@ory/argus 0.11.0 → 0.12.0

package/dist/local/cli.js

@@ -7,6 +7,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.runLocalCommand = runLocalCommand;
 const manager_js_1 = require("./manager.js");
+const cli_invocation_js_1 = require("../cli-invocation.js");
 /**
  * Run a `local` subcommand. Call from each plugin CLI's `local` case.
  *
@@ -57,7 +58,7 @@ function printLocalHelp(binName) {
 ${binName} local — Run Ory locally for development
 
 Usage:
-  npx ${binName} local <command> [options]
+  ${(0, cli_invocation_js_1.oryNpx)(binName)} local <command> [options]
 
 Commands:
   up [--no-seed]     Start local Ory services (Kratos, Keto, Hydra, gateway)
@@ -81,15 +82,15 @@ After 'local up', set ORY_PROJECT_URL=http://localhost:4000 to point
 any Ory agent plugin at the local environment.
 
 Examples:
-  npx ${binName} local up              # Start everything and seed test data
-  npx ${binName} local up --no-seed    # Start services without seeding
-  npx ${binName} local seed            # (Re-)seed test data
-  npx ${binName} local status          # Check what's running
-  npx ${binName} local logs kratos     # View Kratos logs
-  npx ${binName} local logs -f         # Follow all logs
-  npx ${binName} local configure       # Save local URL to config
-  npx ${binName} local env             # Print export statements
-  npx ${binName} local down            # Stop services
-  npx ${binName} local reset           # Stop and delete all data
+  ${(0, cli_invocation_js_1.oryNpx)(binName)} local up              # Start everything and seed test data
+  ${(0, cli_invocation_js_1.oryNpx)(binName)} local up --no-seed    # Start services without seeding
+  ${(0, cli_invocation_js_1.oryNpx)(binName)} local seed            # (Re-)seed test data
+  ${(0, cli_invocation_js_1.oryNpx)(binName)} local status          # Check what's running
+  ${(0, cli_invocation_js_1.oryNpx)(binName)} local logs kratos     # View Kratos logs
+  ${(0, cli_invocation_js_1.oryNpx)(binName)} local logs -f         # Follow all logs
+  ${(0, cli_invocation_js_1.oryNpx)(binName)} local configure       # Save local URL to config
+  ${(0, cli_invocation_js_1.oryNpx)(binName)} local env             # Print export statements
+  ${(0, cli_invocation_js_1.oryNpx)(binName)} local down            # Stop services
+  ${(0, cli_invocation_js_1.oryNpx)(binName)} local reset           # Stop and delete all data
 `);
 }

package/dist/local/index.d.ts

@@ -1,6 +1,6 @@
 export { runLocalCommand } from "./cli.js";
 export { localUp, localDown, localStatus, localSeed, localLogs, localReset, localEnv, localConfigure, ensureLocalOryStack, type EnsureLocalOryStackResult, } from "./manager.js";
 export { checkAllServices, waitForGateway, type ServiceHealth } from "./health.js";
-export { seedLocalEnvironment, type SeedResult } from "./seed.js";
+export { seedLocalEnvironment, USER_CLIENT_ID, USER_SUBJECT_NAMESPACE, type SeedResult, } from "./seed.js";
 export { GATEWAY_URL, GATEWAY_PORT, KRATOS_PUBLIC_PORT, KRATOS_ADMIN_PORT, KETO_READ_PORT, KETO_WRITE_PORT, HYDRA_PUBLIC_PORT, HYDRA_ADMIN_PORT, JAEGER_UI_PORT, JAEGER_OTLP_HTTP_PORT, JAEGER_UI_URL, JAEGER_OTLP_HTTP_URL, } from "./configs.js";
 export { ensureDevJaeger, stopDevJaeger, DEV_JAEGER_CONTAINER, DEV_JAEGER_IMAGE, type EnsureDevJaegerResult, type StopDevJaegerResult, } from "./jaeger.js";

package/dist/local/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DEV_JAEGER_IMAGE = exports.DEV_JAEGER_CONTAINER = exports.stopDevJaeger = exports.ensureDevJaeger = exports.JAEGER_OTLP_HTTP_URL = exports.JAEGER_UI_URL = exports.JAEGER_OTLP_HTTP_PORT = exports.JAEGER_UI_PORT = exports.HYDRA_ADMIN_PORT = exports.HYDRA_PUBLIC_PORT = exports.KETO_WRITE_PORT = exports.KETO_READ_PORT = exports.KRATOS_ADMIN_PORT = exports.KRATOS_PUBLIC_PORT = exports.GATEWAY_PORT = exports.GATEWAY_URL = exports.seedLocalEnvironment = exports.waitForGateway = exports.checkAllServices = exports.ensureLocalOryStack = exports.localConfigure = exports.localEnv = exports.localReset = exports.localLogs = exports.localSeed = exports.localStatus = exports.localDown = exports.localUp = exports.runLocalCommand = void 0;
+exports.DEV_JAEGER_IMAGE = exports.DEV_JAEGER_CONTAINER = exports.stopDevJaeger = exports.ensureDevJaeger = exports.JAEGER_OTLP_HTTP_URL = exports.JAEGER_UI_URL = exports.JAEGER_OTLP_HTTP_PORT = exports.JAEGER_UI_PORT = exports.HYDRA_ADMIN_PORT = exports.HYDRA_PUBLIC_PORT = exports.KETO_WRITE_PORT = exports.KETO_READ_PORT = exports.KRATOS_ADMIN_PORT = exports.KRATOS_PUBLIC_PORT = exports.GATEWAY_PORT = exports.GATEWAY_URL = exports.USER_SUBJECT_NAMESPACE = exports.USER_CLIENT_ID = exports.seedLocalEnvironment = exports.waitForGateway = exports.checkAllServices = exports.ensureLocalOryStack = exports.localConfigure = exports.localEnv = exports.localReset = exports.localLogs = exports.localSeed = exports.localStatus = exports.localDown = exports.localUp = exports.runLocalCommand = void 0;
 var cli_js_1 = require("./cli.js");
 Object.defineProperty(exports, "runLocalCommand", { enumerable: true, get: function () { return cli_js_1.runLocalCommand; } });
 var manager_js_1 = require("./manager.js");
@@ -18,6 +18,8 @@ Object.defineProperty(exports, "checkAllServices", { enumerable: true, get: func
 Object.defineProperty(exports, "waitForGateway", { enumerable: true, get: function () { return health_js_1.waitForGateway; } });
 var seed_js_1 = require("./seed.js");
 Object.defineProperty(exports, "seedLocalEnvironment", { enumerable: true, get: function () { return seed_js_1.seedLocalEnvironment; } });
+Object.defineProperty(exports, "USER_CLIENT_ID", { enumerable: true, get: function () { return seed_js_1.USER_CLIENT_ID; } });
+Object.defineProperty(exports, "USER_SUBJECT_NAMESPACE", { enumerable: true, get: function () { return seed_js_1.USER_SUBJECT_NAMESPACE; } });
 var configs_js_1 = require("./configs.js");
 Object.defineProperty(exports, "GATEWAY_URL", { enumerable: true, get: function () { return configs_js_1.GATEWAY_URL; } });
 Object.defineProperty(exports, "GATEWAY_PORT", { enumerable: true, get: function () { return configs_js_1.GATEWAY_PORT; } });

package/dist/local/manager.js

@@ -743,7 +743,7 @@ function printSeedResult(result) {
     console.log("");
     console.log("Or save the project URL to the shared config (persists across sessions):");
     console.log("");
-    console.log("  npx ory-<harness> local configure");
+    console.log("  npx -y -p @ory/<harness> ory-<harness> local configure");
 }
 function printConnectionInfo() {
     console.log("Connection Info");

package/dist/permissions-cli.js

@@ -21,6 +21,39 @@
  * All four are non-destructive on existing config and idempotent on
  * Keto: re-running them is always safe.
  */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.runPermissionsCommand = runPermissionsCommand;
 exports.isUserIdentityCached = isUserIdentityCached;
@@ -32,6 +65,8 @@ const agent_auth_js_1 = require("./agent-auth.js");
 const auth_store_js_1 = require("./auth-store.js");
 const tool_catalog_js_1 = require("./tool-catalog.js");
 const subject_js_1 = require("./subject.js");
+const cli_invocation_js_1 = require("./cli-invocation.js");
+const ui = __importStar(require("./ui.js"));
 const ENV_PERMISSION_MODE = "ORY_PERMISSION_MODE";
 function resolveNamespace() {
     return process.env.ORY_PERMISSION_NAMESPACE ?? "AgentTools";
@@ -341,36 +376,37 @@ function isUserIdentityCached() {
 function printPermissionsOnboardingHelp(binName, harness, opts = {}) {
     const resolved = (0, config_js_1.resolveConfig)();
     const catalog = (0, tool_catalog_js_1.getToolCatalog)(harness);
-    console.log("");
-    console.log("Permissions:");
-    console.log(`  Mode: ${resolved.permissionMode}${formatModeSource(resolved.permissionModeSource)}`);
-    console.log(`  Other modes: ${otherModes(resolved.permissionMode).join(", ")}`);
+    ui.heading("Permissions:");
+    ui.summary([
+        ["Mode", `${resolved.permissionMode}${formatModeSource(resolved.permissionModeSource)}`],
+        ["Other modes", otherModes(resolved.permissionMode).join(", ")],
+    ]);
     if (resolved.auditOnly) {
-        console.log("  Ory is in audit-only mode (kill switch). Permission checks are disabled.");
+        ui.hint("Ory is in audit-only mode (kill switch). Permission checks are disabled.");
         return;
     }
     if (resolved.permissionMode === "observe") {
-        console.log("  Observe mode: permission denies are logged + traced, but tools still run.");
-        console.log("  This is the safe default — promote to 'enforce' once your permission set is correct.");
+        ui.hint("Observe mode: permission denies are logged + traced, but tools still run.");
+        ui.hint("This is the safe default — promote to 'enforce' once your permission set is correct.");
     }
     else {
-        console.log("  Enforce mode: permission denies block tool execution.");
+        ui.hint("Enforce mode: permission denies block tool execution.");
     }
     if (opts.bootstrappedAutomatically) {
-        console.log("");
-        console.log(`  Permissions bootstrapped for ${catalog.length} built-in tools.`);
+        ui.blank();
+        ui.success(`Permissions bootstrapped for ${catalog.length} built-in tools.`);
     }
     else if (catalog.length > 0) {
-        console.log("");
-        console.log("  Grant the current user 'use' on every built-in tool (idempotent):");
-        console.log(`    npx ${binName} permissions bootstrap`);
+        ui.blank();
+        ui.bullet("Grant the current user 'use' on every built-in tool (idempotent):");
+        ui.command(`${(0, cli_invocation_js_1.oryNpx)(binName)} permissions bootstrap`);
     }
-    console.log("");
-    console.log("  Inspect permission coverage:");
-    console.log(`    npx ${binName} permissions status`);
-    console.log("");
-    console.log("  Promote to enforcing once observe-mode logs look right:");
-    console.log(`    npx ${binName} permissions enforce`);
+    ui.blank();
+    ui.bullet("Inspect permission coverage:");
+    ui.command(`${(0, cli_invocation_js_1.oryNpx)(binName)} permissions status`);
+    ui.blank();
+    ui.bullet("Promote to enforcing once observe-mode logs look right:");
+    ui.command(`${(0, cli_invocation_js_1.oryNpx)(binName)} permissions enforce`);
 }
 /**
  * Render the trailing source annotation on a Mode line. Stays silent

package/dist/registry/config.js

@@ -45,6 +45,13 @@ uplinks:
     cache: false
 
 packages:
+  # @ory/cli is a transitive dep that lives on npmjs.org — proxy
+  # it so installs can resolve it from upstream.
+  "@ory/cli":
+    access: $all
+    publish: $all
+    proxy: npmjs
+
   # @ory/client is a transitive Ory SDK dep that lives on npmjs.org — proxy
   # it so installs can resolve it from upstream.
   "@ory/client":

package/dist/setup.d.ts

@@ -113,6 +113,46 @@ export declare function printSetupHelp(binName: string, harnessName: string, opt
     globalPath?: string;
 }): void;
 /**
- * Print the "Next steps" text after successful setup.
- */
-export declare function printNextSteps(harnessName: string, uninstallCmd: string): void;
+ * A deferred "next steps" renderer. Receives whether the interactive wizard
+ * actually finished wiring Ory up so it can pick the right closing message:
+ * a short "you're all set, launch the harness" summary when everything is
+ * already configured, or the full manual env-var setup guidance when it isn't.
+ */
+export type NextStepsRenderer = (opts: {
+    configured: boolean;
+}) => void;
+/** Begin capturing `printNextSteps` output instead of printing it. */
+export declare function beginDeferNextSteps(): void;
+/**
+ * Print any captured next-steps output and stop deferring. `configured` tells
+ * the renderer whether the wizard finished configuring Ory (so it can drop the
+ * manual setup steps, which would only contradict what's already saved).
+ */
+export declare function emitDeferredNextSteps(configured?: boolean): void;
+/**
+ * Either run the next-steps printer now, or capture it for later when
+ * deferral is active. Harness-specific next-steps printers (e.g. Codex's)
+ * route through this so they participate in the same deferral. When run inline
+ * (e.g. the standalone setup binary) no wizard configured anything, so the
+ * renderer is invoked with `configured: false`.
+ */
+export declare function nextStepsSink(fn: NextStepsRenderer): void;
+/**
+ * Print the "Next steps" text after successful setup. Deferred to the end of
+ * an interactive install via {@link nextStepsSink} (see above). When the wizard
+ * already connected Ory, prints a short launch summary instead of the manual
+ * env-var setup steps.
+ */
+export declare function printNextSteps(harnessName: string, uninstallCmd: string, opts?: NextStepsOpts): void;
+/**
+ * Identity a harness passes to {@link printNextSteps} so the "you're all set"
+ * message can emit copy-pasteable `status` / `watch` / `permissions` commands
+ * and tailor itself to the mode the wizard actually configured (audit-only has
+ * no enforcement step). Optional so older callers still get the short summary.
+ */
+export interface NextStepsOpts {
+    /** CLI bin name, e.g. `ory-claude` — used to render follow-up commands. */
+    binName: string;
+    /** Harness slug, e.g. `claude-code` — used to read the configured mode. */
+    harness: string;
+}

package/dist/setup.js

@@ -51,10 +51,16 @@ exports.removeMcpServer = removeMcpServer;
 exports.registerPlugin = registerPlugin;
 exports.unregisterPlugin = unregisterPlugin;
 exports.printSetupHelp = printSetupHelp;
+exports.beginDeferNextSteps = beginDeferNextSteps;
+exports.emitDeferredNextSteps = emitDeferredNextSteps;
+exports.nextStepsSink = nextStepsSink;
 exports.printNextSteps = printNextSteps;
 const fs = __importStar(require("node:fs"));
 const os = __importStar(require("node:os"));
 const path = __importStar(require("node:path"));
+const cli_invocation_js_1 = require("./cli-invocation.js");
+const config_js_1 = require("./config.js");
+const ui = __importStar(require("./ui.js"));
 // ─── Arg Parsing ───────────────────────────────────────────────────
 /**
  * Parse standard setup CLI arguments from process.argv.
@@ -362,7 +368,7 @@ function printSetupHelp(binName, harnessName, opts) {
 ${binName} — Configure Ory hooks for ${harnessName}
 
 Usage:
-  npx ${binName} [options]
+  ${(0, cli_invocation_js_1.oryNpx)(binName)} [options]
 
 Options:
   --project-dir <path>  Project directory (default: cwd)${opts?.supportsGlobal ? `\n  --global              Install to ${opts.globalPath ?? "global config"} instead of project` : ""}
@@ -377,34 +383,121 @@ Environment variables:
   ORY_OAUTH2_CLIENT_ID  Public OAuth2 client id for the user PKCE flow
                         (required when ORY_USER_LOGIN=true)
   ORY_USER_LOGIN        Set to "true" to enable the interactive user login
+                        (or persist it with: configure --user-login)
   ORY_PERMISSION_MODE   "observe" (default) or "enforce" — what to do on deny
   ORY_AGENT_DEBUG       Set to "true" for debug logging
   ORY_AGENT_LOG_FILE    Path to write debug logs
   ORY_AGENT_SUBJECT_ID  Override the subject ID for permission checks
 `);
 }
+let deferNextStepsActive = false;
+let deferredNextSteps = null;
+/** Begin capturing `printNextSteps` output instead of printing it. */
+function beginDeferNextSteps() {
+    deferNextStepsActive = true;
+    deferredNextSteps = null;
+}
+/**
+ * Print any captured next-steps output and stop deferring. `configured` tells
+ * the renderer whether the wizard finished configuring Ory (so it can drop the
+ * manual setup steps, which would only contradict what's already saved).
+ */
+function emitDeferredNextSteps(configured = false) {
+    deferNextStepsActive = false;
+    const fn = deferredNextSteps;
+    deferredNextSteps = null;
+    if (fn)
+        fn({ configured });
+}
+/**
+ * Either run the next-steps printer now, or capture it for later when
+ * deferral is active. Harness-specific next-steps printers (e.g. Codex's)
+ * route through this so they participate in the same deferral. When run inline
+ * (e.g. the standalone setup binary) no wizard configured anything, so the
+ * renderer is invoked with `configured: false`.
+ */
+function nextStepsSink(fn) {
+    if (deferNextStepsActive) {
+        deferredNextSteps = fn;
+        return;
+    }
+    fn({ configured: false });
+}
 /**
- * Print the "Next steps" text after successful setup.
+ * Print the "Next steps" text after successful setup. Deferred to the end of
+ * an interactive install via {@link nextStepsSink} (see above). When the wizard
+ * already connected Ory, prints a short launch summary instead of the manual
+ * env-var setup steps.
  */
-function printNextSteps(harnessName, uninstallCmd) {
-    console.log("");
-    console.log("Next steps:");
-    console.log("  1. Set required environment variables:");
-    console.log("     export ORY_PROJECT_URL=https://your-project.projects.oryapis.com");
-    console.log("     export ORY_AGENT_API_KEY=ory_pat_...");
-    console.log("");
-    console.log("  2. Turn on the interactive user login (opt-in):");
-    console.log("     export ORY_USER_LOGIN=true");
-    console.log("     export ORY_OAUTH2_CLIENT_ID=<public OAuth2 client id>");
-    console.log(`     Without these, ${harnessName} runs without a human Ory identity attached`);
-    console.log("     to the session and permission checks fall back to a session:<id> subject.");
-    console.log("     The OAuth2 client id is the public client (no secret) you registered in");
-    console.log("     your Ory project with the four loopback redirect URIs.");
-    console.log("");
-    console.log("  3. Optionally enable debug logging:");
-    console.log("     export ORY_AGENT_DEBUG=true");
-    console.log("");
-    console.log(`  4. Start ${harnessName} in your project directory.`);
-    console.log("");
-    console.log(`To uninstall: ${uninstallCmd}`);
+function printNextSteps(harnessName, uninstallCmd, opts) {
+    nextStepsSink(({ configured }) => configured
+        ? printConfiguredNextStepsNow(harnessName, uninstallCmd, opts)
+        : printNextStepsNow(harnessName, uninstallCmd));
+}
+/**
+ * The closing message when the interactive wizard already configured Ory.
+ * Everything the manual steps would ask for is done, so this points the user
+ * at the next things they'll actually want: see what Ory is doing (status /
+ * live trace watch), promote to enforcement, and turn on debug logging. When
+ * no {@link NextStepsOpts} is supplied it degrades to the short launch summary.
+ */
+function printConfiguredNextStepsNow(harnessName, uninstallCmd, opts) {
+    ui.heading("Next steps:");
+    ui.success(`Ory is configured — start ${harnessName} in your project directory.`);
+    if (!opts) {
+        ui.blank();
+        ui.hint(`To uninstall: ${ui.inlineCommand(uninstallCmd)}`);
+        return;
+    }
+    const npx = (0, cli_invocation_js_1.oryNpx)(opts.binName);
+    const auditOnly = (0, config_js_1.resolveConfig)().auditOnly;
+    if (auditOnly) {
+        ui.hint("Audit-only mode: tool calls are traced locally — no checks run, nothing is blocked.");
+        ui.blank();
+        ui.bullet("1. See what's been traced:");
+        ui.command(`${npx} status`);
+        ui.hint(`     ...or watch it live: ${ui.inlineCommand(`${npx} watch`)}`);
+        ui.blank();
+        ui.bullet("2. Want more detail? Turn on debug logging:");
+        ui.command("export ORY_AGENT_DEBUG=true");
+    }
+    else {
+        ui.hint("It starts in watch mode: every tool call is checked, but nothing is blocked yet.");
+        ui.blank();
+        ui.bullet("1. See what Ory is doing — config, permission coverage, recent activity:");
+        ui.command(`${npx} status`);
+        ui.hint(`     ...or watch the trace stream live: ${ui.inlineCommand(`${npx} watch`)}`);
+        ui.blank();
+        ui.bullet("2. Turn on enforcement once the watch-mode traces look right:");
+        ui.command(`${npx} permissions enforce`);
+        ui.hint(`     denied tools are then blocked; return to watch with ${ui.inlineCommand(`${npx} permissions observe`)}`);
+        ui.blank();
+        ui.bullet("3. Want more detail? Turn on debug logging:");
+        ui.command("export ORY_AGENT_DEBUG=true");
+    }
+    ui.blank();
+    ui.hint(`To uninstall: ${ui.inlineCommand(uninstallCmd)}`);
+}
+function printNextStepsNow(harnessName, uninstallCmd) {
+    ui.heading("Next steps:");
+    ui.bullet("1. Set required environment variables:");
+    ui.command("export ORY_PROJECT_URL=https://your-project.projects.oryapis.com");
+    ui.command("export ORY_AGENT_API_KEY=ory_pat_...");
+    ui.blank();
+    ui.bullet("2. Turn on the interactive user login (opt-in). Either persist it:");
+    ui.command("configure --user-login --oauth2-client-id <public OAuth2 client id>");
+    ui.hint("     ...or set it per-session via env vars:");
+    ui.command("export ORY_USER_LOGIN=true");
+    ui.command("export ORY_OAUTH2_CLIENT_ID=<public OAuth2 client id>");
+    ui.hint(`     Without these, ${harnessName} runs without a human Ory identity attached`);
+    ui.hint("     to the session and permission checks fall back to a session:<id> subject.");
+    ui.hint("     The OAuth2 client id is the public client (no secret) you registered in");
+    ui.hint("     your Ory project with the four loopback redirect URIs.");
+    ui.blank();
+    ui.bullet("3. Optionally enable debug logging:");
+    ui.command("export ORY_AGENT_DEBUG=true");
+    ui.blank();
+    ui.bullet(`4. Start ${harnessName} in your project directory.`);
+    ui.blank();
+    ui.hint(`To uninstall: ${ui.inlineCommand(uninstallCmd)}`);
 }

package/dist/status-cli.d.ts

@@ -28,7 +28,8 @@ export interface StatusCommandOptions {
 /**
  * Compose the unified `status` output for a plugin CLI. Sections render
  * in this order: title → configuration → user identity → agent identity
- * → permissions → hooks & plugin → environment → recent log tail.
+ * → permissions → hooks & plugin → environment → recent activity
+ * (traces + debug log).
  *
  * Each section degrades gracefully — missing project URL, audit-only
  * mode, and empty token caches all surface as inline "n/a" lines rather

package/dist/status-cli.js

@@ -21,13 +21,24 @@ const agent_auth_js_2 = require("./agent-auth.js");
 const subject_js_1 = require("./subject.js");
 const tool_catalog_js_1 = require("./tool-catalog.js");
 const cli_js_1 = require("./cli.js");
+const cli_invocation_js_1 = require("./cli-invocation.js");
 function resolveNamespace() {
     return process.env.ORY_PERMISSION_NAMESPACE ?? "AgentTools";
 }
-const USER_LOGIN_ENABLED = new Set(["1", "true", "yes", "on"]);
-function isUserLoginEnabled() {
-    const v = process.env.ORY_USER_LOGIN?.toLowerCase();
-    return !!v && USER_LOGIN_ENABLED.has(v);
+/**
+ * Human-readable annotation for where the resolved user-login flag came
+ * from, so `status` readers know whether to look at the env var or the
+ * config file to change it.
+ */
+function formatUserLoginSource(source) {
+    switch (source) {
+        case "env":
+            return " (ORY_USER_LOGIN env var)";
+        case "config":
+            return " (saved in config; change with: configure --user-login|--no-user-login)";
+        case "default":
+            return "";
+    }
 }
 /**
  * Format a relative duration like "4h 32m" or "12s" for a future deadline.
@@ -53,11 +64,15 @@ function formatExpiresIn(expiresAtSec, nowMs = Date.now()) {
  * when a PKCE token is cached, the resolved subject and expiry.
  */
 function printUserIdentitySection() {
-    const loginOn = isUserLoginEnabled();
+    const resolved = (0, config_js_1.resolveConfig)();
+    const loginOn = resolved.userLogin;
     const tokens = (0, auth_store_js_1.loadTokens)();
     console.log("");
     console.log("User identity (interactive PKCE login):");
-    console.log(`  Login:       ${loginOn ? "on (ORY_USER_LOGIN)" : "off (set ORY_USER_LOGIN=true to enable)"}`);
+    const loginState = loginOn
+        ? `on${formatUserLoginSource(resolved.userLoginSource)}`
+        : "off (enable with: configure --user-login, or ORY_USER_LOGIN=true)";
+    console.log(`  Login:       ${loginState}`);
     if (!tokens) {
         console.log("  Token cache: empty");
         if (loginOn) {
@@ -233,10 +248,10 @@ async function printPermissionsSection(binName, harness) {
             : `partial (${allowed}/${total} built-in tools allowed)`;
     console.log(`  Coverage:    ${status}`);
     if (denied > 0) {
-        console.log(`               run "npx ${binName} permissions bootstrap" to grant the missing tools`);
+        console.log(`               run "${(0, cli_invocation_js_1.oryNpx)(binName)} permissions bootstrap" to grant the missing tools`);
     }
     else if (errored > 0) {
-        console.log(`               ${errored} probe error(s) — run "npx ${binName} permissions status" for details`);
+        console.log(`               ${errored} probe error(s) — run "${(0, cli_invocation_js_1.oryNpx)(binName)} permissions status" for details`);
     }
 }
 function isUserTokenUsable() {
@@ -256,7 +271,8 @@ function formatModeSuffix(source) {
 /**
  * Compose the unified `status` output for a plugin CLI. Sections render
  * in this order: title → configuration → user identity → agent identity
- * → permissions → hooks & plugin → environment → recent log tail.
+ * → permissions → hooks & plugin → environment → recent activity
+ * (traces + debug log).
  *
  * Each section degrades gracefully — missing project URL, audit-only
  * mode, and empty token caches all surface as inline "n/a" lines rather
@@ -276,10 +292,15 @@ async function runStatusCommand(binName, harness, options) {
         options.printPluginSection();
     }
     (0, cli_js_1.printEnvironment)();
-    (0, cli_js_1.printLogTail)();
+    console.log("");
+    console.log("Recent activity:");
+    (0, cli_js_1.printTraceTail)(harness);
+    (0, cli_js_1.printLogTail)(harness);
+    console.log("");
+    console.log(`  Watch traces live:  ${(0, cli_invocation_js_1.oryNpx)(binName)} watch`);
     console.log("");
     console.log(`Drill into any section with:`);
-    console.log(`  npx ${binName} agent status`);
-    console.log(`  npx ${binName} permissions status`);
-    console.log(`  npx ${binName} configure`);
+    console.log(`  ${(0, cli_invocation_js_1.oryNpx)(binName)} agent status`);
+    console.log(`  ${(0, cli_invocation_js_1.oryNpx)(binName)} permissions status`);
+    console.log(`  ${(0, cli_invocation_js_1.oryNpx)(binName)} configure`);
 }

package/dist/subject.d.ts

@@ -12,9 +12,11 @@
  *     `session:<id>`). Backward-compatible default when no subject
  *     namespace is configured.
  *
- * The selection is driven by `ORY_USER_SUBJECT_NAMESPACE`: when set, the
- * resolver builds a SubjectSet using that namespace; when unset, it
- * falls back to the direct SubjectID chain.
+ * The selection is driven by the user-subject namespace: `ORY_USER_SUBJECT_NAMESPACE`
+ * takes precedence, then the client's configured `userSubjectNamespace` (persisted
+ * in the shared config, e.g. by the local-stack install path). When a namespace is
+ * present the resolver builds a SubjectSet using it; otherwise it falls back to the
+ * direct SubjectID chain.
  */
 import type { OryAgentClient } from "./client.js";
 export type UserSubjectRef = {
@@ -44,8 +46,9 @@ export declare function runWithUserSubject<T>(subject: string | undefined, fn: (
  * legacy `ORY_AGENT_SUBJECT_ID`, then the caller-supplied `fallback`
  * (typically `session:<id>`).
  *
- * Returns a SubjectSet when `ORY_USER_SUBJECT_NAMESPACE` is set and a
- * concrete subject is available; otherwise a direct SubjectID.
+ * Returns a SubjectSet when a user-subject namespace is configured (env or
+ * client config) and a concrete subject is available; otherwise a direct
+ * SubjectID.
  */
 export declare function resolveUserSubject(client: OryAgentClient, fallback?: string): UserSubjectRef;
 /**

package/dist/subject.js

@@ -13,9 +13,11 @@
  *     `session:<id>`). Backward-compatible default when no subject
  *     namespace is configured.
  *
- * The selection is driven by `ORY_USER_SUBJECT_NAMESPACE`: when set, the
- * resolver builds a SubjectSet using that namespace; when unset, it
- * falls back to the direct SubjectID chain.
+ * The selection is driven by the user-subject namespace: `ORY_USER_SUBJECT_NAMESPACE`
+ * takes precedence, then the client's configured `userSubjectNamespace` (persisted
+ * in the shared config, e.g. by the local-stack install path). When a namespace is
+ * present the resolver builds a SubjectSet using it; otherwise it falls back to the
+ * direct SubjectID chain.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.runWithUserSubject = runWithUserSubject;
@@ -52,8 +54,9 @@ function runWithUserSubject(subject, fn) {
  * legacy `ORY_AGENT_SUBJECT_ID`, then the caller-supplied `fallback`
  * (typically `session:<id>`).
  *
- * Returns a SubjectSet when `ORY_USER_SUBJECT_NAMESPACE` is set and a
- * concrete subject is available; otherwise a direct SubjectID.
+ * Returns a SubjectSet when a user-subject namespace is configured (env or
+ * client config) and a concrete subject is available; otherwise a direct
+ * SubjectID.
  */
 function resolveUserSubject(client, fallback) {
     const subject = perCallUserSubject.getStore()
@@ -61,7 +64,7 @@ function resolveUserSubject(client, fallback) {
         ?? process.env.ORY_USER_SUBJECT_ID
         ?? process.env.ORY_AGENT_SUBJECT_ID
         ?? fallback;
-    const ns = process.env.ORY_USER_SUBJECT_NAMESPACE;
+    const ns = process.env.ORY_USER_SUBJECT_NAMESPACE?.trim() || client.userSubjectNamespace;
     if (subject && ns) {
         return {
             subjectSet: { namespace: ns, object: subject, relation: "" },

package/dist/tool-catalog.d.ts

@@ -17,9 +17,9 @@
 export declare const HARNESS_TOOL_CATALOG: {
     readonly "claude-code": readonly ["Read", "Write", "Edit", "Bash", "Glob", "Grep", "WebFetch", "WebSearch", "NotebookEdit", "TodoWrite", "Task"];
     readonly "claude-agent-sdk": readonly ["Read", "Write", "Edit", "Bash", "Glob", "Grep", "WebFetch", "WebSearch", "NotebookEdit", "TodoWrite", "Task"];
-    readonly codex: readonly ["shell", "apply_patch", "read_file"];
+    readonly codex: readonly ["Bash", "apply_patch"];
     readonly "gemini-cli": readonly ["read_file", "write_file", "edit_file", "list_files", "search_files", "shell", "web_search"];
-    readonly openclaw: readonly ["execute_command", "read_file", "write_file", "list_directory", "search_files", "browser"];
+    readonly openclaw: readonly ["exec", "read", "write", "edit", "apply_patch", "web_search", "web_fetch", "browser"];
     readonly opencode: readonly ["read", "write", "edit", "bash", "glob", "grep", "webfetch"];
     readonly continue: readonly ["Bash", "Read", "Edit", "Write", "Grep", "Glob", "WebSearch"];
     readonly goose: readonly ["shell", "text_editor", "read_file", "write_file", "list_windows", "screen_capture"];

package/dist/tool-catalog.js

@@ -50,7 +50,11 @@ exports.HARNESS_TOOL_CATALOG = {
         "TodoWrite",
         "Task",
     ],
-    codex: ["shell", "apply_patch", "read_file"],
+    // Codex serializes its hook `tool_name` as `Bash` (shell) and `apply_patch`
+    // (file edits — `Write`/`Edit` are matcher aliases only); MCP tools arrive as
+    // `mcp__<server>__<tool>` and aren't enumerable here. Verified against
+    // codex 0.143 (see packages/codex/src/types.ts).
+    codex: ["Bash", "apply_patch"],
     "gemini-cli": [
         "read_file",
         "write_file",
@@ -60,12 +64,16 @@ exports.HARNESS_TOOL_CATALOG = {
         "shell",
         "web_search",
     ],
+    // OpenClaw's built-in tool ids (docs.openclaw.ai/tools): shell is `exec`,
+    // file ops are `read`/`write`/`edit`/`apply_patch`, plus web + browser.
     openclaw: [
-        "execute_command",
-        "read_file",
-        "write_file",
-        "list_directory",
-        "search_files",
+        "exec",
+        "read",
+        "write",
+        "edit",
+        "apply_patch",
+        "web_search",
+        "web_fetch",
         "browser",
     ],
     opencode: ["read", "write", "edit", "bash", "glob", "grep", "webfetch"],