Prepare public launch foundation for v0.1.14

.agents/plugins/marketplace.json

@@ -1,7 +1,7 @@
 {
   "name": "claude-plugin-codex",
   "interface": {
-    "displayName": "Claude Plugin Codex"
+    "displayName": "Claude Code Advisor for Codex"
   },
   "plugins": [
     {

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,92 @@
+name: Bug report
+description: Report a reproducible problem with Claude Code Advisor for Codex
+title: "[Bug]: "
+labels:
+  - bug
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Do not post security vulnerabilities or secrets here. Report vulnerabilities using SECURITY.md. Sanitise every log and attachment.
+  - type: checkboxes
+    id: checks
+    attributes:
+      label: Pre-submission checks
+      options:
+        - label: I searched existing issues for this problem.
+          required: true
+        - label: I tested the latest release and started a new Codex thread or restarted Codex.
+          required: true
+        - label: This report contains no credentials, tokens, cookies, session data, private source code or personal information.
+          required: true
+        - label: This is not a security vulnerability.
+          required: true
+  - type: input
+    id: plugin-version
+    attributes:
+      label: Plugin version
+      placeholder: 0.1.14 or commit SHA
+    validations:
+      required: true
+  - type: input
+    id: environment
+    attributes:
+      label: Environment
+      description: Operating system and architecture
+      placeholder: macOS 15.6, Apple silicon
+    validations:
+      required: true
+  - type: input
+    id: tool-versions
+    attributes:
+      label: Tool versions
+      description: Codex, Claude Code and Node.js versions
+      placeholder: Codex x.y.z, Claude Code x.y.z, Node.js x.y.z
+    validations:
+      required: true
+  - type: textarea
+    id: command
+    attributes:
+      label: Command or action
+      description: Provide the exact command after removing sensitive values.
+      render: text
+    validations:
+      required: true
+  - type: textarea
+    id: reproduction
+    attributes:
+      label: Minimal reproduction
+      description: List the smallest sequence that consistently reproduces the problem.
+      placeholder: |
+        1. Install the plugin...
+        2. Start a new Codex thread...
+        3. Run...
+    validations:
+      required: true
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected behaviour
+    validations:
+      required: true
+  - type: textarea
+    id: actual
+    attributes:
+      label: Observed behaviour
+    validations:
+      required: true
+  - type: textarea
+    id: diagnostics
+    attributes:
+      label: Sanitised diagnostics
+      description: Include only the smallest relevant output. Remove secrets, private paths, private prompts, private source and personal information.
+      render: text
+    validations:
+      required: false
+  - type: textarea
+    id: context
+    attributes:
+      label: Additional context
+      description: Add other relevant, non-sensitive details or sanitised screenshots.
+    validations:
+      required: false

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,56 @@
+name: Feature request
+description: Propose a focused improvement to Claude Code Advisor for Codex
+title: "[Feature]: "
+labels:
+  - enhancement
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Describe the user problem before the implementation. Do not include credentials, private source code or other sensitive material.
+  - type: checkboxes
+    id: checks
+    attributes:
+      label: Pre-submission checks
+      options:
+        - label: I searched existing issues and pull requests for this proposal.
+          required: true
+        - label: This proposal is within the plugin's Codex and local Claude Code integration scope.
+          required: true
+        - label: This request contains no credentials, tokens, private source code or personal information.
+          required: true
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem
+      description: What is difficult or impossible today, and who is affected?
+    validations:
+      required: true
+  - type: textarea
+    id: outcome
+    attributes:
+      label: Desired outcome
+      description: Describe the observable result rather than only a proposed implementation.
+    validations:
+      required: true
+  - type: textarea
+    id: approach
+    attributes:
+      label: Suggested approach
+      description: Optional implementation ideas and trade-offs.
+    validations:
+      required: false
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives considered
+      description: Existing commands, workarounds or simpler alternatives you tried.
+    validations:
+      required: false
+  - type: textarea
+    id: context
+    attributes:
+      label: Additional context
+      description: Add relevant, non-sensitive examples or links.
+    validations:
+      required: false

.github/pull_request_template.md

@@ -0,0 +1,23 @@
+## Summary
+
+Describe the problem, the approach and any user-visible effect.
+
+## Related issue
+
+Link the issue or explain why one is not needed.
+
+## Validation
+
+- [ ] I ran `npm run validate`.
+- [ ] I ran `npm run test:smoke`, or the change does not affect Claude CLI invocation, runtime behaviour or installation instructions.
+- [ ] I ran `npm run test:e2e:codex`, or the change does not affect Codex routing, skill instructions or public installation.
+- [ ] I added or updated tests for behaviour changes.
+
+List relevant results and explain any check that could not be run.
+
+## Safety and release checks
+
+- [ ] This change contains no credentials, tokens, cookies, private prompts, private source code, personal information or unsanitised diagnostics.
+- [ ] I preserved the MIT licence and original Yanchuk attribution.
+- [ ] Public copy does not imply affiliation with or endorsement by Anthropic or OpenAI.
+- [ ] New dependencies, permissions and write-capable behaviour are documented and justified, or none were added.

CHANGELOG.md

@@ -0,0 +1,28 @@
+# Changelog
+
+All notable public changes to Claude Code Advisor for Codex are recorded here.
+
+## 0.1.14 - 2026-08-18
+
+- clarify the community-maintained product name and non-affiliation statement
+- add direct CLI installation, update and removal instructions
+- add compatibility status and beta exit criteria
+- add public privacy, terms, security, support and contribution documentation
+- add issue templates, pull request guidance and launch visual assets
+- publish a concise command reference for users
+
+## 0.1.13 - 2026-08-17
+
+First release from the Bold New Media maintained fork.
+
+- harden structured review extraction and validation
+- include complete staged and base review diffs and reject unsafe untracked-file
+  reviews
+- improve background lifecycle monitoring, cancellation and result recovery
+- isolate inherited MCP configuration for unattended work by default
+- restrict local state directory and file permissions
+- add sandbox-safe end-to-end Codex routing coverage
+- verify deterministic tests and metadata on Node.js 20, 22 and 24
+
+See the [v0.1.13 release](https://github.com/BoldNewMedia/claude-plugin-codex/releases/tag/v0.1.13)
+for the published tag.

CODE_OF_CONDUCT.md

@@ -0,0 +1,29 @@
+# Code of conduct
+
+## Expected behaviour
+
+Participate constructively and professionally. Focus criticism on evidence,
+ideas and changes. Respect differences in experience, identity, background and
+viewpoint. Accept correction and take responsibility for mistakes.
+
+## Unacceptable behaviour
+
+Harassment, discrimination, threats, personal attacks, sexualised attention,
+doxxing, deliberate intimidation and sustained disruption are not accepted.
+Do not publish another person's private information or credentials.
+
+## Scope
+
+This code applies in the repository and in public spaces when a person is
+representing the project or its community.
+
+## Reporting and enforcement
+
+Report conduct concerns privately to the maintainers where possible. If no
+private contact route is available, open a public issue requesting private
+contact without describing the incident or identifying the people involved.
+
+Maintainers may remove or edit contributions and may temporarily or permanently
+restrict participation when behaviour is unsafe, abusive or persistently
+disruptive. Reports will be handled as confidentially as practical and assessed
+without regard to a contributor's role or status.

CONTRIBUTING.md

@@ -0,0 +1,59 @@
+# Contributing
+
+Contributions that improve reliability, safety, documentation and compatibility
+are welcome.
+
+## Before starting
+
+- Search existing issues and pull requests.
+- Open an issue before a substantial change so the scope can be agreed first.
+- Keep changes focused. Separate unrelated fixes.
+- Do not include credentials, tokens, private prompts, private source code or
+  personal information in issues, tests, fixtures or commits.
+- Report security vulnerabilities using [SECURITY.md](SECURITY.md), not a
+  public issue.
+
+## Development
+
+Requirements:
+
+- Node.js 18.18 or newer
+- Codex with plugin marketplace support for end-to-end testing
+- a locally installed and authenticated Claude Code CLI for smoke testing
+
+Run the standard validation before submitting a pull request:
+
+```bash
+npm run validate
+```
+
+If the change affects Claude CLI invocation, runtime behaviour or installation
+instructions, also run:
+
+```bash
+npm run test:smoke
+```
+
+If the change affects Codex routing, skill instructions or public installation,
+also run:
+
+```bash
+npm run test:e2e:codex
+```
+
+State which checks you ran and explain any check you could not run. Sanitise all
+diagnostic output before sharing it.
+
+## Pull requests
+
+- Link the relevant issue where one exists.
+- Explain the problem, the chosen approach and user-visible effects.
+- Add or update tests for behaviour changes.
+- Preserve the MIT licence and original Yanchuk attribution.
+- Keep public copy clear that this is an unofficial community project, not an
+  Anthropic or OpenAI product.
+- Avoid adding dependencies unless their benefit justifies the maintenance and
+  security cost.
+
+By contributing, you agree that your contribution is licensed under the
+project's [MIT licence](LICENSE).

PRIVACY.md

@@ -0,0 +1,81 @@
+# Privacy policy
+
+Effective 18 August 2026
+
+This policy applies to Claude Code Advisor for Codex, maintained by Bold New
+Media. The plugin is an unofficial community project and is not affiliated with
+OpenAI or Anthropic.
+
+## Summary
+
+The plugin runs locally. Bold New Media does not operate a hosted service for
+the plugin, receive plugin prompts or results, collect analytics, or receive
+Claude Code credentials.
+
+## Data the plugin handles
+
+When you invoke the plugin, it may handle:
+
+- the task prompt and options you provide
+- local file content, Git diffs, file paths and repository metadata needed for
+  the requested review or task
+- Claude Code output and command status
+- local job metadata, including job identifiers, timestamps, workspace paths
+  and saved results
+
+The exact content depends on the command and permissions you approve.
+
+## Purpose and processing
+
+The plugin uses this information only to run the requested Claude Code task,
+validate or display its result, and manage foreground or background job state.
+
+The plugin invokes the official Claude Code CLI installed and authenticated on
+your machine. Content supplied to Claude Code is processed under your Anthropic
+account and Anthropic's applicable terms and privacy policy. Your Codex host may
+also process conversation and tool-call content under your OpenAI agreement.
+
+Bold New Media is not a recipient of this content through the plugin.
+
+## Credentials
+
+The plugin does not request, copy or store your Claude Code password, token or
+session credentials. Authentication remains controlled by the installed Claude
+Code CLI.
+
+## Local storage and retention
+
+Job metadata and results are stored locally under
+`~/.codex/claude-plugin-codex` unless you set
+`CLAUDE_COMPANION_STATE_ROOT`. Stored content remains until it is overwritten
+or you remove it. Removing the plugin does not necessarily remove this separate
+state directory.
+
+You control retention by choosing the state root and deleting saved state when
+no plugin job is running. Treat the state directory as private because it can
+contain prompts, results and local workspace paths.
+
+## Telemetry and tracking
+
+The plugin does not intentionally phone home, serve advertising, set tracking
+cookies or collect usage analytics for Bold New Media.
+
+GitHub may collect ordinary repository traffic when you visit or download the
+public repository under GitHub's own policies.
+
+## Your controls
+
+You can:
+
+- omit `--write` to keep supported task routes read-only
+- omit `--allow-web` and `--allow-mcp` to keep those optional capabilities off
+- inspect the source code and local state
+- choose a separate local state root
+- cancel managed jobs and remove saved local state
+- uninstall the plugin at any time
+
+## Changes and contact
+
+Material changes will be recorded in the repository. For privacy or support
+questions, follow [SUPPORT.md](SUPPORT.md). Do not post credentials, private
+source code or personal information in a public GitHub issue.