodejs') {
+    const { register } = await import('thepopebot/instrumentation');
+    await register();
+  }
+}

package/templates/middleware.js

@@ -0,0 +1 @@
+export { middleware, config } from 'thepopebot/middleware';

package/templates/next.config.mjs

@@ -0,0 +1,3 @@
+import { withThepopebot } from 'thepopebot/config';
+
+export default withThepopebot({});

package/templates/postcss.config.mjs

@@ -0,0 +1,5 @@
+export default {
+  plugins: {
+    '@tailwindcss/postcss': {},
+  },
+};

package/templates/skills/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024 Mario Zechner
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/templates/skills/README.md

@@ -0,0 +1,119 @@
+# pi-skills
+
+A collection of skills for [pi-coding-agent](https://github.com/badlogic/pi-mono/tree/main/packages/coding-agent), compatible with Claude Code, Codex CLI, Amp, and Droid.
+
+## Installation
+
+### pi-coding-agent
+
+```bash
+# User-level (available in all projects)
+git clone https://github.com/badlogic/pi-skills ~/.pi/agent/skills/pi-skills
+
+# Or project-level
+git clone https://github.com/badlogic/pi-skills .pi/skills/pi-skills
+```
+
+### Codex CLI
+
+```bash
+git clone https://github.com/badlogic/pi-skills ~/.codex/skills/pi-skills
+```
+
+### Amp
+
+Amp finds skills recursively in toolboxes:
+
+```bash
+git clone https://github.com/badlogic/pi-skills ~/.config/amp/tools/pi-skills
+```
+
+### Droid (Factory)
+
+```bash
+# User-level
+git clone https://github.com/badlogic/pi-skills ~/.factory/skills/pi-skills
+
+# Or project-level
+git clone https://github.com/badlogic/pi-skills .factory/skills/pi-skills
+```
+
+### Claude Code
+
+Claude Code only looks one level deep for `SKILL.md` files, so each skill folder must be directly under the skills directory. Clone the repo somewhere, then symlink individual skills:
+
+```bash
+# Clone to a convenient location
+git clone https://github.com/badlogic/pi-skills ~/pi-skills
+
+# Symlink individual skills (user-level)
+mkdir -p ~/.claude/skills
+ln -s ~/pi-skills/brave-search ~/.claude/skills/brave-search
+ln -s ~/pi-skills/browser-tools ~/.claude/skills/browser-tools
+ln -s ~/pi-skills/gccli ~/.claude/skills/gccli
+ln -s ~/pi-skills/gdcli ~/.claude/skills/gdcli
+ln -s ~/pi-skills/gmcli ~/.claude/skills/gmcli
+ln -s ~/pi-skills/transcribe ~/.claude/skills/transcribe
+ln -s ~/pi-skills/vscode ~/.claude/skills/vscode
+ln -s ~/pi-skills/youtube-transcript ~/.claude/skills/youtube-transcript
+
+# Or project-level
+mkdir -p .claude/skills
+ln -s ~/pi-skills/brave-search .claude/skills/brave-search
+ln -s ~/pi-skills/browser-tools .claude/skills/browser-tools
+ln -s ~/pi-skills/gccli .claude/skills/gccli
+ln -s ~/pi-skills/gdcli .claude/skills/gdcli
+ln -s ~/pi-skills/gmcli .claude/skills/gmcli
+ln -s ~/pi-skills/transcribe .claude/skills/transcribe
+ln -s ~/pi-skills/vscode .claude/skills/vscode
+ln -s ~/pi-skills/youtube-transcript .claude/skills/youtube-transcript
+```
+
+## Available Skills
+
+| Skill | Description |
+|-------|-------------|
+| [brave-search](brave-search/SKILL.md) | Web search and content extraction via Brave Search |
+| [browser-tools](browser-tools/SKILL.md) | Interactive browser automation via Chrome DevTools Protocol |
+| [gccli](gccli/SKILL.md) | Google Calendar CLI for events and availability |
+| [gdcli](gdcli/SKILL.md) | Google Drive CLI for file management and sharing |
+| [gmcli](gmcli/SKILL.md) | Gmail CLI for email, drafts, and labels |
+| [transcribe](transcribe/SKILL.md) | Speech-to-text transcription via Groq Whisper API |
+| [vscode](vscode/SKILL.md) | VS Code integration for diffs and file comparison |
+| [youtube-transcript](youtube-transcript/SKILL.md) | Fetch YouTube video transcripts |
+
+## Skill Format
+
+Each skill follows the pi/Claude Code format:
+
+```markdown
+---
+name: skill-name
+description: Short description shown to agent
+---
+
+# Instructions
+
+Detailed instructions here...
+Helper files available at: skills/skill-name/
+```
+
+Skills use project-root-relative paths (e.g., `skills/brave-search/search.js`).
+
+## Requirements
+
+Some skills require additional setup. Generally, the agent will walk you through that. But if not, here you go:
+
+- **brave-search**: Requires Node.js. Run `npm install` in the skill directory.
+- **browser-tools**: Requires Chrome and Node.js. Run `npm install` in the skill directory.
+- **gccli**: Requires Node.js. Install globally with `npm install -g @mariozechner/gccli`.
+- **gdcli**: Requires Node.js. Install globally with `npm install -g @mariozechner/gdcli`.
+- **gmcli**: Requires Node.js. Install globally with `npm install -g @mariozechner/gmcli`.
+- **subagent**: Requires pi-coding-agent. Install globally with `npm install -g @mariozechner/pi-coding-agent`.
+- **transcribe**: Requires curl and a Groq API key.
+- **vscode**: Requires VS Code with `code` CLI in PATH.
+- **youtube-transcript**: Requires Node.js. Run `npm install` in the skill directory.
+
+## License
+
+MIT

package/templates/skills/brave-search/SKILL.md

@@ -0,0 +1,79 @@
+---
+name: brave-search
+description: Web search and content extraction via Brave Search API. Use for searching documentation, facts, or any web content. Lightweight, no browser required.
+---
+
+# Brave Search
+
+Web search and content extraction using the official Brave Search API. No browser required.
+
+## Setup
+
+Requires a Brave Search API account with a free subscription. A credit card is required to create the free subscription (you won't be charged).
+
+1. Create an account at https://api-dashboard.search.brave.com/register
+2. Create a "Free AI" subscription
+3. Create an API key for the subscription
+4. Add to your shell profile (`~/.profile` or `~/.zprofile` for zsh):
+   ```bash
+   export BRAVE_API_KEY="your-api-key-here"
+   ```
+5. Install dependencies (run once):
+   ```bash
+   cd skills/brave-search
+   npm install
+   ```
+
+## Search
+
+```bash
+skills/brave-search/search.js "query"                         # Basic search (5 results)
+skills/brave-search/search.js "query" -n 10                   # More results (max 20)
+skills/brave-search/search.js "query" --content               # Include page content as markdown
+skills/brave-search/search.js "query" --freshness pw          # Results from last week
+skills/brave-search/search.js "query" --freshness 2024-01-01to2024-06-30  # Date range
+skills/brave-search/search.js "query" --country DE            # Results from Germany
+skills/brave-search/search.js "query" -n 3 --content          # Combined options
+```
+
+### Options
+
+- `-n <num>` - Number of results (default: 5, max: 20)
+- `--content` - Fetch and include page content as markdown
+- `--country <code>` - Two-letter country code (default: US)
+- `--freshness <period>` - Filter by time:
+  - `pd` - Past day (24 hours)
+  - `pw` - Past week
+  - `pm` - Past month
+  - `py` - Past year
+  - `YYYY-MM-DDtoYYYY-MM-DD` - Custom date range
+
+## Extract Page Content
+
+```bash
+skills/brave-search/content.js https://example.com/article
+```
+
+Fetches a URL and extracts readable content as markdown.
+
+## Output Format
+
+```
+--- Result 1 ---
+Title: Page Title
+Link: https://example.com/page
+Age: 2 days ago
+Snippet: Description from search results
+Content: (if --content flag used)
+  Markdown content extracted from the page...
+
+--- Result 2 ---
+...
+```
+
+## When to Use
+
+- Searching for documentation or API references
+- Looking up facts or current information
+- Fetching content from specific URLs
+- Any task requiring web search without interactive browsing

package/templates/skills/brave-search/content.js

@@ -0,0 +1,86 @@
+#!/usr/bin/env node
+
+import { Readability } from "@mozilla/readability";
+import { JSDOM } from "jsdom";
+import TurndownService from "turndown";
+import { gfm } from "turndown-plugin-gfm";
+
+const url = process.argv[2];
+
+if (!url) {
+	console.log("Usage: content.js <url>");
+	console.log("\nExtracts readable content from a webpage as markdown.");
+	console.log("\nExamples:");
+	console.log("  content.js https://example.com/article");
+	console.log("  content.js https://doc.rust-lang.org/book/ch04-01-what-is-ownership.html");
+	process.exit(1);
+}
+
+function htmlToMarkdown(html) {
+	const turndown = new TurndownService({ headingStyle: "atx", codeBlockStyle: "fenced" });
+	turndown.use(gfm);
+	turndown.addRule("removeEmptyLinks", {
+		filter: (node) => node.nodeName === "A" && !node.textContent?.trim(),
+		replacement: () => "",
+	});
+	return turndown
+		.turndown(html)
+		.replace(/\[\\?\[\s*\\?\]\]\([^)]*\)/g, "")
+		.replace(/ +/g, " ")
+		.replace(/\s+,/g, ",")
+		.replace(/\s+\./g, ".")
+		.replace(/\n{3,}/g, "\n\n")
+		.trim();
+}
+
+try {
+	const response = await fetch(url, {
+		headers: {
+			"User-Agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36",
+			"Accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
+			"Accept-Language": "en-US,en;q=0.9",
+		},
+		signal: AbortSignal.timeout(15000),
+	});
+	
+	if (!response.ok) {
+		console.error(`HTTP ${response.status}: ${response.statusText}`);
+		process.exit(1);
+	}
+	
+	const html = await response.text();
+	const dom = new JSDOM(html, { url });
+	const reader = new Readability(dom.window.document);
+	const article = reader.parse();
+	
+	if (article && article.content) {
+		if (article.title) {
+			console.log(`# ${article.title}\n`);
+		}
+		console.log(htmlToMarkdown(article.content));
+		process.exit(0);
+	}
+	
+	// Fallback: try to extract main content
+	const fallbackDoc = new JSDOM(html, { url });
+	const body = fallbackDoc.window.document;
+	body.querySelectorAll("script, style, noscript, nav, header, footer, aside").forEach(el => el.remove());
+	
+	const title = body.querySelector("title")?.textContent?.trim();
+	const main = body.querySelector("main, article, [role='main'], .content, #content") || body.body;
+	
+	if (title) {
+		console.log(`# ${title}\n`);
+	}
+	
+	const text = main?.innerHTML || "";
+	if (text.trim().length > 100) {
+		console.log(htmlToMarkdown(text));
+	} else {
+		console.error("Could not extract readable content from this page.");
+		process.exit(1);
+	}
+} catch (e) {
+	console.error(`Error: ${e.message}`);
+	process.exit(1);
+}