{"agent":"claude","input":"Review the open pull request on this repository. For each CDK app the change touches, run the project's own build: npm ci or yarn install from the lockfile, npm run build, npm test if it exists, then cdk synth with scripts/fake.context.json when there is no cdk.context.json. Synthesize the base commit too and compare the templates in cdk.out: list every resource that would be replaced or deleted, every IAM statement that widens access, and every RemovalPolicy.DESTROY or autoDeleteObjects on stateful resources. Post one review that cites file and line for every finding, with the command whose output shows it. Do not push commits.","resources":[{"url":"https://github.com/your-org/your-cdk-app/pull/123"}]}