@ory/codex 0.13.9 → 0.14.0

package/README.md

@@ -21,12 +21,14 @@ Run one command. It installs the plugin and walks you through connecting:
 npx -y -p @ory/codex ory-codex install
 ```
 
-This registers the Ory plugin with Codex (hooks, skills, and a bundled Ory tool server) and then asks how you want to connect — **press Enter for the default**:
+This registers the Ory plugin with Codex (hooks, skills, and a bundled Ory tool server) and then opens a guided setup **in your browser** where you pick how to connect — the default takes just a click:
 
 - **Ory Network** *(default)* — sign in, or create a free account, in your browser. The project, keys, permissions, and login are all set up for you. Nothing to configure by hand.
 - **Local** — run a complete Ory on your laptop with Docker. No account, no signup, no keys. Great for trying it out.
 - **Audit-only** — skip Ory entirely and just log what Codex does.
 
+> No browser available (CI, SSH, headless)? The same walkthrough runs right in your terminal instead — or force it with `--no-web`.
+
 That's it. Confirm everything landed with:
 
 ```bash
@@ -54,6 +56,7 @@ If Ory is ever unreachable, the plugin gets out of the way and lets Codex keep w
 Everything the plugin does is observable out of the box — no configuration required:
 
 - **Status at a glance.** `npx -y -p @ory/codex ory-codex status` shows what's configured, who's signed in, how many built-in tools your permissions cover, and the most recent tool-call activity.
+- **Live dashboard.** `npx -y -p @ory/codex ory-codex dashboard` opens the same picture in your browser — configuration, identities, permission coverage, Ory service health, and the latest tool-call activity, all refreshing live. From there you can flip **enforcement** on or off, toggle **user login**, and use **Change stack** to reconnect to a different Ory — no CLI required.
 - **Live traces.** Every tool call is recorded as an OpenTelemetry-style span. Watch them stream as the agent works:
 
   ```bash
@@ -71,7 +74,7 @@ When the watch-mode logs look right, turn on blocking with one command (setup al
 npx -y -p @ory/codex ory-codex permissions enforce
 ```
 
-Now a denied tool is actually blocked and Codex shows why. Go back to watch mode anytime with `permissions observe`. Use `permissions status` to see what's covered and `permissions bootstrap` to (re-)grant the built-in tools — or just ask Codex in chat, e.g. *"grant me use of the shell tool."*
+Now a denied tool is actually blocked and Codex shows why. Go back to watch mode anytime with `permissions observe`. Prefer clicking? The dashboard has the same **Enforce** switch — flip it on, or back to watch mode, without touching the CLI. Use `permissions status` to see what's covered and `permissions bootstrap` to (re-)grant the built-in tools — or just ask Codex in chat, e.g. *"grant me use of the shell tool."*
 
 ## Also: add login to your own app
 
@@ -86,8 +89,7 @@ The guided setup covers most people. For scripted or CI setups, or to point at a
 ```bash
 npx -y -p @ory/codex ory-codex configure \
   --project-url https://<slug>.projects.oryapis.com \
-  --oauth2-client-id <sign-in client id> \
-  --user-login
+  --oauth2-client-id <sign-in client id>
 ```
 
 Codex's own identity registers itself automatically on first run — nothing to create. The `--oauth2-client-id` is the one piece browser sign-in needs; the guided setup makes it for you, or see below to do it by hand. For logging-only with no checks, use `--audit-only`.
@@ -99,7 +101,7 @@ The guided setup normally does this. To do it yourself, create a **public** OAut
 
 ```bash
 ory create oauth2-client --project <project-id> \
-  --name "ory-agent-plugin" \
+  --name "Ory Agent Security · user login (PKCE)" \
   --grant-type authorization_code,refresh_token \
   --response-type code \
   --scope openid,offline_access \
@@ -119,11 +121,12 @@ With nothing configured, the plugin still loads and runs in **pass-through mode*
 ## Commands
 
 ```
-ory-codex install | uninstall        Install/remove; --reconfigure re-runs setup, --no-configure skips it
+ory-codex install | uninstall        Install/remove; --reconfigure re-runs setup, --no-web forces the terminal wizard, --no-configure skips it
 ory-codex status                     Show configuration, identities, permission coverage, recent activity
+ory-codex dashboard                  Open the live browser dashboard (status + service health + Change stack)
 ory-codex watch                      Tail the live trace stream (OTel spans)
 ory-codex permissions <cmd>          status | bootstrap | observe (watch) | enforce (block)
-ory-codex configure <flags>          Point at a project by hand (--project-url, --oauth2-client-id, --user-login, --audit-only)
+ory-codex configure <flags>          Point at a project by hand (--project-url, --oauth2-client-id, --audit-only)
 ory-codex agent <status|unregister>  Manage Codex's own auto-created identity
 ory-codex local <up|down|status|…>   Run / manage a local Ory in Docker
 ```

package/dist/cli/main.js

@@ -99,6 +99,12 @@ function main() {
         case "watch":
             (0, argus_1.runWatchCommand)("codex", args);
             break;
+        case "dashboard":
+            (0, argus_1.runDashboardCommand)("ory-codex", "codex", args).then((code) => process.exit(code), (err) => {
+                console.error(err.message ?? err);
+                process.exit(1);
+            });
+            break;
         case "version":
         case "--version":
         case "-v":
@@ -143,6 +149,7 @@ Commands:
   local <cmd>              Manage local Ory dev environment
                              (up, down, status, seed, logs, env, configure, reset)
   status                   Show plugin status, config, and recent log lines
+  dashboard            Open the Ory Agent dashboard (system health + configuration)
   watch [trace-file]       Tail the trace stream (OTel spans) live
   version                  Show version and the ory-agent-plugins build commit
 

package/dist/cli/setup.js

@@ -183,7 +183,7 @@ function renderCommands() {
 function hookGroup(timeoutSec) {
     return [
         {
-            hooks: [{ type: "command", command: HOOK_COMMAND, timeout: timeoutSec }],
+            hooks: [{ type: "command", command: (0, argus_1.pinHookToLocalRegistry)(HOOK_COMMAND), timeout: timeoutSec }],
         },
     ];
 }
@@ -331,10 +331,10 @@ function printNextStepsNow() {
     console.log("");
     console.log("  2. Or spin up the local Ory stack from inside Codex (`/skills` -> `ory-local-up`).");
     console.log("");
-    console.log("  3. Turn on the interactive user login (opt-in):");
-    console.log("       export ORY_USER_LOGIN=true");
-    console.log("     Without this, Codex runs without a human Ory identity attached to the");
-    console.log("     session and permission checks fall back to a session:<id> subject.");
+    console.log("  3. Provide the OAuth2 client id for the per-session user login:");
+    console.log("       export ORY_OAUTH2_CLIENT_ID=<public OAuth2 client id>");
+    console.log("     The user login runs every session; without a client id Codex runs without a");
+    console.log("     human Ory identity attached and permission checks fall back to a session:<id> subject.");
     console.log("");
     console.log("  4. Start a Codex session. Codex treats freshly installed plugin");
     console.log("     hooks as untrusted, so it will prompt you to review and trust");

package/dist/handlers.js

@@ -59,11 +59,14 @@ async function handleSessionStart(input, client, deps) {
     client.tracer.record("session.start", "ok", {
         attributes: { model: input.model },
     });
+    // The user login flow runs on every session and never blocks. It refreshes
+    // persisted tokens / launches the PKCE login and populates the user
+    // principal; enforcement is governed solely by permissionMode at tool-call
+    // time.
     const userGate = deps.userLogin ?? argus_1.ensureUserAuthenticated;
-    const decision = await userGate(client, {
+    await userGate(client, {
         binName: "ory-codex",
         harness: "codex",
-        allowBlock: true,
     });
     // Resolve the agent identity (machine credentials). Never blocks;
     // attaches the agent's bearer token to outgoing Ory API calls.
@@ -75,83 +78,8 @@ async function handleSessionStart(input, client, deps) {
     // any failure is logged and swallowed (fail-open — delegation tracking is
     // for audit, not enforcement).
     await (0, argus_1.writeUserDelegatesAgent)(client);
-    if (!decision.proceed) {
-        return { decision: "block", reason: decision.reason };
-    }
-    if (decision.mode !== "disabled") {
-        return {};
-    }
-    const resolved = (0, argus_1.resolveConfig)();
-    if (resolved.auditOnly) {
-        client.logger.info("config.audit_only", {
-            message: "Audit-only mode enabled. Auth and permission checks are disabled.",
-        });
-        return {};
-    }
-    if (!resolved.projectUrl) {
-        client.logger.warn("config.not_configured", {
-            message: "Ory plugin is not configured. Auth and permission checks are disabled. " +
-                "Run 'npx ory-codex configure' to connect to an Ory project.",
-        });
-        return {};
-    }
-    // Try session token first, then OAuth2 token
-    const sessionToken = process.env.ORY_SESSION_TOKEN;
-    const oauth2Token = process.env.ORY_OAUTH2_TOKEN;
-    if (sessionToken) {
-        await verifySessionToken(sessionToken, client);
-        return {};
-    }
-    if (oauth2Token) {
-        await verifyOAuth2Token(oauth2Token, client);
-        return {};
-    }
-    client.logger.warn("session.no_credentials", {
-        message: "Neither ORY_SESSION_TOKEN nor ORY_OAUTH2_TOKEN is set. " +
-            "Skipping authentication.",
-    });
     return {};
 }
-async function verifySessionToken(token, client) {
-    try {
-        const session = await client.verifySession(token);
-        if (!session.active) {
-            client.logger.warn("session.inactive", {
-                message: "Ory session is not active. Re-authenticate to enable auth checks.",
-            });
-        }
-    }
-    catch (err) {
-        const oryErr = err;
-        client.logger.warn("session.verify_failed", {
-            code: oryErr.code,
-            message: oryErr.message,
-        });
-    }
-}
-async function verifyOAuth2Token(token, client) {
-    try {
-        const tokenInfo = await client.introspectToken(token);
-        if (!tokenInfo.active) {
-            client.logger.warn("oauth2.token_inactive", {
-                message: "Ory OAuth2 token is not active. Obtain a new token to enable auth checks.",
-            });
-            return;
-        }
-        client.logger.info("oauth2.session_authenticated", {
-            clientId: tokenInfo.clientId,
-            subject: tokenInfo.subject,
-            scope: tokenInfo.scope,
-        });
-    }
-    catch (err) {
-        const oryErr = err;
-        client.logger.warn("oauth2.introspect_failed", {
-            code: oryErr.code,
-            message: oryErr.message,
-        });
-    }
-}
 // ─── PreToolUse ─────────────────────────────────────────────────────
 async function handlePreToolUse(input, client) {
     // No default. Codex always sets `tool_name` to the canonical value

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ory/codex",
-  "version": "0.13.9",
+  "version": "0.14.0",
   "description": "Ory plugin for Codex: scaffolding skills, a local Ory instance, and authentication, authorization, and audit for every tool call",
   "license": "Apache-2.0",
   "homepage": "https://ory.com",
@@ -67,7 +67,7 @@
   ],
   "dependencies": {
     "reo-census": "^1.2.8",
-    "@ory/argus": "0.13.9"
+    "@ory/argus": "0.14.0"
   },
   "engines": {
     "node": ">=22"