@ory/argus 0.13.4 → 0.13.5

package/dist/build-info.json

@@ -1,9 +1,9 @@
 {
   "repo": "ory-agent-plugins",
-  "commit": "2d5b9f7c6730c0189020f68b6a431348561c0c2a",
-  "commitShort": "2d5b9f7",
+  "commit": "6a1250a1a231524d64aed17df86d694f829cf938",
+  "commitShort": "6a1250a",
   "branch": "main",
-  "commitDate": "2026-07-15T06:07:39-07:00",
+  "commitDate": "2026-07-15T07:09:03-07:00",
   "dirty": false,
-  "builtAt": "2026-07-15T13:11:41.044Z"
+  "builtAt": "2026-07-15T14:13:28.336Z"
 }

package/dist/client.js

@@ -42,6 +42,7 @@ const path = __importStar(require("node:path"));
 const logger_js_1 = require("./logger.js");
 const tracer_js_1 = require("./tracer.js");
 const config_js_1 = require("./config.js");
+const auth_store_js_1 = require("./auth-store.js");
 const otlp_js_1 = require("./otel/otlp.js");
 class OryAgentClient {
     frontend;
@@ -752,6 +753,7 @@ class OryAgentClient {
                     "Ory integration is disabled — all hooks will pass through. " +
                     "Set ORY_PROJECT_URL or run the plugin's configure command.",
             });
+            rehydrateUserPrincipal(client);
             attachOtlpExporterFromEnv(client, harness);
             return client;
         }
@@ -770,11 +772,45 @@ class OryAgentClient {
             projectUrlSource: resolved.projectUrlSource,
             apiKeySource: resolved.apiKeySource,
         });
+        rehydrateUserPrincipal(client);
         attachOtlpExporterFromEnv(client, harness);
         return client;
     }
 }
 exports.OryAgentClient = OryAgentClient;
+/**
+ * Rehydrate the user principal from persisted OAuth2 tokens.
+ *
+ * The interactive user login ({@link ensureUserAuthenticated}) populates
+ * `client.userPrincipal` in memory *and* caches the tokens to the shared
+ * config file. But subprocess-hook harnesses (claude-code, codex,
+ * gemini-cli) spawn a fresh process — and thus a fresh client via
+ * {@link OryAgentClient.fromEnv} — for every lifecycle event. Only the
+ * `SessionStart` process runs the login gate, so on later events (e.g.
+ * `PreToolUse`) the in-memory principal is gone and permission checks
+ * would fall back to a per-launch `session:<id>` subject that matches no
+ * bootstrapped tuple.
+ *
+ * Seeding the principal from the cached tokens here makes the *stable*
+ * user subject available on every constructed client, independent of which
+ * lifecycle event is running. The live login gate still overwrites this
+ * with fresh values when it runs at `SessionStart`.
+ *
+ * The subject is attached whenever it is known — even for an expired token,
+ * since the subject is what permission checks resolve against and Keto
+ * checks authenticate with the admin API key, not this token. The access
+ * token itself is only carried forward while still valid, so nothing
+ * authenticates with a stale bearer.
+ */
+function rehydrateUserPrincipal(client) {
+    const tokens = (0, auth_store_js_1.loadTokens)();
+    if (!tokens?.subject)
+        return;
+    client.setUserPrincipal({
+        subject: tokens.subject,
+        token: (0, auth_store_js_1.isExpired)(tokens) ? undefined : tokens.accessToken,
+    });
+}
 /** Default debug-log path under the shared per-harness data dir. */
 exports.DEFAULT_DEBUG_LOG_FILENAME = "ory-agent-debug.log";
 /** Default trace (NDJSON) path under the shared per-harness data dir. */

package/dist/permissions-cli.js

@@ -71,21 +71,6 @@ const ENV_PERMISSION_MODE = "ORY_PERMISSION_MODE";
 function resolveNamespace() {
     return process.env.ORY_PERMISSION_NAMESPACE ?? "AgentTools";
 }
-/**
- * Apply persisted user OAuth2 tokens (if any) to the client's user
- * principal so downstream subject resolution and tuple writes see a
- * concrete identity. Mirrors what `ensureUserAuthenticated` does on a
- * cache hit — but works whether or not `ORY_USER_LOGIN` is enabled.
- */
-function attachCachedUserPrincipal(client) {
-    const tokens = (0, auth_store_js_1.loadTokens)();
-    if (!tokens || (0, auth_store_js_1.isExpired)(tokens))
-        return;
-    client.setUserPrincipal({
-        subject: tokens.subject,
-        token: tokens.accessToken,
-    });
-}
 /**
  * Entry point invoked by each harness CLI's `permissions` case.
  *
@@ -178,7 +163,6 @@ async function runPermissionsStatus(binName, harness) {
         return 0;
     }
     const client = client_js_1.OryAgentClient.fromEnv(harness);
-    attachCachedUserPrincipal(client);
     await (0, agent_auth_js_1.ensureAgentIdentity)(client, { projectUrl: resolved.projectUrl }).catch(() => {
         /* best-effort; status keeps working in pass-through */
     });
@@ -260,7 +244,6 @@ async function runPermissionsBootstrap(binName, harness, args) {
         return 1;
     }
     const client = client_js_1.OryAgentClient.fromEnv(harness);
-    attachCachedUserPrincipal(client);
     await (0, agent_auth_js_1.ensureAgentIdentity)(client, { projectUrl: resolved.projectUrl }).catch(() => {
         /* best-effort; the write may still succeed with the API key or no auth (local Keto) */
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ory/argus",
-  "version": "0.13.4",
+  "version": "0.13.5",
   "description": "Ory Argus: the core API for building authentication, authorization, and audit into AI agent harness plugins, extensions, and custom integrations",
   "license": "Apache-2.0",
   "homepage": "https://ory.com",