codex-plugin-doctor 1.36.0 → 1.37.0

package/README.md

@@ -402,9 +402,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v5
-      - uses: Esquetta/CodexPluginDoctor@v1.36.0
+      - uses: Esquetta/CodexPluginDoctor@v1.37.0
         with:
-          version: "1.36.0"
+          version: "1.37.0"
           path: .
           runtime: "true"
           policy: codex-publish

package/dist/core/validate-plugin.js

@@ -406,6 +406,7 @@ export async function validatePlugin(targetPath, options = {}) {
     }
     const runtimeResult = options.runtime
         ? await probeRuntime(discoveredPackage, {
+            startupTimeoutMs: options.runtimeStartupTimeoutMs,
             transcript: options.runtimeTranscript
         })
         : null;

package/dist/domain/types.d.ts

@@ -34,6 +34,7 @@ export interface CheckResult {
 export interface CheckOptions {
     runtime?: boolean;
     runtimeTranscript?: (line: string) => void;
+    runtimeStartupTimeoutMs?: number;
 }
 export interface PluginManifest {
     name?: string;

package/dist/run-cli.js

@@ -742,19 +742,29 @@ function renderSelfTestReport(targetPath, validationStatus, findingsCount, compa
     ].join("\n");
 }
 async function resolveLatestNpmVersion() {
-    return new Promise((resolve, reject) => {
-        execFile("npm", ["view", "codex-plugin-doctor", "version"], { shell: process.platform === "win32" }, (error, stdout, stderr) => {
-            if (error) {
-                reject(new Error(stderr.trim() || error.message));
-                return;
-            }
-            resolve(stdout.trim());
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), 10_000);
+    try {
+        const response = await fetch("https://registry.npmjs.org/codex-plugin-doctor", {
+            signal: controller.signal
         });
-    });
+        if (!response.ok) {
+            throw new Error(`npm registry returned ${response.status}`);
+        }
+        const data = await response.json();
+        const latestVersion = data["dist-tags"]?.latest;
+        if (!latestVersion) {
+            throw new Error("npm registry response did not include dist-tags.latest");
+        }
+        return latestVersion;
+    }
+    finally {
+        clearTimeout(timeout);
+    }
 }
 async function uploadGitHubReleaseAsset(args) {
     return new Promise((resolve, reject) => {
-        execFile("gh", args, { shell: process.platform === "win32" }, (error, _stdout, stderr) => {
+        execFile("gh", args, (error, _stdout, stderr) => {
             if (error) {
                 reject(new Error(stderr.trim() || error.message));
                 return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-plugin-doctor",
-  "version": "1.36.0",
+  "version": "1.37.0",
   "description": "CLI-first validator for Codex plugins, skills, and MCP package surfaces with runtime MCP protocol validation.",
   "type": "module",
   "main": "./dist/index.js",