@ory/antigravity 0.13.8 → 0.14.0

package/README.md

@@ -23,12 +23,14 @@ Run one command. It installs the plugin (registering it with Antigravity via `ag
 npx -y -p @ory/antigravity ory-agy install
 ```
 
-You'll be asked how you want to connect — **press Enter for the default**:
+It opens a guided setup **in your browser** where you pick how to connect — the default takes just a click:
 
 - **Ory Network** *(default)* — sign in, or create a free account, in your browser. The project, keys, permissions, and login are all set up for you. Nothing to configure by hand.
 - **Local** — run a complete Ory on your laptop with Docker. No account, no signup, no keys. Great for trying it out.
 - **Audit-only** — skip Ory entirely and just log what the agent does.
 
+> No browser available (CI, SSH, headless)? The same walkthrough runs right in your terminal instead — or force it with `--no-web`.
+
 That's it. Confirm everything landed with:
 
 ```bash
@@ -68,6 +70,7 @@ The plugin hooks into these Antigravity lifecycle events: `SessionStart` (check
 Everything the plugin does is observable out of the box — no configuration required:
 
 - **Status at a glance.** `npx -y -p @ory/antigravity ory-agy status` shows what's configured, who's signed in, how many built-in tools your permissions cover, and the most recent tool-call activity.
+- **Live dashboard.** `npx -y -p @ory/antigravity ory-agy dashboard` opens the same picture in your browser — configuration, identities, permission coverage, Ory service health, and the latest tool-call activity, all refreshing live. From there you can flip **enforcement** on or off, toggle **user login**, and use **Change stack** to reconnect to a different Ory — no CLI required.
 - **Live traces.** Every tool call is recorded as an OpenTelemetry-style span. Watch them stream as the agent works:
 
   ```bash
@@ -85,7 +88,7 @@ When the watch-mode logs look right, turn on blocking with one command (setup al
 npx -y -p @ory/antigravity ory-agy permissions enforce
 ```
 
-Now a denied tool is actually blocked and Antigravity shows why (the `deny_reason`). Go back to watch mode anytime with `permissions observe`. Use `permissions status` to see what's covered and `permissions bootstrap` to (re-)grant the built-in tools (`run_command`, `view_file`, `write_to_file`, …) — or add permissions for MCP-server tools by hand, or via the Ory MCP server right from inside Antigravity.
+Now a denied tool is actually blocked and Antigravity shows why (the `deny_reason`). Go back to watch mode anytime with `permissions observe`. Prefer clicking? The dashboard has the same **Enforce** switch — flip it on, or back to watch mode, without touching the CLI. Use `permissions status` to see what's covered and `permissions bootstrap` to (re-)grant the built-in tools (`run_command`, `view_file`, `write_to_file`, …) — or add permissions for MCP-server tools by hand, or via the Ory MCP server right from inside Antigravity.
 
 ## Also: add login to your own app
 
@@ -110,11 +113,10 @@ The guided setup covers most people. For scripted or CI setups, or to point at a
 ```bash
 npx -y -p @ory/antigravity ory-agy configure \
   --project-url https://<slug>.projects.oryapis.com \
-  --oauth2-client-id <login client id> \
-  --user-login
+  --oauth2-client-id <login client id>
 ```
 
-The agent's own identity registers itself automatically on first run — nothing to create. The `--oauth2-client-id` is the one piece browser sign-in needs; the guided setup makes it for you, or see below to do it by hand. For logging-only with no checks, use `--audit-only`. The matching env vars are `ORY_PROJECT_URL`, `ORY_OAUTH2_CLIENT_ID`, `ORY_USER_LOGIN`, and `ORY_AGENT_API_KEY`.
+The agent's own identity registers itself automatically on first run — nothing to create. The `--oauth2-client-id` is the one piece browser sign-in needs; the guided setup makes it for you, or see below to do it by hand. For logging-only with no checks, use `--audit-only`. The interactive user login runs every session (always on, non-blocking) and only needs `ORY_OAUTH2_CLIENT_ID` to complete the browser flow. The matching env vars are `ORY_PROJECT_URL`, `ORY_OAUTH2_CLIENT_ID`, and `ORY_AGENT_API_KEY`.
 
 <details>
 <summary>Create the sign-in client by hand</summary>
@@ -123,7 +125,7 @@ The guided setup normally does this. To do it yourself, create a **public** OAut
 
 ```bash
 ory create oauth2-client --project <project-id> \
-  --name "ory-agent-plugin" \
+  --name "Ory Agent Security · user login (PKCE)" \
   --grant-type authorization_code,refresh_token \
   --response-type code \
   --scope openid,offline_access \
@@ -134,7 +136,7 @@ ory create oauth2-client --project <project-id> \
   --redirect-uri http://127.0.0.1:47826/callback
 ```
 
-Pass the resulting id to `configure --oauth2-client-id` (pair it with `--user-login`). Running headless with a session token already? Set `ORY_USER_SESSION_TOKEN` and skip the browser step entirely.
+Pass the resulting id to `configure --oauth2-client-id`. Running headless with a session token already? Set `ORY_USER_SESSION_TOKEN` and skip the browser step entirely.
 
 </details>
 
@@ -143,11 +145,12 @@ With nothing configured, the plugin still loads and runs in **pass-through mode*
 ## Commands
 
 ```
-ory-agy install | uninstall        Install/remove; --reconfigure re-runs setup, --no-configure skips it
+ory-agy install | uninstall        Install/remove; --reconfigure re-runs setup, --no-web forces the terminal wizard, --no-configure skips it
 ory-agy status                      Show configuration, identities, permission coverage, recent activity
+ory-agy dashboard                   Open the live browser dashboard (status + service health + Change stack)
 ory-agy watch                       Tail the live trace stream (OTel spans)
 ory-agy permissions <cmd>           status | bootstrap | observe (watch) | enforce (block)
-ory-agy configure <flags>           Point at a project by hand (--project-url, --oauth2-client-id, --user-login, --audit-only)
+ory-agy configure <flags>           Point at a project by hand (--project-url, --oauth2-client-id, --audit-only)
 ory-agy agent <status|unregister>   Manage the agent's own auto-created identity
 ory-agy local <up|down|status|…>    Run / manage a local Ory in Docker
 ory-agy-setup                        Install into .agents/ directly (no agy binary)

package/dist/cli/assets.js

@@ -88,7 +88,7 @@ function readPackageVersion() {
  * tool name on the tool events.
  */
 function renderHooks(version) {
-    const command = `npx -y -p ${PACKAGE_NAME}@${version} ${HOOK_BIN_NAME}`;
+    const command = (0, argus_1.pinHookToLocalRegistry)(`npx -y -p ${PACKAGE_NAME}@${version} ${HOOK_BIN_NAME}`);
     const entry = (matcher, timeout) => [
         { matcher, hooks: [{ type: "command", command, timeout }] },
     ];

package/dist/cli/main.js

@@ -110,6 +110,12 @@ function main() {
         case "watch":
             (0, argus_1.runWatchCommand)("antigravity", args);
             break;
+        case "dashboard":
+            (0, argus_1.runDashboardCommand)("ory-agy", "antigravity", args).then((code) => process.exit(code), (err) => {
+                console.error(err.message ?? err);
+                process.exit(1);
+            });
+            break;
         case "version":
         case "--version":
         case "-v":
@@ -176,7 +182,7 @@ function printQuickstart() {
     console.log("Quickstart:");
     console.log("  1. Inside Antigravity, run /ory:local-up to start a local Ory stack.");
     console.log('  2. Ask Antigravity "add Ory auth to this app" to scaffold login/signup.');
-    console.log("  3. Set ORY_USER_LOGIN=true to enable the interactive PKCE browser login.");
+    console.log("  3. Set ORY_OAUTH2_CLIENT_ID so the per-session PKCE browser login can complete.");
 }
 async function status() {
     await (0, argus_1.runStatusCommand)("ory-agy", "antigravity", {
@@ -205,6 +211,7 @@ Commands:
   permissions <cmd>      Manage permission mode and tool permissions (status, bootstrap, observe, enforce)
   setup [--project-dir]  Write the plugin bundle into .agents directly (fallback)
   status                 Show plugin status and configuration
+  dashboard            Open the Ory Agent dashboard (system health + configuration)
   watch [trace-file]     Tail the trace stream (OTel spans) live
   version                Show version and the ory-agent-plugins build commit
   local <cmd>            Manage local Ory dev environment (up, down, status, seed, ...)

package/dist/handlers.js

@@ -58,87 +58,24 @@ async function handleSessionStart(input, client, deps) {
     client.tracer.record("session.start", "ok", {
         attributes: { model: input.model, source: input.source },
     });
-    // User login (interactive PKCE / token refresh). Advisory on
-    // Antigravity: SessionStart has no verified hard-block channel
-    // (`allow_tool` only governs PreToolUse), so allowBlock is false — the
-    // gate runs, refreshes tokens, and emits the audit span, but the
-    // session always proceeds. Tool-call enforcement is unaffected.
+    // User login (interactive PKCE / token refresh). Runs every session and
+    // never blocks — it refreshes tokens, prompts if needed, and emits the
+    // audit span, but the session always proceeds. Enforcement happens at
+    // tool-call time and is governed solely by permissionMode.
     const userGate = deps.userLogin ?? argus_1.ensureUserAuthenticated;
-    const decision = await userGate(client, {
+    await userGate(client, {
         binName: "ory-agy",
         harness: HARNESS,
-        allowBlock: false,
     });
     // Resolve the agent identity regardless of how user auth went — never
     // blocks; attaches the agent's bearer token to outgoing Ory calls.
     const agentGate = deps.agentGate ?? argus_1.ensureAgentIdentity;
     await agentGate(client, { projectUrl: (0, argus_1.resolveConfig)().projectUrl, harness: HARNESS });
     // Record the user→agent delegation (audit-trail only; fail-open).
-    await recordUserDelegatesAgent(client);
-    if (decision.mode !== "disabled") {
-        return {};
-    }
-    // Legacy fallthrough: honor pre-supplied tokens for backward compat.
-    const resolved = (0, argus_1.resolveConfig)();
-    if (resolved.auditOnly || !resolved.projectUrl) {
-        return {};
-    }
-    const sessionToken = process.env.ORY_SESSION_TOKEN;
-    const oauth2Token = process.env.ORY_OAUTH2_TOKEN;
-    if (sessionToken) {
-        await verifySessionToken(sessionToken, client);
-    }
-    else if (oauth2Token) {
-        await verifyOAuth2Token(oauth2Token, client);
-    }
-    else {
-        client.logger.warn("session.no_credentials", {
-            message: "No user login enabled and neither ORY_SESSION_TOKEN nor " +
-                "ORY_OAUTH2_TOKEN is set. Skipping authentication.",
-        });
-    }
+    // Written at most once per install.
+    await (0, argus_1.writeUserDelegatesAgent)(client);
     return {};
 }
-async function verifySessionToken(token, client) {
-    try {
-        const session = await client.verifySession(token);
-        if (!session.active) {
-            client.logger.warn("session.inactive", {
-                message: "Ory session is not active. Re-authenticate to enable auth checks.",
-            });
-        }
-    }
-    catch (err) {
-        const oryErr = err;
-        client.logger.warn("session.verify_failed", {
-            code: oryErr.code,
-            message: oryErr.message,
-        });
-    }
-}
-async function verifyOAuth2Token(token, client) {
-    try {
-        const tokenInfo = await client.introspectToken(token);
-        if (!tokenInfo.active) {
-            client.logger.warn("oauth2.token_inactive", {
-                message: "Ory OAuth2 token is not active.",
-            });
-            return;
-        }
-        client.logger.info("oauth2.session_authenticated", {
-            clientId: tokenInfo.clientId,
-            subject: tokenInfo.subject,
-            scope: tokenInfo.scope,
-        });
-    }
-    catch (err) {
-        const oryErr = err;
-        client.logger.warn("oauth2.introspect_failed", {
-            code: oryErr.code,
-            message: oryErr.message,
-        });
-    }
-}
 // ─── PreToolUse ─────────────────────────────────────────────────────
 async function handlePreToolUse(input, client) {
     const toolName = input.tool_name ?? "unknown";
@@ -261,37 +198,6 @@ function handleSessionEnd(input, client) {
 function resolveNamespace() {
     return process.env.ORY_PERMISSION_NAMESPACE ?? "AgentTools";
 }
-/**
- * Write the user→agent delegation tuple. Idempotent and fail-open:
- * needs both principal subjects; any error is logged and swallowed.
- */
-async function recordUserDelegatesAgent(client) {
-    const user = client.userPrincipal.subject;
-    const agent = client.agentPrincipal.subject;
-    if (!user || !agent) {
-        client.logger.debug("delegation.skip", {
-            reason: "missing principal",
-            hasUser: !!user,
-            hasAgent: !!agent,
-        });
-        return;
-    }
-    try {
-        await client.createRelationship({
-            namespace: resolveNamespace(),
-            object: `agent:${agent}`,
-            relation: "delegate",
-            subjectId: `user:${user}`,
-        }, { spanAttributes: { delegation: "user-to-agent" } });
-    }
-    catch (err) {
-        const oryErr = err;
-        client.logger.warn("delegation.user_to_agent.failed", {
-            code: oryErr.code,
-            message: oryErr.message,
-        });
-    }
-}
 /**
  * Fail-open on a permission-check error: log and allow the tool. Critical
  * on Antigravity — returning anything other than `allow_tool: true` here

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ory/antigravity",
-  "version": "0.13.8",
+  "version": "0.14.0",
   "description": "Ory plugin for Google Antigravity: scaffolding skills, a local Ory instance, and authentication, authorization, and audit for every tool call",
   "license": "Apache-2.0",
   "homepage": "https://github.com/ory/ory-agent-plugins/tree/main/packages/antigravity",
@@ -73,7 +73,7 @@
   ],
   "dependencies": {
     "reo-census": "^1.2.8",
-    "@ory/argus": "0.13.8"
+    "@ory/argus": "0.14.0"
   },
   "devDependencies": {
     "typescript": "^6.0.2",