[codex] add record and replay baseline

.editorconfig

@@ -0,0 +1,15 @@
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+insert_final_newline = true
+trim_trailing_whitespace = true
+indent_style = space
+indent_size = 2
+
+[*.swift]
+indent_size = 4
+
+[Makefile]
+indent_style = tab

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,27 @@
+name: Bug report
+description: Report a reproducible problem in open-computer-use.
+title: "[Bug]: "
+labels:
+  - bug
+body:
+  - type: textarea
+    id: summary
+    attributes:
+      label: Summary
+      description: What went wrong?
+    validations:
+      required: true
+  - type: textarea
+    id: steps
+    attributes:
+      label: Reproduction
+      description: List the smallest steps or command that reproduces the problem.
+    validations:
+      required: true
+  - type: textarea
+    id: environment
+    attributes:
+      label: Environment
+      description: Include OS, open-computer-use version, and relevant agent/client.
+    validations:
+      required: true

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,5 @@
+blank_issues_enabled: true
+contact_links:
+  - name: Discussions
+    url: https://github.com/iFurySt/open-codex-computer-use/discussions
+    about: Ask usage questions or discuss ideas that are not ready as issues.

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,27 @@
+name: Feature request
+description: Propose a new capability or compatibility improvement.
+title: "[Feature]: "
+labels:
+  - enhancement
+body:
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem
+      description: What workflow or compatibility gap should this solve?
+    validations:
+      required: true
+  - type: textarea
+    id: proposal
+    attributes:
+      label: Proposal
+      description: Describe the behavior you want.
+    validations:
+      required: true
+  - type: textarea
+    id: validation
+    attributes:
+      label: Validation
+      description: How should we verify this works?
+    validations:
+      required: false

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,12 @@
+## Summary
+
+-
+
+## Validation
+
+- [ ] `make check-docs`
+- [ ] `make ci`
+
+## Notes
+
+-

.github/dependency-review-config.yml

@@ -0,0 +1,7 @@
+fail-on-severity: high
+allow-licenses:
+  - MIT
+  - Apache-2.0
+  - BSD-2-Clause
+  - BSD-3-Clause
+  - ISC

.github/workflows/ci.yml

@@ -0,0 +1,32 @@
+name: ci
+
+on:
+  pull_request:
+  push:
+    branches:
+      - main
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  ci:
+    runs-on: macos-26
+
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd
+
+      - name: Set up Node.js
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
+        with:
+          node-version: "24"
+
+      - name: Set up Go
+        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c
+        with:
+          go-version: "1.22.x"
+
+      - name: Run repository CI
+        run: ./scripts/ci.sh

.github/workflows/docs-check.yml

@@ -0,0 +1,26 @@
+name: docs-check
+
+on:
+  pull_request:
+    paths:
+      - "AGENTS.md"
+      - "docs/**"
+      - "README.md"
+      - "CONTRIBUTING.md"
+      - "scripts/check-docs.sh"
+      - ".github/workflows/docs-check.yml"
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  docs-check:
+    runs-on: macos-26
+
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd
+
+      - name: Run docs check
+        run: ./scripts/check-docs.sh

.github/workflows/repo-hygiene.yml

@@ -0,0 +1,32 @@
+name: repo-hygiene
+
+on:
+  pull_request:
+    paths:
+      - ".github/**"
+      - ".gitattributes"
+      - ".gitignore"
+      - ".editorconfig"
+      - "CODEOWNERS"
+      - "CONTRIBUTING.md"
+      - "README.md"
+      - "SECURITY.md"
+      - "scripts/check-action-pinning.sh"
+      - "scripts/check-repo-hygiene.sh"
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  repo-hygiene:
+    runs-on: macos-26
+
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd
+
+      - name: Run repo hygiene checks
+        run: |
+          ./scripts/check-repo-hygiene.sh
+          ./scripts/check-action-pinning.sh

.github/workflows/supply-chain-security.yml

@@ -0,0 +1,42 @@
+name: supply-chain-security
+
+on:
+  pull_request:
+    paths:
+      - ".github/workflows/**"
+      - "package.json"
+      - "package-lock.json"
+      - "Package.swift"
+      - "apps/**/go.mod"
+      - "apps/**/go.sum"
+      - "scripts/check-action-pinning.sh"
+      - ".github/dependency-review-config.yml"
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  pull-requests: read
+
+jobs:
+  action-pinning:
+    runs-on: macos-26
+
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd
+
+      - name: Check GitHub Action pinning
+        run: ./scripts/check-action-pinning.sh
+
+  dependency-review:
+    if: ${{ github.event_name == 'pull_request' }}
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd
+
+      - name: Dependency review
+        uses: actions/dependency-review-action@da24556b548a50705dd671f47852072ea4c105d9
+        with:
+          config-file: .github/dependency-review-config.yml

.markdownlint.json

@@ -0,0 +1,4 @@
+{
+  "MD013": false,
+  "MD033": false
+}

CONTRIBUTING.md

@@ -12,6 +12,7 @@
 ## 发起 Pull Request 之前
 
 - 运行 `make check-docs`。
+- 如果本次改动涉及代码、脚本或仓库流程，运行 `make ci`。
 - 如果本次改动涉及代码或仓库流程，补齐或更新对应 history。
 - 如果变更对用户可感知，补齐 release note。
 - 确认示例、脚本、说明文档和当前实现一致。