From 15a0a72b951e2e14ed5e3aafa89526b011b7dbdd Mon Sep 17 00:00:00 2001
From: yakimoto <66892052+yakimoto@users.noreply.github.com>
Date: Fri, 14 Aug 2026 12:30:12 -0400
Subject: [PATCH 1/2] ci(qodo): adopt reusable OSS pr-agent review lane

---
 .github/workflows/pr-agent.yml | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)
 create mode 100644 .github/workflows/pr-agent.yml

diff --git a/.github/workflows/pr-agent.yml b/.github/workflows/pr-agent.yml
new file mode 100644
index 0000000..59bc9aa
--- /dev/null
+++ b/.github/workflows/pr-agent.yml
@@ -0,0 +1,24 @@
+# pr-agent (OSS) caller — adopts the wave-foundation reusable lane.
+# Engine: OSS Qodo Merge on our OPENAI_KEY (trial-independent). SSOT:
+# wave-foundation/.github/workflows/reusable-pr-agent.yml
+name: pr-agent (OSS)
+on:
+  pull_request:
+    types: [opened, reopened, ready_for_review, synchronize]
+  issue_comment:
+    types: [created]
+
+permissions:
+  issues: write
+  pull-requests: write
+  contents: read
+
+concurrency:
+  group: pr-agent-${{ github.event.pull_request.number || github.event.issue.number || github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  pr_agent:
+    uses: wave-av/wave-foundation/.github/workflows/reusable-pr-agent.yml@main
+    secrets:
+      OPENAI_KEY: ${{ secrets.OPENAI_KEY }}

From 40229a87ce2a0b0189541cdb30164942d945e968 Mon Sep 17 00:00:00 2001
From: yakimoto <66892052+yakimoto@users.noreply.github.com>
Date: Fri, 14 Aug 2026 12:57:55 -0400
Subject: [PATCH 2/2] chore(qodo): pin reusable workflow to reviewed SHA

---
 .github/workflows/pr-agent.yml | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/pr-agent.yml b/.github/workflows/pr-agent.yml
index 59bc9aa..5d4ce23 100644
--- a/.github/workflows/pr-agent.yml
+++ b/.github/workflows/pr-agent.yml
@@ -1,6 +1,5 @@
 # pr-agent (OSS) caller — adopts the wave-foundation reusable lane.
-# Engine: OSS Qodo Merge on our OPENAI_KEY (trial-independent). SSOT:
-# wave-foundation/.github/workflows/reusable-pr-agent.yml
+# Engine: OSS Qodo Merge on our OPENAI_KEY (trial-independent). SSOT pinned by SHA.
 name: pr-agent (OSS)
 on:
   pull_request:
@@ -19,6 +18,6 @@ concurrency:
 
 jobs:
   pr_agent:
-    uses: wave-av/wave-foundation/.github/workflows/reusable-pr-agent.yml@main
+    uses: wave-av/wave-foundation/.github/workflows/reusable-pr-agent.yml@150ffae24f63e207ab81430fa64cb2b1e5c01546 # post-#1191
     secrets:
       OPENAI_KEY: ${{ secrets.OPENAI_KEY }}