@ory/argus 0.1.0 → 0.1.1

package/assets/commands/local-down.md

@@ -7,7 +7,7 @@ preserving data volumes so you can restart later without losing state.
 Run:
 
 ```bash
-npx {{BIN}} local down
+{{NPX}} local down
 ```
 
 To restart later, use {{REF_LOCAL_UP}}.
@@ -15,5 +15,5 @@ To restart later, use {{REF_LOCAL_UP}}.
 To stop **and** remove all data (full reset), run:
 
 ```bash
-npx {{BIN}} local reset
+{{NPX}} local reset
 ```

package/assets/commands/local-up.md

@@ -7,7 +7,7 @@ and an Nginx gateway on port 4000.
 Run:
 
 ```bash
-npx {{BIN}} local up
+{{NPX}} local up
 ```
 
 This will:
@@ -20,8 +20,8 @@ This will:
 After it completes, set the printed environment variables in your shell:
 
 ```bash
-eval "$(npx {{BIN}} local env)"
+eval "$({{NPX}} local env)"
 ```
 
 If services are already running, stop them first with {{REF_LOCAL_DOWN}}
-or use `npx {{BIN}} local status` to check the current state.
+or use `{{NPX}} local status` to check the current state.

package/assets/skills/local-dev/SKILL.md

@@ -14,7 +14,7 @@ manage the lifecycle:
   then seed a test identity, session, and permission tuples.
 - {{REF_LOCAL_DOWN}} — stop all services while preserving data volumes.
 
-Both delegate to `npx {{BIN}} local <subcommand>`, so the same
+Both delegate to `{{NPX}} local <subcommand>`, so the same
 workflow runs from the shell when the command shortcuts are not available.
 
 ## When to use this skill
@@ -69,7 +69,7 @@ docker engine) and retry. Do not try to install Docker for them.
 Tell the user to run {{REF_LOCAL_UP}}, or the equivalent shell command:
 
 ```bash
-npx {{BIN}} local up
+{{NPX}} local up
 ```
 
 Wait for the command to print "All services are running!" and the seed
@@ -79,7 +79,7 @@ output. Capture two values from the output:
 - `ORY_SESSION_TOKEN` (the seeded session token)
 
 If the user wants to skip seeding (to bring their own data), use
-`npx {{BIN}} local up --no-seed` instead.
+`{{NPX}} local up --no-seed` instead.
 
 ## Step 3: Point the app at the local gateway
 
@@ -102,7 +102,7 @@ same value as `basePath` in the Ory `Configuration`.
 machine target the local stack):
 
 ```bash
-npx {{BIN}} local configure
+{{NPX}} local configure
 ```
 
 This writes the URL to the shared plugin config so future agent runs
@@ -148,10 +148,10 @@ Common day-to-day commands:
 
 | Need                           | Command                                  |
 |--------------------------------|------------------------------------------|
-| Re-seed (after `local reset`)  | `npx {{BIN}} local seed`              |
-| Tail Kratos logs               | `npx {{BIN}} local logs kratos -f`    |
-| Check what's running           | `npx {{BIN}} local status`            |
-| Print env vars to copy/paste   | `npx {{BIN}} local env`               |
+| Re-seed (after `local reset`)  | `{{NPX}} local seed`              |
+| Tail Kratos logs               | `{{NPX}} local logs kratos -f`    |
+| Check what's running           | `{{NPX}} local status`            |
+| Print env vars to copy/paste   | `{{NPX}} local env`               |
 
 If the user reports flaky behavior, run `local status` first to confirm
 each service is `healthy`. If a container is unhealthy, `local logs
@@ -161,14 +161,14 @@ have looked at logs.
 ## Step 7: Stop or reset
 
 When the user is done for the session, use {{REF_LOCAL_DOWN}} (equivalent:
-`npx {{BIN}} local down`). Containers stop but volumes
+`{{NPX}} local down`). Containers stop but volumes
 remain, so the next {{REF_LOCAL_UP}} reuses the same identities,
 sessions, and tuples.
 
 For a full wipe (e.g., after schema changes or to clear test data):
 
 ```bash
-npx {{BIN}} local reset
+{{NPX}} local reset
 ```
 
 `reset` removes data volumes and the generated `.ory-dev/ory/` directory.
@@ -179,8 +179,8 @@ plugin updates the bundled service configs.
 
 - **"Docker is not running"** — start Docker Desktop, then re-run
   {{REF_LOCAL_UP}}.
-- **Gateway never becomes healthy** — `npx {{BIN}} local logs
-  gateway` and `npx {{BIN}} local logs kratos` to see which service
+- **Gateway never becomes healthy** — `{{NPX}} local logs
+  gateway` and `{{NPX}} local logs kratos` to see which service
   failed. Port conflicts on `4000`, `4433`, `4444`, or `4466` are the
   usual culprit.
 - **Login works but `whoami` returns 401** — the cookie domain is

package/dist/registry/manager.js

@@ -401,7 +401,25 @@ async function publishAllOryToLocal(opts = {}) {
             if (!fs.existsSync(tarball)) {
                 throw new Error(`Packed ${pkgName} but expected tarball not found at ${tarball}.`);
             }
-            const publishResult = (0, node_child_process_1.spawnSync)("npm", ["publish", tarball, "--registry", config_js_1.REGISTRY_URL, "--access=public"], {
+            // Scope-specific registry override. A developer who has run
+            // `npm login --scope=@ory` (or otherwise set `@ory:registry=…` in
+            // `~/.npmrc`) has a scope-pinned registry that takes precedence
+            // over `--registry` / `npm_config_registry` for scoped publishes.
+            // Without this flag, `npm publish` of an `@ory/*` tarball would
+            // silently target npmjs.org instead of localhost even though we
+            // strip `publishConfig.registry` and pass `--registry`.
+            const scope = packageScope(pkgName);
+            const scopeRegistryArg = scope
+                ? [`--${scope}:registry=${config_js_1.REGISTRY_URL}`]
+                : [];
+            const publishResult = (0, node_child_process_1.spawnSync)("npm", [
+                "publish",
+                tarball,
+                "--registry",
+                config_js_1.REGISTRY_URL,
+                ...scopeRegistryArg,
+                "--access=public",
+            ], {
                 cwd: pkgDir,
                 stdio: opts.quiet ? "pipe" : "inherit",
                 encoding: "utf-8",
@@ -434,6 +452,14 @@ function readPackageNameVersion(pkgJsonPath) {
 function tarballFilename(pkgName, version) {
     return `${pkgName.replace(/^@/, "").replace("/", "-")}-${version}.tgz`;
 }
+function packageScope(pkgName) {
+    if (!pkgName.startsWith("@"))
+        return null;
+    const slash = pkgName.indexOf("/");
+    if (slash < 0)
+        return null;
+    return pkgName.slice(0, slash);
+}
 function emitCapturedOutput(quiet, label, result) {
     if (!quiet)
         return;

package/dist/skills.js

@@ -126,6 +126,7 @@ function buildProfile(harness, opts) {
         tokens: {
             "{{BIN}}": opts.binName,
             "{{PKG}}": opts.packageName,
+            "{{NPX}}": `npx -y -p ${opts.packageName} ${opts.binName}`,
             "{{REF_AUTH_SETUP}}": skillRef("ory-auth-setup"),
             "{{REF_LOGIN_FLOW}}": skillRef("ory-login-flow"),
             "{{REF_SOCIAL_LOGIN}}": skillRef("ory-social-login"),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ory/argus",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Ory Argus: the core API for building authentication, authorization, and audit into AI agent harness plugins, extensions, and custom integrations",
   "license": "Apache-2.0",
   "homepage": "https://ory.com",
@@ -44,7 +44,9 @@
     "hydra"
   ],
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "registry": "https://registry.npmjs.org/",
+    "provenance": true
   },
   "main": "dist/index.js",
   "types": "dist/index.d.ts",