code-review-matpocock

Independent MIT plugin for Claude Code and Codex. Version 1.0.1.

Install

Claude Code:

/plugin marketplace add dk-code-factory/code-review-matpocock
/plugin install code-review-matpocock@code-review-matpocock

Codex CLI:

codex plugin marketplace add dk-code-factory/code-review-matpocock
codex plugin add code-review-matpocock@code-review-matpocock

Each repository catalogs only its own plugin. Installing this plugin does not install DK or another reviewer. The organization catalog offers independent selection of all four plugins.

Skills

• code-review-matpocock

Both manifests select their own native skills directory. Instructions and runtime resources remain inside this plugin. No build step, sibling checkout, submodule, or generated host package is required. Use the host's skill selector with the names above; Claude also exposes /PLUGIN:SKILL commands.

Requirements

Python 3.11+ for lifecycle helpers; Git for repository workflows. Authenticate the selected host using its normal login. GitHub workflows also use gh authenticated for the target repository. External reviewers and their tools are optional and needed only when selected. Credentials, state, and caches stay outside the plugin and reviewed repository.

Updates

The self-contained scripts/update.py runs at skill entry and completion. It checks this repository's latest stable GitHub release at most once per 24 hours. Network failures do not block work. Default policy is notify; it reports a newer version once without installing it. auto schedules installation after all active workflows finish, including nested invocations across DK plugins. off skips release checks. Interrupted workflows retain completion tokens; complete them explicitly after their work has stopped. Do not discard active lifecycle records to force an update.

Set script policy with:

python3 PLUGIN_ROOT/scripts/update.py policy --host codex --mode auto
python3 PLUGIN_ROOT/scripts/update.py policy --host claude --plugin code-review-matpocock --mode notify

PLUGIN_ROOT means the installed plugin root. Settings live at ${XDG_CONFIG_HOME:-~/.config}/dk-code-factory/updates.json; checks and lifecycle state live at ${XDG_STATE_HOME:-~/.local/state}/dk-code-factory/updates/. Policy is global with per-plugin overrides. Host registry identity, version, marketplace, pins, and scopes govern installation. Pinned versions, non-main refs, local checkouts, and unregistered plugin directories do not auto-update. The script uses supported host commands and never edits a plugin cache or pulls inside it. It confirms the installed version before reporting success and reports reload requirements or failed updates.

Claude's native marketplace auto-update is separate: enable or disable it in /plugin → Marketplaces. Native updates may require /reload-plugins or a new session. Script off does not disable Claude's own updater. Manual Claude refresh uses claude plugin marketplace update MARKETPLACE then claude plugin update PLUGIN@MARKETPLACE.

Codex manual refresh uses codex plugin marketplace upgrade MARKETPLACE then codex plugin add PLUGIN@MARKETPLACE; start a new session after installation. Script policy does not replace host refresh behavior. Each reviewer updates independently.

Development and releases

Run python3 scripts/check.py and python3 scripts/test.py (development dependencies: pytest and pytest-subtests). Runtime is standard-library Python; the AD inventory helper also uses Node.js. Host manifests must share a semantic version. Use python3 scripts/version.py X.Y.Z before changing skill/runtime behavior on main. CI enforces version bumps on pull requests; a vX.Y.Z tag validates main ancestry, runs checks, and creates the GitHub release. Catalogs consume released main; keep unpublished work on branches.

Owned source provenance is recorded in PROVENANCE.json. No installed system skills, external plugins, credentials, private rules/state, caches, or benchmark results are distributed.