@ory/argus 1.4.8 → 1.5.0

package/dist/build-info.json

@@ -1,9 +1,9 @@
 {
   "repo": "ory-agent-plugins",
-  "commit": "f14820b9faf5afff350e254d7c0418af685fe9cf",
-  "commitShort": "f14820b",
+  "commit": "a2af20a51c7a79e43ee4074f1c92b0d3f4b0e896",
+  "commitShort": "a2af20a5",
   "branch": "main",
-  "commitDate": "2026-10-03T18:01:27-07:00",
+  "commitDate": "2026-10-07T16:14:12-07:00",
   "dirty": false,
-  "builtAt": "2026-10-04T01:05:58.883Z"
+  "builtAt": "2026-10-07T23:17:51.479Z"
 }

package/dist/cli-invocation.js

@@ -37,6 +37,7 @@ const BIN_TO_PACKAGE = {
     "ory-pi": "@ory/pi",
     "ory-agy": "@ory/antigravity",
     "ory-cursor": "@ory/cursor",
+    "ory-copilot": "@ory/github-copilot",
 };
 /**
  * Render a copy-pasteable `npx` invocation prefix for a harness bin.

package/dist/hook-timeout.d.ts

@@ -24,6 +24,7 @@
  * | cursor       | seconds      | documented per-hook timeout                                        |
  * | gemini-cli   | milliseconds | `DEFAULT_HOOK_TIMEOUT = 6e4`; `Hook timed out after ${timeout}ms`  |
  * | antigravity  | seconds      | `timeout_seconds`; validated `"must be between 5 and 120 seconds"` |
+ * | github-copilot | seconds    | `timeoutSec`; Copilot command hooks are fail-open on timeout       |
  *
  * Antigravity additionally **validates** its range, so it caps what any harness
  * can be given — which is why the login window has to fit inside 120s.

package/dist/hook-timeout.js

@@ -25,6 +25,7 @@
  * | cursor       | seconds      | documented per-hook timeout                                        |
  * | gemini-cli   | milliseconds | `DEFAULT_HOOK_TIMEOUT = 6e4`; `Hook timed out after ${timeout}ms`  |
  * | antigravity  | seconds      | `timeout_seconds`; validated `"must be between 5 and 120 seconds"` |
+ * | github-copilot | seconds    | `timeoutSec`; Copilot command hooks are fail-open on timeout       |
  *
  * Antigravity additionally **validates** its range, so it caps what any harness
  * can be given — which is why the login window has to fit inside 120s.

package/dist/lifecycle.js

@@ -158,6 +158,20 @@ exports.HARNESS_LIFECYCLE_MAP = {
         PostToolUse: "tool.after",
         Notification: "user.interaction",
     },
+    // GitHub Copilot CLI and cloud agent use the native camelCase hook contract.
+    // preToolUse remains the enforcement boundary in both surfaces; cloud agent
+    // pre-approves permissionRequest and therefore cannot enforce there.
+    "github-copilot": {
+        sessionStart: "session.start",
+        sessionEnd: "session.stop",
+        userPromptSubmitted: "user.prompt",
+        preToolUse: "tool.before",
+        postToolUse: "tool.after",
+        postToolUseFailure: "tool.failure",
+        errorOccurred: "tool.failure",
+        subagentStart: "subagent.start",
+        subagentStop: "subagent.stop",
+    },
     // Cursor (editor + CLI). Subprocess hooks read from `.cursor/hooks.json`.
     // `preToolUse` is the single permission gate — it already fires for every
     // documented tool category (Shell, Read, Write, Grep, Delete, Task) and

package/dist/tool-catalog.d.ts

@@ -27,6 +27,7 @@ export declare const HARNESS_TOOL_CATALOG: {
     readonly pi: readonly ["read", "write", "edit", "bash", "grep", "find", "ls"];
     readonly antigravity: readonly ["run_command", "view_file", "write_to_file", "replace_file_content", "multi_replace_file_content", "list_directory", "grep_search", "find", "read_url_content", "search_web", "call_mcp_tool"];
     readonly cursor: readonly ["Read", "Write", "Grep", "Delete", "Shell", "Task"];
+    readonly "github-copilot": readonly ["ask_user", "bash", "powershell", "view", "create", "edit", "str_replace_editor", "apply_patch", "grep", "rg", "glob", "web_fetch", "web_search", "task", "update_todo"];
 };
 /** Names of the harnesses with a known tool catalog. */
 export type KnownHarness = keyof typeof HARNESS_TOOL_CATALOG;

package/dist/tool-catalog.js

@@ -321,6 +321,23 @@ exports.HARNESS_TOOL_CATALOG = {
     // Cursor's documented `preToolUse` matcher categories. MCP calls arrive as
     // dynamic `MCP:<tool_name>` values and are intentionally omitted here.
     cursor: ["Read", "Write", "Grep", "Delete", "Shell", "Task"],
+    "github-copilot": [
+        "ask_user",
+        "bash",
+        "powershell",
+        "view",
+        "create",
+        "edit",
+        "str_replace_editor",
+        "apply_patch",
+        "grep",
+        "rg",
+        "glob",
+        "web_fetch",
+        "web_search",
+        "task",
+        "update_todo",
+    ],
 };
 exports.KNOWN_HARNESSES = Object.keys(exports.HARNESS_TOOL_CATALOG);
 /**
@@ -369,6 +386,7 @@ exports.INTERACTIVE_TOOL_CATALOG = {
     pi: [],
     antigravity: ["ask_question"],
     cursor: [],
+    "github-copilot": ["ask_user"],
 };
 function parseEnvInteractiveTools() {
     const raw = process.env.ORY_INTERACTIVE_TOOLS;
@@ -424,6 +442,7 @@ exports.SHELL_TOOL_CATALOG = {
     pi: ["bash"],
     antigravity: ["run_command"],
     cursor: ["Shell"],
+    "github-copilot": ["bash", "powershell"],
 };
 function parseEnvList(raw) {
     if (!raw)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ory/argus",
-  "version": "1.4.8",
+  "version": "1.5.0",
   "description": "Ory Argus: the core API for building authentication, authorization, and audit into AI agent harness plugins, extensions, and custom integrations",
   "license": "Apache-2.0",
   "homepage": "https://ory.com",