@openhands/extensions 0.0.1-alpha → 0.2.0

package/skills/theme-factory/themes/botanical-garden.md

@@ -0,0 +1,19 @@
+# Botanical Garden
+
+A fresh and organic theme featuring vibrant garden-inspired colors for lively presentations.
+
+## Color Palette
+
+- **Fern Green**: `#4a7c59` - Rich natural green
+- **Marigold**: `#f9a620` - Bright floral accent
+- **Terracotta**: `#b7472a` - Earthy warm tone
+- **Cream**: `#f5f3ed` - Soft neutral backgrounds
+
+## Typography
+
+- **Headers**: DejaVu Serif Bold
+- **Body Text**: DejaVu Sans
+
+## Best Used For
+
+Garden centers, food presentations, farm-to-table content, botanical brands, natural products.

package/skills/theme-factory/themes/desert-rose.md

@@ -0,0 +1,19 @@
+# Desert Rose
+
+A soft and sophisticated theme with dusty, muted tones perfect for elegant presentations.
+
+## Color Palette
+
+- **Dusty Rose**: `#d4a5a5` - Soft primary color
+- **Clay**: `#b87d6d` - Earthy accent
+- **Sand**: `#e8d5c4` - Warm neutral backgrounds
+- **Deep Burgundy**: `#5d2e46` - Rich dark contrast
+
+## Typography
+
+- **Headers**: FreeSans Bold
+- **Body Text**: FreeSans
+
+## Best Used For
+
+Fashion presentations, beauty brands, wedding planning, interior design, boutique businesses.

package/skills/theme-factory/themes/forest-canopy.md

@@ -0,0 +1,19 @@
+# Forest Canopy
+
+A natural and grounded theme featuring earth tones inspired by dense forest environments.
+
+## Color Palette
+
+- **Forest Green**: `#2d4a2b` - Primary dark green
+- **Sage**: `#7d8471` - Muted green accent
+- **Olive**: `#a4ac86` - Light accent color
+- **Ivory**: `#faf9f6` - Backgrounds and text
+
+## Typography
+
+- **Headers**: FreeSerif Bold
+- **Body Text**: FreeSans
+
+## Best Used For
+
+Environmental presentations, sustainability reports, outdoor brands, wellness content, organic products.

package/skills/theme-factory/themes/golden-hour.md

@@ -0,0 +1,19 @@
+# Golden Hour
+
+A rich and warm autumnal palette that creates an inviting and sophisticated atmosphere.
+
+## Color Palette
+
+- **Mustard Yellow**: `#f4a900` - Bold primary accent
+- **Terracotta**: `#c1666b` - Warm secondary color
+- **Warm Beige**: `#d4b896` - Neutral backgrounds
+- **Chocolate Brown**: `#4a403a` - Dark text and anchors
+
+## Typography
+
+- **Headers**: FreeSans Bold
+- **Body Text**: FreeSans
+
+## Best Used For
+
+Restaurant presentations, hospitality brands, fall campaigns, cozy lifestyle content, artisan products.

package/skills/theme-factory/themes/midnight-galaxy.md

@@ -0,0 +1,19 @@
+# Midnight Galaxy
+
+A dramatic and cosmic theme with deep purples and mystical tones for impactful presentations.
+
+## Color Palette
+
+- **Deep Purple**: `#2b1e3e` - Rich dark base
+- **Cosmic Blue**: `#4a4e8f` - Mystical mid-tone
+- **Lavender**: `#a490c2` - Soft accent color
+- **Silver**: `#e6e6fa` - Light highlights and text
+
+## Typography
+
+- **Headers**: FreeSans Bold
+- **Body Text**: FreeSans
+
+## Best Used For
+
+Entertainment industry, gaming presentations, nightlife venues, luxury brands, creative agencies.

package/skills/theme-factory/themes/modern-minimalist.md

@@ -0,0 +1,19 @@
+# Modern Minimalist
+
+A clean and contemporary theme with a sophisticated grayscale palette for maximum versatility.
+
+## Color Palette
+
+- **Charcoal**: `#36454f` - Primary dark color
+- **Slate Gray**: `#708090` - Medium gray for accents
+- **Light Gray**: `#d3d3d3` - Backgrounds and dividers
+- **White**: `#ffffff` - Text and clean backgrounds
+
+## Typography
+
+- **Headers**: DejaVu Sans Bold
+- **Body Text**: DejaVu Sans
+
+## Best Used For
+
+Tech presentations, architecture portfolios, design showcases, modern business proposals, data visualization.

package/skills/theme-factory/themes/ocean-depths.md

@@ -0,0 +1,19 @@
+# Ocean Depths
+
+A professional and calming maritime theme that evokes the serenity of deep ocean waters.
+
+## Color Palette
+
+- **Deep Navy**: `#1a2332` - Primary background color
+- **Teal**: `#2d8b8b` - Accent color for highlights and emphasis
+- **Seafoam**: `#a8dadc` - Secondary accent for lighter elements
+- **Cream**: `#f1faee` - Text and light backgrounds
+
+## Typography
+
+- **Headers**: DejaVu Sans Bold
+- **Body Text**: DejaVu Sans
+
+## Best Used For
+
+Corporate presentations, financial reports, professional consulting decks, trust-building content.

package/skills/theme-factory/themes/sunset-boulevard.md

@@ -0,0 +1,19 @@
+# Sunset Boulevard
+
+A warm and vibrant theme inspired by golden hour sunsets, perfect for energetic and creative presentations.
+
+## Color Palette
+
+- **Burnt Orange**: `#e76f51` - Primary accent color
+- **Coral**: `#f4a261` - Secondary warm accent
+- **Warm Sand**: `#e9c46a` - Highlighting and backgrounds
+- **Deep Purple**: `#264653` - Dark contrast and text
+
+## Typography
+
+- **Headers**: DejaVu Serif Bold
+- **Body Text**: DejaVu Sans
+
+## Best Used For
+
+Creative pitches, marketing presentations, lifestyle brands, event promotions, inspirational content.

package/skills/theme-factory/themes/tech-innovation.md

@@ -0,0 +1,19 @@
+# Tech Innovation
+
+A bold and modern theme with high-contrast colors perfect for cutting-edge technology presentations.
+
+## Color Palette
+
+- **Electric Blue**: `#0066ff` - Vibrant primary accent
+- **Neon Cyan**: `#00ffff` - Bright highlight color
+- **Dark Gray**: `#1e1e1e` - Deep backgrounds
+- **White**: `#ffffff` - Clean text and contrast
+
+## Typography
+
+- **Headers**: DejaVu Sans Bold
+- **Body Text**: DejaVu Sans
+
+## Best Used For
+
+Tech startups, software launches, innovation showcases, AI/ML presentations, digital transformation content.

package/skills/uv/.plugin/plugin.json

@@ -0,0 +1,18 @@
+{
+  "name": "uv",
+  "version": "1.0.0",
+  "description": "Common project, dependency, and environment operations using uv.",
+  "author": {
+    "name": "OpenHands",
+    "email": "contact@all-hands.dev"
+  },
+  "homepage": "https://github.com/OpenHands/extensions",
+  "repository": "https://github.com/OpenHands/extensions",
+  "license": "MIT",
+  "keywords": [
+    "uv",
+    "python",
+    "dependencies",
+    "venv"
+  ]
+}

package/skills/uv/README.md

@@ -0,0 +1,5 @@
+# uv
+
+This skill documents common project, dependency, and environment operations using **uv**.
+
+See: [SKILL.md](./SKILL.md)

package/skills/uv/SKILL.md

@@ -0,0 +1,95 @@
+---
+name: uv
+description: If the project uses uv, use this skill. Use this skill to create/manage Python projects and environments with `uv`, add/remove dependencies, sync a project from `uv.lock`, and run commands in the project environment.
+triggers:
+- uv
+- uv.lock
+---
+
+# uv (Python)
+
+Use `uv` as the default tool for Python dependency + environment management when the repo has `uv.lock`, mentions `uv` in its docs/Makefile, or already uses a `.venv` created by `uv`.
+
+## Quick decision rules
+
+- If the repo has `uv.lock` and `pyproject.toml`: treat it as a uv-managed project.
+- If the repo has only `requirements.txt`: you can still use `uv pip` for fast installs.
+- Prefer **project commands** (`uv add/remove/sync/run/lock`) over raw `pip` unless the repo explicitly uses `uv pip`.
+
+## Installation (if needed)
+
+Prefer a packaged install method when available. If you use the official installer, review it first (avoid blindly piping into a shell) and follow the latest instructions in the official docs.
+
+```bash
+# macOS/Linux (official installer)
+curl -LsSf https://astral.sh/uv/install.sh | sh
+
+# Windows (PowerShell, official installer)
+powershell -ExecutionPolicy ByPass -c "irm https://astral.sh/uv/install.ps1 | iex"
+```
+
+## Common operations
+
+### Initialize a new project
+
+```bash
+uv init
+# or
+uv init my-project
+```
+
+### Create / use a virtual environment
+
+```bash
+uv venv  # creates .venv
+
+# If you need a specific version, match the project's declared requirement
+# (e.g., pyproject.toml / CI config), not an arbitrary latest version.
+uv venv --python 3.x
+
+# optional activation (not required for uv commands)
+source .venv/bin/activate  # macOS/Linux
+# .venv\\Scripts\\activate   # Windows
+```
+
+### Add / remove dependencies (updates pyproject.toml and uv.lock)
+
+```bash
+uv add requests
+uv add 'requests==2.31.0'
+uv add -r requirements.txt
+
+uv remove requests
+```
+
+### Lock + sync (reproducible installs)
+
+```bash
+uv lock   # (re)generate uv.lock
+uv sync   # create/update .venv to match uv.lock
+```
+
+If you pulled new changes and `uv.lock` changed, run `uv sync`.
+
+### Run commands inside the project environment
+
+```bash
+uv run python -m pytest -q
+uv run python main.py
+uv run ruff check .
+```
+
+### Using uv as a fast pip replacement (requirements workflows)
+
+```bash
+uv venv
+uv pip install -r requirements.txt
+uv pip freeze
+uv pip list
+```
+
+## Notes / pitfalls
+
+- `uv` will usually auto-detect and use `.venv` in the project root.
+- In CI/containers you may see `uv pip install --system`, but prefer virtualenvs for local dev.
+- If a command mutates deps, prefer `uv add/remove/lock/sync` so `uv.lock` stays correct.

package/skills/uv/references/README.md

@@ -0,0 +1,5 @@
+# References (uv)
+
+- https://docs.astral.sh/uv/
+- https://docs.astral.sh/uv/guides/projects/
+- https://docs.astral.sh/uv/reference/cli/

package/skills/vercel/.plugin/plugin.json

@@ -0,0 +1,18 @@
+{
+  "name": "vercel",
+  "version": "1.0.0",
+  "description": "Deploy and manage applications on Vercel, including preview deployments and deployment protection.",
+  "author": {
+    "name": "OpenHands",
+    "email": "contact@all-hands.dev"
+  },
+  "homepage": "https://github.com/OpenHands/extensions",
+  "repository": "https://github.com/OpenHands/extensions",
+  "license": "MIT",
+  "keywords": [
+    "vercel",
+    "deployment",
+    "preview",
+    "hosting"
+  ]
+}

package/skills/vercel/README.md

@@ -0,0 +1,108 @@
+# Vercel
+
+Deploy and manage applications on Vercel, including preview deployments and deployment protection. Use when working with Vercel-hosted projects or configuring Vercel deployments.
+
+## Triggers
+
+This skill is activated by the following keywords:
+
+- `vercel`
+- `preview deployment`
+
+## Details
+
+# Vercel Deployment Guide
+
+## Deployment Protection and Agent Access
+
+Vercel deployments may have **Deployment Protection** enabled, which requires authentication to access preview deployments. This can block automated testing and agent access to preview URLs.
+
+### Identifying Protected Deployments
+
+If you encounter a login page or authentication requirement when accessing a Vercel preview URL, the deployment has protection enabled. Signs include:
+- Redirect to `vercel.com/login` or SSO login page
+- 401/403 errors when accessing the deployment
+- Preview URLs that require Vercel team membership
+
+### Enabling Agent Access with Protection Bypass
+
+To allow agents and automated systems to access protected deployments, users need to set up **Protection Bypass for Automation**:
+
+1. **Navigate to Project Settings**
+   - Go to the Vercel Dashboard
+   - Select the project
+   - Click on **Settings** → **Deployment Protection**
+
+2. **Generate a Protection Bypass Secret**
+   - Under "Protection Bypass for Automation", click **Generate Secret**
+   - Copy the generated secret securely
+
+3. **Using the Bypass Secret**
+   
+   The secret can be used in two ways:
+   
+   **As a Header:**
+   ```bash
+   curl -H "x-vercel-protection-bypass: <secret>" https://your-preview-url.vercel.app
+   ```
+   
+   **As a Query Parameter:**
+   ```
+   https://your-preview-url.vercel.app?x-vercel-protection-bypass=<secret>
+   ```
+
+4. **For Browser-Based Testing**
+   - Append `?x-vercel-protection-bypass=<secret>` to the preview URL
+   - The secret will be stored in a cookie for subsequent requests
+
+### Alternative: Disable Protection for Previews
+
+If protection bypass is not suitable, users can disable protection for preview deployments:
+
+1. Go to **Settings** → **Deployment Protection**
+2. Set "Vercel Authentication" to **Only Production Deployments** or **Disabled**
+
+<IMPORTANT>
+If you cannot access a Vercel preview deployment due to authentication requirements, inform the user that they need to either:
+1. Set up a Protection Bypass secret and provide it to you, OR
+2. Disable Deployment Protection for preview deployments in their Vercel project settings
+
+Do NOT repeatedly attempt to access protected URLs without the bypass secret.
+</IMPORTANT>
+
+## Environment Variables
+
+Set environment variables in Vercel Dashboard under **Settings** → **Environment Variables**, or use the Vercel CLI:
+
+```bash
+vercel env add MY_SECRET
+```
+
+Access in your application:
+```typescript
+const secret = process.env.MY_SECRET;
+```
+
+## Vercel CLI Commands
+
+Common Vercel CLI commands:
+
+```bash
+# Login to Vercel
+vercel login
+
+# Deploy to preview
+vercel
+
+# Deploy to production
+vercel --prod
+
+# List deployments
+vercel ls
+
+# View deployment logs
+vercel logs <deployment-url>
+
+# Pull environment variables locally
+vercel env pull
+```

package/skills/vercel/SKILL.md

@@ -0,0 +1,103 @@
+---
+name: vercel
+description: Deploy and manage applications on Vercel, including preview deployments and deployment protection. Use when working with Vercel-hosted projects or configuring Vercel deployments.
+triggers:
+- vercel
+- preview deployment
+---
+
+# Vercel Deployment Guide
+
+## Deployment Protection and Agent Access
+
+Vercel deployments may have **Deployment Protection** enabled, which requires authentication to access preview deployments. This can block automated testing and agent access to preview URLs.
+
+### Identifying Protected Deployments
+
+If you encounter a login page or authentication requirement when accessing a Vercel preview URL, the deployment has protection enabled. Signs include:
+- Redirect to `vercel.com/login` or SSO login page
+- 401/403 errors when accessing the deployment
+- Preview URLs that require Vercel team membership
+
+### Enabling Agent Access with Protection Bypass
+
+To allow agents and automated systems to access protected deployments, users need to set up **Protection Bypass for Automation**:
+
+1. **Navigate to Project Settings**
+   - Go to the Vercel Dashboard
+   - Select the project
+   - Click on **Settings** → **Deployment Protection**
+
+2. **Generate a Protection Bypass Secret**
+   - Under "Protection Bypass for Automation", click **Generate Secret**
+   - Copy the generated secret securely
+
+3. **Using the Bypass Secret**
+   
+   The secret can be used in two ways:
+   
+   **As a Header:**
+   ```bash
+   curl -H "x-vercel-protection-bypass: <secret>" https://your-preview-url.vercel.app
+   ```
+   
+   **As a Query Parameter:**
+   ```
+   https://your-preview-url.vercel.app?x-vercel-protection-bypass=<secret>
+   ```
+
+4. **For Browser-Based Testing**
+   - Append `?x-vercel-protection-bypass=<secret>` to the preview URL
+   - The secret will be stored in a cookie for subsequent requests
+
+### Alternative: Disable Protection for Previews
+
+If protection bypass is not suitable, users can disable protection for preview deployments:
+
+1. Go to **Settings** → **Deployment Protection**
+2. Set "Vercel Authentication" to **Only Production Deployments** or **Disabled**
+
+<IMPORTANT>
+If you cannot access a Vercel preview deployment due to authentication requirements, inform the user that they need to either:
+1. Set up a Protection Bypass secret and provide it to you, OR
+2. Disable Deployment Protection for preview deployments in their Vercel project settings
+
+Do NOT repeatedly attempt to access protected URLs without the bypass secret.
+</IMPORTANT>
+
+## Environment Variables
+
+Set environment variables in Vercel Dashboard under **Settings** → **Environment Variables**, or use the Vercel CLI:
+
+```bash
+vercel env add MY_SECRET
+```
+
+Access in your application:
+```typescript
+const secret = process.env.MY_SECRET;
+```
+
+## Vercel CLI Commands
+
+Common Vercel CLI commands:
+
+```bash
+# Login to Vercel
+vercel login
+
+# Deploy to preview
+vercel
+
+# Deploy to production
+vercel --prod
+
+# List deployments
+vercel ls
+
+# View deployment logs
+vercel logs <deployment-url>
+
+# Pull environment variables locally
+vercel env pull
+```

package/tests/test_add_skill_installs_to_agents_dir.py

@@ -0,0 +1,42 @@
+from __future__ import annotations
+
+import importlib.util
+from pathlib import Path
+
+
+def _load_fetch_skill_module():
+    repo_root = Path(__file__).resolve().parents[1]
+    module_path = repo_root / 'skills' / 'add-skill' / 'scripts' / 'fetch_skill.py'
+    spec = importlib.util.spec_from_file_location('fetch_skill', module_path)
+    assert spec and spec.loader
+    module = importlib.util.module_from_spec(spec)
+    spec.loader.exec_module(module)
+    return module
+
+
+def test_fetch_skill_installs_into_agents_skills_dir(tmp_path: Path, monkeypatch):
+    fetch_skill_mod = _load_fetch_skill_module()
+    fetch_skill = fetch_skill_mod.fetch_skill
+    monkeypatch.setattr('subprocess.run', lambda *args, **kwargs: None)
+
+    skill_path = 'skills/example-skill'
+    src_skill_dir = tmp_path / skill_path
+    src_skill_dir.mkdir(parents=True)
+    (src_skill_dir / 'SKILL.md').write_text('# Example skill\n')
+
+    class _FakeTempDir:
+        def __enter__(self):
+            return str(tmp_path)
+
+        def __exit__(self, exc_type, exc, tb):
+            return False
+
+    monkeypatch.setattr('tempfile.TemporaryDirectory', lambda: _FakeTempDir())
+
+    workspace = tmp_path / 'workspace'
+    workspace.mkdir()
+
+    installed_path = Path(fetch_skill('OpenHands/extensions/' + skill_path, str(workspace), force=True))
+
+    assert installed_path == workspace / '.agents' / 'skills' / 'example-skill'
+    assert (installed_path / 'SKILL.md').exists()