Package Side Refresh for Codex

[andydrewie]

Summary

• harden task resolution, read-only inspection, minimum disclosure, and relay confirmation boundaries
• package side-refresh as an Agent Plugins 1.0 skill with a generated Codex compatibility bridge
• add dependency-free validation and GitHub Actions coverage

Activation and safety

• explicit invocation only through $side-refresh
• requires Codex app task-list and task-read capabilities
• never navigates to, interrupts, or mutates the main task
• treats task content and tool output as untrusted evidence
• redacts credentials, tokens, personal data, and other secrets
• sends a relay immediately only when the user supplied quoted or otherwise explicitly verbatim wording

Release

• protected tag: codex-plugin-v1.0.0
• immutable commit: 5a33f214bdb2e13adbd1f4d8db4e78878e1a7317
• tag deletion and non-fast-forward updates are blocked by repository ruleset
• indexed by draft PR andydrewie/codex-skills#3

Validation

• python3 scripts/validate_package.py
• root and mirrored Codex skill validation
• generated legacy overlay check
• Codex Skills catalog local-package and remote-fetch validation