reviewlisted

# kagura-engineer: review Thin wrapper around the `kagura-engineer review` CLI verb. It runs the multi-angle reviewer over a target (working tree, branch, or PR number) and returns a structured verdict. It reimplements nothing — it discovers config, optionally gates on `doctor`, shells out, and surfaces the report. > ⚠️ **Two modes — know which you are in:** > - **Default (read-only)** — reviews the diff and reports. No repo mutation. > - **`--fix` (Harness)** — on a red verdict it invokes `claude -p` to edit blocking > findings and **commit** them, then re-reviews (bounded by `config.review.max_loops`). > This mutates the repo and spends model budget — confirm with the user first. **Announce:** "Using the kagura-engineer:review skill" (add "— with --fix, this is a Harness that commits" when fixing). Usage: `kagura-engineer:review [target]` — target defaults to `HEAD`; may be a git ref, branch, or PR number. Add `--fix` to auto-fix blocking findings (Harness). ## Steps 1. **Validate the target.** The optional positional `TARGET` defaults to `HEAD`; it may be a git ref, branch name, or PR number. Validate before shell interpolation against a **first-char-anchored** allow-list — a positive integer `^[1-9][0-9]{0,8}$` for a PR number, or `^[A-Za-z0-9][A-Za-z0-9._/-]{0,199}$` for a ref/branch (leading `-` rejected so it cannot be parsed as an option) — and pass it after a `--` separator (step 4). Do not pass free-form text. 2. **Discover config.** `repo.