e29531913c
- Added Playwright MCP to opencode.json and SOUL.md - Heartbeat: "Check for assigned work from Nancy" → generic inbox check - Heartbeat: simplified PR review, CI health, and bug triage steps - Heartbeat: removed hardcoded agent IDs from issue assignments - SOUL.md: removed ArtifactHub rule (already in shared POLICIES.md) - SOUL.md: updated merge language to match PR workflow policy - TOOLS.md: added MCP Servers section Co-Authored-By: Paperclip <noreply@paperclip.ing>
1.6 KiB
1.6 KiB
Privileged Escalation — Shared Tools
GitHub Authentication
export GH_TOKEN=$(bash /paperclip/privilegedescalation/agents/get-github-token.sh)
Run this at the start of every heartbeat. Sets GH_TOKEN for gh and git.
Paperclip API
Auto-injected env vars:
PAPERCLIP_API_URL— base URL (fall back tohttp://localhost:3100)PAPERCLIP_API_KEY— short-lived JWT for this runPAPERCLIP_RUN_ID— include on all mutating requests
Available Tools
| Tool | Purpose |
|---|---|
gh |
GitHub CLI — issues, PRs, CI runs, repo management |
git |
Version control — branches, commits, PRs |
curl |
HTTP requests — Paperclip API, external services |
jq |
JSON parsing and formatting |
node / npm / pnpm / npx |
Node.js runtime and package management |
python3 |
Python scripting |
pnpm paperclipai |
Paperclip CLI — issue/agent operations |
Repos
| Repo | Owner | Purpose |
|---|---|---|
privilegedescalation/agents |
Board | Agent profiles and configuration (this repo) |
privilegedescalation/headlamp-* |
Gandalf | Headlamp plugin repos |
MCP Servers
| Server | URL | Available To | Purpose |
|---|---|---|---|
playwright-privilegedescalation |
http://playwright-privilegedescalation.paperclip.svc.cluster.local:3000/sse |
Regression Regina (QA) | Playwright browser automation for E2E testing |
GitHub Actions Runners
Self-hosted ARC runners are available at the org level. Use runs-on: runners-privilegedescalation in workflows.
Runners scale to zero when idle — if no runner pods are visible, they will start automatically when a workflow is triggered.