cc-reviewer 5.1.1 → 5.3.0

package/commands/codex-review.md

@@ -49,9 +49,9 @@ Call `codex_review` with:
 ```
 
 ### Service Tier (from $ARGUMENTS)
-- If user says "fast mode", "fast", or "priority" → set `serviceTier: "fast"` (priority processing, ~2x cost)
 - If user says "flex", "cheap", or "budget" → set `serviceTier: "flex"` (50% cheaper, slower)
-- Otherwise → omit `serviceTier` (uses default tier)
+- If user says "default tier" or "standard tier" → set `serviceTier: "default"` (API default)
+- Otherwise → omit `serviceTier` (defaults to `"fast"` — priority processing, ~2x cost)
 
 ### Structure your ccOutput:
 

package/commands/codex-xhigh-review.md

@@ -18,7 +18,7 @@ Use the `codex_review` MCP tool with `reasoningEffort: "xhigh"` for deeper analy
    - `workingDir`: current working directory
    - `ccOutput`: brief summary of recent changes or context
    - `reasoningEffort`: "xhigh" (this is the key difference from /codex-review)
-   - `serviceTier`: if user says "fast mode"/"fast"/"priority" → "fast"; if "flex"/"cheap"/"budget" → "flex"; otherwise omit
+   - `serviceTier`: if user says "flex"/"cheap"/"budget" → "flex"; if "default tier"/"standard tier" → "default"; otherwise omit (defaults to "fast" — priority processing, ~2x cost)
    - `focusAreas`: extracted from $ARGUMENTS if it's a known focus area
    - `customPrompt`: $ARGUMENTS if it's custom text
 

package/commands/multi-review.md

@@ -58,9 +58,9 @@ Call `multi_review` with:
 ```
 
 ### Service Tier (from $ARGUMENTS, applies to Codex only)
-- If user says "fast mode", "fast", or "priority" → set `serviceTier: "fast"`
 - If user says "flex", "cheap", or "budget" → set `serviceTier: "flex"`
-- Otherwise → omit `serviceTier`
+- If user says "default tier" or "standard tier" → set `serviceTier: "default"`
+- Otherwise → omit `serviceTier` (defaults to `"fast"` — priority processing, ~2x cost)
 
 ### Structure your ccOutput:
 

package/dist/adapters/base.d.ts

@@ -39,7 +39,7 @@ export interface ReviewRequest {
     customPrompt?: string;
     /** Reasoning effort level (for models that support it) */
     reasoningEffort?: ReasoningEffort;
-    /** Service tier (for models that support it: priority = fast, flex = cheap) */
+    /** Service tier (Codex). Omit for the review chain's default 'fast' (priority). Pass 'flex' for cheap/slow or 'default' for the Codex API default tier. */
     serviceTier?: ServiceTier;
     /** Review mode: standard finds bugs, adversarial challenges assumptions */
     reviewMode?: 'standard' | 'adversarial';

package/dist/adapters/claude.js

@@ -16,12 +16,7 @@ import { registerAdapter, } from './base.js';
 import { CliExecutor } from '../executor.js';
 import { ClaudeEventDecoder } from '../decoders/index.js';
 import { buildSimpleHandoff, buildHandoffPrompt, buildAdversarialHandoffPrompt, selectRole, } from '../handoff.js';
-// =============================================================================
-// CONFIGURATION
-// =============================================================================
-const INACTIVITY_TIMEOUT_MS = 300_000; // 5 min — Opus has long thinking phases
-const MAX_TIMEOUT_MS = 3_600_000; // 60 min absolute max
-const MAX_BUFFER_SIZE = 1024 * 1024; // 1MB max buffer
+import { getConfig } from '../config.js';
 // Write tools explicitly blocked as defense-in-depth
 const DISALLOWED_TOOLS = 'Edit Write NotebookEdit';
 // =============================================================================
@@ -43,12 +38,18 @@ export class ClaudeAdapter {
     }
     async isAvailable() {
         return new Promise((resolve) => {
+            let settled = false;
+            const done = (result) => { if (!settled) {
+                settled = true;
+                clearTimeout(timer);
+                resolve(result);
+            } };
             const proc = spawn('claude', ['--version'], {
                 stdio: ['ignore', 'pipe', 'pipe'],
             });
-            proc.on('close', (code) => resolve(code === 0));
-            proc.on('error', () => resolve(false));
-            setTimeout(() => { proc.kill(); resolve(false); }, 5000);
+            proc.on('close', (code) => done(code === 0));
+            proc.on('error', () => done(false));
+            const timer = setTimeout(() => { proc.kill(); done(false); }, 5000);
         });
     }
     async runReview(request) {
@@ -86,9 +87,10 @@ export class ClaudeAdapter {
         }
     }
     async runCli(prompt, workingDir) {
+        const cfg = getConfig().claude;
         const args = [
             '-p', // Non-interactive, print and exit
-            '--model', 'opus', // Use Opus
+            '--model', cfg.model, // Model from config (default: opus)
             '--setting-sources', '', // Skip hooks, plugins, CLAUDE.md (preserves OAuth auth; --bare kills keychain)
             '--permission-mode', 'plan', // Read-only enforcement (layer 1)
             '--verbose', // Required for stream-json
@@ -111,9 +113,9 @@ export class ClaudeAdapter {
             args,
             cwd: workingDir,
             stdin: prompt,
-            inactivityTimeoutMs: INACTIVITY_TIMEOUT_MS,
-            maxTimeoutMs: MAX_TIMEOUT_MS,
-            maxBufferSize: MAX_BUFFER_SIZE,
+            inactivityTimeoutMs: cfg.inactivityTimeoutMs,
+            maxTimeoutMs: cfg.maxTimeoutMs,
+            maxBufferSize: cfg.maxBufferSize,
             onLine: (line) => {
                 decoder.processLine(line);
             },

package/dist/adapters/codex.js

@@ -11,15 +11,7 @@ import { registerAdapter, } from './base.js';
 import { CliExecutor } from '../executor.js';
 import { CodexEventDecoder } from '../decoders/index.js';
 import { buildSimpleHandoff, buildHandoffPrompt, buildAdversarialHandoffPrompt, selectRole, } from '../handoff.js';
-// =============================================================================
-// CONFIGURATION
-// =============================================================================
-const INACTIVITY_TIMEOUT_MS = {
-    high: 180_000, // 3 min — covers reasoning gaps between tool use bursts
-    xhigh: 300_000, // 5 min — xhigh has longer reasoning phases
-};
-const MAX_TIMEOUT_MS = 3_600_000; // 60 min absolute max
-const MAX_BUFFER_SIZE = 1024 * 1024; // 1MB max buffer
+import { getConfig } from '../config.js';
 // =============================================================================
 // CODEX ADAPTER
 // =============================================================================
@@ -39,12 +31,18 @@ export class CodexAdapter {
     }
     async isAvailable() {
         return new Promise((resolve) => {
+            let settled = false;
+            const done = (result) => { if (!settled) {
+                settled = true;
+                clearTimeout(timer);
+                resolve(result);
+            } };
             const proc = spawn('codex', ['--version'], {
                 stdio: ['ignore', 'pipe', 'pipe'],
             });
-            proc.on('close', (code) => resolve(code === 0));
-            proc.on('error', () => resolve(false));
-            setTimeout(() => { proc.kill(); resolve(false); }, 5000);
+            proc.on('close', (code) => done(code === 0));
+            proc.on('error', () => done(false));
+            const timer = setTimeout(() => { proc.kill(); done(false); }, 5000);
         });
     }
     async runReview(request) {
@@ -62,7 +60,8 @@ export class CodexAdapter {
             const prompt = request.reviewMode === 'adversarial'
                 ? buildAdversarialHandoffPrompt({ handoff })
                 : buildHandoffPrompt({ handoff, role: selectRole(request.focusAreas) });
-            const result = await this.runCli(prompt, request.workingDir, request.reasoningEffort || 'high', request.serviceTier);
+            const cfg = getConfig().codex;
+            const result = await this.runCli(prompt, request.workingDir, request.reasoningEffort ?? cfg.reasoningEffort, request.serviceTier);
             if (result.exitCode !== 0) {
                 const error = this.categorizeError(result.stderr);
                 return { success: false, error, suggestion: this.getSuggestion(error), executionTimeMs: Date.now() - startTime };
@@ -82,10 +81,11 @@ export class CodexAdapter {
         }
     }
     async runCli(prompt, workingDir, reasoningEffort, serviceTier) {
+        const cfg = getConfig().codex;
         const args = [
             'exec',
             '--json', // JSONL streaming events
-            '-m', 'gpt-5.4',
+            '-m', cfg.model,
             '-c', `model_reasoning_effort=${reasoningEffort}`,
             '-c', 'model_reasoning_summary_format=experimental',
             '--full-auto',
@@ -94,12 +94,15 @@ export class CodexAdapter {
             '-C', workingDir,
             '-', // Read prompt from stdin
         ];
-        if (serviceTier && serviceTier !== 'default') {
-            args.push('-c', `service_tier=${serviceTier}`);
+        // Caller-supplied serviceTier overrides config. Explicit 'default' is an
+        // opt-out and emits no flag (uses Codex API default).
+        const effectiveTier = serviceTier ?? cfg.serviceTier;
+        if (effectiveTier !== 'default') {
+            args.push('-c', `service_tier=${effectiveTier}`);
         }
         const decoder = new CodexEventDecoder();
         const cliStartTime = Date.now();
-        const tierLabel = serviceTier && serviceTier !== 'default' ? ` [${serviceTier}]` : '';
+        const tierLabel = effectiveTier !== 'default' ? ` [${effectiveTier}]` : '';
         console.error(`[codex] Running with ${reasoningEffort} reasoning${tierLabel}...`);
         decoder.onProgress = (eventType, detail) => {
             const elapsed = Math.round((Date.now() - cliStartTime) / 1000);
@@ -111,9 +114,9 @@ export class CodexAdapter {
             args,
             cwd: workingDir,
             stdin: prompt,
-            inactivityTimeoutMs: INACTIVITY_TIMEOUT_MS[reasoningEffort] || INACTIVITY_TIMEOUT_MS.high,
-            maxTimeoutMs: MAX_TIMEOUT_MS,
-            maxBufferSize: MAX_BUFFER_SIZE,
+            inactivityTimeoutMs: cfg.inactivityTimeoutMs[reasoningEffort] ?? cfg.inactivityTimeoutMs.high,
+            maxTimeoutMs: cfg.maxTimeoutMs,
+            maxBufferSize: cfg.maxBufferSize,
             onLine: (line) => {
                 decoder.processLine(line);
             },

package/dist/adapters/gemini.js

@@ -11,12 +11,7 @@ import { registerAdapter, } from './base.js';
 import { CliExecutor } from '../executor.js';
 import { GeminiEventDecoder } from '../decoders/index.js';
 import { buildSimpleHandoff, buildHandoffPrompt, buildAdversarialHandoffPrompt, selectRole, } from '../handoff.js';
-// =============================================================================
-// CONFIGURATION
-// =============================================================================
-const INACTIVITY_TIMEOUT_MS = 300_000; // 5 min — covers reasoning gaps between tool use
-const MAX_TIMEOUT_MS = 3_600_000; // 60 min absolute max
-const MAX_BUFFER_SIZE = 1024 * 1024; // 1MB max buffer
+import { getConfig } from '../config.js';
 // =============================================================================
 // GEMINI ADAPTER
 // =============================================================================
@@ -36,12 +31,18 @@ export class GeminiAdapter {
     }
     async isAvailable() {
         return new Promise((resolve) => {
+            let settled = false;
+            const done = (result) => { if (!settled) {
+                settled = true;
+                clearTimeout(timer);
+                resolve(result);
+            } };
             const proc = spawn('gemini', ['--version'], {
                 stdio: ['ignore', 'pipe', 'pipe'],
             });
-            proc.on('close', (code) => resolve(code === 0));
-            proc.on('error', () => resolve(false));
-            setTimeout(() => { proc.kill(); resolve(false); }, 5000);
+            proc.on('close', (code) => done(code === 0));
+            proc.on('error', () => done(false));
+            const timer = setTimeout(() => { proc.kill(); done(false); }, 5000);
         });
     }
     async runReview(request) {
@@ -79,6 +80,7 @@ export class GeminiAdapter {
         }
     }
     async runCli(prompt, workingDir) {
+        const cfg = getConfig().gemini;
         const args = [
             '--sandbox',
             '--approval-mode', 'plan',
@@ -86,6 +88,9 @@ export class GeminiAdapter {
             '--include-directories', workingDir,
             '-p', '',
         ];
+        if (cfg.model) {
+            args.push('--model', cfg.model);
+        }
         const decoder = new GeminiEventDecoder();
         const cliStartTime = Date.now();
         console.error('[gemini] Running...');
@@ -99,9 +104,9 @@ export class GeminiAdapter {
             args,
             cwd: workingDir,
             stdin: prompt,
-            inactivityTimeoutMs: INACTIVITY_TIMEOUT_MS,
-            maxTimeoutMs: MAX_TIMEOUT_MS,
-            maxBufferSize: MAX_BUFFER_SIZE,
+            inactivityTimeoutMs: cfg.inactivityTimeoutMs,
+            maxTimeoutMs: cfg.maxTimeoutMs,
+            maxBufferSize: cfg.maxBufferSize,
             onLine: (line) => {
                 decoder.processLine(line);
             },

package/dist/config.d.ts

@@ -0,0 +1,222 @@
+/**
+ * Runtime configuration for cc-reviewer.
+ *
+ * Config file: ~/.config/cc-reviewer/config.json
+ *
+ * Semantics:
+ *   - Lazy, cached load. `getConfig()` returns the cached config or reads once.
+ *   - Missing file → defaults in memory (no write). Use `initConfig()` from the
+ *     server entry point to create the file with defaults on first launch.
+ *   - Invalid JSON or schema violations → fall back to defaults, warn on stderr.
+ *   - Partial user configs are deep-merged against defaults via Zod `.default()`.
+ *   - Tool-call arguments still override config (e.g. `reasoningEffort` on a
+ *     single `codex_review` call). Config only sets defaults.
+ */
+import { z } from 'zod';
+export declare const CodexConfigSchema: z.ZodDefault<z.ZodObject<{
+    model: z.ZodDefault<z.ZodString>;
+    reasoningEffort: z.ZodDefault<z.ZodEnum<["high", "xhigh"]>>;
+    serviceTier: z.ZodDefault<z.ZodEnum<["default", "fast", "flex"]>>;
+    inactivityTimeoutMs: z.ZodDefault<z.ZodObject<{
+        high: z.ZodDefault<z.ZodNumber>;
+        xhigh: z.ZodDefault<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        high: number;
+        xhigh: number;
+    }, {
+        high?: number | undefined;
+        xhigh?: number | undefined;
+    }>>;
+    maxTimeoutMs: z.ZodDefault<z.ZodNumber>;
+    maxBufferSize: z.ZodDefault<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    model: string;
+    reasoningEffort: "high" | "xhigh";
+    serviceTier: "default" | "fast" | "flex";
+    inactivityTimeoutMs: {
+        high: number;
+        xhigh: number;
+    };
+    maxTimeoutMs: number;
+    maxBufferSize: number;
+}, {
+    model?: string | undefined;
+    reasoningEffort?: "high" | "xhigh" | undefined;
+    serviceTier?: "default" | "fast" | "flex" | undefined;
+    inactivityTimeoutMs?: {
+        high?: number | undefined;
+        xhigh?: number | undefined;
+    } | undefined;
+    maxTimeoutMs?: number | undefined;
+    maxBufferSize?: number | undefined;
+}>>;
+export declare const ClaudeConfigSchema: z.ZodDefault<z.ZodObject<{
+    model: z.ZodDefault<z.ZodString>;
+    inactivityTimeoutMs: z.ZodDefault<z.ZodNumber>;
+    maxTimeoutMs: z.ZodDefault<z.ZodNumber>;
+    maxBufferSize: z.ZodDefault<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    model: string;
+    inactivityTimeoutMs: number;
+    maxTimeoutMs: number;
+    maxBufferSize: number;
+}, {
+    model?: string | undefined;
+    inactivityTimeoutMs?: number | undefined;
+    maxTimeoutMs?: number | undefined;
+    maxBufferSize?: number | undefined;
+}>>;
+export declare const GeminiConfigSchema: z.ZodDefault<z.ZodObject<{
+    model: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    inactivityTimeoutMs: z.ZodDefault<z.ZodNumber>;
+    maxTimeoutMs: z.ZodDefault<z.ZodNumber>;
+    maxBufferSize: z.ZodDefault<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    model: string | null;
+    inactivityTimeoutMs: number;
+    maxTimeoutMs: number;
+    maxBufferSize: number;
+}, {
+    model?: string | null | undefined;
+    inactivityTimeoutMs?: number | undefined;
+    maxTimeoutMs?: number | undefined;
+    maxBufferSize?: number | undefined;
+}>>;
+export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
+    codex: z.ZodDefault<z.ZodObject<{
+        model: z.ZodDefault<z.ZodString>;
+        reasoningEffort: z.ZodDefault<z.ZodEnum<["high", "xhigh"]>>;
+        serviceTier: z.ZodDefault<z.ZodEnum<["default", "fast", "flex"]>>;
+        inactivityTimeoutMs: z.ZodDefault<z.ZodObject<{
+            high: z.ZodDefault<z.ZodNumber>;
+            xhigh: z.ZodDefault<z.ZodNumber>;
+        }, "strip", z.ZodTypeAny, {
+            high: number;
+            xhigh: number;
+        }, {
+            high?: number | undefined;
+            xhigh?: number | undefined;
+        }>>;
+        maxTimeoutMs: z.ZodDefault<z.ZodNumber>;
+        maxBufferSize: z.ZodDefault<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        model: string;
+        reasoningEffort: "high" | "xhigh";
+        serviceTier: "default" | "fast" | "flex";
+        inactivityTimeoutMs: {
+            high: number;
+            xhigh: number;
+        };
+        maxTimeoutMs: number;
+        maxBufferSize: number;
+    }, {
+        model?: string | undefined;
+        reasoningEffort?: "high" | "xhigh" | undefined;
+        serviceTier?: "default" | "fast" | "flex" | undefined;
+        inactivityTimeoutMs?: {
+            high?: number | undefined;
+            xhigh?: number | undefined;
+        } | undefined;
+        maxTimeoutMs?: number | undefined;
+        maxBufferSize?: number | undefined;
+    }>>;
+    claude: z.ZodDefault<z.ZodObject<{
+        model: z.ZodDefault<z.ZodString>;
+        inactivityTimeoutMs: z.ZodDefault<z.ZodNumber>;
+        maxTimeoutMs: z.ZodDefault<z.ZodNumber>;
+        maxBufferSize: z.ZodDefault<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        model: string;
+        inactivityTimeoutMs: number;
+        maxTimeoutMs: number;
+        maxBufferSize: number;
+    }, {
+        model?: string | undefined;
+        inactivityTimeoutMs?: number | undefined;
+        maxTimeoutMs?: number | undefined;
+        maxBufferSize?: number | undefined;
+    }>>;
+    gemini: z.ZodDefault<z.ZodObject<{
+        model: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        inactivityTimeoutMs: z.ZodDefault<z.ZodNumber>;
+        maxTimeoutMs: z.ZodDefault<z.ZodNumber>;
+        maxBufferSize: z.ZodDefault<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        model: string | null;
+        inactivityTimeoutMs: number;
+        maxTimeoutMs: number;
+        maxBufferSize: number;
+    }, {
+        model?: string | null | undefined;
+        inactivityTimeoutMs?: number | undefined;
+        maxTimeoutMs?: number | undefined;
+        maxBufferSize?: number | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    codex: {
+        model: string;
+        reasoningEffort: "high" | "xhigh";
+        serviceTier: "default" | "fast" | "flex";
+        inactivityTimeoutMs: {
+            high: number;
+            xhigh: number;
+        };
+        maxTimeoutMs: number;
+        maxBufferSize: number;
+    };
+    claude: {
+        model: string;
+        inactivityTimeoutMs: number;
+        maxTimeoutMs: number;
+        maxBufferSize: number;
+    };
+    gemini: {
+        model: string | null;
+        inactivityTimeoutMs: number;
+        maxTimeoutMs: number;
+        maxBufferSize: number;
+    };
+}, {
+    codex?: {
+        model?: string | undefined;
+        reasoningEffort?: "high" | "xhigh" | undefined;
+        serviceTier?: "default" | "fast" | "flex" | undefined;
+        inactivityTimeoutMs?: {
+            high?: number | undefined;
+            xhigh?: number | undefined;
+        } | undefined;
+        maxTimeoutMs?: number | undefined;
+        maxBufferSize?: number | undefined;
+    } | undefined;
+    claude?: {
+        model?: string | undefined;
+        inactivityTimeoutMs?: number | undefined;
+        maxTimeoutMs?: number | undefined;
+        maxBufferSize?: number | undefined;
+    } | undefined;
+    gemini?: {
+        model?: string | null | undefined;
+        inactivityTimeoutMs?: number | undefined;
+        maxTimeoutMs?: number | undefined;
+        maxBufferSize?: number | undefined;
+    } | undefined;
+}>>;
+export type Config = z.infer<typeof ConfigSchema>;
+export type CodexConfig = z.infer<typeof CodexConfigSchema>;
+export type ClaudeConfig = z.infer<typeof ClaudeConfigSchema>;
+export type GeminiConfig = z.infer<typeof GeminiConfigSchema>;
+export declare const DEFAULT_CONFIG: Config;
+export declare function getConfigPath(): string;
+export declare function getConfig(): Config;
+/**
+ * Create the config file with defaults if it does not exist.
+ * Uses the exclusive `wx` flag for atomic creation — safe against TOCTOU races
+ * when multiple server instances start concurrently.
+ * Refreshes the cached config so subsequent `getConfig()` calls see disk state.
+ */
+export declare function initConfig(): {
+    path: string;
+    created: boolean;
+};
+/** Test-only hook. Redirects the config path and clears the cache. */
+export declare function setConfigPathForTesting(path: string | null): void;

package/dist/config.js

@@ -0,0 +1,174 @@
+/**
+ * Runtime configuration for cc-reviewer.
+ *
+ * Config file: ~/.config/cc-reviewer/config.json
+ *
+ * Semantics:
+ *   - Lazy, cached load. `getConfig()` returns the cached config or reads once.
+ *   - Missing file → defaults in memory (no write). Use `initConfig()` from the
+ *     server entry point to create the file with defaults on first launch.
+ *   - Invalid JSON or schema violations → fall back to defaults, warn on stderr.
+ *   - Partial user configs are deep-merged against defaults via Zod `.default()`.
+ *   - Tool-call arguments still override config (e.g. `reasoningEffort` on a
+ *     single `codex_review` call). Config only sets defaults.
+ */
+import { z } from 'zod';
+import { existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from 'fs';
+import { dirname, join } from 'path';
+import { homedir } from 'os';
+// =============================================================================
+// SCHEMA
+// =============================================================================
+export const CodexConfigSchema = z
+    .object({
+    model: z.string().default('gpt-5.4'),
+    reasoningEffort: z.enum(['high', 'xhigh']).default('high'),
+    serviceTier: z.enum(['default', 'fast', 'flex']).default('fast'),
+    inactivityTimeoutMs: z
+        .object({
+        high: z.number().int().positive().default(180_000),
+        xhigh: z.number().int().positive().default(300_000),
+    })
+        .default({}),
+    maxTimeoutMs: z.number().int().positive().default(3_600_000),
+    maxBufferSize: z.number().int().positive().default(1_048_576),
+})
+    .default({});
+export const ClaudeConfigSchema = z
+    .object({
+    model: z.string().default('opus'),
+    inactivityTimeoutMs: z.number().int().positive().default(300_000),
+    maxTimeoutMs: z.number().int().positive().default(3_600_000),
+    maxBufferSize: z.number().int().positive().default(1_048_576),
+})
+    .default({});
+export const GeminiConfigSchema = z
+    .object({
+    model: z.string().nullable().default('gemini-3.1-pro-preview'),
+    inactivityTimeoutMs: z.number().int().positive().default(300_000),
+    maxTimeoutMs: z.number().int().positive().default(3_600_000),
+    maxBufferSize: z.number().int().positive().default(1_048_576),
+})
+    .default({});
+export const ConfigSchema = z
+    .object({
+    codex: CodexConfigSchema,
+    claude: ClaudeConfigSchema,
+    gemini: GeminiConfigSchema,
+})
+    .default({});
+export const DEFAULT_CONFIG = ConfigSchema.parse({});
+// =============================================================================
+// STATE
+// =============================================================================
+const DEFAULT_CONFIG_PATH = join(homedir(), '.config', 'cc-reviewer', 'config.json');
+let _configPath = DEFAULT_CONFIG_PATH;
+let _cached = null;
+let _cachedMtimeMs = 0;
+// =============================================================================
+// PUBLIC API
+// =============================================================================
+export function getConfigPath() {
+    return _configPath;
+}
+export function getConfig() {
+    // Hot-reload: re-read if the file's mtime has changed since last load.
+    if (_cached) {
+        try {
+            if (existsSync(_configPath)) {
+                const mtime = statSync(_configPath).mtimeMs;
+                if (mtime !== _cachedMtimeMs) {
+                    _cached = loadConfigFromDisk(_configPath);
+                    _cachedMtimeMs = mtime;
+                }
+            }
+        }
+        catch {
+            // statSync failure is non-fatal — keep using the cached config.
+        }
+        return _cached;
+    }
+    _cached = loadConfigFromDisk(_configPath);
+    if (existsSync(_configPath)) {
+        try {
+            _cachedMtimeMs = statSync(_configPath).mtimeMs;
+        }
+        catch { /* ignore */ }
+    }
+    return _cached;
+}
+/**
+ * Create the config file with defaults if it does not exist.
+ * Uses the exclusive `wx` flag for atomic creation — safe against TOCTOU races
+ * when multiple server instances start concurrently.
+ * Refreshes the cached config so subsequent `getConfig()` calls see disk state.
+ */
+export function initConfig() {
+    const path = _configPath;
+    mkdirSync(dirname(path), { recursive: true });
+    try {
+        writeFileSync(path, JSON.stringify(DEFAULT_CONFIG, null, 2) + '\n', { encoding: 'utf-8', flag: 'wx' });
+        _cached = DEFAULT_CONFIG;
+        _cachedMtimeMs = statSync(path).mtimeMs;
+        return { path, created: true };
+    }
+    catch (error) {
+        if (error.code === 'EEXIST') {
+            _cached = loadConfigFromDisk(path);
+            try {
+                _cachedMtimeMs = statSync(path).mtimeMs;
+            }
+            catch { /* ignore */ }
+            return { path, created: false };
+        }
+        throw error;
+    }
+}
+/** Test-only hook. Redirects the config path and clears the cache. */
+export function setConfigPathForTesting(path) {
+    _configPath = path ?? DEFAULT_CONFIG_PATH;
+    _cached = null;
+    _cachedMtimeMs = 0;
+}
+// =============================================================================
+// INTERNAL
+// =============================================================================
+/**
+ * Parse each adapter's config independently so a typo in one section only
+ * resets that adapter to defaults — the other adapters' settings survive.
+ */
+function loadConfigFromDisk(path) {
+    if (!existsSync(path))
+        return DEFAULT_CONFIG;
+    let raw;
+    try {
+        raw = JSON.parse(readFileSync(path, 'utf-8'));
+        if (typeof raw !== 'object' || raw === null || Array.isArray(raw)) {
+            console.error(`[cc-reviewer] Config at ${path} is not a JSON object — using defaults.`);
+            return DEFAULT_CONFIG;
+        }
+    }
+    catch (error) {
+        const msg = error instanceof Error ? error.message : String(error);
+        console.error(`[cc-reviewer] Invalid JSON in ${path} — using defaults. Error: ${msg}`);
+        return DEFAULT_CONFIG;
+    }
+    const adapters = [
+        { key: 'codex', schema: CodexConfigSchema },
+        { key: 'claude', schema: ClaudeConfigSchema },
+        { key: 'gemini', schema: GeminiConfigSchema },
+    ];
+    const result = {};
+    for (const { key, schema } of adapters) {
+        const section = raw[key];
+        try {
+            result[key] = schema.parse(section);
+        }
+        catch (error) {
+            const msg = error instanceof Error ? error.message : String(error);
+            console.error(`[cc-reviewer] Invalid "${key}" config — using ${key} defaults. Error: ${msg}`);
+            result[key] = schema.parse(undefined);
+        }
+    }
+    return result;
+}

package/dist/index.js

@@ -21,6 +21,7 @@ import { CallToolRequestSchema, ListToolsRequestSchema, } from '@modelcontextpro
 import { handleCodexReview, handleGeminiReview, handleClaudeReview, handleMultiReview, ReviewInputSchema, TOOL_DEFINITIONS } from './tools/feedback.js';
 import { logCliStatus } from './cli/check.js';
 import { installCommands } from './commands.js';
+import { initConfig } from './config.js';
 // Read version from package.json
 import { readFileSync } from 'fs';
 import { join, dirname } from 'path';
@@ -111,6 +112,17 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
 });
 // Start the server
 async function main() {
+    // Initialize config (writes defaults to ~/.config/cc-reviewer/config.json on first run)
+    try {
+        const cfg = initConfig();
+        console.error(cfg.created
+            ? `[cc-reviewer] Initialized config at ${cfg.path}`
+            : `[cc-reviewer] Loaded config from ${cfg.path}`);
+    }
+    catch (error) {
+        const msg = error instanceof Error ? error.message : String(error);
+        console.error(`[cc-reviewer] Warning: Could not initialize config: ${msg}`);
+    }
     // Auto-install slash commands
     const result = installCommands();
     if (result.success) {

package/dist/schema.d.ts

@@ -63,7 +63,7 @@ export declare const ReviewFinding: z.ZodObject<{
     owasp_category: z.ZodOptional<z.ZodString>;
     tags: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
 }, "strip", z.ZodTypeAny, {
-    severity: "info" | "high" | "critical" | "medium" | "low";
+    severity: "high" | "info" | "critical" | "medium" | "low";
     title: string;
     description: string;
     category: "other" | "performance" | "security" | "testing" | "architecture" | "correctness" | "maintainability" | "scalability" | "documentation" | "best-practice";
@@ -82,7 +82,7 @@ export declare const ReviewFinding: z.ZodObject<{
     owasp_category?: string | undefined;
     tags?: string[] | undefined;
 }, {
-    severity: "info" | "high" | "critical" | "medium" | "low";
+    severity: "high" | "info" | "critical" | "medium" | "low";
     title: string;
     description: string;
     category: "other" | "performance" | "security" | "testing" | "architecture" | "correctness" | "maintainability" | "scalability" | "documentation" | "best-practice";
@@ -266,7 +266,7 @@ export declare const ReviewOutput: z.ZodObject<{
         owasp_category: z.ZodOptional<z.ZodString>;
         tags: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     }, "strip", z.ZodTypeAny, {
-        severity: "info" | "high" | "critical" | "medium" | "low";
+        severity: "high" | "info" | "critical" | "medium" | "low";
         title: string;
         description: string;
         category: "other" | "performance" | "security" | "testing" | "architecture" | "correctness" | "maintainability" | "scalability" | "documentation" | "best-practice";
@@ -285,7 +285,7 @@ export declare const ReviewOutput: z.ZodObject<{
         owasp_category?: string | undefined;
         tags?: string[] | undefined;
     }, {
-        severity: "info" | "high" | "critical" | "medium" | "low";
+        severity: "high" | "info" | "critical" | "medium" | "low";
         title: string;
         description: string;
         category: "other" | "performance" | "security" | "testing" | "architecture" | "correctness" | "maintainability" | "scalability" | "documentation" | "best-practice";
@@ -431,7 +431,7 @@ export declare const ReviewOutput: z.ZodObject<{
     execution_notes: z.ZodOptional<z.ZodNullable<z.ZodString>>;
 }, "strip", z.ZodTypeAny, {
     findings: {
-        severity: "info" | "high" | "critical" | "medium" | "low";
+        severity: "high" | "info" | "critical" | "medium" | "low";
         title: string;
         description: string;
         category: "other" | "performance" | "security" | "testing" | "architecture" | "correctness" | "maintainability" | "scalability" | "documentation" | "best-practice";
@@ -499,7 +499,7 @@ export declare const ReviewOutput: z.ZodObject<{
     execution_notes?: string | null | undefined;
 }, {
     findings: {
-        severity: "info" | "high" | "critical" | "medium" | "low";
+        severity: "high" | "info" | "critical" | "medium" | "low";
         title: string;
         description: string;
         category: "other" | "performance" | "security" | "testing" | "architecture" | "correctness" | "maintainability" | "scalability" | "documentation" | "best-practice";

package/dist/tools/feedback.d.ts

@@ -18,20 +18,20 @@ export declare const ReviewInputSchema: z.ZodObject<{
     workingDir: string;
     ccOutput: string;
     outputType: "findings" | "analysis" | "plan" | "proposal";
+    reasoningEffort?: "high" | "xhigh" | undefined;
+    serviceTier?: "default" | "fast" | "flex" | undefined;
     focusAreas?: ("performance" | "security" | "testing" | "architecture" | "correctness" | "maintainability" | "scalability" | "documentation")[] | undefined;
     analyzedFiles?: string[] | undefined;
     customPrompt?: string | undefined;
-    reasoningEffort?: "high" | "xhigh" | undefined;
-    serviceTier?: "default" | "fast" | "flex" | undefined;
 }, {
     workingDir: string;
     ccOutput: string;
     outputType: "findings" | "analysis" | "plan" | "proposal";
+    reasoningEffort?: "high" | "xhigh" | undefined;
+    serviceTier?: "default" | "fast" | "flex" | undefined;
     focusAreas?: ("performance" | "security" | "testing" | "architecture" | "correctness" | "maintainability" | "scalability" | "documentation")[] | undefined;
     analyzedFiles?: string[] | undefined;
     customPrompt?: string | undefined;
-    reasoningEffort?: "high" | "xhigh" | undefined;
-    serviceTier?: "default" | "fast" | "flex" | undefined;
 }>;
 export type ReviewInput = z.infer<typeof ReviewInputSchema>;
 export declare function handleCodexReview(input: ReviewInput): Promise<{

package/dist/tools/feedback.js

@@ -20,7 +20,7 @@ export const ReviewInputSchema = z.object({
     ])).optional().describe('Areas to focus the review on'),
     customPrompt: z.string().optional().describe('Custom instructions for the reviewer'),
     reasoningEffort: z.enum(['high', 'xhigh']).optional().describe('Codex reasoning effort level (default: high, use xhigh for deeper analysis)'),
-    serviceTier: z.enum(['default', 'fast', 'flex']).optional().describe('Codex service tier (default: default, fast = priority processing, flex = cheaper/slower)')
+    serviceTier: z.enum(['default', 'fast', 'flex']).optional().describe('Codex service tier (default when omitted: fast = priority processing, ~2x cost; flex = 50% cheaper/slower; default = API default tier)')
 });
 // =============================================================================
 // HELPERS
@@ -143,7 +143,7 @@ export const TOOL_DEFINITIONS = {
                 focusAreas: { type: 'array', items: { type: 'string', enum: ['security', 'performance', 'architecture', 'correctness', 'maintainability', 'scalability', 'testing', 'documentation'] }, description: 'Areas to focus the review on' },
                 customPrompt: { type: 'string', description: 'Custom instructions for the reviewer' },
                 reasoningEffort: { type: 'string', enum: ['high', 'xhigh'], description: 'Codex reasoning effort (default: high, use xhigh for deeper analysis)' },
-                serviceTier: { type: 'string', enum: ['default', 'fast', 'flex'], description: 'Codex service tier (fast = priority processing, flex = cheaper/slower)' }
+                serviceTier: { type: 'string', enum: ['default', 'fast', 'flex'], description: 'Codex service tier (omit for fast default; fast = priority ~2x cost, flex = 50% cheaper/slower, default = API default tier)' }
             },
             required: ['workingDir', 'ccOutput', 'outputType']
         }
@@ -192,7 +192,7 @@ export const TOOL_DEFINITIONS = {
                 analyzedFiles: { type: 'array', items: { type: 'string' }, description: 'File paths that CC analyzed' },
                 focusAreas: { type: 'array', items: { type: 'string', enum: ['security', 'performance', 'architecture', 'correctness', 'maintainability', 'scalability', 'testing', 'documentation'] }, description: 'Areas to focus the review on' },
                 customPrompt: { type: 'string', description: 'Custom instructions for standard review + adversarial focus steering' },
-                serviceTier: { type: 'string', enum: ['default', 'fast', 'flex'], description: 'Codex service tier (fast = priority processing, flex = cheaper/slower). Only applies to Codex.' }
+                serviceTier: { type: 'string', enum: ['default', 'fast', 'flex'], description: 'Codex service tier — only applies to Codex. Omit for fast default; fast = priority ~2x cost, flex = 50% cheaper/slower, default = API default tier.' }
             },
             required: ['workingDir', 'ccOutput', 'outputType']
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cc-reviewer",
-  "version": "5.1.1",
+  "version": "5.3.0",
   "description": "MCP server for Claude Code - Get second-opinion feedback from Codex/Gemini CLIs",
   "type": "module",
   "main": "dist/index.js",