Prepare SourceBraid 1.0.1 Chrome and ChatGPT release

[patrickschiller]

Prepare SourceBraid 1.0.1 for Chrome, the local Codex plugin, and a separate hosted ChatGPT connector. The hosted Worker exposes read-only archive tools through OAuth/PKCE; the local plugin retains its local indexing and confirmed archive operations.

The change hardens capture and archive path boundaries, adds explicit first-capture consent and token-free configuration export, and introduces deterministic allowlisted release packages, synthetic reviewer fixtures, store assets, and release CI. English and German documentation describe the separate installation and submission paths. The hosted service is prepared but has not been deployed or submitted.

Privacy and permission effects:

• Chrome removes the downloads permission and uses explicit HTTP, HTTPS, and file host patterns. GitHub writes are restricted to the extension popup, and capture requires consent.
• The hosted connector uses GitHub GET requests and a separate repository-scoped read-only token. OAuth grant credentials are encrypted in Cloudflare KV; requested Markdown is processed transiently.
• Local cache namespaces include branch and archive root. Cleanup is restricted to the selected clip's assets; deletion planning checks all metadata shards.
• Package allowlists exclude the private website, real user archives, local configuration, credentials, caches, and Git history. HANDOFF.md is intentionally excluded.

Validation:

• Capture tests: 23 passed.
• Python tests: 63 passed.
• MCP tests: 33 passed, including the Worker integration test with mocked GitHub responses. Miniflare required permission to open a local loopback port.
• Wrangler deployment dry run passed; nothing was deployed.
• Reproducible release bundle build and verification passed from the committed inputs with --require-clean.
• All 60 changed files were checked against the tested snapshot; public-file boundaries, credentials, and synthetic store graphics were reviewed.
• Live Chrome/PDF and ChatGPT acceptance, production deployment, store review, and iOS build are not claimed by these checks.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-27T21:01:21.961795Z	631b175	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 631b175b97

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Avoid silently building the index from search

When a user runs search without an existing index, this branch now downloads the repository snapshot and constructs the full SQLite index before returning results. That contradicts the bundled search workflow in codex-plugin/sourcebraid/skills/sourcebraid-search/SKILL.md:35-38, which requires exposing the missing index and running index build explicitly rather than hiding the potentially expensive first build inside a search. Restore the missing-index behavior or update the command/workflow contract so users knowingly initiate the full download.

Useful? React with 👍 / 👎.