Conversation
|
Claude finished @sjnims's task in 57s —— View job PR Review: fix: correct phase count and add Edit tool to create-plugin commandTasks
Summary✅ Looks good - This PR correctly fixes two bugs in the create-plugin command. Both changes are necessary and well-justified. What's Good
Plugin Component VerificationCommand frontmatter (
Content quality:
Checklist VerificationThe PR correctly addresses:
RecommendationApprove and merge - Both fixes are correct and necessary. The PR is ready to merge. |
The previous rule "MUST use Bash(gh:*) not unrestricted Bash" was too restrictive for workflow/scaffolding commands like create-plugin and create-marketplace that legitimately need filesystem operations (mkdir, git init, directory creation). Changes: - Use correct official Bash pattern syntax (prefix matching with :*) - Allow unrestricted Bash when command purpose justifies it - Provide examples of proper Bash prefix patterns This enables PR #100 to pass validation while maintaining security guidance for simpler commands. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
…101) ## Summary Updates the component validation workflow to use a contextual Bash tool rule instead of a blanket restriction, and corrects the Bash pattern syntax to match official documentation. ## Problem The validation rule at line 99 was: ``` - MUST use `Bash(gh:*)` not unrestricted `Bash` (security requirement) ``` This caused PR #100 to fail validation because `create-plugin.md` uses unrestricted `Bash` - but it **legitimately needs** broader access for: - `mkdir -p` - creating plugin directory structures - `git init` - initializing git repositories - Other filesystem operations Additionally, the syntax `Bash(gh:*)` doesn't match official documentation, which specifies prefix matching with `:*` (e.g., `Bash(gh pr:*)`). ## Solution Updated the validation rule to be contextual: 1. **For simple commands**: Recommend Bash prefix patterns like `Bash(gh pr:*)`, `Bash(npm run:*)` 2. **For workflow/scaffolding commands**: Allow unrestricted `Bash` when the command's purpose justifies filesystem operations 3. **Fixed syntax**: Use correct `:*` wildcard notation per [official docs](https://docs.anthropic.com/en/docs/claude-code/settings#tool-specific-permission-rules) ### Alternatives Considered | Option | Why Not Chosen | |--------|----------------| | Keep blanket restriction | Breaks legitimate workflow commands | | Allowlist specific commands | Doesn't scale, maintenance burden | | Remove rule entirely | Loses security guidance for simple commands | ## Changes - `.github/workflows/component-validation.yml`: Updated Bash validation rule (lines 99-100) ## Testing - [x] actionlint passes - [x] Syntax matches official Claude Code documentation ## Related - Unblocks PR #100 (fix: correct phase count and add Edit tool to create-plugin command) --- 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: Claude <noreply@anthropic.com>
The create-plugin command had two issues: - Line 29 referenced "7 phases" but the command defines 8 phases - Phase 8 requires updating marketplace.json but Edit tool was missing from allowed-tools, preventing file modification Fixes #98 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
fbe872c to
d27eb24
Compare
|
Claude finished @sjnims's task in 1m 9s —— View job PR Review Tasks
Summary✅ Looks good - Approve and merge - This PR correctly fixes two legitimate bugs in the create-plugin command. Both changes are necessary and well-justified. What's Good
Plugin Component VerificationCommand frontmatter (
Content quality:
Specific Change AnalysisChange 1: Line 4 - Added -allowed-tools: ["Read", "Write", "Grep", "Glob", "Bash", "TodoWrite", "AskUserQuestion", "Skill", "Task"]
+allowed-tools: ["Read", "Write", "Edit", "Grep", "Glob", "Bash", "TodoWrite", "AskUserQuestion", "Skill", "Task"]✅ Necessary: Phase 8 (lines 336-351) includes marketplace integration where the command instructs Claude to "Update marketplace.json with new plugin entry". This requires the Change 2: Line 29 - Corrected phase count -1. Create todo list with all 7 phases
+1. Create todo list with all 8 phases✅ Necessary: The workflow defines 8 phases:
Checklist Verification
Recommendation✅ Approve and merge - Both fixes are correct, necessary, and properly implemented. The PR addresses real bugs that would cause issues during plugin creation workflow execution. |
Summary
Fixes two bugs in the
/plugin-dev:create-plugincommand:Edittool toallowed-toolsfrontmatter for marketplace.json updates in Phase 8Problem
Fixes #98
The create-plugin command had inconsistencies:
marketplace.jsonbut theEdittool was missing fromallowed-tools, preventing file modificationSolution
Editto theallowed-toolsarray in frontmatterAlternatives Considered
None - this is a straightforward bug fix with clear expected behavior.
Changes
plugins/plugin-dev/commands/create-plugin.md: Fixed phase count and added Edit toolTesting
🤖 Generated with Claude Code