hq-jr 0.1.0

package/.env.example

@@ -0,0 +1,22 @@
+# GitHub App Configuration
+APP_ID=
+PRIVATE_KEY=
+WEBHOOK_SECRET=
+WEBHOOK_PROXY_URL=https://smee.io/your_smee_channel_id
+
+# Google Cloud Vertex AI Configuration
+GOOGLE_CLOUD_PROJECT=your-google-cloud-project-id
+GOOGLE_CLOUD_LOCATION=global
+# GOOGLE_APPLICATION_CREDENTIALS=/path/to/application_default_credentials.json
+
+# Model Routing Configuration (defaults match src/config.ts)
+HQ_JR_MODEL_TIER1=gemini-3.8-flash
+HQ_JR_MODEL_TIER2=gemini-3.8-flash
+# Optional override for Tier 2: gemini-3.1-pro-preview
+HQ_JR_AGENT_TIER3=antigravity-preview-05-2026
+HQ_JR_DB_PATH=./data/hq-jr.db
+
+# Server Configuration
+PORT=3000
+NODE_ENV=development
+LOG_LEVEL=info

package/LICENSE

@@ -0,0 +1,176 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or exemplary damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS

package/README.md

@@ -0,0 +1,207 @@
+<p align="center">
+  <img src="assets/logo.png" alt="Headquarter Junior logo" width="300" />
+</p>
+
+<h1 align="center">hq-jr</h1>
+
+<p align="center">
+  <strong>The junior engineer who won't say LGTM until the break reproduces.</strong>
+</p>
+
+<p align="center">
+  Self-hosted GitHub App that reviews PRs with Vertex AI, remembers past findings,
+  and can reproduce bugs in a sandbox before it speaks.
+</p>
+
+### Why hq-jr
+
+- **Sandbox proof.** Suspicious findings can be reproduced in an isolated container before the bot files a strong claim. Tier 3 / Antigravity is experimental.
+- **Mention manners.** Peer-to-peer PR chat is ignored until someone addresses `@hq-jr`.
+- **Self-hosted on Vertex.** Runs in your account. Diffs go to your GCP project via Vertex AI, not a third-party review SaaS.
+
+<p align="center">
+  <a href="LICENSE"><img src="https://img.shields.io/badge/License-Apache%202.0-blue.svg" alt="License Apache-2.0" /></a>
+  <a href="https://probot.github.io/"><img src="https://img.shields.io/badge/Probot-v13-ea4aaa?logo=probot&logoColor=white" alt="Probot v13" /></a>
+  <a href="https://nodejs.org/"><img src="https://img.shields.io/badge/Node.js-22-339933?logo=nodedotjs&logoColor=white" alt="Node.js 22" /></a>
+  <a href="https://cloud.google.com/vertex-ai"><img src="https://img.shields.io/badge/Google%20Cloud-Vertex%20AI-4285F4?logo=googlecloud&logoColor=white" alt="Google Cloud Vertex AI" /></a>
+  <a href="https://sqlite.org/"><img src="https://img.shields.io/badge/SQLite-WAL-003B57?logo=sqlite&logoColor=white" alt="SQLite WAL" /></a>
+</p>
+
+---
+
+Junior sits on your webhook path. Humans skim diffs and type LGTM. Junior does not skim.
+
+It filters noise, scrubs credentials, triages with a fast model, then deep-reviews risky hunks. SQLite WAL memory tracks prior findings across pushes. When a break looks real, it can ask the experimental sandbox path to reproduce before speaking loudly. Tag `@hq-jr fix` if you want a remediation branch.
+
+### Generic AI review bots vs hq-jr
+
+| Dimension | Generic AI review bots | hq-jr |
+| :--- | :--- | :--- |
+| **Verification** | Guesses from completions. | Can reproduce in a sandbox before strong claims (Tier 3 experimental). |
+| **Memory** | Stateless; repeats nags after force-push. | SQLite WAL remembers prior findings. |
+| **Noise** | Reviews lockfiles and vendor junk. | Heuristic filter + Tier 1 triage skip low-risk diffs. |
+| **Etiquette** | Hijacks human threads. | Speaks when `@hq-jr` is mentioned (or already in-thread). |
+| **Hosting** | Third-party SaaS sees your diffs. | Self-hosted; Vertex AI in *your* GCP project. |
+| **Secrets** | Raw diffs to vendor endpoints. | Scrubber redacts common tokens/keys before model calls. |
+
+---
+
+## Architecture Overview
+
+```mermaid
+flowchart TD
+    PR["GitHub Webhook: PR / Comment / Check Run"] --> Ingress["Probot Webhook Ingress: HMAC SHA-256"]
+    Ingress --> Route{"Event Router"}
+    
+    Route -->|"PR Discussion Comment"| AntiHijack{"Is @hq-jr mentioned or in thread history?"}
+    AntiHijack -->|"Yes"| Disc["Discussion Engine: replyToDiscussion"]
+    Disc --> PostReply["Post PR Thread Reply"]
+    AntiHijack -->|"No"| Ignore["Ignore (Human Peer Review)"]
+    
+    Route -->|"PR Sync, Open, or @hq-jr review"| Filter["Diff Parser & Heuristic Filter"]
+    Filter -->|"Zero Reviewable Hunks"| FastPass["Complete Check Run: Neutral"]
+    Filter -->|"Reviewable Diffs"| Scrubber["Secret & Credential Scrubber"]
+    Scrubber --> Tier1["Tier 1: Fast Triage"]
+    
+    Tier1 --> TriageDecision{"Any shouldReview files?"}
+    TriageDecision -->|"No"| LowRiskExit["Complete Check Run: Low Risk"]
+    TriageDecision -->|"Yes"| Memory["Prior Review Memory: review-memory.ts"]
+    Memory --> Tier2["Tier 2: Deep Review + High Thinking"]
+    
+    Tier2 --> Output["Post Line Comments (with HTTP 422 Fallback) & Complete Check Run"]
+    
+    Route -->|"@hq-jr fix / merge"| RBAC{"Caller write or admin?"}
+    RBAC -->|"Yes"| Remediate["Autonomous Remediation: synthesizeFileFix & Branch Commit"]
+    RBAC -->|"No"| Deny["Post Access Denied Notice"]
+```
+
+### Multi-Tier AI Review Funnel
+
+Defaults match [`src/config.ts`](src/config.ts): Tier 1 and Tier 2 use `gemini-3.8-flash`. Override via env if needed.
+
+1. **Pre-AI Heuristic Filter & Diff Parser** ([`src/services/file-filter.ts`](src/services/file-filter.ts), [`src/services/diff-parser.ts`](src/services/diff-parser.ts)):
+   - Excludes lockfiles, compiled artifacts (`dist/`, `build/`), vendor bundles, minified JS, and binary assets.
+   - Parses unified diffs including quoted paths, Git submodules (`160000`), and permission changes.
+   - Passes content through the credential scrubber ([`src/services/scrubber.ts`](src/services/scrubber.ts)).
+2. **Tier 1: Fast Triage** ([`src/services/ai.ts`](src/services/ai.ts)):
+   - Screening with **Gemini 3.8 Flash** (`HQ_JR_MODEL_TIER1`).
+   - Sets `risk` and `shouldReview` per file; skips deep review for low-risk changes.
+3. **Tier 2: Deep Semantic Audit** ([`src/services/ai.ts`](src/services/ai.ts)):
+   - Deep review with **Gemini 3.8 Flash + High Thinking** (`HQ_JR_MODEL_TIER2`, same default model; optional override e.g. `gemini-3.1-pro-preview`).
+   - Loads prior findings via [`src/services/review-memory.ts`](src/services/review-memory.ts).
+   - Line-anchored comments with suggestion blocks; HTTP 422 fallback if lines drift.
+4. **Tier 3: Sandbox Verification (experimental)** (CLI & runner):
+   - Antigravity agent (`HQ_JR_AGENT_TIER3`, default `antigravity-preview-05-2026`) for empirical reproduction in isolated containers via `src/cli.ts` / [`src/services/sandbox-runner.ts`](src/services/sandbox-runner.ts).
+   - Treat as experimental until you validate it in your environment.
+
+---
+
+## Interactive GitHub Experience
+
+- **Inline Diff Comments**: Comments and suggested replacements on the **Files changed** tab.
+- **GitHub Check Runs**: Status via `hq-jr AI Code Review`.
+- **Interactive PR Chat**: Mention `@hq-jr` to ask questions. Human-to-human threads stay quiet.
+- **On-Demand Review**: `@hq-jr review`, `@hq-jr audit`, or `@hq-jr scan`.
+- **Remediation with RBAC**: `@hq-jr fix` / `@hq-jr patch` synthesizes a fix branch `hq-jr/fix-pr-<id>`. `@hq-jr fix and merge` when permissions allow. Requires collaborator `admin` or `write`.
+
+---
+
+## Quickstart
+
+### Prerequisites
+
+- Node.js >= 22.0.0
+- Google Cloud Project with Vertex AI API enabled and Application Default Credentials (ADC):
+  ```bash
+  gcloud auth application-default login
+  gcloud config set project <PROJECT_ID>
+  ```
+- GitHub App registered (or via the Probot manifest flow).
+
+### Installation
+
+```bash
+git clone https://github.com/adi-IL/hq-jr.git
+cd hq-jr
+npm install
+```
+
+### Environment Configuration
+
+Create a `.env` from [`.env.example`](.env.example):
+
+```bash
+# Probot / GitHub App Credentials
+APP_ID=123456
+PRIVATE_KEY="-----BEGIN RSA PRIVATE KEY-----\n...\n-----END RSA PRIVATE KEY-----\n"
+WEBHOOK_SECRET=your_webhook_secret
+WEBHOOK_PROXY_URL=https://smee.io/your_smee_channel # Optional for local development
+
+# Google Cloud Vertex AI
+GOOGLE_CLOUD_PROJECT=your-gcp-project-id
+GOOGLE_CLOUD_LOCATION=global
+
+# Model Configuration (defaults match src/config.ts)
+HQ_JR_MODEL_TIER1=gemini-3.8-flash
+HQ_JR_MODEL_TIER2=gemini-3.8-flash
+# Optional: HQ_JR_MODEL_TIER2=gemini-3.1-pro-preview
+HQ_JR_AGENT_TIER3=antigravity-preview-05-2026
+
+PORT=3000
+NODE_ENV=development
+```
+
+### Running Locally
+
+```bash
+npm run build
+npm test
+npm start
+npm run dev   # watch mode
+```
+
+### Docker
+
+```bash
+docker build -t hq-jr:local .
+docker run --rm -p 3000:3000 --env-file .env hq-jr:local
+```
+
+For Cloud Run and systemd options, see [docs/05-deployment-and-operations.md](docs/05-deployment-and-operations.md).
+
+---
+
+## Project Structure
+
+```
+hq-jr/
+├── app.yml                  # GitHub App Manifest (permissions & events)
+├── Dockerfile               # Multi-stage Node 22 production image
+├── docs/                    # Architecture and operations guides
+├── src/
+│   ├── cli.ts               # Standalone PR / sandbox CLI
+│   ├── config.ts            # Env schema (source of truth for defaults)
+│   ├── index.ts             # Probot entry and event handlers
+│   ├── schemas/
+│   └── services/            # AI, scrubber, memory, sandbox, remediation, ...
+```
+
+---
+
+## Documentation
+
+- [Architecture and Probot](docs/01-architecture-and-probot.md)
+- [Model Orchestration and Vertex AI ADC](docs/02-model-orchestration-and-vertex-adc.md)
+- [Codebase Ingestion and Context](docs/03-codebase-ingestion-and-context.md)
+- [GitHub App Lifecycle and Security](docs/04-github-app-lifecycle-and-security.md)
+- [Deployment and Operations](docs/05-deployment-and-operations.md)
+- [SECURITY.md](SECURITY.md) (threat model and vulnerability reporting)
+- [CONTRIBUTING.md](CONTRIBUTING.md)
+- [CODE_OF_CONDUCT.md](CODE_OF_CONDUCT.md)
+- [CHANGELOG.md](CHANGELOG.md)
+
+---
+
+## License
+
+Apache-2.0

package/app.yml

@@ -0,0 +1,17 @@
+name: hq-jr
+url: https://github.com/adi-IL/hq-jr
+hook_attributes:
+  url: https://smee.io/your_smee_channel_id
+description: Self-hosted GitHub App that reviews PRs with Vertex AI, remembers past findings, and can reproduce bugs in a sandbox before it speaks.
+public: false
+default_permissions:
+  checks: write
+  pull_requests: write
+  contents: write
+  issues: write
+  metadata: read
+default_events:
+  - pull_request
+  - pull_request_review_comment
+  - issue_comment
+  - check_run

package/dist/cli.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/cli.js

@@ -0,0 +1,193 @@
+#!/usr/bin/env node
+import { readFileSync } from "node:fs";
+import { execFileSync } from "node:child_process";
+import { checkAiHealth, runTriage, runDeepReview, dispatchSandboxVerification } from "./services/ai.js";
+import { parseUnifiedDiff, isLineInDiff } from "./services/diff-parser.js";
+import { packageReviewContext } from "./services/context-packager.js";
+import { config } from "./config.js";
+async function main() {
+    const args = process.argv.slice(2);
+    const command = args[0];
+    if (!command || command === "--help" || command === "-h") {
+        printHelp();
+        process.exit(0);
+    }
+    if (command === "health") {
+        await handleHealth();
+        return;
+    }
+    if (command === "review") {
+        await handleReview(args.slice(1));
+        return;
+    }
+    if (command === "sandbox-test") {
+        await handleSandboxTest(args.slice(1));
+        return;
+    }
+    console.error(`Unknown command: ${command}`);
+    printHelp();
+    process.exit(1);
+}
+function printHelp() {
+    console.log(`
+hq-jr - Automated Code Review CLI (Powered by Vertex AI & Gemini)
+
+Usage:
+  hq-jr health                          Check Vertex AI ADC connectivity and latency
+  hq-jr review --diff <path>            Run review on a local unified diff file
+  hq-jr review --pr <number> [--repo]   Fetch PR diff using 'gh pr diff' and review
+  hq-jr sandbox-test --repo <url>       Dispatch Antigravity sandbox agent test
+                     --branch <name>
+                     --cmd <test_cmd>
+`);
+}
+async function handleHealth() {
+    console.log("Checking Google Cloud Vertex AI ADC connectivity...");
+    console.log(`Project:  ${config.GOOGLE_CLOUD_PROJECT}`);
+    console.log(`Location: ${config.GOOGLE_CLOUD_LOCATION}`);
+    console.log(`Tier 1:   ${config.HQ_JR_MODEL_TIER1}`);
+    console.log(`Tier 2:   ${config.HQ_JR_MODEL_TIER2}`);
+    try {
+        const health = await checkAiHealth();
+        if (health.status === "ok") {
+            console.log(`\n[SUCCESS] Vertex AI is healthy (Latency: ${health.latencyMs}ms)`);
+            process.exit(0);
+        }
+        else {
+            console.error(`\n[FAILURE] Vertex AI returned error: ${health.message}`);
+            process.exit(1);
+        }
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        console.error(`\n[FATAL] Health check failed: ${msg}`);
+        process.exit(1);
+    }
+}
+async function handleReview(args) {
+    let diffContent = "";
+    const diffIndex = args.indexOf("--diff");
+    const prIndex = args.indexOf("--pr");
+    const repoIndex = args.indexOf("--repo");
+    if (diffIndex !== -1 && args[diffIndex + 1]) {
+        const filePath = args[diffIndex + 1];
+        console.log(`Reading diff file: ${filePath}`);
+        diffContent = readFileSync(filePath, "utf-8");
+    }
+    else if (prIndex !== -1 && args[prIndex + 1]) {
+        const rawPrNumber = args[prIndex + 1];
+        if (!/^\d+$/.test(rawPrNumber)) {
+            console.error(`Error: Invalid PR number '${rawPrNumber}'. PR number must be an integer.`);
+            process.exit(1);
+        }
+        const ghArgs = ["pr", "diff", rawPrNumber];
+        if (repoIndex !== -1 && args[repoIndex + 1]) {
+            const repo = args[repoIndex + 1];
+            if (!/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(repo)) {
+                console.error(`Error: Invalid repository format '${repo}'. Expected format: owner/repo.`);
+                process.exit(1);
+            }
+            ghArgs.push("--repo", repo);
+        }
+        console.log(`Fetching PR #${rawPrNumber} diff using GitHub CLI (gh)...`);
+        try {
+            diffContent = execFileSync("gh", ghArgs, {
+                encoding: "utf-8",
+                maxBuffer: 10 * 1024 * 1024,
+            });
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            console.error(`Failed to fetch diff with gh CLI: ${msg}`);
+            process.exit(1);
+        }
+    }
+    else {
+        console.error("Error: Either --diff <path> or --pr <number> must be specified.");
+        printHelp();
+        process.exit(1);
+    }
+    if (!diffContent || diffContent.trim().length === 0) {
+        console.log("No textual diff found to review.");
+        process.exit(0);
+    }
+    // 1. Ingestion and diff parsing
+    const parsed = parseUnifiedDiff(diffContent);
+    console.log(`Parsed ${parsed.files.length} modified file(s), +${parsed.totalAdditions}/-${parsed.totalDeletions} lines.`);
+    // 2. Context window packager
+    const context = packageReviewContext(parsed);
+    console.log(`Reviewable files: ${context.itemsToReview.length}. Excluded noise files: ${context.ignoredItems.length}.`);
+    if (context.itemsToReview.length === 0) {
+        console.log("\nAll files were excluded by noise filters (lockfiles, assets, build artifacts). Nothing to review.");
+        process.exit(0);
+    }
+    // 3. Tier 1 Triage
+    console.log(`\n--- Tier 1: Fast Triage (${config.HQ_JR_MODEL_TIER1}) ---`);
+    const triage = await runTriage(context.promptPayload);
+    console.log(`Overall Risk: [${triage.overallRisk}]`);
+    console.log(`Summary:      ${triage.summary}\n`);
+    for (const f of triage.files) {
+        console.log(`- ${f.path.padEnd(40)} [${f.risk.padEnd(6)}] (Review: ${f.shouldReview ? "YES" : "NO"}) - ${f.reason}`);
+    }
+    const reviewables = triage.files.filter((f) => f.shouldReview);
+    if (reviewables.length === 0) {
+        console.log("\nAll files classified as low risk. Deep review bypassed.");
+        process.exit(0);
+    }
+    // 4. Tier 2 Deep Semantic Review
+    console.log(`\n--- Tier 2: Deep Semantic Review (${config.HQ_JR_MODEL_TIER2}) ---`);
+    const reviewPrompt = `Local CLI Review Mode
+Files requiring deep review:
+${reviewables.map((f) => `- ${f.path} (Risk: ${f.risk}, Reason: ${f.reason})`).join("\n")}
+
+${context.promptPayload}
+`;
+    const review = await runDeepReview(reviewPrompt);
+    console.log(`\nVerdict: ${review.verdict}`);
+    console.log(`Summary: ${review.summary}\n`);
+    if (review.comments.length === 0) {
+        console.log("No specific defects or vulnerabilities found. Code looks clean!");
+    }
+    else {
+        console.log(`Observations (${review.comments.length}):`);
+        const fileMap = new Map(parsed.files.map((f) => [f.newPath || f.oldPath, f]));
+        for (const c of review.comments) {
+            const matched = fileMap.get(c.path);
+            const isAnchored = matched ? isLineInDiff(matched, c.line, c.side) : false;
+            const anchorTag = isAnchored ? `[Anchored L${c.line}]` : `[File Note L${c.line}]`;
+            console.log(`\n------------------------------------------------------------`);
+            console.log(`${c.path}:${c.line} (${c.side}) ${anchorTag} [${c.severity}] [${c.category}]`);
+            console.log(`Title: ${c.title}`);
+            console.log(`Body:  ${c.body}`);
+            if (c.suggestedPatch) {
+                console.log(`\nSuggested Patch:\n${c.suggestedPatch}`);
+            }
+        }
+    }
+}
+async function handleSandboxTest(args) {
+    const repoIdx = args.indexOf("--repo");
+    const branchIdx = args.indexOf("--branch");
+    const cmdIdx = args.indexOf("--cmd");
+    if (repoIdx === -1 || branchIdx === -1 || cmdIdx === -1) {
+        console.error("Error: --repo, --branch, and --cmd are required for sandbox-test.");
+        process.exit(1);
+    }
+    const repoUrl = args[repoIdx + 1];
+    const branch = args[branchIdx + 1];
+    const testCommand = args[cmdIdx + 1];
+    console.log(`Dispatching Tier 3 Antigravity Sandbox Agent for ${repoUrl} (${branch})...`);
+    const result = await dispatchSandboxVerification({
+        repoUrl,
+        branch,
+        testCommand,
+        instructions: "Run tests and verify pull request stability.",
+    });
+    console.log("[SUCCESS] Sandbox agent job dispatched.");
+    console.log(JSON.stringify(result, null, 2));
+}
+main().catch((err) => {
+    console.error("Unhandled CLI error:", err);
+    process.exit(1);
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AACxG,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAExB,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACzD,SAAS,EAAE,CAAC;QACZ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,YAAY,EAAE,CAAC;QACrB,OAAO;IACT,CAAC;IAED,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,OAAO;IACT,CAAC;IAED,IAAI,OAAO,KAAK,cAAc,EAAE,CAAC;QAC/B,MAAM,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,OAAO;IACT,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;IAC7C,SAAS,EAAE,CAAC;IACZ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;CAUb,CAAC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY;IACzB,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,qBAAqB,EAAE,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAErD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;QACrC,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,8CAA8C,MAAM,CAAC,SAAS,KAAK,CAAC,CAAC;YACjF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,yCAAyC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,kCAAkC,GAAG,EAAE,CAAC,CAAC;QACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAc;IACxC,IAAI,WAAW,GAAG,EAAE,CAAC;IAErB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAEzC,IAAI,SAAS,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,sBAAsB,QAAQ,EAAE,CAAC,CAAC;QAC9C,WAAW,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;SAAM,IAAI,OAAO,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC;QAC/C,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;QACtC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,KAAK,CAAC,6BAA6B,WAAW,kCAAkC,CAAC,CAAC;YAC1F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;QAC3C,IAAI,SAAS,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,oCAAoC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrD,OAAO,CAAC,KAAK,CAAC,qCAAqC,IAAI,iCAAiC,CAAC,CAAC;gBAC1F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,gBAAgB,WAAW,gCAAgC,CAAC,CAAC;QACzE,IAAI,CAAC;YACH,WAAW,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE;gBACvC,QAAQ,EAAE,OAAO;gBACjB,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;aAC5B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,KAAK,CAAC,qCAAqC,GAAG,EAAE,CAAC,CAAC;YAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACjF,SAAS,EAAE,CAAC;QACZ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QAChD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,gCAAgC;IAChC,MAAM,MAAM,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,UAAU,MAAM,CAAC,KAAK,CAAC,MAAM,uBAAuB,MAAM,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc,SAAS,CAAC,CAAC;IAE1H,6BAA6B;IAC7B,MAAM,OAAO,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,qBAAqB,OAAO,CAAC,aAAa,CAAC,MAAM,2BAA2B,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;IAExH,IAAI,OAAO,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,qGAAqG,CAAC,CAAC;QACnH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,mBAAmB;IACnB,OAAO,CAAC,GAAG,CAAC,8BAA8B,MAAM,CAAC,iBAAiB,OAAO,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,WAAW,GAAG,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;IAEjD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACvH,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IAC/D,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;QACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,iCAAiC;IACjC,OAAO,CAAC,GAAG,CAAC,uCAAuC,MAAM,CAAC,iBAAiB,OAAO,CAAC,CAAC;IACpF,MAAM,YAAY,GAAG;;EAErB,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;;EAEvF,OAAO,CAAC,aAAa;CACtB,CAAC;IAEA,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;IAE5C,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;IACjF,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAE9E,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAC3E,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,IAAI,GAAG,CAAC;YAElF,OAAO,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC;YAC9E,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,KAAK,SAAS,KAAK,CAAC,CAAC,QAAQ,MAAM,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC;YAC5F,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAChC,IAAI,CAAC,CAAC,cAAc,EAAE,CAAC;gBACrB,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,IAAc;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAErC,IAAI,OAAO,KAAK,CAAC,CAAC,IAAI,SAAS,KAAK,CAAC,CAAC,IAAI,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QACxD,OAAO,CAAC,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IACnC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAErC,OAAO,CAAC,GAAG,CAAC,oDAAoD,OAAO,KAAK,MAAM,MAAM,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC;QAC/C,OAAO;QACP,MAAM;QACN,WAAW;QACX,YAAY,EAAE,8CAA8C;KAC7D,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;IAC3C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,11 @@
+export declare const config: {
+    GOOGLE_CLOUD_PROJECT: string;
+    GOOGLE_CLOUD_LOCATION: string;
+    HQ_JR_MODEL_TIER1: string;
+    HQ_JR_MODEL_TIER2: string;
+    HQ_JR_AGENT_TIER3: string;
+    HQ_JR_DB_PATH: string;
+    PORT: number;
+    NODE_ENV: "development" | "production" | "test";
+    LOG_LEVEL: string;
+};

package/dist/config.js

@@ -0,0 +1,16 @@
+import dotenv from "dotenv";
+import { z } from "zod";
+dotenv.config();
+const envSchema = z.object({
+    GOOGLE_CLOUD_PROJECT: z.string().default("test-gcp-project"),
+    GOOGLE_CLOUD_LOCATION: z.string().default("global"),
+    HQ_JR_MODEL_TIER1: z.string().default("gemini-3.8-flash"),
+    HQ_JR_MODEL_TIER2: z.string().default("gemini-3.8-flash"),
+    HQ_JR_AGENT_TIER3: z.string().default("antigravity-preview-05-2026"),
+    HQ_JR_DB_PATH: z.string().default("./data/hq-jr.db"),
+    PORT: z.coerce.number().default(3000),
+    NODE_ENV: z.enum(["development", "production", "test"]).default("development"),
+    LOG_LEVEL: z.string().default("info"),
+});
+export const config = envSchema.parse(process.env);
+//# sourceMappingURL=config.js.map