@ory/argus 0.13.2 → 0.13.3

package/dist/build-info.json

@@ -1,9 +1,9 @@
 {
   "repo": "ory-agent-plugins",
-  "commit": "4961e2084b50f7c37a1c44c93735998394afe12d",
-  "commitShort": "4961e20",
+  "commit": "c04784bfd67acdce0133aca0ebcd335e326b9251",
+  "commitShort": "c04784b",
   "branch": "main",
-  "commitDate": "2026-07-14T13:13:40-07:00",
+  "commitDate": "2026-07-14T15:46:39-07:00",
   "dirty": false,
-  "builtAt": "2026-07-14T20:17:46.098Z"
+  "builtAt": "2026-07-14T22:51:01.241Z"
 }

package/dist/interactive-setup.js

@@ -1091,13 +1091,39 @@ async function createProjectInteractive(runner, prompt, workspace, harness) {
 }
 /** JSON-Patch path (relative to the oauth2 service config) that toggles DCR. */
 const DCR_ENABLED_PATH = "/oidc/dynamic_client_registration/enabled";
+/**
+ * Read the project's current DCR state via `ory get oauth2-config`.
+ * Returns `true`/`false` when the value is known, or `null` when it can't be
+ * determined (CLI error, unparseable output) so the caller falls open and
+ * prompts anyway rather than assuming a state.
+ */
+function dcrEnabled(runner, projectId) {
+    const r = runner.exec([
+        "get",
+        "oauth2-config",
+        "--project",
+        projectId,
+        "--format",
+        "json",
+    ]);
+    if (r.status !== 0)
+        return null;
+    const config = parseObject(r.stdout);
+    if (!config)
+        return null;
+    const enabled = config.oidc?.dynamic_client_registration?.enabled;
+    return typeof enabled === "boolean" ? enabled : null;
+}
 /**
  * Enable OAuth2 Dynamic Client Registration on the project so the agent
- * identity can self-register (RFC 7591) at runtime. Prompts first (default
- * yes) since it changes project-wide config; best-effort and fail-open — a
- * decline or failure just prints the manual command and continues.
+ * identity can self-register (RFC 7591) at runtime. First probes the project's
+ * current DCR state and skips silently when it's already enabled. Otherwise
+ * prompts (default yes) since it changes project-wide config; best-effort and
+ * fail-open — a decline or failure just prints the manual command and continues.
  */
 async function maybeEnableDcr(runner, prompt, projectId) {
+    if (dcrEnabled(runner, projectId) === true)
+        return;
     ui.heading("Dynamic Client Registration");
     ui.info("The agent identity registers itself via OAuth2 Dynamic Client Registration");
     ui.hint("(DCR), which Ory Network projects disable by default.");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ory/argus",
-  "version": "0.13.2",
+  "version": "0.13.3",
   "description": "Ory Argus: the core API for building authentication, authorization, and audit into AI agent harness plugins, extensions, and custom integrations",
   "license": "Apache-2.0",
   "homepage": "https://ory.com",