Expand block-start to all list markers, mirror include-files confinement

P1: _BLOCK_START now accepts *, +, and numbered list prefixes (1., 2.)
in addition to - bullets. Prevents parse_uncertain=False on common
Markdown list formats like "1. Severity: P1" or "* **Severity:** P1".

P2: Step 3c --include-files scan now mirrors the script's absolute-path
rejection and realpath repo-root containment check before scanning.

P2: Add 3 regression tests: numbered-list severity parsing, starred-bold
severity parsing, numbered-bold uncertainty detection.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: igerber

.claude/commands/ai-review-local.md

@@ -172,12 +172,19 @@ if [ "$context_level" = "deep" ]; then
     upload_scan_files=$(find diff_diff -name "*.py" -not -path "*/__pycache__/*" 2>/dev/null | sort -u)
 fi
 
-# Category 3: --include-files (resolve paths same as script does)
+# Category 3: --include-files (mirror script's path confinement)
 if [ -n "$include_files" ]; then
+    repo_root_real=$(pwd -P)
     for f in $(echo "$include_files" | tr ',' ' '); do
-        if [ -f "diff_diff/$f" ]; then upload_scan_files="$upload_scan_files diff_diff/$f"
-        elif [ -f "$f" ]; then upload_scan_files="$upload_scan_files $f"
+        # Reject absolute paths (mirrors script's os.path.isabs check)
+        case "$f" in /*) continue ;; esac
+        if [ -f "diff_diff/$f" ]; then candidate="diff_diff/$f"
+        elif [ -f "$f" ]; then candidate="$f"
+        else continue
         fi
+        # Verify within repo root (mirrors script's realpath containment)
+        real_candidate=$(cd "$(dirname "$candidate")" && pwd -P)/$(basename "$candidate")
+        case "$real_candidate" in "$repo_root_real"/*) upload_scan_files="$upload_scan_files $candidate" ;; esac
     done
 fi
 

.claude/scripts/openai_review.py

@@ -489,11 +489,14 @@ def write_review_state(
         json.dump(state, f, indent=2)
 
 
+# Match optional Markdown list prefix: -, *, +, or numbered (1., 2., etc.)
+_LP = r"^(?:[-*+]|\d+\.?)?\s*"
+
 _BLOCK_START = re.compile(
-    r"^-?\s*\*\*(P[0-3])\*\*"              # - **P1** summary
-    r"|^-?\s*\*\*Severity:\*\*\s*(P[0-3])"  # - **Severity:** P1
-    r"|^-?\s*\*\*Severity:\s*(P[0-3])\*\*"  # - **Severity: P1**
-    r"|^-?\s*Severity:\s*`?(P[0-3])`?"      # - Severity: P1
+    _LP + r"\*\*(P[0-3])\*\*"              # - **P1**, 1. **P1**, * **P1**
+    r"|" + _LP + r"\*\*Severity:\*\*\s*(P[0-3])"  # - **Severity:** P1
+    r"|" + _LP + r"\*\*Severity:\s*(P[0-3])\*\*"  # - **Severity: P1**
+    r"|" + _LP + r"Severity:\s*`?(P[0-3])`?"      # 1. Severity: P1
 )
 
 _IMPACT_PATTERN = re.compile(r"(?:\*\*)?Impact:(?:\*\*)?\s*(.+)")

tests/test_openai_review.py

@@ -881,8 +881,28 @@ def test_parses_bold_severity_format(self, review_mod):
         review_text = "**P1** Missing NaN guard in `foo.py:L10`\n"
         findings, _ = review_mod.parse_review_findings(review_text, 1)
         assert len(findings) == 1
+
+    def test_parses_numbered_list_severity(self, review_mod):
+        """1. Severity: P1 format should be parsed."""
+        review_text = "1. Severity: P1 — Missing NaN guard in `foo.py:L10`\n"
+        findings, _ = review_mod.parse_review_findings(review_text, 1)
+        assert len(findings) == 1
         assert findings[0]["severity"] == "P1"
 
+    def test_parses_starred_bold_severity(self, review_mod):
+        """* **Severity:** P1 format should be parsed."""
+        review_text = "* **Severity:** P1 — Missing NaN guard in `bar.py:L5`\n"
+        findings, _ = review_mod.parse_review_findings(review_text, 1)
+        assert len(findings) == 1
+        assert findings[0]["severity"] == "P1"
+
+    def test_numbered_bold_severity_triggers_uncertainty(self, review_mod):
+        """1. **Severity:** P1 with no parseable summary → uncertain=True."""
+        review_text = "1. **Severity:** P1\n"
+        findings, uncertain = review_mod.parse_review_findings(review_text, 1)
+        assert findings == []
+        assert uncertain
+
     def test_parses_bold_label_format(self, review_mod):
         """**Severity:** P1 format should be parsed."""
         review_text = "- **Severity:** P1 — Missing NaN guard in `foo.py:L10`\n"