Merge branch 'dev' into preview

Author: lidge-jun

.github/CODEOWNERS

@@ -0,0 +1,18 @@
+# Default reviewers
+* @lidge-jun @Ingwannu
+
+# Repository automation and release security
+/.github/ @lidge-jun @Ingwannu
+/scripts/release.ts @lidge-jun @Ingwannu
+/package.json @lidge-jun @Ingwannu
+/bun.lock @lidge-jun @Ingwannu
+
+# Authentication, credentials, and management API
+/src/oauth/ @lidge-jun @Ingwannu
+/src/codex/auth-context.ts @lidge-jun @Ingwannu
+/src/server/auth-cors.ts @lidge-jun @Ingwannu
+/src/server/management-api.ts @lidge-jun @Ingwannu
+
+# Governance and security policy
+/MAINTAINERS.md @lidge-jun @Ingwannu
+/SECURITY.md @lidge-jun @Ingwannu

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -1,76 +1,111 @@
 name: Bug report
-description: Report a reproducible defect in the proxy, CLI, dashboard, docs, or packaging.
-title: "[Bug]: "
+description: Report a defect in the proxy, CLI, dashboard, provider adapter, or packaging.
 labels:
   - bug
 body:
   - type: markdown
     attributes:
       value: |
-        Thanks for the report. Please include a minimal reproduction and the exact environment details.
+        Thanks for the report. Include a minimal reproduction and exact environment details so we can confirm and fix the problem quickly.
+
+  - type: dropdown
+    id: client
+    attributes:
+      label: Client or integration
+      description: Which client or surface did you observe the problem in?
+      options:
+        - Codex CLI
+        - Codex App
+        - Codex SDK
+        - Claude Code
+        - Direct HTTP/API client
+        - OpenCodex dashboard
+        - Other
+    validations:
+      required: true
+
+  - type: dropdown
+    id: area
+    attributes:
+      label: Area
+      description: Which part of OpenCodex is affected?
+      options:
+        - CLI
+        - Proxy and routing
+        - Dashboard
+        - Provider adapter
+        - Authentication and account pool
+        - Installation or packaging
+        - Service lifecycle
+        - Documentation
+        - Other
+    validations:
+      required: true
 
   - type: textarea
     id: summary
     attributes:
       label: Summary
       description: What happened, and what did you expect instead?
-      placeholder: A clear and concise description of the bug.
+      placeholder: The proxy returns 502 when ...; I expected ...
     validations:
       required: true
 
   - type: textarea
     id: reproduction
     attributes:
       label: Reproduction
-      description: List the exact steps, commands, and config shape needed to reproduce the problem.
+      description: |
+        Exact commands, steps, configuration shape, and inputs. If the problem is intermittent or not yet consistently reproducible, explain what you have observed and under which conditions.
       placeholder: |
-        1. Run `ocx init`
-        2. Start the proxy with ...
-        3. Open ...
-        4. Observe ...
+        1. ocx start --port 10100
+        2. Send a request to /v1/responses with ...
+        3. Observe ...
     validations:
       required: true
 
-  - type: textarea
-    id: logs
+  - type: input
+    id: version
     attributes:
-      label: Logs and screenshots
-      description: Paste relevant logs, stack traces, request IDs, or screenshots.
-      render: shell
+      label: Version
+      description: Installed `@bitkyc08/opencodex` version or commit SHA.
+      placeholder: "2.7.31"
+    validations:
+      required: true
 
-  - type: dropdown
-    id: area
+  - type: input
+    id: os
     attributes:
-      label: Area
-      options:
-        - CLI
-        - Proxy runtime
-        - GUI dashboard
-        - Docs
-        - Packaging or install
-        - Provider adapter
-        - Other
+      label: Operating system
+      description: OS name and version.
+      placeholder: Windows 11 24H2, macOS 15.5, Ubuntu 24.04
     validations:
       required: true
 
   - type: input
-    id: version
+    id: provider-model
     attributes:
-      label: Version
-      description: The installed `@bitkyc08/opencodex` version or commit SHA.
-      placeholder: 2.7.7
+      label: Provider and model
+      description: Required only when the problem is provider-specific.
+      placeholder: "anthropic / claude-sonnet-4-20250514"
 
-  - type: input
-    id: os
+  - type: textarea
+    id: logs
+    attributes:
+      label: Logs or error output
+      description: Paste relevant logs, stack traces, or request IDs.
+      render: shell
+
+  - type: textarea
+    id: attachments
     attributes:
-      label: OS
-      description: Operating system and version.
-      placeholder: Windows 11, macOS 15, Ubuntu 24.04
+      label: Screenshots and supporting files
+      description: Drag screenshots, videos, logs, or minimal reproduction archives here.
 
   - type: textarea
     id: config
     attributes:
-      label: Config shape
+      label: Redacted configuration
       description: Share a redacted config snippet if the bug depends on provider or routing setup.
       render: json
 
@@ -79,7 +114,7 @@ body:
     attributes:
       label: Checks
       options:
-        - label: I searched existing issues and docs first.
+        - label: I searched existing issues and documentation.
           required: true
-        - label: I removed secrets, tokens, and personal data from logs and screenshots.
+        - label: I removed secrets, tokens, account details, request credentials, and personal data.
           required: true

.github/ISSUE_TEMPLATE/config.yml

@@ -1,4 +1,4 @@
-blank_issues_enabled: true
+blank_issues_enabled: false
 contact_links:
   - name: Security policy
     url: https://github.com/lidge-jun/opencodex/blob/main/SECURITY.md

.github/ISSUE_TEMPLATE/documentation.yml

@@ -0,0 +1,71 @@
+name: Documentation
+description: Report missing, incorrect, outdated, or confusing documentation, broken examples, or broken links.
+labels:
+  - documentation
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Help us keep the documentation accurate and useful. Point to the exact location and describe what needs to change.
+
+  - type: dropdown
+    id: problem-type
+    attributes:
+      label: Documentation problem type
+      options:
+        - Missing documentation
+        - Incorrect documentation
+        - Outdated documentation
+        - Confusing documentation
+        - Broken example or command
+        - Broken link
+        - Other
+    validations:
+      required: true
+
+  - type: input
+    id: location
+    attributes:
+      label: Documentation location
+      description: Public documentation URL or repository path.
+      placeholder: "https://lidge-jun.github.io/opencodex/providers/ or docs/providers.md"
+    validations:
+      required: true
+
+  - type: textarea
+    id: problem
+    attributes:
+      label: What is wrong or missing?
+      description: Describe the gap, error, or confusion.
+    validations:
+      required: true
+
+  - type: textarea
+    id: expected
+    attributes:
+      label: What should the documentation explain instead?
+      description: Describe the correct or complete information.
+    validations:
+      required: true
+
+  - type: textarea
+    id: suggestion
+    attributes:
+      label: Suggested wording or example
+      description: Optional draft text, corrected command, or example.
+
+  - type: textarea
+    id: context
+    attributes:
+      label: Additional context or attachments
+      description: Related issues, screenshots, or references.
+
+  - type: checkboxes
+    id: checks
+    attributes:
+      label: Checks
+      options:
+        - label: I searched existing documentation issues.
+          required: true
+        - label: No secrets or personal information are included.
+          required: true

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -1,34 +1,92 @@
-name: Feature request
-description: Propose a new capability or workflow improvement.
-title: "[Feature]: "
+name: Feature proposal
+description: Propose a new capability or workflow improvement for OpenCodex.
 labels:
   - enhancement
 body:
+  - type: markdown
+    attributes:
+      value: |
+        Describe the workflow you need and what OpenCodex should do. Concrete examples help us evaluate and implement your proposal faster.
+
+  - type: dropdown
+    id: area
+    attributes:
+      label: Area
+      description: Which part of OpenCodex does this proposal affect?
+      options:
+        - CLI
+        - Proxy and routing
+        - Dashboard
+        - Provider adapters
+        - Authentication and account pool
+        - Installation or packaging
+        - Service lifecycle
+        - Documentation
+        - Multiple areas
+        - Other
+    validations:
+      required: true
+
+  - type: textarea
+    id: goal
+    attributes:
+      label: What are you trying to accomplish?
+      description: Describe the user workflow or outcome you need.
+      placeholder: I need to route requests from ... so that ...
+    validations:
+      required: true
+
   - type: textarea
-    id: problem
+    id: blocker
     attributes:
-      label: Problem to solve
-      description: What workflow or limitation are you trying to improve?
-      placeholder: I want opencodex to ...
+      label: What prevents this today?
+      description: What is the current limitation, missing capability, or inefficient workaround?
+      placeholder: Currently the proxy does not support ...
     validations:
       required: true
 
   - type: textarea
-    id: proposal
+    id: behaviour
     attributes:
-      label: Proposed solution
-      description: Describe the behavior you want, including any CLI, GUI, or config surface.
+      label: What should OpenCodex do?
+      description: Describe the observable behaviour you expect, not internal implementation details.
+      placeholder: When I send ... the proxy should ...
+    validations:
+      required: true
+
+  - type: textarea
+    id: example
+    attributes:
+      label: Example usage or interface
+      description: |
+        Provide at least one concrete example: a CLI command, configuration fragment, API exchange, UI workflow, or before/after comparison.
+      placeholder: |
+        ```bash
+        ocx config set routing.fallback_provider anthropic
+        ```
     validations:
       required: true
 
   - type: textarea
     id: alternatives
     attributes:
-      label: Alternatives considered
-      description: What workarounds or competing approaches did you try?
+      label: Alternatives or workarounds
+      description: What workarounds or competing approaches have you tried or considered?
 
   - type: textarea
     id: context
     attributes:
       label: Additional context
-      description: Link docs, screenshots, example configs, or upstream APIs if helpful.
+      description: Related issues, upstream specifications, screenshots, or design references.
+
+  - type: checkboxes
+    id: checks
+    attributes:
+      label: Checks
+      options:
+        - label: I searched existing issues and documentation.
+          required: true
+        - label: This request describes a concrete OpenCodex workflow rather than merely naming a desired technology.
+          required: true
+        - label: I removed secrets and personal data.
+          required: true