@ory/claude-code 0.10.0 → 0.11.1

package/README.md

@@ -199,7 +199,7 @@ Headless / CI runs that already hold a session token can skip this entirely by s
 Once the plugin is pointed at an Ory project (local or hosted), Claude's session and every tool call can be governed by Ory.
 
 - **Authentication.** Two identities. The human at the keyboard (the **user**) authenticates interactively via Ory Identities when user login is enabled (`ORY_USER_LOGIN=true`, off by default — browser PKCE flow on first session, persisted token thereafter). The Claude process (the **agent**) gets its own OAuth2 identity, self-registered via [Dynamic Client Registration (RFC 7591)](https://datatracker.ietf.org/doc/html/rfc7591) on first run. Sub-agents launched by the `Task` tool each receive their own typed identity.
-- **Authorization.** Before any tool runs, the plugin checks [Ory Permissions](https://www.ory.sh/docs/keto) (Zanzibar-style relations) against the user's subject and blocks the call on `deny`. MCP tool calls additionally get a server-level check.
+- **Authorization.** Before any tool runs, the plugin checks [Ory Permissions](https://www.ory.com/docs/keto) (Zanzibar-style relations) against the user's subject and blocks the call on `deny`. MCP tool calls additionally get a server-level check.
 - **Audit.** Every decision (allow, deny, fallback) is recorded as a structured trace span: NDJSON file output and/or OTLP/HTTP export to Jaeger, Honeycomb, Grafana, and similar collectors. The user → agent (and agent → subagent) delegation chain is written to Ory as relations so *"agent X acting on behalf of user Y"* stays queryable after tokens expire.
 
 The plugin is **fail-open** on its own infrastructure failures (network errors, rate limits, missing config), so enforcement is only as strong as your permission grants — grant explicit `use` on the tools each user should be able to run.

package/dist/handlers.js

@@ -167,18 +167,19 @@ async function handlePreToolUse(input, client, deps = {}) {
         toolInput: input.tool_input,
     });
     const inputSummary = (0, argus_1.summarizeToolInput)(toolName, input.tool_input);
-    // If the agent is invoking a sub-agent (Claude Code's "Task"/"Agent"
-    // tool with a `subagent_type`), resolve a distinct OAuth2 identity for
-    // that sub-agent via DCR and record the agent→sub-agent delegation
-    // tuple. Best-effort — failures here never block the actual tool call.
-    await maybeRegisterSubAgent(toolName, input.tool_input, client, deps);
-    // In audit-only mode, log the invocation but skip permission checks
+    // In audit-only mode, log the invocation but skip permission checks —
+    // and skip sub-agent DCR/delegation writes too (Ory is disabled entirely).
     if ((0, argus_1.resolveConfig)().auditOnly) {
         client.tracer.record("tool.invoke", "ok", {
             attributes: { toolName, ...inputSummary },
         });
         return {};
     }
+    // If the agent is invoking a sub-agent (Claude Code's "Task"/"Agent"
+    // tool with a `subagent_type`), resolve a distinct OAuth2 identity for
+    // that sub-agent via DCR and record the agent→sub-agent delegation
+    // tuple. Best-effort — failures here never block the actual tool call.
+    await maybeRegisterSubAgent(toolName, input.tool_input, client, deps);
     const subject = (0, argus_1.resolveUserSubject)(client, `session:${input.session_id}`);
     const subjectId = (0, argus_1.subjectLabel)(subject);
     const mcpTool = (0, argus_1.parseClaudeCodeMcpTool)(toolName);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ory/claude-code",
-  "version": "0.10.0",
+  "version": "0.11.1",
   "description": "Ory plugin for Claude Code: scaffolding skills, a local Ory instance, and authentication, authorization, and audit for every tool call",
   "license": "Apache-2.0",
   "homepage": "https://github.com/ory/claude-plugins/tree/master/plugins/ory-agent-plugin",
@@ -75,7 +75,7 @@
     "!dist/**/*.tsbuildinfo"
   ],
   "dependencies": {
-    "@ory/argus": "0.10.0"
+    "@ory/argus": "0.11.1"
   },
   "engines": {
     "node": ">=22"