@ory/codex 0.7.1 → 0.7.3

package/README.md

@@ -66,6 +66,8 @@ Codex surfaces the skill catalog in `/skills` and auto-invokes by description. A
 - **`ory-build-integration`** — pull the runnable subset of an `ory/integrates` template (webhook / config / http-event) into your own app and wire it to your Ory project — no contribution/registry concerns.
 - **`ory-contribute-integration`** — author a brand-new integration as a contribution to `ory/integrates`, including `registry.entry.yaml`, the `Maintained by:` footer, DCO sign-off, and registry regeneration.
 - **`ory-e2b-sandbox`** — scaffold an [E2B](https://e2b.dev) sandbox template that boots with this plugin preinstalled and registered, so every sandbox session is gated by Ory auth, permissions, and tracing without any per-sandbox setup.
+- **`ory-build-agent`** — drop `@ory/argus` directly into a custom agent you own (Claude Agent SDK, OpenAI Agents SDK, Mastra, Vercel AI SDK, PydanticAI, LangGraph, Mistral AI, or Salesforce Agentforce) so the user is authenticated, every tool call is authorized against Ory Permissions, and the lifecycle emits trace spans.
+- **`ory-temporal-worker`** — scaffold a [Temporal](https://temporal.io) TypeScript worker per the [official local-dev guide](https://docs.temporal.io/develop/typescript/set-up-your-local-typescript), with every Activity gated by an Ory permission check, the worker's agent identity resolved via DCR, and the full lifecycle emitting trace spans.
 
 ### Ory MCP server
 
@@ -78,6 +80,7 @@ From Codex's `/skills` menu:
 ```
 ory-local-up      # start a local Ory instance in Docker
 ory-local-down    # tear it all down
+ory-temporal-up   # start a local Temporal dev server (for ory-temporal-worker)
 ```
 
 Or via the CLI: `npx -y -p @ory/codex ory-codex local up | down`.

package/dist/cli/setup.js

@@ -92,10 +92,16 @@ function readPackageVersion() {
         return "0.0.0";
     }
 }
+/**
+ * On Windows, npm-installed CLIs are `.cmd` shims that Node's spawn only
+ * finds via the shell. POSIX shells resolve the bare name directly.
+ */
+const SPAWN_VIA_SHELL = process.platform === "win32";
 function runCodex(args) {
     const result = (0, node_child_process_1.spawnSync)("codex", args, {
         encoding: "utf-8",
         stdio: ["pipe", "pipe", "pipe"],
+        shell: SPAWN_VIA_SHELL,
     });
     const output = ((result.stdout ?? "") + (result.stderr ?? "")).trim();
     return { ok: result.status === 0, output };
@@ -104,6 +110,7 @@ function checkCodexCli() {
     const result = (0, node_child_process_1.spawnSync)("codex", ["--version"], {
         encoding: "utf-8",
         stdio: ["pipe", "pipe", "pipe"],
+        shell: SPAWN_VIA_SHELL,
     });
     return result.status === 0;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ory/codex",
-  "version": "0.7.1",
+  "version": "0.7.3",
   "description": "Ory plugin for Codex: scaffolding skills, a local Ory instance, and authentication, authorization, and audit for every tool call",
   "license": "Apache-2.0",
   "homepage": "https://ory.com",
@@ -66,7 +66,7 @@
     "marketplace"
   ],
   "dependencies": {
-    "@ory/argus": "0.7.1"
+    "@ory/argus": "0.7.3"
   },
   "engines": {
     "node": ">=22"