codex-plugin-doctor 1.51.0 → 1.53.0

package/dist/run-cli.js

@@ -99,11 +99,78 @@ function parseRuntimeSandbox(flags, options = { requireRuntime: true }) {
     }
     return value;
 }
+function parseRemoteNetworkFlags(flags, runtime) {
+    let allowNetwork = false;
+    let allowLocalNetwork = false;
+    let allowSessionLifecycle = false;
+    let requireRemoteReliability = false;
+    for (let index = 0; index < flags.length; index += 1) {
+        const flag = flags[index];
+        if (flag === "--allow-network") {
+            if (allowNetwork)
+                return new CliUsageError("Duplicate runtime network flag: --allow-network.");
+            if (flags[index + 1] && !flags[index + 1].startsWith("--")) {
+                return new CliUsageError("--allow-network does not accept a value.");
+            }
+            allowNetwork = true;
+        }
+        else if (flag === "--allow-local-network") {
+            if (allowLocalNetwork)
+                return new CliUsageError("Duplicate runtime network flag: --allow-local-network.");
+            if (flags[index + 1] && !flags[index + 1].startsWith("--")) {
+                return new CliUsageError("--allow-local-network does not accept a value.");
+            }
+            allowLocalNetwork = true;
+        }
+        else if (flag === "--allow-session-lifecycle") {
+            if (allowSessionLifecycle)
+                return new CliUsageError("Duplicate runtime remote flag: --allow-session-lifecycle.");
+            if (flags[index + 1] && !flags[index + 1].startsWith("--")) {
+                return new CliUsageError("--allow-session-lifecycle does not accept a value.");
+            }
+            allowSessionLifecycle = true;
+        }
+        else if (flag === "--require-remote-reliability") {
+            if (requireRemoteReliability)
+                return new CliUsageError("Duplicate runtime remote flag: --require-remote-reliability.");
+            if (flags[index + 1] && !flags[index + 1].startsWith("--")) {
+                return new CliUsageError("--require-remote-reliability does not accept a value.");
+            }
+            requireRemoteReliability = true;
+        }
+        else if (flag?.startsWith("--allow-network=") ||
+            flag?.startsWith("--allow-local-network=") ||
+            flag?.startsWith("--allow-session-lifecycle=") ||
+            flag?.startsWith("--require-remote-reliability=")) {
+            return new CliUsageError(`${flag.split("=", 1)[0]} does not accept a value.`);
+        }
+    }
+    if (allowSessionLifecycle && !runtime) {
+        return new CliUsageError("--allow-session-lifecycle requires --runtime.");
+    }
+    if (requireRemoteReliability && !runtime) {
+        return new CliUsageError("--require-remote-reliability requires --runtime and --allow-network.");
+    }
+    if ((allowNetwork || allowLocalNetwork) && !runtime) {
+        return new CliUsageError("--allow-network requires --runtime.");
+    }
+    if (allowLocalNetwork && !allowNetwork) {
+        return new CliUsageError("--allow-local-network requires --allow-network.");
+    }
+    if (allowSessionLifecycle && !allowNetwork) {
+        return new CliUsageError("--allow-session-lifecycle requires --allow-network.");
+    }
+    if (requireRemoteReliability && !allowNetwork) {
+        return new CliUsageError("--require-remote-reliability requires --runtime and --allow-network.");
+    }
+    return { allowNetwork, allowLocalNetwork, allowSessionLifecycle, requireRemoteReliability };
+}
 function printUsage(io) {
-    io.writeStderr("Usage: codex-plugin-doctor check <path|--installed> [filter] [--policy codex-publish|mcp-strict|security] [--compat] [--json|--markdown|--badge-json|--badge-markdown] [--output <path>] [--history <path>] [--runtime] [--sandbox docker] [--require-runtime-approval --runtime-approval-digest <digest>] [--verbose-runtime] [--explain] [--no-animations] [--ascii] [--changed-since <ref>]\n       codex-plugin-doctor audit --installed [filter] [--policy codex-publish|mcp-strict|security] [--security] [--compat] [--json] [--output <path>] [--cache] [--changed]\n       codex-plugin-doctor audit deps <path> [--policy codex-publish|mcp-strict|security] [--recommend] [--json|--sarif] [--output <path>]\n       codex-plugin-doctor mcp <path> [--runtime] [--json] [--output <path>]\n       codex-plugin-doctor security <path> [--policy security] [--json|--scorecard]\n       codex-plugin-doctor compat <path> [--all|--client <client>] [--json] [--scorecard] [--output <path>] [--install-preview|--apply --backup]\n       codex-plugin-doctor suppress add <path> [--fingerprint <sha256> --reason <text> --expires-at YYYY-MM-DD] [--config <path>] [--json]\n       codex-plugin-doctor suppress list <path> [--config <path>] [--json]\n       codex-plugin-doctor suppress remove <path> [--fingerprint <sha256>|--index <n>] [--config <path>] [--json]\n       codex-plugin-doctor fix <path> (--dry-run|--interactive --backup|--apply --backup)\n       codex-plugin-doctor history <history.jsonl> [--json] [--fail-on-regression]\n       codex-plugin-doctor watch <path> [--runtime] [--json] [--output <path>] [--debounce-ms <ms>] [--max-iterations <n>] [--fail-fast] [--accumulate-json <path>]\n       codex-plugin-doctor doctor [npm <package>|contract|corpus [--manifest <corpus.json>] [--json] [--output <path>]|corpus metrics --manifest <corpus.json> [--json|--markdown] [--output <path>] [--min-precision <0..1>] [--min-recall <0..1>] [--max-false-positive-rate <0..1>]|runtime-plan <path> [--runtime --sandbox docker] [--json|--markdown] [--output <path>]|runtime-policy <path> [--runtime --sandbox docker] [--json] [--output <path>]|review-bundle <path> --output <dir> --sign-key-env NAME [--json] [--allow-dirty] [--allow-untagged]|review-bundle verify <bundle-dir> --target <path> --sign-key-env NAME [--json] [--output <path>] [--failures-only]|review-bundle diff --before <dir> --after <dir> [--json]|attest <path> [--sign-key-env NAME]|attest verify <attestation.json> --target <path> --sign-key-env NAME|release-evidence <path> --sign-key-env NAME [--runtime --sandbox docker] [--allow-dirty] [--allow-untagged] [--require-runtime-approval --runtime-approval-digest <digest>]|release-evidence verify <evidence.json> --target <path> --sign-key-env NAME|release-evidence asset <path> --tag <tag> --output <evidence.json> --sign-key-env NAME [--upload]|mcp <path>|inspector <path>|diff --before <path> --after <path>|recommend <path>|trust <path>|perf <path> [--max-total-ms <ms>] [--max-stage-ms stage=ms]|export --bundle <path>|snapshot|clients|--json|--update-check]\n       codex-plugin-doctor init [path] [--template skill-only|mcp-stdio|mcp-http|full-runtime]\n       codex-plugin-doctor init-ci [path]\n       codex-plugin-doctor init-git-hooks [path] [--force] [--json]\n       codex-plugin-doctor init-git-hooks [path] --remove [--json]\n       codex-plugin-doctor completion bash|zsh|fish\n       codex-plugin-doctor config validate <path> [--json]\n       codex-plugin-doctor release check <path> [--json] [--runtime --sandbox docker]\n       codex-plugin-doctor self-test\n       codex-plugin-doctor list --installed\n       codex-plugin-doctor explain <finding-id>\n       codex-plugin-doctor --version\n\nFirst run:\n       codex-plugin-doctor doctor\n       codex-plugin-doctor self-test\n       codex-plugin-doctor init my-plugin\n       codex-plugin-doctor check . --runtime --explain");
+    io.writeStderr("Usage: codex-plugin-doctor check <path|--installed> [filter] [--policy codex-publish|mcp-strict|security] [--compat] [--json|--markdown|--badge-json|--badge-markdown] [--output <path>] [--history <path>] [--runtime [--allow-network [--allow-local-network]]] [--sandbox docker] [--require-runtime-approval --runtime-approval-digest <digest>] [--verbose-runtime] [--explain] [--no-animations] [--ascii] [--changed-since <ref>]\n       codex-plugin-doctor audit --installed [filter] [--policy codex-publish|mcp-strict|security] [--security] [--compat] [--json] [--output <path>] [--cache] [--changed]\n       codex-plugin-doctor audit deps <path> [--policy codex-publish|mcp-strict|security] [--recommend] [--json|--sarif] [--output <path>]\n       codex-plugin-doctor mcp <path> [--runtime [--allow-network [--allow-local-network]]] [--json] [--output <path>]\n       codex-plugin-doctor security <path> [--policy security] [--json|--scorecard]\n       codex-plugin-doctor compat <path> [--all|--client <client>] [--json] [--scorecard] [--output <path>] [--install-preview|--apply --backup]\n       codex-plugin-doctor suppress add <path> [--fingerprint <sha256> --reason <text> --expires-at YYYY-MM-DD] [--config <path>] [--json]\n       codex-plugin-doctor suppress list <path> [--config <path>] [--json]\n       codex-plugin-doctor suppress remove <path> [--fingerprint <sha256>|--index <n>] [--config <path>] [--json]\n       codex-plugin-doctor fix <path> (--dry-run|--interactive --backup|--apply --backup)\n       codex-plugin-doctor history <history.jsonl> [--json] [--fail-on-regression]\n       codex-plugin-doctor watch <path> [--runtime] [--json] [--output <path>] [--debounce-ms <ms>] [--max-iterations <n>] [--fail-fast] [--accumulate-json <path>]\n       codex-plugin-doctor doctor [npm <package>|contract|corpus [--manifest <corpus.json>] [--json] [--output <path>]|corpus metrics --manifest <corpus.json> [--json|--markdown] [--output <path>] [--min-precision <0..1>] [--min-recall <0..1>] [--max-false-positive-rate <0..1>]|runtime-plan <path> [--sandbox docker] [--json|--markdown] [--output <path>]|runtime-policy <path> [--sandbox docker] [--json] [--output <path>]|review-bundle <path> --output <dir> --sign-key-env NAME [--json] [--allow-dirty] [--allow-untagged]|review-bundle verify <bundle-dir> --target <path> --sign-key-env NAME [--json] [--output <path>] [--failures-only]|review-bundle diff --before <dir> --after <dir> [--json]|attest <path> [--sign-key-env NAME]|attest verify <attestation.json> --target <path> --sign-key-env NAME|release-evidence <path> --sign-key-env NAME [--runtime [--allow-network [--allow-local-network]]] [--sandbox docker] [--allow-dirty] [--allow-untagged] [--require-runtime-approval --runtime-approval-digest <digest>]|release-evidence verify <evidence.json> --target <path> --sign-key-env NAME|release-evidence asset <path> --tag <tag> --output <evidence.json> --sign-key-env NAME [--runtime [--allow-network [--allow-local-network]]] [--sandbox docker] [--allow-dirty] [--allow-untagged] [--require-runtime-approval --runtime-approval-digest <digest>] [--upload]|mcp <path> [--runtime [--allow-network [--allow-local-network]]]|inspector <path>|diff --before <path> --after <path>|recommend <path>|trust <path>|perf <path> [--max-total-ms <ms>] [--max-stage-ms stage=ms]|export --bundle <path>|snapshot|clients|--json|--update-check]\n       codex-plugin-doctor init [path] [--template skill-only|mcp-stdio|mcp-http|full-runtime]\n       codex-plugin-doctor init-ci [path]\n       codex-plugin-doctor init-git-hooks [path] [--force] [--json]\n       codex-plugin-doctor init-git-hooks [path] --remove [--json]\n       codex-plugin-doctor completion bash|zsh|fish\n       codex-plugin-doctor config validate <path> [--json]\n       codex-plugin-doctor release check <path> [--json] [--runtime [--allow-network [--allow-local-network]]] [--sandbox docker]\n       codex-plugin-doctor self-test\n       codex-plugin-doctor list --installed\n       codex-plugin-doctor explain <finding-id>\n       codex-plugin-doctor --version\n\nFirst run:\n       codex-plugin-doctor doctor\n       codex-plugin-doctor self-test\n       codex-plugin-doctor init my-plugin\n       codex-plugin-doctor check . --runtime --explain");
     io.writeStderr("Corpus quality regression: codex-plugin-doctor doctor corpus metrics diff --before <metrics.json> --after <metrics.json> [--fail-on-regression] [--json|--markdown] [--output <path>]");
     io.writeStderr("Suppression governance: codex-plugin-doctor suppress list <path> [--fail-on-expired] [--fail-on-invalid] [--warn-expiring-within-days <days>]\n       codex-plugin-doctor suppress prune <path> [--apply] [--json]");
     io.writeStderr("Baseline gating: codex-plugin-doctor baseline create <path> --output <path> [--runtime]\n       codex-plugin-doctor check <path> --baseline <path>");
+    io.writeStderr("Remote MCP runtime flags (check, mcp, release check, and doctor release-evidence): --runtime --allow-network [--allow-local-network] [--allow-session-lifecycle] [--require-remote-reliability]\n       --allow-session-lifecycle requires --runtime --allow-network and can terminate a remote session.\n       --require-remote-reliability requires --runtime --allow-network, blocks non-pass reliability, and does not grant network consent.");
 }
 const suppressUsageText = [
     "Usage:",
@@ -652,6 +719,10 @@ function buildGenericMcpDoctorCommandArgs(commandTarget, flags) {
     let jsonOutput = false;
     let outputPath = null;
     let runtime = false;
+    let allowNetwork = false;
+    let allowLocalNetwork = false;
+    let allowSessionLifecycle = false;
+    let requireRemoteReliability = false;
     for (let index = 0; index < flags.length; index += 1) {
         const flag = flags[index];
         if (flag === "--runtime") {
@@ -668,6 +739,38 @@ function buildGenericMcpDoctorCommandArgs(commandTarget, flags) {
             jsonOutput = true;
             continue;
         }
+        if (flag === "--allow-network") {
+            if (allowNetwork)
+                return "Duplicate MCP flag: --allow-network.";
+            allowNetwork = true;
+            continue;
+        }
+        if (flag === "--allow-local-network") {
+            if (allowLocalNetwork)
+                return "Duplicate MCP flag: --allow-local-network.";
+            allowLocalNetwork = true;
+            continue;
+        }
+        if (flag === "--allow-session-lifecycle") {
+            if (flags[index + 1] && !flags[index + 1].startsWith("--")) {
+                return "--allow-session-lifecycle does not accept a value.";
+            }
+            allowSessionLifecycle = true;
+            continue;
+        }
+        if (flag === "--require-remote-reliability") {
+            if (flags[index + 1] && !flags[index + 1].startsWith("--")) {
+                return "--require-remote-reliability does not accept a value.";
+            }
+            requireRemoteReliability = true;
+            continue;
+        }
+        if (flag.startsWith("--allow-network=") ||
+            flag.startsWith("--allow-local-network=") ||
+            flag.startsWith("--allow-session-lifecycle=") ||
+            flag.startsWith("--require-remote-reliability=")) {
+            return `${flag.split("=", 1)[0]} does not accept a value.`;
+        }
         if (flag === "--output") {
             if (outputPath !== null) {
                 return "Duplicate MCP flag: --output.";
@@ -684,11 +787,19 @@ function buildGenericMcpDoctorCommandArgs(commandTarget, flags) {
             ? `Unknown MCP flag: ${flag}.`
             : `Unexpected MCP argument: ${flag}.`;
     }
+    const remoteNetwork = parseRemoteNetworkFlags(flags, runtime);
+    if (remoteNetwork instanceof CliUsageError) {
+        return remoteNetwork.message;
+    }
     return {
         targetPath: commandTarget,
         jsonOutput,
         outputPath,
-        runtime
+        runtime,
+        allowNetwork: remoteNetwork.allowNetwork,
+        allowLocalNetwork: remoteNetwork.allowLocalNetwork,
+        allowSessionLifecycle,
+        requireRemoteReliability
     };
 }
 function parsePerformanceThresholds(flags) {
@@ -976,7 +1087,11 @@ export async function runCli(args, io = defaultIo, options = {}) {
                 env: terminalContext.env,
                 platform: terminalContext.platform
             }, {
-                runtime: parsedMcpArgs.runtime
+                runtime: parsedMcpArgs.runtime,
+                allowNetwork: parsedMcpArgs.allowNetwork,
+                allowLocalNetwork: parsedMcpArgs.allowLocalNetwork,
+                allowSessionLifecycle: parsedMcpArgs.allowSessionLifecycle,
+                requireRemoteReliability: parsedMcpArgs.requireRemoteReliability
             });
             const renderedReport = parsedMcpArgs.jsonOutput
                 ? renderGenericMcpDoctorJson(report)
@@ -1218,7 +1333,12 @@ export async function runCli(args, io = defaultIo, options = {}) {
                     ? null
                     : assetFlags[runtimeApprovalDigestIndex + 1];
                 const runtime = assetFlags.includes("--runtime");
+                const remoteNetwork = parseRemoteNetworkFlags(assetFlags, runtime);
                 let runtimeSandbox;
+                if (remoteNetwork instanceof CliUsageError) {
+                    io.writeStderr(remoteNetwork.message);
+                    return 2;
+                }
                 try {
                     runtimeSandbox = parseRuntimeSandbox(assetFlags);
                 }
@@ -1282,6 +1402,10 @@ export async function runCli(args, io = defaultIo, options = {}) {
                     requireRuntimeApproval,
                     runtimeApprovalDigest,
                     runtime,
+                    ...(remoteNetwork.allowNetwork ? { allowNetwork: true } : {}),
+                    ...(remoteNetwork.allowLocalNetwork ? { allowLocalNetwork: true } : {}),
+                    ...(remoteNetwork.allowSessionLifecycle ? { allowSessionLifecycle: true } : {}),
+                    ...(remoteNetwork.requireRemoteReliability ? { requireRemoteReliability: true } : {}),
                     ...(runtimeSandbox ? { sandbox: runtimeSandbox } : {}),
                     environment: {
                         env: terminalContext.env,
@@ -1290,6 +1414,10 @@ export async function runCli(args, io = defaultIo, options = {}) {
                     runCheck: options.runCheckImpl ?? runCheck,
                     performanceThresholds: parsedThresholds.thresholds
                 });
+                if (!evidence.releaseReady) {
+                    io.writeStdout(jsonOutput ? renderDoctorReleaseEvidenceJson(evidence) : renderDoctorReleaseEvidence(evidence));
+                    return evidence.exitCode;
+                }
                 await writeFile(resolvedOutputPath, renderDoctorReleaseEvidenceJson(evidence), "utf8");
                 let uploaded = false;
                 const uploadArgs = ["release", "upload", tag, resolvedOutputPath, "--clobber"];
@@ -1387,7 +1515,12 @@ export async function runCli(args, io = defaultIo, options = {}) {
                 ? null
                 : evidenceFlags[runtimeApprovalDigestIndex + 1];
             const runtime = evidenceFlags.includes("--runtime");
+            const remoteNetwork = parseRemoteNetworkFlags(evidenceFlags, runtime);
             let runtimeSandbox;
+            if (remoteNetwork instanceof CliUsageError) {
+                io.writeStderr(remoteNetwork.message);
+                return 2;
+            }
             try {
                 runtimeSandbox = parseRuntimeSandbox(evidenceFlags);
             }
@@ -1434,6 +1567,10 @@ export async function runCli(args, io = defaultIo, options = {}) {
                 requireRuntimeApproval,
                 runtimeApprovalDigest,
                 runtime,
+                ...(remoteNetwork.allowNetwork ? { allowNetwork: true } : {}),
+                ...(remoteNetwork.allowLocalNetwork ? { allowLocalNetwork: true } : {}),
+                ...(remoteNetwork.allowSessionLifecycle ? { allowSessionLifecycle: true } : {}),
+                ...(remoteNetwork.requireRemoteReliability ? { requireRemoteReliability: true } : {}),
                 ...(runtimeSandbox ? { sandbox: runtimeSandbox } : {}),
                 environment: {
                     env: terminalContext.env,
@@ -2257,7 +2394,11 @@ export async function runCli(args, io = defaultIo, options = {}) {
             env: terminalContext.env,
             platform: terminalContext.platform
         }, {
-            runtime: parsedMcpArgs.runtime
+            runtime: parsedMcpArgs.runtime,
+            allowNetwork: parsedMcpArgs.allowNetwork,
+            allowLocalNetwork: parsedMcpArgs.allowLocalNetwork,
+            allowSessionLifecycle: parsedMcpArgs.allowSessionLifecycle,
+            requireRemoteReliability: parsedMcpArgs.requireRemoteReliability
         });
         const renderedReport = parsedMcpArgs.jsonOutput
             ? renderGenericMcpDoctorJson(report)
@@ -2534,7 +2675,12 @@ export async function runCli(args, io = defaultIo, options = {}) {
             : remainingArgs.slice(1);
         const jsonOutput = releaseFlags.includes("--json");
         const runtimeProbeEnabled = releaseFlags.includes("--runtime");
+        const remoteNetwork = parseRemoteNetworkFlags(releaseFlags, runtimeProbeEnabled);
         let runtimeSandbox;
+        if (remoteNetwork instanceof CliUsageError) {
+            io.writeStderr(remoteNetwork.message);
+            return 2;
+        }
         try {
             runtimeSandbox = parseRuntimeSandbox(releaseFlags);
         }
@@ -2571,6 +2717,10 @@ export async function runCli(args, io = defaultIo, options = {}) {
             env: terminalContext.env,
             platform: terminalContext.platform,
             runtime: runtimeProbeEnabled,
+            ...(remoteNetwork.allowNetwork ? { allowNetwork: true } : {}),
+            ...(remoteNetwork.allowLocalNetwork ? { allowLocalNetwork: true } : {}),
+            ...(remoteNetwork.allowSessionLifecycle ? { allowSessionLifecycle: true } : {}),
+            ...(remoteNetwork.requireRemoteReliability ? { requireRemoteReliability: true } : {}),
             ...(runtimeSandbox ? { runtimeSandbox } : {}),
             runCheck: options.runCheckImpl
         });
@@ -2717,6 +2867,11 @@ export async function runCli(args, io = defaultIo, options = {}) {
     const effectiveRuntimeProbeEnabled = runtimeProbeEnabled ||
         checkProfile === "publish" ||
         policyEnablesRuntime(policy);
+    const remoteNetwork = parseRemoteNetworkFlags(normalizedFlags, effectiveRuntimeProbeEnabled);
+    if (remoteNetwork instanceof CliUsageError) {
+        io.writeStderr(remoteNetwork.message);
+        return 2;
+    }
     if (requireRuntimeApproval && !effectiveRuntimeProbeEnabled) {
         io.writeStderr("Runtime approval requires runtime probing. Add --runtime, --profile publish, or a runtime-enabled policy.");
         return 2;
@@ -2778,6 +2933,10 @@ export async function runCli(args, io = defaultIo, options = {}) {
                 plugin,
                 result: applyDoctorConfig(await runCheckImpl(plugin.rootPath, {
                     runtime: effectiveRuntimeProbeEnabled,
+                    ...(remoteNetwork.allowNetwork ? { allowNetwork: true } : {}),
+                    ...(remoteNetwork.allowLocalNetwork ? { allowLocalNetwork: true } : {}),
+                    ...(remoteNetwork.allowSessionLifecycle ? { allowSessionLifecycle: true } : {}),
+                    ...(remoteNetwork.requireRemoteReliability ? { requireRemoteReliability: true } : {}),
                     runtimeTranscript: effectiveRuntimeProbeEnabled && verboseRuntime
                         ? (line) => io.writeStderr(line)
                         : undefined
@@ -2847,7 +3006,11 @@ export async function runCli(args, io = defaultIo, options = {}) {
                     continue;
                 }
                 const pluginResult = applyDoctorConfig(await runCheckImpl(pluginRoot, {
-                    runtime: effectiveRuntimeProbeEnabled
+                    runtime: effectiveRuntimeProbeEnabled,
+                    ...(remoteNetwork.allowNetwork ? { allowNetwork: true } : {}),
+                    ...(remoteNetwork.allowLocalNetwork ? { allowLocalNetwork: true } : {}),
+                    ...(remoteNetwork.allowSessionLifecycle ? { allowSessionLifecycle: true } : {}),
+                    ...(remoteNetwork.requireRemoteReliability ? { requireRemoteReliability: true } : {})
                 }), applyPolicyToDoctorConfig(applyCheckProfile(await loadDoctorConfig(pluginRoot, configPath), checkProfile), policy));
                 io.writeStdout(`\n${pluginResult.targetPath}: ${pluginResult.status.toUpperCase()}`);
                 validatedCount += 1;
@@ -2869,6 +3032,10 @@ export async function runCli(args, io = defaultIo, options = {}) {
     const doctorConfig = applyPolicyToDoctorConfig(applyCheckProfile(await loadDoctorConfig(targetPath, configPath), checkProfile), policy);
     const configuredResult = applyDoctorConfig(await runCheckImpl(targetPath, {
         runtime: effectiveRuntimeProbeEnabled,
+        ...(remoteNetwork.allowNetwork ? { allowNetwork: true } : {}),
+        ...(remoteNetwork.allowLocalNetwork ? { allowLocalNetwork: true } : {}),
+        ...(remoteNetwork.allowSessionLifecycle ? { allowSessionLifecycle: true } : {}),
+        ...(remoteNetwork.requireRemoteReliability ? { requireRemoteReliability: true } : {}),
         ...(runtimeSandbox ? { runtimeSandbox } : {}),
         ...(effectiveRuntimeProbeEnabled && verboseRuntime
             ? { runtimeTranscript: (line) => io.writeStderr(line) }

package/dist/security/security-audit.js

@@ -2,6 +2,7 @@ import { readFile, readdir, stat } from "node:fs/promises";
 import path from "node:path";
 import { discoverPackage } from "../core/discover-package.js";
 import { readJsonFile } from "../core/read-json-file.js";
+import { inspectRemoteMcpUrl } from "../core/remote-url-policy.js";
 import { validatePlugin } from "../core/validate-plugin.js";
 import { formatFindingFingerprintLine, withFindingFingerprints } from "../reporting/finding-fingerprint.js";
 import { formatFindingEvidenceLine } from "../reporting/format-finding-evidence.js";
@@ -18,6 +19,16 @@ function buildFinding(severity, id, message, impact, suggestedFix, evidence) {
 function isPlainObject(value) {
     return typeof value === "object" && value !== null && !Array.isArray(value);
 }
+function remoteUrlIssueFindingId(issue) {
+    return issue === "insecure_non_loopback"
+        ? "plugin.security.insecure_http_url"
+        : `plugin.security.remote_mcp_url.${issue}`;
+}
+function remoteUrlIssueMessage(issue) {
+    return issue === "insecure_non_loopback"
+        ? "uses an insecure public HTTP URL"
+        : `uses a remote MCP URL with ${issue.replaceAll("_", " ")}`;
+}
 function isPathWithinRoot(rootPath, candidatePath) {
     const relativePath = path.relative(rootPath, candidatePath);
     return (relativePath === "" ||
@@ -245,19 +256,33 @@ export function auditMcpServerConfig(rootPath, parsedConfig, options = {}) {
                 }));
             }
         }
-        if (typeof url === "string" && /^http:\/\//i.test(url)) {
-            findings.push(buildFinding("warn", "plugin.security.insecure_http_url", `The MCP server \`${serverName}\` uses an insecure HTTP URL.`, "Plain HTTP transports can expose MCP traffic on non-local networks and make endpoint identity harder to verify.", "Use HTTPS for remote MCP servers; reserve HTTP for explicit localhost development endpoints.", { serverName, configPath, url }));
-        }
-        if (typeof url === "string" && /\/\/0\.0\.0\.0[:/]/i.test(url)) {
-            findings.push(buildFinding("warn", "plugin.security.mcp_binds_all_interfaces", `The MCP server \`${serverName}\` URL binds to \`0.0.0.0\`.`, "Servers that listen on all interfaces can accept connections from external hosts, which is rarely intended for local MCP development.", "Use `127.0.0.1` or `localhost` instead of `0.0.0.0` unless external access is explicitly required.", { serverName, configPath, url }));
+        if (typeof url === "string") {
+            const inspection = inspectRemoteMcpUrl(url);
+            for (const issue of inspection.issues) {
+                findings.push(buildFinding("fail", remoteUrlIssueFindingId(issue), `The MCP server \`${serverName}\` ${remoteUrlIssueMessage(issue)}.`, "Unsafe or ambiguous remote transport configuration can expose credentials or prevent reliable MCP connectivity.", "Use an absolute HTTPS URL without credentials, query parameters, fragments, or numeric IP literals; HTTP is only supported for localhost development.", {
+                    serverName,
+                    configPath,
+                    url: inspection.sanitizedUrl
+                }));
+            }
+            if (inspection.parsedUrl?.hostname === "0.0.0.0") {
+                findings.push(buildFinding("warn", "plugin.security.mcp_binds_all_interfaces", `The MCP server \`${serverName}\` URL binds to \`0.0.0.0\`.`, "Servers that listen on all interfaces can accept connections from external hosts, which is rarely intended for local MCP development.", "Use `127.0.0.1` or `localhost` instead of `0.0.0.0` unless external access is explicitly required.", {
+                    serverName,
+                    configPath,
+                    url: inspection.sanitizedUrl
+                }));
+            }
         }
     }
     return findings;
 }
 const externalUrlPattern = /https?:\/\/[^\s`"'<>)]+/gi;
-async function auditSkillExternalReferences(rootPath) {
+async function auditSkillExternalReferences(rootPath, mcpConfigPath) {
     const findings = [];
     for (const filePath of await collectPromptPoisoningScanFiles(rootPath)) {
+        if (mcpConfigPath !== null && path.resolve(filePath) === mcpConfigPath) {
+            continue;
+        }
         const content = await readFile(filePath, "utf8");
         const matches = content.match(externalUrlPattern);
         if (!matches) {
@@ -422,7 +447,9 @@ export async function buildSecurityAudit(targetPath) {
         ...(await auditMcpCommandSurface(discoveredPackage)),
         ...(await auditChildProcessSourceSurface(discoveredPackage.rootPath)),
         ...(await auditPromptPoisoningSurface(discoveredPackage.rootPath)),
-        ...(await auditSkillExternalReferences(discoveredPackage.rootPath))
+        ...(await auditSkillExternalReferences(discoveredPackage.rootPath, discoveredPackage.manifest.mcpServers
+            ? path.resolve(discoveredPackage.rootPath, discoveredPackage.manifest.mcpServers)
+            : null))
     ];
     return buildSecurityAuditFromFindings(discoveredPackage.rootPath, findings);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-plugin-doctor",
-  "version": "1.51.0",
+  "version": "1.53.0",
   "description": "CLI-first validator for Codex plugins, skills, and MCP package surfaces with runtime MCP protocol validation.",
   "type": "module",
   "main": "./dist/index.js",