code-reviewlisted

## Section: Code Review <purpose> Review source files changed during a phase for bugs, security issues, and code quality problems. Computes file scope (--files override > SUMMARY.md > git diff fallback), checks config gate, spawns maxvision-code-reviewer agent, commits REVIEW.md, and presents results to user. </purpose> <required_reading> Read all files referenced by the invoking prompt's execution_context before starting. </required_reading> <available_agent_types> - maxvision-code-reviewer: Reviews source files for bugs and quality issues </available_agent_types> <process> <step name="initialize"> Parse arguments and load project state: ```bash set -euo pipefail PHASE_ARG="${1}" INIT=$(maxvision-sdk query init.phase-op "${PHASE_ARG}") if [[ "$INIT" == @file:* ]]; then INIT=$(cat "${INIT#@file:}"); fi ``` Parse from init JSON: `phase_found`, `phase_dir`, `phase_number`, `phase_name`, `padded_phase`, `commit_docs`. **Input sanitization (defense-in-depth):** ```bash # Validate PADDED_PHASE contains only digits and optional dot (e.g., "02", "03.1") set -euo pipefail if ! [[ "$PADDED_PHASE" =~ ^[0-9]+(\.[0-9]+)?$ ]]; then echo "Error: Invalid phase number format: '${PADDED_PHASE}'. Expected digits (e.g., 02, 03.1)." # Exit workflow fi ``` **Phase validation (before config gate):** If `phase_found` is false, report error and exit: ``` Error: Phase ${PHASE_ARG} not found. Run /maxvision-progress to see available phases. ``` This runs BEFORE config gate check so user