Files

T

asepharyana bc69998d8e feat(server): production cut-over to Bun — notify_review, setup/callback, key resolution

- index.ts: add POST /api/v1/notify_review (queue-worker Discord bridge),
  /setup/callback (GitHub App manifest conversion), error logging on review
  failure, PR_AGENT_APP_DIR-based private key resolution
- config.ts: API key falls back to on-disk omniroute_key (same source as
  run_server.py) when no env key present — fixes 401 in systemd context
- markdown.ts: don't hyperlink non-URL ticket values (N/A)
- secrets.ts: fallback private key from ~/.hermes/keys + omni key ~/.hermes
- pr-queue-worker.py / auto_merge_bot.py: notify_review default port 4002→4023

Deploy: pr-agent-bun.service (Bun binary, port 4023) replaces
pr-agent-server.service (Python, port 4002, disabled). Caddy route updated in
asepharyana/infra (proxy 4023). Verified live: webhook → review → claude-opus-5
→ persistent GitHub comment published after Python shutdown.

2026-09-21 13:47:47 +07:00

generate_manifest_domain.py

refactor: restructure into proper project layout + improve docs

2026-08-20 11:38:24 +07:00

generate_manifest.py

refactor: restructure into proper project layout + improve docs

2026-08-20 11:38:24 +07:00

pr-queue-worker.py

feat(server): production cut-over to Bun — notify_review, setup/callback, key resolution

2026-09-21 13:47:47 +07:00

README.md

feat(ops): add PR queue worker with toolchain pin guard

2026-09-21 11:36:14 +07:00

setup_all.py

refactor: restructure into proper project layout + improve docs

2026-08-20 11:38:24 +07:00

setup_app.py

refactor: restructure into proper project layout + improve docs

2026-08-20 11:38:24 +07:00

README.md

PR Queue Worker

pr-queue-worker.py — the orchestration cron that watches open PRs across all repos where the PR-Agent GitHub App is installed and drives the full lifecycle:

Open PR found → ensure a PR-Agent review exists (fabricates a webhook to pr-agent.asepharyana.my.id if not)
Toolchain pin guard → closes dependabot PRs that bump pinned toolchain majors (see TOOLCHAIN_PINS map — typescript/eslint/@tsparticles/…) instead of waiting on them forever
AI auto-fix → runs Claude Code (-p) on the PR head for up to AI_FIX_MAX_TURNS turns, then pushes the fix
Safety analysis → parses the review body for security/major-issue blockers; score must be ≥ 6/10
CI gate → waits for the required check to pass (closes stale dependabot PRs stuck failing CI for > STALE_CI_CLOSE_DAYS)
Approve + merge

Deployment

Cron: Hermes cron job 04f13b9fdadc, every 5 minutes
Live path: ~/.hermes/scripts/pr-queue-worker.py (cron reads this file — keep it in sync with this repo copy)
Secrets: NOT in this file. Hydrated at import from ~/.hermes/.env ( PR_AGENT_APP_ID, PR_AGENT_KEY_PATH, PR_AGENT_WEBHOOK_SECRET, PR_AGENT_WEBHOOK_URL). The GitHub App private key lives at ~/.hermes/keys/pr-agent-key.pem (gitignored, never commit).

Sync note

This repo is the canonical version. The live cron copy under ~/.hermes/scripts/ is what actually runs — after editing here, cp scripts/pr-queue-worker.py ~/.hermes/scripts/pr-queue-worker.py and verify with:

/home/code/hermes-agent/.venv/bin/python3 -m py_compile ~/.hermes/scripts/pr-queue-worker.py
timeout 90 /home/code/hermes-agent/.venv/bin/python3 ~/.hermes/scripts/pr-queue-worker.py