codex-plugin-doctor 1.9.0 → 1.10.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -358,9 +358,9 @@ jobs:
358
358
  runs-on: ubuntu-latest
359
359
  steps:
360
360
  - uses: actions/checkout@v5
361
- - uses: Esquetta/CodexPluginDoctor@v1.9.0
361
+ - uses: Esquetta/CodexPluginDoctor@v1.10.0
362
362
  with:
363
- version: "1.9.0"
363
+ version: "1.10.0"
364
364
  path: .
365
365
  runtime: "true"
366
366
  policy: codex-publish
@@ -377,7 +377,32 @@ export async function verifyDoctorReviewBundle(bundleDirectory, options) {
377
377
  message: "The review bundle manifest uses SHA-256 integrity digests."
378
378
  });
379
379
  }
380
+ const expectedIntegrityFileKeys = Object.keys(files).filter((fileKey) => fileKey !== "manifest");
381
+ const integrityFileKeys = Object.keys(manifest.integrity.files);
382
+ for (const fileKey of expectedIntegrityFileKeys) {
383
+ if (!(fileKey in manifest.integrity.files)) {
384
+ integrityStatus = "fail";
385
+ checks.push({
386
+ id: `review_bundle.integrity.${fileKey}`,
387
+ status: "fail",
388
+ message: `${files[fileKey]} is missing a manifest integrity entry.`
389
+ });
390
+ }
391
+ }
392
+ for (const fileKey of integrityFileKeys) {
393
+ if (!expectedIntegrityFileKeys.includes(fileKey)) {
394
+ integrityStatus = "fail";
395
+ checks.push({
396
+ id: `review_bundle.integrity.${fileKey}`,
397
+ status: "fail",
398
+ message: "The review bundle manifest includes an unexpected integrity entry."
399
+ });
400
+ }
401
+ }
380
402
  for (const [fileKey, expected] of Object.entries(manifest.integrity.files)) {
403
+ if (!expectedIntegrityFileKeys.includes(fileKey)) {
404
+ continue;
405
+ }
381
406
  try {
382
407
  const content = await readFile(path.join(resolvedBundleDirectory, expected.path));
383
408
  const digest = sha256(content);
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "codex-plugin-doctor",
3
- "version": "1.9.0",
3
+ "version": "1.10.0",
4
4
  "description": "CLI-first validator for Codex plugins, skills, and MCP package surfaces with runtime MCP protocol validation.",
5
5
  "type": "module",
6
6
  "main": "./dist/index.js",