@in-the-loop-labs/pair-review 2.5.0 → 2.6.0

package/.pi/extensions/task/index.ts

@@ -205,10 +205,13 @@ async function runTask(
 	onUpdate: OnUpdate | undefined,
 	makeDetails: (results: TaskResult[]) => TaskDetails,
 ): Promise<TaskResult> {
-	// Build args: full tool access, JSON output, no session persistence
+	// Build args: full tool access, JSON output, no session persistence.
+	// Skills and extensions are left enabled so subtasks have access to the
+	// user's configured environment. --no-prompt-templates is kept because
+	// prompt templates can't be triggered in -p mode.
 	const args: string[] = [
 		"--mode", "json", "-p", "--no-session",
-		"--no-extensions", "--no-skills", "--no-prompt-templates",
+		"--no-prompt-templates",
 		"-e", EXTENSION_DIR,
 	];
 	if (model) {

package/config.managed.json

@@ -0,0 +1 @@
+{}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@in-the-loop-labs/pair-review",
-  "version": "2.5.0",
+  "version": "2.6.0",
   "description": "Your AI-powered code review partner - Close the feedback loop with AI coding agents",
   "main": "src/server.js",
   "bin": {
@@ -14,6 +14,7 @@
     "public/",
     "plugin/",
     "plugin-code-critic/",
+    "config.managed.json",
     "README.md",
     "LICENSE"
   ],

package/plugin/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "pair-review",
-  "version": "2.5.0",
+  "version": "2.6.0",
   "description": "pair-review app integration — Open PRs and local changes in the pair-review web UI, run server-side AI analysis, and address review feedback. Requires the pair-review MCP server.",
   "author": {
     "name": "in-the-loop-labs",

package/plugin-code-critic/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "code-critic",
-  "version": "2.5.0",
+  "version": "2.6.0",
   "description": "AI-powered code review analysis — Run three-level AI analysis and implement-review-fix loops directly in your coding agent. Works standalone, no server required.",
   "author": {
     "name": "in-the-loop-labs",

package/src/ai/claude-provider.js

@@ -174,7 +174,14 @@ class ClaudeProvider extends AIProvider {
       ].join(',');
       permissionArgs = ['--allowedTools', allowedTools];
     }
-    const baseArgs = ['-p', '--verbose', ...cliModelArgs, '--output-format', 'stream-json', ...permissionArgs];
+    // Suppress user hooks in analysis subprocesses to avoid side-effects
+    // (notifications, confirmations, etc.) firing on every tool call during review.
+    // Uses --settings '{"disableAllHooks":true}' since Claude has no --no-hooks flag.
+    // Skills and extensions are left enabled so the subprocess has access to the
+    // user's configured environment. To disable skills, add --disable-slash-commands
+    // to extra_args in provider/model config.
+    const hooksArgs = ['--settings', '{"disableAllHooks":true}'];
+    const baseArgs = ['-p', '--verbose', ...cliModelArgs, '--output-format', 'stream-json', ...hooksArgs, ...permissionArgs];
     if (maxBudget) {
       const budgetNum = parseFloat(maxBudget);
       if (isNaN(budgetNum) || budgetNum <= 0) {

package/src/ai/codex-provider.js

@@ -23,7 +23,8 @@ const BIN_DIR = path.join(__dirname, '..', '..', 'bin');
  * Based on OpenAI Codex Models guide (developers.openai.com/codex/models)
  * - gpt-5.1-codex-mini: Smaller, cost-effective variant for quick scans
  * - gpt-5.2-codex: Advanced coding model for everyday reviews, good reasoning/cost balance
- * - gpt-5.3-codex: Most capable agentic coding model with frontier performance and reasoning
+ * - gpt-5.3-codex: Capable agentic coding model with frontier performance and reasoning
+ * - gpt-5.4: Latest generation with enhanced reasoning depth
  */
 const CODEX_MODELS = [
   {
@@ -50,7 +51,16 @@ const CODEX_MODELS = [
     name: 'GPT-5.3 Codex',
     tier: 'thorough',
     tagline: 'Deep Review',
-    description: 'Most capable agentic coding model—combines frontier coding performance with stronger reasoning for deep cross-file analysis.',
+    description: 'Capable agentic coding model—combines frontier coding performance with strong reasoning for cross-file analysis.',
+    badge: 'Thorough',
+    badgeClass: 'badge-power'
+  },
+  {
+    id: 'gpt-5.4',
+    name: 'GPT-5.4',
+    tier: 'thorough',
+    tagline: 'Latest Gen',
+    description: 'Latest generation model with enhanced reasoning depth for complex architectural reviews.',
     badge: 'Most Thorough',
     badgeClass: 'badge-power'
   }

package/src/ai/cursor-agent-provider.js

@@ -143,6 +143,24 @@ const CURSOR_AGENT_MODELS = [
     description: 'Deep analysis with extended thinking—Cursor default for maximum review quality',
     badge: 'Most Thorough',
     badgeClass: 'badge-power'
+  },
+  {
+    id: 'gpt-5.4-high',
+    name: 'GPT-5.4 High',
+    tier: 'thorough',
+    tagline: 'Latest OpenAI',
+    description: 'Latest generation with high reasoning effort—strong for complex architectural reviews',
+    badge: 'Latest Gen',
+    badgeClass: 'badge-power'
+  },
+  {
+    id: 'gpt-5.4-medium',
+    name: 'GPT-5.4',
+    tier: 'thorough',
+    tagline: 'Latest Gen',
+    description: 'Latest generation at medium reasoning depth',
+    badge: 'Latest',
+    badgeClass: 'badge-power'
   }
 ];
 

package/src/ai/pi-provider.js

@@ -189,24 +189,23 @@ class PiProvider extends AIProvider {
     // --no-session: Each pi invocation is an ephemeral analysis — there's no need to
     //               persist session state between runs. Set PAIR_REVIEW_PI_SESSION=1
     //               to enable session saving for debugging (sessions saved to ~/.pi/sessions/).
-    // --no-skills: Skills are disabled by default to keep runs deterministic. A skill can
-    //              still be loaded via `--skill` in model-specific `extra_args` if needed.
-
     // Build args: base args + built-in extra_args + provider extra_args + model extra_args
     // In yolo mode, omit --tools entirely to allow all tools (including edit, write)
     // The task extension is loaded to give the model a subagent tool for delegating
     // work to isolated subprocesses, preserving the main context window.
-    // --no-extensions prevents auto-discovery of other extensions.
-    // --no-skills and --no-prompt-templates keep the subprocess focused.
+    // --no-prompt-templates: prompt templates can't be triggered in -p mode, so suppress
+    // them to avoid wasting context. Skills and extensions are left enabled so the
+    // subprocess has access to the user's configured environment. To disable them,
+    // add --no-skills or --no-extensions to extra_args in provider/model config.
     const sessionArgs = process.env.PAIR_REVIEW_PI_SESSION ? [] : ['--no-session'];
     let baseArgs;
     if (configOverrides.yolo) {
       baseArgs = ['-p', '--mode', 'json', ...cliModelArgs, ...sessionArgs,
-        '--no-extensions', '--no-skills', '--no-prompt-templates',
+        '--no-prompt-templates',
         '-e', TASK_EXTENSION_DIR];
     } else {
       baseArgs = ['-p', '--mode', 'json', ...cliModelArgs, '--tools', 'read,bash,grep,find,ls', ...sessionArgs,
-        '--no-extensions', '--no-skills', '--no-prompt-templates',
+        '--no-prompt-templates',
         '-e', TASK_EXTENSION_DIR];
     }
     const builtInArgs = builtIn?.extra_args || [];

package/src/chat/pi-bridge.js

@@ -273,12 +273,9 @@ class PiBridge extends EventEmitter {
     }
 
     // Load extensions via -e (e.g., task extension for subagent delegation).
-    // --no-extensions prevents auto-discovery; only explicitly listed ones load.
-    if (this.extensions.length > 0) {
-      args.push('--no-extensions');
-      for (const ext of this.extensions) {
-        args.push('-e', ext);
-      }
+    // These are additive — the user's auto-discovered extensions remain available.
+    for (const ext of this.extensions) {
+      args.push('-e', ext);
     }
 
     return args;

package/src/config.js

@@ -13,6 +13,7 @@ const CONFIG_FILE = path.join(CONFIG_DIR, 'config.json');
 const CONFIG_LOCAL_FILE = path.join(CONFIG_DIR, 'config.local.json');
 const CONFIG_EXAMPLE_FILE = path.join(CONFIG_DIR, 'config.example.json');
 const PACKAGE_ROOT = path.join(__dirname, '..');
+const MANAGED_CONFIG_FILE = path.join(PACKAGE_ROOT, 'config.managed.json');
 
 const DEFAULT_CONFIG = {
   github_token: "",
@@ -175,6 +176,7 @@ async function loadConfig() {
 
   const localDir = path.join(process.cwd(), '.pair-review');
   const sources = [
+    { path: MANAGED_CONFIG_FILE,                         label: 'managed config',       required: false },
     { path: CONFIG_FILE,                                label: 'global config',        required: true  },
     { path: CONFIG_LOCAL_FILE,                           label: 'global local config',  required: false },
     { path: path.join(localDir, 'config.json'),         label: 'project config',       required: false },