Configure Review

Configure Review

Always answer the user in Russian. Update only the requested policy values; Never clobber foreign keys such as categories. This skill is standalone: no reviewer MCP, database, or board connection is required for the baseline.

Scope

Manage summary_cluster_depth, summary_cluster_depth_overrides, summary_topk_threshold, summary_paths.ignore, paths.ignore, context_limits, and the optional task_board block, including its generic sync_filter. An empty task_board: disables the board for this repository. Never read, request, display, or write credential values in either policy target.

Tracked branches are separate from review policy. Manage repository.primary_branch and repository.index_branches only in the home per-repo target. The committed .review.yml cannot own repository, because branch selection must be available before a committed ref can be read.

Untracked .venv, node_modules, __pycache__, dist, and build are gitignored and never enter the index. Do not use a filesystem walk to find them.

Safe YAML preflight

Inspect each selected policy or home YAML file with a local boolean-only process. Run this preflight before any tool call that can return file contents. Return only safe/blocked, never matching lines, values, or exception text. Do not use Read or Grep to perform this preflight. The process must reject non-regular or symlinked files, malformed or non-mapping YAML, and credential-like keys at any depth. Also reject duplicate mapping keys, including duplicate repository keys and duplicate branch fields. Reject anchors, aliases, and merge keys. Reject these cases before reading or mutating the file in model context. Only after a safe result may a content-returning tool read the file for a line-oriented edit.

For a home target, derive the canonical home config root lexically even when it does not exist. Check every existing parent path component through the destination without following symlinks; reject symlinks and non-directories. Missing destinations, including a missing home config root, are allowed only when the nearest existing parent is a real directory and the normalized destination remains inside the canonical home config root. After creating any missing directories, run the path preflight again. Also re-check immediately before writing so a changed path never inherits an earlier safe result.

Pipeline

1. Resolve the canonical lowercase repository id and the target branch. Present these targets in this order and ask the user to select one:
   • Recommended/default: home:repos/<owner>/<name>.yml, stored at $XDG_CONFIG_HOME/rag-reviewer/repos/<owner>/<name>.yml (or ~/.config/rag-reviewer/... when XDG_CONFIG_HOME is unset). It needs no commit and is not visible to the team.
   • Team-visible: committed .review.yml at the selected target ref. It is committed and visible to the team; read it from that ref, never from an uncommitted worktree file. For a nested id such as group/service, use home:repos/group/service.yml. A home policy is owned by the OS account running reviewer: on a shared service account it can affect that account's workloads, so use committed policy for team-owned settings.
2. After the target is selected, verify the repository with git rev-parse --git-dir, run the Safe YAML preflight, and only then read the selected file, preserving unrelated keys and comments. Do not inspect or copy credentials.
3. Scan only tracked Python files:

   git -C <path> ls-tree -r --name-only <branch> | grep '\.py$'

   Count directory prefixes at depths 1–3. This is not a filesystem walk.
4. Measure churn with git log --since="6 months ago" --name-only --pretty=format: -- '*.py'. If history is too short or unavailable, say so and recommend from structure alone.
5. Propose depth and ignore changes. Ask the user about every candidate for paths.ignore and never write it silently. Assemble a draft that preserves the selected file's unrelated keys/comments, then request final confirmation before writing it. Follow the exact rebuild map below; suggest but do NOT run a follow-up skill. When branch and policy changes share a run, assemble both drafts first, show both paths and diffs, and request one final confirmation before either write.

Repository branches

Handle branches before policy analysis whenever the user asks to inspect or change tracked branches.

1. Resolve the local repository without network calls:
   • git rev-parse --show-toplevel gives the git root;
   • git remote get-url origin gives the canonical SSH/HTTPS remote candidate;
   • normalize it to lowercase <owner/name> with the same SSH/HTTPS forms accepted by reviewer;
   • if origin is absent or unrecognized, ask for <owner/name> explicitly. Network git commands are forbidden.
2. Run reviewer config show --repo <owner/name> --json and show the effective primary branch, ordered index branches, and source. A policy/VCS diagnostic error does not erase the returned branch section; a malformed home config is a blocking error and must not fall back silently.
3. Ask for repository.primary_branch, then ask for the complete ordered unique repository.index_branches. The primary must be present in the index list. Reject empty names, duplicates, and a primary outside the list.
4. The destination is always $XDG_CONFIG_HOME/rag-reviewer/repos/<owner>/<name>.yml (or the equivalent ~/.config/rag-reviewer/... path when XDG is unset). Never write repository to committed .review.yml, even when committed policy is selected for other keys. If policy and branches change together, treat them as two targets in one preview.
5. Run the Safe YAML preflight on the destination before reading it. Stop on every blocked result. Build a line-oriented patch: if repository is absent, append the canonical block; if it exists, replace only primary_branch and index_branches. Preserve all top-level keys and unknown repository subkeys. Preserve comments, line endings, and surrounding YAML style. Never serialize the complete file with yaml.safe_dump.
6. Show the destination, source, old and new branch values, and the exact patch. Request one final confirmation before any branch or policy write. A rejection leaves every target unchanged.
7. After writing, run reviewer config show --repo <owner/name> --json again and require the exact primary/index/source expected from the home per-repo layer. Report a mismatch as an error.

If newly added index branches are not indexed, suggest rag-reviewer:sync-codebase once per new branch, but do not run it. A primary change to an already indexed branch needs no rebuild. Removing a branch stops reviewer from selecting it but does not delete its old base index automatically. Branch changes never trigger subsystem-summary work.

Rebuild guidance

• Changed paths.ignore → suggest rag-reviewer:sync-codebase.
• Changed summary_cluster_depth → suggest rag-reviewer:summarize-subsystems.
• Changed summary_cluster_depth_overrides → suggest rag-reviewer:summarize-subsystems.
• Changed summary_paths.ignore → this key is part of the summary layout_token; suggest rag-reviewer:summarize-subsystems and warn it forces a full rebuild of every subsystem summary (same layout_token invalidation as summary_cluster_depth/ summary_cluster_depth_overrides).
• Changed summary_topk_threshold → no rebuild needed.
• Changed context_limits → no rebuild needed.
• Changed task_board.sync_filter → suggest rag-reviewer:sync-tasks for a full unlimited run (limit=null); do NOT run it automatically.

Generic board metadata

Ask whether to keep, disable, or configure task_board. A configured block uses only this shape:

task_board:
  type: <registered board_type>
  project: <optional project prefix>
  key_pattern: '<optional task-key pattern>'
  create_target: <selected target id or null>
  done_target: <selected target id or null>
  options: {}
  sync_filter:
    max_age_days: <integer >= 1, or omit for no age limit>
    include_archived: <boolean, default true>

project scopes board sync and task retrieval. Explain that an empty task_board.project can mix all projects, then ask for the intended project prefix.

sync_filter is a generic sibling of provider options. The sync_filter block is optional. Never put sync_filter under options. Ask two separate questions:

• max_age_days: choose an integer greater than or equal to 1, or no age limit.
• include_archived: choose whether archived tasks are included; the default is true.

Age uses task last-modified time and an inclusive cutoff: a task modified exactly at the cutoff is eligible. Archive is distinct from terminal/done; include_archived: false excludes only tasks known to be archived. Age filtering runs first. Only while include_archived: false, unknown archive metadata does not itself exclude the row; an archive warning is emitted only then and only when age filtering did not already exclude the row.