Add in-app issue reporting funnel and canonical repo URLs

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,12 @@
+blank_issues_enabled: false
+
+contact_links:
+  - name: Questions & Answers
+    url: https://github.com/nesszer/Win-CodexBar/discussions
+    about: Ask usage questions, share tips, and discuss Win-CodexBar with other users.
+  - name: Configuration docs
+    url: https://github.com/nesszer/Win-CodexBar/blob/main/docs/CONFIGURATION.md
+    about: Configuration questions are best answered by the docs first.
+  - name: Cookies and browser docs
+    url: https://github.com/nesszer/Win-CodexBar/blob/main/docs/COOKIES.md
+    about: Browser cookie import questions are covered in the cookies docs.

README.md

@@ -33,7 +33,7 @@ Install with Windows Package Manager:
 winget install Finesssee.Win-CodexBar
 ```
 
-Or download the latest installer/portable build from [GitHub Releases](https://github.com/Finesssee/Win-CodexBar/releases).
+Or download the latest installer/portable build from [GitHub Releases](https://github.com/nesszer/Win-CodexBar/releases).
 
 - Installer: `CodexBar-<version>-Setup.exe`
 - Portable: `CodexBar-<version>-portable.exe`
@@ -135,7 +135,7 @@ The UI and contributor reporting currently support:
 
 ```powershell
 # Prerequisites: Node.js + pnpm. Rust and MinGW are installed by the script when needed.
-git clone https://github.com/Finesssee/Win-CodexBar.git
+git clone https://github.com/nesszer/Win-CodexBar.git
 cd Win-CodexBar
 .\scripts\dev.ps1
 ```

SECURITY.md

@@ -0,0 +1,21 @@
+# Security policy
+
+## Supported versions
+
+Only the latest release of Win-CodexBar is supported. Security fixes are made
+against the current release line; older releases and the historical upstream
+macOS project are not patched.
+
+## Reporting a vulnerability
+
+Please use GitHub's private vulnerability reporting: open the
+[Security tab](https://github.com/nesszer/Win-CodexBar/security) and click
+"Report a vulnerability".
+
+Do **not** open a public GitHub issue for a vulnerability. Public issues and
+the bug report template are for non-security problems only.
+
+Win-CodexBar handles provider cookies, OAuth tokens, and API keys locally, so
+reports touching that surface — credential extraction, storage, redaction, or
+leakage — are taken seriously. Please keep report details private and do not
+paste secrets, cookies, or tokens into any report.

SUPPORT.md

@@ -0,0 +1,24 @@
+# Support
+
+## Bug reports
+
+Use the [bug report template](https://github.com/nesszer/Win-CodexBar/issues/new?template=bug_report.yml).
+If you have safe diagnostics from the CLI, attach them:
+`codexbar diagnose` exports provider diagnostics as JSON with no cookies or
+tokens.
+
+## Questions and discussions
+
+Ask in [Discussions](https://github.com/nesszer/Win-CodexBar/discussions).
+
+## Docs
+
+Configuration, CLI, cookies, providers, and privacy docs live in
+[`docs/`](docs): ARCHITECTURE, BUILDING, CLI, CODE_SIGNING, CONFIGURATION,
+COOKIES, PRIVACY, PROVIDERS, WINDOWS_PROOF, WSL, and the ADRs under
+[`docs/adr/`](docs/adr).
+
+Feature requests use the
+[feature request template](https://github.com/nesszer/Win-CodexBar/issues/new?template=feature_request.yml).
+Security vulnerabilities go through the
+[Security tab](SECURITY.md), not public issues.

apps/desktop-tauri/src-tauri/src/commands/diagnostics.rs

@@ -1,5 +1,53 @@
-// `get_safe_diagnostics` (the only Tauri command this module exposed) was
-// removed as orphaned dead code — the frontend wrappers that invoked it were
-// deleted, leaving zero invokers. Its `SafeDiagnostics` payload + the
-// `safe_diagnostics_from` builder + the secret-redaction test existed solely
-// to support that command and were removed with it.
+//! `get_safe_diagnostics` — a copy-friendly, secret-free diagnostics string
+//! for bug reports. Contains only: app version/build, OS, update channel,
+//! the log file's config-relative path, and the redacted log tail. The log
+//! path is trimmed to its segments below the user profile so no username is
+//! embedded, and the tail is redacted for both secrets and email addresses.
+//! Never includes provider names, plans, account info, cookies, or tokens.
+
+use super::*;
+
+/// Last segments of `path` below the user profile (never the profile itself).
+fn config_relative_path(path: &std::path::Path) -> String {
+    let segments: Vec<std::ffi::OsString> =
+        path.iter().map(std::borrow::ToOwned::to_owned).collect();
+    let tail: Vec<String> = segments
+        .iter()
+        .rev()
+        .take(3)
+        .rev()
+        .map(|s| s.to_string_lossy().to_string())
+        .collect();
+    if tail.len() == 3 {
+        tail.join("/")
+    } else {
+        "unresolvable".to_string()
+    }
+}
+
+#[tauri::command]
+pub fn get_safe_diagnostics() -> String {
+    let settings = Settings::load();
+    let log_dir = codexbar::logging::log_file_path()
+        .map(|p| config_relative_path(&p))
+        .unwrap_or_else(|| "unresolvable".to_string());
+    let log_tail =
+        codexbar::logging::read_log_tail().unwrap_or_else(|| "log file unavailable".to_string());
+
+    format!(
+        "CodexBar diagnostics\n\
+         -------------------\n\
+         version: {} (build {})\n\
+         os: {}\n\
+         channel: {}\n\
+         log file: {}\n\
+         --- last log lines (redacted) ---\n\
+         {}",
+        env!("CARGO_PKG_VERSION"),
+        option_env!("BUILD_NUMBER").unwrap_or("dev"),
+        std::env::consts::OS,
+        update_channel_label(settings.update_channel),
+        log_dir,
+        log_tail,
+    )
+}

apps/desktop-tauri/src-tauri/src/commands/mod.rs

@@ -36,6 +36,7 @@ mod codex_accounts;
 mod codex_workspaces;
 mod credential_detection;
 mod credentials;
+mod diagnostics;
 mod locale_cmd;
 mod provider_detail;
 mod provider_settings;
@@ -52,6 +53,7 @@ pub use codex_accounts::*;
 pub use codex_workspaces::*;
 pub use credential_detection::*;
 pub use credentials::*;
+pub use diagnostics::*;
 pub use locale_cmd::*;
 pub use provider_detail::*;
 pub use provider_settings::*;

apps/desktop-tauri/src-tauri/src/main.rs

@@ -110,6 +110,11 @@ fn should_suppress_blur_dismiss(launch: LaunchBehavior, proof_mode: bool) -> boo
 }
 
 fn main() {
+    // Per-process log file names: the shell writes codexbar-desktop.log so
+    // its cached handle never blocks the CLI's rotation on Windows.
+    // SAFETY: runs before any thread spawns; no concurrent env access exists.
+    unsafe { std::env::set_var("CODEXBAR_PROCESS", "desktop") };
+    codexbar::logging::install_panic_hook();
     codexbar::logging::init(false, false).expect("failed to initialize logging");
 
     let proof_config = proof_harness::ProofConfig::from_env();
@@ -200,6 +205,7 @@ fn main() {
             commands::remove_token_account,
             commands::set_active_token_account,
             commands::get_app_info,
+            commands::get_safe_diagnostics,
             commands::get_provider_chart_data,
             commands::get_provider_local_usage_summary,
             commands::get_usage_spend_summary,

apps/desktop-tauri/src/i18n/keys.ts

@@ -764,6 +764,10 @@ export const ALL_LOCALE_KEYS = [
   "AboutLinkGitHub",
   "AboutLinkWebsite",
   "AboutLinkOriginalProject",
+  "DiagnosticsSectionHeading",
+  "DiagnosticsCopyButton",
+  "DiagnosticsCopied",
+  "DiagnosticsCopyFailed",
 
   // Tauri desktop shell — Cookies tab hints / placeholder
   "SavedCookiesHint",

apps/desktop-tauri/src/lib/tauri.ts

@@ -528,3 +528,7 @@ export function codexAccountRestartDesktop(
 export function getCodexAccountsState(): Promise<CodexAccountsStateBridge> {
   return invoke<CodexAccountsStateBridge>("get_codex_accounts_state");
 }
+
+export function getSafeDiagnostics(): Promise<string> {
+  return invoke<string>("get_safe_diagnostics");
+}

apps/desktop-tauri/src/surfaces/settings/tabs/AboutTab.test.tsx

@@ -122,10 +122,11 @@ describe("AboutTab", () => {
     fireEvent.click(await screen.findByRole("button", { name: "AboutLinkGitHub" }));
     fireEvent.click(screen.getByRole("button", { name: "AboutLinkWebsite" }));
     fireEvent.click(screen.getByRole("button", { name: "AboutLinkOriginalProject" }));
+    fireEvent.click(screen.getByRole("button", { name: "SubmitIssue" }));
 
     expect(tauriMocks.openExternalUrl).toHaveBeenNthCalledWith(
       1,
-      "https://github.com/Finesssee/Win-CodexBar",
+      "https://github.com/nesszer/Win-CodexBar",
     );
     expect(tauriMocks.openExternalUrl).toHaveBeenNthCalledWith(
       2,
@@ -135,6 +136,10 @@ describe("AboutTab", () => {
       3,
       "https://github.com/steipete/CodexBar",
     );
+    expect(tauriMocks.openExternalUrl).toHaveBeenNthCalledWith(
+      4,
+      "https://github.com/nesszer/Win-CodexBar/issues/new?labels=bug&template=bug_report.yml",
+    );
   });
 
   it("shows a link error if the OS browser launch fails", async () => {

apps/desktop-tauri/src/surfaces/settings/tabs/AboutTab.tsx

@@ -8,10 +8,13 @@ import type { LocaleKey } from "../../../i18n/keys";
 import type { TabProps } from "../settingsTabs";
 import codexbarIcon from "../../../assets/codexbar-icon.png";
 
+const REPO_URL = "https://github.com/nesszer/Win-CodexBar";
+const SUBMIT_ISSUE_URL = `${REPO_URL}/issues/new?labels=bug&template=bug_report.yml`;
+
 const ABOUT_LINKS: ReadonlyArray<{ labelKey: LocaleKey; url: string }> = [
   {
     labelKey: "AboutLinkGitHub",
-    url: "https://github.com/Finesssee/Win-CodexBar",
+    url: REPO_URL,
   },
   {
     labelKey: "AboutLinkWebsite",
@@ -90,6 +93,13 @@ export default function AboutTab({ settings, set, saving }: TabProps) {
           </button>
         ))}
       </div>
+      <button
+        type="button"
+        className="about-link"
+        onClick={() => openAboutLink(SUBMIT_ISSUE_URL)}
+      >
+        {t("SubmitIssue")}
+      </button>
       {linkError && (
         <p className="about-update-msg">
           {t("ErrorPrefix")} {linkError}

apps/desktop-tauri/src/surfaces/settings/tabs/AdvancedTab.test.tsx

@@ -0,0 +1,126 @@
+import { fireEvent, render, screen, waitFor } from "@testing-library/react";
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+const tauriMocks = vi.hoisted(() => ({
+  getSafeDiagnostics: vi.fn(),
+  registerGlobalShortcut: vi.fn().mockResolvedValue(undefined),
+  unregisterGlobalShortcut: vi.fn().mockResolvedValue(undefined),
+}));
+
+vi.mock("../../../lib/tauri", () => tauriMocks);
+vi.mock("../../../hooks/useLocale", () => ({
+  useLocale: () => ({ t: (key: string) => key }),
+}));
+
+import AdvancedTab from "./AdvancedTab";
+import type { SettingsSnapshot } from "../../../types/bridge";
+
+const settings: SettingsSnapshot = {
+  enabledProviders: [],
+  refreshIntervalSecs: 300,
+  adaptiveRefresh: false,
+  refreshAllProvidersOnMenuOpen: false,
+  lowPowerMode: false,
+  startAtLogin: false,
+  startMinimized: false,
+  showNotifications: true,
+  soundEnabled: true,
+  notificationSoundTheme: "windows",
+  highUsageThreshold: 70,
+  criticalUsageThreshold: 90,
+  predictivePaceWarningEnabled: false,
+  trayIconMode: "single",
+  switcherShowsIcons: true,
+  menuBarShowsHighestUsage: true,
+  menuBarShowsPercent: true,
+  showAsUsed: false,
+  showAllTokenAccountsInMenu: true,
+  enableAnimations: true,
+  resetTimeRelative: true,
+  showResetWhenExhausted: false,
+  menuBarDisplayMode: "compact",
+  notificationSoundPaths: {
+    predictiveWarning: null,
+    highUsage: null,
+    criticalUsage: null,
+    exhausted: null,
+    statusIssue: null,
+    sessionDepleted: null,
+    sessionRestored: null,
+  },
+  hidePersonalInfo: false,
+  autoDownloadUpdates: false,
+  installUpdatesOnQuit: false,
+  globalShortcut: "",
+  codexCustomSessionsDirs: [],
+  updateChannel: "stable",
+  uiLanguage: "english",
+  theme: "dark",
+  windowScalePercent: 125,
+  trayScalePercent: 100,
+  powertoysStatusPipeEnabled: false,
+  claudeAvoidKeychainPrompts: true,
+  codexSparkUsageVisible: true,
+  disableKeychainAccess: false,
+  providerMetrics: {},
+  floatBarEnabled: false,
+  floatBarOpacity: 0.9,
+  floatBarScale: 100,
+  floatBarOrientation: "horizontal",
+  floatBarStyle: "floating",
+  floatBarClickThrough: false,
+  floatBarProviderIds: [],
+  floatBarDarkText: false,
+  floatBarShowResetInline: false,
+  floatBarShowCost: false,
+  claudeDailyRoutinesUsageVisible: true,
+  claudeAllowReadingClaudeCodeCredentials: false,
+  alibabaTokenPlanRegion: "cn",
+  weeklyProgressWorkDays: null,
+  costSummaryDisplayStyle: "compact",
+  providerAccentColors: {},
+};
+
+describe("AdvancedTab", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+    tauriMocks.getSafeDiagnostics.mockResolvedValue("diagnostics text");
+  });
+
+  it("copies safe diagnostics to the clipboard", async () => {
+    const writeText = vi.fn().mockResolvedValue(undefined);
+    Object.assign(navigator, { clipboard: { writeText } });
+
+    render(<AdvancedTab settings={settings} set={vi.fn()} saving={false} />);
+
+    screen.getByRole("heading", { name: "DiagnosticsSectionHeading" });
+    fireEvent.click(
+      screen.getByRole("button", { name: "DiagnosticsCopyButton" }),
+    );
+
+    await waitFor(() => {
+      expect(tauriMocks.getSafeDiagnostics).toHaveBeenCalled();
+    });
+    await waitFor(() => {
+      expect(writeText).toHaveBeenCalledWith("diagnostics text");
+    });
+    await waitFor(() => {
+      expect(screen.getAllByText("DiagnosticsCopied").length).toBeGreaterThan(0);
+    });
+  });
+
+  it("shows an error when copying diagnostics fails", async () => {
+    tauriMocks.getSafeDiagnostics.mockRejectedValue(new Error("invoke failed"));
+    render(<AdvancedTab settings={settings} set={vi.fn()} saving={false} />);
+
+    screen.getByRole("heading", { name: "DiagnosticsSectionHeading" });
+    fireEvent.click(
+      screen.getByRole("button", { name: "DiagnosticsCopyButton" }),
+    );
+    await waitFor(() => {
+      expect(
+        screen.getAllByText(/DiagnosticsCopyFailed/).length,
+      ).toBeGreaterThan(0);
+    });
+  });
+});