@ory/argus 1.1.0 → 1.2.1

package/dist/auth.d.ts

@@ -52,6 +52,8 @@ export interface PkceLoginOptions {
     isHeadless?: () => boolean;
     /** Optional AbortSignal to cancel the login (e.g. on shutdown). */
     signal?: AbortSignal;
+    /** @internal Injectable seam for testing default-fetch TLS setup. */
+    configureSystemCaTrust?: () => void;
 }
 export type PkceLoginOutcome = {
     kind: "ok";
@@ -119,6 +121,8 @@ export declare function refreshAccessToken(args: {
     projectUrl: string;
     clientId: string;
     refreshToken: string;
+    /** @internal Injectable seam for testing default-fetch TLS setup. */
+    configureSystemCaTrust?: () => void;
 }): Promise<OryOAuth2Tokens>;
 /**
  * Best-effort human-readable name for the signed-in user, pulled from the

package/dist/auth.js

@@ -60,6 +60,7 @@ const node_url_1 = require("node:url");
 const fs = __importStar(require("node:fs"));
 const path = __importStar(require("node:path"));
 const branding_js_1 = require("./branding.js");
+const runtime_credential_js_1 = require("./runtime-credential.js");
 /** Loopback ports tried in order. All must be registered as redirect URIs on the Ory OAuth2 client. */
 exports.LOOPBACK_PORTS = [47823, 47824, 47825, 47826];
 /**
@@ -202,6 +203,7 @@ async function runPkceAttempt(options, scope, scopeFallbackPending) {
             redirectUri,
             code: result.code,
             codeVerifier,
+            configureSystemCaTrust: options.configureSystemCaTrust,
         });
         return { kind: "ok", tokens };
     }
@@ -516,6 +518,7 @@ async function exchangeCodeForTokens(args) {
         code_verifier: args.codeVerifier,
     });
     const tokenUrl = new node_url_1.URL("/oauth2/token", args.projectUrl).toString();
+    (args.configureSystemCaTrust ?? runtime_credential_js_1.configureSystemCaTrustForDefaultFetch)();
     const res = await fetch(tokenUrl, {
         method: "POST",
         headers: { "content-type": "application/x-www-form-urlencoded" },
@@ -558,6 +561,7 @@ async function refreshAccessToken(args) {
         refresh_token: args.refreshToken,
     });
     const tokenUrl = new node_url_1.URL("/oauth2/token", args.projectUrl).toString();
+    (args.configureSystemCaTrust ?? runtime_credential_js_1.configureSystemCaTrustForDefaultFetch)();
     const res = await fetch(tokenUrl, {
         method: "POST",
         headers: { "content-type": "application/x-www-form-urlencoded" },

package/dist/branding.d.ts

@@ -19,8 +19,8 @@
  *    name carrying *who* and *where*, so a shared project's resource list stays
  *    legible and prunable: {@link agentClientName}, {@link projectApiKeyName}.
  *
- * Everything shares the {@link PRODUCT_NAME} prefix so the plugin's resources
- * group together and are instantly recognizable in a shared Ory Console.
+ * Display names stay short because the Console already provides the resource
+ * type and project context around them.
  */
 /** Human-readable umbrella name for everything this product creates. */
 export declare const PRODUCT_NAME = "Ory Agent Security";
@@ -58,7 +58,7 @@ export declare const USER_LOGIN_CLIENT_ID = "ory-agent-security-login";
  * installs onto one client, and {@link isUserLoginClient} is the only accepted
  * test for "is this the login client".
  */
-export declare const USER_LOGIN_CLIENT_NAME = "Ory Agent Security \u00B7 shared user login (all plugins)";
+export declare const USER_LOGIN_CLIENT_NAME = "Agent Security login";
 /**
  * Whether a client is *the* shared user-login client, decided **only** by its
  * id. A client carrying {@link USER_LOGIN_CLIENT_NAME} under any other id is

package/dist/branding.js

@@ -20,8 +20,8 @@
  *    name carrying *who* and *where*, so a shared project's resource list stays
  *    legible and prunable: {@link agentClientName}, {@link projectApiKeyName}.
  *
- * Everything shares the {@link PRODUCT_NAME} prefix so the plugin's resources
- * group together and are instantly recognizable in a shared Ory Console.
+ * Display names stay short because the Console already provides the resource
+ * type and project context around them.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PERMISSION_NAMESPACE = exports.DEFAULT_PROJECT_NAME = exports.USER_LOGIN_SCOPE_CLI = exports.USER_LOGIN_SCOPE_OAUTH = exports.USER_LOGIN_SCOPES = exports.USER_LOGIN_BASE_SCOPES = exports.USER_LOGIN_CLIENT_NAME = exports.USER_LOGIN_CLIENT_ID = exports.PRODUCT_NAME = void 0;
@@ -65,7 +65,7 @@ exports.USER_LOGIN_CLIENT_ID = "ory-agent-security-login";
  * installs onto one client, and {@link isUserLoginClient} is the only accepted
  * test for "is this the login client".
  */
-exports.USER_LOGIN_CLIENT_NAME = `${exports.PRODUCT_NAME} · shared user login (all plugins)`;
+exports.USER_LOGIN_CLIENT_NAME = "Agent Security login";
 /**
  * Whether a client is *the* shared user-login client, decided **only** by its
  * id. A client carrying {@link USER_LOGIN_CLIENT_NAME} under any other id is
@@ -111,11 +111,11 @@ function agentClientName(opts) {
     const session = sessionId?.trim() ? ` · ${shortSessionLabel(sessionId)}` : "";
     if (subAgentType) {
         const scope = harness ? `${harness}/${subAgentType}` : subAgentType;
-        return `${exports.PRODUCT_NAME} · sub-agent · ${scope}${session} @ ${host}`;
+        return `Sub-agent · ${scope}${session} @ ${host}`;
     }
     return harness
-        ? `${exports.PRODUCT_NAME} · agent · ${harness}${session} @ ${host}`
-        : `${exports.PRODUCT_NAME} · agent${session} @ ${host}`;
+        ? `Agent · ${harness}${session} @ ${host}`
+        : `Agent${session} @ ${host}`;
 }
 /** How much of a session id goes into a display label. */
 const SESSION_LABEL_LENGTH = 8;
@@ -147,5 +147,5 @@ function shortSessionLabel(sessionId) {
 function projectApiKeyName(opts) {
     const who = opts.user && opts.user !== "agent:unknown" ? opts.user : null;
     const where = who ? `${who} @ ${opts.host}` : opts.host;
-    return `${exports.PRODUCT_NAME}: Permission Checks - ${where}`;
+    return `Permission checks · ${where}`;
 }

package/dist/build-info.json

@@ -1,9 +1,9 @@
 {
   "repo": "ory-agent-plugins",
-  "commit": "fc87fd73772d79007d1072c605ede76de42792ce",
-  "commitShort": "fc87fd7",
+  "commit": "3be96aff052e866da1488acd848667d0c5974975",
+  "commitShort": "3be96af",
   "branch": "main",
-  "commitDate": "2026-08-30T17:10:01-07:00",
+  "commitDate": "2026-09-03T17:55:10-07:00",
   "dirty": false,
-  "builtAt": "2026-08-31T00:13:34.583Z"
+  "builtAt": "2026-09-04T01:07:34.694Z"
 }

package/dist/cli.d.ts

@@ -66,12 +66,10 @@ export declare function promptForProjectUrl(binName: string): Promise<string | n
  */
 export declare function interactiveConfigPrompt(binName: string): Promise<boolean>;
 /**
- * Run the `agent <subcommand>` family of CLI commands. These manage the
- * agent's dynamic OAuth2 client registration (RFC 7591). Subcommands:
+ * Run the `agent <subcommand>` family of CLI commands. Subcommands:
  *
- *   - `status`     — print the persisted DCR identity, if any.
- *   - `unregister` — best-effort RFC 7592 DELETE on the registered
- *                    client, then clear the persisted block.
+ *   - `status`     — inspect the actor-bound runtime credential.
+ *   - `unregister` — clean up legacy OAuth registrations.
  *
  * Each installed harness owns its own agent identity, so both subcommands act
  * on `harness`'s registration by default. `--all` widens them to every

package/dist/cli.js

@@ -50,6 +50,7 @@ const agent_auth_js_1 = require("./agent-auth.js");
 const logger_js_1 = require("./logger.js");
 const cli_invocation_js_1 = require("./cli-invocation.js");
 const client_js_1 = require("./client.js");
+const status_data_js_1 = require("./status-data.js");
 /**
  * Shared `configure` command implementation for all plugin CLIs.
  *
@@ -286,8 +287,12 @@ function printEnvironment() {
         ["ORY_SDK_URL", process.env.ORY_SDK_URL, false],
         ["ORY_AGENT_SECURITY_URL", process.env.ORY_AGENT_SECURITY_URL, false],
         ["ORY_PROJECT_ID", process.env.ORY_PROJECT_ID, false],
-        ["ORY_AGENT_CLIENT_ID", process.env.ORY_AGENT_CLIENT_ID, false],
         ["ORY_OAUTH2_CLIENT_ID", process.env.ORY_OAUTH2_CLIENT_ID, false],
+        [
+            "ORY_AGENT_API_KEY",
+            process.env.ORY_AGENT_API_KEY ? "(set)" : undefined,
+            false,
+        ],
         [
             "ORY_USER_OAUTH2_TOKEN",
             process.env.ORY_USER_OAUTH2_TOKEN ? "(set)" : undefined,
@@ -515,12 +520,10 @@ async function interactiveConfigPrompt(binName) {
     return false;
 }
 /**
- * Run the `agent <subcommand>` family of CLI commands. These manage the
- * agent's dynamic OAuth2 client registration (RFC 7591). Subcommands:
+ * Run the `agent <subcommand>` family of CLI commands. Subcommands:
  *
- *   - `status`     — print the persisted DCR identity, if any.
- *   - `unregister` — best-effort RFC 7592 DELETE on the registered
- *                    client, then clear the persisted block.
+ *   - `status`     — inspect the actor-bound runtime credential.
+ *   - `unregister` — clean up legacy OAuth registrations.
  *
  * Each installed harness owns its own agent identity, so both subcommands act
  * on `harness`'s registration by default. `--all` widens them to every
@@ -534,8 +537,8 @@ async function runAgentCommand(binName, harness, args) {
         console.log(`Usage: ${binName} agent <subcommand> [--all]`);
         console.log("");
         console.log("Subcommands:");
-        console.log("  status      Show the registered agent OAuth2 clients (one per session)");
-        console.log("  unregister  Delete the registered agent clients and clear local state");
+        console.log("  status      Show actor-bound runtime credential availability");
+        console.log("  unregister  Delete legacy OAuth registrations and clear legacy state");
         console.log("");
         console.log("Options:");
         console.log(`  --all       Act on every harness's agent client, not just ${harness}'s`);
@@ -544,7 +547,7 @@ async function runAgentCommand(binName, harness, args) {
     const all = args.includes("--all");
     switch (sub) {
         case "status":
-            runAgentStatus(harness, all);
+            await runAgentStatus(harness, all);
             return 0;
         case "unregister":
             return await runAgentUnregister(harness, all);
@@ -571,32 +574,30 @@ function selectAgentRegistrations(harness, all) {
     return entries.sort((a, b) => b.credentials.registeredAt - a.credentials.registeredAt ||
         a.harness.localeCompare(b.harness));
 }
-function runAgentStatus(harness, all) {
-    const registrations = selectAgentRegistrations(harness, all);
-    console.log("Agent identity (Dynamic Client Registration)");
-    console.log("=============================================");
+async function runAgentStatus(harness, all) {
+    const config = (0, config_js_1.loadConfig)();
+    const harnesses = all
+        ? [...new Set([
+                ...(config.installedHarnesses ?? []),
+                ...Object.keys(config.delegationAnchors ?? {}),
+            ])].sort()
+        : [harness];
+    console.log("Agent identity (actor-bound runtime)");
+    console.log("====================================");
     console.log("");
-    if (registrations.length === 0) {
-        console.log(all
-            ? "  No registered agent clients for any harness. Each install registers"
-            : `  No registered agent client for ${harness}. Each install registers`);
-        console.log("  one on its first session start, using the user's bearer (or");
-        console.log("  ORY_AGENT_REGISTRATION_TOKEN) as the initial access token.");
+    if (harnesses.length === 0) {
+        console.log("  No installed harnesses found.");
         return;
     }
-    for (const { harness: key, sessionKey, credentials: persisted } of registrations) {
+    for (const key of harnesses) {
+        const sessionKey = (0, status_data_js_1.latestRuntimeSession)(key);
+        const identity = await (0, status_data_js_1.inspectRuntimeAgentIdentity)(key, sessionKey);
         console.log(`  harness:          ${key}`);
         console.log(`  session:          ${sessionKey}`);
-        console.log(`  client_id:        ${persisted.clientId}`);
-        console.log(`  client_secret:    ${persisted.clientSecret ? "(set)" : "(not set — public client)"}`);
-        console.log(`  registered_at:    ${new Date(persisted.registeredAt * 1000).toISOString()}`);
-        console.log(`  project_url:      ${persisted.projectUrl}`);
-        if (persisted.registrationClientUri) {
-            console.log(`  management_uri:   ${persisted.registrationClientUri}`);
-        }
-        if (persisted.registrationAccessToken) {
-            console.log(`  registration_token: (set — used to manage/delete this client)`);
-        }
+        console.log("  method:           Talos API key");
+        console.log(`  source:           ${identity.source === "talos_environment" ? "ORY_AGENT_API_KEY" : "OS credential store"}`);
+        console.log(`  status:           ${identity.source === "unavailable" ? "not found (enrollment runs at session start)" : "available"}`);
+        console.log(`  actor_id:         ${identity.subject ?? "resolved by Agent Security at request time"}`);
         console.log("");
     }
 }

package/dist/config.d.ts

@@ -68,7 +68,7 @@ export interface OryAgentDynamicCredentials {
     harness?: string;
     /**
      * The human-readable OAuth2 `client_name` this registration was issued
-     * under (e.g. `"Ory Agent Security · agent · claude-code @ host"`). Kept only
+     * under (e.g. `"Agent · claude-code @ host"`). Kept only
      * on a fresh registration response for immediate display; never persisted.
      * Later callers reconstruct a best-effort name from the outer harness key.
      */

package/dist/opl.js

@@ -415,7 +415,8 @@ function buildAgentSecurityOpl(namespace = exports.DEFAULT_NAMESPACE, shellNames
         renderDelegationNamespaceClass(),
         "",
         "// Registered credential groups used to apply posture by harness or sub-agent type.",
-        renderAgentTypeNamespaceClass(exports.AGENT_TYPE_NAMESPACE, subject_js_1.AGENT_NAMESPACE),
+        "// Delegated Sub-Agents also belong to their parent harness group.",
+        renderAgentTypeNamespaceClass(exports.AGENT_TYPE_NAMESPACE, `${subject_js_1.AGENT_NAMESPACE} | ${subject_js_1.SUBAGENT_NAMESPACE}`),
         "",
         renderAgentTypeNamespaceClass(exports.SUBAGENT_TYPE_NAMESPACE, subject_js_1.SUBAGENT_NAMESPACE),
         "",

package/dist/status-cli.d.ts

@@ -1,21 +1,19 @@
+import type { TalosCredentialStore } from "./runtime-credential.js";
 /**
  * Render the "User identity" block. The interactive PKCE login runs every
  * session; this shows the cached token's subject and expiry, if any.
  */
 export declare function printUserIdentitySection(): void;
 /**
- * Render the "Agent identity" block. Summarizes the resolved machine
- * credential — static env override, persisted DCR, or unconfigured. Each
- * installed harness has its own agent registration, so the report is for
- * `harness`'s identity only.
+ * Render the actor-bound runtime credential used by this harness. The status
+ * command only reads credentials; enrollment remains a session-start action.
  */
-export declare function printAgentIdentitySection(harness: string): void;
+export declare function printAgentIdentitySection(harness: string, credentialStore?: TalosCredentialStore): Promise<void>;
 /**
- * Render the "Sub-agent identities" block — one entry per typed sub-agent
- * (e.g. `Explore`, `general-purpose`) the agent has registered a distinct
- * OAuth2 client for via DCR. All sub-agent identities are dynamic
- * registrations. Scoped to `harness` — sub-agents belong to that harness's
- * agent. A no-op when none exist yet.
+ * Child credentials are keyed by session, type, and stable spawn id in the OS
+ * credential store. That store has no portable enumeration API, so status
+ * reports the active model rather than pretending the retired DCR config is
+ * the current set of sub-agents.
  */
 export declare function printSubAgentIdentitiesSection(harness: string): void;
 /**

package/dist/status-cli.js

@@ -16,9 +16,7 @@ exports.runStatusCommand = runStatusCommand;
  */
 const config_js_1 = require("./config.js");
 const auth_store_js_1 = require("./auth-store.js");
-const agent_auth_js_1 = require("./agent-auth.js");
 const branding_js_1 = require("./branding.js");
-const subject_js_1 = require("./subject.js");
 const logger_js_1 = require("./logger.js");
 const auth_js_1 = require("./auth.js");
 const status_data_js_1 = require("./status-data.js");
@@ -78,86 +76,46 @@ function printUserIdentitySection() {
     }
 }
 /**
- * Render the "Agent identity" block. Summarizes the resolved machine
- * credential — static env override, persisted DCR, or unconfigured. Each
- * installed harness has its own agent registration, so the report is for
- * `harness`'s identity only.
+ * Render the actor-bound runtime credential used by this harness. The status
+ * command only reads credentials; enrollment remains a session-start action.
  */
-function printAgentIdentitySection(harness) {
+async function printAgentIdentitySection(harness, credentialStore) {
     console.log("");
-    console.log("Agent identity (non-interactive):");
-    // The one static override takes precedence — surface it so the reader knows
-    // why DCR isn't running.
-    if (process.env.ORY_AGENT_CLIENT_ID && process.env.ORY_AGENT_CLIENT_SECRET) {
-        console.log("  Source:      static client_credentials (ORY_AGENT_CLIENT_ID/SECRET)");
-        console.log(`  Client ID:   ${process.env.ORY_AGENT_CLIENT_ID}`);
-        const subject = (0, subject_js_1.readAgentSubjectOverride)() ?? process.env.ORY_AGENT_CLIENT_ID;
-        console.log(`  Subject:     ${subject}`);
-        return;
-    }
-    const latest = (0, agent_auth_js_1.latestAgentRegistration)(harness);
-    if (!latest) {
-        console.log("  Source:      not registered yet");
-        console.log("  Status:      first session start will register an OAuth2 client (RFC 7591)");
-        return;
-    }
-    const { sessionKey, credentials: persisted } = latest;
-    const resolved = (0, config_js_1.resolveConfig)();
-    const mismatched = resolved.projectUrl && persisted.projectUrl !== resolved.projectUrl;
-    console.log("  Source:      OAuth2 Dynamic Client Registration (RFC 7591)");
-    console.log(`  Status:      registered`);
-    console.log(`  Name:        ${(0, status_data_js_1.resolveDynamicName)(persisted)}`);
-    console.log(`  Client ID:   ${persisted.clientId}`);
-    const subject = (0, subject_js_1.readAgentSubjectOverride)() ?? persisted.clientId;
-    console.log(`  Subject:     ${subject_js_1.AGENT_NAMESPACE}:${subject}`);
-    console.log(`  Registered:  ${new Date(persisted.registeredAt * 1000).toISOString()}`);
+    console.log("Agent identity (actor-bound runtime):");
+    const identity = await (0, status_data_js_1.inspectRuntimeAgentIdentity)(harness, undefined, credentialStore);
+    const sessionKey = identity.sessionKey ?? config_js_1.SESSIONLESS_KEY;
+    console.log("  Method:      Talos API key");
     console.log(`  Session:     ${sessionKey}`);
-    console.log(`  Retained:    ${(0, agent_auth_js_1.countAgentSessions)(harness)} session(s)`);
     if (sessionKey !== config_js_1.SESSIONLESS_KEY) {
-        console.log(`  Session ID:  ${subject_js_1.AGENT_NAMESPACE}:${subject}|${sessionKey}`);
+        console.log(`  Session ref: ${(0, branding_js_1.shortSessionLabel)(sessionKey)}`);
+    }
+    if (identity.source === "talos_environment") {
+        console.log("  Source:      ORY_AGENT_API_KEY");
+        console.log("  Status:      available");
+    }
+    else if (identity.source === "talos_os_store") {
+        console.log("  Source:      OS credential store");
+        console.log("  Status:      available");
     }
-    if (mismatched) {
-        console.log(`  Warning:     registered against ${persisted.projectUrl}, but current project URL is ${resolved.projectUrl}`);
-        console.log("               run `agent unregister` to clear stale credentials");
+    else {
+        console.log("  Source:      OS credential store");
+        console.log("  Status:      not found (enrollment runs at session start)");
     }
+    console.log(`  Actor ID:    ${identity.subject ?? "resolved by Agent Security at request time"}`);
 }
 /**
- * Render the "Sub-agent identities" block — one entry per typed sub-agent
- * (e.g. `Explore`, `general-purpose`) the agent has registered a distinct
- * OAuth2 client for via DCR. All sub-agent identities are dynamic
- * registrations. Scoped to `harness` — sub-agents belong to that harness's
- * agent. A no-op when none exist yet.
+ * Child credentials are keyed by session, type, and stable spawn id in the OS
+ * credential store. That store has no portable enumeration API, so status
+ * reports the active model rather than pretending the retired DCR config is
+ * the current set of sub-agents.
  */
 function printSubAgentIdentitiesSection(harness) {
-    const sessionKey = (0, agent_auth_js_1.latestAgentRegistration)(harness)?.sessionKey ?? (0, agent_auth_js_1.latestSubAgentSession)(harness);
-    const subAgents = sessionKey
-        ? (0, agent_auth_js_1.loadAllSubAgentDynamicCredentials)(harness, sessionKey)
-        : {};
-    const types = Object.keys(subAgents).sort((a, b) => a.localeCompare(b));
+    const sessionKey = (0, status_data_js_1.latestRuntimeSession)(harness);
     console.log("");
-    console.log(`Sub-agent identities${sessionKey ? ` (session ${(0, branding_js_1.shortSessionLabel)(sessionKey)})` : ""}:`);
-    if (types.length === 0) {
-        console.log("  None registered yet — one is registered the first time the agent");
-        console.log("  spawns a typed sub-agent (e.g. a Task / Explore sub-agent).");
-        return;
-    }
-    const resolved = (0, config_js_1.resolveConfig)();
-    types.forEach((type, i) => {
-        if (i > 0)
-            console.log("");
-        const creds = subAgents[type];
-        const subject = creds.delegation?.delegatedBy
-            ? `subagent:${creds.clientId} (delegated by ${creds.delegation.delegatedBy})`
-            : `subagent:${creds.clientId}`;
-        console.log(`  ${type}:`);
-        console.log(`    Name:       ${(0, status_data_js_1.resolveDynamicName)(creds, type)}`);
-        console.log(`    Client ID:  ${creds.clientId}`);
-        console.log(`    Subject:    ${subject}`);
-        console.log(`    Registered: ${new Date(creds.registeredAt * 1000).toISOString()}`);
-        if (resolved.projectUrl && creds.projectUrl !== resolved.projectUrl) {
-            console.log(`    Warning:    registered against ${creds.projectUrl}, but current project URL is ${resolved.projectUrl}`);
-        }
-    });
+    console.log(`Sub-agent identities (session ${(0, branding_js_1.shortSessionLabel)(sessionKey)}):`);
+    console.log("  Method:      child Talos API key");
+    console.log("  Scope:       one credential per stable sub-agent spawn");
+    console.log("  Source:      OS credential store (resolved when the sub-agent starts)");
 }
 /**
  * Render the "Permissions" block: the deny posture, the namespace, and the
@@ -201,7 +159,7 @@ async function printPermissionsSection(binName, harness) {
     const spinner = process.stdout.isTTY === true;
     if (spinner)
         process.stdout.write("  checking…\r");
-    const probe = await (0, status_data_js_1.probePermissionsCoverage)(harness);
+    const probe = await (0, status_data_js_1.probePermissionsCoverage)(harness, (0, status_data_js_1.latestRuntimeSession)(harness));
     if (spinner)
         process.stdout.write(" ".repeat(40) + "\r");
     if (!probe) {
@@ -271,7 +229,7 @@ async function runStatusCommand(binName, harness, options) {
         console.log("");
         (0, cli_js_1.printOryConfig)();
         printUserIdentitySection();
-        printAgentIdentitySection(harness);
+        await printAgentIdentitySection(harness);
         printSubAgentIdentitiesSection(harness);
         await printPermissionsSection(binName, harness);
         if (options.printPluginSection) {

package/dist/status-data.d.ts

@@ -12,6 +12,7 @@
  */
 import { type PermissionMode, type SecurityConnection } from "./config.js";
 import { type PermissionModeSource } from "./permission-mode.js";
+import type { TalosCredentialStore } from "./runtime-credential.js";
 import { type StatusSystemSection } from "./status-system.js";
 export interface PermissionsCoverage {
     total: number;
@@ -42,7 +43,7 @@ export interface PermissionsCoverage {
  * Checks use the same default-allow `use` permit as the runtime gate. A false
  * result therefore means an explicit block, not missing grant coverage.
  */
-export declare function probePermissionsCoverage(harness: string): Promise<PermissionsCoverage | undefined>;
+export declare function probePermissionsCoverage(harness: string, sessionKey?: string): Promise<PermissionsCoverage | undefined>;
 export interface StatusConfigSection {
     configPath: string;
     /** Whether a config file actually exists at `configPath` (vs. where one would be written). */
@@ -94,52 +95,50 @@ export interface StatusUserSection {
     expiresInSeconds?: number;
     clientId?: string;
 }
-export type AgentIdentitySource = "static_client_credentials" | "dcr" | "unregistered";
+export type AgentIdentitySource = "talos_environment" | "talos_os_store" | "unavailable"
+/** @deprecated Legacy status values retained for API compatibility. */
+ | "static_client_credentials" | "dcr" | "unregistered";
 export interface StatusAgentSection {
     source: AgentIdentitySource;
-    /** Human-readable OAuth2 client_name for a DCR agent, when known. */
+    /** Broker-assigned actor id. Unavailable for an opaque environment credential. */
+    subject?: string;
+    /** Session identity inspected in the OS credential store. */
+    sessionKey?: string;
+    reason?: string;
+    /** @deprecated Runtime identities no longer use OAuth client registrations. */
     name?: string;
+    /** @deprecated Runtime identities no longer use OAuth client registrations. */
     clientId?: string;
-    subject?: string;
+    /** @deprecated Runtime identities no longer use OAuth client registrations. */
     registeredAt?: string;
-    /**
-     * The session whose credential this report describes, if any. Sessionless SDK
-     * callers report the reserved `sessionless` key.
-     */
-    sessionKey?: string;
-    /**
-     * The narrower per-session subject for this run. Absent when there is no
-     * ambient session (an SDK integration with no session concept).
-     */
+    /** @deprecated Runtime identities are already actor-bound. */
     sessionSubject?: string;
+    /** @deprecated Runtime credentials are keyed by project and cannot mismatch it. */
     projectUrlMismatch?: {
         registeredAgainst: string;
         current: string;
     };
 }
-/**
- * A typed sub-agent's persisted DCR identity — one row per sub-agent type
- * (e.g. `Explore`, `general-purpose`) the agent has spawned and registered.
- * All sub-agent identities are dynamic registrations, so this always mirrors
- * an `agent.subAgents[<harness>][<session>][<type>]` entry in the shared config
- * — the report covers the newest session of the harness it is run for, since a
- * sub-agent belongs to one specific run of that harness's agent.
- */
-export interface StatusSubAgentSection {
-    /** Sub-agent type key (the config map key), e.g. `"Explore"`. */
+export interface StatusSubAgentRuntimeSection {
+    source: "talos_os_store";
+    scope: "per_spawn";
+    sessionKey: string;
+    reason: string;
+}
+/** @deprecated DCR-shaped rows are retained in the type for API compatibility only. */
+export interface StatusSubAgentLegacySection {
     subAgentType: string;
-    /** Human-readable OAuth2 client_name for this sub-agent, when known. */
     name?: string;
     clientId: string;
     subject: string;
     registeredAt?: string;
-    /** The delegator recorded at registration (`agent:<sub>`), when known. */
     delegatedBy?: string;
     projectUrlMismatch?: {
         registeredAgainst: string;
         current: string;
     };
 }
+export type StatusSubAgentSection = StatusSubAgentRuntimeSection | StatusSubAgentLegacySection;
 export type PermissionsCoverageStatus = 
 /** Agent Security isn't connected — no project URL and/or OAuth2 client id. */
 "not_connected" | "no_catalog" | "no_user" | "fully_allowed" | "partially_blocked" | "fully_blocked"
@@ -168,24 +167,15 @@ export interface StatusReport {
     config: StatusConfigSection;
     user: StatusUserSection;
     agent: StatusAgentSection;
-    /** Persisted per-type sub-agent DCR identities (may be empty). */
+    /** Runtime child-identity model; credentials themselves remain in the OS store. */
     subAgents: StatusSubAgentSection[];
     permissions: StatusPermissionsSection;
     activity: StatusActivitySection;
     /** Core Ory service health (Kratos, Hydra, Keto) — the dashboard's "System information". */
     system: StatusSystemSection;
 }
-/**
- * Human-readable name for a DCR agent / sub-agent credential: the persisted
- * `client_name` when present, else a best-effort reconstruction from the
- * harness and (for sub-agents) type. Reconstruction uses the current hostname,
- * which may differ from the registration host for credentials saved before the
- * name was persisted — acceptable for a display-only label.
- */
-export declare function resolveDynamicName(creds: {
-    clientName?: string;
-    harness?: string;
-}, subAgentType?: string, harness?: string): string;
+export declare function latestRuntimeSession(harness: string): string;
+export declare function inspectRuntimeAgentIdentity(harness: string, sessionKey?: string, credentialStore?: TalosCredentialStore): Promise<StatusAgentSection>;
 /**
  * Gather the full structured status report for a harness. The permissions
  * section runs a live network probe when a project URL and user identity are

package/dist/status-data.js

@@ -34,7 +34,8 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.probePermissionsCoverage = probePermissionsCoverage;
-exports.resolveDynamicName = resolveDynamicName;
+exports.latestRuntimeSession = latestRuntimeSession;
+exports.inspectRuntimeAgentIdentity = inspectRuntimeAgentIdentity;
 exports.collectStatusReport = collectStatusReport;
 /**
  * Structured status data — the data-gathering half of the `status` command,
@@ -52,12 +53,10 @@ const config_js_1 = require("./config.js");
 const permission_mode_js_1 = require("./permission-mode.js");
 const auth_store_js_1 = require("./auth-store.js");
 const agent_auth_js_1 = require("./agent-auth.js");
-const subject_js_1 = require("./subject.js");
 const client_js_1 = require("./client.js");
-const subject_js_2 = require("./subject.js");
+const subject_js_1 = require("./subject.js");
 const branding_js_1 = require("./branding.js");
 const auth_js_1 = require("./auth.js");
-const node_os_1 = require("node:os");
 const tool_catalog_js_1 = require("./tool-catalog.js");
 const opl_js_1 = require("./opl.js");
 const fs = __importStar(require("node:fs"));
@@ -76,7 +75,7 @@ function resolveNamespace() {
  * Checks use the same default-allow `use` permit as the runtime gate. A false
  * result therefore means an explicit block, not missing grant coverage.
  */
-async function probePermissionsCoverage(harness) {
+async function probePermissionsCoverage(harness, sessionKey = latestRuntimeSession(harness)) {
     const resolved = (0, config_js_1.resolveConfig)();
     if (!resolved.projectUrl)
         return undefined;
@@ -92,14 +91,20 @@ async function probePermissionsCoverage(harness) {
     if (tokens && !(0, auth_store_js_1.isExpired)(tokens)) {
         client.setUserPrincipal({ subject: tokens.subject, token: tokens.accessToken });
     }
-    await (0, agent_auth_js_1.ensureAgentIdentity)(client, { projectUrl: resolved.projectUrl }).catch(() => {
-        /* best-effort; the probe still runs with whatever credentials we have */
+    const runtime = await (0, agent_auth_js_1.resolveRuntimeAgentCredentials)({
+        projectUrl: resolved.projectUrl,
+        harness,
+        sessionId: sessionKey,
     });
-    const subject = (0, subject_js_2.resolveUserSubject)(client);
-    const subjectId = (0, subject_js_2.subjectLabel)(subject);
+    if (runtime.runtimeCredential)
+        client.setRuntimeCredential(runtime.runtimeCredential);
+    if (runtime.subject)
+        client.setAgentPrincipal({ subject: runtime.subject }, sessionKey);
+    const subject = (0, subject_js_1.resolveUserSubject)(client);
+    const subjectId = (0, subject_js_1.subjectLabel)(subject);
     if (subjectId === "agent:unknown")
         return undefined;
-    const agentSubject = (0, subject_js_2.resolveAgentSubject)(client);
+    const agentSubject = (0, subject_js_1.resolveAgentSubject)(client);
     const live = await (0, permission_mode_js_1.resolvePermissionMode)(client, subject, {
         additionalSubjects: agentSubject ? [{ scope: "agent", subject: agentSubject }] : [],
     });
@@ -177,78 +182,41 @@ function collectUser() {
         clientId: tokens.clientId,
     };
 }
-/**
- * Human-readable name for a DCR agent / sub-agent credential: the persisted
- * `client_name` when present, else a best-effort reconstruction from the
- * harness and (for sub-agents) type. Reconstruction uses the current hostname,
- * which may differ from the registration host for credentials saved before the
- * name was persisted — acceptable for a display-only label.
- */
-function resolveDynamicName(creds, subAgentType, harness) {
-    return (creds.clientName ??
-        (0, branding_js_1.agentClientName)({
-            harness: creds.harness ?? harness,
-            host: (0, node_os_1.hostname)() || "unknown-host",
-            subAgentType,
-        }));
+function latestRuntimeSession(harness) {
+    const sessions = Object.keys((0, config_js_1.loadConfig)().delegationAnchors?.[harness] ?? {});
+    return sessions.at(-1) ?? config_js_1.SESSIONLESS_KEY;
 }
-function collectAgent(harness, sessionKey) {
-    if (process.env.ORY_AGENT_CLIENT_ID && process.env.ORY_AGENT_CLIENT_SECRET) {
+async function inspectRuntimeAgentIdentity(harness, sessionKey = latestRuntimeSession(harness), credentialStore) {
+    const credentials = await (0, agent_auth_js_1.resolveRuntimeAgentCredentials)({
+        projectUrl: (0, config_js_1.resolveConfig)().projectUrl,
+        harness,
+        sessionId: sessionKey,
+        credentialStore,
+    });
+    if (credentials.kind === "talos") {
+        const source = process.env.ORY_AGENT_API_KEY?.trim()
+            ? "talos_environment"
+            : "talos_os_store";
         return {
-            source: "static_client_credentials",
-            clientId: process.env.ORY_AGENT_CLIENT_ID,
-            subject: (0, subject_js_2.readAgentSubjectOverride)() ?? process.env.ORY_AGENT_CLIENT_ID,
+            source,
+            sessionKey,
+            subject: credentials.subject,
+            reason: credentials.reason,
         };
     }
-    const selected = sessionKey
-        ? (() => {
-            const credentials = (0, agent_auth_js_1.loadAgentDynamicCredentials)(harness, sessionKey);
-            return credentials ? { sessionKey, credentials } : undefined;
-        })()
-        : (0, agent_auth_js_1.latestAgentRegistration)(harness);
-    if (!selected)
-        return { source: "unregistered" };
-    const { sessionKey: credentialSession, credentials: persisted } = selected;
-    const resolved = (0, config_js_1.resolveConfig)();
-    const mismatch = resolved.projectUrl && persisted.projectUrl !== resolved.projectUrl
-        ? { registeredAgainst: persisted.projectUrl, current: resolved.projectUrl }
-        : undefined;
-    const subject = (0, subject_js_2.readAgentSubjectOverride)() ?? persisted.clientId;
     return {
-        source: "dcr",
-        name: resolveDynamicName(persisted, undefined, harness),
-        sessionKey: credentialSession,
-        ...(credentialSession === config_js_1.SESSIONLESS_KEY
-            ? {}
-            : { sessionSubject: `${subject_js_1.AGENT_NAMESPACE}:${subject}|${credentialSession}` }),
-        clientId: persisted.clientId,
-        subject,
-        registeredAt: new Date(persisted.registeredAt * 1000).toISOString(),
-        projectUrlMismatch: mismatch,
+        source: "unavailable",
+        sessionKey,
+        reason: credentials.reason,
     };
 }
 function collectSubAgents(harness, requestedSession) {
-    const sessionKey = requestedSession
-        ?? (0, agent_auth_js_1.latestAgentRegistration)(harness)?.sessionKey
-        ?? (0, agent_auth_js_1.latestSubAgentSession)(harness);
-    const persisted = sessionKey ? (0, agent_auth_js_1.loadAllSubAgentDynamicCredentials)(harness, sessionKey) : {};
-    const resolved = (0, config_js_1.resolveConfig)();
-    return Object.entries(persisted)
-        .map(([subAgentType, creds]) => {
-        const mismatch = resolved.projectUrl && creds.projectUrl !== resolved.projectUrl
-            ? { registeredAgainst: creds.projectUrl, current: resolved.projectUrl }
-            : undefined;
-        return {
-            subAgentType,
-            name: resolveDynamicName(creds, subAgentType, harness),
-            clientId: creds.clientId,
-            subject: creds.clientId,
-            registeredAt: new Date(creds.registeredAt * 1000).toISOString(),
-            delegatedBy: creds.delegation?.delegatedBy,
-            projectUrlMismatch: mismatch,
-        };
-    })
-        .sort((a, b) => a.subAgentType.localeCompare(b.subAgentType));
+    return [{
+            source: "talos_os_store",
+            scope: "per_spawn",
+            sessionKey: requestedSession ?? latestRuntimeSession(harness),
+            reason: "Child credentials are resolved by stable sub-agent type and spawn id at runtime",
+        }];
 }
 async function collectPermissions(harness) {
     const resolved = (0, config_js_1.resolveConfig)();
@@ -325,7 +293,7 @@ async function collectStatusReport(harness, sessionKey) {
         harness,
         config: collectConfig(harness),
         user: collectUser(),
-        agent: collectAgent(harness, sessionKey),
+        agent: await inspectRuntimeAgentIdentity(harness, sessionKey ?? latestRuntimeSession(harness)),
         subAgents: collectSubAgents(harness, sessionKey),
         permissions: await collectPermissions(harness),
         activity: collectActivity(harness),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ory/argus",
-  "version": "1.1.0",
+  "version": "1.2.1",
   "description": "Ory Argus: the core API for building authentication, authorization, and audit into AI agent harness plugins, extensions, and custom integrations",
   "license": "Apache-2.0",
   "homepage": "https://ory.com",