dedup: import _load_env from helpers + add dupehound CI

.github/renovate.json5

@@ -0,0 +1,38 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:recommended",
+    ":disableDependencyDashboard",
+  ],
+  "baseBranchPatterns": ["main"],
+  "schedule": ["on the 2nd day of the month"],
+  "timezone": "America/Sao_Paulo",
+  "prConcurrentLimit": 10,
+  "prHourlyLimit": 0,
+  "labels": ["dependencies"],
+  "separateMajorMinor": false,
+  "minimumReleaseAge": "14 days",
+  "internalChecksFilter": "strict",
+  "commitMessagePrefix": "[RENOVATE]",
+  "packageRules": [
+    {
+      "matchManagers": ["pep621"],
+      "groupName": "python-deps",
+      "commitMessagePrefix": "[RENOVATE] [PY]",
+      "matchUpdateTypes": ["minor", "patch"]
+    },
+    {
+      "matchManagers": ["pep621"],
+      "matchUpdateTypes": ["major"],
+      "groupName": "python-major",
+      "commitMessagePrefix": "[RENOVATE] [PY] [MAJOR]",
+      "automerge": false
+    },
+    {
+      "matchManagers": ["github-actions"],
+      "groupName": "github-actions",
+      "commitMessagePrefix": "[RENOVATE] [CI]",
+      "pinDigests": true
+    }
+  ]
+}

.github/workflows/dupehound.yml

@@ -0,0 +1,58 @@
+name: dupehound
+
+on:
+  pull_request:
+    paths:
+      - 'src/**'
+      - 'tests/**'
+  push:
+    branches: [main]
+    paths:
+      - 'src/**'
+      - 'tests/**'
+
+permissions:
+  contents: read
+
+jobs:
+  check:
+    name: Block new duplicates
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    continue-on-error: true
+    steps:
+      - name: Checkout
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5  # v4
+        with:
+          fetch-depth: 0
+      - name: Install dupehound
+        run: |
+          curl -sL https://github.com/Rafaelpta/dupehound/releases/latest/download/dupehound-x86_64-unknown-linux-gnu.tar.gz | tar xz
+          sudo mv dupehound /usr/local/bin/
+      - name: Block new duplicates vs base
+        env:
+          PR_BASE: ${{ github.event.pull_request.base.ref }}
+        run: |
+          if [ -n "$PR_BASE" ]; then
+            dupehound check --diff "origin/$PR_BASE" .
+          else
+            dupehound check --diff HEAD~1 .
+          fi
+
+  scan:
+    name: Repo slop score
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - name: Checkout
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5  # v4
+      - name: Install dupehound
+        run: |
+          curl -sL https://github.com/Rafaelpta/dupehound/releases/latest/download/dupehound-x86_64-unknown-linux-gnu.tar.gz | tar xz
+          sudo mv dupehound /usr/local/bin/
+      - name: Scan
+        run: |
+          dupehound scan . | tee /tmp/dh-scan.txt
+          SCORE=$(grep -oE 'SLOP SCORE[[:space:]]+[0-9.]+%' /tmp/dh-scan.txt | head -1 | grep -oE '[0-9.]+%' || echo "n/a")
+          echo "## dupehound slop score" >> "$GITHUB_STEP_SUMMARY"
+          echo "**${SCORE}**" >> "$GITHUB_STEP_SUMMARY"

.github/workflows/renovate.yml

@@ -0,0 +1,20 @@
+name: Renovate
+on:
+  schedule:
+    - cron: '0 5 2 * *'  # Monthly: 2nd at 05:00 UTC (02:00 BRT)
+  workflow_dispatch:
+
+jobs:
+  renovate:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Self-hosted Renovate
+        uses: renovatebot/github-action@v41
+        with:
+          configurationFile: .github/renovate.json5
+          token: ${{ secrets.GITHUB_TOKEN }}
+        env:
+          LOG_LEVEL: info

src/browser_harness/admin.py

@@ -7,27 +7,7 @@
 from pathlib import Path
 
 from . import _ipc as ipc
-
-
-def _load_env():
-    repo_root = Path(__file__).resolve().parents[2]
-    workspace = Path(os.environ.get("BH_AGENT_WORKSPACE", repo_root / "agent-workspace")).expanduser()
-    for p in (repo_root / ".env", workspace / ".env"):
-        if not p.exists():
-            continue
-        _load_env_file(p)
-
-
-def _load_env_file(p):
-    for line in p.read_text().splitlines():
-        line = line.strip()
-        if not line or line.startswith("#") or "=" not in line:
-            continue
-        k, v = line.split("=", 1)
-        os.environ.setdefault(k.strip(), v.strip().strip('"').strip("'"))
-
-
-_load_env()
+from .helpers import _load_env, _load_env_file
 
 NAME = os.environ.get("BU_NAME", "default")
 BU_API = "https://api.browser-use.com/api/v3"

src/browser_harness/daemon.py

@@ -4,28 +4,9 @@
 from pathlib import Path
 
 from . import _ipc as ipc
-from cdp_use.client import CDPClient
-
-
-def _load_env():
-    repo_root = Path(__file__).resolve().parents[2]
-    workspace = Path(os.environ.get("BH_AGENT_WORKSPACE", repo_root / "agent-workspace")).expanduser()
-    for p in (repo_root / ".env", workspace / ".env"):
-        if not p.exists():
-            continue
-        _load_env_file(p)
-
+from .helpers import _load_env, _load_env_file
 
-def _load_env_file(p):
-    for line in p.read_text().splitlines():
-        line = line.strip()
-        if not line or line.startswith("#") or "=" not in line:
-            continue
-        k, v = line.split("=", 1)
-        os.environ.setdefault(k.strip(), v.strip().strip('"').strip("'"))
-
-
-_load_env()
+from cdp_use.client import CDPClient
 
 NAME = os.environ.get("BU_NAME", "default")
 SOCK = ipc.sock_addr(NAME)