v0.4.0-beta.2

Easier onboarding

• Refined the English and Simplified Chinese first-run path, Quick Start, provider evidence, and project boundaries.
• Makes it clearer that Codex remains the main agent while reviewed provider workers handle only bounded text, code, research synthesis, and local validation tasks.

Read-only pre-install Doctor

• Adds npm run doctor -- --provider <deepseek|minimax|qwen> with PASS, WARN, and BLOCKED results for the local environment, selected provider/model, installation state, permissions, fallback availability, and verify prerequisites.
• Doctor is read-only: it does not modify Codex configuration, install files, call provider APIs, or print credential values.

Structured issue intake

• Adds GitHub Issue Forms for reproducible bug reports, provider compatibility evaluation, and scoped feature requests.
• Keeps provider requests separate from supported or runtime-verified status and directs sensitive security reports to the private process in SECURITY.md.

Security and privacy safeguards

• Issue Forms explicitly prohibit API keys, credentials, private task text, private filesystem paths, and sensitive data.
• Existing Keychain-only credentials, owner-only bridge permissions, atomic redacted archives, and dry-run-by-default write controls remain unchanged.
• No API keys or private configuration are included in this release.

Engineering baseline

• 50/50 automated tests pass locally and in GitHub Actions on macOS with Node.js 20.
• Coverage now includes Doctor read-only behavior, private-path redaction, Issue Form requirements, and repository metadata alignment.

Runtime verification boundaries

• No provider runtime claims were expanded.
• runtimeVerified remains false where live verification has not been performed.
• DeepSeek public-installer runtime verification and real-user acceptance remain pending.