codex-plugin-doctor 1.58.0 → 1.60.0

package/dist/run-cli.js

@@ -19,6 +19,8 @@ import { buildDoctorRecommendations, renderDoctorRecommendations, renderDoctorRe
 import { buildDoctorExportBundle, renderDoctorExportBundle, renderDoctorExportBundleJson } from "./core/doctor-export-bundle.js";
 import { buildDoctorAttestation, renderDoctorAttestation, renderDoctorAttestationJson, renderDoctorAttestationVerification, renderDoctorAttestationVerificationJson, verifyDoctorAttestation } from "./core/attestation.js";
 import { buildDoctorOutputContract, renderDoctorOutputContract, renderDoctorOutputContractJson } from "./core/output-contract.js";
+import { buildSubmissionArchivePreflight, submissionArchiveExitCode } from "./core/submission-archive-preflight.js";
+import { buildSubmissionPreflight } from "./core/submission-preflight.js";
 import { buildDoctorValidationCorpusReport, renderDoctorValidationCorpusJson, renderDoctorValidationCorpusReport } from "./core/validation-corpus.js";
 import { buildExternalValidationCorpusReport, ExternalCorpusManifestError } from "./core/external-validation-corpus.js";
 import { buildCorpusQualityMetricsDiffReport, buildCorpusQualityMetricsReport, CorpusMetricsDiffError, CorpusMetricsManifestError, renderCorpusQualityMetricsDiffJson, renderCorpusQualityMetricsDiffMarkdown, renderCorpusQualityMetricsDiffText, renderCorpusQualityMetricsJson, renderCorpusQualityMetricsMarkdown, renderCorpusQualityMetricsText } from "./core/corpus-quality-metrics.js";
@@ -57,6 +59,8 @@ import { renderSuppressionList, renderSuppressionListJson, renderSuppressionMuta
 import { renderRuleExplanation } from "./reporting/render-rule-explanation.js";
 import { renderSarifReport } from "./reporting/render-sarif-report.js";
 import { renderTextReport } from "./reporting/render-text-report.js";
+import { renderSubmissionArchiveJson, renderSubmissionArchiveMarkdown, renderSubmissionArchiveText } from "./reporting/render-submission-archive-report.js";
+import { renderSubmissionPreflightJson, renderSubmissionPreflightMarkdown, renderSubmissionPreflightText, submissionPreflightExitCode } from "./reporting/render-submission-report.js";
 import { applyPolicyToDepAudit, applyPolicyToDoctorConfig, applyPolicyToSecurityAudit, parsePolicyPack, policyEnablesRuntime, policyFailsOnWarnings, policyPackNames } from "./policy/policy-packs.js";
 import { findRuleDefinition } from "./rules/rule-catalog.js";
 import { buildSecurityAudit, renderSecurityAuditJson, renderSecurityScorecard } from "./security/security-audit.js";
@@ -86,6 +90,13 @@ const defaultIo = {
         }
     }
 };
+function writeExactStdout(io, message) {
+    if (io === defaultIo) {
+        process.stdout.write(message);
+        return;
+    }
+    io.writeStdout(message);
+}
 class CliUsageError extends Error {
 }
 function parseRuntimeSandbox(flags, options = { requireRuntime: true }) {
@@ -177,6 +188,8 @@ function printUsage(io) {
     io.writeStderr("Suppression governance: codex-plugin-doctor suppress list <path> [--fail-on-expired] [--fail-on-invalid] [--warn-expiring-within-days <days>]\n       codex-plugin-doctor suppress prune <path> [--apply] [--json]");
     io.writeStderr("Baseline gating: codex-plugin-doctor baseline create <path> --output <path> [--runtime]\n       codex-plugin-doctor check <path> --baseline <path>");
     io.writeStderr("Remote MCP runtime flags (check, mcp, release check, and doctor release-evidence): --runtime --allow-network [--allow-local-network] [--allow-session-lifecycle] [--require-remote-reliability]\n       --allow-session-lifecycle requires --runtime --allow-network and can terminate a remote session.\n       --require-remote-reliability requires --runtime --allow-network, blocks non-pass reliability, and does not grant network consent.");
+    io.writeStderr("       codex-plugin-doctor doctor submission <path> [--json|--markdown] [--output <path>] [--require-ready]"
+        + "\n       codex-plugin-doctor doctor submission archive <zip> [--json|--markdown] [--output <path>] [--require-ready]");
 }
 const suppressUsageText = [
     "Usage:",
@@ -970,6 +983,158 @@ function parseSelectedFixActionIndexes(answer, actionCount) {
         ? actionIndexes
         : null;
 }
+function parseSubmissionCommandArgs(args) {
+    let targetPath = null;
+    let jsonOutput = false;
+    let markdownOutput = false;
+    let outputPath = null;
+    let requireReady = false;
+    let optionsEnded = false;
+    for (let index = 0; index < args.length; index += 1) {
+        const argument = args[index];
+        if (argument === "--" && !optionsEnded) {
+            optionsEnded = true;
+        }
+        else if (optionsEnded) {
+            if (targetPath === null) {
+                targetPath = argument;
+            }
+            else {
+                return new CliUsageError(`Unexpected submission argument: ${argument}.`);
+            }
+        }
+        else if (argument === "--json") {
+            if (jsonOutput)
+                return new CliUsageError("Duplicate submission flag: --json.");
+            jsonOutput = true;
+        }
+        else if (argument === "--markdown") {
+            if (markdownOutput)
+                return new CliUsageError("Duplicate submission flag: --markdown.");
+            markdownOutput = true;
+        }
+        else if (argument === "--require-ready") {
+            if (requireReady)
+                return new CliUsageError("Duplicate submission flag: --require-ready.");
+            requireReady = true;
+        }
+        else if (argument === "--output") {
+            if (outputPath !== null)
+                return new CliUsageError("Duplicate submission flag: --output.");
+            const value = args[index + 1];
+            if (!value || value.startsWith("--"))
+                return new CliUsageError("Missing path after --output.");
+            outputPath = value;
+            index += 1;
+        }
+        else if (argument.startsWith("--output=")) {
+            if (outputPath !== null)
+                return new CliUsageError("Duplicate submission flag: --output.");
+            const value = argument.slice("--output=".length);
+            if (!value)
+                return new CliUsageError("Missing path after --output.");
+            outputPath = value;
+        }
+        else if (argument.startsWith("--")) {
+            return new CliUsageError(`Unknown submission flag: ${argument}.`);
+        }
+        else if (targetPath === null) {
+            targetPath = argument;
+        }
+        else {
+            return new CliUsageError(`Unexpected submission argument: ${argument}.`);
+        }
+    }
+    if (targetPath === null)
+        return new CliUsageError("Missing target path for submission.");
+    if (jsonOutput && markdownOutput)
+        return new CliUsageError("Use either --json or --markdown, not both.");
+    return { targetPath, jsonOutput, markdownOutput, outputPath, requireReady };
+}
+function parseSubmissionArchiveCommandArgs(args) {
+    let targetPath = null;
+    let jsonOutput = false;
+    let markdownOutput = false;
+    let outputPath = null;
+    let requireReady = false;
+    let optionsEnded = false;
+    for (let index = 0; index < args.length; index += 1) {
+        const argument = args[index];
+        if (argument === "--" && !optionsEnded)
+            optionsEnded = true;
+        else if (optionsEnded) {
+            if (targetPath === null)
+                targetPath = argument;
+            else
+                return new CliUsageError(`Unexpected submission archive argument: ${argument}.`);
+        }
+        else if (argument === "--json") {
+            if (jsonOutput)
+                return new CliUsageError("Duplicate submission archive flag: --json.");
+            jsonOutput = true;
+        }
+        else if (argument === "--markdown") {
+            if (markdownOutput)
+                return new CliUsageError("Duplicate submission archive flag: --markdown.");
+            markdownOutput = true;
+        }
+        else if (argument === "--require-ready") {
+            if (requireReady)
+                return new CliUsageError("Duplicate submission archive flag: --require-ready.");
+            requireReady = true;
+        }
+        else if (argument === "--output" || argument.startsWith("--output=")) {
+            if (outputPath !== null)
+                return new CliUsageError("Duplicate submission archive flag: --output.");
+            const value = argument === "--output" ? args[index + 1] : argument.slice("--output=".length);
+            if (!value || (argument === "--output" && value.startsWith("--")))
+                return new CliUsageError("Missing path after --output.");
+            outputPath = value;
+            if (argument === "--output")
+                index += 1;
+        }
+        else if (argument.startsWith("--"))
+            return new CliUsageError(`Unknown submission archive flag: ${argument}.`);
+        else if (targetPath === null)
+            targetPath = argument;
+        else
+            return new CliUsageError(`Unexpected submission archive argument: ${argument}.`);
+    }
+    if (targetPath === null)
+        return new CliUsageError("Missing archive path for submission.");
+    if (jsonOutput && markdownOutput)
+        return new CliUsageError("Use either --json or --markdown, not both.");
+    return { targetPath, jsonOutput, markdownOutput, outputPath, requireReady };
+}
+function hasArchiveSubcommandTarget(args) {
+    let optionsEnded = false;
+    for (let index = 0; index < args.length; index += 1) {
+        const argument = args[index];
+        if (optionsEnded)
+            return true;
+        if (argument === "--") {
+            optionsEnded = true;
+        }
+        else if (argument === "--output") {
+            index += 1;
+        }
+        else if (!argument.startsWith("--")) {
+            return true;
+        }
+    }
+    return false;
+}
+async function submissionTargetExists(targetPath) {
+    try {
+        const { stat } = await import("node:fs/promises");
+        await stat(targetPath);
+        return true;
+    }
+    catch (error) {
+        return !(typeof error === "object" && error !== null && "code" in error
+            && error.code === "ENOENT");
+    }
+}
 export async function runCli(args, io = defaultIo, options = {}) {
     const [command, maybePath, ...remainingArgs] = args;
     const runtimeSandboxSupported = (command === "check" &&
@@ -1079,6 +1244,43 @@ export async function runCli(args, io = defaultIo, options = {}) {
                 : renderDoctorOutputContract(contract, { outputPath }));
             return 0;
         }
+        if (maybePath === "submission") {
+            if (remainingArgs[0] === "archive") {
+                const useLegacyDirectoryTarget = !hasArchiveSubcommandTarget(remainingArgs.slice(1))
+                    && await submissionTargetExists("archive");
+                if (!useLegacyDirectoryTarget) {
+                    const parsedArchiveArgs = parseSubmissionArchiveCommandArgs(remainingArgs.slice(1));
+                    if (parsedArchiveArgs instanceof CliUsageError) {
+                        io.writeStderr(parsedArchiveArgs.message);
+                        return 2;
+                    }
+                    const report = await buildSubmissionArchivePreflight(parsedArchiveArgs.targetPath);
+                    const renderedReport = parsedArchiveArgs.jsonOutput
+                        ? renderSubmissionArchiveJson(report)
+                        : parsedArchiveArgs.markdownOutput ? renderSubmissionArchiveMarkdown(report) : renderSubmissionArchiveText(report);
+                    if (parsedArchiveArgs.outputPath)
+                        await writeFile(parsedArchiveArgs.outputPath, renderedReport, "utf8");
+                    writeExactStdout(io, renderedReport);
+                    return submissionArchiveExitCode(report, parsedArchiveArgs.requireReady);
+                }
+            }
+            const parsedSubmissionArgs = parseSubmissionCommandArgs(remainingArgs);
+            if (parsedSubmissionArgs instanceof CliUsageError) {
+                io.writeStderr(parsedSubmissionArgs.message);
+                return 2;
+            }
+            const report = await buildSubmissionPreflight(parsedSubmissionArgs.targetPath);
+            const renderedReport = parsedSubmissionArgs.jsonOutput
+                ? renderSubmissionPreflightJson(report)
+                : parsedSubmissionArgs.markdownOutput
+                    ? renderSubmissionPreflightMarkdown(report)
+                    : renderSubmissionPreflightText(report);
+            if (parsedSubmissionArgs.outputPath) {
+                await writeFile(parsedSubmissionArgs.outputPath, renderedReport, "utf8");
+            }
+            writeExactStdout(io, renderedReport);
+            return submissionPreflightExitCode(report, parsedSubmissionArgs.requireReady);
+        }
         if (maybePath === "mcp") {
             const targetPath = remainingArgs[0] && !remainingArgs[0].startsWith("--")
                 ? remainingArgs[0]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-plugin-doctor",
-  "version": "1.58.0",
+  "version": "1.60.0",
   "description": "CLI-first validator for Codex plugins, skills, and MCP package surfaces with runtime MCP protocol validation.",
   "type": "module",
   "main": "./dist/index.js",
@@ -57,8 +57,15 @@
   },
   "devDependencies": {
     "@types/node": "^24.2.1",
+    "@types/yauzl": "^3.4.0",
     "tsx": "^4.20.4",
     "typescript": "^5.9.2",
     "vitest": "^3.2.4"
+  },
+  "dependencies": {
+    "fast-xml-parser": "^5.11.0",
+    "iconv-lite": "^0.7.3",
+    "yaml": "^2.9.0",
+    "yauzl": "^3.4.0"
   }
 }