@ory/cloudflare-agents 0.14.0 → 1.0.0

package/README.md

@@ -3,8 +3,8 @@
 Ory Agent Security for the [Cloudflare Agents SDK](https://developers.cloudflare.com/agents/).
 
 Cloudflare Agents drive tool calls through the Vercel AI SDK (`streamText({ tools })`), so
-Ory wraps each tool's `execute` — authorizing every call against Ory Permissions, tracing it,
-and propagating user → agent identity — built on [`@ory/argus`](../core).
+Ory wraps each tool's `execute` — authorizing every call against Ory Permissions, recording activity,
+and propagating user → agent identity — built on [`@ory/argus`](https://www.npmjs.com/package/@ory/argus).
 
 ```bash
 npm install @ory/cloudflare-agents
@@ -39,7 +39,6 @@ export class MyAgent extends AIChatAgent<Env> {
   // One client + wrapped tool set per agent instance — not per message.
   ory = new OryAgentClient({
     projectUrl: this.env.ORY_PROJECT_URL,
-    apiKey: this.env.ORY_AGENT_API_KEY, // static agent credential — no DCR on Workers
     harness: "cloudflare-agents",
   });
   tools = withOry({ getWeather }, { client: this.ory });
@@ -71,13 +70,12 @@ withOry(tools, {
 });
 ```
 
-In **enforce** mode (`ORY_PERMISSION_MODE=enforce`) a denied tool throws — the error surfaces
+In **enforce** mode a denied tool throws — the error surfaces
 to the model and the tool never runs. In **observe** mode (default) the tool runs and a
-`permission.observe_deny` span is recorded. Spans are tagged with the `cloudflare-agents`
+`permission.observe_deny` activity event is recorded. Events are tagged with the `cloudflare-agents`
 integration so the audit trail distinguishes Cloudflare from a plain Vercel app.
 
 Depends only on `@ory/argus` (not `ai`/`agents`); tools are duck-typed. The package requires
 the `nodejs_compat` compatibility flag (the Agents SDK already requires it). On Node (tests,
 local dev) the default `OryAgentClient.fromEnv("cloudflare-agents")` and the shared config
-file still work; on Workers always inject an explicitly constructed client. See
-[docs/sdk-integrations.md](../../docs/sdk-integrations.md).
+file still work; on Workers always inject an explicitly constructed client.

package/dist/index.d.ts

@@ -5,7 +5,7 @@
  * `AIChatAgent.onChatMessage` you call `streamText({ tools })` with AI-SDK tools (and
  * `this.mcp.getAITools()` for MCP tools). The interception point is therefore the same:
  * wrap each tool's `execute`. {@link withOry} authorizes every call against Ory Permissions,
- * traces it, and (on the first call) runs the Ory session gates — under the
+ * records its activity, and (on the first call) runs the Ory session gates — under the
  * `cloudflare-agents` harness identity so the audit trail attributes Cloudflare distinctly
  * from a plain Vercel app.
  *

package/dist/index.js

@@ -6,7 +6,7 @@
  * `AIChatAgent.onChatMessage` you call `streamText({ tools })` with AI-SDK tools (and
  * `this.mcp.getAITools()` for MCP tools). The interception point is therefore the same:
  * wrap each tool's `execute`. {@link withOry} authorizes every call against Ory Permissions,
- * traces it, and (on the first call) runs the Ory session gates — under the
+ * records its activity, and (on the first call) runs the Ory session gates — under the
  * `cloudflare-agents` harness identity so the audit trail attributes Cloudflare distinctly
  * from a plain Vercel app.
  *
@@ -32,23 +32,10 @@ const HARNESS = "cloudflare-agents";
 function withOry(tools, options = {}) {
     const client = options.client ?? argus_1.OryAgentClient.fromEnv(HARNESS);
     const canBlock = options.canBlock ?? true;
-    let sessionPromise;
-    // Cache the in-flight promise (not a boolean) so concurrent first calls all
-    // await the same session start instead of racing past a still-running gate.
-    // Fail-open: a rejection is logged, never rethrown, and clears the cache so
-    // a later call can retry.
-    const ensureSession = () => {
-        sessionPromise ??= (0, argus_1.sessionStart)(client, {
-            harness: HARNESS,
-            projectUrl: options.projectUrl,
-        }).then(() => undefined, (err) => {
-            sessionPromise = undefined;
-            client.logger.warn("session_start.failed", {
-                message: err instanceof Error ? err.message : String(err),
-            });
-        });
-        return sessionPromise;
-    };
+    const ensureSession = (0, argus_1.createSessionStarter)(client, {
+        harness: HARNESS,
+        projectUrl: options.projectUrl,
+    });
     const wrapped = {};
     for (const [name, tool] of Object.entries(tools)) {
         if (!tool || typeof tool.execute !== "function") {
@@ -75,9 +62,15 @@ function withOry(tools, options = {}) {
                         namespace: result.namespace,
                     });
                 }
-                const output = await originalExecute(input, callOptions);
-                (0, argus_1.complete)(client, { toolName: name, output });
-                return output;
+                try {
+                    const output = await originalExecute(input, callOptions);
+                    (0, argus_1.complete)(client, { toolName: name, input, output });
+                    return output;
+                }
+                catch (error) {
+                    (0, argus_1.fail)(client, { toolName: name, input, error });
+                    throw error;
+                }
             },
         };
     }

package/package.json

@@ -1,13 +1,17 @@
 {
   "name": "@ory/cloudflare-agents",
-  "version": "0.14.0",
-  "description": "Ory Agent Security for the Cloudflare Agents SDK — per-tool authorization, tracing, and identity propagation by wrapping the AI SDK tools passed to streamText. Built on @ory/argus.",
+  "version": "1.0.0",
+  "description": "Ory Agent Security for the Cloudflare Agents SDK — per-tool authorization, activity auditing, and identity propagation by wrapping the AI SDK tools passed to streamText. Built on @ory/argus.",
   "license": "Apache-2.0",
   "publishConfig": {
     "access": "public",
     "registry": "https://registry.npmjs.org/",
     "provenance": true
   },
+  "reova": {
+    "enabled": true,
+    "endpoint": "https://telemetry.reo.dev/data"
+  },
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "exports": {
@@ -30,8 +34,8 @@
     "ai"
   ],
   "dependencies": {
-    "reo-census": "^1.2.8",
-    "@ory/argus": "0.14.0"
+    "reova": "^0.7.0",
+    "@ory/argus": "1.0.0"
   },
   "devDependencies": {
     "typescript": "^6.0.2",