Auto review gate doesn't work

[dinhphieu]

Constantly getting

Stop hook (blocked)
feedback: The stop-time Claude Code review failed. Run $cc:review --wait manually or bypass the gate.

[km-tr]

I'm seeing a similar failure mode on Codex as well.

In my case, the companion state write failed with:

EPERM: operation not permitted, open '/Users/kmtr/.codex/plugins/data/cc/state/...'

Adding /Users/kmtr/.codex/plugins/data/cc to [sandbox_workspace_write].writable_roots looks necessary, but the currently running Codex session did not pick it up until restart.

[mychaelconnolly]

I opened draft PR #57 with a narrow stop-gate hardening fix:

#57

The stop gate was still using Bash(git ...) allowlist entries even though the standard review path already avoids Bash because Claude CLI does not strictly enforce Bash subpatterns. The PR routes stop-time review through the bundled read-only git MCP server with strict MCP config, matching the safer review/adversarial-review path.

It intentionally keeps the existing gate policy unchanged: Claude review failures still block, and setup-not-ready still skips.

[sf-jin-ku]

Resolved and released in v1.3.0 via PR #75. The root cause was the mismatch between Codex’s marketplace-qualified PLUGIN_DATA namespace (cc-sendbird) and the plugin’s legacy cc path. v1.3.0 derives the installed marketplace identity, migrates legacy cc/claude-code state, repairs and verifies writable roots safely, checks actual state access, and cleans the grants on uninstall. A public npm/marketplace install smoke test confirmed state is written under plugins/data/cc-sendbird. Release: https://github.com/sendbird/cc-plugin-codex/releases/tag/v1.3.0