@ory/argus 0.1.0

package/dist/index.js

@@ -0,0 +1,137 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.printOryConfig = exports.runAgentCommand = exports.runConfigureCommand = exports.AGENT_TOKEN_EXPIRY_SKEW_SEC = exports.clearSubAgentDynamicCredentials = exports.saveSubAgentDynamicCredentials = exports.loadSubAgentDynamicCredentials = exports.clearAgentDynamicCredentials = exports.saveAgentDynamicCredentials = exports.loadAgentDynamicCredentials = exports.registerAgentClient = exports.fetchClientCredentialsToken = exports.ensureSubAgentIdentity = exports.ensureAgentIdentity = exports.resolveAgentCredentials = exports.ensureAuthenticated = exports.ensureUserAuthenticated = exports.TOKEN_EXPIRY_SKEW_SEC = exports.waitForPeerTokensSync = exports.waitForPeerTokens = exports.clearPkceFlightLock = exports.tryAcquirePkceFlightLock = exports.refreshAndSave = exports.isExpired = exports.clearTokens = exports.saveTokens = exports.loadTokens = exports.DEFAULT_LOGIN_TIMEOUT_MS = exports.LOOPBACK_PORTS = exports.buildAuthorizeUrl = exports.sha256Base64Url = exports.generateCodeVerifier = exports.detectHeadless = exports.refreshAccessToken = exports.pkceLogin = exports.getHarnessDataDir = exports.getDataDir = exports.getConfigPath = exports.mutateConfig = exports.resolveConfig = exports.saveConfig = exports.loadConfig = exports.watchTraceFile = exports.formatSpan = exports.deriveTraceId = exports.ActiveSpan = exports.Tracer = exports.redactLogData = exports.DebugLogger = exports.OryAgentClient = void 0;
+exports.checkMcpPermission = exports.parseMcpToolGeneric = exports.parseGeminiMcpTool = exports.parseClaudeCodeMcpTool = exports.runRegistryCommand = exports.DEV_JAEGER_CONTAINER = exports.stopDevJaeger = exports.ensureDevJaeger = exports.runLocalCommand = exports.ORY_COMMAND_SLUGS = exports.ORY_COMMAND_SKILL_NAMES = exports.ORY_SKILL_NAMES = exports.removeSkillDirs = exports.writeSkillTree = exports.toSkillMarkdown = exports.commandToPlainMarkdown = exports.commandToFrontmatterMarkdown = exports.commandToToml = exports.commandToSkill = exports.renderOryCommands = exports.renderOrySkills = exports.runDevLauncher = exports.unregisterPlugin = exports.registerPlugin = exports.removeMcpServer = exports.mergeMcpServer = exports.mcpServerEntry = exports.resolveMcpServerCommand = exports.printNextSteps = exports.printSetupHelp = exports.removeFlatHooks = exports.mergeFlatHooks = exports.flatHookEntry = exports.removeMatcherHooks = exports.mergeMatcherHooks = exports.matcherHookEntry = exports.resolveHookCommand = exports.isOryHookCommand = exports.writeJsonFile = exports.readJsonFile = exports.parseSetupArgs = exports.interactiveConfigPrompt = exports.promptForProjectUrl = exports.promptOnTty = exports.isTtyAvailable = exports.runWatchCommand = exports.printTraceTail = exports.printEnvHelp = exports.printLogTail = exports.printEnvironment = void 0;
+exports.parseKeyValueList = exports.otlpExporterFromEnv = exports.OtlpHttpExporter = exports.summarizeToolOutput = exports.summarizeToolInput = exports.OryDenialError = exports.alertAttributes = exports.formatAlertSummary = exports.formatAlertMessage = exports.formatDenialSummary = exports.formatDenialMessage = exports.subjectLabel = exports.resolveUserSubject = void 0;
+var client_js_1 = require("./client.js");
+Object.defineProperty(exports, "OryAgentClient", { enumerable: true, get: function () { return client_js_1.OryAgentClient; } });
+var logger_js_1 = require("./logger.js");
+Object.defineProperty(exports, "DebugLogger", { enumerable: true, get: function () { return logger_js_1.DebugLogger; } });
+Object.defineProperty(exports, "redactLogData", { enumerable: true, get: function () { return logger_js_1.redactLogData; } });
+var tracer_js_1 = require("./tracer.js");
+Object.defineProperty(exports, "Tracer", { enumerable: true, get: function () { return tracer_js_1.Tracer; } });
+Object.defineProperty(exports, "ActiveSpan", { enumerable: true, get: function () { return tracer_js_1.ActiveSpan; } });
+Object.defineProperty(exports, "deriveTraceId", { enumerable: true, get: function () { return tracer_js_1.deriveTraceId; } });
+Object.defineProperty(exports, "formatSpan", { enumerable: true, get: function () { return tracer_js_1.formatSpan; } });
+Object.defineProperty(exports, "watchTraceFile", { enumerable: true, get: function () { return tracer_js_1.watchTraceFile; } });
+var config_js_1 = require("./config.js");
+Object.defineProperty(exports, "loadConfig", { enumerable: true, get: function () { return config_js_1.loadConfig; } });
+Object.defineProperty(exports, "saveConfig", { enumerable: true, get: function () { return config_js_1.saveConfig; } });
+Object.defineProperty(exports, "resolveConfig", { enumerable: true, get: function () { return config_js_1.resolveConfig; } });
+Object.defineProperty(exports, "mutateConfig", { enumerable: true, get: function () { return config_js_1.mutateConfig; } });
+Object.defineProperty(exports, "getConfigPath", { enumerable: true, get: function () { return config_js_1.getConfigPath; } });
+Object.defineProperty(exports, "getDataDir", { enumerable: true, get: function () { return config_js_1.getDataDir; } });
+Object.defineProperty(exports, "getHarnessDataDir", { enumerable: true, get: function () { return config_js_1.getHarnessDataDir; } });
+var auth_js_1 = require("./auth.js");
+Object.defineProperty(exports, "pkceLogin", { enumerable: true, get: function () { return auth_js_1.pkceLogin; } });
+Object.defineProperty(exports, "refreshAccessToken", { enumerable: true, get: function () { return auth_js_1.refreshAccessToken; } });
+Object.defineProperty(exports, "detectHeadless", { enumerable: true, get: function () { return auth_js_1.detectHeadless; } });
+Object.defineProperty(exports, "generateCodeVerifier", { enumerable: true, get: function () { return auth_js_1.generateCodeVerifier; } });
+Object.defineProperty(exports, "sha256Base64Url", { enumerable: true, get: function () { return auth_js_1.sha256Base64Url; } });
+Object.defineProperty(exports, "buildAuthorizeUrl", { enumerable: true, get: function () { return auth_js_1.buildAuthorizeUrl; } });
+Object.defineProperty(exports, "LOOPBACK_PORTS", { enumerable: true, get: function () { return auth_js_1.LOOPBACK_PORTS; } });
+Object.defineProperty(exports, "DEFAULT_LOGIN_TIMEOUT_MS", { enumerable: true, get: function () { return auth_js_1.DEFAULT_LOGIN_TIMEOUT_MS; } });
+var auth_store_js_1 = require("./auth-store.js");
+Object.defineProperty(exports, "loadTokens", { enumerable: true, get: function () { return auth_store_js_1.loadTokens; } });
+Object.defineProperty(exports, "saveTokens", { enumerable: true, get: function () { return auth_store_js_1.saveTokens; } });
+Object.defineProperty(exports, "clearTokens", { enumerable: true, get: function () { return auth_store_js_1.clearTokens; } });
+Object.defineProperty(exports, "isExpired", { enumerable: true, get: function () { return auth_store_js_1.isExpired; } });
+Object.defineProperty(exports, "refreshAndSave", { enumerable: true, get: function () { return auth_store_js_1.refreshAndSave; } });
+Object.defineProperty(exports, "tryAcquirePkceFlightLock", { enumerable: true, get: function () { return auth_store_js_1.tryAcquirePkceFlightLock; } });
+Object.defineProperty(exports, "clearPkceFlightLock", { enumerable: true, get: function () { return auth_store_js_1.clearPkceFlightLock; } });
+Object.defineProperty(exports, "waitForPeerTokens", { enumerable: true, get: function () { return auth_store_js_1.waitForPeerTokens; } });
+Object.defineProperty(exports, "waitForPeerTokensSync", { enumerable: true, get: function () { return auth_store_js_1.waitForPeerTokensSync; } });
+Object.defineProperty(exports, "TOKEN_EXPIRY_SKEW_SEC", { enumerable: true, get: function () { return auth_store_js_1.TOKEN_EXPIRY_SKEW_SEC; } });
+var auth_gate_js_1 = require("./auth-gate.js");
+Object.defineProperty(exports, "ensureUserAuthenticated", { enumerable: true, get: function () { return auth_gate_js_1.ensureUserAuthenticated; } });
+Object.defineProperty(exports, "ensureAuthenticated", { enumerable: true, get: function () { return auth_gate_js_1.ensureAuthenticated; } });
+var agent_auth_js_1 = require("./agent-auth.js");
+Object.defineProperty(exports, "resolveAgentCredentials", { enumerable: true, get: function () { return agent_auth_js_1.resolveAgentCredentials; } });
+Object.defineProperty(exports, "ensureAgentIdentity", { enumerable: true, get: function () { return agent_auth_js_1.ensureAgentIdentity; } });
+Object.defineProperty(exports, "ensureSubAgentIdentity", { enumerable: true, get: function () { return agent_auth_js_1.ensureSubAgentIdentity; } });
+Object.defineProperty(exports, "fetchClientCredentialsToken", { enumerable: true, get: function () { return agent_auth_js_1.fetchClientCredentialsToken; } });
+Object.defineProperty(exports, "registerAgentClient", { enumerable: true, get: function () { return agent_auth_js_1.registerAgentClient; } });
+Object.defineProperty(exports, "loadAgentDynamicCredentials", { enumerable: true, get: function () { return agent_auth_js_1.loadAgentDynamicCredentials; } });
+Object.defineProperty(exports, "saveAgentDynamicCredentials", { enumerable: true, get: function () { return agent_auth_js_1.saveAgentDynamicCredentials; } });
+Object.defineProperty(exports, "clearAgentDynamicCredentials", { enumerable: true, get: function () { return agent_auth_js_1.clearAgentDynamicCredentials; } });
+Object.defineProperty(exports, "loadSubAgentDynamicCredentials", { enumerable: true, get: function () { return agent_auth_js_1.loadSubAgentDynamicCredentials; } });
+Object.defineProperty(exports, "saveSubAgentDynamicCredentials", { enumerable: true, get: function () { return agent_auth_js_1.saveSubAgentDynamicCredentials; } });
+Object.defineProperty(exports, "clearSubAgentDynamicCredentials", { enumerable: true, get: function () { return agent_auth_js_1.clearSubAgentDynamicCredentials; } });
+Object.defineProperty(exports, "AGENT_TOKEN_EXPIRY_SKEW_SEC", { enumerable: true, get: function () { return agent_auth_js_1.AGENT_TOKEN_EXPIRY_SKEW_SEC; } });
+var cli_js_1 = require("./cli.js");
+Object.defineProperty(exports, "runConfigureCommand", { enumerable: true, get: function () { return cli_js_1.runConfigureCommand; } });
+Object.defineProperty(exports, "runAgentCommand", { enumerable: true, get: function () { return cli_js_1.runAgentCommand; } });
+Object.defineProperty(exports, "printOryConfig", { enumerable: true, get: function () { return cli_js_1.printOryConfig; } });
+Object.defineProperty(exports, "printEnvironment", { enumerable: true, get: function () { return cli_js_1.printEnvironment; } });
+Object.defineProperty(exports, "printLogTail", { enumerable: true, get: function () { return cli_js_1.printLogTail; } });
+Object.defineProperty(exports, "printEnvHelp", { enumerable: true, get: function () { return cli_js_1.printEnvHelp; } });
+Object.defineProperty(exports, "printTraceTail", { enumerable: true, get: function () { return cli_js_1.printTraceTail; } });
+Object.defineProperty(exports, "runWatchCommand", { enumerable: true, get: function () { return cli_js_1.runWatchCommand; } });
+Object.defineProperty(exports, "isTtyAvailable", { enumerable: true, get: function () { return cli_js_1.isTtyAvailable; } });
+Object.defineProperty(exports, "promptOnTty", { enumerable: true, get: function () { return cli_js_1.promptOnTty; } });
+Object.defineProperty(exports, "promptForProjectUrl", { enumerable: true, get: function () { return cli_js_1.promptForProjectUrl; } });
+Object.defineProperty(exports, "interactiveConfigPrompt", { enumerable: true, get: function () { return cli_js_1.interactiveConfigPrompt; } });
+var setup_js_1 = require("./setup.js");
+Object.defineProperty(exports, "parseSetupArgs", { enumerable: true, get: function () { return setup_js_1.parseSetupArgs; } });
+Object.defineProperty(exports, "readJsonFile", { enumerable: true, get: function () { return setup_js_1.readJsonFile; } });
+Object.defineProperty(exports, "writeJsonFile", { enumerable: true, get: function () { return setup_js_1.writeJsonFile; } });
+Object.defineProperty(exports, "isOryHookCommand", { enumerable: true, get: function () { return setup_js_1.isOryHookCommand; } });
+Object.defineProperty(exports, "resolveHookCommand", { enumerable: true, get: function () { return setup_js_1.resolveHookCommand; } });
+Object.defineProperty(exports, "matcherHookEntry", { enumerable: true, get: function () { return setup_js_1.matcherHookEntry; } });
+Object.defineProperty(exports, "mergeMatcherHooks", { enumerable: true, get: function () { return setup_js_1.mergeMatcherHooks; } });
+Object.defineProperty(exports, "removeMatcherHooks", { enumerable: true, get: function () { return setup_js_1.removeMatcherHooks; } });
+Object.defineProperty(exports, "flatHookEntry", { enumerable: true, get: function () { return setup_js_1.flatHookEntry; } });
+Object.defineProperty(exports, "mergeFlatHooks", { enumerable: true, get: function () { return setup_js_1.mergeFlatHooks; } });
+Object.defineProperty(exports, "removeFlatHooks", { enumerable: true, get: function () { return setup_js_1.removeFlatHooks; } });
+Object.defineProperty(exports, "printSetupHelp", { enumerable: true, get: function () { return setup_js_1.printSetupHelp; } });
+Object.defineProperty(exports, "printNextSteps", { enumerable: true, get: function () { return setup_js_1.printNextSteps; } });
+Object.defineProperty(exports, "resolveMcpServerCommand", { enumerable: true, get: function () { return setup_js_1.resolveMcpServerCommand; } });
+Object.defineProperty(exports, "mcpServerEntry", { enumerable: true, get: function () { return setup_js_1.mcpServerEntry; } });
+Object.defineProperty(exports, "mergeMcpServer", { enumerable: true, get: function () { return setup_js_1.mergeMcpServer; } });
+Object.defineProperty(exports, "removeMcpServer", { enumerable: true, get: function () { return setup_js_1.removeMcpServer; } });
+Object.defineProperty(exports, "registerPlugin", { enumerable: true, get: function () { return setup_js_1.registerPlugin; } });
+Object.defineProperty(exports, "unregisterPlugin", { enumerable: true, get: function () { return setup_js_1.unregisterPlugin; } });
+var dev_js_1 = require("./dev.js");
+Object.defineProperty(exports, "runDevLauncher", { enumerable: true, get: function () { return dev_js_1.runDevLauncher; } });
+var skills_js_1 = require("./skills.js");
+Object.defineProperty(exports, "renderOrySkills", { enumerable: true, get: function () { return skills_js_1.renderOrySkills; } });
+Object.defineProperty(exports, "renderOryCommands", { enumerable: true, get: function () { return skills_js_1.renderOryCommands; } });
+Object.defineProperty(exports, "commandToSkill", { enumerable: true, get: function () { return skills_js_1.commandToSkill; } });
+Object.defineProperty(exports, "commandToToml", { enumerable: true, get: function () { return skills_js_1.commandToToml; } });
+Object.defineProperty(exports, "commandToFrontmatterMarkdown", { enumerable: true, get: function () { return skills_js_1.commandToFrontmatterMarkdown; } });
+Object.defineProperty(exports, "commandToPlainMarkdown", { enumerable: true, get: function () { return skills_js_1.commandToPlainMarkdown; } });
+Object.defineProperty(exports, "toSkillMarkdown", { enumerable: true, get: function () { return skills_js_1.toSkillMarkdown; } });
+Object.defineProperty(exports, "writeSkillTree", { enumerable: true, get: function () { return skills_js_1.writeSkillTree; } });
+Object.defineProperty(exports, "removeSkillDirs", { enumerable: true, get: function () { return skills_js_1.removeSkillDirs; } });
+Object.defineProperty(exports, "ORY_SKILL_NAMES", { enumerable: true, get: function () { return skills_js_1.ORY_SKILL_NAMES; } });
+Object.defineProperty(exports, "ORY_COMMAND_SKILL_NAMES", { enumerable: true, get: function () { return skills_js_1.ORY_COMMAND_SKILL_NAMES; } });
+Object.defineProperty(exports, "ORY_COMMAND_SLUGS", { enumerable: true, get: function () { return skills_js_1.ORY_COMMAND_SLUGS; } });
+var index_js_1 = require("./local/index.js");
+Object.defineProperty(exports, "runLocalCommand", { enumerable: true, get: function () { return index_js_1.runLocalCommand; } });
+Object.defineProperty(exports, "ensureDevJaeger", { enumerable: true, get: function () { return index_js_1.ensureDevJaeger; } });
+Object.defineProperty(exports, "stopDevJaeger", { enumerable: true, get: function () { return index_js_1.stopDevJaeger; } });
+Object.defineProperty(exports, "DEV_JAEGER_CONTAINER", { enumerable: true, get: function () { return index_js_1.DEV_JAEGER_CONTAINER; } });
+var index_js_2 = require("./registry/index.js");
+Object.defineProperty(exports, "runRegistryCommand", { enumerable: true, get: function () { return index_js_2.runRegistryCommand; } });
+var mcp_js_1 = require("./mcp.js");
+Object.defineProperty(exports, "parseClaudeCodeMcpTool", { enumerable: true, get: function () { return mcp_js_1.parseClaudeCodeMcpTool; } });
+Object.defineProperty(exports, "parseGeminiMcpTool", { enumerable: true, get: function () { return mcp_js_1.parseGeminiMcpTool; } });
+Object.defineProperty(exports, "parseMcpToolGeneric", { enumerable: true, get: function () { return mcp_js_1.parseMcpToolGeneric; } });
+Object.defineProperty(exports, "checkMcpPermission", { enumerable: true, get: function () { return mcp_js_1.checkMcpPermission; } });
+var subject_js_1 = require("./subject.js");
+Object.defineProperty(exports, "resolveUserSubject", { enumerable: true, get: function () { return subject_js_1.resolveUserSubject; } });
+Object.defineProperty(exports, "subjectLabel", { enumerable: true, get: function () { return subject_js_1.subjectLabel; } });
+var denial_js_1 = require("./denial.js");
+Object.defineProperty(exports, "formatDenialMessage", { enumerable: true, get: function () { return denial_js_1.formatDenialMessage; } });
+Object.defineProperty(exports, "formatDenialSummary", { enumerable: true, get: function () { return denial_js_1.formatDenialSummary; } });
+Object.defineProperty(exports, "formatAlertMessage", { enumerable: true, get: function () { return denial_js_1.formatAlertMessage; } });
+Object.defineProperty(exports, "formatAlertSummary", { enumerable: true, get: function () { return denial_js_1.formatAlertSummary; } });
+Object.defineProperty(exports, "alertAttributes", { enumerable: true, get: function () { return denial_js_1.alertAttributes; } });
+Object.defineProperty(exports, "OryDenialError", { enumerable: true, get: function () { return denial_js_1.OryDenialError; } });
+var tool_metadata_js_1 = require("./tool-metadata.js");
+Object.defineProperty(exports, "summarizeToolInput", { enumerable: true, get: function () { return tool_metadata_js_1.summarizeToolInput; } });
+Object.defineProperty(exports, "summarizeToolOutput", { enumerable: true, get: function () { return tool_metadata_js_1.summarizeToolOutput; } });
+var index_js_3 = require("./otel/index.js");
+Object.defineProperty(exports, "OtlpHttpExporter", { enumerable: true, get: function () { return index_js_3.OtlpHttpExporter; } });
+Object.defineProperty(exports, "otlpExporterFromEnv", { enumerable: true, get: function () { return index_js_3.otlpExporterFromEnv; } });
+Object.defineProperty(exports, "parseKeyValueList", { enumerable: true, get: function () { return index_js_3.parseKeyValueList; } });

package/dist/local/cli.d.ts

@@ -0,0 +1,12 @@
+/**
+ * CLI interface for the `local` subcommand.
+ *
+ * Each plugin CLI delegates `<bin> local <subcommand>` here.
+ */
+/**
+ * Run a `local` subcommand. Call from each plugin CLI's `local` case.
+ *
+ * @param binName - The plugin CLI name (e.g., "ory-claude") for help text
+ * @param args - Arguments after "local" (e.g., ["up", "--no-seed"])
+ */
+export declare function runLocalCommand(binName: string, args: string[]): Promise<void>;

package/dist/local/cli.js

@@ -0,0 +1,95 @@
+"use strict";
+/**
+ * CLI interface for the `local` subcommand.
+ *
+ * Each plugin CLI delegates `<bin> local <subcommand>` here.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runLocalCommand = runLocalCommand;
+const manager_js_1 = require("./manager.js");
+/**
+ * Run a `local` subcommand. Call from each plugin CLI's `local` case.
+ *
+ * @param binName - The plugin CLI name (e.g., "ory-claude") for help text
+ * @param args - Arguments after "local" (e.g., ["up", "--no-seed"])
+ */
+async function runLocalCommand(binName, args) {
+    const [subcommand, ...rest] = args;
+    switch (subcommand) {
+        case "up":
+            await (0, manager_js_1.localUp)({ seed: !rest.includes("--no-seed") });
+            break;
+        case "down":
+            await (0, manager_js_1.localDown)();
+            break;
+        case "status":
+            await (0, manager_js_1.localStatus)();
+            break;
+        case "seed":
+            await (0, manager_js_1.localSeed)();
+            break;
+        case "logs":
+            (0, manager_js_1.localLogs)(rest);
+            break;
+        case "reset":
+            await (0, manager_js_1.localReset)();
+            break;
+        case "env":
+            (0, manager_js_1.localEnv)();
+            break;
+        case "configure":
+            (0, manager_js_1.localConfigure)();
+            break;
+        case "help":
+        case "--help":
+        case "-h":
+        case undefined:
+            printLocalHelp(binName);
+            break;
+        default:
+            console.error(`Unknown local subcommand: ${subcommand}`);
+            printLocalHelp(binName);
+            process.exit(1);
+    }
+}
+function printLocalHelp(binName) {
+    console.log(`
+${binName} local — Run Ory locally for development
+
+Usage:
+  npx ${binName} local <command> [options]
+
+Commands:
+  up [--no-seed]     Start local Ory services (Kratos, Keto, Hydra, gateway)
+  down               Stop all local services (preserves data)
+  status             Show service health and container states
+  seed               Create test identity, session, and permission tuples
+  logs [service] [-f]  View service logs (optionally follow, optionally filter)
+  reset              Stop services and remove all data
+  env                Print environment variables for connecting to local services
+  configure          Save local gateway URL to shared plugin config
+
+Requires Docker (Docker Desktop or docker engine + compose plugin).
+
+The local environment runs:
+  Ory Kratos    Identity & session management    :4433 / :4434
+  Ory Keto      Permission checks (Zanzibar)     :4466 / :4467
+  Ory Hydra     OAuth2 & OIDC                    :4444 / :4445
+  Nginx gateway Unified API (like Ory Network)   :4000
+
+After 'local up', set ORY_PROJECT_URL=http://localhost:4000 to point
+any Ory agent plugin at the local environment.
+
+Examples:
+  npx ${binName} local up              # Start everything and seed test data
+  npx ${binName} local up --no-seed    # Start services without seeding
+  npx ${binName} local seed            # (Re-)seed test data
+  npx ${binName} local status          # Check what's running
+  npx ${binName} local logs kratos     # View Kratos logs
+  npx ${binName} local logs -f         # Follow all logs
+  npx ${binName} local configure       # Save local URL to config
+  npx ${binName} local env             # Print export statements
+  npx ${binName} local down            # Stop services
+  npx ${binName} local reset           # Stop and delete all data
+`);
+}

package/dist/local/configs.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Ory service configuration templates for local development.
+ *
+ * Each function returns the file content as a string. The local manager
+ * writes these into .ory-dev/ory/ at runtime so Docker Compose can mount them.
+ */
+export type ConsoleSource = "env" | "default";
+export interface GatewayConfig {
+    /** Path under GATEWAY_URL that returns 2xx when the gateway is ready. */
+    healthPath: string;
+}
+export interface ConsoleConfig {
+    /** True when Console Lite source is available and the UI will be built. */
+    enabled: boolean;
+    /** Build context for `docker compose build` (Console Lite only). */
+    buildContext?: string;
+    /** Dockerfile path relative to buildContext (Console Lite only). */
+    dockerfile?: string;
+    /**
+     * Absolute path to the `elements` workspace, passed to docker as a named
+     * build context. Console Lite's Dockerfile uses `COPY --from=elements`.
+     */
+    elementsContext?: string;
+    /**
+     * Value for the Console Lite Dockerfile's `NEXT_PUBLIC_BUILD_MODE`
+     * build arg. Defaults to `oss`.
+     */
+    buildMode?: string;
+    /** Where the Console Lite path came from. */
+    source?: ConsoleSource;
+}
+/** Default location of the Console Lite source tree, sibling-checkout layout. */
+export declare const DEFAULT_CONSOLE_LITE_SUBPATH: string;
+/**
+ * The API gateway is always the bundled nginx routing layer that
+ * proxies bare Ory paths to Kratos / Hydra / Keto. No mode choice.
+ */
+export declare function getGatewayConfig(): GatewayConfig;
+/**
+ * Resolve whether the optional Console Lite UI service should be brought
+ * up, and if so, with what build inputs.
+ *
+ * Enabled when Console Lite source is present at
+ * `<repoRoot>/../cloud/console/console` (sibling checkout, where
+ * `repoRoot` is the outermost `.git` ancestor of the given `projectRoot`).
+ * Disabled when that path is missing or unreadable.
+ *
+ * `ORY_CONSOLE_LITE_PATH` is an explicit override. When set it must
+ * point at a usable build context; downstream validation surfaces a hard
+ * error if the path doesn't exist. Relative paths are resolved against
+ * pnpm's `INIT_CWD` so they match the user's shell cwd.
+ */
+export declare function getConsoleConfig(projectRoot?: string): ConsoleConfig;
+/**
+ * Render the docker-compose YAML.
+ *
+ * `consoleCfg` controls whether the optional Console UI service is
+ * emitted. When omitted, it is resolved via `getConsoleConfig(projectRoot)`.
+ * The nginx API gateway and the login UI are always emitted.
+ */
+export declare function dockerComposeYaml(projectRoot?: string, consoleCfg?: ConsoleConfig): string;
+export declare function kratosConfigYaml(): string;
+export declare function kratosIdentitySchema(): string;
+export declare function ketoConfigYaml(): string;
+export declare function hydraConfigYaml(): string;
+/**
+ * Nginx config that acts as a unified API gateway, replicating what
+ * Ory Network does: route all API paths to the correct backend service
+ * so the @ory/client SDK works with a single basePath.
+ */
+export declare function nginxConf(): string;
+export declare const GATEWAY_PORT = 4000;
+export declare const GATEWAY_URL = "http://localhost:4000";
+export declare const CONSOLE_PORT = 4100;
+export declare const CONSOLE_URL = "http://localhost:4100";
+export declare const LOGIN_UI_PORT = 3000;
+export declare const LOGIN_UI_URL = "http://localhost:3000";
+export declare const KRATOS_PUBLIC_PORT = 4433;
+export declare const KRATOS_ADMIN_PORT = 4434;
+export declare const KETO_READ_PORT = 4466;
+export declare const KETO_WRITE_PORT = 4467;
+export declare const HYDRA_PUBLIC_PORT = 4444;
+export declare const HYDRA_ADMIN_PORT = 4445;
+export declare const JAEGER_UI_PORT = 16686;
+export declare const JAEGER_OTLP_HTTP_PORT = 4318;
+export declare const JAEGER_UI_URL = "http://localhost:16686";
+export declare const JAEGER_OTLP_HTTP_URL = "http://localhost:4318";
+/** URL the manager probes to confirm the gateway is healthy. */
+export declare function gatewayHealthUrl(): string;