@ory/cloudflare-agents 1.2.3 → 1.3.0

package/README.md

@@ -12,11 +12,12 @@ npm install @ory/cloudflare-agents
 
 ## Usage on Workers
 
-The Workers runtime has no filesystem, so the shared
-`~/.config/ory-agent-plugins/config.json` that the Node integrations read and write does not
-exist there — and OAuth2 Dynamic Client Registration (which persists issued credentials to
-that file) can't be used either. Construct the `OryAgentClient` explicitly with **static
-agent credentials** from your Worker's bindings and inject it via the `client` option.
+The Workers runtime has no native OS credential store, so it cannot use desktop
+Talos enrollment persistence. Construct `OryAgentClient` explicitly and provide
+`runtimeRequestAuthenticator` from the Worker's bindings or workload identity;
+the authenticator signs each Agent Security request without exposing key material
+to Argus. Inject that client through the `client` option. Do not use legacy OAuth
+client credentials or DCR as the Worker runtime path.
 
 Instantiate the client and the wrapped tool set **once per agent instance** (or at module
 scope), never inside `onChatMessage` — a fresh wrapper per message would re-run the Ory
@@ -39,7 +40,14 @@ export class MyAgent extends AIChatAgent<Env> {
   // One client + wrapped tool set per agent instance — not per message.
   ory = new OryAgentClient({
     projectUrl: this.env.ORY_PROJECT_URL,
+    agentSecurityUrl: this.env.ORY_AGENT_SECURITY_URL,
     harness: "cloudflare-agents",
+    runtimeSubject: this.env.ORY_AGENT_SUBJECT_ID,
+    runtimeRequestAuthenticator: async ({ url, init, authorizationHeader, fetch }) => {
+      const headers = new Headers(init.headers);
+      headers.set(authorizationHeader, `Bearer ${this.env.ORY_AGENT_API_KEY}`);
+      return fetch(url, { ...init, headers });
+    },
   });
   tools = withOry({ getWeather }, { client: this.ory });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ory/cloudflare-agents",
-  "version": "1.2.3",
+  "version": "1.3.0",
   "description": "Ory Agent Security for the Cloudflare Agents SDK — per-tool authorization, activity auditing, and identity propagation by wrapping the AI SDK tools passed to streamText. Built on @ory/argus.",
   "license": "Apache-2.0",
   "publishConfig": {
@@ -35,11 +35,10 @@
   ],
   "dependencies": {
     "reova": "^0.7.0",
-    "@ory/argus": "1.2.3"
+    "@ory/argus": "1.3.0"
   },
   "devDependencies": {
-    "typescript": "^6.0.2",
-    "vitest": "4.1.4"
+    "typescript": "^6.0.2"
   },
   "scripts": {
     "build": "tsc",