@ory/codex 0.2.1 → 0.3.0

package/dist/handlers.js

@@ -190,23 +190,27 @@ async function handlePreToolUse(input, client) {
                 object: mcpTool.serverName,
                 relation: "use",
                 subjectId,
+                ...("subjectSet" in subject ? { subjectSet: subject.subjectSet } : {}),
                 spanAttributes: mcpAttrs,
             });
+            const decisionAttrs = decision.spanAttributes;
             if (decision.kind === "allow") {
-                client.tracer.record("tool.invoke", "ok", { attributes: mcpAttrs });
+                client.tracer.record("tool.invoke", "ok", {
+                    attributes: { ...mcpAttrs, ...decisionAttrs },
+                });
                 return {};
             }
             if (decision.kind === "observe") {
                 client.tracer.record("tool.block", "denied", {
-                    attributes: { ...mcpAttrs, allowed: false, ...(0, argus_1.alertAttributes)(false) },
+                    attributes: { ...mcpAttrs, ...decisionAttrs, allowed: false, ...(0, argus_1.alertAttributes)(false) },
                 });
                 client.tracer.record("tool.invoke", "ok", {
-                    attributes: { ...mcpAttrs, allowed: false, observed: true },
+                    attributes: { ...mcpAttrs, ...decisionAttrs, allowed: false, observed: true },
                 });
                 return {};
             }
             client.tracer.record("tool.block", "denied", {
-                attributes: { ...mcpAttrs, allowed: false, ...(0, argus_1.alertAttributes)(true) },
+                attributes: { ...mcpAttrs, ...decisionAttrs, allowed: false, ...(0, argus_1.alertAttributes)(true) },
             });
             return {
                 decision: "block",
@@ -219,21 +223,24 @@ async function handlePreToolUse(input, client) {
             return handlePermissionError(decision.error, toolName, client);
         }
         const attrs = { toolName, ...inputSummary };
+        const decisionAttrs = decision.spanAttributes;
         if (decision.kind === "allow") {
-            client.tracer.record("tool.invoke", "ok", { attributes: { ...attrs, allowed: true } });
+            client.tracer.record("tool.invoke", "ok", {
+                attributes: { ...attrs, ...decisionAttrs, allowed: true },
+            });
             return {};
         }
         if (decision.kind === "observe") {
             client.tracer.record("tool.block", "denied", {
-                attributes: { ...attrs, allowed: false, ...(0, argus_1.alertAttributes)(false) },
+                attributes: { ...attrs, ...decisionAttrs, allowed: false, ...(0, argus_1.alertAttributes)(false) },
             });
             client.tracer.record("tool.invoke", "ok", {
-                attributes: { ...attrs, allowed: false, observed: true },
+                attributes: { ...attrs, ...decisionAttrs, allowed: false, observed: true },
             });
             return {};
         }
         client.tracer.record("tool.block", "denied", {
-            attributes: { ...attrs, allowed: false, ...(0, argus_1.alertAttributes)(true) },
+            attributes: { ...attrs, ...decisionAttrs, allowed: false, ...(0, argus_1.alertAttributes)(true) },
         });
         return {
             decision: "block",
@@ -300,6 +307,7 @@ async function handlePermissionRequest(input, client) {
                 object: mcpTool.serverName,
                 relation: "use",
                 subjectId,
+                ...("subjectSet" in subject ? { subjectSet: subject.subjectSet } : {}),
                 spanAttributes: { toolName, mcpServer: mcpTool.serverName, mcpTool: mcpTool.toolName },
             });
             if (decision.kind === "deny") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ory/codex",
-  "version": "0.2.1",
+  "version": "0.3.0",
   "description": "Ory plugin for Codex: scaffolding skills, a local Ory instance, and authentication, authorization, and audit for every tool call",
   "license": "Apache-2.0",
   "homepage": "https://ory.com",
@@ -67,7 +67,7 @@
     ".codex-plugin"
   ],
   "dependencies": {
-    "@ory/argus": "0.2.1"
+    "@ory/argus": "0.3.0"
   },
   "engines": {
     "node": ">=24"