@ory/claude-code 1.2.4 → 1.3.1

package/README.md

@@ -46,6 +46,8 @@ Installing the plugin drops the full Ory playbook catalog into Claude Code. **Sk
 | `ory-local-dev` | Develops and tests login/permission flows against a local Ory — no project, no account, offline |
 | `ory-permissions-onboarding` | Walks a fresh install from observe mode to enforced per-tool permissions without getting blocked |
 | `ory-build-agent` | Drops `@ory/argus` into an agent *you* own — Claude Agent SDK, OpenAI Agents, Mastra, Vercel AI, LangGraph/PydanticAI |
+| `ory-deploy-agent` | Builds and deploys the canonical Claude Agent SDK agent through Agent Security with a generated runtime credential and Docker Compose |
+| `ory-deploy-openai-e2b` | Builds and deploys a Python OpenAI Agents application on E2B with an immutable template and generated Talos runtime credential |
 | `ory-build-integration` | Wires Ory into your app: Action webhooks, JWT validation at a gateway, live event streams |
 | `ory-contribute-integration` | Authors and submits an integration to the public `ory/integrates` registry |
 | `ory-e2b-sandbox` | Scaffolds an E2B sandbox template that boots with this plugin preinstalled |
@@ -119,7 +121,7 @@ npx -y -p @ory/claude-code ory-claude configure \
 
 **Ory Network or OEL.** Either works. For an Ory Network project the URL is `https://<slug>.projects.oryapis.com`; for a self-hosted **Ory Enterprise License** deployment, point `--project-url` at that deployment's base URL and use the sign-in client id from its Agent Security configuration. Everything downstream — sign-in, checks, delegation — is identical.
 
-**There is nothing else for you to create.** The sign-in client, permission model, native-tool blocks, MCP grants, and observe/enforce posture are provisioned in the Console by someone with project access. At runtime the plugin only *reads* permissions, so installing it needs no workspace privilege. Each Claude session registers its own identity automatically on first use.
+**There is nothing else for you to create.** The sign-in client, permission model, native-tool blocks, MCP grants, and observe/enforce posture are provisioned in the Console by someone with project access. At session start the plugin loads or enrolls Claude's Talos runtime credential in the OS credential store; tool paths only read it. Installing needs no workspace privilege.
 
 Sign-in runs at the start of every session and never blocks — a declined, skipped, or timed-out login simply leaves that session without a user identity.
 
@@ -132,7 +134,7 @@ ory-claude install | uninstall        Install (add --project-url to also connect
 ory-claude status                     Show configuration, identities, native tool access, recent activity
 ory-claude permissions <cmd>          status  (read-only; blocks + posture live in the Ory Console)
 ory-claude configure <flags>          Connect a project (--project-url) or --disconnect
-ory-claude agent <status|unregister>  Manage Claude's own auto-created identity
+ory-claude agent <status|unregister>  Inspect runtime status / clear legacy OAuth state
 ory-claude local <up|down|status|…>   Run / manage a local Ory in Docker
 ory-claude version                    Print plugin, core, and Node versions (--json for machine-readable)
 ```
@@ -142,7 +144,7 @@ All prefixed with `npx -y -p @ory/claude-code`.
 ## Troubleshooting
 
 - **`local-up` fails** — make sure Docker is running and ports `4000`, `4100`, and `4455` are free.
-- **Browser sign-in loops** (after connecting) — reset with `ory-claude agent unregister` and try again.
+- **Browser sign-in loops** (after connecting) — confirm the reserved login client has all four documented loopback redirect URIs; `agent unregister` only clears legacy agent OAuth state.
 - **Running an older CLI than expected** — `npx -p @ory/claude-code` (no version pin) reuses a previously-downloaded copy instead of re-resolving to the latest. The install banner prints the running version; confirm it with `npx -y -p @ory/claude-code ory-claude version`. To force the current release, clear the cache and reinstall: `rm -rf ~/.npm/_npx` then `npx -y -p @ory/claude-code ory-claude install`. Pinning an exact version (`@ory/claude-code@<version>`) also bypasses the cached copy.
 - **Hooks stuck on an old version** — run `/plugin marketplace update ory` inside Claude Code, or re-run the installer.
 

package/dist/cli/claude-command.d.ts

@@ -0,0 +1,5 @@
+/** Keep native arguments out of the shell; npm's Windows shims need cmd.exe. */
+export declare function runClaude(args: string[], platform?: NodeJS.Platform): {
+    ok: boolean;
+    output: string;
+};

package/dist/cli/claude-command.js

@@ -0,0 +1,62 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runClaude = runClaude;
+const node_child_process_1 = require("node:child_process");
+const CAPTURE = {
+    encoding: "utf-8",
+    stdio: ["pipe", "pipe", "pipe"],
+};
+// cmd.exe parses a batch invocation twice: once to start the shim and again
+// when an npm shim forwards %* to node.exe. Protect both parsing passes.
+function escapeBatchArgument(argument) {
+    const quoted = `"${argument
+        .replace(/(\\*)"/g, '$1$1\\"')
+        .replace(/(\\*)$/, "$1$1")}"`;
+    const escape = (value) => value.replace(/([()\][%!^"`<>&|;, *?])/g, "^$1");
+    return escape(escape(quoted));
+}
+/** Keep native arguments out of the shell; npm's Windows shims need cmd.exe. */
+function runClaude(args, platform = process.platform) {
+    let result;
+    if (platform !== "win32") {
+        result = (0, node_child_process_1.spawnSync)("claude", args, { ...CAPTURE, shell: false });
+    }
+    else {
+        // Resolve using Windows PATH/PATHEXT rules. `where` can also return npm's
+        // extensionless POSIX shim, which is not a Windows executable.
+        const lookup = (0, node_child_process_1.spawnSync)("where.exe", ["claude"], {
+            ...CAPTURE,
+            shell: false,
+        });
+        const executable = lookup.status === 0
+            ? lookup.stdout
+                .split(/\r?\n/)
+                .find((file) => /\.(exe|com|cmd|bat)$/i.test(file))
+            : undefined;
+        if (!executable) {
+            return {
+                ok: false,
+                output: lookup.error?.message || lookup.stderr.trim() || "claude was not found on PATH.",
+            };
+        }
+        if (/\.(exe|com)$/i.test(executable)) {
+            result = (0, node_child_process_1.spawnSync)(executable, args, { ...CAPTURE, shell: false });
+        }
+        else {
+            const command = executable.replace(/([()\][%!^"`<>&|;, *?])/g, "^$1");
+            const commandLine = [command, ...args.map(escapeBatchArgument)].join(" ");
+            result = (0, node_child_process_1.spawnSync)(process.env.ComSpec || "cmd.exe", [
+                "/d", "/s", "/v:off", "/c", `"${commandLine}"`,
+            ], {
+                ...CAPTURE,
+                shell: false,
+                windowsVerbatimArguments: true,
+            });
+        }
+    }
+    const output = ((result.stdout ?? "") + (result.stderr ?? "")).trim();
+    return {
+        ok: !result.error && result.status === 0,
+        output: output || result.error?.message || "",
+    };
+}

package/dist/cli/main.js

@@ -173,7 +173,7 @@ Commands:
   install [--global]   Install Ory plugin via claude CLI marketplace
   uninstall [--global] Remove Ory plugin and marketplace
   configure            Set or view Ory project URL and API key
-  agent <cmd>          Manage the agent's OAuth2 (DCR) identity (status, unregister)
+  agent <cmd>          Inspect runtime status or clear legacy OAuth state
   permissions          Show live mode and native allowed/blocked state
   status               Show plugin status and configuration
   watch [--json] [--lines <count>]

package/dist/cli/setup.js

@@ -57,9 +57,9 @@ exports.isPluginAssembled = isPluginAssembled;
 exports.install = install;
 exports.printInstallPlan = printInstallPlan;
 exports.uninstall = uninstall;
-const node_child_process_1 = require("node:child_process");
 const fs = __importStar(require("node:fs"));
 const path = __importStar(require("node:path"));
+const claude_command_js_1 = require("./claude-command.js");
 const argus_1 = require("@ory/argus");
 const PACKAGE_ROOT = path.resolve(__dirname, "..", "..");
 const PACKAGE_NAME = "@ory/claude-code";
@@ -98,7 +98,7 @@ const RENDER_OPTS = {
 /**
  * Persistent install location: the marketplace root the `claude` CLI is
  * pointed at. Lives under the shared OS-agnostic data dir so all plugin state
- * — config, DCR creds, harness assets — sits in one place per platform.
+ * — config, legacy DCR cleanup state, harness assets — sits in one place per platform.
  *
  * Resolved on each call rather than captured at module load: `getHarnessDataDir`
  * reads `XDG_CONFIG_HOME`, so a module-level constant would freeze whatever the
@@ -227,29 +227,9 @@ function cleanPersistentDir() {
 function claudeScope(isGlobal) {
     return isGlobal ? "user" : "project";
 }
-/**
- * On Windows, npm-installed CLIs are `.cmd` shims that Node's spawn only
- * finds via the shell. POSIX shells resolve the bare name directly.
- */
-const SPAWN_VIA_SHELL = process.platform === "win32";
-/** Run a `claude` CLI command and capture output. */
-function runClaude(args) {
-    const result = (0, node_child_process_1.spawnSync)("claude", args, {
-        encoding: "utf-8",
-        stdio: ["pipe", "pipe", "pipe"],
-        shell: SPAWN_VIA_SHELL,
-    });
-    const output = ((result.stdout ?? "") + (result.stderr ?? "")).trim();
-    return { ok: result.status === 0, output };
-}
 /** Check that the `claude` CLI is available. */
 function checkClaudeCli() {
-    const result = (0, node_child_process_1.spawnSync)("claude", ["--version"], {
-        encoding: "utf-8",
-        stdio: ["pipe", "pipe", "pipe"],
-        shell: SPAWN_VIA_SHELL,
-    });
-    return result.status === 0;
+    return (0, claude_command_js_1.runClaude)(["--version"]).ok;
 }
 /**
  * Install the Ory plugin via the `claude` CLI.
@@ -315,10 +295,10 @@ function installAssembled(scope, args) {
     // its marketplace first guarantees the current command set is picked up on
     // every dev iteration. Best-effort and quiet: a not-yet-installed plugin
     // just no-ops here.
-    runClaude(["plugin", "uninstall", pluginName, "--scope", scope]);
-    runClaude(["plugin", "marketplace", "remove", marketplaceName]);
+    (0, claude_command_js_1.runClaude)(["plugin", "uninstall", pluginName, "--scope", scope]);
+    (0, claude_command_js_1.runClaude)(["plugin", "marketplace", "remove", marketplaceName]);
     console.log("Adding local Ory plugin marketplace...");
-    const addResult = runClaude([
+    const addResult = (0, claude_command_js_1.runClaude)([
         "plugin",
         "marketplace",
         "add",
@@ -329,7 +309,7 @@ function installAssembled(scope, args) {
     if (!addResult.ok) {
         if (addResult.output.toLowerCase().includes("already")) {
             console.log("  Marketplace already registered, updating...");
-            runClaude(["plugin", "marketplace", "update", marketplaceName]);
+            (0, claude_command_js_1.runClaude)(["plugin", "marketplace", "update", marketplaceName]);
         }
         else {
             console.error(`Failed to add marketplace: ${addResult.output}`);
@@ -340,7 +320,7 @@ function installAssembled(scope, args) {
         console.log("  Marketplace added.");
     }
     console.log(`Installing ${pluginName} plugin...`);
-    const installResult = runClaude([
+    const installResult = (0, claude_command_js_1.runClaude)([
         "plugin",
         "install",
         `${pluginName}@${marketplaceName}`,
@@ -378,7 +358,7 @@ function uninstall(args) {
     const pluginName = readLocalPluginName();
     const marketplaceName = readLocalMarketplaceName();
     console.log(`Uninstalling ${pluginName} plugin...`);
-    const uninstallResult = runClaude([
+    const uninstallResult = (0, claude_command_js_1.runClaude)([
         "plugin",
         "uninstall",
         pluginName,
@@ -392,7 +372,7 @@ function uninstall(args) {
         console.log("  Plugin uninstalled.");
     }
     console.log("Removing Ory plugin marketplace...");
-    const removeResult = runClaude([
+    const removeResult = (0, claude_command_js_1.runClaude)([
         "plugin",
         "marketplace",
         "remove",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ory/claude-code",
-  "version": "1.2.4",
+  "version": "1.3.1",
   "description": "Ory plugin for Claude Code: scaffolding skills, a local Ory instance, and authentication, authorization, and audit for every tool call",
   "license": "Apache-2.0",
   "homepage": "https://github.com/ory/claude-plugins/tree/master/plugins/ory-agent-plugin",
@@ -78,7 +78,7 @@
   ],
   "dependencies": {
     "reova": "^0.7.0",
-    "@ory/argus": "1.2.4"
+    "@ory/argus": "1.3.1"
   },
   "engines": {
     "node": ">=22"