review-stack

Review Stack

Check that each selected tool is configured and used the way its current official documentation recommends, then give the owner a verified, cited, prioritized plan with the smallest effective fix per item. A deviation from a checklist is not a finding until it has a repo location, a retrieved source, and a concrete consequence.

One review or twenty, the process is the same: one hunter per dep, in parallel, then one verification pass and one reply. It writes no files.

Registry

Each deps/<id>.md is one dep. Its frontmatter is the registry - id, summary, families, packages (catalog names), paths (globs whose change makes the dep "changed"), optional version_cmd - and its body is the companion the hunter follows:

• ## Ground truth - Collector topics, Web fallback domains, Version currency, Local schema / Local skill
• ## Scope - artifacts to read
• ## Probe - the reading pass and the only commands the hunter may run
• ## Axes - what to check; the last axis is the agent loop
• ## Critical when - severity anchors for this dep
• ## Overlaps - which concerns another dep owns
• ## Accepted - deliberate choices not to re-report, usually a pointer to the rule that records the reason

Adding a dep = adding one deps/<id>.md with that frontmatter and those sections. Nothing else lists deps.

Preflight

Run once, in the main thread, before any hunter:

node .agents/skills/review-stack/scripts/preflight.mjs <selector>

The first word of the arguments is the selector; the rest is the focus, which narrows every selected review (/review-stack tanstack caching only). The script reads only and prints to stdout:

• no selector → the registry table and families; print it and stop.
• unknown selector → the same table after an error; print it and stop.
• otherwise → the selected deps, and per dep its catalog / installed / latest versions (pnpm ls, pnpm outdated) plus version_cmd output. With changed[:<ref>], only the deps whose paths or catalog entries changed since <ref> (default: latest v* tag, else the merge-base with main), with the matching files.
• With bumped[:<ref>] (same default <ref>, working tree included), only the deps whose catalog entries changed, each with <before> → <after>, plus pnpm for override and exclude cleanup. The version table gains a Before column, and an Uncovered catalog changes line names bumps that no deps/<id>.md lists.