Add Anchor plugin (Community / Development & Workflow)#144
Conversation
Anchor is a cross-CLI (Claude Code + Codex CLI) engineering-discipline pack that bundles a skill, 11 slash commands, and 4 safety hooks. Highlights: - task-scope anchoring on the user's exact phrasing - anti-drift braking when the model tries to go out of scope - optional autonomous mode (Stop hook keeps the model going while tasks remain) - end-to-end verification gate (refuses to declare done before a real E2E) - multi-pass vulnerability scanning + condition-based codex review on big diffs - pitfall writeback to the project's CLAUDE.md - PreToolUse hook blocking irreversible bash patterns (hard-reset, force-push, schema-level drops, mkfs, dd-to-device, recursive-777, curl-pipe-bash) with a shell-aware segment + safe-list parser so echo/grep literals don't false-trip Bundle: - plugins/biefan/anchor/.codex-plugin/plugin.json (name, version 1.3.1, license MIT, interface.composerIcon, keywords) - plugins/biefan/anchor/assets/icon.svg (711 bytes, 512x512) - plugins/biefan/anchor/LICENSE (MIT) - plugins/biefan/anchor/README.md (points at the full repo) README entry inserted alphabetically between AgentOps and Antigravity. Upstream: https://github.com/biefan/anchor Release: https://github.com/biefan/anchor/releases/tag/v1.3.1 License: MIT CI: green (shellcheck + jsonlint + install.sh smoke test)
| @@ -0,0 +1,29 @@ | |||
| { | |||
| "name": "anchor", | |||
| "version": "1.3.2", | |||
There was a problem hiding this comment.
CRITICAL: Version mismatch — plugin.json declares "version": "1.3.2", but plugins/biefan/anchor/README.md line 6 states Release tag: v1.3.1. These must match.
| @@ -0,0 +1,37 @@ | |||
| # Anchor | |||
|
|
|||
| Engineering discipline pack for Claude Code & Codex CLI: a skill + 11 slash commands + 4 safety hooks that keep AI on-task on long tasks, enforce E2E verification, multi-pass vulnerability scanning, condition-based codex review, and project-CLAUDE.md pitfall writeback. | |||
There was a problem hiding this comment.
CRITICAL: Contradictory slash-command counts — this line describes "a skill + 11 slash commands", but line 19 below states the install script copies "the skill + 7 commands". Either the count or the underlying description is wrong.
| @@ -0,0 +1,37 @@ | |||
| # Anchor | |||
|
|
|||
| Engineering discipline pack for Claude Code & Codex CLI: a skill + 11 slash commands + 4 safety hooks that keep AI on-task on long tasks, enforce E2E verification, multi-pass vulnerability scanning, condition-based codex review, and project-CLAUDE.md pitfall writeback. | |||
There was a problem hiding this comment.
CRITICAL: Stray closing bold marker at end of first paragraph — one voice.** has two ** closures on a single span. Remove the extra ** or apply bold markup correctly.
Code Review SummaryStatus: 3 Issues Found | Recommendation: Address before merge Overview
Issue Details (click to expand)CRITICAL
Other Observations (not in diff)
Files Reviewed (5 files)
Reviewed by step-3.5-flash · 191,566 tokens |
There was a problem hiding this comment.
Code Review
This pull request adds the 'Anchor' plugin, an engineering discipline pack for Claude Code and Codex CLI, including its manifest, documentation, and assets. The review identifies that the skills field is missing from the plugin manifest and suggests updating the link in the main README to point to the local directory for consistency with other plugins.
| }, | ||
| "homepage": "https://github.com/biefan/anchor", | ||
| "repository": "https://github.com/biefan/anchor", | ||
| "license": "MIT", |
There was a problem hiding this comment.
The skills field is missing from the manifest. According to the "Plugin Anatomy" section in the root README.md (line 233), the skills path is a required field. For the plugin to be functional when installed via the Codex marketplace, this field must be present and point to the skill definitions (e.g., a ./skills directory containing SKILL.md).
"license": "MIT",
"skills": "./skills",| - [Aegis](https://github.com/GanyuanRan/Aegis) - An agentic skills framework & software development methodology that works: planning, TDD, debugging, and collaboration workflows. | ||
| - [Agentizer](https://github.com/Humiris/wwa-transform) - Turn any website into an AI-powered agentfront with split-pane | ||
| - [AgentOps](https://github.com/boshu2/agentops) - DevOps layer for coding agents with flow, feedback, and memory that compounds between sessions. | ||
| - [Anchor](https://github.com/biefan/anchor) - Engineering discipline pack for Claude Code & Codex CLI with task-scope locking, anti-drift braking, condition-based codex review, project-CLAUDE.md pitfall writeback, and PreToolUse hooks that block irreversible bash patterns. |
There was a problem hiding this comment.
The link for "Anchor" points to the external repository. Since a local plugin bundle has been provided in plugins/biefan/anchor/, the link should point to the local directory to remain consistent with other mirrored plugins (e.g., "Changelog Forge") and to ensure the local metadata and icon are used by the marketplace.
| - [Anchor](https://github.com/biefan/anchor) - Engineering discipline pack for Claude Code & Codex CLI with task-scope locking, anti-drift braking, condition-based codex review, project-CLAUDE.md pitfall writeback, and PreToolUse hooks that block irreversible bash patterns. | |
| - [Anchor](./plugins/biefan/anchor) - Engineering discipline pack for Claude Code & Codex CLI with task-scope locking, anti-drift braking, condition-based codex review, project-CLAUDE.md pitfall writeback, and PreToolUse hooks that block irreversible bash patterns. |
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 58d0173ef1
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| Engineering discipline pack for Claude Code & Codex CLI: a skill + 11 slash commands + 4 safety hooks that keep AI on-task on long tasks, enforce E2E verification, multi-pass vulnerability scanning, condition-based codex review, and project-CLAUDE.md pitfall writeback. | ||
|
|
||
| - **Upstream repo**: https://github.com/biefan/anchor | ||
| - **Release tag**: v1.3.1 |
There was a problem hiding this comment.
Align README release tag with bundled plugin version
The bundle metadata advertises version 1.3.2 in .codex-plugin/plugin.json, but this README still states v1.3.1 as the release tag (and later references release notes through v1.3.1). That inconsistency makes it unclear which upstream release this mirror corresponds to and can mislead maintainers/users when validating or reproducing installs.
Useful? React with 👍 / 👎.
| - [Aegis](https://github.com/GanyuanRan/Aegis) - An agentic skills framework & software development methodology that works: planning, TDD, debugging, and collaboration workflows. | ||
| - [Agentizer](https://github.com/Humiris/wwa-transform) - Turn any website into an AI-powered agentfront with split-pane | ||
| - [AgentOps](https://github.com/boshu2/agentops) - DevOps layer for coding agents with flow, feedback, and memory that compounds between sessions. | ||
| - [Anchor](https://github.com/biefan/anchor) - Engineering discipline pack for Claude Code & Codex CLI with task-scope locking, anti-drift braking, condition-based codex review, project-CLAUDE.md pitfall writeback, and PreToolUse hooks that block irreversible bash patterns. |
There was a problem hiding this comment.
Regenerate marketplace artifacts after adding README plugin entry
This commit adds Anchor to README.md but does not update plugins.json or .agents/plugins/marketplace.json, so the new plugin will not appear in the curated marketplace metadata consumed by local installs and legacy tooling. The repository’s own contribution/CI flow expects these artifacts to stay in sync with README changes, so this addition is incomplete until the generated files are refreshed.
Useful? React with 👍 / 👎.
What this adds
Anchor under Community / Development & Workflow. Alphabetical insertion between AgentOps and Antigravity Workspace Template.
719cef6)What Anchor is
A cross-CLI engineering-discipline pack for Claude Code and Codex CLI. One
SKILL.mdworks for both runtimes (follows the agentskills.io standard).SKILL.md— 7 core rules: clarify intent, task-scope locking, read project contracts, smallest-correct-diff, parallelize agents, condition-based codex review, pitfall writeback./ec /lock /pit /scan /done /next /recap /init-claude-md /status /ship /diff /cleanupSessionStartinjects project state;Stopblocks "stop" in autonomous mode while tasks remain;PreToolUseblocks irreversible bash patterns;PostToolUseruns the language-appropriate linter after Edit/Write.Optional autonomous mode (toggle file
~/.claude/.efficient-coding-autonomous) makes the Stop hook block until the task list is fully cleared — useful for "do this whole thing, don't stop" sessions.Bundle structure (matches CONTRIBUTING.md)
The bundle is a mirror entry; the full repo (hooks/, scripts/, references/, evals/, CI, install.sh) lives at https://github.com/biefan/anchor and is the source of truth.
Validation
shellcheckon every.sh,jsonlinton every.json, install-smoke runs./install.shon a clean Ubuntu container, verifies file landing, then runs./uninstall.shand verifies cleanup).evals/stress/grade.py). The agent correctly used the hypothesis-verify protocol, wrote both required pitfall entries to project-levelCLAUDE.mdin the 4-field template, and made the right fixes without sneaking in "improvements".evals/run.py) are also archived underevals/results/in the upstream.PR Checklist
plugins/biefan/anchor/.codex-plugin/plugin.jsonexists and is valid JSON (python3 -m json.tool)composerIconis set inplugin.jsoninterface section (./assets/icon.svg)composerIcon(711 bytes, 512x512)plugin.jsonHappy to adjust the description / category / icon if maintainers want changes.