codex-plugin-doctor 1.14.0 → 1.16.0

package/README.md

@@ -358,9 +358,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v5
-      - uses: Esquetta/CodexPluginDoctor@v1.14.0
+      - uses: Esquetta/CodexPluginDoctor@v1.16.0
         with:
-          version: "1.14.0"
+          version: "1.16.0"
           path: .
           runtime: "true"
           policy: codex-publish

package/dist/core/review-bundle.d.ts

@@ -71,6 +71,10 @@ export interface DoctorReviewBundleVerificationReport {
         status: "pass" | "fail";
         message: string;
     }>;
+    failedChecks: Array<{
+        id: string;
+        message: string;
+    }>;
     attestation: DoctorAttestationVerificationReport | null;
     releaseEvidence: DoctorReleaseEvidenceVerificationReport | null;
 }
@@ -121,7 +125,9 @@ export declare function verifyDoctorReviewBundle(bundleDirectory: string, option
     targetPath: string;
 }): Promise<DoctorReviewBundleVerificationReport>;
 export declare function renderDoctorReviewBundleVerificationJson(report: DoctorReviewBundleVerificationReport): string;
-export declare function renderDoctorReviewBundleVerification(report: DoctorReviewBundleVerificationReport): string;
+export declare function renderDoctorReviewBundleVerification(report: DoctorReviewBundleVerificationReport, options?: {
+    failuresOnly?: boolean;
+}): string;
 export declare function renderDoctorReviewBundleDiffJson(report: DoctorReviewBundleDiffReport): string;
 export declare function renderDoctorReviewBundleDiff(report: DoctorReviewBundleDiffReport): string;
 export declare function renderDoctorReviewBundle(bundle: DoctorReviewBundle): string;

package/dist/core/review-bundle.js

@@ -697,7 +697,12 @@ export async function verifyDoctorReviewBundle(bundleDirectory, options) {
             message: "The bundled release evidence could not be verified."
         });
     }
-    const failedChecks = checks.filter((check) => check.status === "fail");
+    const failedChecks = checks
+        .filter((check) => check.status === "fail")
+        .map((check) => ({
+        id: check.id,
+        message: check.message
+    }));
     const fileChecks = checks.filter((check) => check.id.startsWith("review_bundle.file."));
     const manifestStatus = checks.find((check) => check.id === "review_bundle.manifest.valid")?.status ?? "fail";
     return {
@@ -717,6 +722,7 @@ export async function verifyDoctorReviewBundle(bundleDirectory, options) {
             releaseEvidence: releaseEvidence?.status ?? "fail"
         },
         checks,
+        failedChecks,
         attestation,
         releaseEvidence
     };
@@ -724,7 +730,7 @@ export async function verifyDoctorReviewBundle(bundleDirectory, options) {
 export function renderDoctorReviewBundleVerificationJson(report) {
     return JSON.stringify(report, null, 2);
 }
-export function renderDoctorReviewBundleVerification(report) {
+export function renderDoctorReviewBundleVerification(report, options = {}) {
     const lines = [
         "Doctor Review Bundle Verification",
         "=================================",
@@ -737,10 +743,24 @@ export function renderDoctorReviewBundleVerification(report) {
         `Runtime policy: ${report.summary.runtimePolicy.toUpperCase()}`,
         `Attestation: ${report.summary.attestation.toUpperCase()}`,
         `Release evidence: ${report.summary.releaseEvidence.toUpperCase()}`,
+        `Failed checks: ${report.failedChecks.length}`,
         "",
-        "Checks",
-        "------"
+        "Failed Checks",
+        "-------------"
     ];
+    if (report.failedChecks.length === 0) {
+        lines.push("None.");
+    }
+    else {
+        for (const check of report.failedChecks) {
+            lines.push(`FAIL ${check.id}`);
+            lines.push(`  ${check.message}`);
+        }
+    }
+    if (options.failuresOnly) {
+        return lines.join("\n");
+    }
+    lines.push("", "Checks", "------");
     for (const check of report.checks) {
         lines.push(`${check.status === "pass" ? "PASS" : "FAIL"} ${check.id}`);
         lines.push(`  ${check.message}`);

package/dist/run-cli.js

@@ -73,7 +73,7 @@ const defaultIo = {
     }
 };
 function printUsage(io) {
-    io.writeStderr("Usage: codex-plugin-doctor check <path|--installed> [filter] [--policy codex-publish|mcp-strict|security] [--compat] [--json|--markdown|--badge-json|--badge-markdown] [--output <path>] [--history <path>] [--runtime] [--require-runtime-approval --runtime-approval-digest <digest>] [--verbose-runtime] [--explain] [--no-animations] [--ascii]\n       codex-plugin-doctor audit --installed [filter] [--policy codex-publish|mcp-strict|security] [--security] [--compat] [--json] [--output <path>] [--cache] [--changed]\n       codex-plugin-doctor mcp <path> [--json] [--output <path>]\n       codex-plugin-doctor security <path> [--policy security] [--json|--scorecard]\n       codex-plugin-doctor compat <path> [--all|--client <client>] [--json] [--scorecard] [--output <path>] [--install-preview|--apply --backup]\n       codex-plugin-doctor fix <path> (--dry-run|--interactive --backup|--apply --backup)\n       codex-plugin-doctor history <history.jsonl> [--json] [--fail-on-regression]\n       codex-plugin-doctor doctor [npm <package>|contract|corpus|runtime-plan <path> [--json|--markdown] [--output <path>]|runtime-policy <path> [--json] [--output <path>]|review-bundle <path> --output <dir> --sign-key-env NAME [--json] [--allow-dirty] [--allow-untagged]|review-bundle verify <bundle-dir> --target <path> --sign-key-env NAME [--json] [--output <path>]|review-bundle diff --before <dir> --after <dir> [--json]|attest <path> [--sign-key-env NAME]|attest verify <attestation.json> --target <path> --sign-key-env NAME|release-evidence <path> --sign-key-env NAME [--allow-dirty] [--allow-untagged] [--require-runtime-approval --runtime-approval-digest <digest>]|release-evidence verify <evidence.json> --target <path> --sign-key-env NAME|release-evidence asset <path> --tag <tag> --output <evidence.json> --sign-key-env NAME [--upload]|mcp <path>|inspector <path>|diff --before <path> --after <path>|recommend <path>|trust <path>|perf <path> [--max-total-ms <ms>] [--max-stage-ms stage=ms]|export --bundle <path>|snapshot|clients|--json|--update-check]\n       codex-plugin-doctor init [path] [--template skill-only|mcp-stdio|mcp-http|full-runtime]\n       codex-plugin-doctor init-ci [path]\n       codex-plugin-doctor self-test\n       codex-plugin-doctor list --installed\n       codex-plugin-doctor explain <finding-id>\n       codex-plugin-doctor --version\n\nFirst run:\n       codex-plugin-doctor doctor\n       codex-plugin-doctor self-test\n       codex-plugin-doctor init my-plugin\n       codex-plugin-doctor check . --runtime --explain");
+    io.writeStderr("Usage: codex-plugin-doctor check <path|--installed> [filter] [--policy codex-publish|mcp-strict|security] [--compat] [--json|--markdown|--badge-json|--badge-markdown] [--output <path>] [--history <path>] [--runtime] [--require-runtime-approval --runtime-approval-digest <digest>] [--verbose-runtime] [--explain] [--no-animations] [--ascii]\n       codex-plugin-doctor audit --installed [filter] [--policy codex-publish|mcp-strict|security] [--security] [--compat] [--json] [--output <path>] [--cache] [--changed]\n       codex-plugin-doctor mcp <path> [--json] [--output <path>]\n       codex-plugin-doctor security <path> [--policy security] [--json|--scorecard]\n       codex-plugin-doctor compat <path> [--all|--client <client>] [--json] [--scorecard] [--output <path>] [--install-preview|--apply --backup]\n       codex-plugin-doctor fix <path> (--dry-run|--interactive --backup|--apply --backup)\n       codex-plugin-doctor history <history.jsonl> [--json] [--fail-on-regression]\n       codex-plugin-doctor doctor [npm <package>|contract|corpus|runtime-plan <path> [--json|--markdown] [--output <path>]|runtime-policy <path> [--json] [--output <path>]|review-bundle <path> --output <dir> --sign-key-env NAME [--json] [--allow-dirty] [--allow-untagged]|review-bundle verify <bundle-dir> --target <path> --sign-key-env NAME [--json] [--output <path>] [--failures-only]|review-bundle diff --before <dir> --after <dir> [--json]|attest <path> [--sign-key-env NAME]|attest verify <attestation.json> --target <path> --sign-key-env NAME|release-evidence <path> --sign-key-env NAME [--allow-dirty] [--allow-untagged] [--require-runtime-approval --runtime-approval-digest <digest>]|release-evidence verify <evidence.json> --target <path> --sign-key-env NAME|release-evidence asset <path> --tag <tag> --output <evidence.json> --sign-key-env NAME [--upload]|mcp <path>|inspector <path>|diff --before <path> --after <path>|recommend <path>|trust <path>|perf <path> [--max-total-ms <ms>] [--max-stage-ms stage=ms]|export --bundle <path>|snapshot|clients|--json|--update-check]\n       codex-plugin-doctor init [path] [--template skill-only|mcp-stdio|mcp-http|full-runtime]\n       codex-plugin-doctor init-ci [path]\n       codex-plugin-doctor self-test\n       codex-plugin-doctor list --installed\n       codex-plugin-doctor explain <finding-id>\n       codex-plugin-doctor --version\n\nFirst run:\n       codex-plugin-doctor doctor\n       codex-plugin-doctor self-test\n       codex-plugin-doctor init my-plugin\n       codex-plugin-doctor check . --runtime --explain");
 }
 const performanceStageNames = new Set([
     "validation",
@@ -449,6 +449,7 @@ export async function runCli(args, io = defaultIo, options = {}) {
                     : null;
                 const verifyFlags = bundleDirectory ? remainingArgs.slice(2) : remainingArgs.slice(1);
                 const jsonOutput = verifyFlags.includes("--json");
+                const failuresOnly = verifyFlags.includes("--failures-only");
                 const outputIndex = verifyFlags.indexOf("--output");
                 const outputPath = outputIndex === -1 ? null : verifyFlags[outputIndex + 1];
                 const targetIndex = verifyFlags.indexOf("--target");
@@ -490,7 +491,7 @@ export async function runCli(args, io = defaultIo, options = {}) {
                 });
                 const renderedReport = jsonOutput
                     ? renderDoctorReviewBundleVerificationJson(report)
-                    : renderDoctorReviewBundleVerification(report);
+                    : renderDoctorReviewBundleVerification(report, { failuresOnly });
                 if (outputPath) {
                     await writeFile(outputPath, renderedReport, "utf8");
                 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-plugin-doctor",
-  "version": "1.14.0",
+  "version": "1.16.0",
   "description": "CLI-first validator for Codex plugins, skills, and MCP package surfaces with runtime MCP protocol validation.",
   "type": "module",
   "main": "./dist/index.js",