Repo inspection: initial health check

[Hanjo92]

Tracking Codex repository inspection requested on 2026-06-05.\n\nScope:\n- Inspect repository metadata and structure\n- Check install/test/build workflow\n- Note actionable risks or follow-ups\n\nThis issue can be closed after the inspection summary is reviewed.

[Hanjo92]

Inspection complete.\n\nVerified on 2026-06-05:\n- Repository metadata is populated: public, MIT, topics cli/codex/goal-mode/planning/developer-tools.\n- Latest release/tag: v0.2.0.\n- Open PRs: none.\n- npm test passed: 5/5.\n- npm run smoke passed.\n- npm run example and npm run example:release passed.\n- npm pack --dry-run passed; tarball includes LICENSE, README.md, package.json, src/index.js.\n\nActionable follow-ups found:\n1. Passing a file to --repo-path crashes with ENOTDIR instead of a friendly CLI error.\n2. Options that require values can consume the next flag, e.g. --objective --output json treats --output as the objective.\n3. The npm package excludes docs/, but README links to docs/output-contract.md.\n4. docs/spec.md appears partially stale versus the current implemented CLI.\n5. No GitHub Actions workflow, PR/issue templates, CHANGELOG, CONTRIBUTING, SECURITY, or lockfile are present.\n\nNo repository files were modified by this inspection.

[Hanjo92]

Implemented the inspection follow-ups locally in the Codex workspace.\n\nChanges made:\n- Added CLI regression tests for missing option values and invalid --repo-path inputs.\n- Fixed option parsing so required values cannot consume the next flag.\n- Added friendly --repo-path validation for missing/non-directory paths.\n- Included docs/ in package.json published files so README-linked docs are present in npm tarballs.\n- Updated docs/spec.md to match the current deterministic CLI behavior.\n- Added GitHub Actions CI, issue templates, PR template, CHANGELOG, CONTRIBUTING, SECURITY, and package-lock.json.\n\nVerification run:\n- npm ci: passed\n- npm test: 7/7 passed\n- npm run smoke: passed\n- npm pack --dry-run: passed and includes docs/output-contract.md + docs/spec.md\n- Manual edge checks: missing --objective value exits 1 with a concise error; file-valued --repo-path exits 1 with a concise error.\n\nNo commit or push has been made yet.

[Hanjo92]

Published follow-up work.\n\n- Branch: codex/fix-repo-inspection-followups\n- Commit: 9059014 fix CLI validation and repo hygiene\n- Draft PR: https://github.com/Hanjo92/codex-goal-parser/pull/8\n\nVerification before commit/push:\n- npm ci\n- npm test\n- npm run smoke\n- npm pack --dry-run

[Hanjo92]

Follow-up publish update.\n\nAfter opening PR #8, the first CI run failed because the npm test script used a shell glob that GitHub Actions passed to Node literally. Added a second commit to make the test script portable.\n\nLatest branch state:\n- Branch: codex/fix-repo-inspection-followups\n- Commits: 9059014, 49f24af\n- Draft PR: https://github.com/Hanjo92/codex-goal-parser/pull/8\n- Latest CI: Node 18 passed, Node 20 passed\n\nLocal verification after the CI script fix:\n- npm ci\n- npm test\n- npm run smoke\n- npm pack --dry-run

[Hanjo92]

Global skill setup complete after PR #8 merge.\n\nVerified repository state:\n- main is at merge commit b47d7dc\n- local checkout is clean and aligned with origin/main\n- no native SKILL.md or skills/ package exists in the repo, so a global Codex skill was created from the repo contents\n\nInstalled global skill:\n- /Users/song/.codex/skills/codex-goal-parser/SKILL.md\n- bundled CLI: scripts/codex-goal-parser.js\n- references: output-contract.md, codex-goal-decompose.md\n\nValidation:\n- bundled CLI produced valid JSON contract output\n- missing --objective value exits 1 with concise error\n- bundled CLI matches repository src/index.js at install time\n- output contract reference matches repository docs/output-contract.md