docs: polish marketplace copy and onboarding

Author: bitfalt

.claude-plugin/marketplace.json

@@ -1,17 +1,17 @@
 {
   "$schema": "https://anthropic.com/claude-code/marketplace.schema.json",
   "name": "code-sensei",
-  "version": "1.0.0",
-  "description": "Learn to code while you vibecode. Free, open-source AI mentor by Dojo Coding — contextual explanations, quizzes, and belt progression built into every Claude Code session.",
+  "version": "1.1.0",
+  "description": "In-context coding tutor for Claude Code. Learn from your real project with explanations, quizzes, diagnostics, and belt-based progression — locally and privately.",
   "owner": {
     "name": "Dojo Coding",
     "email": "team@dojocoding.io"
   },
   "plugins": [
     {
       "name": "code-sensei",
-      "description": "AI coding mentor that teaches programming while you vibecode. Contextual explanations, micro-quizzes, and a martial arts belt progression system — from White Belt to Black Belt. Adapts to your skill level and professional background.",
-      "version": "1.0.0",
+      "description": "In-context coding tutor for Claude Code. Explains what AI just built, quizzes you on your own project, and tracks progress locally with a martial arts belt progression system.",
+      "version": "1.1.0",
       "author": {
         "name": "Dojo Coding",
         "email": "team@dojocoding.io"
@@ -34,7 +34,10 @@
         "beginner",
         "tutorial",
         "gamification",
-        "code-learning"
+        "code-learning",
+        "coding-tutor",
+        "developer-education",
+        "privacy-first"
       ]
     }
   ]

.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "code-sensei",
-  "version": "1.0.0",
-  "description": "Learn to code while you vibecode. Free, open-source AI mentor by Dojo Coding — contextual explanations, quizzes, and belt progression built into every Claude Code session.",
+  "version": "1.1.0",
+  "description": "In-context coding tutor for Claude Code. Learn from your real project with explanations, quizzes, diagnostics, and belt-based progression — locally and privately.",
   "author": {
     "name": "Dojo Coding",
     "url": "https://dojocoding.io"
@@ -25,6 +25,9 @@
     "tutorial",
     "gamification",
     "code-learning",
+    "coding-tutor",
+    "developer-education",
+    "privacy-first",
     "code-sensei",
     "dojo-coding"
   ]

CHANGELOG.md

@@ -0,0 +1,18 @@
+# Changelog
+
+All notable changes to CodeSensei will be documented in this file.
+
+## 1.1.0
+
+- Added `/code-sensei:doctor` for setup verification and local storage inspection
+- Added deterministic profile import script with preview/apply workflow
+- Hardened command logging with secret redaction
+- Added retention caps for local session logs
+- Improved marketplace-facing README and privacy documentation
+- Tightened concept tracking alignment and launch validation
+
+## 1.0.0
+
+- Initial public release of CodeSensei
+- Hook-based contextual teaching for Claude Code
+- Belt progression, quiz bank, and persistent local profile

CONTRIBUTING.md

@@ -55,10 +55,20 @@ claude
 # Install
 /plugin install code-sensei
 
-# Test your changes
+# Verify local setup
+/code-sensei:doctor
+
+# Test key commands
+/code-sensei:progress
 /code-sensei:explain
 /code-sensei:quiz
-/code-sensei:progress
+/code-sensei:export
+```
+
+### Validate Before You Open a PR
+```bash
+shellcheck -S error scripts/*.sh scripts/lib/*.sh
+bash tests/test-hooks.sh
 ```
 
 ### What We Need Help With
@@ -70,9 +80,10 @@ claude
 
 ### PR Guidelines
 1. Keep it focused — one feature or fix per PR
-2. Test with Claude Code locally before submitting
-3. Update quiz-bank.json if adding new concepts
-4. Follow the existing tone: encouraging, simple, analogy-first
+2. Run the validation commands above before submitting
+3. Test with Claude Code locally before submitting
+4. Update `quiz-bank.json` if adding new concepts
+5. Follow the existing tone: encouraging, simple, analogy-first
 
 ## Code of Conduct
 

PRIVACY.md

@@ -0,0 +1,120 @@
+# CodeSensei Privacy & Local Storage
+
+CodeSensei is designed to be local-first.
+
+This document explains what the plugin stores on disk, what it does not do, and how retention works.
+
+## What CodeSensei stores locally
+
+By default, CodeSensei writes data under:
+
+```text
+~/.code-sensei/
+```
+
+### `profile.json`
+Your persistent learning profile, including:
+- belt
+- XP
+- streak data
+- quiz counters
+- quiz history
+- concepts seen
+- concepts mastered
+- preferences
+- achievement metadata
+
+### `profile.json.backup`
+A backup of the previous profile created before import overwrites it.
+
+### `session-commands.jsonl`
+A recent local history of shell commands used for contextual teaching.
+
+Stored fields:
+- timestamp
+- redacted/truncated command string
+- concept classification
+
+Important:
+- CodeSensei redacts common secret patterns before logging
+- Commands are truncated before storage
+- This file is capped to the most recent 1000 lines
+
+### `session-changes.jsonl`
+A recent local history of file-change events.
+
+Stored fields:
+- timestamp
+- tool name
+- file path
+- extension
+- detected tech label
+- tracked concept identifier
+
+This file is capped to the most recent 1000 lines.
+
+### `sessions.log`
+A compact session start/stop log used for streaks and session summaries.
+
+This file is capped to the most recent 500 lines.
+
+### `pending-lessons/`
+Structured teaching moments queued during the active session.
+
+This queue is cleared at session end after archival.
+
+### `lessons-archive/`
+Archived teaching moments from past sessions.
+
+Retention:
+- keeps the last 30 daily archive files
+
+### `error.log`
+Local plugin script errors for troubleshooting.
+
+## What CodeSensei does not do
+
+The shell scripts in this repository do not:
+- upload your code
+- send telemetry
+- send your profile to Dojo Coding
+- call external tracking APIs
+
+## Redaction behavior
+
+CodeSensei attempts to redact common sensitive patterns before writing commands to local logs, including values that look like:
+- `*_TOKEN`
+- `*_SECRET`
+- `*_PASSWORD`
+- `*_API_KEY`
+- `Authorization: Bearer ...`
+- credential-bearing URLs like `https://user:pass@example.com`
+
+This redaction is heuristic, not a cryptographic guarantee.
+
+If you run especially sensitive commands and want zero retention, you should clear `~/.code-sensei/` afterwards.
+
+## How to inspect your local footprint
+
+Run:
+
+```bash
+/code-sensei:doctor
+```
+
+That command reports:
+- setup health
+- profile status
+- storage paths
+- pending lesson count
+- next-step suggestions
+
+## How to reset everything
+
+Delete the local directory:
+
+```bash
+rm -rf ~/.code-sensei
+```
+
+That removes your local profile, logs, backups, pending lessons, and archives.