@ory/codex 1.5.3 → 1.6.0

package/README.md

@@ -119,7 +119,7 @@ npx -y -p @ory/codex ory-codex configure \
 
 **Ory Network or OEL.** Either works. For an Ory Network project the URL is `https://<slug>.projects.oryapis.com`; for a self-hosted **Ory Enterprise License** deployment, point `--project-url` at that deployment's base URL and use the sign-in client id from its Agent Security configuration. Everything downstream — sign-in, checks, delegation — is identical.
 
-**There is nothing else for you to create.** The sign-in client, permission model, native-tool blocks, MCP grants, and observe/enforce posture are provisioned in the Console by someone with project access. At session start the plugin loads or enrolls Codex's Talos runtime credential in the OS credential store; tool paths only read it. Installing needs no workspace privilege.
+**There is nothing else for you to create.** The sign-in client, permission model, native-tool blocks, MCP server access, and observe/enforce posture are provisioned in the Console by someone with project access. At session start the plugin loads or enrolls Codex's Talos runtime credential in the OS credential store; tool paths only read it. Installing needs no workspace privilege.
 
 Sign-in runs at the start of every session and never blocks — a declined, skipped, or timed-out login simply leaves that session without a user identity.
 

package/dist/handlers.js

@@ -81,7 +81,7 @@ async function handlePreToolUse(input, client) {
         toolName,
         toolArgs: input.tool_input,
         subjectFallback: `session:${input.session_id}`,
-        mcpTool: (0, argus_1.parseMcpToolGeneric)(toolName) ?? undefined,
+        mcpTool: (0, argus_1.parseMcpToolName)(toolName) ?? undefined,
     });
     return result.blocked
         ? { decision: "block", reason: result.denialMessage }
@@ -185,7 +185,7 @@ async function handlePermissionRequest(input, client) {
         toolName,
         turnId: input.turn_id,
     });
-    const mcpTool = (0, argus_1.parseMcpToolGeneric)(toolName);
+    const mcpTool = (0, argus_1.parseMcpToolName)(toolName);
     const result = await (0, argus_1.decideTool)(client, {
         harness: HARNESS,
         toolName,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ory/codex",
-  "version": "1.5.3",
+  "version": "1.6.0",
   "description": "Ory plugin for Codex: scaffolding skills, a local Ory instance, and authentication, authorization, and audit for every tool call",
   "license": "Apache-2.0",
   "homepage": "https://ory.com",
@@ -69,7 +69,7 @@
   ],
   "dependencies": {
     "reova": "^0.7.0",
-    "@ory/argus": "1.5.3"
+    "@ory/argus": "1.6.0"
   },
   "engines": {
     "node": ">=22"