codex-plugin-doctor 1.35.0 → 1.36.1

package/README.md

@@ -402,9 +402,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v5
-      - uses: Esquetta/CodexPluginDoctor@v1.35.0
+      - uses: Esquetta/CodexPluginDoctor@v1.36.1
         with:
-          version: "1.35.0"
+          version: "1.36.1"
           path: .
           runtime: "true"
           policy: codex-publish
@@ -459,7 +459,7 @@ npm run prepare-release
 npm run release-check
 ```
 
-`prepare-release` runs tests, builds the TypeScript output, and performs `npm pack --dry-run`. `release-check` adds release preflight checks for a clean git tree, existing npm versions, existing version tags, tests, build, and pack dry-run.
+`prepare-release` runs tests, builds the TypeScript output, and performs `npm pack --dry-run`. `release-check` adds release preflight checks for a clean git tree, existing npm versions, existing version tags, tests, build, pack dry-run, fresh temp install audit, and publish dry-run.
 
 Related docs:
 

package/dist/core/environment-doctor.js

@@ -130,6 +130,8 @@ export async function renderEnvironmentDoctor(terminalContext) {
         "Recommended next commands",
         "-------------------------",
         "codex-plugin-doctor self-test",
+        "codex-plugin-doctor doctor --update-check",
+        "codex-plugin-doctor doctor snapshot --json",
         "codex-plugin-doctor list --installed",
         "codex-plugin-doctor check . --runtime --explain",
         "codex-plugin-doctor compat . --all --scorecard",

package/dist/run-cli.js

@@ -742,19 +742,29 @@ function renderSelfTestReport(targetPath, validationStatus, findingsCount, compa
     ].join("\n");
 }
 async function resolveLatestNpmVersion() {
-    return new Promise((resolve, reject) => {
-        execFile("npm", ["view", "codex-plugin-doctor", "version"], { shell: process.platform === "win32" }, (error, stdout, stderr) => {
-            if (error) {
-                reject(new Error(stderr.trim() || error.message));
-                return;
-            }
-            resolve(stdout.trim());
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), 10_000);
+    try {
+        const response = await fetch("https://registry.npmjs.org/codex-plugin-doctor", {
+            signal: controller.signal
         });
-    });
+        if (!response.ok) {
+            throw new Error(`npm registry returned ${response.status}`);
+        }
+        const data = await response.json();
+        const latestVersion = data["dist-tags"]?.latest;
+        if (!latestVersion) {
+            throw new Error("npm registry response did not include dist-tags.latest");
+        }
+        return latestVersion;
+    }
+    finally {
+        clearTimeout(timeout);
+    }
 }
 async function uploadGitHubReleaseAsset(args) {
     return new Promise((resolve, reject) => {
-        execFile("gh", args, { shell: process.platform === "win32" }, (error, _stdout, stderr) => {
+        execFile("gh", args, (error, _stdout, stderr) => {
             if (error) {
                 reject(new Error(stderr.trim() || error.message));
                 return;

package/examples/README.md

@@ -4,6 +4,13 @@ This folder contains manual example packs for local testing. Unlike `tests/fixtu
 
 ## Example Packs
 
+Use the smallest example that matches what you need to prove:
+
+- `codex-doctor-starter` for static manifest and skill validation.
+- `codex-doctor-runtime` for full MCP runtime probing and compatibility scoring.
+- `codex-doctor-risky` for security finding output.
+- `codex-doctor-generic-mcp` for MCP-only packages without a Codex plugin manifest.
+
 ### `codex-doctor-starter`
 
 Minimal valid Codex plugin package with one skill and no runtime MCP server.
@@ -60,6 +67,21 @@ Command:
 codex-plugin-doctor check examples/codex-doctor-risky --ascii
 ```
 
+### `codex-doctor-generic-mcp`
+
+Generic MCP package with a `.mcp.json` file and no Codex plugin manifest.
+
+Expected result:
+
+- `codex-plugin-doctor mcp` passes generic MCP static health checks
+- `codex-plugin-doctor check` still reports the missing Codex plugin manifest
+
+Command:
+
+```bash
+codex-plugin-doctor mcp examples/codex-doctor-generic-mcp
+```
+
 ## Suggested Local Flow
 
 ```bash
@@ -70,4 +92,3 @@ codex-plugin-doctor check examples/codex-doctor-starter
 codex-plugin-doctor check examples/codex-doctor-runtime --json --runtime --verbose-runtime
 codex-plugin-doctor check examples/codex-doctor-risky --ascii
 ```
-

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-plugin-doctor",
-  "version": "1.35.0",
+  "version": "1.36.1",
   "description": "CLI-first validator for Codex plugins, skills, and MCP package surfaces with runtime MCP protocol validation.",
   "type": "module",
   "main": "./dist/index.js",