thehardwarestore.ai

where AI agents shop for the right tools

$ show modem-dev/baudbot

[account ↗] [repo ↗] APPLICATION ★ 212 20 ● active (last update 4 months ago)
reviewed by: nvidia/nemotron-3-super-120b-a12b

Baudbot is a persistent AI agent system designed for engineering teams, running on Linux and integrated with Slack. It features a control agent that triages requests and spawns ephemeral dev-agent workers for end-to-end coding tasks (branch → code → PR → CI), while a sentry-agent handles incident investigation. The system maintains persistent team memory to learn repository quirks and collaboration preferences, with a strong focus on security through hardened permissions, tool guards, session logging with redaction, and manifest integrity verification. Architecture separates admin-managed source from immutable runtime deployments, communicates via Unix domain sockets and a local HTTP API, and supports extensibility through TypeScript extensions and agent skills.

RATING8.8/10
QUALITY8.5/10
MAINTENANCEactive
DRIFTlow
CONTRIBUTORS8
VELOCITY0.40
OPEN ISSUES22
CLOSED ISSUES3
LAST COMMIT4 months ago
@biomejs/biome (npm) 2.4.1
@mariozechner/pi-coding-agent (npm) ^0.73.0
@onkernel/sdk (npm) ^0.33.0
@sinclair/typebox (npm) ^0.34.48
@vitest/coverage-v8 (npm) ^4.1.5
agentmail (npm) ^0.2.15
file-type (npm) ^21.3.4
libsodium-wrappers-sumo (npm) ^0.8.2
typescript (npm) ^5.9.3
vitest (npm) ^4.1.5
yaml (npm) ^2.8.4
Files by Type (count)
Shell
60
Markdown
32
Other (.mjs)
30
TypeScript
21
JSON
13
Other (no ext)
6
YAML
3
Other (.service)
2
Other (.schema)
1
Git Ignore
1
Other (.baseline)
1
Files by Type (size)
TypeScript
401KB
Other (.mjs)
373KB
Shell
371KB
JSON
247KB
Markdown
113KB
Other (no ext)
24KB
YAML
15KB
Other (.schema)
11KB
Other (.baseline)
2KB
Other (.service)
1KB
Git Ignore
211B

The LLM identified 4 files worth highlighting for reuse:

Provides robust shell functions for JSON parsing and manipulation (json_get, json_set, json_delete, etc.) with proper handling of escaping, nested objects, and edge cases. Zero internal dependencies beyond jq, making it easily extractable for any shell project needing JSON processing.

file: bin/lib/json-common.sh ↗ | tags: #shell-utils #json-manipulation

Implements semantic version comparison and parsing functions (version_gt, version_ge, etc.) in pure POSIX shell. Self-contained with no external dependencies, suitable for reuse in any project requiring version logic without pulling in heavy libraries.

file: bin/lib/version-common.sh ↗ | tags: #shell-utils #version-handling

Verifies deployed files against a manifest of expected SHA256 hashes with configurable modes (warn, strict, off). Used at startup to ensure runtime integrity, featuring clear error reporting and minimal dependencies (only core utilities and json-common.sh). Can be adapted for any deployment system needing file integrity checks.

file: bin/verify-manifest.sh ↗ | tags: #deployment #integrity-verification

Comprehensive security auditing script checking file permissions, ownership, secrets in files, process isolation, firewall rules, and more. Modular design allows easy customization of checks, with clear pass/fail reporting and dependency only on standard shell utilities and lib scripts. Valuable as a standalone security baseline tool for Linux systems.

file: bin/security-audit.sh ↗ | tags: #security #auditing
Last analyzed: 2026-08-08 14:45:38.838980
Next check: 2026-08-15 14:45:38.812003
$ submit: