review_changes
Capture a complete, immutable Git changeset and launch independent read-only AI provider reviews across committed, staged, unstaged, and untracked files.
Instructions
Capture one complete, immutable Git evidence artifact, fence it as untrusted data, and start independent read-only provider reviews. Includes committed, staged, unstaged, and untracked changes without truncation.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| base | No | Explicit Git base ref or commit. Overrides automatic base selection. | |
| focus | No | Additional reviewer focus outside the untrusted evidence boundary. | |
| paths | No | Optional literal repository-relative path filters. | |
| scope | No | Review scope. auto reviews a diverged branch from its merge-base with working-tree evidence included, otherwise reviews dirty uncommitted changes, and falls back to the last commit when the tree is clean. | auto |
| models | No | Independent providers to start. Defaults to Claude and Codex. | |
| stance | No | standard | |
| workspace | No | Authorized workspace alias, required for remote HTTP/OAuth callers. | |
| judgeModel | No | Optional judge provider to reconcile terminal reviews in a second step. An HTTP/API judge requires allowApiUpload=true, which is bound to the durable validationId. | |
| workingDir | No | Absolute local path to the checkout. Stdio/local callers should use this; remote HTTP/OAuth callers must use workspace instead. | |
| allowApiUpload | No | Explicitly allow repository review evidence to be sent to configured HTTP/API reviewers or a planned API judge. API judge consent is bound to the durable validationId; remote workspace reviews do not permit API upload. | |
| maxPromptBytes | No | Fail-closed byte ceiling for the fenced provider prompt. | |
| maxArtifactBytes | No | Fail-closed byte ceiling for the complete serialized Git artifact. | |
| trustCursorWorkspace | No | Let cursor trust this repository even though it is not a workspace registered for cursor. Cursor refuses to review an untrusted directory, so without this a cursor seat on an unregistered path is skipped. Trust also lets the reviewed repository's own rules and AGENTS.md instruct the reviewer, which the review prompt otherwise forbids, so enable it only for a repository whose contents you trust. |