cursor-agent --print --output-format json "
# Code Review - Security & Quality Audit

## Implementation Summary
Read: implementation summary from `phase_outputs` (type=implementation_result)

## Files to Review
Review files changed by the implementation (focus on changed files first).

## Your Review Focus

### Security Audit (CRITICAL)
1. **Injection Vulnerabilities**
   - SQL injection
   - Command injection
   - XSS (Cross-site scripting)
   - LDAP injection

2. **Authentication/Authorization**
   - Proper authentication checks
   - Authorization on all endpoints
   - Session management
   - Password handling

3. **Data Protection**
   - Sensitive data encryption
   - PII handling
   - Secure transmission (HTTPS)
   - Proper logging (no secrets)

4. **Input Validation**
   - All user input validated
   - Proper sanitization
   - Type checking
   - Boundary validation

### Code Quality
1. Error handling completeness
2. Resource cleanup (connections, files)
3. Race conditions
4. Null/undefined handling

### Test Coverage
1. Security scenarios tested
2. Edge cases covered
3. Error paths tested

## Output Format
{
  \"agent\": \"cursor\",
  \"phase\": \"verification\",
  \"approved\": true|false,
  \"score\": 1-10,
  \"assessment\": \"Summary\",
  \"security_audit\": {
    \"vulnerabilities_found\": [
      {
        \"severity\": \"critical|high|medium|low\",
        \"type\": \"OWASP category\",
        \"file\": \"path/to/file\",
        \"line\": 42,
        \"description\": \"What's wrong\",
        \"fix\": \"How to fix\"
      }
    ],
    \"passed_checks\": [\"List of passed security checks\"]
  },
  \"quality_issues\": [
    {
      \"file\": \"path\",
      \"line\": 0,
      \"issue\": \"description\",
      \"severity\": \"high|medium|low\"
    }
  ],
  \"blocking_issues\": [\"MUST fix before approval\"],
  \"recommendations\": [\"Nice to have improvements\"]
}

IMPORTANT: Any security vulnerability of severity 'high' or 'critical' is automatically blocking.
" > cursor-review.json

gemini --yolo "
# Code Review - Architecture & Design Audit

## Implementation Summary
Read: implementation summary from `phase_outputs` (type=implementation_result)

## Original Plan
Read: plan from `phase_outputs` (type=plan)

## Your Review Focus

### Architecture Compliance
1. Does implementation match the plan?
2. Are design patterns correctly applied?
3. Is the architecture consistent?

### Design Quality
1. **Separation of Concerns**
   - Single responsibility principle
   - Proper layering
   - Clear boundaries

2. **Modularity**
   - Component independence
   - Clear interfaces
   - Minimal coupling

3. **Extensibility**
   - Easy to extend
   - Open/closed principle
   - No hardcoded assumptions

4. **Maintainability**
   - Code clarity
   - Proper naming
   - Documentation
   - Reasonable complexity

### Performance Considerations
1. Obvious bottlenecks
2. Resource efficiency
3. Scalability concerns

## Output Format
\`\`\`json
{
  \"agent\": \"gemini\",
  \"phase\": \"verification\",
  \"approved\": true|false,
  \"score\": 1-10,
  \"assessment\": \"Summary\",
  \"architecture_compliance\": {
    \"matches_plan\": true|false,
    \"deviations\": [\"List any deviations from plan\"],
    \"justification\": \"If deviations are acceptable, why\"
  },
  \"design_review\": {
    \"patterns_used\": [\"Patterns identified\"],
    \"patterns_misused\": [\"Incorrectly applied patterns\"],
    \"modularity_score\": 1-10,
    \"maintainability_score\": 1-10
  },
  \"issues\": [
    {
      \"file\": \"path\",
      \"concern\": \"description\",
      \"severity\": \"high|medium|low\",
      \"category\": \"architecture|design|performance\"
    }
  ],
  \"blocking_issues\": [\"Critical design flaws\"],
  \"recommendations\": [\"Suggested improvements\"]
}
\`\`\`

Focus on significant issues. Don't block for style preferences.
" > gemini-review.json

{
  "verification_result": "approved|needs_fixes|rejected",
  "cursor": {
    "approved": true,
    "score": 8.0,
    "security_vulnerabilities": 0,
    "blocking_issues": []
  },
  "gemini": {
    "approved": true,
    "score": 7.5,
    "architecture_compliant": true,
    "blocking_issues": []
  },
  "combined_score": 7.75,
  "all_issues": [...],
  "proceed_to_completion": true
}

{
  "current_phase": 5,
  "phase_status": {
    "verification": "completed",
    "completion": "in_progress"
  },
  "verification_feedback": {
    "cursor": { ... },
    "gemini": { ... }
  }
}

{
  "current_phase": 3,
  "phase_status": {
    "verification": "needs_fixes"
  },
  "verification_feedback": { ... },
  "fix_tasks": [
    {
      "id": "FIX-1",
      "type": "security",
      "description": "Fix SQL injection in user.py",
      "from_agent": "cursor"
    }
  ]
}

{
  "id": "FIX-{N}",
  "title": "Fix: {issue description}",
  "from_review": "cursor|gemini",
  "severity": "high",
  "files_to_modify": ["affected/file.py"],
  "acceptance_criteria": [
    "Issue resolved",
    "No regression in tests",
    "Re-verification passes"
  ]
}