@ory/continue 0.10.0

package/README.md

@@ -0,0 +1,120 @@
+# Ory Agent Plugin: Continue CLI
+
+[Ory](https://ory.com) bundled into [Continue](https://continue.dev)'s `cn` CLI: skills and slash commands that scaffold Ory authentication into your codebase, a local Ory stack you can spin up in one command, and (when pointed at an Ory project) authentication, authorization, and audit for every tool Continue runs.
+
+You don't need an Ory account or any prior Ory experience to start.
+
+This integration targets the **`cn` CLI** (not the Continue IDE extension) and is verified against `@continuedev/cli`.
+
+## New to Ory?
+
+[Ory](https://www.ory.com/docs/) is an open-source identity and access platform — login, registration, sessions, social sign-in, multi-factor auth, and fine-grained permissions, so you don't have to build any of that yourself. Two things make it easy to try with no prior experience:
+
+- **Ory Elements** are prebuilt, themeable UI components for the auth pages. The scaffolding skills wire them into your app for you.
+- **The local Ory stack** is a complete Ory running on your laptop in Docker — no account, no signup, no API key.
+
+## What this plugin does
+
+Two independent things, and you can use either on its own:
+
+1. **Build auth into your app.** Have Continue scaffold Ory login, registration, social sign-in, and permissions into the project you're working on, backed by the local stack. This needs nothing but Docker.
+2. **Govern the agent itself.** Authenticate Continue's own session and authorize every tool it runs against Ory Permissions, with a full audit trail. See [Agent security](#agent-security).
+
+## Prerequisites
+
+- [Continue](https://continue.dev) `cn` CLI installed
+- Node.js **≥ 22**
+- [Docker](https://docs.docker.com/get-docker/) (only needed for the local Ory stack)
+- macOS or Linux. Windows works via WSL2.
+
+## Install
+
+```bash
+npx -y -p @ory/continue ory-continue install
+```
+
+Continue has no native extension-install command, so `install` writes the Ory hooks directly into `<project>/.continue/settings.json` and materializes the Ory skills under `<project>/.continue/skills/`. Continue surfaces each skill as a slash command automatically, so the local-stack commands (`/local-up`, `/local-down`, `/temporal-up`) ship as skills too. Confirm everything landed:
+
+```bash
+npx -y -p @ory/continue ory-continue status
+```
+
+`status` prints configuration, user and agent identity, per-tool permission coverage, hook/skill registration, and a tail of recent debug logs. Unconfigured fields show inline as `(unset)`.
+
+Uninstall removes only the Ory hooks and skills, leaving the rest of your settings intact:
+
+```bash
+npx -y -p @ory/continue ory-continue uninstall
+```
+
+## Quickstart (≈ 3 minutes)
+
+From any project where you'd like Ory authentication, inside Continue:
+
+1. **Start a local Ory instance.** Ask Continue *"start the local Ory stack"* or run `/local-up`. A banner prints the seeded test user's email and password — note them.
+2. **Scaffold Ory into your project.** Ask Continue *"add Ory auth to this app"* (the `ory-auth-setup` skill). It installs Ory Elements, wires the SDK, and generates the login / registration / recovery / settings pages, all targeting the local stack.
+3. **Sign in.** Start your app, visit the login page, and sign in with the seeded credentials. You now have a real Ory session backed by a real Ory stack — locally, offline, zero configuration.
+
+That's the full Ory DX path. Continue to [Agent security](#agent-security) when you're ready to enforce.
+
+## How the integration works
+
+Continue runs the Ory plugin as a **subprocess hook**, the same way [Claude Code](https://github.com/anthropics/claude-code) does — and Continue reads hooks from both `.continue/settings.json` and `.claude/settings.json`. Each lifecycle event launches the hook binary with the event payload as JSON on stdin; the hook replies on stdout and signals a hard block with **exit code 2**.
+
+The hooks wire into these phases:
+
+- **SessionStart** — run the user and agent auth gates.
+- **PreToolUse / PermissionRequest** — check the tool against Ory Permissions; deny blocks the call (exit code 2) in enforce mode.
+- **SubagentStart / SubagentStop** — resolve a distinct identity for typed sub-agents and record their lifecycle.
+- **PostToolUse / Stop / SessionEnd** — trace-only audit spans.
+
+The plugin is **fail-open** on its own infrastructure failures (network errors, rate limits, missing config): the agent always starts, and enforcement is only as strong as your permission grants.
+
+## Agent security
+
+Once pointed at an Ory project (local or hosted), Continue's session and every tool call can be governed by Ory.
+
+- **Authentication.** The human at the keyboard (the **user**) authenticates interactively via Ory Identities when user login is on (`ORY_USER_LOGIN=true`, off by default — browser PKCE flow on first session, persisted token thereafter). The Continue process (the **agent**) gets its own OAuth2 identity, self-registered via [Dynamic Client Registration (RFC 7591)](https://datatracker.ietf.org/doc/html/rfc7591) on first run.
+- **Authorization.** Before any tool runs, the plugin checks [Ory Permissions](https://www.ory.com/docs/keto) (Zanzibar-style relations) against the user's subject and blocks on `deny`.
+- **Audit.** Every decision is recorded as a structured trace span (NDJSON file and/or OTLP export).
+
+### Permission modes: observe → enforce
+
+After install the plugin runs in **observe mode**: every tool call is checked, but a deny is recorded as a `permission.observe_deny` audit span and the tool runs anyway. This lets you see what *would* be blocked first.
+
+```bash
+# Grant the current user `use` on every built-in tool (idempotent):
+npx -y -p @ory/continue ory-continue permissions bootstrap
+
+# See allowed/denied per tool:
+npx -y -p @ory/continue ory-continue permissions status
+
+# Turn on hard blocking once the observe-mode logs look right:
+npx -y -p @ory/continue ory-continue permissions enforce
+```
+
+Switch back any time with `permissions observe`. To disable Ory entirely (audit logging only, no auth or checks), run `ory-continue configure --audit-only`.
+
+## Pointing at a real Ory project
+
+The Quickstart uses the local stack. To point at a hosted [Ory Network](https://console.ory.sh) project:
+
+```bash
+npx -y -p @ory/continue ory-continue configure \
+  --project-url https://<id>.projects.oryapis.com \
+  --oauth2-client-id <public OAuth2 client id>
+```
+
+`--oauth2-client-id` is required whenever `--project-url` is set — the user PKCE flow needs a public OAuth2 client registered with the four loopback redirect URIs (`http://127.0.0.1:47823..47826/callback`). See the [repo README](../../README.md) and [`AGENTS.md`](../../AGENTS.md) for the full environment-variable reference (`ORY_PROJECT_URL`, `ORY_USER_LOGIN`, `ORY_OAUTH2_CLIENT_ID`, agent-identity vars) and permission-mode semantics. Config is shared across every Ory agent plugin at `~/.config/ory-agent-plugins/config.json`.
+
+Without configuration the plugin still loads cleanly and runs in **pass-through mode**: skills and their slash commands work, but nothing is blocked.
+
+## Links
+
+- [Ory documentation](https://www.ory.com/docs/)
+- [Continue documentation](https://docs.continue.dev/)
+- [Repo README](../../README.md) and [AGENTS.md](../../AGENTS.md) — full env-var and permission-mode reference
+
+## License
+
+Apache-2.0

package/dist/cli/assets.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Materialize / clean the Ory skill catalog for the Continue CLI plugin.
+ *
+ * Continue (`cn`) surfaces slash commands exclusively from skills: every
+ * `skills/<name>/SKILL.md` it discovers automatically becomes a slash command.
+ * It does NOT read a `.continue/commands/` directory. So both the guide skills
+ * and the local-stack commands (local-up / local-down / temporal-up) are
+ * written as skills under `<root>/skills/<name>/SKILL.md` — the commands are
+ * wrapped with `commandToSkill` so they show up as `/local-up` etc.
+ *
+ * All content is rendered from the canonical `@ory/argus` templates — never
+ * re-defined inline — so the guidance stays in sync across every harness.
+ *
+ * Verified against @continuedev/cli.
+ */
+/**
+ * Write all Ory skills (guides + local-stack commands rendered as skills)
+ * under `<root>/skills/<name>/SKILL.md`. For the manual-setup path that's
+ * `<projectDir>/.continue`.
+ */
+export declare function installContinueOryAssets(root: string): void;
+/** Remove every skill this plugin installed under `root`. */
+export declare function uninstallContinueOryAssets(root: string): void;

package/dist/cli/assets.js

@@ -0,0 +1,92 @@
+"use strict";
+/**
+ * Materialize / clean the Ory skill catalog for the Continue CLI plugin.
+ *
+ * Continue (`cn`) surfaces slash commands exclusively from skills: every
+ * `skills/<name>/SKILL.md` it discovers automatically becomes a slash command.
+ * It does NOT read a `.continue/commands/` directory. So both the guide skills
+ * and the local-stack commands (local-up / local-down / temporal-up) are
+ * written as skills under `<root>/skills/<name>/SKILL.md` — the commands are
+ * wrapped with `commandToSkill` so they show up as `/local-up` etc.
+ *
+ * All content is rendered from the canonical `@ory/argus` templates — never
+ * re-defined inline — so the guidance stays in sync across every harness.
+ *
+ * Verified against @continuedev/cli.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.installContinueOryAssets = installContinueOryAssets;
+exports.uninstallContinueOryAssets = uninstallContinueOryAssets;
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+const argus_1 = require("@ory/argus");
+const HARNESS = "continue";
+const PACKAGE_NAME = "@ory/continue";
+const RENDER_OPTS = {
+    binName: "ory-continue",
+    packageName: PACKAGE_NAME,
+};
+function safeRmEmpty(dir) {
+    try {
+        if (fs.existsSync(dir) && fs.readdirSync(dir).length === 0) {
+            fs.rmdirSync(dir);
+        }
+    }
+    catch {
+        /* ignore — leave the dir if removal fails. */
+    }
+}
+/**
+ * Write all Ory skills (guides + local-stack commands rendered as skills)
+ * under `<root>/skills/<name>/SKILL.md`. For the manual-setup path that's
+ * `<projectDir>/.continue`.
+ */
+function installContinueOryAssets(root) {
+    fs.mkdirSync(root, { recursive: true });
+    const skillsDir = path.join(root, "skills");
+    fs.rmSync(skillsDir, { recursive: true, force: true });
+    const guideSkills = (0, argus_1.renderOrySkills)(HARNESS, RENDER_OPTS);
+    const commandSkills = (0, argus_1.renderOryCommands)(HARNESS, RENDER_OPTS).map(argus_1.commandToSkill);
+    (0, argus_1.writeSkillTree)(skillsDir, [...guideSkills, ...commandSkills]);
+}
+/** Remove every skill this plugin installed under `root`. */
+function uninstallContinueOryAssets(root) {
+    const skillsDir = path.join(root, "skills");
+    if (fs.existsSync(skillsDir)) {
+        (0, argus_1.removeSkillDirs)(skillsDir, [...argus_1.ORY_SKILL_NAMES, ...argus_1.ORY_COMMAND_SKILL_NAMES]);
+        safeRmEmpty(skillsDir);
+    }
+}

package/dist/cli/main.d.ts

@@ -0,0 +1,16 @@
+#!/usr/bin/env node
+/**
+ * Main CLI for @ory/continue.
+ *
+ * Usage:
+ *   npx ory-continue install                Write hooks to settings.json + assets
+ *   npx ory-continue uninstall              Remove hooks and assets
+ *   npx ory-continue configure              Set or view Ory credentials
+ *   npx ory-continue setup [--project-dir]  Write hooks to settings.json directly
+ *   npx ory-continue status                 Show plugin status
+ *   npx ory-continue local <cmd>            Manage local Ory dev environment
+ *
+ * Continue (the `cn` CLI) has no extension-install command, so `install` is a
+ * thin wrapper over the same settings.json setup path the README documents.
+ */
+export {};

package/dist/cli/main.js

@@ -0,0 +1,182 @@
+#!/usr/bin/env node
+"use strict";
+/**
+ * Main CLI for @ory/continue.
+ *
+ * Usage:
+ *   npx ory-continue install                Write hooks to settings.json + assets
+ *   npx ory-continue uninstall              Remove hooks and assets
+ *   npx ory-continue configure              Set or view Ory credentials
+ *   npx ory-continue setup [--project-dir]  Write hooks to settings.json directly
+ *   npx ory-continue status                 Show plugin status
+ *   npx ory-continue local <cmd>            Manage local Ory dev environment
+ *
+ * Continue (the `cn` CLI) has no extension-install command, so `install` is a
+ * thin wrapper over the same settings.json setup path the README documents.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const path = __importStar(require("node:path"));
+const fs = __importStar(require("node:fs"));
+const argus_1 = require("@ory/argus");
+const PACKAGE_ROOT = path.resolve(__dirname, "..", "..");
+function main() {
+    const [command, ...args] = process.argv.slice(2);
+    switch (command) {
+        case "install":
+            install(args);
+            postInstallPermissions("ory-continue", "continue").then(() => process.exit(0), (err) => {
+                console.error(err.message ?? err);
+                process.exit(1);
+            });
+            break;
+        case "uninstall":
+            uninstall(args);
+            break;
+        case "configure":
+            (0, argus_1.runConfigureCommand)("ory-continue", args);
+            break;
+        case "agent":
+            (0, argus_1.runAgentCommand)("ory-continue", args).then((code) => process.exit(code), (err) => {
+                console.error(err.message ?? err);
+                process.exit(1);
+            });
+            break;
+        case "permissions":
+            (0, argus_1.runPermissionsCommand)("ory-continue", "continue", args).then((code) => process.exit(code), (err) => {
+                console.error(err.message ?? err);
+                process.exit(1);
+            });
+            break;
+        case "setup":
+            require("./setup.js");
+            break;
+        case "status":
+            status().then(() => process.exit(0), (err) => {
+                console.error(err.message ?? err);
+                process.exit(1);
+            });
+            break;
+        case "local":
+            (0, argus_1.runLocalCommand)("ory-continue", args).catch((err) => {
+                console.error(err.message ?? err);
+                process.exit(1);
+            });
+            break;
+        case "help":
+        case "--help":
+        case "-h":
+        case undefined:
+            help();
+            break;
+        default:
+            console.error(`Unknown command: ${command}`);
+            help();
+            process.exit(1);
+    }
+}
+/**
+ * Install = write the Ory hooks into the harness's settings.json and
+ * materialize the Ory skills. Continue has no native install command, so this
+ * delegates to the setup.ts code path.
+ */
+function install(args) {
+    console.log("Installing Ory hooks and skills for Continue...");
+    process.argv = ["node", "setup.js", ...args];
+    require("./setup.js");
+    printQuickstart();
+    (0, argus_1.printEnvHelp)("ory-continue");
+}
+function uninstall(args) {
+    const setupArgs = ["--uninstall", ...args];
+    process.argv = ["node", "setup.js", ...setupArgs];
+    require("./setup.js");
+}
+async function postInstallPermissions(binName, harness) {
+    const bootstrapped = await (0, argus_1.maybeAutoBootstrap)(binName, harness);
+    (0, argus_1.printPermissionsOnboardingHelp)(binName, harness, {
+        bootstrappedAutomatically: bootstrapped,
+    });
+}
+/**
+ * Print a three-line quickstart so a fresh user sees the happy path
+ * before the more detailed credentials and permissions banners scroll by.
+ */
+function printQuickstart() {
+    console.log("");
+    console.log("Quickstart:");
+    console.log("  1. Inside Continue, run /local-up to start a local Ory stack.");
+    console.log("  2. Ask Continue \"add Ory auth to this app\" to scaffold login/signup.");
+    console.log("  3. Set ORY_USER_LOGIN=true to enable the interactive PKCE browser login.");
+}
+async function status() {
+    await (0, argus_1.runStatusCommand)("ory-continue", "continue", {
+        title: "Continue CLI",
+        printPluginSection: () => {
+            console.log("Hooks & plugin:");
+            console.log(`  Hook script: ${fs.existsSync(path.join(PACKAGE_ROOT, "dist", "hook.js")) ? "built" : "NOT BUILT (run pnpm build)"}`);
+            console.log(`  Settings:    .continue/settings.json (per project)`);
+        },
+    });
+}
+function help() {
+    console.log(`
+ory-continue — Ory plugin for Continue CLI (cn)
+
+Usage:
+  npx ory-continue <command> [options]
+
+Commands:
+  install                Write Ory hooks and skills into .continue/
+  uninstall              Remove the Ory hooks and skills
+  configure              Set or view Ory project URL and API key
+  agent <cmd>            Manage the agent's OAuth2 (DCR) identity (status, unregister)
+  permissions <cmd>      Manage permission mode and tool permissions (status, bootstrap, observe, enforce)
+  setup [--project-dir]  Write hooks directly to .continue/settings.json
+  status                 Show plugin status and configuration
+  local <cmd>            Manage local Ory dev environment (up, down, status, seed, ...)
+
+After installing, the plugin hooks into these Continue CLI lifecycle events:
+  SessionStart           Verify the user and agent identities via Ory
+  PreToolUse             Check tool permissions via Ory Permissions
+  PostToolUse            Audit log tool executions
+
+Examples:
+  npx ory-continue install          # Install hooks + assets
+  npx ory-continue status           # Check configuration
+  npx ory-continue uninstall        # Remove hooks + assets
+`);
+}
+main();

package/dist/cli/setup.d.ts

@@ -0,0 +1,18 @@
+#!/usr/bin/env node
+/**
+ * Setup CLI for the Ory Continue CLI plugin.
+ *
+ * Continue has no extension-install command, so the Ory hooks are written
+ * directly into the harness's settings.json.
+ *
+ * Usage:
+ *   npx ory-continue-setup                    # Auto-detect and configure
+ *   npx ory-continue-setup --project-dir /path/to/repo
+ *   npx ory-continue-setup --print            # Print config to stdout without writing
+ *   npx ory-continue-setup --uninstall        # Remove Ory hooks from settings
+ *
+ * Verified against @continuedev/cli: Continue reads a top-level `hooks` object
+ * from `.continue/settings.json` (also `.claude/settings.json` and home
+ * variants). We target `<projectDir>/.continue/settings.json`.
+ */
+export {};

package/dist/cli/setup.js

@@ -0,0 +1,114 @@
+#!/usr/bin/env node
+"use strict";
+/**
+ * Setup CLI for the Ory Continue CLI plugin.
+ *
+ * Continue has no extension-install command, so the Ory hooks are written
+ * directly into the harness's settings.json.
+ *
+ * Usage:
+ *   npx ory-continue-setup                    # Auto-detect and configure
+ *   npx ory-continue-setup --project-dir /path/to/repo
+ *   npx ory-continue-setup --print            # Print config to stdout without writing
+ *   npx ory-continue-setup --uninstall        # Remove Ory hooks from settings
+ *
+ * Verified against @continuedev/cli: Continue reads a top-level `hooks` object
+ * from `.continue/settings.json` (also `.claude/settings.json` and home
+ * variants). We target `<projectDir>/.continue/settings.json`.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+const argus_1 = require("@ory/argus");
+const assets_js_1 = require("./assets.js");
+const BIN_NAME = "ory-continue-hook";
+const PACKAGE_NAME = "@ory/continue";
+function getSettingsPath(args) {
+    return path.join(args.projectDir, ".continue", "settings.json");
+}
+function generateHooksConfig() {
+    const cmd = (0, argus_1.resolveHookCommand)(PACKAGE_NAME, BIN_NAME);
+    return {
+        SessionStart: (0, argus_1.matcherHookEntry)(cmd),
+        PreToolUse: (0, argus_1.matcherHookEntry)(cmd),
+        PostToolUse: (0, argus_1.matcherHookEntry)(cmd),
+        PostToolUseFailure: (0, argus_1.matcherHookEntry)(cmd),
+        PermissionRequest: (0, argus_1.matcherHookEntry)(cmd),
+        UserPromptSubmit: (0, argus_1.matcherHookEntry)(cmd),
+        SubagentStart: (0, argus_1.matcherHookEntry)(cmd),
+        SubagentStop: (0, argus_1.matcherHookEntry)(cmd),
+        Stop: (0, argus_1.matcherHookEntry)(cmd),
+        SessionEnd: (0, argus_1.matcherHookEntry)(cmd),
+        PreCompact: (0, argus_1.matcherHookEntry)(cmd),
+    };
+}
+function main() {
+    if (process.argv.includes("--help") || process.argv.includes("-h")) {
+        (0, argus_1.printSetupHelp)("ory-continue-setup", "Continue CLI");
+        process.exit(0);
+    }
+    const args = (0, argus_1.parseSetupArgs)();
+    const hooksConfig = generateHooksConfig();
+    if (args.print) {
+        console.log(JSON.stringify({ hooks: hooksConfig }, null, 2));
+        return;
+    }
+    const settingsPath = getSettingsPath(args);
+    const existing = (0, argus_1.readJsonFile)(settingsPath);
+    const continueDir = path.join(args.projectDir, ".continue");
+    if (args.uninstall) {
+        if (!fs.existsSync(settingsPath)) {
+            console.log("No settings file found. Nothing to uninstall.");
+            (0, assets_js_1.uninstallContinueOryAssets)(continueDir);
+            return;
+        }
+        let updated = (0, argus_1.removeMatcherHooks)(existing, BIN_NAME);
+        updated = (0, argus_1.removeMcpServer)(updated);
+        (0, argus_1.writeJsonFile)(settingsPath, updated);
+        (0, assets_js_1.uninstallContinueOryAssets)(continueDir);
+        console.log(`Removed Ory hooks and MCP server from ${settingsPath}`);
+        console.log(`Removed Ory skills from ${continueDir}`);
+        return;
+    }
+    let merged = (0, argus_1.mergeMatcherHooks)(existing, hooksConfig, BIN_NAME);
+    merged = (0, argus_1.mergeMcpServer)(merged);
+    (0, argus_1.writeJsonFile)(settingsPath, merged);
+    (0, assets_js_1.installContinueOryAssets)(continueDir);
+    console.log(`Ory hooks and MCP server installed to ${settingsPath}`);
+    console.log(`Ory skills installed to ${continueDir}`);
+    (0, argus_1.printNextSteps)("Continue CLI", "npx ory-continue-setup --uninstall");
+}
+main();

package/dist/handlers.d.ts

@@ -0,0 +1,17 @@
+import { OryAgentClient, ensureUserAuthenticated, ensureAgentIdentity, ensureSubAgentIdentity } from "@ory/argus";
+import type { ContinueHookInput, ContinueHookOutput } from "./types.js";
+export interface HandleHookEventDeps {
+    /** Test injection point for the user login flow. */
+    userLogin?: typeof ensureUserAuthenticated;
+    /** Test injection point for the agent identity gate. */
+    agentGate?: typeof ensureAgentIdentity;
+    /** Test injection point for the sub-agent identity resolver. */
+    subAgentGate?: typeof ensureSubAgentIdentity;
+}
+/**
+ * Route a Continue CLI hook event to the appropriate Ory integration.
+ *
+ * Event names are verified against @continuedev/cli. Unknown events pass
+ * through.
+ */
+export declare function handleHookEvent(input: ContinueHookInput, client: OryAgentClient, deps?: HandleHookEventDeps): Promise<ContinueHookOutput>;