nerftools 1.2.0__tar.gz → 1.3.0__tar.gz

nerftools-1.3.0/.agents/plugins/marketplace.json

@@ -0,0 +1,12 @@
+{
+  "name": "nerftools",
+  "plugins": [
+    {
+      "name": "nerftools-default",
+      "source": {
+        "source": "local",
+        "path": "./out/codex-plugin"
+      }
+    }
+  ]
+}

{nerftools-1.2.0 → nerftools-1.3.0}/.github/workflows/release-please.yml

@@ -64,14 +64,17 @@ jobs:
       - name: Regenerate Claude Code plugin
         run: uv run nerf generate --target claude-plugin -c nerf.yaml --outdir ./out/claude-plugin
 
-      - name: Commit updated plugin and lockfile
+      - name: Regenerate Codex plugin
+        run: uv run nerf generate --target codex-plugin -c nerf.yaml --outdir ./out/codex-plugin
+
+      - name: Commit updated plugins and lockfile
         run: |
           git config user.name "nerftools-release[bot]"
           git config user.email "nerftools-release[bot]@users.noreply.github.com"
-          git add out/claude-plugin/ uv.lock
+          git add out/claude-plugin/ out/codex-plugin/ uv.lock
           if git diff --cached --quiet; then
             echo "No changes to plugin output or lockfile"
           else
-            git commit -m "build: regenerate Claude Code plugin for release"
+            git commit -m "build: regenerate plugins for release"
             git push
           fi

nerftools-1.3.0/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "1.3.0"
+}

{nerftools-1.2.0 → nerftools-1.3.0}/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [1.3.0](https://github.com/WayfarerLabs/nerftools/compare/v1.2.0...v1.3.0) (2026-05-09)
+
+
+### Features
+
+* add codex marketplace registration ([dedd5f4](https://github.com/WayfarerLabs/nerftools/commit/dedd5f49b9d7ef303e92baaf6a3a1e87cc6c28be))
+* add codex-plugin target for OpenAI Codex agent support ([8b7e655](https://github.com/WayfarerLabs/nerftools/commit/8b7e6555b73a635cc890e4ab753de874983a8db4))
+* add codex-plugin target for OpenAI Codex support ([85cf792](https://github.com/WayfarerLabs/nerftools/commit/85cf792477234354537e7ec25c393c0b5c771086))
+
+
+### Bug Fixes
+
+* guard codex cleanup against symlinked directories ([ebdf2fd](https://github.com/WayfarerLabs/nerftools/commit/ebdf2fd41c1ac251d776ab41180284ba391a675a))
+
 ## [1.2.0](https://github.com/WayfarerLabs/nerftools/compare/v1.1.0...v1.2.0) (2026-05-06)
 
 

{nerftools-1.2.0 → nerftools-1.3.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: nerftools
-Version: 1.2.0
+Version: 1.3.0
 Summary: Define and generate nerf tools: limited-scope wrappers for common CLI utilities that allow for fine-grained control over agent execution
 Project-URL: Homepage, https://github.com/WayfarerLabs/nerftools
 Project-URL: Repository, https://github.com/WayfarerLabs/nerftools

{nerftools-1.2.0 → nerftools-1.3.0}/nerf.yaml

@@ -3,7 +3,7 @@
 
 package:
   name: nerftools
-  version: 1.2.0 # x-release-please-version
+  version: 1.3.0 # x-release-please-version
   description: Scoped, safety-constrained CLI wrappers for AI agents
   author:
     name: WayfarerLabs

{nerftools-1.2.0 → nerftools-1.3.0}/nerftools/cli.py

@@ -18,7 +18,7 @@ app = typer.Typer(
     no_args_is_help=True,
 )
 
-_VALID_TARGETS = ("bin", "skills", "claude-plugin")
+_VALID_TARGETS = ("bin", "skills", "claude-plugin", "codex-plugin")
 
 
 def _resolve_config_manifests(config_manifests: list[str], config_path: Path | None) -> list[Path]:
@@ -176,3 +176,18 @@ def generate(
             )
             for path in written:
                 typer.echo(f"  {path}")
+
+        elif t == "codex-plugin":
+            from nerftools.config import resolve_plugin_meta
+            from nerftools.formats import build_codex_plugin
+
+            plugin_meta = resolve_plugin_meta(config)
+
+            written = build_codex_plugin(
+                loaded,
+                output,
+                plugin_meta,
+                prefix=prefix,
+            )
+            for path in written:
+                typer.echo(f"  {path}")

{nerftools-1.2.0 → nerftools-1.3.0}/nerftools/config.py

@@ -346,20 +346,13 @@ def _parse_marketplace_config(raw: Any) -> MarketplaceConfig:
 # -- Defaults resolution -------------------------------------------------------
 
 
-def resolve_claude_plugin_meta(
-    config: NerfConfig,
-) -> tuple[PluginMetadata, MarketplaceMetadata | None]:
-    """Build ``PluginMetadata`` and optional ``MarketplaceMetadata`` from config.
+def resolve_plugin_meta(config: NerfConfig) -> PluginMetadata:
+    """Build ``PluginMetadata`` from package config.
 
-    Applies defaults cascade:
-    - marketplace.name ← package.name
-    - marketplace.description ← package.description
-    - marketplace.owner.name ← package.author.name if present, else package.name
+    Shared by all plugin targets (claude-plugin, codex-plugin).
     """
     pkg = config.package
-    mkt = config.targets.claude_plugin.marketplace
-
-    plugin = PluginMetadata(
+    return PluginMetadata(
         name=pkg.name,
         version=pkg.version,
         description=pkg.description,
@@ -370,10 +363,25 @@ def resolve_claude_plugin_meta(
         keywords=list(pkg.keywords),
     )
 
+
+def resolve_claude_plugin_meta(
+    config: NerfConfig,
+) -> tuple[PluginMetadata, MarketplaceMetadata | None]:
+    """Build ``PluginMetadata`` and optional ``MarketplaceMetadata`` from config.
+
+    Applies defaults cascade:
+    - marketplace.name ← package.name
+    - marketplace.description ← package.description
+    - marketplace.owner.name ← package.author.name if present, else package.name
+    """
+    plugin = resolve_plugin_meta(config)
+
+    mkt = config.targets.claude_plugin.marketplace
     if not mkt.embed:
         return plugin, None
 
     # Cascade marketplace fields from package.
+    pkg = config.package
     mp_name = mkt.name or pkg.name
     mp_description = mkt.description or pkg.description
     mp_owner = mkt.owner

{nerftools-1.2.0 → nerftools-1.3.0}/nerftools/formats.py

@@ -1,7 +1,7 @@
-"""Claude Code plugin builder for nerf tools (v1).
+"""Plugin builders for nerf tools (v1).
 
-Generates a self-contained Claude Code plugin from nerf manifests, including
-skills, scripts, plugin manifest, and marketplace metadata.
+Generates self-contained plugins from nerf manifests for Claude Code and
+Codex, including skills, scripts, plugin manifests, and marketplace metadata.
 """
 
 from __future__ import annotations
@@ -280,15 +280,18 @@ def _build_claude_plugin_skill_text(manifest: NerfManifest, prefix: str = "") ->
     return "\n".join(parts).rstrip() + "\n"
 
 
-def _claude_plugin_tool_section(tool_name: str, skill_group: str, tool_spec: ToolSpec) -> str:
-    """Generate a tool section for the claude-plugin format."""
+def _tool_section(tool_name: str, tool_spec: ToolSpec, *, script_path: str) -> str:
+    """Generate a tool section for a plugin skill.
+
+    Shared by all plugin targets — the caller passes the resolved *script_path*
+    (absolute for Claude, relative for Codex).
+    """
     parts: list[str] = []
     parts.append(f"## {tool_name}")
     parts.append("")
     parts.append(tool_spec.description)
     parts.append("")
 
-    script_path = f"${{CLAUDE_PLUGIN_ROOT}}/skills/{skill_group}/scripts/{tool_name}"
     usage = " ".join([script_path, *usage_tokens(tool_spec)])
     parts.append(f"**Usage:** `{usage}`")
 
@@ -334,12 +337,20 @@ def _claude_plugin_tool_section(tool_name: str, skill_group: str, tool_spec: Too
     return "\n".join(parts)
 
 
-def _build_claude_plugin_overview_text(
+def _claude_plugin_tool_section(tool_name: str, skill_group: str, tool_spec: ToolSpec) -> str:
+    """Generate a tool section using ``${CLAUDE_PLUGIN_ROOT}`` paths."""
+    script_path = f"${{CLAUDE_PLUGIN_ROOT}}/skills/{skill_group}/scripts/{tool_name}"
+    return _tool_section(tool_name, tool_spec, script_path=script_path)
+
+
+def _overview_text(
     manifests: list[NerfManifest],
     plugin_meta: PluginMetadata,
     prefix: str = "",
+    *,
+    path_instruction: str,
 ) -> str:
-    """Generate the overview SKILL.md for the claude-plugin format."""
+    """Generate the overview SKILL.md shared by all plugin targets."""
     parts: list[str] = []
 
     parts.append("---")
@@ -363,9 +374,7 @@ def _build_claude_plugin_overview_text(
         "rather than using raw `git` commands."
     )
     parts.append("")
-    parts.append(
-        "Each tool's usage line shows the full absolute path to call it. Use that path directly in Bash commands."
-    )
+    parts.append(path_instruction)
     parts.append("")
     parts.append("## Available tool packages")
     parts.append("")
@@ -378,3 +387,156 @@ def _build_claude_plugin_overview_text(
     parts.append("Use the corresponding `nerf-*` skill for full usage details on each package.")
 
     return "\n".join(parts).rstrip() + "\n"
+
+
+def _build_claude_plugin_overview_text(
+    manifests: list[NerfManifest],
+    plugin_meta: PluginMetadata,
+    prefix: str = "",
+) -> str:
+    """Generate the overview SKILL.md for the claude-plugin format."""
+    return _overview_text(
+        manifests,
+        plugin_meta,
+        prefix,
+        path_instruction=(
+            "Each tool's usage line shows the full absolute path to call it. "
+            "Use that path directly in Bash commands."
+        ),
+    )
+
+
+# -- Codex plugin format -------------------------------------------------------
+
+
+def build_codex_plugin(
+    manifests: list[NerfManifest],
+    output_dir: Path,
+    plugin_meta: PluginMetadata,
+    *,
+    prefix: str = "nerf-",
+) -> list[Path]:
+    """Build a self-contained Codex plugin.
+
+    Layout::
+
+        output_dir/
+        ├── .codex-plugin/
+        │   └── plugin.json
+        └── skills/
+            ├── <plugin-name>/SKILL.md       (overview)
+            ├── <prefix><group>/
+            │   ├── SKILL.md
+            │   └── scripts/<prefix><tool>   (executable scripts)
+            └── ...
+
+    Script paths in SKILL.md are relative to the skill directory — Codex
+    resolves them from the absolute path it injects into the system prompt.
+    """
+    import json
+    import shutil
+
+    from nerftools.builder import build_script_text
+
+    written: list[Path] = []
+
+    # Always start clean
+    output_dir.mkdir(parents=True, exist_ok=True)
+    for item in output_dir.iterdir():
+        if item.is_symlink():
+            raise ValueError(
+                f"refusing to clean symlink in output directory: {item}. "
+                "Please remove the symlink manually before proceeding."
+            )
+        if item.is_dir():
+            shutil.rmtree(item)
+        elif item.is_file():
+            item.unlink()
+
+    # Plugin manifest
+    plugin_dir = output_dir / ".codex-plugin"
+    plugin_dir.mkdir(exist_ok=True)
+
+    p = plugin_dir / "plugin.json"
+    p.write_text(json.dumps(plugin_meta.to_json(), indent=2) + "\n")
+    written.append(p)
+
+    skills_dir = output_dir / "skills"
+    skills_dir.mkdir(exist_ok=True)
+
+    # Per-package: skill + scripts
+    for manifest in manifests:
+        group = prefix + manifest.package.skill_group
+        skill_dir = skills_dir / group
+        skill_dir.mkdir(exist_ok=True)
+        scripts_dir = skill_dir / "scripts"
+        scripts_dir.mkdir(exist_ok=True)
+
+        # Generate scripts into the skill's scripts/ dir
+        for tool_name, tool_spec in manifest.tools.items():
+            full_name = prefix + tool_name
+            script_text = build_script_text(full_name, manifest.package.name, tool_spec)
+            out = scripts_dir / full_name
+            out.write_bytes(script_text.encode("utf-8"))
+            out.chmod(0o755)
+            written.append(out)
+
+        # Generate skill with relative path references
+        skill_text = _build_codex_plugin_skill_text(manifest, prefix=prefix)
+        out = skill_dir / "SKILL.md"
+        out.write_text(skill_text)
+        written.append(out)
+
+    # Overview skill
+    if manifests:
+        overview_text = _overview_text(
+            manifests,
+            plugin_meta,
+            prefix,
+            path_instruction=(
+                "Each tool's usage line shows the path to call it relative to "
+                "this skill's directory."
+            ),
+        )
+        overview_dir = skills_dir / plugin_meta.name
+        overview_dir.mkdir(exist_ok=True)
+        out = overview_dir / "SKILL.md"
+        out.write_text(overview_text)
+        written.append(out)
+
+    return written
+
+
+def _build_codex_plugin_skill_text(manifest: NerfManifest, prefix: str = "") -> str:
+    """Generate a SKILL.md for the codex-plugin format.
+
+    Uses relative script paths — Codex resolves them from the skill's
+    listed file path in the system prompt.
+    """
+    parts: list[str] = []
+    skill_group = prefix + manifest.package.skill_group
+
+    parts.append("---")
+    parts.append(f"name: {skill_group}")
+    parts.append(f'description: "{manifest.package.description}"')
+    parts.append('targets: ["*"]')
+    parts.append("---")
+    parts.append("")
+    parts.append(f"# {skill_group}")
+    parts.append("")
+    parts.append(
+        "These tools are available as scripts within this skill. "
+        "Call them using the paths shown in each usage line."
+    )
+    parts.append("")
+
+    if manifest.package.skill_intro:
+        parts.append(manifest.package.skill_intro.strip())
+        parts.append("")
+
+    for tool_name, tool_spec in manifest.tools.items():
+        full_name = prefix + tool_name
+        script_path = f"scripts/{full_name}"
+        parts.append(_tool_section(full_name, tool_spec, script_path=script_path))
+
+    return "\n".join(parts).rstrip() + "\n"

{nerftools-1.2.0 → nerftools-1.3.0}/out/claude-plugin/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "nerftools",
-  "version": "1.2.0",
+  "version": "1.3.0",
   "description": "Scoped, safety-constrained CLI wrappers for AI agents",
   "skills": "./skills/",
   "author": {

nerftools-1.3.0/out/codex-plugin/.codex-plugin/plugin.json

@@ -0,0 +1,18 @@
+{
+  "name": "nerftools",
+  "version": "1.3.0",
+  "description": "Scoped, safety-constrained CLI wrappers for AI agents",
+  "skills": "./skills/",
+  "author": {
+    "name": "WayfarerLabs"
+  },
+  "homepage": "https://github.com/WayfarerLabs/nerftools",
+  "repository": "https://github.com/WayfarerLabs/nerftools",
+  "license": "MIT",
+  "keywords": [
+    "claude-code",
+    "agent-tools",
+    "safety",
+    "cli-wrappers"
+  ]
+}

nerftools-1.3.0/out/codex-plugin/skills/nerf-az-account/SKILL.md

@@ -0,0 +1,57 @@
+---
+name: nerf-az-account
+description: "Azure subscription and identity context tools"
+targets: ["*"]
+---
+
+# nerf-az-account
+
+These tools are available as scripts within this skill. Call them using the paths shown in each usage line.
+
+Tools for inspecting and switching the active Azure subscription.
+az-account-show reports the active subscription and signed-in identity.
+az-account-list enumerates all subscriptions the principal can see.
+az-account-set switches the active subscription for the session.
+
+Scope note: every az-* tool accepts --subscription. The wrappers do
+not enforce a subscription allow-list; the principal's Azure RBAC is
+the actual boundary. If the signed-in identity has access to
+multiple subscriptions or guest access in other tenants, those are
+all reachable via --subscription. Restrict the principal at the
+Entra/RBAC layer if you need a tighter scope than "everything the
+identity can see."
+
+## nerf-az-account-show
+
+Show the currently active subscription and signed-in identity.
+
+**Usage:** `scripts/nerf-az-account-show`
+**Maps to:** `az account show --output json`
+
+No arguments.
+
+---
+
+## nerf-az-account-list
+
+List all Azure subscriptions accessible to the signed-in principal.
+
+**Usage:** `scripts/nerf-az-account-list`
+**Maps to:** `az account list --output json`
+
+No arguments.
+
+---
+
+## nerf-az-account-set
+
+Switch the active Azure subscription for this session.
+
+**Usage:** `scripts/nerf-az-account-set <subscription>`
+**Maps to:** `az account set --subscription <subscription>`
+
+**Arguments:**
+
+- `<subscription>` (required): Subscription name or ID
+
+---

nerftools-1.3.0/out/codex-plugin/skills/nerf-az-account/scripts/nerf-az-account-list

@@ -0,0 +1,39 @@
+#!/usr/bin/env bash
+# nerf-az-account-list -- List all Azure subscriptions accessible to the signed-in principal.
+# Generated from az-account manifest. Do not edit directly.
+# nerf:threat:read=remote
+# nerf:threat:write=none
+
+set -euo pipefail
+
+_NERF_DRY_RUN=""
+
+usage() {
+  cat >&2 <<'EOF'
+Usage: nerf-az-account-list
+
+Maps to: az account list --output json
+
+List all Azure subscriptions accessible to the signed-in principal.
+EOF
+  exit 1
+}
+
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --nerf-dry-run) _NERF_DRY_RUN="true"; shift 1 ;;
+    -h|--help) usage ;;
+    --) shift; break ;;
+    *) echo "error: unknown argument: $1" >&2; usage ;;
+  esac
+done
+
+if [[ "$_NERF_DRY_RUN" == "true" ]]; then
+  _NERF_DRY_CMD=(az account list --output json)
+  printf 'dry-run:'
+  for _a in "${_NERF_DRY_CMD[@]}"; do printf " %q" "$_a"; done
+  echo
+  exit 0
+fi
+
+exec az account list --output json

nerftools-1.3.0/out/codex-plugin/skills/nerf-az-account/scripts/nerf-az-account-set

@@ -0,0 +1,69 @@
+#!/usr/bin/env bash
+# nerf-az-account-set -- Switch the active Azure subscription for this session.
+# Generated from az-account manifest. Do not edit directly.
+# nerf:threat:read=remote
+# nerf:threat:write=machine
+
+set -euo pipefail
+
+_NERF_DRY_RUN=""
+
+usage() {
+  cat >&2 <<'EOF'
+Usage: nerf-az-account-set <subscription>
+
+Arguments:
+  <subscription> (required)
+      Subscription name or ID
+
+Maps to: az account set --subscription <subscription>
+
+Switch the active Azure subscription for this session.
+EOF
+  exit 1
+}
+
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --nerf-dry-run) _NERF_DRY_RUN="true"; shift 1 ;;
+    -h|--help) usage ;;
+    --) shift; break ;;
+    *) break ;;
+  esac
+done
+
+_SUBSCRIPTION_SET=""
+if [[ $# -gt 0 ]]; then
+  SUBSCRIPTION="$1"
+  _SUBSCRIPTION_SET=true
+  shift
+else
+  SUBSCRIPTION=""
+fi
+if [[ $# -gt 0 ]]; then
+  echo "error: nerf-az-account-set: unexpected extra arguments: $*" >&2
+  echo "  hint: switches and options must come before positional arguments" >&2
+  exit 1
+fi
+
+if [[ -n "${_SUBSCRIPTION_SET}" ]] && [[ "${SUBSCRIPTION}" == -* ]]; then
+  echo "error: nerf-az-account-set: <subscription> cannot start with '-'" >&2
+  echo "  hint: use -- before positional arguments if needed" >&2
+  exit 1
+fi
+
+if [[ -z "${SUBSCRIPTION}" ]]; then
+  echo "error: nerf-az-account-set: missing required argument <subscription>" >&2
+  echo "  hint: provide a value for <subscription>" >&2
+  usage
+fi
+
+if [[ "$_NERF_DRY_RUN" == "true" ]]; then
+  _NERF_DRY_CMD=(az account set --subscription "${SUBSCRIPTION}")
+  printf 'dry-run:'
+  for _a in "${_NERF_DRY_CMD[@]}"; do printf " %q" "$_a"; done
+  echo
+  exit 0
+fi
+
+exec az account set --subscription "${SUBSCRIPTION}"

nerftools-1.3.0/out/codex-plugin/skills/nerf-az-account/scripts/nerf-az-account-show

@@ -0,0 +1,39 @@
+#!/usr/bin/env bash
+# nerf-az-account-show -- Show the currently active subscription and signed-in identity.
+# Generated from az-account manifest. Do not edit directly.
+# nerf:threat:read=remote
+# nerf:threat:write=none
+
+set -euo pipefail
+
+_NERF_DRY_RUN=""
+
+usage() {
+  cat >&2 <<'EOF'
+Usage: nerf-az-account-show
+
+Maps to: az account show --output json
+
+Show the currently active subscription and signed-in identity.
+EOF
+  exit 1
+}
+
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --nerf-dry-run) _NERF_DRY_RUN="true"; shift 1 ;;
+    -h|--help) usage ;;
+    --) shift; break ;;
+    *) echo "error: unknown argument: $1" >&2; usage ;;
+  esac
+done
+
+if [[ "$_NERF_DRY_RUN" == "true" ]]; then
+  _NERF_DRY_CMD=(az account show --output json)
+  printf 'dry-run:'
+  for _a in "${_NERF_DRY_CMD[@]}"; do printf " %q" "$_a"; done
+  echo
+  exit 0
+fi
+
+exec az account show --output json