@clearlydev/nx-archweave 0.3.1 → 0.3.3

package/dist/generators/_chunks/chunk-67INEVWL.js

@@ -0,0 +1,1068 @@
+// ../review-policy/dist/renderers/render-review-comment.js
+var COPY = {
+  en: {
+    terminationBanner: (maxRounds) => `> \u26A0\uFE0F **Automated review ended.** The maximum of ${maxRounds} review rounds has been reached with blocking findings (P0/P1) still open. Later pushes aren't reviewed by AI, so review them yourself before merging.`,
+    verdictLines: {
+      BLOCK: "**Verdict: BLOCK** \u2014 P0/P1 findings must be resolved before this change can merge.",
+      CHANGES_RECOMMENDED: "**Verdict: CHANGES_RECOMMENDED** \u2014 P2 findings should be addressed.",
+      APPROVE_WITH_NOTES: "**Verdict: APPROVE_WITH_NOTES** \u2014 only advisory notes below; safe to merge.",
+      APPROVE: "**Verdict: APPROVE** \u2014 no findings."
+    },
+    mainSection: "## Correctness & Security",
+    overEngineeringSection: "## Over-engineering",
+    nitSection: "## Nits",
+    roundHistoryHeading: "**Round history:**",
+    roundLine: (round, fixed, remaining) => `- round ${round}: ${fixed} fixed, ${remaining} remaining`,
+    fieldLabels: {
+      file: "File",
+      evidence: "Evidence",
+      impact: "Impact",
+      reproduction: "Reproduction",
+      recommendation: "Recommendation",
+      confidence: "Confidence"
+    }
+  },
+  ko: {
+    terminationBanner: (maxRounds) => `> \u26A0\uFE0F **\uC790\uB3D9 \uB9AC\uBDF0 \uC885\uB8CC.** \uCD5C\uB300 ${maxRounds}\uD68C\uC758 \uB9AC\uBDF0 \uB77C\uC6B4\uB4DC\uC5D0 \uB3C4\uB2EC\uD588\uC9C0\uB9CC \uBCD1\uD569\uC744 \uB9C9\uB294 finding(P0/P1)\uC774 \uB0A8\uC544 \uC788\uC2B5\uB2C8\uB2E4. \uC774\uD6C4 push\uB294 AI\uAC00 \uB9AC\uBDF0\uD558\uC9C0 \uC54A\uC73C\uB2C8, \uBCD1\uD569 \uC804\uC5D0 \uC9C1\uC811 \uB9AC\uBDF0\uD558\uC138\uC694.`,
+    verdictLines: {
+      BLOCK: "**\uD310\uC815: BLOCK** \u2014 \uBCD1\uD569 \uC804\uC5D0 P0/P1 finding\uC744 \uD574\uACB0\uD574\uC57C \uD569\uB2C8\uB2E4.",
+      CHANGES_RECOMMENDED: "**\uD310\uC815: CHANGES_RECOMMENDED** \u2014 P2 finding\uC744 \uD574\uACB0\uD558\uB294 \uAC83\uC744 \uAD8C\uC7A5\uD569\uB2C8\uB2E4.",
+      APPROVE_WITH_NOTES: "**\uD310\uC815: APPROVE_WITH_NOTES** \u2014 \uCC38\uACE0\uC6A9 \uB178\uD2B8\uB9CC \uC788\uC2B5\uB2C8\uB2E4. \uBCD1\uD569\uD574\uB3C4 \uC548\uC804\uD569\uB2C8\uB2E4.",
+      APPROVE: "**\uD310\uC815: APPROVE** \u2014 finding\uC774 \uC5C6\uC2B5\uB2C8\uB2E4."
+    },
+    mainSection: "## \uC815\uD655\uC131 & \uBCF4\uC548",
+    overEngineeringSection: "## \uACFC\uC789 \uC124\uACC4",
+    nitSection: "## \uC0AC\uC18C\uD55C \uC9C0\uC801 (Nit)",
+    roundHistoryHeading: "**\uB77C\uC6B4\uB4DC \uC774\uB825:**",
+    roundLine: (round, fixed, remaining) => `- ${round}\uB77C\uC6B4\uB4DC: \uD574\uACB0 ${fixed}\uAC74, \uBBF8\uD574\uACB0 ${remaining}\uAC74`,
+    fieldLabels: {
+      file: "\uD30C\uC77C",
+      evidence: "\uADFC\uAC70",
+      impact: "\uC601\uD5A5",
+      reproduction: "\uC7AC\uD604 \uC870\uAC74",
+      recommendation: "\uAD8C\uC7A5 \uC870\uCE58",
+      confidence: "\uD655\uC2E0\uB3C4"
+    }
+  }
+};
+function verdictLine(verdict, locale) {
+  return COPY[locale].verdictLines[verdict];
+}
+function terminationBannerLine(maxRounds, locale) {
+  return COPY[locale].terminationBanner(maxRounds);
+}
+
+// ../review-policy/dist/verdict-gate/verdict-comment.js
+var VERDICT_MARKER = "<!-- archweave-verdict -->";
+var HISTORY_HEADING = { en: "**Round history:**", ko: "**\uB77C\uC6B4\uB4DC \uC774\uB825:**" };
+var ROUND_LINE = {
+  en: (round, fixed, remaining) => `- round ${round}: ${fixed} fixed, ${remaining} remaining`,
+  ko: (round, fixed, remaining) => `- ${round}\uCC28: ${fixed}\uAC74 \uD574\uACB0, ${remaining}\uAC74 \uC794\uC874`
+};
+var UNPARSEABLE_NOTICE = {
+  en: "\u26A0\uFE0F The review comment could not be machine-read (missing or invalid findings block). The verdict gate stays green; please review this PR manually.",
+  ko: "\u26A0\uFE0F \uB9AC\uBDF0 \uCF54\uBA58\uD2B8\uB97C \uAE30\uACC4 \uD310\uB3C5\uD558\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4(findings \uBE14\uB85D \uB204\uB77D \uB610\uB294 \uC190\uC0C1). verdict \uAC8C\uC774\uD2B8\uB294 \uB179\uC0C9\uC73C\uB85C \uB450\uB2C8 \uC774 PR\uC740 \uC0AC\uB78C\uC774 \uC9C1\uC811 \uB9AC\uBDF0\uD574 \uC8FC\uC138\uC694."
+};
+var NO_ROUND_NOTICE = {
+  en: "\u26A0\uFE0F This run of the review posted no summary comment for the current commit, so there is no verdict for it (an earlier round is never reused). The verdict gate stays green; please review this PR manually.",
+  ko: "\u26A0\uFE0F \uC774\uBC88 \uB9AC\uBDF0 \uC2E4\uD589\uC774 \uD604\uC7AC \uCEE4\uBC0B\uC5D0 \uB300\uD55C \uC694\uC57D \uCF54\uBA58\uD2B8\uB97C \uAC8C\uC2DC\uD558\uC9C0 \uC54A\uC544 verdict\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4(\uC774\uC804 \uB77C\uC6B4\uB4DC\uB294 \uC7AC\uC0AC\uC6A9\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4). verdict \uAC8C\uC774\uD2B8\uB294 \uB179\uC0C9\uC73C\uB85C \uB450\uB2C8 \uC774 PR\uC740 \uC0AC\uB78C\uC774 \uC9C1\uC811 \uB9AC\uBDF0\uD574 \uC8FC\uC138\uC694."
+};
+var NO_SUMMARY_NOTICE = {
+  en: "\u26D4 AI review posted no summary for this commit, so there is no verdict for it and the review check fails. Review this PR manually, or re-run all jobs to review it again.",
+  ko: "\u26D4 AI \uB9AC\uBDF0\uAC00 \uC774 \uCEE4\uBC0B\uC5D0 \uB300\uD55C \uC694\uC57D\uC744 \uAC8C\uC2DC\uD558\uC9C0 \uC54A\uC544 verdict\uAC00 \uC5C6\uACE0, review \uCCB4\uD06C\uB294 \uC2E4\uD328\uD569\uB2C8\uB2E4. \uC774 PR\uC744 \uC9C1\uC811 \uB9AC\uBDF0\uD558\uAC70\uB098, \uBAA8\uB4E0 \uC7A1\uC744 \uB2E4\uC2DC \uC2E4\uD589\uD574 \uB2E4\uC2DC \uB9AC\uBDF0\uBC1B\uC73C\uC138\uC694."
+};
+var UNREADABLE_SUMMARY_NOTICE = {
+  en: "\u26D4 AI review posted a summary whose findings block could not be machine-read (missing or invalid), so there is no verdict for this commit and the review check fails. Review this PR manually, or re-run all jobs to review it again.",
+  ko: "\u26D4 AI \uB9AC\uBDF0 \uC694\uC57D\uC758 findings \uBE14\uB85D\uC744 \uAE30\uACC4 \uD310\uB3C5\uD558\uC9C0 \uBABB\uD574(\uB204\uB77D \uB610\uB294 \uC190\uC0C1) \uC774 \uCEE4\uBC0B\uC758 verdict\uAC00 \uC5C6\uACE0, review \uCCB4\uD06C\uB294 \uC2E4\uD328\uD569\uB2C8\uB2E4. \uC774 PR\uC744 \uC9C1\uC811 \uB9AC\uBDF0\uD558\uAC70\uB098, \uBAA8\uB4E0 \uC7A1\uC744 \uB2E4\uC2DC \uC2E4\uD589\uD574 \uB2E4\uC2DC \uB9AC\uBDF0\uBC1B\uC73C\uC138\uC694."
+};
+function renderCommitLine(locale, shortSha) {
+  return locale === "en" ? `<sub>Commit \`${shortSha}\` \xB7 this comment is updated on every review round.</sub>` : `<sub>\uCEE4\uBC0B \`${shortSha}\` \xB7 \uC774 \uCF54\uBA58\uD2B8\uB294 \uB9AC\uBDF0 \uB77C\uC6B4\uB4DC\uB9C8\uB2E4 \uAC31\uC2E0\uB429\uB2C8\uB2E4.</sub>`;
+}
+var HEAD_LINE = {
+  en: (sha) => renderCommitLine("en", sha.slice(0, 7)),
+  ko: (sha) => renderCommitLine("ko", sha.slice(0, 7))
+};
+var NOT_RUN_REASON = {
+  en: {
+    secret: (secretName) => `the ${secretName} secret is not registered`,
+    fork: () => "this pull request comes from a fork, and GitHub passes no secrets to runs from forks",
+    dependabot: (secretName) => `Dependabot runs receive only Dependabot secrets, and ${secretName} is not one of them`,
+    rounds: (_secretName, maxRounds) => `the automated review round limit (${maxRounds}) is reached`
+  },
+  ko: {
+    secret: (secretName) => `${secretName} \uC2DC\uD06C\uB9BF\uC774 \uB4F1\uB85D\uB418\uC9C0 \uC54A\uC74C`,
+    fork: () => "\uD3EC\uD06C\uC5D0\uC11C \uC628 pull request\uC774\uACE0, GitHub\uB294 \uD3EC\uD06C \uC2E4\uD589\uC5D0 \uC2DC\uD06C\uB9BF\uC744 \uB118\uAE30\uC9C0 \uC54A\uC74C",
+    dependabot: (secretName) => `Dependabot \uC2E4\uD589\uC740 Dependabot \uC2DC\uD06C\uB9BF\uB9CC \uBC1B\uB294\uB370, ${secretName}\uB294 \uADF8\uC911\uC5D0 \uC5C6\uC74C`,
+    rounds: (_secretName, maxRounds) => `\uC790\uB3D9 \uB9AC\uBDF0 \uB77C\uC6B4\uB4DC \uD55C\uB3C4(${maxRounds})\uC5D0 \uB3C4\uB2EC\uD568`
+  }
+};
+function renderNotRunNotice(locale, reason, secretName, maxRounds) {
+  const why = NOT_RUN_REASON[locale][reason](secretName, maxRounds);
+  return locale === "en" ? `AI review did not run for this commit (${why}). A green check here does not mean the change was reviewed.` : `\uC774 \uCEE4\uBC0B\uC5D0\uB294 AI \uB9AC\uBDF0\uAC00 \uC2E4\uD589\uB418\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4(${why}). \uC774 green \uCCB4\uD06C\uB294 \uBCC0\uACBD \uC0AC\uD56D\uC774 \uB9AC\uBDF0\uB418\uC5C8\uB2E4\uB294 \uB73B\uC774 \uC544\uB2D9\uB2C8\uB2E4.`;
+}
+function withHead(lines, locale, headSha) {
+  return (headSha === void 0 ? lines : [...lines, "", HEAD_LINE[locale](headSha)]).join("\n");
+}
+function renderUnparseableNotice(locale, headSha, failClosed = false) {
+  return withHead([VERDICT_MARKER, (failClosed ? UNREADABLE_SUMMARY_NOTICE : UNPARSEABLE_NOTICE)[locale]], locale, headSha);
+}
+function renderNoSummaryNotice(locale, headSha) {
+  return withHead([VERDICT_MARKER, NO_SUMMARY_NOTICE[locale]], locale, headSha);
+}
+function renderNoRoundNotice(locale, headSha) {
+  return withHead([VERDICT_MARKER, NO_ROUND_NOTICE[locale]], locale, headSha);
+}
+function renderVerdictComment(input) {
+  const lines = [VERDICT_MARKER];
+  if (input.isFinalRound && input.verdict === "BLOCK") {
+    lines.push(terminationBannerLine(input.maxRounds, input.locale), "");
+  }
+  lines.push(verdictLine(input.verdict, input.locale));
+  if (input.history.length > 1) {
+    lines.push("", HISTORY_HEADING[input.locale]);
+    for (let i = 0; i < input.history.length; i++) {
+      if (i === 0)
+        continue;
+      const entry = input.history[i];
+      lines.push(ROUND_LINE[input.locale](entry.round, entry.fixedFindingKeys.length, entry.remainingFindingKeys.length));
+    }
+  }
+  return withHead(lines, input.locale, input.headSha);
+}
+
+// ../review-policy/dist/schema/review-finding.js
+function computeVerdict(findings) {
+  if (findings.some((f) => f.priority === "P0" || f.priority === "P1"))
+    return "BLOCK";
+  if (findings.some((f) => f.priority === "P2"))
+    return "CHANGES_RECOMMENDED";
+  if (findings.length > 0)
+    return "APPROVE_WITH_NOTES";
+  return "APPROVE";
+}
+
+// ../review-policy/dist/verdict-gate/findings-block.js
+var FINDINGS_MARKER = "<!-- archweave-findings-v1 -->";
+var FINDINGS_SCHEMA_ID = "archweave/findings@1";
+var PRIORITIES = ["P0", "P1", "P2", "P3", "Nit"];
+function findingKey(f) {
+  return `${f.file}:${f.lineRange.start}:${f.category}`;
+}
+function extractFindingsBlock(commentBody) {
+  const markerIndex = commentBody.lastIndexOf(FINDINGS_MARKER);
+  if (markerIndex === -1)
+    return { status: "missing" };
+  const after = commentBody.slice(markerIndex + FINDINGS_MARKER.length);
+  const open = /```json[ \t]*\r?\n/.exec(after);
+  if (!open)
+    return { status: "invalid" };
+  const contentStart = open.index + open[0].length;
+  let parsed;
+  let found = false;
+  for (let close = after.indexOf("```", contentStart); close !== -1; close = after.indexOf("```", close + 3)) {
+    try {
+      parsed = JSON.parse(after.slice(contentStart, close));
+      found = true;
+      break;
+    } catch {
+    }
+  }
+  if (!found)
+    return { status: "invalid" };
+  if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed))
+    return { status: "invalid" };
+  const obj = parsed;
+  if (obj.schema !== FINDINGS_SCHEMA_ID || !Array.isArray(obj.findings))
+    return { status: "invalid" };
+  const findings = [];
+  for (const raw of obj.findings) {
+    const finding = normalizeFinding(raw);
+    if (finding === null)
+      return { status: "invalid" };
+    findings.push(finding);
+  }
+  return { status: "ok", findings };
+}
+function normalizeFinding(raw) {
+  if (raw === null || typeof raw !== "object")
+    return null;
+  const r = raw;
+  const lineRange = r["lineRange"];
+  if (!PRIORITIES.includes(r["priority"]) || typeof r["category"] !== "string" || typeof r["title"] !== "string" || typeof r["file"] !== "string" || lineRange === null || lineRange === void 0 || typeof lineRange !== "object" || typeof lineRange.start !== "number" || !Number.isInteger(lineRange.start) || lineRange.start < 1) {
+    return null;
+  }
+  const str = (value) => typeof value === "string" ? value : "";
+  return {
+    priority: r["priority"],
+    category: r["category"],
+    title: r["title"],
+    file: r["file"],
+    lineRange: { start: lineRange.start, ...typeof lineRange.end === "number" ? { end: lineRange.end } : {} },
+    evidence: str(r["evidence"]),
+    impact: str(r["impact"]),
+    reproductionCondition: str(r["reproductionCondition"]),
+    recommendation: str(r["recommendation"]),
+    confidence: r["confidence"] === "plausible" ? "plausible" : "confirmed"
+  };
+}
+
+// ../review-policy/dist/verdict-gate/verdict-gate.js
+var ROUND_MARKER = "<!-- archweave-review-round -->";
+function collectRounds(comments) {
+  return comments.filter((c) => c.body.includes(ROUND_MARKER) && !c.body.includes(VERDICT_MARKER)).map((c, index) => ({ round: index + 1, id: c.id, extraction: extractFindingsBlock(c.body) }));
+}
+var LINE_DRIFT = 3;
+function sameDefect(a, b) {
+  if (a.file !== b.file)
+    return false;
+  const aEnd = a.lineRange.end ?? a.lineRange.start;
+  const bEnd = b.lineRange.end ?? b.lineRange.start;
+  return a.lineRange.start <= bEnd + LINE_DRIFT && b.lineRange.start <= aEnd + LINE_DRIFT;
+}
+function computeRoundHistory(rounds) {
+  const parsed = rounds.filter((r) => r.extraction.status === "ok");
+  const history = [];
+  for (let i = 0; i < parsed.length; i++) {
+    const keys = new Set(parsed[i].extraction.findings.map(findingKey));
+    if (i === 0) {
+      history.push({ round: parsed[i].round, fixedFindingKeys: [], remainingFindingKeys: [...keys] });
+      continue;
+    }
+    const current = parsed[i].extraction.findings;
+    history.push({
+      round: parsed[i].round,
+      fixedFindingKeys: parsed[i - 1].extraction.findings.filter((finding) => !current.some((now) => sameDefect(finding, now))).map(findingKey),
+      remainingFindingKeys: [...keys]
+    });
+  }
+  return history;
+}
+function runVerdictGate(input) {
+  const rounds = collectRounds(input.comments);
+  const reviewRan = input.reviewRan === true;
+  if (rounds.length === 0) {
+    return reviewRan ? { kind: "no-summary", commentBody: renderNoSummaryNotice(input.locale, input.headSha) } : { kind: "no-review" };
+  }
+  const latest = rounds[rounds.length - 1];
+  if (input.roundAfterId !== void 0 && (latest.id === void 0 || latest.id <= input.roundAfterId)) {
+    return reviewRan ? { kind: "no-summary", commentBody: renderNoSummaryNotice(input.locale, input.headSha) } : { kind: "no-round", commentBody: renderNoRoundNotice(input.locale, input.headSha) };
+  }
+  if (latest.extraction.status !== "ok") {
+    return { kind: "unparseable", commentBody: renderUnparseableNotice(input.locale, input.headSha, reviewRan), failClosed: reviewRan };
+  }
+  const verdict = computeVerdict(latest.extraction.findings);
+  const commentBody = renderVerdictComment({
+    verdict,
+    history: computeRoundHistory(rounds),
+    maxRounds: input.maxRounds,
+    locale: input.locale,
+    isFinalRound: rounds.length >= input.maxRounds,
+    headSha: input.headSha
+  });
+  return { kind: "verdict", verdict, commentBody, exitCode: verdict === "BLOCK" ? 1 : 0 };
+}
+
+// ../template-engine/dist/review/config-snippet.js
+function buildReviewConfigSnippet(input) {
+  return {
+    enabled: true,
+    provider: input.provider,
+    mode: input.mode,
+    locale: input.locale,
+    maxRounds: input.maxRounds,
+    blockingPriorities: ["P0", "P1"]
+  };
+}
+
+// ../review-policy/dist/schema/review-policy-config.js
+var DEFAULT_MAX_ROUNDS = 3;
+
+// ../review-policy/dist/modes/review-modes.js
+var REVIEW_MODES = {
+  fast: {
+    mode: "fast",
+    promptStyle: "fast-condensed",
+    includesCorrectnessSecurity: true,
+    includesOverEngineering: false
+  },
+  standard: {
+    mode: "standard",
+    promptStyle: "sectioned",
+    includesCorrectnessSecurity: true,
+    includesOverEngineering: false
+  },
+  thorough: {
+    mode: "thorough",
+    promptStyle: "sectioned",
+    includesCorrectnessSecurity: true,
+    includesOverEngineering: true
+  }
+};
+
+// ../review-policy/dist/prompts/prompt-shared.js
+function renderFindingSchemaInstruction(locale, priorities) {
+  const intro = locale === "en" ? "For every finding, fill in every field of this schema:" : "\uBAA8\uB4E0 finding\uC5D0 \uB300\uD574 \uC544\uB798 \uC2A4\uD0A4\uB9C8\uC758 \uBAA8\uB4E0 \uD544\uB4DC\uB97C \uCC44\uC6B0\uC138\uC694:";
+  return [
+    intro,
+    `- priority: ${priorities.join(" | ")}`,
+    "- category: kebab-case category name",
+    "- title: one-line summary",
+    "- file: path of the affected file",
+    "- lineRange: { start, end? }",
+    "- evidence: what in the code proves the problem",
+    "- impact: what goes wrong and for whom",
+    "- reproductionCondition: the exact input/state that triggers it",
+    "- recommendation: the concrete fix",
+    "- confidence: confirmed | plausible"
+  ].join("\n");
+}
+function renderFindingsBlockInstruction(locale) {
+  const lines = locale === "en" ? [
+    "At the END of the top-level summary comment, append the machine-readable findings block:",
+    `the literal marker line ${FINDINGS_MARKER}, then a fenced \`\`\`json block containing`,
+    `{ "schema": "${FINDINGS_SCHEMA_ID}", "findings": [ ... ] } with one entry per finding,`,
+    "using exactly the finding schema above. If there are no findings, still append the block with an empty findings array."
+  ] : [
+    "top-level \uC694\uC57D \uCF54\uBA58\uD2B8\uC758 \uB9E8 \uB05D\uC5D0 \uAE30\uACC4 \uD310\uB3C5\uC6A9 findings \uBE14\uB85D\uC744 \uB367\uBD99\uC774\uC138\uC694:",
+    `\uB9AC\uD130\uB7F4 \uB9C8\uCEE4 \uC904 ${FINDINGS_MARKER} \uB2E4\uC74C\uC5D0 fenced \`\`\`json \uBE14\uB85D\uC73C\uB85C`,
+    `{ "schema": "${FINDINGS_SCHEMA_ID}", "findings": [ ... ] }\uB97C, finding\uB9C8\uB2E4 \uD55C \uC6D0\uC18C\uC529, \uC704 finding \uC2A4\uD0A4\uB9C8 \uADF8\uB300\uB85C \uC791\uC131\uD558\uC138\uC694.`,
+    "finding\uC774 \uC5C6\uC5B4\uB3C4 \uBE48 \uBC30\uC5F4\uB85C \uBE14\uB85D\uC744 \uBC18\uB4DC\uC2DC \uD3EC\uD568\uD558\uC138\uC694."
+  ];
+  return lines.join("\n");
+}
+function renderDedupInstruction(locale) {
+  return locale === "en" ? "If multiple findings share the same root cause, merge them into a single finding instead of reporting duplicates." : "\uAC19\uC740 \uC6D0\uC778\uC5D0\uC11C \uB098\uC628 finding\uC774 \uC5EC\uB7EC \uAC1C\uB77C\uBA74 \uC911\uBCF5 \uBCF4\uACE0\uD558\uC9C0 \uB9D0\uACE0 \uD558\uB098\uC758 finding\uC73C\uB85C \uD569\uCCD0\uC11C \uBCF4\uACE0\uD558\uC138\uC694.";
+}
+
+// ../review-policy/dist/prompts/correctness-security-prompt.js
+var CORRECTNESS_SECURITY_PRIORITIES = ["P0", "P1", "P2", "Nit"];
+var FAST_PRIORITIES = ["P0", "P1", "P2"];
+function buildCorrectnessSecurityPrompt(locale, style = "sectioned") {
+  if (style === "fast-condensed") {
+    const fastBody = locale === "en" ? [
+      "You are a code reviewer focused on correctness and security.",
+      "",
+      "Review the provided diff and report only the most critical problems. Skip minor style and taste remarks entirely \u2014 report nothing below P2.",
+      "",
+      `Only report findings with priority ${FAST_PRIORITIES.join(", ")}. Do NOT report P3 (over-engineering) findings \u2014 they are out of scope here.`
+    ] : [
+      "\uB2F9\uC2E0\uC740 \uC815\uD655\uC131(correctness)\uACFC \uBCF4\uC548(security)\uC5D0 \uC9D1\uC911\uD558\uB294 \uCF54\uB4DC \uB9AC\uBDF0\uC5B4\uC785\uB2C8\uB2E4.",
+      "",
+      "\uC8FC\uC5B4\uC9C4 diff\uC5D0\uC11C \uAC00\uC7A5 \uCE58\uBA85\uC801\uC778 \uBB38\uC81C\uB9CC \uBCF4\uACE0\uD558\uC138\uC694. \uC0AC\uC18C\uD55C \uC2A4\uD0C0\uC77C\xB7\uCDE8\uD5A5 \uC9C0\uC801\uC740 \uC644\uC804\uD788 \uC0DD\uB7B5\uD558\uACE0, P2 \uBBF8\uB9CC\uC740 \uBCF4\uACE0\uD558\uC9C0 \uB9C8\uC138\uC694.",
+      "",
+      `\uC6B0\uC120\uC21C\uC704 ${FAST_PRIORITIES.join(", ")}\uC5D0 \uD574\uB2F9\uD558\uB294 finding\uB9CC \uBCF4\uACE0\uD558\uC138\uC694. P3(\uACFC\uC789 \uC124\uACC4)\uB294 \uBCF4\uACE0\uD558\uC9C0 \uB9C8\uC138\uC694 \u2014 \uC774 \uB9AC\uBDF0\uC758 \uBC94\uC704 \uBC16\uC785\uB2C8\uB2E4.`
+    ];
+    return [...fastBody, "", renderFindingSchemaInstruction(locale, FAST_PRIORITIES), "", renderDedupInstruction(locale)].join("\n");
+  }
+  const body = locale === "en" ? [
+    "You are a code reviewer focused on correctness and security.",
+    "",
+    'Review the provided diff and report findings in two explicitly separated top-level sections: "Correctness" and "Security". Never mix the two.',
+    "",
+    `Only report findings with priority ${CORRECTNESS_SECURITY_PRIORITIES.join(", ")}. Do NOT report P3 (over-engineering) findings \u2014 they are covered by a separate reviewer and are out of scope here.`
+  ] : [
+    "\uB2F9\uC2E0\uC740 \uC815\uD655\uC131(correctness)\uACFC \uBCF4\uC548(security)\uC5D0 \uC9D1\uC911\uD558\uB294 \uCF54\uB4DC \uB9AC\uBDF0\uC5B4\uC785\uB2C8\uB2E4.",
+    "",
+    '\uC8FC\uC5B4\uC9C4 diff\uB97C \uB9AC\uBDF0\uD558\uACE0, finding\uC744 "Correctness"\uC640 "Security" \uB450 \uAC1C\uC758 \uCD5C\uC0C1\uC704 \uC139\uC158\uC73C\uB85C \uBD84\uB9AC\uD574 \uBCF4\uACE0\uD558\uC138\uC694. \uB450 \uC139\uC158\uC744 \uC808\uB300 \uC11E\uC9C0 \uB9C8\uC138\uC694.',
+    "",
+    `\uC6B0\uC120\uC21C\uC704 ${CORRECTNESS_SECURITY_PRIORITIES.join(", ")}\uC5D0 \uD574\uB2F9\uD558\uB294 finding\uB9CC \uBCF4\uACE0\uD558\uC138\uC694. P3\uB294 \uBCF4\uACE0\uD558\uC9C0 \uB9C8\uC138\uC694 \u2014 P3(\uACFC\uC789 \uC124\uACC4)\uB294 \uBCC4\uB3C4\uC758 \uB9AC\uBDF0\uC5B4\uAC00 \uB2F4\uB2F9\uD558\uBBC0\uB85C \uC774 \uB9AC\uBDF0\uC758 \uBC94\uC704 \uBC16\uC785\uB2C8\uB2E4.`
+  ];
+  return [...body, "", renderFindingSchemaInstruction(locale, CORRECTNESS_SECURITY_PRIORITIES), "", renderDedupInstruction(locale)].join("\n");
+}
+
+// ../review-policy/dist/prompts/over-engineering-prompt.js
+var OVER_ENGINEERING_PRIORITIES = ["P3"];
+function buildOverEngineeringPrompt(locale) {
+  const body = locale === "en" ? [
+    "You are a code reviewer focused exclusively on over-engineering.",
+    "",
+    "Review the provided diff and report findings with priority P3 only. Do NOT report P0, P1, P2, or Nit findings \u2014 correctness and security are covered by a separate reviewer.",
+    "",
+    'Report your findings in their own top-level section titled "Over-engineering"; never mix them into correctness or security sections.'
+  ] : [
+    "\uB2F9\uC2E0\uC740 \uACFC\uC789 \uC124\uACC4(over-engineering)\uB9CC\uC744 \uC804\uB2F4\uD558\uB294 \uCF54\uB4DC \uB9AC\uBDF0\uC5B4\uC785\uB2C8\uB2E4.",
+    "",
+    "\uC8FC\uC5B4\uC9C4 diff\uB97C \uB9AC\uBDF0\uD558\uACE0 \uC6B0\uC120\uC21C\uC704 P3\uB9CC \uBCF4\uACE0\uD558\uC138\uC694. P0, P1, P2, Nit\uC740 \uBCF4\uACE0\uD558\uC9C0 \uB9C8\uC138\uC694 \u2014 \uC815\uD655\uC131\uACFC \uBCF4\uC548\uC740 \uBCC4\uB3C4\uC758 \uB9AC\uBDF0\uC5B4\uAC00 \uB2F4\uB2F9\uD569\uB2C8\uB2E4.",
+    "",
+    'finding\uC740 "Over-engineering"\uC774\uB77C\uB294 \uBCC4\uB3C4\uC758 \uCD5C\uC0C1\uC704 \uC139\uC158\uC73C\uB85C \uBCF4\uACE0\uD558\uACE0, correctness/security \uC139\uC158\uACFC \uC808\uB300 \uC11E\uC9C0 \uB9C8\uC138\uC694.'
+  ];
+  return [...body, "", renderFindingSchemaInstruction(locale, OVER_ENGINEERING_PRIORITIES), "", renderDedupInstruction(locale)].join("\n");
+}
+
+// ../template-engine/dist/review/action-pins.js
+var ACTION_PINS = {
+  "actions/checkout": "actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1",
+  "actions/setup-node": "actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0",
+  "pnpm/action-setup": "pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0",
+  "oven-sh/setup-bun": "oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0",
+  "anthropics/claude-code-action": "anthropics/claude-code-action@6b6870e649b5ff408753befeaee5fc7989d4e6a9 # v1.0.258",
+  "google-github-actions/run-gemini-cli": "google-github-actions/run-gemini-cli@f77273f4c914e4bf38440cf36a0369cb64a37489 # v0.1.22",
+  "openai/codex-action": "openai/codex-action@bdf19a4a223ec2549a3e2274a0cf61556bc07675 # v1.13"
+};
+function pinnedUses(action) {
+  return ACTION_PINS[action];
+}
+
+// ../template-engine/dist/review/workflow-skeleton.js
+function indentBlock(text, spaces) {
+  const pad = " ".repeat(spaces);
+  return text.split("\n").map((line) => line.length === 0 ? line : pad + line).join("\n");
+}
+function renderTriggerBlock() {
+  return ["on:", "  pull_request:", "    types: [opened, synchronize, ready_for_review, reopened]"].join("\n");
+}
+function renderConcurrencyBlock() {
+  return [
+    "concurrency:",
+    "  group: archweave-review-${{ github.event.pull_request.number }}",
+    "  cancel-in-progress: false"
+  ].join("\n");
+}
+var REVIEW_GATE_CONDITION = "steps.secret-gate.outputs.enabled == 'true' && steps.round-gate.outputs.allowed == 'true'";
+function renderReviewPermissions(idToken) {
+  return ["permissions:", "  contents: read", "  pull-requests: write", ...idToken ? ["  id-token: write"] : []].join("\n");
+}
+function renderCheckoutStep(gateCondition, extraWith = []) {
+  return [
+    "- name: Checkout repository",
+    ...gateCondition === void 0 ? [] : [`  if: ${gateCondition}`],
+    `  uses: ${pinnedUses("actions/checkout")}`,
+    "  with:",
+    ...extraWith.map((line) => `    ${line}`),
+    "    fetch-depth: 1",
+    "    persist-credentials: false"
+  ].join("\n");
+}
+function renderSecretGateStep(secretName) {
+  return [
+    "- name: Check review secret",
+    "  id: secret-gate",
+    "  env:",
+    `    REVIEW_SECRET: \${{ secrets.${secretName} }}`,
+    "  run: |",
+    '    if [ -z "$REVIEW_SECRET" ]; then',
+    `      echo "AI review is not active: register the ${secretName} secret to enable it."`,
+    '      echo "enabled=false" >> "$GITHUB_OUTPUT"',
+    "    else",
+    '      echo "enabled=true" >> "$GITHUB_OUTPUT"',
+    "    fi"
+  ].join("\n");
+}
+function renderRoundGateStep(maxRounds) {
+  return [
+    "- name: Check review round limit",
+    "  id: round-gate",
+    "  if: steps.secret-gate.outputs.enabled == 'true'",
+    "  env:",
+    "    GH_TOKEN: ${{ github.token }}",
+    "  run: |",
+    `    counts=$(gh api "repos/\${{ github.repository }}/issues/\${{ github.event.pull_request.number }}/comments" --paginate --jq '[([.[] | select(.user.type == "Bot") | select(.body | contains("${ROUND_MARKER}"))] | length), ([.[].id] | max // 0)]' | jq -s -r '[(map(.[0]) | add // 0), (map(.[1]) | max // 0)] | @tsv')`,
+    `    rounds=$(printf '%s' "$counts" | cut -f1)`,
+    `    echo "last-comment-id=$(printf '%s' "$counts" | cut -f2)" >> "$GITHUB_OUTPUT"`,
+    `    if [ "$rounds" -ge ${maxRounds} ]; then`,
+    `      echo "Automated review round limit (${maxRounds}) reached for this PR; skipping."`,
+    '      echo "allowed=false" >> "$GITHUB_OUTPUT"',
+    "    else",
+    '      echo "allowed=true" >> "$GITHUB_OUTPUT"',
+    "    fi"
+  ].join("\n");
+}
+function shellQuote(text) {
+  return `'${text.replace(/'/g, `'\\''`)}'`;
+}
+function renderNotRunFunction(secretName, maxRounds, locale) {
+  const reasons = ["secret", "fork", "dependabot", "rounds"];
+  const [commitBefore, commitAfter] = renderCommitLine(locale, "\0").split("\0");
+  return [
+    "not_run() {",
+    '  case "$1" in',
+    ...reasons.map((reason) => `    ${reason}) annotation=${shellQuote(renderNotRunNotice("en", reason, secretName, maxRounds))}; notice=${shellQuote(renderNotRunNotice(locale, reason, secretName, maxRounds))} ;;`),
+    "  esac",
+    '  echo "::notice title=AI review did not run::$annotation"',
+    `  printf '%s\\n' "$notice" >> "$GITHUB_STEP_SUMMARY"`,
+    `  short_sha=$(printf '%s' "$HEAD_SHA" | cut -c1-7)`,
+    '  case "$short_sha" in',
+    "    '' | *[!0-9a-f]*) short_sha= ;;",
+    "  esac",
+    "  {",
+    '    echo "notice-body<<ARCHWEAVE_NOT_RUN_EOF"',
+    `    printf '%s\\n' ${shellQuote(VERDICT_MARKER)} "\u2139\uFE0F $notice"`,
+    `    if [ -n "$short_sha" ]; then printf '\\n%s\\n' ${shellQuote(commitBefore)}"$short_sha"${shellQuote(commitAfter)}; fi`,
+    '    echo "ARCHWEAVE_NOT_RUN_EOF"',
+    '    echo "run=false"',
+    '  } >> "$GITHUB_OUTPUT"',
+    "}"
+  ];
+}
+var JUDGE_CONDITION = "steps.ai-review-result.outputs.run == 'true'";
+function renderAiReviewResultStep(secretName, maxRounds, locale) {
+  return [
+    "- name: Check the AI review result",
+    "  id: ai-review-result",
+    "  env:",
+    "    AI_REVIEW_RESULT: ${{ needs.ai-review.result }}",
+    "    REVIEW_ENABLED: ${{ needs.ai-review.outputs.enabled }}",
+    "    REVIEW_ALLOWED: ${{ needs.ai-review.outputs.allowed }}",
+    "    LAST_COMMENT_ID: ${{ needs.ai-review.outputs.last-comment-id }}",
+    "    HEAD_SHA: ${{ github.event.pull_request.head.sha }}",
+    "    HEAD_REPOSITORY: ${{ github.event.pull_request.head.repo.full_name }}",
+    "    REPOSITORY: ${{ github.repository }}",
+    "    PR_AUTHOR: ${{ github.event.pull_request.user.login }}",
+    "  run: |",
+    ...renderNotRunFunction(secretName, maxRounds, locale).map((line) => `    ${line}`),
+    '    if [ "$AI_REVIEW_RESULT" != success ]; then',
+    `      echo "::error title=AI review did not succeed::The AI review job ended with '$AI_REVIEW_RESULT'."`,
+    "      exit 1",
+    "    fi",
+    '    case "$REVIEW_ENABLED/$REVIEW_ALLOWED" in',
+    "      false/*)",
+    '        if [ "$HEAD_REPOSITORY" != "$REPOSITORY" ]; then not_run fork',
+    `        elif [ "$PR_AUTHOR" = 'dependabot[bot]' ]; then not_run dependabot`,
+    "        else not_run secret",
+    "        fi",
+    "        exit 0",
+    "        ;;",
+    "      true/false)",
+    "        not_run rounds",
+    "        exit 0",
+    "        ;;",
+    "      true/true)",
+    '        case "$LAST_COMMENT_ID" in',
+    "          '' | *[!0-9]*) ;;",
+    "          *)",
+    '            echo "run=true" >> "$GITHUB_OUTPUT"',
+    "            exit 0",
+    "            ;;",
+    "        esac",
+    "        ;;",
+    "    esac",
+    `    echo "::error title=Review verdict not computed::The AI review job's results did not reach this job, so no verdict can be computed. Re-run all jobs."`,
+    "    exit 1"
+  ].join("\n");
+}
+function renderVerdictGateStep(maxRounds, locale) {
+  return [
+    "- name: Compute review verdict",
+    "  id: verdict",
+    `  if: ${JUDGE_CONDITION}`,
+    "  env:",
+    "    GH_TOKEN: ${{ github.token }}",
+    "    GITHUB_REPOSITORY: ${{ github.repository }}",
+    "    ARCHWEAVE_PR_NUMBER: ${{ github.event.pull_request.number }}",
+    `    ARCHWEAVE_MAX_ROUNDS: '${maxRounds}'`,
+    `    ARCHWEAVE_LOCALE: '${locale}'`,
+    "    ARCHWEAVE_HEAD_SHA: ${{ github.event.pull_request.head.sha }}",
+    "    ARCHWEAVE_ROUND_AFTER_ID: ${{ needs.ai-review.outputs.last-comment-id }}",
+    "    ARCHWEAVE_VERDICT_OUTPUT: 'github-output'",
+    "  run: |",
+    "    if [ -x node_modules/.bin/archweave-review-verdict ]; then",
+    "      node_modules/.bin/archweave-review-verdict",
+    "    else",
+    '      echo "nx-archweave is not installed in this workspace - skipping the verdict gate."',
+    "    fi"
+  ].join("\n");
+}
+function renderBlockStep() {
+  return [
+    "- name: Fail the review check",
+    "  if: steps.verdict.outputs.blocked == 'true'",
+    "  env:",
+    "    BLOCK_REASON: ${{ steps.verdict.outputs.block-reason }}",
+    "  run: |",
+    '    case "$BLOCK_REASON" in',
+    '      block) echo "The AI verdict is BLOCK: fix the P0/P1 findings in the verdict comment and push." ;;',
+    '      no-summary) echo "The AI review posted no summary for this commit, so there is no verdict. Re-run all jobs to review it again, or review it yourself." ;;',
+    '      unreadable) echo "The AI review summary has no readable findings block, so there is no verdict. Re-run all jobs to review it again, or review it yourself." ;;',
+    '      *) echo "The review check failed. See the verdict comment on this pull request." ;;',
+    "    esac",
+    "    exit 1"
+  ].join("\n");
+}
+function renderVerdictCommentStep() {
+  return [
+    "- name: Post review verdict",
+    "  env:",
+    "    GH_TOKEN: ${{ github.token }}",
+    "    REPOSITORY: ${{ github.repository }}",
+    "    PR_NUMBER: ${{ github.event.pull_request.number }}",
+    "    VERDICT_BODY: ${{ needs.review.outputs.comment-body }}",
+    "    PREVIOUS_ID: ${{ needs.review.outputs.previous-comment-id }}",
+    "  run: |",
+    `    payload=$(jq -n --arg body "$VERDICT_BODY" '{body: $body}')`,
+    '    if [ -z "$PREVIOUS_ID" ]; then',
+    `      PREVIOUS_ID=$(gh api "repos/$REPOSITORY/issues/$PR_NUMBER/comments" --paginate --jq '.[] | select(.user.login == "github-actions[bot]") | select(.body | contains("${VERDICT_MARKER}")) | .id' | tail -n 1) || PREVIOUS_ID=`,
+    "    fi",
+    '    case "$PREVIOUS_ID" in',
+    "      ''|*[!0-9]*) PREVIOUS_ID= ;;",
+    "    esac",
+    `    if [ -n "$PREVIOUS_ID" ] && printf '%s' "$payload" | gh api -X PATCH "repos/$REPOSITORY/issues/comments/$PREVIOUS_ID" --input - > /dev/null; then`,
+    "      exit 0",
+    "    fi",
+    `    printf '%s' "$payload" | gh api -X POST "repos/$REPOSITORY/issues/$PR_NUMBER/comments" --input - > /dev/null \\`,
+    '      || echo "Could not post the verdict comment (continuing)."'
+  ].join("\n");
+}
+var SETUP_NODE_VERSION = "22";
+var FALLBACK_PNPM_VERSION = "10";
+var INSTALL_LINES = {
+  pnpm: ["    pnpm install --frozen-lockfile --ignore-scripts"],
+  npm: ["    npm ci --ignore-scripts"],
+  yarn: [
+    "    corepack enable yarn",
+    '    if [ "$(yarn --version | cut -d. -f1)" -ge 2 ]; then YARN_ENABLE_SCRIPTS=false yarn install --immutable --mode=skip-build; else yarn install --frozen-lockfile --ignore-scripts; fi'
+  ],
+  bun: ["    bun install --frozen-lockfile --ignore-scripts"]
+};
+function renderPnpmVersionStep(gate) {
+  return [
+    "- name: Detect pnpm version",
+    "  id: pnpm-version",
+    gate,
+    "  run: |",
+    `    if [ -n "$(jq -r '.packageManager // empty' package.json)" ]; then`,
+    '      echo "version=" >> "$GITHUB_OUTPUT"',
+    "    else",
+    `      echo "version=${FALLBACK_PNPM_VERSION}" >> "$GITHUB_OUTPUT"`,
+    "    fi"
+  ].join("\n");
+}
+function renderWorkspaceSetupSteps(packageManager) {
+  const gate = `  if: ${JUDGE_CONDITION}`;
+  const steps = [];
+  if (packageManager === "pnpm") {
+    steps.push(renderPnpmVersionStep(gate));
+    steps.push([
+      "- name: Set up pnpm",
+      gate,
+      `  uses: ${pinnedUses("pnpm/action-setup")}`,
+      "  with:",
+      "    version: ${{ steps.pnpm-version.outputs.version }}"
+    ].join("\n"));
+  }
+  if (packageManager === "bun") {
+    steps.push(["- name: Set up bun", gate, `  uses: ${pinnedUses("oven-sh/setup-bun")}`].join("\n"));
+  }
+  steps.push([
+    "- name: Set up Node",
+    gate,
+    `  uses: ${pinnedUses("actions/setup-node")}`,
+    "  with:",
+    `    node-version: ${SETUP_NODE_VERSION}`,
+    // yarn: no setup-node cache — it would query the runner's global yarn 1 even in a
+    // berry project. Corepack (shipped with Node) provides the project's own yarn below.
+    // bun: setup-node has no bun cache. Node is still set up — nx and the verdict bin
+    // run on it.
+    ...packageManager === "yarn" || packageManager === "bun" ? [] : [`    cache: ${packageManager}`]
+  ].join("\n"));
+  steps.push([
+    "- name: Install workspace dependencies",
+    gate,
+    "  run: |",
+    ...INSTALL_LINES[packageManager]
+  ].join("\n"));
+  return steps.join("\n\n");
+}
+var REVIEW_JOB_TIMEOUT_MINUTES = 15;
+function renderReviewWorkflow(input, parts) {
+  const aiReviewSteps = [renderSecretGateStep(parts.secretName), renderRoundGateStep(input.maxRounds), ...parts.reviewSteps];
+  const reviewSteps = [
+    renderAiReviewResultStep(parts.secretName, input.maxRounds, input.locale),
+    renderCheckoutStep(JUDGE_CONDITION),
+    renderWorkspaceSetupSteps(input.packageManager),
+    renderVerdictGateStep(input.maxRounds, input.locale),
+    renderBlockStep()
+  ];
+  return [
+    `name: ${parts.name}`,
+    "",
+    renderTriggerBlock(),
+    "",
+    renderConcurrencyBlock(),
+    "",
+    "permissions: {}",
+    "",
+    "jobs:",
+    "  ai-review:",
+    "    runs-on: ubuntu-latest",
+    `    timeout-minutes: ${REVIEW_JOB_TIMEOUT_MINUTES}`,
+    indentBlock(renderReviewPermissions(parts.idToken), 4),
+    "    outputs:",
+    "      enabled: ${{ steps.secret-gate.outputs.enabled }}",
+    "      allowed: ${{ steps.round-gate.outputs.allowed }}",
+    "      last-comment-id: ${{ steps.round-gate.outputs.last-comment-id }}",
+    "    steps:",
+    indentBlock(aiReviewSteps.join("\n\n"), 6),
+    "",
+    "  review:",
+    "    needs: ai-review",
+    "    if: always()",
+    "    runs-on: ubuntu-latest",
+    `    timeout-minutes: ${REVIEW_JOB_TIMEOUT_MINUTES}`,
+    "    permissions:",
+    "      contents: read",
+    "      pull-requests: read",
+    "    outputs:",
+    "      comment-body: ${{ steps.verdict.outputs.comment-body || steps.ai-review-result.outputs.notice-body }}",
+    "      previous-comment-id: ${{ steps.verdict.outputs.previous-comment-id }}",
+    "    steps:",
+    indentBlock(reviewSteps.join("\n\n"), 6),
+    "",
+    "  review-comment:",
+    "    needs: review",
+    // Runs after a BLOCK failed the review job, too: the comment explains the red check.
+    "    if: ${{ !cancelled() && needs.review.outputs.comment-body != '' }}",
+    "    runs-on: ubuntu-latest",
+    `    timeout-minutes: ${REVIEW_JOB_TIMEOUT_MINUTES}`,
+    "    permissions:",
+    "      pull-requests: write",
+    "    steps:",
+    indentBlock(renderVerdictCommentStep(), 6),
+    ""
+  ].join("\n");
+}
+
+// ../template-engine/dist/review/claude/claude-provider.js
+var SECRET_NAME = "CLAUDE_CODE_OAUTH_TOKEN";
+var ALLOWED_TOOLS = "mcp__github_inline_comment__create_inline_comment,Bash(gh pr comment:*),Bash(gh pr diff:*),Bash(gh pr view:*)";
+var CLAUDE_STEP_ID = "claude-review";
+var PR_CONTEXT = ["REPO: ${{ github.repository }}", "PR NUMBER: ${{ github.event.pull_request.number }}"];
+function renderWorkflowInstructions(locale) {
+  const lines = locale === "en" ? [
+    ...PR_CONTEXT,
+    "",
+    "Review the diff of this pull request using `gh pr diff <PR NUMBER>` and `gh pr view <PR NUMBER>`.",
+    "Post specific findings as inline comments with `mcp__github_inline_comment__create_inline_comment` (pass `confirmed: true`), and exactly one top-level summary comment.",
+    "Post the summary with `gh pr comment <PR NUMBER> --body-file - <<'ARCHWEAVE_EOF'`, the body on the following lines, then a line `ARCHWEAVE_EOF` (the quoted delimiter keeps backticks and `$` literal). Never pass the body with `--body \"...\"` or `$(...)`.",
+    "Run each `gh` command on its own: no pipes to other programs, no `&&` chains.",
+    `Always include the literal marker ${ROUND_MARKER} in the top-level summary comment.`,
+    "If there are no findings that require action, post exactly one top-level comment saying so (and still include the marker).",
+    "Do not modify any code, and never approve or merge the pull request.",
+    "Write summaries and explanations in English; keep file names, function names, and identifiers verbatim."
+  ] : [
+    ...PR_CONTEXT,
+    "",
+    "\uC774 pull request\uC758 diff\uB97C `gh pr diff <PR NUMBER>`\uC640 `gh pr view <PR NUMBER>`\uB85C \uD655\uC778\uD558\uACE0 \uB9AC\uBDF0\uD558\uC138\uC694.",
+    "\uAD6C\uCCB4\uC801 \uC9C0\uC801\uC740 `mcp__github_inline_comment__create_inline_comment`(`confirmed: true` \uC804\uB2EC)\uB85C inline comment\uB97C \uB2EC\uACE0, \uC804\uCCB4 \uC694\uC57D\uC740 \uC815\uD655\uD788 \uD55C \uAC1C\uC758 top-level comment\uB85C \uAC8C\uC2DC\uD558\uC138\uC694.",
+    "\uC694\uC57D\uC740 `gh pr comment <PR NUMBER> --body-file - <<'ARCHWEAVE_EOF'`\uB85C \uAC8C\uC2DC\uD558\uC138\uC694. \uB2E4\uC74C \uC904\uBD80\uD130 \uBCF8\uBB38\uC744 \uC4F0\uACE0, \uB9C8\uC9C0\uB9C9 \uC904\uC5D0 `ARCHWEAVE_EOF`\uB9CC \uC4F0\uC138\uC694(\uB530\uC634\uD45C \uCE5C \uAD6C\uBD84\uC790\uB77C \uBC31\uD2F1\uACFC `$`\uAC00 \uADF8\uB300\uB85C \uB0A8\uC544\uC694). \uBCF8\uBB38\uC744 `--body \"...\"`\uB098 `$(...)`\uB85C \uB118\uAE30\uC9C0 \uB9C8\uC138\uC694.",
+    "`gh` \uBA85\uB839\uC740 \uD558\uB098\uC529 \uB530\uB85C \uC2E4\uD589\uD558\uC138\uC694. \uB2E4\uB978 \uD504\uB85C\uADF8\uB7A8\uC73C\uB85C \uD30C\uC774\uD504\uD558\uAC70\uB098 `&&`\uB85C \uC787\uC9C0 \uB9C8\uC138\uC694.",
+    `top-level \uC694\uC57D \uCF54\uBA58\uD2B8\uC5D0\uB294 \uBC18\uB4DC\uC2DC \uB9AC\uD130\uB7F4 \uB9C8\uCEE4 ${ROUND_MARKER}\uB97C \uD3EC\uD568\uD558\uC138\uC694.`,
+    '\uC870\uCE58\uAC00 \uD544\uC694\uD55C \uBB38\uC81C\uAC00 \uC5C6\uC73C\uBA74 "\uC870\uCE58\uAC00 \uD544\uC694\uD55C \uBB38\uC81C\uB97C \uCC3E\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4."\uB77C\uB294 top-level comment\uB97C \uC815\uD655\uD788 \uD55C \uAC1C \uAC8C\uC2DC\uD558\uC138\uC694(\uC774\uB54C\uB3C4 \uB9C8\uCEE4\uB294 \uD3EC\uD568).',
+    "\uCF54\uB4DC\uB97C \uC218\uC815\uD558\uC9C0 \uB9C8\uC138\uC694(Do not modify any code). PR\uC744 \uC2B9\uC778\uD558\uAC70\uB098 \uBCD1\uD569\uD558\uC9C0 \uB9C8\uC138\uC694(never approve or merge).",
+    "\uC694\uC57D\uACFC \uC124\uBA85\uC740 \uD55C\uAD6D\uC5B4\uB85C \uC4F0\uB418, \uD30C\uC77C\uBA85\xB7\uD568\uC218\uBA85\xB7\uC2DD\uBCC4\uC790\uB294 \uC6D0\uBB38 \uADF8\uB300\uB85C \uC720\uC9C0\uD558\uC138\uC694."
+  ];
+  return lines.join("\n");
+}
+function composePrompt(input) {
+  const mode = REVIEW_MODES[input.mode];
+  const sections = [renderWorkflowInstructions(input.locale), buildCorrectnessSecurityPrompt(input.locale, mode.promptStyle)];
+  if (mode.includesOverEngineering) {
+    sections.push(buildOverEngineeringPrompt(input.locale));
+  }
+  sections.push(renderFindingsBlockInstruction(input.locale));
+  return sections.join("\n\n---\n\n");
+}
+function renderDeniedToolsStep() {
+  return [
+    "- name: Show denied tool calls",
+    `  if: always() && steps.${CLAUDE_STEP_ID}.outputs.execution_file != ''`,
+    "  env:",
+    `    EXECUTION_FILE: \${{ steps.${CLAUDE_STEP_ID}.outputs.execution_file }}`,
+    "  run: |",
+    '    [ -f "$EXECUTION_FILE" ] || exit 0',
+    `    stop_token="archweave-$(od -An -N16 -tx1 /dev/urandom | tr -d ' \\n')"`,
+    '    echo "::stop-commands::$stop_token"',
+    `    jq -c '.[] | select(.type == "result") | ((.permission_denials[]? | {tool: .tool_name, command: ((.tool_input.command // "") | tostring | .[0:200])}), (select(.is_error == true) | {error: ((.result // "") | tostring | .[0:300])}))' "$EXECUTION_FILE" || echo "Could not read the execution file."`,
+    '    echo "::$stop_token::"'
+  ].join("\n");
+}
+function buildWorkflowYaml(input) {
+  return renderReviewWorkflow(input, {
+    name: "Claude Code Review",
+    secretName: SECRET_NAME,
+    // The Claude GitHub App signs in with the workflow's OIDC token (claude-code-action's FAQ).
+    idToken: true,
+    reviewSteps: [
+      renderCheckoutStep(REVIEW_GATE_CONDITION),
+      [
+        "- name: Run Claude review",
+        `  id: ${CLAUDE_STEP_ID}`,
+        `  if: ${REVIEW_GATE_CONDITION}`,
+        `  uses: ${pinnedUses("anthropics/claude-code-action")}`,
+        "  with:",
+        `    claude_code_oauth_token: \${{ secrets.${SECRET_NAME} }}`,
+        "    prompt: |",
+        indentBlock(composePrompt(input), 6),
+        "    claude_args: |",
+        `      --allowedTools "${ALLOWED_TOOLS}"`
+      ].join("\n"),
+      renderDeniedToolsStep()
+    ]
+  });
+}
+var claudeProvider = {
+  id: "claude",
+  workflowFileName: ".github/workflows/claude-code-review.yml",
+  requiredSecretName: SECRET_NAME,
+  buildWorkflowYaml
+};
+
+// ../template-engine/dist/review/cursor/cursor-provider.js
+var SECRET_NAME2 = "CURSOR_API_KEY";
+var PROMPT_HEREDOC_DELIMITER = "ARCHWEAVE_CURSOR_REVIEW_PROMPT";
+function renderWorkflowInstructions2(locale) {
+  const lines = locale === "en" ? [
+    "Review the diff of this pull request using `gh pr diff` and `gh pr view`.",
+    "Post specific findings as inline comments and exactly one top-level summary comment.",
+    `Always include the literal marker ${ROUND_MARKER} in the top-level summary comment.`,
+    "If there are no findings that require action, post exactly one top-level comment saying so (and still include the marker).",
+    "Do not modify any code, and never approve or merge the pull request.",
+    "Write summaries and explanations in English; keep file names, function names, and identifiers verbatim."
+  ] : [
+    "\uC774 pull request\uC758 diff\uB97C `gh pr diff`\uC640 `gh pr view`\uB85C \uD655\uC778\uD558\uACE0 \uB9AC\uBDF0\uD558\uC138\uC694.",
+    "\uAD6C\uCCB4\uC801 \uC9C0\uC801\uC740 inline comment\uB85C, \uC804\uCCB4 \uC694\uC57D\uC740 \uC815\uD655\uD788 \uD55C \uAC1C\uC758 top-level comment\uB85C \uAC8C\uC2DC\uD558\uC138\uC694.",
+    `top-level \uC694\uC57D \uCF54\uBA58\uD2B8\uC5D0\uB294 \uBC18\uB4DC\uC2DC \uB9AC\uD130\uB7F4 \uB9C8\uCEE4 ${ROUND_MARKER}\uB97C \uD3EC\uD568\uD558\uC138\uC694.`,
+    '\uC870\uCE58\uAC00 \uD544\uC694\uD55C \uBB38\uC81C\uAC00 \uC5C6\uC73C\uBA74 "\uC870\uCE58\uAC00 \uD544\uC694\uD55C \uBB38\uC81C\uB97C \uCC3E\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4."\uB77C\uB294 top-level comment\uB97C \uC815\uD655\uD788 \uD55C \uAC1C \uAC8C\uC2DC\uD558\uC138\uC694(\uC774\uB54C\uB3C4 \uB9C8\uCEE4\uB294 \uD3EC\uD568).',
+    "\uCF54\uB4DC\uB97C \uC218\uC815\uD558\uC9C0 \uB9C8\uC138\uC694(Do not modify any code). PR\uC744 \uC2B9\uC778\uD558\uAC70\uB098 \uBCD1\uD569\uD558\uC9C0 \uB9C8\uC138\uC694(never approve or merge).",
+    "\uC694\uC57D\uACFC \uC124\uBA85\uC740 \uD55C\uAD6D\uC5B4\uB85C \uC4F0\uB418, \uD30C\uC77C\uBA85\xB7\uD568\uC218\uBA85\xB7\uC2DD\uBCC4\uC790\uB294 \uC6D0\uBB38 \uADF8\uB300\uB85C \uC720\uC9C0\uD558\uC138\uC694."
+  ];
+  return lines.join("\n");
+}
+function composePrompt2(input) {
+  const mode = REVIEW_MODES[input.mode];
+  const sections = [renderWorkflowInstructions2(input.locale), buildCorrectnessSecurityPrompt(input.locale, mode.promptStyle)];
+  if (mode.includesOverEngineering) {
+    sections.push(buildOverEngineeringPrompt(input.locale));
+  }
+  sections.push(renderFindingsBlockInstruction(input.locale));
+  return sections.join("\n\n---\n\n");
+}
+function buildWorkflowYaml2(input) {
+  return renderReviewWorkflow(input, {
+    name: "Cursor Code Review",
+    secretName: SECRET_NAME2,
+    // An API key: the Cursor CLI needs no OIDC token.
+    idToken: false,
+    reviewSteps: [
+      renderCheckoutStep(REVIEW_GATE_CONDITION),
+      [
+        "- name: Install cursor-agent CLI",
+        `  if: ${REVIEW_GATE_CONDITION}`,
+        "  run: |",
+        // HTTPS only, TLS 1.2 or newer. Cursor publishes no pinned version or checksum for
+        // this installer; docs/pr-review.md states what that leaves open.
+        "    curl --proto '=https' --tlsv1.2 -fsS https://cursor.com/install | bash",
+        // The docs name ~/.cursor/bin; the installer currently links `agent` into ~/.local/bin.
+        // Both go on the PATH, so the next step finds it wherever the installer puts it.
+        '    echo "$HOME/.local/bin" >> "$GITHUB_PATH"',
+        '    echo "$HOME/.cursor/bin" >> "$GITHUB_PATH"'
+      ].join("\n"),
+      [
+        "- name: Run Cursor review",
+        `  if: ${REVIEW_GATE_CONDITION}`,
+        "  env:",
+        `    CURSOR_API_KEY: \${{ secrets.${SECRET_NAME2} }}`,
+        "    GH_TOKEN: ${{ github.token }}",
+        "  run: |",
+        // cursor-agent stops at "Workspace Trust Required" without --trust (2026.10.22 on
+        // Actions); the folder is this run's own checkout, and forks never get the secret.
+        `    agent --trust -p "$(cat <<'${PROMPT_HEREDOC_DELIMITER}'`,
+        indentBlock(composePrompt2(input), 4),
+        `    ${PROMPT_HEREDOC_DELIMITER}`,
+        '    )"'
+      ].join("\n")
+    ]
+  });
+}
+var cursorProvider = {
+  id: "cursor",
+  workflowFileName: ".github/workflows/cursor-code-review.yml",
+  requiredSecretName: SECRET_NAME2,
+  buildWorkflowYaml: buildWorkflowYaml2
+};
+
+// ../template-engine/dist/review/gemini/gemini-provider.js
+var SECRET_NAME3 = "GEMINI_API_KEY";
+function renderWorkflowInstructions3(locale) {
+  const lines = locale === "en" ? [
+    "Review the diff of this pull request using `gh pr diff` and `gh pr view`.",
+    "Post specific findings as inline comments and exactly one top-level summary comment.",
+    `Always include the literal marker ${ROUND_MARKER} in the top-level summary comment.`,
+    "If there are no findings that require action, post exactly one top-level comment saying so (and still include the marker).",
+    "Do not modify any code, and never approve or merge the pull request.",
+    "Write summaries and explanations in English; keep file names, function names, and identifiers verbatim."
+  ] : [
+    "\uC774 pull request\uC758 diff\uB97C `gh pr diff`\uC640 `gh pr view`\uB85C \uD655\uC778\uD558\uACE0 \uB9AC\uBDF0\uD558\uC138\uC694.",
+    "\uAD6C\uCCB4\uC801 \uC9C0\uC801\uC740 inline comment\uB85C, \uC804\uCCB4 \uC694\uC57D\uC740 \uC815\uD655\uD788 \uD55C \uAC1C\uC758 top-level comment\uB85C \uAC8C\uC2DC\uD558\uC138\uC694.",
+    `top-level \uC694\uC57D \uCF54\uBA58\uD2B8\uC5D0\uB294 \uBC18\uB4DC\uC2DC \uB9AC\uD130\uB7F4 \uB9C8\uCEE4 ${ROUND_MARKER}\uB97C \uD3EC\uD568\uD558\uC138\uC694.`,
+    '\uC870\uCE58\uAC00 \uD544\uC694\uD55C \uBB38\uC81C\uAC00 \uC5C6\uC73C\uBA74 "\uC870\uCE58\uAC00 \uD544\uC694\uD55C \uBB38\uC81C\uB97C \uCC3E\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4."\uB77C\uB294 top-level comment\uB97C \uC815\uD655\uD788 \uD55C \uAC1C \uAC8C\uC2DC\uD558\uC138\uC694(\uC774\uB54C\uB3C4 \uB9C8\uCEE4\uB294 \uD3EC\uD568).',
+    "\uCF54\uB4DC\uB97C \uC218\uC815\uD558\uC9C0 \uB9C8\uC138\uC694(Do not modify any code). PR\uC744 \uC2B9\uC778\uD558\uAC70\uB098 \uBCD1\uD569\uD558\uC9C0 \uB9C8\uC138\uC694(never approve or merge).",
+    "\uC694\uC57D\uACFC \uC124\uBA85\uC740 \uD55C\uAD6D\uC5B4\uB85C \uC4F0\uB418, \uD30C\uC77C\uBA85\xB7\uD568\uC218\uBA85\xB7\uC2DD\uBCC4\uC790\uB294 \uC6D0\uBB38 \uADF8\uB300\uB85C \uC720\uC9C0\uD558\uC138\uC694."
+  ];
+  return lines.join("\n");
+}
+function composePrompt3(input) {
+  const mode = REVIEW_MODES[input.mode];
+  const sections = [renderWorkflowInstructions3(input.locale), buildCorrectnessSecurityPrompt(input.locale, mode.promptStyle)];
+  if (mode.includesOverEngineering) {
+    sections.push(buildOverEngineeringPrompt(input.locale));
+  }
+  sections.push(renderFindingsBlockInstruction(input.locale));
+  return sections.join("\n\n---\n\n");
+}
+var GEMINI_CLI_VERSION = "0.65.0";
+function buildWorkflowYaml3(input) {
+  return renderReviewWorkflow(input, {
+    name: "Gemini Code Review",
+    secretName: SECRET_NAME3,
+    // An API key: run-gemini-cli uses OIDC only for Google Cloud workload identity federation.
+    idToken: false,
+    reviewSteps: [
+      renderCheckoutStep(REVIEW_GATE_CONDITION),
+      [
+        "- name: Run Gemini review",
+        `  if: ${REVIEW_GATE_CONDITION}`,
+        `  uses: ${pinnedUses("google-github-actions/run-gemini-cli")}`,
+        "  env:",
+        "    GITHUB_TOKEN: ${{ github.token }}",
+        // Gemini CLI 0.65 refuses to run in a folder it hasn't been told to trust (measured
+        // 2026-10-25 on Actions). The folder is this run's own checkout; pull requests from forks
+        // never get here, because they get no secret.
+        "    GEMINI_CLI_TRUST_WORKSPACE: 'true'",
+        "  with:",
+        `    gemini_api_key: \${{ secrets.${SECRET_NAME3} }}`,
+        `    gemini_cli_version: '${GEMINI_CLI_VERSION}'`,
+        "    prompt: |",
+        indentBlock(composePrompt3(input), 6)
+      ].join("\n")
+    ]
+  });
+}
+var geminiProvider = {
+  id: "gemini",
+  workflowFileName: ".github/workflows/gemini-code-review.yml",
+  requiredSecretName: SECRET_NAME3,
+  buildWorkflowYaml: buildWorkflowYaml3
+};
+
+// ../template-engine/dist/review/gpt/gpt-provider.js
+var SECRET_NAME4 = "OPENAI_API_KEY";
+function renderWorkflowInstructions4(locale) {
+  const lines = locale === "en" ? [
+    "Review ONLY the changes introduced by this pull request. The base and head commits are already fetched under fixed ref names: run `git diff origin/pr-base...origin/pr-head` (and `git log origin/pr-base..origin/pr-head` for commit context) \u2014 this sandboxed step has no network access, so do not attempt to run `gh` or reach the GitHub API.",
+    "Write your entire response as a single message: report specific findings, then close with one overall summary.",
+    `Always include the literal marker ${ROUND_MARKER} in your message.`,
+    "If there are no findings that require action, write exactly one message saying so (and still include the marker).",
+    "Do not modify any code, and never approve or merge the pull request.",
+    "Write summaries and explanations in English; keep file names, function names, and identifiers verbatim."
+  ] : [
+    "\uC774 pull request\uAC00 \uB3C4\uC785\uD55C \uBCC0\uACBD \uC0AC\uD56D\uB9CC \uB9AC\uBDF0\uD558\uC138\uC694. base/head \uCEE4\uBC0B\uC740 \uACE0\uC815 ref \uC774\uB984\uC73C\uB85C \uC774\uBBF8 fetch\uB418\uC5B4 \uC788\uC2B5\uB2C8\uB2E4: `git diff origin/pr-base...origin/pr-head`\uB85C \uBE44\uAD50\uD558\uACE0, \uCEE4\uBC0B \uB9E5\uB77D\uC740 `git log origin/pr-base..origin/pr-head`\uB85C \uD655\uC778\uD558\uC138\uC694(\uC774 \uC0CC\uB4DC\uBC15\uC2A4 \uC2A4\uD15D\uC740 \uB124\uD2B8\uC6CC\uD06C\uAC00 \uC5C6\uC73C\uBBC0\uB85C `gh`\uB098 GitHub API\uB97C \uD638\uCD9C\uD558\uC9C0 \uB9C8\uC138\uC694).",
+    "\uC804\uCCB4 \uC751\uB2F5\uC744 \uD558\uB098\uC758 \uBA54\uC2DC\uC9C0\uB85C \uC791\uC131\uD558\uC138\uC694: \uAD6C\uCCB4\uC801 \uC9C0\uC801\uC744 \uC801\uC740 \uB4A4 \uB9C8\uC9C0\uB9C9\uC5D0 \uC804\uCCB4 \uC694\uC57D\uC744 \uD55C \uBC88 \uB354 \uB0A8\uAE30\uC138\uC694.",
+    `\uBA54\uC2DC\uC9C0\uC5D0\uB294 \uBC18\uB4DC\uC2DC \uB9AC\uD130\uB7F4 \uB9C8\uCEE4 ${ROUND_MARKER}\uB97C \uD3EC\uD568\uD558\uC138\uC694.`,
+    '\uC870\uCE58\uAC00 \uD544\uC694\uD55C \uBB38\uC81C\uAC00 \uC5C6\uC73C\uBA74 "\uC870\uCE58\uAC00 \uD544\uC694\uD55C \uBB38\uC81C\uB97C \uCC3E\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4."\uB77C\uB294 \uBA54\uC2DC\uC9C0\uB97C \uC815\uD655\uD788 \uD55C \uAC1C \uC791\uC131\uD558\uC138\uC694(\uC774\uB54C\uB3C4 \uB9C8\uCEE4\uB294 \uD3EC\uD568).',
+    "\uCF54\uB4DC\uB97C \uC218\uC815\uD558\uC9C0 \uB9C8\uC138\uC694(Do not modify any code). PR\uC744 \uC2B9\uC778\uD558\uAC70\uB098 \uBCD1\uD569\uD558\uC9C0 \uB9C8\uC138\uC694(never approve or merge).",
+    "\uC694\uC57D\uACFC \uC124\uBA85\uC740 \uD55C\uAD6D\uC5B4\uB85C \uC4F0\uB418, \uD30C\uC77C\uBA85\xB7\uD568\uC218\uBA85\xB7\uC2DD\uBCC4\uC790\uB294 \uC6D0\uBB38 \uADF8\uB300\uB85C \uC720\uC9C0\uD558\uC138\uC694."
+  ];
+  return lines.join("\n");
+}
+function composePrompt4(input) {
+  const mode = REVIEW_MODES[input.mode];
+  const sections = [renderWorkflowInstructions4(input.locale), buildCorrectnessSecurityPrompt(input.locale, mode.promptStyle)];
+  if (mode.includesOverEngineering) {
+    sections.push(buildOverEngineeringPrompt(input.locale));
+  }
+  sections.push(renderFindingsBlockInstruction(input.locale));
+  return sections.join("\n\n---\n\n");
+}
+function buildWorkflowYaml4(input) {
+  return renderReviewWorkflow(input, {
+    name: "GPT Code Review",
+    secretName: SECRET_NAME4,
+    // An API key: codex-action needs no OIDC token.
+    idToken: false,
+    reviewSteps: [
+      renderCheckoutStep(REVIEW_GATE_CONDITION, ["ref: refs/pull/${{ github.event.pull_request.number }}/merge"]),
+      [
+        "- name: Fetch base and head refs for the PR",
+        `  if: ${REVIEW_GATE_CONDITION}`,
+        "  env:",
+        "    PR_BASE_REF: ${{ github.event.pull_request.base.ref }}",
+        "    PR_NUMBER: ${{ github.event.pull_request.number }}",
+        "  run: |",
+        "    # Explicit destinations: the sandboxed review step has no network, so both sides",
+        "    # of the diff must survive as stable local refs (FETCH_HEAD alone is ambiguous).",
+        "    git fetch --no-tags origin \\",
+        '      "+refs/heads/$PR_BASE_REF:refs/remotes/origin/pr-base" \\',
+        '      "+refs/pull/$PR_NUMBER/head:refs/remotes/origin/pr-head"'
+      ].join("\n"),
+      [
+        "- name: Run Codex review",
+        "  id: codex-review",
+        `  if: ${REVIEW_GATE_CONDITION}`,
+        `  uses: ${pinnedUses("openai/codex-action")}`,
+        "  with:",
+        `    openai-api-key: \${{ secrets.${SECRET_NAME4} }}`,
+        '    permission-profile: ":read-only"',
+        "    prompt: |",
+        indentBlock(composePrompt4(input), 6)
+      ].join("\n"),
+      [
+        "- name: Post review comment",
+        `  if: ${REVIEW_GATE_CONDITION}`,
+        "  env:",
+        "    GH_TOKEN: ${{ github.token }}",
+        "    PR_NUMBER: ${{ github.event.pull_request.number }}",
+        "    REVIEW_BODY: ${{ steps.codex-review.outputs.final-message }}",
+        "  run: |",
+        '    printf %s "$REVIEW_BODY" | gh pr comment "$PR_NUMBER" --body-file -'
+      ].join("\n")
+    ]
+  });
+}
+var gptProvider = {
+  id: "gpt",
+  workflowFileName: ".github/workflows/gpt-code-review.yml",
+  requiredSecretName: SECRET_NAME4,
+  buildWorkflowYaml: buildWorkflowYaml4
+};
+
+// ../template-engine/dist/review/provider.js
+var REVIEW_PROVIDERS = {
+  claude: claudeProvider,
+  gemini: geminiProvider,
+  gpt: gptProvider,
+  cursor: cursorProvider
+};
+
+// ../template-engine/dist/review/compose-review-setup.js
+function composeReviewSetup(input) {
+  if (!input.enabled)
+    return null;
+  const provider = REVIEW_PROVIDERS[input.provider];
+  return {
+    workflowFilePath: provider.workflowFileName,
+    workflowYaml: provider.buildWorkflowYaml(input),
+    requiredSecretName: provider.requiredSecretName,
+    configSnippet: buildReviewConfigSnippet(input)
+  };
+}
+
+// ../template-engine/dist/review/conflict.js
+function judgeReviewFileConflict(existing, generated) {
+  if (existing === null)
+    return { kind: "create" };
+  if (existing === generated)
+    return { kind: "unchanged" };
+  return { kind: "merge-proposal", existing, generated };
+}
+
+export {
+  DEFAULT_MAX_ROUNDS,
+  REVIEW_MODES,
+  VERDICT_MARKER,
+  ROUND_MARKER,
+  runVerdictGate,
+  buildReviewConfigSnippet,
+  REVIEW_PROVIDERS,
+  composeReviewSetup,
+  judgeReviewFileConflict
+};