hq-jr 0.1.0

package/dist/services/sandbox-runner.js

@@ -0,0 +1,144 @@
+import { dispatchSandboxVerification } from "./ai.js";
+export function detectTestCommand(filePaths) {
+    const hasCargo = filePaths.some((p) => p.includes("Cargo.toml") || /\.rs($|\b)/.test(p));
+    if (hasCargo)
+        return "cargo test";
+    const hasGo = filePaths.some((p) => p.includes("go.mod") || /\.go($|\b)/.test(p));
+    if (hasGo)
+        return "go test ./...";
+    const hasPython = filePaths.some((p) => p.includes("pytest.ini") ||
+        p.includes("pyproject.toml") ||
+        p.includes("requirements.txt") ||
+        /\.py($|\b)/.test(p));
+    if (hasPython)
+        return "pytest";
+    return "npm test";
+}
+export function formatSandboxCheckRunSummary(params) {
+    const { pullNumber, branch, testCommand, verificationGoal, interactionId, probes = [] } = params;
+    let matrixTable = "";
+    if (probes.length > 0) {
+        const rows = probes.map((p, idx) => `| #${idx + 1} | \`${p.targetFile}${p.targetLine ? `:${p.targetLine}` : ""}\` | \`${p.archetype}\` | \`${p.expectedFailureKind}\` | ${p.failureHypothesis} |`);
+        matrixTable = `\n### 📊 Adversarial Test Execution Matrix\n\n` +
+            `| # | Target Component | Archetype | Expected Mode | Hypothesis |\n` +
+            `|:---:|---|:---:|:---:|---|\n` +
+            rows.join("\n") +
+            `\n`;
+    }
+    return `## 🧪 Tier 3 Antigravity Sandbox Verification\n\n` +
+        `- **Status:** Dispatched to remote Linux container\n` +
+        `- **Agent Harness:** \`antigravity-preview-05-2026\`\n` +
+        `- **Interaction ID:** \`${interactionId}\`\n` +
+        `- **Target Branch:** \`${branch}\` (PR #${pullNumber})\n` +
+        `- **Baseline Command:** \`${testCommand}\`\n` +
+        `- **Objective:** ${verificationGoal}\n` +
+        matrixTable +
+        `\n### 🛠️ One-Click Test Adoption\n` +
+        `Maintainers can adopt the synthesized reproduction test directly into the PR by clicking **"Commit Repro Test"** in the Checks tab action header or typing \`@hq-jr commit-repro\` in PR comments.`;
+}
+export async function executeSandboxCheckRun(params) {
+    const { octokit, owner, repo, pullNumber, headSha, branch, verificationGoal, modifiedFiles = [], authToken, } = params;
+    const testCommand = params.testCommand || detectTestCommand(modifiedFiles);
+    let checkRunId;
+    try {
+        const checkRun = await octokit.checks.create({
+            owner,
+            repo,
+            name: "hq-jr AI Sandbox Verification",
+            head_sha: headSha,
+            status: "in_progress",
+            started_at: new Date().toISOString(),
+            actions: [
+                {
+                    label: "Commit Repro Test",
+                    description: "Commit synthesized reproduction test directly to PR branch",
+                    identifier: "commit_repro_test",
+                },
+                {
+                    label: "Re-run Sandbox",
+                    description: "Re-run autonomous sandbox verification with fresh container",
+                    identifier: "rerun_sandbox",
+                },
+            ],
+            output: {
+                title: "Dispatching Adversarial Sandbox Verification",
+                summary: `Dispatching Tier 3 Antigravity autonomous reproduction agent for PR #${pullNumber}.\n\n- **Objective:** ${verificationGoal}\n- **Test Command:** \`${testCommand}\`\n- **Branch:** \`${branch}\`\n- **Probes:** ${params.probes?.length || 0} adversarial targets`,
+            },
+        });
+        checkRunId = checkRun.data.id;
+    }
+    catch (err) {
+        const errorMsg = err instanceof Error ? err.message : String(err);
+        return {
+            status: "failed",
+            summary: `Failed to create Sandbox Check Run on GitHub: ${errorMsg}`,
+        };
+    }
+    try {
+        const repoUrl = `https://github.com/${owner}/${repo}`;
+        const base64AuthToken = authToken
+            ? Buffer.from(`x-access-token:${authToken}`).toString("base64")
+            : undefined;
+        const interactionId = await dispatchSandboxVerification({
+            repoUrl,
+            branch,
+            testCommand,
+            base64AuthToken,
+            instructions: `Execute containerized reproduction and verification in /workspace/repo.\nVerification Goal: ${verificationGoal}\nRun command: ${testCommand}`,
+            probes: params.probes,
+        });
+        const completionSummary = formatSandboxCheckRunSummary({
+            pullNumber,
+            branch,
+            testCommand,
+            verificationGoal,
+            interactionId,
+            probes: params.probes,
+        });
+        await octokit.checks.update({
+            owner,
+            repo,
+            check_run_id: checkRunId,
+            status: "completed",
+            conclusion: "success",
+            completed_at: new Date().toISOString(),
+            output: {
+                title: "Sandbox Verification Dispatched",
+                summary: completionSummary,
+            },
+        });
+        return {
+            checkRunId,
+            interactionId,
+            status: "dispatched",
+            summary: completionSummary,
+        };
+    }
+    catch (err) {
+        const errorMsg = err instanceof Error ? err.message : String(err);
+        const failureSummary = `### Sandbox Verification Unavailable\n\nTertiary sandbox agent dispatch encountered an error: ${errorMsg}\n\nStandard Tier 1 & 2 reviews were completed.`;
+        if (checkRunId) {
+            try {
+                await octokit.checks.update({
+                    owner,
+                    repo,
+                    check_run_id: checkRunId,
+                    status: "completed",
+                    conclusion: "neutral",
+                    completed_at: new Date().toISOString(),
+                    output: {
+                        title: "Sandbox Dispatch Skipped",
+                        summary: failureSummary,
+                    },
+                });
+            }
+            catch { }
+        }
+        return {
+            checkRunId,
+            status: "failed",
+            summary: failureSummary,
+        };
+    }
+}
+//# sourceMappingURL=sandbox-runner.js.map

package/dist/services/sandbox-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-runner.js","sourceRoot":"","sources":["../../src/services/sandbox-runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,SAAS,CAAC;AA8CtD,MAAM,UAAU,iBAAiB,CAAC,SAAmB;IACnD,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACzF,IAAI,QAAQ;QAAE,OAAO,YAAY,CAAC;IAElC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAClF,IAAI,KAAK;QAAE,OAAO,eAAe,CAAC;IAElC,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAC9B,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;QACxB,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAC5B,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAC9B,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CACvB,CAAC;IACF,IAAI,SAAS;QAAE,OAAO,QAAQ,CAAC;IAE/B,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,MAO5C;IACC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC;IAEjG,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CACrB,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CACT,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,SAAS,UAAU,CAAC,CAAC,mBAAmB,QAAQ,CAAC,CAAC,iBAAiB,IAAI,CAChK,CAAC;QACF,WAAW,GAAG,gDAAgD;YAC5D,qEAAqE;YACrE,+BAA+B;YAC/B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YACf,IAAI,CAAC;IACT,CAAC;IAED,OAAO,mDAAmD;QACxD,sDAAsD;QACtD,wDAAwD;QACxD,2BAA2B,aAAa,MAAM;QAC9C,0BAA0B,MAAM,WAAW,UAAU,KAAK;QAC1D,6BAA6B,WAAW,MAAM;QAC9C,oBAAoB,gBAAgB,IAAI;QACxC,WAAW;QACX,qCAAqC;QACrC,oMAAoM,CAAC;AACzM,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAA6B;IAE7B,MAAM,EACJ,OAAO,EACP,KAAK,EACL,IAAI,EACJ,UAAU,EACV,OAAO,EACP,MAAM,EACN,gBAAgB,EAChB,aAAa,GAAG,EAAE,EAClB,SAAS,GACV,GAAG,MAAM,CAAC;IAEX,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,iBAAiB,CAAC,aAAa,CAAC,CAAC;IAC3E,IAAI,UAA8B,CAAC;IAEnC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;YAC3C,KAAK;YACL,IAAI;YACJ,IAAI,EAAE,+BAA+B;YACrC,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,aAAa;YACrB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,OAAO,EAAE;gBACP;oBACE,KAAK,EAAE,mBAAmB;oBAC1B,WAAW,EAAE,4DAA4D;oBACzE,UAAU,EAAE,mBAAmB;iBAChC;gBACD;oBACE,KAAK,EAAE,gBAAgB;oBACvB,WAAW,EAAE,6DAA6D;oBAC1E,UAAU,EAAE,eAAe;iBAC5B;aACF;YACD,MAAM,EAAE;gBACN,KAAK,EAAE,8CAA8C;gBACrD,OAAO,EAAE,wEAAwE,UAAU,yBAAyB,gBAAgB,2BAA2B,WAAW,uBAAuB,MAAM,qBAAqB,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,sBAAsB;aAC7Q;SACF,CAAC,CAAC;QACH,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IAChC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClE,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,iDAAiD,QAAQ,EAAE;SACrE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,sBAAsB,KAAK,IAAI,IAAI,EAAE,CAAC;QACtD,MAAM,eAAe,GAAG,SAAS;YAC/B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC/D,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,aAAa,GAAG,MAAM,2BAA2B,CAAC;YACtD,OAAO;YACP,MAAM;YACN,WAAW;YACX,eAAe;YACf,YAAY,EAAE,+FAA+F,gBAAgB,kBAAkB,WAAW,EAAE;YAC5J,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;QAEH,MAAM,iBAAiB,GAAG,4BAA4B,CAAC;YACrD,UAAU;YACV,MAAM;YACN,WAAW;YACX,gBAAgB;YAChB,aAAa;YACb,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;QAEH,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;YAC1B,KAAK;YACL,IAAI;YACJ,YAAY,EAAE,UAAU;YACxB,MAAM,EAAE,WAAW;YACnB,UAAU,EAAE,SAAS;YACrB,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACtC,MAAM,EAAE;gBACN,KAAK,EAAE,iCAAiC;gBACxC,OAAO,EAAE,iBAAiB;aAC3B;SACF,CAAC,CAAC;QAEH,OAAO;YACL,UAAU;YACV,aAAa;YACb,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,iBAAiB;SAC3B,CAAC;IACJ,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClE,MAAM,cAAc,GAAG,iGAAiG,QAAQ,iDAAiD,CAAC;QAElL,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;oBAC1B,KAAK;oBACL,IAAI;oBACJ,YAAY,EAAE,UAAU;oBACxB,MAAM,EAAE,WAAW;oBACnB,UAAU,EAAE,SAAS;oBACrB,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACtC,MAAM,EAAE;wBACN,KAAK,EAAE,0BAA0B;wBACjC,OAAO,EAAE,cAAc;qBACxB;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;QAED,OAAO;YACL,UAAU;YACV,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,cAAc;SACxB,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/services/scrubber.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Scrubs credentials and secrets from text before transmission to AI models.
+ */
+export declare function scrubSecrets(input: string): {
+    scrubbed: string;
+    redactedCount: number;
+};

package/dist/services/scrubber.js

@@ -0,0 +1,46 @@
+/**
+ * Patterns matching high-risk secrets and credentials.
+ */
+const SECRET_PATTERNS = [
+    // Private keys (RSA, EC, PGP, OPENSSH)
+    /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g,
+    // GitHub tokens (Classic tokens, OAuth, App tokens, and Fine-Grained PATs)
+    /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9_]{36,255}\b/g,
+    /\bgithub_pat_[A-Za-z0-9_]{82}\b/g,
+    // Google Cloud API keys and service account private keys
+    /\bAIza[0-9A-Za-z-_]{35}\b/g,
+    // AWS Access Key ID
+    /\b(?:AKIA|ABIA|ACCA|ASIA)[0-9A-Z]{16}\b/g,
+    // AWS Secret Access Key (heuristics near keywords)
+    /(?:aws_secret_access_key|aws_access_key_id|secret_key)\s*[:=]\s*["'`]?([A-Za-z0-9/+=]{40})["'`]?/gi,
+    // Slack tokens
+    /\bxox[baprs]-[0-9]{10,13}-[0-9]{10,13}[a-zA-Z0-9-]*\b/g,
+    // Generic JWT tokens
+    /\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\b/g,
+    // OpenAI / Anthropic / Generic AI API tokens (including modern sk-proj-, sk-ant-api03-, sk-admin-)
+    /\bsk-(?:proj-|admin-|ant-(?:api03|admin01)-)?[a-zA-Z0-9_-]{20,250}\b/g,
+    // Generic secret / password assignments in code, JSON, YAML, and .env
+    /(?:["']?(?:password|passwd|api_key|apiKey|secret|private_token|client_secret|access_token|auth_token|refresh_token|api_secret)["']?)\s*[:=]\s*["'`]?([^"'`\r\n\s]{8,128})["'`]?/gi,
+];
+/**
+ * Scrubs credentials and secrets from text before transmission to AI models.
+ */
+export function scrubSecrets(input) {
+    if (!input) {
+        return { scrubbed: "", redactedCount: 0 };
+    }
+    let scrubbed = input;
+    let redactedCount = 0;
+    for (const pattern of SECRET_PATTERNS) {
+        scrubbed = scrubbed.replace(pattern, (match, ...args) => {
+            redactedCount++;
+            const captures = args.slice(0, -2);
+            if (captures.length > 0 && typeof captures[0] === "string" && captures[0].length > 0) {
+                return match.replace(captures[0], "[REDACTED_SECRET]");
+            }
+            return "[REDACTED_SECRET]";
+        });
+    }
+    return { scrubbed, redactedCount };
+}
+//# sourceMappingURL=scrubber.js.map

package/dist/services/scrubber.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scrubber.js","sourceRoot":"","sources":["../../src/services/scrubber.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,eAAe,GAAG;IACtB,uCAAuC;IACvC,6EAA6E;IAE7E,2EAA2E;IAC3E,mDAAmD;IACnD,kCAAkC;IAElC,yDAAyD;IACzD,4BAA4B;IAE5B,oBAAoB;IACpB,0CAA0C;IAE1C,mDAAmD;IACnD,oGAAoG;IAEpG,eAAe;IACf,wDAAwD;IAExD,qBAAqB;IACrB,oEAAoE;IAEpE,mGAAmG;IACnG,uEAAuE;IAEvE,sEAAsE;IACtE,mLAAmL;CACpL,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;IAC5C,CAAC;IAED,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,aAAa,GAAG,CAAC,CAAC;IAEtB,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,GAAG,IAAI,EAAE,EAAE;YACtD,aAAa,EAAE,CAAC;YAChB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACnC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,QAAQ,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrF,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;YACzD,CAAC;YACD,OAAO,mBAAmB,CAAC;QAC7B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;AACrC,CAAC"}

package/dist/services/symbol-cache.d.ts

@@ -0,0 +1,34 @@
+import type Database from "better-sqlite3";
+export interface ExtractedSymbol {
+    name: string;
+    kind: "function" | "class" | "interface" | "type" | "variable" | "constant" | "method";
+    line?: number;
+    exported?: boolean;
+    signature?: string;
+}
+export declare function computeContentHash(content: string | Buffer): string;
+export interface CacheSymbolsParams {
+    repo: string;
+    commitSha: string;
+    filePath: string;
+    content: string | Buffer;
+    symbols: ExtractedSymbol[];
+    db?: Database.Database;
+}
+export declare function cacheSymbols(params: CacheSymbolsParams): string;
+export interface GetCachedSymbolsParams {
+    repo: string;
+    commitSha: string;
+    filePath: string;
+    content?: string | Buffer;
+    db?: Database.Database;
+}
+export declare function getCachedSymbols(params: GetCachedSymbolsParams): ExtractedSymbol[] | null;
+export interface IsContentUnmodifiedParams {
+    repo: string;
+    commitSha: string;
+    filePath: string;
+    content: string | Buffer;
+    db?: Database.Database;
+}
+export declare function isContentUnmodified(params: IsContentUnmodifiedParams): boolean;

package/dist/services/symbol-cache.js

@@ -0,0 +1,49 @@
+import { createHash } from "node:crypto";
+import { setCachedSymbol, getCachedSymbol } from "./db.js";
+export function computeContentHash(content) {
+    return createHash("sha256").update(content).digest("hex");
+}
+export function cacheSymbols(params) {
+    const contentHash = computeContentHash(params.content);
+    setCachedSymbol({
+        repo: params.repo,
+        commitSha: params.commitSha,
+        filePath: params.filePath,
+        contentHash,
+        symbolsJson: JSON.stringify(params.symbols),
+    }, params.db);
+    return contentHash;
+}
+export function getCachedSymbols(params) {
+    const contentHash = params.content !== undefined ? computeContentHash(params.content) : undefined;
+    const rawJson = getCachedSymbol({
+        repo: params.repo,
+        commitSha: params.commitSha,
+        filePath: params.filePath,
+        contentHash,
+    }, params.db);
+    if (!rawJson) {
+        return null;
+    }
+    try {
+        const parsed = JSON.parse(rawJson);
+        if (Array.isArray(parsed)) {
+            return parsed;
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+export function isContentUnmodified(params) {
+    const currentHash = computeContentHash(params.content);
+    const raw = getCachedSymbol({
+        repo: params.repo,
+        commitSha: params.commitSha,
+        filePath: params.filePath,
+        contentHash: currentHash,
+    }, params.db);
+    return raw !== null;
+}
+//# sourceMappingURL=symbol-cache.js.map

package/dist/services/symbol-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"symbol-cache.js","sourceRoot":"","sources":["../../src/services/symbol-cache.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAW3D,MAAM,UAAU,kBAAkB,CAAC,OAAwB;IACzD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAWD,MAAM,UAAU,YAAY,CAAC,MAA0B;IACrD,MAAM,WAAW,GAAG,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvD,eAAe,CACb;QACE,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,WAAW;QACX,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC;KAC5C,EACD,MAAM,CAAC,EAAE,CACV,CAAC;IACF,OAAO,WAAW,CAAC;AACrB,CAAC;AAUD,MAAM,UAAU,gBAAgB,CAAC,MAA8B;IAC7D,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClG,MAAM,OAAO,GAAG,eAAe,CAC7B;QACE,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,WAAW;KACZ,EACD,MAAM,CAAC,EAAE,CACV,CAAC;IAEF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,OAAO,MAA2B,CAAC;QACrC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAUD,MAAM,UAAU,mBAAmB,CAAC,MAAiC;IACnE,MAAM,WAAW,GAAG,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,eAAe,CACzB;QACE,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,WAAW,EAAE,WAAW;KACzB,EACD,MAAM,CAAC,EAAE,CACV,CAAC;IACF,OAAO,GAAG,KAAK,IAAI,CAAC;AACtB,CAAC"}

package/package.json

@@ -0,0 +1,61 @@
+{
+  "name": "hq-jr",
+  "version": "0.1.0",
+  "description": "Self-hosted GitHub App that reviews PRs with Vertex AI, remembers past findings, and can reproduce bugs in a sandbox before it speaks.",
+  "homepage": "https://github.com/adi-IL/hq-jr",
+  "repository": "https://github.com/adi-IL/hq-jr",
+  "main": "dist/index.js",
+  "bin": {
+    "hq-jr": "dist/cli.js"
+  },
+  "type": "module",
+  "scripts": {
+    "build": "tsc",
+    "start": "probot run ./dist/index.js",
+    "dev": "tsx watch src/index.ts",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit",
+    "lint": "tsc --noEmit"
+  },
+  "keywords": [
+    "ai-code-review",
+    "code-review",
+    "developer-tools",
+    "github-app",
+    "pull-request",
+    "probot",
+    "sandbox",
+    "self-hosted",
+    "sqlite",
+    "typescript",
+    "vertex-ai",
+    "hq-jr"
+  ],
+  "author": "Aditya Gaurav <adi-IL>",
+  "license": "Apache-2.0",
+  "dependencies": {
+    "@google/genai": "^2.3.0",
+    "better-sqlite3": "^13.0.3",
+    "dotenv": "^16.4.5",
+    "probot": "^13.4.0",
+    "zod": "^3.23.8"
+  },
+  "devDependencies": {
+    "@types/better-sqlite3": "^9.6.0",
+    "@types/node": "^22.5.5",
+    "smee-client": "^5.0.0",
+    "tsx": "^4.19.1",
+    "typescript": "^5.6.2",
+    "vitest": "^2.1.1"
+  },
+  "engines": {
+    "node": ">=22.0.0"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE",
+    "app.yml",
+    ".env.example"
+  ]
+}