@ory/argus 0.14.0 → 1.0.0

package/dist/cli.js

@@ -38,8 +38,6 @@ exports.printOryConfig = printOryConfig;
 exports.printEnvironment = printEnvironment;
 exports.printLogTail = printLogTail;
 exports.printEnvHelp = printEnvHelp;
-exports.printTraceTail = printTraceTail;
-exports.runWatchCommand = runWatchCommand;
 exports.isTtyAvailable = isTtyAvailable;
 exports.promptOnTty = promptOnTty;
 exports.promptForProjectUrl = promptForProjectUrl;
@@ -49,31 +47,34 @@ const fs = __importStar(require("node:fs"));
 const readline = __importStar(require("node:readline"));
 const config_js_1 = require("./config.js");
 const agent_auth_js_1 = require("./agent-auth.js");
-const tracer_js_1 = require("./tracer.js");
+const logger_js_1 = require("./logger.js");
 const cli_invocation_js_1 = require("./cli-invocation.js");
 const client_js_1 = require("./client.js");
 /**
  * Shared `configure` command implementation for all plugin CLIs.
  *
- * Parses --project-url, --api-key, and --oauth2-client-id from args.
- * If none is provided, shows the current configuration. Otherwise saves
- * the provided values.
+ * `configure` only ever touches the **security** half of a plugin. The
+ * developer-experience half — skills, commands, the local Ory stack, the MCP
+ * server, local activity logging — is installed unconditionally and has nothing to
+ * configure, so it is never mentioned here as an alternative or a fallback.
  *
- * When `--project-url` is provided, requires the OAuth2 client id to be
- * resolvable from one of: the `--oauth2-client-id` flag, the
- * `ORY_OAUTH2_CLIENT_ID` env var, or an already-persisted value in the
- * shared config. The PKCE browser flow (the user login runs every session)
- * can't self-register that client — surfacing the requirement here keeps
- * users from a silently-broken setup later.
+ * Connecting takes the project URL and canonical broker origin from the Ory
+ * Console (Agent Security). The public OAuth2 client id defaults to the reserved
+ * Agent Security login client and can be overridden for custom deployments.
+ * Existing configurations use the project URL as a legacy broker fallback.
+ * `--disconnect` clears all three stored connection values.
+ *
+ * With no arguments, prints what is currently resolved.
  */
 function runConfigureCommand(binName, args) {
     let projectUrl;
+    let agentSecurityUrl;
     let projectId;
-    let apiKey;
     let oauth2ClientId;
-    let auditOnly = false;
-    // `undefined` = not specified; a string sets it; empty string ("") clears it
-    // (via --no-user-subject-namespace) to fall back to direct SubjectID.
+    let disconnect = false;
+    // `undefined` = not specified; a string overrides the default `User`
+    // namespace; empty string ("") clears the override (via
+    // --no-user-subject-namespace) so the default `User` namespace applies.
     let userSubjectNamespace;
     for (let i = 0; i < args.length; i++) {
         switch (args[i]) {
@@ -86,14 +87,14 @@ function runConfigureCommand(binName, args) {
             case "--project-id":
                 projectId = args[++i];
                 break;
-            case "--api-key":
-                apiKey = args[++i];
+            case "--agent-security-url":
+                agentSecurityUrl = args[++i];
                 break;
             case "--oauth2-client-id":
                 oauth2ClientId = args[++i];
                 break;
-            case "--audit-only":
-                auditOnly = true;
+            case "--disconnect":
+                disconnect = true;
                 break;
             case "--user-subject-namespace":
                 userSubjectNamespace = args[++i];
@@ -104,10 +105,10 @@ function runConfigureCommand(binName, args) {
         }
     }
     if (!projectUrl &&
+        !agentSecurityUrl &&
         !projectId &&
-        !apiKey &&
         !oauth2ClientId &&
-        !auditOnly &&
+        !disconnect &&
         userSubjectNamespace === undefined) {
         const resolved = (0, config_js_1.resolveConfig)();
         const configPath = (0, config_js_1.getConfigPath)();
@@ -116,135 +117,163 @@ function runConfigureCommand(binName, args) {
         console.log("");
         console.log(`Config file:      ${configPath}${fs.existsSync(configPath) ? "" : " (not created yet)"}`);
         console.log(`Project URL:      ${resolved.projectUrl ?? "(not set)"} [${resolved.projectUrlSource}]`);
-        console.log(`Project ID:       ${resolved.projectId ?? "(not set)"} [${resolved.projectIdSource}]`);
-        console.log(`API Key:          ${resolved.apiKey ? "(set)" : "(not set)"} [${resolved.apiKeySource}]`);
+        console.log(`Agent Security URL: ${resolved.agentSecurityUrl ?? "(not set)"} [${resolved.agentSecurityUrlSource}]`);
         console.log(`OAuth2 Client ID: ${resolved.oauth2ClientId ?? "(not set)"} [${resolved.oauth2ClientIdSource}]`);
-        console.log(`Audit Only:       ${resolved.auditOnly ? "yes" : "no"}`);
-        console.log(`User subject ns:  ${resolved.userSubjectNamespace ?? "(direct subject id)"} [${resolved.userSubjectNamespaceSource}]`);
+        console.log(`Agent Security:   ${resolved.security.connected ? "connected" : `not connected (${(0, config_js_1.describeSecurityGap)(resolved.security)})`}`);
         console.log("");
-        console.log("To configure:");
-        console.log(`  ${(0, cli_invocation_js_1.oryNpx)(binName)} configure --project-url <URL> --oauth2-client-id <CLIENT_ID> [--api-key <KEY>]`);
+        console.log(`Project ID:       ${resolved.projectId ?? "(not set)"} [${resolved.projectIdSource}]`);
+        console.log(`User subject ns:  ${resolved.userSubjectNamespace ?? "User (default)"} [${resolved.userSubjectNamespaceSource}]`);
         console.log("");
-        console.log("To address the user as a SubjectSet in permission checks (must match your tuples):");
-        console.log(`  ${(0, cli_invocation_js_1.oryNpx)(binName)} configure --user-subject-namespace User   (clear with --no-user-subject-namespace)`);
+        if (resolved.security.connected) {
+            console.log("Sign-in and permission checks are running. Tool grants, explicit blocks,");
+            console.log("and the observe/enforce posture are managed in the Ory Console (Agent Security).");
+            console.log("");
+            console.log("To disconnect (skills, commands, the local stack, and activity logging keep working):");
+            console.log(`  ${(0, cli_invocation_js_1.oryNpx)(binName)} configure --disconnect`);
+        }
+        else {
+            console.log("Skills, commands, the local Ory stack, the MCP server, and local activity logging are");
+            console.log("installed and working — they don't need a project. Only sign-in and permission");
+            console.log("checks are off.");
+            console.log("");
+            console.log("To turn them on, supply the project and canonical Agent Security origin:");
+            console.log(`  ${(0, cli_invocation_js_1.oryNpx)(binName)} configure --project-url <URL> --agent-security-url <URL>`);
+        }
         console.log("");
-        console.log("To enable audit logging only (no auth or permission checks):");
-        console.log(`  ${(0, cli_invocation_js_1.oryNpx)(binName)} configure --audit-only`);
+        console.log("Users are addressed as SubjectSets (default namespace 'User'). To override the namespace (must match how the project's permissions were written):");
+        console.log(`  ${(0, cli_invocation_js_1.oryNpx)(binName)} configure --user-subject-namespace <Namespace>   (reset to 'User' with --no-user-subject-namespace)`);
         console.log("");
         console.log("Or set environment variables:");
         console.log("  export ORY_PROJECT_URL=https://your-project.projects.oryapis.com");
+        console.log("  export ORY_AGENT_SECURITY_URL=https://agents.console.ory.com");
         console.log("  # ORY_SDK_URL (the Ory Console 'Get Started' name) is accepted as an alias.");
         console.log("  # ORY_PROJECT_ID=<project uuid> is stored for admin operations (not an SDK URL).");
-        console.log("  export ORY_OAUTH2_CLIENT_ID=<public OAuth2 client id>");
-        console.log("  export ORY_AGENT_API_KEY=ory_pat_...");
+        console.log(`  # ORY_OAUTH2_CLIENT_ID defaults to ${config_js_1.DEFAULT_OAUTH2_CLIENT_ID}.`);
         return;
     }
-    if (auditOnly) {
-        // Audit-only mode: set the kill switch (disables auth and checks entirely).
-        (0, config_js_1.saveConfig)({ auditOnly: true });
+    if (disconnect) {
+        // Clear both required values. Everything else the plugin does is
+        // unaffected — this turns off sign-in and permission checks, nothing more.
+        (0, config_js_1.saveConfig)({ projectUrl: null, agentSecurityUrl: null, oauth2ClientId: null });
         const configPath = (0, config_js_1.getConfigPath)();
         console.log(`Configuration saved to ${configPath}`);
-        console.log("  Mode: audit-only (logging enabled, auth and permission checks disabled)");
+        console.log("  Ory Agent Security: disconnected (no sign-in, no permission checks)");
         console.log("");
-        console.log("This configuration is shared across all Ory agent plugins.");
+        console.log("Skills, commands, the local Ory stack, the MCP server, and local activity logging");
+        console.log("are unaffected and keep working.");
+        if (process.env.ORY_PROJECT_URL || process.env.ORY_SDK_URL || process.env.ORY_AGENT_SECURITY_URL || process.env.ORY_OAUTH2_CLIENT_ID) {
+            console.log("");
+            console.log("Note: ORY_PROJECT_URL / ORY_SDK_URL / ORY_AGENT_SECURITY_URL /");
+            console.log("ORY_OAUTH2_CLIENT_ID are set in your");
+            console.log("environment and take precedence over the config file — unset them to stay");
+            console.log("disconnected.");
+        }
         return;
     }
-    // When --project-url / --sdk-url is provided we need a usable OAuth2 client
-    // id for the user PKCE flow — block the configure with a clear error if none
-    // is reachable from the flag, env, or already-persisted config. A bare
-    // --project-id sets an admin identifier only (not an SDK URL), so it doesn't
-    // trigger this gate on its own.
-    if (projectUrl) {
-        const persisted = (0, config_js_1.loadConfig)().oauth2ClientId;
-        const envClientId = process.env.ORY_OAUTH2_CLIENT_ID;
-        const resolved = oauth2ClientId ?? envClientId ?? persisted;
-        if (!resolved) {
-            console.error("Error: --project-url requires an OAuth2 client id for the user PKCE flow.\n" +
+    // Agent Security needs the project and broker origin. The login client uses
+    // the reserved default unless an explicit flag, environment variable, or
+    // persisted override is present. A bare --project-id is an admin identifier
+    // only and doesn't connect anything, so it doesn't trigger this.
+    if (agentSecurityUrl) {
+        try {
+            const parsed = new URL(agentSecurityUrl);
+            if ((parsed.protocol !== "https:" && parsed.origin !== config_js_1.LOCAL_AGENT_SECURITY_URL) ||
+                !parsed.hostname ||
+                parsed.username ||
+                parsed.password ||
+                (parsed.pathname !== "" && parsed.pathname !== "/") ||
+                parsed.search ||
+                parsed.hash) {
+                throw new Error("invalid origin");
+            }
+            agentSecurityUrl = parsed.origin;
+        }
+        catch {
+            console.error("Error: --agent-security-url must be an HTTPS origin without credentials, path, query, or fragment " +
+                `(for example ${config_js_1.DEFAULT_AGENT_SECURITY_URL} or ${config_js_1.LOCAL_AGENT_SECURITY_URL}).`);
+            process.exit(1);
+        }
+    }
+    if (projectUrl || agentSecurityUrl || oauth2ClientId) {
+        const persisted = (0, config_js_1.loadConfig)();
+        const resolvedUrl = projectUrl ?? process.env.ORY_PROJECT_URL ?? process.env.ORY_SDK_URL ?? persisted.projectUrl;
+        if (!resolvedUrl) {
+            console.error("Error: Ory Agent Security needs --project-url <URL>.\n" +
+                "\n" +
+                "Copy the project URL from the Ory Console under Agent Security:\n" +
+                `  ${(0, cli_invocation_js_1.oryNpx)(binName)} configure --project-url <URL>\n` +
                 "\n" +
-                "Provide one with --oauth2-client-id <id>, or set ORY_OAUTH2_CLIENT_ID in your\n" +
-                "environment. The client must be a public OAuth2 client (no client secret,\n" +
-                "token_endpoint_auth_method=none) registered in your Ory project with all four\n" +
-                "loopback redirect URIs:\n" +
-                "  http://127.0.0.1:47823/callback\n" +
-                "  http://127.0.0.1:47824/callback\n" +
-                "  http://127.0.0.1:47825/callback\n" +
-                "  http://127.0.0.1:47826/callback\n" +
+                "(--agent-security-url and --oauth2-client-id override their production defaults.)\n" +
                 "\n" +
-                "Create it with:\n" +
-                "  ory create oauth2-client --project <project-id> \\\n" +
-                "    --name \"ory-agent-plugin\" \\\n" +
-                "    --grant-type authorization_code,refresh_token \\\n" +
-                "    --response-type code \\\n" +
-                "    --scope openid,offline_access \\\n" +
-                "    --token-endpoint-auth-method none \\\n" +
-                "    --redirect-uri http://127.0.0.1:47823/callback \\\n" +
-                "    --redirect-uri http://127.0.0.1:47824/callback \\\n" +
-                "    --redirect-uri http://127.0.0.1:47825/callback \\\n" +
-                "    --redirect-uri http://127.0.0.1:47826/callback\n" +
+                "Connecting needs no workspace privilege. The plugin never provisions the project itself.\n" +
                 "\n" +
-                "If you only want audit logging (no auth or permission checks), use:\n" +
-                `  ${(0, cli_invocation_js_1.oryNpx)(binName)} configure --audit-only`);
+                "Nothing was changed. The plugin's skills, commands, local Ory stack, MCP\n" +
+                "server, and local activity logging work without a project and are unaffected.");
             process.exit(1);
         }
+        if (projectUrl && !agentSecurityUrl && !process.env.ORY_AGENT_SECURITY_URL?.trim() && !persisted.agentSecurityUrl) {
+            agentSecurityUrl = config_js_1.DEFAULT_AGENT_SECURITY_URL;
+        }
     }
     const update = {};
     if (projectUrl)
         update.projectUrl = projectUrl;
+    if (agentSecurityUrl)
+        update.agentSecurityUrl = agentSecurityUrl;
     if (projectId)
         update.projectId = projectId;
-    if (apiKey) {
-        update.apiKey = apiKey;
-        // A hand-supplied key has no known token id; drop any stale id so uninstall
-        // never tries to delete a different token by an id that no longer matches.
-        update.apiKeyId = null;
-    }
     if (oauth2ClientId)
         update.oauth2ClientId = oauth2ClientId;
-    // A non-empty namespace sets the SubjectSet namespace; the empty string
-    // (from --no-user-subject-namespace) clears it (null ⇒ delete the key).
+    // A non-empty namespace overrides the default `User` SubjectSet namespace; the
+    // empty string (from --no-user-subject-namespace) clears the override (null ⇒
+    // delete the key) so the `User` default applies.
     if (userSubjectNamespace !== undefined) {
         update.userSubjectNamespace = userSubjectNamespace === "" ? null : userSubjectNamespace;
     }
-    // Configuring an actual connection (a slug-based URL, api key, or client id)
-    // implies leaving audit-only mode. A bare project id is only an admin
-    // identifier — it doesn't connect anything on its own — so it doesn't flip
-    // the flag.
-    if (projectUrl || apiKey || oauth2ClientId)
-        update.auditOnly = false;
     (0, config_js_1.saveConfig)(update);
     const configPath = (0, config_js_1.getConfigPath)();
     console.log(`Configuration saved to ${configPath}`);
     if (projectUrl)
         console.log(`  Project URL: ${projectUrl}`);
+    if (agentSecurityUrl)
+        console.log(`  Agent Security URL: ${agentSecurityUrl}`);
     if (projectId)
         console.log(`  Project ID: ${projectId}`);
-    if (apiKey)
-        console.log(`  API Key: (set)`);
     if (oauth2ClientId)
         console.log(`  OAuth2 Client ID: ${oauth2ClientId}`);
     if (userSubjectNamespace !== undefined)
-        console.log(`  User subject namespace: ${userSubjectNamespace === "" ? "(cleared — direct subject id)" : userSubjectNamespace}`);
+        console.log(`  User subject namespace: ${userSubjectNamespace === "" ? "(reset to default 'User')" : userSubjectNamespace}`);
+    // Report the resulting posture rather than assuming the write connected
+    // anything: `--project-id` on its own changes no part of it.
+    const security = (0, config_js_1.resolveConfig)().security;
+    console.log(`  Ory Agent Security: ${security.connected ? "connected — sign-in and permission checks run on the next session" : `not connected (${(0, config_js_1.describeSecurityGap)(security)})`}`);
     console.log("");
     console.log("This configuration is shared across all Ory agent plugins.");
-    console.log("Environment variables (ORY_PROJECT_URL, ORY_AGENT_API_KEY, ORY_OAUTH2_CLIENT_ID) take precedence when set.");
+    console.log("Environment variables (ORY_PROJECT_URL, ORY_AGENT_SECURITY_URL, ORY_OAUTH2_CLIENT_ID) take precedence when set.");
 }
 /**
- * Print the "Configuration:" block showing Ory project URL and API key status.
+ * Print the "Configuration:" block showing the resolved Ory connection.
  */
 function printOryConfig() {
     const resolved = (0, config_js_1.resolveConfig)();
     const configPath = (0, config_js_1.getConfigPath)();
-    const namespace = process.env.ORY_PERMISSION_NAMESPACE || "AgentTools";
+    const namespace = process.env.ORY_PERMISSION_NAMESPACE || "AgentTool";
     console.log("Configuration:");
     console.log(`  Config file:     ${configPath}`);
-    console.log(`  Mode:            ${resolved.auditOnly ? "audit-only" : "full"}`);
+    console.log(`  Agent Security:  ${resolved.security.connected
+        ? "connected (sign-in + permission checks + activity logging)"
+        : `not connected — ${(0, config_js_1.describeSecurityGap)(resolved.security)} (local activity logging only)`}`);
     console.log(`  Project URL:     ${resolved.projectUrl ?? "NOT SET"} [source: ${resolved.projectUrlSource}]`);
-    console.log(`  Project ID:      ${resolved.projectId ?? "NOT SET"} [source: ${resolved.projectIdSource}]`);
-    console.log(`  API Key:         ${resolved.apiKey ? "(set)" : "NOT SET"} [source: ${resolved.apiKeySource}]`);
+    console.log(`  Agent Security:  ${resolved.agentSecurityUrl ?? "NOT SET"} [source: ${resolved.agentSecurityUrlSource}]`);
     console.log(`  OAuth2 Client:   ${resolved.oauth2ClientId ?? "NOT SET"} [source: ${resolved.oauth2ClientIdSource}]`);
-    console.log(`  Permission mode: ${resolved.permissionMode} [source: ${resolved.permissionModeSource}]`);
+    console.log(`  Project ID:      ${resolved.projectId ?? "NOT SET"} [source: ${resolved.projectIdSource}]`);
+    // Only meaningful while connected — with no checks running there is no deny
+    // to have a posture about.
+    if (resolved.security.connected) {
+        console.log(`  Permission mode: ${resolved.permissionMode} [source: ${resolved.permissionModeSource}]`);
+    }
     console.log(`  Namespace:       ${namespace}`);
-    console.log(`  User subject ns: ${resolved.userSubjectNamespace ?? "(direct subject id)"} [source: ${resolved.userSubjectNamespaceSource}]`);
+    console.log(`  User subject ns: ${resolved.userSubjectNamespace ?? "User (default)"} [source: ${resolved.userSubjectNamespaceSource}]`);
 }
 /**
  * Print the "Environment:" block showing Ory-related environment variables.
@@ -255,32 +284,20 @@ function printEnvironment() {
     const vars = [
         ["ORY_PROJECT_URL", process.env.ORY_PROJECT_URL, false],
         ["ORY_SDK_URL", process.env.ORY_SDK_URL, false],
+        ["ORY_AGENT_SECURITY_URL", process.env.ORY_AGENT_SECURITY_URL, false],
         ["ORY_PROJECT_ID", process.env.ORY_PROJECT_ID, false],
-        [
-            "ORY_AGENT_API_KEY",
-            process.env.ORY_AGENT_API_KEY ? "(set)" : undefined,
-            false,
-        ],
         ["ORY_AGENT_CLIENT_ID", process.env.ORY_AGENT_CLIENT_ID, false],
         ["ORY_OAUTH2_CLIENT_ID", process.env.ORY_OAUTH2_CLIENT_ID, false],
         [
-            "ORY_USER_SESSION_TOKEN",
-            process.env.ORY_USER_SESSION_TOKEN ? "(set)" : undefined,
+            "ORY_USER_OAUTH2_TOKEN",
+            process.env.ORY_USER_OAUTH2_TOKEN ? "(set)" : undefined,
             false,
         ],
         ["ORY_USER_SUBJECT_ID", process.env.ORY_USER_SUBJECT_ID, false],
         ["ORY_AGENT_SUBJECT_ID", process.env.ORY_AGENT_SUBJECT_ID, false],
         ["ORY_AGENT_DEBUG", process.env.ORY_AGENT_DEBUG, false],
         ["ORY_AGENT_LOG_FILE", process.env.ORY_AGENT_LOG_FILE, false],
-        ["ORY_AGENT_TRACE_FILE", process.env.ORY_AGENT_TRACE_FILE, false],
     ];
-    if (process.env.ORY_API_KEY && !process.env.ORY_AGENT_API_KEY) {
-        vars.splice(2, 0, [
-            "ORY_API_KEY",
-            "(set, DEPRECATED — use ORY_AGENT_API_KEY)",
-            false,
-        ]);
-    }
     for (const [name, value, required] of vars) {
         const display = value
             ? value
@@ -292,12 +309,11 @@ function printEnvironment() {
     }
 }
 /**
- * Print the last 5 debug log entries. When `harness` is given the path is
+ * Print the last 10 unified activity/debug log entries. When `harness` is given the path is
  * resolved the same way the plugin does at runtime — the default per-harness
  * data-dir location when `ORY_AGENT_LOG_FILE` is unset — so `status` finds the
- * log without the reader hand-setting env vars. The debug log only exists when
- * a session ran with `ORY_AGENT_DEBUG=true`; when it doesn't, this prints a
- * one-line pointer on how to turn it on rather than staying silent.
+ * log without the reader hand-setting env vars. Activity is always filed;
+ * verbose diagnostic entries are included only when `ORY_AGENT_DEBUG=true`.
  */
 function printLogTail(harness) {
     const logFile = harness
@@ -306,12 +322,11 @@ function printLogTail(harness) {
     if (logFile && fs.existsSync(logFile)) {
         const lines = fs.readFileSync(logFile, "utf-8").trim().split("\n");
         console.log("");
-        console.log(`Debug log: ${logFile} (${lines.length} events)`);
-        console.log("Last 5 events:");
-        for (const line of lines.slice(-5)) {
+        console.log(`Activity log: ${logFile} (${lines.length} events)`);
+        console.log("Last 10 events:");
+        for (const line of lines.slice(-10)) {
             try {
-                const entry = JSON.parse(line);
-                console.log(`  ${entry.timestamp} [${entry.level}] ${entry.event}`);
+                console.log("  " + (0, logger_js_1.formatLogEntry)(JSON.parse(line)));
             }
             catch {
                 console.log(`  ${line.slice(0, 120)}`);
@@ -321,8 +336,8 @@ function printLogTail(harness) {
     else if (harness) {
         console.log("");
         console.log(logFile
-            ? `Debug log: none yet — run a session with ORY_AGENT_DEBUG=true to write ${logFile}`
-            : "Debug log: disabled (ORY_AGENT_LOG_FILE set empty)");
+            ? `Activity log: none yet — events land in ${logFile} once a session runs`
+            : "Activity log: disabled (ORY_AGENT_LOG_FILE set empty)");
     }
 }
 /**
@@ -334,79 +349,19 @@ function printEnvHelp(binName) {
     console.log("");
     console.log("  Option 1 — Save to config file (persists across sessions):");
     console.log(`    ${(0, cli_invocation_js_1.oryNpx)(binName)} configure --project-url https://your-project.projects.oryapis.com \\`);
-    console.log("                              --oauth2-client-id <public OAuth2 client id> \\");
-    console.log("                              --api-key ory_pat_...");
+    console.log("                              --agent-security-url https://agents.console.ory.com \\");
+    console.log("                              --oauth2-client-id <public OAuth2 client id>");
     console.log("");
     console.log("  Option 2 — Set environment variables:");
     console.log("    export ORY_PROJECT_URL=https://your-project.projects.oryapis.com");
+    console.log("    export ORY_AGENT_SECURITY_URL=https://agents.console.ory.com");
     console.log("    export ORY_OAUTH2_CLIENT_ID=<public OAuth2 client id>");
-    console.log("    export ORY_AGENT_API_KEY=ory_pat_...");
+    console.log("");
+    console.log("  Both values come from the Ory Console (Agent Security), which provisions the");
+    console.log("  project's login client, permission model, grants, and enforce posture.");
     console.log("");
     console.log("If neither is set when a session starts, the agent will prompt for configuration.");
 }
-/**
- * Print the last 5 trace spans. When `harness` is given the path is resolved
- * the same way the plugin does at runtime — the default per-harness data-dir
- * location when `ORY_AGENT_TRACE_FILE` is unset — so `status` shows recent
- * activity out of the box (traces are written on every recorded span). When no
- * spans have been recorded yet, prints a one-line pointer at the trace file so
- * the reader knows where to look (and how to watch it live).
- */
-function printTraceTail(harness) {
-    const traceFile = harness
-        ? (0, client_js_1.resolveTraceFilePath)(harness)
-        : process.env.ORY_AGENT_TRACE_FILE;
-    if (traceFile && fs.existsSync(traceFile)) {
-        const lines = fs.readFileSync(traceFile, "utf-8").trim().split("\n");
-        console.log("");
-        console.log(`Trace file: ${traceFile} (${lines.length} spans)`);
-        console.log("Last 5 spans:");
-        for (const line of lines.slice(-5)) {
-            try {
-                const span = JSON.parse(line);
-                console.log("  " + (0, tracer_js_1.formatSpan)(span));
-            }
-            catch {
-                console.log(`  ${line.slice(0, 120)}`);
-            }
-        }
-    }
-    else if (harness) {
-        console.log("");
-        console.log(traceFile
-            ? `Trace file: none yet — spans land in ${traceFile} once a session runs a tool`
-            : "Trace file: disabled (ORY_AGENT_TRACE_FILE set empty)");
-    }
-}
-/**
- * Run the live trace watcher. Tails the NDJSON trace file and prints
- * formatted spans to stdout as they arrive. Blocks until interrupted.
- */
-function runWatchCommand(harness, args) {
-    // Precedence: explicit arg → resolved default (honors ORY_AGENT_TRACE_FILE,
-    // falling back to the per-harness data-dir path). The resolver returns
-    // undefined only when tracing is explicitly disabled (ORY_AGENT_TRACE_FILE
-    // set empty), so that's the one case that dead-ends here.
-    const traceFile = args[0] || (0, client_js_1.resolveTraceFilePath)(harness);
-    if (!traceFile) {
-        console.error("Trace file is disabled (ORY_AGENT_TRACE_FILE is set empty).\n" +
-            "Unset it, or pass a path: watch <trace-file>\n");
-        process.exit(1);
-    }
-    console.log(`Watching traces: ${traceFile}`);
-    if (!fs.existsSync(traceFile)) {
-        console.log("(file doesn't exist yet — waiting for the first span…)");
-    }
-    console.log("Press Ctrl+C to stop.\n");
-    const stop = (0, tracer_js_1.watchTraceFile)(traceFile, (span) => {
-        console.log((0, tracer_js_1.formatSpan)(span));
-    });
-    process.on("SIGINT", () => {
-        stop();
-        console.log("\nStopped watching.");
-        process.exit(0);
-    });
-}
 /**
  * Returns true if `/dev/tty` can be opened for reading. Use this before
  * attempting to prompt the user — the harness has already taken stdin so
@@ -490,8 +445,9 @@ async function promptForProjectUrl(binName) {
         process.stderr.write(`\nIgnoring invalid project URL "${answer}".\n\n`);
         return null;
     }
-    (0, config_js_1.saveConfig)({ projectUrl: url, auditOnly: false });
-    process.stderr.write(`\nSaved project URL to ${(0, config_js_1.getConfigPath)()}.\n\n`);
+    (0, config_js_1.saveConfig)({ projectUrl: url, agentSecurityUrl: config_js_1.DEFAULT_AGENT_SECURITY_URL });
+    process.stderr.write(`\nSaved project URL to ${(0, config_js_1.getConfigPath)()}.\n`);
+    process.stderr.write("\n");
     return url;
 }
 /**
@@ -510,21 +466,19 @@ async function interactiveConfigPrompt(binName) {
         "  Ory Agent Plugin — Configuration Required",
         "--------------------------------------------",
         "",
-        "The Ory agent plugin is installed but not yet configured.",
-        "Run one of the following commands in another terminal:",
+        "Ory Agent Security is not connected, so no sign-in or permission checks run.",
+        "To turn them on, run this in another terminal:",
         "",
-        "  Connect to Ory (enables auth & permission checks):",
-        `    ${(0, cli_invocation_js_1.oryNpx)(binName)} configure --project-url <URL> --oauth2-client-id <CLIENT_ID> [--api-key <KEY>]`,
-        "",
-        "  Or, enable audit logging only (no auth or permission checks):",
-        `    ${(0, cli_invocation_js_1.oryNpx)(binName)} configure --audit-only`,
+        `    ${(0, cli_invocation_js_1.oryNpx)(binName)} configure --project-url <URL>`,
+        "    (pass --agent-security-url to override the production broker)",
         "",
         `Config is saved to ${configPath}`,
         "and shared across all agent plugins.",
         "",
         "You can also set environment variables (requires session restart):",
         "  export ORY_PROJECT_URL=https://your-project.projects.oryapis.com",
-        "  export ORY_AGENT_API_KEY=ory_pat_...",
+        "  export ORY_AGENT_SECURITY_URL=https://agents.console.ory.com",
+        "  export ORY_OAUTH2_CLIENT_ID=<public OAuth2 client id>",
         "",
     ].join("\n");
     process.stderr.write(message + "\n");
@@ -552,12 +506,12 @@ async function interactiveConfigPrompt(binName) {
     }
     // Re-read config from disk (env vars set in another shell won't be visible)
     const resolved = (0, config_js_1.resolveConfig)();
-    if (resolved.projectUrl || resolved.auditOnly) {
-        process.stderr.write("\nConfiguration detected! Continuing session.\n\n");
+    if (resolved.security.connected) {
+        process.stderr.write("\nOry Agent Security is connected. Continuing session.\n\n");
         return true;
     }
-    process.stderr.write("\nNo configuration detected. Session blocked.\n");
-    process.stderr.write("Run one of the configure commands above and start a new session.\n\n");
+    process.stderr.write(`\nOry Agent Security is still not connected (${(0, config_js_1.describeSecurityGap)(resolved.security)}).\n`);
+    process.stderr.write("Continuing without sign-in or permission checks.\n\n");
     return false;
 }
 /**
@@ -568,71 +522,149 @@ async function interactiveConfigPrompt(binName) {
  *   - `unregister` — best-effort RFC 7592 DELETE on the registered
  *                    client, then clear the persisted block.
  *
+ * Each installed harness owns its own agent identity, so both subcommands act
+ * on `harness`'s registration by default. `--all` widens them to every
+ * harness registered against the shared config.
+ *
  * Returns the process exit code (0 on success, non-zero on usage error).
  */
-async function runAgentCommand(binName, args) {
+async function runAgentCommand(binName, harness, args) {
     const sub = args[0];
     if (!sub || sub === "--help" || sub === "-h") {
-        console.log(`Usage: ${binName} agent <subcommand>`);
+        console.log(`Usage: ${binName} agent <subcommand> [--all]`);
         console.log("");
         console.log("Subcommands:");
-        console.log("  status      Show the registered agent OAuth2 client (if any)");
-        console.log("  unregister  Delete the registered agent client and clear local state");
+        console.log("  status      Show the registered agent OAuth2 clients (one per session)");
+        console.log("  unregister  Delete the registered agent clients and clear local state");
+        console.log("");
+        console.log("Options:");
+        console.log(`  --all       Act on every harness's agent client, not just ${harness}'s`);
         return sub ? 0 : 1;
     }
+    const all = args.includes("--all");
     switch (sub) {
         case "status":
-            runAgentStatus();
+            runAgentStatus(harness, all);
             return 0;
         case "unregister":
-            return await runAgentUnregister();
+            return await runAgentUnregister(harness, all);
         default:
             console.error(`Unknown agent subcommand: ${sub}`);
             console.error(`Run "${binName} agent --help" for usage.`);
             return 1;
     }
 }
-function runAgentStatus() {
-    const persisted = (0, agent_auth_js_1.loadAgentDynamicCredentials)();
+/**
+ * The agent registrations a command should act on — one per harness install.
+ * `--all` widens to every harness. Sorted newest-registration first.
+ */
+function selectAgentRegistrations(harness, all) {
+    const byHarness = (0, agent_auth_js_1.loadAgentDynamicCredentialsByHarness)();
+    const entries = [];
+    for (const [key, bySession] of Object.entries(byHarness)) {
+        if (!all && key !== harness)
+            continue;
+        for (const [sessionKey, credentials] of Object.entries(bySession)) {
+            entries.push({ harness: key, sessionKey, credentials });
+        }
+    }
+    return entries.sort((a, b) => b.credentials.registeredAt - a.credentials.registeredAt ||
+        a.harness.localeCompare(b.harness));
+}
+function runAgentStatus(harness, all) {
+    const registrations = selectAgentRegistrations(harness, all);
     console.log("Agent identity (Dynamic Client Registration)");
     console.log("=============================================");
     console.log("");
-    if (!persisted) {
-        console.log("  No registered agent client. The harness will register one on its");
-        console.log("  next session start using the user's bearer (or");
+    if (registrations.length === 0) {
+        console.log(all
+            ? "  No registered agent clients for any harness. Each install registers"
+            : `  No registered agent client for ${harness}. Each install registers`);
+        console.log("  one on its first session start, using the user's bearer (or");
         console.log("  ORY_AGENT_REGISTRATION_TOKEN) as the initial access token.");
         return;
     }
-    console.log(`  client_id:        ${persisted.clientId}`);
-    console.log(`  client_secret:    ${persisted.clientSecret ? "(set)" : "(not set — public client)"}`);
-    console.log(`  registered_at:    ${new Date(persisted.registeredAt * 1000).toISOString()}`);
-    console.log(`  project_url:      ${persisted.projectUrl}`);
-    if (persisted.harness)
-        console.log(`  harness:          ${persisted.harness}`);
-    if (persisted.registrationClientUri) {
-        console.log(`  management_uri:   ${persisted.registrationClientUri}`);
-    }
-    if (persisted.registrationAccessToken) {
-        console.log(`  registration_token: (set — used to manage/delete this client)`);
+    for (const { harness: key, sessionKey, credentials: persisted } of registrations) {
+        console.log(`  harness:          ${key}`);
+        console.log(`  session:          ${sessionKey}`);
+        console.log(`  client_id:        ${persisted.clientId}`);
+        console.log(`  client_secret:    ${persisted.clientSecret ? "(set)" : "(not set — public client)"}`);
+        console.log(`  registered_at:    ${new Date(persisted.registeredAt * 1000).toISOString()}`);
+        console.log(`  project_url:      ${persisted.projectUrl}`);
+        if (persisted.registrationClientUri) {
+            console.log(`  management_uri:   ${persisted.registrationClientUri}`);
+        }
+        if (persisted.registrationAccessToken) {
+            console.log(`  registration_token: (set — used to manage/delete this client)`);
+        }
+        console.log("");
     }
 }
-async function runAgentUnregister() {
-    const persisted = (0, agent_auth_js_1.loadAgentDynamicCredentials)();
-    if (!persisted) {
-        console.log("No registered agent client to unregister. Nothing to do.");
-        return 0;
+async function runAgentUnregister(harness, all) {
+    const targets = [];
+    const children = (0, agent_auth_js_1.loadSubAgentDynamicCredentialsByHarness)();
+    for (const [key, bySession] of Object.entries(children)) {
+        if (!all && key !== harness)
+            continue;
+        for (const [sessionKey, byType] of Object.entries(bySession)) {
+            for (const [type, credentials] of Object.entries(byType)) {
+                targets.push({
+                    label: `${key}/${sessionKey}/${type}`,
+                    credentials,
+                    clear: () => (0, agent_auth_js_1.clearSubAgentDynamicCredentials)(key, sessionKey, type),
+                });
+            }
+        }
     }
-    const outcome = await (0, agent_auth_js_1.revokeAgentDynamicClient)(persisted);
-    if (outcome.status === "skipped") {
-        console.warn("Warning: no registration_access_token was persisted, so we cannot DELETE the server-side client. Clearing local state only.");
+    for (const { harness: key, sessionKey, credentials } of selectAgentRegistrations(harness, all)) {
+        targets.push({
+            label: `${key}/${sessionKey}`,
+            credentials,
+            clear: () => (0, agent_auth_js_1.clearAgentDynamicCredentials)(key, sessionKey),
+        });
     }
-    else if (outcome.status === "failed") {
-        const detail = typeof outcome.httpStatus === "number"
-            ? `returned HTTP ${outcome.httpStatus}`
-            : `failed (${outcome.message})`;
-        console.warn(`Warning: server-side DELETE ${detail}. Local state will be cleared anyway.`);
+    for (const credentials of (0, agent_auth_js_1.loadRetiredCredentials)()) {
+        if (!all && credentials.harness !== harness)
+            continue;
+        targets.push({
+            label: `${credentials.harness ?? "unknown"}/retired`,
+            credentials,
+            clear: () => undefined,
+            retired: true,
+        });
+    }
+    if (targets.length === 0) {
+        console.log(all
+            ? "No registered agent clients to unregister. Nothing to do."
+            : `No registered agent client for ${harness} to unregister. Nothing to do.`);
+        return 0;
+    }
+    const retiredIds = [];
+    const seen = new Set();
+    for (const target of targets) {
+        const { label, credentials: persisted } = target;
+        if (seen.has(persisted.clientId)) {
+            target.clear();
+            if (target.retired)
+                retiredIds.push(persisted.clientId);
+            continue;
+        }
+        seen.add(persisted.clientId);
+        const outcome = await (0, agent_auth_js_1.revokeAgentDynamicClient)(persisted);
+        if (outcome.status === "skipped") {
+            console.warn(`Warning: no registration_access_token was persisted for ${label}, so we cannot DELETE the server-side client. Clearing local state only.`);
+        }
+        else if (outcome.status === "failed") {
+            const detail = typeof outcome.httpStatus === "number"
+                ? `returned HTTP ${outcome.httpStatus}`
+                : `failed (${outcome.message})`;
+            console.warn(`Warning: server-side DELETE for ${label} ${detail}. Local state will be cleared anyway.`);
+        }
+        target.clear();
+        if (target.retired)
+            retiredIds.push(persisted.clientId);
+        console.log(`Unregistered agent client ${persisted.clientId} (${label}).`);
     }
-    (0, agent_auth_js_1.clearAgentDynamicCredentials)();
-    console.log(`Unregistered agent client ${persisted.clientId}.`);
+    (0, agent_auth_js_1.clearRetiredCredentials)(retiredIds);
     return 0;
 }