@ory/argus 0.13.6 → 0.13.8

package/dist/agent-auth.d.ts

@@ -48,6 +48,14 @@ export interface AgentCredentials {
      * via deprecated alias). Never blocks resolution.
      */
     warnings: string[];
+    /**
+     * Set on a `kind: "none"` result when the token endpoint rejected the
+     * credentials for an auth reason (401/403) — i.e. the client is genuinely
+     * dead (revoked/invalid). A transient failure (network, rate-limit, 5xx)
+     * leaves this false so callers don't discard otherwise-good persisted
+     * credentials. See the persisted-DCR branch in {@link resolveAgentCredentials}.
+     */
+    authRejected?: boolean;
 }
 export interface ResolveAgentCredentialsOptions {
     /** Ory project URL — required for client_credentials grant + DCR. */

package/dist/agent-auth.js

@@ -275,10 +275,20 @@ async function resolveAgentCredentials(options = {}) {
             });
             if (result.kind !== "none")
                 return result;
-            // Server rejected the persisted creds — clear and fall through to
-            // a fresh registration attempt.
-            warnings.push(`Persisted dynamic agent credentials rejected (${result.reason}); re-registering.`);
-            clearDynamicFn();
+            // Only a genuine auth rejection (401/403 — client revoked/invalid) means
+            // the persisted creds are dead. Clear them and fall through to a fresh
+            // registration. A transient failure (network, rate-limit, 5xx) must NOT
+            // discard good creds: doing so would orphan the server-side client
+            // (clearDynamicFn never revokes it) and register a brand-new one on every
+            // blip. Keep the persisted creds and report the transient failure instead.
+            if (result.authRejected) {
+                warnings.push(`Persisted dynamic agent credentials rejected (${result.reason}); re-registering.`);
+                clearDynamicFn();
+            }
+            else {
+                warnings.push(`Persisted dynamic agent credentials temporarily unavailable (${result.reason}); keeping them for the next session.`);
+                return { ...result, warnings };
+            }
         }
     }
     // 4. Fresh dynamic registration — bootstrap using the user's bearer
@@ -377,11 +387,27 @@ async function resolveClientCredentials(args) {
     catch (err) {
         return {
             kind: "none",
+            authRejected: isAuthRejectionError(err),
             reason: `${reasonNoun} client_credentials grant failed: ${err instanceof Error ? err.message : String(err)}`,
             warnings: args.warnings,
         };
     }
 }
+/**
+ * Whether a token-grant error is an auth rejection (401/403) — meaning the
+ * credentials themselves are dead — as opposed to a transient failure
+ * (network, rate-limit, 5xx). Reads a `status` property when the thrower
+ * attaches one ({@link fetchClientCredentialsToken} does), and falls back to
+ * matching `HTTP 401`/`HTTP 403` in the message so injected/stubbed grant
+ * functions that throw a plain `Error` are classified correctly too.
+ */
+function isAuthRejectionError(err) {
+    const status = err?.status;
+    if (status === 401 || status === 403)
+        return true;
+    const msg = err instanceof Error ? err.message : String(err);
+    return /\bHTTP 40[13]\b/.test(msg);
+}
 // Kept as raw fetch (rather than @ory/client's OAuth2Api.oauth2TokenExchange)
 // because the SDK method's signature does not expose client_secret, audience,
 // or scope — all of which this grant needs. Ory's own SDK docstring on that
@@ -404,7 +430,9 @@ async function fetchClientCredentialsToken(args) {
         body: body.toString(),
     });
     if (!res.ok) {
-        throw new Error(`HTTP ${res.status}`);
+        const err = new Error(`HTTP ${res.status}`);
+        err.status = res.status;
+        throw err;
     }
     const json = (await res.json());
     const accessToken = typeof json.access_token === "string" ? json.access_token : "";

package/dist/build-info.json

@@ -1,9 +1,9 @@
 {
   "repo": "ory-agent-plugins",
-  "commit": "255043db833b8ebda7cbec0dee740eda045f064e",
-  "commitShort": "255043d",
+  "commit": "ff55031f181ceec7e06f8d7f3a6b2555c130a091",
+  "commitShort": "ff55031",
   "branch": "main",
-  "commitDate": "2026-07-15T09:35:21-07:00",
+  "commitDate": "2026-07-15T13:59:17-07:00",
   "dirty": false,
-  "builtAt": "2026-07-15T16:39:31.503Z"
+  "builtAt": "2026-07-15T21:03:15.277Z"
 }

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 export { OryAgentClient, type OryAgentConfig, type PrincipalIdentity, } from "./client.js";
-export { DebugLogger, redactLogData, type LogEntry, type LogLevel, } from "./logger.js";
+export { DebugLogger, redactLogData, withQuietStderr, type LogEntry, type LogLevel, } from "./logger.js";
 export { Tracer, ActiveSpan, deriveTraceId, formatSpan, watchTraceFile, type TraceEvent, type SpanStatus, type TraceSpan, type SpanOptions, type TracerOptions, type TracerContext, type SpanAttributeEnricher, } from "./tracer.js";
 export { loadConfig, saveConfig, resolveConfig, mutateConfig, getConfigPath, getDataDir, getHarnessDataDir, type OryPluginConfig, type OryOAuth2Tokens, type OryUserCredentials, type OryAgentCredentialsBlock, type OryAgentDynamicCredentials, type PermissionMode, } from "./config.js";
 export { pkceLogin, refreshAccessToken, detectHeadless, generateCodeVerifier, sha256Base64Url, buildAuthorizeUrl, LOOPBACK_PORTS, DEFAULT_LOGIN_TIMEOUT_MS, type PkceLoginOptions, type PkceLoginOutcome, type PkceDeclineReason, } from "./auth.js";

package/dist/index.js

@@ -1,14 +1,15 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.runConfigureCommand = exports.clearCredentialsForUninstall = exports.AGENT_TOKEN_EXPIRY_SKEW_SEC = exports.revokeAgentDynamicClient = exports.clearSubAgentDynamicCredentials = exports.saveSubAgentDynamicCredentials = exports.loadSubAgentDynamicCredentials = exports.clearAgentDynamicCredentials = exports.saveAgentDynamicCredentials = exports.loadAgentDynamicCredentials = exports.registerAgentClient = exports.fetchClientCredentialsToken = exports.ensureSubAgentIdentity = exports.ensureAgentIdentity = exports.resolveAgentCredentials = exports.ensureAuthenticated = exports.ensureUserAuthenticated = exports.TOKEN_EXPIRY_SKEW_SEC = exports.waitForPeerTokensSync = exports.waitForPeerTokens = exports.clearPkceFlightLock = exports.tryAcquirePkceFlightLock = exports.refreshAndSave = exports.isExpired = exports.clearTokens = exports.saveTokens = exports.loadTokens = exports.DEFAULT_LOGIN_TIMEOUT_MS = exports.LOOPBACK_PORTS = exports.buildAuthorizeUrl = exports.sha256Base64Url = exports.generateCodeVerifier = exports.detectHeadless = exports.refreshAccessToken = exports.pkceLogin = exports.getHarnessDataDir = exports.getDataDir = exports.getConfigPath = exports.mutateConfig = exports.resolveConfig = exports.saveConfig = exports.loadConfig = exports.watchTraceFile = exports.formatSpan = exports.deriveTraceId = exports.ActiveSpan = exports.Tracer = exports.redactLogData = exports.DebugLogger = exports.OryAgentClient = void 0;
-exports.runDevLauncher = exports.unregisterPlugin = exports.registerPlugin = exports.removeMcpServer = exports.mergeMcpServer = exports.mcpServerEntry = exports.resolveMcpServerCommand = exports.emitDeferredNextSteps = exports.beginDeferNextSteps = exports.nextStepsSink = exports.printNextSteps = exports.printSetupHelp = exports.removeFlatHooks = exports.mergeFlatHooks = exports.flatHookEntry = exports.removeMatcherHooks = exports.mergeMatcherHooks = exports.matcherHookEntry = exports.resolveHookCommand = exports.isOryHookCommand = exports.writeJsonFile = exports.readJsonFile = exports.parseSetupArgs = exports.resolveBuildInfo = exports.collectVersionInfo = exports.runVersionCommand = exports.printPermissionsSection = exports.printAgentIdentitySection = exports.printUserIdentitySection = exports.runStatusCommand = exports.LOOPBACK_REDIRECT_URIS = exports.projectUrlFromSlug = exports.runPostInstall = exports.runInteractiveSetup = exports.printPermissionsOnboardingHelp = exports.maybeAutoBootstrap = exports.isUserIdentityCached = exports.runPermissionsCommand = exports.oryNpx = exports.interactiveConfigPrompt = exports.promptForProjectUrl = exports.promptOnTty = exports.isTtyAvailable = exports.runWatchCommand = exports.printTraceTail = exports.printEnvHelp = exports.printLogTail = exports.printEnvironment = exports.printOryConfig = exports.runAgentCommand = void 0;
-exports.otlpExporterFromEnv = exports.OtlpExporter = exports.summarizeToolOutput = exports.summarizeToolInput = exports.OryDenialError = exports.alertAttributes = exports.formatAlertSummary = exports.formatAlertMessage = exports.formatDenialSummary = exports.formatDenialMessage = exports.subjectLabel = exports.runWithUserSubject = exports.resolveUserSubject = exports.checkMcpPermission = exports.parseMcpToolGeneric = exports.parseGeminiMcpTool = exports.parseClaudeCodeMcpTool = exports.TOOL_EXECUTION_PHASES = exports.USER_FACING_PHASES = exports.HARNESS_LIFECYCLE_MAP = exports.isToolExecutionPhase = exports.isUserFacingPhase = exports.classifyLifecycle = exports.isInteractiveTool = exports.getInteractiveToolCatalog = exports.INTERACTIVE_TOOL_CATALOG = exports.getToolCatalog = exports.ALL_TOOLS = exports.KNOWN_HARNESSES = exports.HARNESS_TOOL_CATALOG = exports.gateToolCall = exports.applyPermissionMode = exports.checkAndDecide = exports.runRegistryCommand = exports.DEV_JAEGER_CONTAINER = exports.stopDevJaeger = exports.ensureDevJaeger = exports.runLocalCommand = exports.ORY_COMMAND_SLUGS = exports.ORY_COMMAND_SKILL_NAMES = exports.ORY_SKILL_NAMES = exports.removeSkillDirs = exports.writeSkillTree = exports.toSkillMarkdown = exports.commandToPlainMarkdown = exports.commandToFrontmatterMarkdown = exports.commandToToml = exports.commandToSkill = exports.renderOryCommands = exports.renderOrySkills = void 0;
-exports.wrapTool = exports.registerSubagent = exports.complete = exports.gate = exports.sessionStart = exports.resolveNamespace = exports.parseKeyValueList = void 0;
+exports.clearCredentialsForUninstall = exports.AGENT_TOKEN_EXPIRY_SKEW_SEC = exports.revokeAgentDynamicClient = exports.clearSubAgentDynamicCredentials = exports.saveSubAgentDynamicCredentials = exports.loadSubAgentDynamicCredentials = exports.clearAgentDynamicCredentials = exports.saveAgentDynamicCredentials = exports.loadAgentDynamicCredentials = exports.registerAgentClient = exports.fetchClientCredentialsToken = exports.ensureSubAgentIdentity = exports.ensureAgentIdentity = exports.resolveAgentCredentials = exports.ensureAuthenticated = exports.ensureUserAuthenticated = exports.TOKEN_EXPIRY_SKEW_SEC = exports.waitForPeerTokensSync = exports.waitForPeerTokens = exports.clearPkceFlightLock = exports.tryAcquirePkceFlightLock = exports.refreshAndSave = exports.isExpired = exports.clearTokens = exports.saveTokens = exports.loadTokens = exports.DEFAULT_LOGIN_TIMEOUT_MS = exports.LOOPBACK_PORTS = exports.buildAuthorizeUrl = exports.sha256Base64Url = exports.generateCodeVerifier = exports.detectHeadless = exports.refreshAccessToken = exports.pkceLogin = exports.getHarnessDataDir = exports.getDataDir = exports.getConfigPath = exports.mutateConfig = exports.resolveConfig = exports.saveConfig = exports.loadConfig = exports.watchTraceFile = exports.formatSpan = exports.deriveTraceId = exports.ActiveSpan = exports.Tracer = exports.withQuietStderr = exports.redactLogData = exports.DebugLogger = exports.OryAgentClient = void 0;
+exports.unregisterPlugin = exports.registerPlugin = exports.removeMcpServer = exports.mergeMcpServer = exports.mcpServerEntry = exports.resolveMcpServerCommand = exports.emitDeferredNextSteps = exports.beginDeferNextSteps = exports.nextStepsSink = exports.printNextSteps = exports.printSetupHelp = exports.removeFlatHooks = exports.mergeFlatHooks = exports.flatHookEntry = exports.removeMatcherHooks = exports.mergeMatcherHooks = exports.matcherHookEntry = exports.resolveHookCommand = exports.isOryHookCommand = exports.writeJsonFile = exports.readJsonFile = exports.parseSetupArgs = exports.resolveBuildInfo = exports.collectVersionInfo = exports.runVersionCommand = exports.printPermissionsSection = exports.printAgentIdentitySection = exports.printUserIdentitySection = exports.runStatusCommand = exports.LOOPBACK_REDIRECT_URIS = exports.projectUrlFromSlug = exports.runPostInstall = exports.runInteractiveSetup = exports.printPermissionsOnboardingHelp = exports.maybeAutoBootstrap = exports.isUserIdentityCached = exports.runPermissionsCommand = exports.oryNpx = exports.interactiveConfigPrompt = exports.promptForProjectUrl = exports.promptOnTty = exports.isTtyAvailable = exports.runWatchCommand = exports.printTraceTail = exports.printEnvHelp = exports.printLogTail = exports.printEnvironment = exports.printOryConfig = exports.runAgentCommand = exports.runConfigureCommand = void 0;
+exports.OtlpExporter = exports.summarizeToolOutput = exports.summarizeToolInput = exports.OryDenialError = exports.alertAttributes = exports.formatAlertSummary = exports.formatAlertMessage = exports.formatDenialSummary = exports.formatDenialMessage = exports.subjectLabel = exports.runWithUserSubject = exports.resolveUserSubject = exports.checkMcpPermission = exports.parseMcpToolGeneric = exports.parseGeminiMcpTool = exports.parseClaudeCodeMcpTool = exports.TOOL_EXECUTION_PHASES = exports.USER_FACING_PHASES = exports.HARNESS_LIFECYCLE_MAP = exports.isToolExecutionPhase = exports.isUserFacingPhase = exports.classifyLifecycle = exports.isInteractiveTool = exports.getInteractiveToolCatalog = exports.INTERACTIVE_TOOL_CATALOG = exports.getToolCatalog = exports.ALL_TOOLS = exports.KNOWN_HARNESSES = exports.HARNESS_TOOL_CATALOG = exports.gateToolCall = exports.applyPermissionMode = exports.checkAndDecide = exports.runRegistryCommand = exports.DEV_JAEGER_CONTAINER = exports.stopDevJaeger = exports.ensureDevJaeger = exports.runLocalCommand = exports.ORY_COMMAND_SLUGS = exports.ORY_COMMAND_SKILL_NAMES = exports.ORY_SKILL_NAMES = exports.removeSkillDirs = exports.writeSkillTree = exports.toSkillMarkdown = exports.commandToPlainMarkdown = exports.commandToFrontmatterMarkdown = exports.commandToToml = exports.commandToSkill = exports.renderOryCommands = exports.renderOrySkills = exports.runDevLauncher = void 0;
+exports.wrapTool = exports.registerSubagent = exports.complete = exports.gate = exports.sessionStart = exports.resolveNamespace = exports.parseKeyValueList = exports.otlpExporterFromEnv = void 0;
 var client_js_1 = require("./client.js");
 Object.defineProperty(exports, "OryAgentClient", { enumerable: true, get: function () { return client_js_1.OryAgentClient; } });
 var logger_js_1 = require("./logger.js");
 Object.defineProperty(exports, "DebugLogger", { enumerable: true, get: function () { return logger_js_1.DebugLogger; } });
 Object.defineProperty(exports, "redactLogData", { enumerable: true, get: function () { return logger_js_1.redactLogData; } });
+Object.defineProperty(exports, "withQuietStderr", { enumerable: true, get: function () { return logger_js_1.withQuietStderr; } });
 var tracer_js_1 = require("./tracer.js");
 Object.defineProperty(exports, "Tracer", { enumerable: true, get: function () { return tracer_js_1.Tracer; } });
 Object.defineProperty(exports, "ActiveSpan", { enumerable: true, get: function () { return tracer_js_1.ActiveSpan; } });

package/dist/interactive-setup.js

@@ -82,6 +82,7 @@ const cli_js_1 = require("./cli.js");
 const cli_invocation_js_1 = require("./cli-invocation.js");
 const auth_js_1 = require("./auth.js");
 const client_js_1 = require("./client.js");
+const logger_js_1 = require("./logger.js");
 const user_login_js_1 = require("./user-login.js");
 const agent_auth_js_1 = require("./agent-auth.js");
 const tool_catalog_js_1 = require("./tool-catalog.js");
@@ -261,8 +262,12 @@ async function runInteractiveSetup(binName, harness, args = [], deps = {}) {
             ttyPrompter = createTtyPrompter();
         }
     };
+    // Quiet the structured stderr firehose for the duration of the wizard so
+    // `[ory-agent] {...}` debug lines don't interleave with the human-facing UI
+    // when a session runs with ORY_AGENT_DEBUG=true (the dev launcher always
+    // sets it). Debug still lands in the log file.
     try {
-        return await runWizard(binName, harness, { runner, prompt, deps, runInteractive });
+        return await (0, logger_js_1.withQuietStderr)(() => runWizard(binName, harness, { runner, prompt, deps, runInteractive }));
     }
     catch (err) {
         const msg = err instanceof Error ? err.message : String(err);
@@ -568,10 +573,20 @@ async function configureNetwork(binName, harness, ctx) {
     //    self-register at runtime. Ory Network projects ship with DCR disabled,
     //    so without this the default agent-identity path would never resolve.
     await maybeEnableDcr(runner, prompt, project.id);
-    // 6. Create the public OAuth2 client for the PKCE user login.
+    // 6. Provision the public OAuth2 client for the PKCE user login. Reuse an
+    //    existing one on this project first — a re-run (`install --reconfigure`)
+    //    against the same project must not mint a duplicate public client and
+    //    orphan the old one (the CLI-created client is never cleaned up by
+    //    uninstall). Only create when no prior client is found.
     ui.heading("OAuth2 client");
-    ui.step("Creating the OAuth2 client for user login...");
-    const clientId = createOAuth2Client(runner, project.id);
+    let clientId = findExistingOAuth2Client(runner, project.id);
+    if (clientId) {
+        ui.step(`Reusing the existing OAuth2 client for user login (${clientId}).`);
+    }
+    else {
+        ui.step("Creating the OAuth2 client for user login...");
+        clientId = createOAuth2Client(runner, project.id);
+    }
     if (!clientId) {
         ui.warning("Could not create the OAuth2 client automatically.");
         ui.warnDetail(`Project URL resolved: ${projectUrl}`);
@@ -604,6 +619,14 @@ async function configureNetwork(binName, harness, ctx) {
     //    runtime agent/user tokens can't write relation tuples on a hosted
     //    project (that's a project-admin operation), but the `ory` session can.
     if (subject) {
+        // Persist the subject *shape* this grant used. If the install resolved a
+        // SubjectSet (ORY_USER_SUBJECT_NAMESPACE was set), a later runtime session
+        // that lacks the env var would otherwise resolve a direct subject_id and
+        // check/write a divergent tuple for the same user. Persisting the namespace
+        // keeps install-time and runtime writes on one canonical subject shape.
+        if ("subjectSet" in subject) {
+            (0, config_js_1.saveConfig)({ userSubjectNamespace: subject.subjectSet.namespace });
+        }
         await bootstrapPermissionsViaOry(runner, project.id, harness, subject, prompt);
     }
     // 10. Provision the project API key runtime permission *checks* need. Same
@@ -1166,6 +1189,31 @@ async function maybeEnableDcr(runner, prompt, projectId) {
         ui.warnDetail(`Enable it later with: ${manual}`);
     }
 }
+/** The `client_name` every plugin-provisioned public PKCE client carries. */
+const OAUTH2_CLIENT_NAME = "ory-agent-plugin";
+/**
+ * Look for an already-provisioned public PKCE client on the project so a
+ * re-run reuses it instead of minting a duplicate. Matches by the fixed
+ * `client_name` {@link createOAuth2Client} assigns. Best-effort: any CLI or
+ * parse failure returns null and the caller falls back to creating one.
+ */
+function findExistingOAuth2Client(runner, projectId) {
+    const r = runner.exec([
+        "list",
+        "oauth2-clients",
+        "--project",
+        projectId,
+        "--format",
+        "json",
+    ]);
+    if (r.status !== 0)
+        return null;
+    const clients = parseList(r.stdout, "items");
+    if (!clients)
+        return null;
+    const match = clients.find((c) => c.client_name === OAUTH2_CLIENT_NAME && c.client_id);
+    return match?.client_id ?? null;
+}
 function createOAuth2Client(runner, projectId) {
     const args = [
         "create",
@@ -1173,7 +1221,7 @@ function createOAuth2Client(runner, projectId) {
         "--project",
         projectId,
         "--name",
-        "ory-agent-plugin",
+        OAUTH2_CLIENT_NAME,
         "--grant-type",
         "authorization_code,refresh_token",
         "--response-type",

package/dist/logger.d.ts

@@ -12,6 +12,15 @@ export interface LogEntry {
  */
 export declare function redactLogData(value: unknown): unknown;
 export declare class DebugLogger {
+    /**
+     * Process-global switch to suppress the stderr firehose while still writing
+     * to the log file. The interactive installer sets this so structured debug
+     * JSON (`[ory-agent] {...}`) doesn't interleave with the wizard's
+     * human-facing UI when a session runs with `ORY_AGENT_DEBUG=true` (the dev
+     * launcher, for one, always sets it). File logging — the real observability
+     * channel — is unaffected.
+     */
+    static stderrSuppressed: boolean;
     enabled: boolean;
     harness: string;
     logFile: string | null;
@@ -27,3 +36,15 @@ export declare class DebugLogger {
     warn(event: string, data?: Record<string, unknown>): void;
     error(event: string, data?: Record<string, unknown>): void;
 }
+/**
+ * Run `fn` with the structured stderr firehose suppressed, restoring the
+ * previous state afterward (even on throw). File logging is unaffected.
+ *
+ * Human-facing CLI commands (the interactive installer, `status`,
+ * `permissions status`/`bootstrap`) spin up a client and emit debug/info
+ * events; when the process runs with `ORY_AGENT_DEBUG=true` (the dev launcher
+ * always sets it) those `[ory-agent] {...}` lines would interleave with the
+ * command's polished output. Wrapping the command body in this keeps the
+ * terminal clean while the log file still captures everything.
+ */
+export declare function withQuietStderr<T>(fn: () => Promise<T> | T): Promise<T>;

package/dist/logger.js

@@ -35,6 +35,7 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DebugLogger = void 0;
 exports.redactLogData = redactLogData;
+exports.withQuietStderr = withQuietStderr;
 const fs = __importStar(require("node:fs"));
 const path = __importStar(require("node:path"));
 /**
@@ -82,6 +83,15 @@ function redactLogData(value) {
     return value;
 }
 class DebugLogger {
+    /**
+     * Process-global switch to suppress the stderr firehose while still writing
+     * to the log file. The interactive installer sets this so structured debug
+     * JSON (`[ory-agent] {...}`) doesn't interleave with the wizard's
+     * human-facing UI when a session runs with `ORY_AGENT_DEBUG=true` (the dev
+     * launcher, for one, always sets it). File logging — the real observability
+     * channel — is unaffected.
+     */
+    static stderrSuppressed = false;
     enabled;
     harness;
     logFile;
@@ -113,8 +123,13 @@ class DebugLogger {
             ...(safeData ? { data: safeData } : {}),
         };
         const line = JSON.stringify(entry);
-        // Always write to stderr so we don't interfere with hook stdout
-        process.stderr.write(`[ory-agent] ${line}\n`);
+        // Write to stderr (never stdout) so we don't interfere with hook stdout,
+        // unless the stderr firehose is globally suppressed (e.g. during the
+        // interactive installer, so it doesn't clutter the wizard UI). The log
+        // file below still captures everything.
+        if (!DebugLogger.stderrSuppressed) {
+            process.stderr.write(`[ory-agent] ${line}\n`);
+        }
         if (this.logFile) {
             const dir = path.dirname(this.logFile);
             if (!fs.existsSync(dir)) {
@@ -137,3 +152,24 @@ class DebugLogger {
     }
 }
 exports.DebugLogger = DebugLogger;
+/**
+ * Run `fn` with the structured stderr firehose suppressed, restoring the
+ * previous state afterward (even on throw). File logging is unaffected.
+ *
+ * Human-facing CLI commands (the interactive installer, `status`,
+ * `permissions status`/`bootstrap`) spin up a client and emit debug/info
+ * events; when the process runs with `ORY_AGENT_DEBUG=true` (the dev launcher
+ * always sets it) those `[ory-agent] {...}` lines would interleave with the
+ * command's polished output. Wrapping the command body in this keeps the
+ * terminal clean while the log file still captures everything.
+ */
+async function withQuietStderr(fn) {
+    const prev = DebugLogger.stderrSuppressed;
+    DebugLogger.stderrSuppressed = true;
+    try {
+        return await fn();
+    }
+    finally {
+        DebugLogger.stderrSuppressed = prev;
+    }
+}

package/dist/permissions-cli.js

@@ -61,6 +61,7 @@ exports.printPermissionsOnboardingHelp = printPermissionsOnboardingHelp;
 exports.maybeAutoBootstrap = maybeAutoBootstrap;
 const config_js_1 = require("./config.js");
 const client_js_1 = require("./client.js");
+const logger_js_1 = require("./logger.js");
 const agent_auth_js_1 = require("./agent-auth.js");
 const auth_store_js_1 = require("./auth-store.js");
 const tool_catalog_js_1 = require("./tool-catalog.js");
@@ -85,10 +86,14 @@ async function runPermissionsCommand(binName, harness, args) {
         return sub ? 0 : 1;
     }
     switch (sub) {
+        // `status` and `bootstrap` spin up a client and probe/grant per tool,
+        // emitting debug/info events. Quiet the stderr firehose so those don't
+        // interleave with the command's human-facing output under
+        // ORY_AGENT_DEBUG=true; the log file still captures everything.
         case "status":
-            return await runPermissionsStatus(binName, harness);
+            return await (0, logger_js_1.withQuietStderr)(() => runPermissionsStatus(binName, harness));
         case "bootstrap":
-            return await runPermissionsBootstrap(binName, harness, args.slice(1));
+            return await (0, logger_js_1.withQuietStderr)(() => runPermissionsBootstrap(binName, harness, args.slice(1)));
         case "observe":
             return runPermissionsSetMode(binName, "observe");
         case "enforce":

package/dist/status-cli.js

@@ -17,6 +17,7 @@ const config_js_1 = require("./config.js");
 const auth_store_js_1 = require("./auth-store.js");
 const agent_auth_js_1 = require("./agent-auth.js");
 const client_js_1 = require("./client.js");
+const logger_js_1 = require("./logger.js");
 const agent_auth_js_2 = require("./agent-auth.js");
 const subject_js_1 = require("./subject.js");
 const tool_catalog_js_1 = require("./tool-catalog.js");
@@ -279,28 +280,35 @@ function formatModeSuffix(source) {
  * than aborting the command.
  */
 async function runStatusCommand(binName, harness, options) {
-    const heading = `Ory Agent Plugin Status (${options.title})`;
-    console.log(heading);
-    console.log("=".repeat(heading.length));
-    console.log("");
-    (0, cli_js_1.printOryConfig)();
-    printUserIdentitySection();
-    printAgentIdentitySection();
-    await printPermissionsSection(binName, harness);
-    if (options.printPluginSection) {
+    // Quiet the structured stderr firehose for the duration of the report so
+    // `[ory-agent] {...}` debug lines (the permissions probe runs a client and
+    // per-tool checks) don't interleave with this human-facing output when the
+    // command runs with ORY_AGENT_DEBUG=true. Debug still lands in the log file,
+    // and the "Recent activity" section below surfaces its tail regardless.
+    await (0, logger_js_1.withQuietStderr)(async () => {
+        const heading = `Ory Agent Plugin Status (${options.title})`;
+        console.log(heading);
+        console.log("=".repeat(heading.length));
         console.log("");
-        options.printPluginSection();
-    }
-    (0, cli_js_1.printEnvironment)();
-    console.log("");
-    console.log("Recent activity:");
-    (0, cli_js_1.printTraceTail)(harness);
-    (0, cli_js_1.printLogTail)(harness);
-    console.log("");
-    console.log(`  Watch traces live:  ${(0, cli_invocation_js_1.oryNpx)(binName)} watch`);
-    console.log("");
-    console.log(`Drill into any section with:`);
-    console.log(`  ${(0, cli_invocation_js_1.oryNpx)(binName)} agent status`);
-    console.log(`  ${(0, cli_invocation_js_1.oryNpx)(binName)} permissions status`);
-    console.log(`  ${(0, cli_invocation_js_1.oryNpx)(binName)} configure`);
+        (0, cli_js_1.printOryConfig)();
+        printUserIdentitySection();
+        printAgentIdentitySection();
+        await printPermissionsSection(binName, harness);
+        if (options.printPluginSection) {
+            console.log("");
+            options.printPluginSection();
+        }
+        (0, cli_js_1.printEnvironment)();
+        console.log("");
+        console.log("Recent activity:");
+        (0, cli_js_1.printTraceTail)(harness);
+        (0, cli_js_1.printLogTail)(harness);
+        console.log("");
+        console.log(`  Watch traces live:  ${(0, cli_invocation_js_1.oryNpx)(binName)} watch`);
+        console.log("");
+        console.log(`Drill into any section with:`);
+        console.log(`  ${(0, cli_invocation_js_1.oryNpx)(binName)} agent status`);
+        console.log(`  ${(0, cli_invocation_js_1.oryNpx)(binName)} permissions status`);
+        console.log(`  ${(0, cli_invocation_js_1.oryNpx)(binName)} configure`);
+    });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ory/argus",
-  "version": "0.13.6",
+  "version": "0.13.8",
   "description": "Ory Argus: the core API for building authentication, authorization, and audit into AI agent harness plugins, extensions, and custom integrations",
   "license": "Apache-2.0",
   "homepage": "https://ory.com",