Independent MIT plugin for Claude Code and Codex. Version 1.0.7.
Claude Code:
/plugin marketplace add dk-code-factory/code-review-ad
/plugin install code-review-ad@code-review-ad
Codex CLI:
codex plugin marketplace add dk-code-factory/code-review-ad
codex plugin add code-review-ad@code-review-adEach repository catalogs only its own plugin. Installing this plugin does not install DK or another reviewer. The organization catalog offers independent selection of all four plugins.
code-review-ad
Both manifests select their own native skills directory. Instructions and runtime resources remain inside this plugin. No build step, sibling checkout, submodule, or generated host package is required. Use the host's skill selector with the names above; Claude also exposes /PLUGIN:SKILL commands.
Python 3.11+ for lifecycle helpers; Git for repository workflows. Authenticate the selected host using its normal login. GitHub workflows also use gh authenticated for the target repository. External reviewers and their tools are optional and needed only when selected. Credentials, state, and caches stay outside the plugin and reviewed repository.
The self-contained scripts/update.py runs at skill entry and completion. It checks this repository's latest stable GitHub release at most once per 24 hours. Network failures do not block work. Default policy is notify; it reports a newer version once without installing it. auto schedules installation after all active workflows finish, including nested invocations across DK plugins. off skips release checks. Interrupted workflows retain completion tokens; complete them explicitly after their work has stopped. Do not discard active lifecycle records to force an update.
Set script policy with:
python3 PLUGIN_ROOT/scripts/update.py policy --host codex --mode auto
python3 PLUGIN_ROOT/scripts/update.py policy --host claude --plugin code-review-ad --mode notifyPLUGIN_ROOT means the installed plugin root. Settings live at ${XDG_CONFIG_HOME:-~/.config}/dk-code-factory/updates.json; checks and lifecycle state live at ${XDG_STATE_HOME:-~/.local/state}/dk-code-factory/updates/. Policy is global with per-plugin overrides. Host registry identity, version, marketplace, pins, and scopes govern installation. Pinned versions, non-main refs, local checkouts, and unregistered plugin directories do not auto-update. The script uses supported host commands and never edits a plugin cache or pulls inside it. It confirms the installed version before reporting success and reports reload requirements or failed updates.
Claude's native marketplace auto-update is separate: enable or disable it in /plugin → Marketplaces. Native updates may require /reload-plugins or a new session. Script off does not disable Claude's own updater. Manual Claude refresh uses claude plugin marketplace update MARKETPLACE then claude plugin update PLUGIN@MARKETPLACE.
Codex manual refresh uses codex plugin marketplace upgrade MARKETPLACE then codex plugin add PLUGIN@MARKETPLACE; start a new session after installation. Script policy does not replace host refresh behavior. Each reviewer updates independently.
Run python3 scripts/check.py and python3 scripts/test.py (development dependencies: pytest and pytest-subtests). Runtime is standard-library Python; the AD inventory helper also uses Node.js. Host manifests must share a semantic version. Use python3 scripts/version.py X.Y.Z before changing skill/runtime behavior on main. CI enforces version bumps on pull requests; a vX.Y.Z tag validates main ancestry, runs checks, and creates the GitHub release. Catalogs consume released main; keep unpublished work on branches.
Owned source provenance is recorded in PROVENANCE.json. No installed system skills, external plugins, credentials, private rules/state, caches, or benchmark results are distributed.
Invoke code-review-ad with a PR number or URL. Review stays in the current host and its native agents; standalone operation requires no DK plugin, Matt Pocock plugin, Qodo, or other review plugin. Git and authenticated gh supply pinned PR evidence. The optional Codex inventory helper uses Node.js; inspect Git objects directly when it is unavailable. Claude's native methodology and Codex's native methodology are retained independently under common/.
Both hosts use shared evidence criteria for runtime/security, test/build, diagnostic, documentation, rule, maintenance, and explicit acceptance findings. Reviews include concrete maintenance risks supported by named duplicated sites, state coupling, API obligations, or a supported failure mode. Reviewers inspect changed files broadly before deep verification and keep omitted or truncated evidence visible as coverage gaps. Ordinary reports remain concise; candidate ledgers are available for requested diagnostics. Directly related pre-existing issues carry explicit scope labels.
Model and reasoning-effort settings are controlled by the host or runner. Neither host skill sets reviewer overrides.
Codex reviewers find issues immediately, then call the read-only driver once for a role-specific deeper-look prompt before returning findings for parent verification. Both looks use the same native agent session and reuse inspected evidence; there are no intermediate observation or finding-collection payloads. Claude retains its current method.