codex-plugin-doctor 1.10.0 → 1.11.0

package/README.md

@@ -358,9 +358,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v5
-      - uses: Esquetta/CodexPluginDoctor@v1.10.0
+      - uses: Esquetta/CodexPluginDoctor@v1.11.0
         with:
-          version: "1.10.0"
+          version: "1.11.0"
           path: .
           runtime: "true"
           policy: codex-publish

package/dist/core/review-bundle.js

@@ -46,6 +46,10 @@ function relativeBundleFiles() {
         releaseEvidenceJson: "release-evidence.json"
     };
 }
+function isPathInsideDirectory(candidatePath, directoryPath) {
+    const relativePath = path.relative(directoryPath, candidatePath);
+    return relativePath === "" || (!relativePath.startsWith("..") && !path.isAbsolute(relativePath));
+}
 function bundleStatus(runtimePolicy, releaseEvidence) {
     if (runtimePolicy.status === "fail" || releaseEvidence.status === "fail") {
         return "fail";
@@ -344,7 +348,16 @@ export async function verifyDoctorReviewBundle(bundleDirectory, options) {
     const files = manifest?.files ?? relativeBundleFiles();
     for (const [fileKey, relativePath] of Object.entries(files)) {
         try {
-            const fileStat = await stat(path.join(resolvedBundleDirectory, relativePath));
+            const artifactPath = path.resolve(resolvedBundleDirectory, relativePath);
+            if (!isPathInsideDirectory(artifactPath, resolvedBundleDirectory)) {
+                checks.push({
+                    id: `review_bundle.file.${fileKey}`,
+                    status: "fail",
+                    message: `${relativePath} resolves outside the review bundle directory.`
+                });
+                continue;
+            }
+            const fileStat = await stat(artifactPath);
             checks.push({
                 id: `review_bundle.file.${fileKey}`,
                 status: fileStat.isFile() ? "pass" : "fail",
@@ -404,7 +417,27 @@ export async function verifyDoctorReviewBundle(bundleDirectory, options) {
                 continue;
             }
             try {
-                const content = await readFile(path.join(resolvedBundleDirectory, expected.path));
+                const declaredPath = files[fileKey];
+                if (expected.path !== declaredPath) {
+                    integrityStatus = "fail";
+                    checks.push({
+                        id: `review_bundle.integrity.${fileKey}.path`,
+                        status: "fail",
+                        message: `${expected.path} does not match the declared bundle file path.`
+                    });
+                    continue;
+                }
+                const integrityPath = path.resolve(resolvedBundleDirectory, expected.path);
+                if (!isPathInsideDirectory(integrityPath, resolvedBundleDirectory)) {
+                    integrityStatus = "fail";
+                    checks.push({
+                        id: `review_bundle.integrity.${fileKey}.path`,
+                        status: "fail",
+                        message: `${expected.path} resolves outside the review bundle directory.`
+                    });
+                    continue;
+                }
+                const content = await readFile(integrityPath);
                 const digest = sha256(content);
                 const matches = digest === expected.digest && content.byteLength === expected.bytes;
                 if (!matches) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-plugin-doctor",
-  "version": "1.10.0",
+  "version": "1.11.0",
   "description": "CLI-first validator for Codex plugins, skills, and MCP package surfaces with runtime MCP protocol validation.",
   "type": "module",
   "main": "./dist/index.js",