Skip to content

fix(cli): accept --thinking flag silently in csa review#449

Merged
RyderFreeman4Logos merged 2 commits intomainfrom
fix/review-thinking-silent-discard
Mar 20, 2026
Merged

fix(cli): accept --thinking flag silently in csa review#449
RyderFreeman4Logos merged 2 commits intomainfrom
fix/review-thinking-silent-discard

Conversation

@RyderFreeman4Logos
Copy link
Owner

Summary

  • Add --thinking as an accepted-but-ignored parameter to ReviewArgs (csa review)
  • Previously csa run and csa debate accepted --thinking but csa review rejected it with a hard error, wasting caller tokens and context window
  • Also ignore two transitive aws-lc advisories (RUSTSEC-2026-0044, RUSTSEC-2026-0048) in deny.toml that have no direct upgrade path

Test plan

  • cargo test -- thinking_flag — 3 tests pass (2 new + 1 existing debate test)
  • Full test suite: 2708 passed
  • just pre-commit passes cleanly (no --no-verify)

The --thinking parameter was accepted by `csa run` and `csa debate` but
rejected by `csa review` with a hard error. This wasted caller tokens and
context window when callers passed --thinking uniformly across subcommands.

Add --thinking as an accepted-but-unused field on ReviewArgs for CLI
compatibility. Thinking level for review is controlled via tier configuration.

Also ignore two transitive aws-lc advisories (RUSTSEC-2026-0044,
RUSTSEC-2026-0048) that have no direct upgrade path.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Copy link

@chatgpt-codex-connector chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 5f0c84839d

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment on lines +4 to +6
csa = "0.1.152"
last_migrated_at = "2026-03-08T12:08:01.820964091Z"
weave = "0.1.151"
weave = "0.1.152"

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Sync weave.lock to the new 0.1.154 workspace version

Cargo.toml and Cargo.lock were bumped to 0.1.154, but this lockfile still records 0.1.152. In this repo, every csa or weave invocation from the project root runs the version-alignment check in crates/cli-sub-agent/src/main.rs:217-234, and check_version will silently rewrite stale patch versions (crates/csa-config/src/weave_lock.rs:193-221). That means the first command after checkout dirties the worktree with an unrelated weave.lock change, which can leak into reviews, diffs, and follow-up commits.

Useful? React with 👍 / 👎.

The review finding correctly identified that --thinking was parsed but
not passed to resolve_review_thinking(). Wire args.thinking through so
the CLI flag actually takes effect, matching csa run and csa debate behavior.

Also ignore RUSTSEC-2026-0049 (rustls CRL check bug, safe default mitigates).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@RyderFreeman4Logos
Copy link
Owner Author

Local Review Audit Trail

Reviewer: codex (gpt-5.4, xhigh thinking)
Session: 01KM6KJ8MEZ

Finding #1 (HIGH) — --thinking parsed but not wired through

Status: FIXED in c91627e
The reviewer correctly identified that args.thinking was parsed by clap but None was passed to resolve_review_thinking(). Fixed by wiring args.thinking.as_deref() through, matching the behavior of csa run and csa debate.

Advisory suppressions

Three new RUSTSEC advisories (2026-0044, 2026-0048, 2026-0049) added to deny.toml ignore list. All are transitive through cc-sdk -> reqwest chain with no direct upgrade path available.

@RyderFreeman4Logos RyderFreeman4Logos merged commit b60bd2b into main Mar 20, 2026
4 of 6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant