@ory/argus 0.8.0 → 0.8.1

package/dist/client.js

@@ -658,10 +658,8 @@ function attachOtlpExporterFromEnv(client, harness) {
         return;
     client.tracer.setExporter(exporter);
     client.logger.info("otel.export.enabled", {
-        endpoint: process.env.OTEL_EXPORTER_OTLP_TRACES_ENDPOINT ??
-            process.env.OTEL_EXPORTER_OTLP_ENDPOINT ??
-            process.env.ORY_OTLP_ENDPOINT,
-        serviceName: process.env.OTEL_SERVICE_NAME ?? `ory-agent-plugin-${harness}`,
+        endpoint: exporter.endpoint,
+        serviceName: exporter.resource.attributes["service.name"],
     });
 }
 /**

package/dist/dev.js

@@ -322,16 +322,7 @@ async function runDevLauncher(config) {
             ? buildLocalOryEnv(localOry.gatewayUrl, localOry.seed)
             : { ORY_AGENT_SUBJECT_ID: sessionName }),
         ...(otelEndpoint
-            ? {
-                OTEL_EXPORTER_OTLP_ENDPOINT: otelEndpoint,
-                // ORY-prefixed alias for harnesses (e.g. Claude Code) that
-                // filter the env passed to hook subprocesses and drop
-                // OTEL_*-prefixed vars. The OTLP exporter reads this as a
-                // fallback so traces still reach Jaeger when OTEL_* is stripped.
-                ORY_OTLP_ENDPOINT: otelEndpoint,
-                OTEL_SERVICE_NAME: process.env.OTEL_SERVICE_NAME ??
-                    `ory-agent-plugin-${config.harnessName}`,
-            }
+            ? buildOtelEnv(otelEndpoint, config.harnessName)
             : {}),
     };
     const result = (0, node_child_process_1.spawnSync)(config.command, forwardedArgs, {
@@ -488,10 +479,53 @@ async function bootstrapLocalOry(localDir) {
         `${seed.permissions.tuples} permissions in '${namespace}' for ${seed.permissions.subject}.`);
     return { active: true, gatewayUrl, seed };
 }
+/**
+ * OTel env vars the dev launcher propagates into the harness child. Each
+ * entry pairs the standard `OTEL_*` name with its `ORY_OTLP_*` alias; the
+ * alias is set in lockstep so harnesses (notably Claude Code) that sanitize
+ * `OTEL_*` out of the hook-subprocess env still receive the configuration.
+ *
+ * Keep this list in sync with `ORY_ENV_ALIAS` in
+ * `packages/core/src/otel/otlp.ts` — the exporter consults the same aliases
+ * on the read side.
+ */
+const OTEL_FORWARDED_VARS = [
+    ["OTEL_EXPORTER_OTLP_ENDPOINT", "ORY_OTLP_ENDPOINT"],
+    ["OTEL_EXPORTER_OTLP_TRACES_ENDPOINT", "ORY_OTLP_TRACES_ENDPOINT"],
+    ["OTEL_EXPORTER_OTLP_HEADERS", "ORY_OTLP_HEADERS"],
+    ["OTEL_EXPORTER_OTLP_TRACES_HEADERS", "ORY_OTLP_TRACES_HEADERS"],
+    ["OTEL_EXPORTER_OTLP_PROTOCOL", "ORY_OTLP_PROTOCOL"],
+    ["OTEL_EXPORTER_OTLP_TRACES_PROTOCOL", "ORY_OTLP_TRACES_PROTOCOL"],
+    ["OTEL_SERVICE_NAME", "ORY_OTLP_SERVICE_NAME"],
+    ["OTEL_RESOURCE_ATTRIBUTES", "ORY_OTLP_RESOURCE_ATTRIBUTES"],
+];
+/**
+ * Compose the OTLP env block for the harness child process. The resolved
+ * endpoint is always written under both `OTEL_EXPORTER_OTLP_ENDPOINT` and
+ * `ORY_OTLP_ENDPOINT`; every other OTel knob inherited from the parent
+ * shell (and `OTEL_SERVICE_NAME`, which we default when unset) is mirrored
+ * to its `ORY_OTLP_*` alias on the way through.
+ */
+function buildOtelEnv(endpoint, harnessName) {
+    const out = {};
+    const defaults = {
+        OTEL_EXPORTER_OTLP_ENDPOINT: endpoint,
+        OTEL_SERVICE_NAME: process.env.OTEL_SERVICE_NAME ?? `ory-agent-plugin-${harnessName}`,
+    };
+    for (const [standardName, aliasName] of OTEL_FORWARDED_VARS) {
+        const value = defaults[standardName] ?? process.env[standardName];
+        if (!value)
+            continue;
+        out[standardName] = value;
+        out[aliasName] = value;
+    }
+    return out;
+}
 /**
  * Determine the OTLP endpoint for the dev launch:
  *   1. Honor OTEL_EXPORTER_OTLP_ENDPOINT / OTEL_EXPORTER_OTLP_TRACES_ENDPOINT
- *      from the parent shell (Honeycomb, custom collector, etc.).
+ *      (or their ORY_OTLP_* aliases) from the parent shell (Honeycomb,
+ *      custom collector, etc.).
  *   2. Otherwise auto-launch a local Jaeger container and use it. If Jaeger
  *      is already reachable (from `local up` or a prior dev launch), reuse
  *      it without spawning another container.
@@ -500,7 +534,9 @@ async function bootstrapLocalOry(localDir) {
  */
 async function resolveOtelEndpoint() {
     const fromEnv = process.env.OTEL_EXPORTER_OTLP_TRACES_ENDPOINT ??
-        process.env.OTEL_EXPORTER_OTLP_ENDPOINT;
+        process.env.OTEL_EXPORTER_OTLP_ENDPOINT ??
+        process.env.ORY_OTLP_TRACES_ENDPOINT ??
+        process.env.ORY_OTLP_ENDPOINT;
     if (fromEnv)
         return fromEnv;
     console.log("[ory-dev] Ensuring Jaeger is running for trace viewing...");

package/dist/otel/otlp.d.ts

@@ -7,16 +7,22 @@
  * is converted to a `ReadableSpan` shape and handed to the SDK exporter,
  * which serializes (JSON or protobuf) and POSTs to an OTLP HTTP endpoint.
  *
- * Standard OTel env vars consumed by `otlpExporterFromEnv()`:
- *   - OTEL_EXPORTER_OTLP_ENDPOINT          base URL (we append /v1/traces)
- *   - OTEL_EXPORTER_OTLP_TRACES_ENDPOINT   full traces URL (overrides base)
- *   - OTEL_EXPORTER_OTLP_HEADERS           `k=v,k=v` pairs
- *   - OTEL_EXPORTER_OTLP_TRACES_HEADERS    traces-specific headers
- *   - OTEL_EXPORTER_OTLP_PROTOCOL          `http/protobuf` (default) or `http/json`
- *   - OTEL_EXPORTER_OTLP_TRACES_PROTOCOL   traces-specific protocol
- *   - OTEL_SERVICE_NAME                    service.name resource attribute
- *   - OTEL_RESOURCE_ATTRIBUTES             additional resource attributes
- *   - ORY_OTLP_ENDPOINT                    Ory-prefixed alias for the dev launcher
+ * Standard OTel env vars consumed by `otlpExporterFromEnv()`. Each one has
+ * an `ORY_OTLP_*`-prefixed alias that is consulted as a fallback when the
+ * standard name is unset. Some harnesses (notably Claude Code) sanitize the
+ * env passed to hook subprocesses and drop every `OTEL_*` var, so the dev
+ * launcher mirrors each setting under the Ory prefix to survive the strip.
+ *
+ *   Standard name                          Ory-prefixed fallback
+ *   ─────────────────────────────────────  ─────────────────────────────────
+ *   OTEL_EXPORTER_OTLP_ENDPOINT            ORY_OTLP_ENDPOINT
+ *   OTEL_EXPORTER_OTLP_TRACES_ENDPOINT     ORY_OTLP_TRACES_ENDPOINT
+ *   OTEL_EXPORTER_OTLP_HEADERS             ORY_OTLP_HEADERS
+ *   OTEL_EXPORTER_OTLP_TRACES_HEADERS      ORY_OTLP_TRACES_HEADERS
+ *   OTEL_EXPORTER_OTLP_PROTOCOL            ORY_OTLP_PROTOCOL
+ *   OTEL_EXPORTER_OTLP_TRACES_PROTOCOL     ORY_OTLP_TRACES_PROTOCOL
+ *   OTEL_SERVICE_NAME                      ORY_OTLP_SERVICE_NAME
+ *   OTEL_RESOURCE_ATTRIBUTES               ORY_OTLP_RESOURCE_ATTRIBUTES
  *
  * Failures are swallowed (callers receive a resolved Promise) so trace
  * export can never break the agent session. Transport errors surface
@@ -80,6 +86,12 @@ export declare function otlpExporterFromEnv(opts: {
     onError?: (err: unknown) => void;
     env?: NodeJS.ProcessEnv;
 }): OtlpExporter | undefined;
+/**
+ * Read an OTel env var, falling back to its `ORY_OTLP_*`-prefixed alias when
+ * the standard name is unset. Trims whitespace and treats empty strings as
+ * absent so a propagated-but-blank var doesn't shadow the alias.
+ */
+export declare function readEnvWithAlias(env: NodeJS.ProcessEnv, standardName: string): string | undefined;
 /**
  * Parse the OTel `k=v,k2=v2` env-var format. Values may be URL-encoded.
  */

package/dist/otel/otlp.js

@@ -8,16 +8,22 @@
  * is converted to a `ReadableSpan` shape and handed to the SDK exporter,
  * which serializes (JSON or protobuf) and POSTs to an OTLP HTTP endpoint.
  *
- * Standard OTel env vars consumed by `otlpExporterFromEnv()`:
- *   - OTEL_EXPORTER_OTLP_ENDPOINT          base URL (we append /v1/traces)
- *   - OTEL_EXPORTER_OTLP_TRACES_ENDPOINT   full traces URL (overrides base)
- *   - OTEL_EXPORTER_OTLP_HEADERS           `k=v,k=v` pairs
- *   - OTEL_EXPORTER_OTLP_TRACES_HEADERS    traces-specific headers
- *   - OTEL_EXPORTER_OTLP_PROTOCOL          `http/protobuf` (default) or `http/json`
- *   - OTEL_EXPORTER_OTLP_TRACES_PROTOCOL   traces-specific protocol
- *   - OTEL_SERVICE_NAME                    service.name resource attribute
- *   - OTEL_RESOURCE_ATTRIBUTES             additional resource attributes
- *   - ORY_OTLP_ENDPOINT                    Ory-prefixed alias for the dev launcher
+ * Standard OTel env vars consumed by `otlpExporterFromEnv()`. Each one has
+ * an `ORY_OTLP_*`-prefixed alias that is consulted as a fallback when the
+ * standard name is unset. Some harnesses (notably Claude Code) sanitize the
+ * env passed to hook subprocesses and drop every `OTEL_*` var, so the dev
+ * launcher mirrors each setting under the Ory prefix to survive the strip.
+ *
+ *   Standard name                          Ory-prefixed fallback
+ *   ─────────────────────────────────────  ─────────────────────────────────
+ *   OTEL_EXPORTER_OTLP_ENDPOINT            ORY_OTLP_ENDPOINT
+ *   OTEL_EXPORTER_OTLP_TRACES_ENDPOINT     ORY_OTLP_TRACES_ENDPOINT
+ *   OTEL_EXPORTER_OTLP_HEADERS             ORY_OTLP_HEADERS
+ *   OTEL_EXPORTER_OTLP_TRACES_HEADERS      ORY_OTLP_TRACES_HEADERS
+ *   OTEL_EXPORTER_OTLP_PROTOCOL            ORY_OTLP_PROTOCOL
+ *   OTEL_EXPORTER_OTLP_TRACES_PROTOCOL     ORY_OTLP_TRACES_PROTOCOL
+ *   OTEL_SERVICE_NAME                      ORY_OTLP_SERVICE_NAME
+ *   OTEL_RESOURCE_ATTRIBUTES               ORY_OTLP_RESOURCE_ATTRIBUTES
  *
  * Failures are swallowed (callers receive a resolved Promise) so trace
  * export can never break the agent session. Transport errors surface
@@ -26,6 +32,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.OtlpExporter = void 0;
 exports.otlpExporterFromEnv = otlpExporterFromEnv;
+exports.readEnvWithAlias = readEnvWithAlias;
 exports.parseKeyValueList = parseKeyValueList;
 exports.toReadableSpan = toReadableSpan;
 const api_1 = require("@opentelemetry/api");
@@ -124,9 +131,10 @@ function otlpExporterFromEnv(opts) {
     const protocol = resolveProtocol(env, opts.onError);
     if (!protocol)
         return undefined;
-    const headers = mergeHeaders(parseKeyValueList(env.OTEL_EXPORTER_OTLP_HEADERS), parseKeyValueList(env.OTEL_EXPORTER_OTLP_TRACES_HEADERS));
+    const headers = mergeHeaders(parseKeyValueList(readEnvWithAlias(env, "OTEL_EXPORTER_OTLP_HEADERS")), parseKeyValueList(readEnvWithAlias(env, "OTEL_EXPORTER_OTLP_TRACES_HEADERS")));
     const resource = {
-        "service.name": env.OTEL_SERVICE_NAME ?? `ory-agent-plugin-${opts.harness}`,
+        "service.name": readEnvWithAlias(env, "OTEL_SERVICE_NAME") ??
+            `ory-agent-plugin-${opts.harness}`,
         "service.namespace": "ory.agent_plugins",
         "ory.harness": opts.harness,
         "process.pid": process.pid,
@@ -145,7 +153,7 @@ function otlpExporterFromEnv(opts) {
         resource["ory.git.branch"] = opts.gitBranch;
     if (opts.gitCommit)
         resource["ory.git.commit"] = opts.gitCommit;
-    for (const [k, v] of Object.entries(parseKeyValueList(env.OTEL_RESOURCE_ATTRIBUTES))) {
+    for (const [k, v] of Object.entries(parseKeyValueList(readEnvWithAlias(env, "OTEL_RESOURCE_ATTRIBUTES")))) {
         resource[k] = v;
     }
     return new OtlpExporter({
@@ -157,22 +165,20 @@ function otlpExporterFromEnv(opts) {
     });
 }
 function resolveEndpoint(env) {
-    const tracesUrl = env.OTEL_EXPORTER_OTLP_TRACES_ENDPOINT?.trim();
+    // ORY_OTLP_*-prefixed aliases survive harnesses (e.g. Claude Code) that
+    // sanitize the env passed to hook subprocesses and drop OTEL_*-prefixed
+    // vars. The standard OTel name still wins when present.
+    const tracesUrl = readEnvWithAlias(env, "OTEL_EXPORTER_OTLP_TRACES_ENDPOINT");
     if (tracesUrl)
         return tracesUrl;
-    // ORY_OTLP_ENDPOINT is an Ory-prefixed alias used by the dev launcher.
-    // Some harnesses (e.g. Claude Code) filter the env they pass to hook
-    // subprocesses and drop OTEL_*-prefixed vars, but allow ORY_*-prefixed
-    // ones through. The alias lets the launcher hand the OTLP endpoint to
-    // the hook process without depending on OTEL_* propagation.
-    const base = env.OTEL_EXPORTER_OTLP_ENDPOINT?.trim() || env.ORY_OTLP_ENDPOINT?.trim();
+    const base = readEnvWithAlias(env, "OTEL_EXPORTER_OTLP_ENDPOINT");
     if (!base)
         return undefined;
     return base.replace(/\/+$/, "") + TRACES_PATH;
 }
 function resolveProtocol(env, onError) {
-    const raw = (env.OTEL_EXPORTER_OTLP_TRACES_PROTOCOL ??
-        env.OTEL_EXPORTER_OTLP_PROTOCOL ??
+    const raw = (readEnvWithAlias(env, "OTEL_EXPORTER_OTLP_TRACES_PROTOCOL") ??
+        readEnvWithAlias(env, "OTEL_EXPORTER_OTLP_PROTOCOL") ??
         "http/protobuf")
         .trim()
         .toLowerCase();
@@ -181,6 +187,37 @@ function resolveProtocol(env, onError) {
     onError?.(new Error(`OTEL_EXPORTER_OTLP_PROTOCOL=${raw} not supported (only http/protobuf and http/json). Skipping OTel export.`));
     return undefined;
 }
+/**
+ * Standard OTel env var name → Ory-prefixed fallback. Standard wins when set;
+ * the alias is consulted only when the standard name is empty/missing. The
+ * historical `ORY_OTLP_ENDPOINT` alias for `OTEL_EXPORTER_OTLP_ENDPOINT` is
+ * preserved verbatim for compatibility with existing dev-launcher envs.
+ */
+const ORY_ENV_ALIAS = {
+    OTEL_EXPORTER_OTLP_ENDPOINT: "ORY_OTLP_ENDPOINT",
+    OTEL_EXPORTER_OTLP_TRACES_ENDPOINT: "ORY_OTLP_TRACES_ENDPOINT",
+    OTEL_EXPORTER_OTLP_HEADERS: "ORY_OTLP_HEADERS",
+    OTEL_EXPORTER_OTLP_TRACES_HEADERS: "ORY_OTLP_TRACES_HEADERS",
+    OTEL_EXPORTER_OTLP_PROTOCOL: "ORY_OTLP_PROTOCOL",
+    OTEL_EXPORTER_OTLP_TRACES_PROTOCOL: "ORY_OTLP_TRACES_PROTOCOL",
+    OTEL_SERVICE_NAME: "ORY_OTLP_SERVICE_NAME",
+    OTEL_RESOURCE_ATTRIBUTES: "ORY_OTLP_RESOURCE_ATTRIBUTES",
+};
+/**
+ * Read an OTel env var, falling back to its `ORY_OTLP_*`-prefixed alias when
+ * the standard name is unset. Trims whitespace and treats empty strings as
+ * absent so a propagated-but-blank var doesn't shadow the alias.
+ */
+function readEnvWithAlias(env, standardName) {
+    const primary = env[standardName]?.trim();
+    if (primary)
+        return primary;
+    const aliasName = ORY_ENV_ALIAS[standardName];
+    if (!aliasName)
+        return undefined;
+    const alias = env[aliasName]?.trim();
+    return alias || undefined;
+}
 // ─── Env parsing helpers ───────────────────────────────────────────
 /**
  * Parse the OTel `k=v,k2=v2` env-var format. Values may be URL-encoded.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ory/argus",
-  "version": "0.8.0",
+  "version": "0.8.1",
   "description": "Ory Argus: the core API for building authentication, authorization, and audit into AI agent harness plugins, extensions, and custom integrations",
   "license": "Apache-2.0",
   "homepage": "https://ory.com",