Bundle codex-mcp-server into second-opinion plugin (#95)

Add .mcp.json to auto-start the codex-mcp-server when the plugin is
installed, providing codex_ask, codex_exec, and codex_review MCP tools.
The MCP tool descriptions are self-documenting — no separate skill
docs needed. Bump version to 1.5.0.

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: dguido

.claude-plugin/marketplace.json

@@ -245,8 +245,8 @@
     },
     {
       "name": "second-opinion",
-      "version": "1.4.0",
-      "description": "Runs code reviews using external LLM CLIs (OpenAI Codex, Google Gemini) on uncommitted changes, branch diffs, or specific commits",
+      "version": "1.5.0",
+      "description": "Runs code reviews using external LLM CLIs (OpenAI Codex, Google Gemini) on uncommitted changes, branch diffs, or specific commits. Bundles codex-mcp-server for direct MCP tool access to Codex.",
       "author": {
         "name": "Dan Guido"
       },

.gitignore

@@ -31,3 +31,5 @@ build/
 
 # MCP server config (contains API keys)
 .mcp.json
+# Allow plugin-bundled MCP configs (no secrets, just uvx commands)
+!plugins/**/.mcp.json

README.md

@@ -86,7 +86,7 @@ cd /path/to/parent  # e.g., if repo is at ~/projects/skills, be in ~/projects
 | [gh-cli](plugins/gh-cli/) | Intercept GitHub URL fetches and redirect to the authenticated `gh` CLI |
 | [git-cleanup](plugins/git-cleanup/) | Safely clean up git worktrees and local branches with gated confirmation workflow |
 | [modern-python](plugins/modern-python/) | Modern Python tooling and best practices with uv, ruff, and pytest |
-| [second-opinion](plugins/second-opinion/) | Run code reviews using external LLM CLIs (OpenAI Codex, Google Gemini) on changes, diffs, or commits |
+| [second-opinion](plugins/second-opinion/) | Run code reviews using external LLM CLIs (OpenAI Codex, Google Gemini) on changes, diffs, or commits. Bundles codex-mcp-server. |
 | [workflow-skill-design](plugins/workflow-skill-design/) | Design patterns for workflow-based Claude Code skills with review agent |
 
 ### Team Management

plugins/second-opinion/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "second-opinion",
-  "version": "1.4.0",
-  "description": "Runs code reviews using external LLM CLIs (OpenAI Codex, Google Gemini) on uncommitted changes, branch diffs, or specific commits",
+  "version": "1.5.0",
+  "description": "Runs code reviews using external LLM CLIs (OpenAI Codex, Google Gemini) on uncommitted changes, branch diffs, or specific commits. Bundles codex-mcp-server for direct MCP tool access to Codex.",
   "author": {
     "name": "Dan Guido"
   }

plugins/second-opinion/.mcp.json

@@ -0,0 +1,8 @@
+{
+  "mcpServers": {
+    "codex-mcp-server": {
+      "command": "uvx",
+      "args": ["codex-mcp-server"]
+    }
+  }
+}

plugins/second-opinion/README.md

@@ -47,3 +47,13 @@ Inline arguments pre-fill the scope and focus, skipping redundant questions.
 ## How It Works
 
 Shells out to `codex review` and/or `gemini` CLI with high-capability model configurations. When both tools are selected (the default), runs Codex first then Gemini, presenting results side by side for comparison.
+
+## Codex MCP Tools
+
+This plugin bundles a [codex-mcp-server](https://github.com/trailofbits/codex-mcp) that auto-starts when the plugin is installed, providing three MCP tools:
+
+- **codex_ask** — ask Codex a question inline, swapping in an OpenAI model mid-session
+- **codex_exec** — send a raw prompt to Codex with full control over the input
+- **codex_review** — review a git diff for bugs, security issues, and correctness
+
+These tools work independently of the `/second-opinion` slash command. Use them when you want direct, programmatic access to Codex without the interactive prompt workflow.