@in-the-loop-labs/pair-review 2.5.0 → 2.6.1

package/.pi/extensions/task/index.ts

@@ -205,10 +205,13 @@ async function runTask(
 	onUpdate: OnUpdate | undefined,
 	makeDetails: (results: TaskResult[]) => TaskDetails,
 ): Promise<TaskResult> {
-	// Build args: full tool access, JSON output, no session persistence
+	// Build args: full tool access, JSON output, no session persistence.
+	// Skills and extensions are left enabled so subtasks have access to the
+	// user's configured environment. --no-prompt-templates is kept because
+	// prompt templates can't be triggered in -p mode.
 	const args: string[] = [
 		"--mode", "json", "-p", "--no-session",
-		"--no-extensions", "--no-skills", "--no-prompt-templates",
+		"--no-prompt-templates",
 		"-e", EXTENSION_DIR,
 	];
 	if (model) {

package/config.managed.json

@@ -0,0 +1 @@
+{}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@in-the-loop-labs/pair-review",
-  "version": "2.5.0",
+  "version": "2.6.1",
   "description": "Your AI-powered code review partner - Close the feedback loop with AI coding agents",
   "main": "src/server.js",
   "bin": {
@@ -14,6 +14,7 @@
     "public/",
     "plugin/",
     "plugin-code-critic/",
+    "config.managed.json",
     "README.md",
     "LICENSE"
   ],

package/plugin/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "pair-review",
-  "version": "2.5.0",
+  "version": "2.6.1",
   "description": "pair-review app integration — Open PRs and local changes in the pair-review web UI, run server-side AI analysis, and address review feedback. Requires the pair-review MCP server.",
   "author": {
     "name": "in-the-loop-labs",

package/plugin-code-critic/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "code-critic",
-  "version": "2.5.0",
+  "version": "2.6.1",
   "description": "AI-powered code review analysis — Run three-level AI analysis and implement-review-fix loops directly in your coding agent. Works standalone, no server required.",
   "author": {
     "name": "in-the-loop-labs",

package/public/index.html

@@ -177,6 +177,14 @@
             color: var(--color-text-primary);
         }
 
+        .app-version {
+            color: var(--color-fg-muted, #656d76);
+            font-size: 12px;
+            font-weight: 400;
+            margin-left: 6px;
+            opacity: 0.7;
+        }
+
         .header-right {
             display: flex;
             align-items: center;
@@ -1089,6 +1097,7 @@
                         <path transform="rotate(-50 12 12)" d="M18.178 8c5.096 0 5.096 8 0 8-5.095 0-7.133-8-12.356-8-5.096 0-5.096 8 0 8 5.223 0 7.26-8 12.356-8z"/>
                     </svg>
                     <span class="logo-text">pair<span class="logo-accent">review</span></span>
+                    <span id="app-version" class="app-version"></span>
                 </a>
             </div>
             <div class="header-right">

package/public/js/index.js

@@ -1092,6 +1092,12 @@
         const config = await response.json();
         updateCommandExamples(config.is_running_via_npx);
 
+        // Display version in header
+        if (config.version) {
+          const versionEl = document.getElementById('app-version');
+          if (versionEl) versionEl.textContent = 'v' + config.version;
+        }
+
         // Expose chat provider config to components (ChatPanel reads these)
         window.__pairReview = window.__pairReview || {};
         window.__pairReview.chatProvider = config.chat_provider || 'pi';

package/public/setup.html

@@ -137,6 +137,14 @@
             color: var(--color-text-primary);
         }
 
+        .app-version {
+            color: var(--color-fg-muted, #656d76);
+            font-size: 12px;
+            font-weight: 400;
+            margin-left: 6px;
+            opacity: 0.7;
+        }
+
         .setup-target {
             font-family: var(--font-mono);
             font-size: 15px;
@@ -463,6 +471,7 @@
                         <path transform="rotate(-50 12 12)" d="M18.178 8c5.096 0 5.096 8 0 8-5.095 0-7.133-8-12.356-8-5.096 0-5.096 8 0 8 5.223 0 7.26-8 12.356-8z"/>
                     </svg>
                     <span class="logo-text">pair<span class="logo-accent">review</span></span>
+                    <span id="app-version" class="app-version"></span>
                 </a>
                 <div class="setup-target" id="setup-target"></div>
                 <div class="setup-subtitle">Setting up review</div>
@@ -839,6 +848,16 @@
                 });
             }
 
+            /* ── Display Version ── */
+            fetch('/api/config').then(function(r) {
+                return r.ok ? r.json() : null;
+            }).then(function(config) {
+                if (config && config.version) {
+                    var versionEl = document.getElementById('app-version');
+                    if (versionEl) versionEl.textContent = 'v' + config.version;
+                }
+            }).catch(function() { /* non-critical */ });
+
             /* ── Kick Off ── */
             startSetup();
         })();

package/src/ai/claude-provider.js

@@ -174,7 +174,14 @@ class ClaudeProvider extends AIProvider {
       ].join(',');
       permissionArgs = ['--allowedTools', allowedTools];
     }
-    const baseArgs = ['-p', '--verbose', ...cliModelArgs, '--output-format', 'stream-json', ...permissionArgs];
+    // Suppress user hooks in analysis subprocesses to avoid side-effects
+    // (notifications, confirmations, etc.) firing on every tool call during review.
+    // Uses --settings '{"disableAllHooks":true}' since Claude has no --no-hooks flag.
+    // Skills and extensions are left enabled so the subprocess has access to the
+    // user's configured environment. To disable skills, add --disable-slash-commands
+    // to extra_args in provider/model config.
+    const hooksArgs = ['--settings', '{"disableAllHooks":true}'];
+    const baseArgs = ['-p', '--verbose', ...cliModelArgs, '--output-format', 'stream-json', ...hooksArgs, ...permissionArgs];
     if (maxBudget) {
       const budgetNum = parseFloat(maxBudget);
       if (isNaN(budgetNum) || budgetNum <= 0) {

package/src/ai/codex-provider.js

@@ -23,7 +23,8 @@ const BIN_DIR = path.join(__dirname, '..', '..', 'bin');
  * Based on OpenAI Codex Models guide (developers.openai.com/codex/models)
  * - gpt-5.1-codex-mini: Smaller, cost-effective variant for quick scans
  * - gpt-5.2-codex: Advanced coding model for everyday reviews, good reasoning/cost balance
- * - gpt-5.3-codex: Most capable agentic coding model with frontier performance and reasoning
+ * - gpt-5.3-codex: Capable agentic coding model with frontier performance and reasoning
+ * - gpt-5.4: Latest generation with enhanced reasoning depth
  */
 const CODEX_MODELS = [
   {
@@ -50,7 +51,16 @@ const CODEX_MODELS = [
     name: 'GPT-5.3 Codex',
     tier: 'thorough',
     tagline: 'Deep Review',
-    description: 'Most capable agentic coding model—combines frontier coding performance with stronger reasoning for deep cross-file analysis.',
+    description: 'Capable agentic coding model—combines frontier coding performance with strong reasoning for cross-file analysis.',
+    badge: 'Thorough',
+    badgeClass: 'badge-power'
+  },
+  {
+    id: 'gpt-5.4',
+    name: 'GPT-5.4',
+    tier: 'thorough',
+    tagline: 'Latest Gen',
+    description: 'Latest generation model with enhanced reasoning depth for complex architectural reviews.',
     badge: 'Most Thorough',
     badgeClass: 'badge-power'
   }

package/src/ai/cursor-agent-provider.js

@@ -143,6 +143,24 @@ const CURSOR_AGENT_MODELS = [
     description: 'Deep analysis with extended thinking—Cursor default for maximum review quality',
     badge: 'Most Thorough',
     badgeClass: 'badge-power'
+  },
+  {
+    id: 'gpt-5.4-high',
+    name: 'GPT-5.4 High',
+    tier: 'thorough',
+    tagline: 'Latest OpenAI',
+    description: 'Latest generation with high reasoning effort—strong for complex architectural reviews',
+    badge: 'Latest Gen',
+    badgeClass: 'badge-power'
+  },
+  {
+    id: 'gpt-5.4-medium',
+    name: 'GPT-5.4',
+    tier: 'thorough',
+    tagline: 'Latest Gen',
+    description: 'Latest generation at medium reasoning depth',
+    badge: 'Latest',
+    badgeClass: 'badge-power'
   }
 ];
 

package/src/ai/pi-provider.js

@@ -189,24 +189,23 @@ class PiProvider extends AIProvider {
     // --no-session: Each pi invocation is an ephemeral analysis — there's no need to
     //               persist session state between runs. Set PAIR_REVIEW_PI_SESSION=1
     //               to enable session saving for debugging (sessions saved to ~/.pi/sessions/).
-    // --no-skills: Skills are disabled by default to keep runs deterministic. A skill can
-    //              still be loaded via `--skill` in model-specific `extra_args` if needed.
-
     // Build args: base args + built-in extra_args + provider extra_args + model extra_args
     // In yolo mode, omit --tools entirely to allow all tools (including edit, write)
     // The task extension is loaded to give the model a subagent tool for delegating
     // work to isolated subprocesses, preserving the main context window.
-    // --no-extensions prevents auto-discovery of other extensions.
-    // --no-skills and --no-prompt-templates keep the subprocess focused.
+    // --no-prompt-templates: prompt templates can't be triggered in -p mode, so suppress
+    // them to avoid wasting context. Skills and extensions are left enabled so the
+    // subprocess has access to the user's configured environment. To disable them,
+    // add --no-skills or --no-extensions to extra_args in provider/model config.
     const sessionArgs = process.env.PAIR_REVIEW_PI_SESSION ? [] : ['--no-session'];
     let baseArgs;
     if (configOverrides.yolo) {
       baseArgs = ['-p', '--mode', 'json', ...cliModelArgs, ...sessionArgs,
-        '--no-extensions', '--no-skills', '--no-prompt-templates',
+        '--no-prompt-templates',
         '-e', TASK_EXTENSION_DIR];
     } else {
       baseArgs = ['-p', '--mode', 'json', ...cliModelArgs, '--tools', 'read,bash,grep,find,ls', ...sessionArgs,
-        '--no-extensions', '--no-skills', '--no-prompt-templates',
+        '--no-prompt-templates',
         '-e', TASK_EXTENSION_DIR];
     }
     const builtInArgs = builtIn?.extra_args || [];

package/src/chat/pi-bridge.js

@@ -273,12 +273,9 @@ class PiBridge extends EventEmitter {
     }
 
     // Load extensions via -e (e.g., task extension for subagent delegation).
-    // --no-extensions prevents auto-discovery; only explicitly listed ones load.
-    if (this.extensions.length > 0) {
-      args.push('--no-extensions');
-      for (const ext of this.extensions) {
-        args.push('-e', ext);
-      }
+    // These are additive — the user's auto-discovered extensions remain available.
+    for (const ext of this.extensions) {
+      args.push('-e', ext);
     }
 
     return args;

package/src/config.js

@@ -13,6 +13,7 @@ const CONFIG_FILE = path.join(CONFIG_DIR, 'config.json');
 const CONFIG_LOCAL_FILE = path.join(CONFIG_DIR, 'config.local.json');
 const CONFIG_EXAMPLE_FILE = path.join(CONFIG_DIR, 'config.example.json');
 const PACKAGE_ROOT = path.join(__dirname, '..');
+const MANAGED_CONFIG_FILE = path.join(PACKAGE_ROOT, 'config.managed.json');
 
 const DEFAULT_CONFIG = {
   github_token: "",
@@ -175,6 +176,7 @@ async function loadConfig() {
 
   const localDir = path.join(process.cwd(), '.pair-review');
   const sources = [
+    { path: MANAGED_CONFIG_FILE,                         label: 'managed config',       required: false },
     { path: CONFIG_FILE,                                label: 'global config',        required: true  },
     { path: CONFIG_LOCAL_FILE,                           label: 'global local config',  required: false },
     { path: path.join(localDir, 'config.json'),         label: 'project config',       required: false },
@@ -183,22 +185,26 @@ async function loadConfig() {
 
   let mergedConfig = { ...DEFAULT_CONFIG };
   let isFirstRun = false;
+  let hasManagedConfig = false;
 
   for (const source of sources) {
     try {
       const data = await fs.readFile(source.path, 'utf8');
       const parsed = JSON.parse(data);
+      if (source.label === 'managed config' && Object.keys(parsed).length > 0) {
+        hasManagedConfig = true;
+      }
       mergedConfig = deepMerge(mergedConfig, parsed);
     } catch (error) {
       if (error.code === 'ENOENT') {
-        if (source.required) {
+        if (source.required && !hasManagedConfig) {
           // Global config doesn't exist — create it with defaults
           const config = { ...DEFAULT_CONFIG };
           await saveConfig(config);
           logger.debug(`Created default config file: ${CONFIG_FILE}`);
           isFirstRun = true;
         }
-        // Optional files: skip silently
+        // Optional files or managed-config-present: skip silently
       } else if (error instanceof SyntaxError) {
         if (source.required) {
           console.error(`Invalid configuration file at ~/.pair-review/config.json`);

package/src/routes/config.js

@@ -21,6 +21,7 @@ const {
 } = require('../ai');
 const { normalizeRepository } = require('../utils/paths');
 const { isRunningViaNpx, saveConfig } = require('../config');
+const { version } = require('../../package.json');
 const { getAllChatProviders, getAllCachedChatAvailability } = require('../chat/chat-providers');
 const { PRESETS } = require('../utils/comment-formatter');
 const logger = require('../utils/logger');
@@ -42,6 +43,7 @@ router.get('/api/config', (req, res) => {
 
   // Only return safe configuration values (not secrets like github_token)
   res.json({
+    version,
     theme: config.theme || 'light',
     comment_button_action: config.comment_button_action || 'submit',
     comment_format: config.comment_format || 'legacy',