@clearlydev/nx-archweave 0.3.1 → 0.3.3

package/dist/generators/add-review/generator.js

@@ -1,1234 +1,15 @@
-// ../template-engine/dist/environment/package-manager.js
-var LOCKFILES = [
-  ["yarn", ["yarn.lock"]],
-  ["bun", ["bun.lock", "bun.lockb"]],
-  ["npm", ["package-lock.json"]]
-];
-function detectWorkspacePackageManager(exists, read = () => void 0) {
-  if (exists("pnpm-lock.yaml") || exists("pnpm-workspace.yaml"))
-    return "pnpm";
-  const found = LOCKFILES.filter(([, files]) => files.some((file) => exists(file))).map(([pm]) => pm);
-  if (found.length <= 1)
-    return found[0] ?? null;
-  const declared = /"packageManager"\s*:\s*"(npm|yarn|bun)@/.exec(read("package.json") ?? "")?.[1];
-  const named = found.find((pm) => pm === declared);
-  if (named)
-    return named;
-  return found.includes("npm") ? "npm" : found[0];
-}
-
-// ../review-policy/dist/modes/review-modes.js
-var REVIEW_MODES = {
-  fast: {
-    mode: "fast",
-    promptStyle: "fast-condensed",
-    includesCorrectnessSecurity: true,
-    includesOverEngineering: false
-  },
-  standard: {
-    mode: "standard",
-    promptStyle: "sectioned",
-    includesCorrectnessSecurity: true,
-    includesOverEngineering: false
-  },
-  thorough: {
-    mode: "thorough",
-    promptStyle: "sectioned",
-    includesCorrectnessSecurity: true,
-    includesOverEngineering: true
-  }
-};
-
-// ../review-policy/dist/verdict-gate/findings-block.js
-var FINDINGS_MARKER = "<!-- archweave-findings-v1 -->";
-var FINDINGS_SCHEMA_ID = "archweave/findings@1";
-
-// ../review-policy/dist/prompts/prompt-shared.js
-function renderFindingSchemaInstruction(locale, priorities) {
-  const intro = locale === "en" ? "For every finding, fill in every field of this schema:" : "\uBAA8\uB4E0 finding\uC5D0 \uB300\uD574 \uC544\uB798 \uC2A4\uD0A4\uB9C8\uC758 \uBAA8\uB4E0 \uD544\uB4DC\uB97C \uCC44\uC6B0\uC138\uC694:";
-  return [
-    intro,
-    `- priority: ${priorities.join(" | ")}`,
-    "- category: kebab-case category name",
-    "- title: one-line summary",
-    "- file: path of the affected file",
-    "- lineRange: { start, end? }",
-    "- evidence: what in the code proves the problem",
-    "- impact: what goes wrong and for whom",
-    "- reproductionCondition: the exact input/state that triggers it",
-    "- recommendation: the concrete fix",
-    "- confidence: confirmed | plausible"
-  ].join("\n");
-}
-function renderFindingsBlockInstruction(locale) {
-  const lines = locale === "en" ? [
-    "At the END of the top-level summary comment, append the machine-readable findings block:",
-    `the literal marker line ${FINDINGS_MARKER}, then a fenced \`\`\`json block containing`,
-    `{ "schema": "${FINDINGS_SCHEMA_ID}", "findings": [ ... ] } with one entry per finding,`,
-    "using exactly the finding schema above. If there are no findings, still append the block with an empty findings array."
-  ] : [
-    "top-level \uC694\uC57D \uCF54\uBA58\uD2B8\uC758 \uB9E8 \uB05D\uC5D0 \uAE30\uACC4 \uD310\uB3C5\uC6A9 findings \uBE14\uB85D\uC744 \uB367\uBD99\uC774\uC138\uC694:",
-    `\uB9AC\uD130\uB7F4 \uB9C8\uCEE4 \uC904 ${FINDINGS_MARKER} \uB2E4\uC74C\uC5D0 fenced \`\`\`json \uBE14\uB85D\uC73C\uB85C`,
-    `{ "schema": "${FINDINGS_SCHEMA_ID}", "findings": [ ... ] }\uB97C, finding\uB9C8\uB2E4 \uD55C \uC6D0\uC18C\uC529, \uC704 finding \uC2A4\uD0A4\uB9C8 \uADF8\uB300\uB85C \uC791\uC131\uD558\uC138\uC694.`,
-    "finding\uC774 \uC5C6\uC5B4\uB3C4 \uBE48 \uBC30\uC5F4\uB85C \uBE14\uB85D\uC744 \uBC18\uB4DC\uC2DC \uD3EC\uD568\uD558\uC138\uC694."
-  ];
-  return lines.join("\n");
-}
-function renderDedupInstruction(locale) {
-  return locale === "en" ? "If multiple findings share the same root cause, merge them into a single finding instead of reporting duplicates." : "\uAC19\uC740 \uC6D0\uC778\uC5D0\uC11C \uB098\uC628 finding\uC774 \uC5EC\uB7EC \uAC1C\uB77C\uBA74 \uC911\uBCF5 \uBCF4\uACE0\uD558\uC9C0 \uB9D0\uACE0 \uD558\uB098\uC758 finding\uC73C\uB85C \uD569\uCCD0\uC11C \uBCF4\uACE0\uD558\uC138\uC694.";
-}
-
-// ../review-policy/dist/prompts/correctness-security-prompt.js
-var CORRECTNESS_SECURITY_PRIORITIES = ["P0", "P1", "P2", "Nit"];
-var FAST_PRIORITIES = ["P0", "P1", "P2"];
-function buildCorrectnessSecurityPrompt(locale, style = "sectioned") {
-  if (style === "fast-condensed") {
-    const fastBody = locale === "en" ? [
-      "You are a code reviewer focused on correctness and security.",
-      "",
-      "Review the provided diff and report only the most critical problems. Skip minor style and taste remarks entirely \u2014 report nothing below P2.",
-      "",
-      `Only report findings with priority ${FAST_PRIORITIES.join(", ")}. Do NOT report P3 (over-engineering) findings \u2014 they are out of scope here.`
-    ] : [
-      "\uB2F9\uC2E0\uC740 \uC815\uD655\uC131(correctness)\uACFC \uBCF4\uC548(security)\uC5D0 \uC9D1\uC911\uD558\uB294 \uCF54\uB4DC \uB9AC\uBDF0\uC5B4\uC785\uB2C8\uB2E4.",
-      "",
-      "\uC8FC\uC5B4\uC9C4 diff\uC5D0\uC11C \uAC00\uC7A5 \uCE58\uBA85\uC801\uC778 \uBB38\uC81C\uB9CC \uBCF4\uACE0\uD558\uC138\uC694. \uC0AC\uC18C\uD55C \uC2A4\uD0C0\uC77C\xB7\uCDE8\uD5A5 \uC9C0\uC801\uC740 \uC644\uC804\uD788 \uC0DD\uB7B5\uD558\uACE0, P2 \uBBF8\uB9CC\uC740 \uBCF4\uACE0\uD558\uC9C0 \uB9C8\uC138\uC694.",
-      "",
-      `\uC6B0\uC120\uC21C\uC704 ${FAST_PRIORITIES.join(", ")}\uC5D0 \uD574\uB2F9\uD558\uB294 finding\uB9CC \uBCF4\uACE0\uD558\uC138\uC694. P3(\uACFC\uC789 \uC124\uACC4)\uB294 \uBCF4\uACE0\uD558\uC9C0 \uB9C8\uC138\uC694 \u2014 \uC774 \uB9AC\uBDF0\uC758 \uBC94\uC704 \uBC16\uC785\uB2C8\uB2E4.`
-    ];
-    return [...fastBody, "", renderFindingSchemaInstruction(locale, FAST_PRIORITIES), "", renderDedupInstruction(locale)].join("\n");
-  }
-  const body = locale === "en" ? [
-    "You are a code reviewer focused on correctness and security.",
-    "",
-    'Review the provided diff and report findings in two explicitly separated top-level sections: "Correctness" and "Security". Never mix the two.',
-    "",
-    `Only report findings with priority ${CORRECTNESS_SECURITY_PRIORITIES.join(", ")}. Do NOT report P3 (over-engineering) findings \u2014 they are covered by a separate reviewer and are out of scope here.`
-  ] : [
-    "\uB2F9\uC2E0\uC740 \uC815\uD655\uC131(correctness)\uACFC \uBCF4\uC548(security)\uC5D0 \uC9D1\uC911\uD558\uB294 \uCF54\uB4DC \uB9AC\uBDF0\uC5B4\uC785\uB2C8\uB2E4.",
-    "",
-    '\uC8FC\uC5B4\uC9C4 diff\uB97C \uB9AC\uBDF0\uD558\uACE0, finding\uC744 "Correctness"\uC640 "Security" \uB450 \uAC1C\uC758 \uCD5C\uC0C1\uC704 \uC139\uC158\uC73C\uB85C \uBD84\uB9AC\uD574 \uBCF4\uACE0\uD558\uC138\uC694. \uB450 \uC139\uC158\uC744 \uC808\uB300 \uC11E\uC9C0 \uB9C8\uC138\uC694.',
-    "",
-    `\uC6B0\uC120\uC21C\uC704 ${CORRECTNESS_SECURITY_PRIORITIES.join(", ")}\uC5D0 \uD574\uB2F9\uD558\uB294 finding\uB9CC \uBCF4\uACE0\uD558\uC138\uC694. P3\uB294 \uBCF4\uACE0\uD558\uC9C0 \uB9C8\uC138\uC694 \u2014 P3(\uACFC\uC789 \uC124\uACC4)\uB294 \uBCC4\uB3C4\uC758 \uB9AC\uBDF0\uC5B4\uAC00 \uB2F4\uB2F9\uD558\uBBC0\uB85C \uC774 \uB9AC\uBDF0\uC758 \uBC94\uC704 \uBC16\uC785\uB2C8\uB2E4.`
-  ];
-  return [...body, "", renderFindingSchemaInstruction(locale, CORRECTNESS_SECURITY_PRIORITIES), "", renderDedupInstruction(locale)].join("\n");
-}
-
-// ../review-policy/dist/prompts/over-engineering-prompt.js
-var OVER_ENGINEERING_PRIORITIES = ["P3"];
-function buildOverEngineeringPrompt(locale) {
-  const body = locale === "en" ? [
-    "You are a code reviewer focused exclusively on over-engineering.",
-    "",
-    "Review the provided diff and report findings with priority P3 only. Do NOT report P0, P1, P2, or Nit findings \u2014 correctness and security are covered by a separate reviewer.",
-    "",
-    'Report your findings in their own top-level section titled "Over-engineering"; never mix them into correctness or security sections.'
-  ] : [
-    "\uB2F9\uC2E0\uC740 \uACFC\uC789 \uC124\uACC4(over-engineering)\uB9CC\uC744 \uC804\uB2F4\uD558\uB294 \uCF54\uB4DC \uB9AC\uBDF0\uC5B4\uC785\uB2C8\uB2E4.",
-    "",
-    "\uC8FC\uC5B4\uC9C4 diff\uB97C \uB9AC\uBDF0\uD558\uACE0 \uC6B0\uC120\uC21C\uC704 P3\uB9CC \uBCF4\uACE0\uD558\uC138\uC694. P0, P1, P2, Nit\uC740 \uBCF4\uACE0\uD558\uC9C0 \uB9C8\uC138\uC694 \u2014 \uC815\uD655\uC131\uACFC \uBCF4\uC548\uC740 \uBCC4\uB3C4\uC758 \uB9AC\uBDF0\uC5B4\uAC00 \uB2F4\uB2F9\uD569\uB2C8\uB2E4.",
-    "",
-    'finding\uC740 "Over-engineering"\uC774\uB77C\uB294 \uBCC4\uB3C4\uC758 \uCD5C\uC0C1\uC704 \uC139\uC158\uC73C\uB85C \uBCF4\uACE0\uD558\uACE0, correctness/security \uC139\uC158\uACFC \uC808\uB300 \uC11E\uC9C0 \uB9C8\uC138\uC694.'
-  ];
-  return [...body, "", renderFindingSchemaInstruction(locale, OVER_ENGINEERING_PRIORITIES), "", renderDedupInstruction(locale)].join("\n");
-}
-
-// ../review-policy/dist/verdict-gate/verdict-comment.js
-var VERDICT_MARKER = "<!-- archweave-verdict -->";
-function renderCommitLine(locale, shortSha) {
-  return locale === "en" ? `<sub>Commit \`${shortSha}\` \xB7 this comment is updated on every review round.</sub>` : `<sub>\uCEE4\uBC0B \`${shortSha}\` \xB7 \uC774 \uCF54\uBA58\uD2B8\uB294 \uB9AC\uBDF0 \uB77C\uC6B4\uB4DC\uB9C8\uB2E4 \uAC31\uC2E0\uB429\uB2C8\uB2E4.</sub>`;
-}
-var NOT_RUN_REASON = {
-  en: {
-    secret: (secretName) => `the ${secretName} secret is not registered`,
-    fork: () => "this pull request comes from a fork, and GitHub passes no secrets to runs from forks",
-    dependabot: (secretName) => `Dependabot runs receive only Dependabot secrets, and ${secretName} is not one of them`,
-    rounds: (_secretName, maxRounds) => `the automated review round limit (${maxRounds}) is reached`
-  },
-  ko: {
-    secret: (secretName) => `${secretName} \uC2DC\uD06C\uB9BF\uC774 \uB4F1\uB85D\uB418\uC9C0 \uC54A\uC74C`,
-    fork: () => "\uD3EC\uD06C\uC5D0\uC11C \uC628 pull request\uC774\uACE0, GitHub\uB294 \uD3EC\uD06C \uC2E4\uD589\uC5D0 \uC2DC\uD06C\uB9BF\uC744 \uB118\uAE30\uC9C0 \uC54A\uC74C",
-    dependabot: (secretName) => `Dependabot \uC2E4\uD589\uC740 Dependabot \uC2DC\uD06C\uB9BF\uB9CC \uBC1B\uB294\uB370, ${secretName}\uB294 \uADF8\uC911\uC5D0 \uC5C6\uC74C`,
-    rounds: (_secretName, maxRounds) => `\uC790\uB3D9 \uB9AC\uBDF0 \uB77C\uC6B4\uB4DC \uD55C\uB3C4(${maxRounds})\uC5D0 \uB3C4\uB2EC\uD568`
-  }
-};
-function renderNotRunNotice(locale, reason, secretName, maxRounds) {
-  const why = NOT_RUN_REASON[locale][reason](secretName, maxRounds);
-  return locale === "en" ? `AI review did not run for this commit (${why}). A green check here does not mean the change was reviewed.` : `\uC774 \uCEE4\uBC0B\uC5D0\uB294 AI \uB9AC\uBDF0\uAC00 \uC2E4\uD589\uB418\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4(${why}). \uC774 green \uCCB4\uD06C\uB294 \uBCC0\uACBD \uC0AC\uD56D\uC774 \uB9AC\uBDF0\uB418\uC5C8\uB2E4\uB294 \uB73B\uC774 \uC544\uB2D9\uB2C8\uB2E4.`;
-}
-
-// ../review-policy/dist/verdict-gate/verdict-gate.js
-var ROUND_MARKER = "<!-- archweave-review-round -->";
-
-// ../template-engine/dist/review/config-snippet.js
-function buildReviewConfigSnippet(input) {
-  return {
-    enabled: true,
-    provider: input.provider,
-    mode: input.mode,
-    locale: input.locale,
-    maxRounds: input.maxRounds,
-    blockingPriorities: ["P0", "P1"]
-  };
-}
-
-// ../template-engine/dist/review/action-pins.js
-var ACTION_PINS = {
-  "actions/checkout": "actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1",
-  "actions/setup-node": "actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0",
-  "pnpm/action-setup": "pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0",
-  "oven-sh/setup-bun": "oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0",
-  "anthropics/claude-code-action": "anthropics/claude-code-action@6b6870e649b5ff408753befeaee5fc7989d4e6a9 # v1.0.258",
-  "google-github-actions/run-gemini-cli": "google-github-actions/run-gemini-cli@f77273f4c914e4bf38440cf36a0369cb64a37489 # v0.1.22",
-  "openai/codex-action": "openai/codex-action@bdf19a4a223ec2549a3e2274a0cf61556bc07675 # v1.13"
-};
-function pinnedUses(action) {
-  return ACTION_PINS[action];
-}
-
-// ../template-engine/dist/review/workflow-skeleton.js
-function indentBlock(text, spaces) {
-  const pad = " ".repeat(spaces);
-  return text.split("\n").map((line) => line.length === 0 ? line : pad + line).join("\n");
-}
-function renderTriggerBlock() {
-  return ["on:", "  pull_request:", "    types: [opened, synchronize, ready_for_review, reopened]"].join("\n");
-}
-function renderConcurrencyBlock() {
-  return [
-    "concurrency:",
-    "  group: archweave-review-${{ github.event.pull_request.number }}",
-    "  cancel-in-progress: false"
-  ].join("\n");
-}
-var REVIEW_GATE_CONDITION = "steps.secret-gate.outputs.enabled == 'true' && steps.round-gate.outputs.allowed == 'true'";
-function renderReviewPermissions(idToken) {
-  return ["permissions:", "  contents: read", "  pull-requests: write", ...idToken ? ["  id-token: write"] : []].join("\n");
-}
-function renderCheckoutStep(gateCondition, extraWith = []) {
-  return [
-    "- name: Checkout repository",
-    ...gateCondition === void 0 ? [] : [`  if: ${gateCondition}`],
-    `  uses: ${pinnedUses("actions/checkout")}`,
-    "  with:",
-    ...extraWith.map((line) => `    ${line}`),
-    "    fetch-depth: 1",
-    "    persist-credentials: false"
-  ].join("\n");
-}
-function renderSecretGateStep(secretName) {
-  return [
-    "- name: Check review secret",
-    "  id: secret-gate",
-    "  env:",
-    `    REVIEW_SECRET: \${{ secrets.${secretName} }}`,
-    "  run: |",
-    '    if [ -z "$REVIEW_SECRET" ]; then',
-    `      echo "AI review is not active: register the ${secretName} secret to enable it."`,
-    '      echo "enabled=false" >> "$GITHUB_OUTPUT"',
-    "    else",
-    '      echo "enabled=true" >> "$GITHUB_OUTPUT"',
-    "    fi"
-  ].join("\n");
-}
-function renderRoundGateStep(maxRounds) {
-  return [
-    "- name: Check review round limit",
-    "  id: round-gate",
-    "  if: steps.secret-gate.outputs.enabled == 'true'",
-    "  env:",
-    "    GH_TOKEN: ${{ github.token }}",
-    "  run: |",
-    `    counts=$(gh api "repos/\${{ github.repository }}/issues/\${{ github.event.pull_request.number }}/comments" --paginate --jq '[([.[] | select(.user.type == "Bot") | select(.body | contains("${ROUND_MARKER}"))] | length), ([.[].id] | max // 0)]' | jq -s -r '[(map(.[0]) | add // 0), (map(.[1]) | max // 0)] | @tsv')`,
-    `    rounds=$(printf '%s' "$counts" | cut -f1)`,
-    `    echo "last-comment-id=$(printf '%s' "$counts" | cut -f2)" >> "$GITHUB_OUTPUT"`,
-    `    if [ "$rounds" -ge ${maxRounds} ]; then`,
-    `      echo "Automated review round limit (${maxRounds}) reached for this PR; skipping."`,
-    '      echo "allowed=false" >> "$GITHUB_OUTPUT"',
-    "    else",
-    '      echo "allowed=true" >> "$GITHUB_OUTPUT"',
-    "    fi"
-  ].join("\n");
-}
-function shellQuote(text) {
-  return `'${text.replace(/'/g, `'\\''`)}'`;
-}
-function renderNotRunFunction(secretName, maxRounds, locale) {
-  const reasons = ["secret", "fork", "dependabot", "rounds"];
-  const [commitBefore, commitAfter] = renderCommitLine(locale, "\0").split("\0");
-  return [
-    "not_run() {",
-    '  case "$1" in',
-    ...reasons.map((reason) => `    ${reason}) annotation=${shellQuote(renderNotRunNotice("en", reason, secretName, maxRounds))}; notice=${shellQuote(renderNotRunNotice(locale, reason, secretName, maxRounds))} ;;`),
-    "  esac",
-    '  echo "::notice title=AI review did not run::$annotation"',
-    `  printf '%s\\n' "$notice" >> "$GITHUB_STEP_SUMMARY"`,
-    `  short_sha=$(printf '%s' "$HEAD_SHA" | cut -c1-7)`,
-    '  case "$short_sha" in',
-    "    '' | *[!0-9a-f]*) short_sha= ;;",
-    "  esac",
-    "  {",
-    '    echo "notice-body<<ARCHWEAVE_NOT_RUN_EOF"',
-    `    printf '%s\\n' ${shellQuote(VERDICT_MARKER)} "\u2139\uFE0F $notice"`,
-    `    if [ -n "$short_sha" ]; then printf '\\n%s\\n' ${shellQuote(commitBefore)}"$short_sha"${shellQuote(commitAfter)}; fi`,
-    '    echo "ARCHWEAVE_NOT_RUN_EOF"',
-    '    echo "run=false"',
-    '  } >> "$GITHUB_OUTPUT"',
-    "}"
-  ];
-}
-var JUDGE_CONDITION = "steps.ai-review-result.outputs.run == 'true'";
-function renderAiReviewResultStep(secretName, maxRounds, locale) {
-  return [
-    "- name: Check the AI review result",
-    "  id: ai-review-result",
-    "  env:",
-    "    AI_REVIEW_RESULT: ${{ needs.ai-review.result }}",
-    "    REVIEW_ENABLED: ${{ needs.ai-review.outputs.enabled }}",
-    "    REVIEW_ALLOWED: ${{ needs.ai-review.outputs.allowed }}",
-    "    LAST_COMMENT_ID: ${{ needs.ai-review.outputs.last-comment-id }}",
-    "    HEAD_SHA: ${{ github.event.pull_request.head.sha }}",
-    "    HEAD_REPOSITORY: ${{ github.event.pull_request.head.repo.full_name }}",
-    "    REPOSITORY: ${{ github.repository }}",
-    "    PR_AUTHOR: ${{ github.event.pull_request.user.login }}",
-    "  run: |",
-    ...renderNotRunFunction(secretName, maxRounds, locale).map((line) => `    ${line}`),
-    '    if [ "$AI_REVIEW_RESULT" != success ]; then',
-    `      echo "::error title=AI review did not succeed::The AI review job ended with '$AI_REVIEW_RESULT'."`,
-    "      exit 1",
-    "    fi",
-    '    case "$REVIEW_ENABLED/$REVIEW_ALLOWED" in',
-    "      false/*)",
-    '        if [ "$HEAD_REPOSITORY" != "$REPOSITORY" ]; then not_run fork',
-    `        elif [ "$PR_AUTHOR" = 'dependabot[bot]' ]; then not_run dependabot`,
-    "        else not_run secret",
-    "        fi",
-    "        exit 0",
-    "        ;;",
-    "      true/false)",
-    "        not_run rounds",
-    "        exit 0",
-    "        ;;",
-    "      true/true)",
-    '        case "$LAST_COMMENT_ID" in',
-    "          '' | *[!0-9]*) ;;",
-    "          *)",
-    '            echo "run=true" >> "$GITHUB_OUTPUT"',
-    "            exit 0",
-    "            ;;",
-    "        esac",
-    "        ;;",
-    "    esac",
-    `    echo "::error title=Review verdict not computed::The AI review job's results did not reach this job, so no verdict can be computed. Re-run all jobs."`,
-    "    exit 1"
-  ].join("\n");
-}
-function renderVerdictGateStep(maxRounds, locale) {
-  return [
-    "- name: Compute review verdict",
-    "  id: verdict",
-    `  if: ${JUDGE_CONDITION}`,
-    "  env:",
-    "    GH_TOKEN: ${{ github.token }}",
-    "    GITHUB_REPOSITORY: ${{ github.repository }}",
-    "    ARCHWEAVE_PR_NUMBER: ${{ github.event.pull_request.number }}",
-    `    ARCHWEAVE_MAX_ROUNDS: '${maxRounds}'`,
-    `    ARCHWEAVE_LOCALE: '${locale}'`,
-    "    ARCHWEAVE_HEAD_SHA: ${{ github.event.pull_request.head.sha }}",
-    "    ARCHWEAVE_ROUND_AFTER_ID: ${{ needs.ai-review.outputs.last-comment-id }}",
-    "    ARCHWEAVE_VERDICT_OUTPUT: 'github-output'",
-    "  run: |",
-    "    if [ -x node_modules/.bin/archweave-review-verdict ]; then",
-    "      node_modules/.bin/archweave-review-verdict",
-    "    else",
-    '      echo "nx-archweave is not installed in this workspace - skipping the verdict gate."',
-    "    fi"
-  ].join("\n");
-}
-function renderBlockStep() {
-  return [
-    "- name: Fail the review check",
-    "  if: steps.verdict.outputs.blocked == 'true'",
-    "  env:",
-    "    BLOCK_REASON: ${{ steps.verdict.outputs.block-reason }}",
-    "  run: |",
-    '    case "$BLOCK_REASON" in',
-    '      block) echo "The AI verdict is BLOCK: fix the P0/P1 findings in the verdict comment and push." ;;',
-    '      no-summary) echo "The AI review posted no summary for this commit, so there is no verdict. Re-run all jobs to review it again, or review it yourself." ;;',
-    '      unreadable) echo "The AI review summary has no readable findings block, so there is no verdict. Re-run all jobs to review it again, or review it yourself." ;;',
-    '      *) echo "The review check failed. See the verdict comment on this pull request." ;;',
-    "    esac",
-    "    exit 1"
-  ].join("\n");
-}
-function renderVerdictCommentStep() {
-  return [
-    "- name: Post review verdict",
-    "  env:",
-    "    GH_TOKEN: ${{ github.token }}",
-    "    REPOSITORY: ${{ github.repository }}",
-    "    PR_NUMBER: ${{ github.event.pull_request.number }}",
-    "    VERDICT_BODY: ${{ needs.review.outputs.comment-body }}",
-    "    PREVIOUS_ID: ${{ needs.review.outputs.previous-comment-id }}",
-    "  run: |",
-    `    payload=$(jq -n --arg body "$VERDICT_BODY" '{body: $body}')`,
-    '    if [ -z "$PREVIOUS_ID" ]; then',
-    `      PREVIOUS_ID=$(gh api "repos/$REPOSITORY/issues/$PR_NUMBER/comments" --paginate --jq '.[] | select(.user.login == "github-actions[bot]") | select(.body | contains("${VERDICT_MARKER}")) | .id' | tail -n 1) || PREVIOUS_ID=`,
-    "    fi",
-    '    case "$PREVIOUS_ID" in',
-    "      ''|*[!0-9]*) PREVIOUS_ID= ;;",
-    "    esac",
-    `    if [ -n "$PREVIOUS_ID" ] && printf '%s' "$payload" | gh api -X PATCH "repos/$REPOSITORY/issues/comments/$PREVIOUS_ID" --input - > /dev/null; then`,
-    "      exit 0",
-    "    fi",
-    `    printf '%s' "$payload" | gh api -X POST "repos/$REPOSITORY/issues/$PR_NUMBER/comments" --input - > /dev/null \\`,
-    '      || echo "Could not post the verdict comment (continuing)."'
-  ].join("\n");
-}
-var SETUP_NODE_VERSION = "22";
-var FALLBACK_PNPM_VERSION = "10";
-var INSTALL_LINES = {
-  pnpm: ["    pnpm install --frozen-lockfile --ignore-scripts"],
-  npm: ["    npm ci --ignore-scripts"],
-  yarn: [
-    "    corepack enable yarn",
-    '    if [ "$(yarn --version | cut -d. -f1)" -ge 2 ]; then YARN_ENABLE_SCRIPTS=false yarn install --immutable --mode=skip-build; else yarn install --frozen-lockfile --ignore-scripts; fi'
-  ],
-  bun: ["    bun install --frozen-lockfile --ignore-scripts"]
-};
-function renderPnpmVersionStep(gate) {
-  return [
-    "- name: Detect pnpm version",
-    "  id: pnpm-version",
-    gate,
-    "  run: |",
-    `    if [ -n "$(jq -r '.packageManager // empty' package.json)" ]; then`,
-    '      echo "version=" >> "$GITHUB_OUTPUT"',
-    "    else",
-    `      echo "version=${FALLBACK_PNPM_VERSION}" >> "$GITHUB_OUTPUT"`,
-    "    fi"
-  ].join("\n");
-}
-function renderWorkspaceSetupSteps(packageManager) {
-  const gate = `  if: ${JUDGE_CONDITION}`;
-  const steps = [];
-  if (packageManager === "pnpm") {
-    steps.push(renderPnpmVersionStep(gate));
-    steps.push([
-      "- name: Set up pnpm",
-      gate,
-      `  uses: ${pinnedUses("pnpm/action-setup")}`,
-      "  with:",
-      "    version: ${{ steps.pnpm-version.outputs.version }}"
-    ].join("\n"));
-  }
-  if (packageManager === "bun") {
-    steps.push(["- name: Set up bun", gate, `  uses: ${pinnedUses("oven-sh/setup-bun")}`].join("\n"));
-  }
-  steps.push([
-    "- name: Set up Node",
-    gate,
-    `  uses: ${pinnedUses("actions/setup-node")}`,
-    "  with:",
-    `    node-version: ${SETUP_NODE_VERSION}`,
-    // yarn: no setup-node cache — it would query the runner's global yarn 1 even in a
-    // berry project. Corepack (shipped with Node) provides the project's own yarn below.
-    // bun: setup-node has no bun cache. Node is still set up — nx and the verdict bin
-    // run on it.
-    ...packageManager === "yarn" || packageManager === "bun" ? [] : [`    cache: ${packageManager}`]
-  ].join("\n"));
-  steps.push([
-    "- name: Install workspace dependencies",
-    gate,
-    "  run: |",
-    ...INSTALL_LINES[packageManager]
-  ].join("\n"));
-  return steps.join("\n\n");
-}
-var REVIEW_JOB_TIMEOUT_MINUTES = 15;
-function renderReviewWorkflow(input, parts) {
-  const aiReviewSteps = [renderSecretGateStep(parts.secretName), renderRoundGateStep(input.maxRounds), ...parts.reviewSteps];
-  const reviewSteps = [
-    renderAiReviewResultStep(parts.secretName, input.maxRounds, input.locale),
-    renderCheckoutStep(JUDGE_CONDITION),
-    renderWorkspaceSetupSteps(input.packageManager),
-    renderVerdictGateStep(input.maxRounds, input.locale),
-    renderBlockStep()
-  ];
-  return [
-    `name: ${parts.name}`,
-    "",
-    renderTriggerBlock(),
-    "",
-    renderConcurrencyBlock(),
-    "",
-    "permissions: {}",
-    "",
-    "jobs:",
-    "  ai-review:",
-    "    runs-on: ubuntu-latest",
-    `    timeout-minutes: ${REVIEW_JOB_TIMEOUT_MINUTES}`,
-    indentBlock(renderReviewPermissions(parts.idToken), 4),
-    "    outputs:",
-    "      enabled: ${{ steps.secret-gate.outputs.enabled }}",
-    "      allowed: ${{ steps.round-gate.outputs.allowed }}",
-    "      last-comment-id: ${{ steps.round-gate.outputs.last-comment-id }}",
-    "    steps:",
-    indentBlock(aiReviewSteps.join("\n\n"), 6),
-    "",
-    "  review:",
-    "    needs: ai-review",
-    "    if: always()",
-    "    runs-on: ubuntu-latest",
-    `    timeout-minutes: ${REVIEW_JOB_TIMEOUT_MINUTES}`,
-    "    permissions:",
-    "      contents: read",
-    "      pull-requests: read",
-    "    outputs:",
-    "      comment-body: ${{ steps.verdict.outputs.comment-body || steps.ai-review-result.outputs.notice-body }}",
-    "      previous-comment-id: ${{ steps.verdict.outputs.previous-comment-id }}",
-    "    steps:",
-    indentBlock(reviewSteps.join("\n\n"), 6),
-    "",
-    "  review-comment:",
-    "    needs: review",
-    // Runs after a BLOCK failed the review job, too: the comment explains the red check.
-    "    if: ${{ !cancelled() && needs.review.outputs.comment-body != '' }}",
-    "    runs-on: ubuntu-latest",
-    `    timeout-minutes: ${REVIEW_JOB_TIMEOUT_MINUTES}`,
-    "    permissions:",
-    "      pull-requests: write",
-    "    steps:",
-    indentBlock(renderVerdictCommentStep(), 6),
-    ""
-  ].join("\n");
-}
-
-// ../template-engine/dist/review/claude/claude-provider.js
-var SECRET_NAME = "CLAUDE_CODE_OAUTH_TOKEN";
-var ALLOWED_TOOLS = "mcp__github_inline_comment__create_inline_comment,Bash(gh pr comment:*),Bash(gh pr diff:*),Bash(gh pr view:*)";
-var CLAUDE_STEP_ID = "claude-review";
-var PR_CONTEXT = ["REPO: ${{ github.repository }}", "PR NUMBER: ${{ github.event.pull_request.number }}"];
-function renderWorkflowInstructions(locale) {
-  const lines = locale === "en" ? [
-    ...PR_CONTEXT,
-    "",
-    "Review the diff of this pull request using `gh pr diff <PR NUMBER>` and `gh pr view <PR NUMBER>`.",
-    "Post specific findings as inline comments with `mcp__github_inline_comment__create_inline_comment` (pass `confirmed: true`), and exactly one top-level summary comment.",
-    "Post the summary with `gh pr comment <PR NUMBER> --body-file - <<'ARCHWEAVE_EOF'`, the body on the following lines, then a line `ARCHWEAVE_EOF` (the quoted delimiter keeps backticks and `$` literal). Never pass the body with `--body \"...\"` or `$(...)`.",
-    "Run each `gh` command on its own: no pipes to other programs, no `&&` chains.",
-    `Always include the literal marker ${ROUND_MARKER} in the top-level summary comment.`,
-    "If there are no findings that require action, post exactly one top-level comment saying so (and still include the marker).",
-    "Do not modify any code, and never approve or merge the pull request.",
-    "Write summaries and explanations in English; keep file names, function names, and identifiers verbatim."
-  ] : [
-    ...PR_CONTEXT,
-    "",
-    "\uC774 pull request\uC758 diff\uB97C `gh pr diff <PR NUMBER>`\uC640 `gh pr view <PR NUMBER>`\uB85C \uD655\uC778\uD558\uACE0 \uB9AC\uBDF0\uD558\uC138\uC694.",
-    "\uAD6C\uCCB4\uC801 \uC9C0\uC801\uC740 `mcp__github_inline_comment__create_inline_comment`(`confirmed: true` \uC804\uB2EC)\uB85C inline comment\uB97C \uB2EC\uACE0, \uC804\uCCB4 \uC694\uC57D\uC740 \uC815\uD655\uD788 \uD55C \uAC1C\uC758 top-level comment\uB85C \uAC8C\uC2DC\uD558\uC138\uC694.",
-    "\uC694\uC57D\uC740 `gh pr comment <PR NUMBER> --body-file - <<'ARCHWEAVE_EOF'`\uB85C \uAC8C\uC2DC\uD558\uC138\uC694. \uB2E4\uC74C \uC904\uBD80\uD130 \uBCF8\uBB38\uC744 \uC4F0\uACE0, \uB9C8\uC9C0\uB9C9 \uC904\uC5D0 `ARCHWEAVE_EOF`\uB9CC \uC4F0\uC138\uC694(\uB530\uC634\uD45C \uCE5C \uAD6C\uBD84\uC790\uB77C \uBC31\uD2F1\uACFC `$`\uAC00 \uADF8\uB300\uB85C \uB0A8\uC544\uC694). \uBCF8\uBB38\uC744 `--body \"...\"`\uB098 `$(...)`\uB85C \uB118\uAE30\uC9C0 \uB9C8\uC138\uC694.",
-    "`gh` \uBA85\uB839\uC740 \uD558\uB098\uC529 \uB530\uB85C \uC2E4\uD589\uD558\uC138\uC694. \uB2E4\uB978 \uD504\uB85C\uADF8\uB7A8\uC73C\uB85C \uD30C\uC774\uD504\uD558\uAC70\uB098 `&&`\uB85C \uC787\uC9C0 \uB9C8\uC138\uC694.",
-    `top-level \uC694\uC57D \uCF54\uBA58\uD2B8\uC5D0\uB294 \uBC18\uB4DC\uC2DC \uB9AC\uD130\uB7F4 \uB9C8\uCEE4 ${ROUND_MARKER}\uB97C \uD3EC\uD568\uD558\uC138\uC694.`,
-    '\uC870\uCE58\uAC00 \uD544\uC694\uD55C \uBB38\uC81C\uAC00 \uC5C6\uC73C\uBA74 "\uC870\uCE58\uAC00 \uD544\uC694\uD55C \uBB38\uC81C\uB97C \uCC3E\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4."\uB77C\uB294 top-level comment\uB97C \uC815\uD655\uD788 \uD55C \uAC1C \uAC8C\uC2DC\uD558\uC138\uC694(\uC774\uB54C\uB3C4 \uB9C8\uCEE4\uB294 \uD3EC\uD568).',
-    "\uCF54\uB4DC\uB97C \uC218\uC815\uD558\uC9C0 \uB9C8\uC138\uC694(Do not modify any code). PR\uC744 \uC2B9\uC778\uD558\uAC70\uB098 \uBCD1\uD569\uD558\uC9C0 \uB9C8\uC138\uC694(never approve or merge).",
-    "\uC694\uC57D\uACFC \uC124\uBA85\uC740 \uD55C\uAD6D\uC5B4\uB85C \uC4F0\uB418, \uD30C\uC77C\uBA85\xB7\uD568\uC218\uBA85\xB7\uC2DD\uBCC4\uC790\uB294 \uC6D0\uBB38 \uADF8\uB300\uB85C \uC720\uC9C0\uD558\uC138\uC694."
-  ];
-  return lines.join("\n");
-}
-function composePrompt(input) {
-  const mode = REVIEW_MODES[input.mode];
-  const sections = [renderWorkflowInstructions(input.locale), buildCorrectnessSecurityPrompt(input.locale, mode.promptStyle)];
-  if (mode.includesOverEngineering) {
-    sections.push(buildOverEngineeringPrompt(input.locale));
-  }
-  sections.push(renderFindingsBlockInstruction(input.locale));
-  return sections.join("\n\n---\n\n");
-}
-function renderDeniedToolsStep() {
-  return [
-    "- name: Show denied tool calls",
-    `  if: always() && steps.${CLAUDE_STEP_ID}.outputs.execution_file != ''`,
-    "  env:",
-    `    EXECUTION_FILE: \${{ steps.${CLAUDE_STEP_ID}.outputs.execution_file }}`,
-    "  run: |",
-    '    [ -f "$EXECUTION_FILE" ] || exit 0',
-    `    stop_token="archweave-$(od -An -N16 -tx1 /dev/urandom | tr -d ' \\n')"`,
-    '    echo "::stop-commands::$stop_token"',
-    `    jq -c '.[] | select(.type == "result") | ((.permission_denials[]? | {tool: .tool_name, command: ((.tool_input.command // "") | tostring | .[0:200])}), (select(.is_error == true) | {error: ((.result // "") | tostring | .[0:300])}))' "$EXECUTION_FILE" || echo "Could not read the execution file."`,
-    '    echo "::$stop_token::"'
-  ].join("\n");
-}
-function buildWorkflowYaml(input) {
-  return renderReviewWorkflow(input, {
-    name: "Claude Code Review",
-    secretName: SECRET_NAME,
-    // The Claude GitHub App signs in with the workflow's OIDC token (claude-code-action's FAQ).
-    idToken: true,
-    reviewSteps: [
-      renderCheckoutStep(REVIEW_GATE_CONDITION),
-      [
-        "- name: Run Claude review",
-        `  id: ${CLAUDE_STEP_ID}`,
-        `  if: ${REVIEW_GATE_CONDITION}`,
-        `  uses: ${pinnedUses("anthropics/claude-code-action")}`,
-        "  with:",
-        `    claude_code_oauth_token: \${{ secrets.${SECRET_NAME} }}`,
-        "    prompt: |",
-        indentBlock(composePrompt(input), 6),
-        "    claude_args: |",
-        `      --allowedTools "${ALLOWED_TOOLS}"`
-      ].join("\n"),
-      renderDeniedToolsStep()
-    ]
-  });
-}
-var claudeProvider = {
-  id: "claude",
-  workflowFileName: ".github/workflows/claude-code-review.yml",
-  requiredSecretName: SECRET_NAME,
-  buildWorkflowYaml
-};
-
-// ../template-engine/dist/review/cursor/cursor-provider.js
-var SECRET_NAME2 = "CURSOR_API_KEY";
-var PROMPT_HEREDOC_DELIMITER = "ARCHWEAVE_CURSOR_REVIEW_PROMPT";
-function renderWorkflowInstructions2(locale) {
-  const lines = locale === "en" ? [
-    "Review the diff of this pull request using `gh pr diff` and `gh pr view`.",
-    "Post specific findings as inline comments and exactly one top-level summary comment.",
-    `Always include the literal marker ${ROUND_MARKER} in the top-level summary comment.`,
-    "If there are no findings that require action, post exactly one top-level comment saying so (and still include the marker).",
-    "Do not modify any code, and never approve or merge the pull request.",
-    "Write summaries and explanations in English; keep file names, function names, and identifiers verbatim."
-  ] : [
-    "\uC774 pull request\uC758 diff\uB97C `gh pr diff`\uC640 `gh pr view`\uB85C \uD655\uC778\uD558\uACE0 \uB9AC\uBDF0\uD558\uC138\uC694.",
-    "\uAD6C\uCCB4\uC801 \uC9C0\uC801\uC740 inline comment\uB85C, \uC804\uCCB4 \uC694\uC57D\uC740 \uC815\uD655\uD788 \uD55C \uAC1C\uC758 top-level comment\uB85C \uAC8C\uC2DC\uD558\uC138\uC694.",
-    `top-level \uC694\uC57D \uCF54\uBA58\uD2B8\uC5D0\uB294 \uBC18\uB4DC\uC2DC \uB9AC\uD130\uB7F4 \uB9C8\uCEE4 ${ROUND_MARKER}\uB97C \uD3EC\uD568\uD558\uC138\uC694.`,
-    '\uC870\uCE58\uAC00 \uD544\uC694\uD55C \uBB38\uC81C\uAC00 \uC5C6\uC73C\uBA74 "\uC870\uCE58\uAC00 \uD544\uC694\uD55C \uBB38\uC81C\uB97C \uCC3E\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4."\uB77C\uB294 top-level comment\uB97C \uC815\uD655\uD788 \uD55C \uAC1C \uAC8C\uC2DC\uD558\uC138\uC694(\uC774\uB54C\uB3C4 \uB9C8\uCEE4\uB294 \uD3EC\uD568).',
-    "\uCF54\uB4DC\uB97C \uC218\uC815\uD558\uC9C0 \uB9C8\uC138\uC694(Do not modify any code). PR\uC744 \uC2B9\uC778\uD558\uAC70\uB098 \uBCD1\uD569\uD558\uC9C0 \uB9C8\uC138\uC694(never approve or merge).",
-    "\uC694\uC57D\uACFC \uC124\uBA85\uC740 \uD55C\uAD6D\uC5B4\uB85C \uC4F0\uB418, \uD30C\uC77C\uBA85\xB7\uD568\uC218\uBA85\xB7\uC2DD\uBCC4\uC790\uB294 \uC6D0\uBB38 \uADF8\uB300\uB85C \uC720\uC9C0\uD558\uC138\uC694."
-  ];
-  return lines.join("\n");
-}
-function composePrompt2(input) {
-  const mode = REVIEW_MODES[input.mode];
-  const sections = [renderWorkflowInstructions2(input.locale), buildCorrectnessSecurityPrompt(input.locale, mode.promptStyle)];
-  if (mode.includesOverEngineering) {
-    sections.push(buildOverEngineeringPrompt(input.locale));
-  }
-  sections.push(renderFindingsBlockInstruction(input.locale));
-  return sections.join("\n\n---\n\n");
-}
-function buildWorkflowYaml2(input) {
-  return renderReviewWorkflow(input, {
-    name: "Cursor Code Review",
-    secretName: SECRET_NAME2,
-    // An API key: the Cursor CLI needs no OIDC token.
-    idToken: false,
-    reviewSteps: [
-      renderCheckoutStep(REVIEW_GATE_CONDITION),
-      [
-        "- name: Install cursor-agent CLI",
-        `  if: ${REVIEW_GATE_CONDITION}`,
-        "  run: |",
-        // HTTPS only, TLS 1.2 or newer. Cursor publishes no pinned version or checksum for
-        // this installer; docs/pr-review.md states what that leaves open.
-        "    curl --proto '=https' --tlsv1.2 -fsS https://cursor.com/install | bash",
-        // The docs name ~/.cursor/bin; the installer currently links `agent` into ~/.local/bin.
-        // Both go on the PATH, so the next step finds it wherever the installer puts it.
-        '    echo "$HOME/.local/bin" >> "$GITHUB_PATH"',
-        '    echo "$HOME/.cursor/bin" >> "$GITHUB_PATH"'
-      ].join("\n"),
-      [
-        "- name: Run Cursor review",
-        `  if: ${REVIEW_GATE_CONDITION}`,
-        "  env:",
-        `    CURSOR_API_KEY: \${{ secrets.${SECRET_NAME2} }}`,
-        "    GH_TOKEN: ${{ github.token }}",
-        "  run: |",
-        // cursor-agent stops at "Workspace Trust Required" without --trust (2026.10.22 on
-        // Actions); the folder is this run's own checkout, and forks never get the secret.
-        `    agent --trust -p "$(cat <<'${PROMPT_HEREDOC_DELIMITER}'`,
-        indentBlock(composePrompt2(input), 4),
-        `    ${PROMPT_HEREDOC_DELIMITER}`,
-        '    )"'
-      ].join("\n")
-    ]
-  });
-}
-var cursorProvider = {
-  id: "cursor",
-  workflowFileName: ".github/workflows/cursor-code-review.yml",
-  requiredSecretName: SECRET_NAME2,
-  buildWorkflowYaml: buildWorkflowYaml2
-};
-
-// ../template-engine/dist/review/gemini/gemini-provider.js
-var SECRET_NAME3 = "GEMINI_API_KEY";
-function renderWorkflowInstructions3(locale) {
-  const lines = locale === "en" ? [
-    "Review the diff of this pull request using `gh pr diff` and `gh pr view`.",
-    "Post specific findings as inline comments and exactly one top-level summary comment.",
-    `Always include the literal marker ${ROUND_MARKER} in the top-level summary comment.`,
-    "If there are no findings that require action, post exactly one top-level comment saying so (and still include the marker).",
-    "Do not modify any code, and never approve or merge the pull request.",
-    "Write summaries and explanations in English; keep file names, function names, and identifiers verbatim."
-  ] : [
-    "\uC774 pull request\uC758 diff\uB97C `gh pr diff`\uC640 `gh pr view`\uB85C \uD655\uC778\uD558\uACE0 \uB9AC\uBDF0\uD558\uC138\uC694.",
-    "\uAD6C\uCCB4\uC801 \uC9C0\uC801\uC740 inline comment\uB85C, \uC804\uCCB4 \uC694\uC57D\uC740 \uC815\uD655\uD788 \uD55C \uAC1C\uC758 top-level comment\uB85C \uAC8C\uC2DC\uD558\uC138\uC694.",
-    `top-level \uC694\uC57D \uCF54\uBA58\uD2B8\uC5D0\uB294 \uBC18\uB4DC\uC2DC \uB9AC\uD130\uB7F4 \uB9C8\uCEE4 ${ROUND_MARKER}\uB97C \uD3EC\uD568\uD558\uC138\uC694.`,
-    '\uC870\uCE58\uAC00 \uD544\uC694\uD55C \uBB38\uC81C\uAC00 \uC5C6\uC73C\uBA74 "\uC870\uCE58\uAC00 \uD544\uC694\uD55C \uBB38\uC81C\uB97C \uCC3E\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4."\uB77C\uB294 top-level comment\uB97C \uC815\uD655\uD788 \uD55C \uAC1C \uAC8C\uC2DC\uD558\uC138\uC694(\uC774\uB54C\uB3C4 \uB9C8\uCEE4\uB294 \uD3EC\uD568).',
-    "\uCF54\uB4DC\uB97C \uC218\uC815\uD558\uC9C0 \uB9C8\uC138\uC694(Do not modify any code). PR\uC744 \uC2B9\uC778\uD558\uAC70\uB098 \uBCD1\uD569\uD558\uC9C0 \uB9C8\uC138\uC694(never approve or merge).",
-    "\uC694\uC57D\uACFC \uC124\uBA85\uC740 \uD55C\uAD6D\uC5B4\uB85C \uC4F0\uB418, \uD30C\uC77C\uBA85\xB7\uD568\uC218\uBA85\xB7\uC2DD\uBCC4\uC790\uB294 \uC6D0\uBB38 \uADF8\uB300\uB85C \uC720\uC9C0\uD558\uC138\uC694."
-  ];
-  return lines.join("\n");
-}
-function composePrompt3(input) {
-  const mode = REVIEW_MODES[input.mode];
-  const sections = [renderWorkflowInstructions3(input.locale), buildCorrectnessSecurityPrompt(input.locale, mode.promptStyle)];
-  if (mode.includesOverEngineering) {
-    sections.push(buildOverEngineeringPrompt(input.locale));
-  }
-  sections.push(renderFindingsBlockInstruction(input.locale));
-  return sections.join("\n\n---\n\n");
-}
-var GEMINI_CLI_VERSION = "0.65.0";
-function buildWorkflowYaml3(input) {
-  return renderReviewWorkflow(input, {
-    name: "Gemini Code Review",
-    secretName: SECRET_NAME3,
-    // An API key: run-gemini-cli uses OIDC only for Google Cloud workload identity federation.
-    idToken: false,
-    reviewSteps: [
-      renderCheckoutStep(REVIEW_GATE_CONDITION),
-      [
-        "- name: Run Gemini review",
-        `  if: ${REVIEW_GATE_CONDITION}`,
-        `  uses: ${pinnedUses("google-github-actions/run-gemini-cli")}`,
-        "  env:",
-        "    GITHUB_TOKEN: ${{ github.token }}",
-        // Gemini CLI 0.65 refuses to run in a folder it hasn't been told to trust (measured
-        // 2026-10-25 on Actions). The folder is this run's own checkout; pull requests from forks
-        // never get here, because they get no secret.
-        "    GEMINI_CLI_TRUST_WORKSPACE: 'true'",
-        "  with:",
-        `    gemini_api_key: \${{ secrets.${SECRET_NAME3} }}`,
-        `    gemini_cli_version: '${GEMINI_CLI_VERSION}'`,
-        "    prompt: |",
-        indentBlock(composePrompt3(input), 6)
-      ].join("\n")
-    ]
-  });
-}
-var geminiProvider = {
-  id: "gemini",
-  workflowFileName: ".github/workflows/gemini-code-review.yml",
-  requiredSecretName: SECRET_NAME3,
-  buildWorkflowYaml: buildWorkflowYaml3
-};
-
-// ../template-engine/dist/review/gpt/gpt-provider.js
-var SECRET_NAME4 = "OPENAI_API_KEY";
-function renderWorkflowInstructions4(locale) {
-  const lines = locale === "en" ? [
-    "Review ONLY the changes introduced by this pull request. The base and head commits are already fetched under fixed ref names: run `git diff origin/pr-base...origin/pr-head` (and `git log origin/pr-base..origin/pr-head` for commit context) \u2014 this sandboxed step has no network access, so do not attempt to run `gh` or reach the GitHub API.",
-    "Write your entire response as a single message: report specific findings, then close with one overall summary.",
-    `Always include the literal marker ${ROUND_MARKER} in your message.`,
-    "If there are no findings that require action, write exactly one message saying so (and still include the marker).",
-    "Do not modify any code, and never approve or merge the pull request.",
-    "Write summaries and explanations in English; keep file names, function names, and identifiers verbatim."
-  ] : [
-    "\uC774 pull request\uAC00 \uB3C4\uC785\uD55C \uBCC0\uACBD \uC0AC\uD56D\uB9CC \uB9AC\uBDF0\uD558\uC138\uC694. base/head \uCEE4\uBC0B\uC740 \uACE0\uC815 ref \uC774\uB984\uC73C\uB85C \uC774\uBBF8 fetch\uB418\uC5B4 \uC788\uC2B5\uB2C8\uB2E4: `git diff origin/pr-base...origin/pr-head`\uB85C \uBE44\uAD50\uD558\uACE0, \uCEE4\uBC0B \uB9E5\uB77D\uC740 `git log origin/pr-base..origin/pr-head`\uB85C \uD655\uC778\uD558\uC138\uC694(\uC774 \uC0CC\uB4DC\uBC15\uC2A4 \uC2A4\uD15D\uC740 \uB124\uD2B8\uC6CC\uD06C\uAC00 \uC5C6\uC73C\uBBC0\uB85C `gh`\uB098 GitHub API\uB97C \uD638\uCD9C\uD558\uC9C0 \uB9C8\uC138\uC694).",
-    "\uC804\uCCB4 \uC751\uB2F5\uC744 \uD558\uB098\uC758 \uBA54\uC2DC\uC9C0\uB85C \uC791\uC131\uD558\uC138\uC694: \uAD6C\uCCB4\uC801 \uC9C0\uC801\uC744 \uC801\uC740 \uB4A4 \uB9C8\uC9C0\uB9C9\uC5D0 \uC804\uCCB4 \uC694\uC57D\uC744 \uD55C \uBC88 \uB354 \uB0A8\uAE30\uC138\uC694.",
-    `\uBA54\uC2DC\uC9C0\uC5D0\uB294 \uBC18\uB4DC\uC2DC \uB9AC\uD130\uB7F4 \uB9C8\uCEE4 ${ROUND_MARKER}\uB97C \uD3EC\uD568\uD558\uC138\uC694.`,
-    '\uC870\uCE58\uAC00 \uD544\uC694\uD55C \uBB38\uC81C\uAC00 \uC5C6\uC73C\uBA74 "\uC870\uCE58\uAC00 \uD544\uC694\uD55C \uBB38\uC81C\uB97C \uCC3E\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4."\uB77C\uB294 \uBA54\uC2DC\uC9C0\uB97C \uC815\uD655\uD788 \uD55C \uAC1C \uC791\uC131\uD558\uC138\uC694(\uC774\uB54C\uB3C4 \uB9C8\uCEE4\uB294 \uD3EC\uD568).',
-    "\uCF54\uB4DC\uB97C \uC218\uC815\uD558\uC9C0 \uB9C8\uC138\uC694(Do not modify any code). PR\uC744 \uC2B9\uC778\uD558\uAC70\uB098 \uBCD1\uD569\uD558\uC9C0 \uB9C8\uC138\uC694(never approve or merge).",
-    "\uC694\uC57D\uACFC \uC124\uBA85\uC740 \uD55C\uAD6D\uC5B4\uB85C \uC4F0\uB418, \uD30C\uC77C\uBA85\xB7\uD568\uC218\uBA85\xB7\uC2DD\uBCC4\uC790\uB294 \uC6D0\uBB38 \uADF8\uB300\uB85C \uC720\uC9C0\uD558\uC138\uC694."
-  ];
-  return lines.join("\n");
-}
-function composePrompt4(input) {
-  const mode = REVIEW_MODES[input.mode];
-  const sections = [renderWorkflowInstructions4(input.locale), buildCorrectnessSecurityPrompt(input.locale, mode.promptStyle)];
-  if (mode.includesOverEngineering) {
-    sections.push(buildOverEngineeringPrompt(input.locale));
-  }
-  sections.push(renderFindingsBlockInstruction(input.locale));
-  return sections.join("\n\n---\n\n");
-}
-function buildWorkflowYaml4(input) {
-  return renderReviewWorkflow(input, {
-    name: "GPT Code Review",
-    secretName: SECRET_NAME4,
-    // An API key: codex-action needs no OIDC token.
-    idToken: false,
-    reviewSteps: [
-      renderCheckoutStep(REVIEW_GATE_CONDITION, ["ref: refs/pull/${{ github.event.pull_request.number }}/merge"]),
-      [
-        "- name: Fetch base and head refs for the PR",
-        `  if: ${REVIEW_GATE_CONDITION}`,
-        "  env:",
-        "    PR_BASE_REF: ${{ github.event.pull_request.base.ref }}",
-        "    PR_NUMBER: ${{ github.event.pull_request.number }}",
-        "  run: |",
-        "    # Explicit destinations: the sandboxed review step has no network, so both sides",
-        "    # of the diff must survive as stable local refs (FETCH_HEAD alone is ambiguous).",
-        "    git fetch --no-tags origin \\",
-        '      "+refs/heads/$PR_BASE_REF:refs/remotes/origin/pr-base" \\',
-        '      "+refs/pull/$PR_NUMBER/head:refs/remotes/origin/pr-head"'
-      ].join("\n"),
-      [
-        "- name: Run Codex review",
-        "  id: codex-review",
-        `  if: ${REVIEW_GATE_CONDITION}`,
-        `  uses: ${pinnedUses("openai/codex-action")}`,
-        "  with:",
-        `    openai-api-key: \${{ secrets.${SECRET_NAME4} }}`,
-        '    permission-profile: ":read-only"',
-        "    prompt: |",
-        indentBlock(composePrompt4(input), 6)
-      ].join("\n"),
-      [
-        "- name: Post review comment",
-        `  if: ${REVIEW_GATE_CONDITION}`,
-        "  env:",
-        "    GH_TOKEN: ${{ github.token }}",
-        "    PR_NUMBER: ${{ github.event.pull_request.number }}",
-        "    REVIEW_BODY: ${{ steps.codex-review.outputs.final-message }}",
-        "  run: |",
-        '    printf %s "$REVIEW_BODY" | gh pr comment "$PR_NUMBER" --body-file -'
-      ].join("\n")
-    ]
-  });
-}
-var gptProvider = {
-  id: "gpt",
-  workflowFileName: ".github/workflows/gpt-code-review.yml",
-  requiredSecretName: SECRET_NAME4,
-  buildWorkflowYaml: buildWorkflowYaml4
-};
-
-// ../template-engine/dist/review/provider.js
-var REVIEW_PROVIDERS = {
-  claude: claudeProvider,
-  gemini: geminiProvider,
-  gpt: gptProvider,
-  cursor: cursorProvider
-};
-
-// ../template-engine/dist/review/compose-review-setup.js
-function composeReviewSetup(input) {
-  if (!input.enabled)
-    return null;
-  const provider = REVIEW_PROVIDERS[input.provider];
-  return {
-    workflowFilePath: provider.workflowFileName,
-    workflowYaml: provider.buildWorkflowYaml(input),
-    requiredSecretName: provider.requiredSecretName,
-    configSnippet: buildReviewConfigSnippet(input)
-  };
-}
-
-// ../template-engine/dist/review/conflict.js
-function judgeReviewFileConflict(existing, generated) {
-  if (existing === null)
-    return { kind: "create" };
-  if (existing === generated)
-    return { kind: "unchanged" };
-  return { kind: "merge-proposal", existing, generated };
-}
-
-// src/generators/shared/dry-run.ts
-function resolveDryRun(options) {
-  return process.env["NX_DRY_RUN"] === "true" || (options.dryRun ?? false);
-}
-
-// src/generators/shared/template-files.ts
-import { existsSync } from "node:fs";
-import { fileURLToPath } from "node:url";
-import { generateFiles } from "@nx/devkit";
-import { createTree } from "@nx/devkit/testing";
-function generatorFilesDir(generator, fromUrl) {
-  for (const relative of [`../${generator}/files`, `./generators/${generator}/files`]) {
-    const dir = fileURLToPath(new URL(relative, fromUrl));
-    if (existsSync(dir)) return dir;
-  }
-  throw new Error(`The "${generator}" generator's template files are missing next to ${fileURLToPath(fromUrl)}`);
-}
-function renderTemplateFiles(srcFolder, target, substitutions) {
-  const scratch = createTree();
-  const seeded = new Set(scratch.listChanges().map((change) => change.path));
-  generateFiles(scratch, srcFolder, target, substitutions);
-  return scratch.listChanges().flatMap(
-    (change) => change.type === "CREATE" && change.content !== null && !seeded.has(change.path) ? [{ filePath: change.path, content: change.content.toString("utf-8") }] : []
-  ).sort((a, b) => a.filePath.localeCompare(b.filePath));
-}
-
-// src/generators/shared/json-edit.ts
-import { findNodeAtLocation, parseTree } from "jsonc-parser";
-function detectIndent(raw) {
-  for (const line of raw.split("\n")) {
-    const match = /^(\t+| +)/.exec(line);
-    if (match) return match[1];
-  }
-  return "  ";
-}
-function styleOf(raw) {
-  return { eol: raw.includes("\r\n") ? "\r\n" : "\n", unit: detectIndent(raw) };
-}
-function lineIndentAt(raw, offset) {
-  const lineStart = raw.lastIndexOf("\n", offset - 1) + 1;
-  return /^[ \t]*/.exec(raw.slice(lineStart))?.[0] ?? "";
-}
-function isMultiline(raw, node) {
-  return raw.slice(node.offset, node.offset + node.length).includes("\n");
-}
-function isPrimitive(value) {
-  return value === null || ["string", "number", "boolean"].includes(typeof value);
-}
-function renderValue(value, indent, style) {
-  if (isPrimitive(value)) return JSON.stringify(value);
-  if (Array.isArray(value)) {
-    if (value.every(isPrimitive)) return `[${value.map((item) => JSON.stringify(item)).join(", ")}]`;
-    const inner2 = `${indent}${style.unit}`;
-    return `[${style.eol}${value.map((item) => `${inner2}${renderValue(item, inner2, style)}`).join(`,${style.eol}`)}${style.eol}${indent}]`;
-  }
-  const entries = Object.entries(value);
-  if (entries.length === 0) return "{}";
-  const inner = `${indent}${style.unit}`;
-  const body = entries.map(([key, item]) => `${inner}${JSON.stringify(key)}: ${renderValue(item, inner, style)}`).join(`,${style.eol}`);
-  return `{${style.eol}${body}${style.eol}${indent}}`;
-}
-function splice(raw, start, end, text) {
-  return raw.slice(0, start) + text + raw.slice(end);
-}
-function nest(keys, value) {
-  return keys.reduceRight((inner, key) => ({ [key]: inner }), value);
-}
-function insertProperty(raw, object, key, value, style) {
-  const properties = object.children ?? [];
-  const objectIndent = lineIndentAt(raw, object.offset);
-  if (properties.length === 0) {
-    const inner = `${objectIndent}${style.unit}`;
-    const text = `{${style.eol}${inner}${JSON.stringify(String(key))}: ${renderValue(value, inner, style)}${style.eol}${objectIndent}}`;
-    return splice(raw, object.offset, object.offset + object.length, text);
-  }
-  const last = properties[properties.length - 1];
-  const end = last.offset + last.length;
-  if (!isMultiline(raw, object)) {
-    return splice(raw, end, end, `, ${JSON.stringify(String(key))}: ${renderValue(value, "", style)}`);
-  }
-  const indent = lineIndentAt(raw, last.offset);
-  return splice(raw, end, end, `,${style.eol}${indent}${JSON.stringify(String(key))}: ${renderValue(value, indent, style)}`);
-}
-function setJsonValue(raw, path, value) {
-  const style = styleOf(raw);
-  const root = parseTree(raw);
-  if (root === void 0) throw new Error("setJsonValue: not a JSON document");
-  const existing = findNodeAtLocation(root, path);
-  if (existing !== void 0) {
-    return splice(raw, existing.offset, existing.offset + existing.length, renderValue(value, lineIndentAt(raw, existing.offset), style));
-  }
-  for (let depth = path.length - 1; depth >= 0; depth--) {
-    const parent = depth === 0 ? root : findNodeAtLocation(root, path.slice(0, depth));
-    if (parent === void 0) continue;
-    if (parent.type !== "object") throw new Error(`setJsonValue: ${path.slice(0, depth).join(".") || "the root"} is not an object`);
-    return insertProperty(raw, parent, path[depth], nest(path.slice(depth + 1), value), style);
-  }
-  throw new Error("setJsonValue: unreachable");
-}
-function applyJsonEdits(raw, edits) {
-  if (raw === null) {
-    let text = "{}\n";
-    for (const [path, value] of edits) text = setJsonValue(text, path, value);
-    return text;
-  }
-  return edits.reduce((text, [path, value]) => setJsonValue(text, path, value), raw);
-}
-
-// src/generators/shared/toolkit-config-file.ts
-function recordedChoice(config, key, allowed) {
-  const value = config?.[key];
-  return typeof value === "string" && allowed.includes(value) ? value : void 0;
-}
-var RECORDED_PACKAGE_MANAGERS = ["pnpm", "npm", "yarn", "bun"];
-function workspacePackageManager(exists, read, config) {
-  return detectWorkspacePackageManager(exists, read) ?? recordedChoice(config, "packageManager", RECORDED_PACKAGE_MANAGERS) ?? null;
-}
-function treePackageManager(tree, config) {
-  return workspacePackageManager((p) => tree.exists(p), (p) => tree.read(p, "utf-8"), config);
-}
-
-// src/generators/add-review/render.ts
-var DEPENDABOT_PATH = ".github/dependabot.yml";
-var PROVIDER_STATUS_URL = "https://github.com/clearlydev/nx-archweave/blob/main/docs/pr-review.md#provider-status";
-function renderLineDiff(existing, generated) {
-  const a = existing.split("\n");
-  const b = generated.split("\n");
-  const m = a.length;
-  const n = b.length;
-  const lcs = Array.from({ length: m + 1 }, () => new Array(n + 1).fill(0));
-  for (let i2 = m - 1; i2 >= 0; i2--) {
-    for (let j2 = n - 1; j2 >= 0; j2--) {
-      lcs[i2][j2] = a[i2] === b[j2] ? lcs[i2 + 1][j2 + 1] + 1 : Math.max(lcs[i2 + 1][j2], lcs[i2][j2 + 1]);
-    }
-  }
-  const out = ["--- existing", "+++ generated"];
-  let i = 0;
-  let j = 0;
-  while (i < m && j < n) {
-    if (a[i] === b[j]) {
-      out.push(`  ${a[i]}`);
-      i++;
-      j++;
-    } else if (lcs[i + 1][j] >= lcs[i][j + 1]) {
-      out.push(`- ${a[i]}`);
-      i++;
-    } else {
-      out.push(`+ ${b[j]}`);
-      j++;
-    }
-  }
-  while (i < m) out.push(`- ${a[i++]}`);
-  while (j < n) out.push(`+ ${b[j++]}`);
-  return out.join("\n");
-}
-var WORKFLOW_ACTION_LINES = {
-  created: "created",
-  overwritten: "overwritten with the generated version (per --onConflict=overwrite)",
-  unchanged: "unchanged (already matches the generated version)",
-  proposed: "NOT written \u2014 differs from the generated version (merge proposal below)",
-  skipped: "left as-is (per --onConflict=skip)",
-  alternate: "generated alongside the existing file",
-  aborted: "NOT written"
-};
-var CONFIG_ACTION_LINES = {
-  created: "created with the review field",
-  updated: "review field updated",
-  unchanged: "review field unchanged",
-  "not-updated": "NOT updated \u2014 kept consistent with the workflow file that is actually in effect",
-  aborted: "NOT updated"
-};
-function renderAddReviewReport(report) {
-  const lines = [];
-  if (report.packageManagerNote !== void 0) {
-    lines.push(`Note: ${report.packageManagerNote}`);
-  }
-  if (report.workflowAction === "aborted") {
-    lines.push("add-review aborted \u2014 nothing was written.");
-    lines.push(`  toolkit.config.json: ${report.configError ?? "unusable"}`);
-    lines.push("  Fix the config file manually, then rerun the generator.");
-    return lines.join("\n");
-  }
-  if (report.dryRun) {
-    lines.push("add-review dry-run \u2014 no files were written.");
-    lines.push("");
-    lines.push("Generated workflow YAML:");
-    lines.push(report.workflowYaml ?? "");
-    lines.push("");
-    lines.push("toolkit.config.json review field:");
-    lines.push(report.configSnippetJson ?? "");
-    lines.push("");
-    lines.push("Effective decision:");
-  }
-  lines.push(`  ${report.workflowPath}: ${WORKFLOW_ACTION_LINES[report.workflowAction]}`);
-  lines.push(`  toolkit.config.json: ${CONFIG_ACTION_LINES[report.configAction]}`);
-  if (report.workflowAction === "proposed" && report.diff) {
-    lines.push("");
-    lines.push(report.diff);
-    lines.push("");
-    lines.push("To resolve, rerun with one of:");
-    lines.push("  --onConflict=overwrite            replace the existing file with the generated version");
-    lines.push("  --onConflict=skip                 keep the existing file");
-    lines.push("  --onConflict=alternate-filename   write the generated version alongside it");
-  }
-  if (report.dependabot === "created") {
-    lines.push(`  ${DEPENDABOT_PATH}: created \u2014 Dependabot proposes newer pins for the workflow's actions`);
-  } else if (report.dependabot === "present") {
-    lines.push(`  ${DEPENDABOT_PATH}: already updates github-actions`);
-  } else if (report.dependabot === "proposed") {
-    lines.push(`  ${DEPENDABOT_PATH}: NOT changed \u2014 it has no github-actions entry. The workflow pins each action`);
-    lines.push("  to a commit SHA; add this entry under `updates:` so those pins get update pull requests:");
-    lines.push("");
-    lines.push(report.dependabotProposal ?? "");
-  }
-  if (report.workflowAction === "alternate") {
-    lines.push("");
-    lines.push("  Review the generated file, then replace the main workflow file with it yourself;");
-    lines.push("  the config stays pointing at the workflow that is actually in effect until you do.");
-  }
-  lines.push("");
-  lines.push(`Note: the review workflow stays green-skipped until you register the ${report.requiredSecretName} secret.`);
-  if (report.betaProvider !== void 0) {
-    lines.push(`Note: the ${report.betaProvider} provider is in beta \u2014 its workflow hasn't finished a review end to end on`);
-    lines.push(`GitHub Actions yet. Status, costs and known issues: ${PROVIDER_STATUS_URL}`);
-  }
-  lines.push("Note: this workflow runs with elevated permissions only after it is merged to the default branch \u2014");
-  lines.push("merging is the first real validation.");
-  return lines.join("\n");
-}
-
-// src/generators/add-review/generator.ts
-var CONFIG_PATH = "toolkit.config.json";
-function deriveAltWorkflowPath(mainWorkflowPath) {
-  return mainWorkflowPath.replace(/\.yml$/, ".archweave.yml");
-}
-function readConfig(tree) {
-  const raw = tree.read(CONFIG_PATH, "utf-8");
-  if (raw === null) return { raw: null, parsed: null, error: null };
-  try {
-    const parsed = JSON.parse(raw);
-    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
-      return { raw, parsed: null, error: `${CONFIG_PATH} must contain a top-level JSON object` };
-    }
-    return { raw, parsed, error: null };
-  } catch {
-    return { raw, parsed: null, error: `${CONFIG_PATH} is not valid JSON` };
-  }
-}
-function resolveLocale(option, config) {
-  if (option) return option;
-  const fromConfig = config.parsed?.["locale"];
-  return fromConfig === "ko" || fromConfig === "en" ? fromConfig : "en";
-}
-function deepEqual(a, b) {
-  if (a === b) return true;
-  if (typeof a !== "object" || typeof b !== "object" || a === null || b === null) return false;
-  if (Array.isArray(a) || Array.isArray(b)) {
-    return Array.isArray(a) && Array.isArray(b) && a.length === b.length && a.every((value, index) => deepEqual(value, b[index]));
-  }
-  const aKeys = Object.keys(a).sort();
-  const bKeys = Object.keys(b).sort();
-  if (aKeys.length !== bKeys.length || aKeys.some((key, index) => key !== bKeys[index])) return false;
-  return aKeys.every((key) => deepEqual(a[key], b[key]));
-}
-var PROVIDERS = ["claude", "gemini", "gpt", "cursor"];
-var BETA_PROVIDERS = ["gemini", "gpt", "cursor"];
-var MODES = ["fast", "standard", "thorough"];
-function recordedReview(config) {
-  const review = config?.["review"];
-  if (typeof review !== "object" || review === null || Array.isArray(review)) return {};
-  const record = review;
-  const pick = (value, allowed) => typeof value === "string" && allowed.includes(value) ? value : void 0;
-  const rounds = record["maxRounds"];
-  return {
-    provider: pick(record["provider"], PROVIDERS),
-    mode: pick(record["mode"], MODES),
-    maxRounds: rounds === 1 || rounds === 2 || rounds === 3 || rounds === 4 || rounds === 5 ? rounds : void 0
-  };
-}
-function runAddReview(tree, options) {
-  const config = readConfig(tree);
-  const detectedPm = treePackageManager(tree, config.parsed);
-  const packageManager = options.packageManager ?? detectedPm ?? "pnpm";
-  const packageManagerNote = options.packageManager === void 0 && detectedPm === null ? "the package manager could not be detected (no pnpm, yarn, bun or npm lockfile) \u2014 the workflow was rendered for pnpm; re-run with --packageManager=npm|yarn|bun if that is wrong." : void 0;
-  const recorded = recordedReview(config.parsed);
-  const provider = options.provider ?? recorded.provider ?? "claude";
-  const plan = composeReviewSetup({
-    enabled: true,
-    provider,
-    mode: options.mode ?? recorded.mode ?? "standard",
-    locale: resolveLocale(options.locale, config),
-    maxRounds: options.maxRounds ?? recorded.maxRounds ?? 3,
-    packageManager
-  });
-  if (plan === null) throw new Error("unreachable: add-review always composes with enabled: true");
-  if (config.error !== null) {
-    return {
-      dryRun: options.dryRun ?? false,
-      workflowPath: plan.workflowFilePath,
-      workflowAction: "aborted",
-      configAction: "aborted",
-      requiredSecretName: plan.requiredSecretName,
-      diff: null,
-      workflowYaml: null,
-      configSnippetJson: null,
-      configError: config.error,
-      dependabot: "not-applied",
-      dependabotProposal: null
-    };
-  }
-  const existing = tree.read(plan.workflowFilePath, "utf-8");
-  const verdict = judgeReviewFileConflict(existing, plan.workflowYaml);
-  let workflowAction;
-  let workflowPath = plan.workflowFilePath;
-  let writeWorkflowTo = null;
-  let diff = null;
-  let mainFileMatchesOptions;
-  if (verdict.kind === "create") {
-    workflowAction = "created";
-    writeWorkflowTo = plan.workflowFilePath;
-    mainFileMatchesOptions = true;
-  } else if (verdict.kind === "unchanged") {
-    workflowAction = "unchanged";
-    mainFileMatchesOptions = true;
-  } else {
-    switch (options.onConflict) {
-      case "overwrite":
-        workflowAction = "overwritten";
-        writeWorkflowTo = plan.workflowFilePath;
-        mainFileMatchesOptions = true;
-        break;
-      case "skip":
-        workflowAction = "skipped";
-        mainFileMatchesOptions = false;
-        break;
-      case "alternate-filename": {
-        const altWorkflowPath = deriveAltWorkflowPath(plan.workflowFilePath);
-        workflowAction = "alternate";
-        workflowPath = altWorkflowPath;
-        writeWorkflowTo = altWorkflowPath;
-        mainFileMatchesOptions = false;
-        break;
-      }
-      default:
-        workflowAction = "proposed";
-        diff = renderLineDiff(verdict.existing, verdict.generated);
-        mainFileMatchesOptions = false;
-    }
-  }
-  let configAction;
-  let newConfigContent = null;
-  if (!mainFileMatchesOptions) {
-    configAction = "not-updated";
-  } else {
-    const existingReview = config.parsed?.["review"];
-    if (deepEqual(existingReview, plan.configSnippet)) {
-      configAction = "unchanged";
-    } else {
-      configAction = config.raw === null ? "created" : "updated";
-      newConfigContent = applyJsonEdits(config.raw, [[["review"], plan.configSnippet]]);
-    }
-  }
-  const [dependabotFile] = renderTemplateFiles(generatorFilesDir("add-review", import.meta.url), ".github", {});
-  const existingDependabot = tree.read(DEPENDABOT_PATH, "utf-8");
-  const dependabot = existingDependabot === null ? "created" : /github-actions/.test(existingDependabot) ? "present" : "proposed";
-  const dryRun = options.dryRun ?? false;
-  if (!dryRun) {
-    if (writeWorkflowTo !== null) tree.write(writeWorkflowTo, plan.workflowYaml);
-    if (newConfigContent !== null) tree.write(CONFIG_PATH, newConfigContent);
-    if (dependabot === "created") tree.write(DEPENDABOT_PATH, dependabotFile.content);
-  }
-  return {
-    dryRun,
-    workflowPath,
-    workflowAction,
-    configAction,
-    requiredSecretName: plan.requiredSecretName,
-    diff,
-    workflowYaml: dryRun ? plan.workflowYaml : null,
-    configSnippetJson: dryRun ? JSON.stringify(plan.configSnippet, null, 2) : null,
-    configError: null,
-    dependabot,
-    dependabotProposal: dependabot === "proposed" ? dependabotFile.content : null,
-    ...packageManagerNote !== void 0 ? { packageManagerNote } : {},
-    ...BETA_PROVIDERS.includes(provider) ? { betaProvider: provider } : {}
-  };
-}
-async function addReviewGenerator(tree, options) {
-  console.log(renderAddReviewReport(runAddReview(tree, { ...options, dryRun: resolveDryRun(options) })));
-}
-var generator_default = addReviewGenerator;
+import {
+  addReviewGenerator,
+  generator_default,
+  recordedReview,
+  runAddReview
+} from "../_chunks/chunk-JHRTVURZ.js";
+import "../_chunks/chunk-67INEVWL.js";
+import "../_chunks/chunk-3A6RZUCZ.js";
+import "../_chunks/chunk-YNMLB4DL.js";
+import "../_chunks/chunk-TUN34LAQ.js";
+import "../_chunks/chunk-EXYZLL7A.js";
+import "../_chunks/chunk-FQHFT5IH.js";
 export {
   addReviewGenerator,
   generator_default as default,