codex-python 0.1.0__tar.gz → 0.1.1__tar.gz

{codex_python-0.1.0 → codex_python-0.1.1}/.github/workflows/publish.yml

@@ -7,6 +7,7 @@ on:
 
 permissions:
   contents: read
+  id-token: write
 
 jobs:
   build-and-publish:
@@ -28,7 +29,5 @@ jobs:
       - name: Build distribution
         run: uv build
 
-      - name: Publish to PyPI
-        env:
-          PYPI_API_TOKEN: ${{ secrets.PYPI_API_TOKEN }}
-        run: uv publish --token "$PYPI_API_TOKEN"
+      - name: Publish to PyPI (Trusted Publishing)
+        run: uv publish --trusted-publishing=always

{codex_python-0.1.0 → codex_python-0.1.1}/.gitignore

@@ -43,3 +43,7 @@ coverage.xml
 # uv
 .uv/
 uv.lock
+
+# Local environment files
+.env
+.env.*

{codex_python-0.1.0 → codex_python-0.1.1}/CHANGELOG.md

@@ -4,6 +4,15 @@ All notable changes to this project will be documented in this file.
 
 The format is based on Keep a Changelog and this project adheres to Semantic Versioning.
 
+## [0.1.1] - 2025-09-10
+### Added
+- CodexClient synchronous wrapper with defaults
+- Python API `run_exec` with robust error handling
+
+### Changed
+- Switch publish workflow to PyPI Trusted Publishing (OIDC)
+- Docs and Makefile updates
+
 ## [0.1.0] - 2025-09-10
 ### Added
 - Initial project scaffold with Python 3.13+
@@ -15,3 +24,4 @@ The format is based on Keep a Changelog and this project adheres to Semantic Ver
 - MIT License
 
 [0.1.0]: https://github.com/gersmann/codex-python/releases/tag/v0.1.0
+[0.1.1]: https://github.com/gersmann/codex-python/releases/tag/v0.1.1

{codex_python-0.1.0 → codex_python-0.1.1}/CONTRIBUTING.md

@@ -36,7 +36,7 @@ This project is typed and ships a `py.typed` marker. Please keep public APIs typ
 2. Update `CHANGELOG.md`.
 3. Merge to `main`.
 4. Tag the release: `git tag -a vX.Y.Z -m "vX.Y.Z" && git push --tags`.
-5. GitHub Actions (publish workflow) will build and publish to PyPI on `v*` tags.
+5. GitHub Actions (publish workflow) will build and publish to PyPI on `v*` tags using Trusted Publishing (OIDC). No token is required.
 
 ## Pre-commit (optional but recommended)
 ```
@@ -51,4 +51,3 @@ Please open an issue with reproduction steps, expected vs actual behavior, and e
 
 ## Code of Conduct
 By participating, you agree to abide by our [Code of Conduct](CODE_OF_CONDUCT.md).
-

codex_python-0.1.1/Makefile

@@ -0,0 +1,51 @@
+.PHONY: help venv fmt lint test build publish clean
+
+help:
+	@echo "Common targets:"
+	@echo "  make lint     - Run ruff and mypy"
+	@echo "  make test     - Run pytest"
+	@echo "  make build    - Build sdist and wheel with uv"
+	@echo "  make publish  - Publish to PyPI via uv (uses PYPI_API_TOKEN)"
+	@echo "  make clean    - Remove build artifacts"
+
+venv:
+	uv venv --python 3.13
+	@echo "Run: . .venv/bin/activate"
+
+fmt:
+	uv run --group dev ruff format .
+
+lint:
+	uv run --group dev ruff format --check .
+	uv run --group dev ruff check .
+	uv run --group dev mypy codex
+
+test:
+	uv run --group dev pytest
+
+build:
+	uv build
+
+publish: build
+	@# Load local environment if present
+	@set -e; \
+	if [ -f .env ]; then set -a; . ./.env; set +a; fi; \
+	if [ -n "$${UV_PUBLISH_TOKEN:-}" ]; then \
+		echo "Publishing with token (UV_PUBLISH_TOKEN)"; \
+		uv publish --token "$${UV_PUBLISH_TOKEN}"; \
+	elif [ -n "$${PYPI_API_TOKEN:-}" ]; then \
+		echo "Publishing with token (PYPI_API_TOKEN)"; \
+		uv publish --token "$${PYPI_API_TOKEN}"; \
+	elif [ -n "$${UV_PUBLISH_USERNAME:-}" ] && [ -n "$${UV_PUBLISH_PASSWORD:-}" ]; then \
+		echo "Publishing with username/password (UV_PUBLISH_USERNAME)"; \
+		uv publish --username "$${UV_PUBLISH_USERNAME}" --password "$${UV_PUBLISH_PASSWORD}"; \
+	elif [ -n "$${PYPI_USERNAME:-}" ] && [ -n "$${PYPI_PASSWORD:-}" ]; then \
+		echo "Publishing with username/password (PYPI_USERNAME)"; \
+		uv publish --username "$${PYPI_USERNAME}" --password "$${PYPI_PASSWORD}"; \
+	else \
+		echo "No credentials found. Set UV_PUBLISH_TOKEN or PYPI_API_TOKEN, or UV_PUBLISH_USERNAME/UV_PUBLISH_PASSWORD (or PYPI_USERNAME/PYPI_PASSWORD)."; \
+		exit 1; \
+	fi
+
+clean:
+	rm -rf build dist *.egg-info .pytest_cache .mypy_cache .ruff_cache

{codex_python-0.1.0 → codex_python-0.1.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: codex-python
-Version: 0.1.0
+Version: 0.1.1
 Summary: A minimal Python library scaffold for codex-python
 Project-URL: Homepage, https://github.com/gersmann/codex-python
 Project-URL: Repository, https://github.com/gersmann/codex-python
@@ -113,8 +113,10 @@ export PYPI_API_TOKEN="pypi-XXXX"  # create at https://pypi.org/manage/account/t
 uv publish --token "$PYPI_API_TOKEN"
 ```
 
-- GitHub Actions: add a repository secret `PYPI_API_TOKEN` and push a tag like `v0.1.0`.
-  The workflow at `.github/workflows/publish.yml` builds and publishes with `uv` on `v*` tags.
+- GitHub Actions (Trusted Publishing): enable PyPI Trusted Publishing for
+  `gersmann/codex-python` and push a tag like `v0.1.0`. No token is needed.
+  The workflow at `.github/workflows/publish.yml` requests an OIDC token and
+  runs `uv publish --trusted-publishing=always` on `v*` tags.
 
 ### Dev tooling
 

{codex_python-0.1.0 → codex_python-0.1.1}/README.md

@@ -73,8 +73,10 @@ export PYPI_API_TOKEN="pypi-XXXX"  # create at https://pypi.org/manage/account/t
 uv publish --token "$PYPI_API_TOKEN"
 ```
 
-- GitHub Actions: add a repository secret `PYPI_API_TOKEN` and push a tag like `v0.1.0`.
-  The workflow at `.github/workflows/publish.yml` builds and publishes with `uv` on `v*` tags.
+- GitHub Actions (Trusted Publishing): enable PyPI Trusted Publishing for
+  `gersmann/codex-python` and push a tag like `v0.1.0`. No token is needed.
+  The workflow at `.github/workflows/publish.yml` requests an OIDC token and
+  runs `uv publish --trusted-publishing=always` on `v*` tags.
 
 ### Dev tooling
 

{codex_python-0.1.0 → codex_python-0.1.1}/codex/__init__.py

@@ -27,4 +27,4 @@ __all__ = [
 ]
 
 # Managed by Hatch via pyproject.toml [tool.hatch.version]
-__version__ = "0.1.0"
+__version__ = "0.1.1"

codex_python-0.1.0/Makefile

@@ -1,37 +0,0 @@
-.PHONY: help venv fmt lint test build publish clean
-
-help:
-	@echo "Common targets:"
-	@echo "  make lint     - Run ruff and mypy"
-	@echo "  make test     - Run pytest"
-	@echo "  make build    - Build sdist and wheel with uv"
-	@echo "  make publish  - Publish to PyPI via uv (uses PYPI_API_TOKEN)"
-	@echo "  make clean    - Remove build artifacts"
-
-venv:
-	uv venv --python 3.13
-	@echo "Run: . .venv/bin/activate"
-
-fmt:
-	uv run --group dev ruff format .
-
-lint:
-	uv run --group dev ruff format --check .
-	uv run --group dev ruff check .
-	uv run --group dev mypy codex
-
-test:
-	uv run --group dev pytest
-
-build:
-	uv build
-
-publish: build
-	@if [ -z "$${PYPI_API_TOKEN}" ]; then \
-		echo "PYPI_API_TOKEN is not set"; \
-		exit 1; \
-	fi
-	uv publish --token "$$PYPI_API_TOKEN"
-
-clean:
-	rm -rf build dist *.egg-info .pytest_cache .mypy_cache .ruff_cache